pinecall 0.1.0

package/dist/cli/groups.d.ts

@@ -0,0 +1,17 @@
+/** Every group of `pinecall <group>`: what it is for, and whether this tree has written it yet. */
+/** What a group module owes the dispatcher: a one-line purpose and something that runs. */
+export interface Group {
+    purpose: string;
+    /** What `pinecall <group> --help` prints under the purpose: the flags this group takes. */
+    usage?: string;
+    run(argv: string[]): Promise<number> | number;
+}
+/** The page `pinecall <group> --help` prints: what the group is for, and what it takes. */
+export declare function helpFor(name: string, group: Group): string;
+/** What each group the design declares is for, for the ones this tree has not written yet. */
+export declare const PLANNED: Record<string, string>;
+/** The line a planned group prints instead of doing anything: the verb, and what it will be. */
+export declare function notBuiltYet(name: string, purpose: string): string;
+/** A planned group as a runnable one: it says what it will be and leaves with a zero. */
+export declare function plannedGroup(name: string, purpose: string, out: NodeJS.WritableStream): Group;
+//# sourceMappingURL=groups.d.ts.map

package/dist/cli/groups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"groups.d.ts","sourceRoot":"","sources":["../../src/cli/groups.ts"],"names":[],"mappings":"AAAA,mGAAmG;AAEnG,2FAA2F;AAC3F,MAAM,WAAW,KAAK;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;CAC/C;AAED,2FAA2F;AAC3F,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,CAI1D;AAMD,8FAA8F;AAC9F,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAS1C,CAAC;AAEF,gGAAgG;AAChG,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,yFAAyF;AACzF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,cAAc,GAAG,KAAK,CAQ7F"}

package/dist/cli/groups.js

@@ -0,0 +1,38 @@
+/** Every group of `pinecall <group>`: what it is for, and whether this tree has written it yet. */
+/** The page `pinecall <group> --help` prints: what the group is for, and what it takes. */
+export function helpFor(name, group) {
+    const said = [`pinecall ${name} — ${group.purpose}`];
+    if (group.usage !== undefined)
+        said.push("", group.usage.trimEnd());
+    return `${said.join("\n")}\n`;
+}
+// The design lists every verb of the tenant's CLI. Declaring the whole list here — not only what
+// works — is the point: a person who types `pinecall supervise` is told what supervise WILL be
+// instead of "unknown command", and this table is the one place that says which half of the CLI
+// is still a design. A verb leaves it in the commit that writes it.
+/** What each group the design declares is for, for the ones this tree has not written yet. */
+export const PLANNED = {
+    new: "scaffold an app: agent.tsx, knowledge, lib, test, .env",
+    g: "generate a tool, a component, a golden, a persona, a channel",
+    observe: "the agent log as it happens, with a persistent cursor",
+    costs: "what the calls cost, by agent, model or channel",
+    call: "the agent dials a number, for real",
+    tokens: "mint a browser token for a web call",
+    agents: "list | show the agents this org has registered",
+    deploy: "put this app on a box and keep it there",
+};
+/** The line a planned group prints instead of doing anything: the verb, and what it will be. */
+export function notBuiltYet(name, purpose) {
+    return `${name} is not built yet: ${purpose}`;
+}
+/** A planned group as a runnable one: it says what it will be and leaves with a zero. */
+export function plannedGroup(name, purpose, out) {
+    return {
+        purpose,
+        run() {
+            out.write(`${notBuiltYet(name, purpose)}\n`);
+            return 0;
+        },
+    };
+}
+//# sourceMappingURL=groups.js.map

package/dist/cli/groups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groups.js","sourceRoot":"","sources":["../../src/cli/groups.ts"],"names":[],"mappings":"AAAA,mGAAmG;AAUnG,2FAA2F;AAC3F,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,KAAY;IAChD,MAAM,IAAI,GAAG,CAAC,YAAY,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAChC,CAAC;AAED,iGAAiG;AACjG,+FAA+F;AAC/F,gGAAgG;AAChG,oEAAoE;AACpE,8FAA8F;AAC9F,MAAM,CAAC,MAAM,OAAO,GAA2B;IAC7C,GAAG,EAAE,wDAAwD;IAC7D,CAAC,EAAE,8DAA8D;IACjE,OAAO,EAAE,uDAAuD;IAChE,KAAK,EAAE,iDAAiD;IACxD,IAAI,EAAE,oCAAoC;IAC1C,MAAM,EAAE,qCAAqC;IAC7C,MAAM,EAAE,gDAAgD;IACxD,MAAM,EAAE,yCAAyC;CAClD,CAAC;AAEF,gGAAgG;AAChG,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IACvD,OAAO,GAAG,IAAI,sBAAsB,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe,EAAE,GAA0B;IACpF,OAAO;QACL,OAAO;QACP,GAAG;YACD,GAAG,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,CAAC;QACX,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+/** `pinecall <group> [args]`: the tenant's CLI. One module per group, one purpose line each. */
+import { type Group } from "./groups.js";
+/** Everything `pinecall` answers to, built and planned alike, in the order help prints them. */
+export declare function groupNames(): string[];
+/** The ones that are written: what a person may actually run, and what owes a help page. */
+export declare function builtNames(): string[];
+/**
+ * Run one invocation. The group owns its own flags — this file only picks which module reads them,
+ * so a new group is one import and one line, never a branch inside a growing parser.
+ */
+export declare function main(argv: string[], out?: NodeJS.WritableStream, err?: NodeJS.WritableStream): Promise<number>;
+export declare function groupFor(name: string, out?: NodeJS.WritableStream): Promise<Group | undefined>;
+/** The whole CLI on one screen: a CLI this small can show every group rather than one usage line. */
+export declare function usage(): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA,gGAAgG;AAKhG,OAAO,EAAkC,KAAK,KAAK,EAAE,MAAM,aAAa,CAAC;AAQzE,gGAAgG;AAChG,wBAAgB,UAAU,IAAI,MAAM,EAAE,CAErC;AAED,4FAA4F;AAC5F,wBAAgB,UAAU,IAAI,MAAM,EAAE,CAErC;AAED;;;GAGG;AACH,wBAAsB,IAAI,CACxB,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,GAAE,MAAM,CAAC,cAA+B,EAC3C,GAAG,GAAE,MAAM,CAAC,cAA+B,GAC1C,OAAO,CAAC,MAAM,CAAC,CA6BjB;AAID,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,cAA+B,GAAG,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,CAgCpH;AAED,qGAAqG;AACrG,wBAAgB,KAAK,IAAI,MAAM,CAkC9B"}

package/dist/cli/index.js

@@ -0,0 +1,169 @@
+#!/usr/bin/env node
+/** `pinecall <group> [args]`: the tenant's CLI. One module per group, one purpose line each. */
+import { realpathSync } from "node:fs";
+import { pathToFileURL } from "node:url";
+import { helpFor, PLANNED, plannedGroup } from "./groups.js";
+import { withoutTheProfileFlag } from "./profiles.js";
+// The order this table is written is the order the help prints: run and chat first, because
+// they are what a person types on the first day, and the planned groups after, in the design's
+// order. run is rails server and chat is rails console — see docs/decisions/tenant-cli.md.
+const BUILT = ["run", "chat", "prompt", "test", "simulate", "eval", "sessions", "runs", "pipeline", "line", "numbers", "personas", "knowledge", "memory", "remember", "supervise", "keys", "providers", "callbacks", "signup", "login", "whoami", "config", "use"];
+/** Everything `pinecall` answers to, built and planned alike, in the order help prints them. */
+export function groupNames() {
+    return [...BUILT, ...Object.keys(PLANNED)];
+}
+/** The ones that are written: what a person may actually run, and what owes a help page. */
+export function builtNames() {
+    return [...BUILT];
+}
+/**
+ * Run one invocation. The group owns its own flags — this file only picks which module reads them,
+ * so a new group is one import and one line, never a branch inside a growing parser.
+ */
+export async function main(argv, out = process.stdout, err = process.stderr) {
+    // `--profile <name>` belongs to no group: it says which gateway this one command goes to, and
+    // every group would otherwise have to parse it. Out of argv here, before anybody sees it.
+    const [name, ...rest] = withoutTheProfileFlag(argv);
+    if (name === undefined || name === "--help" || name === "-h" || name === "help") {
+        out.write(usage());
+        return name === undefined ? 2 : 0;
+    }
+    const group = await groupFor(name, out);
+    if (group === undefined) {
+        err.write(`pinecall: no such group: ${name}\n\n${usage()}`);
+        return 2;
+    }
+    // A group's flags are the group's own, so its help is too: the dispatcher only knows to ask.
+    if (rest[0] === "--help" || rest[0] === "-h") {
+        out.write(helpFor(name, group));
+        return 0;
+    }
+    // What a verb throws is an answer, not a crash: a gateway that refused the socket, a key the org
+    // does not have, an app file that does not compile. One line with the message, and the exit code
+    // says it failed — a node stack trace on stderr tells the person nothing they can act on. The
+    // message is read here rather than through the sdk's `asError`, so that importing this file
+    // still costs no websocket client: `pinecall prompt` must pay for nothing it does not use.
+    try {
+        return await group.run(rest);
+    }
+    catch (failed) {
+        err.write(`pinecall: ${failed instanceof Error ? failed.message : String(failed)}\n`);
+        return 1;
+    }
+}
+// A built group is imported only when it is asked for: `pinecall prompt` must not pay for the
+// websocket client that `run` needs, and a stub must not pay for anything at all.
+export async function groupFor(name, out = process.stdout) {
+    if (name === "run")
+        return (await import("./run.js")).group;
+    if (name === "chat")
+        return (await import("./chat.js")).group;
+    if (name === "prompt")
+        return (await import("./prompt.js")).group;
+    if (name === "test")
+        return (await import("./test.js")).group;
+    if (name === "simulate")
+        return (await import("./simulate.js")).group;
+    if (name === "eval")
+        return (await import("./eval.js")).group;
+    if (name === "runs")
+        return (await import("./runs/index.js")).group;
+    if (name === "pipeline")
+        return (await import("./pipeline.js")).group;
+    if (name === "line")
+        return (await import("./line.js")).group;
+    if (name === "personas")
+        return (await import("./personas.js")).group;
+    if (name === "knowledge")
+        return (await import("./knowledge.js")).group;
+    if (name === "memory")
+        return (await import("./memory.js")).group;
+    if (name === "remember")
+        return (await import("./remember.js")).group;
+    if (name === "supervise")
+        return (await import("./supervise.js")).group;
+    if (name === "sessions")
+        return (await import("./sessions.js")).group;
+    if (name === "keys")
+        return (await import("./keys.js")).group;
+    if (name === "numbers")
+        return (await import("./numbers.js")).group;
+    if (name === "providers")
+        return (await import("./providers.js")).group;
+    if (name === "callbacks")
+        return (await import("./callbacks.js")).group;
+    if (name === "signup")
+        return (await import("./signup.js")).group;
+    if (name === "login")
+        return (await import("./login.js")).group;
+    if (name === "whoami")
+        return (await import("./whoami.js")).group;
+    if (name === "config")
+        return (await import("./config.js")).group;
+    // The same module under the word a person reaches for. `use` is `config <name>` and nothing
+    // else — two verbs would be two places deciding what a profile is.
+    if (name === "use") {
+        const config = await import("./config.js");
+        return { ...config.group, run: config.use };
+    }
+    const planned = PLANNED[name];
+    return planned === undefined ? undefined : plannedGroup(name, planned, out);
+}
+/** The whole CLI on one screen: a CLI this small can show every group rather than one usage line. */
+export function usage() {
+    const lines = [
+        "usage: pinecall <group> [args]",
+        "",
+        "  run       the app and its doors: the process you deploy",
+        "  chat      the app in this terminal's own process, and a prompt against it",
+        "  prompt    the exact prompt a state would produce, offline",
+        "  test      ring 1: the goldens, through the app in this terminal's own process",
+        "  simulate  one persona calls the agent, live, with the checks resolving as they land",
+        "  eval      ring 3: one real call, re-evaluated by the runtime's code checks",
+        "  sessions  list | show a call's log, with what it cost and how it was judged",
+        "  runs      list | show | diff the suites, promote a call, and watch the drift",
+        "  pipeline  what the agent hears, decides and speaks with, and the knobs over it",
+        "  line      whose terminal a call at the org's shared sandbox number rings in",
+        "  numbers   list | import | move | drop the numbers the org answers at",
+        "  personas  list | show | try the synthetic callers in test/personas",
+        "  knowledge push | list | drop the knowledge base the agent answers from",
+        "  memory    what memory kept about a contact, forget it, and hold recall to a golden",
+        "  remember  the goldens memory.remember is held to: what a call teaches, and what it never keeps",
+        "  supervise listen in on a live call: whisper, say, take the line, give it back, end",
+        "  keys      issue | list | revoke the API keys this org's machines run on",
+        "  providers add | rm | list the provider keys this org brought of its own",
+        "  callbacks the numbers people left when every seat was taken: who to call back",
+        "  signup    make an org on Pinecall's cloud and keep its first key",
+        "  login     sign in to a gateway once; the key is kept as a profile in ~/.pinecall",
+        "  config    the gateways this machine knows, and which one the next verb goes to",
+        "  use       point the next verb at another gateway: `pinecall use box`",
+        "  whoami    which gateway, which org, which world, and where this terminal's key came from",
+        "",
+    ];
+    for (const [name, purpose] of Object.entries(PLANNED)) {
+        lines.push(`  ${name.padEnd(10)}${purpose} — not built yet`);
+    }
+    return `${lines.join("\n")}\n`;
+}
+/**
+ * Is this file the process? argv[1] is whatever the shell typed — and for `pinecall` that is the
+ * bin link a package manager wrote inside node_modules, a symlink into the package, while
+ * import.meta.url is the real file it points at. Comparing the two as strings said no, and the CLI
+ * exited 0 having done nothing at all. Both sides are resolved before they are compared.
+ */
+function isEntry() {
+    const entry = process.argv[1];
+    if (entry === undefined)
+        return false;
+    try {
+        return import.meta.url === pathToFileURL(realpathSync(entry)).href;
+    }
+    catch {
+        return false;
+    }
+}
+// Only when this file is the process, so a test may import main() without the process exiting.
+if (isEntry()) {
+    process.exitCode = await main(process.argv.slice(2));
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA,gGAAgG;AAEhG,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAc,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEtD,4FAA4F;AAC5F,+FAA+F;AAC/F,2FAA2F;AAC3F,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAU,CAAC;AAE5Q,gGAAgG;AAChG,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,IAAc,EACd,GAAG,GAA0B,OAAO,CAAC,MAAM,EAC3C,GAAG,GAA0B,OAAO,CAAC,MAAM;IAE3C,8FAA8F;IAC9F,0FAA0F;IAC1F,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAChF,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACnB,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,GAAG,CAAC,KAAK,CAAC,4BAA4B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,6FAA6F;IAC7F,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,iGAAiG;IACjG,iGAAiG;IACjG,8FAA8F;IAC9F,4FAA4F;IAC5F,2FAA2F;IAC3F,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,KAAK,CAAC,aAAa,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,GAAG,GAA0B,OAAO,CAAC,MAAM;IACtF,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5D,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;IACtE,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC;IACpE,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;IACtE,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;IACtE,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC;IACxE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;IACtE,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC;IACxE,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;IACtE,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC;IACpE,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC;IACxE,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC;IACxE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;IAChE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,4FAA4F;IAC5F,mEAAmE;IACnE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC3C,OAAO,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,KAAK;IACnB,MAAM,KAAK,GAAG;QACZ,gCAAgC;QAChC,EAAE;QACF,2DAA2D;QAC3D,6EAA6E;QAC7E,6DAA6D;QAC7D,iFAAiF;QACjF,uFAAuF;QACvF,8EAA8E;QAC9E,+EAA+E;QAC/E,gFAAgF;QAChF,kFAAkF;QAClF,+EAA+E;QAC/E,wEAAwE;QACxE,sEAAsE;QACtE,0EAA0E;QAC1E,sFAAsF;QACtF,kGAAkG;QAClG,sFAAsF;QACtF,2EAA2E;QAC3E,2EAA2E;QAC3E,iFAAiF;QACjF,oEAAoE;QACpE,oFAAoF;QACpF,kFAAkF;QAClF,wEAAwE;QACxE,4FAA4F;QAC5F,EAAE;KACH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,OAAO,kBAAkB,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO;IACd,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,OAAO,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,IAAI,OAAO,EAAE,EAAE,CAAC;IACd,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/cli/keys.d.ts

@@ -0,0 +1,28 @@
+/** `pinecall keys issue | list | revoke`: the API keys this org's machines run on, shown once. */
+import type { Group } from "./groups.js";
+export declare const group: Group;
+/** What the verb can be told besides the argv: where to print, and which environment. */
+export interface Issuing {
+    out?: NodeJS.WritableStream;
+    err?: NodeJS.WritableStream;
+    env?: NodeJS.ProcessEnv;
+}
+/** One row of the listing, as the gateway answers it: the fingerprint, and never the key. */
+interface Listed {
+    fingerprint: string;
+    label: string | null;
+    env: string;
+    scopes: string[];
+    subject: string | null;
+    name: string | null;
+    created_at: string;
+    revoked_at: string | null;
+}
+/** Read the sub-verb and do it: one key minted, the org's keys listed, or one stopped. */
+export declare function run(argv: string[], how?: Issuing): Promise<number>;
+/** The fingerprint as the listing prints it: enough to tell two keys apart, short enough to read. */
+export declare function shortened(fingerprint: string): string;
+/** One row as a terminal reads it: what it is, where it opens, whose it is, and its standing. */
+export declare function aLine(row: Listed): string;
+export {};
+//# sourceMappingURL=keys.d.ts.map

package/dist/cli/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/cli/keys.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAKlG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAsBzC,eAAO,MAAM,KAAK,EAAE,KAkBnB,CAAC;AAEF,yFAAyF;AACzF,MAAM,WAAW,OAAO;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED,6FAA6F;AAC7F,UAAU,MAAM;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAWD,0FAA0F;AAC1F,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,GAAE,OAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAgB5E;AA8ED,qGAAqG;AACrG,wBAAgB,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAErD;AAID,iGAAiG;AACjG,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIzC"}

package/dist/cli/keys.js

@@ -0,0 +1,137 @@
+/** `pinecall keys issue | list | revoke`: the API keys this org's machines run on, shown once. */
+import { parseArgs } from "node:util";
+import { theDoor } from "./env.js";
+import { asked } from "./testing/gateway.js";
+import { refusal } from "./whoami.js";
+const USAGE = `usage: pinecall keys issue --label "<what it is for>" [--env production|sandbox] [--scope <scope>]…
+       pinecall keys list
+       pinecall keys revoke <fingerprint>`;
+// The doors, on this terminal's own key. An org issues its own: the operator's /v1/ops/orgs door
+// is the box's way in and a tenant never holds its key. runtime docs/protocol/gateway-api.md §7.
+const KEYS = "/v1/keys";
+// The one sentence that matters here. It is printed under every key issued, because the table
+// keeps the sha256 and no door, here or anywhere, reads one back.
+const PRINTED_ONCE = "copy it now: the gateway keeps the fingerprint, and the key is never shown again";
+// What a key with no label is in the listing. The column is still a column.
+const NO_LABEL = "—";
+const REVOKED = "revoked";
+const LIVE = "live";
+export const group = {
+    purpose: "issue | list | revoke the API keys this org's machines run on",
+    usage: `${USAGE}
+
+  A key issued here is a MACHINE's: a server, a CI job, a box. It names nobody — people get
+  keys by logging in — and it holds \`app\` in production unless --scope says otherwise, which
+  is the shape a deployment has. Your own key does not hold \`app\` in production: a deployed
+  agent is held by the process somebody put on a box, not by whoever is logged in.
+
+  So this is the last step before a deploy: issue one, put it in the box's environment as
+  \`pinecall login --key-stdin\`, and that \`pinecall run\` is the one that answers your numbers.
+
+  issue prints the key once and never again. list prints fingerprints, labels, worlds, whose
+  each is and whether it is revoked — never a key. revoke takes a fingerprint as list prints it:
+  the first twelve characters, or more of them when two keys share those. The row and its history
+  stay, so the calls it wrote stay readable. A key may not issue a scope
+  it does not itself open.`,
+    run,
+};
+/** Read the sub-verb and do it: one key minted, the org's keys listed, or one stopped. */
+export async function run(argv, how = {}) {
+    const out = how.out ?? process.stdout;
+    const err = how.err ?? process.stderr;
+    const verb = argv[0];
+    const door = theDoor(how.env ?? process.env, err);
+    if (door === undefined)
+        return 1;
+    try {
+        if (verb === "issue")
+            return await issue(argv.slice(1), door, out, err);
+        if (verb === "list")
+            return await list(door, out);
+        if (verb === "revoke")
+            return await revoke(argv[1], door, out, err);
+    }
+    catch (refused) {
+        err.write(`${refusal(refused)}\n`);
+        return 1;
+    }
+    err.write(`${USAGE}\n`);
+    return 2;
+}
+/** Mint one, print it once, and say what it opens — so the next paste is into the right box. */
+async function issue(argv, door, out, err) {
+    const { values } = parseArgs({
+        args: argv,
+        options: {
+            label: { type: "string" },
+            env: { type: "string" },
+            scope: { type: "string", multiple: true },
+        },
+    });
+    if (values.label === undefined) {
+        err.write(`${USAGE}\n`);
+        err.write("missing: --label, because a key you can tell apart is a key you will revoke\n");
+        return 2;
+    }
+    const body = { label: values.label };
+    if (values.env !== undefined)
+        body["env"] = values.env;
+    if (values.scope !== undefined)
+        body["scopes"] = values.scope;
+    const made = await asked(door, KEYS, { method: "POST", body });
+    out.write(`${made.key}\n`);
+    out.write(`  ${made.env} · ${made.label ?? NO_LABEL} · ${made.scopes.join(" · ")}\n`);
+    out.write(`  ${PRINTED_ONCE}\n`);
+    return 0;
+}
+/** Every key of the org, oldest first, as fingerprints — the word `revoke` takes. */
+async function list(door, out) {
+    const rows = await asked(door, KEYS);
+    if (rows.length === 0) {
+        out.write("no key of this org: `pinecall keys issue --label \"…\"` mints the first\n");
+        return 0;
+    }
+    for (const row of rows)
+        out.write(`${aLine(row)}\n`);
+    return 0;
+}
+// The listing prints the first twelve characters, because a full sha256 is unreadable in a
+// column — so the word a person copies off the screen is NOT the word the door takes, and
+// `pinecall keys revoke <what list printed>` answered 404 for every key there was. The door stays
+// strict, and this resolves what was typed against the org's own rows before it knocks.
+const NO_SUCH_FINGERPRINT = "no key of this org begins with {said}: `pinecall keys list` prints them";
+const TWO_KEYS = "{said} names more than one key: {which}";
+/** Stop one key. A fingerprint that is not this org's is the 404 a stranger's is. */
+async function revoke(said, door, out, err) {
+    if (said === undefined) {
+        err.write(`${USAGE}\n`);
+        return 2;
+    }
+    const rows = await asked(door, KEYS);
+    const found = rows.filter((row) => row.fingerprint.startsWith(said));
+    if (found.length === 0) {
+        err.write(`${NO_SUCH_FINGERPRINT.replace("{said}", said)}\n`);
+        return 1;
+    }
+    if (found.length > 1) {
+        const which = found.map((row) => shortened(row.fingerprint)).join(" · ");
+        err.write(`${TWO_KEYS.replace("{said}", said).replace("{which}", which)}\n`);
+        return 1;
+    }
+    const whole = found[0].fingerprint;
+    await asked(door, `${KEYS}/${encodeURIComponent(whole)}/revoke`, { method: "POST" });
+    out.write(`revoked ${shortened(whole)}\n`);
+    return 0;
+}
+/** The fingerprint as the listing prints it: enough to tell two keys apart, short enough to read. */
+export function shortened(fingerprint) {
+    return fingerprint.slice(0, FINGERPRINT_CHARS);
+}
+const FINGERPRINT_CHARS = 12;
+/** One row as a terminal reads it: what it is, where it opens, whose it is, and its standing. */
+export function aLine(row) {
+    const whose = row.name ?? (row.subject === null ? "a machine" : row.subject);
+    const standing = row.revoked_at === null ? LIVE : REVOKED;
+    return `${shortened(row.fingerprint)}  ${row.env.padEnd(11)} ${(row.label ?? NO_LABEL).padEnd(20)} ${whose.padEnd(14)} ${standing}`;
+}
+//# sourceMappingURL=keys.js.map

package/dist/cli/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/cli/keys.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAElG,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAEnC,OAAO,EAAE,KAAK,EAAa,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,MAAM,KAAK,GAAG;;0CAE4B,CAAC;AAE3C,iGAAiG;AACjG,iGAAiG;AACjG,MAAM,IAAI,GAAG,UAAU,CAAC;AAExB,8FAA8F;AAC9F,kEAAkE;AAClE,MAAM,YAAY,GAAG,kFAAkF,CAAC;AAExG,4EAA4E;AAC5E,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,MAAM,OAAO,GAAG,SAAS,CAAC;AAC1B,MAAM,IAAI,GAAG,MAAM,CAAC;AAEpB,MAAM,CAAC,MAAM,KAAK,GAAU;IAC1B,OAAO,EAAE,+DAA+D;IACxE,KAAK,EAAE,GAAG,KAAK;;;;;;;;;;;;;;2BAcU;IACzB,GAAG;CACJ,CAAC;AA8BF,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,GAAG,GAAY,EAAE;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACxE,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,GAAG,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IACxB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,gGAAgG;AAChG,KAAK,UAAU,KAAK,CAClB,IAAc,EACd,IAAU,EACV,GAA0B,EAC1B,GAA0B;IAE1B,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACP,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC1C;KACF,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QACxB,GAAG,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;QAC3F,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAA4B,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC9D,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC;IACvD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAS,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3B,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,IAAI,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtF,GAAG,CAAC,KAAK,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,IAAI,CAAC,IAAU,EAAE,GAA0B;IACxD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAW,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;QACvF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,2FAA2F;AAC3F,0FAA0F;AAC1F,kGAAkG;AAClG,wFAAwF;AACxF,MAAM,mBAAmB,GAAG,yEAAyE,CAAC;AACtG,MAAM,QAAQ,GAAG,yCAAyC,CAAC;AAE3D,qFAAqF;AACrF,KAAK,UAAU,MAAM,CACnB,IAAwB,EACxB,IAAU,EACV,GAA0B,EAC1B,GAA0B;IAE1B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QACxB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAW,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,KAAK,CAAC,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,GAAG,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC;IACpC,MAAM,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACrF,GAAG,CAAC,KAAK,CAAC,WAAW,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,SAAS,CAAC,WAAmB;IAC3C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,iGAAiG;AACjG,MAAM,UAAU,KAAK,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1D,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC;AACtI,CAAC"}

package/dist/cli/knowledge.d.ts

@@ -0,0 +1,35 @@
+/** `pinecall knowledge push | list | drop | eval`: the base the agent answers from, and what a golden says of it. */
+import type { KnowledgeFile, KnowledgePushed, KnowledgeScore } from "@pinecall/protocol";
+import type { Group } from "./groups.js";
+import { type Door } from "./testing/gateway.js";
+/** Where a base is refused before a byte is sent: the three sentences both doors say. */
+export declare const NO_DIRECTORY: (directory: string) => string;
+export declare const NO_MARKDOWN: (directory: string) => string;
+export declare const NO_GOLDEN: (golden: string) => string;
+export declare const AN_EMPTY_GOLDEN: (golden: string) => string;
+export declare const DEFAULT_GOLDEN = "knowledge/golden.json";
+export declare const DEFAULT_DIR = "knowledge/docs";
+export declare const group: Group;
+/** What the verb can be told besides the argv: where to print, and which environment. Tests only. */
+export interface Pushing {
+    out?: NodeJS.WritableStream;
+    err?: NodeJS.WritableStream;
+    env?: NodeJS.ProcessEnv;
+}
+/** Read the sub-verb and do it: the folder to the gateway, the list off it, or one base gone. */
+export declare function run(argv: string[], how?: Pushing): Promise<number>;
+/** The folder, sent whole: the base is replaced and never merged. Both doors push through here. */
+export declare function pushedTo(door: Door, base: string, files: KnowledgeFile[]): Promise<KnowledgePushed>;
+/** Every question of a golden asked of the base, and the two figures code computed from it. */
+export declare function scoredOn(door: Door, base: string, questions: unknown[], k: number | undefined): Promise<KnowledgeScore>;
+/** The questions a golden file holds, or nothing at all when it holds none. */
+export declare function theQuestionsIn(golden: string): unknown[] | null;
+/** What a golden prints: the two figures on one line, then a line per question the base missed. */
+export declare function scoreLines(score: KnowledgeScore): string[];
+/** The one line a push prints: the base, what was sent, what it became, and how long it took. */
+export declare function pushedLine(pushed: KnowledgePushed, files: number): string;
+/** Every *.md under a directory, its subdirectories included, as the wire carries a file: its path relative to the directory, and its text. */
+export declare function markdownUnder(directory: string): KnowledgeFile[];
+/** Unix seconds as a person reads them: the day and the minute, in UTC, no fractions. */
+export declare function dayAndTime(seconds: number): string;
+//# sourceMappingURL=knowledge.d.ts.map

package/dist/cli/knowledge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge.d.ts","sourceRoot":"","sources":["../../src/cli/knowledge.ts"],"names":[],"mappings":"AAAA,qHAAqH;AAMrH,OAAO,KAAK,EAAE,aAAa,EAAiB,eAAe,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAIxG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAS,KAAK,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAQxD,yFAAyF;AACzF,eAAO,MAAM,YAAY,cAAe,MAAM,KAAG,MAAkD,CAAC;AACpG,eAAO,MAAM,WAAW,cAAe,MAAM,KAAG,MAAuD,CAAC;AACxG,eAAO,MAAM,SAAS,WAAY,MAAM,KAAG,MAAkE,CAAC;AAC9G,eAAO,MAAM,eAAe,WAAY,MAAM,KAAG,MAC2B,CAAC;AAI7E,eAAO,MAAM,cAAc,0BAA0B,CAAC;AAItD,eAAO,MAAM,WAAW,mBAAmB,CAAC;AAE5C,eAAO,MAAM,KAAK,EAAE,KAcnB,CAAC;AAEF,qGAAqG;AACrG,MAAM,WAAW,OAAO;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED,iGAAiG;AACjG,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,GAAE,OAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAwB5E;AA2ED,mGAAmG;AACnG,wBAAsB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAKzG;AAED,+FAA+F;AAC/F,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,OAAO,EAAE,EACpB,CAAC,EAAE,MAAM,GAAG,SAAS,GACpB,OAAO,CAAC,cAAc,CAAC,CAKzB;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,EAAE,GAAG,IAAI,CAG/D;AAED,mGAAmG;AACnG,wBAAgB,UAAU,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,EAAE,CAW1D;AAED,iGAAiG;AACjG,wBAAgB,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,+IAA+I;AAC/I,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,EAAE,CAQhE;AAED,yFAAyF;AACzF,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAElD"}