@kutrion/cli 1.2.10 → 1.2.12

package/dist/index.js

@@ -30149,7 +30149,7 @@ var KutrionClient = class {
   // #1687: the streaming counterparts of cloudDownload/cloudUpload, so a cloud node can be one side of
   // a brokered transfer without the bytes being materialised. Same helpers as the sftp/file pairs.
   //
-  // GET /cloud/connections/:id/download (server/src/modules/cloud.ts:438) takes the same `?redact=1`
+  // GET /cloud/connections/:id/download (server/src/modules/cloud.ts:446) takes the same `?redact=1`
   // and the same open-ended `Range: bytes=<start>-` as the file route, and answers 206 with
   // Content-Range when it resumes. A BOUNDED range is refused outright by refuseUnsupportedRange
   // (cloud.ts:453) — downloadStream only ever sends the open-ended form, so that refusal is
@@ -34171,9 +34171,16 @@ function createFeatureLatch(store, log3) {
     }
   };
 }
+var unavailable = (reason) => ({ kind: "unavailable", reason });
+function fetchFailure(e) {
+  const err = e;
+  if (err?.name === "TimeoutError" || err?.name === "AbortError") return "timeout";
+  const text2 = `${String(err?.message ?? "")} ${String(err?.cause?.message ?? "")}`.toLowerCase();
+  return text2.includes("redirect") ? "redirect" : "network";
+}
 async function checkHubKey(p) {
   const origin = apiOrigin(p.apiBase);
-  if (!origin || !p.bearer) return "unavailable";
+  if (!origin || !p.bearer) return unavailable("no_bearer");
   let res;
   try {
     res = await (p.fetchImpl ?? fetch)(`${p.apiBase}/auth/hub-channel-keys/check`, {
@@ -34183,15 +34190,15 @@ async function checkHubKey(p) {
       redirect: "error",
       signal: AbortSignal.timeout(p.timeoutMs ?? 1e4)
     });
-  } catch {
-    return "unavailable";
+  } catch (e) {
+    return unavailable(fetchFailure(e));
   }
   p.latch.observe(origin, res.headers);
   const body = await res.json().catch(() => null);
   if (isApiNotFound(res.status, body) && !p.latch.latched(origin)) return "legacy";
-  if (!res.ok) return "unavailable";
+  if (!res.ok) return unavailable(`http_${res.status}`);
   const v = body?.verdict;
-  if (v !== "vouched" && v !== "first_contact" && v !== "new_hub" && v !== "refused") return "unavailable";
+  if (v !== "vouched" && v !== "first_contact" && v !== "new_hub" && v !== "refused") return unavailable("bad_verdict");
   p.latch.verdictSeen(origin);
   return v;
 }
@@ -34684,7 +34691,7 @@ function lineReader(sock) {
     })
   };
 }
-var failed = (reason) => ({ ok: false, reason });
+var failed = (reason, detail) => ({ ok: false, reason, ...detail ? { detail } : {} });
 function openConn(deps, endpoint) {
   const sock = (deps.connectTo ?? ((e) => (0, import_node_net2.connect)(e)))(endpoint);
   const rd = lineReader(sock);
@@ -34743,7 +34750,7 @@ async function seedOnce(deps) {
   const hubPk = met.offer.hub_pk;
   if (wrongHub(hubPk, pinned)) return failed("hub_identity_changed");
   const verdict = await deps.check(hubPk);
-  if (verdict === "unavailable") return failed("hub_check_unavailable");
+  if (typeof verdict === "object") return failed("hub_check_unavailable", verdict.reason);
   if (verdict === "refused" || verdict === "new_hub") return failed("hub_not_vouched");
   if (pinned === null || verdict === "first_contact") {
     const answer = await confirmWithin(deps, { app: appCode, hub: keyFingerprint(identity.client, hubPk) });
@@ -34926,13 +34933,13 @@ async function seedHubAfterSignIn(deps) {
   const reachable = () => resolveEndpoint(deps.location, { platform: deps.platform }) !== null;
   if (!reachable()) {
     const launcher2 = deps.launcher;
-    if (!launcher2 || !await launcher2.installed()) return { kind: "retry" };
-    if (!await launcher2.launch()) return { kind: "retry" };
+    if (!launcher2 || !await launcher2.installed()) return { kind: "retry", reason: "hub_not_installed" };
+    if (!await launcher2.launch()) return { kind: "retry", reason: "hub_not_launched" };
     const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
     const now = deps.now ?? Date.now;
     const until = now() + LAUNCH_WAIT_MS;
     while (!reachable() && now() < until) await sleep(LAUNCH_POLL_MS);
-    if (!reachable()) return { kind: "retry" };
+    if (!reachable()) return { kind: "retry", reason: "hub_not_up" };
   }
   const launcher = deps.launcher;
   const confirmHub = launcher?.foreground ? async (codes, signal) => {
@@ -34942,9 +34949,9 @@ async function seedHubAfterSignIn(deps) {
   const out = await seedOnce({ ...deps, confirmHub });
   if (out.ok) return { kind: "done", result: out.result };
   if (out.reason === "hub_other_account") return { kind: "other_account" };
-  if (out.reason === "hub_not_running") return { kind: "retry" };
+  if (out.reason === "hub_not_running") return { kind: "retry", reason: "hub_not_running" };
   if (out.reason === "hub_timed_out") return { kind: "timed_out" };
-  if (out.reason === "hub_check_unavailable") return { kind: "retry" };
+  if (out.reason === "hub_check_unavailable") return { kind: "retry", reason: "hub_check_unavailable", ...out.detail ? { detail: out.detail } : {} };
   return { kind: "stopped", reason: out.reason };
 }
 
@@ -35078,7 +35085,7 @@ async function seedHubFromLogin(deps) {
       },
       check: async (hubPk) => {
         const verdict = await checkHubKey({ apiBase: deps.base, bearer: bearer(), hubPk, latch, fetchImpl: deps.fetchImpl });
-        if (verdict === "unavailable") checkUnavailable = true;
+        if (typeof verdict === "object") checkUnavailable = true;
         return verdict;
       },
       issue: async (devicePk, hubPk) => {
@@ -38148,7 +38155,7 @@ var ROLES = ["OWNER", "ADMIN", "EDITOR", "VIEWER"];
 var TOKEN_SCOPES = ["scim", "events"];
 var ORG_ROLES = ["owner", "admin", "member"];
 var ROTATION_SERVICES = ["linux_password", "postgres_password", "mysql_password"];
-var VERSION = true ? "1.2.10" : "dev";
+var VERSION = true ? "1.2.12" : "dev";
 var HELP = `kt \u2014 Kutrion CLI
   kt login [--email <e>] [--password-stdin] [--code <2fa>]   prompts for the password, or reads it from stdin;
                                                at a terminal with no --email, first asks the Kutrion desktop app,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kutrion/cli",
-  "version": "1.2.10",
+  "version": "1.2.12",
   "description": "Kutrion command-line client — vaults, credentials and SSH/SFTP/RDP brokering from the terminal.",
   "type": "commonjs",
   "bin": {