three-blocks-login 0.1.9 → 0.1.11

package/LICENSE

@@ -1,7 +1,10 @@
 Three.js Blocks Software License Agreement
+Version 2.0 — Effective January 2026
 
 Proprietary Software — All Rights Reserved
-Copyright (c) 2025 three-blocks
+Copyright (c) 2026 three-blocks
+
+Full License Terms: https://threejs-blocks.com/license
 
 ================================================================================
 
@@ -9,25 +12,26 @@ LICENSE NOTICE
 
 This software and all associated packages, including but not limited to:
   - @three-blocks/core
+  - @three-blocks/pro
   - @three-blocks/starter
   - create-three-blocks-starter
   - All related tools, examples, and documentation code
 
-are licensed exclusively to active, paid subscribers of the threejs-blocks 
-project. Without a valid and current subscription, you are NOT permitted to 
+are licensed exclusively to active, paid subscribers of the Three.js Blocks
+project. Without a valid and current subscription, you are NOT permitted to
 use this software.
 
 ================================================================================
 
 PERMITTED USAGE (Active Subscribers Only)
 
-Subject to maintaining an active, paid subscription, you are granted a 
-non-exclusive, non-transferable license to:
+Subject to maintaining an active, paid subscription, you are granted a
+non-exclusive, non-transferable, non-sublicensable license to:
 
-  ✓ Use the software in personal and commercial projects via the public API
-  ✓ Deploy applications incorporating the software to production environments
-  ✓ Integrate the software into your applications as a functional component
-  ✓ Access updates, bug fixes, and new features during active subscription
+  + Use the software in personal and commercial projects via the public API
+  + Deploy applications incorporating the software to production environments
+  + Integrate the software into your applications as a functional component
+  + Access updates, bug fixes, and new features during active subscription
 
 ================================================================================
 
@@ -35,58 +39,112 @@ RESTRICTIONS
 
 You may NOT:
 
-  ✗ Reverse engineer, decompile, disassemble, or attempt to derive the source
+  - Reverse engineer, decompile, disassemble, or attempt to derive the source
     code, underlying algorithms, or techniques employed in this software
-  ✗ Study, analyze, inspect, or learn from the implementation details, code
+  - Study, analyze, inspect, or learn from the implementation details, code
     structure, or internal workings of this software
-  ✗ Modify, adapt, translate, or create derivative works
-  ✗ Copy, share, distribute, publish, or resell any part of the software
-  ✗ Sublicense or transfer rights to any third party
-  ✗ Remove, alter, or obscure this license header or any copyright notices
-  ✗ Use this software after your subscription has expired or been terminated
+  - Modify, adapt, translate, or create derivative works
+  - Copy, share, distribute, publish, or resell any part of the software
+  - Sublicense or transfer rights to any third party
+  - Remove, alter, or obscure this license header or any copyright notices
+  - Use this software after your subscription has expired or been terminated
 
 ================================================================================
 
-AI AND MACHINE LEARNING PROHIBITION
-
-The use of this source code for artificial intelligence and machine learning 
-purposes is strictly prohibited. Specifically, you may NOT:
+SUBLICENSING AND REDISTRIBUTION PROHIBITION
+
+This license is strictly non-transferable and non-sublicensable. You may NOT:
+
+  - Sublicense, relicense, or transfer any rights granted herein to any third
+    party under any circumstances
+  - Create any SDK, library, framework, plugin, extension, or middleware that
+    redistributes, bundles, or incorporates this software for use by third
+    parties
+  - Bundle this software into products, applications, or services where
+    end-users do not hold their own valid subscription to Three.js Blocks
+  - Offer this software as part of any hosted service, software-as-a-service
+    (SaaS), platform-as-a-service (PaaS), or similar cloud-based offering
+    where third parties access the software's functionality
+  - Create wrapper libraries, abstraction layers, or integration packages that
+    obscure, circumvent, or eliminate the subscription requirement from
+    downstream users
+  - Include this software in any product, template, boilerplate, starter kit,
+    code generator, or scaffolding tool intended for distribution to third
+    parties
+  - Provide access to this software through any API, service endpoint, or
+    programmatic interface that enables third-party usage
+  - License, sell, rent, lease, or otherwise commercially exploit access to
+    this software to any third party
+
+THIRD-PARTY INTEGRATION REQUIREMENT:
+If you develop any software, SDK, library, framework, application, or service
+that incorporates, depends upon, or integrates with this software, each
+end-user of your software must independently hold their own valid, active
+subscription to Three.js Blocks. You may not use your subscription to provide,
+enable, or facilitate access to this software to any third party. Any attempt
+to circumvent this requirement through technical or contractual means is
+expressly prohibited and constitutes a material breach of this license.
 
-  ✗ Use this source code, in whole or in part, to train, fine-tune, or develop
-    any artificial intelligence models, machine learning systems, or large
-    language models (LLMs)
-  
-  ✗ Feed this code into AI-assisted development tools for the purpose of
-    generating derivative code or training said tools
-  
-  ✗ Use automated transformation tools or AI systems to create modified versions
-    or derivatives of this software
-  
-  ✗ Extract patterns, algorithms, or techniques from this code using automated
-    or AI-assisted analysis for incorporation into other software
-  
-  ✗ Use this code as training data for code completion, code generation, or
-    code suggestion tools
+================================================================================
 
-This prohibition extends to any form of automated learning, pattern extraction,
-or knowledge transfer that involves processing this source code through machine
-learning pipelines, regardless of whether the output is used commercially or
-privately.
+AI, MACHINE LEARNING, AND AUTOMATED ANALYSIS PROHIBITION
+
+The use of this software, source code, compiled code, documentation, outputs,
+or any data generated by this software for artificial intelligence, machine
+learning, or automated analysis purposes is strictly prohibited. You may NOT:
+
+  - Use this code, in whole or in part, to train, fine-tune, pre-train, or
+    develop any artificial intelligence models, machine learning systems,
+    neural networks, or large language models (LLMs)
+  - Use this code for reinforcement learning from human feedback (RLHF),
+    constitutional AI training, or any similar AI alignment or training
+    methodology
+  - Create embeddings, vector representations, semantic indices, or any other
+    mathematical or computational representations of this code
+  - Store this code in vector databases, retrieval systems, knowledge bases,
+    or any storage mechanism intended for AI/ML retrieval-augmented generation
+    (RAG) or similar AI-assisted retrieval
+  - Generate synthetic data, pseudocode, paraphrased code, or derivative
+    representations from this codebase for any purpose
+  - Use automated tools, scripts, or AI systems to extract patterns,
+    algorithms, architectural knowledge, or implementation techniques from
+    this software
+  - Input this code into AI coding assistants, code completion tools, or
+    any AI-powered development environment for the purpose of analysis,
+    learning, pattern extraction, or code generation
+  - Use this code as context, examples, few-shot prompts, or reference
+    material for AI code generation, code completion, or code suggestion
+  - Feed this code into any automated transformation tool, transpiler, or
+    code converter that uses AI/ML techniques
+  - Use any output, behavior, or data generated by this software to train
+    or improve any AI/ML system
+
+This prohibition applies to all AI/ML systems including but not limited to:
+large language models (LLMs), code completion tools (e.g., GitHub Copilot,
+Amazon CodeWhisperer, and similar tools), code generation systems, neural
+networks, transformer models, diffusion models, and any future AI technologies
+regardless of their architecture or methodology.
+
+This prohibition is perpetual and survives any termination or expiration of
+this license agreement.
 
 ================================================================================
 
 SUBSCRIPTION REQUIREMENT
 
 This license is valid only while you maintain an active, paid subscription to
-the threejs-blocks service. Upon expiration or termination of your subscription:
+the Three.js Blocks service. Upon expiration or termination of your
+subscription:
 
-  1. Your license to use this software immediately terminates
-  2. You must cease all use of the software
-  3. You must remove the software from all projects and systems
-  4. You must not deploy or distribute any applications containing this software
+  1. Your license to use this software immediately and automatically terminates
+  2. You must immediately cease all use of the software
+  3. You must remove the software from all projects, systems, and deployments
+  4. You must not deploy, distribute, or make available any applications
+     containing this software
+  5. You must delete all copies of this software in your possession or control
 
 Failure to comply with these requirements constitutes copyright infringement
-and breach of contract.
+and breach of contract, and may result in legal action.
 
 ================================================================================
 
@@ -95,48 +153,73 @@ PACKAGE-SPECIFIC NOTES
 @three-blocks/core:
   - Core library with proprietary algorithms and implementations
   - Protected by code obfuscation and this license
-  - UNLICENSED - Subscription required
+  - Subscription required
+
+@three-blocks/pro:
+  - Advanced physics engine with proprietary implementations
+  - Worker-based architecture with SharedArrayBuffer
+  - Protected by code obfuscation and this license
+  - Subscription required
 
 @three-blocks/starter:
   - Starter template for building Three.js applications
   - Includes licensed code and dependencies on @three-blocks/core
-  - UNLICENSED - Subscription required
+  - Subscription required
 
 create-three-blocks-starter:
   - Scaffolding tool for creating new projects
   - Publicly available for convenience but proprietary
-  - UNLICENSED - Creates projects that require subscription
-
-three-blocks-login:
-  - Authentication helper for accessing private packages
-  - MIT Licensed - May be used independently
+  - Creates projects that require subscription
 
 ================================================================================
 
 ENFORCEMENT
 
-Unauthorized use, reproduction, distribution, or violation of the AI/ML 
-prohibition is strictly prohibited and may result in:
+Unauthorized use, reproduction, distribution, reverse engineering, sublicensing,
+or violation of the AI/ML prohibition is strictly prohibited and may result in:
 
-  • Immediate termination of your license and subscription
-  • Legal action for copyright infringement
-  • Claims for damages and recovery of costs
-  • Civil liability under applicable copyright law
-  • Criminal penalties under applicable law
+  * Immediate termination of your license and subscription without refund
+  * Legal action for copyright infringement
+  * Legal action for breach of contract
+  * Claims for damages, including actual damages, lost profits, and statutory
+    damages where available
+  * Recovery of attorneys' fees and costs of enforcement
+  * Injunctive relief to prevent further unauthorized use
+  * Civil liability under applicable copyright, trade secret, and contract law
+  * Criminal penalties under applicable law, including but not limited to the
+    Computer Fraud and Abuse Act (CFAA) and equivalent international statutes
 
 We employ various technical and legal measures to detect unauthorized use,
-including but not limited to code fingerprinting, usage analytics, and
-regular compliance audits.
+including but not limited to code fingerprinting, license validation, usage
+analytics, and regular compliance audits. We reserve the right to pursue all
+available legal remedies against violators.
+
+================================================================================
+
+INDEMNIFICATION
+
+You agree to indemnify, defend, and hold harmless three-blocks, its affiliates,
+officers, directors, employees, and agents from and against any and all claims,
+damages, obligations, losses, liabilities, costs, and expenses (including
+reasonable attorneys' fees) arising from: (a) your use of the software;
+(b) your violation of any term of this license; (c) your violation of any
+third-party right, including any intellectual property or privacy right; or
+(d) any claim that your use of the software caused damage to a third party.
 
 ================================================================================
 
 ACCEPTANCE OF TERMS
 
-By using this software, you acknowledge that you have read, understood, and 
-agree to be bound by the complete terms of this license agreement.
+By downloading, installing, copying, accessing, or otherwise using this
+software, you acknowledge that you have read, understood, and agree to be
+bound by the complete terms of this license agreement.
 
 If you do not agree to these terms, you are not authorized to use, access,
-or download this software.
+download, install, or copy this software.
+
+If you are accepting these terms on behalf of an organization, you represent
+and warrant that you have the authority to bind that organization to these
+terms.
 
 ================================================================================
 
@@ -144,16 +227,56 @@ DISCLAIMER OF WARRANTY
 
 THIS SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT.
+FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NONINFRINGEMENT.
+
+THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE SOFTWARE IS WITH YOU.
+SHOULD THE SOFTWARE PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY
+SERVICING, REPAIR, OR CORRECTION.
 
 ================================================================================
 
 LIMITATION OF LIABILITY
 
-IN NO EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES, OR
-OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING
-FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
-IN THE SOFTWARE.
+IN NO EVENT SHALL THREE-BLOCKS, ITS AFFILIATES, LICENSORS, OR SUPPLIERS BE
+LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR
+EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO DAMAGES FOR LOSS OF PROFITS,
+GOODWILL, USE, DATA, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR IN
+CONNECTION WITH THIS LICENSE OR THE USE OR INABILITY TO USE THE SOFTWARE,
+EVEN IF THREE-BLOCKS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+IN NO EVENT SHALL THREE-BLOCKS'S TOTAL CUMULATIVE LIABILITY TO YOU FOR ALL
+CLAIMS ARISING OUT OF OR RELATED TO THIS LICENSE OR THE SOFTWARE EXCEED THE
+AMOUNTS PAID BY YOU TO THREE-BLOCKS FOR THE SOFTWARE DURING THE TWELVE (12)
+MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO LIABILITY.
+
+SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR
+CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU.
+
+================================================================================
+
+SEVERABILITY
+
+If any provision of this license is held to be unenforceable or invalid, that
+provision shall be enforced to the maximum extent possible, and the other
+provisions shall remain in full force and effect.
+
+================================================================================
+
+WAIVER
+
+The failure of three-blocks to enforce any right or provision of this license
+shall not constitute a waiver of such right or provision. No waiver of any
+term of this license shall be deemed a further or continuing waiver of such
+term or any other term.
+
+================================================================================
+
+ENTIRE AGREEMENT
+
+This license constitutes the entire agreement between you and three-blocks
+regarding the software and supersedes all prior agreements, understandings,
+and communications, whether written or oral, regarding the subject matter
+hereof.
 
 ================================================================================
 
@@ -169,14 +292,16 @@ For license violations or to report unauthorized use:
 
 ================================================================================
 
-GOVERNING LAW
+GOVERNING LAW AND JURISDICTION
 
 This license shall be governed by and construed in accordance with the laws
-of the jurisdiction in which three-blocks operates, without regard to its
-conflict of law provisions.
+of Japan, without regard to its conflict of law provisions. Any dispute arising
+out of or relating to this license or the software shall be subject to the
+exclusive jurisdiction of the courts located in Tokyo, Japan, and you hereby
+consent to the personal jurisdiction of such courts.
 
 ================================================================================
 
-Last Updated: January 2025
-Version: 1.0.0
+Last Updated: January 2026
+Version: 2.0
 

package/bin/login.js

@@ -24,7 +24,6 @@ const bold = ( s ) => ESC( 1 ) + s + reset;
 const dim = ( s ) => ESC( 2 ) + s + reset;
 const red = ( s ) => ESC( 31 ) + s + reset;
 const green = ( s ) => ESC( 32 ) + s + reset;
-const yellow = ( s ) => ESC( 33 ) + s + reset;
 const cyan = ( s ) => ESC( 36 ) + s + reset;
 const plainBanner = `[three-blocks-login@${pkg.version}]`;
 const banner = cyan( plainBanner );
@@ -106,90 +105,6 @@ const quoteArg = ( value ) => {
 
 const formatCommand = ( cmd, args = [] ) => [ cmd, ...args ].map( quoteArg ).join( " " );
 
-const HEADER_WIDTH = 96;
-const LEFT_WIDTH = 60;
-const RIGHT_WIDTH = HEADER_WIDTH - LEFT_WIDTH - 3;
-
-const repeatChar = ( ch, len ) => ch.repeat( Math.max( 0, len ) );
-const stripAnsi = ( value ) => String( value ?? '' ).replace( /\u001b\[[0-9;]*m/g, '' );
-const ellipsize = ( value, width ) => {
-
-	const str = String( value ?? '' );
-	const plain = stripAnsi( str );
-	if ( plain.length <= width ) return str;
-	if ( width <= 1 ) return plain.slice( 0, width );
-	const truncated = plain.slice( 0, width - 1 ) + '…';
-	return plain === str ? truncated : truncated;
-
-};
-
-const visibleLength = ( value ) => stripAnsi( String( value ?? '' ) ).length;
-const padText = ( value, width, align = 'left' ) => {
-
-	const text = ellipsize( value, width );
-	const current = visibleLength( text );
-	const remaining = width - current;
-	if ( remaining <= 0 ) return text;
-	if ( align === 'center' ) {
-
-		const left = Math.floor( remaining / 2 );
-		const right = remaining - left;
-		return `${' '.repeat( left )}${text}${' '.repeat( right )}`;
-
-	}
-
-	if ( align === 'right' ) {
-
-		return `${' '.repeat( remaining )}${text}`;
-
-	}
-
-	return `${text}${' '.repeat( remaining )}`;
-
-};
-
-const makeHeaderRow = ( left, right = '', leftAlign = 'left', rightAlign = 'left' ) =>
-	`│${padText( left, LEFT_WIDTH, leftAlign )}│${padText( right, RIGHT_WIDTH, rightAlign )}│`;
-
-const HEADER_COLOR = ESC( 33 );
-const CONTENT_COLOR = ESC( 90 ); // bright black (grey)
-const reapplyColor = ( value, color ) => {
-
-	const str = String( value ?? '' );
-	return `${color}${str.split( reset ).join( `${reset}${color}` )}${reset}`;
-
-};
-
-const applyHeaderColor = ( row, { keepContentYellow = false, tintContent = true } = {} ) => {
-
-	if ( keepContentYellow ) return reapplyColor( row, HEADER_COLOR );
-	if ( ! row.startsWith( '│' ) || ! row.endsWith( '│' ) ) return reapplyColor( row, HEADER_COLOR );
-	const match = row.match( /^│(.*)│(.*)│$/ );
-	if ( ! match ) return reapplyColor( row, HEADER_COLOR );
-	const [ , leftContent, rightContent ] = match;
-	const leftSegment = tintContent ? reapplyColor( leftContent, CONTENT_COLOR ) : leftContent;
-	const rightSegment = tintContent ? reapplyColor( rightContent, CONTENT_COLOR ) : rightContent;
-	return `${HEADER_COLOR}│${reset}${leftSegment}${HEADER_COLOR}│${reset}${rightSegment}${HEADER_COLOR}│${reset}`;
-
-};
-
-const formatRegistryShort = ( value ) => {
-
-	if ( ! value ) return '';
-	try {
-
-		const u = new URL( value );
-		const pathname = ( u.pathname || '' ).replace( /\/$/, '' );
-		return `${u.host}${pathname}`;
-
-	} catch {
-
-		return String( value );
-
-	}
-
-};
-
 const maskLicense = ( s ) => {
 
 	if ( ! s ) return '••••';
@@ -269,87 +184,37 @@ const USER_DISPLAY_NAME = getUserDisplayName();
 
 const renderEnvHeader = ( {
 	scope,
-	registry,
 	expiresAt,
-	tmpFile,
 	licenseMasked,
-	licenseId,
-	channel,
 	status,
 	plan,
-	teamName,
-	teamId,
-	repository,
-	domain,
-	region,
 	userDisplayName,
 } ) => {
 
-	const title = `─── Three Blocks Login v${CLI_VERSION} `;
-	const separatorRow = makeHeaderRow( repeatChar( '─', LEFT_WIDTH ), repeatChar( '─', RIGHT_WIDTH ) );
-	const channelDisplay = String( channel || '' ).toUpperCase() || 'STABLE';
-	const registryShort = formatRegistryShort( registry );
-
 	const displayName = userDisplayName || USER_DISPLAY_NAME;
-	const welcomeLine = displayName ? `Welcome back ${displayName}!` : 'Welcome back!';
-	const scopeLine = `Scope: ${scope}`;
+	const welcomeLine = displayName ? `Welcome back, ${displayName}!` : 'Welcome back!';
 
 	const planLabel = normalizePlan( plan );
-	const teamLabel = teamName || teamId ? ` · Team: ${teamName || teamId}` : '';
-	const subscriptionLine = `Plan: ${planLabel}${teamLabel}`;
-	const channelLine = `Channel: ${channelDisplay}${region ? ` · Region: ${region}` : ''}`;
-
-	const repositoryBase = repository ? `Repository: ${repository}` : 'Repository: —';
-	const repositoryLine = registryShort ? `${repositoryBase} → ${registryShort}` : repositoryBase;
-	const registryLine = `Registry: ${registryShort || ( registry || '—' )}`;
-
-	let domainValue = domain || '';
-	if ( ! domainValue && registry ) {
-
-		try {
-
-			domainValue = new URL( registry ).host;
+	const planLine = `${planLabel} · ${scope}`;
 
-		} catch {}
-
-	}
-
-	const domainLineText = `Domain: ${domainValue || '—'}`;
-	const regionLineText = `Region: ${region || '—'}`;
-
-	const licenseLine = `License: ${licenseMasked}${licenseId ? ` · ${licenseId}` : ''}`;
 	const expiresLine = formatExpiryLabel( expiresAt );
+	const licenseLine = `${licenseMasked} · ${expiresLine}`;
 
-	const ascii = [
-		'THREE.JS',
-		' ______     __         ______     ______     __  __     ______   ',
-		'/\\  == \\   /\\ \\       /\\  __ \\   /\\  ___\\   /\\ \\/ /    /\\  ___\\  ',
-		'\\ \\  __<   \\ \\ \\____  \\ \\ \\/\\ \\  \\ \\ \\____  \\ \\  _"-.  \\ \\___  \\ ',
-		' \\ \\_____\\  \\ \\_____\\  \\ \\_____\\  \\ \\_____\\  \\ \\_\\ \\_\\  \\/\\_____\\',
-		'  \\/_____\/   \\/_____/   \\/_____/   \\/_____/   \\/_/ \/_/   \\/_____/'
-	];
 	const statusMessage = status?.message || ( status?.ok ? 'access granted' : status ? 'no active access' : 'pending' );
-	const statusText = status?.ok
-		? green( bold( `Authenticated — ${statusMessage}` ) )
+	const statusLine = status?.ok
+		? green( `✓ Authenticated — ${statusMessage}` )
 		: status
-			? red( bold( `Not authenticated — ${statusMessage}` ) )
-			: dim( bold( `Status: ${statusMessage}` ) );
-
-	const lines = [
-		applyHeaderColor( `╭${title}${repeatChar( '─', HEADER_WIDTH - 2 - title.length )}╮`, { keepContentYellow: true } ),
-		...ascii.map( ( row ) => applyHeaderColor( `│${padText( row, LEFT_WIDTH + RIGHT_WIDTH + 1, 'center' )}│`, { keepContentYellow: true } ) ),
-		applyHeaderColor( separatorRow, { keepContentYellow: true } ),
-		applyHeaderColor( makeHeaderRow( welcomeLine, scopeLine, 'center', 'center' ) ),
-		applyHeaderColor( separatorRow, { keepContentYellow: true } ),
-		applyHeaderColor( makeHeaderRow( subscriptionLine, channelLine ) ),
-		applyHeaderColor( makeHeaderRow( repositoryLine, registryLine ) ),
-		applyHeaderColor( makeHeaderRow( domainLineText, regionLineText, 'left', 'center' ) ),
-		applyHeaderColor( makeHeaderRow( licenseLine, expiresLine ) ),
-		applyHeaderColor( separatorRow, { keepContentYellow: true } ),
-		applyHeaderColor( makeHeaderRow( statusText, '', 'left', 'center' ), { tintContent: false } ),
-		applyHeaderColor( `╰${repeatChar( '─', HEADER_WIDTH - 2 )}╯`, { keepContentYellow: true } ),
-	];
-	for ( const row of lines ) console.log( row );
+			? red( `✗ Not authenticated — ${statusMessage}` )
+			: dim( `Status: ${statusMessage}` );
+
+	console.log( '' );
+	console.log( `${cyan( '▲' )} ${bold( 'three-blocks-login' )} ${dim( `v${CLI_VERSION}` )}` );
+	console.log( '' );
+	console.log( welcomeLine );
+	console.log( dim( planLine ) );
+	console.log( dim( licenseLine ) );
+	console.log( statusLine );
+	console.log( '' );
 
 };
 
@@ -382,7 +247,7 @@ loadEnvFromDotfile( process.cwd() );
 const BROKER_URL =
   args.endpoint ||
   process.env.THREE_BLOCKS_BROKER_URL ||
-  "https://www.threejs-blocks.com/api/npm/token"; // your Astro broker endpoint
+  "https://www.threejs-blocks.com/api/npm/token";
 
 const OAUTH_DEVICE_CODE_URL =
   process.env.THREE_BLOCKS_OAUTH_DEVICE_URL ||
@@ -429,6 +294,79 @@ const openBrowser = async ( url ) => {
 
 };
 
+const createSpinner = ( { stream = process.stderr } = {} ) => {
+
+	const enabled = !! ( stream?.isTTY && ! QUIET && ! NON_INTERACTIVE );
+	const frames = [ '△', '▲', '▲', '△', '○', '●', '●', '○', '□', '■', '■', '□' ];
+	let idx = 0;
+	let timer = null;
+	let text = '';
+
+	const clearLine = () => {
+
+		if ( ! enabled ) return;
+		try {
+
+			readline.clearLine( stream, 0 );
+			readline.cursorTo( stream, 0 );
+
+		} catch {
+
+			// best effort
+
+		}
+
+	};
+
+	const render = () => {
+
+		if ( ! enabled ) return;
+		clearLine();
+		const frame = frames[ idx ];
+		idx = ( idx + 1 ) % frames.length;
+		stream.write( `${cyan( frame )} ${text}` );
+
+	};
+
+	const stop = () => {
+
+		if ( timer ) clearInterval( timer );
+		timer = null;
+		clearLine();
+
+	};
+
+	const start = ( nextText ) => {
+
+		if ( ! enabled ) return;
+		stop();
+		text = String( nextText ?? '' );
+		idx = 0;
+		render();
+		timer = setInterval( render, 60 );
+
+	};
+
+	const succeed = ( msg ) => {
+
+		if ( ! enabled ) return;
+		stop();
+		stream.write( `${green( "✔" )} ${msg || text}\n` );
+
+	};
+
+	const fail = ( msg ) => {
+
+		if ( ! enabled ) return;
+		stop();
+		stream.write( `${red( "✖" )} ${msg || text}\n` );
+
+	};
+
+	return { enabled, start, stop, succeed, fail };
+
+};
+
 const promptChoice = async ( label, choices ) => {
 
 	return await new Promise( ( resolve ) => {
@@ -637,52 +575,54 @@ const pollForToken = async ( deviceCode, interval, expiresIn ) => {
 const browserLogin = async () => {
 
 	log.info( bold( cyan( 'Three Blocks CLI' ) ) + ' ' + dim( `[mode: ${MODE}]` ) );
-	log.info( dim( 'Opening browser to log in...' ) );
+	const openSpinner = createSpinner();
+	if ( openSpinner.enabled ) openSpinner.start( 'Opening browser to log in...' );
+	else log.info( dim( 'Opening browser to log in...' ) );
 	console.log( '' );
 
 	// Start device code flow
-	const deviceData = await startDeviceCodeFlow();
-	const { device_code, verification_uri, verification_uri_complete, expires_in, interval } = deviceData;
+	let deviceData;
+	let browserOpened = false;
+	try {
 
-	// Try to open browser
-	const browserOpened = await openBrowser( verification_uri_complete || verification_uri );
+		deviceData = await startDeviceCodeFlow();
+		const { verification_uri, verification_uri_complete } = deviceData;
+		// Try to open browser
+		browserOpened = await openBrowser( verification_uri_complete || verification_uri );
+		if ( openSpinner.enabled ) openSpinner.succeed( browserOpened ? 'Browser opened.' : 'Login URL ready.' );
 
-	if ( ! browserOpened ) {
+	} catch ( error ) {
 
-		log.warn( 'Could not open browser automatically.' );
+		if ( openSpinner.enabled ) openSpinner.fail( 'Failed to start browser login.' );
+		throw error;
 
 	}
 
+	const { device_code, verification_uri, verification_uri_complete, expires_in, interval } = deviceData;
+
+	if ( ! browserOpened ) log.warn( 'Could not open browser automatically.' );
+
 	console.log( '' );
-	log.info( yellow( 'Browser didn\'t open? Use the URL below to sign in:' ) );
+	log.info( cyan( 'Browser didn\'t open? Use the URL below to sign in:' ) );
 	console.log( '' );
 	console.log( `  ${cyan( verification_uri_complete || verification_uri )}` );
 	console.log( '' );
 	log.info( dim( 'Waiting for authorization...' ) );
 
-	// Show a simple spinner while waiting
-	const spinnerFrames = [ '⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏' ];
-	let spinnerIdx = 0;
-	const spinnerInterval = setInterval( () => {
-
-		process.stdout.write( `\r${cyan( spinnerFrames[ spinnerIdx ] )} Waiting for browser authorization...` );
-		spinnerIdx = ( spinnerIdx + 1 ) % spinnerFrames.length;
-
-	}, 100 );
+	const waitSpinner = createSpinner();
+	if ( waitSpinner.enabled ) waitSpinner.start( 'Waiting for browser authorization...' );
 
 	try {
 
 		const licenseKey = await pollForToken( device_code, interval || 2, expires_in || 900 );
-		clearInterval( spinnerInterval );
-		process.stdout.write( '\r' + ' '.repeat( 50 ) + '\r' ); // Clear spinner line
+		if ( waitSpinner.enabled ) waitSpinner.succeed( 'Authorization successful!' );
+		else log.ok( green( 'Authorization successful!' ) );
 		console.log( '' );
-		log.ok( green( 'Authorization successful!' ) );
 		return licenseKey;
 
 	} catch ( error ) {
 
-		clearInterval( spinnerInterval );
-		process.stdout.write( '\r' + ' '.repeat( 50 ) + '\r' );
+		if ( waitSpinner.enabled ) waitSpinner.fail( 'Authorization failed.' );
 		throw error;
 
 	}
@@ -770,7 +710,7 @@ const log = {
 	},
 	warn: ( msg ) => {
 
-		if ( ! QUIET ) console.error( `${yellow( "⚠" )} ${msg}` );
+		if ( ! QUIET ) console.error( `${cyan( "⚠" )} ${msg}` );
 
 	},
 	error: ( msg ) => {
@@ -798,7 +738,7 @@ const log = {
 			}
 
 			console.log( '' );
-			log.info( bold( yellow( 'Three Blocks Login' ) ) + ' ' + dim( `[mode: ${MODE}]` ) );
+			log.info( bold( cyan( 'Three Blocks Login' ) ) + ' ' + dim( `[mode: ${MODE}]` ) );
 			console.log( '' );
 
 			// Determine login method
@@ -876,7 +816,21 @@ const log = {
 
 		}
 
-		const tokenData = await fetchToken( BROKER_URL, LICENSE_CLEAN, CHANNEL );
+		const brokerSpinner = createSpinner();
+		if ( brokerSpinner.enabled ) brokerSpinner.start( 'Verifying secret key with broker...' );
+		let tokenData;
+		try {
+
+			tokenData = await fetchToken( BROKER_URL, LICENSE_CLEAN, CHANNEL );
+			if ( brokerSpinner.enabled ) brokerSpinner.succeed( 'Broker verified secret key.' );
+
+		} catch ( error ) {
+
+			if ( brokerSpinner.enabled ) brokerSpinner.fail( 'Broker verification failed.' );
+			throw error;
+
+		}
+
 		const {
 			registry,
 			token,
@@ -1217,7 +1171,9 @@ async function fetchToken( endpoint, license, channel ) {
 		let suggestion = "Request failed. Please retry.";
 		if ( res.status === 401 || res.status === 403 ) {
 
-			suggestion = "Authentication failed. Verify your license or access rights.";
+			suggestion = "Authentication failed. The broker did not accept your license key. "
+				+ "If THREE_BLOCKS_SECRET_KEY (or a local .env) is set, verify it contains your active tb_… key, "
+				+ "or unset it to be prompted again.";
 
 		} else if ( res.status === 404 ) {
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "three-blocks-login",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "Fetch a short-lived token from the three-blocks broker and configure npm for the current context.",
   "type": "module",
   "bin": {