startup-builder 0.2.0 → 0.3.0

package/dist/cli.js

@@ -1,206 +1,356 @@
 #!/usr/bin/env node
 import {
-  getNextCommands,
-  getProgress,
-  getRequiredArtifacts,
-  reconcileState
-} from "./chunk-NWM7TYW6.js";
+  Api,
+  Auth,
+  DEFAULT_API,
+  DEFAULT_MODEL,
+  DEFAULT_WALL_MINUTES,
+  Leases,
+  Session,
+  agentRunner,
+  apiBase,
+  batchBodyPath,
+  batchText,
+  buildWorklist,
+  closeText,
+  configDir,
+  doVerb,
+  fetchWorklistMarkdown,
+  leasesDir,
+  parseBody,
+  parseInput,
+  parseWorker,
+  renderPrompt,
+  runCloud,
+  runnerBase,
+  serveStdio,
+  tokenFile,
+  work
+} from "./chunk-ZR74VEI2.js";
 
 // src/cli.ts
-import { Command } from "commander";
+import { createRequire } from "module";
+import { readFileSync, realpathSync } from "fs";
+import { join } from "path";
+import { fileURLToPath } from "url";
+import { Command as Command2, Option as Option2 } from "commander";
 import pc from "picocolors";
-import {
-  apiRequest,
-  ensureAuth,
-  output,
-  ok,
-  err,
-  detectOutputFormat,
-  getApiBaseUrl,
-  resolveContext,
-  handleError,
-  parseJsonInput
-} from "startups.studio";
-function renderProgressBar(progress) {
-  const total = progress.length;
-  const completeCount = progress.filter((p) => p.status === "complete").length;
-  const currentIdx = progress.findIndex((p) => p.status === "current");
-  const pct = Math.round((completeCount + (currentIdx >= 0 ? 0.5 : 0)) / total * 100);
-  const barWidth = 30;
-  const filled = Math.round(pct / 100 * barWidth);
-  const bar = pc.green("\u2588".repeat(filled)) + pc.dim("\u2591".repeat(barWidth - filled));
-  const lines = [];
-  lines.push("");
-  lines.push(`  ${bar}  ${pc.bold(`${pct}%`)}`);
-  lines.push("");
-  for (const entry of progress) {
-    const icon = entry.status === "complete" ? pc.green("\u2713") : entry.status === "current" ? pc.yellow("\u25B6") : pc.dim("\u25CB");
-    const label = entry.status === "current" ? pc.yellow(pc.bold(entry.label)) : entry.status === "complete" ? pc.dim(entry.label) : pc.dim(entry.label);
-    lines.push(`  ${icon} ${label}`);
-  }
-  return lines.join("\n");
-}
-function formatSchemaValue(value, indent) {
-  const pad = " ".repeat(indent);
-  if (typeof value === "string") {
-    return `"${value}"`;
-  }
-  if (Array.isArray(value)) {
-    if (value.length === 0) return "[]";
-    if (typeof value[0] === "string") {
-      return `["${value[0]}"]`;
+
+// src/next/commands.ts
+import { Option } from "commander";
+var startupsOf = (v) => (v ?? []).flatMap((s) => s.split(",")).map((s) => s.trim().replace(/^https?:\/\/[^/]+\//, "").replace(/\/+$/, "")).filter(Boolean);
+var worker = (target, flag) => flag ?? target;
+var VERSIONS_USAGE = [
+  "usage: startup-builder versions <ref>   a Thing\u2019s versions, newest first (GET <$id>?versions)",
+  "  <ref>: a path (a FIX line\u2019s Thing), a $id, or a Task\u2019s number in the batch",
+  "  e.g. startup-builder versions closers.deals/alternatives/alt_48RO5vekYCXl",
+  "       startup-builder versions closers.deals/options",
+  "  then: startup-builder show <path>?version=<n> for one version"
+].join("\n");
+function registerLoop(program2, d) {
+  const env = () => d.env ?? process.env;
+  const inBatch = () => !!env().SB_BATCH;
+  const readBody = (p) => d.readFile(inBatch() ? batchBodyPath(p, env().SB_WORKDIR || (d.cwd ?? process.cwd)()) : p);
+  const emit = (o, json) => {
+    d.out(json ? JSON.stringify(o.data, null, 2) : o.text);
+    if (o.exit) d.exit(o.exit);
+  };
+  program2.command("queue").description("Open batches on api.sb, highest priority first (GET /queue)").argument("[for:worker]", "only this Worker\u2019s batches, e.g. for:tom").option("--for <worker>", "the Worker (same as for:<worker>)").option("--limit <n>", "how many (default 5)").option("--json", "as api.sb serves it").action(async (target, o) => {
+    emit(await d.session().queue({ worker: worker(target, o.for), limit: o.limit ? Number(o.limit) : void 0 }), o.json);
+  });
+  program2.command("claim").description("Claim a batch: n from the last queue listing, a batch $id, or (default) the best free one, falling through a 409 to the next").argument("[batch]", "n, a batch $id or path, or next").option("--next", "the best free batch (the default)").option("--for <worker>", "only this Worker\u2019s batches").option("--lease <seconds>", "lease length (default 900)").option("--json", "the lease (never its token)").action(async (ref, o) => {
+    emit(await d.session().claim({ ref: o.next ? void 0 : ref, worker: o.for, leaseSeconds: o.lease ? Number(o.lease) : void 0 }), o.json);
+  });
+  program2.command("prompt").description("The claimed batch's prompt (its ?md), or a versioned Prompt at /prompts/{name}; --set writes its next version (the Owner)").argument("[name]", "a Prompt\u2019s name").option("--set <file|->", "new text for the named Prompt, from a file or - for stdin (POST /prompts/{name}:update, as the signed-in Owner)").option("--json", "with --set: the whole Action").action(async (name, o) => {
+    if (o.set !== void 0 && inBatch()) throw new Error("prompt --set is refused inside a batch (SB_BATCH is set): editing a Prompt is the Owner's, from their own sign-in");
+    const set = o.set === void 0 ? void 0 : o.set === "-" ? await d.readStdin() : d.readFile(o.set);
+    emit(await d.session().prompt({ name, set }), o.json);
+  });
+  program2.command("show").description("Read a Task or Thing, compact: an index (the claimed batch, else the last worklist), a path, or a $id").argument("<ref>", "1-5, a path, or a $id").allowExcessArguments(false).option("--md", "its ?md").option("--json", "the whole Thing").action(async (ref, o) => emit(await d.session().show({ ref, md: o.md }), o.json));
+  program2.command("close").description("Close a Task: invoke the Verb whose Event closes it. In a claimed batch: do Mode with the lease token; elsewhere a try preview unless --do/--send").argument("<task>", "an index (1-5), a path, or a $id").allowExcessArguments(false).option("--body <file|->", "the Verb input as JSON, from a file or - for stdin (checked against the closing Event\u2019s shape)").option("--data <json>", "the Verb input as inline JSON").option("--input <key=value...>", "the Verb input as pairs").option("--do", "run it (Prefer: mode=do)").option("--send", "run it durably (Prefer: mode=send)").option("--try", "preview it (Prefer: mode=try): nothing stored").addOption(new Option("--mode <mode>", "the Mode").choices(["try", "send", "do"])).option("--as <worker|role>", "act as (default the Task's assignee)").option("--force", "send even when api.sb says it would be blocked or refused").option("--idempotency-key <key>", "reuse a key (a retry)").option("--json", "the whole result").action(async (ref, o) => {
+    let body;
+    if (o.body) body = parseBody(o.body === "-" ? await d.readStdin() : readBody(o.body));
+    else if (o.data || o.input) body = parseInput(o.input, o.data);
+    const mode = o.try ? "try" : o.do ? "do" : o.send ? "send" : o.mode;
+    emit(await d.session().close({ ref, body, mode, as: o.as, force: o.force, idempotencyKey: o.idempotencyKey }), o.json);
+  });
+  program2.command("renew").description("Extend the claimed batch\u2019s lease").option("--lease <seconds>", "new length (default: as claimed)").action(async (o) => {
+    if (inBatch()) throw new Error("renew is refused inside a batch (SB_BATCH is set): the loop renews this lease");
+    emit(await d.session().renew({ leaseSeconds: o.lease ? Number(o.lease) : void 0 }));
+  });
+  program2.command("release").description("Give the claimed batch back: its unclosed Tasks return to the queue").action(async () => emit(await d.session().release()));
+  program2.command("worklist").description("A Worker's open Tasks (GET /workers/{name}/worklist), one line each, by Startup and step, best first").argument("[for:worker]", "the Worker, e.g. for:tom").option("--for <worker>", "the Worker (same as for:<worker>)").option("--startup <domain...>", "only these Startups (comma or repeat)").option("--limit <n>", "Tasks on the page (default 5; at most 50)").option("--page <n>", "a later page").option("--all", "every page (the long view)").option("--md", "api.sb's ready-to-run Markdown, verbatim").option("--prompt", "the CLI's own ready-to-run prompt").option("--long", "each Task with its $id, closing Verb and Permission").option("--stub", "OFFLINE FALLBACK only: assemble one from api.sb's other endpoints").option("--no-previews", "with --stub: don't read each Task's Verb preview").option("--json", "as api.sb serves it").action(async (target, o) => {
+    if (o.md || o.prompt || o.stub || o.all || o.long) return d.worklistMore(target, o);
+    const w = worker(target, o.for);
+    if (!w) throw new Error("name the Worker: worklist for:<worker> (e.g. for:tom)");
+    const page = o.page ? Number(o.page) : void 0;
+    if (page !== void 0 && !(Number.isInteger(page) && page >= 1)) throw new Error(`--page takes a page number (1, 2, \u2026), not "${o.page}"`);
+    const startups = startupsOf(o.startup ?? (process.env.STARTUP_BUILDER_STARTUP ? [process.env.STARTUP_BUILDER_STARTUP] : []));
+    emit(await d.session().worklist({ worker: w, startups, limit: o.limit ? Number(o.limit) : void 0, page }), o.json);
+  });
+  program2.command("versions").description("A Thing's versions, newest first (GET <$id>?versions)").argument("[ref]", "an index, a path, or a $id").allowExcessArguments(false).option("--json", "as api.sb serves them").action(async (ref, o) => {
+    if (!ref) return emit({ text: VERSIONS_USAGE, data: { usage: VERSIONS_USAGE }, exit: 2 }, false);
+    emit(await d.session().versions({ ref }), o.json);
+  });
+  program2.command("revert").description("Put a Thing back to an earlier version (POST <$id>:revert {to}): a try preview unless --do").argument("<ref>", "an index, a path, or a $id").requiredOption("--to <version>", "the version, e.g. 3 or v3").option("--do", "run it").option("--json", "the whole result").action(async (ref, o) => emit(await d.session().revert({ ref, to: o.to, mode: o.do ? "do" : "try" }), o.json));
+  program2.command("changes").description("Recent writes across the portfolio (GET /versions)").option("--for <worker>", "by this Worker").option("--worker <worker>", "same as --for").option("--startup <domain>", "in this Startup").option("--limit <n>", "how many (default 20)").option("--json", "as api.sb serves them").action(
+    async (o) => emit(await d.session().changes({ worker: o.for ?? o.worker, startup: o.startup, limit: o.limit ? Number(o.limit) : void 0 }), o.json)
+  );
+  program2.command("work").description("Loop: claim the next batch, hand its prompt to an agent, renew the lease meanwhile, release when it ends; then the next").option("--for <worker>", "only this Worker\u2019s batches").option("--worker <worker>", "same as --for").option("--once", "one batch, then stop").option("--max-batches <n>", "stop after n batches").option("--wait", "poll an empty queue instead of stopping").option("--poll <seconds>", "with --wait: how often (default 30)").option("--lease <seconds>", "lease length (default 900)").option("--agent <agent>", "claude: the local Claude Code (its logged-in Max account); codex; print: print the prompt and wait for its Tasks to close", "print").option("--model <model>", `claude/codex model (default ${DEFAULT_MODEL})`).option("--max-minutes <n>", `a batch's wall-clock cap: the agent is stopped and the lease never renewed past it (default ${DEFAULT_WALL_MINUTES})`).action(async (o) => {
+    if (inBatch()) throw new Error("work is refused inside a batch (SB_BATCH is set)");
+    const wallMinutes = o.maxMinutes ? Number(o.maxMinutes) : void 0;
+    if (wallMinutes !== void 0 && !(wallMinutes > 0)) throw new Error(`--max-minutes takes a positive number, not "${o.maxMinutes}"`);
+    const agent = agentRunner(o.agent, { out: d.out, model: o.model });
+    const s = d.session();
+    const ac = new AbortController();
+    const stop = () => ac.abort();
+    process.once("SIGINT", stop);
+    process.once("SIGTERM", stop);
+    try {
+      const sum = await work(s, {
+        agent,
+        agentName: o.agent,
+        worker: o.for ?? o.worker,
+        maxBatches: o.once ? 1 : o.maxBatches ? Number(o.maxBatches) : void 0,
+        wait: o.wait,
+        pollMs: o.poll ? Number(o.poll) * 1e3 : void 0,
+        logDir: d.logDir(),
+        line: d.err,
+        signal: ac.signal,
+        selfCli: d.selfCli(),
+        wallMinutes
+      });
+      if (sum.stopped === "signal") d.exit(130);
+      else if (sum.errors) d.exit(1);
+    } finally {
+      process.off("SIGINT", stop);
+      process.off("SIGTERM", stop);
     }
-    const inner = value.map((item) => formatSchemaValue(item, indent + 2)).join(", ");
-    return `[${inner}]`;
-  }
-  if (typeof value === "object" && value !== null) {
-    const entries = Object.entries(value);
-    const parts = entries.map(([k, v]) => `${pad}  "${k}": ${formatSchemaValue(v, indent + 2)}`);
-    return `{
-${parts.join(",\n")}
-${pad}}`;
+  });
+  program2.command("mcp").description("Serve these verbs as MCP tools over stdio (claude mcp add startup-builder -- npx -y startup-builder mcp)").option("--owner", "also the Owner's tools: prompt with set (a Prompt's next version) and revert, with the stored sign-in").action(async (o) => d.serveMcp(d.session(), { owner: !!o.owner }));
+}
+
+// src/cli.ts
+var pkg = createRequire(import.meta.url)("../package.json");
+var err = (s) => process.stderr.write(s + "\n");
+var out = (s) => process.stdout.write(s.endsWith("\n") ? s : s + "\n");
+var shq = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
+function selfBin() {
+  if (process.env.STARTUP_BUILDER_BIN) return process.env.STARTUP_BUILDER_BIN;
+  let self;
+  try {
+    self = realpathSync(process.argv[1]);
+  } catch {
+    self = realpathSync(fileURLToPath(import.meta.url));
   }
-  return String(value);
+  return `${shq(process.execPath)} ${shq(self)}`;
 }
-function renderCommandSuggestions(commands, _startupId) {
-  const lines = [];
-  lines.push("");
-  lines.push(pc.bold("  Next steps:"));
-  lines.push("");
-  for (const cmd of commands) {
-    lines.push(`  ${pc.cyan(pc.bold(cmd.name))}`);
-    const schemaStr = formatSchemaValue(cmd.schema, 4);
-    const fullCommand = `${cmd.command} --json '${schemaStr}'`;
-    lines.push(`  ${pc.dim("$")} ${pc.white(fullCommand)}`);
-    lines.push("");
+function auth(g) {
+  return new Auth({ api: apiBase(g.api), file: tokenFile() });
+}
+var envToken = () => process.env.SB_TOKEN || void 0;
+async function client(g, quiet = false) {
+  const env = envToken();
+  if (env) return { api: new Api({ base: apiBase(g.api), token: env, userAgent: `startup-builder/${pkg.version}` }), signedIn: true };
+  const a = auth(g);
+  const had = await a.stored();
+  const tok = await a.current().catch(() => void 0);
+  if (had && !tok && !quiet) err(pc.dim(`(the stored api.sb token expired and did not refresh: going anonymous; run \`startup-builder login\`)`));
+  const api = new Api({ base: apiBase(g.api), token: tok?.access_token, bind: tok ? tok.api || DEFAULT_API : void 0, userAgent: `startup-builder/${pkg.version}` });
+  return { api, signedIn: !!api.token };
+}
+async function storedCred(g) {
+  const s = await auth(g).current().catch(() => void 0);
+  return s ? { token: s.access_token, api: s.api || DEFAULT_API } : void 0;
+}
+async function signedInClient(g, force = false) {
+  const c = force ? void 0 : await client(g, true);
+  if (c?.signedIn) return c.api;
+  if (envToken()) throw new Error("api.sb refused SB_TOKEN: unset it, or set a valid bearer");
+  err(pc.dim("Invoking a Verb needs a signed-in caller: signing in with id.org.ai\u2026"));
+  await auth(g).login({ force });
+  return (await client(g, true)).api;
+}
+function session(g, interactive = true) {
+  return new Session({
+    base: apiBase(g.api),
+    leases: new Leases(leasesDir()),
+    token: async () => envToken() ?? await storedCred(g),
+    ...interactive ? {
+      login: async () => {
+        if (envToken()) throw new Error("api.sb refused SB_TOKEN: unset it, or set a valid bearer");
+        err(pc.dim("This needs a signed-in caller: signing in with id.org.ai\u2026"));
+        await auth(g).login({});
+        return storedCred(g);
+      }
+    } : {},
+    userAgent: `startup-builder/${pkg.version}`,
+    session: process.env.SB_SESSION
+  });
+}
+async function readStdin() {
+  const chunks = [];
+  for await (const c of process.stdin) chunks.push(c);
+  return Buffer.concat(chunks).toString("utf8");
+}
+var USER_KEYS = ["name", "email", "id", "role", "level", "authenticated", "person", "plan", "org", "roles", "error"];
+async function whoami(g, json) {
+  const { api, signedIn } = await client(g, true);
+  const r = await api.get("/?proto=0");
+  const user = r.json?.user ?? {};
+  const who = Object.fromEntries(USER_KEYS.filter((k) => k in user).map((k) => [k, user[k]]));
+  const agent = user.agent?.name && user.agent.name !== "unknown" ? `${user.agent.name} ${user.agent.version ?? ""}`.trim() : void 0;
+  const where = [user.city, user.region, user.country].filter(Boolean).join(", ") || void 0;
+  const res = { api: api.base, signedIn: signedIn && !user.error && !!(user.name || user.email || user.id), tokenFile: tokenFile(), user: who, ...agent ? { agent } : {}, ...where ? { where } : {} };
+  if (json) {
+    out(JSON.stringify(res, null, 2));
+    return;
   }
-  return lines.join("\n");
+  if (res.signedIn) out(`${pc.green("\u25CF")} signed in to ${api.base} as ${pc.bold(String(who.name ?? who.email ?? who.id))}${who.email && who.name ? ` <${who.email}>` : ""}`);
+  else out(`${pc.yellow("\u25CB")} anonymous on ${api.base}${who.error ? ` (${who.error})` : ""}: run \`startup-builder login\``);
+  for (const k of ["id", "role", "level", "plan", "org"]) if (who[k] !== void 0) out(`  ${k}: ${typeof who[k] === "string" ? who[k] : JSON.stringify(who[k])}`);
+  if (agent) out(pc.dim(`  agent: ${agent}`));
+  if (where) out(pc.dim(`  where: ${where}`));
+}
+var startupsOf2 = (v) => (v ?? []).flatMap((s) => s.split(",")).map((s) => s.trim().replace(/^https?:\/\/[^/]+\//, "").replace(/\/+$/, "")).filter(Boolean);
+function worklistArgs(target, o) {
+  const worker2 = parseWorker(o.for ?? target);
+  if (!worker2) throw new Error("name the Worker: worklist for:<worker> (e.g. for:tom)");
+  const startups = startupsOf2(o.startup ?? (process.env.STARTUP_BUILDER_STARTUP ? [process.env.STARTUP_BUILDER_STARTUP] : []));
+  if (o.page && o.all) throw new Error("--page or --all, not both");
+  const page = o.page ? Number(o.page) : void 0;
+  if (page !== void 0 && !(Number.isInteger(page) && page >= 1)) throw new Error(`--page takes a page number (1, 2, \u2026), not "${o.page}"`);
+  return { worker: worker2, startups, limit: o.limit ? Number(o.limit) : o.all ? 50 : 5, ...page ? { page } : {}, ...o.all ? { all: true } : {} };
+}
+async function worklistFrom(g, target, o) {
+  const { api } = await client(g);
+  return buildWorklist(api, { ...worklistArgs(target, o), stubOnly: o.stub, previews: o.previews });
+}
+function summary(w) {
+  return batchText(w);
 }
-function renderArtifactStatus(artifacts) {
-  if (artifacts.length === 0) return "";
-  const lines = [];
-  lines.push("");
-  lines.push(pc.bold("  Required artifacts:"));
-  for (const a of artifacts) {
-    const met = a.current >= a.required;
-    const icon = met ? pc.green("\u2713") : pc.red("\u2717");
-    const count = met ? pc.green(`${a.current}/${a.required}`) : pc.yellow(`${a.current}/${a.required}`);
-    lines.push(`  ${icon} ${a.description} (${a.collection}) ${count}`);
+var program = new Command2();
+program.name("startup-builder").description("The command line for api.sb: sign in, get a Worker's worklist as a ready-to-run prompt, run it, invoke Verbs.").version(pkg.version).addHelpText("after", "\nStart here:\n  npx startup-builder login\n  npx startup-builder whoami\n  npx startup-builder show /headless.ly --json\n  npx startup-builder help do\n\nHosted MCP: https://api.sb/mcp (HTTP with OAuth; search, fetch, do).\nThe local mcp command is an optional stdio interface with different tools.\nDocs: https://api.sb/docs\n").option("--api <url>", "api.sb base URL (default https://api.sb; env SB_API); before the command, and refused inside a batch (SB_BATCH)").enablePositionalOptions().showHelpAfterError();
+program.command("login").description("Sign in to api.sb with id.org.ai: opens your default browser (loopback + PKCE); --device where no browser can open").option("--device", "use the device-code flow").option("--force", "sign in again even with a valid token").option("--timeout <seconds>", "how long to wait for the browser", "300").option("--json", "machine output").action(async (o) => {
+  const g = program.opts();
+  const a = new Auth({ api: apiBase(g.api), file: tokenFile(), timeoutMs: Number(o.timeout) * 1e3 });
+  const { fresh } = await a.login({ device: o.device, force: o.force });
+  err(fresh ? `Signed in. Token kept in ${a.file} (mode 600).` : `Already signed in (token in ${a.file}; --force to sign in again).`);
+  await whoami(g, !!o.json);
+});
+program.command("logout").description("Revoke and forget the stored api.sb token").action(async () => {
+  await auth(program.opts()).logout();
+  out("Signed out of api.sb.");
+});
+program.command("whoami").description("Who api.sb sees: the signed-in user, or anonymous").option("--json", "machine output").action(async (o) => whoami(program.opts(), !!o.json));
+var worklistOpts = (c) => c.argument("[for:worker]", "the Worker, e.g. for:tom").option("--for <worker>", "the Worker (same as for:<worker>)").option("--startup <domain...>", "the Startup(s) whose Tasks to read, e.g. barcoding.dev (comma or repeat)").option("--limit <n>", "Tasks in the batch (default 5; api.sb serves at most 50 a page)").option("--page <n>", "a page of the worklist (?page=): 2 is the Tasks after the first batch").option("--all", "every page: follow api.sb's next link to the last page (50 a page unless --limit)").option("--stub", "OFFLINE FALLBACK only: skip api.sb's GET /workers/{name}/worklist and assemble one from its other endpoints").option("--no-previews", "with --stub: don't read each Task's Verb preview (its closing Event)");
+async function worklistMore(target, o) {
+  const g = program.opts();
+  if (o.md && !o.stub) {
+    if (o.all) throw new Error("--md prints one page of api.sb's Markdown: use --page <n> (or --limit up to 50), not --all");
+    const { api } = await client(g);
+    out(await fetchWorklistMarkdown(api, worklistArgs(target, o)));
+    return;
   }
-  return lines.join("\n");
+  const w = await worklistFrom(g, target, o);
+  if (o.json) {
+    out(JSON.stringify(w, null, 2));
+    return;
+  }
+  if (o.prompt || o.md) {
+    err(summary(w));
+    out(renderPrompt(w, { bin: selfBin() }));
+    return;
+  }
+  session(g).leases.remember("worklist", w.tasks.map((t) => t.$id));
+  out(summary(w));
 }
-function renderNextSteps(currentState, startupId, counts, format) {
-  const progress = getProgress(currentState);
-  const commands = getNextCommands(currentState, startupId);
-  const artifacts = getRequiredArtifacts(currentState, counts);
-  if (format === "json") {
-    const result = {
-      state: currentState,
-      progress: progress.map((p) => ({ state: p.state, label: p.label, status: p.status })),
-      requiredArtifacts: artifacts,
-      commands: commands.map((c) => ({
-        name: c.name,
-        collection: c.collection,
-        operation: c.operation,
-        command: c.command,
-        schema: c.schema
-      }))
-    };
-    output(ok(result), "json");
+worklistOpts(program.command("run")).description("Hand a Worker's worklist to claude-runner (--cloud). A local agent runs through `work --agent claude`").option("--cloud", "run on the deployed claude-runner, one session per (Startup, Worker)").option("--dry-run", "show what would run; run nothing").option("--yes", "with --cloud: really start the session(s) (without it, --cloud only shows the plan)").option("--runner <url>", "claude-runner base URL (env SB_RUNNER_URL)").option("--model <model>", "model for the cloud session").option("--json", "machine output").action(async (target, o) => {
+  if (!o.cloud) throw new Error("`run` runs on claude-runner only (--cloud). Locally, `startup-builder work --agent claude` claims a batch and runs an isolated claude on it (`--agent print` prints the prompt)");
+  const g = program.opts();
+  const w = await worklistFrom(g, target, o);
+  err(summary(w));
+  if (!w.tasks.length) {
+    err("Nothing to run: no open Tasks.");
     return;
   }
-  const stateNode = progress.find((p) => p.status === "current");
-  if (stateNode) {
-    process.stdout.write(`
-  ${pc.bold("Startup Builder")} ${pc.dim("|")} ${pc.yellow(stateNode.label)}
-`);
+  const { api } = await client(g, true);
+  const dryRun = o.dryRun || !o.yes;
+  const sessions = await runCloud(api, w, { runner: runnerBase(o.runner), runnerToken: process.env.SB_RUNNER_TOKEN, dryRun, bin: process.env.STARTUP_BUILDER_BIN ?? "npx startup-builder", model: o.model });
+  if (dryRun && !o.dryRun) err(pc.yellow(`--cloud only planned ${sessions.length} session(s): add --yes to start them on claude-runner`));
+  if (o.json) {
+    out(JSON.stringify(sessions.map((s) => ({ ...s, request: { url: s.request.url, body: { ...s.request.body, prompt: `(${String(s.request.body.prompt).length} chars)` } } })), null, 2));
+    return;
   }
-  process.stdout.write(renderProgressBar(progress) + "\n");
-  process.stdout.write(renderArtifactStatus(artifacts) + "\n");
-  process.stdout.write(renderCommandSuggestions(commands, startupId) + "\n");
+  for (const s of sessions) out(`${s.startup}: ${s.via === "none" ? pc.yellow("not started") : pc.green(`started via ${s.via}`)}${s.status ? ` (${s.status})` : ""}${s.url ? ` ${s.url}` : ""}${s.note ? `
+  ${s.note}` : ""}
+  POST ${s.request.url}`);
+  if (sessions.some((s) => s.via === "none") && !o.dryRun) process.exitCode = 2;
+});
+var modeOf = (o) => o.do ? "do" : o.send ? "send" : o.mode ?? "try";
+var isTaskRef = (s) => /^https?:\/\//.test(s) || s.includes("/");
+async function closeAction(ref, o) {
+  const s = session(program.opts());
+  const mode = o.do ? "do" : o.send ? "send" : o.mode;
+  const r = await s.close({ ref, mode, as: o.as, body: o.input || o.data ? parseInput(o.input, o.data) : void 0, force: o.force, idempotencyKey: o.idempotencyKey });
+  out(o.json ? JSON.stringify(r.data, null, 2) : r.data && !o.short ? closeText(r.data) : r.text);
+  if (r.exit) process.exitCode = r.exit;
 }
-var program = new Command();
-program.name("startup-builder").description("Orchestrate a Foundation Sprint \u2014 build a startup step by step").version("0.1.0").argument("[description]", "Short description of the startup idea").option("--idea <id>", "Existing idea ID to build from").option("--name <name>", "Name for the new startup").option("--json <payload>", "JSON input with idea/startup details").option("--startup <id>", "Existing startup ID (for re-entry / status check)").option("--output <format>", "Output format: json or text").option("--api-url <url>", "API base URL").option("--studio <slug>", "Studio (organization) slug").action(async (description, opts) => {
-  const format = detectOutputFormat(opts.output ?? (process.stdout.isTTY ? void 0 : "json"));
-  const apiBaseUrl = opts.apiUrl || getApiBaseUrl();
-  try {
-    const ctx = resolveContext({
-      output: opts.output,
-      apiUrl: opts.apiUrl,
-      studio: opts.studio
-    });
-    const auth = await ensureAuth(ctx);
-    let startupId = opts.startup;
-    let ideaId = opts.idea;
-    let sprintId;
-    let jsonInput = {};
-    if (opts.json) {
-      jsonInput = parseJsonInput(opts.json);
-      startupId = startupId || jsonInput.startup;
-      ideaId = ideaId || jsonInput.idea;
-      description = description || jsonInput.description;
-    }
-    if (!startupId) {
-      const startupName = opts.name || jsonInput.name || description || "Untitled Startup";
-      const startupResult = await apiRequest(apiBaseUrl, "/api/startups", {
-        method: "POST",
-        body: {
-          name: startupName,
-          ...ctx.studioSlug ? { studio: ctx.studioSlug } : {}
-        },
-        apiKey: auth.apiKey
-      });
-      if (!startupResult.ok) {
-        output(err(startupResult.error.code, `Failed to create startup: ${startupResult.error.message}`), format);
-        process.exitCode = 1;
-        return;
-      }
-      startupId = startupResult.data.id;
-      if (format === "text") {
-        process.stdout.write(`
-  ${pc.green("\u2713")} Created startup ${pc.bold(startupResult.data.name)} ${pc.dim(`(${startupId})`)}
-`);
-      }
-      if (!ideaId) {
-        const ideaResult = await apiRequest(apiBaseUrl, "/api/ideas", {
-          method: "POST",
-          body: {
-            name: description || startupName,
-            startup: startupId,
-            description: description || void 0
-          },
-          apiKey: auth.apiKey
-        });
-        if (ideaResult.ok) {
-          ideaId = ideaResult.data.id;
-          if (format === "text") {
-            process.stdout.write(`  ${pc.green("\u2713")} Created idea ${pc.dim(`(${ideaId})`)}
-`);
-          }
-        }
-      }
-      const sprintResult = await apiRequest(apiBaseUrl, "/api/sprints", {
-        method: "POST",
-        body: {
-          name: "Foundation Sprint",
-          startup: startupId,
-          idea: ideaId || void 0,
-          type: "foundation"
-        },
-        apiKey: auth.apiKey
-      });
-      if (sprintResult.ok) {
-        sprintId = sprintResult.data.id;
-        if (format === "text") {
-          process.stdout.write(`  ${pc.green("\u2713")} Created Foundation Sprint ${pc.dim(`(${sprintId})`)}
-`);
-        }
-      }
-    }
-    const { currentState, counts } = await reconcileState(startupId, apiBaseUrl, auth.apiKey);
-    renderNextSteps(currentState, startupId, counts, format);
-  } catch (e) {
-    handleError(e, format);
+var verbFlags = (c) => c.option("--send", "really run it, Prefer: mode=send (you get the Pending Action at once)").option("--do", "really run it, Prefer: mode=do (waits until the Action finishes)").addOption(new Option2("--mode <mode>", "the Mode, sent as Prefer: mode=<mode> (default try: runs once, stores nothing)").choices(["try", "send", "do"])).option("--as <worker|role>", "act as a Worker or Role (?as=); close defaults to the Task's assignee").option("--input <key=value...>", "the Verb's input").option("--data <json>", "the Verb's input as JSON").option("--idempotency-key <key>", "reuse a key (a retry); default a fresh UUID").option("--json", "machine output");
+verbFlags(
+  program.command("do").description("Invoke a Verb. `do <task $id>` closes a Task (as `close`); `do <Noun.verb> [target]` previews it (GET <$id>:<verb>), then POSTs it with an Idempotency-Key. A try-Mode preview unless --do or --send").argument("<Noun.verb|task>", "the Verb, e.g. Offer.publish or Issue.fix; or a Task's $id").argument("[target]", "the Thing: its $id, a path, or a slug in the Startup's collection for the Noun").option("--startup <domain>", "the Startup (needed unless the target is a full $id)").option("--preview", "only the GET preview; invoke nothing").option("--force", "invoke even when the preview says it would be refused")
+).action(async (spec, target, o) => {
+  if (isTaskRef(spec) && !target) return closeAction(spec, o);
+  const g = program.opts();
+  const api = o.preview ? (await client(g)).api : await signedInClient(g);
+  const r = await doVerb(api, {
+    spec,
+    target,
+    startup: o.startup,
+    input: parseInput(o.input, o.data),
+    mode: modeOf(o),
+    as: o.as,
+    previewOnly: o.preview,
+    force: o.force,
+    idempotencyKey: o.idempotencyKey
+  });
+  if (o.json) {
+    out(JSON.stringify(r, null, 2));
+    return;
   }
+  const p = r.preview;
+  out(`${pc.bold(p.name ?? spec)} ${pc.dim(p.url)}`);
+  if (p.error) out(`  ${pc.red("\u2717")} ${p.error} (${p.status})`);
+  if (p.does) out(`  does: ${p.does}`);
+  if (p.event) out(`  emits: ${p.event}${p.mode ? ` \xB7 mode ${p.mode}` : ""}`);
+  if (p.state) out(`  state: ${p.state}`);
+  if (p.permission) out(`  needs: ${p.permission.needs} (held by ${p.permission.heldBy.join(", ") || "no Role"})`);
+  if (p.approvalNeeded !== void 0) out(`  approval: ${p.approvalNeeded ? "needed" : "not needed"}`);
+  if (p.inputs.length) out(`  input: ${p.inputs.join(", ")}`);
+  if (p.refused) out(`  ${pc.red("refused")}: ${p.refused}${o.force ? "" : " (not invoked; --force to try anyway)"}`);
+  if (r.post) {
+    out(`  POST ${r.post.status} \xB7 Prefer: mode=${modeOf(o)} \xB7 Idempotency-Key ${r.post.idempotencyKey}${r.post.actionStatus ? ` \xB7 ${r.post.actionStatus}` : ""}${r.post.action ? ` \xB7 ${r.post.action}` : ""}`);
+    if (r.post.says) out(`  ${r.post.says}`);
+    if (r.post.note) out(`  ${pc.yellow(r.post.note)}`);
+  } else if (o.preview) out(pc.dim("  (preview only: nothing ran)"));
+  if (r.post && modeOf(o) === "try") out(pc.dim("  (a try-Mode preview: nothing stored. --do or --send to run it)"));
+  if (!r.invoked && !o.preview) process.exitCode = p.refused || p.error ? 1 : 2;
+});
+registerLoop(program, {
+  session: () => session(program.opts()),
+  out,
+  err,
+  exit: (code) => process.exitCode = code,
+  readStdin,
+  readFile: (p) => readFileSync(p, "utf8"),
+  selfCli: () => process.env.STARTUP_BUILDER_BIN ? process.env.STARTUP_BUILDER_BIN : selfBin(),
+  logDir: () => join(configDir(), "logs"),
+  version: pkg.version,
+  serveMcp: (s, o) => serveStdio(s, pkg.version, o),
+  worklistMore
+});
+var argv = process.argv;
+program.parseAsync(argv).catch((e) => {
+  err(pc.red(String(e?.message ?? e)));
+  process.exit(1);
 });
-program.parse();