syndai 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -2,6 +2,38 @@
 
 All notable changes to the `syndai` npm package. Versions follow semver.
 
+## 0.6.0
+
+The steps that stay in the browser are one command away, and an agent can sign up.
+
+- `signup <email> [--code C]`: a new workspace and its key from a 6-digit code emailed to that
+  address, no browser. Continuing accepts the Terms and Privacy Policy (asked y/N on a terminal).
+  Off a terminal it mails the code and exits 3; rerun with `--code`, which only verifies. The
+  key is stored as `login` stores it. An address that already has a workspace uses `login`.
+- `connect <provider>` prints, and opens on a terminal, the workspace page that connects it
+  (`github`, `sentry`, `claude`, `chatgpt`, `openrouter`, `slack` and the social accounts).
+- `billing` shows the plan, the balance and the billing page; `billing packs` lists the credit
+  packs; `billing buy <pack>` and `billing plan <tier> [--interval month|year]` open a checkout a
+  person pays (nothing is charged until then); `card`, `cancel` and a plan change go to the
+  billing page.
+- `publish [--app A]` publishes the project as a hosted app and prints its live URL.
+- Out-of-credits and plan errors now name the workspace's billing page
+  (`https://app.syndai.ai/w/<id>/billing`; the old `app.syndai.ai/billing` link was dead), and
+  code-host errors its repositories card; both open on a terminal.
+- `watch` and `answer` print a question's connect link ("Connect it here") and open it on a
+  terminal.
+
+- `schedule add|edit` and `repeat` take `--budget` in credits (1 credit = US$0.25; the lowest
+  cap is 20 credits), and `schedule show` and `repeat` print the cap and the last run's cost in
+  credits, matching the portal. `--budget 5` used to mean US$5; it now means 5 credits.
+- `watch` (and `change`, `review`, which watch to the outcome) keeps watching through a deploy:
+  a run of 502/503s or dropped connections no longer ends it. It says once that Syndai is
+  unreachable and gives up only after 10 minutes without an answer.
+- `change --learn URL --sign-in` and `new "<text with a product link>" --sign-in`: before Syndai
+  reads the product, the run's page asks you to sign in to it yourself in a secure browser and
+  capture the in-app pages to learn from (or skip for public pages only). The CLI prints where to
+  do it and never asks for a password. `--sign-in` without a product is a usage error (exit 2).
+
 ## 0.5.0
 
 Environments and secrets from a terminal, Doppler-style.

package/README.md

@@ -30,27 +30,31 @@ README is for whoever works on the package.
 | command | does |
 |---|---|
 | `login [--with-token] [--scope S]...`, `logout`, `whoami` | browser-approved key (device flow); `--scope` asks for access on top of the key's current scopes; `--with-token` reads a key from stdin. Re-login saves the new key, then revokes the old one |
+| `signup <email> [--code C]` | a new workspace and its key from a 6-digit emailed code (no browser); states that continuing accepts the Terms and Privacy Policy and asks y/N on a terminal. Off a terminal it mails the code and exits 3; `--code` only verifies (it never mails a new code). Stores the key as `login` does. An address that already has a workspace gets `code_invalid`: use `login` |
 | `link [project] [--env E]` | remember which project (and environment) this directory uses (`$XDG_CONFIG_HOME/syndai/links.json`, never in the repo); a re-link keeps the environment |
 | `env ls`, `env use <env>` | the workspace's environments (current marked); `use` stores one in this directory's link (an environment-only link when there is none). Chosen: `--env`, `SYNDAI_ENV`, the link, the workspace default |
 | `secrets [ls]` | names, scope (shared/project) and updated for the environment and this project; never a value, in text or `--json` |
 | `secrets set KEY`, `rm KEY [--yes]`, `import FILE\|-` [`--project`] | write shared values (or the project's with `--project`); `set` reads the value from a hidden prompt (one line) or stdin (any value, multi-line too), and refuses one on the command line without echoing it |
 | `secrets get KEY [--plain]`, `download [-o FILE]` | read values back: `get` refuses a pipe without `--plain` (then the exact bytes) and `--json`; `download` writes a pipe, or a 0600 file (`-o`, required on a terminal) and warns when git does not ignore it |
 | `run [--env E] [--app A] [--] <command>...` | spawn the command (syndai's options end at its first word; `--` only for a dash-led command) with the values added to its environment only; prints `Injected N values from <env>`; its exit code (a signal: 128+n, not found: 127) is syndai's |
-| `change "<what>" [--app A] [--review] [--learn URL] [--image F]... [--no-wait] [--timeout D]` | start a change and follow it to the outcome; `--learn URL` reads that product's public pages and asks which of its features to add (3 pre-checked), then adds only those |
-| `new "<what>" [--no-learn] [--no-wait] [--timeout D]` | start a New project; a product URL in the text builds your own version of it (its feature pick is asked inline, Enter keeps the pre-checked core) |
+| `change "<what>" [--app A] [--review] [--learn URL [--sign-in]] [--image F]... [--no-wait] [--timeout D]` | start a change and follow it to the outcome; `--learn URL` reads that product's public pages and asks which of its features to add (3 pre-checked), then adds only those; `--sign-in` first has the run's page ask you to sign in to it yourself in a secure browser and capture its in-app pages (never a password here) |
+| `new "<what>" [--no-learn \| --sign-in] [--no-wait] [--timeout D]` | start a New project; a product URL in the text builds your own version of it (its feature pick is asked inline, Enter keeps the pre-checked core); `--sign-in` as for `change` |
 | `edit-text [--app A] [--page /] --from "..." --to "..."` / `--undo <sha>` | instant, free, undoable text swap on a live site |
 | `watch <run> [--timeout D] [--logs]` | follow any change; `--logs` tails its events |
 | `answer <run> [--input FILE\|-]` | answer an open question (`--input`: `{"entries":[...]}` from a file or stdin) |
 | `review <run> [--retry \| --close]` | see why a change is held, then approve it in the browser |
 | `go-live`, `revert`, `cancel <run>` | land actions |
+| `publish [--app A]` | publish (or redeploy) the project as a hosted app and print its live URL (`coding:apps:publish`) |
+| `connect <provider>` | print, and open on a terminal, the workspace page that connects it: `github` -> `settings#repositories`, `sentry` -> `sentry`, the plan logins, OpenRouter, Slack and social accounts -> `connections?connect=<provider>`. Finish in the browser; no key reads connection status |
+| `billing [--open]`, `packs`, `buy <pack>`, `plan <tier> [--interval month\|year] [--country CC]`, `card`, `cancel` | plan, balance (packs + included left - holds, as the portal shows it) and the billing page; `buy`/`plan` print and open a checkout a person pays (nothing is charged until then; `--country` else the locale's region else US prices it); `card`/`cancel` and an existing plan go to the billing page |
 | `status [--app A]` | what is running, and everything that needs you |
 | `settings [--app A] [get \| set k=v...]` | `autonomy`, `feature_requests`, `bug_scan`, `protected_paths` (`+=` adds) |
 | `mcp install claude\|cursor\|codex` | add the Syndai MCP server to that tool's user config, with its own key |
 | `schedule list [--app A \| --all]`, `show <id>` | a project's recurring runs: cadence, next fires, History |
-| `schedule add "<what>" --every E [--at T] [--tz Z] [--budget USD] [--app A]` | create one; `E` is `hourly` (`--at :MM`), `daily`/`weekdays` (`--at HH:MM`), `weekly` (`--at "mon HH:MM"`) or a 5-field cron |
-| `schedule edit <id> [--prompt P] [--every E] [--at T] [--tz Z] [--budget USD\|none]` | change only what differs |
+| `schedule add "<what>" --every E [--at T] [--tz Z] [--budget CREDITS] [--app A]` | create one; `E` is `hourly` (`--at :MM`), `daily`/`weekdays` (`--at HH:MM`), `weekly` (`--at "mon HH:MM"`) or a 5-field cron |
+| `schedule edit <id> [--prompt P] [--every E] [--at T] [--tz Z] [--budget CREDITS\|none]` | change only what differs |
 | `schedule pause \| resume \| run-now \| delete <id> [--yes]` | manage one (`delete` asks on a terminal, needs `--yes` off one) |
-| `repeat <run> --every E [--at T] [--tz Z] [--budget USD]` | repeat a run you liked; the server copies its prompt and project; the first run is the next scheduled time |
+| `repeat <run> --every E [--at T] [--tz Z] [--budget CREDITS]` | repeat a run you liked; the server copies its prompt and project; the first run is the next scheduled time |
 | `api` / `api <operationId> --help` | list every published operation / show one's parameters and body |
 | `api <operationId> \| <METHOD> <path> [-f k=v]... [-F k=v]... [--input FILE\|-] [--paginate] [--app A]` | call it with your key (`-f` string, `-F` typed, `k[]=v` lists) |
 
@@ -65,6 +69,12 @@ portal's key page or `mcp install`. A production environment's values also need
 in memory only, so another process with the same key gets nothing); off a terminal or under
 `SYNDAI_API_KEY` it exits 3.
 
+Errors a workspace page fixes name that page, `https://app.syndai.ai/w/<id>/<path>`
+(`portalUrl` in `src/errors.js`): out of credits or plan limits -> `billing`, a code-host
+connection -> `settings#repositories`. Like `review`, the CLI opens it on a terminal and
+only prints it under `--json` or `--no-input`. A question that needs a connection prints its
+`link` ("Connect it here") in `watch` and `answer`.
+
 Exit codes: 0 done, 1 failed/reverted/cancelled, 2 usage or no project, 3 needs you,
 4 live but unverified, 5 auth/scope/plan, 6 `--timeout` reached, 7 service
 unavailable after retries, 130 interrupted (Ctrl-C detaches; it never cancels).
@@ -84,6 +94,7 @@ unavailable after retries, 130 interrupted (Ctrl-C detaches; it never cancels).
 - `src/schedules.js`: `schedule` and `repeat` (the preset to cron mapping of `apps/portal-v2/src/lib/cadence.ts`).
 - `src/secrets.js`: `env`, `secrets` and `run` (environment choice, the production step-up retry).
 - `src/dotenv.js`: the `.env` reader (`import`) and writer (`download`); errors name lines, never values.
+- `src/portal.js`: `connect` and `billing`, the hand-offs to a workspace page.
 - `src/changes.js`, `src/settings.js`, `src/mcp.js`: the other commands.
 
 ## Development

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "syndai",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "The Syndai owner CLI: say what to change, and Syndai builds it, checks it and puts it live. Also installs the Syndai MCP server into Claude Code, Cursor and Codex.",
   "type": "module",
   "bin": {

package/src/auth.js

@@ -260,6 +260,50 @@ export async function login(ctx) {
   return EXIT.OK;
 }
 
+export const TERMS_URL = "https://syndai.ai/legal/terms";
+export const PRIVACY_URL = "https://syndai.ai/legal/privacy";
+
+/**
+ * `syndai signup <email> [--code C]`: a new workspace and its key from one emailed code
+ * (no browser). Without --code it mails a code and reads it from the prompt; off a terminal it
+ * stops there and names the rerun. With --code it only verifies: mailing again would replace
+ * the code being typed. The key is stored exactly as `login` stores it.
+ */
+export async function signup(ctx, [email]) {
+  const { io, ui, flags, client } = ctx;
+  if (!email) throw new CliError(EXIT.USAGE, "Which address? syndai signup you@example.com");
+  ui.progress(`Continuing accepts Syndai's Terms (${TERMS_URL}) and Privacy Policy (${PRIVACY_URL}).`);
+  if (ui.interactive && !/^y/i.test(await ask(io, "Continue? [y/N] "))) {
+    throw new CliError(EXIT.FAILED, "Not signed up; nothing was sent.");
+  }
+  let code = flags.code;
+  if (code === undefined) {
+    await client.call("signup", {
+      body: { email, accept_terms: true, client_name: "CLI", host: hostname() },
+      auth: false,
+    });
+    const next = `syndai signup ${email} --code <code>`;
+    if (!ui.interactive) {
+      ui.result({ status: "code_sent", email, next }, `We emailed a 6-digit code to ${email}.`);
+      if (!ui.json) ui.progress(`Next: ${next}`);
+      return EXIT.NEEDS_YOU;
+    }
+    ui.progress(`We emailed a 6-digit code to ${email}.`);
+    code = await ask(io, "Code: ");
+  }
+  const token = await client.call("signupVerify", {
+    body: { email, code: String(code).replace(/\s+/g, "") },
+    auth: false,
+  });
+  await storeKey(ctx, token);
+  if (io.env.SYNDAI_API_KEY) ui.progress(ui.yellow("Note: SYNDAI_API_KEY is set and wins over this login."));
+  ui.result(
+    { customer_id: token.customer_id, key_id: token.key_id, expires_at: token.expires_at, app_url: token.app_url },
+    `Signed up. Your workspace: ${token.app_url}`,
+  );
+  return EXIT.OK;
+}
+
 export async function logout(ctx) {
   const { io, ui, paths } = ctx;
   const stored = storedCredential(io, paths);

package/src/changes.js

@@ -36,6 +36,7 @@ export async function change(ctx, words) {
   const reference = flags.learn === undefined ? null : productUrlFromText(flags.learn);
   if (flags.learn !== undefined && !reference)
     throw new CliError(EXIT.USAGE, `--learn takes a public product URL, like https://cal.com, not ${flags.learn}.`);
+  needReferenceForSignIn(flags, reference);
   const project = await resolveProject(ctx, { app: flags.app });
   const outcome = flags.review ? "opens a pull request for your review" : "goes live when checks pass";
   ui.progress(`Changing ${projectHost(project)} · ${outcome}`);
@@ -59,12 +60,13 @@ export async function change(ctx, words) {
       coding_repository_id: project.id,
       external_request_id: pending.request_id,
       ...(imageRefs.length ? { image_refs: imageRefs } : {}),
-      ...referenceField(reference),
+      ...referenceField(reference, flags["sign-in"]),
       ...(flags.review ? { policy_config: { autonomy: "auto" } } : {}),
     },
   });
   clearPending(paths, pending.request_id);
   ui.progress(ui.dim(`Change ${runId}`));
+  signInHint(ctx, reference);
   if (flags["no-wait"]) {
     return finish(ctx, await getChange(ctx, runId), { exitCode: EXIT.OK, next: `syndai watch ${runId}` });
   }
@@ -89,7 +91,19 @@ export function productUrlFromText(text) {
 const hostOf = (url) => new URL(url).hostname.replace(/^www\./, "");
 // The typed top-level create-run field (learn-from-a-product L1); `metadata.reference_product` is
 // server-owned and 400s.
-const referenceField = (url) => (url ? { reference_product: { kind: "url", value: url } } : {});
+// `sign_in` only when asked, so a public-only request stays byte-identical.
+const referenceField = (url, signIn) =>
+  url ? { reference_product: { kind: "url", value: url, ...(signIn ? { sign_in: true } : {}) } } : {};
+
+/** --sign-in needs a product to sign in to; a usage error before any POST. */
+function needReferenceForSignIn(flags, reference, hint = "--learn <product URL>") {
+  if (flags["sign-in"] && !reference) throw new CliError(EXIT.USAGE, `--sign-in needs ${hint}.`);
+}
+
+/** The owner signs in on the run page themselves (never a password in the terminal). */
+function signInHint({ flags, ui }, reference) {
+  if (flags["sign-in"] && reference) ui.progress(`Sign in to ${hostOf(reference)} on the run page once it asks.`);
+}
 
 /** Build-home parity: start a New project. A product URL in the text makes it "your own version
  * of X" (SPEC-build-your-own D5) unless --no-learn; its feature-pick question is asked inline. */
@@ -98,7 +112,10 @@ export async function newProject(ctx, words) {
   const text = words.join(" ").trim();
   if (!text) throw new CliError(EXIT.USAGE, 'Say what to build: syndai new "a booking site for my salon"');
   const timeoutMs = timeoutOf(flags);
+  // --no-learn says "don't read that product"; --sign-in says "read it signed in": they conflict.
+  if (flags["no-learn"] && flags["sign-in"]) throw new CliError(EXIT.USAGE, "--sign-in and --no-learn can't be used together: --no-learn skips reading the product, --sign-in reads it signed in. Drop one.");
   const reference = flags["no-learn"] ? null : productUrlFromText(text);
+  needReferenceForSignIn(flags, reference, "a product URL in the text, like https://cal.com");
   ui.progress(
     reference
       ? `New project · your own version of ${hostOf(reference)}`
@@ -116,11 +133,12 @@ export async function newProject(ctx, words) {
       prompt: text,
       new_repository: { scaffold: "syndai-web" },
       external_request_id: pending.request_id,
-      ...referenceField(reference),
+      ...referenceField(reference, flags["sign-in"]),
     },
   });
   clearPending(paths, pending.request_id);
   ui.progress(ui.dim(`Change ${runId}`));
+  signInHint(ctx, reference);
   if (flags["no-wait"]) {
     return finish(ctx, await getChange(ctx, runId), { exitCode: EXIT.OK, next: `syndai watch ${runId}` });
   }

package/src/errors.js

@@ -40,9 +40,24 @@ export class ApiError extends Error {
 /** The service did not answer (network error, 5xx or 429) after the retry budget. */
 export class UnavailableError extends Error {}
 
-const BILLING_URL = "https://app.syndai.ai/billing";
 export const PORTAL_URL = "https://app.syndai.ai";
 
+/** A workspace page: `https://app.syndai.ai/w/<id>/<path>` (the portal root without an id). */
+export function portalUrl(customerId, path) {
+  return customerId ? `${PORTAL_URL}/w/${encodeURIComponent(customerId)}/${path}` : PORTAL_URL;
+}
+
+/** The workspace page that fixes each error, so a hint is the exact page, not the portal root. */
+export const PORTAL_PAGES = Object.freeze({
+  PLAN_UPGRADE_REQUIRED: "billing",
+  BUDGET_EXHAUSTED: "billing",
+  QUOTA_EXCEEDED: "billing",
+  INSTALLATION_INCOMPLETE: "settings#repositories",
+  REPO_NOT_BOUND: "settings#repositories",
+  ALREADY_SUBSCRIBED: "billing",
+  PLAN_UNKNOWN: "billing",
+});
+
 /**
  * A scope `syndai login --scope` may add with one browser approval. Members, keys and
  * unpublish stay portal-only: the approval page promises a CLI key never manages members or
@@ -52,7 +67,8 @@ export function steppable(scope) {
   return !/:members:|keys|:unpublish$/.test(scope);
 }
 
-// code -> [exit, sentence, next]. Either may be a function of the problem body.
+// code -> [exit, sentence, next]. Either may be a function of the problem body. A code in
+// PORTAL_PAGES has no `next` here: it is that page of the caller's workspace.
 const KNOWN = {
   INVALID_TOKEN: [EXIT.AUTH, "Your Syndai key is missing, expired or revoked.", "syndai login"],
   INVALID_SCOPE: [
@@ -67,9 +83,9 @@ const KNOWN = {
       !scope ? "syndai login" : steppable(scope) ? `syndai login --scope ${scope}` : PORTAL_URL,
   ],
   ROLE_REQUIRED: [EXIT.AUTH, "Only workspace owners and admins can do that.", null],
-  PLAN_UPGRADE_REQUIRED: [EXIT.AUTH, "Your plan does not include that.", BILLING_URL],
-  BUDGET_EXHAUSTED: [EXIT.AUTH, "This workspace is out of credits.", BILLING_URL],
-  QUOTA_EXCEEDED: [EXIT.AUTH, "This workspace is out of credits for now.", BILLING_URL],
+  PLAN_UPGRADE_REQUIRED: [EXIT.AUTH, "Your plan does not include that.", null],
+  BUDGET_EXHAUSTED: [EXIT.AUTH, "This workspace is out of credits.", null],
+  QUOTA_EXCEEDED: [EXIT.AUTH, "This workspace is out of credits for now.", null],
   CUSTOMER_DISABLED: [EXIT.AUTH, "This workspace is disabled. Contact Syndai support.", null],
   HUMAN_APPROVAL_REQUIRED: [
     EXIT.NEEDS_YOU,
@@ -88,12 +104,8 @@ const KNOWN = {
     "run it again in a terminal logged in with syndai login",
   ],
   RUN_CONCURRENCY_LIMIT: [EXIT.FAILED, "Too many changes are running at once.", "syndai status"],
-  REPO_NOT_BOUND: [EXIT.USAGE, "That project is not available to this workspace.", "syndai link"],
-  INSTALLATION_INCOMPLETE: [
-    EXIT.FAILED,
-    "A code-host connection needs finishing in the portal.",
-    "https://app.syndai.ai",
-  ],
+  REPO_NOT_BOUND: [EXIT.USAGE, "That project is not available to this workspace; connect its repository.", null],
+  INSTALLATION_INCOMPLETE: [EXIT.FAILED, "A code-host connection needs finishing in the portal.", null],
   HITL_REQUEST_SETTLED: [EXIT.FAILED, "That question is already answered or closed.", null],
   RUN_TERMINATED_BEFORE_RESPONSE: [EXIT.FAILED, "The change ended before your answer arrived.", null],
   TEXT_EDIT_REFUSED: [
@@ -117,12 +129,27 @@ const KNOWN = {
     "Learning from a product needs a Syndai site project.",
     null,
   ],
+  ALREADY_SUBSCRIBED: [EXIT.FAILED, "You're already on a paid plan; change it on the billing page.", null],
+  PLAN_UNKNOWN: [EXIT.USAGE, "That is not a plan you can pick; the plans are on the billing page.", null],
+  PACK_UNKNOWN: [EXIT.USAGE, "No such credit pack.", "syndai billing packs"],
+  // `syndai signup` (problem+json, lowercase codes like the sign-in routes).
+  invalid_email: [EXIT.USAGE, "That is not a valid email address.", null],
+  email_disposable: [EXIT.USAGE, "Use a permanent email address; disposable ones can't sign up.", null],
+  terms_required: [EXIT.USAGE, "Signing up needs the Terms and Privacy Policy accepted.", null],
+  sso_required: [EXIT.AUTH, "This address signs in with its organization's SSO; sign up in the browser.", PORTAL_URL],
+  code_invalid: [
+    EXIT.AUTH,
+    "That code is not right. If you already have a workspace, run `syndai login`.",
+    null,
+  ],
+  code_expired: [EXIT.AUTH, "That code expired or was already used.", "syndai signup <email> (for a new code)"],
+  attempts_exhausted: [EXIT.AUTH, "Too many wrong codes for this address; try again tomorrow.", null],
   NOT_FOUND: [EXIT.FAILED, "Not found.", "syndai status"],
   RATE_LIMITED: [EXIT.UNAVAILABLE, "Syndai is rate-limiting this workspace.", null],
 };
 
-/** Map any thrown error to {exitCode, message, next}. */
-export function explain(err) {
+/** Map any thrown error to {exitCode, message, next}; `customerId` fills a PORTAL_PAGES link. */
+export function explain(err, customerId = null) {
   if (err instanceof CliError) {
     return { exitCode: err.exitCode, message: err.message, next: err.next };
   }
@@ -137,10 +164,11 @@ export function explain(err) {
     const known = err.code ? KNOWN[err.code] : null;
     if (known) {
       const [exitCode, sentence, next] = known;
+      const page = PORTAL_PAGES[err.code];
       return {
         exitCode,
         message: typeof sentence === "function" ? sentence(err.problem) : sentence,
-        next: typeof next === "function" ? next(err.problem) : next,
+        next: page ? portalUrl(customerId, page) : typeof next === "function" ? next(err.problem) : next,
       };
     }
     const auth = err.status === 401 || err.status === 402 || err.status === 403;

package/src/main.js

@@ -4,17 +4,18 @@
 import { spawn } from "node:child_process";
 import { setTimeout as sleep } from "node:timers/promises";
 import { parseArgs } from "node:util";
-import { createContext, login, logout, whoami } from "./auth.js";
+import { createContext, login, logout, signup, whoami } from "./auth.js";
 import { answer, cancel, change, editText, goLive, newProject, review, revert, status, watch } from "./changes.js";
-import { CliError, EXIT, explain } from "./errors.js";
+import { ApiError, CliError, EXIT, explain, PORTAL_PAGES } from "./errors.js";
 import { VERSION } from "./http.js";
 import { mcp } from "./mcp.js";
-import { link } from "./projects.js";
+import { billing, connect } from "./portal.js";
+import { link, publish } from "./projects.js";
 import { api } from "./api.js";
 import { repeat, schedule } from "./schedules.js";
 import { env, run, secrets } from "./secrets.js";
 import { settings } from "./settings.js";
-import { closeInput, openBrowser, page } from "./ui.js";
+import { closeInput, openBrowser, openPage, page } from "./ui.js";
 
 const str = { type: "string" };
 const bool = { type: "boolean" };
@@ -22,12 +23,15 @@ const COMMON = { json: bool, "no-input": bool, help: { type: "boolean", short: "
 
 const COMMANDS = {
   change: {
-    usage: 'change "<what>" [--app A] [--review] [--learn URL] [--image F]... [--no-wait] [--timeout D]',
+    usage:
+      'change "<what>" [--app A] [--review] [--learn URL [--sign-in]] [--image F]... [--no-wait] [--timeout D]',
     summary:
-      "Make a change; it goes live when its checks pass (--review: open a PR instead; --learn: pick features to add from a product's public pages).",
+      "Make a change; it goes live when its checks pass (--review: open a PR instead; --learn: pick features to add from a product's public pages).\n" +
+      "      --sign-in: Sign in to the --learn product yourself on the run page first, so the run reads its in-app pages.",
     options: {
       app: str,
       learn: str,
+      "sign-in": bool,
       review: bool,
       image: { type: "string", multiple: true },
       "no-wait": bool,
@@ -37,9 +41,11 @@ const COMMANDS = {
     stepUp: false,
   },
   new: {
-    usage: 'new "<what>" [--no-learn] [--no-wait] [--timeout D]',
-    summary: "Start a new project; a product URL in the text builds your own version of it.",
-    options: { "no-learn": bool, "no-wait": bool, timeout: str },
+    usage: 'new "<what>" [--no-learn | --sign-in] [--no-wait] [--timeout D]',
+    summary:
+      "Start a new project; a product URL in the text builds your own version of it.\n" +
+      "      --sign-in: Sign in to that product yourself on the run page first, so the run reads its in-app pages.",
+    options: { "no-learn": bool, "sign-in": bool, "no-wait": bool, timeout: str },
     run: (ctx, args) => newProject(ctx, args),
     stepUp: false,
   },
@@ -97,10 +103,19 @@ const COMMANDS = {
   login: {
     usage: "login [--with-token] [--scope S]...",
     summary:
-      "Log in by approving this computer in your browser (--scope adds access to the key's; --with-token reads a key from stdin).",
+      "Log in by approving this computer in your browser (--scope adds access to the key's; --with-token reads a key from stdin).\n" +
+      "      No workspace yet? syndai signup <email>",
     options: { "with-token": bool, scope: { type: "string", multiple: true } },
     run: (ctx) => login(ctx),
   },
+  signup: {
+    usage: "signup <email> [--code C]",
+    summary:
+      "Make a workspace and log in with a code emailed to you (continuing accepts the Terms and Privacy Policy).\n" +
+      "      Off a terminal it emails the code and exits 3; rerun with --code.",
+    options: { code: str },
+    run: (ctx, args) => signup(ctx, args),
+  },
   logout: {
     usage: "logout",
     summary: "Revoke and forget the stored key.",
@@ -113,6 +128,26 @@ const COMMANDS = {
     options: {},
     run: (ctx) => whoami(ctx),
   },
+  publish: {
+    usage: "publish [--app A]",
+    summary: "Publish the project as a hosted app (or redeploy it) and print its live URL.",
+    options: { app: str },
+    run: (ctx) => publish(ctx),
+  },
+  connect: {
+    usage: "connect <provider>",
+    summary:
+      "Open the workspace page that connects github, sentry, claude, chatgpt, openrouter, slack or a social account; finish in the browser.",
+    options: {},
+    run: (ctx, args) => connect(ctx, args),
+  },
+  billing: {
+    usage: "billing [--open] | packs | buy <pack> | plan <tier> [--interval month|year] [--country CC] | card | cancel",
+    summary:
+      "Plan and balance; buy and plan open a checkout a person pays in the browser (nothing is charged until then).",
+    options: { open: bool, interval: str, country: str },
+    run: (ctx, args) => billing(ctx, args),
+  },
   link: {
     usage: "link [project] [--env E]",
     summary: "Remember which project (and environment) this directory uses (stored outside the repo).",
@@ -155,8 +190,8 @@ const COMMANDS = {
   },
   schedule: {
     usage:
-      'schedule list [--app A | --all] | show <id> | add "<what>" --every E [--at T] [--tz Z] [--budget USD] [--app A]\n' +
-      "               | edit <id> [--prompt P] [--every E] [--at T] [--tz Z] [--budget USD|none]\n" +
+      'schedule list [--app A | --all] | show <id> | add "<what>" --every E [--at T] [--tz Z] [--budget CREDITS] [--app A]\n' +
+      "               | edit <id> [--prompt P] [--every E] [--at T] [--tz Z] [--budget CREDITS|none]\n" +
       "               | pause | resume | run-now | delete <id> [--yes]",
     summary:
       'A project\'s recurring runs. E: hourly (--at :MM), daily or weekdays (--at HH:MM), weekly (--at "mon HH:MM"), or a 5-field cron.',
@@ -164,7 +199,7 @@ const COMMANDS = {
     run: (ctx, args) => schedule(ctx, args),
   },
   repeat: {
-    usage: "repeat <run> --every E [--at T] [--tz Z] [--budget USD]",
+    usage: "repeat <run> --every E [--at T] [--tz Z] [--budget CREDITS]",
     summary: "Run a change you liked again on a schedule (its first run is the next scheduled time).",
     options: { every: str, at: str, tz: str, budget: str },
     run: (ctx, args) => repeat(ctx, args),
@@ -276,7 +311,7 @@ export async function main(argv, io) {
   try {
     return await spec.run(ctx, child ?? parsed.positionals);
   } catch (err) {
-    return report(ctx, err);
+    return await report(ctx, err);
   } finally {
     closeInput(io);
   }
@@ -298,10 +333,14 @@ function splitCommand(args, options) {
   return [args, []];
 }
 
-/** One error line (plus the next command) on stderr; a JSON error on stdout for machines. */
-function report(ctx, err) {
+/**
+ * One error line (plus the next command) on stderr; a JSON error on stdout for machines. An
+ * error a workspace page fixes (billing, GitHub) names that page, opened on a terminal.
+ */
+async function report(ctx, err) {
   const { ui, io } = ctx;
-  const { exitCode, message, next } = explain(err);
+  const page = err instanceof ApiError ? PORTAL_PAGES[err.code] : null;
+  const { exitCode, message, next } = explain(err, page ? await ctx.customerId().catch(() => null) : null);
   if (io.env.SYNDAI_DEBUG && err?.stack) io.stderr.write(`${err.stack}\n`);
   const extra = err instanceof CliError ? err.result : null;
   if (exitCode === EXIT.INTERRUPTED) {
@@ -317,5 +356,6 @@ function report(ctx, err) {
     }
   }
   if (next) ui.progress(`  next: ${next}`);
+  if (page) openPage(ctx, next);
   return exitCode;
 }

package/src/portal.js

@@ -0,0 +1,156 @@
+// What stays in the browser, one step away: `connect` and `billing` hand off to the exact
+// workspace page (G1: `portalUrl`). Connections and payment need a person there, so no key
+// may read connection status or pay; the CLI prints the page, opens it on a terminal and
+// never polls. `billing` reads the balance and starts a checkout a person then pays.
+
+import { CliError, EXIT, UnavailableError, portalUrl } from "./errors.js";
+import { openPage } from "./ui.js";
+
+/** `syndai connect <provider>` -> its card. The `connect` list is the portal's
+ * `CONNECT_PROVIDERS` (apps/portal-v2/src/lib/connection-link.ts). */
+const CONNECTIONS = [
+  "claude",
+  "chatgpt",
+  "openrouter",
+  "linkedin",
+  "instagram",
+  "x",
+  "threads",
+  "bluesky",
+  "buffer",
+  "tiktok",
+  "youtube",
+  "slack",
+];
+export const CONNECT_PAGES = Object.freeze({
+  github: "settings#repositories",
+  sentry: "sentry",
+  ...Object.fromEntries(CONNECTIONS.map((provider) => [provider, `connections?connect=${provider}`])),
+});
+
+/** Print a workspace page (JSON: `{url}`), say what to do there, open it on a terminal. */
+function handOff(ctx, url, line, data = {}) {
+  ctx.ui.result({ ...data, url }, url);
+  if (!ctx.ui.json) ctx.ui.progress(line);
+  openPage(ctx, url);
+  return EXIT.OK;
+}
+
+export async function connect(ctx, [provider]) {
+  const names = Object.keys(CONNECT_PAGES).join(", ");
+  const page = provider ? CONNECT_PAGES[provider.toLowerCase()] : null;
+  if (!page) {
+    throw new CliError(EXIT.USAGE, provider ? `Unknown provider "${provider}". One of: ${names}.` : `Connect what? One of: ${names}.`);
+  }
+  return handOff(ctx, portalUrl(await ctx.customerId(), page), "Finish in the browser.");
+}
+
+export async function billing(ctx, [sub = "status", arg]) {
+  switch (sub) {
+    case "status":
+      return billingStatus(ctx);
+    case "packs":
+      return packs(ctx);
+    case "buy":
+      return buy(ctx, arg);
+    case "plan":
+      return plan(ctx, arg);
+    case "card":
+    case "cancel":
+      return handOff(
+        ctx,
+        portalUrl(await ctx.customerId(), "billing"),
+        "Change the card, plan or cancel on this page.",
+      );
+    default:
+      throw new CliError(EXIT.USAGE, `Unknown billing command "${sub}". Use packs, buy, plan, card or cancel.`);
+  }
+}
+
+const dollars = (usd) => `${usd < 0 ? "-" : ""}$${Math.abs(usd).toFixed(2)}`;
+
+async function billingStatus(ctx) {
+  const { client, ui, io, flags } = ctx;
+  const [usage, subscription, customerId] = await Promise.all([
+    client.call("usage"),
+    // The plan's renewal comes from the payment provider: its outage only drops that line.
+    client.call("subscription").then(
+      (body) => body?.subscription ?? null,
+      (err) => {
+        if (err instanceof UnavailableError) return null;
+        throw err;
+      },
+    ),
+    ctx.customerId(),
+  ]);
+  // The portal's `balanceUsd` (apps/portal-v2/src/sync/usage-api.ts): packs + included left - holds.
+  const held = usage.bids_usd ?? 0;
+  const balance = usage.pack_balance_usd + usage.included_remaining_usd - held;
+  const url = portalUrl(customerId, "billing");
+  const planCode = subscription?.plan_code ?? usage.plan_code ?? null;
+  const renews = subscription?.current_period_end
+    ? ` (${subscription.interval ?? ""}ly, ${subscription.cancel_at_period_end ? "ends" : "renews"} ${subscription.current_period_end.slice(0, 10)})`
+    : "";
+  const parts = [`packs ${dollars(usage.pack_balance_usd)}`, `included ${dollars(usage.included_remaining_usd)} left`];
+  if (held) parts.push(`${dollars(held)} held`);
+  ui.result(
+    {
+      plan_code: planCode,
+      subscription,
+      balance_usd: balance,
+      pack_balance_usd: usage.pack_balance_usd,
+      included_remaining_usd: usage.included_remaining_usd,
+      bids_usd: held,
+      included_resets_at: usage.included_resets_at ?? null,
+      url,
+    },
+    [`Plan     ${planCode ?? "unknown"}${renews}`, `Balance  ${dollars(balance)} (${parts.join(", ")})`, `Billing  ${url}`].join("\n"),
+  );
+  if (flags.open && ui.interactive) io.openUrl(url);
+  return EXIT.OK;
+}
+
+async function packs(ctx) {
+  const body = await ctx.client.call("packs");
+  const lines = (body.packs ?? []).map(
+    (p) => `  ${p.key.padEnd(14)} ${String(p.credits).padStart(5)} credits  ${p.prices?.usd === undefined ? "" : dollars(p.prices.usd / 100)}`,
+  );
+  ctx.ui.result(body, ["Credit packs (syndai billing buy <pack>):", ...lines].join("\n"));
+  return EXIT.OK;
+}
+
+async function buy(ctx, pack) {
+  if (!pack) throw new CliError(EXIT.USAGE, "Which pack? syndai billing buy <pack>", { next: "syndai billing packs" });
+  const packKey = pack.startsWith("pack_") ? pack : `pack_${pack}`;
+  const { checkout_url: url } = await ctx.client.call("packCheckout", {
+    body: { pack_key: packKey, country: buyerCountry(ctx) },
+  });
+  return checkout(ctx, url);
+}
+
+async function plan(ctx, tier) {
+  if (!tier) throw new CliError(EXIT.USAGE, "Which plan? syndai billing plan <tier> [--interval month|year]");
+  const interval = ctx.flags.interval ?? "month";
+  if (!["month", "year"].includes(interval)) throw new CliError(EXIT.USAGE, "--interval is month or year.");
+  const { checkout_url: url } = await ctx.client.call("planCheckout", {
+    body: { plan_code: tier.startsWith("tier_") ? tier : `tier_${tier}`, interval, country: buyerCountry(ctx) },
+  });
+  return checkout(ctx, url);
+}
+
+function checkout(ctx, url) {
+  return handOff(ctx, url, "A person pays on this page; nothing is charged until then.", { checkout_url: url });
+}
+
+/**
+ * The billing country a checkout is priced in (ISO alpha-2): `--country`, else the locale's
+ * region, else US. A claim only: the provider's billing address re-checks it.
+ */
+function buyerCountry({ flags, io }) {
+  if (flags.country !== undefined) {
+    if (!/^[A-Za-z]{2}$/.test(flags.country)) throw new CliError(EXIT.USAGE, "--country is a two-letter code, like US or DE.");
+    return flags.country.toUpperCase();
+  }
+  const locale = io.env.LC_ALL || io.env.LC_MONETARY || io.env.LANG || "";
+  return /^[a-z]{2,3}_([A-Z]{2})\b/.exec(locale)?.[1] ?? "US";
+}

package/src/projects.js

@@ -197,3 +197,20 @@ export async function link(ctx, ref) {
   );
   return EXIT.OK;
 }
+
+/** `syndai publish [--app A]`: put the project's default branch live as a hosted app. */
+export async function publish(ctx) {
+  const project = await resolveProject(ctx, { app: ctx.flags.app });
+  // A call while a deploy is in flight answers that deploy, so a retry never starts a second.
+  const { publication } = await ctx.client.call("publishApp", {
+    params: { customer_id: project.customer_id, coding_repository_id: project.id },
+    retry: true,
+  });
+  const url = publication?.url ?? project.live_url;
+  ctx.ui.result(
+    { project_id: project.id, url, state: publication?.state ?? null, publication },
+    url ? `Publishing ${projectLabel(project)}: ${url}` : `Publishing ${projectLabel(project)}.`,
+  );
+  if (!ctx.ui.json) ctx.ui.progress(ctx.ui.dim("It is live there once the deploy finishes (a minute or two)."));
+  return EXIT.OK;
+}

package/src/routes.js

@@ -8,6 +8,8 @@ const EXT = "/api/v1/external/coding";
 export const ROUTES = Object.freeze({
   deviceStart: ["POST", "/api/v1/cli/device"],
   deviceToken: ["POST", "/api/v1/cli/device/token"],
+  signup: ["POST", "/api/v1/signup"],
+  signupVerify: ["POST", "/api/v1/signup/verify"],
   me: ["GET", `${EXT}/me`],
   revokeMe: ["DELETE", `${EXT}/me`],
   listRepos: ["GET", `${EXT}/repos`],
@@ -20,6 +22,12 @@ export const ROUTES = Object.freeze({
     "PATCH",
     `${EXT}/customers/{customer_id}/repositories/{coding_repository_id}/publication`,
   ],
+  publishApp: ["POST", `${EXT}/customers/{customer_id}/repositories/{coding_repository_id}/publish`],
+  usage: ["GET", `${EXT}/usage/current-period`],
+  subscription: ["GET", `${EXT}/purchases/subscription`],
+  packs: ["GET", `${EXT}/purchases/packs`],
+  packCheckout: ["POST", `${EXT}/purchases/pack-checkout`],
+  planCheckout: ["POST", `${EXT}/purchases/subscription-checkout`],
   getBugScan: ["GET", `${EXT}/repositories/{repository_id}/bug-scan`],
   setBugScan: ["PUT", `${EXT}/repositories/{repository_id}/bug-scan`],
   getPolicy: ["GET", `${EXT}/policy/defaults`],

package/src/schedules.js

@@ -16,6 +16,9 @@ const PAUSE_REASONS = {
   consecutive_failures: "it failed 5 times in a row",
   invalid_trigger: "its schedule is no longer valid",
 };
+// The fixed, published peg (backend `billing/tier_catalog.USD_PER_CREDIT`): the API stores the
+// per-run cap in USD, the CLI takes and shows it in credits like the portal.
+const USD_PER_CREDIT = 0.25;
 const CADENCE_HELP = 'hourly --at :MM, daily|weekdays --at HH:MM, weekly --at "mon HH:MM", or a 5-field cron';
 
 // --- cadence -------------------------------------------------------------------------------
@@ -106,15 +109,20 @@ function dayIndex(text) {
   return index >= 0 && full[index].startsWith(text) ? index : -1;
 }
 
-/** `--budget 5` -> 5; `--budget none` -> null (no per-run cap) where allowed. */
+/** USD -> credits for display: whole numbers bare, else up to two decimals ("20", "6", "0.08"). */
+function credits(usd) {
+  return String(Math.round((usd / USD_PER_CREDIT) * 100) / 100);
+}
+
+/** `--budget 20` (credits) -> 5 (USD); `--budget none` -> null (no per-run cap) where allowed. */
 function budgetOf(text, { allowNone }) {
   if (text === undefined) return undefined;
   if (allowNone && text.trim().toLowerCase() === "none") return null;
-  const value = Number(text.replace(/^\$/, ""));
+  const value = Number(text);
   if (!Number.isFinite(value) || value <= 0) {
-    throw new CliError(EXIT.USAGE, `--budget is a dollar amount per run${allowNone ? ", or none" : ""}, not "${text}".`);
+    throw new CliError(EXIT.USAGE, `--budget is a number of credits per run${allowNone ? ", or none" : ""}, not "${text}".`);
   }
-  return value;
+  return value * USD_PER_CREDIT;
 }
 
 function triggerOf(ctx, { every, at, tz }) {
@@ -162,7 +170,7 @@ function card(s, occurrences = []) {
   const lines = [`${labelOf(s)} · ${stateOf(s)}`, `"${firstLine(s.prompt)}"`];
   if (s.repo_name) lines.push(`Project ${s.repo_name}`);
   if (s.occurrence_budget_usd !== null && s.occurrence_budget_usd !== undefined) {
-    lines.push(`Cap $${s.occurrence_budget_usd} per run`);
+    lines.push(`Cap ${credits(s.occurrence_budget_usd)} credits per run`);
   }
   if (s.status !== "paused") lines.push(upcomingLine(s));
   lines.push("", occurrences.length ? "History:" : "History: none yet");
@@ -368,7 +376,7 @@ export async function repeat(ctx, [runId]) {
     trigger,
     ...(budget === undefined ? {} : { occurrence_budget_usd: budget }),
   });
-  const cost = typeof run.cost_usd === "number" ? ` (last run cost $${run.cost_usd.toFixed(2)})` : "";
+  const cost = typeof run.cost_usd === "number" ? ` (last run cost ${credits(run.cost_usd)} credits)` : "";
   return printCreated(
     ctx,
     created,

package/src/ui.js

@@ -133,6 +133,11 @@ export function openBrowser(url) {
   }
 }
 
+/** `review`'s rule for a hand-off page: open it on a terminal; the caller always prints it. */
+export function openPage({ ui, io }, url) {
+  if (ui.interactive && !ui.json) io.openUrl(url);
+}
+
 /** Show long text through $PAGER on a terminal; print it plainly otherwise. */
 export function page(proc, text) {
   if (!proc.stdout.isTTY) {

package/src/watch.js

@@ -5,14 +5,18 @@
 // cursor. Ctrl-C only detaches: it never sends a cancel. `--logs` also tails the run's SSE
 // events (resuming with Last-Event-ID) next to the loop.
 
-import { ApiError, CliError, EXIT, explain } from "./errors.js";
+import { ApiError, CliError, EXIT, UnavailableError, explain } from "./errors.js";
 import { backoffMs } from "./http.js";
-import { ask, ulid } from "./ui.js";
+import { ask, openPage, ulid } from "./ui.js";
 
 const POLL_WAIT_S = 45;
 const MIN_POLL_GAP_MS = 1000;
 const DEADLINE_GRACE_MS = 2000;
 const TIMED_OUT = Symbol("timed out");
+// A deploy answers 502/503 for a minute or two, longer than one request's retries: the
+// watch keeps polling through it and gives up only after this long without an answer.
+const OUTAGE_MAX_MS = 10 * 60_000;
+const OUTAGE_MAX_WAIT_MS = 30_000;
 
 // Exit code per ChangeState state (docs: syndai.ai/docs/cli, "Exit codes").
 const STATE_EXIT = {
@@ -21,6 +25,7 @@ const STATE_EXIT = {
   ready: EXIT.OK,
   live: EXIT.OK,
   live_unverified: EXIT.UNVERIFIED,
+  unverified: EXIT.UNVERIFIED,
   failed: EXIT.FAILED,
   reverted: EXIT.FAILED,
   cancelled: EXIT.FAILED,
@@ -35,6 +40,7 @@ export function nextFor(state) {
   const id = state.run_id;
   if (state.state === "needs_input") return `syndai answer ${id}`;
   if (state.state === "held") return `syndai review ${id}`;
+  if (state.state === "unverified") return state.pr_url ?? state.run_url ?? null;
   if (state.state === "ready") return `syndai go-live ${id}`;
   if (state.state === "live_unverified") return `syndai watch ${id}`;
   return state.done ? null : `syndai watch ${id}`;
@@ -55,6 +61,8 @@ export function describe(state) {
       return `Held: ${state.held?.message ?? state.held?.reason ?? "needs your review"}`;
     case "ready":
       return `Ready for review${headline}`;
+    case "unverified":
+      return `Delivered, but checks could not be verified${headline}`;
     case "live":
       return `Live: ${state.live_url ?? state.project?.live_url ?? ""}`.trim();
     case "live_unverified":
@@ -68,12 +76,19 @@ export function describe(state) {
 export function finish(ctx, state, { exitCode = exitFor(state), next = nextFor(state) } = {}) {
   const { ui } = ctx;
   const lines = [describe(state)];
+  for (const link of questionLinks(state)) lines.push(`Connect it here: ${link}`);
+  if (state.pr_url) lines.push(ui.dim(state.pr_url));
   if (state.run_url) lines.push(ui.dim(state.run_url));
   ui.result({ ...state, ...(next ? { next } : {}) }, lines.join("\n"));
   if (next && !ui.json) ui.progress(`Next: ${next}`);
   return exitCode;
 }
 
+/** The pages an open question needs (a connection to make), each an absolute portal URL. */
+function questionLinks(state) {
+  return state.state === "needs_input" ? (state.needs_input ?? []).map((q) => q.link).filter(Boolean) : [];
+}
+
 export async function getChange(ctx, runId) {
   return ctx.client.call("changeState", { params: { run_id: runId }, query: { wait: 0 } });
 }
@@ -95,6 +110,8 @@ export async function watchChange(ctx, runId, { timeoutMs = null, untilNot = nul
   let last = null;
   let lastLine = null;
   const answered = new Set(); // a state read before our answer landed must not ask again
+  let outageSince = null;
+  let outageTries = 0;
   try {
     for (;;) {
       const remaining = deadline === null ? Number.POSITIVE_INFINITY : deadline - io.now();
@@ -111,14 +128,24 @@ export async function watchChange(ctx, runId, { timeoutMs = null, untilNot = nul
         });
       } catch (err) {
         if (err === TIMED_OUT) return timedOut(ctx, runId, last);
-        throw err;
+        if (!(err instanceof UnavailableError)) throw err;
+        outageSince ??= io.now();
+        if (io.now() - outageSince >= OUTAGE_MAX_MS) throw err;
+        if (outageTries++ === 0) ui.progress(ui.dim(`· Syndai is unreachable (${err.message}); still watching`));
+        await io.sleep(Math.min(OUTAGE_MAX_WAIT_MS, backoffMs(outageTries + 4)), io.signal);
+        continue;
       }
+      outageSince = null;
+      outageTries = 0;
       const line = describe(state);
       const changed = line !== lastLine || state.cursor !== cursor;
       const final =
         (state.done && state.state !== untilNot) || (state.state === "needs_input" && !ui.interactive);
       if (final) return finish(ctx, state);
-      if (line !== lastLine) ui.progress(`${ui.dim("·")} ${line}`);
+      if (line !== lastLine) {
+        ui.progress(`${ui.dim("·")} ${line}`);
+        if (state.pr_url) ui.progress(ui.dim(state.pr_url));
+      }
       lastLine = line;
       cursor = state.cursor ?? cursor;
       last = state;
@@ -162,6 +189,10 @@ function timedOut(ctx, runId, last) {
 export async function answerInteractively(ctx, runId, questions) {
   for (const question of questions) {
     ctx.ui.progress(ctx.ui.bold(question.summary ?? "A question about your change"));
+    if (question.link) {
+      ctx.ui.progress(`Connect it here: ${question.link}`);
+      openPage(ctx, question.link);
+    }
     const entries = [];
     for (const input of question.inputs ?? []) {
       const entry = await askInput(ctx, input);