sandstream-kit 1.0.0

package/dist/onepassword.js

@@ -0,0 +1,140 @@
+import { exec } from "./utils/exec.js";
+/**
+ * Check if 1Password CLI (op) is installed and authenticated
+ */
+export async function check1PasswordStatus() {
+    try {
+        // Test if op CLI is available
+        const { stdout: versionOutput } = await exec("op", ["--version"], {
+            timeout: 5000,
+        });
+        if (!versionOutput) {
+            return {
+                installed: false,
+                authenticated: false,
+                error: "op CLI returned no version information",
+            };
+        }
+        // Test if user is authenticated
+        try {
+            await exec("op", ["whoami"], { timeout: 5000 });
+            return {
+                installed: true,
+                authenticated: true,
+            };
+        }
+        catch {
+            return {
+                installed: true,
+                authenticated: false,
+                error: "op CLI is installed but you are not signed in. Run 'op signin' to authenticate.",
+            };
+        }
+    }
+    catch {
+        return {
+            installed: false,
+            authenticated: false,
+            error: "op CLI not found. Install 1Password CLI: https://developer.1password.com/docs/cli/get-started/",
+        };
+    }
+}
+/**
+ * Lists configured 1Password accounts (`op account list`). Returns [] if op
+ * is missing, no account has been added yet, or the call fails. Used to
+ * distinguish "user has no account configured" from "user signed out" —
+ * the two need different remediation paths.
+ */
+export async function list1PasswordAccounts() {
+    try {
+        const { stdout } = await exec("op", ["account", "list", "--format=json"], {
+            timeout: 5000,
+        });
+        if (!stdout.trim())
+            return [];
+        return JSON.parse(stdout);
+    }
+    catch {
+        return [];
+    }
+}
+export async function detect1PasswordMode() {
+    if (process.env.OP_SERVICE_ACCOUNT_TOKEN) {
+        return {
+            mode: "service-account",
+            hint: "OP_SERVICE_ACCOUNT_TOKEN is set — using headless mode.",
+        };
+    }
+    const status = await check1PasswordStatus();
+    if (!status.installed) {
+        return {
+            mode: "not-installed",
+            hint: "Install: https://developer.1password.com/docs/cli/get-started/",
+        };
+    }
+    const accounts = await list1PasswordAccounts();
+    if (accounts.length === 0) {
+        return {
+            mode: "no-account",
+            hint: "Run 'op account add' first (one-time), then re-run kit.",
+        };
+    }
+    if (status.authenticated) {
+        return {
+            mode: "desktop-integration",
+            hint: "Authenticated via desktop app or active OP_SESSION.",
+        };
+    }
+    return {
+        mode: "eval-signin",
+        hint: "Either enable 1Password 8 → Developer → 'Connect with CLI' for biometric, " +
+            "or run `eval $(op signin)` in your shell before re-running kit.",
+    };
+}
+/**
+ * List available 1Password vaults
+ */
+export async function list1PasswordVaults() {
+    try {
+        const { stdout } = await exec("op", ["vault", "list", "--format=json"], {
+            timeout: 10000,
+        });
+        const vaults = JSON.parse(stdout);
+        return vaults;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * List items in a specific vault
+ */
+export async function list1PasswordItems(vaultId) {
+    try {
+        const { stdout } = await exec("op", ["item", "list", "--vault", vaultId, "--format=json"], { timeout: 10000 });
+        const items = JSON.parse(stdout);
+        return items;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Generate a reference string for a 1Password item
+ * Helps users construct proper ref strings for config
+ */
+export function generate1PasswordRef(vault, item, field) {
+    if (field) {
+        return `op://${vault}/${item}/${field}`;
+    }
+    return `op://${vault}/${item}`;
+}
+/**
+ * Validate a 1Password reference string format
+ */
+export function validate1PasswordRef(ref) {
+    // ref should be op://vault/item or op://vault/item/field
+    const pattern = /^op:\/\/[^\/]+\/[^\/]+(\/.+)?$/;
+    return pattern.test(ref);
+}
+//# sourceMappingURL=onepassword.js.map

package/dist/onepassword.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onepassword.js","sourceRoot":"","sources":["../src/onepassword.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAsBvC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE;YAChE,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,KAAK;gBACpB,KAAK,EAAE,wCAAwC;aAChD,CAAC;QACJ,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;aACpB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,KAAK;gBACpB,KAAK,EAAE,iFAAiF;aACzF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,KAAK;YACpB,KAAK,EACH,gGAAgG;SACnG,CAAC;IACJ,CAAC;AACH,CAAC;AAWD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE;YACxE,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAyB,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAoBD,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;QACzC,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,wDAAwD;SAC/D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,gEAAgE;SACvE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,yDAAyD;SAChE,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,qDAAqD;SAC5D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,IAAI,EACF,4EAA4E;YAC5E,iEAAiE;KACpE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE;YACtE,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAuB,CAAC;QACxD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAC3B,IAAI,EACJ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,EACrD,EAAE,OAAO,EAAE,KAAK,EAAE,CACnB,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAsB,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,IAAY,EACZ,KAAc;IAEd,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,QAAQ,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,yDAAyD;IACzD,MAAM,OAAO,GAAG,gCAAgC,CAAC;IACjD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC"}

package/dist/open.d.ts

@@ -0,0 +1,30 @@
+export interface ServiceDashboard {
+    name: string;
+    label: string;
+    docUrl: string;
+    dashboardUrl: (env: Record<string, string>) => string | null;
+}
+export declare function listServices(): ServiceDashboard[];
+export declare function findService(name: string): ServiceDashboard | undefined;
+/**
+ * Get the dashboard URL for a service.
+ * Returns null if no URL is available.
+ */
+export declare function getServiceUrl(name: string, env: Record<string, string>): string | null;
+/**
+ * Open a URL in the default browser.
+ * Falls back to printing the URL if opening fails.
+ */
+export declare function openInBrowser(url: string): Promise<{
+    success: boolean;
+    message: string;
+}>;
+/**
+ * Open a service dashboard or documentation.
+ * If url is "docs", opens documentation instead of dashboard.
+ */
+export declare function openService(serviceName: string, env: Record<string, string>, preferDocs?: boolean): Promise<{
+    success: boolean;
+    message: string;
+    url: string;
+}>;

package/dist/open.js

@@ -0,0 +1,166 @@
+import { spawn } from "node:child_process";
+import { platform } from "node:os";
+/** Known service dashboard mappings */
+const SERVICES = [
+    {
+        name: "stripe",
+        label: "Stripe Dashboard",
+        docUrl: "https://stripe.com/docs",
+        dashboardUrl: () => "https://dashboard.stripe.com",
+    },
+    {
+        name: "supabase",
+        label: "Supabase Studio",
+        docUrl: "https://supabase.com/docs",
+        dashboardUrl: (env) => {
+            const ref = env.SUPABASE_PROJECT_REF;
+            return ref ? `https://supabase.com/dashboard/project/${ref}` : "https://supabase.com/dashboard";
+        },
+    },
+    {
+        name: "vercel",
+        label: "Vercel Dashboard",
+        docUrl: "https://vercel.com/docs",
+        dashboardUrl: () => "https://vercel.com/dashboard",
+    },
+    {
+        name: "railway",
+        label: "Railway Dashboard",
+        docUrl: "https://docs.railway.app",
+        dashboardUrl: () => "https://railway.app/dashboard",
+    },
+    {
+        name: "sentry",
+        label: "Sentry Dashboard",
+        docUrl: "https://docs.sentry.io",
+        dashboardUrl: () => "https://sentry.io",
+    },
+    {
+        name: "posthog",
+        label: "PostHog Dashboard",
+        docUrl: "https://posthog.com/docs",
+        dashboardUrl: () => "https://app.posthog.com",
+    },
+    {
+        name: "neon",
+        label: "Neon Postgres Console",
+        docUrl: "https://neon.tech/docs",
+        dashboardUrl: () => "https://console.neon.tech",
+    },
+    {
+        name: "github",
+        label: "GitHub",
+        docUrl: "https://docs.github.com",
+        dashboardUrl: () => "https://github.com",
+    },
+    {
+        name: "aws",
+        label: "AWS Console",
+        docUrl: "https://docs.aws.amazon.com",
+        dashboardUrl: () => "https://console.aws.amazon.com",
+    },
+    {
+        name: "gcp",
+        label: "Google Cloud Console",
+        docUrl: "https://cloud.google.com/docs",
+        dashboardUrl: () => "https://console.cloud.google.com",
+    },
+    {
+        name: "azure",
+        label: "Azure Portal",
+        docUrl: "https://docs.microsoft.com/azure",
+        dashboardUrl: () => "https://portal.azure.com",
+    },
+    {
+        name: "docs",
+        label: "kit Documentation",
+        docUrl: "https://github.com/sandstream/kit",
+        dashboardUrl: () => "https://github.com/sandstream/kit",
+    },
+];
+export function listServices() {
+    return SERVICES;
+}
+export function findService(name) {
+    return SERVICES.find((s) => s.name.toLowerCase() === name.toLowerCase());
+}
+/**
+ * Get the dashboard URL for a service.
+ * Returns null if no URL is available.
+ */
+export function getServiceUrl(name, env) {
+    const service = findService(name);
+    if (!service)
+        return null;
+    return service.dashboardUrl(env);
+}
+/**
+ * Open a URL in the default browser.
+ * Falls back to printing the URL if opening fails.
+ */
+export async function openInBrowser(url) {
+    // Determine the open command based on platform
+    const cmd = platform() === "darwin" ? "open" : platform() === "win32" ? "start" : "xdg-open";
+    return new Promise((resolve) => {
+        const child = spawn(cmd, [url], { stdio: "pipe" });
+        let timeout;
+        // Set a timeout to consider it successful if no error within 100ms
+        timeout = setTimeout(() => {
+            resolve({
+                success: true,
+                message: `Opened in browser: ${url}`,
+            });
+        }, 100);
+        child.on("error", () => {
+            clearTimeout(timeout);
+            resolve({
+                success: false,
+                message: `Could not open in browser. Visit: ${url}`,
+            });
+        });
+        child.on("close", (code) => {
+            clearTimeout(timeout);
+            if (code === 0) {
+                resolve({
+                    success: true,
+                    message: `Opened in browser: ${url}`,
+                });
+            }
+            else {
+                resolve({
+                    success: false,
+                    message: `Could not open in browser. Visit: ${url}`,
+                });
+            }
+        });
+    });
+}
+/**
+ * Open a service dashboard or documentation.
+ * If url is "docs", opens documentation instead of dashboard.
+ */
+export async function openService(serviceName, env, preferDocs = false) {
+    const service = findService(serviceName);
+    if (!service) {
+        return {
+            success: false,
+            message: `Unknown service: ${serviceName}`,
+            url: "",
+        };
+    }
+    const urlToOpen = preferDocs ? service.docUrl : getServiceUrl(serviceName, env);
+    if (!urlToOpen) {
+        return {
+            success: false,
+            message: `No URL available for ${service.label}`,
+            url: "",
+        };
+    }
+    const result = await openInBrowser(urlToOpen);
+    return {
+        success: result.success,
+        message: result.message,
+        url: urlToOpen,
+    };
+}
+//# sourceMappingURL=open.js.map

package/dist/open.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open.js","sourceRoot":"","sources":["../src/open.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AASnC,uCAAuC;AACvC,MAAM,QAAQ,GAAuB;IACnC;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE,yBAAyB;QACjC,YAAY,EAAE,GAAG,EAAE,CAAC,8BAA8B;KACnD;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,2BAA2B;QACnC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE;YACpB,MAAM,GAAG,GAAG,GAAG,CAAC,oBAAoB,CAAC;YACrC,OAAO,GAAG,CAAC,CAAC,CAAC,0CAA0C,GAAG,EAAE,CAAC,CAAC,CAAC,gCAAgC,CAAC;QAClG,CAAC;KACF;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE,yBAAyB;QACjC,YAAY,EAAE,GAAG,EAAE,CAAC,8BAA8B;KACnD;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,mBAAmB;QAC1B,MAAM,EAAE,0BAA0B;QAClC,YAAY,EAAE,GAAG,EAAE,CAAC,+BAA+B;KACpD;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE,wBAAwB;QAChC,YAAY,EAAE,GAAG,EAAE,CAAC,mBAAmB;KACxC;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,mBAAmB;QAC1B,MAAM,EAAE,0BAA0B;QAClC,YAAY,EAAE,GAAG,EAAE,CAAC,yBAAyB;KAC9C;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,wBAAwB;QAChC,YAAY,EAAE,GAAG,EAAE,CAAC,2BAA2B;KAChD;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,yBAAyB;QACjC,YAAY,EAAE,GAAG,EAAE,CAAC,oBAAoB;KACzC;IACD;QACE,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,6BAA6B;QACrC,YAAY,EAAE,GAAG,EAAE,CAAC,gCAAgC;KACrD;IACD;QACE,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,+BAA+B;QACvC,YAAY,EAAE,GAAG,EAAE,CAAC,kCAAkC;KACvD;IACD;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,cAAc;QACrB,MAAM,EAAE,kCAAkC;QAC1C,YAAY,EAAE,GAAG,EAAE,CAAC,0BAA0B;KAC/C;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,mBAAmB;QAC1B,MAAM,EAAE,mCAAmC;QAC3C,YAAY,EAAE,GAAG,EAAE,CAAC,mCAAmC;KACxD;CACF,CAAC;AAEF,MAAM,UAAU,YAAY;IAC1B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAA2B;IACrE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,+CAA+C;IAC/C,MAAM,GAAG,GAAG,QAAQ,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IAE7F,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAEnD,IAAI,OAAsC,CAAC;QAE3C,mEAAmE;QACnE,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YACxB,OAAO,CAAC;gBACN,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,sBAAsB,GAAG,EAAE;aACrC,CAAC,CAAC;QACL,CAAC,EAAE,GAAG,CAAC,CAAC;QAER,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC;gBACN,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,qCAAqC,GAAG,EAAE;aACpD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,CAAC;oBACN,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,sBAAsB,GAAG,EAAE;iBACrC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC;oBACN,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,qCAAqC,GAAG,EAAE;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,WAAmB,EACnB,GAA2B,EAC3B,UAAU,GAAG,KAAK;IAElB,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAEzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,oBAAoB,WAAW,EAAE;YAC1C,GAAG,EAAE,EAAE;SACR,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAEhF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,wBAAwB,OAAO,CAAC,KAAK,EAAE;YAChD,GAAG,EAAE,EAAE;SACR,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAE9C,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,EAAE,SAAS;KACf,CAAC;AACJ,CAAC"}

package/dist/output.d.ts

@@ -0,0 +1,32 @@
+import type { ToolStatus } from "./check-tools.js";
+import type { ServiceStatus } from "./check-services.js";
+import type { SecretStatus } from "./check-secrets.js";
+import type { SkillCheckResult } from "./check-skills.js";
+import type { SecurityCheckResult } from "./check-security.js";
+import type { LockCheckResult } from "./check-lock.js";
+import type { WebSearchStatus } from "./check-web-search.js";
+/** Section header for a group of live steps (e.g. "Checks"). */
+export declare function stepHeader(title: string): void;
+/** Human-readable duration: sub-second in ms, otherwise one-decimal seconds. */
+export declare function fmtDuration(ms: number): string;
+/**
+ * Run a labeled async step with live terminal feedback + timing.
+ *
+ * On a TTY: prints a "running" line, then rewrites it in place to ✓/✗ with the
+ * elapsed time. On a pipe/CI (non-TTY): prints a start line and a separate end
+ * line (no cursor rewrite, so logs stay readable). Returns the fn's result; on
+ * throw, marks the step ✗ and re-throws so callers keep their control flow.
+ *
+ * Shares its visual language (▶ / ✓ / ✗ + step duration) with the shell
+ * pre-commit hook generated in hooks.ts.
+ */
+export declare function runStep<T>(label: string, fn: () => Promise<T> | T): Promise<T>;
+export declare function printToolsTable(tools: ToolStatus[]): void;
+export declare function printServicesTable(services: ServiceStatus[]): void;
+export declare function printSecretsTable(templateExists: boolean | null, secrets: SecretStatus[]): void;
+export declare function printSkillsTable(skills: SkillCheckResult[]): void;
+export declare function printWebSearchStatus(status: WebSearchStatus | null): void;
+export declare function printSecurityTable(results: SecurityCheckResult[]): void;
+export declare function printLockTable(results: LockCheckResult[]): void;
+export declare function printAuditTable(events: import("./audit.js").AuditEvent[]): void;
+export declare function printSummary(tools: ToolStatus[], services: ServiceStatus[], secrets: SecretStatus[], security?: SecurityCheckResult[]): void;

package/dist/output.js

@@ -0,0 +1,295 @@
+// ANSI color codes
+const c = {
+    reset: "\x1b[0m",
+    bold: "\x1b[1m",
+    dim: "\x1b[2m",
+    green: "\x1b[32m",
+    red: "\x1b[31m",
+    yellow: "\x1b[33m",
+    cyan: "\x1b[36m",
+    gray: "\x1b[90m",
+};
+const CHECK = `${c.green}✓${c.reset}`;
+const CROSS = `${c.red}✗${c.reset}`;
+const WARN = `${c.yellow}!${c.reset}`;
+function pad(s, len) {
+    // Strip ANSI for length calculation
+    const stripped = s.replace(/\x1b\[[0-9;]*m/g, "");
+    return s + " ".repeat(Math.max(0, len - stripped.length));
+}
+function header(title) {
+    console.log();
+    console.log(`${c.bold}${c.cyan}${title}${c.reset}`);
+    console.log(`${c.dim}${"─".repeat(50)}${c.reset}`);
+}
+/** Section header for a group of live steps (e.g. "Checks"). */
+export function stepHeader(title) {
+    header(title);
+}
+/** Human-readable duration: sub-second in ms, otherwise one-decimal seconds. */
+export function fmtDuration(ms) {
+    return ms < 1000 ? `${Math.round(ms)}ms` : `${(ms / 1000).toFixed(1)}s`;
+}
+/**
+ * Run a labeled async step with live terminal feedback + timing.
+ *
+ * On a TTY: prints a "running" line, then rewrites it in place to ✓/✗ with the
+ * elapsed time. On a pipe/CI (non-TTY): prints a start line and a separate end
+ * line (no cursor rewrite, so logs stay readable). Returns the fn's result; on
+ * throw, marks the step ✗ and re-throws so callers keep their control flow.
+ *
+ * Shares its visual language (▶ / ✓ / ✗ + step duration) with the shell
+ * pre-commit hook generated in hooks.ts.
+ */
+export async function runStep(label, fn) {
+    const start = Date.now();
+    const tty = process.stdout.isTTY === true;
+    if (tty) {
+        process.stdout.write(`  ${c.cyan}▶${c.reset} ${label}${c.dim}…${c.reset}`);
+    }
+    else {
+        console.log(`  ${c.cyan}▶${c.reset} ${label}`);
+    }
+    try {
+        const result = await fn();
+        const dur = `${c.dim}${fmtDuration(Date.now() - start)}${c.reset}`;
+        if (tty) {
+            process.stdout.write(`\r\x1b[K  ${CHECK} ${label}  ${dur}\n`);
+        }
+        else {
+            console.log(`  ${CHECK} ${label}  ${dur}`);
+        }
+        return result;
+    }
+    catch (err) {
+        const dur = `${c.dim}${fmtDuration(Date.now() - start)}${c.reset}`;
+        if (tty) {
+            process.stdout.write(`\r\x1b[K  ${CROSS} ${label}  ${dur}\n`);
+        }
+        else {
+            console.log(`  ${CROSS} ${label}  ${dur}`);
+        }
+        throw err;
+    }
+}
+export function printToolsTable(tools) {
+    if (tools.length === 0)
+        return;
+    header("Tools");
+    const nameWidth = Math.max(12, ...tools.map((t) => t.name.length)) + 2;
+    for (const tool of tools) {
+        const icon = tool.ok ? CHECK : CROSS;
+        const name = pad(tool.name, nameWidth);
+        const version = tool.installed
+            ? `${c.dim}${tool.installed}${c.reset}`
+            : `${c.red}not installed${c.reset}`;
+        const required = `${c.gray}(need ${tool.required})${c.reset}`;
+        console.log(`  ${icon} ${name} ${version}  ${required}`);
+    }
+}
+export function printServicesTable(services) {
+    if (services.length === 0)
+        return;
+    header("Services");
+    const nameWidth = Math.max(12, ...services.map((s) => s.name.length)) + 2;
+    for (const svc of services) {
+        const icon = svc.authenticated ? CHECK : CROSS;
+        const name = pad(svc.name, nameWidth);
+        const status = svc.authenticated
+            ? `${c.green}authenticated${c.reset}`
+            : `${c.red}not authenticated${c.reset}`;
+        const detail = svc.output ? `  ${c.gray}${svc.output.substring(0, 60)}${c.reset}` : "";
+        console.log(`  ${icon} ${name} ${status}${detail}`);
+    }
+}
+export function printSecretsTable(templateExists, secrets) {
+    if (secrets.length === 0 && templateExists === null)
+        return;
+    header("Secrets");
+    if (templateExists !== null) {
+        const icon = templateExists ? CHECK : CROSS;
+        const status = templateExists
+            ? `${c.green}found${c.reset}`
+            : `${c.red}missing${c.reset}`;
+        console.log(`  ${icon} ${pad("template", 14)} ${status}`);
+    }
+    // When every 1Password-backed secret fails with the same auth error,
+    // collapse them into one banner line instead of spamming N identical rows.
+    const opSecrets = secrets.filter((s) => s.source === "1password");
+    const opUnauth = opSecrets.filter((s) => s.detail.startsWith("1Password not authenticated"));
+    const aggregate1pUnauth = opSecrets.length > 0 && opUnauth.length === opSecrets.length;
+    if (aggregate1pUnauth) {
+        console.log(`  ${CROSS} ${c.red}1Password not authenticated${c.reset} ${c.gray}(${opUnauth.length} secret(s) blocked)${c.reset}`);
+        console.log(`    ${c.yellow}→ run 'op signin' to authenticate${c.reset}`);
+    }
+    const renderable = aggregate1pUnauth
+        ? secrets.filter((s) => s.source !== "1password")
+        : secrets;
+    if (renderable.length === 0)
+        return;
+    const nameWidth = Math.max(14, ...renderable.map((s) => s.name.length)) + 2;
+    for (const secret of renderable) {
+        const icon = secret.available ? CHECK : CROSS;
+        const name = pad(secret.name, nameWidth);
+        const source = `${c.gray}[${secret.source}]${c.reset}`;
+        const detail = secret.available
+            ? `${c.green}available${c.reset}`
+            : `${c.red}${secret.detail}${c.reset}`;
+        console.log(`  ${icon} ${name} ${source} ${detail}`);
+    }
+}
+export function printSkillsTable(skills) {
+    if (skills.length === 0)
+        return;
+    header("Skills");
+    const nameWidth = Math.max(12, ...skills.map((s) => s.name.length)) + 2;
+    for (const skill of skills) {
+        const icon = skill.installed ? CHECK : skill.required ? CROSS : WARN;
+        const name = pad(skill.name, nameWidth);
+        const tag = skill.required
+            ? `${c.gray}[required]${c.reset}`
+            : `${c.gray}[optional]${c.reset}`;
+        const status = skill.installed
+            ? `${c.green}installed${c.reset}`
+            : skill.required
+                ? `${c.red}missing${c.reset}`
+                : `${c.yellow}not installed${c.reset}`;
+        const version = `${c.dim}${skill.versionSpec}${c.reset}`;
+        console.log(`  ${icon} ${name} ${tag} ${status}  ${version}`);
+    }
+}
+export function printWebSearchStatus(status) {
+    if (!status)
+        return;
+    header("Web Search");
+    const icon = status.healthy ? CHECK : CROSS;
+    const name = pad(status.provider, 14);
+    const configured = status.configured ? `${c.green}configured${c.reset}` : `${c.yellow}not configured${c.reset}`;
+    const health = status.healthy ? `${c.green}healthy${c.reset}` : `${c.red}unhealthy${c.reset}`;
+    const detail = status.error ? `${c.gray}${status.error}${c.reset}` : status.url ? `${c.gray}${status.url}${c.reset}` : "";
+    console.log(`  ${icon} ${name} ${configured}  ${health}`);
+    if (detail) {
+        console.log(`    ${detail}`);
+    }
+}
+export function printSecurityTable(results) {
+    if (results.length === 0)
+        return;
+    header("Security");
+    // Group by category
+    const byCategory = {};
+    for (const result of results) {
+        if (!byCategory[result.category]) {
+            byCategory[result.category] = [];
+        }
+        byCategory[result.category].push(result);
+    }
+    const categories = ["dependency", "exposure", "supply-chain", "secrets"];
+    for (const category of categories) {
+        const items = byCategory[category];
+        if (!items || items.length === 0)
+            continue;
+        const nameWidth = Math.max(20, ...items.map((r) => r.name.length)) + 2;
+        for (const result of items) {
+            const icon = result.status === "pass"
+                ? CHECK
+                : result.status === "fail"
+                    ? CROSS
+                    : result.status === "warn"
+                        ? WARN
+                        : `${c.dim}−${c.reset}`;
+            const name = pad(result.name, nameWidth);
+            const statusColor = result.status === "pass"
+                ? c.green
+                : result.status === "fail"
+                    ? c.red
+                    : result.status === "warn"
+                        ? c.yellow
+                        : c.dim;
+            const detail = `${c.gray}${result.detail}${c.reset}`;
+            const severity = result.severity
+                ? `${c.dim}[${result.severity}]${c.reset}`
+                : "";
+            console.log(`  ${icon} ${name} ${statusColor}${result.status}${c.reset}  ${detail} ${severity}`);
+            // Show affected files if available (limit to first 5)
+            if (result.files && result.files.length > 0) {
+                const filesToShow = result.files.slice(0, 5);
+                for (const file of filesToShow) {
+                    console.log(`    ${c.dim}• ${file}${c.reset}`);
+                }
+                if (result.files.length > 5) {
+                    console.log(`    ${c.dim}... and ${result.files.length - 5} more file(s)${c.reset}`);
+                }
+            }
+            // Show suggestion/remediation if available
+            if (result.suggestion) {
+                console.log(`    ${c.yellow}${result.suggestion}${c.reset}`);
+            }
+        }
+    }
+}
+export function printLockTable(results) {
+    if (results.length === 0)
+        return;
+    header("Lock Files");
+    for (const result of results) {
+        const icon = result.inSync ? CHECK : result.exists ? WARN : CROSS;
+        const name = result.category === "skills-lock" ? "skills-lock.json" : "cli-lock.json";
+        const status = result.inSync
+            ? `${c.green}in sync${c.reset}`
+            : result.exists
+                ? `${c.yellow}out of sync${c.reset}`
+                : `${c.red}missing${c.reset}`;
+        const detail = `${c.gray}${result.detail}${c.reset}`;
+        console.log(`  ${icon} ${pad(name, 20)} ${status}  ${detail}`);
+        if (result.missing.length > 0 && result.missing.length <= 5) {
+            const missingList = result.missing.join(", ");
+            console.log(`    ${c.dim}Missing: ${missingList}${c.reset}`);
+        }
+    }
+}
+export function printAuditTable(events) {
+    if (events.length === 0) {
+        console.log(`${c.dim}No audit log entries found.${c.reset}`);
+        return;
+    }
+    header("Audit Log");
+    const opWidth = Math.max(14, ...events.map((e) => e.operation.length)) + 2;
+    const envWidth = Math.max(6, ...events.map((e) => e.environment.length)) + 2;
+    const actorWidth = Math.max(8, ...events.map((e) => (e.agent_name ?? e.agent_id ?? "unknown").length)) + 2;
+    for (const event of events) {
+        const icon = event.success ? CHECK : CROSS;
+        const ts = new Date(event.timestamp).toLocaleString();
+        const op = pad(event.operation, opWidth);
+        const env = pad(`[${event.environment}]`, envWidth + 2);
+        const actor = pad(event.agent_name ?? event.agent_id ?? "unknown", actorWidth);
+        const duration = event.duration_ms != null ? `${c.dim}${event.duration_ms}ms${c.reset}` : "";
+        console.log(`  ${icon} ${c.dim}${ts}${c.reset}  ${op}  ${c.gray}${env}${c.reset}  ${actor}  ${duration}`);
+        if (event.error) {
+            console.log(`    ${c.red}Error: ${event.error}${c.reset}`);
+        }
+    }
+}
+export function printSummary(tools, services, secrets, security) {
+    console.log();
+    const toolsOk = tools.filter((t) => t.ok).length;
+    const servicesOk = services.filter((s) => s.authenticated).length;
+    const secretsOk = secrets.filter((s) => s.available).length;
+    const securityOk = security
+        ? security.filter((s) => s.status === "pass" || s.status === "skip").length
+        : 0;
+    const total = tools.length + services.length + secrets.length + (security?.length || 0);
+    const ok = toolsOk + servicesOk + secretsOk + securityOk;
+    const allGood = ok === total;
+    if (allGood) {
+        console.log(`${c.bold}${c.green}All ${total} checks passed ✓${c.reset}`);
+    }
+    else {
+        console.log(`${c.bold}${ok}/${total} checks passed${c.reset}` +
+            `  ${c.red}(${total - ok} issues)${c.reset}`);
+        console.log();
+        console.log(`${c.dim}Run ${c.reset}${c.bold}kit install${c.reset}${c.dim} to fix tools, ${c.reset}${c.bold}kit login${c.reset}${c.dim} to fix auth${c.reset}`);
+    }
+    console.log();
+}
+//# sourceMappingURL=output.js.map