npm - iteration-cli - Versions diffs - 0.14.4 → 0.16.0 - Mend

iteration-cli 0.14.4 → 0.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/dist/cli.js CHANGED Viewed

@@ -7,10 +7,9 @@ var __export = (target, all) => {
 // src/cli.ts
 import { spawnSync } from "node:child_process";
-import { promises as fs23 } from "node:fs";
-import os10 from "node:os";
-import path29 from "node:path";
-import { createInterface as createInterface2 } from "node:readline/promises";
+import { promises as fs24 } from "node:fs";
+import os11 from "node:os";
+import path30 from "node:path";
 import { parseArgs } from "node:util";
 // ../trace-vault/packages/cli/dist/index.js
@@ -1163,7 +1162,7 @@ function putProp(target, key, value) {
   else
     target[key] = value;
 }
-function mirrorShape(target, source, keys, wrap) {
+function mirrorShape(target, source, keys, wrap2) {
   const raw = sourceShape(source);
   for (const key of keys) {
     const desc = Object.getOwnPropertyDescriptor(raw, key);
@@ -1172,10 +1171,10 @@ function mirrorShape(target, source, keys, wrap) {
     if (desc.get) {
       deferProp(target, key, () => {
         const value = source._zod.def.shape[key];
-        return wrap ? wrap(value, key) : value;
+        return wrap2 ? wrap2(value, key) : value;
       });
     } else
-      putProp(target, key, wrap ? wrap(desc.value, key) : desc.value);
+      putProp(target, key, wrap2 ? wrap2(desc.value, key) : desc.value);
   }
 }
 function mirrorProps(target, source) {
@@ -2015,9 +2014,9 @@ function formatError(error22, mapper = (issue22) => issue22.message) {
           let i = 0;
           while (i < fullpath.length) {
             const el = fullpath[i];
-            const terminal = i === fullpath.length - 1;
+            const terminal2 = i === fullpath.length - 1;
             if (el === "_errors") {
-              if (terminal)
+              if (terminal2)
                 curr._errors.push(mapper(issue22));
               i++;
               continue;
@@ -2031,7 +2030,7 @@ function formatError(error22, mapper = (issue22) => issue22.message) {
               });
             }
             const node22 = curr[el];
-            if (terminal) {
+            if (terminal2) {
               node22._errors.push(mapper(issue22));
             }
             curr = node22;
@@ -7890,9 +7889,9 @@ var ClaudeAccountIndex = class {
   add(map, session, id, record32) {
     if (id === null) return;
     const key = this.key(session, id);
-    const rows = map.get(key) ?? [];
-    rows.push(record32);
-    map.set(key, rows);
+    const rows2 = map.get(key) ?? [];
+    rows2.push(record32);
+    map.set(key, rows2);
   }
   get(map, session, id) {
     return id ? map.get(this.key(session, id)) ?? [] : [];
@@ -7968,20 +7967,25 @@ var exportSchema = object({
 });
 var uuid3 = uuid2();
 var identifier2 = string2().regex(/^[A-Za-z0-9_:./-]{1,255}$/);
+function consoleWriter(line, level) {
+  if (level === "info") console.info(line);
+  else console.error(line);
+}
 var loggingContext = () => ({});
-function configureCollectorLogging(context) {
-  loggingContext = context;
+var logWriter = consoleWriter;
+function configureCollectorLogging(context2, write = consoleWriter) {
+  loggingContext = context2;
+  logWriter = write;
 }
 function writeLog(line, level) {
-  if (level === "info") console.info(line);
-  else console.error(line);
+  logWriter(line, level);
 }
-function createLogger(context, write = writeLog) {
+function createLogger(context2, write = writeLog) {
   return (entry) => {
     write(
       JSON.stringify({
         ...entry,
-        ...context,
+        ...context2,
         at: (/* @__PURE__ */ new Date()).toISOString(),
         pid: process.pid,
         ...loggingContext()
@@ -8380,11 +8384,11 @@ var SecretLintRule = class {
   ruleReportHandle;
   ruleCreator;
   descriptorRule;
-  constructor({ descriptorRule, context }) {
+  constructor({ descriptorRule, context: context2 }) {
     this.descriptorRule = descriptorRule;
     this.ruleCreator = descriptorRule.rule;
     const ruleCreatorOptions = descriptorRule.options || {};
-    this.ruleReportHandle = this.ruleCreator.create(context, ruleCreatorOptions);
+    this.ruleReportHandle = this.ruleCreator.create(context2, ruleCreatorOptions);
   }
   allowMessageIds() {
     if (!this.descriptorRule.allowMessageIds) {
@@ -8552,7 +8556,7 @@ var createRunningEvents = () => {
     runLint(options) {
       return contextEvents.emit(LINT_HANDLE, options);
     },
-    registerRule({ descriptorRule, context }) {
+    registerRule({ descriptorRule, context: context2 }) {
       if (registerSet.has(descriptorRule.id)) {
         throw new Error(`rule.id:${descriptorRule.id} is already registered.
@@ -8562,7 +8566,7 @@ Duplicated rule.id is something wrong in .secretlintrc.
       registerSet.add(descriptorRule.id);
       const rule = new SecretLintRule({
         descriptorRule,
-        context
+        context: context2
       });
       rules2.push(rule);
       contextEvents.on(LINT_HANDLE, async ({ sourceCode }) => {
@@ -8579,9 +8583,9 @@ Duplicated rule.id is something wrong in .secretlintrc.
         });
       });
     },
-    registerRulePreset({ descriptorRulePreset, context }) {
+    registerRulePreset({ descriptorRulePreset, context: context2 }) {
       const rulePresetCreatorOptions = descriptorRulePreset.options || [];
-      descriptorRulePreset.rule.create(context, rulePresetCreatorOptions);
+      descriptorRulePreset.rule.create(context2, rulePresetCreatorOptions);
     },
     isRegistered(ruleId) {
       return registerSet.has(ruleId);
@@ -8604,7 +8608,7 @@ var createRulePresetContext = ({ configRulePreset, sourceCode, runningEvents, co
       const descriptorRuleDisabled = descriptorRule ? descriptorRule.disabled : void 0;
       const descriptorRuleSeverity = descriptorRule ? descriptorRule.severity : void 0;
       const descriptorAllowMessageIds = descriptorRule ? descriptorRule.allowMessageIds : void 0;
-      const context = createRuleContext({
+      const context2 = createRuleContext({
         // rule id is a single rule in a preset
         ruleId: rule.meta.id,
         // parent rule id is rule preset id
@@ -8631,7 +8635,7 @@ var createRulePresetContext = ({ configRulePreset, sourceCode, runningEvents, co
           allowMessageIds: descriptorAllowMessageIds,
           severity: descriptorRuleSeverity
         },
-        context
+        context: context2
       });
     }
   };
@@ -8841,7 +8845,7 @@ var registerRule = ({ sourceCode, config: config22, descriptorRule, contextEvent
   debug("registerRule %s", ruleId);
   const sharedOptionsWithDefault = config22.sharedOptions ?? {};
   if (isRulePreset(descriptorRule)) {
-    const context = createRulePresetContext({
+    const context2 = createRulePresetContext({
       configRulePreset: descriptorRule,
       sourceCode,
       contextEvents,
@@ -8851,11 +8855,11 @@ var registerRule = ({ sourceCode, config: config22, descriptorRule, contextEvent
     });
     runningEvents.registerRulePreset({
       descriptorRulePreset: descriptorRule,
-      context
+      context: context2
     });
     return;
   } else if (isRule(descriptorRule)) {
-    const context = createRuleContext({
+    const context2 = createRuleContext({
       ruleId,
       severity: descriptorRule.severity,
       meta: descriptorRule.rule.meta,
@@ -8866,7 +8870,7 @@ var registerRule = ({ sourceCode, config: config22, descriptorRule, contextEvent
     });
     runningEvents.registerRule({
       descriptorRule,
-      context
+      context: context2
     });
     return;
   }
@@ -10569,7 +10573,7 @@ var messages$r = {
     ja: (props) => `AWS Access Key Id: ${props.ID} \u304C\u307F\u3064\u304B\u308A\u307E\u3057\u305F`
   }
 };
-var reportAWSAccessKey = ({ t, source, context, options }) => {
+var reportAWSAccessKey = ({ t, source, context: context2, options }) => {
   const AWSAccessKeyIDPattern = /\b(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}\b/g;
   const results = source.content.matchAll(AWSAccessKeyIDPattern);
   for (const result of results) {
@@ -10583,7 +10587,7 @@ var reportAWSAccessKey = ({ t, source, context, options }) => {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("AWSAccessKeyID", {
         ID: match
       }),
@@ -10591,7 +10595,7 @@ var reportAWSAccessKey = ({ t, source, context, options }) => {
     });
   }
 };
-var reportAWSSecretAccessKey = ({ t, source, context, options }) => {
+var reportAWSSecretAccessKey = ({ t, source, context: context2, options }) => {
   const AWS = "(?:AWS|aws|Aws)?_?";
   const QUOTE = `["']?`;
   const CONNECT = "\\s*(?::|=>|=)\\s*";
@@ -10608,7 +10612,7 @@ var reportAWSSecretAccessKey = ({ t, source, context, options }) => {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("AWSSecretAccessKey", {
         KEY: match
       }),
@@ -10616,7 +10620,7 @@ var reportAWSSecretAccessKey = ({ t, source, context, options }) => {
     });
   }
 };
-var reportAWSAccountID = ({ t, source, context, options }) => {
+var reportAWSAccountID = ({ t, source, context: context2, options }) => {
   const AWS = "(AWS|aws|Aws)?_?";
   const QUOTE = `("|')?`;
   const CONNECT = "\\s*(:|=>|=)\\s*";
@@ -10630,7 +10634,7 @@ var reportAWSAccountID = ({ t, source, context, options }) => {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("AWSAccountID", {
         ID: match
       }),
@@ -10649,19 +10653,19 @@ var creator$s = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-aws/README.md"
     }
   },
-  create(context, options) {
+  create(context2, options) {
     const normalizedOptions = {
       allows: options.allows || [],
       enableIDScanRule: options.enableIDScanRule ?? false
     };
-    const t = context.createTranslator(messages$r);
+    const t = context2.createTranslator(messages$r);
     return {
       file(source) {
         if (normalizedOptions.enableIDScanRule) {
-          reportAWSAccessKey({ t, source, context, options: normalizedOptions });
-          reportAWSAccountID({ t, source, context, options: normalizedOptions });
+          reportAWSAccessKey({ t, source, context: context2, options: normalizedOptions });
+          reportAWSAccountID({ t, source, context: context2, options: normalizedOptions });
         }
-        reportAWSSecretAccessKey({ t, source, context, options: normalizedOptions });
+        reportAWSSecretAccessKey({ t, source, context: context2, options: normalizedOptions });
       }
     };
   }
@@ -10862,7 +10866,7 @@ async function verifyPkcs12Mac(pfxBytes, password) {
   }
 }
 var GCP_SERVICE_ACCOUNT_P12_PASSWORD = "notasecret";
-async function reportIfFoundPrivateKeyP12Format({ source, context, t }) {
+async function reportIfFoundPrivateKeyP12Format({ source, context: context2, t }) {
   if (!source.filePath) {
     return;
   }
@@ -10874,7 +10878,7 @@ async function reportIfFoundPrivateKeyP12Format({ source, context, t }) {
     if (!isGcpServiceAccountP12) {
       return;
     }
-    context.report({
+    context2.report({
       message: t("PrivateKeyP12", {
         FILE_NAME: path172.basename(source.filePath)
       }),
@@ -10893,7 +10897,7 @@ var messages$q = {
     ja: (props) => `GCP\u30B5\u30FC\u30D3\u30B9\u30A2\u30AB\u30A6\u30F3\u30C8\u306E\u79D8\u5BC6\u9375(json): ${props.FILE_NAME} \u304C\u307F\u3064\u304B\u308A\u307E\u3057\u305F`
   }
 };
-function reportIfFoundPrivateKeyJSONFormat({ source, context, t }) {
+function reportIfFoundPrivateKeyJSONFormat({ source, context: context2, t }) {
   try {
     const credentialObject = JSON.parse(source.content);
     const PRIVATE_KEY_PATTERN = /-----BEGIN\s?(DSA|RSA|EC|PGP|OPENSSH)?\s?PRIVATE KEY/gm;
@@ -10901,7 +10905,7 @@ function reportIfFoundPrivateKeyJSONFormat({ source, context, t }) {
     if (!isGCPServiceAccountPrivateKeyJSON) {
       return;
     }
-    context.report({
+    context2.report({
       message: t("PrivateKeyJSON", {
         FILE_NAME: source.filePath ? path3.basename(source.filePath) : ""
       }),
@@ -10921,17 +10925,17 @@ var creator$r = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-gcp/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$q);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$q);
     ({
       allows: options.allows || []
     });
     return {
       file(source) {
         if (source.ext === ".p12") {
-          return reportIfFoundPrivateKeyP12Format({ source, context, t });
+          return reportIfFoundPrivateKeyP12Format({ source, context: context2, t });
         } else if (source.ext === ".json") {
-          return reportIfFoundPrivateKeyJSONFormat({ source, context, t });
+          return reportIfFoundPrivateKeyJSONFormat({ source, context: context2, t });
         }
       }
     };
@@ -10951,7 +10955,7 @@ var messages$p = {
     ja: (props) => `npm access token: ${props.TOKEN} \u304C\u307F\u3064\u304B\u308A\u307E\u3057\u305F`
   }
 };
-function reportIfFoundXOauthGitHubToken({ source, options, context, t }) {
+function reportIfFoundXOauthGitHubToken({ source, options, context: context2, t }) {
   const XOAuthPattern = /https?:\/\/(.{1,256}):x-oauth-basic@github.com\//g;
   const results = source.content.matchAll(XOAuthPattern);
   for (const result of results) {
@@ -10962,7 +10966,7 @@ function reportIfFoundXOauthGitHubToken({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("PackageJSON_xOauthToken", {
         TOKEN: match
       }),
@@ -10970,7 +10974,7 @@ function reportIfFoundXOauthGitHubToken({ source, options, context, t }) {
     });
   }
 }
-function reportIfFound_AuthTokenInNpmrc({ source, options, context, t }) {
+function reportIfFound_AuthTokenInNpmrc({ source, options, context: context2, t }) {
   const AuthTokenPattern = /_authToken=([^$].*)/g;
   const results = source.content.matchAll(AuthTokenPattern);
   for (const result of results) {
@@ -10981,7 +10985,7 @@ function reportIfFound_AuthTokenInNpmrc({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("Npmrc_authToken", {
         TOKEN: match
       }),
@@ -10989,7 +10993,7 @@ function reportIfFound_AuthTokenInNpmrc({ source, options, context, t }) {
     });
   }
 }
-function reportIfFound_NPM_ACCESS_TOKEN({ source, options, context, t }) {
+function reportIfFound_NPM_ACCESS_TOKEN({ source, options, context: context2, t }) {
   const NPM_ACCESS_TOKEN_PATTERN = new RegExp("(?<!\\p{L})npm_[A-Za-z0-9_]{36}(?![A-Za-z0-9_])", "gu");
   const results = source.content.matchAll(NPM_ACCESS_TOKEN_PATTERN);
   for (const result of results) {
@@ -11000,7 +11004,7 @@ function reportIfFound_NPM_ACCESS_TOKEN({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("NPM_ACCESS_TOKEN", {
         TOKEN: match
       }),
@@ -11031,19 +11035,19 @@ var creator$q = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-npm/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$p);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$p);
     const normalizedOptions = {
       allows: options.allows || []
     };
     return {
       file(source) {
         if (isPackageFile(source.filePath)) {
-          reportIfFoundXOauthGitHubToken({ source, options: normalizedOptions, context, t });
+          reportIfFoundXOauthGitHubToken({ source, options: normalizedOptions, context: context2, t });
         } else if (isNpmrc(source.filePath)) {
-          reportIfFound_AuthTokenInNpmrc({ source, options: normalizedOptions, context, t });
+          reportIfFound_AuthTokenInNpmrc({ source, options: normalizedOptions, context: context2, t });
         }
-        reportIfFound_NPM_ACCESS_TOKEN({ source, options: normalizedOptions, context, t });
+        reportIfFound_NPM_ACCESS_TOKEN({ source, options: normalizedOptions, context: context2, t });
       }
     };
   }
@@ -11058,7 +11062,7 @@ var messages$o = {
     ja: (props) => `Slack\u306EIncoming Webhooks: ${props.TOKEN} \u304C\u307F\u3064\u304B\u308A\u307E\u3057\u305F`
   }
 };
-function reportIfFoundRawPrivateKey$1({ source, options, context, t }) {
+function reportIfFoundRawPrivateKey$1({ source, options, context: context2, t }) {
   const SLACK_TOKEN_PATTERN = /\b(?:xoxb|xoxp|xapp|xoxa|xoxo|xoxr)-(?:\d-)?(?:[a-zA-Z0-9]{1,40}-)+[a-zA-Z0-9]{1,40}\b/g;
   const results = source.content.matchAll(SLACK_TOKEN_PATTERN);
   for (const result of results) {
@@ -11069,7 +11073,7 @@ function reportIfFoundRawPrivateKey$1({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("SLACK_TOKEN", {
         TOKEN: match
       }),
@@ -11077,7 +11081,7 @@ function reportIfFoundRawPrivateKey$1({ source, options, context, t }) {
     });
   }
 }
-function reportIfFoundIncomingWebhook({ source, options, context, t }) {
+function reportIfFoundIncomingWebhook({ source, options, context: context2, t }) {
   const IncomingWebhooksPattern = /https:\/\/hooks\.slack\.com\/services\/T[a-zA-Z0-9]{1,40}\/B[a-zA-Z0-9]{1,40}\/[a-zA-Z0-9]{1,40}/gi;
   const results = source.content.matchAll(IncomingWebhooksPattern);
   for (const result of results) {
@@ -11088,7 +11092,7 @@ function reportIfFoundIncomingWebhook({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("IncomingWebhook", {
         URL: match
       }),
@@ -11107,15 +11111,15 @@ var creator$p = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-slack/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$o);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$o);
     const normalizedOptions = {
       allows: options.allows || []
     };
     return {
       file(source) {
-        reportIfFoundRawPrivateKey$1({ source, options: normalizedOptions, context, t });
-        reportIfFoundIncomingWebhook({ source, options: normalizedOptions, context, t });
+        reportIfFoundRawPrivateKey$1({ source, options: normalizedOptions, context: context2, t });
+        reportIfFoundIncomingWebhook({ source, options: normalizedOptions, context: context2, t });
       }
     };
   }
@@ -11180,7 +11184,7 @@ function isLikelyRealPassword(password) {
     return false;
   return true;
 }
-function reportIfFoundBasicAuth({ source, options, context, t }) {
+function reportIfFoundBasicAuth({ source, options, context: context2, t }) {
   const URL_PATTERN = /(?<protocol>(?:https?|ftp|ftps)):\/\/(?<user>[-a-zA-Z0-9_]{1,256}):(?<password>[-a-zA-Z0-9_]{1,256})@[-a-zA-Z0-9%._+~#=]{1,256}\.[a-zA-Z0-9()]{1,6}\b/g;
   const results = source.content.matchAll(URL_PATTERN);
   for (const result of results) {
@@ -11199,7 +11203,7 @@ function reportIfFoundBasicAuth({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("BasicAuth", {
         CREDENTIAL: match
       }),
@@ -11218,14 +11222,14 @@ var creator$o = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-basicauth/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$n);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$n);
     const normalizedOptions = {
       allows: options.allows || []
     };
     return {
       file(source) {
-        reportIfFoundBasicAuth({ source, options: normalizedOptions, context, t });
+        reportIfFoundBasicAuth({ source, options: normalizedOptions, context: context2, t });
       }
     };
   }
@@ -11247,8 +11251,8 @@ var creator$n = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-openai/README.md"
     }
   },
-  create(context) {
-    const t = context.createTranslator(messages$m);
+  create(context2) {
+    const t = context2.createTranslator(messages$m);
     return {
       file(source) {
         const pattern = /sk-(?:proj|svcacct|admin)-(?:[A-Za-z0-9_-]{74}|[A-Za-z0-9_-]{58})T3BlbkFJ(?:[A-Za-z0-9_-]{74}|[A-Za-z0-9_-]{58})\b|sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20}/g;
@@ -11257,7 +11261,7 @@ var creator$n = {
           const index = match.index ?? 0;
           const matchString = match[0] ?? "";
           const range = [index, index + matchString.length];
-          context.report({
+          context2.report({
             message: t("OPENAI_TOKEN", {
               TOKEN: matchString
             }),
@@ -11285,8 +11289,8 @@ var creator$m = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-anthropic/README.md"
     }
   },
-  create(context) {
-    const t = context.createTranslator(messages$l);
+  create(context2) {
+    const t = context2.createTranslator(messages$l);
     return {
       file(source) {
         const pattern = new RegExp("(?<!\\p{L})sk-ant-api0\\d-[A-Za-z0-9_-]{90,128}AA(?![A-Za-z0-9_-])", "gu");
@@ -11295,7 +11299,7 @@ var creator$m = {
           const index = match.index ?? 0;
           const matchString = match[0] ?? "";
           const range = [index, index + matchString.length];
-          context.report({
+          context2.report({
             message: t("ANTHROPIC_API_KEY", {
               KEY: matchString
             }),
@@ -11323,8 +11327,8 @@ var creator$l = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-groq/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$k);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$k);
     const normalizedOptions = {
       allows: options?.allows ?? []
     };
@@ -11340,7 +11344,7 @@ var creator$l = {
             continue;
           }
           const range = [index, index + matchString.length];
-          context.report({
+          context2.report({
             message: t("GROQ_API_KEY", {
               KEY: matchString
             }),
@@ -11368,8 +11372,8 @@ var creator$k = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-huggingface/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$j);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$j);
     const normalizedOptions = {
       allows: options?.allows ?? []
     };
@@ -11385,7 +11389,7 @@ var creator$k = {
             continue;
           }
           const range = [index, index + matchString.length];
-          context.report({
+          context2.report({
             message: t("HUGGINGFACE_USER_ACCESS_TOKEN", {
               TOKEN: matchString
             }),
@@ -11413,8 +11417,8 @@ var creator$j = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-linear/README.md"
     }
   },
-  create(context) {
-    const t = context.createTranslator(messages$i);
+  create(context2) {
+    const t = context2.createTranslator(messages$i);
     return {
       file(source) {
         const pattern = new RegExp("(?<!\\p{L})lin_api_[a-zA-Z0-9_]{32,128}(?![a-zA-Z0-9_])", "gu");
@@ -11423,7 +11427,7 @@ var creator$j = {
           const index = match.index ?? 0;
           const matchString = match[0] ?? "";
           const range = [index, index + matchString.length];
-          context.report({
+          context2.report({
             message: t("LINEAR_API_TOKEN", {
               ID: matchString
             }),
@@ -11440,7 +11444,7 @@ var messages$h = {
     ja: (props) => `Notion integration \u30C8\u30FC\u30AF\u30F3: ${props.TOKEN} \u304C\u307F\u3064\u304B\u308A\u307E\u3057\u305F`
   }
 };
-function reportIfFoundToken({ source, options, context, t }) {
+function reportIfFoundToken({ source, options, context: context2, t }) {
   const NOTION_INTEGRATION_TOKEN_PATTERN = new RegExp("(?<!\\p{L})ntn_[0-9]{11}[A-Za-z0-9]{35}(?![A-Za-z0-9])", "gu");
   const results = source.content.matchAll(NOTION_INTEGRATION_TOKEN_PATTERN);
   for (const result of results) {
@@ -11451,7 +11455,7 @@ function reportIfFoundToken({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("NOTION_INTEGRATION_TOKEN", {
         TOKEN: match
       }),
@@ -11470,14 +11474,14 @@ var creator$i = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-notion/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$h);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$h);
     const normalizedOptions = {
       allows: options.allows ?? []
     };
     return {
       file(source) {
-        reportIfFoundToken({ source, options: normalizedOptions, context, t });
+        reportIfFoundToken({ source, options: normalizedOptions, context: context2, t });
       }
     };
   }
@@ -11502,7 +11506,7 @@ function validateBase64KeyContent(base64Content) {
   }
   return true;
 }
-function reportIfFoundRawPrivateKey({ source, options, context, t }) {
+function reportIfFoundRawPrivateKey({ source, options, context: context2, t }) {
   const results = source.content.matchAll(PEM_CONTENT_PATTERN);
   for (const result of results) {
     const index = result.index || 0;
@@ -11517,7 +11521,7 @@ function reportIfFoundRawPrivateKey({ source, options, context, t }) {
     if (!validateBase64KeyContent(base64Content)) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("PrivateKey", {
         KEY: match
       }),
@@ -11536,14 +11540,14 @@ var creator$h = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-privatekey/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$g);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$g);
     const normalizedOptions = {
       allows: options.allows || []
     };
     return {
       file(source) {
-        reportIfFoundRawPrivateKey({ source, options: normalizedOptions, context, t });
+        reportIfFoundRawPrivateKey({ source, options: normalizedOptions, context: context2, t });
       }
     };
   }
@@ -11554,7 +11558,7 @@ var messages$f = {
     ja: (props) => `Sendgrid API\u30AD\u30FC\u304C\u898B\u3064\u304B\u308A\u307E\u3057\u305F\uFF1A ${props.KEY}`
   }
 };
-function reportIfFoundKey$3({ source, options, context, t }) {
+function reportIfFoundKey$3({ source, options, context: context2, t }) {
   const SENDGRID_KEY_PATTERN = new RegExp("(?<!\\p{L})SG\\.\\w{1,128}\\.\\w{1,128}([-_]?)\\w{1,128}(?!\\w)", "gu");
   const results = source.content.matchAll(SENDGRID_KEY_PATTERN);
   for (const result of results) {
@@ -11568,7 +11572,7 @@ function reportIfFoundKey$3({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("SENDGRID_KEY", {
         KEY: match
       }),
@@ -11587,14 +11591,14 @@ var creator$g = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-sendgrid/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$f);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$f);
     const normalizedOptions = {
       allows: options.allows || []
     };
     return {
       file(source) {
-        reportIfFoundKey$3({ source, options: normalizedOptions, context, t });
+        reportIfFoundKey$3({ source, options: normalizedOptions, context: context2, t });
       }
     };
   }
@@ -11605,7 +11609,7 @@ var messages$e = {
     ja: (props) => `Shopify API\u30AD\u30FC\u304C\u898B\u3064\u304B\u308A\u307E\u3057\u305F\uFF1A ${props.KEY}`
   }
 };
-function reportIfFoundKey$2({ source, options, context, t }) {
+function reportIfFoundKey$2({ source, options, context: context2, t }) {
   const SHOPIFY_KEY_PATTERN = new RegExp("(?<!\\p{L})(shppa|shpca|shpat|shpss)_[a-zA-Z0-9]{32,64}(?![a-zA-Z0-9])", "gu");
   const results = source.content.matchAll(SHOPIFY_KEY_PATTERN);
   for (const result of results) {
@@ -11616,7 +11620,7 @@ function reportIfFoundKey$2({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("SHOPIFY_KEY", {
         KEY: match
       }),
@@ -11635,14 +11639,14 @@ var creator$f = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-shopify/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$e);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$e);
     const normalizedOptions = {
       allows: options.allows || []
     };
     return {
       file(source) {
-        reportIfFoundKey$2({ source, options: normalizedOptions, context, t });
+        reportIfFoundKey$2({ source, options: normalizedOptions, context: context2, t });
       }
     };
   }
@@ -11672,7 +11676,7 @@ var messageIdMap$1 = {
   rk_test: "STRIPE_RESTRICTED_KEY_TEST"
 };
 var STRIPE_KEY_PATTERN = new RegExp("(?<!\\p{L})(?<prefix>sk_live|sk_test|rk_live|rk_test)_[a-zA-Z0-9]{24,99}(?![a-zA-Z0-9])", "gu");
-function reportIfFound$2({ source, options, context, t }) {
+function reportIfFound$2({ source, options, context: context2, t }) {
   const results = source.content.matchAll(STRIPE_KEY_PATTERN);
   for (const result of results) {
     const index = result.index ?? 0;
@@ -11686,7 +11690,7 @@ function reportIfFound$2({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t(messageIdMap$1[prefix], {
         KEY: match
       }),
@@ -11705,14 +11709,14 @@ var creator$e = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-stripe/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$d);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$d);
     const normalizedOptions = {
       allows: options.allows ?? []
     };
     return {
       file(source) {
-        reportIfFound$2({ source, options: normalizedOptions, context, t });
+        reportIfFound$2({ source, options: normalizedOptions, context: context2, t });
       }
     };
   }
@@ -11731,7 +11735,7 @@ var typeMap = /* @__PURE__ */ new Map([
   ["ghr", "refresh tokens"],
   ["github_pat", "fine-grained personal access tokens"]
 ]);
-function reportIfFoundKey$1({ pattern, source, options, context, t }) {
+function reportIfFoundKey$1({ pattern, source, options, context: context2, t }) {
   const results = source.content.matchAll(pattern);
   for (const result of results) {
     const index = result.index || 0;
@@ -11746,7 +11750,7 @@ function reportIfFoundKey$1({ pattern, source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("GITHUB_TOKEN", {
         KEY: match,
         typeName
@@ -11766,7 +11770,7 @@ var creator$d = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-github/README.md"
     }
   },
-  create(context, options) {
+  create(context2, options) {
     const CLASSIC_GITHUB_TOKEN_PATTERN = new RegExp("(?<!\\p{L})(?<type>ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36}(?![A-Za-z0-9_])", "gu");
     const FINE_GRAINED_GITHUB_TOKEN_PATTERN = new RegExp("(?<!\\p{L})(?<type>github_pat)_[A-Za-z0-9_]{82}(?![A-Za-z0-9_])", "gu");
     const GITHUB_APP_INSTALLATION_TOKEN_PATTERN = new RegExp("(?<!\\p{L})(?<type>ghs)_[0-9]{1,20}_[A-Za-z0-9_-]{1,1000}\\.[A-Za-z0-9_-]{1,10000}\\.[A-Za-z0-9_-]{1,1000}(?![A-Za-z0-9_-])", "gu");
@@ -11775,14 +11779,14 @@ var creator$d = {
       FINE_GRAINED_GITHUB_TOKEN_PATTERN,
       GITHUB_APP_INSTALLATION_TOKEN_PATTERN
     ];
-    const t = context.createTranslator(messages$c);
+    const t = context2.createTranslator(messages$c);
     const normalizedOptions = {
       allows: options.allows || []
     };
     return {
       file(source) {
         for (const pattern of patterns) {
-          reportIfFoundKey$1({ pattern, source, options: normalizedOptions, context, t });
+          reportIfFoundKey$1({ pattern, source, options: normalizedOptions, context: context2, t });
         }
       }
     };
@@ -11794,7 +11798,7 @@ var messages$b = {
     ja: (props) => `GitLab Personal Access Token\u304C\u898B\u3064\u304B\u308A\u307E\u3057\u305F: ${props.KEY}`
   }
 };
-function reportIfFoundKey({ pattern, source, options, context, t }) {
+function reportIfFoundKey({ pattern, source, options, context: context2, t }) {
   const results = source.content.matchAll(pattern);
   for (const result of results) {
     const index = result.index ?? 0;
@@ -11804,7 +11808,7 @@ function reportIfFoundKey({ pattern, source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("GITLAB_PERSONAL_ACCESS_TOKEN", {
         KEY: match
       }),
@@ -11823,17 +11827,17 @@ var creator$c = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-gitlab/README.md"
     }
   },
-  create(context, options) {
+  create(context2, options) {
     const GITLAB_PERSONAL_ACCESS_TOKEN_PATTERN = new RegExp("(?<!\\p{L})glpat-[A-Za-z0-9_-]{20,128}(?![A-Za-z0-9_-])", "gu");
     const patterns = [GITLAB_PERSONAL_ACCESS_TOKEN_PATTERN];
-    const t = context.createTranslator(messages$b);
+    const t = context2.createTranslator(messages$b);
     const normalizedOptions = {
       allows: options.allows ?? []
     };
     return {
       file(source) {
         for (const pattern of patterns) {
-          reportIfFoundKey({ pattern, source, options: normalizedOptions, context, t });
+          reportIfFoundKey({ pattern, source, options: normalizedOptions, context: context2, t });
         }
       }
     };
@@ -11849,7 +11853,7 @@ var messages$a = {
     ja: (props) => `Grafana Service Account \u30C8\u30FC\u30AF\u30F3: ${props.TOKEN} \u304C\u307F\u3064\u304B\u308A\u307E\u3057\u305F`
   }
 };
-function reportIfFound$1({ pattern, messageId, source, options, context, t }) {
+function reportIfFound$1({ pattern, messageId, source, options, context: context2, t }) {
   const results = source.content.matchAll(pattern);
   for (const result of results) {
     const index = result.index ?? 0;
@@ -11859,7 +11863,7 @@ function reportIfFound$1({ pattern, messageId, source, options, context, t }) {
       continue;
     }
     const range = [index, index + match.length];
-    context.report({
+    context2.report({
       message: t(messageId, {
         TOKEN: match
       }),
@@ -11878,8 +11882,8 @@ var creator$b = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-grafana/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$a);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$a);
     const normalizedOptions = {
       allows: options?.allows ?? []
     };
@@ -11892,7 +11896,7 @@ var creator$b = {
           messageId: "GRAFANA_CLOUD_API_TOKEN",
           source,
           options: normalizedOptions,
-          context,
+          context: context2,
           t
         });
         reportIfFound$1({
@@ -11900,7 +11904,7 @@ var creator$b = {
           messageId: "GRAFANA_SERVICE_ACCOUNT_TOKEN",
           source,
           options: normalizedOptions,
-          context,
+          context: context2,
           t
         });
       }
@@ -11933,8 +11937,8 @@ var creator$a = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-1password/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$9);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$9);
     const normalizedOptions = {
       allows: options?.allows ?? []
     };
@@ -11954,7 +11958,7 @@ var creator$a = {
             continue;
           }
           const range = [index, index + matchString.length];
-          context.report({
+          context2.report({
             message: t("OPS_TOKEN", {
               TOKEN: matchString
             }),
@@ -12036,7 +12040,7 @@ function isLikelyRealCredential(username, password) {
     return false;
   return true;
 }
-function reportMongoDBConnectionString({ source, options, context, t }) {
+function reportMongoDBConnectionString({ source, options, context: context2, t }) {
   const MONGODB_PATTERN = /mongodb(?:\+srv)?:\/\/(?:(?<username>[^:\/\s]{1,100}):(?<password>[^@\/\s]{1,200})@)?(?<host>[^\/\s?]{1,100})(?:\/(?<database>[^?\s]{0,100}))?(?:\?(?<options>[^\s]{0,500}))?/gi;
   const results = source.content.matchAll(MONGODB_PATTERN);
   for (const result of results) {
@@ -12053,7 +12057,7 @@ function reportMongoDBConnectionString({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("MongoDBConnection", {
         URI: match
       }),
@@ -12061,7 +12065,7 @@ function reportMongoDBConnectionString({ source, options, context, t }) {
     });
   }
 }
-function reportMySQLConnectionString({ source, options, context, t }) {
+function reportMySQLConnectionString({ source, options, context: context2, t }) {
   const MYSQL_URI_PATTERN = /(?:jdbc:)?mysql(?:x)?:\/\/(?:(?<username>[^:\/\s]{1,100}):(?<password>[^@\/\s]{1,200})@)?(?<host>[^\/\s?]{1,100})(?:\/(?<database>[^?\s]{0,100}))?(?:\?(?<options>[^\s]{0,500}))?/gi;
   const results = source.content.matchAll(MYSQL_URI_PATTERN);
   for (const result of results) {
@@ -12078,7 +12082,7 @@ function reportMySQLConnectionString({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("MySQLConnection", {
         URI: match
       }),
@@ -12086,7 +12090,7 @@ function reportMySQLConnectionString({ source, options, context, t }) {
     });
   }
 }
-function reportPostgreSQLConnectionString({ source, options, context, t }) {
+function reportPostgreSQLConnectionString({ source, options, context: context2, t }) {
   const POSTGRESQL_URI_PATTERN = /postgres(?:ql)?:\/\/(?:(?<username>[^:\/\s]{1,100}):(?<password>[^@\/\s]{1,200})@)?(?<host>[^\/\s?]{1,100})(?:\/(?<database>[^?\s]{0,100}))?(?:\?(?<options>[^\s]{0,500}))?/gi;
   const results = source.content.matchAll(POSTGRESQL_URI_PATTERN);
   for (const result of results) {
@@ -12103,7 +12107,7 @@ function reportPostgreSQLConnectionString({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("PostgreSQLConnection", {
         URI: match
       }),
@@ -12122,16 +12126,16 @@ var creator$9 = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-database-connection-string/README.md"
     }
   },
-  create(context, options) {
+  create(context2, options) {
     const normalizedOptions = {
       allows: options.allows || []
     };
-    const t = context.createTranslator(messages$8);
+    const t = context2.createTranslator(messages$8);
     return {
       file(source) {
-        reportMongoDBConnectionString({ source, options: normalizedOptions, context, t });
-        reportMySQLConnectionString({ source, options: normalizedOptions, context, t });
-        reportPostgreSQLConnectionString({ source, options: normalizedOptions, context, t });
+        reportMongoDBConnectionString({ source, options: normalizedOptions, context: context2, t });
+        reportMySQLConnectionString({ source, options: normalizedOptions, context: context2, t });
+        reportPostgreSQLConnectionString({ source, options: normalizedOptions, context: context2, t });
       }
     };
   }
@@ -12164,8 +12168,8 @@ var creator$8 = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-hashicorp-vault/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$7);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$7);
     const normalizedOptions = {
       allows: options?.allows ?? []
     };
@@ -12179,7 +12183,7 @@ var creator$8 = {
           continue;
         }
         const range = [index, index + matchString.length];
-        context.report({
+        context2.report({
           message: t(messageId, {
             TOKEN: matchString
           }),
@@ -12236,8 +12240,8 @@ var creator$7 = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-vercel/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$6);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$6);
     const normalizedOptions = {
       allows: options?.allows ?? []
     };
@@ -12255,7 +12259,7 @@ var creator$7 = {
             continue;
           }
           const range = [index, index + matchString.length];
-          context.report({
+          context2.report({
             message: t(messageId, {
               ID: matchString
             }),
@@ -12283,8 +12287,8 @@ var creator$6 = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-databricks/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$5);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$5);
     const normalizedOptions = {
       allows: options?.allows ?? []
     };
@@ -12300,7 +12304,7 @@ var creator$6 = {
             continue;
           }
           const range = [index, index + matchString.length];
-          context.report({
+          context2.report({
             message: t("DATABRICKS_PERSONAL_ACCESS_TOKEN", {
               ID: matchString
             }),
@@ -12317,7 +12321,7 @@ var messages$4 = {
     ja: (props) => `Docker Personal Access Token: ${props.TOKEN} \u304C\u307F\u3064\u304B\u308A\u307E\u3057\u305F`
   }
 };
-function reportIfFoundDockerPAT({ source, options, context, t }) {
+function reportIfFoundDockerPAT({ source, options, context: context2, t }) {
   const DOCKER_PAT_PATTERN = new RegExp("(?<!\\p{L})dckr_pat_[a-zA-Z0-9_-]{27}(?![a-zA-Z0-9_-])", "gu");
   const results = source.content.matchAll(DOCKER_PAT_PATTERN);
   for (const result of results) {
@@ -12328,7 +12332,7 @@ function reportIfFoundDockerPAT({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t("DOCKER_PERSONAL_ACCESS_TOKEN", {
         TOKEN: match
       }),
@@ -12347,14 +12351,14 @@ var creator$5 = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-docker/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$4);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$4);
     const normalizedOptions = {
       allows: options.allows || []
     };
     return {
       file(source) {
-        reportIfFoundDockerPAT({ source, options: normalizedOptions, context, t });
+        reportIfFoundDockerPAT({ source, options: normalizedOptions, context: context2, t });
       }
     };
   }
@@ -12376,8 +12380,8 @@ var creator$4 = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-figma/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$3);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$3);
     const normalizedOptions = {
       allows: options?.allows ?? []
     };
@@ -12393,7 +12397,7 @@ var creator$4 = {
             continue;
           }
           const range = [index, index + matchString.length];
-          context.report({
+          context2.report({
             message: t("FIGMA_PERSONAL_ACCESS_TOKEN", {
               ID: matchString
             }),
@@ -12424,7 +12428,7 @@ var messageIdMap = {
   cfat: "CLOUDFLARE_ACCOUNT_API_TOKEN"
 };
 var CLOUDFLARE_TOKEN_PATTERN = new RegExp("(?<!\\p{L})(?<prefix>cfk|cfut|cfat)_[A-Za-z0-9]{40}[0-9a-f]{8}(?![A-Za-z0-9])", "gu");
-function reportIfFound({ source, options, context, t }) {
+function reportIfFound({ source, options, context: context2, t }) {
   const results = source.content.matchAll(CLOUDFLARE_TOKEN_PATTERN);
   for (const result of results) {
     const index = result.index ?? 0;
@@ -12438,7 +12442,7 @@ function reportIfFound({ source, options, context, t }) {
     if (allowedResults.length > 0) {
       continue;
     }
-    context.report({
+    context2.report({
       message: t(messageIdMap[prefix], {
         TOKEN: match
       }),
@@ -12457,14 +12461,14 @@ var creator$3 = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-cloudflare/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$2);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$2);
     const normalizedOptions = {
       allows: options.allows ?? []
     };
     return {
       file(source) {
-        reportIfFound({ source, options: normalizedOptions, context, t });
+        reportIfFound({ source, options: normalizedOptions, context: context2, t });
       }
     };
   }
@@ -12513,8 +12517,8 @@ var creator$2 = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-tailscale/README.md"
     }
   },
-  create(context, options) {
-    const t = context.createTranslator(messages$1);
+  create(context2, options) {
+    const t = context2.createTranslator(messages$1);
     const normalizedOptions = {
       allows: options.allows ?? []
     };
@@ -12532,7 +12536,7 @@ var creator$2 = {
             continue;
           }
           const messageId = messageIdByType[type] ?? "TAILSCALE_KEY";
-          context.report({
+          context2.report({
             message: t(messageId, {
               KEY: matchString
             }),
@@ -12694,8 +12698,8 @@ var creator$1 = {
       url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-filter-comments/README.md"
     }
   },
-  create(context) {
-    const t = context.createTranslator(messages);
+  create(context2) {
+    const t = context2.createTranslator(messages);
     return {
       file(source) {
         const state = new CommentState(source);
@@ -12712,7 +12716,7 @@ var creator$1 = {
           }
         }
         state.getIgnoringMessages().forEach((message) => {
-          context.ignore({
+          context2.ignore({
             message: t("IGNORE_MESSAGE"),
             range: [message.startIndex, message.endIndex],
             targetRuleId: message.ruleId
@@ -15813,7 +15817,7 @@ function putProp2(target, key, value) {
   else
     target[key] = value;
 }
-function mirrorShape2(target, source, keys, wrap) {
+function mirrorShape2(target, source, keys, wrap2) {
   const raw = sourceShape2(source);
   for (const key of keys) {
     const desc = Object.getOwnPropertyDescriptor(raw, key);
@@ -15822,10 +15826,10 @@ function mirrorShape2(target, source, keys, wrap) {
     if (desc.get) {
       deferProp2(target, key, () => {
         const value = source._zod.def.shape[key];
-        return wrap ? wrap(value, key) : value;
+        return wrap2 ? wrap2(value, key) : value;
       });
     } else
-      putProp2(target, key, wrap ? wrap(desc.value, key) : desc.value);
+      putProp2(target, key, wrap2 ? wrap2(desc.value, key) : desc.value);
   }
 }
 function mirrorProps2(target, source) {
@@ -15850,10 +15854,10 @@ function mergeDefs2(...defs) {
 function cloneDef2(schema) {
   return mergeDefs2(schema._zod.def);
 }
-function getElementAtPath2(obj, path30) {
-  if (!path30)
+function getElementAtPath2(obj, path31) {
+  if (!path31)
     return obj;
-  return path30.reduce((acc, key) => acc?.[key], obj);
+  return path31.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject2(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -16193,11 +16197,11 @@ function explicitlyAborted2(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues2(path30, issues) {
+function prefixIssues2(path31, issues) {
   return issues.map((iss) => {
     var _a5;
     (_a5 = iss).path ?? (_a5.path = []);
-    iss.path.unshift(path30);
+    iss.path.unshift(path31);
     return iss;
   });
 }
@@ -16655,16 +16659,16 @@ function flattenError2(error3, mapper = (issue3) => issue3.message) {
 }
 function formatError2(error3, mapper = (issue3) => issue3.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error4, path30 = []) => {
+  const processError = (error4, path31 = []) => {
     for (const issue3 of error4.issues) {
       if (issue3.code === "invalid_union" && issue3.errors.length) {
-        issue3.errors.map((issues) => processError({ issues }, [...path30, ...issue3.path]));
+        issue3.errors.map((issues) => processError({ issues }, [...path31, ...issue3.path]));
       } else if (issue3.code === "invalid_key") {
-        processError({ issues: issue3.issues }, [...path30, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path31, ...issue3.path]);
       } else if (issue3.code === "invalid_element") {
-        processError({ issues: issue3.issues }, [...path30, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path31, ...issue3.path]);
       } else {
-        const fullpath = [...path30, ...issue3.path];
+        const fullpath = [...path31, ...issue3.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue3));
         } else {
@@ -16672,9 +16676,9 @@ function formatError2(error3, mapper = (issue3) => issue3.message) {
           let i = 0;
           while (i < fullpath.length) {
             const el = fullpath[i];
-            const terminal = i === fullpath.length - 1;
+            const terminal2 = i === fullpath.length - 1;
             if (el === "_errors") {
-              if (terminal)
+              if (terminal2)
                 curr._errors.push(mapper(issue3));
               i++;
               continue;
@@ -16688,7 +16692,7 @@ function formatError2(error3, mapper = (issue3) => issue3.message) {
               });
             }
             const node3 = curr[el];
-            if (terminal) {
+            if (terminal2) {
               node3._errors.push(mapper(issue3));
             }
             curr = node3;
@@ -24059,6 +24063,53 @@ async function backgroundServiceDefinition(source) {
     throw error3;
   }
 }
+function decodeXml(value) {
+  return value.replace(/&(amp|lt|gt|quot|apos);/g, (entity) => {
+    const entities = {
+      "&amp;": "&",
+      "&lt;": "<",
+      "&gt;": ">",
+      "&quot;": '"',
+      "&apos;": "'"
+    };
+    return entities[entity];
+  });
+}
+function serviceDataDirectory(definition, platform) {
+  let directory;
+  if (platform === "darwin") {
+    const value = /<string>--data-directory<\/string>\s*<string>([^<]*)<\/string>/.exec(
+      definition
+    )?.[1];
+    if (value !== void 0) directory = decodeXml(value);
+  } else if (platform === "linux") {
+    const value = /^ExecStart=.*?"--data-directory" "((?:\\.|[^"\\])*)"\s*$/m.exec(
+      definition
+    )?.[1];
+    if (value !== void 0)
+      directory = value.replace(/\\([\\"])/g, "$1").replaceAll("%%", "%");
+  } else if (platform === "win32") {
+    const encoded = /-EncodedCommand ([A-Za-z0-9+/=]+)/.exec(definition)?.[1];
+    const script = encoded === void 0 ? "" : Buffer.from(encoded, "base64").toString("utf16le");
+    const args = /\$start\.Arguments = '((?:''|[^'])*)'/.exec(script)?.[1]?.replaceAll("''", "'");
+    const value = /"--data-directory" "(.*)"$/.exec(args ?? "")?.[1];
+    if (value !== void 0)
+      directory = value.replace(
+        /(\\+)"/g,
+        (_, slashes) => `${slashes.slice(0, (slashes.length - 1) / 2)}"`
+      ).replace(
+        /(\\+)$/,
+        (_, slashes) => slashes.slice(0, slashes.length / 2)
+      );
+  }
+  if (!directory || !(platform === "win32" ? path20.win32 : path20.posix).isAbsolute(directory))
+    throw new Error("Could not read the collector service data directory.");
+  return directory;
+}
+async function backgroundServiceDataDirectory(source) {
+  const definition = await backgroundServiceDefinition(source);
+  return definition === null ? null : serviceDataDirectory(definition, process.platform);
+}
 async function installedServiceSources() {
   const definitions = await Promise.all(
     COLLECTOR_SOURCES2.map(backgroundServiceDefinition)
@@ -24195,9 +24246,13 @@ async function uninstallCursorHooks(cursorHome, dataDirectory2) {
 }
 // src/logger.ts
-configureCollectorLogging(() => ({
+var context = () => ({
   runtimeVersion: process.env.ITERATION_RUNTIME_VERSION ?? null
-}));
+});
+configureCollectorLogging(context);
+function silenceCollectorLogs() {
+  configureCollectorLogging(context, () => void 0);
+}
 // src/turn-summary.ts
 import { execFile as execFileCallback7 } from "node:child_process";
@@ -24713,6 +24768,9 @@ var consentSchema = object3({
 function consentPath() {
   return path24.join(os8.homedir(), ".config", "iteration", "auto-connect.json");
 }
+async function removeMachineConsent() {
+  await fs19.rm(consentPath(), { force: true });
+}
 async function detectedSources(sourceHomes) {
   const detected = [];
   for (const source of COLLECTOR_SOURCES2) {
@@ -24926,8 +24984,157 @@ async function connectedConfig(source) {
 // src/clerk-device-auth.ts
 import { execFile as execFile8 } from "node:child_process";
-import { createInterface } from "node:readline/promises";
 import { promisify as promisify8 } from "node:util";
+// src/terminal.ts
+import { createInterface } from "node:readline/promises";
+import { stripVTControlCharacters, styleText } from "node:util";
+var MEASURE = 80;
+var INDENT = "  ";
+var UNICODE_SYMBOLS = {
+  brand: "\u25C6",
+  success: "\u2713",
+  warning: "!",
+  failure: "\u2717",
+  question: "?",
+  on: "\u25CF",
+  off: "\u25CB",
+  spinner: ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"]
+};
+var BASIC_SYMBOLS = {
+  brand: "*",
+  success: "\u221A",
+  warning: "!",
+  failure: "\xD7",
+  question: "?",
+  on: "*",
+  off: "-",
+  spinner: ["-", "\\", "|", "/"]
+};
+var TONE_FORMAT = {
+  success: "green",
+  warning: "yellow",
+  failure: "red",
+  muted: "dim"
+};
+function supportsUnicode(env) {
+  if (process.platform !== "win32") return env.TERM !== "linux";
+  return env.WT_SESSION !== void 0 || env.TERM_PROGRAM === "vscode" || env.TERMINAL_EMULATOR === "JetBrains-JediTerm" || env.ConEmuTask === "{cmd::Cmder}" || env.TERM === "xterm-256color" || env.TERM === "alacritty";
+}
+function terminalFor(stream, env = process.env) {
+  const style = (format) => (text) => styleText(format, text, { stream });
+  return {
+    width: stream.isTTY && stream.columns > 0 ? Math.min(stream.columns, MEASURE) : MEASURE,
+    symbols: supportsUnicode(env) ? UNICODE_SYMBOLS : BASIC_SYMBOLS,
+    bold: style("bold"),
+    dim: style("dim"),
+    link: style("underline"),
+    tone: (tone, text) => style(TONE_FORMAT[tone])(text)
+  };
+}
+function safeWorkspaceName(value) {
+  const cleaned = value?.split("").map((character) => {
+    const code = character.charCodeAt(0);
+    return code < 32 || code >= 127 && code <= 159 ? " " : character;
+  }).join("").replace(/\s+/g, " ").trim();
+  return cleaned === void 0 || cleaned === "" ? null : cleaned;
+}
+function visibleWidth(text) {
+  return stripVTControlCharacters(text).length;
+}
+function padEnd(text, width) {
+  return text + " ".repeat(Math.max(0, width - visibleWidth(text)));
+}
+function brand(terminal2, workspaceName = null) {
+  const name = safeWorkspaceName(workspaceName);
+  return `${terminal2.bold(`${terminal2.symbols.brand} Iteration`)}${name === null ? "" : `${terminal2.dim(" \xB7 ")}${name}`}`;
+}
+function wrap(terminal2, text, options = {}) {
+  const indent = options.indent ?? INDENT;
+  const style = options.style ?? ((line) => line);
+  const lines = [];
+  let prefix = options.first ?? indent;
+  let words = [];
+  let width = visibleWidth(prefix);
+  const flush = () => {
+    lines.push(`${prefix}${style(words.join(" "))}`.trimEnd());
+    prefix = indent;
+    words = [];
+    width = visibleWidth(indent);
+  };
+  for (const word of text.split(" ")) {
+    const wordWidth = visibleWidth(word);
+    if (words.length > 0 && width + 1 + wordWidth > terminal2.width) flush();
+    if (words.length === 0 && word === "" && lines.length > 0) continue;
+    width += (words.length > 0 ? 1 : 0) + wordWidth;
+    words.push(word);
+  }
+  flush();
+  return lines.join("\n");
+}
+function mark(terminal2, kind, text, indent = "") {
+  const tone = kind === "question" ? "success" : kind;
+  return wrap(terminal2, text, {
+    first: `${indent}${terminal2.tone(tone, terminal2.symbols[kind])} `,
+    indent: `${indent}${INDENT}`
+  });
+}
+function rows(terminal2, entries2, indent = INDENT) {
+  const labelWidth = Math.max(
+    0,
+    ...entries2.map(([label2]) => visibleWidth(label2))
+  );
+  const hanging = " ".repeat(visibleWidth(indent) + labelWidth + 2);
+  return entries2.map(
+    ([label2, value]) => wrap(terminal2, value, {
+      first: `${indent}${padEnd(label2, labelWidth + 2)}`,
+      indent: hanging
+    })
+  ).join("\n");
+}
+var SPINNER_INTERVAL_MS = 80;
+function startSpinner(stream, terminal2, text) {
+  if (!stream.isTTY) {
+    stream.write(`${text}
+`);
+    return () => void 0;
+  }
+  const frames = terminal2.symbols.spinner;
+  let frame = 0;
+  const draw = () => {
+    stream.cursorTo(0);
+    stream.clearLine(1);
+    stream.write(`${terminal2.dim(frames[frame % frames.length])} ${text}`);
+    frame += 1;
+  };
+  draw();
+  const timer = setInterval(draw, SPINNER_INTERVAL_MS);
+  timer.unref();
+  return () => {
+    clearInterval(timer);
+    stream.cursorTo(0);
+    stream.clearLine(0);
+  };
+}
+async function ask(terminal2, question) {
+  const prompt = createInterface({
+    input: process.stdin,
+    output: process.stdout
+  });
+  try {
+    return await prompt.question(
+      `${terminal2.tone("success", terminal2.symbols.question)} ${question} `
+    );
+  } catch (error3) {
+    if (!(error3 instanceof Error && error3.name === "AbortError")) throw error3;
+    process.stdout.write("\n");
+    return null;
+  } finally {
+    prompt.close();
+  }
+}
+// src/clerk-device-auth.ts
 var execFileAsync = promisify8(execFile8);
 var serverAuthConfigSchema = object3({
   issuerUrl: url(),
@@ -25031,7 +25238,11 @@ $start.UseShellExecute = $true
       await execFileAsync("xdg-open", [url2], { timeout: 5e3 });
     else await execFileAsync("open", [url2], { timeout: 5e3 });
   } catch {
-    process.stdout.write("Open the verification link in your browser.\n");
+    const terminal2 = terminalFor(process.stdout);
+    process.stdout.write(
+      `${mark(terminal2, "warning", "Your browser did not open. Open the link above to sign in.")}
+`
+    );
   }
 }
 function delay4(milliseconds) {
@@ -25111,17 +25322,39 @@ async function clerkDeviceSignIn(configuration) {
     configuration.clientId
   );
   const verificationUrl = challenge.verification_uri_complete ?? challenge.verification_uri;
+  const terminal2 = terminalFor(process.stdout);
   process.stdout.write(
-    "Sign in to Iteration in your browser and confirm this code.\nCode: " + challenge.user_code + "\nLink: " + verificationUrl + "\n"
+    [
+      "",
+      wrap(
+        terminal2,
+        "Sign in to Iteration in your browser and confirm this code",
+        { style: terminal2.bold }
+      ),
+      rows(terminal2, [
+        ["Code", terminal2.bold(challenge.user_code)],
+        ["Link", terminal2.link(verificationUrl)]
+      ]),
+      ""
+    ].join("\n")
   );
   await openBrowser(verificationUrl);
-  return pollForAccessToken(
-    endpoints.tokenUrl,
-    configuration.clientId,
-    challenge.device_code,
-    challenge.expires_in,
-    challenge.interval
+  const stopSpinner = startSpinner(
+    process.stdout,
+    terminal2,
+    "Waiting for you to confirm in your browser\u2026"
   );
+  try {
+    return await pollForAccessToken(
+      endpoints.tokenUrl,
+      configuration.clientId,
+      challenge.device_code,
+      challenge.expires_in,
+      challenge.interval
+    );
+  } finally {
+    stopSpinner();
+  }
 }
 async function enrollDevice(endpoint, accessToken, deviceName, organizationId, source) {
   const body = { deviceName };
@@ -25151,44 +25384,49 @@ async function enrollDevice(endpoint, accessToken, deviceName, organizationId, s
   );
 }
 async function chooseOrganization(organizations, hasMore) {
-  process.stdout.write("Choose an Iteration workspace for this collector:\n");
-  for (const [index, organization] of organizations.entries()) {
-    process.stdout.write(
-      index + 1 + ". " + organization.name + " (" + organization.id + ")\n"
-    );
-  }
-  if (hasMore) {
-    process.stdout.write(
-      "More workspaces exist; enter an organization ID to choose one not listed.\n"
-    );
-  }
+  const terminal2 = terminalFor(process.stdout);
+  process.stdout.write(
+    [
+      "",
+      wrap(terminal2, "Choose a workspace for this computer", {
+        style: terminal2.bold
+      }),
+      rows(
+        terminal2,
+        organizations.map((organization2, index) => [
+          String(index + 1),
+          `${safeWorkspaceName(organization2.name) ?? "Unnamed workspace"} ${terminal2.dim(organization2.id)}`
+        ]),
+        "    "
+      ),
+      ...hasMore ? [
+        wrap(
+          terminal2,
+          "More workspaces exist; enter a workspace ID to choose one not listed."
+        )
+      ] : [],
+      ""
+    ].join("\n")
+  );
   if (process.stdin.isTTY !== true) {
     throw new Error("Run iteration interactively or pass --workspace.");
   }
-  const prompt = createInterface({
-    input: process.stdin,
-    output: process.stdout
-  });
-  try {
-    const answer = await prompt.question(
-      "Workspace number or organization ID: "
+  const answer = await ask(terminal2, terminal2.bold("Workspace number or ID"));
+  if (answer === null)
+    throw new Error(
+      "No workspace was chosen. Run iteration connect to try again."
     );
-    const id = uuid5().safeParse(answer.trim());
-    if (id.success) return id.data;
-    const selection = coerce_exports.number().int().min(1).max(organizations.length).safeParse(answer.trim());
-    if (!selection.success) {
-      throw new Error(
-        "Choose a listed number or enter a valid organization ID."
-      );
-    }
-    const organization = organizations[selection.data - 1];
-    if (organization === void 0) {
-      throw new Error("The selected workspace is not available.");
-    }
-    return organization.id;
-  } finally {
-    prompt.close();
+  const id = uuid5().safeParse(answer.trim());
+  if (id.success) return id.data;
+  const selection = coerce_exports.number().int().min(1).max(organizations.length).safeParse(answer.trim());
+  if (!selection.success) {
+    throw new Error("Choose a listed number or enter a valid workspace ID.");
   }
+  const organization = organizations[selection.data - 1];
+  if (organization === void 0) {
+    throw new Error("The selected workspace is not available.");
+  }
+  return organization.id;
 }
 async function authenticateAndEnrollCollector(endpoint, deviceNameValue, organizationId, source = "codex") {
   const deviceName = string5().trim().min(1).max(160).safeParse(deviceNameValue);
@@ -25289,6 +25527,147 @@ async function importSourceHistory(config3, paths, confirmed, control = backgrou
   return { imported: true, size, backgroundRunning: wasRunning };
 }
+// src/logout.ts
+import { randomUUID as randomUUID3 } from "node:crypto";
+import { promises as fs20 } from "node:fs";
+import os9 from "node:os";
+import path26 from "node:path";
+async function pendingDirectories(filename) {
+  let contents;
+  try {
+    contents = await fs20.readFile(filename, "utf8");
+  } catch (error3) {
+    if (error3 instanceof Error && "code" in error3 && error3.code === "ENOENT")
+      return [];
+    throw error3;
+  }
+  const parsed = array2(string5().refine(path26.isAbsolute)).max(64).safeParse(JSON.parse(contents));
+  if (!parsed.success)
+    throw new Error("Pending logout directories are invalid.");
+  return parsed.data;
+}
+async function savePendingDirectories(filename, directories) {
+  await ensurePrivateDirectory(path26.dirname(filename));
+  const temporary = `${filename}.${process.pid}.tmp`;
+  await fs20.writeFile(temporary, JSON.stringify([...directories]), {
+    mode: 384
+  });
+  await fs20.rename(temporary, filename);
+}
+async function clearConnection(directory) {
+  const paths = collectorPaths(directory);
+  let names;
+  try {
+    names = await fs20.readdir(directory);
+  } catch (error3) {
+    if (error3 instanceof Error && "code" in error3 && error3.code === "ENOENT")
+      return;
+    throw error3;
+  }
+  const release = await waitForCollectorLock(paths);
+  try {
+    for (const name of names)
+      if (/^config\.json\.\d+\.tmp$/.test(name))
+        await fs20.rm(path26.join(directory, name), { force: true });
+    if (!names.includes(path26.basename(paths.config))) return;
+    const config3 = await loadConfig(paths);
+    if (config3.destination === "vault")
+      throw new Error("This directory belongs to Trace Vault, not Iteration.");
+    if ("cursorHome" in config3)
+      await uninstallCursorHooks(config3.cursorHome, config3.dataDirectory);
+    else await uninstallTurnSummary(config3);
+    const retained = [
+      paths.state,
+      paths.outbox,
+      paths.redactionMarker,
+      paths.historyBackfill,
+      paths.health,
+      ...[
+        "cursor-hooks",
+        "cursor-hook-failure.json",
+        "claude-git",
+        "turn-summary",
+        "codex-billing-sync.json",
+        "cursor-billing-sync.json"
+      ].map((name) => path26.join(directory, name))
+    ];
+    const archive = path26.join(directory, "logged-out", randomUUID3());
+    await ensurePrivateDirectory(archive);
+    for (const filename of retained) {
+      try {
+        await fs20.rename(filename, path26.join(archive, path26.basename(filename)));
+      } catch (error3) {
+        if (!(error3 instanceof Error && "code" in error3 && error3.code === "ENOENT"))
+          throw error3;
+      }
+    }
+    await fs20.rm(paths.config);
+  } finally {
+    await release();
+  }
+}
+async function logout(extraDirectory) {
+  requireCollectorPlatform();
+  const pending = path26.join(
+    os9.homedir(),
+    ".config",
+    "iteration",
+    "logout-pending.json"
+  );
+  const directories = /* @__PURE__ */ new Set([
+    ...COLLECTOR_SOURCES2.map(defaultCollectorDirectory),
+    ...await pendingDirectories(pending)
+  ]);
+  if (extraDirectory !== void 0)
+    directories.add(path26.resolve(extraDirectory));
+  const failures = [];
+  try {
+    await removeMachineConsent();
+  } catch (error3) {
+    failures.push(
+      `Automatic connection approval: ${error3 instanceof Error ? error3.message : "Could not remove approval."}`
+    );
+  }
+  const unreadableServices = /* @__PURE__ */ new Set();
+  for (const source of COLLECTOR_SOURCES2) {
+    try {
+      const directory = await backgroundServiceDataDirectory(source);
+      if (directory !== null) directories.add(directory);
+    } catch (error3) {
+      unreadableServices.add(source);
+      failures.push(
+        `${source}: ${error3 instanceof Error ? error3.message : "Could not inspect collector startup."}`
+      );
+    }
+  }
+  await savePendingDirectories(pending, directories);
+  for (const source of COLLECTOR_SOURCES2) {
+    if (unreadableServices.has(source)) continue;
+    try {
+      await uninstallBackgroundService(source);
+    } catch (error3) {
+      failures.push(
+        `${source}: ${error3 instanceof Error ? error3.message : "Could not stop collector startup."}`
+      );
+    }
+  }
+  for (const directory of directories) {
+    try {
+      await clearConnection(directory);
+    } catch (error3) {
+      failures.push(
+        `${directory}: ${error3 instanceof Error ? error3.message : "Could not clear the collector connection."}`
+      );
+    }
+  }
+  if (failures.length > 0)
+    throw new Error(
+      `Logout did not finish. Resolve these errors and run iteration logout again:
+${failures.join("\n")}`
+    );
+  await fs20.rm(pending);
+}
 // src/runtime-services.ts
 async function refreshBackgroundServices(restart) {
   const refreshed = [];
@@ -25317,8 +25696,8 @@ import { setTimeout as delay5 } from "node:timers/promises";
 // src/codex-billing.ts
 import { createHash as createHash7 } from "node:crypto";
-import { promises as fs20 } from "node:fs";
-import path26 from "node:path";
+import { promises as fs21 } from "node:fs";
+import path27 from "node:path";
 var TASK_USAGE_URL = "https://chatgpt.com/backend-api/wham/usage/thread_usage/query_v2";
 var UUID2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var DAY_MS = 24 * 60 * 60 * 1e3;
@@ -25370,7 +25749,7 @@ function fingerprint(value) {
 async function readAuth(codexHome) {
   let contents;
   try {
-    contents = await fs20.readFile(path26.join(codexHome, "auth.json"), "utf8");
+    contents = await fs21.readFile(path27.join(codexHome, "auth.json"), "utf8");
   } catch (error3) {
     if (error3 instanceof Error && "code" in error3 && error3.code === "ENOENT")
       return {
@@ -25405,7 +25784,7 @@ async function readAuth(codexHome) {
 async function readState(filename) {
   let contents;
   try {
-    contents = await fs20.readFile(filename, "utf8");
+    contents = await fs21.readFile(filename, "utf8");
   } catch (error3) {
     if (error3 instanceof Error && "code" in error3 && error3.code === "ENOENT")
       return null;
@@ -25427,7 +25806,7 @@ async function readState(filename) {
 }
 async function saveState2(filename, state) {
   const temporary = `${filename}.${process.pid}.tmp`;
-  const handle = await fs20.open(temporary, "w", 384);
+  const handle = await fs21.open(temporary, "w", 384);
   try {
     await handle.writeFile(`${JSON.stringify(state)}
 `);
@@ -25435,11 +25814,11 @@ async function saveState2(filename, state) {
   } finally {
     await handle.close();
   }
-  await fs20.rename(temporary, filename);
+  await fs21.rename(temporary, filename);
 }
 async function localThread(filename) {
-  const stat = await fs20.stat(filename);
-  const handle = await fs20.open(filename, "r");
+  const stat = await fs21.stat(filename);
+  const handle = await fs21.open(filename, "r");
   let header = null;
   try {
     const buffer = Buffer.alloc(64 * 1024);
@@ -25539,9 +25918,9 @@ function parseCodexAuthLog(threadId, body) {
   return { threadId, turnId: turn[1], mode };
 }
 async function localAuthTurns(codexHome, modelProviders) {
-  const filename = path26.join(codexHome, "logs_2.sqlite");
+  const filename = path27.join(codexHome, "logs_2.sqlite");
   try {
-    await fs20.access(filename);
+    await fs21.access(filename);
   } catch (error3) {
     if (error3 instanceof Error && "code" in error3 && error3.code === "ENOENT")
       return [];
@@ -25560,10 +25939,10 @@ async function localAuthTurns(codexHome, modelProviders) {
     feedback_log_body: string5().nullable()
   });
   try {
-    const rows = database.prepare(
+    const rows2 = database.prepare(
       "SELECT thread_id, feedback_log_body FROM logs WHERE target = 'feedback_tags' AND feedback_log_body LIKE '%auth_mode=Some(%'"
     ).iterate();
-    for (const raw of rows) {
+    for (const raw of rows2) {
       const row = logRowSchema.safeParse(raw);
       if (!row.success)
         throw new Error("Codex's local log row has an invalid shape.");
@@ -25634,7 +26013,7 @@ async function queryTaskUsage(tasks, accessToken, accountId, signal) {
 }
 async function syncCodexBilling(config3, fetcher = collectorFetch, signal) {
   const auth = await readAuth(config3.codexHome);
-  const stateFile = path26.join(config3.dataDirectory, "codex-billing-sync.json");
+  const stateFile = path27.join(config3.dataDirectory, "codex-billing-sync.json");
   const prior = await readState(stateFile);
   const nowMs = Date.now();
   const history = prior === null || prior.accountFingerprint !== auth.accountFingerprint;
@@ -25805,9 +26184,9 @@ async function syncCodexBilling(config3, fetcher = collectorFetch, signal) {
 // src/cursor-billing.ts
 import { createHash as createHash8 } from "node:crypto";
-import { promises as fs21 } from "node:fs";
-import os9 from "node:os";
-import path27 from "node:path";
+import { promises as fs22 } from "node:fs";
+import os10 from "node:os";
+import path28 from "node:path";
 var CURSOR_USAGE_URL = "https://api2.cursor.sh/aiserver.v1.DashboardService/GetFilteredUsageEvents";
 var PAGE_SIZE = 500;
 var MAX_PAGES = 1e3;
@@ -25838,18 +26217,18 @@ var usagePageSchema = object3({
 var emptyUsagePageSchema = object3({}).strict();
 function cursorAuthDatabase() {
   if (process.platform === "darwin")
-    return path27.join(
-      os9.homedir(),
+    return path28.join(
+      os10.homedir(),
       "Library/Application Support/Cursor/User/globalStorage/state.vscdb"
     );
   if (process.platform === "linux")
-    return path27.join(
-      os9.homedir(),
+    return path28.join(
+      os10.homedir(),
       ".config/Cursor/User/globalStorage/state.vscdb"
     );
   if (process.platform === "win32")
-    return path27.join(
-      process.env.APPDATA ?? path27.join(os9.homedir(), "AppData", "Roaming"),
+    return path28.join(
+      process.env.APPDATA ?? path28.join(os10.homedir(), "AppData", "Roaming"),
       "Cursor/User/globalStorage/state.vscdb"
     );
   return null;
@@ -25891,7 +26270,7 @@ async function readCursorAuth() {
 async function loadBillingState(filename) {
   let contents;
   try {
-    contents = await fs21.readFile(filename, "utf8");
+    contents = await fs22.readFile(filename, "utf8");
   } catch (error3) {
     if (error3 instanceof Error && "code" in error3 && error3.code === "ENOENT")
       return null;
@@ -25907,7 +26286,7 @@ async function loadBillingState(filename) {
 }
 async function saveBillingState(filename, state) {
   const temporary = `${filename}.${process.pid}.tmp`;
-  const handle = await fs21.open(temporary, "w", 384);
+  const handle = await fs22.open(temporary, "w", 384);
   try {
     await handle.writeFile(`${JSON.stringify(state)}
 `, "utf8");
@@ -25915,7 +26294,7 @@ async function saveBillingState(filename, state) {
   } finally {
     await handle.close();
   }
-  await fs21.rename(temporary, filename);
+  await fs22.rename(temporary, filename);
 }
 function planCursorBillingSync(state, accountFingerprint, nowMs) {
   if (state === null || state.accountFingerprint !== accountFingerprint)
@@ -25937,7 +26316,7 @@ function planCursorBillingSync(state, accountFingerprint, nowMs) {
 }
 function cursorConversationIds(filenames) {
   return new Set(
-    filenames.map((filename) => path27.basename(filename, ".jsonl")).filter((id) => UUID3.test(id))
+    filenames.map((filename) => path28.basename(filename, ".jsonl")).filter((id) => UUID3.test(id))
   );
 }
 function billingKind(kind) {
@@ -25995,11 +26374,11 @@ async function syncCursorBilling(config3, fetcher = collectorFetch, signal) {
   if (auth === null)
     return { sessions: 0, matched: 0, skipped: true, mode: null };
   const localConversations = cursorConversationIds(
-    await cursorFiles(path27.join(config3.cursorHome, "projects"))
+    await cursorFiles(path28.join(config3.cursorHome, "projects"))
   );
   if (localConversations.size === 0)
     return { sessions: 0, matched: 0, skipped: true, mode: null };
-  const stateFile = path27.join(config3.dataDirectory, "cursor-billing-sync.json");
+  const stateFile = path28.join(config3.dataDirectory, "cursor-billing-sync.json");
   const priorState = await loadBillingState(stateFile);
   const nowMs = Date.now();
   const plan = planCursorBillingSync(
@@ -26523,13 +26902,6 @@ var CODEX_APPROVAL_STEP = "Friction summary is off: in Codex, type /hooks and ap
 function sourceName(source) {
   return collectorSourceLabel(source);
 }
-function safeWorkspaceName(value) {
-  const cleaned = value?.split("").map((character) => {
-    const code = character.charCodeAt(0);
-    return code < 32 || code >= 127 && code <= 159 ? " " : character;
-  }).join("").replace(/\s+/g, " ").trim();
-  return cleaned === void 0 || cleaned === "" ? null : cleaned;
-}
 function readableBytes(bytes) {
   if (bytes < 1e3) return `${bytes} B`;
   const units = ["KB", "MB", "GB", "TB"];
@@ -26586,244 +26958,366 @@ function historyDescription(status2, source) {
     return "History imported; scanning current activity.";
   return `History imported; ${readableBytes(remainingBytes)} of new activity waiting to scan.`;
 }
-function failureDescription(status2, source) {
-  const name = sourceName(source);
+function failureSummary(terminal2, status2, source, nowMs) {
   const failure3 = status2.health.lastFailure;
   if (failure3 === null) {
     throw new Error("A collector failure is required to describe it.");
   }
-  if (failure3.kind === "http") {
-    const code = failure3.status === null ? "HTTP error" : `HTTP ${failure3.status}`;
-    if (failure3.status === 401 || failure3.status === 403) {
+  const describe2 = () => {
+    if (failure3.kind === "http") {
+      const code = failure3.status === null ? "HTTP error" : `HTTP ${failure3.status}`;
+      if (failure3.status === 401 || failure3.status === 403)
+        return {
+          tone: "failure",
+          headline: "Upload access needs attention",
+          explanation: `Iteration denied this collector (${code}). Queued data stays on this computer. Contact Iteration support to reconnect it safely.`
+        };
+      if (failure3.status !== null && failure3.status < 500 && failure3.status !== 429)
+        return {
+          tone: "failure",
+          headline: "Uploads need attention",
+          explanation: `Iteration rejected an event batch (${code}). Check the collector log for details.`
+        };
       return {
-        heading: `${name} upload access needs attention`,
-        explanation: `Iteration denied this collector (${code}). Queued data stays on this computer. Contact Iteration support to reconnect it safely.`
+        tone: "warning",
+        headline: "Uploads are delayed",
+        explanation: `Iteration could not accept an upload (${code}). Retrying automatically.`
       };
     }
-    if (failure3.status !== null && failure3.status < 500 && failure3.status !== 429) {
+    if (failure3.kind === "network")
       return {
-        heading: `${name} uploads need attention`,
-        explanation: `Iteration rejected an event batch (${code}). Check the collector log for details.`
+        tone: "warning",
+        headline: "Uploads are delayed",
+        explanation: "Could not reach Iteration. Retrying automatically."
+      };
+    if (failure3.kind === "response")
+      return {
+        tone: "warning",
+        headline: "Uploads need attention",
+        explanation: "Iteration returned an unexpected upload response. Retrying automatically."
       };
-    }
     return {
-      heading: `${name} uploads are delayed`,
-      explanation: `Iteration could not accept an upload (${code}). Retrying automatically.`
+      tone: "failure",
+      headline: "Collector needs attention",
+      explanation: "A local error interrupted collection."
     };
-  }
-  if (failure3.kind === "network") {
+  };
+  const { tone, headline, explanation } = describe2();
+  return {
+    tone,
+    headline,
+    facts: [],
+    details: [
+      explanation,
+      ...status2.pendingEvents > 0 ? [`${pendingDescription(status2)}.`] : [],
+      ...status2.health.lastUploadAtMs === null ? [] : [
+        `Last successful upload ${relativeTime(status2.health.lastUploadAtMs, nowMs)}.`
+      ]
+    ],
+    next: `Details: ${terminal2.bold(`iteration status ${source}`)}`
+  };
+}
+function connectionSummary(terminal2, status2, source, nowMs) {
+  const name = sourceName(source);
+  const pending = status2.pendingEvents > 0 ? [`${pendingDescription(status2)}.`] : [];
+  const details = `Details: ${terminal2.bold(`iteration status ${source}`)}`;
+  if (!status2.running)
     return {
-      heading: `${name} uploads are delayed`,
-      explanation: "Could not reach Iteration. Retrying automatically."
+      tone: "warning",
+      headline: "Stopped",
+      facts: [],
+      details: ["New sessions are not being collected.", ...pending],
+      next: `Resume with ${terminal2.bold(`iteration start ${source}`)}`
     };
-  }
-  if (failure3.kind === "response") {
+  if (status2.hookFailureAtMs !== null && status2.hookFailureAtMs !== void 0)
     return {
-      heading: `${name} uploads need attention`,
-      explanation: "Iteration returned an unexpected upload response. Retrying automatically."
+      tone: "warning",
+      headline: "Hook capture needs attention",
+      facts: [],
+      details: [
+        `A ${name} hook failed ${relativeTime(status2.hookFailureAtMs, nowMs)}. Some data may be missing.`
+      ],
+      next: details
     };
-  }
-  return {
-    heading: `${name} collector needs attention`,
-    explanation: `A local error interrupted collection. See iteration status ${source} for details.`
-  };
+  if (!status2.healthAvailable)
+    return {
+      tone: "warning",
+      headline: "Running; local status needs attention",
+      facts: [],
+      details: [
+        "Upload history could not be read. Collection continues in the background.",
+        ...pending
+      ],
+      next: details
+    };
+  if (status2.health.lastFailure !== null)
+    return failureSummary(terminal2, status2, source, nowMs);
+  return null;
 }
-function renderHome(status2, nowMs = Date.now(), source = "codex") {
+function scanSummary(status2, source, nowMs) {
   const name = sourceName(source);
-  if (status2.kind === "not_connected") {
-    return [
-      "Iteration",
-      "",
-      `${name} is not connected.`,
-      "Run iteration connect to import your existing sessions."
-    ].join("\n");
-  }
-  if (status2.kind === "needs_repair") {
+  const pending = status2.pendingEvents > 0 ? [`${pendingDescription(status2)}.`] : [];
+  const lastUpload = status2.health.lastUploadAtMs === null ? [] : [`last upload ${relativeTime(status2.health.lastUploadAtMs, nowMs)}`];
+  const summary = (headline, details, facts = []) => ({
+    tone: "success",
+    headline,
+    facts: [...facts, ...lastUpload],
+    details,
+    next: null
+  });
+  const scan = status2.scan;
+  if (scan.kind === "waiting") return summary("Preparing your history", []);
+  if (scan.totalBytes > 0 && scan.scannedBytes < scan.totalBytes && status2.health.historyCaughtUpAtMs === null)
+    return summary("Importing existing sessions", [
+      historyDescription(status2, source),
+      "New activity is collected automatically."
+    ]);
+  if (scan.totalBytes - scan.scannedBytes >= 1e6)
+    return summary("Catching up with new activity", [
+      historyDescription(status2, source),
+      ...pending
+    ]);
+  if (status2.pendingEvents > 0)
+    return summary("Uploading captured sessions", pending);
+  if (scan.totalBytes === 0)
+    return summary("Connected", [
+      `Waiting for ${name} sessions on this computer.`
+    ]);
+  if (scan.scannedBytes < scan.totalBytes)
+    return summary("Collecting new activity", [
+      "Local history is imported; current activity is being scanned."
+    ]);
+  return summary("Collecting", [], ["caught up"]);
+}
+function sourceSummary(terminal2, status2, source, nowMs) {
+  if (status2.kind === "not_connected")
+    return {
+      tone: "muted",
+      headline: "Not connected",
+      facts: [],
+      details: [],
+      next: `Run ${terminal2.bold("iteration connect")} to include it.`
+    };
+  if (status2.kind === "needs_repair")
+    return {
+      tone: "failure",
+      headline: "Connection needs repair",
+      facts: [],
+      details: [
+        "Local collector data exists, but its connection details are missing.",
+        status2.pendingBytes > 0 ? `${readableBytes(status2.pendingBytes)} of queued data remains on this computer.` : "Existing local progress remains on this computer."
+      ],
+      next: `Run ${terminal2.bold(`iteration status ${source}`)} for recovery details.`
+    };
+  return connectionSummary(terminal2, status2, source, nowMs) ?? scanSummary(status2, source, nowMs);
+}
+function statusDot(terminal2, tone) {
+  return terminal2.tone(
+    tone,
+    tone === "muted" ? terminal2.symbols.off : terminal2.symbols.on
+  );
+}
+function connectedStatuses(sources) {
+  return sources.flatMap(
+    ({ status: status2 }) => status2.kind === "connected" ? [status2] : []
+  );
+}
+function renderHome(terminal2, sources, nowMs = Date.now()) {
+  const connected = connectedStatuses(sources);
+  const workspaces = [
+    ...new Set(
+      connected.flatMap(({ workspaceName }) => {
+        const name = safeWorkspaceName(workspaceName);
+        return name === null ? [] : [name];
+      })
+    )
+  ];
+  const nameWidth = Math.max(
+    ...sources.map(({ source }) => sourceName(source).length)
+  );
+  const blocks = sources.map(({ source, status: status2 }) => {
+    const summary = sourceSummary(terminal2, status2, source, nowMs);
+    const workspace = workspaces.length > 1 && status2.kind === "connected" ? [safeWorkspaceName(status2.workspaceName) ?? "No workspace"] : [];
+    const facts = [...workspace, ...summary.facts];
+    const indent = " ".repeat(4 + nameWidth + 2);
     return [
-      "Iteration",
-      "",
-      `${name} connection needs repair`,
-      "Local collector data exists, but its connection details are missing.",
-      status2.pendingBytes > 0 ? `${readableBytes(status2.pendingBytes)} of queued data remains on this computer.` : "Existing local progress remains on this computer.",
-      `Run iteration status ${source} for recovery details.`
-    ].join("\n");
-  }
-  const workspaceName = safeWorkspaceName(status2.workspaceName);
+      wrap(
+        terminal2,
+        `${summary.headline}${facts.length === 0 ? "" : terminal2.dim(` \xB7 ${facts.join(" \xB7 ")}`)}`,
+        {
+          first: `  ${statusDot(terminal2, summary.tone)} ${padEnd(sourceName(source), nameWidth)}  `,
+          indent
+        }
+      ),
+      ...summary.details.map(
+        (line) => wrap(terminal2, line, { indent, style: terminal2.dim })
+      ),
+      ...summary.next === null ? [] : [wrap(terminal2, summary.next, { indent })]
+    ];
+  });
+  const spaced = blocks.some((block) => block.length > 1);
   const lines = [
-    workspaceName === null ? "Iteration" : `Iteration \xB7 ${workspaceName}`,
-    ""
+    brand(terminal2, workspaces.length === 1 ? workspaces[0] : null),
+    "",
+    ...blocks.flatMap(
+      (block, index) => spaced && index > 0 ? ["", ...block] : block
+    )
   ];
-  const appendConnectionStatus = () => {
-    if (!status2.running) {
-      lines.push(`${name} is stopped`, "New sessions are not being collected.");
-      if (status2.pendingEvents > 0)
-        lines.push(`${pendingDescription(status2)}.`);
-      lines.push(`Resume with iteration start ${source}.`);
-    } else if (status2.hookFailureAtMs !== null && status2.hookFailureAtMs !== void 0) {
-      lines.push(
-        `${name} hook capture needs attention`,
-        `A ${name} hook failed ${relativeTime(status2.hookFailureAtMs, nowMs)}. Some data may be missing. See iteration status ${source}.`
-      );
-    } else if (!status2.healthAvailable) {
-      lines.push(
-        `${name} is running; local status needs attention`,
-        "Upload history could not be read. Collection continues in the background."
-      );
-      if (status2.pendingEvents > 0)
-        lines.push(`${pendingDescription(status2)}.`);
-      lines.push(`Details: iteration status ${source}`);
-    } else if (status2.health.lastFailure !== null) {
-      const failure3 = failureDescription(status2, source);
-      lines.push(failure3.heading, failure3.explanation);
-      if (status2.pendingEvents > 0)
-        lines.push(`${pendingDescription(status2)}.`);
-      if (status2.health.lastUploadAtMs !== null) {
-        lines.push(
-          `Last successful upload ${relativeTime(status2.health.lastUploadAtMs, nowMs)}.`
-        );
-      }
-      lines.push(`Details: iteration status ${source}`);
-    } else return false;
-    return true;
-  };
-  const appendScanStatus = () => {
-    if (status2.scan.kind === "waiting") {
-      lines.push(
-        `${name} is preparing your history`,
-        progressDescription(status2.scan, source)
-      );
-    } else if (status2.scan.kind === "scanning" && status2.scan.totalBytes > 0 && status2.scan.scannedBytes < status2.scan.totalBytes && status2.health.historyCaughtUpAtMs === null) {
-      lines.push(
-        `${name} is importing existing sessions`,
-        historyDescription(status2, source),
-        "New activity is collected automatically."
-      );
-    } else if (status2.scan.kind === "scanning" && status2.scan.totalBytes - status2.scan.scannedBytes >= 1e6) {
-      lines.push(
-        `${name} is catching up with new activity`,
-        historyDescription(status2, source)
-      );
-      if (status2.pendingEvents > 0)
-        lines.push(`${pendingDescription(status2)}.`);
-    } else if (status2.pendingEvents > 0) {
-      lines.push(
-        `${name} is uploading captured sessions`,
-        `${pendingDescription(status2)}.`
-      );
-    } else if (status2.scan.totalBytes === 0) {
-      lines.push(
-        `${name} is connected`,
-        `Waiting for ${name} sessions on this computer.`
-      );
-    } else if (status2.scan.kind === "scanning" && status2.scan.scannedBytes < status2.scan.totalBytes) {
-      lines.push(
-        `${name} is collecting new activity`,
-        "Local history is imported; current activity is being scanned."
-      );
-    } else {
-      lines.push(
-        `${name} is collecting`,
-        "Local scan is caught up and no uploads are waiting.",
-        "New activity is collected automatically."
-      );
-    }
-  };
-  if (!appendConnectionStatus()) appendScanStatus();
-  const appendLastUpload = () => {
-    if (status2.running && status2.health.lastFailure === null && status2.health.lastUploadAtMs !== null) {
-      lines.push(
-        `Last successful upload ${relativeTime(status2.health.lastUploadAtMs, nowMs)}.`
-      );
-    }
-  };
-  appendLastUpload();
-  if (status2.turnSummaryNeedsApproval) lines.push("", CODEX_APPROVAL_STEP);
-  lines.push("", `Explore traces  ${status2.tracesUrl}`);
+  if (connected.some((status2) => status2.turnSummaryNeedsApproval))
+    lines.push("", mark(terminal2, "warning", CODEX_APPROVAL_STEP, "  "));
+  const links = [...new Set(connected.map(({ tracesUrl: tracesUrl2 }) => tracesUrl2))];
+  if (links.length > 0)
+    lines.push(
+      "",
+      ...links.map((url2) => `  Open Iteration  ${terminal2.link(url2)}`)
+    );
   return lines.join("\n");
 }
-function renderDetailedStatus(status2, nowMs = Date.now(), source = "codex") {
+function sourceHeading(terminal2, tone, source, note) {
+  return `${statusDot(terminal2, tone)} ${terminal2.bold(sourceName(source))}${note === null ? "" : terminal2.dim(` \xB7 ${note}`)}`;
+}
+function sentenceCase(text) {
+  return `${text.charAt(0).toUpperCase()}${text.slice(1)}`;
+}
+function renderDetailedStatus(terminal2, source, status2, nowMs = Date.now()) {
   const name = sourceName(source);
   if (status2.kind === "not_connected") {
-    return `${name} is not connected. Run iteration connect to connect.`;
+    return [
+      sourceHeading(terminal2, "muted", source, "not connected"),
+      wrap(terminal2, `Run ${terminal2.bold("iteration connect")} to connect.`)
+    ].join("\n");
   }
   if (status2.kind === "needs_repair") {
     return [
-      `${name} connection needs repair`,
-      "Local collector data exists without its connection details.",
-      `Queued data: ${readableBytes(status2.pendingBytes)}`,
-      `Restore the missing config from backup: ${status2.configPath}`,
-      "If you do not have it, contact Iteration support before reconnecting; existing data has been kept."
+      sourceHeading(terminal2, "failure", source, "connection needs repair"),
+      wrap(
+        terminal2,
+        "Local collector data exists without its connection details."
+      ),
+      rows(terminal2, [["Queued data", readableBytes(status2.pendingBytes)]]),
+      wrap(
+        terminal2,
+        `Restore the missing config from backup: ${status2.configPath}`
+      ),
+      wrap(
+        terminal2,
+        "If you do not have it, contact Iteration support before reconnecting; existing data has been kept."
+      )
     ].join("\n");
   }
-  const workspaceName = safeWorkspaceName(status2.workspaceName);
-  const lines = [
-    `${name} collector`,
-    ...workspaceName === null ? [] : [`Workspace: ${workspaceName}`],
-    `Background process: ${status2.running ? "Running" : "Stopped"}`,
-    `History: ${historyDescription(status2, source).replace(/^History /, "")}`,
-    `Uploads: ${status2.pendingEvents === 0 ? "None waiting" : pendingDescription(status2)}`
+  const summary = sourceSummary(terminal2, status2, source, nowMs);
+  const entries2 = [
+    ["Background process", status2.running ? "Running" : "Stopped"],
+    [
+      "History",
+      sentenceCase(historyDescription(status2, source).replace(/^History /, ""))
+    ],
+    [
+      "Uploads",
+      status2.pendingEvents === 0 ? "None waiting" : sentenceCase(pendingDescription(status2))
+    ]
   ];
-  if (!status2.healthAvailable) {
-    lines.push(
-      "Local status: unavailable; check collector file permissions",
-      `Collector log: ${status2.logPath}`
-    );
-  }
-  if (status2.health.lastUploadAtMs !== null) {
-    lines.push(
-      `Last successful upload: ${relativeTime(status2.health.lastUploadAtMs, nowMs)}`
-    );
-  }
-  if (status2.health.lastFailure !== null) {
-    const failure3 = status2.health.lastFailure;
+  if (!status2.healthAvailable)
+    entries2.push([
+      "Local status",
+      "Unavailable; check collector file permissions"
+    ]);
+  if (status2.health.lastUploadAtMs !== null)
+    entries2.push([
+      "Last upload",
+      relativeTime(status2.health.lastUploadAtMs, nowMs)
+    ]);
+  const failure3 = status2.health.lastFailure;
+  if (failure3 !== null) {
     const label2 = failure3.kind === "http" && failure3.status !== null ? `HTTP ${failure3.status}` : failure3.kind === "network" ? "Network unavailable" : failure3.kind === "response" ? "Unexpected upload response" : "Local collector error";
-    lines.push(
-      `Last issue: ${label2} (${relativeTime(failure3.atMs, nowMs)})`,
-      `Collector log: ${status2.logPath}`
-    );
+    entries2.push([
+      "Last issue",
+      `${label2} (${relativeTime(failure3.atMs, nowMs)})`
+    ]);
   }
   if (status2.hookFailureAtMs !== null && status2.hookFailureAtMs !== void 0)
+    entries2.push([
+      "Hook capture",
+      `Failed ${relativeTime(status2.hookFailureAtMs, nowMs)}. Some data may be missing; inspect ${name} hook logs.`
+    ]);
+  if (!status2.healthAvailable || failure3 !== null)
+    entries2.push(["Collector log", status2.logPath]);
+  entries2.push(["Open Iteration", terminal2.link(status2.tracesUrl)]);
+  const lines = [
+    sourceHeading(
+      terminal2,
+      summary.tone,
+      source,
+      safeWorkspaceName(status2.workspaceName)
+    ),
+    rows(terminal2, entries2)
+  ];
+  if (status2.turnSummaryNeedsApproval)
+    lines.push(mark(terminal2, "warning", CODEX_APPROVAL_STEP, "  "));
+  if (!status2.running)
     lines.push(
-      `Last ${name} hook capture failure: ${relativeTime(status2.hookFailureAtMs, nowMs)}. Some data may be missing; inspect ${name} hook logs.`
+      wrap(
+        terminal2,
+        `Resume with ${terminal2.bold(`iteration start ${source}`)}`
+      )
     );
-  if (status2.turnSummaryNeedsApproval) lines.push(CODEX_APPROVAL_STEP);
-  if (!status2.running) lines.push(`Resume: iteration start ${source}`);
-  lines.push(`Explore traces: ${status2.tracesUrl}`);
   return lines.join("\n");
 }
-function renderRuntime(summary) {
+function renderRuntime(terminal2, summary) {
   return [
-    `Iteration ${summary.version} \xB7 ${summary.autoUpdate ? "updates automatically" : "automatic updates are off; run iteration update to update"}`,
-    ...summary.confirming === null ? [] : [`Starting version ${summary.confirming} after an update.`],
+    wrap(
+      terminal2,
+      `Version ${summary.version} \xB7 ${summary.autoUpdate ? "updates automatically" : "automatic updates are off; run iteration update to update"}`,
+      { style: terminal2.dim }
+    ),
+    ...summary.confirming === null ? [] : [
+      wrap(
+        terminal2,
+        `Starting version ${summary.confirming} after an update.`,
+        { style: terminal2.dim }
+      )
+    ],
     ...summary.rolledBack === null ? [] : [
-      `Version ${summary.rolledBack.version} was rolled back: ${summary.rolledBack.reason}`
+      mark(
+        terminal2,
+        "warning",
+        `Version ${summary.rolledBack.version} was rolled back: ${summary.rolledBack.reason}`,
+        "  "
+      )
     ],
-    ...summary.checkError === null ? [] : [`Last update check failed: ${summary.checkError}`]
+    ...summary.checkError === null ? [] : [
+      mark(
+        terminal2,
+        "warning",
+        `Last update check failed: ${summary.checkError}`,
+        "  "
+      )
+    ]
   ].join("\n");
 }
 // src/windows-supervisor.ts
 import { spawn } from "node:child_process";
-import { promises as fs22 } from "node:fs";
-import path28 from "node:path";
+import { promises as fs23 } from "node:fs";
+import path29 from "node:path";
 import { setTimeout as delay6 } from "node:timers/promises";
 var MAX_LOG_BYTES = 8 * 1024 * 1024;
 var RESTART_DELAY_MS = 5e3;
 async function appendLog(filename, bytes) {
   let offset = 0;
   while (offset < bytes.length) {
-    const size = await fs22.stat(filename).then((stat) => stat.size).catch((error3) => {
+    const size = await fs23.stat(filename).then((stat) => stat.size).catch((error3) => {
       if (error3 instanceof Error && "code" in error3 && error3.code === "ENOENT")
         return 0;
       throw error3;
     });
     if (size >= MAX_LOG_BYTES) {
-      await fs22.rm(`${filename}.1`, { force: true });
-      await fs22.rename(filename, `${filename}.1`);
+      await fs23.rm(`${filename}.1`, { force: true });
+      await fs23.rename(filename, `${filename}.1`);
       continue;
     }
     const count = Math.min(bytes.length - offset, MAX_LOG_BYTES - size);
-    await fs22.appendFile(filename, bytes.subarray(offset, offset + count), {
+    await fs23.appendFile(filename, bytes.subarray(offset, offset + count), {
       mode: 384
     });
     offset += count;
@@ -26839,7 +27333,7 @@ async function copyOutput(stream, filename) {
 async function superviseCollector(source, dataDirectory2) {
   const output = windowsOutputPath(source);
   const errors = windowsLogPath(source);
-  await ensurePrivateDirectory(path28.dirname(output));
+  await ensurePrivateDirectory(path29.dirname(output));
   const controller = new AbortController();
   const stop = () => controller.abort();
   process.once("SIGTERM", stop);
@@ -26910,6 +27404,14 @@ async function superviseCollector(source, dataDirectory2) {
 // src/cli.ts
 var DEFAULT_INGEST_ENDPOINT = "https://useiteration.com/api/traces/ingest";
+var terminal = terminalFor(process.stdout);
+function print(...lines) {
+  process.stdout.write(`${lines.join("\n")}
+`);
+}
+function tracesUrl(endpoint) {
+  return new URL("/app/sessions", endpoint).toString();
+}
 function argumentsForCli() {
   const parsed = parseArgs({
     args: process.argv.slice(2),
@@ -26950,53 +27452,100 @@ function optionalString(values, name) {
   return parsed.data;
 }
 function usage(command) {
-  if (command === "connect") {
-    process.stdout.write(
-      [
-        "Connect a coding agent to Iteration",
-        "  iteration connect         Connect all detected agents on this computer",
-        "  iteration connect codex",
-        "  iteration connect claude",
-        "  iteration connect cursor",
-        "",
-        "Existing local sessions and new activity are collected automatically.",
-        "",
-        "Options for advanced setups:",
-        "  --device-name NAME      Name this computer in Iteration",
-        "  --workspace ID          Connect to this workspace without a prompt",
-        "  --codex-home DIR        Use a different Codex data directory",
-        "  --claude-home DIR       Use a different Claude data directory",
-        "  --cursor-home DIR       Use a different Cursor data directory",
-        "  --yes                  Approve uploads without a terminal prompt",
-        "  --data-directory DIR   Use a different state directory with a source-specific command",
-        "  --endpoint URL         Use a different Iteration server"
-      ].join("\n") + "\n"
+  const section = (title, entries2) => [
+    wrap(terminal, title, { style: terminal.bold }),
+    rows(terminal, entries2, "    ")
+  ];
+  if (command === "logout") {
+    print(
+      brand(terminal),
+      "",
+      ...section("Sign out of Iteration on this computer", [
+        ["iteration logout", ""]
+      ]),
+      "",
+      wrap(
+        terminal,
+        "Stops all collectors and removes saved credentials and automatic connection approval. Local pending data is archived and will not be uploaded after reconnecting. Agent session files and previously uploaded data are kept."
+      ),
+      "",
+      ...section("Options", [
+        [
+          "--data-directory DIR",
+          "Also clear a custom collector directory with no installed service"
+        ]
+      ]),
+      "",
+      wrap(
+        terminal,
+        `Run ${terminal.bold("iteration connect")} to sign in again.`
+      )
     );
     return;
   }
-  process.stdout.write(
-    [
-      "Iteration CLI",
+  if (command === "connect") {
+    print(
+      brand(terminal),
       "",
-      "Get started:",
-      "  iteration connect         Connect detected agents and import sessions",
+      ...section("Connect coding agents", [
+        ["iteration connect", "Connect all detected agents on this computer"],
+        [
+          "iteration connect <agent>",
+          "Connect one agent: codex, claude or cursor"
+        ]
+      ]),
       "",
-      "Commands:",
-      "  iteration                 See connection status",
-      "  iteration status          See scan, upload, and error details",
-      "  iteration connect codex|claude|cursor  Connect one source (advanced)",
-      "  iteration disconnect codex|claude|cursor  Stop a source",
-      "  iteration update          Update now (updates also install automatically)",
-      "  iteration update off|on   Turn automatic updates off or on",
-      "  iteration version         Show the installed version",
+      wrap(
+        terminal,
+        "Existing local sessions and new activity are collected automatically."
+      ),
       "",
-      "Run iteration connect --help for advanced setup options."
-    ].join("\n") + "\n"
+      ...section("Options for advanced setups", [
+        ["--device-name NAME", "Name this computer in Iteration"],
+        ["--workspace ID", "Connect to this workspace without a prompt"],
+        ["--codex-home DIR", "Use a different Codex data directory"],
+        ["--claude-home DIR", "Use a different Claude data directory"],
+        ["--cursor-home DIR", "Use a different Cursor data directory"],
+        ["--yes", "Approve uploads without a terminal prompt"],
+        [
+          "--data-directory DIR",
+          "Use a different state directory with a one-agent command"
+        ],
+        ["--endpoint URL", "Use a different Iteration server"]
+      ])
+    );
+    return;
+  }
+  print(
+    brand(terminal),
+    "",
+    ...section("Get started", [
+      ["iteration connect", "Connect detected agents and import sessions"]
+    ]),
+    "",
+    ...section("Commands", [
+      ["iteration", "See connection status"],
+      ["iteration status", "See scan, upload and error details"],
+      [
+        "iteration connect <agent>",
+        "Connect one agent: codex, claude or cursor"
+      ],
+      ["iteration disconnect <agent>", "Stop one agent"],
+      ["iteration logout", "Sign out and stop all sources on this computer"],
+      ["iteration update", "Update now; updates also install automatically"],
+      ["iteration update off|on", "Turn automatic updates off or on"],
+      ["iteration version", "Show the installed version"]
+    ]),
+    "",
+    wrap(
+      terminal,
+      `Run ${terminal.bold("iteration connect --help")} for advanced setup options.`
+    )
   );
 }
 async function fileExists(filename) {
   try {
-    await fs23.access(filename);
+    await fs24.access(filename);
     return true;
   } catch (error3) {
     if (error3 instanceof Error && "code" in error3 && error3.code === "ENOENT") {
@@ -27014,29 +27563,20 @@ async function defaultCommand() {
       snapshot: await statusSnapshot(source, {})
     }))
   );
-  const connected = snapshots.filter(
-    ({ snapshot }) => snapshot.kind !== "not_connected"
-  );
-  if (connected.length > 0) {
-    process.stdout.write(
-      `${connected.map(({ source, snapshot }) => renderHome(snapshot, Date.now(), source)).join("\n\n")}
-`
-    );
+  if (snapshots.some(({ snapshot }) => snapshot.kind !== "not_connected")) {
     const discovered = await detectedSources({
       codex: sourceHome("codex"),
       claude: sourceHome("claude"),
       cursor: sourceHome("cursor")
     });
-    const missing2 = discovered.filter(
-      (source) => snapshots.find((item) => item.source === source)?.snapshot.kind === "not_connected"
+    print(
+      renderHome(
+        terminal,
+        snapshots.flatMap(
+          ({ source, snapshot }) => snapshot.kind !== "not_connected" || discovered.includes(source) ? [{ source, status: snapshot }] : []
+        )
+      )
     );
-    if (missing2.length > 0) {
-      process.stdout.write(
-        `
-${missing2.map(collectorSourceLabel).join(" and ")} found on this computer but not connected. Run iteration connect to include ${missing2.length === 1 ? "it" : "them"}.
-`
-      );
-    }
     return;
   }
   if (process.stdin.isTTY !== true || process.stdout.isTTY !== true) {
@@ -27046,33 +27586,92 @@ ${missing2.map(collectorSourceLabel).join(" and ")} found on this computer but n
   await connectAll({});
 }
 function dataDirectory(source, values) {
-  return path29.resolve(
+  return path30.resolve(
     optionalString(values, "data-directory") ?? defaultCollectorDirectory(source)
   );
 }
-async function turnSummaryNotice(config3) {
-  if ("cursorHome" in config3)
-    return " Cursor hooks capture tool results and usage automatically.";
+async function setUpTurnSummary(config3) {
+  if ("cursorHome" in config3) return { kind: "unsupported" };
   try {
     await installTurnSummary(config3);
-    if (await codexTurnSummaryApproval(config3) === "needs_approval") {
-      return "\nOne more step: in Codex, type /hooks and approve Iteration to see your friction summary after each turn.";
-    }
-    return " A one-line friction summary now appears after agent turns in your repositories.";
+    return await codexTurnSummaryApproval(config3) === "needs_approval" ? { kind: "needs_approval" } : { kind: "ready" };
   } catch (error3) {
-    return ` The turn summary could not be installed: ${error3 instanceof Error ? error3.message : "unknown error"} Run iteration start ${collectorSource(config3)} to retry it.`;
+    return {
+      kind: "failed",
+      reason: error3 instanceof Error ? error3.message : "unknown error"
+    };
   }
 }
+function turnSummaryLines(results) {
+  const warnings = results.flatMap(({ source, turnSummary }) => {
+    const name = collectorSourceLabel(source);
+    if (turnSummary.kind === "needs_approval")
+      return [
+        mark(
+          terminal,
+          "warning",
+          `${terminal.bold(`One more step for ${name}:`)} type /hooks in ${name} and approve Iteration to see your friction summary after each turn.`
+        )
+      ];
+    if (turnSummary.kind === "failed")
+      return [
+        mark(
+          terminal,
+          "warning",
+          `The ${name} friction summary could not be installed: ${turnSummary.reason} Run ${terminal.bold(`iteration start ${source}`)} to retry it.`
+        )
+      ];
+    return [];
+  });
+  return [
+    ...results.some(({ turnSummary }) => turnSummary.kind === "ready") ? [
+      wrap(
+        terminal,
+        "A one-line friction summary now appears after agent turns in your repositories."
+      )
+    ] : [],
+    ...warnings
+  ];
+}
+var CONNECTED_WIDTH = Math.max(
+  ...COLLECTOR_SOURCES2.map(
+    (source) => `${collectorSourceLabel(source)} connected`.length
+  )
+);
+function connectedLine(source, sessions) {
+  return mark(
+    terminal,
+    "success",
+    `${padEnd(`${collectorSourceLabel(source)} connected`, CONNECTED_WIDTH)}  ${terminal.dim(
+      sessions === 0 ? "no saved sessions yet" : `importing ${sessions.toLocaleString("en-US")} ${sessions === 1 ? "session" : "sessions"}`
+    )}`
+  );
+}
+function connectionSummary2(results, imported) {
+  const links = [
+    ...new Set(results.map(({ endpoint }) => tracesUrl(endpoint)))
+  ];
+  const notes = turnSummaryLines(results);
+  return [
+    ...notes.length === 0 ? [] : ["", ...notes],
+    "",
+    wrap(
+      terminal,
+      imported ? `Sessions import newest first. Run ${terminal.bold("iteration")} to follow progress.` : `Run ${terminal.bold("iteration")} to see their status.`
+    ),
+    ...links.map((url2) => `  Open Iteration  ${terminal.link(url2)}`)
+  ];
+}
 async function initialize(source, values) {
   requireCollectorPlatform();
   const endpoint = optionalString(values, "endpoint") ?? DEFAULT_INGEST_ENDPOINT;
   const endpointUrl = validateCollectorEndpoint(endpoint);
-  const deviceName = optionalString(values, "device-name") ?? os10.hostname();
+  const deviceName = optionalString(values, "device-name") ?? os11.hostname();
   const organizationId = optionalString(values, "workspace");
   const directory = dataDirectory(source, values);
   const paths = collectorPaths(directory);
-  const selectedHome = path29.resolve(
-    source === "codex" ? optionalString(values, "codex-home") ?? process.env.CODEX_HOME ?? path29.join(os10.homedir(), ".codex") : source === "claude" ? optionalString(values, "claude-home") ?? process.env.CLAUDE_CONFIG_DIR ?? path29.join(os10.homedir(), ".claude") : optionalString(values, "cursor-home") ?? path29.join(os10.homedir(), ".cursor")
+  const selectedHome = path30.resolve(
+    source === "codex" ? optionalString(values, "codex-home") ?? process.env.CODEX_HOME ?? path30.join(os11.homedir(), ".codex") : source === "claude" ? optionalString(values, "claude-home") ?? process.env.CLAUDE_CONFIG_DIR ?? path30.join(os11.homedir(), ".claude") : optionalString(values, "cursor-home") ?? path30.join(os11.homedir(), ".cursor")
   );
   await assertFreshCollectorDirectory(paths, source);
   const preparedState = await prepareSourceInitialState(
@@ -27087,6 +27686,13 @@ async function initialize(source, values) {
     organizationId,
     source
   );
+  print(
+    mark(
+      terminal,
+      "success",
+      `Signed in to ${terminal.bold(safeWorkspaceName(enrollment.organizationName) ?? "your workspace")}`
+    )
+  );
   const connection = {
     endpoint: endpointUrl.toString(),
     token: enrollment.token,
@@ -27113,22 +27719,40 @@ async function initialize(source, values) {
       { cause: error3 }
     );
   }
-  const notice = await turnSummaryNotice(config3);
-  process.stdout.write(
-    `${collectorSourceLabel(source)} is connected to ${enrollment.organizationName}. Existing sessions are importing, newest first, and new activity is collected automatically. Iteration shows the import as it runs.${notice}
-`
-  );
-  return config3;
+  const turnSummary = await setUpTurnSummary(config3);
+  print(connectedLine(source, await countSavedSessions(source, selectedHome)));
+  return {
+    config: config3,
+    result: { source, endpoint: config3.endpoint, turnSummary }
+  };
 }
 async function approveAllSources(sources, workspaceName, yes) {
-  const names = sources.map(
-    ({ source, sessions }) => `${collectorSourceLabel(source)} (${sessions.toLocaleString("en-US")} saved ${sessions === 1 ? "session" : "sessions"})`
-  ).join(" and ");
   const safeName = safeWorkspaceName(workspaceName);
-  process.stdout.write(
-    `Detected ${names || "no saved agent sessions"} on this computer.
-Connect supported agents${safeName ? ` to ${safeName}` : " to the workspace you select"}? Existing sessions and future activity, including prompts, code, and tool output, will be uploaded. Workspace members can read them. Newly detected supported agents will connect automatically.${process.platform === "linux" ? " Collection will continue after you log out." : ""}
-`
+  print(
+    wrap(
+      terminal,
+      sources.length === 0 ? "No saved agent sessions found on this computer" : `Found ${sources.length} coding ${sources.length === 1 ? "agent" : "agents"} on this computer`,
+      { style: terminal.bold }
+    ),
+    ...sources.length === 0 ? [] : [
+      "",
+      rows(
+        terminal,
+        sources.map(({ source, sessions }) => [
+          collectorSourceLabel(source),
+          terminal.dim(
+            `${sessions.toLocaleString("en-US")} saved ${sessions === 1 ? "session" : "sessions"}`
+          )
+        ]),
+        "    "
+      )
+    ],
+    "",
+    wrap(
+      terminal,
+      `Existing sessions and new activity, including prompts, code and tool output, upload to ${safeName ?? "your workspace"}, where its members can read them. Supported agents you install later connect automatically.${process.platform === "linux" ? " Collection continues after you log out." : ""}`
+    ),
+    ""
   );
   if (yes) return;
   if (!process.stdin.isTTY || !process.stdout.isTTY) {
@@ -27136,17 +27760,15 @@ Connect supported agents${safeName ? ` to ${safeName}` : " to the workspace you
       "Run iteration connect interactively or pass --yes to approve uploads."
     );
   }
-  const prompt = createInterface2({
-    input: process.stdin,
-    output: process.stdout
-  });
-  try {
-    const answer = (await prompt.question("Connect agents? [y/N] ")).trim().toLowerCase();
-    if (answer !== "y" && answer !== "yes")
-      throw new Error("No agents were connected.");
-  } finally {
-    prompt.close();
-  }
+  const answer = await ask(
+    terminal,
+    `${terminal.bold(sources.length === 1 ? "Connect this agent?" : "Connect these agents?")} ${terminal.dim("(y/N)")}`
+  );
+  const approved = answer?.trim().toLowerCase();
+  if (approved !== "y" && approved !== "yes")
+    throw new Error(
+      "No agents were connected. Run iteration connect when you are ready."
+    );
 }
 async function connectAll(values) {
   requireCollectorPlatform();
@@ -27157,13 +27779,13 @@ async function connectAll(values) {
   }
   const configs = await Promise.all(COLLECTOR_SOURCES2.map(connectedConfig));
   const resolveSourceHomes = () => ({
-    codex: path29.resolve(
+    codex: path30.resolve(
       optionalString(values, "codex-home") ?? (configs[0] && "codexHome" in configs[0] ? configs[0].codexHome : sourceHome("codex"))
     ),
-    claude: path29.resolve(
+    claude: path30.resolve(
       optionalString(values, "claude-home") ?? (configs[1] && "claudeHome" in configs[1] ? configs[1].claudeHome : sourceHome("claude"))
     ),
-    cursor: path29.resolve(
+    cursor: path30.resolve(
       optionalString(values, "cursor-home") ?? (configs[2] && "cursorHome" in configs[2] ? configs[2].cursorHome : sourceHome("cursor"))
     )
   });
@@ -27172,12 +27794,23 @@ async function connectAll(values) {
   const existing = COLLECTOR_SOURCES2.flatMap(
     (source, index) => configs[index] ? [{ source, config: configs[index] }] : []
   );
+  print(brand(terminal), "");
   if (detected.length === 0 && existing.length === 0) {
-    process.stdout.write(
-      "No supported local coding agents found yet. Run iteration connect after using Codex, Claude Code, or Cursor on this computer.\n"
+    print(
+      mark(terminal, "warning", "No supported local coding agents found yet"),
+      wrap(
+        terminal,
+        `Run ${terminal.bold("iteration connect")} after using Codex, Claude Code or Cursor on this computer.`
+      )
     );
     return;
   }
+  const sessions = await Promise.all(
+    detected.map(async (source) => ({
+      source,
+      sessions: await countSavedSessions(source, sourceHomes[source])
+    }))
+  );
   const anchorSource = existing[0]?.source ?? detected[0];
   const anchorExisting = existing[0]?.config ?? null;
   const endpoint = validateCollectorEndpoint(
@@ -27216,12 +27849,7 @@ async function connectAll(values) {
     const needsApproval = () => previousConsent === null || anchorExisting === null || previousConsent.endpoint !== endpoint || previousConsent.anchorSource !== anchorSource || previousConsent.anchorDataDirectory !== anchorExisting.dataDirectory || previousConsent.organizationId !== existingScopes[0]?.scope.organizationId || previousConsent.sourceHomes.codex !== sourceHomes.codex || previousConsent.sourceHomes.claude !== sourceHomes.claude || previousConsent.sourceHomes.cursor !== sourceHomes.cursor;
     if (needsApproval()) {
       await approveAllSources(
-        await Promise.all(
-          detected.map(async (source) => ({
-            source,
-            sessions: await countSavedSessions(source, sourceHomes[source])
-          }))
-        ),
+        sessions,
         existingScopes[0]?.scope.organizationName ?? null,
         values.yes === true
       );
@@ -27229,7 +27857,13 @@ async function connectAll(values) {
   };
   await approveConnection();
   await prepareBackgroundPersistence();
-  let anchor3 = anchorExisting ?? await initialize(anchorSource, values);
+  const results = [];
+  const initializeAnchor = async () => {
+    const initialized = await initialize(anchorSource, values);
+    results.push(initialized.result);
+    return initialized.config;
+  };
+  let anchor3 = anchorExisting ?? await initializeAnchor();
   let organizationId = requestedOrganizationId ?? existingScopes[0]?.scope.organizationId ?? anchor3.organizationId ?? null;
   const connectDetectedSources = async () => {
     for (const source of detected) {
@@ -27251,10 +27885,16 @@ async function connectAll(values) {
         state
       );
       organizationId = enrollment.organizationId;
-      const notice = await turnSummaryNotice(config3);
-      process.stdout.write(
-        `${collectorSourceLabel(source)} is connected to ${enrollment.organizationName}.${notice}
-`
+      results.push({
+        source,
+        endpoint: config3.endpoint,
+        turnSummary: await setUpTurnSummary(config3)
+      });
+      print(
+        connectedLine(
+          source,
+          sessions.find((item) => item.source === source)?.sessions ?? 0
+        )
       );
     }
   };
@@ -27285,15 +27925,20 @@ async function connectAll(values) {
         item.config.dataDirectory
       );
     await installBackgroundService(item.config.dataDirectory, item.source);
-    const notice = await turnSummaryNotice(item.config);
-    process.stdout.write(
-      `${collectorSourceLabel(item.source)} is still connected.${notice}
-`
+    results.push({
+      source: item.source,
+      endpoint: item.config.endpoint,
+      turnSummary: await setUpTurnSummary(item.config)
+    });
+    print(
+      mark(
+        terminal,
+        "success",
+        `${collectorSourceLabel(item.source)} is still connected`
+      )
     );
   }
-  process.stdout.write(
-    "Detected agents are connected. New supported agents on this computer will connect automatically.\n"
-  );
+  print(...connectionSummary2(results, results.length > existing.length));
 }
 async function importHistory(source, values) {
   requireCollectorPlatform();
@@ -27304,22 +27949,47 @@ async function importHistory(source, values) {
     throw new Error(
       `This collector directory belongs to ${collectorSource(config3)}.`
     );
+  const name = collectorSourceLabel(source);
   const estimate = (await importSourceHistory(config3, paths, false)).size;
-  process.stdout.write(
-    `Found ${estimate.files} local ${source} session files (${estimate.bytes} bytes). History may include prompts, code, and tool output that workspace members can read.
-`
+  print(
+    wrap(
+      terminal,
+      `Found ${estimate.files.toLocaleString("en-US")} local ${name} session files (${readableBytes(estimate.bytes)})`,
+      { indent: "", style: terminal.bold }
+    ),
+    wrap(
+      terminal,
+      "History may include prompts, code and tool output that workspace members can read."
+    )
   );
   if (values.yes !== true) {
-    process.stdout.write(
-      `No changes made. Run iteration import-history ${source} --yes to confirm this upload.
-`
+    print(
+      mark(
+        terminal,
+        "warning",
+        `No changes made. Run ${terminal.bold(`iteration import-history ${source} --yes`)} to confirm this upload.`
+      )
     );
     return;
   }
   const result = await importSourceHistory(config3, paths, true);
-  process.stdout.write(
-    `History scan scheduled for ${result.size.files} local session files (${result.size.bytes} bytes). Scanning and uploads run in bounded batches and may take time. Older sessions appear under the date Iteration receives them. Use iteration status ${source} to see local scan progress and pending uploads.${result.backgroundRunning ? "" : ` The collector was not running; run iteration start ${source} to begin scanning.`}
-`
+  print(
+    mark(
+      terminal,
+      "success",
+      `History scan scheduled for ${result.size.files.toLocaleString("en-US")} local session files (${readableBytes(result.size.bytes)})`
+    ),
+    wrap(
+      terminal,
+      `Scanning and uploads run in bounded batches and may take time. Older sessions appear under the date Iteration receives them. Run ${terminal.bold(`iteration status ${source}`)} to see local scan progress and pending uploads.`
+    ),
+    ...result.backgroundRunning ? [] : [
+      mark(
+        terminal,
+        "warning",
+        `The collector was not running. Run ${terminal.bold(`iteration start ${source}`)} to begin scanning.`
+      )
+    ]
   );
 }
 async function start(source, values) {
@@ -27335,10 +28005,20 @@ async function start(source, values) {
   if ("cursorHome" in config3)
     await installCursorHooks(config3.cursorHome, config3.dataDirectory);
   await installBackgroundService(directory, source);
-  const notice = await turnSummaryNotice(config3);
-  process.stdout.write(
-    `${collectorSourceLabel(source)} is collecting again. Run iteration to check progress.${repairedState ? " Incomplete setup was repaired." : ""}${notice}
-`
+  const turnSummary = await setUpTurnSummary(config3);
+  print(
+    mark(
+      terminal,
+      "success",
+      `${collectorSourceLabel(source)} is collecting again`
+    ),
+    ...repairedState ? [
+      wrap(terminal, "Incomplete setup was repaired.", {
+        style: terminal.dim
+      })
+    ] : [],
+    ...turnSummaryLines([{ source, endpoint: config3.endpoint, turnSummary }]),
+    wrap(terminal, `Run ${terminal.bold("iteration")} to check progress.`)
   );
 }
 async function statusSnapshot(source, values) {
@@ -27380,16 +28060,18 @@ async function statusSnapshot(source, values) {
     healthAvailable: localHealth.kind === "available",
     turnSummaryNeedsApproval: approval === "needs_approval",
     hookFailureAtMs,
-    tracesUrl: new URL("/app/sessions", config3.endpoint).toString(),
+    tracesUrl: tracesUrl(config3.endpoint),
     logPath: collectorLogPath(source)
   };
 }
 async function status(source, values) {
   if (source !== void 0) {
-    const snapshot = await statusSnapshot(source, values);
-    process.stdout.write(
-      `${renderDetailedStatus(snapshot, Date.now(), source)}
-`
+    print(
+      renderDetailedStatus(
+        terminal,
+        source,
+        await statusSnapshot(source, values)
+      )
     );
     return;
   }
@@ -27399,9 +28081,10 @@ async function status(source, values) {
       snapshot: await statusSnapshot(item, values)
     }))
   );
-  process.stdout.write(
-    `${snapshots.map(({ source: item, snapshot }) => renderDetailedStatus(snapshot, Date.now(), item)).join("\n\n")}
-`
+  print(
+    snapshots.map(
+      ({ source: item, snapshot }) => renderDetailedStatus(terminal, item, snapshot)
+    ).join("\n\n")
   );
 }
 var ROLLBACK_NOTICE_MS = 7 * 24 * 60 * 60 * 1e3;
@@ -27411,7 +28094,7 @@ async function runtimeSummaryText() {
   if (state === null) return null;
   const settings = await readRuntimeSettings(paths);
   const rejected = state.rejected.at(-1);
-  return renderRuntime({
+  return renderRuntime(terminal, {
     version: state.current,
     autoUpdate: settings.autoUpdate,
     confirming: state.trial?.version ?? null,
@@ -27469,10 +28152,15 @@ async function waitForTrial(to) {
         `Version ${to} did not start and Iteration returned to ${state.current}. ${rejected?.reason ?? ""}`.trim()
       );
     }
-    if (state?.trial === null) return `Iteration is updated to ${to}.`;
+    if (state?.trial === null)
+      return mark(terminal, "success", `Iteration is updated to ${to}`);
     await new Promise((resolve) => setTimeout(resolve, 1e3));
   }
-  return `Iteration is updated to ${to}; collectors are still starting. Run iteration to check.`;
+  return mark(
+    terminal,
+    "warning",
+    `Iteration is updated to ${to}; collectors are still starting. Run ${terminal.bold("iteration")} to check.`
+  );
 }
 async function update(setting, values) {
   requireCollectorPlatform();
@@ -27489,8 +28177,16 @@ async function update(setting, values) {
       ...setting === void 0 ? {} : { autoUpdate: setting === "on" },
       ...registry3 === null ? {} : { registry: validateRegistryUrl(registry3).toString() }
     });
-    process.stdout.write(
-      setting === "off" ? "Automatic updates are off. Run iteration update to update.\n" : setting === "on" ? "Automatic updates are on.\n" : "The update registry is saved.\n"
+    print(
+      setting === "off" ? mark(
+        terminal,
+        "success",
+        `Automatic updates are off. Run ${terminal.bold("iteration update")} to update.`
+      ) : mark(
+        terminal,
+        "success",
+        setting === "on" ? "Automatic updates are on" : "The update registry is saved"
+      )
     );
     return;
   }
@@ -27500,33 +28196,56 @@ async function update(setting, values) {
     throw new Error(
       "No collector is set up on this computer. Run iteration connect first."
     );
+  const stopChecking = startSpinner(
+    process.stdout,
+    terminal,
+    "Checking for updates\u2026"
+  );
   const outcome = await updateRuntime(paths, {
     manual: true,
     expected,
     nowMs: Date.now(),
     signal: AbortSignal.timeout(6e5)
-  });
+  }).finally(stopChecking);
   if (outcome.kind === "busy") {
-    process.stdout.write(
-      "Another update is in progress. Run iteration to check.\n"
+    print(
+      mark(
+        terminal,
+        "warning",
+        `Another update is in progress. Run ${terminal.bold("iteration")} to check.`
+      )
     );
     return;
   }
   if (outcome.kind === "up_to_date") {
-    process.stdout.write(
-      `Iteration ${outcome.version} is the latest version.
-`
+    print(
+      mark(
+        terminal,
+        "success",
+        `Iteration ${outcome.version} is the latest version`
+      )
     );
     return;
   }
   if (outcome.kind === "waiting") {
-    process.stdout.write(`No update was installed: ${outcome.reason}.
-`);
+    print(
+      mark(terminal, "warning", `No update was installed: ${outcome.reason}.`)
+    );
     return;
   }
-  await refreshBackgroundServices(true);
-  process.stdout.write(`${await waitForTrial(outcome.to)}
-`);
+  const stopStarting = startSpinner(
+    process.stdout,
+    terminal,
+    `Starting Iteration ${outcome.to}\u2026`
+  );
+  let result;
+  try {
+    await refreshBackgroundServices(true);
+    result = await waitForTrial(outcome.to);
+  } finally {
+    stopStarting();
+  }
+  print(result);
 }
 async function runInternalCommand() {
   if (process.argv[2] === "supervise") {
@@ -27559,7 +28278,14 @@ async function runInternalCommand() {
   }
   return false;
 }
+var BACKGROUND_COMMANDS = /* @__PURE__ */ new Set([
+  "run",
+  "supervise",
+  "claude-git-hook",
+  "turn-summary-hook"
+]);
 async function main() {
+  if (!BACKGROUND_COMMANDS.has(process.argv[2] ?? "")) silenceCollectorLogs();
   if (await runInternalCommand()) return;
   const delegated = await delegateToInstalledVersion();
   if (delegated !== null) {
@@ -27585,6 +28311,9 @@ async function dispatchCommand({
   if (command === "connect" && source === void 0) {
     return connectAll(values);
   }
+  if (command === "logout") {
+    return signOut(source, values);
+  }
   if (command === "") {
     return showHome(values);
   }
@@ -27598,6 +28327,30 @@ async function dispatchCommand({
   if (command === "update") return update(source, values);
   return dispatchSourceCommand(command, source, values, selectedSource);
 }
+async function signOut(source, values) {
+  if (source !== void 0 || Object.keys(values).some((name) => name !== "data-directory"))
+    throw new Error(
+      "Run iteration logout without a source. Only --data-directory is supported."
+    );
+  await logout(optionalString(values, "data-directory") ?? void 0);
+  print(
+    mark(
+      terminal,
+      "success",
+      terminal.bold("Signed out of Iteration on this computer")
+    ),
+    "",
+    wrap(
+      terminal,
+      "Collection stopped and saved credentials were removed. Local pending data was archived. Agent sessions and uploaded data were kept."
+    ),
+    "",
+    wrap(
+      terminal,
+      `Run ${terminal.bold("iteration connect")} to sign in again.`
+    )
+  );
+}
 async function showHome(values) {
   if (Object.keys(values).length > 0) {
     throw new Error(
@@ -27607,9 +28360,7 @@ async function showHome(values) {
   if (isCollectorPlatform()) await adoptRuntime();
   await defaultCommand();
   const summary = await runtimeSummaryText();
-  if (summary !== null) process.stdout.write(`
-${summary}
-`);
+  if (summary !== null) print("", summary);
 }
 async function disconnect(selectedSource, values) {
   await uninstallBackgroundService(selectedSource);
@@ -27620,8 +28371,13 @@ async function disconnect(selectedSource, values) {
       await uninstallCursorHooks(config3.cursorHome, config3.dataDirectory);
     else await uninstallTurnSummary(config3);
   }
-  process.stdout.write(
-    "Collector startup removed. Local pending data was retained.\n"
+  print(
+    mark(
+      terminal,
+      "success",
+      `${collectorSourceLabel(selectedSource)} is disconnected`
+    ),
+    wrap(terminal, "Collection stopped. Local pending data was kept.")
   );
 }
 async function dispatchSourceCommand(command, source, values, selectedSource) {
@@ -27636,7 +28392,9 @@ async function dispatchSourceCommand(command, source, values, selectedSource) {
   };
   validateSourceOptions();
   if (command === "connect" && selectedSource !== null) {
-    await initialize(selectedSource, values);
+    print(brand(terminal), "");
+    const { result } = await initialize(selectedSource, values);
+    print(...connectionSummary2([result], true));
     return;
   }
   if (command === "run") {
@@ -27668,9 +28426,7 @@ async function showStatus(source, selectedSource, values) {
   await adoptRuntime();
   await status(selectedSource ?? void 0, values);
   const summary = await runtimeSummaryText();
-  if (summary !== null) process.stdout.write(`
-${summary}
-`);
+  if (summary !== null) print("", summary);
 }
 var background = process.argv[2] === "run";
 main().then(
@@ -27678,8 +28434,9 @@ main().then(
     if (background) process.exit(process.exitCode ?? 0);
   },
   (error3) => {
+    const message = error3 instanceof Error ? error3.message : "Unknown Iteration CLI error.";
     process.stderr.write(
-      `${error3 instanceof Error ? error3.message : "Unknown Iteration CLI error."}
+      `${process.stderr.isTTY ? mark(terminalFor(process.stderr), "failure", message) : message}
 `
     );
     process.exitCode = 1;