marifold 0.60.0

package/dist/auth/XaiAuth.js

@@ -0,0 +1,280 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authorizeXaiWithBrowser = authorizeXaiWithBrowser;
+exports.extractPastedCode = extractPastedCode;
+exports.buildXaiAuthorizeUrl = buildXaiAuthorizeUrl;
+const crypto_1 = require("crypto");
+const http_1 = require("http");
+const child_process_1 = require("child_process");
+const core_1 = require("@marifold/core");
+// xAI Grok SuperGrok / X Premium+ OAuth. api.x.ai is a plain OpenAI-compatible
+// surface, so the access token is used as a normal Bearer credential — there is
+// no account-id header (unlike the ChatGPT Codex backend). The client id is
+// xAI's public desktop OAuth client used by the Grok CLI; it is not a secret.
+const XAI_AUTH_ISSUER = 'https://auth.x.ai';
+const XAI_OAUTH_AUTHORIZE_URL = `${XAI_AUTH_ISSUER}/oauth2/authorize`;
+const XAI_OAUTH_TOKEN_URL = `${XAI_AUTH_ISSUER}/oauth2/token`;
+const XAI_OAUTH_CLIENT_ID = 'b1a00492-073a-47ea-816f-4c329264a828';
+const XAI_OAUTH_SCOPE = 'openid profile email offline_access grok-cli:access api:access';
+const XAI_OAUTH_PORT = 56121;
+const XAI_CALLBACK_PATH = '/callback';
+async function authorizeXaiWithBrowser(write = text => process.stdout.write(text), readPastedCode, options = {}) {
+    const pkce = generatePkce();
+    const state = base64Url((0, crypto_1.randomBytes)(32));
+    const nonce = base64Url((0, crypto_1.randomBytes)(16));
+    const callback = await startCallbackServer(state);
+    const authUrl = buildXaiAuthorizeUrl(callback.redirectUri, pkce, state, nonce);
+    try {
+        openBrowser(authUrl);
+        write('Open this URL in your browser to sign in with your SuperGrok / X Premium+ account:\n');
+        write(`${authUrl}\n`);
+        // xAI often shows a "copy this code" page instead of redirecting back to the
+        // loopback listener, so offer a paste path and keep the redirect as a
+        // fallback (press Enter to wait). Whichever the user does, the code is
+        // exchanged against the same redirect_uri it was issued for.
+        let code;
+        if (readPastedCode) {
+            write("\nWhen approved, xAI shows a code to copy (or returns here automatically).\n");
+            const pasted = await readPastedCode('Paste the code from your browser, or press Enter to wait for the redirect: ');
+            const trimmed = (pasted ?? '').trim();
+            if (trimmed) {
+                code = extractPastedCode(trimmed, state);
+            }
+            else {
+                write('Waiting for the browser redirect...\n');
+                code = await callback.waitForCode();
+            }
+        }
+        else {
+            write('Waiting for the browser redirect...\n');
+            code = await callback.waitForCode();
+        }
+        write('Exchanging the authorization code for tokens with xAI...\n');
+        return await exchangeXaiCodeForTokens(code, callback.redirectUri, pkce, options.proxy);
+    }
+    finally {
+        await callback.close();
+    }
+}
+/**
+ * Extract the authorization code from whatever the user pastes: the full
+ * `http://127.0.0.1:56121/callback?code=…&state=…` redirect, a bare
+ * `code=…&state=…` querystring, or just the code shown on xAI's page.
+ */
+function extractPastedCode(input, expectedState) {
+    const value = input.trim();
+    let code;
+    let state;
+    try {
+        const url = new URL(value);
+        code = url.searchParams.get('code') ?? undefined;
+        state = url.searchParams.get('state') ?? undefined;
+    }
+    catch {
+        if (value.includes('code=')) {
+            const params = new URLSearchParams(value);
+            code = params.get('code') ?? undefined;
+            state = params.get('state') ?? undefined;
+        }
+        else {
+            code = value; // bare code — xAI's paste page shows no state
+        }
+    }
+    if (!code)
+        throw new Error('Could not find an authorization code in the pasted value.');
+    if (state && state !== expectedState)
+        throw new Error('OAuth state mismatch in the pasted redirect.');
+    return code;
+}
+function buildXaiAuthorizeUrl(redirectUri, pkce, state, nonce) {
+    const params = new URLSearchParams({
+        response_type: 'code',
+        client_id: XAI_OAUTH_CLIENT_ID,
+        redirect_uri: redirectUri,
+        scope: XAI_OAUTH_SCOPE,
+        code_challenge: pkce.codeChallenge,
+        code_challenge_method: 'S256',
+        state,
+        nonce,
+        plan: 'generic',
+        referrer: 'hermes-agent',
+    });
+    return `${XAI_OAUTH_AUTHORIZE_URL}?${params.toString()}`;
+}
+async function exchangeXaiCodeForTokens(code, redirectUri, pkce, proxy) {
+    const data = await postForm(XAI_OAUTH_TOKEN_URL, {
+        grant_type: 'authorization_code',
+        code,
+        redirect_uri: redirectUri,
+        client_id: XAI_OAUTH_CLIENT_ID,
+        code_verifier: pkce.codeVerifier,
+        code_challenge: pkce.codeChallenge,
+        code_challenge_method: 'S256',
+    }, 'xAI token exchange failed', proxy);
+    const accessToken = stringField(data.access_token);
+    const refreshToken = stringField(data.refresh_token);
+    if (!accessToken || !refreshToken) {
+        throw new Error('xAI token exchange response did not include access and refresh tokens.');
+    }
+    const expiresIn = numberField(data.expires_in);
+    return {
+        accessToken,
+        refreshToken,
+        expiresAt: expiresIn !== undefined ? Math.floor(Date.now() / 1000) + expiresIn : undefined,
+    };
+}
+async function postForm(url, data, label, proxy) {
+    // Node's fetch ignores HTTPS_PROXY by default; honor it for this external call
+    // (xAI's token endpoint) so the exchange works behind a proxy like the browser.
+    const init = {
+        method: 'POST',
+        headers: {
+            Accept: 'application/json',
+            'Content-Type': 'application/x-www-form-urlencoded',
+        },
+        body: new URLSearchParams(data),
+        // Generous ceiling: the OAuth token endpoint can be slow through a proxy.
+        signal: AbortSignal.timeout(60000),
+    };
+    const dispatcher = (0, core_1.proxyDispatcher)(proxy);
+    if (dispatcher)
+        init.dispatcher = dispatcher;
+    try {
+        const response = await (0, core_1.fetchWithTransientRetry)(url, init).catch(error => {
+            throw new Error(`${label}: ${stringifyError(error)}`);
+        });
+        if (!response.ok)
+            throw new Error(`${label}: HTTP ${response.status}: ${await response.text()}`);
+        return await response.json();
+    }
+    finally {
+        await dispatcher?.close();
+    }
+}
+async function startCallbackServer(expectedState) {
+    try {
+        return await listenOnPort(XAI_OAUTH_PORT, expectedState);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Could not start local OAuth callback server on port ${XAI_OAUTH_PORT}: ${message}`);
+    }
+}
+function listenOnPort(port, expectedState) {
+    return new Promise((resolve, reject) => {
+        let resolveCode;
+        let rejectCode;
+        const codePromise = new Promise((codeResolve, codeReject) => {
+            resolveCode = codeResolve;
+            rejectCode = codeReject;
+        });
+        const server = (0, http_1.createServer)((request, response) => {
+            const requestUrl = new URL(request.url ?? '/', `http://localhost:${port}`);
+            if (requestUrl.pathname !== XAI_CALLBACK_PATH) {
+                response.writeHead(404);
+                response.end('Not Found');
+                return;
+            }
+            const state = requestUrl.searchParams.get('state') ?? '';
+            if (state !== expectedState) {
+                respond(response, 'Sign-in failed: state mismatch.', 400);
+                rejectCode?.(new Error('OAuth callback state mismatch.'));
+                return;
+            }
+            const error = requestUrl.searchParams.get('error');
+            if (error) {
+                const description = requestUrl.searchParams.get('error_description') ?? error;
+                respond(response, `Sign-in failed: ${description}`, 400);
+                rejectCode?.(new Error(description));
+                return;
+            }
+            const code = requestUrl.searchParams.get('code');
+            if (!code) {
+                respond(response, 'Sign-in failed: missing authorization code.', 400);
+                rejectCode?.(new Error('OAuth callback did not include an authorization code.'));
+                return;
+            }
+            respond(response, 'Sign-in complete. You can close this window and return to Marifold.');
+            resolveCode?.(code);
+        });
+        server.once('error', error => reject(error));
+        server.listen(port, '127.0.0.1', () => {
+            resolve({
+                redirectUri: `http://127.0.0.1:${port}${XAI_CALLBACK_PATH}`,
+                waitForCode: () => withTimeout(codePromise, 300000, 'xAI sign-in timed out before the callback was received.'),
+                close: () => closeServer(server),
+            });
+        });
+    });
+}
+function respond(response, message, status = 200) {
+    const escaped = message.replace(/[&<>"']/g, char => ({
+        '&': '&amp;',
+        '<': '&lt;',
+        '>': '&gt;',
+        '"': '&quot;',
+        "'": '&#39;',
+    }[char] ?? char));
+    const body = `<!doctype html><html><head><title>marifold auth</title></head><body><p>${escaped}</p></body></html>`;
+    response.writeHead(status, {
+        'Content-Type': 'text/html; charset=utf-8',
+        'Content-Length': String(Buffer.byteLength(body)),
+    });
+    response.end(body);
+}
+function closeServer(server) {
+    return new Promise(resolve => {
+        server.close(() => resolve());
+        // The browser keeps the success-page connection alive, which blocks
+        // server.close() from ever completing; force lingering sockets closed so
+        // the sign-in returns promptly instead of hanging after the token exchange.
+        server.closeAllConnections();
+    });
+}
+function withTimeout(promise, ms, message) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new Error(message)), ms);
+        promise.then(value => {
+            clearTimeout(timer);
+            resolve(value);
+        }, error => {
+            clearTimeout(timer);
+            reject(error);
+        });
+    });
+}
+function generatePkce() {
+    const codeVerifier = base64Url((0, crypto_1.randomBytes)(32));
+    const codeChallenge = base64Url((0, crypto_1.createHash)('sha256').update(codeVerifier).digest());
+    return { codeVerifier, codeChallenge };
+}
+function base64Url(bytes) {
+    return bytes.toString('base64url');
+}
+function openBrowser(url) {
+    const command = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'cmd' : 'xdg-open';
+    const args = process.platform === 'win32' ? ['/c', 'start', '', url] : [url];
+    const child = (0, child_process_1.spawn)(command, args, { stdio: 'ignore', detached: true });
+    child.unref();
+}
+function stringField(value) {
+    return typeof value === 'string' ? value : undefined;
+}
+function numberField(value) {
+    return typeof value === 'number' && Number.isFinite(value) ? value : undefined;
+}
+function stringifyError(error) {
+    if (!(error instanceof Error))
+        return String(error);
+    // undici surfaces the real transport reason (ECONNREFUSED, ECONNRESET, TLS,
+    // proxy errors) on `.cause`, not the bare "fetch failed" message — include it
+    // so a failed sign-in is diagnosable (e.g. a missing HTTPS_PROXY in China).
+    const cause = error.cause;
+    const causeText = cause instanceof Error
+        ? ` (cause: ${cause.code ?? cause.message})`
+        : cause && typeof cause === 'object' && 'code' in cause
+            ? ` (cause: ${cause.code})`
+            : '';
+    return `${error.name}: ${error.message}${causeText}`;
+}
+//# sourceMappingURL=XaiAuth.js.map

package/dist/auth/XaiAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"XaiAuth.js","sourceRoot":"","sources":["../../src/auth/XaiAuth.ts"],"names":[],"mappings":";;;;;AAAA,mCAAiD;AACjD,+BAA4C;AAC5C,iDAAsC;AACtC,yCAA0E;AAmB1E,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAC5C,MAAM,uBAAuB,GAAG,GAAG,eAAe,mBAAmB,CAAC;AACtE,MAAM,mBAAmB,GAAG,GAAG,eAAe,eAAe,CAAC;AAC9D,MAAM,mBAAmB,GAAG,sCAAsC,CAAC;AACnE,MAAM,eAAe,GAAG,gEAAgE,CAAC;AACzF,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAM/B,KAAK,kCACV,KAAK,GAA2B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAClE,cAA+B,EAC/B,OAAO,GAAmB,EAAE;IAE5B,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAE/E,IAAI,CAAC;QACH,WAAW,CAAC,OAAO,CAAC,CAAC;QACrB,KAAK,CAAC,sFAAsF,CAAC,CAAC;QAC9F,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QAEtB,6EAA6E;QAC7E,sEAAsE;QACtE,uEAAuE;QACvE,6DAA6D;QAC7D,IAAI,IAAY,CAAC;QACjB,IAAI,cAAc,EAAE,CAAC;YACnB,KAAK,CAAC,8EAA8E,CAAC,CAAC;YACtF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,6EAA6E,CAAC,CAAC;YACnH,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC/C,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC/C,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC;QAED,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACpE,OAAO,MAAM,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,2BAAkC,KAAa,EAAE,aAAqB;IACpE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,IAAwB,CAAC;IAC7B,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;QACjD,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;YACvC,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,KAAK,CAAC,CAAC,8CAA8C;QAC9D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACxF,IAAI,KAAK,IAAI,KAAK,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8BAAqC,WAAmB,EAAE,IAAe,EAAE,KAAa,EAAE,KAAa;IACrG,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,aAAa,EAAE,MAAM;QACrB,SAAS,EAAE,mBAAmB;QAC9B,YAAY,EAAE,WAAW;QACzB,KAAK,EAAE,eAAe;QACtB,cAAc,EAAE,IAAI,CAAC,aAAa;QAClC,qBAAqB,EAAE,MAAM;QAC7B,KAAK;QACL,KAAK;QACL,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,cAAc;KACzB,CAAC,CAAC;IACH,OAAO,GAAG,uBAAuB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,IAAY,EACZ,WAAmB,EACnB,IAAe,EACf,KAAc;IAEd,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,mBAAmB,EAAE;QAC/C,UAAU,EAAE,oBAAoB;QAChC,IAAI;QACJ,YAAY,EAAE,WAAW;QACzB,SAAS,EAAE,mBAAmB;QAC9B,aAAa,EAAE,IAAI,CAAC,YAAY;QAChC,cAAc,EAAE,IAAI,CAAC,aAAa;QAClC,qBAAqB,EAAE,MAAM;KAC9B,EAAE,2BAA2B,EAAE,KAAK,CAAC,CAAC;IAEvC,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO;QACL,WAAW;QACX,YAAY;QACZ,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS;KAC3F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,GAAW,EACX,IAA4B,EAC5B,KAAa,EACb,KAAc;IAEd,+EAA+E;IAC/E,gFAAgF;IAChF,MAAM,IAAI,GAA4B;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC;QAC/B,0EAA0E;QAC1E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;KACnC,CAAC;IACF,MAAM,UAAU,GAAG,IAAA,sBAAe,EAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,UAAU;QAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAA,8BAAuB,EAAC,GAAG,EAAE,IAAmB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACrF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU,QAAQ,CAAC,MAAM,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjG,OAAO,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,MAAM,UAAU,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,aAAqB;IAKtD,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,uDAAuD,cAAc,KAAK,OAAO,EAAE,CAAC,CAAC;IACvG,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,aAAqB;IAKvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,WAAiD,CAAC;QACtD,IAAI,UAAgD,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE;YAClE,WAAW,GAAG,WAAW,CAAC;YAC1B,UAAU,GAAG,UAAU,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAC3E,IAAI,UAAU,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBAC9C,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACxB,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC1B,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;gBAC5B,OAAO,CAAC,QAAQ,EAAE,iCAAiC,EAAE,GAAG,CAAC,CAAC;gBAC1D,UAAU,EAAE,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,CAAC;gBAC9E,OAAO,CAAC,QAAQ,EAAE,mBAAmB,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;gBACzD,UAAU,EAAE,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,QAAQ,EAAE,6CAA6C,EAAE,GAAG,CAAC,CAAC;gBACtE,UAAU,EAAE,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC,CAAC;gBACjF,OAAO;YACT,CAAC;YAED,OAAO,CAAC,QAAQ,EAAE,qEAAqE,CAAC,CAAC;YACzF,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,OAAO,CAAC;gBACN,WAAW,EAAE,oBAAoB,IAAI,GAAG,iBAAiB,EAAE;gBAC3D,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,yDAAyD,CAAC;gBAC9G,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;aACjC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,QAAgH,EAAE,OAAe,EAAE,MAAM,GAAG,GAAG;IAC9J,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACnD,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,OAAO;KACb,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAClB,MAAM,IAAI,GAAG,0EAA0E,OAAO,oBAAoB,CAAC;IACnH,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,0BAA0B;QAC1C,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9B,oEAAoE;QACpE,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAI,OAAmB,EAAE,EAAU,EAAE,OAAe;IACtE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,EAAE;YACN,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,KAAK,CAAC,EAAE;YACN,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,YAAY,GAAG,SAAS,CAAC,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,SAAS,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IAC3G,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,KAAK,GAAI,KAA6B,CAAC,KAAK,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK;QACtC,CAAC,CAAC,YAAa,KAA2B,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,GAAG;QACnE,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK;YACrD,CAAC,CAAC,YAAa,KAA2B,CAAC,IAAI,GAAG;YAClD,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,GAAG,SAAS,EAAE,CAAC;AACvD,CAAC"}

package/dist/commands/RuntimeFactory.d.ts

@@ -0,0 +1,8 @@
+import { Command } from 'commander';
+import { LoadedMarifoldConfig, MarifoldRuntime } from '@marifold/core';
+export interface RootCommandOptions {
+    config?: string;
+}
+export declare function createRuntime(program: Command): MarifoldRuntime;
+export declare function loadConfig(program: Command): LoadedMarifoldConfig;
+//# sourceMappingURL=RuntimeFactory.d.ts.map

package/dist/commands/RuntimeFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RuntimeFactory.d.ts","sourceRoot":"","sources":["../../src/commands/RuntimeFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAgB,oBAAoB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAErF,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,eAAe,CAE/D;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,oBAAoB,CAGjE"}

package/dist/commands/RuntimeFactory.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRuntime = createRuntime;
+exports.loadConfig = loadConfig;
+const core_1 = require("@marifold/core");
+function createRuntime(program) {
+    return new core_1.MarifoldRuntime({ loadedConfig: loadConfig(program) });
+}
+function loadConfig(program) {
+    const rootOptions = program.opts();
+    return new core_1.ConfigLoader().load({ configPath: rootOptions.config });
+}
+//# sourceMappingURL=RuntimeFactory.js.map

package/dist/commands/RuntimeFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RuntimeFactory.js","sourceRoot":"","sources":["../../src/commands/RuntimeFactory.ts"],"names":[],"mappings":";;;;AACA,yCAAqF;AAMrF,uBAA8B,OAAgB;IAC5C,OAAO,IAAI,sBAAe,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,oBAA2B,OAAgB;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAsB,CAAC;IACvD,OAAO,IAAI,mBAAY,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;AACrE,CAAC"}

package/dist/commands/agent.d.ts

@@ -0,0 +1,4 @@
+import { Command } from 'commander';
+import { ConsolePrinter } from '../output/ConsolePrinter';
+export declare function registerAgentCommand(program: Command, printer: ConsolePrinter): void;
+//# sourceMappingURL=agent.d.ts.map

package/dist/commands/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/commands/agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAa1D,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAsDpF"}

package/dist/commands/agent.js

@@ -0,0 +1,130 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAgentCommand = registerAgentCommand;
+const InteractivePrompt_1 = require("../input/InteractivePrompt");
+const TerminalStyle_1 = require("../output/TerminalStyle");
+const RuntimeFactory_1 = require("./RuntimeFactory");
+function registerAgentCommand(program, printer) {
+    program
+        .command('agent')
+        .description('Run an approval-aware agent loop toward an objective, persisting task state.')
+        .argument('<objective...>', 'The objective for the agent run.')
+        .option('--profile <name>', 'Profile name.')
+        .option('--provider <name>', 'Provider key from config.toml.')
+        .option('--model <model>', 'Model name.')
+        .option('--max-iterations <count>', 'Maximum model turns for this run.', parsePositiveInteger)
+        .option('--tool-mode <mode>', 'Tool calling mode: auto, native, or control-block.', parseToolMode)
+        .option('--yes', 'Approve all tool calls without prompting (use with care).')
+        .action(async (objectiveParts, options) => {
+        const runtime = (0, RuntimeFactory_1.createRuntime)(program);
+        const style = new TerminalStyle_1.TerminalStyle(process.stdout.isTTY ?? false);
+        const prompt = new InteractivePrompt_1.InteractivePrompt();
+        const controller = new AbortController();
+        const onSigint = () => controller.abort();
+        process.on('SIGINT', onSigint);
+        try {
+            const runner = runtime.createAgentRunner(options.profile);
+            const approvalHandler = options.yes
+                // --yes may satisfy ordinary kind-level prompts, but it must never
+                // silently cross the non-persistable host/network boundary.
+                ? ((request) => request.persistable === false
+                    ? promptForApproval(prompt, style, request)
+                    : Promise.resolve({ approved: true }))
+                : ((request) => promptForApproval(prompt, style, request));
+            const events = runner.run({
+                objective: objectiveParts.join(' '),
+                profile: options.profile,
+                provider: options.provider,
+                model: options.model,
+                maxIterations: options.maxIterations,
+                toolMode: options.toolMode,
+                signal: controller.signal,
+                approvalHandler,
+            });
+            let failed = false;
+            for await (const event of events) {
+                renderAgentEvent(event, style);
+                if (event.type === 'done' && event.status !== 'completed')
+                    failed = true;
+            }
+            if (failed)
+                process.exitCode = 1;
+        }
+        catch (error) {
+            printer.printError(error);
+            process.exitCode = 1;
+        }
+        finally {
+            process.off('SIGINT', onSigint);
+            prompt.close();
+            runtime.close();
+        }
+    });
+}
+async function promptForApproval(prompt, style, request) {
+    const escalation = request.escalated && request.escalationReason
+        ? `\n${style.yellow(`! ${request.escalationReason}`)}`
+        : '';
+    process.stdout.write(`${style.yellow('approve?')} [${request.kind}] ${request.summary}${escalation}\n`);
+    const answer = await prompt.readUserMessage('  y/N > ');
+    const approved = answer !== undefined && ['y', 'yes'].includes(answer.trim().toLowerCase());
+    return approved ? { approved: true } : { approved: false, reason: 'declined at the prompt' };
+}
+function renderAgentEvent(event, style) {
+    switch (event.type) {
+        case 'status':
+            process.stdout.write(`${style.dim(`[task ${event.taskId}] ${event.status}`)}\n`);
+            break;
+        case 'plan':
+            process.stdout.write(`${style.bold('Plan:')}\n`);
+            for (const step of event.plan) {
+                process.stdout.write(`  ${style.dim(`${step.id}.`)} ${step.text}\n`);
+            }
+            break;
+        case 'step':
+            process.stdout.write(`${style.dim(`step ${event.stepId}: ${event.status}`)}\n`);
+            break;
+        case 'text':
+            process.stdout.write(`${event.phase === 'progress' ? style.dim(event.text) : event.text}\n`);
+            break;
+        case 'reasoning':
+            process.stdout.write(`${style.dim(`Reasoning: ${event.summary}`)}\n`);
+            break;
+        case 'tool_request':
+            process.stdout.write(`${style.dim(`tool> ${event.call.summary}`)}\n`);
+            break;
+        case 'approval_request':
+            // The interactive prompt itself is rendered by the approval handler.
+            break;
+        case 'approval_decision':
+            if (!event.approved) {
+                process.stdout.write(`${style.yellow(`denied (${event.source}${event.reason ? `: ${event.reason}` : ''})`)}\n`);
+            }
+            break;
+        case 'tool_result':
+            process.stdout.write(`${event.isError ? style.red(`tool! ${event.summary}`) : style.dim(`tool< ${event.summary}`)}\n`);
+            break;
+        case 'verification':
+            process.stdout.write(`${event.passed ? style.dim(`verified: ${event.notes}`) : style.yellow(`not verified: ${event.notes}`)}\n`);
+            break;
+        case 'error':
+            process.stdout.write(`${style.red(`error [${event.code}]: ${event.message}`)}\n`);
+            break;
+        case 'done':
+            process.stdout.write(`${style.bold(`done: ${event.status}`)}${event.summary ? `\n${event.summary}` : ''}\n`);
+            break;
+    }
+}
+function parsePositiveInteger(value) {
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isInteger(parsed) || parsed < 1) {
+        throw new Error('Expected --max-iterations to be a positive integer.');
+    }
+    return parsed;
+}
+function parseToolMode(value) {
+    if (value === 'auto' || value === 'native' || value === 'control-block')
+        return value;
+    throw new Error('Expected --tool-mode to be auto, native, or control-block.');
+}
+//# sourceMappingURL=agent.js.map

package/dist/commands/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/commands/agent.ts"],"names":[],"mappings":";;;AAEA,kEAA+D;AAE/D,2DAAwD;AACxD,qDAAiD;AAWjD,8BAAqC,OAAgB,EAAE,OAAuB;IAC5E,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,8EAA8E,CAAC;SAC3F,QAAQ,CAAC,gBAAgB,EAAE,kCAAkC,CAAC;SAC9D,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC;SAC3C,MAAM,CAAC,mBAAmB,EAAE,gCAAgC,CAAC;SAC7D,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;SACxC,MAAM,CAAC,0BAA0B,EAAE,mCAAmC,EAAE,oBAAoB,CAAC;SAC7F,MAAM,CAAC,oBAAoB,EAAE,oDAAoD,EAAE,aAAa,CAAC;SACjG,MAAM,CAAC,OAAO,EAAE,2DAA2D,CAAC;SAC5E,MAAM,CAAC,KAAK,EAAE,cAAwB,EAAE,OAAqB,EAAE,EAAE;QAChE,MAAM,OAAO,GAAG,IAAA,8BAAa,EAAC,OAAO,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,6BAAa,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,qCAAiB,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC1C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG;gBACjC,mEAAmE;gBACnE,4DAA4D;gBAC5D,CAAC,CAAC,CAAC,CAAC,OAAwB,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,KAAK;oBAC5D,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC;oBAC3C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxC,CAAC,CAAC,CAAC,CAAC,OAAwB,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC;gBACxB,SAAS,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;gBACnC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,eAAe;aAChB,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACjC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;oBAAE,MAAM,GAAG,IAAI,CAAC;YAC3E,CAAC;YACD,IAAI,MAAM;gBAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAChC,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,MAAyB,EACzB,KAAoB,EACpB,OAAwB;IAExB,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,gBAAgB;QAC9D,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE;QACtD,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,GAAG,UAAU,IAAI,CAAC,CAAC;IACxG,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5F,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAiB,EAAE,KAAoB;IAC/D,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YACjF,MAAM;QACR,KAAK,MAAM;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;YACvE,CAAC;YACD,MAAM;QACR,KAAK,MAAM;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YAChF,MAAM;QACR,KAAK,MAAM;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;YAC7F,MAAM;QACR,KAAK,WAAW;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;YACtE,MAAM;QACR,KAAK,cAAc;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;YACtE,MAAM;QACR,KAAK,kBAAkB;YACrB,qEAAqE;YACrE,MAAM;QACR,KAAK,mBAAmB;YACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAClH,CAAC;YACD,MAAM;QACR,KAAK,aAAa;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;YACvH,MAAM;QACR,KAAK,cAAc;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;YACjI,MAAM;QACR,KAAK,OAAO;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;YAClF,MAAM;QACR,KAAK,MAAM;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC7G,MAAM;IACV,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;AAChF,CAAC"}

package/dist/commands/ask.d.ts

@@ -0,0 +1,4 @@
+import { Command } from 'commander';
+import { ConsolePrinter } from '../output/ConsolePrinter';
+export declare function registerAskCommand(program: Command, printer: ConsolePrinter): void;
+//# sourceMappingURL=ask.d.ts.map

package/dist/commands/ask.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask.d.ts","sourceRoot":"","sources":["../../src/commands/ask.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAa1D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAkClF"}

package/dist/commands/ask.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAskCommand = registerAskCommand;
+const core_1 = require("@marifold/core");
+const RuntimeFactory_1 = require("./RuntimeFactory");
+function registerAskCommand(program, printer) {
+    program
+        .command('ask')
+        .description('Send one prompt and print one assistant response.')
+        .argument('<prompt...>', 'Prompt text.')
+        .option('--profile <name>', 'Profile name.')
+        .option('--provider <name>', 'Provider key from config.toml.')
+        .option('--model <model>', 'Model name.')
+        .option('--session <id>', 'Optional session id for continuity.')
+        .option('--no-memories', 'Disable profile memory for this run.')
+        .option('--think [state]', 'Enable or disable thinking mode for this run. Accepts true/false.', parseOptionalBoolean)
+        .option('--image <path>', 'Attach an image file to the prompt. Repeatable.', collectImage, [])
+        .action(async (promptParts, options) => {
+        const runtime = (0, RuntimeFactory_1.createRuntime)(program);
+        try {
+            const response = await runtime.ask({
+                prompt: promptParts.join(' '),
+                profile: options.profile,
+                provider: options.provider,
+                model: options.model,
+                sessionId: options.session,
+                memories: options.memories,
+                think: options.think,
+                images: options.image && options.image.length > 0 ? options.image.map(path => ({ path: (0, core_1.expandHome)(path) })) : undefined,
+            });
+            printer.printAskResponse(response);
+            if (!response.ok)
+                process.exitCode = 1;
+        }
+        catch (error) {
+            printer.printError(error);
+            process.exitCode = 1;
+        }
+        finally {
+            runtime.close();
+        }
+    });
+}
+function collectImage(value, previous) {
+    return [...previous, value];
+}
+function parseOptionalBoolean(value) {
+    if (value === undefined)
+        return true;
+    const normalized = value.trim().toLowerCase();
+    if (normalized === 'true' || normalized === 'on' || normalized === '1')
+        return true;
+    if (normalized === 'false' || normalized === 'off' || normalized === '0')
+        return false;
+    throw new Error('Expected --think to be true or false.');
+}
+//# sourceMappingURL=ask.js.map

package/dist/commands/ask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask.js","sourceRoot":"","sources":["../../src/commands/ask.ts"],"names":[],"mappings":";;;AACA,yCAA4C;AAE5C,qDAAiD;AAYjD,4BAAmC,OAAgB,EAAE,OAAuB;IAC1E,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,mDAAmD,CAAC;SAChE,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC;SACvC,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC;SAC3C,MAAM,CAAC,mBAAmB,EAAE,gCAAgC,CAAC;SAC7D,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;SACxC,MAAM,CAAC,gBAAgB,EAAE,qCAAqC,CAAC;SAC/D,MAAM,CAAC,eAAe,EAAE,sCAAsC,CAAC;SAC/D,MAAM,CAAC,iBAAiB,EAAE,mEAAmE,EAAE,oBAAoB,CAAC;SACpH,MAAM,CAAC,gBAAgB,EAAE,iDAAiD,EAAE,YAAY,EAAE,EAAc,CAAC;SACzG,MAAM,CAAC,KAAK,EAAE,WAAqB,EAAE,OAAmB,EAAE,EAAE;QAC3D,MAAM,OAAO,GAAG,IAAA,8BAAa,EAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACjC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,SAAS,EAAE,OAAO,CAAC,OAAO;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAA,iBAAU,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;aACxH,CAAC,CAAC;YACH,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,QAAkB;IACrD,OAAO,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACpF,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACvF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/commands/channel.d.ts

@@ -0,0 +1,8 @@
+import { Command } from 'commander';
+import { ConsolePrinter } from '../output/ConsolePrinter';
+/**
+ * `marifold channel <app>` — messaging bridges. For now this is config-only
+ * (`telegram setup`); the running bridge (long-poll loop) is a separate command.
+ */
+export declare function registerChannelCommand(program: Command, printer: ConsolePrinter): void;
+//# sourceMappingURL=channel.d.ts.map

package/dist/commands/channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../../src/commands/channel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG1D;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CA6GtF"}