moderado 0.3.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Moderado contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,208 @@
+# Moderado
+
+> **A lightweight, provider-independent CLI coding agent with dynamic NVIDIA NIM discovery, free-first AUTO routing, and an uncompromised human-in-the-loop approval boundary.**
+
+[![Version](https://img.shields.io/badge/version-v0.3.0%2B260921I-blue.svg)](file:///d:/projects/moderado/VERSION)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](file:///d:/projects/moderado/LICENSE)
+[![Standards: Alfazen](https://img.shields.io/badge/standard-alfazen--coding-green.svg)](https://github.com/marcuz-apl/alfazen-skills)
+
+---
+
+## Highlights
+
+- **Clean-Room & Original**: Built from scratch in TypeScript on Node.js (>= 20 LTS). No code copied from Cline, OpenCode, or legacy wrappers.
+- **Provider-Independent Core**: Core agent loops, tool dispatching, and routing depend on pure contracts (`packages/contracts`) using Dependency Injection.
+- **Dynamic NVIDIA Discovery**: Queries live `/v1/models` from NVIDIA NIM hosted catalog or local NIM instances; never relies on stale static lists.
+- **Free-First AUTO Routing**: Intelligently ranks and selects verified free/trial tool-capable models before any paid endpoints. Paid models and unverified pricing require explicit user opt-in.
+- **Strict Approval Boundary**: Auto-approved reads; interactive human approval for file writes, edits, and command executions. Non-interactive sessions fail closed.
+- **Minimalist & Bloat-Free (`ponytail`)**: Follows the Decision Ladder: YAGNI, standard library first (native Node `fetch`, `AbortController`, `child_process.spawn`), and zero unnecessary dependencies.
+- **Alfazen Versioning (`versioning-alfazen`)**: SemVer 2.0.0 with high-traceability connected UTC build prefixes (`v<m.n.p>+<yymmddc>`) and mandatory owner advisory gates for major releases.
+
+---
+
+## Documentation Index
+
+| Document | Purpose |
+|---|---|
+| [**PRD.md**](file:///d:/projects/moderado/PRD.md) | **Product Requirements Document**: Personas, requirements, CLI specs, and acceptance criteria |
+| [**AGENTS.md**](file:///d:/projects/moderado/AGENTS.md) | **Agent Operational Manual**: Rules of engagement, Ponytail Decision Ladder, and subagent patterns |
+| [**docs/ARCHITECTURE.md**](file:///d:/projects/moderado/docs/ARCHITECTURE.md) | **System Architecture**: Workspaces, Dependency Injection, state machines, and event streams |
+| [**docs/TOOLS.md**](file:///d:/projects/moderado/docs/TOOLS.md) | **Tool Specifications**: Schemas, limits, atomic writes, and validation rules for the 7 tools |
+| [**docs/ROUTING.md**](file:///d:/projects/moderado/docs/ROUTING.md) | **Discovery & Routing**: Classification taxonomy, AUTO selection algorithm, and retry/fallback cascades |
+| [**docs/SECURITY.md**](file:///d:/projects/moderado/docs/SECURITY.md) | **Security Model**: Workspace jail, `shell: false` isolation, environment cleansing, and injection defense |
+| [**HANDOFF.md**](file:///d:/projects/moderado/HANDOFF.md) | **Project Handoff Snapshot**: Real-time status, decisions, blockers, and next implementation milestones |
+
+---
+
+## Workspace Layout
+
+Moderado is organized as an npm workspace:
+
+```text
+moderado/
+├── apps/
+│   └── cli/                 # v0.1 CLI application and terminal event rendering
+├── packages/
+│   ├── contracts/           # Pure TypeScript interfaces, Zod schemas, events
+│   ├── core/                # Agent loop, routing policy, session state machine
+│   ├── providers/           # NVIDIA NIM HTTP adapter and mock/fake providers
+│   └── tools/               # Workspace file jail and process execution engine
+├── tests/                   # Cross-package and CLI integration tests
+├── docs/                    # Architectural and subsystem specifications
+├── VERSION                  # Alfazen connected version identifier
+├── PRD.md                   # Product requirements document
+├── AGENTS.md                # Agent operational guide
+└── HANDOFF.md               # Resumption and state ledger
+```
+
+---
+
+## CLI Command Quick Reference
+
+```bash
+# Discover live models and display access/capability classifications
+moderado models
+
+# Run a bounded coding task in the current workspace (default AUTO routing)
+moderado run "Add unit tests for user authentication"
+
+# Pin a specific model (disables fallback)
+moderado run "Refactor database client" --model meta/llama-3.3-70b-instruct
+
+# Run against a local NIM container
+moderado run "Audit codebase" --profile local-nim
+
+# Run in read-only audit mode (denies all writes and commands)
+moderado run "Analyze security boundaries" --read-only
+```
+
+---
+
+## Install Moderado
+
+Moderado requires **Node.js 20 or newer**. M6.1 creates a verified npm tarball
+but does not publish a public npm release yet. Once a release is published,
+the global install command will be:
+
+```bash
+npm install -g moderado
+moderado
+```
+
+Until then, build from the source checkout:
+
+```bash
+git clone https://github.com/marcuz-apl/moderado.git
+cd moderado
+npm install
+npm run build
+node apps/cli/dist/index.js
+```
+
+Maintainers can install a verified release artifact directly with
+`npm install -g ./moderado-<version>.tgz`. See
+[docs/RELEASING.md](docs/RELEASING.md) for the review procedure.
+
+### Connect a provider
+
+Open Moderado and use `/connect`. NVIDIA NIM is the default free-first provider;
+OpenRouter, Agnes AI, and compatible OpenAI-style endpoints are also supported.
+On Windows, newly saved provider keys go to Windows Credential Manager and
+`~/.moderado/config.json` retains only a credential reference. On other
+platforms, use an environment variable such as `NVIDIA_API_KEY` or
+`OPENROUTER_API_KEY`.
+
+Run `moderado doctor` to inspect local setup without exposing secrets. Add
+`--connectivity` only when you want an optional live model-catalog check.
+`npm test` never performs live provider calls.
+## Getting Started & Development
+
+### Connect a provider in the TUI
+
+Run `moderado` to open the TUI immediately. A fresh installation does not require
+an API key or a preselected model. The welcome card shows **No model connected —
+use `/connect`** until you add one.
+
+Use `/connect` to add NVIDIA NIM. NVIDIA NIM starts with `AUTO` free-first
+routing, so choosing a model is optional; use `/model` later to pin one. Obtain
+an NVIDIA key from [build.nvidia.com](https://build.nvidia.com), or set it as
+`NVIDIA_API_KEY` before launching Moderado.
+
+### Sessions and usage
+
+Moderado stores sessions per workspace in `~/.moderado/sessions/`. Use
+`/session` to create, resume, export, or compact a local conversation. Session
+exports redact recognized API-key prefixes. The status line uses only
+provider-reported token usage. It shows the calculated cost when the selected
+model exposes prompt and completion prices, and **Cost unknown** otherwise.
+
+`/connect` also accepts an OpenAI-compatible base URL, API key, and explicit
+model ID for providers such as OpenRouter, Z.AI, DeepSeek, Moonshot, and
+Mistral. Compatibility depends on each provider supporting `/v1/models` and
+streaming `/v1/chat/completions` with tool calls. Provider credentials are saved
+in `~/.moderado/config.json`; protect that file and never commit it.
+
+### 1. Build & Test
+```bash
+# Install workspace dependencies
+npm install
+
+# Build all packages via TypeScript project references
+npm run build
+
+# Run full automated test suite (100% offline, zero API keys required)
+npm test
+```
+
+### 2. Manual Live Smoke Test (Optional)
+To test live model discovery and chat against NVIDIA NIM with real credentials:
+```bash
+# PowerShell
+$env:NVIDIA_API_KEY="nvapi-..."
+node scripts/smoke_test.js
+
+# POSIX (bash/zsh)
+export NVIDIA_API_KEY="nvapi-..."
+node scripts/smoke_test.js
+```
+
+---
+
+## License
+
+This project is licensed under the MIT License.
+*NVIDIA NIM, NGC, and model weights/APIs are subject to their respective terms and licenses. Moderado is independent and not endorsed by NVIDIA.*
+
+### Practical coding workflow
+
+Use `/workflow` from the TUI to work through a change safely:
+
+- **Git status** shows the current branch and changed files without using a shell.
+- **Review diff** shows the bounded working-tree diff.
+- In **Plan** mode, Moderado asks the model for a concise checklist and cannot make workspace changes. Choose **Build plan** and confirm to send that checklist to Execute mode.
+- File writes, exact edits, and multi-file patches show their change preview and still require approval. Moderado records a byte-preserving checkpoint immediately before an approved file mutation.
+- **Undo latest agent change** requires its own approval. It restores the latest completed checkpoint from `~/.moderado/checkpoints/` only when every affected file still has the expected post-change digest. If a file changed externally, it reports the conflict and restores nothing.
+
+### Diagnostics evidence
+
+Ask Moderado to run diagnostics, typecheck, lint, or tests in a TypeScript or JavaScript workspace. It may run only the direct `typecheck`, `lint`, or `test` script defined in that workspace�s `package.json`, and every run requires approval. A non-zero exit returns parsed TypeScript errors as repair evidence; it does not bypass the safety boundary.
+
+### TypeScript language intelligence
+
+Install `typescript-language-server` yourself, then set `typescriptLanguageServer` in `~/.moderado/config.json` to its executable path. Moderado can then use read-only definition and reference lookup for TypeScript/JavaScript files. When the executable is unavailable, it reports how to configure it and leaves normal tools available.
+
+### Local MCP tools
+
+Configure trusted local stdio MCP servers under `mcpServers` in `~/.moderado/config.json`, with an executable and fixed `args` list. Moderado discovers server tools at session startup, namespaces them as `mcp.<server>.<tool>`, and requires approval for every call. MCP network transports and automatic server installation are not supported.
+
+### Host event protocol
+
+Moderado exposes a versioned host-event envelope with session identity and monotonic sequence numbers. The CLI continues to render the contained agent event, while a future desktop host can consume the same protocol without importing CLI code.
+
+### Doctor command
+
+Run `moderado doctor` to check the local Node runtime, workspace, Moderado home directory, provider/key presence, Git, and npm without exposing credentials. Run `moderado doctor --connectivity` only when you want an explicit live provider catalog check.
+
+## Windows credential storage
+
+On Windows, /connect saves provider API keys in Windows Credential Manager and stores only a provider credential reference in ~/.moderado/config.json. Existing plaintext keys remain usable for compatibility. Migrate them explicitly with moderado doctor --migrate-credentials; a failed migration leaves the existing configuration unchanged. On other platforms, set the provider environment variable (for example, NVIDIA_API_KEY or OPENROUTER_API_KEY).

package/dist/args.d.ts

@@ -0,0 +1,26 @@
+export interface CliParsedArgs {
+    command?: 'models' | 'run' | 'doctor';
+    task?: string;
+    workspace: string;
+    model?: string;
+    provider?: string;
+    profile: string;
+    maxSteps: number;
+    timeout: number;
+    readOnly: boolean;
+    autoApprove: boolean;
+    nonInteractive: boolean;
+    allowPaid: boolean;
+    allowUnknown: boolean;
+    verbose: boolean;
+    json: boolean;
+    refresh: boolean;
+    connectivity: boolean;
+    migrateCredentials: boolean;
+    maxTokens?: number;
+    help: boolean;
+    version: boolean;
+}
+export declare function parseCliArgs(args?: string[]): CliParsedArgs;
+export declare function getHelpText(): string;
+//# sourceMappingURL=args.d.ts.map

package/dist/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,YAAY,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,aAAa,CA0ElF;AAED,wBAAgB,WAAW,IAAI,MAAM,CA8BpC"}

package/dist/args.js

@@ -0,0 +1,108 @@
+import { parseArgs } from 'node:util';
+export function parseCliArgs(args = process.argv.slice(2)) {
+    const optionsConfig = {
+        workspace: { type: 'string', short: 'w', default: '.' },
+        model: { type: 'string', short: 'm' },
+        provider: { type: 'string' },
+        profile: { type: 'string', short: 'p', default: 'hosted-nvidia' },
+        'max-steps': { type: 'string', default: '25' },
+        'max-tokens': { type: 'string' },
+        timeout: { type: 'string', default: '600' },
+        'read-only': { type: 'boolean', default: false },
+        'auto-approve': { type: 'boolean', short: 'y', default: false },
+        'non-interactive': { type: 'boolean', default: false },
+        'allow-paid': { type: 'boolean', default: false },
+        'allow-unknown': { type: 'boolean', default: false },
+        verbose: { type: 'boolean', default: false },
+        json: { type: 'boolean', default: false },
+        refresh: { type: 'boolean', default: false },
+        connectivity: { type: 'boolean', default: false },
+        'migrate-credentials': { type: 'boolean', default: false },
+        help: { type: 'boolean', short: 'h', default: false },
+        version: { type: 'boolean', short: 'v', default: false },
+    };
+    const parsed = parseArgs({
+        args,
+        options: optionsConfig,
+        allowPositionals: true,
+    });
+    const positionals = parsed.positionals;
+    let command;
+    let task;
+    if (positionals.length > 0) {
+        const first = positionals[0].toLowerCase();
+        if (first === 'doctor') {
+            command = 'doctor';
+        }
+        else if (first === 'models') {
+            command = 'models';
+        }
+        else if (first === 'run') {
+            command = 'run';
+            task = positionals.slice(1).join(' ');
+        }
+        else {
+            // If first positional is not a command, treat as task for implicit 'run'
+            command = 'run';
+            task = positionals.join(' ');
+        }
+    }
+    const maxSteps = parseInt(parsed.values['max-steps'], 10);
+    const maxTokens = parsed.values['max-tokens'] ? parseInt(parsed.values['max-tokens'], 10) : undefined;
+    const timeout = parseInt(parsed.values.timeout, 10);
+    return {
+        command,
+        task: task?.trim() || undefined,
+        workspace: parsed.values.workspace,
+        model: parsed.values.model,
+        provider: parsed.values.provider,
+        profile: parsed.values.profile,
+        maxSteps: isNaN(maxSteps) ? 25 : maxSteps,
+        maxTokens: maxTokens && !isNaN(maxTokens) ? maxTokens : undefined,
+        timeout: isNaN(timeout) ? 600 : timeout,
+        readOnly: Boolean(parsed.values['read-only']),
+        autoApprove: Boolean(parsed.values['auto-approve']),
+        nonInteractive: Boolean(parsed.values['non-interactive']),
+        allowPaid: Boolean(parsed.values['allow-paid']),
+        allowUnknown: Boolean(parsed.values['allow-unknown']),
+        verbose: Boolean(parsed.values.verbose),
+        json: Boolean(parsed.values.json),
+        refresh: Boolean(parsed.values.refresh),
+        connectivity: Boolean(parsed.values.connectivity),
+        migrateCredentials: Boolean(parsed.values['migrate-credentials']),
+        help: Boolean(parsed.values.help),
+        version: Boolean(parsed.values.version),
+    };
+}
+export function getHelpText() {
+    return `Moderado - Lightweight CLI coding agent with NVIDIA NIM discovery and free-first routing.
+
+USAGE:
+  moderado models [options]
+  moderado run "<task>" [options]
+  moderado "<task>" [options]
+
+COMMANDS:
+  models                 Discover live models, capability & access tiers
+  run "<task>"           Execute a bounded coding task in the workspace\n  doctor                 Check local Moderado setup
+
+OPTIONS:
+  -w, --workspace <path> Target workspace directory (default: current directory)
+  -m, --model <id>       Pin a specific model (disables AUTO fallback)
+  -p, --profile <name>   Target configured profile (default: hosted-nvidia)
+  --max-steps <int>      Upper bound on tool interaction cycles (default: 25)
+  --max-tokens <int>     Hard limit on generated output tokens per response (default: 1024)
+  --timeout <seconds>    Global session execution timeout (default: 600s)
+  --read-only            Enforce read-only mode (blocks writes & commands)
+  -y, --auto-approve     Automatically approve all tool operations
+  --non-interactive      Fail closed on operations requiring approval
+  --allow-paid           Permit paid models during AUTO routing
+  --allow-unknown        Permit unverified/unknown access models in AUTO
+  --verbose              Display raw tool inputs and event logs
+  --json                 Output results in structured JSON (models command)
+  --migrate-credentials  Move legacy Windows config keys into Credential Manager
+  -h, --help             Show this help screen
+  -v, --version          Show version identifier
+`;
+}
+//# sourceMappingURL=args.js.map

package/dist/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AA0BtC,MAAM,UAAU,YAAY,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG;QACpB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;QAChE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,KAAK,EAAE,GAAG,EAAE;QAC9C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;QACrC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE;QAC1E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,OAAO,EAAE,IAAI,EAAE;QACvD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;QACzC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,OAAO,EAAE,KAAK,EAAE;QACpD,WAAW,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,OAAO,EAAE,KAAK,EAAE;QACzD,cAAc,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QACxE,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,OAAO,EAAE,KAAK,EAAE;QAC/D,YAAY,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,OAAO,EAAE,KAAK,EAAE;QAC1D,eAAe,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,OAAO,EAAE,KAAK,EAAE;QAC7D,OAAO,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,OAAO,EAAE,KAAK,EAAE;QACrD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,OAAO,EAAE,KAAK,EAAE;QAClD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,OAAO,EAAE,KAAK,EAAE;QACrD,YAAY,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,OAAO,EAAE,KAAK,EAAE;QAC1D,qBAAqB,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,OAAO,EAAE,KAAK,EAAE;QACnE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QAC9D,OAAO,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;KAClE,CAAC;IAEF,MAAM,MAAM,GAAG,SAAS,CAAC;QACvB,IAAI;QACJ,OAAO,EAAE,aAAa;QACtB,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,IAAI,OAAgD,CAAC;IACrD,IAAI,IAAwB,CAAC;IAE7B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAAC,OAAO,GAAG,QAAQ,CAAC;QAAC,CAAC;aAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5E,OAAO,GAAG,QAAQ,CAAC;QACrB,CAAC;aAAM,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YAC3B,OAAO,GAAG,KAAK,CAAC;YAChB,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,yEAAyE;YACzE,OAAO,GAAG,KAAK,CAAC;YAChB,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAW,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChH,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAiB,EAAE,EAAE,CAAC,CAAC;IAE9D,OAAO;QACL,OAAO;QACP,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,SAAS;QAC/B,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAmB;QAC5C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAA2B;QAChD,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAA8B;QACtD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAiB;QACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ;QACzC,SAAS,EAAE,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACjE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO;QACvC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7C,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACnD,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACzD,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC/C,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACrD,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACvC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACvC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACjD,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACjE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BR,CAAC;AACF,CAAC"}

package/dist/commands/chat.d.ts

@@ -0,0 +1,121 @@
+import { NvidiaAdapter } from '@moderado/providers';
+import { discoverMcpServers } from '@moderado/tools';
+import type { WebSearchProviderName, WebSearchToolOptions } from '@moderado/tools';
+import { ApprovalDecision, ApprovalRequest, ChatMessage, IToolRegistry, McpServerConfig, ToolResult } from '@moderado/contracts';
+import { CliParsedArgs } from '../args.js';
+import { ModeradoConfig } from '../config.js';
+import { selectConfirmPopup, selectListPopup } from '../ui/popup.js';
+export declare function createAgentTask(request: string, mode: 'Plan' | 'Execute'): string;
+export declare const STANDARD_SLASH_COMMANDS: readonly ["/connect", "/model", "/init", "/btw", "/mcp", "/session", "/queue", "/workflow", "/clear", "/help", "/exit", "/quit"];
+export declare function levenshteinDistance(a: string, b: string): number;
+export interface SlashCommandAdvice {
+    isSlashCommand: boolean;
+    isValid: boolean;
+    suggestion?: string;
+    advice?: string;
+}
+export declare function findSlashCommandAdvice(rawInput: string): SlashCommandAdvice;
+export declare function formatTurnFailureAnswer(status: string, errorEvent: {
+    code?: string;
+    message: string;
+} | undefined, modelId: string, otherConnections?: string[]): string;
+export declare function resolveTurnAssistantAnswer(result: {
+    status: string;
+    messages: ChatMessage[];
+    selectedModel?: {
+        id: string;
+    };
+}, previousHistoryLength: number, lastErrorEvent?: {
+    code?: string;
+    message: string;
+}, streamedAnswer?: string, currentModel?: string, otherConnections?: string[]): {
+    answer: string;
+    isError: boolean;
+};
+export declare function isBareExitCommand(input: string): boolean;
+/** Resolve the required, explicit local destination for `/session share`. */
+export declare function resolveSessionSharePath(workspaceRoot: string, outputPath: string): string;
+export declare function isGenerationCancelKey(key: {
+    name?: string;
+} | undefined, str?: string): boolean;
+export declare class TurnCommandQueue {
+    private queue;
+    private draft;
+    get items(): readonly string[];
+    get currentDraft(): string;
+    get length(): number;
+    push(command: string): void;
+    shift(): string | undefined;
+    clear(): void;
+    setDraft(text: string): void;
+    appendDraft(text: string): void;
+    backspaceDraft(): void;
+    commitDraft(): string | undefined;
+}
+export declare function handleGenerationKeypress(str: string, key: {
+    name?: string;
+    ctrl?: boolean;
+    meta?: boolean;
+    shift?: boolean;
+} | undefined, queue: TurnCommandQueue, actions: {
+    abort: () => void;
+    onDraftChange: () => void;
+    onQueueAdd: (item: string) => void;
+    onBtw?: (command: string) => void;
+}): void;
+export declare function isNetworkCommand(request: Pick<ApprovalRequest, 'toolName' | 'exactPayload'>): boolean;
+export declare function isNetworkConsentReply(input: string, previousAnswer: string): boolean;
+export declare function isLocalModelQuery(input: string): boolean;
+export declare function isLocalProviderQuery(input: string): boolean;
+export declare function isLocalIdentityQuery(input: string): boolean;
+export declare function isLocalTokenQuery(input: string): boolean;
+export declare function isLocalVersionQuery(input: string): boolean;
+export declare function isLocalWorkspaceQuery(input: string): boolean;
+export interface LocalMetaQueryContext {
+    currentModel?: string;
+    providerName?: string;
+    activeMode: 'Plan' | 'Execute';
+    workspace: string;
+    version?: string;
+    sessionTokens?: number;
+    sessionCost?: string;
+}
+export declare function resolveLocalMetaQuery(input: string, context: LocalMetaQueryContext): string | undefined;
+/** Detect questions whose answer depends on changing public information. */
+export declare function shouldFastRouteWebSearch(input: string): boolean;
+/** Environment configuration overrides the optional persistent search endpoint. */
+export declare function resolveWebSearchEndpoint(config: ModeradoConfig): string | undefined;
+export declare function formatDirectWebSearchAnswer(result: ToolResult): string;
+/** Environment configuration overrides the persistent search provider preference. */
+export declare function resolveWebSearchProvider(config: ModeradoConfig): WebSearchProviderName | undefined;
+export declare function resolveWebSearchOptions(config: ModeradoConfig): WebSearchToolOptions;
+/** Feed completed search evidence into a single model turn instead of paying for a second tool round trip. */
+export declare function buildSearchAnswerTask(question: string, result: ToolResult): string;
+/** Keep the transcript honest: the injected evidence turn becomes the question the user actually asked. */
+export declare function replaceEvidenceTurn(messages: ChatMessage[], evidenceTask: string, question: string): ChatMessage[];
+export interface ApprovalPolicyOptions {
+    autoApprove: boolean;
+    networkAccessApproved: boolean;
+    requestInteractiveApproval: (request: ApprovalRequest, signal?: AbortSignal) => Promise<ApprovalDecision>;
+}
+export declare function decideApproval(request: ApprovalRequest, options: ApprovalPolicyOptions, signal?: AbortSignal): Promise<ApprovalDecision>;
+export declare function createMcpToolRegistry(servers: Record<string, McpServerConfig> | undefined, webSearch?: WebSearchToolOptions): Promise<IToolRegistry>;
+export interface McpCommandOptions {
+    reloadMcpTools: () => Promise<void>;
+    signal?: AbortSignal;
+    configHome?: string;
+    promptText?: (label: string) => Promise<string | undefined>;
+    discoverMcpServers?: typeof discoverMcpServers;
+    selectListPopup?: typeof selectListPopup;
+    selectConfirmPopup?: typeof selectConfirmPopup;
+}
+export declare function handleMcpCommand(command: string, drawFrame: (popupLines: string[]) => void, options: McpCommandOptions): Promise<void>;
+export declare function executeBtwQuery(command: string, drawFrame: (popupLines: string[], options?: {
+    waitDismiss?: boolean;
+}) => void | Promise<void>, provider: NvidiaAdapter | undefined, currentModel: string | undefined, btwHistory: Array<{
+    question: string;
+    answer: string;
+    timestamp: number;
+}>, signal?: AbortSignal, btwSignal?: AbortSignal): Promise<void>;
+export declare function handleChatSession(args: CliParsedArgs, version: string, signal?: AbortSignal): Promise<number>;
+//# sourceMappingURL=chat.d.ts.map

package/dist/commands/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../src/commands/chat.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAoF,kBAAkB,EAA0D,MAAM,iBAAiB,CAAC;AAC/L,OAAO,KAAK,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAoB,aAAa,EAAE,eAAe,EAAyB,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC1K,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAmC,cAAc,EAAkK,MAAM,cAAc,CAAC;AAW/O,OAAO,EAAkC,kBAAkB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAYrG,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGjF;AAED,eAAO,MAAM,uBAAuB,kIAa1B,CAAC;AAEX,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAuBhE;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CA6D3E;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EAC1D,OAAO,EAAE,MAAM,EACf,gBAAgB,GAAE,MAAM,EAAO,GAC9B,MAAM,CASR;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;IAAC,aAAa,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EACnF,qBAAqB,EAAE,MAAM,EAC7B,cAAc,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACnD,cAAc,SAAK,EACnB,YAAY,SAAY,EACxB,gBAAgB,GAAE,MAAM,EAAO,GAC9B;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAatC;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,6EAA6E;AAC7E,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGzF;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAE/F;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,KAAK,CAAM;IAEnB,IAAI,KAAK,IAAI,SAAS,MAAM,EAAE,CAE7B;IAED,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAO3B,KAAK,IAAI,MAAM,GAAG,SAAS;IAI3B,KAAK,IAAI,IAAI;IAKb,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI5B,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI/B,cAAc,IAAI,IAAI;IAMtB,WAAW,IAAI,MAAM,GAAG,SAAS;CASlC;AAED,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,EACnF,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE;IACP,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC,GACA,IAAI,CAsDN;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,GAAG,cAAc,CAAC,GAAG,OAAO,CAIrG;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAEpF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAaxD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAa3D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAM3D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAIxD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAK1D;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAI5D;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,GAAG,MAAM,GAAG,SAAS,CA6BvG;AAED,4EAA4E;AAC5E,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAS/D;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CASnF;AAKD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAQtE;AACD,qFAAqF;AACrF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,cAAc,GAAG,qBAAqB,GAAG,SAAS,CAGlG;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc,GAAG,oBAAoB,CAEpF;AAED,8GAA8G;AAC9G,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAMlF;AAID,2GAA2G;AAC3G,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,EAAE,CAElH;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,OAAO,CAAC;IACrB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,0BAA0B,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC3G;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,qBAAqB,EAC9B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,gBAAgB,CAAC,CAW3B;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,EAAE,SAAS,GAAE,oBAAyB,GAAG,OAAO,CAAC,aAAa,CAAC,CAE9J;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5D,kBAAkB,CAAC,EAAE,OAAO,kBAAkB,CAAC;IAC/C,eAAe,CAAC,EAAE,OAAO,eAAe,CAAC;IACzC,kBAAkB,CAAC,EAAE,OAAO,kBAAkB,CAAC;CAChD;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,IAAI,EACzC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CA+Hf;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAC9F,QAAQ,EAAE,aAAa,GAAG,SAAS,EACnC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,UAAU,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1E,MAAM,CAAC,EAAE,WAAW,EACpB,SAAS,CAAC,EAAE,WAAW,GACtB,OAAO,CAAC,IAAI,CAAC,CAoGf;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAqxBnH"}