humanish 0.115.0 → 0.116.0

package/dist/keys/key-status.d.ts

@@ -10,6 +10,8 @@ export declare function keyStatus(args: {
 }): Promise<KeyStatusRow[]>;
 /** Names in the user store that the status does not list, such as ANTHROPIC_API_KEY. */
 export declare function otherStoredKeys(env: NodeJS.ProcessEnv, deps?: KeyResolutionDeps): string[];
+/** The line `humanish keys` prints for one key: what it is for, and its source or how to add it. */
+export declare function keyStatusLine(row: KeyStatusRow): string;
 export declare function formatKeyStatus(rows: readonly KeyStatusRow[], otherStored?: readonly string[]): string;
 interface MissingKeysOutcome {
     stored: string[];

package/dist/keys/key-status.js

@@ -1,33 +1,26 @@
 // `humanish keys`: which provider keys are set and where each comes from, through the same chain a
 // live command resolves. Never a value.
 import { cli } from "../cli/invocation.js";
-import { listUserKeys, probeKeySources, setUserKey, } from "./key-resolution.js";
-/**
- * The keys a person sets for humanish, in the order the status lists them and `keys set` asks for
- * them. ANTHROPIC_API_KEY is left out: a Claude Code participant runs on its own login and never
- * receives it. CODEX_API_KEY is an alternative spelling of the OpenAI key for terminal studies.
- */
-const STATUS_KEYS = [
-    { name: "E2B_API_KEY", use: "hosted desktops" },
-    { name: "OPENAI_API_KEY", use: "participant model and analysis" },
-    { name: "GH_TOKEN", use: "private repository subjects" },
-    { name: "AGENTMAIL_API_KEY", use: "email in studies" },
-];
+import { LISTED_KEYS, listUserKeys, probeKeySources, setUserKey, } from "./key-resolution.js";
 export async function keyStatus(args) {
-    const probes = await probeKeySources(STATUS_KEYS.map((key) => key.name), {
+    const probes = await probeKeySources(LISTED_KEYS.map((key) => key.name), {
         cwd: args.cwd,
         env: args.env,
         ...(args.deps === undefined ? {} : { deps: args.deps }),
     });
-    return probes.map((probe, index) => ({ ...probe, use: STATUS_KEYS[index].use }));
+    return probes.map((probe, index) => ({ ...probe, use: LISTED_KEYS[index].use }));
 }
 /** Names in the user store that the status does not list, such as ANTHROPIC_API_KEY. */
 export function otherStoredKeys(env, deps = {}) {
-    const listed = new Set(STATUS_KEYS.map((key) => key.name));
+    const listed = new Set(LISTED_KEYS.map((key) => key.name));
     return listUserKeys(env, deps).filter((name) => !listed.has(name));
 }
+/** The line `humanish keys` prints for one key: what it is for, and its source or how to add it. */
+export function keyStatusLine(row) {
+    return `${row.name} (${row.use}): ${row.source === null ? `missing; ${row.hint}` : `set, from ${row.source}`}`;
+}
 export function formatKeyStatus(rows, otherStored = []) {
-    const lines = rows.map((row) => `${row.name} (${row.use}): ${row.source === null ? `missing; ${row.hint}` : `set, from ${row.source}`}`);
+    const lines = rows.map(keyStatusLine);
     if (otherStored.length > 0)
         lines.push(`Also in the user store: ${otherStored.join(", ")}. humanish does not use ${otherStored.length === 1 ? "it" : "them"} today.`);
     const missing = rows.some((row) => row.source === null);

package/dist/observer/pinned-files.js

@@ -5,7 +5,7 @@ import { createHash } from "node:crypto";
 import { constants as fsConstants } from "node:fs";
 import { lstat, open, realpath } from "node:fs/promises";
 import path from "node:path";
-import { readOpenedAtMost } from "../run/evidence-files.js";
+import { readOpenedAtMost } from "../run/contained-output.js";
 import { isPathInside, isSafeRunIdSegment } from "../run/paths.js";
 /**
  * The file's bytes, or null when it cannot be read under the root's checks. With `maxBytes`, a

package/dist/observer/render.js

@@ -11,7 +11,7 @@ import { projectShareCheckedAnalysis } from "../analysis/sharing.js";
 import { loadAnalysis } from "../analysis/load.js";
 import { physicalCwdOf, runIdOf, bindExistingRunArtifactPaths, isSafeRunIdSegment, resolveLatestRunDirectory, validatePreparedRunArtifactPaths, } from "../run/paths.js";
 import { writeContainedOutputFile } from "../run/contained-output.js";
-import { loadRunBundlePrepared, readRunJsonIfExists } from "../run/locate.js";
+import { loadRunBundlePrepared, readRunJsonIfExists, runJsonValue } from "../run/locate.js";
 import { readRunNotes } from "../run/note-files.js";
 import { RUN_STATUS_FILE } from "../run/status.js";
 import { verifyRunPrepared } from "../verify/verify.js";
@@ -106,8 +106,9 @@ export async function renderObserver(cwdInput, runInput, options = {}) {
     };
     // A run.json without an outcome is in progress, interrupted, or older than the field: its
     // status.json says which, and holds an older run's ok.
+    // A status.json it refuses says nothing, as a missing one does: the bundle's own facts show.
     const statusRecord = loaded.bundle.outcome === undefined
-        ? await readRunJsonIfExists(preparedRunPaths, RUN_STATUS_FILE)
+        ? runJsonValue(await readRunJsonIfExists(preparedRunPaths, RUN_STATUS_FILE))
         : undefined;
     const observerData = buildObserverData(loaded.bundle, undefined, statusRecord);
     observerData.publicSafety.share = {