@catalyst-cloud/cli 0.14.3 → 0.14.5

package/dist/onboard-ui.js

@@ -1,13 +1,17 @@
-import { createOnboardProgress } from "./onboard-progress.js";
-import { ONBOARD_STEPS, ONBOARD_TITLES } from "./onboard.js";
+import { createOnboardProgress, } from "./onboard-progress.js";
+import { ONBOARD_STEPS, ONBOARD_TITLES, } from "./onboard.js";
 export function shouldUseOnboardUi(args, stdoutTty) {
-    return stdoutTty && !args.json && args.flags.yes !== true && args.flags["dry-run"] !== true;
+    return (stdoutTty &&
+        !args.json &&
+        args.flags.yes !== true &&
+        args.flags["dry-run"] !== true);
 }
 export function createClackOnboardUi(prompts, streams, deps = {}) {
     const abort = new AbortController();
     const options = { ...streams, signal: abort.signal };
     // Clack 1.8.1's spinner calls process.exit(0) on raw Ctrl-C, bypassing receipt/lock cleanup.
-    const spin = deps.progress ?? createOnboardProgress(streams.output, abort.signal, () => abort.abort());
+    const spin = deps.progress ??
+        createOnboardProgress(streams.output, abort.signal, () => abort.abort());
     const signals = deps.signals ?? process;
     const interrupt = () => abort.abort();
     for (const event of ["SIGINT", "SIGTERM", "SIGHUP"])
@@ -15,15 +19,23 @@ export function createClackOnboardUi(prompts, streams, deps = {}) {
     let active = false;
     let introduced = false;
     let group;
-    const stop = () => { if (active) {
-        spin.stop();
-        active = false;
-    } };
-    const message = (text) => { stop(); prompts.log.message(text, { output: streams.output }); };
-    const start = (text) => { stop(); if (!abort.signal.aborted) {
-        spin.start(text);
-        active = true;
-    } };
+    const stop = () => {
+        if (active) {
+            spin.stop();
+            active = false;
+        }
+    };
+    const message = (text) => {
+        stop();
+        prompts.log.message(text, { output: streams.output });
+    };
+    const start = (text) => {
+        stop();
+        if (!abort.signal.aborted) {
+            spin.start(text);
+            active = true;
+        }
+    };
     return {
         signal: abort.signal,
         plan(journal) {
@@ -32,52 +44,89 @@ export function createClackOnboardUi(prompts, streams, deps = {}) {
                 prompts.intro("Catalyst setup", { output: streams.output });
                 introduced = true;
             }
-            const steps = new Map(journal.steps.map(step => [step.id, step]));
-            message(ONBOARD_STEPS.map(id => `· ${ONBOARD_TITLES[id]}${steps.get(id)?.state === "done" ? " (recheck)" : ""}`).join("\n"));
+            const steps = new Map(journal.steps.map((step) => [step.id, step]));
+            message(ONBOARD_STEPS.map((id) => `· ${ONBOARD_TITLES[id]}${steps.get(id)?.state === "done" ? " (recheck)" : ""}`).join("\n"));
             message("Use cloud reads by default. Local sync is optional for SQL, offline work or sustained reads.");
         },
         async confirmPlan(localSync) {
             stop();
-            const answer = await prompts.select({ ...options, message: "Continue with this plan?", initialValue: localSync ? "local" : "cloud", options: [
-                    { value: "cloud", label: "Continue using cloud reads", hint: "default" },
+            const answer = await prompts.select({
+                ...options,
+                message: "Continue with this plan?",
+                initialValue: localSync ? "local" : "cloud",
+                options: [
+                    {
+                        value: "cloud",
+                        label: "Continue using cloud reads",
+                        hint: "default",
+                    },
                     { value: "local", label: "Continue and set up local sync" },
                     { value: "stop", label: "Stop without changes" },
-                ] });
+                ],
+            });
             if (prompts.isCancel(answer)) {
                 abort.abort();
                 return { proceed: false, localSync };
             }
-            return { proceed: answer === "cloud" || answer === "local", localSync: answer === "local" };
+            return {
+                proceed: answer === "cloud" || answer === "local",
+                localSync: answer === "local",
+            };
         },
         async chooseTeam(teams) {
             stop();
             if (!teams.length || abort.signal.aborted)
                 return null;
-            const answer = await prompts.select({ ...options, message: "Which Linear team should this project use?", initialValue: teams[0].id,
-                options: teams.map(team => ({ value: team.id, label: `${team.name || team.key || team.id}${team.key && team.name ? ` (${team.key})` : ""}` })) });
+            const answer = await prompts.select({
+                ...options,
+                message: "Which Linear team should this project use?",
+                initialValue: teams[0].id,
+                options: teams.map((team) => ({
+                    value: team.id,
+                    label: `${team.name || team.key || team.id}${team.key && team.name ? ` (${team.key})` : ""}`,
+                })),
+            });
             if (prompts.isCancel(answer)) {
                 abort.abort();
                 return null;
             }
             return typeof answer === "string" ? answer : null;
         },
-        ...(prompts.multiselect ? { async chooseRepositories(repositories) {
-                stop();
-                if (!repositories.length || abort.signal.aborted)
-                    return null;
-                const answer = await prompts.multiselect({ ...options, message: "Which repositories should use this Linear team?", required: true,
-                    options: repositories.map(row => ({ value: `${row.owner}/${row.name}`, label: `${row.owner}/${row.name}` })) });
-                if (prompts.isCancel(answer)) {
-                    abort.abort();
-                    return null;
-                }
-                return Array.isArray(answer) ? answer : null;
-            } } : {}),
+        ...(prompts.multiselect
+            ? {
+                async chooseRepositories(repositories) {
+                    stop();
+                    if (!repositories.length || abort.signal.aborted)
+                        return null;
+                    const answer = await prompts.multiselect({
+                        ...options,
+                        message: "Which repositories should use this Linear team?",
+                        required: true,
+                        options: repositories.map((row) => ({
+                            value: `${row.owner}/${row.name}`,
+                            label: `${row.owner}/${row.name}`,
+                        })),
+                    });
+                    if (prompts.isCancel(answer)) {
+                        abort.abort();
+                        return null;
+                    }
+                    return Array.isArray(answer) ? answer : null;
+                },
+            }
+            : {}),
         stepStart(id) {
-            const next = ["machine", "cli", "skills", "legacy"].includes(id) ? "This computer"
-                : id === "signin" ? "Catalyst sign-in" : id.startsWith("linear.") || id.startsWith("github.") ? "Connections"
-                    : ["projects", "accounts", "settings", "values"].includes(id) ? "Project setup"
-                        : ["capacity", "daemon", "housekeeping"].includes(id) ? "Runner and services" : "Work and readiness";
+            const next = ["machine", "cli", "skills", "legacy"].includes(id)
+                ? "This computer"
+                : id === "signin"
+                    ? "Catalyst sign-in"
+                    : id.startsWith("linear.") || id.startsWith("github.")
+                        ? "Connections"
+                        : ["projects", "accounts", "settings", "values"].includes(id)
+                            ? "Project setup"
+                            : ["capacity", "daemon", "housekeeping"].includes(id)
+                                ? "Runner and services"
+                                : "Work and readiness";
             if (next !== group) {
                 message(next);
                 group = next;
@@ -87,7 +136,24 @@ export function createClackOnboardUi(prompts, streams, deps = {}) {
         stepEnd(step) {
             stop();
             const reasons = {
-                cloud_capability_unavailable: "Your cloud does not support this setup step yet.",
+                personal_consent_handoff: "The browser approval link could not be verified. Run catalyst onboard to try again.",
+                personal_identity_refused: "Your current login no longer matches this setup. Resume with the original workspace and person.",
+                personal_login_refresh_required: "Renew your login with catalyst login, then run catalyst onboard to resume.",
+                personal_status_unavailable: "Your personal connection could not be checked. Run catalyst onboard to try again.",
+                personal_browser_unavailable: "The browser could not open. Run catalyst onboard to try again.",
+                cloud_capability_unavailable: "This setup step is not available on this server yet. Use the web app link shown above, then resume after the server update.",
+                onboarding_capability_unavailable: "The server's setup capabilities could not be checked. Run catalyst onboard to try again.",
+                onboarding_capability_identity_unverified: "The server's setup capabilities belong to another login or workspace. Sign in to the original workspace to resume.",
+                onboarding_capability_login_refresh_required: "Your login needs a refresh before setup capabilities can be checked. Run catalyst login, then catalyst onboard.",
+                workspace_consent_refused: "The server did not accept this login for Linear workspace setup. Sign in again or ask your workspace administrator.",
+                github_installation_status_unavailable: "Your GitHub App installation could not be checked. Run catalyst onboard to try again.",
+                github_installation_status_shape: "The server returned a GitHub installation result that could not be verified.",
+                github_installation_consent_handoff: "The GitHub installation approval link could not be verified. Run catalyst onboard to try again.",
+                github_installation_consent_refused: "The server did not accept this login for GitHub App setup. Sign in again or ask your workspace administrator.",
+                github_installation_identity_refused: "GitHub setup belongs to another login or workspace. Sign in to the original workspace to resume.",
+                github_installation_admin_required: "A workspace owner or administrator approves the GitHub App installation.",
+                github_installation_login_refresh_required: "Your login needs a refresh. Run catalyst onboard to resume.",
+                github_installation_browser_unavailable: "The GitHub App approval page could not be opened. Use your workspace's Connections page, then resume.",
                 step_not_available_in_this_release: "This setup step is not available yet.",
                 prerequisite_not_ready: "Waiting for an earlier setup step.",
                 local_sync_not_selected: "Using cloud reads. Local sync was not selected.",
@@ -115,27 +181,39 @@ export function createClackOnboardUi(prompts, streams, deps = {}) {
                 repository_selection_unverified: "Your selected repositories could not be verified. Run catalyst onboard --repo <owner/name> to choose again.",
             };
             const text = `${ONBOARD_TITLES[step.id]}${step.reason ? `: ${reasons[step.reason] ?? step.reason.replaceAll("_", " ")}` : ""}`;
-            const kind = step.state === "done" ? "info" : step.state === "failed" ? "error" : step.state === "waiting" || step.state === "pending" ? "warn" : "message";
-            prompts.log[kind](`${step.state === "done" ? "✓ " : ""}${text}`, { output: streams.output });
+            const kind = step.state === "done"
+                ? "info"
+                : step.state === "failed"
+                    ? "error"
+                    : step.state === "waiting" || step.state === "pending"
+                        ? "warn"
+                        : "message";
+            prompts.log[kind](`${step.state === "done" ? "✓ " : ""}${text}`, {
+                output: streams.output,
+            });
         },
         message,
         finish(journal, only) {
             stop();
             let text = "Setup still needs checks. Run catalyst onboard to resume.";
             if (abort.signal.aborted)
-                text = "Setup paused. Your progress is saved.\nresume: catalyst onboard";
+                text =
+                    "Setup paused. Your progress is saved.\nresume: catalyst onboard";
             else if (journal.complete && journal.exit === 0 && !only)
                 text = "Onboarding complete.";
             else if (only && journal.exit === 0)
                 text = `${ONBOARD_TITLES[only]} finished. Onboarding still has other steps.\nresume: catalyst onboard`;
             prompts.outro(text, { output: streams.output });
         },
-        async wait(text, run) { start(text); try {
-            return await run();
-        }
-        finally {
-            stop();
-        } },
+        async wait(text, run) {
+            start(text);
+            try {
+                return await run();
+            }
+            finally {
+                stop();
+            }
+        },
         dispose() {
             try {
                 stop();

package/dist/onboard-workspace.js

@@ -3,49 +3,90 @@ import { pollConsent } from "./onboard-consent.js";
 const STATUS = "/api/v1/me/connections/linear/workspace";
 const HANDOFF = "/connect/linear/workspace/handoff";
 const idPattern = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
-const states = new Set(["connected", "missing-scope", "expired-or-revoked", "unreachable", "not-connected"]);
-const warmth = new Set(["warm", "absent", "expired", "renewal-due", "no-expiry", "unavailable"]);
-const object = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
-const waiting = (reason) => ({ state: "waiting", reason });
+const states = new Set([
+    "connected",
+    "missing-scope",
+    "expired-or-revoked",
+    "unreachable",
+    "not-connected",
+]);
+const warmth = new Set([
+    "warm",
+    "absent",
+    "expired",
+    "renewal-due",
+    "no-expiry",
+    "unavailable",
+]);
+const object = (v) => v !== null && typeof v === "object" && !Array.isArray(v)
+    ? v
+    : null;
+const waiting = (reason) => ({
+    state: "waiting",
+    reason,
+});
 const nullableText = (v) => v === null || typeof v === "string";
-const nullableTime = (v) => v === null || typeof v === "number" && Number.isFinite(v) && v >= 0;
+const nullableTime = (v) => v === null || (typeof v === "number" && Number.isFinite(v) && v >= 0);
 /** A bounded read never rotates credentials or writes a token after the receipt lock is released. */
 async function read(ctx, journal, path, timeoutMs, external) {
     const cfg = loadConfig(ctx.home);
     if (!cfg?.user)
         return { reason: "personal_login_required" };
-    if ((journal.account ?? journal.tenant) && (journal.account ?? journal.tenant) !== cfg.account ||
-        journal.membershipId && journal.membershipId !== cfg.user.id ||
-        journal.baseUrl && normalizeBaseUrl(journal.baseUrl) !== normalizeBaseUrl(cfg.baseUrl))
+    if (((journal.account ?? journal.tenant) &&
+        (journal.account ?? journal.tenant) !== cfg.account) ||
+        (journal.membershipId && journal.membershipId !== cfg.user.id) ||
+        (journal.baseUrl &&
+            normalizeBaseUrl(journal.baseUrl) !== normalizeBaseUrl(cfg.baseUrl)))
         return { reason: "workspace_identity_refused" };
-    const expiry = cfg.auth ? Date.parse(cfg.auth.expiresAt) - ctx.now().getTime() : 0;
-    const bearer = cfg.key || (cfg.auth && Number.isFinite(expiry) && expiry > 30_000 ? cfg.auth.accessToken : undefined);
+    const expiry = cfg.auth
+        ? Date.parse(cfg.auth.expiresAt) - ctx.now().getTime()
+        : 0;
+    const bearer = cfg.key ||
+        (cfg.auth && Number.isFinite(expiry) && expiry > 30_000
+            ? cfg.auth.accessToken
+            : undefined);
     if (!bearer)
         return { reason: "workspace_login_refresh_required" };
     const deadline = new AbortController();
     const timer = setTimeout(() => deadline.abort(), timeoutMs);
-    const signal = external ? AbortSignal.any([external, deadline.signal]) : deadline.signal;
+    const signal = external
+        ? AbortSignal.any([external, deadline.signal])
+        : deadline.signal;
     let remove = () => { };
     try {
-        return await new Promise(resolve => {
-            const stopped = () => resolve({ reason: external?.aborted ? "interrupted" : "workspace_status_unavailable" });
+        return await new Promise((resolve) => {
+            const stopped = () => resolve({
+                reason: external?.aborted
+                    ? "interrupted"
+                    : "workspace_status_unavailable",
+            });
             if (signal.aborted) {
                 stopped();
                 return;
             }
             signal.addEventListener("abort", stopped, { once: true });
             remove = () => signal.removeEventListener("abort", stopped);
-            Promise.resolve().then(async () => {
+            Promise.resolve()
+                .then(async () => {
                 if (signal.aborted)
                     return { reason: "interrupted" };
                 const response = await ctx.fetch(`${normalizeBaseUrl(cfg.baseUrl)}${path}`, {
-                    method: "GET", redirect: "error", headers: { authorization: `Bearer ${bearer}`, accept: "application/json" }, signal,
+                    method: "GET",
+                    redirect: "error",
+                    headers: {
+                        authorization: `Bearer ${bearer}`,
+                        accept: "application/json",
+                    },
+                    signal,
                 });
                 // Refusal bodies and provider diagnostics are never parsed, returned or printed.
                 if (response.status !== 200)
                     return { status: response.status };
-                return { status: 200, body: await response.json() };
-            }).then(value => signal.aborted ? stopped() : resolve(value), () => signal.aborted ? stopped() : resolve({ reason: "workspace_status_unavailable" }));
+                return { status: 200, body: (await response.json()) };
+            })
+                .then((value) => (signal.aborted ? stopped() : resolve(value)), () => signal.aborted
+                ? stopped()
+                : resolve({ reason: "workspace_status_unavailable" }));
         });
     }
     finally {
@@ -55,8 +96,10 @@ async function read(ctx, journal, path, timeoutMs, external) {
 }
 function readFailure(value) {
     if ("reason" in value)
-        return value.reason === "workspace_identity_refused" || value.reason === "personal_login_required"
-            ? { state: "refused", reason: value.reason } : waiting(value.reason);
+        return value.reason === "workspace_identity_refused" ||
+            value.reason === "personal_login_required"
+            ? { state: "refused", reason: value.reason }
+            : waiting(value.reason);
     if (value.status === 401 || value.status === 403)
         return { state: "refused", reason: "workspace_consent_refused" };
     return value.status === 200 ? null : waiting("workspace_status_unavailable");
@@ -67,16 +110,33 @@ function observation(body, now) {
     const workspace = object(row?.workspace);
     const credential = object(row?.credential);
     const verification = object(row?.verification);
-    if (!row || typeof row.connected !== "boolean" || !workspace || typeof workspace.bound !== "boolean" ||
-        !nullableText(workspace.workspaceId) || !nullableText(workspace.workspaceSlug) || !nullableText(workspace.workspaceName) ||
-        !credential || ![true, false, null].includes(credential.stored) ||
-        !nullableTime(credential.updatedAt) || !nullableTime(credential.expiresAt) || (typeof credential.warmth !== "string" || !warmth.has(credential.warmth)) || !verification)
+    if (!row ||
+        typeof row.connected !== "boolean" ||
+        !workspace ||
+        typeof workspace.bound !== "boolean" ||
+        !nullableText(workspace.workspaceId) ||
+        !nullableText(workspace.workspaceSlug) ||
+        !nullableText(workspace.workspaceName) ||
+        !credential ||
+        ![true, false, null].includes(credential.stored) ||
+        !nullableTime(credential.updatedAt) ||
+        !nullableTime(credential.expiresAt) ||
+        typeof credential.warmth !== "string" ||
+        !warmth.has(credential.warmth) ||
+        !verification)
         return waiting("workspace_status_shape");
-    if (verification.source === "none" && verification.state === "not-run" && verification.checkedAt === null && row.connected === false)
+    if (verification.source === "none" &&
+        verification.state === "not-run" &&
+        verification.checkedAt === null &&
+        row.connected === false)
         return waiting("workspace_status_unavailable");
-    if (verification.source !== "live-probe" || (typeof verification.state !== "string" || !states.has(verification.state)) ||
-        typeof verification.checkedAt !== "number" || !Number.isFinite(verification.checkedAt) ||
-        verification.checkedAt < now - 120_000 || verification.checkedAt > now + 30_000 ||
+    if (verification.source !== "live-probe" ||
+        typeof verification.state !== "string" ||
+        !states.has(verification.state) ||
+        typeof verification.checkedAt !== "number" ||
+        !Number.isFinite(verification.checkedAt) ||
+        verification.checkedAt < now - 120_000 ||
+        verification.checkedAt > now + 30_000 ||
         row.connected !== (verification.state === "connected"))
         return waiting("workspace_status_shape");
     if (verification.state === "unreachable")
@@ -84,15 +144,29 @@ function observation(body, now) {
     if (!row.connected)
         return { state: "pending" };
     // A working credential alone cannot prove this account has a bound Linear workspace.
-    if (!workspace.bound || typeof workspace.workspaceId !== "string" || !idPattern.test(workspace.workspaceId))
+    if (!workspace.bound ||
+        typeof workspace.workspaceId !== "string" ||
+        !idPattern.test(workspace.workspaceId))
         return waiting("linear_workspace_unverified");
-    return { state: "done", evidence: { provider: "linear", workspace: workspace.workspaceId, checkedAt: verification.checkedAt } };
+    return {
+        state: "done",
+        evidence: {
+            provider: "linear",
+            workspace: workspace.workspaceId,
+            checkedAt: verification.checkedAt,
+        },
+    };
 }
 function safeHandoff(body, ctx) {
     const row = object(body);
     const cfg = loadConfig(ctx.home);
-    if (!cfg || !row || typeof row.authorizationUrl !== "string" || row.authorizationUrl.length > 8192 || /[\u0000-\u0020\u007f]/.test(row.authorizationUrl) ||
-        typeof row.expiresAt !== "number" || !Number.isFinite(row.expiresAt))
+    if (!cfg ||
+        !row ||
+        typeof row.authorizationUrl !== "string" ||
+        row.authorizationUrl.length > 8192 ||
+        /[\u0000-\u0020\u007f]/.test(row.authorizationUrl) ||
+        typeof row.expiresAt !== "number" ||
+        !Number.isFinite(row.expiresAt))
         return null;
     const remaining = row.expiresAt - ctx.now().getTime();
     // Thirty seconds accommodates clock skew; an expired link is never launched.
@@ -102,9 +176,17 @@ function safeHandoff(body, ctx) {
         const url = new URL(row.authorizationUrl);
         const keys = [...url.searchParams.keys()];
         const handoff = url.searchParams.get("handoff");
-        if (url.protocol !== "https:" || url.origin !== new URL(normalizeBaseUrl(cfg.baseUrl)).origin || url.username || url.password ||
-            url.pathname !== HANDOFF || url.hash || keys.length !== 1 || keys[0] !== "handoff" ||
-            !handoff || handoff.length > 4096 || /[\s\u0000-\u001f\u007f]/.test(handoff))
+        if (url.protocol !== "https:" ||
+            url.origin !== new URL(normalizeBaseUrl(cfg.baseUrl)).origin ||
+            url.username ||
+            url.password ||
+            url.pathname !== HANDOFF ||
+            url.hash ||
+            keys.length !== 1 ||
+            keys[0] !== "handoff" ||
+            !handoff ||
+            handoff.length > 4096 ||
+            /[\s\u0000-\u001f\u007f]/.test(handoff))
             return null;
         return url.toString();
     }
@@ -112,19 +194,29 @@ function safeHandoff(body, ctx) {
         return null;
     }
 }
-/** Uses the new personal bearer twins; old clouds retain their supported read-only readiness path. */
+/** Uses personal bearer twins; missing routes wait without an ungated readiness fallback. */
 export function linearWorkspaceAdapter(options) {
     const timeoutMs = options.requestTimeoutMs ?? 30_000;
     const consentTimeoutMs = options.consentTimeoutMs ?? 600_000;
-    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 30_000 ||
-        !Number.isSafeInteger(consentTimeoutMs) || consentTimeoutMs < 1 || consentTimeoutMs > 600_000)
+    if (!Number.isSafeInteger(timeoutMs) ||
+        timeoutMs < 1 ||
+        timeoutMs > 30_000 ||
+        !Number.isSafeInteger(consentTimeoutMs) ||
+        consentTimeoutMs < 1 ||
+        consentTimeoutMs > 600_000)
         throw new Error("workspace_timeout_invalid");
     const inspect = async (ctx, journal, signal) => {
         const result = await read(ctx, journal, STATUS, timeoutMs, signal);
-        if ("status" in result && result.status === 404)
-            return { result: await options.fallback.check(ctx, journal, signal), unsupported: true };
+        if ("status" in result && [404, 405].includes(result.status))
+            return {
+                result: waiting("cloud_capability_unavailable"),
+                unsupported: true,
+            };
         const failure = readFailure(result);
-        return { result: failure ?? observation("body" in result ? result.body : undefined, ctx.now().getTime()) };
+        return {
+            result: failure ??
+                observation("body" in result ? result.body : undefined, ctx.now().getTime()),
+        };
     };
     return {
         check: async (ctx, journal, signal) => (await inspect(ctx, journal, signal)).result,
@@ -140,7 +232,7 @@ export function linearWorkspaceAdapter(options) {
             if (before.unsupported)
                 return waiting("cloud_capability_unavailable");
             const start = await read(ctx, journal, `${STATUS}/start`, timeoutMs, signal);
-            if ("status" in start && start.status === 404)
+            if ("status" in start && [404, 405].includes(start.status))
                 return waiting("cloud_capability_unavailable");
             const failure = readFailure(start);
             if (failure)
@@ -151,7 +243,9 @@ export function linearWorkspaceAdapter(options) {
             if (signal?.aborted)
                 return waiting("interrupted");
             const current = loadConfig(ctx.home);
-            if (!current?.user || current.account !== cfg.account || current.user.id !== cfg.user.id ||
+            if (!current?.user ||
+                current.account !== cfg.account ||
+                current.user.id !== cfg.user.id ||
                 normalizeBaseUrl(current.baseUrl) !== normalizeBaseUrl(cfg.baseUrl))
                 return { state: "refused", reason: "workspace_identity_refused" };
             if (!["owner", "admin"].includes(current.user.role))
@@ -165,20 +259,30 @@ export function linearWorkspaceAdapter(options) {
                 return waiting("workspace_browser_unavailable");
             }
             let latest = waiting("workspace_status_unavailable");
-            const run = () => pollConsent({ timeoutMs: consentTimeoutMs, signal, sleep: options.sleep,
+            const run = () => pollConsent({
+                timeoutMs: consentTimeoutMs,
+                signal,
+                sleep: options.sleep,
                 readStatus: async (pollSignal) => {
                     const value = await inspect(ctx, journal, pollSignal);
                     latest = value.result;
                     if (value.unsupported)
-                        return { outcome: "failed", reason: "cloud_capability_unavailable" };
+                        return {
+                            outcome: "waiting",
+                            reason: "cloud_capability_unavailable",
+                        };
                     if (latest.state === "done")
                         return { outcome: "connected" };
                     if (latest.state === "refused" || latest.state === "failed")
                         return { outcome: latest.state, reason: latest.reason };
-                    return { outcome: latest.state === "pending" ? "absent" : "unavailable" };
+                    return {
+                        outcome: latest.state === "pending" ? "absent" : "unavailable",
+                    };
                 },
             });
-            const result = options.wait ? await options.wait("Waiting for workspace approval", run) : await run();
+            const result = options.wait
+                ? await options.wait("Waiting for workspace approval", run)
+                : await run();
             return result.state === "done" ? latest : result;
         },
     };