@dharta/cli 0.6.77 → 0.6.78

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 LifeSage LLC
+Copyright (c) 2026 Dharta Labs, Inc.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -47,17 +47,17 @@ shared runtime inputs inside it before deploying.
 | `dharta login --with-token` | Read an API key from piped stdin instead (CI, air-gapped): `echo $DHARTA_API_KEY \| dharta login --with-token`. |
 | `dharta auth status` | Show who you are, per profile (includes the `DHARTA_API_KEY` env credential when set). |
 | `dharta auth token` | Print the active token, for piping. |
-| `dharta auth logout [--profile <name>]` | Remove the stored credential (the key stays revocable on the dashboard). |
+| `dharta auth logout [--profile <name>]` | Remove the stored credential (the key stays revocable on the dashboard). Removes the default profile unless `--profile` names another. |
 | `dharta whoami` | Show the authenticated principal. |
 | `dharta create [path] [--name <n>] [--template <key>] [--harness <type>] [--harness-version <version>]` | Scaffold a brand-new starter agent in a supported harness format (`claude-code`, `opencode`, `deepagents`, `goose`, or `codex-cli`): native template files plus a default `dharta.toml` (deploy off). Omit `--harness` for Claude Code. Local only. |
 | `dharta setup [path] [--name <n>] [--enable\|--disable] [--method git\|folder] [--ci github] [--login]` | Configure exactly one existing agent folder and persist its deploy method. `name` is a 1-100 character display name; Dharta derives the org-unique deploy slug from it, and changing that slug targets a different agent. At an ambiguous repo root, interactive setup asks for one agent; rerun setup for each sibling. GitHub is optional per-agent automation pinned to the selected method, not a third transport; rerun setup and rotate that agent's CI secret when changing methods. Local only. |
-| `dharta dev [path] [-m <msg>] [--user <id>] [--port <port>]` | Run the agent locally behind the consumer session API: chat REPL, hot reload, approval prompts, and a printed local URL a widget can target. `[path]` (or cwd) selects the agent; in a multi-agent repo it picks the sole one or asks. Spawns `dharta-runtime dev-serve` via uv (see Runtime below). |
+| `dharta dev [path] --model-auth <api-key\|claude> [-m <msg>] [--user <id>] [--port <port>]` | Run the agent locally behind the consumer session API. `api-key` uses `ANTHROPIC_API_KEY`; `claude` checks the provider-owned login with `claude auth status`. Omit the selector only when exactly one method is ready. |
 | `dharta dev --release vN [--env remote [--include-secrets]]` | Parity axes: run the exact built tree prod serves, and/or bind prod env vars instead of `.env` (`--include-secrets` needs `env:secrets:read`; audited). |
 | `dharta deploy [slug] [--mode git\|folder] [--dir <path>] [--reconcile-source]` | Create and activate a new immutable release from exactly one agent folder. Its checked-in `deploy_method` selects committed git or working-tree upload; `--mode` is a one-run override. Git uses a per-agent deploy ref, so sibling agents never fan out implicitly. After inspecting intentionally divergent hosted history, `--reconcile-source` aligns only Dharta's hosted branch. |
 | `dharta status` | Every agent in this repo (resolved from the git root, like `git status`) joined to its live release/version on the active profile - the "what's here" view. Works before the first deploy. |
 | `dharta rollback [slug] --to vN` | Flip the agent's current release to a previous version (`releases:write`); slug is inferred from this folder when omitted. |
 | `dharta logs [slug] [--tail] [--since <iso>]` | Stream agent logs via SSE (`--tail`) or poll with `--since`; slug is inferred from this folder when omitted. |
-| `dharta open [target]` | Open the hosted chat page, `console`, or handoff targets: `billing`, `security`, `api-keys`, `model-keys`, `webhooks`, `connected-accounts`. Per-agent commands resolve the agent from `dharta.toml`: explicit `--agent`/`[path]`, the repo's sole agent, then the legacy `DHARTA_PROJECT` alias. |
+| `dharta open [target]` | Open the hosted chat page, `console`, or handoff targets: `billing`, `security`, `api-keys`, `model-connections`, `webhooks`, `connected-accounts`. Per-agent commands resolve the agent from `dharta.toml`: explicit `--agent`/`[path]`, the repo's sole agent, then the legacy `DHARTA_PROJECT` alias. |
 | `dharta env list\|set NAME=value [--secret]\|unset NAME` | Manage the agent's prod env bindings (declare-or-bind; secret values are never shown). |
 | `dharta env pull [--force] [--include-secrets]` | Hydrate `.env` from prod values (audited; secrets excluded unless `--include-secrets` uses `env:secrets:read`). |
 | `dharta env diff` | Report drift between `.env`, prod bindings, and the `dharta.toml` `[env]` declarations. |
@@ -67,14 +67,15 @@ shared runtime inputs inside it before deploying.
 | `dharta files ls <agent> <karta>` | List a karta's durable workspace files (path and size) via the owner read channel (requires a `workspace:read` key + the agent's `owners.api` grant). |
 | `dharta files get <agent> <karta> <path> [-o <file>]` | Fetch one workspace file; writes bytes to `--out`, or streams them to stdout. |
 | `dharta artifact put\|list\|remove` | Designate, inspect, or remove durable workspace work product through the release-declared artifact schema. This delegates to the pinned `dharta-runtime` helper and never publishes or shares an artifact. |
+| `dharta genui build [dir]` | Compile the `[genui]` component sources into the release bundle and record its `bundle_sha256` in `dharta.toml`. Local only; see Generative UI below. |
+| `dharta genui check [dir]` | Verify the declared bundle exists, matches its recorded digest, and would be accepted at deploy. `dharta dev` runs the same check as a warning and `dharta deploy` refuses on it. |
 | `dharta send "<message>"` (alias `run`) | Send a one-shot message to the DEPLOYED agent and print its reply (prod smoke test; tool approvals auto-denied). |
 | `dharta agent list\|show [slug]` | List all agents in your org, or show one + its recent releases (the agent in this folder if no slug). |
 | `dharta agent sessions [slug]\|sessions show\|view <id> [slug]\|session <id> [slug]` | List transcript sessions for an agent, or view one transcript without leaving the `agent` namespace. |
 | `dharta agent releases [slug]\|activate <version> [slug]` | List release history or activate an existing production release. |
 | `dharta agent serving\|dashboard-edits\|workspace-inspectable on\|off [slug]` | Toggle serving, browser-console edits, and read-only workspace inspection. |
 | `dharta agent workspace-access show\|set <path>=<on\|off> [slug]` | Show or set the workspace access grant matrix. Paths: `owners.git`, `owners.api`, `users.widget`, `users.agent_definition`. |
-| `dharta agent model [slug] --source inherit\|platform [--model <id>]` | Clear the model override or pin the platform connector. |
-| `dharta agent model [slug] --connector-id <id> [--model <id>]` | Pin a BYOK connector from `dharta model-keys list`; omit `--source`. |
+| `dharta agent model [slug] --connector <slug[,slug...]> [--model-ref <reference>]` | Set the connection order by slug and the model reference. Use `karta` for the platform connection. An empty `--connector` stores an empty order, so the agent inherits the organization's connections; an empty `--model-ref` clears the reference, so the connection's default model applies. |
 | `dharta agent delete [slug]` | Archive an agent. |
 | `dharta schedules list\|create [--run-now]\|pause\|resume\|run\|delete\|rm` | Manage recurring runs for an agent. `--run-now` queues a test run immediately after creation. |
 | `dharta keys list\|create <name> [--scope ...]\|rename <id> <name>\|revoke <id>` | Manage API keys (plaintext shown exactly once on create). |
@@ -89,14 +90,18 @@ Additional command groups:
 | --- | --- |
 | `dharta audit-log` | Export audit events as a table, JSON, or CSV. |
 | `dharta analytics agents\|users\|instances\|sessions\|models\|cost` | Usage and cost rollups with bounded ranges and JSON output. |
-| `dharta api [METHOD] /path` | Authenticated passthrough for documented public API reads and curated scoped writes. |
-| `dharta model-keys list\|create\|revoke` | Manage encrypted BYOK provider credentials. |
-| `dharta members list\|invite\|set-role\|remove` | Manage organization members and invitations. |
+| `dharta api [METHOD] /path` | Authenticated passthrough to any public JSON API endpoint. Paths must start with `/api/`, `/me`, `/version`, `/api_keys`, `/model_connections`, or `/agent_templates`; the key's server-side scopes decide what the request may do. Unstable escape hatch - the curated commands are the stable contract. |
+| `dharta models auth list\|create\|rotate\|models\|revoke` | Manage encrypted BYOK provider connectors. `create --slug <slug>` names the connector for `--connector` and model references, `rotate <id\|slug>` replaces its credential, and `models <id\|slug>` shows or replaces its enabled models and default. `rotate`, `models`, and `revoke <id\|slug>` each take the numeric id or the slug; an all-digit argument is always read as an id. |
+| `dharta org model [set]` | Show or update the organization connector order, model reference, and portable model parameters that agents inherit. |
+| `dharta org rename\|support-access\|transcript-access` | Rename the organization and set its support-access and API transcript-access posture. Owner-created keys only for the two toggles. |
+| `dharta members list\|invite\|set-role\|remove\|revoke-invitation\|resend-invitation` | Manage organization members and the pending-invitation queue. |
+| `dharta repos disconnect-github <slug>` | Stop a linked GitHub repository from producing releases. Live releases are untouched. |
 | `dharta kartas list\|show\|configure\|grant\|set-role\|revoke` | Manage durable Dharta names, agent-scoped vanity URLs, access audience, and per-Karta member ACLs. |
 | `dharta embed-keys list\|create\|rotate\|enable\|disable\|revoke\|enable-identity\|disable-identity` | Manage publishable widget embed keys and their verified-identity secret for an agent. |
 | `dharta caps budget [set]\|set\|instance\|instance-set\|end-user\|end-user-set\|seat\|seat-set` | Inspect and update monthly budget, durable dharta caps, verified-user caps, and per-seat caps. |
 | `dharta appearance get\|set` | Read or merge an agent's appearance JSON. |
 | `dharta directories instances\|end-users\|users\|sessions` | Read agent-scoped durable kartas, verified users, and sessions. |
+| `dharta fleet operations\|rollouts\|findings\|views\|analytics\|exports` | Run bulk fleet changes, drive rollouts, triage findings, manage saved views and charts, and export catalog rows. |
 | `dharta webhooks list\|create\|update\|enable\|delete\|rm` | Manage webhook endpoints and one-time signing secrets. |
 
 Every command that prints a result payload also takes `--json` for
@@ -106,6 +111,39 @@ it. `dharta open --json` prints the URL object without opening a browser, and
 `dharta send --json` buffers the reply into one `{agent, session_id, reply}`
 payload.
 
+`--jq <expr>` filters that JSON through a jq compiled into the CLI, so no
+separate install is needed. It implies `--json` and is rejected wherever
+`--json` is:
+
+```bash
+dharta agent list --jq '.[].slug'
+dharta api /api/agents/support-bot --jq '.release.version'
+```
+
+Each result prints on its own line, compact; a string result prints without
+quotes. A filter that matches nothing prints nothing. A filter that does not
+compile fails before the command does any work.
+
+`--profile <name>` works on every command and picks which stored profile it
+uses. Resolution order: `--profile`, then `DHARTA_PROFILE`, then the config's
+`default_profile`.
+
+### Exit codes
+
+| Code | Meaning |
+| --- | --- |
+| 0 | Success. |
+| 1 | General failure. |
+| 2 | Usage error: unknown flag, bad value, missing argument, unknown profile. |
+| 3 | Not authenticated (no stored credential, or a 401). |
+| 4 | Forbidden (403), usually a missing scope. |
+| 5 | Not found (404). |
+| 6 | Validation failure (409 or 422). |
+| 7 | The API host could not be reached. |
+
+`dharta doctor` is the exception: it exits 1 for an unhealthy local setup,
+which is a report rather than an error.
+
 `dharta git-credential` is a hidden subcommand: the credential-helper protocol
 endpoint that `dharta login` wires into git config.
 
@@ -122,12 +160,138 @@ base_url = "https://dharta.ai"
 git_base_url = "https://git.dharta.ai"
 ```
 
-- `--profile <name>` selects a non-default profile.
+- `--profile <name>` selects a non-default profile, on any command. It also
+  names the profile `dharta login` writes and `dharta auth logout` removes.
+  `DHARTA_PROFILE` sets it for a whole shell. An explicit `--profile` outranks
+  both `DHARTA_API_KEY` and `DHARTA_BASE_URL`: a flag never silently talks to
+  whatever organization an exported key belongs to, and never sends the
+  profile's key to an exported host it was not issued for. `DHARTA_PROFILE`
+  does not, because both are ambient.
 - `--base-url` / `--git-base-url` (on `login`) override the production hosts
   for staging / self-hosted deployments.
 - `DHARTA_API_KEY` overrides the stored credential everywhere (the CI path;
   `DHARTA_BASE_URL` pairs with it).
 
+## Generative UI (`dharta genui`)
+
+An agent can render UI, not just text, in the embedded widget
+([RFC 0056](../../docs/rfcs/0056-agent-driven-ui-rendering.md)). It is opt-in per
+agent: add a `[genui]` section to `dharta.toml` and Dharta serves that agent's
+component catalog to the widget. No section means no catalog and no token cost.
+
+Every component declares a trust tier:
+
+| Tier | What it is | Isolation | Needs a bundle |
+| --- | --- | --- | --- |
+| 1 | Declarative. Dharta renders the component with its own primitives. | none (no builder code) | no |
+| 2 | Your JavaScript, run in a Web Worker with no DOM and no network. | Worker | yes |
+| 3 | Your HTML, run in a sandboxed iframe. | iframe + per-component CSP | yes |
+
+A Tier-1 component aliases one Dharta builtin: `Badge`, `Button`, `Card`,
+`Checkbox`, `Column`, `Divider`, `Heading`, `Row`, `Select`, `Text`, `TextField`.
+
+### Source layout
+
+`dharta genui build` compiles one directory per component from
+`[genui.build] source` (default `genui/components`). That key sits in its own
+sub-table because it is a build-time CLI concern: the release contract never
+reads it. Each directory is named exactly as the component is named in the
+`components` array:
+
+```
+genui/components/
+  Card/
+    component.json        { "tier": 1, "builtin": "Card" }
+  Pentagraph/
+    component.json        { "tier": 2, "props_schema": {}, "events": {} }
+    worker.js             the Web Worker source (tier 2)
+  Globe/
+    component.json        { "tier": 3 }
+    index.html            the sandboxed-iframe document (tier 3)
+```
+
+A component name may carry path segments, so `charts/Bar` is a legal name and
+its sources live at `genui/components/charts/Bar/`. A directory holding a
+`component.json` *is* a component, so anything below one belongs to that
+component and is never scanned for others.
+
+`component.json` keys:
+
+- `tier` (required) - `1`, `2`, or `3`. Must equal the tier in `dharta.toml`;
+  the manifest is the trust declaration, so the build never reconciles the two
+  for you.
+- `builtin` (tier 1 only) - the Dharta builtin this component aliases. Defaults
+  to the directory name. A component named after a builtin may only alias that
+  same builtin: `Card` renders as `Card`, never as `Badge`, because the widget
+  merges your catalog over the built-in one and the swap would reach every
+  surface in the transcript.
+- `props_schema` (optional) - JSON Schema object for the component's props.
+- `events` (optional) - an object of `{ "<event>": { "cadence": ... } }`, where
+  cadence is `agent_action`, `reference`, or `side_effect`, plus an optional
+  `context_schema` object. At most 64 events per component.
+
+Every number in `component.json` reaches the bundle as a JavaScript double, so
+the build writes `1` for `1.0` and `0` for `-0.0`. The value is unchanged - both
+planes hold the same double - but the spelling you wrote is not preserved.
+
+Two kinds of number a double cannot hold at all, and the build refuses both,
+naming the file and the path to the number:
+
+- an integer whose magnitude is above 9007199254740991, which arrives already
+  rounded to something you did not write;
+- a float that overflows a double, such as `1e400`, which arrives as `Infinity`
+  and would be written into the bundle as `null`.
+
+Write either as a string, or use a number a double can hold. Every float that
+is a finite double, `1e-7` and `1.5e300` included, is written through unchanged.
+
+### Build and check
+
+```toml
+# dharta.toml
+[genui]
+catalog_id = "support-bot-ui"
+version = 1                    # an integer; 1.0 is a float and is rejected
+components = [{ name = "Card", tier = 1 }, { name = "Pentagraph", tier = 2 }]
+bundle = "genui/bundle.json"
+# bundle_sha256 is written by `dharta genui build` - do not hand-edit it
+
+[genui.build]
+source = "genui/components"    # optional; this is the default
+```
+
+```sh
+dharta genui build      # writes genui/bundle.json, records bundle_sha256
+dharta genui check      # verifies the file, its digest, and its contents
+```
+
+The bundle is canonical JSON (sorted keys, compact separators, ASCII only), so
+rebuilding unchanged sources produces byte-identical output and an unchanged
+digest. Commit both the bundle and the digest: a release is accepted only when
+the bundle's bytes hash to the recorded `bundle_sha256`.
+
+A Tier-1-only catalog does not need a bundle at all. Leave `bundle` unset and
+Dharta builds the catalog from the `components` array; `dharta genui build` then
+says there is nothing to build and exits 0. It is still validated: because
+Dharta synthesizes `{ builtin: <name> }` for each entry, a Tier-1 component
+whose name is not one of the builtins above is rejected, bundle or no bundle.
+
+`dharta genui check` runs in two more places, so a broken catalog cannot reach a
+release: `dharta dev` reports it as a `[doctor]` warning at startup, and
+`dharta deploy` refuses before it pushes or uploads anything, with the same
+message the release validator would return.
+
+Limits enforced locally and again at deploy: at most 128 components, 500 KiB of
+worker source and 1 MiB of HTML per component, and 5 MiB for the whole bundle.
+The bundle must be a real file: a symlink anywhere along its path is refused,
+both when the build writes it and when anything reads it, because the release
+validator opens it with `O_NOFOLLOW`.
+
+Commit the bundle. `dharta deploy` ships a Git-filtered tree, so it checks the
+bundle against the list of files this deploy will actually carry and refuses
+when it is not among them. A file force-added under an ignore rule
+(`git add -f genui/bundle.json`) counts as carried and passes.
+
 ## Runtime (`dharta dev`)
 
 The harness adapters live in the Python `dharta-runtime` package,
@@ -151,10 +315,21 @@ Required scopes:
   and open. Member listing still requires the key to have been created by a
   current owner or admin.
 - separately scoped keys - sensitive or tenant-admin commands such as
-  `audit-log`, `members invite|set-role|remove`, `model-keys create|revoke`,
+  `audit-log`,
+  `members invite|set-role|remove|revoke-invitation|resend-invitation`,
+  `models auth create|rotate|models --enable|revoke`, `org model set`,
+  `org rename`, `org support-access`, `org transcript-access`,
+  `repos disconnect-github`,
   `keys create|rename|revoke`, `agent workspace-inspectable`,
   `agent workspace-access set`, `agent delete`, and `env pull --include-secrets`.
-- `setup` is local-only and needs no auth.
+- `dharta fleet` splits across two scopes. `fleet:write` covers the routine
+  side: previewing an operation, triaging findings, saved views, saved charts,
+  and exports. `fleet operations confirm|cancel|retry` and every
+  `fleet rollouts` verb need `fleet:operations:write`, a tenant-admin scope
+  whose keys must expire within 90 days, because they apply a frozen change set
+  to every selected target at once, or change what a running rollout does
+  next.
+- `setup` and `genui` are local-only and need no auth.
 
 ## Tests
 
@@ -162,6 +337,35 @@ Required scopes:
 npm test     # vitest + msw, covers each command's happy path
 ```
 
+### Cross-plane checks
+
+The `[genui]` rules in `src/genui.ts` mirror the data plane's
+`apps/dharta-python/src/dharta/genui/{manifest,bundle}.py`, which decide what a
+release may carry. Two tests keep the mirror honest:
+
+- `test/genui-crossplane.test.ts` reads those two Python files out of the
+  monorepo and pins every constant - the built-in list, the size limits, the
+  event cadences, the identifier pattern - against the real values. It is part
+  of this package's `npm test`, so CI runs it in the `test-ts` job, which is
+  triggered by a change under `sdks/` or under
+  `apps/dharta-python/src/dharta/genui/`. It fails, never skips, if either
+  Python file is missing.
+- `test/crossvalidate/genui_crossvalidate.py` builds real agent folders, runs
+  the real CLI over them, and runs the real `parse_genui` and
+  `load_genui_bundle` over the same bytes. It needs an interpreter that can
+  import the data plane, so it is opt-in and local only: nothing in CI sets
+  `DHARTA_CROSSVALIDATE`, so run it yourself when you touch either side of the
+  mirror.
+
+  ```sh
+  npm run build                    # the harness runs dist/cli.js
+  DHARTA_CROSSVALIDATE=1 npm test  # or: npx vitest run test/genui-crossplane.test.ts
+  ```
+
+  `DHARTA_PYTHON` picks the interpreter (default `python3`). When
+  `DHARTA_CROSSVALIDATE=1` is set the harness must run and pass: an interpreter
+  that cannot import `dharta.genui` is a test failure, not a skip.
+
 The Rails-side controllers are tested under
 `apps/dharta-web/test/controllers/api/` (e.g. `publishes_controller_test.rb`,
 `rollbacks_controller_test.rb`).

package/dist/agent.js

@@ -6,6 +6,7 @@ import * as path from "node:path";
 import { existsSync, statSync } from "node:fs";
 import { findGitRoot, scanAgentFolders, describeFolder } from "./setup-scan.js";
 import { normalizeNonBlank } from "./validators.js";
+import { CliUsageError } from "./exit-codes.js";
 const AGENT_SLUG_FORMAT = /^[a-z0-9][a-z0-9-]{0,62}$/;
 const MAX_AGENT_NAME_CHARACTERS = 100;
 // Resolve the agent slug a per-agent command operates on. Order (explicit
@@ -109,7 +110,7 @@ export function validateAgentSlug(value, label) {
     const normalized = normalizeNonBlank(value, label);
     if (!AGENT_SLUG_FORMAT.test(normalized)) {
         const suggestion = slugSuggestion(normalized);
-        throw new Error(`${label} must be a valid agent slug: lowercase letters, digits, hyphens; max 63.` +
+        throw new CliUsageError(`${label} must be a valid agent slug: lowercase letters, digits, hyphens; max 63.` +
             (suggestion ? ` Did you mean ${suggestion}?` : ""));
     }
     return normalized;
@@ -120,7 +121,7 @@ export function validateAgentSlug(value, label) {
 export function validateAgentName(value, label = "agent name") {
     const normalized = normalizeNonBlank(value, label);
     if ([...normalized].length > MAX_AGENT_NAME_CHARACTERS) {
-        throw new Error(`${label} must be 1-${MAX_AGENT_NAME_CHARACTERS} characters.`);
+        throw new CliUsageError(`${label} must be 1-${MAX_AGENT_NAME_CHARACTERS} characters.`);
     }
     return normalized;
 }

package/dist/agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,wEAAwE;AAExE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAoB,MAAM,iBAAiB,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AACtD,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAWtC,0EAA0E;AAC1E,0EAA0E;AAC1E,+EAA+E;AAC/E,wEAAwE;AACxE,2EAA2E;AAC3E,6EAA6E;AAC7E,SAAS,aAAa,CAAC,MAAwC;IAC7D,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAC3E,OAAO,UAAU,CAAC,MAAM,CAAC,IAAc,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA0B,EAAE;IAC/D,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAErF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEpD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,IAAI;YAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnB,SAAS,CAAC;QACR,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtE,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,8BAA8B,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,OAAO,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,MAAM;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM;QAC/B,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,gBAAgB,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,MAAM;SACtB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;SAChH,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzD,2EAA2E;IAC3E,2EAA2E;IAC3E,gDAAgD;IAChD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;IAC1D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAElF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,iDAAiD,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAA6D,EAAE;IAC1G,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvE,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,yBAAyB,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,6BAA6B,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,wEAAwE;AACxE,8EAA8E;AAC9E,6EAA6E;AAC7E,2BAA2B;AAC3B,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACjF,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,IAAI,IAAI,OAAO,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,KAAa;IAC5D,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0EAA0E;YAChF,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,qCAAqC;AACrC,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,KAAK,GAAG,YAAY;IACnE,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,yBAAyB,cAAc,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAE7C,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,UAAU,KAAK,KAAK,IAAI,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACxF,CAAC"}
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,wEAAwE;AAExE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAoB,MAAM,iBAAiB,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AACtD,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAWtC,0EAA0E;AAC1E,0EAA0E;AAC1E,+EAA+E;AAC/E,wEAAwE;AACxE,2EAA2E;AAC3E,6EAA6E;AAC7E,SAAS,aAAa,CAAC,MAAwC;IAC7D,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAC3E,OAAO,UAAU,CAAC,MAAM,CAAC,IAAc,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA0B,EAAE;IAC/D,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAErF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEpD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,IAAI;YAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnB,SAAS,CAAC;QACR,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtE,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,8BAA8B,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,OAAO,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,MAAM;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM;QAC/B,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,gBAAgB,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,MAAM;SACtB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;SAChH,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzD,2EAA2E;IAC3E,2EAA2E;IAC3E,gDAAgD;IAChD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;IAC1D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAElF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,iDAAiD,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAA6D,EAAE;IAC1G,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvE,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,yBAAyB,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,6BAA6B,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,wEAAwE;AACxE,8EAA8E;AAC9E,6EAA6E;AAC7E,2BAA2B;AAC3B,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACjF,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,IAAI,IAAI,OAAO,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,KAAa;IAC5D,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,IAAI,aAAa,CACrB,GAAG,KAAK,0EAA0E;YAChF,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,qCAAqC;AACrC,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,KAAK,GAAG,YAAY;IACnE,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QACvD,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,cAAc,yBAAyB,cAAc,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAE7C,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,UAAU,KAAK,KAAK,IAAI,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACxF,CAAC"}

package/dist/api-error.js

@@ -3,6 +3,7 @@
 // `err.status`/`err.body` shape (instead of the SDK's typed errorFor()
 // hierarchy, which the CLI doesn't surface).
 import { SENSITIVE_API_KEY_SCOPES } from "./commands/scopes.js";
+import { CliApiError, CliNetworkError } from "./exit-codes.js";
 export function cliFormatError(status, parsed) {
     // Server messages already name fixes (e.g. the transcript-access 403 points
     // at the settings page) - keep them verbatim. Rails sends `message`; the
@@ -33,15 +34,14 @@ export function cliFormatError(status, parsed) {
                 "Check the id or agent slug; for agent commands, run `dharta agent list`. " +
                 "Run `dharta auth status` to confirm the active host; DHARTA_BASE_URL must point at the Dharta control API.";
     }
-    const err = new Error(message);
-    err.status = status;
-    err.body = parsed;
-    return err;
+    // CliApiError, not a bare Error: `err.status` is what the exit-code
+    // taxonomy branches on, and a named class keeps that contract visible.
+    return new CliApiError(message, status, parsed);
 }
 export function cliFormatNetworkError(url, error) {
     const origin = new URL(url).origin;
-    return new Error(`Could not reach Dharta at ${origin} (${formatCause(error)}). ` +
-        "Check your network and DHARTA_BASE_URL, then try again.");
+    return new CliNetworkError(`Could not reach Dharta at ${origin} (${formatCause(error)}). ` +
+        "Check your network and DHARTA_BASE_URL, then try again.", url);
 }
 export async function cliFormatRawError(res) {
     const text = await res.text();

package/dist/api-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-error.js","sourceRoot":"","sources":["../src/api-error.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,2EAA2E;AAC3E,uEAAuE;AACvE,6CAA6C;AAE7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,MAAe;IAC5D,4EAA4E;IAC5E,yEAAyE;IACzE,sEAAsE;IACtE,WAAW;IACX,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,MAAM,aAAa,GACjB,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;QAC9B,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC/B,CAAC,CAAC,IAAI,CAAC,MAAM;YACb,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;gBACnE,CAAC,CAAC,IAAI,CAAC,KAAK;gBACZ,CAAC,CAAC,IAAI,CAAC;IACf,IAAI,OAAO,GAAG,aAAa,IAAI,oBAAoB,MAAM,EAAE,CAAC;IAC5D,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,qEAAqE,CAAC;IACtH,CAAC;SAAM,IAAI,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,0GAA0G,CAAC;QACzJ,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,sBAAsB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,2DAA2D,CAAC;QACzH,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,aAAa,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO;YACL,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;gBACtC,2EAA2E;gBAC3E,4GAA4G,CAAC;IACjH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAgD,CAAC;IAC9E,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IACpB,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC;IAClB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAW,EAAE,KAAc;IAC/D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,IAAI,KAAK,CACd,6BAA6B,MAAM,KAAK,WAAW,CAAC,KAAK,CAAC,KAAK;QAC7D,yDAAyD,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAa;IACnD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAY,IAAI,CAAC;IAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3H,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC;IACnC,OAAO,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,IAAI,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/F,CAAC"}
+{"version":3,"file":"api-error.js","sourceRoot":"","sources":["../src/api-error.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,2EAA2E;AAC3E,uEAAuE;AACvE,6CAA6C;AAE7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE/D,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,MAAe;IAC5D,4EAA4E;IAC5E,yEAAyE;IACzE,sEAAsE;IACtE,WAAW;IACX,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,MAAM,aAAa,GACjB,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;QAC9B,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC/B,CAAC,CAAC,IAAI,CAAC,MAAM;YACb,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;gBACnE,CAAC,CAAC,IAAI,CAAC,KAAK;gBACZ,CAAC,CAAC,IAAI,CAAC;IACf,IAAI,OAAO,GAAG,aAAa,IAAI,oBAAoB,MAAM,EAAE,CAAC;IAC5D,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,qEAAqE,CAAC;IACtH,CAAC;SAAM,IAAI,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,0GAA0G,CAAC;QACzJ,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,sBAAsB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,2DAA2D,CAAC;QACzH,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,aAAa,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO;YACL,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;gBACtC,2EAA2E;gBAC3E,4GAA4G,CAAC;IACjH,CAAC;IACD,oEAAoE;IACpE,uEAAuE;IACvE,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAW,EAAE,KAAc;IAC/D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,IAAI,eAAe,CACxB,6BAA6B,MAAM,KAAK,WAAW,CAAC,KAAK,CAAC,KAAK;QAC7D,yDAAyD,EAC3D,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAa;IACnD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAY,IAAI,CAAC;IAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3H,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC;IACnC,OAAO,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,IAAI,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/F,CAAC"}

package/dist/cli.d.ts

@@ -1,5 +1,8 @@
 #!/usr/bin/env node
 import { Command } from "commander";
+export declare function isNonMutatingCommandPath(path: string): boolean;
 export declare function buildProgram(): Command;
+export declare const TOP_LEVEL_HELP_GROUPS: readonly [readonly ["Setup and auth", readonly ["login", "auth", "whoami", "create", "setup"]], readonly ["Local and deploy", readonly ["dev", "deploy", "status", "rollback", "logs"]], readonly ["Runtime operations", readonly ["open", "sessions", "session", "ps", "send", "files", "artifact", "schedules"]], readonly ["Agent configuration", readonly ["agent", "env", "appearance", "genui"]], readonly ["Management", readonly ["usage", "analytics", "directories", "fleet", "kartas", "caps", "embed-keys", "webhooks", "audit-log", "keys", "models", "org", "members", "repos", "api"]], readonly ["Utilities", readonly ["doctor", "update", "completion"]]];
 export declare function main(argv: string[]): Promise<void>;
+export declare function reportCliFailure(err: unknown, write?: (line: string) => void): number;
 export declare function readStdin(): Promise<string>;