@ai21/gateway 0.5.4 → 1.0.0

package/dist/precheck.js

@@ -0,0 +1,86 @@
+/**
+ * Checks a pasted AI21 key before anything is written, with a GET on the agents
+ * endpoint. Only a positively identified rejection stops a write: there is no flag to
+ * bypass this, so anything we cannot read has to fall through and let the write happen.
+ */
+export const PRECHECK_TIMEOUT_MS = 10_000;
+/** Nothing else is a rejection: a 5xx means the service is unwell, not that the key is bad. */
+const REJECTION_STATUSES = new Set([400, 401, 403]);
+function isLoopbackHost(hostname) {
+    return hostname === "127.0.0.1" || hostname === "localhost" || hostname === "::1" || hostname === "[::1]";
+}
+/** Off-box plain http would put the key on the wire in the clear. */
+function isInsecure(url) {
+    try {
+        const { protocol, hostname } = new URL(url);
+        return protocol === "http:" && !isLoopbackHost(hostname);
+    }
+    catch {
+        return false;
+    }
+}
+/** `undefined` for an unreadable body, distinct from `[]` — a key with no agents. */
+function agentIdsIn(body) {
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        return undefined;
+    }
+    if (!Array.isArray(parsed))
+        return undefined;
+    const ids = [];
+    for (const entry of parsed) {
+        if (typeof entry !== "object" || entry === null)
+            return undefined;
+        // `agent_id` is what `--agent-id` names; `id` is the row's UUID.
+        const id = entry["agent_id"];
+        if (typeof id !== "string")
+            return undefined;
+        ids.push(id);
+    }
+    return ids;
+}
+/** Reasons carry no key and end without a full stop — `report.ts` punctuates. */
+export async function precheckKey(ctx, deps) {
+    if (isInsecure(ctx.agentsUrl)) {
+        return { kind: "skipped", reason: "the gateway is plain http, so the key was not sent to be checked" };
+    }
+    let response;
+    try {
+        response = await deps.fetchImpl(ctx.agentsUrl, {
+            method: "GET",
+            // Not X-AI21-Key: the api-server reads that only on /gateway/v1, and answers 400 here.
+            headers: { "X-API-Key": ctx.ai21Key },
+            signal: AbortSignal.timeout(PRECHECK_TIMEOUT_MS),
+        });
+    }
+    catch (err) {
+        // Named rather than quoted: the cause can carry an internal hostname.
+        return {
+            kind: "inconclusive",
+            reason: isAbort(err)
+                ? `the gateway did not answer within ${PRECHECK_TIMEOUT_MS / 1000}s`
+                : "the gateway could not be reached",
+        };
+    }
+    if (!response.ok) {
+        return REJECTION_STATUSES.has(response.status)
+            ? { kind: "rejected", reason: "the gateway rejected it" }
+            : { kind: "inconclusive", reason: `the gateway answered ${response.status}` };
+    }
+    const ids = agentIdsIn((await response.text?.()) ?? "");
+    if (ids === undefined) {
+        return { kind: "inconclusive", reason: "the gateway's answer could not be read" };
+    }
+    return ids.includes(ctx.agentId) ? { kind: "accepted" } : { kind: "unknown-agent", known: ids };
+}
+function isAbort(err) {
+    return err instanceof Error && (err.name === "AbortError" || err.name === "TimeoutError");
+}
+/** The real-world adapter, kept here so `cli.ts` stays a thin edge. */
+export function nodePrecheckDeps() {
+    return { fetchImpl: fetch };
+}
+//# sourceMappingURL=precheck.js.map

package/dist/precheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"precheck.js","sourceRoot":"","sources":["../src/precheck.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAwBH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAU1C,+FAA+F;AAC/F,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEpD,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO,CAAC;AAC5G,CAAC;AAED,qEAAqE;AACrE,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAE5C,OAAO,QAAQ,KAAK,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAE7C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAElE,iEAAiE;QACjE,MAAM,EAAE,GAAI,KAAiC,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAE7C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAoB,EAAE,IAAkB;IACxE,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,kEAAkE,EAAE,CAAC;IACzG,CAAC;IAED,IAAI,QAAuE,CAAC;IAC5E,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE;YAC7C,MAAM,EAAE,KAAK;YACb,uFAAuF;YACvF,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE;YACrC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC;gBAClB,CAAC,CAAC,qCAAqC,mBAAmB,GAAG,IAAI,GAAG;gBACpE,CAAC,CAAC,kCAAkC;SACvC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,yBAAyB,EAAE;YACzD,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,wBAAwB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IACpF,CAAC;IAED,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAClG,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;AAC5F,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,EAAE,SAAS,EAAE,KAA6B,EAAE,CAAC;AACtD,CAAC"}

package/dist/prompt.d.ts

@@ -1,20 +1,11 @@
 /**
- * Reading the AI21 key from the terminal when `--key` was not given.
+ * The terminal the CLI was run from.
  *
- * Two properties matter: the key is never echoed — the whole reason for prompting
- * rather than taking a flag — and a non-interactive run fails immediately instead
- * of blocking on a stdin that will never deliver a line.
+ * All that is left of the key prompt: pasting a key is error-prone, so the only ways in
+ * are `--key` and signing in through the browser. What survives is the tty check, which
+ * decides whether a sign-in can be offered at all.
  */
 import type { Readable, Writable } from "node:stream";
-/** How the prompt ended. `cancelled` covers Ctrl-C and a closed stdin. */
-export type PromptOutcome = {
-    readonly kind: "key";
-    readonly value: string;
-} | {
-    readonly kind: "no-tty";
-} | {
-    readonly kind: "cancelled";
-};
 export interface PromptIo {
     readonly input: Readable & {
         isTTY?: boolean;
@@ -24,9 +15,3 @@ export interface PromptIo {
     /** Overrides the stream's own flag; tests drive a pipe as though it were a tty. */
     readonly isTTY?: boolean;
 }
-/**
- * Reads one line without echoing it. Raw mode is what makes that possible, and is
- * restored on every exit path — a terminal left in raw mode makes the user's next
- * command invisible.
- */
-export declare function promptForKey(io: PromptIo, label?: string): Promise<PromptOutcome>;

package/dist/prompt.js

@@ -1,72 +1,2 @@
-const ETX = "\u0003"; // Ctrl-C
-const EOT = "\u0004"; // Ctrl-D
-// eslint-disable-next-line no-control-regex
-const BACKSPACE = /[\u0008\u007F]/;
-// C0 controls minus the ones handled above, plus DEL.
-// eslint-disable-next-line no-control-regex
-const OTHER_CONTROL = /[\u0000-\u001F\u007F]/;
-/**
- * Reads one line without echoing it. Raw mode is what makes that possible, and is
- * restored on every exit path — a terminal left in raw mode makes the user's next
- * command invisible.
- */
-export function promptForKey(io, label = "AI21 key: ") {
-    const interactive = io.isTTY ?? io.input.isTTY ?? false;
-    if (!interactive) {
-        return Promise.resolve({ kind: "no-tty" });
-    }
-    return new Promise((resolve) => {
-        let buffer = "";
-        let settled = false;
-        const restore = () => {
-            io.input.setRawMode?.(false);
-            io.input.pause();
-            io.input.off("data", onData);
-            io.input.off("end", onEnd);
-            io.input.off("close", onEnd);
-        };
-        // Ctrl-D arrives as a byte, but a stream that simply ends delivers none. Without
-        // this the promise never settles and the CLI wedges.
-        function onEnd() {
-            finish({ kind: "cancelled" });
-        }
-        const finish = (outcome) => {
-            if (settled)
-                return;
-            settled = true;
-            restore();
-            // The newline the user's Enter did not produce, because it was swallowed.
-            io.output.write("\n");
-            resolve(outcome);
-        };
-        function onData(chunk) {
-            for (const char of chunk.toString("utf8")) {
-                if (char === "\r" || char === "\n") {
-                    finish({ kind: "key", value: buffer });
-                    return;
-                }
-                if (char === ETX || char === EOT) {
-                    finish({ kind: "cancelled" });
-                    return;
-                }
-                if (BACKSPACE.test(char)) {
-                    buffer = buffer.slice(0, -1);
-                    continue;
-                }
-                // Arrow keys arrive as escape sequences and would corrupt the key. The flag
-                // path rejects the same characters, so accepting them here is a second way in.
-                if (OTHER_CONTROL.test(char))
-                    continue;
-                // Unechoed, and no mask characters either: a visible length is information.
-                buffer += char;
-            }
-        }
-        io.output.write(label);
-        io.input.setRawMode?.(true);
-        io.input.resume();
-        io.input.on("data", onData);
-        io.input.once("end", onEnd);
-        io.input.once("close", onEnd);
-    });
-}
+export {};
 //# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAsBA,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,SAAS;AAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,SAAS;AAC/B,4CAA4C;AAC5C,MAAM,SAAS,GAAG,gBAAgB,CAAC;AACnC,sDAAsD;AACtD,4CAA4C;AAC5C,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,EAAY,EAAE,KAAK,GAAG,YAAY;IAC7D,MAAM,WAAW,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;IACxD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QAC5C,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;YAC7B,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7B,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC3B,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC;QAEF,iFAAiF;QACjF,qDAAqD;QACrD,SAAS,KAAK;YACZ,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,OAAsB,EAAQ,EAAE;YAC9C,IAAI,OAAO;gBAAE,OAAO;YAEpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,0EAA0E;YAC1E,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC,CAAC;QAEF,SAAS,MAAM,CAAC,KAAsB;YACpC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBACnC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;oBAEvC,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACjC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;oBAE9B,OAAO;gBACT,CAAC;gBAED,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzB,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC7B,SAAS;gBACX,CAAC;gBAED,4EAA4E;gBAC5E,+EAA+E;gBAC/E,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAEvC,4EAA4E;gBAC5E,MAAM,IAAI,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvB,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5B,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5B,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":""}

package/dist/report.d.ts

@@ -1,12 +1,6 @@
-/**
- * Turning an outcome into output: human text on the right stream, or exactly one
- * JSON object, plus the warnings that apply either way.
- *
- * Two rules hold everywhere here. The key never appears, in any line. And `--json`
- * emits a single object, since a consumer parses the whole of stdout.
- */
 import type { ResolvedUrls } from "./args.js";
 import type { ConfigOutcome } from "./config.js";
+import type { PrecheckOutcome } from "./precheck.js";
 import type { RevertOutcome } from "./revert.js";
 import type { VerifyOutcome } from "./verify.js";
 import { type RunResult } from "./result.js";
@@ -21,16 +15,31 @@ export declare const EXIT_FOR: Record<ConfigOutcome["kind"], number>;
  * "not-there" cases get their own codes so a script can tell them apart.
  */
 export declare const EXIT_FOR_REVERT: Record<RevertOutcome["kind"], number>;
-export declare function reportRevert(outcome: RevertOutcome, json: boolean): RunResult;
+/** A write stream, narrowed to the one question asked of it. A pipe has no `hasColors`. */
+export interface ColorTarget {
+    readonly hasColors?: () => boolean;
+}
+/** Where this report's two halves are bound for; injected so tests need no tty. */
+export interface ColorTargets {
+    readonly out: ColorTarget;
+    readonly err: ColorTarget;
+}
+/** `NOTHING_WRITTEN`, painted for stderr — the stream every refusal that says it lands on. */
+export declare function nothingWasWritten(streams?: ColorTargets): string;
+export declare function reportRevert(outcome: RevertOutcome, json: boolean, streams?: ColorTargets): RunResult;
 export interface Warning {
     /** Stable identifier, so `--json` consumers match on this and not on prose. */
-    readonly code: "anthropic-api-key-set" | "non-production-gateway" | "insecure-gateway" | "verification-skipped" | "verification-failed";
+    readonly code: "anthropic-api-key-set" | "shadowed-by-local-config" | "non-production-gateway" | "insecure-gateway" | "verification-skipped" | "verification-failed" | "key-check-inconclusive";
     readonly message: string;
 }
 export interface WarningContext {
     readonly urls: ResolvedUrls;
     /** The process environment, injected so tests need not mutate the real one. */
     readonly processEnv: Record<string, string | undefined>;
+    readonly localOverride?: {
+        readonly path: string;
+        readonly agentId?: string;
+    } | undefined;
 }
 /**
  * Not failures, but things that make a correct config look broken later — which is
@@ -46,5 +55,9 @@ export interface ReportInput {
     readonly urls: ResolvedUrls;
     /** Absent when the write never succeeded, so verification was not attempted. */
     readonly verification?: VerifyOutcome | undefined;
+    /** How the pre-write key check ended. Only the outcomes that permit a write reach here. */
+    readonly precheck?: PrecheckOutcome | undefined;
+    /** Colour destinations; defaults to the real process streams. Injected in tests. */
+    readonly streams?: ColorTargets | undefined;
 }
 export declare function report(input: ReportInput): RunResult;

package/dist/report.js

@@ -1,3 +1,14 @@
+/**
+ * Turning an outcome into output: human text on the right stream, or exactly one
+ * JSON object, plus the warnings that apply either way.
+ *
+ * Three rules hold everywhere here. The key never appears, in any line. `--json`
+ * emits a single object, since a consumer parses the whole of stdout. And colour is
+ * decoration only: every styled string is byte-identical to the old one once the
+ * destination turns out not to be a terminal, which is what keeps `--json`, piped
+ * output and the existing output assertions unaffected.
+ */
+import { styleText } from "node:util";
 import { DEFAULT_URLS, isInsecureGateway } from "./args.js";
 import { EXIT } from "./result.js";
 /**
@@ -27,6 +38,38 @@ export const EXIT_FOR_REVERT = {
     malformed: EXIT.MALFORMED,
     failed: EXIT.INTERNAL,
 };
+const PROCESS_STREAMS = { out: process.stdout, err: process.stderr };
+const PLAIN = (_format, text) => text;
+/**
+ * Colour belongs to the stream the text lands on, not to the process, so each
+ * destination is asked about itself: `install > out.txt` has to keep escapes out of
+ * the file while the warnings still arrive coloured on the terminal.
+ *
+ * `hasColors()` makes the decision because it is the portable half — it exists on
+ * every Node this package supports and already honours NO_COLOR, FORCE_COLOR,
+ * NODE_DISABLE_COLORS and TERM=dumb. `styleText` is then told not to repeat the
+ * check: its own default interrogates `process.stdout` whichever stream the text is
+ * actually headed for, which would drop colour from stderr whenever stdout is piped.
+ * That option is ignored by Node 20.12–20.17, which did no validating anyway.
+ */
+function painterFor(target) {
+    if (target.hasColors?.() !== true)
+        return PLAIN;
+    return (format, text) => styleText(format, text, { validateStream: false });
+}
+/**
+ * The sentence a refusal exists to deliver: it answers the only question a refusal
+ * raises — what happened to my file? — so it is painted like a `warning:` label
+ * instead of being left to the body prose, and like that label it is the only
+ * coloured part of its sentence.
+ *
+ * Yellow rather than red because nothing went wrong with the file: it is untouched.
+ */
+const NOTHING_WRITTEN = "Nothing was written.";
+/** `NOTHING_WRITTEN`, painted for stderr — the stream every refusal that says it lands on. */
+export function nothingWasWritten(streams = PROCESS_STREAMS) {
+    return painterFor(streams.err)("yellow", NOTHING_WRITTEN);
+}
 function revertLine(outcome) {
     switch (outcome.kind) {
         case "reverted": {
@@ -53,7 +96,7 @@ function revertLine(outcome) {
     }
 }
 /** Human-only detail: what the user can do about a refusal. */
-function revertDetail(outcome) {
+function revertDetail(outcome, paint) {
     switch (outcome.kind) {
         case "reverted":
             // Said out loud because it is a silent partial failure otherwise: the keys
@@ -62,29 +105,34 @@ function revertDetail(outcome) {
                 ? `The backup could not be read, so any values these keys held before could not be restored.\n`
                 : "";
         case "drifted":
-            return ("Restoring the backup would discard those changes. Nothing was written.\n" +
+            return (`Restoring the backup would discard those changes. ${paint("yellow", NOTHING_WRITTEN)}\n` +
                 "Re-run with --yes to restore anyway, or without --from-backup to remove only this tool's keys.\n");
         case "agent-mismatch":
-            return "Nothing was written. Re-run without --agent-id to revert whatever is there.\n";
+            return `${paint("yellow", NOTHING_WRITTEN)} Re-run without --agent-id to revert whatever is there.\n`;
         case "no-backup":
             return "Re-run without --from-backup to remove only this tool's keys.\n";
         case "malformed":
-            return "Nothing was written. Fix or move the file, then re-run.\n";
+            return `${paint("yellow", NOTHING_WRITTEN)} Fix or move the file, then re-run.\n`;
         case "failed":
             return "The existing file was left unchanged.\n";
         default:
             return "";
     }
 }
-export function reportRevert(outcome, json) {
+export function reportRevert(outcome, json, streams = PROCESS_STREAMS) {
     const code = EXIT_FOR_REVERT[outcome.kind];
     if (json) {
         const { kind, path, ...rest } = outcome;
         const payload = { ok: code === EXIT.OK, outcome: kind, exitCode: code, path, ...rest };
         return { code, out: `${JSON.stringify(payload, null, 2)}\n`, err: "" };
     }
-    const body = `${revertLine(outcome)}\n${revertDetail(outcome)}`;
-    return code === EXIT.OK ? { code, out: body, err: "" } : { code, out: "", err: body };
+    const ok = code === EXIT.OK;
+    // Colour tracks the exit code, with one exception: `not-configured` is a state,
+    // not a refusal, and painting "nothing to revert" red reads like a crash.
+    const format = outcome.kind === "not-configured" ? "yellow" : ok ? "green" : "red";
+    const paint = painterFor(ok ? streams.out : streams.err);
+    const body = `${paint(format, revertLine(outcome))}\n${revertDetail(outcome, paint)}`;
+    return ok ? { code, out: body, err: "" } : { code, out: "", err: body };
 }
 /**
  * Not failures, but things that make a correct config look broken later — which is
@@ -100,6 +148,17 @@ export function collectWarnings(ctx) {
             message: "ANTHROPIC_API_KEY is set in your environment. It overrides the credential Claude Code manages and can cause 401s through the gateway — unset it if requests start failing.",
         });
     }
+    if (ctx.localOverride !== undefined) {
+        const { path, agentId } = ctx.localOverride;
+        warnings.push({
+            code: "shadowed-by-local-config",
+            message: `${path} also sets Claude Code's env, and it is read after this file — so it wins. ` +
+                (agentId === undefined
+                    ? "Requests will not use the agent configured here."
+                    : `Requests will report as '${agentId}', not the agent configured here.`) +
+                " Remove its env block, or move your override into this file.",
+        });
+    }
     if (isInsecureGateway(ctx.urls.gateway)) {
         warnings.push({
             code: "insecure-gateway",
@@ -159,6 +218,15 @@ function verificationWarning(outcome) {
             return undefined;
     }
 }
+/** Only outcomes that permitted the write reach here; a rejection never gets this far. */
+function precheckWarning(outcome) {
+    if (outcome.kind !== "inconclusive" && outcome.kind !== "skipped")
+        return undefined;
+    return {
+        code: "key-check-inconclusive",
+        message: `The AI21 key could not be checked before writing — ${outcome.reason}. The configuration was written; if requests fail, the key is the first thing to check.`,
+    };
+}
 /** The stdout line for a successful verification; nothing for any other outcome. */
 function verificationLine(outcome) {
     if (outcome?.kind !== "passed")
@@ -185,6 +253,11 @@ function jsonPayload(input, code, warnings) {
         const { kind, ...rest } = input.verification;
         payload.verification = { status: kind, ...rest };
     }
+    // Same contract as `verification`: checked or not, without matching on prose.
+    if (input.precheck !== undefined) {
+        const { kind, ...rest } = input.precheck;
+        payload.keyCheck = { status: kind, ...rest };
+    }
     if (outcome.kind === "updated") {
         payload.changed = outcome.changed;
         payload.backup = outcome.backup;
@@ -199,16 +272,27 @@ function jsonPayload(input, code, warnings) {
 }
 export function report(input) {
     const code = EXIT_FOR[input.outcome.kind];
-    const fromVerification = input.verification === undefined ? undefined : verificationWarning(input.verification);
-    const warnings = fromVerification === undefined ? input.warnings : [...input.warnings, fromVerification];
+    const derived = [
+        input.verification === undefined ? undefined : verificationWarning(input.verification),
+        input.precheck === undefined ? undefined : precheckWarning(input.precheck),
+    ].filter((warning) => warning !== undefined);
+    const warnings = [...input.warnings, ...derived];
     if (input.json) {
         // Everything on stdout, nothing on stderr: a single parse of one stream.
         return { code, out: jsonPayload(input, code, warnings), err: "" };
     }
-    const warningText = warnings.map((w) => `warning: ${w.message}\n`).join("");
-    const body = `${humanLine(input.outcome)}\n${verificationLine(input.verification)}${input.detail ?? ""}`;
     // Success narrates on stdout; a refusal belongs on stderr so `>/dev/null`
-    // still shows the user why nothing happened.
-    return code === EXIT.OK ? { code, out: body, err: warningText } : { code, out: "", err: `${body}${warningText}` };
+    // still shows the user why nothing happened. Each half is painted for the stream
+    // it will actually be written to, and warnings are always stderr-bound.
+    const ok = code === EXIT.OK;
+    const streams = input.streams ?? PROCESS_STREAMS;
+    const paintBody = painterFor(ok ? streams.out : streams.err);
+    const paintWarning = painterFor(streams.err);
+    // Only the label is coloured: the message is prose, and a paragraph of yellow is
+    // harder to read than the plain one it replaced.
+    const warningText = warnings.map((w) => `${paintWarning("yellow", "warning:")} ${w.message}\n`).join("");
+    const line = paintBody(ok ? "green" : "red", humanLine(input.outcome));
+    const body = `${line}\n${verificationLine(input.verification)}${input.detail ?? ""}`;
+    return ok ? { code, out: body, err: warningText } : { code, out: "", err: `${body}${warningText}` };
 }
 //# sourceMappingURL=report.js.map

package/dist/report.js.map

@@ -1 +1 @@
-{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAkB,MAAM,aAAa,CAAC;AAEnD;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAA0C;IAC7D,OAAO,EAAE,IAAI,CAAC,EAAE;IAChB,OAAO,EAAE,IAAI,CAAC,EAAE;IAChB,SAAS,EAAE,IAAI,CAAC,EAAE;IAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;IACvB,SAAS,EAAE,IAAI,CAAC,SAAS;IACzB,MAAM,EAAE,IAAI,CAAC,QAAQ;CACtB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0C;IACpE,QAAQ,EAAE,IAAI,CAAC,EAAE;IACjB,QAAQ,EAAE,IAAI,CAAC,EAAE;IACjB,gBAAgB,EAAE,IAAI,CAAC,cAAc;IACrC,gBAAgB,EAAE,IAAI,CAAC,QAAQ;IAC/B,OAAO,EAAE,IAAI,CAAC,QAAQ;IACtB,WAAW,EAAE,IAAI,CAAC,SAAS;IAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;IACzB,MAAM,EAAE,IAAI,CAAC,QAAQ;CACtB,CAAC;AAEF,SAAS,UAAU,CAAC,OAAsB;IACxC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG;gBACZ,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;gBACtG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;aACjF,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YAEvD,OAAO,YAAY,OAAO,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,CAAC;QACD,KAAK,UAAU;YACb,OAAO,YAAY,OAAO,CAAC,IAAI,SAAS,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3D,KAAK,gBAAgB;YACnB,OAAO,uBAAuB,OAAO,CAAC,IAAI,uCAAuC,CAAC;QACpF,KAAK,gBAAgB;YACnB,OAAO,GAAG,OAAO,CAAC,IAAI,6BAA6B,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,QAAQ,IAAI,CAAC;QACnG,KAAK,SAAS;YACZ,OAAO,GAAG,OAAO,CAAC,IAAI,oCAAoC,CAAC;QAC7D,KAAK,WAAW;YACd,OAAO,8BAA8B,OAAO,CAAC,MAAM,kBAAkB,CAAC;QACxE,KAAK,WAAW;YACd,OAAO,oBAAoB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;QAChE,KAAK,QAAQ;YACX,OAAO,oBAAoB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;IAClE,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,SAAS,YAAY,CAAC,OAAsB;IAC1C,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,UAAU;YACb,2EAA2E;YAC3E,qEAAqE;YACrE,OAAO,OAAO,CAAC,gBAAgB;gBAC7B,CAAC,CAAC,6FAA6F;gBAC/F,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,SAAS;YACZ,OAAO,CACL,0EAA0E;gBAC1E,kGAAkG,CACnG,CAAC;QACJ,KAAK,gBAAgB;YACnB,OAAO,+EAA+E,CAAC;QACzF,KAAK,WAAW;YACd,OAAO,iEAAiE,CAAC;QAC3E,KAAK,WAAW;YACd,OAAO,2DAA2D,CAAC;QACrE,KAAK,QAAQ;YACX,OAAO,yCAAyC,CAAC;QACnD;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAsB,EAAE,IAAa;IAChE,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3C,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QACxC,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,KAAK,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;QAEvF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;IAEhE,OAAO,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACxF,CAAC;AAmBD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAmB;IACjD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,KAAK,EAAE,EAAE,CAAC;QAC9F,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,yEAAyE;YACzE,wEAAwE;YACxE,OAAO,EACL,4KAA4K;SAC/K,CAAC,CAAC;IACL,CAAC;IAED,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,0EAA0E;YAC1E,0EAA0E;YAC1E,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,sIAAsI;SACnK,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,YAAY,CAAC,OAAO,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,wCAAwC,GAAG,CAAC,IAAI,CAAC,OAAO,oBAAoB;SACtF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wEAAwE;AACxE,SAAS,SAAS,CAAC,OAAsB;IACvC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,SAAS,OAAO,CAAC,IAAI,EAAE,CAAC;QACjC,KAAK,SAAS;YACZ,OAAO,WAAW,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC,OAAO,CAAC,MAAM,EAAE,CAAC;QACrH,KAAK,WAAW;YACd,OAAO,wBAAwB,OAAO,CAAC,IAAI,iBAAiB,CAAC;QAC/D,KAAK,UAAU;YACb,OAAO,GAAG,OAAO,CAAC,IAAI,iDAAiD,CAAC;QAC1E,KAAK,WAAW;YACd,OAAO,oBAAoB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;QAChE,KAAK,QAAQ;YACX,OAAO,mBAAmB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;IACjE,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,YAAY,GAAG;IACnB,YAAY,EAAE,aAAa;IAC3B,aAAa,EAAE,kBAAkB;CACzB,CAAC;AAEX;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,OAAsB;IACjD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO;gBACL,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,iEAAiE,OAAO,CAAC,IAAI,EAAE;aACzF,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,0CAA0C,OAAO,CAAC,MAAM,oDAAoD;aACtH,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,gBAAgB,CAAC,OAAkC;IAC1D,IAAI,OAAO,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAE1C,OAAO,qCAAqC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;AAC7E,CAAC;AAaD;;;GAGG;AACH,SAAS,WAAW,CAAC,KAAkB,EAAE,IAAY,EAAE,QAA4B;IACjF,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,OAAO,GAA4B;QACvC,EAAE,EAAE,IAAI,KAAK,IAAI,CAAC,EAAE;QACpB,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;QAC3B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;KACtE,CAAC;IAEF,kFAAkF;IAClF,2DAA2D;IAC3D,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC;QAC7C,OAAO,CAAC,YAAY,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAClC,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9D,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAClC,CAAC;IAED,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAkB;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,gBAAgB,GAAG,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAChH,MAAM,QAAQ,GAAG,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAEzG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,yEAAyE;QACzE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IAEzG,0EAA0E;IAC1E,6CAA6C;IAC7C,OAAO,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,WAAW,EAAE,EAAE,CAAC;AACpH,CAAC"}
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAOtC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAkB,MAAM,aAAa,CAAC;AAEnD;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAA0C;IAC7D,OAAO,EAAE,IAAI,CAAC,EAAE;IAChB,OAAO,EAAE,IAAI,CAAC,EAAE;IAChB,SAAS,EAAE,IAAI,CAAC,EAAE;IAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;IACvB,SAAS,EAAE,IAAI,CAAC,SAAS;IACzB,MAAM,EAAE,IAAI,CAAC,QAAQ;CACtB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0C;IACpE,QAAQ,EAAE,IAAI,CAAC,EAAE;IACjB,QAAQ,EAAE,IAAI,CAAC,EAAE;IACjB,gBAAgB,EAAE,IAAI,CAAC,cAAc;IACrC,gBAAgB,EAAE,IAAI,CAAC,QAAQ;IAC/B,OAAO,EAAE,IAAI,CAAC,QAAQ;IACtB,WAAW,EAAE,IAAI,CAAC,SAAS;IAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;IACzB,MAAM,EAAE,IAAI,CAAC,QAAQ;CACtB,CAAC;AAaF,MAAM,eAAe,GAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AAOnF,MAAM,KAAK,GAAU,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;AAE7C;;;;;;;;;;;GAWG;AACH,SAAS,UAAU,CAAC,MAAmB;IACrC,IAAI,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEhD,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAE/C,8FAA8F;AAC9F,MAAM,UAAU,iBAAiB,CAAC,UAAwB,eAAe;IACvE,OAAO,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,UAAU,CAAC,OAAsB;IACxC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG;gBACZ,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;gBACtG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;aACjF,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YAEvD,OAAO,YAAY,OAAO,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,CAAC;QACD,KAAK,UAAU;YACb,OAAO,YAAY,OAAO,CAAC,IAAI,SAAS,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3D,KAAK,gBAAgB;YACnB,OAAO,uBAAuB,OAAO,CAAC,IAAI,uCAAuC,CAAC;QACpF,KAAK,gBAAgB;YACnB,OAAO,GAAG,OAAO,CAAC,IAAI,6BAA6B,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,QAAQ,IAAI,CAAC;QACnG,KAAK,SAAS;YACZ,OAAO,GAAG,OAAO,CAAC,IAAI,oCAAoC,CAAC;QAC7D,KAAK,WAAW;YACd,OAAO,8BAA8B,OAAO,CAAC,MAAM,kBAAkB,CAAC;QACxE,KAAK,WAAW;YACd,OAAO,oBAAoB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;QAChE,KAAK,QAAQ;YACX,OAAO,oBAAoB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;IAClE,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,SAAS,YAAY,CAAC,OAAsB,EAAE,KAAY;IACxD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,UAAU;YACb,2EAA2E;YAC3E,qEAAqE;YACrE,OAAO,OAAO,CAAC,gBAAgB;gBAC7B,CAAC,CAAC,6FAA6F;gBAC/F,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,SAAS;YACZ,OAAO,CACL,qDAAqD,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,IAAI;gBACzF,kGAAkG,CACnG,CAAC;QACJ,KAAK,gBAAgB;YACnB,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,2DAA2D,CAAC;QACxG,KAAK,WAAW;YACd,OAAO,iEAAiE,CAAC;QAC3E,KAAK,WAAW;YACd,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,uCAAuC,CAAC;QACpF,KAAK,QAAQ;YACX,OAAO,yCAAyC,CAAC;QACnD;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAAsB,EACtB,IAAa,EACb,UAAwB,eAAe;IAEvC,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3C,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QACxC,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,KAAK,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;QAEvF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;IAC5B,gFAAgF;IAChF,0EAA0E;IAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACnF,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;IAEtF,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC1E,CAAC;AAsBD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAmB;IACjD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,KAAK,EAAE,EAAE,CAAC;QAC9F,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,yEAAyE;YACzE,wEAAwE;YACxE,OAAO,EACL,4KAA4K;SAC/K,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,0BAA0B;YAChC,OAAO,EACL,GAAG,IAAI,6EAA6E;gBACpF,CAAC,OAAO,KAAK,SAAS;oBACpB,CAAC,CAAC,kDAAkD;oBACpD,CAAC,CAAC,4BAA4B,OAAO,mCAAmC,CAAC;gBAC3E,8DAA8D;SACjE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,0EAA0E;YAC1E,0EAA0E;YAC1E,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,sIAAsI;SACnK,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,YAAY,CAAC,OAAO,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,wCAAwC,GAAG,CAAC,IAAI,CAAC,OAAO,oBAAoB;SACtF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wEAAwE;AACxE,SAAS,SAAS,CAAC,OAAsB;IACvC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,SAAS,OAAO,CAAC,IAAI,EAAE,CAAC;QACjC,KAAK,SAAS;YACZ,OAAO,WAAW,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC,OAAO,CAAC,MAAM,EAAE,CAAC;QACrH,KAAK,WAAW;YACd,OAAO,wBAAwB,OAAO,CAAC,IAAI,iBAAiB,CAAC;QAC/D,KAAK,UAAU;YACb,OAAO,GAAG,OAAO,CAAC,IAAI,iDAAiD,CAAC;QAC1E,KAAK,WAAW;YACd,OAAO,oBAAoB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;QAChE,KAAK,QAAQ;YACX,OAAO,mBAAmB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;IACjE,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,YAAY,GAAG;IACnB,YAAY,EAAE,aAAa;IAC3B,aAAa,EAAE,kBAAkB;CACzB,CAAC;AAEX;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,OAAsB;IACjD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO;gBACL,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,iEAAiE,OAAO,CAAC,IAAI,EAAE;aACzF,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,0CAA0C,OAAO,CAAC,MAAM,oDAAoD;aACtH,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,SAAS,eAAe,CAAC,OAAwB;IAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAEpF,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,sDAAsD,OAAO,CAAC,MAAM,yFAAyF;KACvK,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,gBAAgB,CAAC,OAAkC;IAC1D,IAAI,OAAO,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAE1C,OAAO,qCAAqC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;AAC7E,CAAC;AAiBD;;;GAGG;AACH,SAAS,WAAW,CAAC,KAAkB,EAAE,IAAY,EAAE,QAA4B;IACjF,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,OAAO,GAA4B;QACvC,EAAE,EAAE,IAAI,KAAK,IAAI,CAAC,EAAE;QACpB,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;QAC3B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;KACtE,CAAC;IAEF,kFAAkF;IAClF,2DAA2D;IAC3D,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC;QAC7C,OAAO,CAAC,YAAY,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IACnD,CAAC;IAED,8EAA8E;IAC9E,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC;QACzC,OAAO,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAClC,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9D,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAClC,CAAC;IAED,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAkB;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC;QACtF,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC;KAC3E,CAAC,MAAM,CAAC,CAAC,OAAO,EAAsB,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;IAEjD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,yEAAyE;QACzE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACpE,CAAC;IAED,0EAA0E;IAC1E,iFAAiF;IACjF,wEAAwE;IACxE,MAAM,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,eAAe,CAAC;IACjD,MAAM,SAAS,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAE7C,iFAAiF;IACjF,iDAAiD;IACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,GAAG,IAAI,KAAK,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IAErF,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,WAAW,EAAE,EAAE,CAAC;AACtG,CAAC"}

package/dist/result.d.ts

@@ -18,6 +18,8 @@ export declare const EXIT: {
     readonly NO_BACKUP: 6;
     /** `login` did not complete: timed out, or the response was refused. */
     readonly LOGIN_INCOMPLETE: 7;
+    /** `login` found no workspace to mint a key in after filtering. */
+    readonly NO_WORKSPACE: 8;
 };
 export interface RunResult {
     readonly code: number;

package/dist/result.js

@@ -18,5 +18,7 @@ export const EXIT = {
     NO_BACKUP: 6,
     /** `login` did not complete: timed out, or the response was refused. */
     LOGIN_INCOMPLETE: 7,
+    /** `login` found no workspace to mint a key in after filtering. */
+    NO_WORKSPACE: 8,
 };
 //# sourceMappingURL=result.js.map

package/dist/result.js.map

@@ -1 +1 @@
-{"version":3,"file":"result.js","sourceRoot":"","sources":["../src/result.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAE1F;;;GAGG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,EAAE,EAAE,CAAC;IACL,uEAAuE;IACvE,QAAQ,EAAE,CAAC;IACX,KAAK,EAAE,CAAC;IACR,+EAA+E;IAC/E,QAAQ,EAAE,CAAC;IACX,gFAAgF;IAChF,SAAS,EAAE,CAAC;IACZ,wFAAwF;IACxF,cAAc,EAAE,CAAC;IACjB,mEAAmE;IACnE,SAAS,EAAE,CAAC;IACZ,wEAAwE;IACxE,gBAAgB,EAAE,CAAC;CACX,CAAC"}
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../src/result.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAE1F;;;GAGG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,EAAE,EAAE,CAAC;IACL,uEAAuE;IACvE,QAAQ,EAAE,CAAC;IACX,KAAK,EAAE,CAAC;IACR,+EAA+E;IAC/E,QAAQ,EAAE,CAAC;IACX,gFAAgF;IAChF,SAAS,EAAE,CAAC;IACZ,wFAAwF;IACxF,cAAc,EAAE,CAAC;IACjB,mEAAmE;IACnE,SAAS,EAAE,CAAC;IACZ,wEAAwE;IACxE,gBAAgB,EAAE,CAAC;IACnB,mEAAmE;IACnE,YAAY,EAAE,CAAC;CACP,CAAC"}

package/dist/router.d.ts

@@ -4,6 +4,7 @@
  */
 import { type ParsedArgs } from "./args.js";
 import { type PathContext } from "./config.js";
+import { type PrecheckDeps } from "./precheck.js";
 import { type PromptIo } from "./prompt.js";
 import { type LoginDeps } from "./login/session.js";
 import { type RunResult } from "./result.js";
@@ -14,6 +15,7 @@ export interface RunContext {
     readonly prompt: PromptIo;
     readonly processEnv: Record<string, string | undefined>;
     readonly verify: VerifyDeps;
+    readonly precheck: PrecheckDeps;
     readonly login: LoginDeps;
     /** Progress output while `login` waits. Streams, so it cannot go in RunResult. */
     readonly notify: (message: string) => void;