altalandi 0.4.0 → 0.5.0

package/README.md

@@ -96,6 +96,9 @@ altalandi "Some English or Icelandic text."
 echo "some text" | altalandi --domain marketing
 altalandi --json "..."                 # full JSON response
 altalandi --fast "..."                 # skip the meaning + nativeness gates
+altalandi --diff --file draft.txt      # show before, after and every change with its reason
+altalandi --review --file in.txt --out out.txt   # for agents: one block to show as it is
+altalandi --report --file draft.txt    # also write a Markdown report to ./altalandi-reports/
 ```
 
 | flag | default | meaning |
@@ -103,8 +106,37 @@ altalandi --fast "..."                 # skip the meaning + nativeness gates
 | `--domain` | `general` | `general` \| `marketing` \| `data-analysis` \| `childrens-fiction` |
 | `--register` | `neutral` | `formal` \| `neutral` \| `warm` |
 | `--json` | off | print the full API response |
+| `--diff` | off | print the text before and after, then each change with its reason, on `stderr` (coloured in a terminal; `NO_COLOR` turns colour off) |
+| `--review` | off | print one Markdown block on `stdout`, made to be shown as it is: the verdict, the text before and after, each change with its reason, what the call cost and the balance and free units left. Exits on the outcome: `0` rewritten and verified or no change needed, `3` refused or unverified, `4` out of credit |
+| `--no-store` | off | send `contribute: false`: this text is never kept. Without it, free use (calls covered by the free daily units) is kept with personal data scrubbed, to improve the service; paid use is kept only with consent ([privacy](https://altalandi.is/personuvernd#textabanki)) |
+| `--out <file>` | | write the refined text to `<file>` (UTF-8); with `--review` the block names it when the text is shortened |
+| `--report` | off | also write `./altalandi-reports/altalandi-<time>-<id>.md`: input, output, a table of every change (before, after, reason, layer), warnings and the verdict |
+| `--report-dir <dir>` | | write the report to `<dir>` instead (implies `--report`) |
 | `--fast` | off | `preserveMeaning:false`, `scoreNativeness:false`, `onlyImprove:false`, `polishPass:false`, `scoring:"none"` — normally one model call (structured input can still add a structure-preserving retry) |
 
+## Before and after
+
+`--diff` prints what the website shows inline, in the terminal:
+
+```text
+── Fyrir ───────────────────────────────────
+Vertu viss um að ná út til okkar ef þú hefur einhverjar spurningar.
+
+── Eftir ───────────────────────────────────
+Ekki hika við að hafa samband ef einhverjar spurningar vakna.
+
+── Breytingar (1) ──────────────────────────
+1. − Vertu viss um að ná út til okkar ef þú hefur einhverjar spurningar.
+   + Ekki hika við að hafa samband ef einhverjar spurningar vakna.
+   ↳ <the reason the engine gives>
+
+Endurskrifað og merking staðfest · innfæddni 91/100
+```
+
+`--report` (or `ALTALANDI_REPORT=1`) writes the same content as a Markdown file
+you can keep or share. Reports are off by default because they contain your text.
+`stdout` stays the refined text alone either way, so piping is unaffected.
+
 ## The meaning guarantee
 
 Altalandi never silently changes meaning. For Icelandic input where the rewrite
@@ -138,6 +170,9 @@ the explicit verification opt-out and exits 0 after a successful API response.
 |-----|---------|---------|
 | `ALTALANDI_API_KEY` | — | your key (Bearer). Mint at https://altalandi.is/portal |
 | `ALTALANDI_BASE_URL` | `https://altalandi.is/api` | API base (override for self-hosting) |
+| `ALTALANDI_DIFF` | — | `1` = always print the before/after (as `--diff`) |
+| `ALTALANDI_REPORT` | — | `1` = always write a report (as `--report`) |
+| `ALTALANDI_REPORT_DIR` | `./altalandi-reports` | where reports go |
 
 MIT licensed. Calls are paid from the account's prepaid credit (a 500 kr trial,
 then credit bought in the portal); a call the credit cannot cover exits with the

package/altalandi.mjs

@@ -1,223 +1,274 @@
-#!/usr/bin/env node
-// altalandi — turn English or stiff/AI Icelandic into native Icelandic from
-// your terminal. Zero dependencies (Node >= 18 has global fetch).
-//
-//   npx altalandi login                 # once: connects this computer to your account
-//   altalandi "Make sure to reach out to us today."
-//   echo "some text" | altalandi --domain marketing
-//
-// stdout = the refined text (so you can pipe it); stderr = nativeness score,
-// meaning verdict, API warnings, and the diff.
-
-import { refine } from "./client.mjs";
-import { beforeAfterText, reportEnabled, writeReport } from "./report.mjs";
-import { readCredentials, resolveKey, runLogin, runLogout, runWhoami } from "./auth.mjs";
-
-const args = process.argv.slice(2);
-
-// Subcommands and meta flags are handled before anything that needs an API key
-// or input text. `altalandi update` checks for a newer CLI and skill and asks
-// before changing anything.
-let handled = false;
-if (args[0] === "update") {
-  handled = true;
-  const { runUpdate } = await import("./update.mjs");
-  const rest = args.slice(1);
-  if (rest.includes("-h") || rest.includes("--help")) { updateHelp(); process.exit(0); }
-  // exitCode, never process.exit(): the registry request can leave a socket
-  // mid-close, and exiting then aborts Node on Windows with a libuv assertion
-  // (UV_HANDLE_CLOSING). The refine path below exits the same way for the
-  // same reason.
-  process.exitCode = await runUpdate({
-    check: rest.includes("--check"),
-    yes: rest.includes("--yes") || rest.includes("-y"),
-    skillOnly: rest.includes("--skill-only"),
-  });
-}
-if (!handled && ["login", "setup", "logout", "whoami"].includes(args[0])) {
-  handled = true;
-  const rest = args.slice(1);
-  const flag = (name) => { const i = rest.indexOf(name); return i >= 0 ? rest[i + 1] : undefined; };
-  if (args[0] === "login" || args[0] === "setup") {
-    process.exitCode = await runLogin({
-      noBrowser: rest.includes("--no-browser"),
-      noSkill: rest.includes("--no-skill"),
-      baseUrl: flag("--base-url"),
-    });
-  } else if (args[0] === "logout") {
-    process.exitCode = await runLogout();
-  } else {
-    process.exitCode = await runWhoami({ json: rest.includes("--json"), baseUrl: flag("--base-url") });
-  }
-}
-if (!handled && (args.includes("-v") || args.includes("--version"))) {
-  const { currentVersion } = await import("./update.mjs");
-  console.log(await currentVersion());
-  process.exit(0);
-}
-
-function updateHelp() {
-  console.log(`altalandi update — check for a newer version and update if you agree
-
-Usage:
-  altalandi update            check, then ask before updating the CLI and the /altalandi skill
-  altalandi update --check    only report; never change anything
-  altalandi update --yes      update without asking (for scripts that already have consent)
-
-Nothing changes without consent. Without a terminal to ask in (agents, CI,
-pipes) and without --yes, it only reports what is available.
-
-Exit codes: 0 up to date or updated · 10 an update is available but was not
-applied · 1 the check or the update failed.`);
-}
-
-if (!handled) {
-const opts = { domain: "general", register: "neutral", json: false, fast: false, diff: false, report: undefined };
-const positional = [];
-for (let i = 0; i < args.length; i++) {
-  const a = args[i];
-  if (a === "-h" || a === "--help") { help(); process.exit(0); }
-  else if (a === "--json") opts.json = true;
-  else if (a === "--fast") opts.fast = true;
-  else if (a === "--domain") opts.domain = args[++i];
-  else if (a === "--register") opts.register = args[++i];
-  else if (a === "--base-url") opts.baseUrl = args[++i];
-  else if (a === "--key") opts.key = args[++i];
-  else if (a === "--file") opts.file = args[++i];
-  else if (a === "--diff") opts.diff = true;
-  else if (a === "--report") opts.report = true;
-  else if (a === "--report-dir") { opts.report = true; opts.reportDir = args[++i]; }
-  else positional.push(a);
-}
-
-function help() {
-  console.log(`altalandi — native Icelandic from your terminal
-
-Usage:
-  altalandi login                       connect this computer to your account (once)
-  altalandi "text to refine"
-  altalandi --file draft.txt            read the text from a file (best for agents)
-  echo "text" | altalandi
-  altalandi --domain marketing --register warm "text"
-
-Commands:
-  altalandi login      open altalandi.is, sign in or sign up, approve; stores the key
-                       and installs the Claude Code skill (--no-skill, --no-browser)
-  altalandi whoami     show the account and balance behind the stored key
-  altalandi logout     forget the stored key on this computer
-  altalandi update     check for a newer version and update if you agree
-  altalandi --version  print the installed version
-
-Options:
-  --domain     general | marketing | data-analysis | childrens-fiction  (default general)
-  --register   formal | neutral | warm  (default neutral)
-  --fast       no polish, no nativeness score, no meaning gate — normally one writer call
-               (structured input can still add a structure-preserving retry)
-  --json       print the full JSON response
-  --diff       show the text before and after, and every change with its reason (stderr)
-  --report     also write a Markdown report (input, output, changes, reasons, verdict)
-               to ./altalandi-reports/  (or --report-dir <dir>; ALTALANDI_REPORT=1 turns it on)
-  --file       read the text from a UTF-8 file instead of an argument
-  --base-url   API base  (default $ALTALANDI_BASE_URL or https://altalandi.is/api)
-
-stdout = refined text; stderr = nativeness / meaning / warnings / diff.
-Without --fast, false/null meaning verification exits 3 after printing the response.`);
-}
-
-function readStdin() {
-  return new Promise((resolve) => {
-    if (process.stdin.isTTY) return resolve("");
-    let d = "";
-    process.stdin.setEncoding("utf8");
-    process.stdin.on("data", (c) => (d += c));
-    process.stdin.on("end", () => resolve(d));
-  });
-}
-
-const stored = readCredentials();
-const baseUrl = (opts.baseUrl || process.env.ALTALANDI_BASE_URL || stored?.baseUrl || "https://altalandi.is/api").replace(/\/$/, "");
-const { key } = resolveKey({ flag: opts.key });
-
-if (opts.key) {
-  console.error("⚠ --key is deprecated because command arguments can leak through shell history/process listings; load ALTALANDI_API_KEY instead.");
-}
-
-let text = positional.join(" ").trim();
-if (opts.file) {
-  const { readFile } = await import("node:fs/promises");
-  try { text = (await readFile(opts.file, "utf8")).replace(/^/, "").trim(); }
-  catch (e) { console.error(`Could not read ${opts.file}: ${e.message}`); process.exit(2); }
-}
-if (!text) text = (await readStdin()).trim();
-if (!text) { console.error("No input. Pass text as an argument or pipe via stdin.  (altalandi --help)"); process.exit(2); }
-if (!key) { console.error("Not logged in. Run once:  npx altalandi login   (or set ALTALANDI_API_KEY)"); process.exit(2); }
-
-const requestOptions = {
-  apiKey: key,
-  baseUrl,
-  domain: opts.domain,
-  register: opts.register,
-};
-// --fast disables every optional quality/verification pass. The writer can
-// still retry once when it drops document structure, as documented in --help.
-// Name every switch explicitly so a future server-default change cannot make
-// this client silently slower.
-if (opts.fast) {
-  requestOptions.preserveMeaning = false;
-  requestOptions.scoreNativeness = false;
-  requestOptions.onlyImprove = false;
-  requestOptions.polishPass = false;
-  requestOptions.scoring = "none";
-}
-
-try {
-  // refine() owns a single 300-second AbortController deadline across fetch
-  // and response-body parsing, matching the hosted package API.
-  const data = await refine(text, requestOptions);
-  const verificationFailed = !opts.fast && data.meaningPreserved !== true;
-
-  if (opts.json) {
-    process.stdout.write(JSON.stringify(data, null, 2) + "\n");
-    if (verificationFailed) {
-      console.error("Meaning verification did not pass; JSON was printed, exiting with status 3.");
-    }
-  } else {
-    process.stdout.write(data.output + "\n");
-    const q = data.quality || {};
-    const meta = [];
-    if (q.nativenessScore != null) meta.push(`nativeness ${q.nativenessScore}/100`);
-    if (data.meaningPreserved === false) meta.push("⚠ MEANING DRIFT — returned the original");
-    else if (data.meaningPreserved === true) meta.push("meaning preserved");
-    else if (opts.fast) meta.push("meaning check skipped (--fast)");
-    else meta.push("⚠ MEANING UNVERIFIED — review before use");
-    if (meta.length) console.error("· " + meta.join(" · "));
-    for (const warning of Array.isArray(data.warnings) ? data.warnings : []) {
-      console.error(`⚠ ${warning}`);
-    }
-    if (opts.diff || process.env.ALTALANDI_DIFF === "1") {
-      console.error("\n" + beforeAfterText(text, data, { color: Boolean(process.stderr.isTTY) && !process.env.NO_COLOR }));
-    } else {
-      for (const d of data.diffs || []) console.error(`  − ${d.before}\n  + ${d.after}  (${d.reason})`);
-    }
-  }
-
-  if (reportEnabled(opts.report)) {
-    try {
-      const path = await writeReport(text, data, { domain: opts.domain, register: opts.register }, opts.reportDir);
-      console.error(`Skýrsla: ${path}`);
-    } catch (e) {
-      console.error(`Could not write the report: ${e.message}`);
-    }
-  }
-
-  // stdout/JSON is intentionally written first so callers can inspect the
-  // server response, but guarded automation must not accept null/false as a
-  // verified success. --fast is the explicit opt-out from this contract.
-  if (verificationFailed) process.exitCode = 3;
-} catch (e) {
-  console.error("Request failed:", e.message);
-  if (e.status === 402) console.error("→ Add credit at https://altalandi.is/portal (automatic top-up is available there).");
-  if (e.status === 401) console.error("→ The key is invalid or revoked. Run:  npx altalandi login");
-  process.exit(e.status === 402 ? 4 : 1);
-}
-}
+#!/usr/bin/env node
+// altalandi — turn English or stiff/AI Icelandic into native Icelandic from
+// your terminal. Zero dependencies (Node >= 18 has global fetch).
+//
+//   npx altalandi login                 # once: connects this computer to your account
+//   altalandi "Make sure to reach out to us today."
+//   echo "some text" | altalandi --domain marketing
+//
+// stdout = the refined text (so you can pipe it); stderr = nativeness score,
+// meaning verdict, API warnings, and the diff.
+
+import { refine } from "./client.mjs";
+import { beforeAfterText, costLines, outcomeOf, reportEnabled, reviewMarkdown, writeReport } from "./report.mjs";
+import { readCredentials, resolveKey, runLogin, runLogout, runWhoami } from "./auth.mjs";
+
+const args = process.argv.slice(2);
+
+// Subcommands and meta flags are handled before anything that needs an API key
+// or input text. `altalandi update` checks for a newer CLI and skill and asks
+// before changing anything.
+let handled = false;
+if (args[0] === "update") {
+  handled = true;
+  const { runUpdate } = await import("./update.mjs");
+  const rest = args.slice(1);
+  if (rest.includes("-h") || rest.includes("--help")) { updateHelp(); process.exit(0); }
+  // exitCode, never process.exit(): the registry request can leave a socket
+  // mid-close, and exiting then aborts Node on Windows with a libuv assertion
+  // (UV_HANDLE_CLOSING). The refine path below exits the same way for the
+  // same reason.
+  process.exitCode = await runUpdate({
+    check: rest.includes("--check"),
+    yes: rest.includes("--yes") || rest.includes("-y"),
+    skillOnly: rest.includes("--skill-only"),
+  });
+}
+if (!handled && ["login", "setup", "logout", "whoami"].includes(args[0])) {
+  handled = true;
+  const rest = args.slice(1);
+  const flag = (name) => { const i = rest.indexOf(name); return i >= 0 ? rest[i + 1] : undefined; };
+  if (args[0] === "login" || args[0] === "setup") {
+    process.exitCode = await runLogin({
+      noBrowser: rest.includes("--no-browser"),
+      noSkill: rest.includes("--no-skill"),
+      baseUrl: flag("--base-url"),
+    });
+  } else if (args[0] === "logout") {
+    process.exitCode = await runLogout();
+  } else {
+    process.exitCode = await runWhoami({ json: rest.includes("--json"), baseUrl: flag("--base-url") });
+  }
+}
+if (!handled && (args.includes("-v") || args.includes("--version"))) {
+  const { currentVersion } = await import("./update.mjs");
+  console.log(await currentVersion());
+  process.exit(0);
+}
+
+function updateHelp() {
+  console.log(`altalandi update — check for a newer version and update if you agree
+
+Usage:
+  altalandi update            check, then ask before updating the CLI and the /altalandi skill
+  altalandi update --check    only report; never change anything
+  altalandi update --yes      update without asking (for scripts that already have consent)
+
+Nothing changes without consent. Without a terminal to ask in (agents, CI,
+pipes) and without --yes, it only reports what is available.
+
+Exit codes: 0 up to date or updated · 10 an update is available but was not
+applied · 1 the check or the update failed.`);
+}
+
+if (!handled) {
+const opts = { domain: "general", register: "neutral", json: false, fast: false, diff: false, review: false, report: undefined };
+const positional = [];
+for (let i = 0; i < args.length; i++) {
+  const a = args[i];
+  if (a === "-h" || a === "--help") { help(); process.exit(0); }
+  else if (a === "--json") opts.json = true;
+  else if (a === "--fast") opts.fast = true;
+  else if (a === "--domain") opts.domain = args[++i];
+  else if (a === "--register") opts.register = args[++i];
+  else if (a === "--base-url") opts.baseUrl = args[++i];
+  else if (a === "--key") opts.key = args[++i];
+  else if (a === "--file") opts.file = args[++i];
+  else if (a === "--diff") opts.diff = true;
+  else if (a === "--review") opts.review = true;
+  else if (a === "--out") opts.out = args[++i];
+  else if (a === "--no-store") opts.noStore = true;
+  else if (a === "--report") opts.report = true;
+  else if (a === "--report-dir") { opts.report = true; opts.reportDir = args[++i]; }
+  else positional.push(a);
+}
+
+function help() {
+  console.log(`altalandi — native Icelandic from your terminal
+
+Usage:
+  altalandi login                       connect this computer to your account (once)
+  altalandi "text to refine"
+  altalandi --file draft.txt            read the text from a file
+  altalandi --review --file in.txt --out out.txt
+                                        for agents: one block to show as it is
+  echo "text" | altalandi
+  altalandi --domain marketing --register warm "text"
+
+Commands:
+  altalandi login      open altalandi.is, sign in or sign up, approve; stores the key
+                       and installs the Claude Code skill (--no-skill, --no-browser)
+  altalandi whoami     show the account and balance behind the stored key
+  altalandi logout     forget the stored key on this computer
+  altalandi update     check for a newer version and update if you agree
+  altalandi --version  print the installed version
+
+Options:
+  --domain     general | marketing | data-analysis | childrens-fiction  (default general)
+  --register   formal | neutral | warm  (default neutral)
+  --fast       no polish, no nativeness score, no meaning gate — normally one writer call
+               (structured input can still add a structure-preserving retry)
+  --json       print the full JSON response
+  --diff       show the text before and after, and every change with its reason (stderr)
+  --review     print one Markdown block on stdout to show the user as it is: verdict,
+               before, after, every change with its reason, the cost and the balance
+  --out        write the refined text to this UTF-8 file (use with --review)
+  --no-store   don't keep this text: free use is otherwise kept, scrubbed of personal
+               data, to improve the service (paid use is kept only with consent)
+  --report     also write a Markdown report (input, output, changes, reasons, verdict)
+               to ./altalandi-reports/  (or --report-dir <dir>; ALTALANDI_REPORT=1 turns it on)
+  --file       read the text from a UTF-8 file instead of an argument
+  --base-url   API base  (default $ALTALANDI_BASE_URL or https://altalandi.is/api)
+
+stdout = refined text; stderr = nativeness / meaning / warnings / diff.
+Without --fast, false/null meaning verification exits 3 after printing the response.`);
+}
+
+function readStdin() {
+  return new Promise((resolve) => {
+    if (process.stdin.isTTY) return resolve("");
+    let d = "";
+    process.stdin.setEncoding("utf8");
+    process.stdin.on("data", (c) => (d += c));
+    process.stdin.on("end", () => resolve(d));
+  });
+}
+
+const stored = readCredentials();
+const baseUrl = (opts.baseUrl || process.env.ALTALANDI_BASE_URL || stored?.baseUrl || "https://altalandi.is/api").replace(/\/$/, "");
+const { key } = resolveKey({ flag: opts.key });
+
+if (opts.key) {
+  console.error("⚠ --key is deprecated because command arguments can leak through shell history/process listings; load ALTALANDI_API_KEY instead.");
+}
+
+let text = positional.join(" ").trim();
+if (opts.file) {
+  const { readFile } = await import("node:fs/promises");
+  try { text = (await readFile(opts.file, "utf8")).replace(/^/, "").trim(); }
+  catch (e) { console.error(`Could not read ${opts.file}: ${e.message}`); process.exit(2); }
+}
+if (!text) text = (await readStdin()).trim();
+if (!text) { console.error("No input. Pass text as an argument or pipe via stdin.  (altalandi --help)"); process.exit(2); }
+if (!key) { console.error("Not logged in. Run once:  npx altalandi login   (or set ALTALANDI_API_KEY)"); process.exit(2); }
+
+const requestOptions = {
+  apiKey: key,
+  baseUrl,
+  domain: opts.domain,
+  register: opts.register,
+  ...(opts.noStore ? { contribute: false } : {}),
+};
+// --fast disables every optional quality/verification pass. The writer can
+// still retry once when it drops document structure, as documented in --help.
+// Name every switch explicitly so a future server-default change cannot make
+// this client silently slower.
+if (opts.fast) {
+  requestOptions.preserveMeaning = false;
+  requestOptions.scoreNativeness = false;
+  requestOptions.onlyImprove = false;
+  requestOptions.polishPass = false;
+  requestOptions.scoring = "none";
+}
+
+// /v1/me before and after the call gives the cost and the balance for the
+// review block. Best-effort: a failed lookup only blanks those lines.
+async function me() {
+  try {
+    const res = await fetch(`${baseUrl}/v1/me`, {
+      headers: { authorization: `Bearer ${key}`, accept: "application/json" },
+      signal: AbortSignal.timeout(15_000),
+    });
+    return res.ok ? await res.json() : null;
+  } catch { return null; }
+}
+const meBefore = opts.review ? await me() : null;
+
+try {
+  // refine() owns a single 300-second AbortController deadline across fetch
+  // and response-body parsing, matching the hosted package API.
+  const data = await refine(text, requestOptions);
+  // --review exits on the outcome the block states: a vetoed rewrite returns
+  // the original with meaningPreserved true, and must not read as a success.
+  const verificationFailed = opts.review
+    ? ["refused", "unverified"].includes(outcomeOf(data)) && !(opts.fast && outcomeOf(data) === "unverified")
+    : !opts.fast && data.meaningPreserved !== true;
+
+  if (opts.out) {
+    const { writeFile } = await import("node:fs/promises");
+    try { await writeFile(opts.out, String(data.output ?? "") + "\n", "utf8"); }
+    catch (e) { console.error(`Could not write ${opts.out}: ${e.message}`); process.exitCode = 1; }
+  }
+
+  if (opts.review) {
+    const meAfter = await me();
+    // Without --out the block is the only copy of a paid result: never shorten it.
+    process.stdout.write(reviewMarkdown(text, data, {
+      before: meBefore, after: meAfter, fullTextAt: opts.out || "", maxChars: opts.out ? 1500 : Infinity,
+    }));
+  } else if (opts.json) {
+    process.stdout.write(JSON.stringify(data, null, 2) + "\n");
+    if (verificationFailed) {
+      console.error("Meaning verification did not pass; JSON was printed, exiting with status 3.");
+    }
+  } else {
+    process.stdout.write(data.output + "\n");
+    const q = data.quality || {};
+    const meta = [];
+    if (q.nativenessScore != null) meta.push(`nativeness ${q.nativenessScore}/100`);
+    if (data.meaningPreserved === false) meta.push("⚠ MEANING DRIFT — returned the original");
+    else if (data.meaningPreserved === true) meta.push("meaning preserved");
+    else if (opts.fast) meta.push("meaning check skipped (--fast)");
+    else meta.push("⚠ MEANING UNVERIFIED — review before use");
+    if (meta.length) console.error("· " + meta.join(" · "));
+    for (const warning of Array.isArray(data.warnings) ? data.warnings : []) {
+      console.error(`⚠ ${warning}`);
+    }
+    if (opts.diff || process.env.ALTALANDI_DIFF === "1") {
+      console.error("\n" + beforeAfterText(text, data, { color: Boolean(process.stderr.isTTY) && !process.env.NO_COLOR }));
+    } else {
+      for (const d of data.diffs || []) console.error(`  − ${d.before}\n  + ${d.after}  (${d.reason})`);
+    }
+  }
+
+  if (reportEnabled(opts.report)) {
+    try {
+      const path = await writeReport(text, data, { domain: opts.domain, register: opts.register }, opts.reportDir);
+      console.error(`Skýrsla: ${path}`);
+    } catch (e) {
+      console.error(`Could not write the report: ${e.message}`);
+    }
+  }
+
+  // stdout/JSON is intentionally written first so callers can inspect the
+  // server response, but guarded automation must not accept null/false as a
+  // verified success. --fast is the explicit opt-out from this contract.
+  if (verificationFailed) process.exitCode = 3;
+} catch (e) {
+  if (opts.review) {
+    // The block still comes out, so the user sees why and what is left.
+    const head = e.status === 402 ? "Ekki næg inneign fyrir þetta kall"
+      : e.status === 429 ? "Of mörg köll í einu eða á mínútu; reyndu aftur eftir smá stund"
+      : e.status === 401 ? "Lykillinn er ógildur eða afturkallaður (`npx altalandi login`)"
+      : `Kallið mistókst: ${e.message}`;
+    const lines = [`**Altalandi:** ${head}`, "", "Textanum var ekki breytt.", "", "**Kostnaður**",
+      "- Þetta kall: 0 kr.", ...costLines({}, null, meBefore).slice(1)];
+    if (e.status === 402 && !lines.some((l) => l.includes("/portal"))) lines.push("- Bæta við inneign: https://altalandi.is/portal");
+    process.stdout.write(lines.join("\n") + "\n");
+  }
+  console.error("Request failed:", e.message);
+  if (e.status === 402) console.error("→ Add credit at https://altalandi.is/portal (automatic top-up is available there).");
+  if (e.status === 401) console.error("→ The key is invalid or revoked. Run:  npx altalandi login");
+  process.exit(e.status === 402 ? 4 : 1);
+}
+}