@amdahl/cli 0.2.4 → 0.3.1

package/dist/amdahl.js

@@ -7371,26 +7371,25 @@ import { createInterface } from "readline";
 // src/select.ts
 import { emitKeypressEvents } from "readline";
 var HINT = "(Use the arrow keys, then Enter)";
+var MULTI_HINT = "(Use the arrow keys, Space to tick or untick, then Enter)";
+var OFF = "\x1B[0m";
 var HIDE_CURSOR = "\x1B[?25l";
 var SHOW_CURSOR = "\x1B[?25h";
 var CLEAR_LINE = "\x1B[2K";
 var CLEAR_DOWN = "\x1B[0J";
 var up = (n) => `\x1B[${n}A`;
-function selectMenu(input, output, question, choices, options = {}) {
-  let current = Math.min(Math.max(options.initial ?? 0, 0), choices.length - 1);
-  const on = options.color ? options.trueColor ? "\x1B[1;38;2;253;75;3m" : "\x1B[1;38;5;202m" : "\x1B[1m";
-  const off = "\x1B[0m";
-  const row = (i) => i === current ? `${on}> ${choices[i]}${off}` : `  ${choices[i]}`;
-  const draw = () => choices.map((_, i) => `${CLEAR_LINE}\r${row(i)}
-`).join("") + `${CLEAR_LINE}\r${HINT}
+function runMenu(input, output, question, hint, rows, onKey) {
+  const draw = () => rows().map((r) => `${CLEAR_LINE}\r${r}
+`).join("") + `${CLEAR_LINE}\r${hint}
 `;
+  const height = rows().length;
   const wasRaw = input.isRaw === true;
   return new Promise((resolve, reject) => {
     let done = false;
     const finish = (outcome) => {
       if (done) return;
       done = true;
-      input.removeListener("keypress", onKey);
+      input.removeListener("keypress", onKeypress);
       input.removeListener("error", onError);
       process.removeListener("SIGINT", onSigint);
       try {
@@ -7399,7 +7398,7 @@ function selectMenu(input, output, question, choices, options = {}) {
       }
       input.pause();
       if ("pick" in outcome) {
-        output.write(`${up(choices.length + 2)}\r${CLEAR_DOWN}${question} ${choices[outcome.pick]}
+        output.write(`${up(height + 2)}\r${CLEAR_DOWN}${question} ${outcome.summary}
 ${SHOW_CURSOR}`);
         resolve(outcome.pick);
       } else {
@@ -7407,17 +7406,12 @@ ${SHOW_CURSOR}`);
         reject(outcome.error);
       }
     };
-    const onKey = (text, key) => {
+    const onKeypress = (text, key) => {
       const name = key?.name ?? text;
       if (key?.ctrl && (name === "c" || name === "d")) return finish({ error: new PromptCancelled() });
-      if (name === "return" || name === "enter") return finish({ pick: current });
-      let next = current;
-      if (name === "up" || name === "k") next = (current - 1 + choices.length) % choices.length;
-      else if (name === "down" || name === "j") next = (current + 1) % choices.length;
-      else if (text && /^[1-9]$/.test(text) && Number(text) <= choices.length) next = Number(text) - 1;
-      if (next === current) return;
-      current = next;
-      output.write(`${up(choices.length + 1)}${draw()}`);
+      const result = onKey(text, name);
+      if (result === "redraw") output.write(`${up(height + 1)}${draw()}`);
+      else if (result) finish(result);
     };
     const onError = (err) => finish({ error: err });
     const onSigint = () => finish({ error: new PromptCancelled() });
@@ -7426,7 +7420,7 @@ ${SHOW_CURSOR}`);
       input.setRawMode?.(true);
       output.write(`${HIDE_CURSOR}${question}
 ${draw()}`);
-      input.on("keypress", onKey);
+      input.on("keypress", onKeypress);
       input.on("error", onError);
       process.on("SIGINT", onSigint);
       input.resume();
@@ -7435,6 +7429,55 @@ ${draw()}`);
     }
   });
 }
+function marker(options) {
+  return options.color ? options.trueColor ? "\x1B[1;38;2;253;75;3m" : "\x1B[1;38;5;202m" : "\x1B[1m";
+}
+function move(current, count, text, name) {
+  if (name === "up" || name === "k") return (current - 1 + count) % count;
+  if (name === "down" || name === "j") return (current + 1) % count;
+  if (text && /^[1-9]$/.test(text) && Number(text) <= count) return Number(text) - 1;
+  return null;
+}
+function selectMenu(input, output, question, choices, options = {}) {
+  let current = Math.min(Math.max(options.initial ?? 0, 0), choices.length - 1);
+  const on = marker(options);
+  const rows = () => choices.map((c, i) => i === current ? `${on}> ${c}${OFF}` : `  ${c}`);
+  return runMenu(input, output, question, HINT, rows, (text, name) => {
+    if (name === "return" || name === "enter") return { pick: current, summary: choices[current] ?? "" };
+    const next = move(current, choices.length, text, name);
+    if (next === null || next === current) return null;
+    current = next;
+    return "redraw";
+  });
+}
+function multiSelectMenu(input, output, question, choices, options = {}) {
+  let current = 0;
+  const ticked = choices.map((_, i) => options.ticked?.[i] === true);
+  const on = marker(options);
+  const rows = () => choices.map((c, i) => {
+    const row = `[${ticked[i] ? "x" : " "}] ${c}`;
+    return i === current ? `${on}> ${row}${OFF}` : `  ${row}`;
+  });
+  return runMenu(input, output, question, MULTI_HINT, rows, (text, name) => {
+    if (name === "return" || name === "enter") {
+      const picks = choices.flatMap((_, i) => ticked[i] ? [i] : []);
+      return { pick: picks, summary: picks.map((i) => choices[i]).join(", ") || "none" };
+    }
+    if (name === "space") {
+      ticked[current] = !ticked[current];
+      return "redraw";
+    }
+    if (text && /^[1-9]$/.test(text) && Number(text) <= choices.length) {
+      current = Number(text) - 1;
+      ticked[current] = !ticked[current];
+      return "redraw";
+    }
+    const next = move(current, choices.length, text, name);
+    if (next === null || next === current) return null;
+    current = next;
+    return "redraw";
+  });
+}
 
 // src/io.ts
 var PromptCancelled = class extends Error {
@@ -7516,11 +7559,15 @@ function realIo() {
       ...options,
       trueColor: /^(truecolor|24bit)$/i.test(process.env.COLORTERM ?? "")
     }),
+    multiSelect: (question, choices, options) => multiSelectMenu(process.stdin, process.stderr, question, choices, {
+      ...options,
+      trueColor: /^(truecolor|24bit)$/i.test(process.env.COLORTERM ?? "")
+    }),
     uninterruptible,
     run: runProcess,
     openUrl: async (url) => {
       const [cmd, args] = openerFor(process.platform, url);
-      await runProcess(cmd, args);
+      return (await runProcess(cmd, args)).code === 0;
     },
     homedir: homedir(),
     cwd: process.cwd(),
@@ -7528,7 +7575,8 @@ function realIo() {
     hostname: hostname(),
     now: () => Date.now(),
     sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
-    loginTimeoutMs: 3e5,
+    loginTimeoutMs: 9e5,
+    browserGraceMs: 5e3,
     fetchTimeoutMs: 15e3
   };
 }
@@ -7607,7 +7655,8 @@ var GLOBAL_OPTIONS = {
   json: { type: "boolean" },
   "no-color": { type: "boolean" },
   help: { type: "boolean", short: "h" },
-  version: { type: "boolean", short: "v" }
+  version: { type: "boolean", short: "v" },
+  verbose: { type: "boolean" }
 };
 var COMMAND_OPTIONS = {
   login: {
@@ -7704,6 +7753,9 @@ function strictParse(argv, options) {
 var USAGE = `Usage: amdahl <command> [options]
 
 What you can do:
+  amdahl                         Set up Claude Code, Cursor or Codex, in a terminal: it asks
+                                 which, signs you in, and runs install for each one
+                                 (--verbose shows the files and profile it used)
   amdahl optimize draft.md       Rewrite an outbound email or LinkedIn message
   amdahl status                  Check that this workspace is set up to optimize
   amdahl keys create --name ci   Make an API key for a server or CI
@@ -7744,6 +7796,7 @@ Global options:
   --api-key <key>    Use an API key for this command (prefer AMDAHL_KEY: argv is visible to other users)
   --json             Data on stdout as JSON, messages on stderr
   --no-color         No colour (NO_COLOR is honoured too)
+  --verbose          Say more: files written, the profile, where the sign-in is stored
   -h, --help         Show this help
   -v, --version      Show the version
 `;
@@ -8038,6 +8091,46 @@ function authorizeUrl(endpoints, input) {
   const query = params.map(([k, v]) => `${k}=${encodeURIComponent(v)}`).join("&");
   return `${endpoints.authorization_endpoint}?${query}`;
 }
+var SIGN_IN_AGAIN = {
+  not_work_email: { why: "Amdahl needs your work email.", label: "Sign in with your work email" },
+  subdomain_email: { why: "Use your main company email.", label: "Sign in again" },
+  email_unconfirmed: { why: "Check your inbox to confirm your email, then try again.", label: "Try again" }
+};
+function signInAgainLine(reason, url) {
+  const again = SIGN_IN_AGAIN[reason];
+  return again ? `${again.why} ${again.label}:
+
+  ${url}
+` : "";
+}
+function noBusinessMessage(consoleUrl, mayCreate, reason) {
+  switch (reason) {
+    case void 0:
+      return mayCreate ? `You're signed in, but you don't have a workspace yet. Create one at ${consoleUrl}/new, then run \`amdahl login\` again.` : `You're signed in, but you don't have access yet. Amdahl is in beta: join the waitlist at ${consoleUrl}/new, then run \`amdahl login\` again once you're in.`;
+    case "domain_has_workspace":
+      return `Your company already has an Amdahl workspace. Ask its admins to let you in at ${consoleUrl}, then try again.`;
+    case "invite_only":
+      return "Your company's Amdahl workspace is invite-only. Ask a colleague in it to invite you, then try again.";
+    case "not_work_email":
+    case "subdomain_email":
+    case "email_unconfirmed": {
+      const again = SIGN_IN_AGAIN[reason];
+      return `${again.why} Run this again, then choose "${again.label}" in the browser.`;
+    }
+    case "daily_cap":
+      return "Amdahl isn't taking more new workspaces today. Try again tomorrow.";
+    case "paused":
+      return "New workspaces are paused for now. Try again later.";
+    case "domain_used":
+      return "Your company already used its free workspace. Email hello@amdahl.ai to get access.";
+    default:
+      return "Amdahl couldn't create your workspace just now. Try again in a few minutes.";
+  }
+}
+function signInAgainUrl(authorize) {
+  const url = new URL(authorize);
+  return `${url.origin}/login?redirect=${encodeURIComponent(`${url.pathname}${url.search}`)}`;
+}
 function html(text) {
   return text.replace(/[&<>"']/g, (c) => `&#${c.charCodeAt(0)};`);
 }
@@ -8045,6 +8138,8 @@ function page(body) {
   return `<!doctype html><html><head><meta charset="utf-8"><title>Amdahl CLI</title></head><body style="font-family:system-ui,sans-serif;max-width:32rem;margin:4rem auto;line-height:1.5">${body}</body></html>`;
 }
 async function startLoopback(io, input) {
+  let authorize = null;
+  let refused = null;
   let settle;
   let fail;
   const result = new Promise((resolve, reject) => {
@@ -8071,9 +8166,18 @@ async function startLoopback(io, input) {
     const error = url.searchParams.get("error");
     const code = url.searchParams.get("code");
     if (error === "no_business") {
-      const newUrl = `${input.consoleUrl}/new`;
-      send2(200, `<p>You're signed in, but you don't have a workspace yet.</p><p><a href="${html(newUrl)}">Go to ${html(newUrl)}</a>, then run <code>amdahl login</code> again.</p>`);
-      settle({ kind: "no_business", mayCreate: url.searchParams.get("may_create") === "true" });
+      const mayCreate = url.searchParams.get("may_create") === "true";
+      const reason = url.searchParams.get("reason") ?? void 0;
+      const again = reason ? SIGN_IN_AGAIN[reason] : void 0;
+      if (again && authorize) {
+        refused = reason;
+        const retry = signInAgainUrl(authorize);
+        send2(200, `<p>${html(again.why)}</p><p><a href="${html(retry)}">${html(again.label)} \u2192</a></p>`);
+        input.onSignInAgain?.(reason, retry);
+        return;
+      }
+      send2(200, `<p>${html(noBusinessMessage(input.consoleUrl, mayCreate, reason))}</p>`);
+      settle({ kind: "no_business", mayCreate, reason });
     } else if (error) {
       send2(400, `<p>Sign-in failed: ${html(url.searchParams.get("error_description") ?? error)}</p>`);
       settle({ kind: "error", error, description: url.searchParams.get("error_description") ?? void 0 });
@@ -8101,12 +8205,17 @@ async function startLoopback(io, input) {
   });
   const port = server.address().port;
   const timer = setTimeout(() => {
-    fail(new CliError("login_timeout", "Timed out waiting for the browser sign-in.", EXIT.general, "Run `amdahl login` again."));
+    fail(
+      refused ? new CliError("no_business", noBusinessMessage(input.consoleUrl, false, refused), EXIT.noWorkspace) : new CliError("login_timeout", "Timed out waiting for the browser sign-in.", EXIT.general, "Run `amdahl login` again.")
+    );
   }, input.timeoutMs);
   timer.unref?.();
   return {
     redirectUri: `http://127.0.0.1:${port}/callback`,
     result,
+    setAuthorizeUrl: (url) => {
+      authorize = url;
+    },
     close: () => {
       clearTimeout(timer);
       server.closeAllConnections?.();
@@ -8124,7 +8233,7 @@ function consoleUrlFor(io, apiUrl) {
 }
 
 // src/secrets.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2, rmSync } from "fs";
+import { chmodSync as chmodSync2, existsSync as existsSync2, readFileSync as readFileSync2, rmSync, statSync } from "fs";
 import { join as join2 } from "path";
 var KEYCHAIN_SERVICE = "amdahl-cli";
 function keychainAccount(apiUrl, profile) {
@@ -8211,10 +8320,28 @@ function readCredentials(path) {
     return { version: 1, accounts: {} };
   }
 }
-function fileStore(io, warn) {
+function fileStore(io, note) {
   const path = credentialsPath(io);
+  let checked = false;
+  const checkMode = () => {
+    if (checked || io.platform === "win32" || !existsSync2(path)) return;
+    checked = true;
+    if ((statSync(path).mode & 63) === 0) return;
+    try {
+      chmodSync2(path, 384);
+    } catch {
+      io.stderr(`Warning: ${path} can be read by other users on this machine, and this CLI cannot change that. Run \`chmod 600 ${path}\` as its owner.
+`);
+      return;
+    }
+    io.stderr(
+      `Warning: ${path} was readable by other users on this machine. It is private now; to be safe, run \`amdahl logout\` and sign in again.
+`
+    );
+  };
   return {
     async get(account) {
+      checkMode();
       return asSecrets(readCredentials(path).accounts[account]);
     },
     async set(account, secrets) {
@@ -8222,11 +8349,9 @@ function fileStore(io, warn) {
       const file = readCredentials(path);
       file.accounts[account] = secrets;
       writePrivateJson(path, file);
-      if (!existed && warn) {
-        io.stderr(
-          `Warning: no OS keychain is available, so your sign-in is stored in ${path} (readable only by you).
-`
-        );
+      if (!existed && note) {
+        io.stderr(`No OS keychain here, so your sign-in is stored in ${path} (readable only by you).
+`);
       }
     },
     async delete(account) {
@@ -8238,7 +8363,7 @@ function fileStore(io, warn) {
     }
   };
 }
-function createSecretStore(io) {
+function createSecretStore(io, options = {}) {
   const forced = io.env.AMDAHL_CREDENTIAL_STORE;
   if (forced && forced !== "keychain" && forced !== "file") {
     throw new CliError(
@@ -8265,7 +8390,7 @@ function createSecretStore(io) {
       }
     };
   }
-  const file = fileStore(io, true);
+  const file = fileStore(io, options.verbose === true);
   if (!keychain) return file;
   return {
     async get(account) {
@@ -8317,7 +8442,7 @@ function createCtx(io, out, flags) {
     profile,
     apiUrl: normaliseApiUrl(rawApi),
     nonInteractive: !io.stdinIsTTY || io.env.AMDAHL_NO_PROMPT === "1",
-    secrets: () => store ??= createSecretStore(io),
+    secrets: () => store ??= createSecretStore(io, { verbose: flags.verbose === true }),
     saveConfig: () => saveConfig(io, config)
   };
 }
@@ -8415,15 +8540,45 @@ async function call(fn) {
   }
 }
 
+// src/output.ts
+var CONTROL_RE = /[\u0000-\u001f\u007f-\u009f]/g;
+function printable(text) {
+  return text.replace(CONTROL_RE, "");
+}
+function createOutput(io, json, noColor) {
+  const color = !noColor && !io.env.NO_COLOR && io.env.TERM !== "dumb" && io.stderrIsTTY && !json;
+  return {
+    json,
+    color,
+    result(data, human) {
+      if (json) {
+        io.stdout(`${JSON.stringify(data)}
+`);
+      } else if (human !== void 0) {
+        io.stdout(human.endsWith("\n") ? human : `${human}
+`);
+      }
+    },
+    info(text) {
+      io.stderr(text.endsWith("\n") ? text : `${text}
+`);
+    },
+    event(data) {
+      if (json) io.stderr(`${JSON.stringify(data)}
+`);
+    },
+    bold(text) {
+      return color ? `\x1B[1m${text}\x1B[22m` : text;
+    }
+  };
+}
+
 // src/commands/auth.ts
 var PROFILE_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
-function noBusinessMessage(consoleUrl, mayCreate) {
-  return mayCreate ? `You're signed in, but you don't have a workspace yet. Create one at ${consoleUrl}/new, then run \`amdahl login\` again.` : `You're signed in, but you don't have access yet. Amdahl is in beta: join the waitlist at ${consoleUrl}/new, then run \`amdahl login\` again once you're in.`;
-}
 function tokenPreview(token) {
   return `${token.slice(0, 10)}...`;
 }
-async function login(ctx) {
+async function browserSignIn(ctx) {
   const { io, out, flags } = ctx;
   const workspace = str(flags.workspace);
   const rawPort = str(flags.port);
@@ -8438,35 +8593,52 @@ async function login(ctx) {
   const endpoints = await discover(ctx.apiUrl);
   const pkce = createPkce();
   const consoleUrl = consoleUrlFor(io, ctx.apiUrl);
+  let timer;
+  let linkShown = false;
   const loopback = await startLoopback(io, {
     port,
     state: pkce.state,
     consoleUrl,
-    timeoutMs: io.loginTimeoutMs
+    timeoutMs: io.loginTimeoutMs,
+    // The page carries the way on; the authorize link would only sign in as the same address again.
+    onSignInAgain: (reason, retry) => {
+      clearTimeout(timer);
+      linkShown = true;
+      out.info(signInAgainLine(reason, retry));
+    }
   });
   try {
     const url = authorizeUrl(endpoints, { redirectUri: loopback.redirectUri, pkce, workspace });
+    loopback.setAuthorizeUrl(url);
     out.event({ event: "open_url", url });
-    if (flags["no-browser"]) {
-      out.info(`Open this URL in a browser to sign in:
+    const showLink = (lead) => {
+      if (linkShown) return;
+      linkShown = true;
+      out.info(`${lead}
 
   ${url}
 `);
+    };
+    if (flags["no-browser"]) {
+      showLink("Open this URL in a browser to sign in:");
     } else {
-      out.info(`Opening your browser to sign in. If it does not open, visit:
-
-  ${url}
-`);
-      void io.openUrl(url);
+      out.info("Opening your browser\u2026");
+      void io.openUrl(url).then((opened) => {
+        if (!opened) showLink("Your browser did not open. Open this link to sign in:");
+      });
+      timer = setTimeout(() => showLink("Finish in your browser, or open this link:"), io.browserGraceMs);
+      timer.unref?.();
     }
     const callback = await loopback.result;
+    clearTimeout(timer);
+    linkShown = true;
     if (callback.kind === "no_business") {
-      throw new CliError("no_business", noBusinessMessage(consoleUrl, callback.mayCreate), EXIT.noWorkspace);
+      throw new CliError("no_business", noBusinessMessage(consoleUrl, callback.mayCreate, callback.reason), EXIT.noWorkspace);
     }
     if (callback.kind === "error") {
       throw new CliError(
         callback.error,
-        `Sign-in failed: ${callback.description ?? callback.error}`,
+        `Sign-in failed: ${printable(callback.description ?? callback.error)}`,
         callback.error === "access_denied" ? EXIT.forbidden : EXIT.general
       );
     }
@@ -8490,22 +8662,31 @@ async function login(ctx) {
     };
     ctx.config.default_profile = name;
     ctx.saveConfig();
-    out.result(
-      {
-        ok: true,
-        profile: name,
-        user: { id: me.user_id, email: me.email ?? null },
-        workspace: ws,
-        scopes: me.scopes,
-        api_url: ctx.apiUrl
-      },
-      `Signed in as ${me.email ?? me.user_id} to ${out.bold(ws.name)} (${ws.slug}). Profile: ${name}.`
-    );
-    return EXIT.ok;
+    return { profile: name, me, workspace: ws };
   } finally {
+    clearTimeout(timer);
     loopback.close();
   }
 }
+function signedInLine(ctx, { profile, me, workspace }) {
+  return `Signed in as ${printable(me.email ?? me.user_id)} to ${ctx.out.bold(printable(workspace.name))} (${printable(workspace.slug)}). Profile: ${profile}.`;
+}
+async function login(ctx) {
+  const signedIn = await browserSignIn(ctx);
+  const { profile, me, workspace } = signedIn;
+  ctx.out.result(
+    {
+      ok: true,
+      profile,
+      user: { id: me.user_id, email: me.email ?? null },
+      workspace,
+      scopes: me.scopes,
+      api_url: ctx.apiUrl
+    },
+    signedInLine(ctx, signedIn)
+  );
+  return EXIT.ok;
+}
 async function logout(ctx) {
   const { config, out } = ctx;
   const names = ctx.flags.all ? Object.keys(config.profiles) : ctx.profileName && config.profiles[ctx.profileName] ? [ctx.profileName] : [];
@@ -8623,6 +8804,12 @@ function skillPath(client, home) {
 
 // src/commands/install.ts
 var CLIENTS = ["claude-code", "codex", "cursor"];
+function codexConfigPath(home) {
+  return join4(home, ".codex", "config.toml");
+}
+function cursorConfigPath(home) {
+  return join4(home, ".cursor", "mcp.json");
+}
 function codexBlock(mcpUrl) {
   return `[mcp_servers.amdahl]
 url = "${mcpUrl}"
@@ -8637,14 +8824,60 @@ async function onPath(ctx, command) {
   const res = await ctx.io.run(probe, [command]);
   return res.code === 0;
 }
+var CLIENT_SIGNS = {
+  "claude-code": { command: "claude", dir: ".claude" },
+  codex: { command: "codex", dir: ".codex" },
+  cursor: { command: "cursor", dir: ".cursor" }
+};
+async function detectClients(ctx) {
+  const found = await Promise.all(
+    CLIENTS.map(async (client) => {
+      const { command, dir } = CLIENT_SIGNS[client];
+      return existsSync3(join4(ctx.io.homedir, dir)) || await onPath(ctx, command);
+    })
+  );
+  return Object.fromEntries(CLIENTS.map((client, i) => [client, found[i]]));
+}
+async function claudeHasAmdahl(ctx, mcpUrl) {
+  const res = await ctx.io.run("claude", ["mcp", "get", "amdahl"]);
+  return res.code === 0 && res.stdout.split("\n").some((line) => line.trim() === `URL: ${mcpUrl}`);
+}
+function updateConfig(path, fn) {
+  try {
+    return fn();
+  } catch (err) {
+    if (err instanceof CliError) throw err;
+    const reason = err instanceof Error ? err.message : String(err);
+    throw new CliError("write_failed", `Could not update ${path} (${reason}).`, EXIT.general);
+  }
+}
+async function isInstalled(ctx, client) {
+  const skill = skillPath(client, ctx.io.homedir);
+  const current = existsSync3(skill) ? readFileSync3(skill, "utf8") : null;
+  if (current === null || current !== SKILL_TEXT && isShippedSkill(current)) return false;
+  const mcpUrl = `${ctx.apiUrl}/mcp`;
+  if (client === "claude-code") return await onPath(ctx, "claude") && await claudeHasAmdahl(ctx, mcpUrl);
+  if (client === "codex") {
+    const path = codexConfigPath(ctx.io.homedir);
+    return existsSync3(path) && codexHasAmdahl(readFileSync3(path, "utf8"));
+  }
+  try {
+    const config = JSON.parse(readFileSync3(cursorConfigPath(ctx.io.homedir), "utf8"));
+    return JSON.stringify(config.mcpServers?.amdahl) === JSON.stringify({ url: mcpUrl });
+  } catch {
+    return false;
+  }
+}
+async function installClient(ctx, client, print) {
+  const mcp = await installMcp(ctx, client, print);
+  return { mcp, skill: installSkill(ctx, client, print) };
+}
 async function install(ctx, args) {
   const client = args[0];
   if (!client || args.length > 1 || !CLIENTS.includes(client)) {
     throw usageError(`Usage: amdahl install ${CLIENTS.join("|")} [--print] [--force]`);
   }
-  const print = ctx.flags.print === true;
-  const mcp = await installMcp(ctx, client, print);
-  const skill = installSkill(ctx, client, print);
+  const { mcp, skill } = await installClient(ctx, client, ctx.flags.print === true);
   const human = [mcp.human.replace(/\n$/, ""), skill.human].filter(Boolean).join("\n");
   ctx.out.result({ ...mcp.data, skill: skill.data }, human);
   for (const note of [...mcp.notes, ...skill.notes]) ctx.out.info(note);
@@ -8685,6 +8918,9 @@ async function installMcp(ctx, client, print) {
       const notes = print ? [] : ["`claude` is not on your PATH. Run the command above once it is installed."];
       return { data: { ok: true, client, action: "printed", command }, human: command, notes };
     }
+    if (await claudeHasAmdahl(ctx, mcpUrl)) {
+      return { data: { ok: true, client, action: "unchanged", command }, human: `Claude Code already has Amdahl at ${mcpUrl}; nothing changed.`, notes: [] };
+    }
     const res = await io.run("claude", args);
     if (res.code !== 0) {
       throw new CliError("install_failed", `\`${command}\` failed: ${res.stderr.trim() || `exit ${res.code}`}`, EXIT.general);
@@ -8692,47 +8928,51 @@ async function installMcp(ctx, client, print) {
     return { data: { ok: true, client, action: "ran", command }, human: `Added Amdahl to Claude Code for all your projects. Run /mcp in Claude Code to sign in. If amdahl is not listed there, restart Claude Code first.`, notes: [] };
   }
   if (client === "codex") {
-    const path2 = join4(io.homedir, ".codex", "config.toml");
+    const path2 = codexConfigPath(io.homedir);
     const block = codexBlock(mcpUrl);
     if (print) {
       return { data: { ok: true, client, action: "printed", path: path2 }, human: `# ${path2}
 ${block}`, notes: [] };
     }
-    const current = existsSync3(path2) ? readFileSync3(path2, "utf8") : "";
-    if (codexHasAmdahl(current)) {
-      return { data: { ok: true, client, action: "unchanged", path: path2 }, human: `${path2} already has [mcp_servers.amdahl]; nothing changed.`, notes: [] };
-    }
-    mkdirSync2(dirname(path2), { recursive: true });
-    const sep2 = current.length === 0 ? "" : current.endsWith("\n\n") ? "" : current.endsWith("\n") ? "\n" : "\n\n";
-    writeFileSync2(path2, `${current}${sep2}${block}`);
-    return { data: { ok: true, client, action: "wrote", path: path2 }, human: `Added Amdahl to ${path2}. Run \`codex mcp login amdahl\` to sign in.`, notes: [] };
+    return updateConfig(path2, () => {
+      const current = existsSync3(path2) ? readFileSync3(path2, "utf8") : "";
+      if (codexHasAmdahl(current)) {
+        return { data: { ok: true, client, action: "unchanged", path: path2 }, human: `${path2} already has [mcp_servers.amdahl]; nothing changed.`, notes: [] };
+      }
+      mkdirSync2(dirname(path2), { recursive: true });
+      const sep2 = current.length === 0 ? "" : current.endsWith("\n\n") ? "" : current.endsWith("\n") ? "\n" : "\n\n";
+      writeFileSync2(path2, `${current}${sep2}${block}`);
+      return { data: { ok: true, client, action: "wrote", path: path2 }, human: `Added Amdahl to ${path2}. Run \`codex mcp login amdahl\` to sign in.`, notes: [] };
+    });
   }
-  const path = join4(io.homedir, ".cursor", "mcp.json");
+  const path = cursorConfigPath(io.homedir);
   const entry = { url: mcpUrl };
   if (print) {
     return { data: { ok: true, client, action: "printed", path }, human: `# ${path}
 ${JSON.stringify({ mcpServers: { amdahl: entry } }, null, 2)}`, notes: [] };
   }
-  let config = {};
-  if (existsSync3(path)) {
-    const raw = readFileSync3(path, "utf8");
-    if (raw.trim()) {
-      try {
-        config = JSON.parse(raw);
-      } catch {
-        throw new CliError("invalid_config", `${path} is not valid JSON; not changing it.`, EXIT.general);
+  return updateConfig(path, () => {
+    let config = {};
+    if (existsSync3(path)) {
+      const raw = readFileSync3(path, "utf8");
+      if (raw.trim()) {
+        try {
+          config = JSON.parse(raw);
+        } catch {
+          throw new CliError("invalid_config", `${path} is not valid JSON; not changing it.`, EXIT.general);
+        }
       }
     }
-  }
-  const servers = config.mcpServers && typeof config.mcpServers === "object" ? config.mcpServers : {};
-  if (JSON.stringify(servers.amdahl) === JSON.stringify(entry)) {
-    return { data: { ok: true, client, action: "unchanged", path }, human: `${path} already points at ${mcpUrl}; nothing changed.`, notes: [] };
-  }
-  config.mcpServers = { ...servers, amdahl: entry };
-  mkdirSync2(dirname(path), { recursive: true });
-  writeFileSync2(path, `${JSON.stringify(config, null, 2)}
+    const servers = config.mcpServers && typeof config.mcpServers === "object" ? config.mcpServers : {};
+    if (JSON.stringify(servers.amdahl) === JSON.stringify(entry)) {
+      return { data: { ok: true, client, action: "unchanged", path }, human: `${path} already points at ${mcpUrl}; nothing changed.`, notes: [] };
+    }
+    config.mcpServers = { ...servers, amdahl: entry };
+    mkdirSync2(dirname(path), { recursive: true });
+    writeFileSync2(path, `${JSON.stringify(config, null, 2)}
 `);
-  return { data: { ok: true, client, action: "wrote", path }, human: `Added Amdahl to ${path}. Cursor asks you to sign in on first use.`, notes: [] };
+    return { data: { ok: true, client, action: "wrote", path }, human: `Added Amdahl to ${path}. Cursor asks you to sign in on first use.`, notes: [] };
+  });
 }
 
 // src/keygen.ts
@@ -9008,260 +9248,43 @@ async function optimize(ctx, args) {
   return exit;
 }
 
-// src/commands/skills.ts
-var import_yaml = __toESM(require_dist(), 1);
-import { createHash as createHash4 } from "crypto";
+// src/commands/skills-guide.ts
+import { existsSync as existsSync4 } from "fs";
+import { dirname as dirname3, join as join6, relative, sep } from "path";
 
-// src/output.ts
-var CONTROL_RE = /[\u0000-\u001f\u007f-\u009f]/g;
-function printable(text) {
-  return text.replace(CONTROL_RE, "");
+// src/commands/skills-install.ts
+import { randomBytes as randomBytes3 } from "crypto";
+import { chmodSync as chmodSync3, lstatSync, mkdirSync as mkdirSync3, mkdtempSync, readdirSync, readFileSync as readFileSync5, renameSync as renameSync2, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
+import { dirname as dirname2, join as join5 } from "path";
+function skillDirs(targets, name) {
+  const dirs = [];
+  if (targets.claude) dirs.push(join5(targets.base, ".claude", "skills", name));
+  if (targets.agents) dirs.push(join5(targets.base, ".agents", "skills", name));
+  return dirs;
 }
-function createOutput(io, json, noColor) {
-  const color = !noColor && !io.env.NO_COLOR && io.env.TERM !== "dumb" && io.stderrIsTTY && !json;
-  return {
-    json,
-    color,
-    result(data, human) {
-      if (json) {
-        io.stdout(`${JSON.stringify(data)}
-`);
-      } else if (human !== void 0) {
-        io.stdout(human.endsWith("\n") ? human : `${human}
-`);
-      }
-    },
-    info(text) {
-      io.stderr(text.endsWith("\n") ? text : `${text}
-`);
-    },
-    event(data) {
-      if (json) io.stderr(`${JSON.stringify(data)}
-`);
-    },
-    bold(text) {
-      return color ? `\x1B[1m${text}\x1B[22m` : text;
-    }
-  };
+var message = (err) => err instanceof Error ? err.message : String(err);
+function plainReason(err) {
+  const code = err.code;
+  if (code === "EACCES" || code === "EPERM") return "you do not have permission to write there";
+  if (code === "ENOSPC") return "the disk is full";
+  if (code === "EROFS") return "that disk is read-only";
+  if (code === "ENOTDIR" || code === "EEXIST") return "a file is in the way";
+  return message(err);
 }
-
-// src/tar-gz.ts
-import { inflateRawSync } from "zlib";
-var MAX_ARCHIVE_FILES = 200;
-var MAX_UNPACKED_BYTES = 4 * 1024 * 1024;
-var MAX_TAR_BYTES = MAX_UNPACKED_BYTES + 1024 * 1024;
-var BLOCK = 512;
-var FILE_MODES = /* @__PURE__ */ new Set([420, 493]);
-var CONTROL_RE2 = /[\u0000-\u001f\u007f-\u009f]/;
-var ArchiveError = class extends Error {
-  tooLarge;
-  constructor(message2, tooLarge = false) {
-    super(message2);
-    this.name = "ArchiveError";
-    this.tooLarge = tooLarge;
-  }
-};
-var crcTable = null;
-function crc32(data) {
-  if (!crcTable) {
-    crcTable = new Uint32Array(256);
-    for (let n = 0; n < 256; n += 1) {
-      let c = n;
-      for (let k = 0; k < 8; k += 1) c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
-      crcTable[n] = c >>> 0;
-    }
-  }
-  let crc = 4294967295;
-  for (let i = 0; i < data.length; i += 1) crc = crcTable[(crc ^ data[i]) & 255] ^ crc >>> 8;
-  return (crc ^ 4294967295) >>> 0;
+var leftBehind = (written) => written.length > 0 ? `It wrote ${written.join(" and ")} first.` : "Nothing was written.";
+function writeFailure(path, err, written = []) {
+  const code = err.code;
+  const left = leftBehind(written);
+  const fix = code === "EACCES" || code === "EPERM" ? " Run the command from a folder you can write to." : "";
+  return new CliError("write_failed", `Could not write ${path}: ${plainReason(err)}`, EXIT.general, `${left}${fix}`);
 }
-function gunzipChecked(gz) {
-  if (gz.length < 18 || gz[0] !== 31 || gz[1] !== 139) throw new ArchiveError("it is not gzip");
-  if (gz[2] !== 8) throw new ArchiveError("its gzip method is not deflate");
-  const flags = gz[3];
-  if (flags & 224) throw new ArchiveError("its gzip header sets reserved flags");
-  let at = 10;
-  if (flags & 4) at += 2 + gz.readUInt16LE(Math.min(at, gz.length - 2));
-  for (const flag of [8, 16]) {
-    if (!(flags & flag)) continue;
-    const end = gz.indexOf(0, at);
-    if (end < 0) throw new ArchiveError("its gzip header is cut short");
-    at = end + 1;
-  }
-  if (flags & 2) at += 2;
-  if (at > gz.length - 8) throw new ArchiveError("its gzip header is cut short");
-  let tar;
-  let used;
+function sameFolder(dir, archive) {
+  let top;
   try {
-    const out = inflateRawSync(gz.subarray(at), { info: true, maxOutputLength: MAX_TAR_BYTES });
-    tar = out.buffer;
-    used = out.engine.bytesWritten;
+    top = lstatSync(dir);
   } catch (err) {
-    if (err.code === "ERR_BUFFER_TOO_LARGE") {
-      throw new ArchiveError(`it unpacks to more than ${MAX_TAR_BYTES / 1024 / 1024} MB`, true);
-    }
-    throw new ArchiveError(`its gzip data is broken (${err instanceof Error ? err.message : String(err)})`);
-  }
-  const trailer = at + used;
-  if (gz.length - trailer < 8) throw new ArchiveError("its gzip trailer is cut short");
-  if (gz.length - trailer > 8) throw new ArchiveError("it has bytes after its gzip trailer");
-  if (gz.readUInt32LE(trailer) !== crc32(tar)) throw new ArchiveError("its gzip CRC-32 does not match its contents");
-  if (gz.readUInt32LE(trailer + 4) !== tar.length % 2 ** 32) throw new ArchiveError("its gzip length does not match its contents");
-  return tar;
-}
-function field(header, start, length) {
-  const raw = header.subarray(start, start + length);
-  const end = raw.indexOf(0);
-  try {
-    return new TextDecoder("utf-8", { fatal: true }).decode(end < 0 ? raw : raw.subarray(0, end));
-  } catch {
-    throw new ArchiveError("it has a path that is not UTF-8");
-  }
-}
-function octal(header, start, length) {
-  const text = header.toString("latin1", start, start + length).replace(/[\0 ]+$/, "").replace(/^ +/, "");
-  return /^[0-7]{1,12}$/.test(text) ? parseInt(text, 8) : null;
-}
-function checkPath(path) {
-  const shown = JSON.stringify(path);
-  if (path === "") throw new ArchiveError("it has an entry with an empty path");
-  if (path.startsWith("/")) throw new ArchiveError(`it has an absolute path, ${shown}`);
-  if (path.includes("\\")) throw new ArchiveError(`it has a path with a backslash, ${shown}`);
-  if (CONTROL_RE2.test(path)) throw new ArchiveError(`it has a path with a control character, ${shown}`);
-  for (const segment of path.split("/")) {
-    if (segment === "") throw new ArchiveError(`it has a path with an empty segment, ${shown}`);
-    if (segment === ".." || segment === ".") throw new ArchiveError(`it has a path with "${segment}" in it, ${shown}`);
-  }
-}
-var TYPE_NAMES = {
-  "1": "a hard link",
-  "2": "a symbolic link",
-  "3": "a character device",
-  "4": "a block device",
-  "6": "a fifo",
-  "7": "a contiguous file",
-  x: "a pax header",
-  g: "a pax global header",
-  L: "a GNU long name",
-  K: "a GNU long link name"
-};
-function readTar(tar) {
-  if (tar.length % BLOCK !== 0) throw new ArchiveError("its tar is not a whole number of 512-byte blocks");
-  const files = [];
-  const dirs = [];
-  const seen = /* @__PURE__ */ new Map();
-  let unpacked = 0;
-  let at = 0;
-  for (; ; ) {
-    if (at >= tar.length) throw new ArchiveError("its tar has no end marker");
-    const header = tar.subarray(at, at + BLOCK);
-    if (header.every((b) => b === 0)) {
-      if (!tar.subarray(at).every((b) => b === 0)) throw new ArchiveError("it has data after its tar end marker");
-      break;
-    }
-    let sum = 0;
-    for (let i = 0; i < BLOCK; i += 1) sum += i >= 148 && i < 156 ? 32 : header[i];
-    if (octal(header, 148, 8) !== sum) throw new ArchiveError("it has a tar header with a wrong checksum");
-    if (header.toString("latin1", 257, 263) !== "ustar\0" || header.toString("latin1", 263, 265) !== "00") {
-      throw new ArchiveError("its tar is not ustar");
-    }
-    const name = field(header, 0, 100);
-    const prefix = field(header, 345, 155);
-    let path = prefix ? `${prefix}/${name}` : name;
-    const type = String.fromCharCode(header[156]);
-    const size = octal(header, 124, 12);
-    const mode = octal(header, 100, 8);
-    if (size === null || mode === null) throw new ArchiveError(`it has a tar header for ${JSON.stringify(path)} with a bad size or mode`);
-    const isDir = type === "5";
-    if (!isDir && type !== "0" && type !== "\0") {
-      const what = TYPE_NAMES[type] ?? `an entry of type ${JSON.stringify(type)}`;
-      throw new ArchiveError(`${JSON.stringify(path)} is ${what}; a skill archive holds only files and folders`);
-    }
-    if (isDir && path.endsWith("/")) path = path.slice(0, -1);
-    checkPath(path);
-    const key = path.toLowerCase();
-    const parts = key.split("/");
-    for (let i = 1; i < parts.length; i += 1) {
-      const parent = parts.slice(0, i).join("/");
-      const kind = seen.get(parent);
-      if (kind === "file") throw new ArchiveError(`it puts ${JSON.stringify(path)} inside a file`);
-      if (!kind) seen.set(parent, "implied");
-    }
-    const before = seen.get(key);
-    if (before === "file" || before === "dir" || before === "implied" && !isDir) {
-      throw new ArchiveError(`it lists ${JSON.stringify(path)} twice`);
-    }
-    const start = at + BLOCK;
-    if (isDir) {
-      if (size !== 0) throw new ArchiveError(`its folder ${JSON.stringify(path)} has a size`);
-      seen.set(key, "dir");
-      dirs.push(path);
-    } else {
-      if (!FILE_MODES.has(mode & 4095)) {
-        throw new ArchiveError(`${JSON.stringify(path)} has mode ${(mode & 4095).toString(8).padStart(4, "0")}; a file must be 0644 or 0755`);
-      }
-      if (files.length + 1 > MAX_ARCHIVE_FILES) throw new ArchiveError(`it has more than ${MAX_ARCHIVE_FILES} files`, true);
-      unpacked += size;
-      if (unpacked > MAX_UNPACKED_BYTES) throw new ArchiveError(`its files come to more than ${MAX_UNPACKED_BYTES / 1024 / 1024} MB`, true);
-      if (start + size > tar.length) throw new ArchiveError(`its tar is cut short inside ${JSON.stringify(path)}`);
-      seen.set(key, "file");
-      files.push({ path, bytes: Buffer.from(tar.subarray(start, start + size)), mode: mode & 4095 });
-    }
-    at = start + Math.ceil(size / BLOCK) * BLOCK;
-  }
-  const allDirs = /* @__PURE__ */ new Map();
-  const addDirsOf = (path, self) => {
-    const parts = path.split("/");
-    for (let i = 1; i <= parts.length - (self ? 0 : 1); i += 1) {
-      const dir = parts.slice(0, i).join("/");
-      if (!allDirs.has(dir.toLowerCase())) allDirs.set(dir.toLowerCase(), dir);
-    }
-  };
-  for (const dir of dirs) addDirsOf(dir, true);
-  for (const f of files) addDirsOf(f.path, false);
-  return { files, dirs: [...allDirs.values()].sort((a, b) => a.split("/").length - b.split("/").length) };
-}
-function readSkillArchive(gz) {
-  return readTar(gunzipChecked(gz));
-}
-
-// src/commands/skills-guide.ts
-import { existsSync as existsSync4 } from "fs";
-import { dirname as dirname3, join as join6, relative, sep } from "path";
-
-// src/commands/skills-install.ts
-import { randomBytes as randomBytes3 } from "crypto";
-import { chmodSync as chmodSync2, lstatSync, mkdirSync as mkdirSync3, mkdtempSync, readdirSync, readFileSync as readFileSync5, renameSync as renameSync2, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
-import { dirname as dirname2, join as join5 } from "path";
-function skillDirs(targets, name) {
-  const dirs = [];
-  if (targets.claude) dirs.push(join5(targets.base, ".claude", "skills", name));
-  if (targets.agents) dirs.push(join5(targets.base, ".agents", "skills", name));
-  return dirs;
-}
-var message = (err) => err instanceof Error ? err.message : String(err);
-function plainReason(err) {
-  const code = err.code;
-  if (code === "EACCES" || code === "EPERM") return "you do not have permission to write there";
-  if (code === "ENOSPC") return "the disk is full";
-  if (code === "EROFS") return "that disk is read-only";
-  if (code === "ENOTDIR" || code === "EEXIST") return "a file is in the way";
-  return message(err);
-}
-var leftBehind = (written) => written.length > 0 ? `It wrote ${written.join(" and ")} first.` : "Nothing was written.";
-function writeFailure(path, err, written = []) {
-  const code = err.code;
-  const left = leftBehind(written);
-  const fix = code === "EACCES" || code === "EPERM" ? " Run the command from a folder you can write to." : "";
-  return new CliError("write_failed", `Could not write ${path}: ${plainReason(err)}`, EXIT.general, `${left}${fix}`);
-}
-function sameFolder(dir, archive) {
-  let top;
-  try {
-    top = lstatSync(dir);
-  } catch (err) {
-    if (err.code === "ENOENT") return null;
-    throw writeFailure(dir, err);
+    if (err.code === "ENOENT") return null;
+    throw writeFailure(dir, err);
   }
   if (!top.isDirectory()) return false;
   const want = new Map(archive.files.map((f) => [f.path, f]));
@@ -9348,7 +9371,7 @@ function stage(target, name, archive, staged) {
   s.createdParent = mkdirSync3(dirname2(target), { recursive: true }) ?? void 0;
   refuseLinks(target);
   s.temp = mkdtempSync(join5(dirname2(target), `.${name}.amdahl-tmp-`));
-  chmodSync2(s.temp, 493);
+  chmodSync3(s.temp, 493);
   for (const dir of archive.dirs) mkdirSync3(join5(s.temp, dir));
   for (const file of archive.files) writeFileSync3(join5(s.temp, file.path), file.bytes, { flag: "wx", mode: file.mode });
 }
@@ -9503,6 +9526,302 @@ function nextStep(ctx, targets, seen) {
   return `Open a new ${joinNames(names, "or")} chat ${where} to use it.`;
 }
 
+// src/commands/setup.ts
+var SHOWN = [
+  { client: "claude-code", name: "Claude Code" },
+  { client: "cursor", name: "Cursor" },
+  { client: "codex", name: "Codex" }
+];
+function tryItLine(name, connect = false) {
+  const ask2 = 'say "make this email sound less like AI"';
+  if (connect && name === "Claude Code") return `Try it: in Claude Code, run /mcp once to connect, then ${ask2}`;
+  if (name === "Codex") return `Try it: run \`codex mcp login amdahl\`, then open Codex and ${ask2}`;
+  return `Try it: open ${name} and ${ask2}`;
+}
+function shouldSetUp(io) {
+  const { env } = io;
+  const ci = Boolean(env.CI) && env.CI !== "false" && env.CI !== "0";
+  return io.stdinIsTTY && io.stdoutIsTTY && io.stderrIsTTY && env.AMDAHL_NO_PROMPT !== "1" && !ci && !env.CLAUDECODE && !env.CURSOR_AGENT;
+}
+async function signIn(ctx) {
+  let credential;
+  try {
+    credential = await resolveCredential(ctx);
+  } catch (err) {
+    if (err instanceof CliError && err.exit === EXIT.unauthenticated) return { kind: "out" };
+    throw err;
+  }
+  try {
+    const me = await call(() => apiClient(ctx, credential).cli.whoami());
+    return { kind: "in", email: printable(me.email ?? me.user_id), workspace: printable(me.workspace?.name ?? me.business_id) };
+  } catch (err) {
+    if (!(err instanceof CliError && err.exit === EXIT.unauthenticated)) throw err;
+    return credential.source === "profile" ? { kind: "out" } : { kind: "rejected", source: credential.source };
+  }
+}
+async function setup(ctx) {
+  const { io, out } = ctx;
+  const verbose = ctx.flags.verbose === true;
+  const say = (line) => io.stdout(`${line}
+`);
+  const detail = (text) => {
+    if (verbose && text) say(text.replace(/^/gm, "  "));
+  };
+  say(`${out.bold("Amdahl")} \xB7 predictive ML for GTM`);
+  const found = await detectClients(ctx);
+  const detected = SHOWN.filter((c) => found[c.client]);
+  let who;
+  if (detected.length > 0) {
+    const installed = await Promise.all(detected.map((c) => isInstalled(ctx, c.client)));
+    if (installed.every(Boolean)) {
+      let unreachable = false;
+      try {
+        who = await signIn(ctx);
+      } catch (err) {
+        if (!(err instanceof CliError && err.exit === EXIT.network)) throw err;
+        unreachable = true;
+      }
+      if (unreachable || who?.kind === "in") {
+        say(`You're set up in ${joinNames(detected.map((c) => c.name))}.${unreachable ? " (Could not reach Amdahl to check your sign-in.)" : ""}`);
+        say(tryItLine(detected[0]?.name ?? ""));
+        return EXIT.ok;
+      }
+    }
+  }
+  const picks = await io.multiSelect(
+    "Set up in:",
+    SHOWN.map((c) => c.name),
+    { ticked: SHOWN.map((c) => found[c.client]), color: out.color }
+  );
+  if (picks.length === 0) {
+    say("Nothing picked, so nothing changed.");
+    return EXIT.ok;
+  }
+  who ??= await signIn(ctx);
+  if (who.kind === "in") {
+    say(`\u2713 Signed in \xB7 ${who.workspace}`);
+    detail(`Signed in as ${who.email}.`);
+  } else if (who.kind === "out") {
+    const signedIn = await browserSignIn(ctx);
+    say(`\u2713 Signed in \xB7 ${printable(signedIn.workspace.name)}`);
+    detail(signedInLine(ctx, signedIn));
+  } else {
+    const name = who.source === "flag" ? "--api-key" : who.source.slice("env:".length);
+    out.info(`Amdahl rejected the key in ${name}. Skipping the browser sign-in, because that key would still be used instead. Fix it, or unset it and run \`amdahl login\`.`);
+  }
+  let exit = EXIT.ok;
+  let ready = null;
+  for (const { client, name } of picks.flatMap((i) => SHOWN[i] ?? [])) {
+    let steps;
+    try {
+      steps = await installClient(ctx, client, false);
+    } catch (raw) {
+      const err = raw instanceof CliError ? raw : new CliError("install_failed", `Could not set up ${name}: ${raw instanceof Error ? raw.message : String(raw)}`, EXIT.general);
+      io.stderr(`Error: ${err.message}
+${err.hint ? `${err.hint}
+` : ""}`);
+      if (exit === EXIT.ok) exit = err.exit;
+      continue;
+    }
+    const action = steps.mcp.data.action;
+    if (action === "printed") {
+      say(`! ${name}: \`claude\` is not on your PATH. Once it is, run:
+  ${String(steps.mcp.data.command)}`);
+    } else {
+      say(action === "unchanged" ? `\u2713 ${name} already has Amdahl` : `\u2713 Added to ${name}`);
+      ready ??= { name, connect: action !== "unchanged" };
+    }
+    const mcpDetail = action === "printed" ? [] : [steps.mcp.human, ...steps.mcp.notes];
+    detail([...mcpDetail, steps.skill.human, ...steps.skill.notes].filter(Boolean).join("\n"));
+  }
+  if (ready) say(tryItLine(ready.name, ready.connect));
+  return exit;
+}
+
+// src/commands/skills.ts
+var import_yaml = __toESM(require_dist(), 1);
+import { createHash as createHash4 } from "crypto";
+
+// src/tar-gz.ts
+import { inflateRawSync } from "zlib";
+var MAX_ARCHIVE_FILES = 200;
+var MAX_UNPACKED_BYTES = 4 * 1024 * 1024;
+var MAX_TAR_BYTES = MAX_UNPACKED_BYTES + 1024 * 1024;
+var BLOCK = 512;
+var FILE_MODES = /* @__PURE__ */ new Set([420, 493]);
+var CONTROL_RE2 = /[\u0000-\u001f\u007f-\u009f]/;
+var ArchiveError = class extends Error {
+  tooLarge;
+  constructor(message2, tooLarge = false) {
+    super(message2);
+    this.name = "ArchiveError";
+    this.tooLarge = tooLarge;
+  }
+};
+var crcTable = null;
+function crc32(data) {
+  if (!crcTable) {
+    crcTable = new Uint32Array(256);
+    for (let n = 0; n < 256; n += 1) {
+      let c = n;
+      for (let k = 0; k < 8; k += 1) c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
+      crcTable[n] = c >>> 0;
+    }
+  }
+  let crc = 4294967295;
+  for (let i = 0; i < data.length; i += 1) crc = crcTable[(crc ^ data[i]) & 255] ^ crc >>> 8;
+  return (crc ^ 4294967295) >>> 0;
+}
+function gunzipChecked(gz) {
+  if (gz.length < 18 || gz[0] !== 31 || gz[1] !== 139) throw new ArchiveError("it is not gzip");
+  if (gz[2] !== 8) throw new ArchiveError("its gzip method is not deflate");
+  const flags = gz[3];
+  if (flags & 224) throw new ArchiveError("its gzip header sets reserved flags");
+  let at = 10;
+  if (flags & 4) at += 2 + gz.readUInt16LE(Math.min(at, gz.length - 2));
+  for (const flag of [8, 16]) {
+    if (!(flags & flag)) continue;
+    const end = gz.indexOf(0, at);
+    if (end < 0) throw new ArchiveError("its gzip header is cut short");
+    at = end + 1;
+  }
+  if (flags & 2) at += 2;
+  if (at > gz.length - 8) throw new ArchiveError("its gzip header is cut short");
+  let tar;
+  let used;
+  try {
+    const out = inflateRawSync(gz.subarray(at), { info: true, maxOutputLength: MAX_TAR_BYTES });
+    tar = out.buffer;
+    used = out.engine.bytesWritten;
+  } catch (err) {
+    if (err.code === "ERR_BUFFER_TOO_LARGE") {
+      throw new ArchiveError(`it unpacks to more than ${MAX_TAR_BYTES / 1024 / 1024} MB`, true);
+    }
+    throw new ArchiveError(`its gzip data is broken (${err instanceof Error ? err.message : String(err)})`);
+  }
+  const trailer = at + used;
+  if (gz.length - trailer < 8) throw new ArchiveError("its gzip trailer is cut short");
+  if (gz.length - trailer > 8) throw new ArchiveError("it has bytes after its gzip trailer");
+  if (gz.readUInt32LE(trailer) !== crc32(tar)) throw new ArchiveError("its gzip CRC-32 does not match its contents");
+  if (gz.readUInt32LE(trailer + 4) !== tar.length % 2 ** 32) throw new ArchiveError("its gzip length does not match its contents");
+  return tar;
+}
+function field(header, start, length) {
+  const raw = header.subarray(start, start + length);
+  const end = raw.indexOf(0);
+  try {
+    return new TextDecoder("utf-8", { fatal: true }).decode(end < 0 ? raw : raw.subarray(0, end));
+  } catch {
+    throw new ArchiveError("it has a path that is not UTF-8");
+  }
+}
+function octal(header, start, length) {
+  const text = header.toString("latin1", start, start + length).replace(/[\0 ]+$/, "").replace(/^ +/, "");
+  return /^[0-7]{1,12}$/.test(text) ? parseInt(text, 8) : null;
+}
+function checkPath(path) {
+  const shown = JSON.stringify(path);
+  if (path === "") throw new ArchiveError("it has an entry with an empty path");
+  if (path.startsWith("/")) throw new ArchiveError(`it has an absolute path, ${shown}`);
+  if (path.includes("\\")) throw new ArchiveError(`it has a path with a backslash, ${shown}`);
+  if (CONTROL_RE2.test(path)) throw new ArchiveError(`it has a path with a control character, ${shown}`);
+  for (const segment of path.split("/")) {
+    if (segment === "") throw new ArchiveError(`it has a path with an empty segment, ${shown}`);
+    if (segment === ".." || segment === ".") throw new ArchiveError(`it has a path with "${segment}" in it, ${shown}`);
+  }
+}
+var TYPE_NAMES = {
+  "1": "a hard link",
+  "2": "a symbolic link",
+  "3": "a character device",
+  "4": "a block device",
+  "6": "a fifo",
+  "7": "a contiguous file",
+  x: "a pax header",
+  g: "a pax global header",
+  L: "a GNU long name",
+  K: "a GNU long link name"
+};
+function readTar(tar) {
+  if (tar.length % BLOCK !== 0) throw new ArchiveError("its tar is not a whole number of 512-byte blocks");
+  const files = [];
+  const dirs = [];
+  const seen = /* @__PURE__ */ new Map();
+  let unpacked = 0;
+  let at = 0;
+  for (; ; ) {
+    if (at >= tar.length) throw new ArchiveError("its tar has no end marker");
+    const header = tar.subarray(at, at + BLOCK);
+    if (header.every((b) => b === 0)) {
+      if (!tar.subarray(at).every((b) => b === 0)) throw new ArchiveError("it has data after its tar end marker");
+      break;
+    }
+    let sum = 0;
+    for (let i = 0; i < BLOCK; i += 1) sum += i >= 148 && i < 156 ? 32 : header[i];
+    if (octal(header, 148, 8) !== sum) throw new ArchiveError("it has a tar header with a wrong checksum");
+    if (header.toString("latin1", 257, 263) !== "ustar\0" || header.toString("latin1", 263, 265) !== "00") {
+      throw new ArchiveError("its tar is not ustar");
+    }
+    const name = field(header, 0, 100);
+    const prefix = field(header, 345, 155);
+    let path = prefix ? `${prefix}/${name}` : name;
+    const type = String.fromCharCode(header[156]);
+    const size = octal(header, 124, 12);
+    const mode = octal(header, 100, 8);
+    if (size === null || mode === null) throw new ArchiveError(`it has a tar header for ${JSON.stringify(path)} with a bad size or mode`);
+    const isDir = type === "5";
+    if (!isDir && type !== "0" && type !== "\0") {
+      const what = TYPE_NAMES[type] ?? `an entry of type ${JSON.stringify(type)}`;
+      throw new ArchiveError(`${JSON.stringify(path)} is ${what}; a skill archive holds only files and folders`);
+    }
+    if (isDir && path.endsWith("/")) path = path.slice(0, -1);
+    checkPath(path);
+    const key = path.toLowerCase();
+    const parts = key.split("/");
+    for (let i = 1; i < parts.length; i += 1) {
+      const parent = parts.slice(0, i).join("/");
+      const kind = seen.get(parent);
+      if (kind === "file") throw new ArchiveError(`it puts ${JSON.stringify(path)} inside a file`);
+      if (!kind) seen.set(parent, "implied");
+    }
+    const before = seen.get(key);
+    if (before === "file" || before === "dir" || before === "implied" && !isDir) {
+      throw new ArchiveError(`it lists ${JSON.stringify(path)} twice`);
+    }
+    const start = at + BLOCK;
+    if (isDir) {
+      if (size !== 0) throw new ArchiveError(`its folder ${JSON.stringify(path)} has a size`);
+      seen.set(key, "dir");
+      dirs.push(path);
+    } else {
+      if (!FILE_MODES.has(mode & 4095)) {
+        throw new ArchiveError(`${JSON.stringify(path)} has mode ${(mode & 4095).toString(8).padStart(4, "0")}; a file must be 0644 or 0755`);
+      }
+      if (files.length + 1 > MAX_ARCHIVE_FILES) throw new ArchiveError(`it has more than ${MAX_ARCHIVE_FILES} files`, true);
+      unpacked += size;
+      if (unpacked > MAX_UNPACKED_BYTES) throw new ArchiveError(`its files come to more than ${MAX_UNPACKED_BYTES / 1024 / 1024} MB`, true);
+      if (start + size > tar.length) throw new ArchiveError(`its tar is cut short inside ${JSON.stringify(path)}`);
+      seen.set(key, "file");
+      files.push({ path, bytes: Buffer.from(tar.subarray(start, start + size)), mode: mode & 4095 });
+    }
+    at = start + Math.ceil(size / BLOCK) * BLOCK;
+  }
+  const allDirs = /* @__PURE__ */ new Map();
+  const addDirsOf = (path, self) => {
+    const parts = path.split("/");
+    for (let i = 1; i <= parts.length - (self ? 0 : 1); i += 1) {
+      const dir = parts.slice(0, i).join("/");
+      if (!allDirs.has(dir.toLowerCase())) allDirs.set(dir.toLowerCase(), dir);
+    }
+  };
+  for (const dir of dirs) addDirsOf(dir, true);
+  for (const f of files) addDirsOf(f.path, false);
+  return { files, dirs: [...allDirs.values()].sort((a, b) => a.split("/").length - b.split("/").length) };
+}
+function readSkillArchive(gz) {
+  return readTar(gunzipChecked(gz));
+}
+
 // src/commands/skills-warning.ts
 var WARNING_FIELD = "x-amdahl-warning";
 var MAX_WARNING_CHARS = 300;
@@ -9929,7 +10248,7 @@ async function workspaceUse(ctx, args) {
 }
 
 // src/version.ts
-var VERSION = "0.2.4";
+var VERSION = "0.3.1";
 
 // src/main.ts
 var COMMANDS = {
@@ -9964,6 +10283,7 @@ async function runCli(argv, io) {
       return EXIT.ok;
     }
     if (!parsed.command) {
+      if (argv.every((a) => a === "--verbose") && shouldSetUp(io)) return await setup(createCtx(io, out, parsed.flags));
       io.stderr(USAGE);
       return EXIT.usage;
     }