@theholocron/cli 5.0.0-alpha.175 → 5.0.0-alpha.177

package/dist/cli.mjs

@@ -2257,7 +2257,7 @@ async function runDoctor(input) {
 			capability: row.capability,
 			provider: row.provider,
 			status: row.status,
-			detail: row.message
+			detail: row.logMessage ?? row.message
 		}, `doctor: ${row.capability}`);
 		print(statusRow(row.status, [`${pad(row.capability, 14)} via ${pad(row.provider, 14)}`, row.message]));
 	}
@@ -2296,9 +2296,34 @@ async function smokeCheck(key, provider, impl) {
 	try {
 		return await withTimeout(runSmokeCheck(key, provider, impl), SMOKE_CHECK_TIMEOUT_MS);
 	} catch (err) {
-		return mk(key, provider, "fail", errorMessage(err));
+		return mk(key, provider, "fail", smokeCheckErrorMessage(err), errorMessage(err));
 	}
 }
+/** Vendor response bodies land in the terminal — cap their length so one
+*  oversized error can't flood the report, and strip control characters
+*  (newlines included) so a crafted body can't forge extra report lines
+*  or inject terminal escape sequences. */
+const MAX_DETAIL_LENGTH = 200;
+function sanitizeDetail(text) {
+	const stripped = text.replace(/[\x00-\x1f\x7f]/g, " ").replace(/\s+/g, " ").trim();
+	return stripped.length > MAX_DETAIL_LENGTH ? `${stripped.slice(0, MAX_DETAIL_LENGTH)}…` : stripped;
+}
+/**
+* `errorMessage(err)` alone is just `"<Vendor> <METHOD> <path> → <status>"` —
+* the actual reason (what the vendor's response body said) lives in
+* `ProviderApiError.details`, a raw response-body string (not parsed JSON —
+* see AGENTS.md), and was being silently dropped. Appending it (sanitized
+* and length-capped — see `sanitizeDetail`) turns e.g. a bare "→ 400" into
+* something that actually explains itself, without the vendor text being
+* able to overwhelm or manipulate the terminal report.
+*/
+function smokeCheckErrorMessage(err) {
+	if (err instanceof ProviderApiError$1 && err.details) {
+		const detail = sanitizeDetail(String(err.details));
+		if (detail) return `${errorMessage(err)}: ${detail}`;
+	}
+	return errorMessage(err);
+}
 async function runSmokeCheck(key, provider, impl) {
 	switch (key) {
 		case "source": return mk(key, provider, "ok", `whoami: ${(await impl.whoami()).login}`);
@@ -2365,12 +2390,13 @@ async function runSmokeCheck(key, provider, impl) {
 function countResolvedLifecycle(report) {
 	return `${report.lifecycle.filter((l) => l.resolved).length}/${report.lifecycle.length} lifecycle slots ready`;
 }
-function mk(capability, provider, status, message) {
+function mk(capability, provider, status, message, logMessage) {
 	return {
 		capability,
 		provider,
 		status,
-		message
+		message,
+		...logMessage !== void 0 ? { logMessage } : {}
 	};
 }
 //#endregion