@leemour/cli-core 0.1.0

package/dist/keyring.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The one seam through which the OS keychain is reached.
+ *
+ * **What backs it, per platform** — `@napi-rs/keyring` 2.1.0, checked 2026-09-19:
+ * macOS uses the Keychain and Windows the Credential Manager, both part of the OS; Linux and the
+ * BSDs use the Secret Service over D-Bus, which a headless machine, a container, WSL or a CI
+ * runner usually does not have. There is nothing to install either way — the package ships
+ * prebuilt binaries for twelve platform triples including musl, so no Rust toolchain and no
+ * node-gyp — but on Linux **the daemon may simply not be there**, which is why every caller must
+ * handle this throwing. `Credentials` does, by warning once and writing a 0600 file instead.
+ * Injected like `fetch` in core, so
+ * "no test touched the developer's real keychain" is a property of the code rather than a hope
+ * about every test remembering to opt out.
+ */
+export interface KeyringStore {
+    get(service: string, account: string): string | null;
+    set(service: string, account: string, secret: string): void;
+    delete(service: string, account: string): boolean;
+}
+export declare const systemKeyring: KeyringStore;
+/** An in-memory stand-in. Every test uses this; none can reach the real keychain. */
+export declare const memoryKeyring: (initial?: Record<string, string>) => KeyringStore & {
+    entries: Map<string, string>;
+};
+/** Refuses every operation, so the fallback path can be tested. */
+export declare const brokenKeyring: (message?: string) => KeyringStore;
+//# sourceMappingURL=keyring.d.ts.map

package/dist/keyring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring.d.ts","sourceRoot":"","sources":["../src/keyring.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IACpD,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3D,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAA;CAClD;AAoBD,eAAO,MAAM,aAAa,EAAE,YAQ3B,CAAA;AAED,qFAAqF;AACrF,eAAO,MAAM,aAAa,GACxB,UAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,KACnC,YAAY,GAAG;IAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAY/C,CAAA;AAED,mEAAmE;AACnE,eAAO,MAAM,aAAa,GAAI,gBAAuC,KAAG,YAUtE,CAAA"}

package/dist/keyring.js

@@ -0,0 +1,45 @@
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+let cached;
+// Loaded on first use, not at import: `@napi-rs/keyring` is a native module, and a machine
+// where its binary is missing must still be able to run in file mode.
+const entryClass = () => {
+    cached ??= require("@napi-rs/keyring").Entry;
+    return cached;
+};
+export const systemKeyring = {
+    // Returns null for an absent entry rather than throwing — measured against @napi-rs/keyring
+    // on 2026-09-13, and the difference matters: a throw here means the keychain is unusable.
+    get: (service, account) => new (entryClass())(service, account).getPassword(),
+    set: (service, account, secret) => {
+        ;
+        new (entryClass())(service, account).setPassword(secret);
+    },
+    delete: (service, account) => new (entryClass())(service, account).deletePassword(),
+};
+/** An in-memory stand-in. Every test uses this; none can reach the real keychain. */
+export const memoryKeyring = (initial = {}) => {
+    const entries = new Map(Object.entries(initial));
+    const key = (service, account) => `${service}:${account}`;
+    return {
+        entries,
+        get: (service, account) => entries.get(key(service, account)) ?? null,
+        set: (service, account, secret) => {
+            entries.set(key(service, account), secret);
+        },
+        delete: (service, account) => entries.delete(key(service, account)),
+    };
+};
+/** Refuses every operation, so the fallback path can be tested. */
+export const brokenKeyring = (message = "no secret service available") => ({
+    get: () => {
+        throw new Error(message);
+    },
+    set: () => {
+        throw new Error(message);
+    },
+    delete: () => {
+        throw new Error(message);
+    },
+});
+//# sourceMappingURL=keyring.js.map

package/dist/keyring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring.js","sourceRoot":"","sources":["../src/keyring.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AA8B3C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9C,IAAI,MAAoC,CAAA;AAExC,2FAA2F;AAC3F,sEAAsE;AACtE,MAAM,UAAU,GAAG,GAAqB,EAAE;IACxC,MAAM,KAAM,OAAO,CAAC,kBAAkB,CAAiC,CAAC,KAAK,CAAA;IAC7E,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAiB;IACzC,4FAA4F;IAC5F,0FAA0F;IAC1F,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE;IAC7E,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAChC,CAAC;QAAA,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,cAAc,EAAE;CACpF,CAAA;AAED,qFAAqF;AACrF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,UAAkC,EAAE,EACa,EAAE;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IAChD,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,EAAE,CAAC,GAAG,OAAO,IAAI,OAAO,EAAE,CAAA;IAEzE,OAAO;QACL,OAAO;QACP,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI;QACrE,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YAChC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;QAC5C,CAAC;QACD,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;KACpE,CAAA;AACH,CAAC,CAAA;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAO,GAAG,6BAA6B,EAAgB,EAAE,CAAC,CAAC;IACvF,GAAG,EAAE,GAAG,EAAE;QACR,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IACD,GAAG,EAAE,GAAG,EAAE;QACR,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IACD,MAAM,EAAE,GAAG,EAAE;QACX,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/logger.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The only logging contract core knows about. The CLI adapts Pino to it; a Worker can pass
+ * its own. Core never imports a logging library — see docs/ARCHITECTURE.md.
+ */
+export interface Logger {
+    debug(event: object, message?: string): void;
+    info(event: object, message?: string): void;
+    warn(event: object, message?: string): void;
+    error(event: object, message?: string): void;
+}
+export declare const noopLogger: Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7C;AAED,eAAO,MAAM,UAAU,EAAE,MAKxB,CAAA"}

package/dist/logger.js

@@ -0,0 +1,7 @@
+export const noopLogger = {
+    debug: () => { },
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+};
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,UAAU,GAAW;IAChC,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;CAChB,CAAA"}

package/dist/logging.d.ts

@@ -0,0 +1,26 @@
+import type { Logger } from "./logger.js";
+/**
+ * Field names whose value must never reach a log file. This is the **second** line of defence, not
+ * the first: a secret should not be handed to a logger at all. Redaction catches the one that
+ * slipped into a nested object nobody thought about.
+ */
+export declare const REDACTED_FIELDS: string[];
+export interface FileLogger extends Logger {
+    /** Must be awaited before the process exits, or the tail of the file is lost. */
+    close(): Promise<void>;
+}
+export interface FileLoggerOptions {
+    /** Where the JSON lines go. Omit for a logger that writes nowhere. */
+    path?: string;
+    level?: string;
+    base?: Record<string, unknown>;
+    /** Added to `REDACTED_FIELDS` — the names only this program knows about. */
+    redact?: string[];
+}
+/**
+ * Structured records for machines: JSON lines, no ANSI ever, secrets redacted. The terminal is a
+ * different concern and goes through the renderer — a spinner frame must never reach a log file,
+ * and a log record must never reach stdout.
+ */
+export declare const createFileLogger: ({ path, level, base, redact, }?: FileLoggerOptions) => FileLogger;
+//# sourceMappingURL=logging.d.ts.map

package/dist/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEzC;;;;GAIG;AACH,eAAO,MAAM,eAAe,UAa3B,CAAA;AAED,MAAM,WAAW,UAAW,SAAQ,MAAM;IACxC,iFAAiF;IACjF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAAI,iCAK9B,iBAAsB,KAAG,UA2B3B,CAAA"}

package/dist/logging.js

@@ -0,0 +1,55 @@
+import { createWriteStream } from "node:fs";
+import { pino } from "pino";
+/**
+ * Field names whose value must never reach a log file. This is the **second** line of defence, not
+ * the first: a secret should not be handed to a logger at all. Redaction catches the one that
+ * slipped into a nested object nobody thought about.
+ */
+export const REDACTED_FIELDS = [
+    "authorization",
+    "Authorization",
+    "apiKey",
+    "api_key",
+    "token",
+    "accessToken",
+    "access_token",
+    "refreshToken",
+    "password",
+    "secret",
+    "verifyCode",
+    "phone",
+];
+/**
+ * Structured records for machines: JSON lines, no ANSI ever, secrets redacted. The terminal is a
+ * different concern and goes through the renderer — a spinner frame must never reach a log file,
+ * and a log record must never reach stdout.
+ */
+export const createFileLogger = ({ path, level = "info", base = {}, redact = [], } = {}) => {
+    if (!path)
+        return { ...silent, close: async () => { } };
+    // A plain append stream, not a worker transport: logging must not need a second process, and
+    // `sync: false` drops the tail of the file when a command exits — which is exactly the failure
+    // the log exists to explain.
+    const file = createWriteStream(path, { flags: "a" });
+    const fields = [...new Set([...REDACTED_FIELDS, ...redact])];
+    const paths = fields.flatMap((field) => [field, `*.${field}`, `*.*.${field}`]);
+    const logger = pino({ level, base, redact: { paths, censor: "[redacted]" }, timestamp: pino.stdTimeFunctions.isoTime }, file);
+    return {
+        debug: (event, message) => logger.debug(event, message),
+        info: (event, message) => logger.info(event, message),
+        warn: (event, message) => logger.warn(event, message),
+        error: (event, message) => logger.error(event, message),
+        close: () => new Promise((resolve) => {
+            file.end(() => {
+                resolve();
+            });
+        }),
+    };
+};
+const silent = {
+    debug: () => { },
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+};
+//# sourceMappingURL=logging.js.map

package/dist/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,eAAe;IACf,eAAe;IACf,QAAQ;IACR,SAAS;IACT,OAAO;IACP,aAAa;IACb,cAAc;IACd,cAAc;IACd,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,OAAO;CACR,CAAA;AAgBD;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,EAC/B,IAAI,EACJ,KAAK,GAAG,MAAM,EACd,IAAI,GAAG,EAAE,EACT,MAAM,GAAG,EAAE,MACU,EAAE,EAAc,EAAE;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,CAAA;IAEtD,6FAA6F;IAC7F,+FAA+F;IAC/F,6BAA6B;IAC7B,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IACpD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,EAAE,EAAE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAA;IAE9E,MAAM,MAAM,GAAG,IAAI,CACjB,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAClG,IAAI,CACL,CAAA;IAED,OAAO;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;QACvD,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;QACrD,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;QACrD,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;QACvD,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;gBACZ,OAAO,EAAE,CAAA;YACX,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC;KACL,CAAA;AACH,CAAC,CAAA;AAED,MAAM,MAAM,GAAW;IACrB,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;CAChB,CAAA"}

package/dist/paths.d.ts

@@ -0,0 +1,28 @@
+export interface Paths {
+    /** `config.json`, and the credential file when the keyring is unavailable. */
+    config: string;
+    /** Everything the program writes for itself: sessions, run artifacts, databases. */
+    state: string;
+    /** Data that can be deleted without losing anything the user typed. */
+    cache: string;
+}
+export interface PathsOptions {
+    /** Directory name under the OS convention — the command's name, not the package's. */
+    appName: string;
+    /**
+     * Environment variable prefix for the overrides, e.g. `MAX` gives `MAX_CONFIG_DIR`.
+     * Defaults to the app name, upper-cased, with anything that is not a letter or digit as `_`.
+     */
+    prefix?: string;
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * `env-paths` rather than a hand-rolled `~/.config`, so macOS and Windows land where those systems
+ * expect. Each directory is overridable by environment variable, which is what makes a test —
+ * and a throwaway profile — possible without touching the real ones.
+ */
+export declare const resolvePaths: ({ appName, prefix, env }: PathsOptions) => Paths;
+/** Whether any of the three directories came from the environment rather than the OS convention. */
+export declare const pathsAreOverridden: ({ appName, prefix, env }: PathsOptions) => boolean;
+export declare const configFilePath: (configDir: string, fileName?: string) => string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,KAAK;IACpB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAA;IACd,oFAAoF;IACpF,KAAK,EAAE,MAAM,CAAA;IACb,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAA;IACf;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CACxB;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAI,0BAAwC,YAAY,KAAG,KASnF,CAAA;AAED,oGAAoG;AACpG,eAAO,MAAM,kBAAkB,GAAI,0BAAwC,YAAY,KAAG,OAGzF,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,WAAW,MAAM,EAAE,iBAAwB,KAAG,MAAmC,CAAA"}

package/dist/paths.js

@@ -0,0 +1,23 @@
+import { join } from "node:path";
+import envPaths from "env-paths";
+/**
+ * `env-paths` rather than a hand-rolled `~/.config`, so macOS and Windows land where those systems
+ * expect. Each directory is overridable by environment variable, which is what makes a test —
+ * and a throwaway profile — possible without touching the real ones.
+ */
+export const resolvePaths = ({ appName, prefix, env = process.env }) => {
+    const base = envPaths(appName, { suffix: "" });
+    const key = (name) => `${prefix ?? appName.toUpperCase().replace(/[^A-Z0-9]/g, "_")}_${name}`;
+    return {
+        config: env[key("CONFIG_DIR")] ?? base.config,
+        state: env[key("STATE_DIR")] ?? base.data,
+        cache: env[key("CACHE_DIR")] ?? base.cache,
+    };
+};
+/** Whether any of the three directories came from the environment rather than the OS convention. */
+export const pathsAreOverridden = ({ appName, prefix, env = process.env }) => {
+    const stem = prefix ?? appName.toUpperCase().replace(/[^A-Z0-9]/g, "_");
+    return ["CONFIG_DIR", "STATE_DIR", "CACHE_DIR"].some((name) => env[`${stem}_${name}`] !== undefined);
+};
+export const configFilePath = (configDir, fileName = "config.json") => join(configDir, fileName);
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,QAAQ,MAAM,WAAW,CAAA;AAsBhC;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAgB,EAAS,EAAE;IAC1F,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;IAC9C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;IAErG,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM;QAC7C,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI;QACzC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK;KAC3C,CAAA;AACH,CAAC,CAAA;AAED,oGAAoG;AACpG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAgB,EAAW,EAAE;IAClG,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;IACvE,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,KAAK,SAAS,CAAC,CAAA;AACtG,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAE,QAAQ,GAAG,aAAa,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA"}

package/dist/pretty.d.ts

@@ -0,0 +1,10 @@
+export interface PrettyOptions {
+    color: boolean;
+}
+/**
+ * Three shapes and a fallback, not a renderer per endpoint. A list of like objects becomes a
+ * table, a single object becomes labelled lines, everything else is printed as JSON — which is
+ * honest about the fact that we do not know what it is.
+ */
+export declare const renderPretty: (value: unknown, options: PrettyOptions) => string;
+//# sourceMappingURL=pretty.d.ts.map

package/dist/pretty.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pretty.d.ts","sourceRoot":"","sources":["../src/pretty.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,OAAO,CAAA;CACf;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAI,OAAO,OAAO,EAAE,SAAS,aAAa,KAAG,MAmBrE,CAAA"}

package/dist/pretty.js

@@ -0,0 +1,76 @@
+import Table from "cli-table3";
+import pc from "picocolors";
+/**
+ * Three shapes and a fallback, not a renderer per endpoint. A list of like objects becomes a
+ * table, a single object becomes labelled lines, everything else is printed as JSON — which is
+ * honest about the fact that we do not know what it is.
+ */
+export const renderPretty = (value, options) => {
+    const paint = palette(options.color);
+    if (Array.isArray(value)) {
+        if (value.length === 0)
+            return paint.dim("(nothing)");
+        return isRowLike(value) ? renderTable(value, paint) : renderJson(value);
+    }
+    if (isPlainObject(value)) {
+        const listKey = Object.keys(value).find((key) => Array.isArray(value[key]) && isRowLike(value[key]));
+        if (listKey) {
+            const rest = Object.fromEntries(Object.entries(value).filter(([key]) => key !== listKey));
+            const table = renderTable(value[listKey], paint);
+            return Object.keys(rest).length > 0 ? `${table}\n\n${renderFields(rest, paint)}` : table;
+        }
+        return renderFields(value, paint);
+    }
+    return renderJson(value);
+};
+const palette = (color) => ({
+    dim: (text) => (color ? pc.dim(text) : text),
+    bold: (text) => (color ? pc.bold(text) : text),
+    label: (text) => (color ? pc.cyan(text) : text),
+});
+const isPlainObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRowLike = (value) => value.length > 0 && value.every((item) => isPlainObject(item)) && value.length <= 500;
+const renderTable = (rows, paint) => {
+    const columns = [...new Set(rows.flatMap((row) => Object.keys(row)))];
+    const table = new Table({
+        head: columns.map((column) => paint.bold(column)),
+        // `chars: {}` is not enough — cli-table3 falls back to its own defaults for anything unset.
+        style: { head: [], border: [], "padding-left": 0, "padding-right": 2 },
+        chars: BORDERLESS,
+    });
+    for (const row of rows)
+        table.push(columns.map((column) => cell(row[column])));
+    return table.toString();
+};
+const renderFields = (fields, paint) => {
+    const width = Math.max(...Object.keys(fields).map((key) => key.length));
+    return Object.entries(fields)
+        .map(([key, value]) => `${paint.label(key.padEnd(width))}  ${cell(value)}`)
+        .join("\n");
+};
+const cell = (value) => {
+    if (value === null || value === undefined)
+        return "";
+    if (typeof value === "object")
+        return JSON.stringify(value);
+    return String(value);
+};
+const renderJson = (value) => JSON.stringify(value, null, 2);
+const BORDERLESS = {
+    top: "",
+    "top-mid": "",
+    "top-left": "",
+    "top-right": "",
+    bottom: "",
+    "bottom-mid": "",
+    "bottom-left": "",
+    "bottom-right": "",
+    left: "",
+    "left-mid": "",
+    mid: "",
+    "mid-mid": "",
+    right: "",
+    "right-mid": "",
+    middle: "",
+};
+//# sourceMappingURL=pretty.js.map

package/dist/pretty.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pretty.js","sourceRoot":"","sources":["../src/pretty.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,YAAY,CAAA;AAC9B,OAAO,EAAE,MAAM,YAAY,CAAA;AAM3B;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,OAAsB,EAAU,EAAE;IAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAEpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACrD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAc,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IAClF,CAAC;IAED,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC,CAAC,CAAA;QACjH,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAA;YACzF,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAU,EAAE,KAAK,CAAC,CAAA;YACzD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;QAC1F,CAAC;QACD,OAAO,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;IAED,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC,CAAA;AAID,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC;IACnC,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;CACxD,CAAC,CAAA;AAEF,MAAM,aAAa,GAAG,CAAC,KAAc,EAAgB,EAAE,CACrD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAEtE,MAAM,SAAS,GAAG,CAAC,KAAgB,EAAW,EAAE,CAC9C,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAA;AAEvF,MAAM,WAAW,GAAG,CAAC,IAAW,EAAE,KAAiC,EAAU,EAAE;IAC7E,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACrE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,4FAA4F;QAC5F,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE;QACtE,KAAK,EAAE,UAAU;KAClB,CAAC,CAAA;IAEF,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9E,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAA;AACzB,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,MAAW,EAAE,KAAiC,EAAU,EAAE;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IACvE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;SAC1E,IAAI,CAAC,IAAI,CAAC,CAAA;AACf,CAAC,CAAA;AAED,MAAM,IAAI,GAAG,CAAC,KAAc,EAAU,EAAE;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC3D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;AAE7E,MAAM,UAAU,GAAG;IACjB,GAAG,EAAE,EAAE;IACP,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,EAAE;IACd,WAAW,EAAE,EAAE;IACf,MAAM,EAAE,EAAE;IACV,YAAY,EAAE,EAAE;IAChB,aAAa,EAAE,EAAE;IACjB,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE,EAAE;IACR,UAAU,EAAE,EAAE;IACd,GAAG,EAAE,EAAE;IACP,SAAS,EAAE,EAAE;IACb,KAAK,EAAE,EAAE;IACT,WAAW,EAAE,EAAE;IACf,MAAM,EAAE,EAAE;CACX,CAAA"}

package/dist/renderer.d.ts

@@ -0,0 +1,32 @@
+import { type Streams } from "./streams.js";
+/**
+ * What a renderer can be asked for. `auto` is not here on purpose: choosing between a person and a
+ * pipe is the caller's job and happens once, so a renderer can never be handed a mode it has to
+ * resolve.
+ */
+export declare const RENDER_FORMATS: readonly ["pretty", "json", "jsonl"];
+export type RenderFormat = (typeof RENDER_FORMATS)[number];
+export interface Renderer {
+    /** The one thing a caller asked for. In a machine mode this is the whole of stdout. */
+    result(value: unknown): void;
+    /** Each item on its own line. Only meaningful in `jsonl`; elsewhere it renders the whole list. */
+    stream(items: Iterable<unknown>): void;
+    note(message: string): void;
+    success(message: string): void;
+    warn(message: string): void;
+    failure(message: string): void;
+}
+export interface RendererOptions {
+    format: RenderFormat;
+    color: boolean;
+    streams?: Streams;
+}
+/**
+ * **Every diagnostic goes to stderr, in every mode — pretty included.**
+ *
+ * The brief only requires that of the machine modes, but making it unconditional means §44 holds
+ * by construction instead of by a mode check somebody can forget. It also means piping human
+ * output still gives you the content and not the commentary.
+ */
+export declare const createRenderer: ({ format, color, streams }: RendererOptions) => Renderer;
+//# sourceMappingURL=renderer.d.ts.map

package/dist/renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer.d.ts","sourceRoot":"","sources":["../src/renderer.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAE3D;;;;GAIG;AACH,eAAO,MAAM,cAAc,sCAAuC,CAAA;AAClE,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AAE1D,MAAM,WAAW,QAAQ;IACvB,uFAAuF;IACvF,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;IAC5B,kGAAkG;IAClG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,CAAA;IACtC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,YAAY,CAAA;IACpB,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,GAAI,4BAA6C,eAAe,KAAG,QAkC7F,CAAA"}

package/dist/renderer.js

@@ -0,0 +1,48 @@
+import { renderPretty } from "./pretty.js";
+import { processStreams } from "./streams.js";
+/**
+ * What a renderer can be asked for. `auto` is not here on purpose: choosing between a person and a
+ * pipe is the caller's job and happens once, so a renderer can never be handed a mode it has to
+ * resolve.
+ */
+export const RENDER_FORMATS = ["pretty", "json", "jsonl"];
+/**
+ * **Every diagnostic goes to stderr, in every mode — pretty included.**
+ *
+ * The brief only requires that of the machine modes, but making it unconditional means §44 holds
+ * by construction instead of by a mode check somebody can forget. It also means piping human
+ * output still gives you the content and not the commentary.
+ */
+export const createRenderer = ({ format, color, streams = processStreams }) => {
+    const mark = (symbol, message) => `${symbol} ${message}`;
+    const diagnostics = {
+        note: (message) => streams.diagnostic(format === "pretty" ? mark("·", message) : message),
+        success: (message) => streams.diagnostic(format === "pretty" ? mark("✓", message) : message),
+        warn: (message) => streams.diagnostic(format === "pretty" ? mark("!", message) : message),
+        failure: (message) => streams.diagnostic(format === "pretty" ? mark("✗", message) : message),
+    };
+    if (format === "jsonl") {
+        return {
+            ...diagnostics,
+            result: (value) => streams.data(JSON.stringify(value)),
+            stream: (items) => {
+                for (const item of items)
+                    streams.data(JSON.stringify(item));
+            },
+        };
+    }
+    if (format === "pretty") {
+        return {
+            ...diagnostics,
+            result: (value) => streams.data(renderPretty(value, { color })),
+            stream: (items) => streams.data(renderPretty([...items], { color })),
+        };
+    }
+    // json — exactly one deterministic value, and nothing else, ever.
+    return {
+        ...diagnostics,
+        result: (value) => streams.data(JSON.stringify(value)),
+        stream: (items) => streams.data(JSON.stringify([...items])),
+    };
+};
+//# sourceMappingURL=renderer.js.map

package/dist/renderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer.js","sourceRoot":"","sources":["../src/renderer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,cAAc,EAAgB,MAAM,cAAc,CAAA;AAE3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAU,CAAA;AAoBlE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,cAAc,EAAmB,EAAY,EAAE;IACvG,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAA;IAExE,MAAM,WAAW,GAAG;QAClB,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACjG,OAAO,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACpG,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACjG,OAAO,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;KACrG,CAAA;IAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO;YACL,GAAG,WAAW;YACd,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACtD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAChB,KAAK,MAAM,IAAI,IAAI,KAAK;oBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;YAC9D,CAAC;SACF,CAAA;IACH,CAAC;IAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO;YACL,GAAG,WAAW;YACd,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;SACrE,CAAA;IACH,CAAC;IAED,kEAAkE;IAClE,OAAO;QACL,GAAG,WAAW;QACd,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;KAC5D,CAAA;AACH,CAAC,CAAA"}

package/dist/retry.d.ts

@@ -0,0 +1,27 @@
+import type { ErrorCode } from "./errors.js";
+export interface RetryConfig {
+    /** Attempts after the first. One means two attempts in total. */
+    retries: number;
+    baseDelayMs: number;
+    maxDelayMs: number;
+    /** Beyond this we stop waiting and hand back a structured error instead of blocking. */
+    maxRetryAfterMs: number;
+}
+export declare const DEFAULT_RETRY: RetryConfig;
+/**
+ * Full jitter: the wait is uniform over `[0, min(cap, base · 2^n))`. Picking the exponential value
+ * itself synchronizes every client that failed at the same moment, which is the stampede the
+ * backoff exists to avoid.
+ *
+ * `attempt` is the attempt that just failed, counting from 1.
+ */
+export declare const backoffMs: (attempt: number, config: RetryConfig, random: () => number) => number;
+/**
+ * The three outcomes where nothing came back, and so there is nothing to classify.
+ *
+ * **This says the attempt failed without an answer — never that the operation is safe to repeat.**
+ * A request that died after leaving may well have been carried out, which is why a write gets
+ * `outcome_unknown` rather than a retry.
+ */
+export declare const isTransportFailure: (code: ErrorCode) => boolean;
+//# sourceMappingURL=retry.d.ts.map

package/dist/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAE5C,MAAM,WAAW,WAAW;IAC1B,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,wFAAwF;IACxF,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,eAAO,MAAM,aAAa,EAAE,WAK3B,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,SAAS,GAAI,SAAS,MAAM,EAAE,QAAQ,WAAW,EAAE,QAAQ,MAAM,MAAM,KAAG,MAGtF,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM,SAAS,KAAG,OACmB,CAAA"}

package/dist/retry.js

@@ -0,0 +1,26 @@
+export const DEFAULT_RETRY = {
+    retries: 1,
+    baseDelayMs: 250,
+    maxDelayMs: 10_000,
+    maxRetryAfterMs: 30_000,
+};
+/**
+ * Full jitter: the wait is uniform over `[0, min(cap, base · 2^n))`. Picking the exponential value
+ * itself synchronizes every client that failed at the same moment, which is the stampede the
+ * backoff exists to avoid.
+ *
+ * `attempt` is the attempt that just failed, counting from 1.
+ */
+export const backoffMs = (attempt, config, random) => {
+    const ceiling = Math.min(config.maxDelayMs, config.baseDelayMs * 2 ** (attempt - 1));
+    return Math.round(random() * ceiling);
+};
+/**
+ * The three outcomes where nothing came back, and so there is nothing to classify.
+ *
+ * **This says the attempt failed without an answer — never that the operation is safe to repeat.**
+ * A request that died after leaving may well have been carried out, which is why a write gets
+ * `outcome_unknown` rather than a retry.
+ */
+export const isTransportFailure = (code) => code === "timeout" || code === "network_error" || code === "cancelled";
+//# sourceMappingURL=retry.js.map

package/dist/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,aAAa,GAAgB;IACxC,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,GAAG;IAChB,UAAU,EAAE,MAAM;IAClB,eAAe,EAAE,MAAM;CACxB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,MAAmB,EAAE,MAAoB,EAAU,EAAE;IAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAA;IACpF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAA;AACvC,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAe,EAAW,EAAE,CAC7D,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,WAAW,CAAA"}

package/dist/streams.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The line every machine mode depends on: **stdout carries data, stderr carries everything
+ * else.** Two functions and no formatting decisions — the renderer that chooses tables, colour
+ * and spinners is `CLI-5` and sits on top of this, never beside it.
+ */
+export interface Streams {
+    data: (text: string) => void;
+    diagnostic: (text: string) => void;
+    /**
+     * A line that replaces itself — a progress counter, and nothing else.
+     *
+     * It lives here rather than beside the renderer so that a test capturing streams captures this
+     * too: the invariant it could break is rule 3, and an output channel the machine-output test
+     * cannot see is exactly how that gets broken quietly. An empty string clears the line.
+     */
+    progress?: (text: string) => void;
+}
+export declare const processStreams: Streams;
+/** Collects both halves separately, so a test can assert nothing leaked across. */
+export declare const captureStreams: () => Streams & {
+    stdout: string[];
+    stderr: string[];
+};
+//# sourceMappingURL=streams.d.ts.map

package/dist/streams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streams.d.ts","sourceRoot":"","sources":["../src/streams.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5B,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAClC;AAED,eAAO,MAAM,cAAc,EAAE,OAY5B,CAAA;AAED,mFAAmF;AACnF,eAAO,MAAM,cAAc,QAAO,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAW/E,CAAA"}

package/dist/streams.js

@@ -0,0 +1,26 @@
+export const processStreams = {
+    data: (text) => {
+        process.stdout.write(`${text}\n`);
+    },
+    diagnostic: (text) => {
+        process.stderr.write(`${text}\n`);
+    },
+    progress: (text) => {
+        // Carriage return and no newline, so the next line overwrites this one. Padded to the width of
+        // what was there before, or the tail of a longer previous line is left on screen.
+        process.stderr.write(`\r${text.padEnd(72)}${text === "" ? "\r" : ""}`);
+    },
+};
+/** Collects both halves separately, so a test can assert nothing leaked across. */
+export const captureStreams = () => {
+    const stdout = [];
+    const stderr = [];
+    return {
+        stdout,
+        stderr,
+        data: (text) => stdout.push(text),
+        diagnostic: (text) => stderr.push(text),
+        progress: (text) => stderr.push(text),
+    };
+};
+//# sourceMappingURL=streams.js.map

package/dist/streams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streams.js","sourceRoot":"","sources":["../src/streams.ts"],"names":[],"mappings":"AAkBA,MAAM,CAAC,MAAM,cAAc,GAAY;IACrC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;IACnC,CAAC;IACD,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;IACnC,CAAC;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;QACjB,+FAA+F;QAC/F,kFAAkF;QAClF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACxE,CAAC;CACF,CAAA;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,cAAc,GAAG,GAAqD,EAAE;IACnF,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,OAAO;QACL,MAAM;QACN,MAAM;QACN,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACvC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;KACtC,CAAA;AACH,CAAC,CAAA"}

package/dist/testing/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The seams a test needs, so that "no test touched the real machine" is a property of the code
+ * rather than a hope about every test remembering to opt out.
+ */
+export { brokenKeyring, memoryKeyring } from "../keyring.js";
+export { captureStreams } from "../streams.js";
+import type { MonotonicClock, SleepLike, WallClock } from "../time.js";
+export interface FakeClock {
+    clock: MonotonicClock;
+    now: WallClock;
+    sleep: SleepLike;
+    /** Every sleep asked for, in order, with the reason the caller gave. Nothing actually waits. */
+    waits: {
+        ms: number;
+        reason?: string;
+    }[];
+    advance(ms: number): void;
+}
+/**
+ * Time that never passes unless a test says so. A retry test that really sleeps 250 ms is a retry
+ * test nobody runs, so `sleep` resolves at once and records what it was asked for.
+ */
+export declare const fakeClock: (startMs?: number) => FakeClock;
+//# sourceMappingURL=index.d.ts.map

package/dist/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEtE,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,cAAc,CAAA;IACrB,GAAG,EAAE,SAAS,CAAA;IACd,KAAK,EAAE,SAAS,CAAA;IAChB,gGAAgG;IAChG,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACxC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED;;;GAGG;AACH,eAAO,MAAM,SAAS,GAAI,gBAAW,KAAG,SAiBvC,CAAA"}