@opvs-ai/cli 0.16.1 → 0.20.1

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpF,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,wDAAwD,CAAC;KACrE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;KACpB,MAAM,CAAC,wBAAwB,EAAE,sCAAsC,CAAC,CAAC;AAE5E,8BAA8B;AAC9B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,yBAAyB,CAAC,OAAO,CAAC,CAAC;AACnC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,4BAA4B,CAAC,OAAO,CAAC,CAAC;AACtC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,yBAAyB,CAAC,OAAO,CAAC,CAAC;AACnC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,0BAA0B,CAAC,OAAO,CAAC,CAAC;AACpC,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAEhC,4CAA4C;AAC5C,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,SAAS,IAAI,CAAC,CAAU;IACtB,OAAO,CAAC,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;AACtC,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;AAEvC,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpF,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,wDAAwD,CAAC;KACrE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;KACpB,MAAM,CAAC,wBAAwB,EAAE,sCAAsC,CAAC,CAAC;AAE5E,8BAA8B;AAC9B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,yBAAyB,CAAC,OAAO,CAAC,CAAC;AACnC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,4BAA4B,CAAC,OAAO,CAAC,CAAC;AACtC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,yBAAyB,CAAC,OAAO,CAAC,CAAC;AACnC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,0BAA0B,CAAC,OAAO,CAAC,CAAC;AACpC,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAEhC,4CAA4C;AAC5C,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,SAAS,IAAI,CAAC,CAAU;IACtB,OAAO,CAAC,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;AACtC,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;AAEvC,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/lib/auth-poll.d.ts

@@ -2,8 +2,27 @@
  * Polling loop for PAT approval — waits for human to click approve/deny.
  */
 import type { PATWorkspaceToken } from "@opvs-ai/core";
+/**
+ * How long the CLI waits in the foreground before handing off to
+ * `opvs auth resume`. NOT the request's lifetime: the server keeps a request
+ * approvable for 60 minutes (PC-252), and an agent must not sit polling for all
+ * of it — its shell call is killed long before, and that would be a hang.
+ */
+export declare const DEFAULT_WAIT_MS: number;
+/**
+ * When to stop polling: after the local wait, or just past the request's own
+ * expiry — whichever comes first. Always leaves room for one poll, so a request
+ * that has already expired is reported as `expired` by the server rather than
+ * as a local `timeout`.
+ */
+export declare function pollDeadline(now: number, waitMs: number, expiresAt?: string | Date): number;
 export interface PollResult {
-    status: "active" | "denied" | "expired" | "timeout";
+    /**
+     * `timeout` = not decided yet, still approvable. `invalid` = the server does not
+     * recognise this request or its poll token (404/401) — e.g. a stale saved
+     * request; waiting longer cannot change that.
+     */
+    status: "active" | "denied" | "expired" | "timeout" | "invalid";
     token?: string;
     scopes?: string[];
     brand_id?: number;
@@ -11,7 +30,10 @@ export interface PollResult {
     workspaces?: PATWorkspaceToken[];
 }
 /**
- * Poll the PAT request status endpoint until resolved or timed out.
+ * Poll the PAT request status endpoint until resolved or the wait runs out.
  * Prints dots to stderr to show progress.
+ *
+ * `timeout` means only "not decided YET" — the request may still be approvable
+ * on the server; the caller decides whether that is a handoff or a failure.
  */
-export declare function pollForApproval(baseUrl: string, requestId: string, pollToken: string, timeoutMs?: number): Promise<PollResult>;
+export declare function pollForApproval(baseUrl: string, requestId: string, pollToken: string, timeoutMs?: number, expiresAt?: string | Date): Promise<PollResult>;

package/dist/lib/auth-poll.js

@@ -3,13 +3,39 @@
  */
 import { apiUnauthGet } from "@opvs-ai/core";
 const POLL_INTERVAL_MS = 3000;
-const DEFAULT_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes
 /**
- * Poll the PAT request status endpoint until resolved or timed out.
+ * How long the CLI waits in the foreground before handing off to
+ * `opvs auth resume`. NOT the request's lifetime: the server keeps a request
+ * approvable for 60 minutes (PC-252), and an agent must not sit polling for all
+ * of it — its shell call is killed long before, and that would be a hang.
+ */
+export const DEFAULT_WAIT_MS = 5 * 60 * 1000;
+/** Past the server's expiry, one more poll lets the SERVER say "expired". */
+const EXPIRY_GRACE_MS = POLL_INTERVAL_MS + 2000;
+/**
+ * When to stop polling: after the local wait, or just past the request's own
+ * expiry — whichever comes first. Always leaves room for one poll, so a request
+ * that has already expired is reported as `expired` by the server rather than
+ * as a local `timeout`.
+ */
+export function pollDeadline(now, waitMs, expiresAt) {
+    let deadline = now + waitMs;
+    if (expiresAt !== undefined) {
+        const expiry = new Date(expiresAt).getTime();
+        if (Number.isFinite(expiry))
+            deadline = Math.min(deadline, expiry + EXPIRY_GRACE_MS);
+    }
+    return Math.max(deadline, now + 1);
+}
+/**
+ * Poll the PAT request status endpoint until resolved or the wait runs out.
  * Prints dots to stderr to show progress.
+ *
+ * `timeout` means only "not decided YET" — the request may still be approvable
+ * on the server; the caller decides whether that is a handoff or a failure.
  */
-export async function pollForApproval(baseUrl, requestId, pollToken, timeoutMs = DEFAULT_TIMEOUT_MS) {
-    const deadline = Date.now() + timeoutMs;
+export async function pollForApproval(baseUrl, requestId, pollToken, timeoutMs = DEFAULT_WAIT_MS, expiresAt) {
+    const deadline = pollDeadline(Date.now(), timeoutMs, expiresAt);
     process.stderr.write("Waiting for approval ");
     while (Date.now() < deadline) {
         try {
@@ -35,13 +61,20 @@ export async function pollForApproval(baseUrl, requestId, pollToken, timeoutMs =
                 return { status: "expired" };
             }
         }
-        catch {
+        catch (err) {
+            // 404 / 401 are answers, not blips: the request (or its poll token) is not
+            // one the server knows. Polling on would only turn that into a timeout.
+            const httpStatus = err?.status;
+            if (httpStatus === 404 || httpStatus === 401) {
+                process.stderr.write(" not recognised by the server.\n");
+                return { status: "invalid" };
+            }
             // Network error or server error — keep polling
         }
         process.stderr.write(".");
         await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
     }
-    process.stderr.write(" timed out.\n");
+    process.stderr.write(" not approved yet.\n");
     return { status: "timeout" };
 }
 //# sourceMappingURL=auth-poll.js.map

package/dist/lib/auth-poll.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-poll.js","sourceRoot":"","sources":["../../src/lib/auth-poll.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG7C,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAatD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,SAAiB,EACjB,SAAiB,EACjB,SAAS,GAAG,kBAAkB;IAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAE9C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,OAAO,EACP,4BAA4B,SAAS,SAAS,EAC9C,SAAS,CACV,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;YAErD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;gBACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBACrC,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC9B,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBACpC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"auth-poll.js","sourceRoot":"","sources":["../../src/lib/auth-poll.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG7C,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7C,6EAA6E;AAC7E,MAAM,eAAe,GAAG,gBAAgB,GAAG,IAAI,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,MAAc,EAAE,SAAyB;IACjF,IAAI,QAAQ,GAAG,GAAG,GAAG,MAAM,CAAC;IAC5B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAkBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,SAAiB,EACjB,SAAiB,EACjB,SAAS,GAAG,eAAe,EAC3B,SAAyB;IAEzB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAEhE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAE9C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,OAAO,EACP,4BAA4B,SAAS,SAAS,EAC9C,SAAS,CACV,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;YAErD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;gBACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBACrC,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC9B,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBACpC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2EAA2E;YAC3E,wEAAwE;YACxE,MAAM,UAAU,GAAI,GAAkC,EAAE,MAAM,CAAC;YAC/D,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACzD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,+CAA+C;QACjD,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC7C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC"}

package/dist/lib/health.d.ts

@@ -15,6 +15,27 @@
  * The parameter a `not_checked` names is translated to the CLI FLAG that would
  * enable it, because "stale_days" is the API's name and the reader is at a
  * shell prompt.
+ *
+ * ── The exit code is the point (ASP-253) ───────────────────────────────────
+ *
+ * SpiderIQ's planner gates a session on these verbs from bash. Until ASP-253
+ * both commands exited 0 on EVERY verdict, so `opvs boards health X && deploy`
+ * ran the deploy on a board that had just reported a FAIL — a gate that never
+ * fires is worse than no gate, because someone believes it.
+ *
+ * The mapping below is deliberate in both directions:
+ *
+ *   healthy      -> 0   every check ran, none failed
+ *   incomplete   -> 0   YOU SUPPLIED NO THRESHOLD. That is a fact about the
+ *                       REQUEST, not about the board, and a caller who gates on
+ *                       it is gating on their own flags. `--require-complete`
+ *                       is there for a caller who wants it to be fatal.
+ *   not_healthy  -> 2   at least one check FAILED
+ *   anything else-> 1   could not read a verdict -> FAIL CLOSED. Never 0.
+ *
+ * `2` rather than `1` for not_healthy so a script can tell "the board is bad"
+ * from "I could not ask" (`diff`/`grep` use the same split); the transport and
+ * auth failures the commands already had keep 1.
  */
 export interface HealthCheck {
     check: string;
@@ -37,9 +58,85 @@ export interface HealthReport {
 }
 /** API query parameter → the flag `opvs boards|projects health` spells it as. */
 export declare const HEALTH_PARAM_FLAGS: Record<string, string>;
+/** Exit code for a report that was read. See the contract in the file header. */
+export declare const EXIT_OK = 0;
+/** Transport, auth, usage — or a verdict we could not read. Fail closed. */
+export declare const EXIT_ERROR = 1;
+/** The report came back `not_healthy`: at least one check FAILED. */
+export declare const EXIT_NOT_HEALTHY = 2;
+/**
+ * Map a verdict to the process exit code.
+ *
+ * `requireComplete` promotes `incomplete` to a failure for a caller who wants
+ * "you did not supply thresholds" to be fatal. It is OFF by default, because
+ * the server refuses to invent a threshold and a CLI that failed by default on
+ * an unsupplied one would be holding the same opinion through a different door.
+ */
+export declare function healthExitCode(verdict: string | undefined, opts?: {
+    requireComplete?: boolean;
+}): number;
 export declare function levelWord(level: string): string;
+/**
+ * Pick the check rows to print.
+ *
+ * On `not_healthy` the default is the FAIL rows ONLY. A planner runs this on a
+ * gate and reads the wall of PASS exactly once; every run after that, the three
+ * lines it needs are buried in thirty it does not. Every other verdict prints
+ * in full — on `incomplete` the `not_checked` rows ARE the finding, and on
+ * `healthy` there is nothing to bury.
+ *
+ * Nothing is ever dropped silently: the caller is told the count and the flag.
+ */
+export declare function visibleChecks(report: HealthReport, opts?: {
+    allChecks?: boolean;
+}): {
+    shown: HealthCheck[];
+    hidden: number;
+};
 /** Render a board or project health report as plain text lines. */
-export declare function renderHealthReport(report: HealthReport): string;
+export declare function renderHealthReport(report: HealthReport, opts?: {
+    allChecks?: boolean;
+}): string;
+/**
+ * Read the verdict back out of the server's Markdown rendering.
+ *
+ * 🔴 WHY THIS IS ALLOWED TO FAIL, AND WHY IT MUST FAIL CLOSED.
+ *
+ * `?format=md` returns `text/markdown` with no verdict header and no JSON, so
+ * the exit code has to come out of the prose. The server writes exactly one
+ * line for it (`render_health_md`):
+ *
+ *     **Verdict:** `not_healthy` · profile `factory`
+ *
+ * That is a hand-written copy of a contract owned by another repo path, and
+ * the house rule for those is to gate them, not to trust them. We cannot run
+ * the Python renderer from a CLI unit test — so instead of trusting it, this
+ * returns `undefined` when it cannot find the line, and `healthExitCode`
+ * turns that into exit 1. If the server ever reworded the heading, `--format
+ * md` starts erroring and names `--format json`; it does NOT start exiting 0
+ * on an unhealthy board. A drifted gate that shouts is recoverable; one that
+ * silently passes is the defect this whole card exists to remove.
+ */
+export declare function verdictFromMarkdown(md: string): string | undefined;
+/**
+ * Read the verdict back out of the server's YAML rendering.
+ *
+ * `render_health_yaml` is `yaml.dump(report, sort_keys=False)`, so `verdict`
+ * is a top-level scalar. Same fail-closed contract as the Markdown reader: a
+ * miss returns `undefined` and becomes exit 1, never exit 0.
+ */
+export declare function verdictFromYaml(text: string): string | undefined;
+/** `--format` values. `text` is the local rendering and sends no `format=`. */
+export declare const HEALTH_FORMATS: readonly ["text", "json", "md", "yaml"];
+export type HealthFormat = (typeof HEALTH_FORMATS)[number];
+/**
+ * The `format=` query value for a `--format` choice.
+ *
+ * `text` and `json` both want the JSON report (the text rendering is built
+ * from it), and `buildUrl` appends `format=` for anything that is not the
+ * string `json` — so both must arrive here as `json`, never as `text`.
+ */
+export declare function healthWireFormat(fmt: HealthFormat): string;
 /** The shared threshold flags, as query params. Only flags given become params. */
 export declare function healthParams(opts: Record<string, string | undefined>): Record<string, string>;
 /**
@@ -52,3 +149,36 @@ export declare function healthParams(opts: Record<string, string | undefined>):
 export declare function withHealthOptions<T extends {
     option: (flags: string, desc: string) => T;
 }>(cmd: T): T;
+/**
+ * The `--help` epilogue every `health` command carries.
+ *
+ * 🔑 It is not decoration. A caller who guesses the mapping writes a gate that
+ * never fires, which is the defect ASP-253 fixed — so the mapping is stated
+ * where the caller is standing when they write the gate. Every line here is
+ * backed by `healthExitCode` in this same file (AgentCLI LEARNINGS, ASP-25: a
+ * help string that describes behaviour nothing implements).
+ */
+export declare const HEALTH_EXIT_HELP = "Exit codes (a planner gates on these):\n  0  healthy      \u2014 every check ran and none failed\n  0  incomplete   \u2014 a threshold you did not supply left a check NOT CHECKED.\n                    That is a fact about your REQUEST, not about the board, so\n                    it does not fail the gate. Pass --require-complete to make\n                    it exit 2 instead.\n  2  not_healthy  \u2014 at least one check FAILED\n  1  error        \u2014 transport, auth, a bad ref, or a verdict this CLI could not\n                    read. Never confused with 0: a gate that cannot ask must\n                    not report a pass.";
+export interface HealthOutputOpts {
+    format?: string;
+    json?: boolean;
+    allChecks?: boolean;
+    requireComplete?: boolean;
+}
+/** Thrown for a `--format` this CLI does not know. Caught as a usage error. */
+export declare class HealthFormatError extends Error {
+}
+/** `--format` (validated) with `--json` kept working as an alias for it. */
+export declare function resolveHealthFormat(opts: HealthOutputOpts): HealthFormat;
+/**
+ * Print a health response and return the process exit code.
+ *
+ * The exit code is decided by the VERDICT in every format, including the ones
+ * the server renders itself — a gate must not change meaning because someone
+ * wanted Markdown. `yaml`/`md` carry no structured verdict, so the verdict is
+ * read back out of the text and a miss is an error (exit 1), never a pass.
+ */
+export declare function emitHealthReport(res: {
+    json: () => Promise<unknown>;
+    text: () => Promise<string>;
+}, opts: HealthOutputOpts, fmt: HealthFormat): Promise<number>;

package/dist/lib/health.js

@@ -15,6 +15,27 @@
  * The parameter a `not_checked` names is translated to the CLI FLAG that would
  * enable it, because "stale_days" is the API's name and the reader is at a
  * shell prompt.
+ *
+ * ── The exit code is the point (ASP-253) ───────────────────────────────────
+ *
+ * SpiderIQ's planner gates a session on these verbs from bash. Until ASP-253
+ * both commands exited 0 on EVERY verdict, so `opvs boards health X && deploy`
+ * ran the deploy on a board that had just reported a FAIL — a gate that never
+ * fires is worse than no gate, because someone believes it.
+ *
+ * The mapping below is deliberate in both directions:
+ *
+ *   healthy      -> 0   every check ran, none failed
+ *   incomplete   -> 0   YOU SUPPLIED NO THRESHOLD. That is a fact about the
+ *                       REQUEST, not about the board, and a caller who gates on
+ *                       it is gating on their own flags. `--require-complete`
+ *                       is there for a caller who wants it to be fatal.
+ *   not_healthy  -> 2   at least one check FAILED
+ *   anything else-> 1   could not read a verdict -> FAIL CLOSED. Never 0.
+ *
+ * `2` rather than `1` for not_healthy so a script can tell "the board is bad"
+ * from "I could not ask" (`diff`/`grep` use the same split); the transport and
+ * auth failures the commands already had keep 1.
  */
 /** API query parameter → the flag `opvs boards|projects health` spells it as. */
 export const HEALTH_PARAM_FLAGS = {
@@ -34,6 +55,36 @@ const LEVEL_WORD = {
     INFO: "INFO",
     not_checked: "NOT CHECKED",
 };
+import { printJson, printRaw } from "./format.js";
+/** Exit code for a report that was read. See the contract in the file header. */
+export const EXIT_OK = 0;
+/** Transport, auth, usage — or a verdict we could not read. Fail closed. */
+export const EXIT_ERROR = 1;
+/** The report came back `not_healthy`: at least one check FAILED. */
+export const EXIT_NOT_HEALTHY = 2;
+/**
+ * Map a verdict to the process exit code.
+ *
+ * `requireComplete` promotes `incomplete` to a failure for a caller who wants
+ * "you did not supply thresholds" to be fatal. It is OFF by default, because
+ * the server refuses to invent a threshold and a CLI that failed by default on
+ * an unsupplied one would be holding the same opinion through a different door.
+ */
+export function healthExitCode(verdict, opts) {
+    switch (verdict) {
+        case "healthy":
+            return EXIT_OK;
+        case "incomplete":
+            return opts?.requireComplete ? EXIT_NOT_HEALTHY : EXIT_OK;
+        case "not_healthy":
+            return EXIT_NOT_HEALTHY;
+        default:
+            // No verdict, or one this CLI does not know: the server grew a fourth
+            // value, or the body is not a report at all. Either way we cannot say
+            // the board is fine, so we must not say it with an exit code.
+            return EXIT_ERROR;
+    }
+}
 const VERDICT_LINE = {
     healthy: "HEALTHY — every check ran and none failed",
     incomplete: "INCOMPLETE — not every check ran, so this is NOT a pass",
@@ -51,8 +102,27 @@ function flagsFor(parameter) {
         .map((p) => HEALTH_PARAM_FLAGS[p] ?? p)
         .join(", ");
 }
+/**
+ * Pick the check rows to print.
+ *
+ * On `not_healthy` the default is the FAIL rows ONLY. A planner runs this on a
+ * gate and reads the wall of PASS exactly once; every run after that, the three
+ * lines it needs are buried in thirty it does not. Every other verdict prints
+ * in full — on `incomplete` the `not_checked` rows ARE the finding, and on
+ * `healthy` there is nothing to bury.
+ *
+ * Nothing is ever dropped silently: the caller is told the count and the flag.
+ */
+export function visibleChecks(report, opts) {
+    const checks = report.checks ?? [];
+    if (opts?.allChecks || report.verdict !== "not_healthy") {
+        return { shown: checks, hidden: 0 };
+    }
+    const shown = checks.filter((c) => c.level === "FAIL");
+    return { shown, hidden: checks.length - shown.length };
+}
 /** Render a board or project health report as plain text lines. */
-export function renderHealthReport(report) {
+export function renderHealthReport(report, opts) {
     const lines = [];
     const subject = report.project_name
         ? `Project health — ${report.project_name}`
@@ -70,7 +140,12 @@ export function renderHealthReport(report) {
         lines.push(`Not supplied (so their checks made no finding): ${flagsFor(missing.join(","))}`);
     }
     lines.push("");
-    for (const chk of report.checks ?? []) {
+    const { shown, hidden } = visibleChecks(report, opts);
+    if (hidden > 0) {
+        lines.push(`Showing the ${shown.length} FAIL check(s). ${hidden} other row(s) hidden — see them all with --all-checks.`);
+        lines.push("");
+    }
+    for (const chk of shown) {
         const word = levelWord(chk.level).padEnd(WIDTH);
         lines.push(`  ${word}  ${chk.check}${chk.detail ? ` — ${chk.detail}` : ""}`);
         if (chk.level === "not_checked") {
@@ -86,6 +161,53 @@ export function renderHealthReport(report) {
     }
     return lines.join("\n");
 }
+/**
+ * Read the verdict back out of the server's Markdown rendering.
+ *
+ * 🔴 WHY THIS IS ALLOWED TO FAIL, AND WHY IT MUST FAIL CLOSED.
+ *
+ * `?format=md` returns `text/markdown` with no verdict header and no JSON, so
+ * the exit code has to come out of the prose. The server writes exactly one
+ * line for it (`render_health_md`):
+ *
+ *     **Verdict:** `not_healthy` · profile `factory`
+ *
+ * That is a hand-written copy of a contract owned by another repo path, and
+ * the house rule for those is to gate them, not to trust them. We cannot run
+ * the Python renderer from a CLI unit test — so instead of trusting it, this
+ * returns `undefined` when it cannot find the line, and `healthExitCode`
+ * turns that into exit 1. If the server ever reworded the heading, `--format
+ * md` starts erroring and names `--format json`; it does NOT start exiting 0
+ * on an unhealthy board. A drifted gate that shouts is recoverable; one that
+ * silently passes is the defect this whole card exists to remove.
+ */
+export function verdictFromMarkdown(md) {
+    const m = md.match(/\*\*Verdict:\*\*\s*`([a-z_]+)`/);
+    return m?.[1];
+}
+/**
+ * Read the verdict back out of the server's YAML rendering.
+ *
+ * `render_health_yaml` is `yaml.dump(report, sort_keys=False)`, so `verdict`
+ * is a top-level scalar. Same fail-closed contract as the Markdown reader: a
+ * miss returns `undefined` and becomes exit 1, never exit 0.
+ */
+export function verdictFromYaml(text) {
+    const m = text.match(/^verdict:[ \t]*["']?([a-z_]+)["']?[ \t]*$/m);
+    return m?.[1];
+}
+/** `--format` values. `text` is the local rendering and sends no `format=`. */
+export const HEALTH_FORMATS = ["text", "json", "md", "yaml"];
+/**
+ * The `format=` query value for a `--format` choice.
+ *
+ * `text` and `json` both want the JSON report (the text rendering is built
+ * from it), and `buildUrl` appends `format=` for anything that is not the
+ * string `json` — so both must arrive here as `json`, never as `text`.
+ */
+export function healthWireFormat(fmt) {
+    return fmt === "text" ? "json" : fmt;
+}
 /** The shared threshold flags, as query params. Only flags given become params. */
 export function healthParams(opts) {
     const params = {};
@@ -121,6 +243,73 @@ export function withHealthOptions(cmd) {
         .option("--stale-days <n>", "Warn on an open card not updated in N days.")
         .option("--column-age-days <n>", "Warn on an open card in the same column for N days.")
         .option("--star-fanout <n>", "Warn on a prerequisite whose top-layer fan-out exceeds N.")
-        .option("--json", "Print the raw JSON report instead of the text rendering.");
+        .option("--format <fmt>", "text (default, the human rendering) | json (the report VERBATIM, for jq) | md | yaml (the server's own rendering).")
+        .option("--json", "Alias for --format json.")
+        .option("--all-checks", "On a not_healthy report, print every check row, not only the FAIL rows.")
+        .option("--require-complete", "Treat `incomplete` as a failure too (exit 2). Off by default: `incomplete` means YOU supplied no threshold.");
+}
+/**
+ * The `--help` epilogue every `health` command carries.
+ *
+ * 🔑 It is not decoration. A caller who guesses the mapping writes a gate that
+ * never fires, which is the defect ASP-253 fixed — so the mapping is stated
+ * where the caller is standing when they write the gate. Every line here is
+ * backed by `healthExitCode` in this same file (AgentCLI LEARNINGS, ASP-25: a
+ * help string that describes behaviour nothing implements).
+ */
+export const HEALTH_EXIT_HELP = `Exit codes (a planner gates on these):
+  0  healthy      — every check ran and none failed
+  0  incomplete   — a threshold you did not supply left a check NOT CHECKED.
+                    That is a fact about your REQUEST, not about the board, so
+                    it does not fail the gate. Pass --require-complete to make
+                    it exit 2 instead.
+  2  not_healthy  — at least one check FAILED
+  1  error        — transport, auth, a bad ref, or a verdict this CLI could not
+                    read. Never confused with 0: a gate that cannot ask must
+                    not report a pass.`;
+/** Thrown for a `--format` this CLI does not know. Caught as a usage error. */
+export class HealthFormatError extends Error {
+}
+/** `--format` (validated) with `--json` kept working as an alias for it. */
+export function resolveHealthFormat(opts) {
+    if (opts.format === undefined)
+        return opts.json ? "json" : "text";
+    const fmt = opts.format.toLowerCase();
+    if (!HEALTH_FORMATS.includes(fmt)) {
+        throw new HealthFormatError(`Unknown --format "${opts.format}". Use one of: ${HEALTH_FORMATS.join(", ")}.`);
+    }
+    return fmt;
+}
+/**
+ * Print a health response and return the process exit code.
+ *
+ * The exit code is decided by the VERDICT in every format, including the ones
+ * the server renders itself — a gate must not change meaning because someone
+ * wanted Markdown. `yaml`/`md` carry no structured verdict, so the verdict is
+ * read back out of the text and a miss is an error (exit 1), never a pass.
+ */
+export async function emitHealthReport(res, opts, fmt) {
+    const exitOpts = { requireComplete: Boolean(opts.requireComplete) };
+    if (fmt === "json") {
+        // Verbatim — the report as the server sent it, NOT a re-render. A caller
+        // piping this into jq must see the server's field names and nothing else.
+        const report = (await res.json());
+        printJson(report);
+        return healthExitCode(report?.verdict, exitOpts);
+    }
+    if (fmt === "md" || fmt === "yaml") {
+        const text = await res.text();
+        printRaw(text);
+        const verdict = fmt === "md" ? verdictFromMarkdown(text) : verdictFromYaml(text);
+        if (verdict === undefined) {
+            console.error(`Error: printed the ${fmt} report, but could not read a verdict out of it, ` +
+                `so this exit code is NOT a health signal. Gate on --format json instead.`);
+            return EXIT_ERROR;
+        }
+        return healthExitCode(verdict, exitOpts);
+    }
+    const report = (await res.json());
+    console.log(renderHealthReport(report, { allChecks: Boolean(opts.allChecks) }));
+    return healthExitCode(report?.verdict, exitOpts);
 }
 //# sourceMappingURL=health.js.map

package/dist/lib/health.js.map

@@ -1 +1 @@
-{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/lib/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAuBH,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACxD,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,UAAU;IAClB,sBAAsB,EAAE,0BAA0B;IAClD,oBAAoB,EAAE,wBAAwB;IAC9C,UAAU,EAAE,cAAc;IAC1B,eAAe,EAAE,mBAAmB;IACpC,WAAW,EAAE,eAAe;CAC7B,CAAC;AAEF,mFAAmF;AACnF,MAAM,UAAU,GAA2B;IACzC,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CAC3B,CAAC;AAEF,MAAM,YAAY,GAA2B;IAC3C,OAAO,EAAE,2CAA2C;IACpD,UAAU,EAAE,yDAAyD;IACrE,WAAW,EAAE,yCAAyC;CACvD,CAAC;AAEF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE1E,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiB;IACjC,OAAO,SAAS;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACtC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY;QACjC,CAAC,CAAC,oBAAoB,MAAM,CAAC,YAAY,EAAE;QAC3C,CAAC,CAAC,kBAAkB,MAAM,CAAC,UAAU,IAAI,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5G,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEpB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,YAAY,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAE7D,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IAC9B,KAAK,CAAC,IAAI,CACR,YAAY,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU;QACjG,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,cAAc,CACtC,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,uBAAuB,IAAI,EAAE,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,mDAAmD,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YAChC,wEAAwE;YACxE,iEAAiE;YACjE,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;gBACnE,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CACpF,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,IAAwC;IACnE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,GAAG,GAA4B;QACnC,CAAC,SAAS,EAAE,SAAS,CAAC;QACtB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpB,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;QAClD,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;QAC9C,CAAC,WAAW,EAAE,YAAY,CAAC;QAC3B,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACpC,CAAC,YAAY,EAAE,aAAa,CAAC;KAC9B,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAA2D,GAAM;IAChG,OAAO,GAAG;SACP,MAAM,CACL,kBAAkB,EAClB,+HAA+H,CAChI;SACA,MAAM,CAAC,mBAAmB,EAAE,6DAA6D,CAAC;SAC1F,MAAM,CAAC,mCAAmC,EAAE,yFAAyF,CAAC;SACtI,MAAM,CAAC,iCAAiC,EAAE,6FAA6F,CAAC;SACxI,MAAM,CAAC,kBAAkB,EAAE,6CAA6C,CAAC;SACzE,MAAM,CAAC,uBAAuB,EAAE,qDAAqD,CAAC;SACtF,MAAM,CAAC,mBAAmB,EAAE,2DAA2D,CAAC;SACxF,MAAM,CAAC,QAAQ,EAAE,0DAA0D,CAAC,CAAC;AAClF,CAAC"}
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/lib/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAuBH,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACxD,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,UAAU;IAClB,sBAAsB,EAAE,0BAA0B;IAClD,oBAAoB,EAAE,wBAAwB;IAC9C,UAAU,EAAE,cAAc;IAC1B,eAAe,EAAE,mBAAmB;IACpC,WAAW,EAAE,eAAe;CAC7B,CAAC;AAEF,mFAAmF;AACnF,MAAM,UAAU,GAA2B;IACzC,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CAC3B,CAAC;AAEF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAElD,iFAAiF;AACjF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC;AACzB,4EAA4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAC5B,qEAAqE;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA2B,EAC3B,IAAoC;IAEpC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC;QACjB,KAAK,YAAY;YACf,OAAO,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;QAC5D,KAAK,aAAa;YAChB,OAAO,gBAAgB,CAAC;QAC1B;YACE,sEAAsE;YACtE,sEAAsE;YACtE,8DAA8D;YAC9D,OAAO,UAAU,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAA2B;IAC3C,OAAO,EAAE,2CAA2C;IACpD,UAAU,EAAE,yDAAyD;IACrE,WAAW,EAAE,yCAAyC;CACvD,CAAC;AAEF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE1E,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiB;IACjC,OAAO,SAAS;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACtC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAoB,EACpB,IAA8B;IAE9B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,EAAE,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;QACxD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IACvD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;AACzD,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,kBAAkB,CAAC,MAAoB,EAAE,IAA8B;IACrF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY;QACjC,CAAC,CAAC,oBAAoB,MAAM,CAAC,YAAY,EAAE;QAC3C,CAAC,CAAC,kBAAkB,MAAM,CAAC,UAAU,IAAI,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5G,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEpB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,YAAY,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAE7D,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IAC9B,KAAK,CAAC,IAAI,CACR,YAAY,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU;QACjG,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,cAAc,CACtC,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,uBAAuB,IAAI,EAAE,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,mDAAmD,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,MAAM,mBAAmB,MAAM,wDAAwD,CAAC,CAAC;QACzH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YAChC,wEAAwE;YACxE,iEAAiE;YACjE,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;gBACnE,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CACpF,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACrD,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACnE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAU,CAAC;AAGtE;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAiB;IAChD,OAAO,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;AACvC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,IAAwC;IACnE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,GAAG,GAA4B;QACnC,CAAC,SAAS,EAAE,SAAS,CAAC;QACtB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpB,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;QAClD,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;QAC9C,CAAC,WAAW,EAAE,YAAY,CAAC;QAC3B,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACpC,CAAC,YAAY,EAAE,aAAa,CAAC;KAC9B,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAA2D,GAAM;IAChG,OAAO,GAAG;SACP,MAAM,CACL,kBAAkB,EAClB,+HAA+H,CAChI;SACA,MAAM,CAAC,mBAAmB,EAAE,6DAA6D,CAAC;SAC1F,MAAM,CAAC,mCAAmC,EAAE,yFAAyF,CAAC;SACtI,MAAM,CAAC,iCAAiC,EAAE,6FAA6F,CAAC;SACxI,MAAM,CAAC,kBAAkB,EAAE,6CAA6C,CAAC;SACzE,MAAM,CAAC,uBAAuB,EAAE,qDAAqD,CAAC;SACtF,MAAM,CAAC,mBAAmB,EAAE,2DAA2D,CAAC;SACxF,MAAM,CACL,gBAAgB,EAChB,oHAAoH,CACrH;SACA,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC;SAC5C,MAAM,CAAC,cAAc,EAAE,yEAAyE,CAAC;SACjG,MAAM,CACL,oBAAoB,EACpB,6GAA6G,CAC9G,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;uCASO,CAAC;AAoBxC,+EAA+E;AAC/E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAE/C,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,IAAsB;IACxD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,CAAE,cAAoC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,iBAAiB,CACzB,qBAAqB,IAAI,CAAC,MAAM,kBAAkB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,GAAmB,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkE,EAClE,IAAsB,EACtB,GAAiB;IAEjB,MAAM,QAAQ,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;IAEpE,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAC;QAClD,SAAS,CAAC,MAAM,CAAC,CAAC;QAClB,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,OAAO,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACjF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CACX,sBAAsB,GAAG,mDAAmD;gBAC1E,0EAA0E,CAC7E,CAAC;YACF,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC"}

package/dist/lib/pending-auth.d.ts

@@ -0,0 +1,41 @@
+/**
+ * A PAT request that is still waiting for a human to approve it (PC-252).
+ *
+ * The server keeps a request approvable for an hour, because the person who
+ * approves is usually someone else, reading email on a phone. The CLI must not
+ * sit polling for that hour — an agent's shell call is killed long before, and
+ * an hour of silent polling is a hang, not a feature. So `auth request` waits a
+ * bounded time (`--wait`, default 5 min) and then hands off: this file keeps
+ * what is needed to collect the token later with `opvs auth resume`.
+ *
+ * It is written BEFORE the first poll, so a process killed mid-wait (a tool-call
+ * timeout) still leaves a request that can be resumed. It holds the poll token —
+ * a bearer secret that fetches the PAT once approved — so it is written 0600,
+ * like a key file, and removed the moment the request settles either way.
+ *
+ * One pending request at a time: a new `auth request` replaces the old one,
+ * which matches what the approver is told — "approve the newest email".
+ */
+export interface PendingAuth {
+    request_id: string;
+    poll_token: string;
+    api_url: string;
+    /** ISO timestamp from the server — when the request stops being approvable. */
+    expires_at: string;
+    /** Who was emailed, so a resume can say whose inbox to check. */
+    owner_email: string;
+    /** `-w <slug>` flow: the workspace the token is saved under. `null` for the email-only flow. */
+    workspace_slug: string | null;
+    /** Email-only flow: the workspaces the server matched (fallback slug for a single-token answer). */
+    brands: Array<{
+        brand_slug: string;
+        brand_name?: string;
+        brand_id?: number;
+    }>;
+    created_at: string;
+}
+export declare function pendingAuthPath(): string;
+export declare function savePendingAuth(pending: PendingAuth, path?: string): void;
+/** The saved request, or `null` when there is none — or it is unreadable, which is the same thing to a caller. */
+export declare function loadPendingAuth(path?: string): PendingAuth | null;
+export declare function clearPendingAuth(path?: string): void;