@vltpkg/cli-sdk 1.0.9 → 1.1.0

package/dist/commands/access.js

@@ -1,5 +1,5 @@
 import { error } from '@vltpkg/error-cause';
-import { RegistryClient } from '@vltpkg/registry-client';
+import { RegistryClient, assertOk } from '@vltpkg/registry-client';
 import { commandUsage } from "../config/usage.js";
 import { resolveRegistry } from "../require-registry.js";
 export const needsRegistry = true;
@@ -89,6 +89,14 @@ export const command = async (conf) => {
 const encodePkgName = (name) => name.startsWith('@') ?
     `@${encodeURIComponent(name.slice(1))}`
     : encodeURIComponent(name);
+// 401/403/404 from the access endpoints all mean something the user can
+// act on, so each gets a concrete next step rather than a bare status.
+const accessAdvice = (what) => (statusCode) => statusCode === 401 ? 'Run `vlt login` and try again.'
+    : statusCode === 403 ?
+        `This account cannot ${what}. Run \`vlt whoami\` to see who you are logged in as.`
+        : statusCode === 404 ?
+            'Not found. Check the name, and that this account has access to it.'
+            : undefined;
 const listPackages = async (conf, args) => {
     const [keyword, entity] = args;
     if (keyword !== 'packages') {
@@ -103,6 +111,11 @@ const listPackages = async (conf, args) => {
     const scope = entity ?? getDefaultScope(conf);
     const url = new URL(`-/org/${encodeURIComponent(scope)}/package`, registryUrl);
     const response = await rc.request(url, { useCache: false });
+    assertOk(response, {
+        message: 'Failed to list packages',
+        url,
+        advice: accessAdvice('list packages for this scope'),
+    });
     const data = response.json();
     return { packages: data };
 };
@@ -123,6 +136,11 @@ const getStatus = async (conf, args) => {
     const registryUrl = new URL(await resolveRegistry(conf));
     const url = new URL(`-/package/${encodePkgName(pkg)}/access`, registryUrl);
     const response = await rc.request(url, { useCache: false });
+    assertOk(response, {
+        message: 'Failed to get package access status',
+        url,
+        advice: accessAdvice('read access for this package'),
+    });
     const data = response.json();
     return { package: pkg, access: data.access };
 };
@@ -148,13 +166,19 @@ const setStatus = async (conf, args) => {
     const rc = new RegistryClient(conf.options);
     const registryUrl = new URL(await resolveRegistry(conf));
     const url = new URL(`-/package/${encodePkgName(pkg)}/access`, registryUrl);
-    await rc.request(url, {
+    const response = await rc.request(url, {
         method: 'PUT',
         headers: { 'content-type': 'application/json' },
         body: JSON.stringify({ access: accessLevel }),
         otp: conf.options.otp,
         useCache: false,
     });
+    assertOk(response, {
+        message: 'Failed to set package access status',
+        url,
+        method: 'PUT',
+        advice: accessAdvice('change access for this package'),
+    });
     return { package: pkg, access: accessLevel };
 };
 const grant = async (conf, args) => {
@@ -184,7 +208,7 @@ const grant = async (conf, args) => {
     const rc = new RegistryClient(conf.options);
     const registryUrl = new URL(await resolveRegistry(conf));
     const url = new URL(`-/team/${encodeURIComponent(scope)}/${encodeURIComponent(team)}/package`, registryUrl);
-    await rc.request(url, {
+    const response = await rc.request(url, {
         method: 'PUT',
         headers: { 'content-type': 'application/json' },
         body: JSON.stringify({
@@ -194,6 +218,12 @@ const grant = async (conf, args) => {
         otp: conf.options.otp,
         useCache: false,
     });
+    assertOk(response, {
+        message: 'Failed to grant team access',
+        url,
+        method: 'PUT',
+        advice: accessAdvice('grant access for this team'),
+    });
     return {
         granted: {
             team: `${scope}:${team}`,
@@ -221,13 +251,19 @@ const revoke = async (conf, args) => {
     const rc = new RegistryClient(conf.options);
     const registryUrl = new URL(await resolveRegistry(conf));
     const url = new URL(`-/team/${encodeURIComponent(scope)}/${encodeURIComponent(team)}/package`, registryUrl);
-    await rc.request(url, {
+    const response = await rc.request(url, {
         method: 'DELETE',
         headers: { 'content-type': 'application/json' },
         body: JSON.stringify({ package: pkgName }),
         otp: conf.options.otp,
         useCache: false,
     });
+    assertOk(response, {
+        message: 'Failed to revoke team access',
+        url,
+        method: 'DELETE',
+        advice: accessAdvice('revoke access for this team'),
+    });
     return {
         revoked: {
             team: `${scope}:${team}`,

package/dist/commands/cache.js

@@ -1,5 +1,5 @@
 import { error } from '@vltpkg/error-cause';
-import { CacheEntry } from '@vltpkg/registry-client';
+import { CacheEntry, assertOk } from '@vltpkg/registry-client';
 import { Spec } from '@vltpkg/spec';
 import { mkdir, rm } from 'node:fs/promises';
 import prettyBytes from 'pretty-bytes';
@@ -243,12 +243,17 @@ const add = async (conf, specs, view) => {
         })
             .then(async (r) => {
             const { resolved, integrity } = r;
-            await (await packageInfo.getRegistryClient()).request(resolved, {
+            const response = await (await packageInfo.getRegistryClient()).request(resolved, {
                 ...conf.options,
                 integrity,
                 staleWhileRevalidate: false,
                 query: undefined,
             });
+            // otherwise a 404 tarball still prints '+ <spec>'
+            assertOk(response, {
+                message: `Failed to cache ${spec}`,
+                url: resolved,
+            });
             view?.stdout('+', spec, r.resolved);
         });
         promises.push(p);

package/dist/commands/deprecate.js

@@ -1,9 +1,8 @@
 import { error } from '@vltpkg/error-cause';
 import { PackageInfoClient } from '@vltpkg/package-info';
-import { RegistryClient } from '@vltpkg/registry-client';
+import { RegistryClient, assertOk, requestError, } from '@vltpkg/registry-client';
 import { Spec } from '@vltpkg/spec';
 import { satisfies } from '@vltpkg/semver';
-import { asError } from '@vltpkg/types';
 import { commandUsage } from "../config/usage.js";
 import { resolveRegistry } from "../require-registry.js";
 export const needsRegistry = true;
@@ -123,16 +122,17 @@ export const command = async (conf) => {
         });
     }
     catch (err) {
-        throw error('failed to update deprecation status', {
-            cause: asError(err),
-        });
-    }
-    if (response.statusCode < 200 || response.statusCode >= 300) {
-        throw error('failed to update deprecation status', {
+        throw requestError(err, {
+            message: 'failed to update deprecation status',
             url: packageUrl,
-            response,
+            method: 'PUT',
         });
     }
+    assertOk(response, {
+        message: 'failed to update deprecation status',
+        url: packageUrl,
+        method: 'PUT',
+    });
     return {
         name,
         version: versionRange || '*',

package/dist/commands/dist-tag.js

@@ -1,5 +1,5 @@
 import { error } from '@vltpkg/error-cause';
-import { RegistryClient } from '@vltpkg/registry-client';
+import { RegistryClient, assertOk } from '@vltpkg/registry-client';
 import { Spec } from '@vltpkg/spec';
 import { commandUsage } from "../config/usage.js";
 import { resolveRegistry } from "../require-registry.js";
@@ -121,12 +121,11 @@ export const command = async (conf) => {
                 body: JSON.stringify(version),
                 useCache: false,
             });
-            if (response.statusCode < 200 || response.statusCode >= 300) {
-                throw error('Failed to add dist-tag', {
-                    url,
-                    response,
-                });
-            }
+            assertOk(response, {
+                message: 'Failed to add dist-tag',
+                url,
+                method: 'PUT',
+            });
             return { id: name, tag, version };
         }
         case 'rm':
@@ -144,12 +143,11 @@ export const command = async (conf) => {
                 method: 'DELETE',
                 useCache: false,
             });
-            if (response.statusCode < 200 || response.statusCode >= 300) {
-                throw error('Failed to remove dist-tag', {
-                    url,
-                    response,
-                });
-            }
+            assertOk(response, {
+                message: 'Failed to remove dist-tag',
+                url,
+                method: 'DELETE',
+            });
             return { id: name, tag };
         }
         case 'ls':
@@ -159,12 +157,10 @@ export const command = async (conf) => {
             const response = await rc.request(url, {
                 useCache: false,
             });
-            if (response.statusCode < 200 || response.statusCode >= 300) {
-                throw error('Failed to list dist-tags', {
-                    url,
-                    response,
-                });
-            }
+            assertOk(response, {
+                message: 'Failed to list dist-tags',
+                url,
+            });
             const tags = response.json();
             return { id: name, tags };
         }

package/dist/commands/install/reporter.js

@@ -4,6 +4,7 @@ import Spinner from 'ink-spinner';
 import { createElement as $, Fragment, useEffect, useState, } from 'react';
 import { ViewClass } from "../../view.js";
 import { asError } from '@vltpkg/types';
+import { persistedEntries } from "../../persist-spec-config.js";
 const labels = {
     build: 'resolving dependencies',
     actual: '',
@@ -84,6 +85,12 @@ export class InstallReporter extends ViewClass {
             out +=
                 '🔨 Run `vlt build` to run all required scripts to build installed packages.\n';
         }
+        const saved = _result.persistedConfig;
+        if (saved) {
+            for (const e of persistedEntries(saved.values)) {
+                out += `\nSaved ${e} to ${saved.which} vlt.json`;
+            }
+        }
         this.#instance?.rerender($(App, { trailer: out }));
         return undefined;
     }

package/dist/commands/install.d.ts

@@ -1,3 +1,4 @@
+import type { SpecConfigPersistPlan } from '../persist-spec-config.ts';
 import type { DepID } from '@vltpkg/dep-id';
 import type { Diff, Graph } from '@vltpkg/graph';
 import type { CommandFn, CommandUsage } from '../index.ts';
@@ -17,12 +18,17 @@ export type InstallResult = {
      * The diff between the actual and ideal graphs, if available.
      */
     diff?: Diff;
+    /**
+     * Spec config from the cli / env that was saved to a config file.
+     */
+    persistedConfig?: SpecConfigPersistPlan;
 };
 export declare const needsRegistry = true;
 export declare const needsNpmRegistry = true;
 export declare const usage: CommandUsage;
 export declare const views: {
     readonly json: (i: InstallResult) => {
+        persistedConfig?: SpecConfigPersistPlan | undefined;
         buildQueue?: DepID[] | undefined;
         message?: string | undefined;
         add: {

package/dist/commands/install.js

@@ -1,6 +1,8 @@
 import { commandUsage } from "../config/usage.js";
 import { install } from '@vltpkg/graph';
 import { parseAddArgs } from "../parse-add-remove-args.js";
+import { planSpecConfigPersist } from "../persist-spec-config.js";
+import { asUnknownSpecPrefix } from "../require-registry.js";
 import { trackInstall } from "../telemetry.js";
 import { lazyView } from "../view.js";
 export const needsRegistry = true;
@@ -30,6 +32,9 @@ export const usage = () => commandUsage({
         'save-prod': {
             description: 'Save installed packages to package.json as dependencies.',
         },
+        'save-config': {
+            description: 'Save registry and git host options given on the command line or via env (e.g. `--registries name=url`) to the project vlt.json, or the user vlt.json with --config=user.',
+        },
         workspace: {
             value: '<path|glob>',
             description: 'Limit installation targets to matching workspaces.',
@@ -111,6 +116,9 @@ export const views = {
                     message: `${i.buildQueue.length} packages that will need to be built, run "vlt build" to complete the install.`,
                 }
                 : null),
+            ...(i.persistedConfig ?
+                { persistedConfig: i.persistedConfig }
+                : null),
         };
     },
     human: lazyView(async () => (await import('./install/reporter.ts')).InstallReporter),
@@ -121,6 +129,7 @@ export const command = async (conf) => {
     const monorepo = conf.options.monorepo;
     const scurry = conf.options.scurry;
     const { add } = parseAddArgs(conf, scurry, monorepo);
+    const persist = planSpecConfigPersist(conf);
     const frozenLockfile = conf.options['frozen-lockfile'];
     const expectLockfile = conf.options['expect-lockfile'];
     const lockfileOnly = conf.options['lockfile-only'];
@@ -140,7 +149,11 @@ export const command = async (conf) => {
         lockfileOnly,
         saveExact,
         savePrefix,
-    }, add);
+    }, add).catch((er) => {
+        throw asUnknownSpecPrefix(er);
+    });
+    if (persist)
+        await conf.addConfigToFile(persist.which, persist.values);
     /* c8 ignore next 9 - telemetry is best-effort */
     try {
         trackInstall({
@@ -149,5 +162,10 @@ export const command = async (conf) => {
         }, conf.values.telemetry);
     }
     catch { }
-    return { buildQueue, graph, diff };
+    return {
+        buildQueue,
+        graph,
+        diff,
+        ...(persist ? { persistedConfig: persist } : null),
+    };
 };

package/dist/commands/list.js

@@ -5,6 +5,7 @@ import { error } from '@vltpkg/error-cause';
 import { commandUsage } from "../config/usage.js";
 import { createHostContextsMap } from "../query-host-contexts.js";
 import { createGetAuthHeader } from "../query-auth.js";
+import { assertVltInstalled } from "../is-vlt-installed.js";
 import { MermaidImageView } from "../mermaid-image-view.js";
 export const needsRegistry = true;
 export const usage = () => commandUsage({
@@ -25,6 +26,11 @@ export const usage = () => commandUsage({
       filter what dependencies to include in the output. Using both options
       allows you to render subgraphs of the dependency graph.
 
+      The listed graph is the one built by \`vlt install\`. In a project
+      installed by another client there is no such graph and the command
+      errors instead of reporting every dependency as missing. Queries
+      using \`:host()\` load their graph from elsewhere and are exempt.
+
       Defaults to listing direct dependencies of a project and any configured
       workspace.`,
     examples: {
@@ -73,19 +79,6 @@ export const command = async (conf) => {
     const mainManifest = conf.options.packageJson.maybeRead(conf.options.projectRoot);
     let graph;
     let securityArchive;
-    // optionally load the cwd graph if we found a package.json file
-    if (mainManifest) {
-        graph = actual.load({
-            ...conf.options,
-            mainManifest,
-            modifiers,
-            monorepo,
-            loadManifests: true,
-        });
-        securityArchive = await SecurityArchive.start({
-            nodes: [...graph.nodes.values()],
-        });
-    }
     // Validate positional arguments - only allow package names, not direct queries
     for (const arg of conf.positionals) {
         if (!/^[@\w-]/.test(arg)) {
@@ -103,6 +96,25 @@ export const command = async (conf) => {
     const scopeQueryString = conf.get('scope');
     const queryString = targetQueryString || positionalQueryString;
     const projectQueryString = ':workspace, :project > *';
+    // `:host()` swaps the graph for one loaded from somewhere else, so
+    // those queries do not need this project to be installed.
+    const usesHostContext = [queryString, scopeQueryString].some(q => q?.includes(':host('));
+    // optionally load the cwd graph if we found a package.json file
+    if (mainManifest) {
+        if (!usesHostContext) {
+            assertVltInstalled(conf.options.projectRoot, 'ls');
+        }
+        graph = actual.load({
+            ...conf.options,
+            mainManifest,
+            modifiers,
+            monorepo,
+            loadManifests: true,
+        });
+        securityArchive = await SecurityArchive.start({
+            nodes: [...graph.nodes.values()],
+        });
+    }
     const selectImporters = [];
     const hostContexts = await createHostContextsMap(conf);
     const getAuthHeader = createGetAuthHeader(conf);

package/dist/commands/profile.js

@@ -1,5 +1,5 @@
 import { error } from '@vltpkg/error-cause';
-import { RegistryClient } from '@vltpkg/registry-client';
+import { RegistryClient, assertOk } from '@vltpkg/registry-client';
 import { commandUsage } from "../config/usage.js";
 import { resolveRegistry } from "../require-registry.js";
 export const needsRegistry = true;
@@ -69,6 +69,16 @@ const getProfile = async (conf, args) => {
     const registryUrl = new URL(await resolveRegistry(conf));
     const url = new URL('-/npm/v1/user', registryUrl);
     const response = await rc.request(url, { useCache: false });
+    // before json(): otherwise an error body makes the 'Property not
+    // found in profile' check below blame the user's argument for what is
+    // really an auth failure.
+    assertOk(response, {
+        message: 'Failed to fetch profile',
+        url,
+        advice: statusCode => statusCode === 401 || statusCode === 403 ?
+            `Not logged in to ${registryUrl.origin}. Run \`vlt login\` and try again.`
+            : undefined,
+    });
     const data = response.json();
     const [property] = args;
     if (property) {
@@ -101,6 +111,14 @@ const setProfile = async (conf, args) => {
         otp: conf.options.otp,
         useCache: false,
     });
+    assertOk(response, {
+        message: 'Failed to update profile',
+        url,
+        method: 'POST',
+        advice: statusCode => statusCode === 401 || statusCode === 403 ?
+            `Not logged in to ${registryUrl.origin}. Run \`vlt login\` and try again.`
+            : undefined,
+    });
     const data = response.json();
     return { property, value: data[property] };
 };

package/dist/commands/publish.js

@@ -1,10 +1,9 @@
 import { error } from '@vltpkg/error-cause';
-import { RegistryClient, oidc, registryBase, } from '@vltpkg/registry-client';
+import { RegistryClient, assertOk, oidc, registryBase, requestError, } from '@vltpkg/registry-client';
 import { run } from '@vltpkg/run';
 import { commandUsage } from "../config/usage.js";
 import { packTarball } from "../pack-tarball.js";
 import assert from 'node:assert';
-import { asError } from '@vltpkg/types';
 import { dirname, resolve } from 'node:path';
 import prettyBytes from 'pretty-bytes';
 import { actual } from '@vltpkg/graph';
@@ -12,7 +11,6 @@ import { Query } from '@vltpkg/query';
 import { createHostContextsMap } from "../query-host-contexts.js";
 import { minimatch } from 'minimatch';
 import { resolveRegistry } from "../require-registry.js";
-import { registryErrorMessage } from "../registry-error-message.js";
 import { stderr } from "../output.js";
 export const needsRegistry = true;
 export const usage = () => commandUsage({
@@ -246,6 +244,17 @@ const commandSingle = async (location, conf) => {
     });
     const publishUrl = new URL(name.startsWith('@') ? name.replace('/', '%2F') : name, registryUrl);
     if (!dry) {
+        // the same guidance whether the registry refused the request or the
+        // client threw before a response came back (an expired token, say)
+        const publishAdvice = (statusCode) => statusCode === 409 ?
+            `${name}@${version} already exists in the registry. Bump the version and try again.`
+            : statusCode === 404 ?
+                "Make sure you're logged in and have access to publish the package."
+                : statusCode === 401 ?
+                    `Not logged in to ${registryUrl.origin}. Run \`vlt login\` and try again.`
+                    : statusCode === 403 ?
+                        `${name} cannot be published by this account. Run \`vlt whoami\` to see who you are logged in as, and \`vlt login\` to switch accounts. A name already taken by someone else cannot be reused.`
+                        : undefined;
         let response;
         try {
             response = await rc.request(publishUrl, {
@@ -261,27 +270,26 @@ const commandSingle = async (location, conf) => {
             });
         }
         catch (err) {
-            throw error('Failed to publish package', {
-                cause: asError(err),
+            throw requestError(err, {
+                message: 'Failed to publish package',
+                url: publishUrl,
+                method: 'PUT',
+                advice: publishAdvice,
             });
         }
         // Any 2xx response is a successful publish. The npm registry may
         // respond with a 202 Accepted when processing is deferred (e.g. for
         // publish-time malware scanning).
-        if (response.statusCode < 200 || response.statusCode >= 300) {
-            let advice = '';
-            if (response.statusCode === 409) {
-                advice = `\n⚠️ ${name}@${version} already exists in the registry. Bump the version and try again.`;
-            }
-            else if (response.statusCode === 404) {
-                advice =
-                    "\n⚠️ Make sure you're logged in and have access to publish the package.";
-            }
-            throw error(`Failed to publish package: ${registryErrorMessage(response)}${advice}`, {
-                url: publishUrl,
-                response,
-            });
-        }
+        //
+        // assertOk tells a rejected credential (ENEEDAUTH) apart from a
+        // registry that is simply broken (EREQUEST): the former is the
+        // user's to fix, not a bug to report.
+        assertOk(response, {
+            message: 'Failed to publish package',
+            url: publishUrl,
+            method: 'PUT',
+            advice: publishAdvice,
+        });
         // On deferred publishes the registry explains the delay in an
         // npm-notice header, e.g. "Your package is being processed and may
         // take a few minutes to become available."

package/dist/commands/query.js

@@ -7,6 +7,7 @@ import { SecurityArchive } from '@vltpkg/security-archive';
 import { commandUsage } from "../config/usage.js";
 import { createHostContextsMap } from "../query-host-contexts.js";
 import { createGetAuthHeader } from "../query-auth.js";
+import { assertVltInstalled } from "../is-vlt-installed.js";
 import { MermaidImageView } from "../mermaid-image-view.js";
 export const needsRegistry = true;
 export const usage = () => commandUsage({
@@ -30,6 +31,11 @@ export const usage = () => commandUsage({
       dependencies to include in the output. Using both options allows you to
       render subgraphs of the dependency graph.
 
+      The queried graph is the one built by \`vlt install\`. In a project
+      installed by another client there is no such graph and the command
+      errors instead of reporting every dependency as missing. Queries
+      using \`:host()\` load their graph from elsewhere and are exempt.
+
       Defaults to listing all dependencies of the project root and workspaces.`,
     examples: {
         [`'#foo'`]: {
@@ -109,8 +115,22 @@ export const command = async (conf) => {
     const mainManifest = conf.options.packageJson.maybeRead(conf.options.projectRoot);
     let graph;
     let securityArchive;
+    // retrieve default values and set up host contexts
+    const defaultProjectQueryString = '*';
+    const defaultLocalScopeQueryString = ':host(local) *';
+    const positionalQueryString = conf.positionals[0];
+    const targetQueryString = conf.get('target');
+    const scopeQueryString = conf.get('scope');
+    // --target takes precedence over the positional query
+    const queryString = targetQueryString || positionalQueryString;
+    // `:host()` swaps the graph for one loaded from somewhere else, so
+    // those queries do not need this project to be installed.
+    const usesHostContext = [queryString, scopeQueryString].some(q => q?.includes(':host('));
     // optionally load the cwd graph if we found a package.json file
     if (mainManifest) {
+        if (!usesHostContext) {
+            assertVltInstalled(conf.options.projectRoot, 'query');
+        }
         graph = actual.load({
             ...conf.options,
             mainManifest,
@@ -122,13 +142,6 @@ export const command = async (conf) => {
             nodes: [...graph.nodes.values()],
         });
     }
-    // retrieve default values and set up host contexts
-    const defaultProjectQueryString = '*';
-    const defaultLocalScopeQueryString = ':host(local) *';
-    const positionalQueryString = conf.positionals[0];
-    const targetQueryString = conf.get('target');
-    const scopeQueryString = conf.get('scope');
-    const queryString = targetQueryString || positionalQueryString;
     const hostContexts = await createHostContextsMap(conf);
     const diffFiles = createDiffFilesProvider(conf.options.projectRoot);
     const getAuthHeader = createGetAuthHeader(conf);

package/dist/commands/setup.js

@@ -6,6 +6,7 @@ import { createInterface } from 'node:readline/promises';
 import { configWriteTarget } from "../config/index.js";
 import { registrySelectionFields } from "../config/merge-layers.js";
 import { commandUsage } from "../config/usage.js";
+import { normalizeRegistryURL } from "../require-registry.js";
 import { stdout } from "../output.js";
 /** Where users sign up for / log into a vlt.io account. */
 export const VLT_SIGNUP_URL = 'https://www.vlt.io';
@@ -36,8 +37,6 @@ const accountAuthError = (account, er) => (isErrorWithCause(er) &&
         `organization at ${VLT_SIGNUP_URL}, then run \`vlt setup\` again.`,
     ].join('\n'), { code: 'ECONFIG', cause: er })
     : asError(er);
-/** Ensure a registry URL ends with a single trailing slash. */
-const normalizeRegistryURL = (url) => url.endsWith('/') ? url : `${url}/`;
 export const views = {
     human: (result) => {
         const lines = [

package/dist/commands/token.js

@@ -77,7 +77,9 @@ const formatRegistryTokens = (r) => {
         lines.push('  (skipped remote query — no auth token)');
     }
     else if (r.error) {
-        lines.push(`  error: ${r.error}`);
+        // messages now carry advice on a second line; keep it indented
+        // under the registry heading rather than dedented to column 0.
+        lines.push(`  error: ${r.error.replaceAll('\n', '\n  ')}`);
     }
     else if (r.tokens.length === 0) {
         lines.push('  (no remote tokens found)');