publishport-opencli 1.0.0

package/clis/slock/attachment-upload.js

@@ -0,0 +1,34 @@
+import $ from"node:fs";import D from"node:path";import{cli as X,Strategy as Y}from"@jackwener/opencli/registry";import{ArgumentError as z}from"@jackwener/opencli/errors";import{authHeadersFragment as I,channelResolveFragment as P}from"./in-page.js";import{dispatchEvaluateResult as R}from"./errors.js";import{SLOCK_SITE as T,SLOCK_DOMAIN as y,SLOCK_HOME_URL as B,SLOCK_API_BASE as C}from"./shared.js";const N=52428800;X({site:T,name:"attachment-upload",access:"write",description:"Upload a local file to Slock attachments. Prints the attachmentId for use with `message-send --attach`.",domain:y,strategy:Y.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"file",positional:!0,required:!0,help:"Local file path to upload (single file; max 50 MB)"},{name:"channel",positional:!0,required:!0,help:"channelId UUID or #name — server requires the attachment be scoped to a channel"},{name:"server",help:"Override active server slug"}],columns:["attachmentId","filename","mimeType","sizeBytes"],func:async(Q,J)=>{const V=String(J.file??"").trim();if(!V)throw new z("file path required");const Z=String(J.channel??"").trim();if(!Z)throw new z("channel required (UUID or #name); server rejects uploads without channelId");const x=D.resolve(V);let G;try{G=$.statSync(x)}catch(q){throw new z(`file not readable: ${x} (${q.message})`)}if(!G.isFile())throw new z(`not a regular file: ${x}`);if(G.size===0)throw new z(`file is empty: ${x}`);if(G.size>N)throw new z(`file is ${G.size} bytes, exceeds server limit ${N} (50 MiB). Split or compress before upload.`);const U=$.readFileSync(x),W=D.basename(x),v=U.toString("base64");await Q.goto(B);const F=`
+      ${I({serverScoped:!0,serverIdOverride:J.server})}
+      ${P(Z)}
+      // multipart wants the browser to set its own boundary — strip content-type.
+      const uploadHeaders = { authorization: headers.authorization, accept: headers.accept };
+      if (headers['x-server-id']) uploadHeaders['x-server-id'] = headers['x-server-id'];
+      // Rebuild File from base64 → Uint8Array → Blob → File. The base64 string
+      // is the only path across the page boundary; JSON.stringify it (caller did)
+      // so injection isn't possible.
+      const b64 = ${JSON.stringify(v)};
+      const bin = atob(b64);
+      const u8 = new Uint8Array(bin.length);
+      for (let i = 0; i < bin.length; i++) u8[i] = bin.charCodeAt(i);
+      const blob = new Blob([u8]);
+      const file = new File([blob], ${JSON.stringify(W)});
+      const fd = new FormData();
+      fd.append('files', file);
+      // qatester live-verified F4: server returns 400 "channelId is required"
+      // without this field. Must travel as a multipart text part.
+      fd.append('channelId', channelId);
+      const res = await fetch('${C}/attachments/upload', {
+        method: 'POST', credentials: 'include', headers: uploadHeaders, body: fd,
+      });
+      if (res.status === 401) return { kind: 'auth', detail: '/attachments/upload returned 401' };
+      if (res.status === 413) {
+        const j = await res.json().catch(() => ({}));
+        return { kind: 'http', status: 413, where: '/attachments/upload (file too large; maxBytes=' + (j.maxBytes ?? '?') + ')' };
+      }
+      if (!res.ok) return { kind: 'http', status: res.status, where: '/attachments/upload' };
+      const data = await res.json().catch(() => ({}));
+      const list = Array.isArray(data.attachments) ? data.attachments : [];
+      if (!list.length) return { kind: 'http', status: 200, where: '/attachments/upload (no attachments in response)' };
+      return { kind: 'ok', rows: list };
+    `,H=await Q.evaluate(`(async () => { ${F} })()`);return R(H).map((q)=>({attachmentId:q.id??q.attachmentId??null,filename:q.filename??q.name??null,mimeType:q.mimeType??q.contentType??null,sizeBytes:typeof q.sizeBytes==="number"?q.sizeBytes:q.size??null}))}});

package/clis/slock/attachment-url.js

@@ -0,0 +1 @@
+import{cli as i,Strategy as u}from"@jackwener/opencli/registry";import{ArgumentError as c,CommandExecutionError as d}from"@jackwener/opencli/errors";import{buildFetchSnippet as m}from"./in-page.js";import{dispatchEvaluateResult as l}from"./errors.js";import{SLOCK_SITE as h,SLOCK_DOMAIN as p,SLOCK_HOME_URL as f}from"./shared.js";import{UUID_RE as v}from"./resolve.js";i({site:h,name:"attachment-url",access:"read",description:"Get a short-lived signed CDN URL for an attachment (does not download bytes).",domain:p,strategy:u.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"attachmentId",positional:!0,required:!0,help:"Attachment UUID"},{name:"server",help:"Override active server slug"}],columns:["attachmentId","url","expiresAt"],func:async(a,s)=>{const t=String(s.attachmentId??"").trim();if(!v.test(t))throw new c(`attachmentId "${t}" is not a UUID`);await a.goto(f);const n=m({method:"GET",path:`/attachments/${encodeURIComponent(t)}/url`,serverScoped:!0,serverIdOverride:s.server}),o=await a.evaluate(`(async () => { ${n} })()`),e=l(o),r=Array.isArray(e)?e[0]:e;if(!r?.url)throw new d(`no signed url returned for attachment ${t}`);return[{attachmentId:t,url:r?.url??null,expiresAt:r?.expiresAt??null}]}});

package/clis/slock/auth-verify.js

@@ -0,0 +1 @@
+import{AuthRequiredError as P,CommandExecutionError as Q}from"@jackwener/opencli/errors";import{buildFetchSnippet as T}from"./in-page.js";import{SLOCK_DOMAIN as V,SLOCK_HOME_URL as W}from"./shared.js";export async function verifySlockSession(G){await G.goto(W);const J=T({method:"GET",path:"/auth/me",serverScoped:!1}),z=await G.evaluate(`(async () => { ${J} })()`);if(z&&z.kind==="auth")throw new P(V,z.detail);if(!z||z.kind!=="ok")throw new Q(`unexpected /auth/me result: ${JSON.stringify(z)}`);const B=z.rows??{};return{id:B.id??null,name:B.name??B.displayName??B.username??null,email:B.email??null}}

package/clis/slock/bookmark-add.js

@@ -0,0 +1,11 @@
+import{cli as d,Strategy as i}from"@jackwener/opencli/registry";import{ArgumentError as n}from"@jackwener/opencli/errors";import{authHeadersFragment as m}from"./in-page.js";import{dispatchEvaluateResult as c}from"./errors.js";import{SLOCK_SITE as u,SLOCK_DOMAIN as h,SLOCK_HOME_URL as g,SLOCK_API_BASE as l}from"./shared.js";import{assertMessageIdShape as p}from"./resolve.js";d({site:u,name:"bookmark-add",access:"write",description:"Bookmark a message (POST /channels/saved). Requires full messageId UUID.",domain:h,strategy:i.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"messageId",positional:!0,required:!0,help:"Full messageId UUID (short ids rejected)"},{name:"server",help:"Override active server"}],columns:["messageId","saved"],func:async(r,t)=>{let e;try{e=p(String(t.messageId??""))}catch(s){throw new n(s.message)}await r.goto(g);const a=`
+      ${m({serverScoped:!0,serverIdOverride:t.server})}
+      const res = await fetch('${l}/channels/saved', { method:'POST', credentials:'include', headers, body: JSON.stringify({ messageId: ${JSON.stringify(e)} }) });
+      if (!res.ok) return { kind: res.status===401?'auth':'http', status: res.status, where:'/channels/saved' };
+      const data = await res.json().catch(() => ({}));
+      // F3-a — qatester live dump: response is { ok: true } with NO id field.
+      // The bookmark is keyed by messageId on the server side, so there is no
+      // separate bookmark id to surface; we report saved=true and echo the
+      // message id back.
+      return { kind: 'ok', rows: [{ saved: data && data.ok === true, messageId: ${JSON.stringify(e)} }] };
+    `,o=await r.evaluate(`(async () => { ${a} })()`);return c(o).map((s)=>({messageId:s.messageId??e,saved:s.saved===!0}))}});

package/clis/slock/bookmark-list.js

@@ -0,0 +1,10 @@
+import{cli as d,Strategy as m}from"@jackwener/opencli/registry";import{CommandExecutionError as c}from"@jackwener/opencli/errors";import{authHeadersFragment as f}from"./in-page.js";import{dispatchEvaluateResult as l}from"./errors.js";import{SLOCK_SITE as p,SLOCK_DOMAIN as u,SLOCK_HOME_URL as v,SLOCK_API_BASE as h}from"./shared.js";import{parseNonNegativeInteger as y,parsePositiveInteger as g}from"./resolve.js";d({site:p,name:"bookmark-list",access:"read",description:"List bookmarks (saved messages) in the active server",domain:u,strategy:m.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"limit",type:"int",default:50,help:"Max results"},{name:"offset",type:"int",default:0,help:"Offset"},{name:"server",help:"Override active server"}],columns:["id","messageId","content","savedAt"],func:async(r,t)=>{const s=g(t.limit,"--limit",{defaultValue:50}),o=y(t.offset,"--offset",{defaultValue:0});await r.goto(v);const i=`
+      ${f({serverScoped:!0,serverIdOverride:t.server})}
+      const res = await fetch('${h}/channels/saved?limit=' + encodeURIComponent(${JSON.stringify(s)}) + '&offset=' + encodeURIComponent(${JSON.stringify(o)}), { credentials:'include', headers });
+      if (!res.ok) return { kind: res.status===401?'auth':'http', status: res.status, where:'/channels/saved' };
+      const data = await res.json();
+      // F3-b — qatester live dump: shape is { saved: [...], hasMore }.
+      // Unwrap .saved first; fall back to legacy .bookmarks / .data /
+      // bare array for forward-compat.
+      return { kind: 'ok', rows: Array.isArray(data) ? data : (data.saved || data.bookmarks || data.data || []) };
+    `,n=await r.evaluate(`(async () => { ${i} })()`),a=l(n);if(!Array.isArray(a))throw new c(`expected array of rows from server, got ${typeof a} (contract drift?)`);return a.map((e)=>({id:e.id??"",messageId:e.messageId??"",content:e.content??e.message?.content??"",savedAt:e.savedAt??e.createdAt??""}))}});

package/clis/slock/bookmark-remove.js

@@ -0,0 +1,7 @@
+import{cli as n,Strategy as i}from"@jackwener/opencli/registry";import{ArgumentError as d}from"@jackwener/opencli/errors";import{authHeadersFragment as m}from"./in-page.js";import{dispatchEvaluateResult as u}from"./errors.js";import{SLOCK_SITE as c,SLOCK_DOMAIN as v,SLOCK_HOME_URL as p,SLOCK_API_BASE as h}from"./shared.js";import{assertMessageIdShape as l}from"./resolve.js";n({site:c,name:"bookmark-remove",access:"write",description:"Remove a bookmark (DELETE /channels/saved/:messageId). 404 is treated as already-removed.",domain:v,strategy:i.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"messageId",positional:!0,required:!0,help:"Full messageId UUID"},{name:"server",help:"Override active server"}],columns:["messageId","removed","note"],func:async(t,s)=>{let e;try{e=l(String(s.messageId??""))}catch(o){throw new d(o.message)}await t.goto(p);const a=`
+      ${m({serverScoped:!0,serverIdOverride:s.server})}
+      const res = await fetch('${h}/channels/saved/' + encodeURIComponent(${JSON.stringify(e)}), { method:'DELETE', credentials:'include', headers });
+      if (res.status === 404) return { kind: 'http', status: 404, where:'/channels/saved/:id' };
+      if (!res.ok) return { kind: res.status===401?'auth':'http', status: res.status, where:'/channels/saved/:id' };
+      return { kind: 'ok', rows: [{ removed: true }] };
+    `,r=await t.evaluate(`(async () => { ${a} })()`);if(r&&r.kind==="http"&&r.status===404)return[{messageId:e,removed:!0,note:"idempotent (already absent)"}];return u(r).map(()=>({messageId:e,removed:!0,note:""}))}});

package/clis/slock/channel-action.js

@@ -0,0 +1 @@
+import{cli as Y,Strategy as Z}from"@jackwener/opencli/registry";import{ArgumentError as z}from"@jackwener/opencli/errors";import{buildChannelScopedSnippet as $}from"./in-page.js";import{dispatchEvaluateResult as D}from"./errors.js";import{SLOCK_SITE as N,SLOCK_DOMAIN as T,SLOCK_HOME_URL as U}from"./shared.js";export function makeChannelActionCommand({name:G,verb:J,resultLabel:P,description:Q,archivedHint:V=!1}){Y({site:N,name:G,access:"write",description:Q,domain:T,strategy:Z.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"channel",positional:!0,required:!0,help:"channelId UUID or #name"},{name:"server",help:"Override active server"}],columns:["channel","id","archivedAt","result"],func:async(B,F)=>{const q=String(F.channel??"").trim();if(!q)throw new z("channel required");await B.goto(U);const W=$({channelInput:q,method:"POST",pathSuffix:`/${J}`,serverIdOverride:F.server}),X=await B.evaluate(`(async () => { ${W} })()`);let x;try{x=D(X)}catch(f){if(V&&f instanceof z&&/no channel matches/.test(f.message))throw new z(`${f.message}. Archived channels are excluded from the name lookup; pass the channelId UUID instead (find it in the archived channel's URL in the Slock app).`);throw f}return[{channel:q,id:x?.id??"",archivedAt:x?.archivedAt??null,result:P}]}})}

package/clis/slock/channel-archive.js

@@ -0,0 +1 @@
+import{makeChannelActionCommand as e}from"./channel-action.js";e({name:"channel-archive",verb:"archive",resultLabel:"archived",description:"Archive a channel — admin only (POST /channels/:id/archive)"});

package/clis/slock/channel-create.js

@@ -0,0 +1 @@
+import{cli as W,Strategy as X}from"@jackwener/opencli/registry";import{ArgumentError as J}from"@jackwener/opencli/errors";import{buildFetchSnippet as Y}from"./in-page.js";import{dispatchEvaluateResult as Z}from"./errors.js";import{SLOCK_SITE as $,SLOCK_DOMAIN as v,SLOCK_HOME_URL as D}from"./shared.js";W({site:$,name:"channel-create",access:"write",description:"Create a channel — admin only (POST /channels/). Public unless --private.",domain:v,strategy:X.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"name",positional:!0,required:!0,help:"Channel name"},{name:"description",help:"Channel description / topic (≤500 chars)"},{name:"private",type:"bool",default:!1,help:"Create a private channel instead of public"},{name:"server",help:"Override active server"}],columns:["id","name","type","result"],func:async(B,f)=>{const x=String(f.name??"").trim();if(!x)throw new J("name required");const q=f.description!==void 0?String(f.description):void 0;if(q!==void 0&&q.length>500)throw new J("--description must be at most 500 characters");const G={name:x,visibility:f.private?"private":"public"};if(q!==void 0)G.description=q;await B.goto(D);const Q=Y({method:"POST",path:"/channels/",body:G,serverScoped:!0,serverIdOverride:f.server}),V=await B.evaluate(`(async () => { ${Q} })()`),z=Z(V);return[{id:z?.id??"",name:z?.name??x,type:z?.type??"",result:"created"}]}});

package/clis/slock/channel-files.js

@@ -0,0 +1 @@
+import{cli as o,Strategy as c}from"@jackwener/opencli/registry";import{ArgumentError as d,CommandExecutionError as p}from"@jackwener/opencli/errors";import{buildChannelScopedSnippet as u}from"./in-page.js";import{dispatchEvaluateResult as f}from"./errors.js";import{SLOCK_SITE as h,SLOCK_DOMAIN as y,SLOCK_HOME_URL as I}from"./shared.js";import{parsePositiveInteger as v}from"./resolve.js";o({site:h,name:"channel-files",access:"read",description:"List files shared in a channel (GET /channels/:id/files)",domain:y,strategy:c.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"channel",positional:!0,required:!0,help:"channelId UUID or #name"},{name:"limit",type:"int",default:50,help:"Max files"},{name:"server",help:"Override active server"}],columns:["id","filename","mimeType","sizeBytes","messageId","createdAt"],func:async(n,t)=>{const a=String(t.channel??"").trim();if(!a)throw new d("channel required");const s=v(t.limit,"--limit",{defaultValue:50});await n.goto(I);const l=u({channelInput:a,method:"GET",pathSuffix:"/files",query:`?limit=${s}`,serverIdOverride:t.server}),m=await n.evaluate(`(async () => { ${l} })()`),i=f(m),r=Array.isArray(i)?i:i.files||[];if(!Array.isArray(r))throw new p(`expected files array, got ${typeof r} (contract drift?)`);return r.map((e)=>({id:e.id??"",filename:e.filename??"",mimeType:e.mimeType??"",sizeBytes:typeof e.sizeBytes==="number"?e.sizeBytes:null,messageId:e.messageId??"",createdAt:e.createdAt??""}))}});

package/clis/slock/channel-info.js

@@ -0,0 +1 @@
+import{cli as o,Strategy as c}from"@jackwener/opencli/registry";import{ArgumentError as s}from"@jackwener/opencli/errors";import{buildChannelScopedSnippet as l}from"./in-page.js";import{dispatchEvaluateResult as d}from"./errors.js";import{SLOCK_SITE as p,SLOCK_DOMAIN as m,SLOCK_HOME_URL as h}from"./shared.js";o({site:p,name:"channel-info",access:"read",description:"Show one channel's details (GET /channels/:id)",domain:m,strategy:c.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"channel",positional:!0,required:!0,help:"channelId UUID or #name"},{name:"server",help:"Override active server"}],columns:["id","name","type","topic","joined","archivedAt"],func:async(n,r)=>{const t=String(r.channel??"").trim();if(!t)throw new s("channel required");await n.goto(h);const i=l({channelInput:t,method:"GET",serverIdOverride:r.server}),a=await n.evaluate(`(async () => { ${i} })()`),e=d(a)||{};return[{id:e.id??"",name:e.name??e.slug??"",type:e.type??"",topic:e.topic??e.description??"",joined:e.joined??null,archivedAt:e.archivedAt??null}]}});

package/clis/slock/channel-join.js

@@ -0,0 +1 @@
+import{makeChannelActionCommand as n}from"./channel-action.js";n({name:"channel-join",verb:"join",resultLabel:"joined",description:"Join a public channel (POST /channels/:id/join)"});

package/clis/slock/channel-leave.js

@@ -0,0 +1 @@
+import{makeChannelActionCommand as e}from"./channel-action.js";e({name:"channel-leave",verb:"leave",resultLabel:"left",description:"Leave a channel (POST /channels/:id/leave)"});

package/clis/slock/channel-list.js

@@ -0,0 +1 @@
+import{cli as a,Strategy as n}from"@jackwener/opencli/registry";import{CommandExecutionError as c}from"@jackwener/opencli/errors";import{buildFetchSnippet as m}from"./in-page.js";import{dispatchEvaluateResult as p}from"./errors.js";import{SLOCK_SITE as l,SLOCK_DOMAIN as d,SLOCK_HOME_URL as u}from"./shared.js";a({site:l,name:"channel-list",access:"read",description:"List channels in the active slock server",domain:d,strategy:n.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"server",help:"Override active server (slug or id) for this call"}],columns:["id","name","topic"],func:async(t,s)=>{await t.goto(u);const i=m({method:"GET",path:"/channels/",serverScoped:!0,serverIdOverride:s.server}),o=await t.evaluate(`(async () => { ${i} })()`),r=p(o);if(!Array.isArray(r))throw new c(`expected array of rows from server, got ${typeof r} (contract drift?)`);return r.map((e)=>({id:e.id??"",name:e.name??e.slug??"",topic:e.topic??""}))}});

package/clis/slock/channel-mark.js

@@ -0,0 +1 @@
+import{cli as v,Strategy as D}from"@jackwener/opencli/registry";import{ArgumentError as V}from"@jackwener/opencli/errors";import{buildChannelScopedSnippet as H}from"./in-page.js";import{dispatchEvaluateResult as N}from"./errors.js";import{SLOCK_SITE as P,SLOCK_DOMAIN as U,SLOCK_HOME_URL as I}from"./shared.js";v({site:P,name:"channel-mark",access:"write",description:"Mark a channel read (default), read up to --seq, or --unread.",domain:U,strategy:D.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"channel",positional:!0,required:!0,help:"channelId UUID or #name"},{name:"seq",type:"int",help:"Mark read up to this seq (omit for read-all)"},{name:"unread",type:"bool",default:!1,help:"Mark the channel unread instead of read"},{name:"server",help:"Override active server"}],columns:["channel","action","result"],func:async(W,z)=>{const Q=String(z.channel??"").trim();if(!Q)throw new V("channel required");const X=z.seq!==void 0&&z.seq!==null&&z.seq!=="";if(z.unread&&X)throw new V("--unread and --seq are mutually exclusive");let B,Y,F;if(z.unread){B="/unread";F="unread"}else if(X){const J=Number(z.seq);if(!Number.isInteger(J)||J<=0)throw new V(`--seq must be a positive integer (got "${z.seq}")`);B="/read";Y={seq:J};F=`read-to-${J}`}else{B="/read-all";F="read-all"}await W.goto(I);const Z=H({channelInput:Q,method:"POST",pathSuffix:B,body:Y,serverIdOverride:z.server}),$=await W.evaluate(`(async () => { ${Z} })()`),G=N($);return[{channel:Q,action:F,result:G?.seq!==void 0?`seq=${G.seq}`:G?.unreadCount!==void 0?`unreadCount=${G.unreadCount}`:"ok"}]}});

package/clis/slock/channel-members.js

@@ -0,0 +1 @@
+import{cli as V,Strategy as W}from"@jackwener/opencli/registry";import{ArgumentError as X}from"@jackwener/opencli/errors";import{buildChannelScopedSnippet as Y}from"./in-page.js";import{dispatchEvaluateResult as Z}from"./errors.js";import{SLOCK_SITE as $,SLOCK_DOMAIN as v,SLOCK_HOME_URL as D}from"./shared.js";V({site:$,name:"channel-members",access:"read",description:"List members of a channel",domain:v,strategy:W.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"channel",positional:!0,required:!0,help:"channelId UUID or #name"},{name:"server",help:"Override active server (slug or id)"}],columns:["userId","name","kind","role"],func:async(F,G)=>{const J=String(G.channel??"").trim();if(!J)throw new X("channel required");await F.goto(D);const P=Y({channelInput:J,method:"GET",pathSuffix:"/members",serverIdOverride:G.server}),Q=await F.evaluate(`(async () => { ${P} })()`),x=Z(Q);let B=[],z=[];if(Array.isArray(x))z=x;else if(x){B=Array.isArray(x.agents)?x.agents:[];z=Array.isArray(x.humans)?x.humans:[];if(!B.length&&!z.length){const q=x.members||x.data||[];z=Array.isArray(q)?q:[]}}return[...z.map((q)=>({userId:q.userId??q.id??"",name:q.name??q.username??q.displayName??"",kind:"human",role:q.role??""})),...B.map((q)=>({userId:q.userId??q.id??"",name:q.name??q.username??q.displayName??"",kind:"agent",role:q.status??q.activity??""}))]}});

package/clis/slock/channel-unarchive.js

@@ -0,0 +1 @@
+import{makeChannelActionCommand as n}from"./channel-action.js";n({name:"channel-unarchive",verb:"unarchive",resultLabel:"unarchived",description:"Unarchive a channel — admin only (POST /channels/:id/unarchive). "+"#name lookups exclude archived channels; pass the channelId UUID for archived ones.",archivedHint:!0});

package/clis/slock/dm-list.js

@@ -0,0 +1 @@
+import{cli as n,Strategy as o}from"@jackwener/opencli/registry";import{CommandExecutionError as d}from"@jackwener/opencli/errors";import{buildFetchSnippet as m}from"./in-page.js";import{dispatchEvaluateResult as p}from"./errors.js";import{SLOCK_SITE as c,SLOCK_DOMAIN as l,SLOCK_HOME_URL as h}from"./shared.js";n({site:c,name:"dm-list",access:"read",description:"List DM channels in the active server (GET /channels/dm)",domain:l,strategy:o.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"server",help:"Override active server (slug or id)"}],columns:["channelId","peerName","peerId","createdAt"],func:async(t,a)=>{await t.goto(h);const s=m({method:"GET",path:"/channels/dm",serverScoped:!0,serverIdOverride:a.server}),i=await t.evaluate(`(async () => { ${s} })()`),r=p(i);if(!Array.isArray(r))throw new d(`expected array of DM channels, got ${typeof r} (contract drift?)`);return r.map((e)=>({channelId:e.id??"",peerName:e.peerDisplayName??e.peerName??e.name??"",peerId:e.peerId??"",createdAt:e.createdAt??""}))}});

package/clis/slock/errors.js

@@ -0,0 +1 @@
+import{ArgumentError as z,AuthRequiredError as B,CommandExecutionError as y,ConfigError as F}from"@jackwener/opencli/errors";import{SLOCK_DOMAIN as G}from"./shared.js";export function dispatchEvaluateResult(b){switch(b&&b.kind){case"ok":return b.rows;case"auth":throw new B(G,b.detail);case"http":throw new y(`HTTP ${b.status} from ${b.where}`);case"no-server":throw new F(b.detail,"Run `opencli slock server-use <slug>` to set the active server.");case"unresolvable":throw new z(b.detail);case"no-thread":throw new y(`no-thread should be handled by caller, not dispatcher: ${b.parent}`);default:throw new y(`unexpected evaluate envelope: ${JSON.stringify(b)}`)}}

package/clis/slock/in-page.js

@@ -0,0 +1,113 @@
+import{UUID_RE as T}from"./resolve.js";import{SLOCK_API_BASE as Q}from"./shared.js";export function authHeadersFragment({serverScoped:k=!1,serverIdOverride:z=null}={}){const G=z?JSON.stringify(z):"null",M="^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",N=k?`
+    if (!sid) {
+      // Determine the slug to look up: override slug (if not a UUID) wins,
+      // otherwise fall back to the active slug from localStorage.
+      const __override = ${G};
+      const __slug = __override ?? localStorage.getItem('slock_last_server_slug');
+      if (!__slug) return { kind: 'no-server', detail: 'no --server override and localStorage.slock_last_server_slug is empty; run \`slock server-use <slug>\` or pass --server <slug>' };
+      const sres = await fetch('${Q}/servers/', {
+        method: 'GET', credentials: 'include',
+        headers: { authorization: 'Bearer ' + token, accept: 'application/json' },
+      });
+      if (sres.status === 401) return { kind: 'auth', detail: '/servers/ returned 401' };
+      if (!sres.ok) return { kind: 'http', status: sres.status, where: '/servers/' };
+      const slist = await sres.json();
+      const __arr = Array.isArray(slist) ? slist : [];
+      const sm = __arr.find((s) => s && s.slug === __slug);
+      if (!sm) {
+        const __choices = __arr.map((s) => s && s.slug).filter(Boolean).join(', ');
+        return { kind: 'no-server', detail: 'slug "' + __slug + '" not in /servers/' + (__override ? ' (--server)' : ' (active)') + '. Known slugs: ' + __choices };
+      }
+      sid = sm.id;
+    }`:"";return`
+    // Page-readiness loop: page.goto can return before the SPA's first navigation
+    // settles, leaving location on an opaque interstitial (about:blank, redirector,
+    // etc.). Reading localStorage there throws SecurityError "Access is denied".
+    // Worse, qatester also live-flagged silent-empty fetches when the SPA had
+    // navigated to app.slock.ai but had not yet hydrated the token into
+    // localStorage — fetches then went out with an empty Authorization and the
+    // server happily returned [].
+    //
+    // The loop polls BOTH: (a) location.href is on app.slock.ai (so localStorage
+    // is no longer opaque) and (b) localStorage.slock_access_token is present
+    // (so the SPA finished hydrating). Reading localStorage inside try/catch
+    // because (a) and (b) can be partially satisfied — reading localStorage on
+    // an opaque origin still throws even after a redirect starts.
+    //
+    // 3s ceiling so a real navigation failure fails loud instead of hanging.
+    let __waited = 0;
+    let __reason = 'never reached app.slock.ai';
+    while (true) {
+      let __onHost = false;
+      try { __onHost = location.href.indexOf('app.slock.ai') !== -1; } catch (e) {}
+      if (__onHost) {
+        try {
+          if (localStorage.getItem('slock_access_token')) break;
+          __reason = 'on app.slock.ai but localStorage.slock_access_token not yet hydrated';
+        } catch (e) {
+          __reason = 'localStorage access threw even on app.slock.ai: ' + (e && e.message);
+        }
+      }
+      if (__waited >= 3000) {
+        let __loc;
+        try { __loc = location.href; } catch (e) { __loc = '(unreadable)'; }
+        return { kind: 'http', status: 0, where: 'page-readiness timeout: waited 3000ms (' + __reason + '), location=' + __loc };
+      }
+      await new Promise((r) => setTimeout(r, 50));
+      __waited += 50;
+    }
+    const token = localStorage.getItem('slock_access_token');
+    if (!token) return { kind: 'auth', detail: 'no access token in localStorage' };
+    let sid = ${!!z&&new RegExp(M).test(String(z))?G:"null"};${N}
+    const headers = {
+      authorization: 'Bearer ' + token,
+      accept: 'application/json',
+      'content-type': 'application/json',
+    };
+    if (sid) headers['x-server-id'] = sid;
+  `}export function channelResolveFragment(k){const z=String(k??""),G=T.test(z),M=JSON.stringify(z),N=JSON.stringify(z.replace(/^#/,"").toLowerCase());return`
+    let channelId;
+    if (${G}) {
+      channelId = ${M};
+    } else {
+      const cres = await fetch('${Q}/channels/', { credentials: 'include', headers });
+      if (cres.status === 401) return { kind: 'auth', detail: '/channels/ returned 401' };
+      if (!cres.ok) return { kind: 'http', status: cres.status, where: '/channels/' };
+      const carr = await cres.json();
+      const clist = Array.isArray(carr) ? carr : (carr.channels || carr.data || []);
+      const chit = clist.find((c) => (c.name || c.slug || '').toLowerCase() === ${N});
+      if (!chit) return { kind: 'unresolvable', detail: 'no channel matches ' + ${N} };
+      channelId = chit.id;
+    }
+  `}export function resolveShortIdFragment({shortIdVar:k,parentChannelIdVar:z,contextDescription:G="''"}){return`
+    if (!/^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/.test(${k})) {
+      const cx = await fetch('${Q}/messages/context/' + encodeURIComponent(${k}) + '?channelId=' + encodeURIComponent(${z}), { credentials:'include', headers });
+      if (cx.status === 404) {
+        const __ctx = ${G};
+        return { kind: 'unresolvable', detail: 'short id "' + ${k} + '" not found' + (__ctx ? ' in #' + __ctx : '') };
+      }
+      if (!cx.ok) return { kind: cx.status===401?'auth':'http', status: cx.status, where:'/messages/context' };
+      const cxd = await cx.json();
+      // CRITICAL — read targetMessageId, NOT m.message.id (Phase 7.1).
+      ${k} = cxd.targetMessageId;
+    }
+  `}export function buildFetchSnippet(k){const z=JSON.stringify(k.method),G=JSON.stringify(Q+k.path),M=k.body===void 0?"undefined":JSON.stringify(JSON.stringify(k.body));return`
+    ${authHeadersFragment({serverScoped:k.serverScoped,serverIdOverride:k.serverIdOverride})}
+    const res = await fetch(${G}, {
+      method: ${z}, credentials: 'include', headers,
+      body: ${M},
+    });
+    if (res.status === 401) return { kind: 'auth', detail: ${G} + ' returned 401' };
+    if (!res.ok) return { kind: 'http', status: res.status, where: ${G} };
+    const data = await res.json().catch(() => ({}));
+    return { kind: 'ok', rows: data };
+  `}export function buildChannelScopedSnippet(k){const z=JSON.stringify(k.method),G=JSON.stringify(k.pathSuffix||""),M=k.query?JSON.stringify(k.query):"''",N=k.body===void 0?"undefined":JSON.stringify(JSON.stringify(k.body));return`
+    ${authHeadersFragment({serverScoped:!0,serverIdOverride:k.serverIdOverride})}
+    ${channelResolveFragment(k.channelInput)}
+    const __url = '${Q}/channels/' + encodeURIComponent(channelId) + ${G} + ${M};
+    const res = await fetch(__url, { method: ${z}, credentials: 'include', headers, body: ${N} });
+    if (res.status === 401) return { kind: 'auth', detail: __url + ' returned 401' };
+    if (!res.ok) return { kind: 'http', status: res.status, where: __url };
+    const data = await res.json().catch(() => ({}));
+    return { kind: 'ok', rows: data };
+  `}

package/clis/slock/inbox-done.js

@@ -0,0 +1,9 @@
+import{cli as Q,Strategy as V}from"@jackwener/opencli/registry";import{ArgumentError as W}from"@jackwener/opencli/errors";import{authHeadersFragment as X,channelResolveFragment as Z}from"./in-page.js";import{dispatchEvaluateResult as $}from"./errors.js";import{SLOCK_SITE as f,SLOCK_DOMAIN as x,SLOCK_HOME_URL as N,SLOCK_API_BASE as Y}from"./shared.js";Q({site:f,name:"inbox-done",access:"write",description:"Mark one chat as done / clear it from the inbox (POST /channels/inbox/done)",domain:x,strategy:V.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"channel",positional:!0,required:!0,help:"channelId UUID or #name"},{name:"server",help:"Override active server"}],columns:["channel","result"],func:async(q,z)=>{const b=String(z.channel??"").trim();if(!b)throw new W("channel required");await q.goto(N);const G=`
+      ${X({serverScoped:!0,serverIdOverride:z.server})}
+      ${Z(b)}
+      const res = await fetch('${Y}/channels/inbox/done', { method:'POST', credentials:'include', headers, body: JSON.stringify({ channelId }) });
+      if (res.status === 401) return { kind: 'auth', detail: '/channels/inbox/done returned 401' };
+      if (!res.ok) return { kind: 'http', status: res.status, where:'/channels/inbox/done' };
+      const data = await res.json().catch(() => ({}));
+      return { kind: 'ok', rows: data };
+    `,J=await q.evaluate(`(async () => { ${G} })()`);$(J);return[{channel:b,result:"done"}]}});

package/clis/slock/inbox-read-all.js

@@ -0,0 +1 @@
+import{cli as s,Strategy as n}from"@jackwener/opencli/registry";import{buildFetchSnippet as i}from"./in-page.js";import{dispatchEvaluateResult as o}from"./errors.js";import{SLOCK_SITE as l,SLOCK_DOMAIN as d,SLOCK_HOME_URL as c}from"./shared.js";s({site:l,name:"inbox-read-all",access:"write",description:"Mark the entire inbox as read (POST /channels/inbox/read-all)",domain:d,strategy:n.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"server",help:"Override active server"}],columns:["result","markedCount"],func:async(e,r)=>{await e.goto(c);const t=i({method:"POST",path:"/channels/inbox/read-all",serverScoped:!0,serverIdOverride:r.server}),a=await e.evaluate(`(async () => { ${t} })()`);return[{result:"read-all",markedCount:o(a)?.markedCount??null}]}});

package/clis/slock/inbox.js

@@ -0,0 +1 @@
+import{cli as Z,Strategy as $}from"@jackwener/opencli/registry";import{ArgumentError as x,CommandExecutionError as D}from"@jackwener/opencli/errors";import{buildFetchSnippet as H}from"./in-page.js";import{dispatchEvaluateResult as P}from"./errors.js";import{SLOCK_SITE as U,SLOCK_DOMAIN as y,SLOCK_HOME_URL as A}from"./shared.js";import{parseNonNegativeInteger as M,parsePositiveInteger as b}from"./resolve.js";const Q=["all","unread","mentions"];function F(q){if(q.kind==="thread")return{kind:"thread",id:q.threadChannelId??"",name:q.parentChannelName??"",unreadCount:typeof q.unreadCount==="number"?q.unreadCount:0,hasMention:!!q.hasMention,lastActivityAt:q.lastActivityAt??q.lastReplyAt??"",preview:q.latestActivityPreview??q.parentMessagePreview??""};return{kind:q.kind??"channel",id:q.channelId??"",name:q.channelName??"",unreadCount:typeof q.unreadCount==="number"?q.unreadCount:0,hasMention:!!q.hasMention,lastActivityAt:q.lastMessageAt??"",preview:q.lastMessagePreview??""}}Z({site:U,name:"inbox",access:"read",description:"List unified inbox items (channels, DMs, followed threads) that need attention.",domain:y,strategy:$.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"filter",default:"all",help:"all | unread | mentions"},{name:"limit",type:"int",default:30,help:"Max items (server caps at 100)"},{name:"offset",type:"int",default:0,help:"Pagination offset"},{name:"server",help:"Override active server"}],columns:["kind","id","name","unreadCount","hasMention","lastActivityAt","preview"],func:async(q,z)=>{const B=String(z.filter??"all").toLowerCase();if(!Q.includes(B))throw new x(`--filter must be one of ${Q.join(" | ")} (got "${B}")`);const V=b(z.limit,"--limit",{defaultValue:30,max:100}),W=M(z.offset,"--offset",{defaultValue:0});await q.goto(A);const X=H({method:"GET",path:`/channels/inbox?filter=${encodeURIComponent(B)}&limit=${V}&offset=${W}`,serverScoped:!0,serverIdOverride:z.server}),Y=await q.evaluate(`(async () => { ${X} })()`),G=P(Y),J=Array.isArray(G)?G:G.items||[];if(!Array.isArray(J))throw new D(`expected inbox items array, got ${typeof J} (contract drift?)`);return J.map(F)}});

package/clis/slock/login.js

@@ -0,0 +1 @@
+import"./whoami.js";

package/clis/slock/message-read.js

@@ -0,0 +1,61 @@
+import{cli as C,Strategy as L}from"@jackwener/opencli/registry";import{ArgumentError as x,CommandExecutionError as O}from"@jackwener/opencli/errors";import{authHeadersFragment as c,resolveShortIdFragment as v}from"./in-page.js";import{dispatchEvaluateResult as M}from"./errors.js";import{SLOCK_SITE as U,SLOCK_DOMAIN as b,SLOCK_HOME_URL as I,SLOCK_API_BASE as W}from"./shared.js";import{UUID_RE as H,classifyThreadTarget as u,parsePositiveInteger as y}from"./resolve.js";function E(q,z){const G=z&&typeof z==="object"?z[q.id??q.messageId]:void 0,J=z===null;return{id:q.id??q.messageId??"",seq:typeof q.seq==="number"?q.seq:null,createdAt:q.createdAt??q.created_at??"",senderName:q.sender?.name??q.user?.name??q.senderName??"",content:q.content??"",threadChannelId:J?null:G?.threadChannelId??null,replyCount:J?null:typeof G?.replyCount==="number"?G.replyCount:0,unreadCount:J?null:typeof G?.unreadCount==="number"?G.unreadCount:0,lastReplyAt:J?null:G?.lastReplyAt??null}}C({site:U,name:"message-read",access:"read",description:'Read messages in a channel or thread. Thread form: "#channel:msgIdOrShort". Use --after seq|UUID for cursor.',domain:b,strategy:L.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"channel",positional:!0,required:!0,help:'channelId UUID, "#name", or "#channel:msgIdOrShort"'},{name:"after",help:"Cursor: seq number or messageId UUID (exclusive)"},{name:"before",help:"seq to page before"},{name:"limit",type:"int",default:50,help:"Max messages"},{name:"no-threads",type:"bool",default:!1,help:"Skip /threads enrichment"},{name:"server",help:"Override active server"}],columns:["id","seq","createdAt","senderName","content","threadChannelId","replyCount","unreadCount","lastReplyAt"],func:async(q,z)=>{const G=String(z.channel??"").trim();if(!G)throw new x("channel required");const J=u(G),Y=H.test(G),Q=z.after!==void 0?String(z.after):"";if(Q&&!/^\d+$/.test(Q)&&!H.test(Q))throw new x(`--after must be a seq number or messageId UUID (got "${Q}")`);const Z=y(z.limit,"--limit",{defaultValue:50}),V=z.before!==void 0?String(z.before):"";if(V&&!/^\d+$/.test(V))throw new x(`--before must be a seq number (got "${V}")`);if(V)y(V,"--before");const j=!!z["no-threads"],B=z.server??null;await q.goto(I);const D={isUuid:Y,channel:G,after:Q,before:V,limit:Z,noThreads:j,override:B,parentTarget:J?.parentTarget??"",parentMsgId:J?.parentMsgId??"",isThread:!!J},R=A(D),X=await q.evaluate(`(async () => { ${R} })()`);if(X?.kind==="no-thread")return[{id:"",seq:null,createdAt:"",senderName:"",content:`(${X.parent} — no thread yet, 0 replies.)`,threadChannelId:null,replyCount:0,unreadCount:0,lastReplyAt:null}];const $=M(X);if(!Array.isArray($))throw new O(`expected array of rows from server, got ${typeof $} (contract drift?)`);const T=X.meta?.threadsMap??{},N=X.meta?.threadsDegraded===!0,P=N?null:T,F=$.map((K)=>E(K,P));if(N)F.unshift({id:"",seq:null,createdAt:"",senderName:"",content:"(threads-enrichment unavailable — replyCount/threadChannelId set to null. Retry to get reply counts.)",threadChannelId:null,replyCount:null,unreadCount:null,lastReplyAt:null});return F}});function A(q){const z=JSON.stringify(q.channel.replace(/^#/,"").toLowerCase()),G=JSON.stringify(q.parentTarget.replace(/^#/,"").toLowerCase()),J=JSON.stringify(q.parentMsgId),Y=JSON.stringify(q.after),Q=JSON.stringify(q.before),Z=JSON.stringify(q.limit);return`
+    ${c({serverScoped:!0,serverIdOverride:q.override})}
+    let channelId;
+    ${q.isThread?`
+      // thread shape: resolve parent channel, then short-id → full, then /threads/:msgId
+      const cres = await fetch('${W}/channels/', { credentials:'include', headers });
+      if (!cres.ok) return { kind: cres.status===401?'auth':'http', status: cres.status, where:'/channels/' };
+      const carr = await cres.json();
+      const carrL = Array.isArray(carr) ? carr : (carr.channels || carr.data || []);
+      const phit = carrL.find((c) => (c.name||c.slug||'').toLowerCase() === ${G});
+      if (!phit) return { kind: 'unresolvable', detail: 'parent channel not found: ' + ${G} };
+      const parentChannelId = phit.id;
+      let fullMsgId = ${J};
+      ${v({shortIdVar:"fullMsgId",parentChannelIdVar:"parentChannelId",contextDescription:G})}
+      const tres = await fetch('${W}/channels/' + encodeURIComponent(parentChannelId) + '/threads/' + encodeURIComponent(fullMsgId), { credentials:'include', headers });
+      if (tres.status === 404) return { kind: 'no-thread', parent: ${JSON.stringify(q.channel)} };
+      if (!tres.ok) return { kind: tres.status===401?'auth':'http', status: tres.status, where:'/threads/:msgId' };
+      const tinfo = await tres.json();
+      channelId = tinfo.threadChannelId || tinfo.channelId || tinfo.id;
+    `:`
+      if (${q.isUuid}) {
+        channelId = ${JSON.stringify(q.channel)};
+      } else {
+        const cres = await fetch('${W}/channels/', { credentials:'include', headers });
+        if (!cres.ok) return { kind: cres.status===401?'auth':'http', status: cres.status, where:'/channels/' };
+        const arr = await cres.json();
+        const arrL = Array.isArray(arr) ? arr : (arr.channels || arr.data || []);
+        const hit = arrL.find((c) => (c.name||c.slug||'').toLowerCase() === ${z});
+        if (!hit) return { kind: 'unresolvable', detail: 'no channel matches ' + ${z} };
+        channelId = hit.id;
+      }
+    `}
+    let afterSeq = ${Y};
+    if (afterSeq && /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/.test(afterSeq)) {
+      const cx = await fetch('${W}/messages/context/' + encodeURIComponent(afterSeq), { credentials:'include', headers });
+      if (!cx.ok) return { kind: cx.status===401?'auth':'http', status: cx.status, where:'/messages/context (--after)' };
+      const cxd = await cx.json();
+      const anchor = (cxd.messages || []).find((m) => (m.id||m.messageId) === cxd.targetMessageId);
+      afterSeq = String(anchor?.seq ?? '');
+    }
+    const qs = new URLSearchParams();
+    if (afterSeq) qs.set('after', afterSeq);
+    if (${Q}) qs.set('before', ${Q});
+    qs.set('limit', ${Z});
+    const mres = await fetch('${W}/messages/channel/' + encodeURIComponent(channelId) + '?' + qs.toString(), { credentials:'include', headers });
+    if (!mres.ok) return { kind: mres.status===401?'auth':'http', status: mres.status, where: '/messages/channel/:id' };
+    const mdata = await mres.json();
+    const messages = Array.isArray(mdata) ? mdata : (mdata.messages || mdata.data || []);
+    let threadsMap = {};
+    let threadsDegraded = false;
+    ${q.noThreads?"":`
+    try {
+      const thres = await fetch('${W}/channels/' + encodeURIComponent(channelId) + '/threads', { credentials:'include', headers });
+      if (thres.ok) {
+        const tmap = await thres.json();
+        if (tmap && typeof tmap === 'object' && !Array.isArray(tmap)) threadsMap = tmap;
+      } else { threadsDegraded = true; }
+    } catch { threadsDegraded = true; }
+    `}
+    return { kind: 'ok', rows: messages, meta: { threadsMap: threadsDegraded ? null : threadsMap, threadsDegraded } };
+  `}

package/clis/slock/message-search.js

@@ -0,0 +1,24 @@
+import{cli as N,Strategy as T}from"@jackwener/opencli/registry";import{ArgumentError as q,CommandExecutionError as y}from"@jackwener/opencli/errors";import{authHeadersFragment as B}from"./in-page.js";import{dispatchEvaluateResult as F}from"./errors.js";import{SLOCK_SITE as M,SLOCK_DOMAIN as D,SLOCK_HOME_URL as H,SLOCK_API_BASE as V}from"./shared.js";import{UUID_RE as P,parsePositiveInteger as R}from"./resolve.js";N({site:M,name:"message-search",access:"read",description:"Search messages",domain:D,strategy:T.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"query",positional:!0,required:!0,help:"Search query"},{name:"channel",help:"Restrict to a channel (UUID or #name)"},{name:"limit",type:"int",default:50,help:"Max results"},{name:"server",help:"Override active server"}],columns:["id","channelId","createdAt","senderName","content"],func:async(J,z)=>{const Q=String(z.query??"").trim();if(!Q)throw new q("query required");const f=String(z.channel??"").trim(),W=f?P.test(f):!1,X=f?JSON.stringify(f.replace(/^#/,"").toLowerCase()):'""',Y=z.server??null,Z=R(z.limit,"--limit",{defaultValue:50});await J.goto(H);const $=`
+      ${B({serverScoped:!0,serverIdOverride:Y})}
+      let channelId = '';
+      if (${JSON.stringify(f)}) {
+        if (${W}) {
+          channelId = ${JSON.stringify(f)};
+        } else {
+          const cres = await fetch('${V}/channels/', { credentials:'include', headers });
+          if (!cres.ok) return { kind: cres.status===401?'auth':'http', status: cres.status, where:'/channels/' };
+          const arr = await cres.json();
+          const hit = (Array.isArray(arr)?arr:(arr.channels||arr.data||[])).find((c) => (c.name||c.slug||'').toLowerCase() === ${X});
+          if (!hit) return { kind: 'unresolvable', detail: 'no channel matches ' + ${JSON.stringify(f)} };
+          channelId = hit.id;
+        }
+      }
+      const searchUrl = '${V}/messages/search?q=' + encodeURIComponent(${JSON.stringify(Q)}) + (channelId ? '&channelId=' + encodeURIComponent(channelId) : '') + '&limit=' + encodeURIComponent(${JSON.stringify(Z)});
+      const res = await fetch(searchUrl, { credentials:'include', headers });
+      if (!res.ok) return { kind: res.status===401?'auth':'http', status: res.status, where:'/messages/search' };
+      const data = await res.json();
+      // F2-b — qatester live dump: shape is { results: [...], hasMore }.
+      // Unwrap .results first; fall back to legacy .messages / .data /
+      // bare array for forward-compat.
+      return { kind: 'ok', rows: Array.isArray(data) ? data : (data.results || data.messages || data.data || []) };
+    `,x=await J.evaluate(`(async () => { ${$} })()`),G=F(x);if(!Array.isArray(G))throw new y(`expected array of rows from server, got ${typeof G} (contract drift?)`);return G.map((b)=>({id:b.id??b.messageId??"",channelId:b.channelId??"",createdAt:b.createdAt??b.created_at??"",senderName:b.sender?.name??b.user?.name??"",content:b.content??""}))}});

package/clis/slock/message-send.js

@@ -0,0 +1,55 @@
+import{cli as D,Strategy as T}from"@jackwener/opencli/registry";import{ArgumentError as y,CommandExecutionError as R}from"@jackwener/opencli/errors";import{authHeadersFragment as j,resolveShortIdFragment as B}from"./in-page.js";import{dispatchEvaluateResult as U}from"./errors.js";import{SLOCK_SITE as h,SLOCK_DOMAIN as K,SLOCK_HOME_URL as C,SLOCK_API_BASE as W}from"./shared.js";import{UUID_RE as H,classifyTarget as L}from"./resolve.js";D({site:h,name:"message-send",access:"write",description:"Send a message to a channel, DM, or thread (content sent verbatim)",domain:K,strategy:T.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"target",positional:!0,required:!0,help:'"#channel", "#channel:msgIdOrShort", "dm:@name", "dm:<uuid>", or channel UUID'},{name:"content",positional:!0,required:!0,help:"Message body (sent verbatim, no marker)"},{name:"dry-run",type:"bool",default:!1,help:"Print the planned payload without sending"},{name:"as-task",type:"bool",default:!1,help:"Create the message as a task (asTask)"},{name:"attach",help:"Comma-separated attachmentId UUIDs (upload separately first)"},{name:"server",help:"Override active server (slug or id)"}],columns:["target","channelId","content","result","messageId"],func:async(f,Q)=>{const q=String(Q.target??"").trim();if(!q)throw new y("target required");const Y=String(Q.content??""),V=!!Q["as-task"],Z=String(Q.attach??"").split(",").map((G)=>G.trim()).filter(Boolean);for(const G of Z)if(!H.test(G))throw new y(`--attach expects attachmentId UUIDs; "${G}" is not a UUID`);let $;try{$=L(q)}catch(G){throw new y(G.message)}const X={asTask:V,attachmentIds:Z};if(Q["dry-run"])return[{target:q,channelId:"(not resolved in dry-run)",content:Y,result:V?"dry-run (asTask)":"dry-run",messageId:null}];await f.goto(C);const J=P(q,Y,$,Q.server,X),N=await f.evaluate(`(async () => { ${J} })()`),z=U(N)[0]??{},b=z.id??z.messageId;if(!b)throw new R("Slock message-send succeeded without returning a message id; refusing to report a sent row.");return[{target:q,channelId:z.channelId??"",content:Y,result:"sent",messageId:b}]}});function P(f,Q,q,Y,V={}){const Z=Y??null,$=JSON.stringify(Q),X=[];if(V.asTask)X.push("asTask: true");if(Array.isArray(V.attachmentIds)&&V.attachmentIds.length)X.push(`attachmentIds: ${JSON.stringify(V.attachmentIds)}`);const J=X.length?", "+X.join(", "):"",N=j({serverScoped:!0,serverIdOverride:Z}),F=`
+    if (!channelId) return { kind: 'http', status: 500, where:'/messages (target resolved without channelId)' };
+    const mres = await fetch('${W}/messages', { method:'POST', credentials:'include', headers, body: JSON.stringify({ channelId, content: ${$}${J} }) });
+    if (!mres.ok) return { kind: mres.status===401?'auth':'http', status: mres.status, where:'/messages' };
+    const m = await mres.json();
+    const messageId = m.id ?? m.messageId;
+    if (!messageId) return { kind: 'http', status: 200, where:'/messages (no message id in response)' };
+    return { kind: 'ok', rows: [{ id: messageId, channelId }] };
+  `;let z="";if(q.kind==="channel-uuid")z=`let channelId = ${JSON.stringify(q.channelId)};`;else if(q.kind==="channel-name")z=`
+      const cres = await fetch('${W}/channels/', { credentials:'include', headers });
+      if (!cres.ok) return { kind: cres.status===401?'auth':'http', status: cres.status, where:'/channels/' };
+      const carr = await cres.json();
+      const hit = (Array.isArray(carr)?carr:(carr.channels||carr.data||[])).find((c) => (c.name||c.slug||'').toLowerCase() === ${JSON.stringify(q.name)});
+      if (!hit) return { kind: 'unresolvable', detail: 'no channel matches ' + ${JSON.stringify(q.name)} };
+      let channelId = hit.id;
+    `;else if(q.kind==="dm-uuid")z=`
+      const dres = await fetch('${W}/channels/dm', { method:'POST', credentials:'include', headers, body: JSON.stringify({ userId: ${JSON.stringify(q.userId)} }) });
+      if (!dres.ok) return { kind: dres.status===401?'auth':'http', status: dres.status, where:'/channels/dm' };
+      const dd = await dres.json();
+      let channelId = dd.channelId ?? dd.id;
+      if (!channelId) return { kind: 'http', status: 500, where: '/channels/dm (no id in response)' };
+    `;else if(q.kind==="dm-name")z=`
+      const sres2 = await fetch('${W}/servers/' + encodeURIComponent(sid) + '/members', { credentials:'include', headers });
+      if (!sres2.ok) return { kind: sres2.status===401?'auth':'http', status: sres2.status, where:'/servers/:id/members' };
+      const mlist = await sres2.json();
+      const marr = Array.isArray(mlist) ? mlist : (mlist.members || mlist.data || []);
+      const mh = marr.find((u) => (u.username||u.name||u.displayName||'').toLowerCase() === ${JSON.stringify(q.name.toLowerCase())});
+      if (!mh) return { kind: 'unresolvable', detail: 'no member @' + ${JSON.stringify(q.name)} };
+      const dres = await fetch('${W}/channels/dm', { method:'POST', credentials:'include', headers, body: JSON.stringify({ userId: mh.userId ?? mh.id }) });
+      if (!dres.ok) return { kind: dres.status===401?'auth':'http', status: dres.status, where:'/channels/dm' };
+      const dd = await dres.json();
+      let channelId = dd.channelId ?? dd.id;
+      if (!channelId) return { kind: 'http', status: 500, where: '/channels/dm (no id in response)' };
+    `;else if(q.kind==="thread"){const b=H.test(q.parentTarget),G=JSON.stringify(q.parentTarget.replace(/^#/,"").toLowerCase()),M=JSON.stringify(q.parentMsgId);z=`
+      let parentChannelId;
+      if (${b}) {
+        parentChannelId = ${JSON.stringify(q.parentTarget)};
+      } else {
+        const cres = await fetch('${W}/channels/', { credentials:'include', headers });
+        if (!cres.ok) return { kind: cres.status===401?'auth':'http', status: cres.status, where:'/channels/' };
+        const carr = await cres.json();
+        const hit = (Array.isArray(carr)?carr:(carr.channels||carr.data||[])).find((c) => (c.name||c.slug||'').toLowerCase() === ${G});
+        if (!hit) return { kind: 'unresolvable', detail: 'no parent channel: ' + ${G} };
+        parentChannelId = hit.id;
+      }
+      let fullMsgId = ${M};
+      ${B({shortIdVar:"fullMsgId",parentChannelIdVar:"parentChannelId"})}
+      const tres = await fetch('${W}/channels/' + encodeURIComponent(parentChannelId) + '/threads', { method:'POST', credentials:'include', headers, body: JSON.stringify({ parentMessageId: fullMsgId }) });
+      if (!tres.ok) return { kind: tres.status===401?'auth':'http', status: tres.status, where:'/channels/:id/threads' };
+      const td = await tres.json();
+      let channelId = td.threadChannelId ?? td.channelId ?? td.id;
+      if (!channelId) return { kind: 'http', status: 500, where:'/channels/:id/threads (no id)' };
+    `}return`${N}
+${z}
+${F}`}

package/clis/slock/reaction-add.js

@@ -0,0 +1 @@
+import{cli as d,Strategy as n}from"@jackwener/opencli/registry";import{ArgumentError as i}from"@jackwener/opencli/errors";import{buildFetchSnippet as c}from"./in-page.js";import{dispatchEvaluateResult as u}from"./errors.js";import{SLOCK_SITE as p,SLOCK_DOMAIN as l,SLOCK_HOME_URL as g}from"./shared.js";import{assertMessageIdShape as S}from"./resolve.js";d({site:p,name:"reaction-add",access:"write",description:"Add an emoji reaction to a message (POST /messages/:id/reactions). Idempotent server-side.",domain:l,strategy:n.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"messageId",positional:!0,required:!0,help:"Full messageId UUID (short ids rejected)"},{name:"emoji",positional:!0,required:!0,help:"A single unicode emoji, e.g. \uD83D\uDC4D"},{name:"server",help:"Override active server"}],columns:["messageId","emoji","result"],func:async(s,e)=>{let r;try{r=S(String(e.messageId??""))}catch(m){throw new i(m.message)}const t=String(e.emoji??"").trim();if(!t)throw new i("emoji required (a single unicode emoji)");await s.goto(g);const o=c({method:"POST",path:`/messages/${r}/reactions`,body:{emoji:t},serverScoped:!0,serverIdOverride:e.server}),a=await s.evaluate(`(async () => { ${o} })()`);u(a);return[{messageId:r,emoji:t,result:"added"}]}});

package/clis/slock/reaction-remove.js

@@ -0,0 +1 @@
+import{cli as n,Strategy as d}from"@jackwener/opencli/registry";import{ArgumentError as s}from"@jackwener/opencli/errors";import{buildFetchSnippet as c}from"./in-page.js";import{dispatchEvaluateResult as u}from"./errors.js";import{SLOCK_SITE as p,SLOCK_DOMAIN as l,SLOCK_HOME_URL as v}from"./shared.js";import{assertMessageIdShape as g}from"./resolve.js";n({site:p,name:"reaction-remove",access:"write",description:"Remove your emoji reaction from a message (DELETE /messages/:id/reactions).",domain:l,strategy:d.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"messageId",positional:!0,required:!0,help:"Full messageId UUID (short ids rejected)"},{name:"emoji",positional:!0,required:!0,help:"The unicode emoji to remove, e.g. \uD83D\uDC4D"},{name:"server",help:"Override active server"}],columns:["messageId","emoji","result"],func:async(o,e)=>{let r;try{r=g(String(e.messageId??""))}catch(a){throw new s(a.message)}const t=String(e.emoji??"").trim();if(!t)throw new s("emoji required (the unicode emoji to remove)");await o.goto(v);const i=c({method:"DELETE",path:`/messages/${r}/reactions`,body:{emoji:t},serverScoped:!0,serverIdOverride:e.server}),m=await o.evaluate(`(async () => { ${i} })()`);u(m);return[{messageId:r,emoji:t,result:"removed"}]}});

package/clis/slock/resolve.js

@@ -0,0 +1 @@
+import{ArgumentError as C}from"@jackwener/opencli/errors";export const UUID_RE=/^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;export function classifyThreadTarget(q){const B=String(q??"").trim().match(/^(#?[^:]+):([A-Za-z0-9-]{6,})$/);if(!B)return null;return{parentTarget:B[1],parentMsgId:B[2]}}export function classifyTarget(q){const b=String(q??"").trim();if(!b)throw new C('target required: "#channel", "#channel:threadShortId", "dm:@name", "dm:<userId>", or channelId UUID.');if(b.startsWith("dm:")){const z=b.slice(3);if(!z)throw new C('dm target must be "dm:<userId>" or "dm:@name".');if(UUID_RE.test(z))return{kind:"dm-uuid",userId:z};if(z.startsWith("@"))return{kind:"dm-name",name:z.slice(1)};throw new C('dm target must be "dm:<userId-uuid>" or "dm:@name".')}const B=classifyThreadTarget(b);if(B)return{kind:"thread",...B};if(UUID_RE.test(b))return{kind:"channel-uuid",channelId:b};return{kind:"channel-name",name:b.replace(/^#/,"").toLowerCase()}}const L="short ids (the 8-hex `msg=...` form in channel headers) are NOT accepted — use the FULL UUID "+"from `bookmark-list` / `message-read` output.";export function assertMessageIdShape(q){const b=String(q??"").trim();if(!b)throw new C("messageId required");if(!UUID_RE.test(b))throw new C(`messageId "${b}" is not a full UUID. ${L}`);return b}export function parsePositiveInteger(q,b,{defaultValue:B,max:z}={}){const F=q===void 0||q===null||q===""?B:q,G=J(F);if(!Number.isInteger(G)||G<=0||z!==void 0&&G>z){const K=z!==void 0?` between 1 and ${z}`:" as a positive integer";throw new C(`${b} must be${K} (got "${F}")`)}return G}export function parseNonNegativeInteger(q,b,{defaultValue:B}={}){const z=q===void 0||q===null||q===""?B:q,F=J(z);if(!Number.isInteger(F)||F<0)throw new C(`${b} must be a non-negative integer (got "${z}")`);return F}function J(q){if(typeof q==="number")return q;const b=String(q);if(!/^\d+$/.test(b))return NaN;return Number(b)}

package/clis/slock/server-list.js

@@ -0,0 +1,9 @@
+import{cli as o,Strategy as n}from"@jackwener/opencli/registry";import{dispatchEvaluateResult as l}from"./errors.js";import{SLOCK_SITE as c,SLOCK_DOMAIN as u,SLOCK_HOME_URL as g,SLOCK_API_BASE as m}from"./shared.js";o({site:c,name:"server-list",access:"read",description:"List slock servers you belong to; marks active per localStorage slug",domain:u,strategy:n.COOKIE,browser:!0,siteSession:"persistent",args:[],columns:["id","slug","name","active"],func:async(e)=>{await e.goto(g);const a=`
+      const token = localStorage.getItem('slock_access_token');
+      if (!token) return { kind: 'auth', detail: 'no token' };
+      const res = await fetch('${m}/servers/', { credentials:'include', headers:{authorization:'Bearer '+token,accept:'application/json'} });
+      if (!res.ok) return { kind: res.status===401?'auth':'http', status: res.status, where: '/servers/' };
+      const list = await res.json();
+      const activeSlug = localStorage.getItem('slock_last_server_slug') || null;
+      return { kind: 'ok', rows: Array.isArray(list) ? list : (list.servers || list.data || []), meta: { activeSlug } };
+    `,s=await e.evaluate(`(async () => { ${a} })()`),r=l(s),i=s.meta?.activeSlug??null;return r.map((t)=>({id:t.id??"",slug:t.slug??"",name:t.name??"",active:t.slug===i}))}});

package/clis/slock/server-use.js

@@ -0,0 +1,18 @@
+import{cli as u,Strategy as c}from"@jackwener/opencli/registry";import{ArgumentError as g}from"@jackwener/opencli/errors";import{dispatchEvaluateResult as m}from"./errors.js";import{SLOCK_SITE as d,SLOCK_DOMAIN as w,SLOCK_HOME_URL as h,SLOCK_API_BASE as f}from"./shared.js";import{UUID_RE as p}from"./resolve.js";u({site:d,name:"server-use",access:"write",description:"Set the active slock server (writes localStorage.slock_last_server_slug)",domain:w,strategy:c.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"input",positional:!0,required:!0,help:'server slug, "#slug", or UUID id'}],columns:["id","slug","name","written"],func:async(s,i)=>{const t=String(i.input??"").trim();if(!t)throw new g("input required: slug or UUID");const o=p.test(t),a=t.replace(/^#/,"").toLowerCase(),n=JSON.stringify(a);await s.goto(h);const l=`
+      const token = localStorage.getItem('slock_access_token');
+      if (!token) return { kind: 'auth', detail: 'no token' };
+      const res = await fetch('${f}/servers/', { credentials:'include', headers:{authorization:'Bearer '+token,accept:'application/json'} });
+      if (!res.ok) return { kind: res.status===401?'auth':'http', status: res.status, where:'/servers/' };
+      const list = await res.json();
+      const arr = Array.isArray(list) ? list : (list.servers || list.data || []);
+      let hit;
+      if (${o}) hit = arr.find((s) => s.id === ${JSON.stringify(t)});
+      else hit = arr.find((s) => (s.slug || '').toLowerCase() === ${n});
+      if (!hit) {
+        const choices = arr.map((s) => s.slug).filter(Boolean).join(', ');
+        return { kind: 'unresolvable', detail: 'no server matches ' + ${JSON.stringify(t)} + '. Known slugs: ' + choices };
+      }
+      // ATOMICITY: write to localStorage ONLY after we have a confirmed hit.
+      localStorage.setItem('slock_last_server_slug', hit.slug);
+      return { kind: 'ok', rows: [hit], meta: { written: true, newSlug: hit.slug } };
+    `,r=await s.evaluate(`(async () => { ${l} })()`);return m(r).map((e)=>({id:e.id??"",slug:e.slug??"",name:e.name??"",written:r.meta?.written??!1}))}});

package/clis/slock/shared.js

@@ -0,0 +1 @@
+export const SLOCK_SITE="slock",SLOCK_DOMAIN="app.slock.ai",SLOCK_HOME_URL="https://app.slock.ai/",SLOCK_API_BASE="https://api.slock.ai/api",LS_ACCESS_TOKEN="slock_access_token",LS_REFRESH_TOKEN="slock_refresh_token",LS_ACTIVE_SLUG="slock_last_server_slug";

package/clis/slock/task-claim.js

@@ -0,0 +1,14 @@
+import{cli as W,Strategy as X}from"@jackwener/opencli/registry";import{ArgumentError as Y,CommandExecutionError as Q}from"@jackwener/opencli/errors";import{authHeadersFragment as Z}from"./in-page.js";import{dispatchEvaluateResult as $}from"./errors.js";import{SLOCK_SITE as B,SLOCK_DOMAIN as D,SLOCK_HOME_URL as F,SLOCK_API_BASE as P}from"./shared.js";import{assertMessageIdShape as U}from"./resolve.js";W({site:B,name:"task-claim",access:"write",description:"Claim a chat task (PATCH /tasks/:id/claim). Requires full task UUID (= message id).",domain:D,strategy:X.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"taskId",positional:!0,required:!0,help:"Full task UUID (= message id; short ids rejected)"},{name:"server",help:"Override active server"}],columns:["taskId","taskStatus","assigneeId","taskNumber"],func:async(J,q)=>{let z;try{z=U(String(q.taskId??""))}catch(b){throw new Y(b.message)}await J.goto(F);const G=`
+      ${Z({serverScoped:!0,serverIdOverride:q.server})}
+      const res = await fetch('${P}/tasks/' + encodeURIComponent(${JSON.stringify(z)}) + '/claim', { method:'PATCH', credentials:'include', headers });
+      if (res.status === 404) return { kind: 'http', status: 404, where: '/tasks/:id/claim (task not found)' };
+      if (res.status === 403) return { kind: 'http', status: 403, where: '/tasks/:id/claim (forbidden — not your task, terminal status, or channel archived)' };
+      if (res.status === 409) return { kind: 'http', status: 409, where: '/tasks/:id/claim (conflict — already claimed by someone else; use task-unclaim first)' };
+      if (!res.ok) return { kind: res.status===401?'auth':'http', status: res.status, where:'/tasks/:id/claim' };
+      const data = await res.json().catch(() => ({}));
+      // F5 — qatester live dump: server wraps the task as { task: {...} }.
+      // Unwrap so the command surfaces the inner row, otherwise every column
+      // resolves to null even though the claim succeeded.
+      const t = (data && data.task) ? data.task : data;
+      return { kind: 'ok', rows: [t] };
+    `,V=await J.evaluate(`(async () => { ${G} })()`);return $(V).map((b)=>({taskId:f(b,z,"task-claim"),taskStatus:b.taskStatus??b.status??"",assigneeId:b.claimedById??b.assigneeId??null,taskNumber:b.taskNumber??null}))}});function f(J,q,z){const G=J?.id;if(!G)throw new Q(`Slock ${z} succeeded without returning task id ${q}; refusing to report a task row.`);if(G!==q)throw new Q(`Slock ${z} returned task id ${G}, expected ${q}.`);return G}

package/clis/slock/task-convert.js

@@ -0,0 +1,35 @@
+import{cli as b,Strategy as f}from"@jackwener/opencli/registry";import{ArgumentError as W}from"@jackwener/opencli/errors";import{authHeadersFragment as B,resolveShortIdFragment as H}from"./in-page.js";import{dispatchEvaluateResult as M}from"./errors.js";import{SLOCK_SITE as P,SLOCK_DOMAIN as y,SLOCK_HOME_URL as D,SLOCK_API_BASE as X}from"./shared.js";import{UUID_RE as Y,classifyThreadTarget as T}from"./resolve.js";b({site:P,name:"task-convert",access:"write",description:'Convert a message into a chat task (POST /tasks/convert-message). Accepts a message UUID or "#channel:shortId".',domain:y,strategy:f.COOKIE,browser:!0,siteSession:"persistent",args:[{name:"messageId",positional:!0,required:!0,help:'Full message UUID, or "#channel:shortId" (short id expanded via /messages/context)'},{name:"server",help:"Override active server"}],columns:["id","taskNumber","title","taskStatus","channelId"],func:async(Q,V)=>{const z=String(V.messageId??"").trim();if(!z)throw new W("messageId required");let G;if(Y.test(z))G=`const fullMsgId = ${JSON.stringify(z)};`;else{const q=T(z);if(!q)throw new W(`messageId "${z}" is not a UUID or a "#channel:shortId" form`);const x=Y.test(q.parentTarget),J=JSON.stringify(q.parentTarget.replace(/^#/,"").toLowerCase()),N=JSON.stringify(q.parentMsgId);G=`
+        let parentChannelId;
+        if (${x}) {
+          parentChannelId = ${JSON.stringify(q.parentTarget)};
+        } else {
+          const cres = await fetch('${X}/channels/', { credentials:'include', headers });
+          if (!cres.ok) return { kind: cres.status===401?'auth':'http', status: cres.status, where:'/channels/' };
+          const carr = await cres.json();
+          const hit = (Array.isArray(carr)?carr:(carr.channels||carr.data||[])).find((c) => (c.name||c.slug||'').toLowerCase() === ${J});
+          if (!hit) return { kind: 'unresolvable', detail: 'no channel matches ' + ${J} };
+          parentChannelId = hit.id;
+        }
+        let fullMsgId = ${N};
+        ${H({shortIdVar:"fullMsgId",parentChannelIdVar:"parentChannelId",contextDescription:J})}
+      `}await Q.goto(D);const Z=`
+      ${B({serverScoped:!0,serverIdOverride:V.server})}
+      ${G}
+      const res = await fetch('${X}/tasks/convert-message', {
+        method:'POST', credentials:'include', headers,
+        body: JSON.stringify({ messageId: fullMsgId }),
+      });
+      if (res.status === 400) {
+        const j = await res.json().catch(() => ({}));
+        return { kind: 'http', status: 400, where: '/tasks/convert-message (bad request: ' + (j.error || j.message || 'invalid messageId') + ')' };
+      }
+      if (res.status === 403) return { kind: 'http', status: 403, where: '/tasks/convert-message (forbidden — not a channel member, or channel archived)' };
+      if (res.status === 404) return { kind: 'http', status: 404, where: '/tasks/convert-message (message not found)' };
+      if (res.status === 409) return { kind: 'http', status: 409, where: '/tasks/convert-message (conflict — message is already a task, or in a thread channel which does not accept tasks)' };
+      if (!res.ok) return { kind: res.status===401?'auth':'http', status: res.status, where:'/tasks/convert-message' };
+      const data = await res.json().catch(() => ({}));
+      // F5 — server wraps the task as { task: {...} }; unwrap so the
+      // command surfaces the inner row instead of all-null columns.
+      const t = (data && data.task) ? data.task : data;
+      return { kind: 'ok', rows: [t] };
+    `,$=await Q.evaluate(`(async () => { ${Z} })()`);return M($).map((q)=>({id:q.id??"",taskNumber:q.taskNumber??null,title:q.content??q.title??"",taskStatus:q.taskStatus??"todo",channelId:q.channelId??null}))}});