xaq-cli 0.1.0-nightly.92 → 0.1.0-nightly.93

package/dist/attachment-parser.js

@@ -110,8 +110,14 @@ const PARSE_LIMITS = {
 	/** Characters kept per cell. */
 	cellChars: 2e3
 };
-/** A file the parser refuses to read (zip bomb, XXE, entry outside the archive, …): said in plain words. */
-var UnsafeDocumentError = class extends Error {};
+/** A file the parser refuses to read (zip bomb, XXE, entry outside the archive, …): said in plain words, with a code. */
+var UnsafeDocumentError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+	}
+};
 //#endregion
 //#region server/mail/extract/csv.ts
 function guessDelimiter(text) {
@@ -7479,12 +7485,12 @@ const ELEMENT = 1;
 const TEXT = 3;
 const CDATA = 4;
 function parseXml(source) {
-	if (/<!DOCTYPE|<!ENTITY/i.test(source)) throw new UnsafeDocumentError("The document declares XML entities (a DOCTYPE), which Office files never do; it wasn't read.");
+	if (/<!DOCTYPE|<!ENTITY/i.test(source)) throw new UnsafeDocumentError("hostile", "The document declares XML entities (a DOCTYPE), which Office files never do; it wasn't read.");
 	let failed = null;
 	const root = new import_lib.DOMParser({ onError: (level, msg) => {
 		if (level !== "warning") failed ??= msg;
 	} }).parseFromString(source, "text/xml").documentElement;
-	if (failed || !root) throw new UnsafeDocumentError("The document has malformed XML.");
+	if (failed || !root) throw new UnsafeDocumentError("corrupt", "The document has malformed XML.");
 	return root;
 }
 const local = (n) => n.localName ?? n.nodeName.replace(/^.*:/, "");
@@ -7568,25 +7574,25 @@ var ZipPackage = class {
 	inflated = 0;
 	constructor(buf) {
 		this.buf = buf;
-		if (buf.length < 22) throw new UnsafeDocumentError("This isn't a valid zip package.");
+		if (buf.length < 22) throw new UnsafeDocumentError("corrupt", "This isn't a valid zip package.");
 		let eocd = -1;
 		for (let i = buf.length - 22; i >= Math.max(0, buf.length - 22 - 65535); i--) if (buf.readUInt32LE(i) === EOCD) {
 			eocd = i;
 			break;
 		}
-		if (eocd < 0) throw new UnsafeDocumentError("This isn't a valid zip package (no central directory).");
+		if (eocd < 0) throw new UnsafeDocumentError("corrupt", "This isn't a valid zip package (no central directory).");
 		const disk = buf.readUInt16LE(eocd + 4);
 		const cdDisk = buf.readUInt16LE(eocd + 6);
 		const count = buf.readUInt16LE(eocd + 10);
 		const cdSize = buf.readUInt32LE(eocd + 12);
 		const cdOffset = buf.readUInt32LE(eocd + 16);
-		if (disk !== 0 || cdDisk !== 0) throw new UnsafeDocumentError("Multi-part zip archives aren't supported.");
-		if (count === 65535 || cdOffset === 4294967295) throw new UnsafeDocumentError("ZIP64 archives aren't supported.");
-		if (count > PARSE_LIMITS.zipEntries) throw new UnsafeDocumentError(`The package has ${count} entries; at most ${PARSE_LIMITS.zipEntries} are read.`);
-		if (cdOffset + cdSize > eocd) throw new UnsafeDocumentError("This zip package is corrupt (central directory out of range).");
+		if (disk !== 0 || cdDisk !== 0) throw new UnsafeDocumentError("unsupported", "Multi-part zip archives aren't supported.");
+		if (count === 65535 || cdOffset === 4294967295) throw new UnsafeDocumentError("unsupported", "ZIP64 archives aren't supported.");
+		if (count > PARSE_LIMITS.zipEntries) throw new UnsafeDocumentError("too_complex", `The package has ${count} entries; at most ${PARSE_LIMITS.zipEntries} are read.`);
+		if (cdOffset + cdSize > eocd) throw new UnsafeDocumentError("corrupt", "This zip package is corrupt (central directory out of range).");
 		let p = cdOffset;
 		for (let i = 0; i < count; i++) {
-			if (p + 46 > eocd || buf.readUInt32LE(p) !== CDH) throw new UnsafeDocumentError("This zip package is corrupt (bad central directory).");
+			if (p + 46 > eocd || buf.readUInt32LE(p) !== CDH) throw new UnsafeDocumentError("corrupt", "This zip package is corrupt (bad central directory).");
 			const flags = buf.readUInt16LE(p + 8);
 			const method = buf.readUInt16LE(p + 10);
 			const compressedSize = buf.readUInt32LE(p + 20);
@@ -7597,10 +7603,10 @@ var ZipPackage = class {
 			const localOffset = buf.readUInt32LE(p + 42);
 			const name = buf.toString(flags & 2048 ? "utf8" : "latin1", p + 46, p + 46 + nameLen);
 			p += 46 + nameLen + extraLen + commentLen;
-			if (flags & 1) throw new UnsafeDocumentError("Encrypted documents can't be read.");
-			if (compressedSize === 4294967295 || size === 4294967295 || localOffset === 4294967295) throw new UnsafeDocumentError("ZIP64 archives aren't supported.");
-			if (!safeEntryName(name)) throw new UnsafeDocumentError("The package has an entry with a path outside the archive; it wasn't read.");
-			if (this.entries.has(name)) throw new UnsafeDocumentError("The package lists the same entry twice; it wasn't read.");
+			if (flags & 1) throw new UnsafeDocumentError("encrypted", "Encrypted documents can't be read.");
+			if (compressedSize === 4294967295 || size === 4294967295 || localOffset === 4294967295) throw new UnsafeDocumentError("unsupported", "ZIP64 archives aren't supported.");
+			if (!safeEntryName(name)) throw new UnsafeDocumentError("hostile", "The package has an entry with a path outside the archive; it wasn't read.");
+			if (this.entries.has(name)) throw new UnsafeDocumentError("hostile", "The package lists the same entry twice; it wasn't read.");
 			if (name.endsWith("/")) continue;
 			this.entries.set(name, {
 				name,
@@ -7622,23 +7628,23 @@ var ZipPackage = class {
 		const e = this.entries.get(name);
 		if (!e) return null;
 		const b = this.buf;
-		if (e.localOffset + 30 > b.length || b.readUInt32LE(e.localOffset) !== LFH) throw new UnsafeDocumentError("This zip package is corrupt (bad entry header).");
+		if (e.localOffset + 30 > b.length || b.readUInt32LE(e.localOffset) !== LFH) throw new UnsafeDocumentError("corrupt", "This zip package is corrupt (bad entry header).");
 		const start = e.localOffset + 30 + b.readUInt16LE(e.localOffset + 26) + b.readUInt16LE(e.localOffset + 28);
-		if (start + e.compressedSize > b.length) throw new UnsafeDocumentError("This zip package is corrupt (entry out of range).");
+		if (start + e.compressedSize > b.length) throw new UnsafeDocumentError("corrupt", "This zip package is corrupt (entry out of range).");
 		const data = b.subarray(start, start + e.compressedSize);
 		const budget = Math.min(PARSE_LIMITS.zipEntryBytes, PARSE_LIMITS.zipTotalBytes - this.inflated);
-		if (e.size > 1048576 && e.size / Math.max(1, e.compressedSize) > PARSE_LIMITS.zipRatio) throw new UnsafeDocumentError("The document looks like a zip bomb (it decompresses to far more than its size); it wasn't read.");
-		if (e.size > budget) throw new UnsafeDocumentError("The document is too large to read once decompressed.");
+		if (e.size > 1048576 && e.size / Math.max(1, e.compressedSize) > PARSE_LIMITS.zipRatio) throw new UnsafeDocumentError("hostile", "The document looks like a zip bomb (it decompresses to far more than its size); it wasn't read.");
+		if (e.size > budget) throw new UnsafeDocumentError("too_complex", "The document is too large to read once decompressed.");
 		let out;
 		if (e.method === 0) out = data;
 		else if (e.method === 8) try {
 			out = inflateRawSync(data, { maxOutputLength: Math.max(1, budget) });
 		} catch (err) {
-			if (err.code === "ERR_BUFFER_TOO_LARGE") throw new UnsafeDocumentError("The document looks like a zip bomb (it decompresses to far more than its size); it wasn't read.");
-			throw new UnsafeDocumentError("This zip package is corrupt (an entry doesn't decompress).");
+			if (err.code === "ERR_BUFFER_TOO_LARGE") throw new UnsafeDocumentError("hostile", "The document looks like a zip bomb (it decompresses to far more than its size); it wasn't read.");
+			throw new UnsafeDocumentError("corrupt", "This zip package is corrupt (an entry doesn't decompress).");
 		}
-		else throw new UnsafeDocumentError("The package uses a compression method that isn't supported.");
-		if (out.length > budget) throw new UnsafeDocumentError("The document is too large to read once decompressed.");
+		else throw new UnsafeDocumentError("unsupported", "The package uses a compression method that isn't supported.");
+		if (out.length > budget) throw new UnsafeDocumentError("too_complex", "The document is too large to read once decompressed.");
 		this.inflated += out.length;
 		return out;
 	}
@@ -7684,7 +7690,7 @@ function extractDocx(input) {
 	const pkg = new ZipPackage(input);
 	const part = mainPart(pkg, "word/document.xml");
 	const xml = pkg.text(part);
-	if (xml === null) throw new UnsafeDocumentError("The file isn't a Word document (no word/document.xml).");
+	if (xml === null) throw new UnsafeDocumentError("corrupt", "The file isn't a Word document (no word/document.xml).");
 	const rels = relationships(pkg.text(relsPath(part)));
 	const byType = (suffix) => {
 		for (const r of rels.values()) if (r.type.endsWith(suffix) && !r.external) return resolvePart(part, r.target);
@@ -77743,8 +77749,8 @@ async function extractPdf(input) {
 	try {
 		doc = await task.promise;
 	} catch (err) {
-		if (err.name === "PasswordException") throw new UnsafeDocumentError("The PDF is password-protected.");
-		throw new UnsafeDocumentError("The file isn't a readable PDF.");
+		if (err.name === "PasswordException") throw new UnsafeDocumentError("password", "The PDF is password-protected.");
+		throw new UnsafeDocumentError("corrupt", "The file isn't a readable PDF.");
 	}
 	const totalPages = doc.numPages;
 	const pages = [];
@@ -77808,7 +77814,7 @@ function extractPptx(input) {
 	const pkg = new ZipPackage(input);
 	const part = mainPart(pkg, "ppt/presentation.xml");
 	const presXml = pkg.text(part);
-	if (presXml === null) throw new UnsafeDocumentError("The file isn't a PowerPoint presentation (no ppt/presentation.xml).");
+	if (presXml === null) throw new UnsafeDocumentError("corrupt", "The file isn't a PowerPoint presentation (no ppt/presentation.xml).");
 	const rels = relationships(pkg.text(relsPath(part)));
 	const pres = parseXml(presXml);
 	const ids = [...descendants(firstChild(pres, "sldIdLst") ?? pres, "sldId")];
@@ -77902,7 +77908,7 @@ function extractXlsx(input) {
 	const pkg = new ZipPackage(input);
 	const part = mainPart(pkg, "xl/workbook.xml");
 	const wbXml = pkg.text(part);
-	if (wbXml === null) throw new UnsafeDocumentError("The file isn't an Excel workbook (no xl/workbook.xml).");
+	if (wbXml === null) throw new UnsafeDocumentError("corrupt", "The file isn't an Excel workbook (no xl/workbook.xml).");
 	const wb = parseXml(wbXml);
 	const rels = relationships(pkg.text(relsPath(part)));
 	const relOf = (suffix) => {
@@ -78064,6 +78070,7 @@ function cleanParts(r, clean) {
 async function run(input, task) {
 	if (input.length > PARSE_LIMITS.inputBytes) return {
 		ok: false,
+		code: "too_complex",
 		error: "The file is too large to read."
 	};
 	try {
@@ -78086,6 +78093,7 @@ async function run(input, task) {
 				break;
 			default: return {
 				ok: false,
+				code: "parser_error",
 				error: "Unknown format."
 			};
 		}
@@ -78094,9 +78102,15 @@ async function run(input, task) {
 			result: cleanAll(result)
 		};
 	} catch (err) {
+		if (err instanceof UnsafeDocumentError) return {
+			ok: false,
+			code: err.code,
+			error: err.message
+		};
 		return {
 			ok: false,
-			error: err instanceof UnsafeDocumentError ? err.message : "The file couldn't be parsed."
+			code: "parser_error",
+			error: "The file couldn't be parsed."
 		};
 	}
 }

package/dist/{cli-yN8ExqrA.js → cli-Wp2ejVBT.js}

@@ -74,7 +74,7 @@ Example:
 		const { openAdminChannel } = await import("./admin-DbJXEo2d.js");
 		const { TerminalPrompter } = await import("./prompt-BEH311I7.js");
 		const { connectAgentMcp } = await import("./agent-B8a-Ivyd.js");
-		const { SmokeRun } = await import("./run-D3Qmg-MB.js");
+		const { SmokeRun } = await import("./run-zakbVgQR.js");
 		const { renderReport } = await import("./report-D2D_6E5O.js");
 		if (!o.scratch) throw new Error("smoke google-workspace runs live on the connected Google account: it reads existing files and mail, and writes only into a new scratch folder and ONE draft to the account itself, which it removes again. Pass --scratch to run it.");
 		const out = safeWriter(o.json ? process.stderr : process.stdout);
@@ -123,4 +123,4 @@ Example:
 //#endregion
 export { registerSmokeCommands };
 
-//# sourceMappingURL=cli-yN8ExqrA.js.map
+//# sourceMappingURL=cli-Wp2ejVBT.js.map

package/dist/{cli-yN8ExqrA.js.map → cli-Wp2ejVBT.js.map}

@@ -1 +1 @@
-{"version":3,"file":"cli-yN8ExqrA.js","names":[],"sources":["../server/smoke/cli.ts"],"sourcesContent":["// `xaq smoke google-workspace --scratch`: run on xaq's machine, through the daemon's admin API over the local admin\n// channel (server/connections-cli/admin.ts) and /mcp as a temporary agent. See run.ts for what it does.\n\nimport type { Command } from \"commander\";\nimport { LEGACY_PRODUCT } from \"../brand.ts\";\nimport { resolveDataDir } from \"../config.ts\";\nimport { NPX } from \"../listen/version.ts\";\nimport type { SmokeFlags } from \"./run.ts\";\n\nconst GROUP = \"MCP connections (on xaq's machine):\";\n\n/**\n * A line printer that can't kill the run: once the stream fails (EIO or EPIPE from a terminal that went away, e.g.\n * after SIGHUP), later lines are dropped instead of throwing or crashing on an unhandled 'error'.\n */\nexport function safeWriter(stream: NodeJS.WritableStream): { print: (line?: string) => void; dispose: () => void } {\n  let dead = false;\n  const onError = () => {\n    dead = true;\n  };\n  stream.on(\"error\", onError);\n  return {\n    print(line = \"\") {\n      if (dead) return;\n      try {\n        stream.write(`${line}\\n`, (err) => {\n          if (err) dead = true;\n        });\n      } catch {\n        dead = true;\n      }\n    },\n    dispose: () => stream.removeListener(\"error\", onError),\n  };\n}\n\nexport interface SmokeSignalOptions {\n  print: (line: string) => void;\n  exit: (code: number) => void;\n  /** The second Ctrl-C: the quick part of cleanup (agent, attachmentDirs), bounded. */\n  fastCleanup: () => Promise<void>;\n  /** What may still be there, in a sentence. */\n  leftovers: () => string;\n  /** Upper bound on the second Ctrl-C's cleanup before quitting anyway (default 8 s). */\n  quitWithinMs?: number;\n}\n\n/**\n * Signals during a run. SIGTERM and SIGHUP (a closed terminal, a stopped service) always act like the first Ctrl-C:\n * no new step starts and the run's full cleanup runs. The first Ctrl-C does the same; a second one runs the quick\n * cleanup (delete the agent, restore attachmentDirs) with a short timeout, says what may be left and quits.\n * Returns the remover.\n */\nexport function installSmokeSignals(controller: AbortController, opts: SmokeSignalOptions): () => void {\n  let interrupts = 0;\n  let quitting = false;\n  const stop = (why: string) => {\n    if (controller.signal.aborted) return;\n    opts.print(`\\n${why}: stopping after the current call, then cleaning up.${why === \"Ctrl-C\" ? \" Press Ctrl-C again to quit sooner (only the agent and attachmentDirs are cleaned up then).\" : \"\"}`);\n    controller.abort();\n  };\n  const onInt = () => {\n    interrupts++;\n    if (interrupts === 1) return stop(\"Ctrl-C\");\n    if (quitting) return;\n    quitting = true;\n    opts.print(\"\\nQuitting: deleting the temporary agent and restoring attachmentDirs first…\");\n    const deadline = new Promise<void>((r) => setTimeout(r, opts.quitWithinMs ?? 8000).unref?.());\n    void Promise.race([opts.fastCleanup().catch(() => {}), deadline]).then(() => {\n      opts.print(`Quit before the cleanup finished. ${opts.leftovers()}`);\n      opts.exit(130);\n    });\n  };\n  const onTerm = () => stop(\"SIGTERM\");\n  const onHup = () => stop(\"SIGHUP\");\n  process.on(\"SIGINT\", onInt);\n  process.on(\"SIGTERM\", onTerm);\n  process.on(\"SIGHUP\", onHup);\n  return () => {\n    process.removeListener(\"SIGINT\", onInt);\n    process.removeListener(\"SIGTERM\", onTerm);\n    process.removeListener(\"SIGHUP\", onHup);\n  };\n}\n\nexport function registerSmokeCommands(program: Command): void {\n  const smoke = program\n    .command(\"smoke\")\n    .description(\"live end-to-end checks against the connected accounts, safe by construction\")\n    .summary(\"live end-to-end check of a connection\")\n    .helpGroup(GROUP);\n\n  smoke\n    .command(\"google-workspace\")\n    .description(\"check Gmail attachments and the google-workspace extension end to end on the real account: reads anything, writes only into a new scratch folder and ONE draft to itself, cleans up\")\n    .option(\"--scratch\", \"required: confirms the run may create its scratch folder, its draft and its temporary agent (all removed again)\")\n    .option(\"--account <email>\", \"the Gmail account (default: the only one, or the one the Workspace connection is signed in as)\")\n    .option(\"--connection <slug>\", \"the google-workspace connection (default: the only one)\")\n    .option(\"--json\", \"print the result table as JSON on stdout (progress goes to stderr)\")\n    .option(\"-y, --yes\", \"don't ask before running\")\n    .option(\"-d, --data <dir>\", `xaq's data directory (default ~/.xaq, or an existing ~/.${LEGACY_PRODUCT}; env XAQ_DATA)`)\n    .addHelpText(\n      \"after\",\n      `\nPrints the plan first and asks (or --yes). Exit code 0 only when every step passes and nothing is left behind.\n\nExample:\n  ${NPX} smoke google-workspace --scratch`,\n    )\n    .action(async (o: SmokeFlags & { data?: string }) => {\n      const { openAdminChannel } = await import(\"../connections-cli/admin.ts\");\n      const { TerminalPrompter } = await import(\"../connections-cli/prompt.ts\");\n      const { connectAgentMcp } = await import(\"./agent.ts\");\n      const { SmokeRun } = await import(\"./run.ts\");\n      const { renderReport } = await import(\"./report.ts\");\n      if (!o.scratch) {\n        throw new Error(\n          \"smoke google-workspace runs live on the connected Google account: it reads existing files and mail, and writes only into a new scratch folder and ONE draft to the account itself, which it removes again. Pass --scratch to run it.\",\n        );\n      }\n      const out = safeWriter(o.json ? process.stderr : process.stdout);\n      const err = o.json ? out : safeWriter(process.stderr);\n      const json = o.json ? safeWriter(process.stdout) : null;\n      const channel = openAdminChannel({ dataDir: resolveDataDir(o.data, { quiet: true }) });\n      const prompter = new TerminalPrompter(!!o.yes, { input: process.stdin, output: o.json ? process.stderr : process.stdout });\n      const controller = new AbortController();\n      const run = new SmokeRun(o, {\n        admin: channel,\n        connectMcp: (key) => connectAgentMcp(channel.baseUrl, key),\n        print: out.print,\n        confirm: (q) => prompter.confirm(q, false),\n        signal: controller.signal,\n      });\n      const remove = installSmokeSignals(controller, {\n        print: (l) => err.print(l),\n        fastCleanup: () => run.fastCleanup(3000),\n        exit: (code) => {\n          channel.close();\n          process.exit(code);\n        },\n        leftovers: () => {\n          const left = run.pendingLeftovers();\n          return left.length ? `These may be left: ${left.join(\"; \")}. The next run removes the agent and the attachmentDirs entry and lists the rest.` : \"Nothing was left.\";\n        },\n      });\n      try {\n        const report = await run.run();\n        if (json) json.print(JSON.stringify(report, null, 2));\n        else for (const l of [\"\", ...renderReport(report)]) out.print(l);\n        process.exitCode = report.ok ? 0 : report.interrupted ? 130 : 1;\n      } finally {\n        remove();\n        prompter.close();\n        channel.close();\n        out.dispose();\n        if (err !== out) err.dispose();\n        json?.dispose();\n      }\n    });\n}\n"],"mappings":";;;;;AASA,MAAM,QAAQ;;;;;AAMd,SAAgB,WAAW,QAAwF;CACjH,IAAI,OAAO;CACX,MAAM,gBAAgB;EACpB,OAAO;CACT;CACA,OAAO,GAAG,SAAS,OAAO;CAC1B,OAAO;EACL,MAAM,OAAO,IAAI;GACf,IAAI,MAAM;GACV,IAAI;IACF,OAAO,MAAM,GAAG,KAAK,MAAM,QAAQ;KACjC,IAAI,KAAK,OAAO;IAClB,CAAC;GACH,QAAQ;IACN,OAAO;GACT;EACF;EACA,eAAe,OAAO,eAAe,SAAS,OAAO;CACvD;AACF;;;;;;;AAmBA,SAAgB,oBAAoB,YAA6B,MAAsC;CACrG,IAAI,aAAa;CACjB,IAAI,WAAW;CACf,MAAM,QAAQ,QAAgB;EAC5B,IAAI,WAAW,OAAO,SAAS;EAC/B,KAAK,MAAM,KAAK,IAAI,sDAAsD,QAAQ,WAAW,gGAAgG,IAAI;EACjM,WAAW,MAAM;CACnB;CACA,MAAM,cAAc;EAClB;EACA,IAAI,eAAe,GAAG,OAAO,KAAK,QAAQ;EAC1C,IAAI,UAAU;EACd,WAAW;EACX,KAAK,MAAM,8EAA8E;EACzF,MAAM,WAAW,IAAI,SAAe,MAAM,WAAW,GAAG,KAAK,gBAAgB,GAAI,CAAC,CAAC,QAAQ,CAAC;EAC5F,QAAa,KAAK,CAAC,KAAK,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW;GAC3E,KAAK,MAAM,qCAAqC,KAAK,UAAU,GAAG;GAClE,KAAK,KAAK,GAAG;EACf,CAAC;CACH;CACA,MAAM,eAAe,KAAK,SAAS;CACnC,MAAM,cAAc,KAAK,QAAQ;CACjC,QAAQ,GAAG,UAAU,KAAK;CAC1B,QAAQ,GAAG,WAAW,MAAM;CAC5B,QAAQ,GAAG,UAAU,KAAK;CAC1B,aAAa;EACX,QAAQ,eAAe,UAAU,KAAK;EACtC,QAAQ,eAAe,WAAW,MAAM;EACxC,QAAQ,eAAe,UAAU,KAAK;CACxC;AACF;AAEA,SAAgB,sBAAsB,SAAwB;CAO5D,QALG,QAAQ,OAAO,CAAC,CAChB,YAAY,6EAA6E,CAAC,CAC1F,QAAQ,uCAAuC,CAAC,CAChD,UAAU,KAET,CAAC,CACF,QAAQ,kBAAkB,CAAC,CAC3B,YAAY,qLAAqL,CAAC,CAClM,OAAO,aAAa,iHAAiH,CAAC,CACtI,OAAO,qBAAqB,gGAAgG,CAAC,CAC7H,OAAO,uBAAuB,yDAAyD,CAAC,CACxF,OAAO,UAAU,oEAAoE,CAAC,CACtF,OAAO,aAAa,0BAA0B,CAAC,CAC/C,OAAO,oBAAoB,2DAA2D,eAAe,gBAAgB,CAAC,CACtH,YACC,SACA;;;;IAIF,IAAI,kCACJ,CAAC,CACA,OAAO,OAAO,MAAsC;EACnD,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAC1C,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAC1C,MAAM,EAAE,oBAAoB,MAAM,OAAO;EACzC,MAAM,EAAE,aAAa,MAAM,OAAO;EAClC,MAAM,EAAE,iBAAiB,MAAM,OAAO;EACtC,IAAI,CAAC,EAAE,SACL,MAAM,IAAI,MACR,sOACF;EAEF,MAAM,MAAM,WAAW,EAAE,OAAO,QAAQ,SAAS,QAAQ,MAAM;EAC/D,MAAM,MAAM,EAAE,OAAO,MAAM,WAAW,QAAQ,MAAM;EACpD,MAAM,OAAO,EAAE,OAAO,WAAW,QAAQ,MAAM,IAAI;EACnD,MAAM,UAAU,iBAAiB,EAAE,SAAS,eAAe,EAAE,MAAM,EAAE,OAAO,KAAK,CAAC,EAAE,CAAC;EACrF,MAAM,WAAW,IAAI,iBAAiB,CAAC,CAAC,EAAE,KAAK;GAAE,OAAO,QAAQ;GAAO,QAAQ,EAAE,OAAO,QAAQ,SAAS,QAAQ;EAAO,CAAC;EACzH,MAAM,aAAa,IAAI,gBAAgB;EACvC,MAAM,MAAM,IAAI,SAAS,GAAG;GAC1B,OAAO;GACP,aAAa,QAAQ,gBAAgB,QAAQ,SAAS,GAAG;GACzD,OAAO,IAAI;GACX,UAAU,MAAM,SAAS,QAAQ,GAAG,KAAK;GACzC,QAAQ,WAAW;EACrB,CAAC;EACD,MAAM,SAAS,oBAAoB,YAAY;GAC7C,QAAQ,MAAM,IAAI,MAAM,CAAC;GACzB,mBAAmB,IAAI,YAAY,GAAI;GACvC,OAAO,SAAS;IACd,QAAQ,MAAM;IACd,QAAQ,KAAK,IAAI;GACnB;GACA,iBAAiB;IACf,MAAM,OAAO,IAAI,iBAAiB;IAClC,OAAO,KAAK,SAAS,sBAAsB,KAAK,KAAK,IAAI,EAAE,qFAAqF;GAClJ;EACF,CAAC;EACD,IAAI;GACF,MAAM,SAAS,MAAM,IAAI,IAAI;GAC7B,IAAI,MAAM,KAAK,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;QAC/C,KAAK,MAAM,KAAK,CAAC,IAAI,GAAG,aAAa,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC;GAC/D,QAAQ,WAAW,OAAO,KAAK,IAAI,OAAO,cAAc,MAAM;EAChE,UAAU;GACR,OAAO;GACP,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,IAAI,QAAQ;GACZ,IAAI,QAAQ,KAAK,IAAI,QAAQ;GAC7B,MAAM,QAAQ;EAChB;CACF,CAAC;AACL"}
+{"version":3,"file":"cli-Wp2ejVBT.js","names":[],"sources":["../server/smoke/cli.ts"],"sourcesContent":["// `xaq smoke google-workspace --scratch`: run on xaq's machine, through the daemon's admin API over the local admin\n// channel (server/connections-cli/admin.ts) and /mcp as a temporary agent. See run.ts for what it does.\n\nimport type { Command } from \"commander\";\nimport { LEGACY_PRODUCT } from \"../brand.ts\";\nimport { resolveDataDir } from \"../config.ts\";\nimport { NPX } from \"../listen/version.ts\";\nimport type { SmokeFlags } from \"./run.ts\";\n\nconst GROUP = \"MCP connections (on xaq's machine):\";\n\n/**\n * A line printer that can't kill the run: once the stream fails (EIO or EPIPE from a terminal that went away, e.g.\n * after SIGHUP), later lines are dropped instead of throwing or crashing on an unhandled 'error'.\n */\nexport function safeWriter(stream: NodeJS.WritableStream): { print: (line?: string) => void; dispose: () => void } {\n  let dead = false;\n  const onError = () => {\n    dead = true;\n  };\n  stream.on(\"error\", onError);\n  return {\n    print(line = \"\") {\n      if (dead) return;\n      try {\n        stream.write(`${line}\\n`, (err) => {\n          if (err) dead = true;\n        });\n      } catch {\n        dead = true;\n      }\n    },\n    dispose: () => stream.removeListener(\"error\", onError),\n  };\n}\n\nexport interface SmokeSignalOptions {\n  print: (line: string) => void;\n  exit: (code: number) => void;\n  /** The second Ctrl-C: the quick part of cleanup (agent, attachmentDirs), bounded. */\n  fastCleanup: () => Promise<void>;\n  /** What may still be there, in a sentence. */\n  leftovers: () => string;\n  /** Upper bound on the second Ctrl-C's cleanup before quitting anyway (default 8 s). */\n  quitWithinMs?: number;\n}\n\n/**\n * Signals during a run. SIGTERM and SIGHUP (a closed terminal, a stopped service) always act like the first Ctrl-C:\n * no new step starts and the run's full cleanup runs. The first Ctrl-C does the same; a second one runs the quick\n * cleanup (delete the agent, restore attachmentDirs) with a short timeout, says what may be left and quits.\n * Returns the remover.\n */\nexport function installSmokeSignals(controller: AbortController, opts: SmokeSignalOptions): () => void {\n  let interrupts = 0;\n  let quitting = false;\n  const stop = (why: string) => {\n    if (controller.signal.aborted) return;\n    opts.print(`\\n${why}: stopping after the current call, then cleaning up.${why === \"Ctrl-C\" ? \" Press Ctrl-C again to quit sooner (only the agent and attachmentDirs are cleaned up then).\" : \"\"}`);\n    controller.abort();\n  };\n  const onInt = () => {\n    interrupts++;\n    if (interrupts === 1) return stop(\"Ctrl-C\");\n    if (quitting) return;\n    quitting = true;\n    opts.print(\"\\nQuitting: deleting the temporary agent and restoring attachmentDirs first…\");\n    const deadline = new Promise<void>((r) => setTimeout(r, opts.quitWithinMs ?? 8000).unref?.());\n    void Promise.race([opts.fastCleanup().catch(() => {}), deadline]).then(() => {\n      opts.print(`Quit before the cleanup finished. ${opts.leftovers()}`);\n      opts.exit(130);\n    });\n  };\n  const onTerm = () => stop(\"SIGTERM\");\n  const onHup = () => stop(\"SIGHUP\");\n  process.on(\"SIGINT\", onInt);\n  process.on(\"SIGTERM\", onTerm);\n  process.on(\"SIGHUP\", onHup);\n  return () => {\n    process.removeListener(\"SIGINT\", onInt);\n    process.removeListener(\"SIGTERM\", onTerm);\n    process.removeListener(\"SIGHUP\", onHup);\n  };\n}\n\nexport function registerSmokeCommands(program: Command): void {\n  const smoke = program\n    .command(\"smoke\")\n    .description(\"live end-to-end checks against the connected accounts, safe by construction\")\n    .summary(\"live end-to-end check of a connection\")\n    .helpGroup(GROUP);\n\n  smoke\n    .command(\"google-workspace\")\n    .description(\"check Gmail attachments and the google-workspace extension end to end on the real account: reads anything, writes only into a new scratch folder and ONE draft to itself, cleans up\")\n    .option(\"--scratch\", \"required: confirms the run may create its scratch folder, its draft and its temporary agent (all removed again)\")\n    .option(\"--account <email>\", \"the Gmail account (default: the only one, or the one the Workspace connection is signed in as)\")\n    .option(\"--connection <slug>\", \"the google-workspace connection (default: the only one)\")\n    .option(\"--json\", \"print the result table as JSON on stdout (progress goes to stderr)\")\n    .option(\"-y, --yes\", \"don't ask before running\")\n    .option(\"-d, --data <dir>\", `xaq's data directory (default ~/.xaq, or an existing ~/.${LEGACY_PRODUCT}; env XAQ_DATA)`)\n    .addHelpText(\n      \"after\",\n      `\nPrints the plan first and asks (or --yes). Exit code 0 only when every step passes and nothing is left behind.\n\nExample:\n  ${NPX} smoke google-workspace --scratch`,\n    )\n    .action(async (o: SmokeFlags & { data?: string }) => {\n      const { openAdminChannel } = await import(\"../connections-cli/admin.ts\");\n      const { TerminalPrompter } = await import(\"../connections-cli/prompt.ts\");\n      const { connectAgentMcp } = await import(\"./agent.ts\");\n      const { SmokeRun } = await import(\"./run.ts\");\n      const { renderReport } = await import(\"./report.ts\");\n      if (!o.scratch) {\n        throw new Error(\n          \"smoke google-workspace runs live on the connected Google account: it reads existing files and mail, and writes only into a new scratch folder and ONE draft to the account itself, which it removes again. Pass --scratch to run it.\",\n        );\n      }\n      const out = safeWriter(o.json ? process.stderr : process.stdout);\n      const err = o.json ? out : safeWriter(process.stderr);\n      const json = o.json ? safeWriter(process.stdout) : null;\n      const channel = openAdminChannel({ dataDir: resolveDataDir(o.data, { quiet: true }) });\n      const prompter = new TerminalPrompter(!!o.yes, { input: process.stdin, output: o.json ? process.stderr : process.stdout });\n      const controller = new AbortController();\n      const run = new SmokeRun(o, {\n        admin: channel,\n        connectMcp: (key) => connectAgentMcp(channel.baseUrl, key),\n        print: out.print,\n        confirm: (q) => prompter.confirm(q, false),\n        signal: controller.signal,\n      });\n      const remove = installSmokeSignals(controller, {\n        print: (l) => err.print(l),\n        fastCleanup: () => run.fastCleanup(3000),\n        exit: (code) => {\n          channel.close();\n          process.exit(code);\n        },\n        leftovers: () => {\n          const left = run.pendingLeftovers();\n          return left.length ? `These may be left: ${left.join(\"; \")}. The next run removes the agent and the attachmentDirs entry and lists the rest.` : \"Nothing was left.\";\n        },\n      });\n      try {\n        const report = await run.run();\n        if (json) json.print(JSON.stringify(report, null, 2));\n        else for (const l of [\"\", ...renderReport(report)]) out.print(l);\n        process.exitCode = report.ok ? 0 : report.interrupted ? 130 : 1;\n      } finally {\n        remove();\n        prompter.close();\n        channel.close();\n        out.dispose();\n        if (err !== out) err.dispose();\n        json?.dispose();\n      }\n    });\n}\n"],"mappings":";;;;;AASA,MAAM,QAAQ;;;;;AAMd,SAAgB,WAAW,QAAwF;CACjH,IAAI,OAAO;CACX,MAAM,gBAAgB;EACpB,OAAO;CACT;CACA,OAAO,GAAG,SAAS,OAAO;CAC1B,OAAO;EACL,MAAM,OAAO,IAAI;GACf,IAAI,MAAM;GACV,IAAI;IACF,OAAO,MAAM,GAAG,KAAK,MAAM,QAAQ;KACjC,IAAI,KAAK,OAAO;IAClB,CAAC;GACH,QAAQ;IACN,OAAO;GACT;EACF;EACA,eAAe,OAAO,eAAe,SAAS,OAAO;CACvD;AACF;;;;;;;AAmBA,SAAgB,oBAAoB,YAA6B,MAAsC;CACrG,IAAI,aAAa;CACjB,IAAI,WAAW;CACf,MAAM,QAAQ,QAAgB;EAC5B,IAAI,WAAW,OAAO,SAAS;EAC/B,KAAK,MAAM,KAAK,IAAI,sDAAsD,QAAQ,WAAW,gGAAgG,IAAI;EACjM,WAAW,MAAM;CACnB;CACA,MAAM,cAAc;EAClB;EACA,IAAI,eAAe,GAAG,OAAO,KAAK,QAAQ;EAC1C,IAAI,UAAU;EACd,WAAW;EACX,KAAK,MAAM,8EAA8E;EACzF,MAAM,WAAW,IAAI,SAAe,MAAM,WAAW,GAAG,KAAK,gBAAgB,GAAI,CAAC,CAAC,QAAQ,CAAC;EAC5F,QAAa,KAAK,CAAC,KAAK,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW;GAC3E,KAAK,MAAM,qCAAqC,KAAK,UAAU,GAAG;GAClE,KAAK,KAAK,GAAG;EACf,CAAC;CACH;CACA,MAAM,eAAe,KAAK,SAAS;CACnC,MAAM,cAAc,KAAK,QAAQ;CACjC,QAAQ,GAAG,UAAU,KAAK;CAC1B,QAAQ,GAAG,WAAW,MAAM;CAC5B,QAAQ,GAAG,UAAU,KAAK;CAC1B,aAAa;EACX,QAAQ,eAAe,UAAU,KAAK;EACtC,QAAQ,eAAe,WAAW,MAAM;EACxC,QAAQ,eAAe,UAAU,KAAK;CACxC;AACF;AAEA,SAAgB,sBAAsB,SAAwB;CAO5D,QALG,QAAQ,OAAO,CAAC,CAChB,YAAY,6EAA6E,CAAC,CAC1F,QAAQ,uCAAuC,CAAC,CAChD,UAAU,KAET,CAAC,CACF,QAAQ,kBAAkB,CAAC,CAC3B,YAAY,qLAAqL,CAAC,CAClM,OAAO,aAAa,iHAAiH,CAAC,CACtI,OAAO,qBAAqB,gGAAgG,CAAC,CAC7H,OAAO,uBAAuB,yDAAyD,CAAC,CACxF,OAAO,UAAU,oEAAoE,CAAC,CACtF,OAAO,aAAa,0BAA0B,CAAC,CAC/C,OAAO,oBAAoB,2DAA2D,eAAe,gBAAgB,CAAC,CACtH,YACC,SACA;;;;IAIF,IAAI,kCACJ,CAAC,CACA,OAAO,OAAO,MAAsC;EACnD,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAC1C,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAC1C,MAAM,EAAE,oBAAoB,MAAM,OAAO;EACzC,MAAM,EAAE,aAAa,MAAM,OAAO;EAClC,MAAM,EAAE,iBAAiB,MAAM,OAAO;EACtC,IAAI,CAAC,EAAE,SACL,MAAM,IAAI,MACR,sOACF;EAEF,MAAM,MAAM,WAAW,EAAE,OAAO,QAAQ,SAAS,QAAQ,MAAM;EAC/D,MAAM,MAAM,EAAE,OAAO,MAAM,WAAW,QAAQ,MAAM;EACpD,MAAM,OAAO,EAAE,OAAO,WAAW,QAAQ,MAAM,IAAI;EACnD,MAAM,UAAU,iBAAiB,EAAE,SAAS,eAAe,EAAE,MAAM,EAAE,OAAO,KAAK,CAAC,EAAE,CAAC;EACrF,MAAM,WAAW,IAAI,iBAAiB,CAAC,CAAC,EAAE,KAAK;GAAE,OAAO,QAAQ;GAAO,QAAQ,EAAE,OAAO,QAAQ,SAAS,QAAQ;EAAO,CAAC;EACzH,MAAM,aAAa,IAAI,gBAAgB;EACvC,MAAM,MAAM,IAAI,SAAS,GAAG;GAC1B,OAAO;GACP,aAAa,QAAQ,gBAAgB,QAAQ,SAAS,GAAG;GACzD,OAAO,IAAI;GACX,UAAU,MAAM,SAAS,QAAQ,GAAG,KAAK;GACzC,QAAQ,WAAW;EACrB,CAAC;EACD,MAAM,SAAS,oBAAoB,YAAY;GAC7C,QAAQ,MAAM,IAAI,MAAM,CAAC;GACzB,mBAAmB,IAAI,YAAY,GAAI;GACvC,OAAO,SAAS;IACd,QAAQ,MAAM;IACd,QAAQ,KAAK,IAAI;GACnB;GACA,iBAAiB;IACf,MAAM,OAAO,IAAI,iBAAiB;IAClC,OAAO,KAAK,SAAS,sBAAsB,KAAK,KAAK,IAAI,EAAE,qFAAqF;GAClJ;EACF,CAAC;EACD,IAAI;GACF,MAAM,SAAS,MAAM,IAAI,IAAI;GAC7B,IAAI,MAAM,KAAK,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;QAC/C,KAAK,MAAM,KAAK,CAAC,IAAI,GAAG,aAAa,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC;GAC/D,QAAQ,WAAW,OAAO,KAAK,IAAI,OAAO,cAAc,MAAM;EAChE,UAAU;GACR,OAAO;GACP,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,IAAI,QAAQ;GACZ,IAAI,QAAQ,KAAK,IAAI,QAAQ;GAC7B,MAAM,QAAQ;EAChB;CACF,CAAC;AACL"}

package/dist/cli.js

@@ -59,7 +59,7 @@ const SERVER_GROUP = "Run xaq:";
 const AGENT_GROUP = "On an agent's machine:";
 withServerOptions(program.command("start", { isDefault: true }).description("run xaq in this terminal and print the setup link (the default command)").summary("run it in this terminal (the default command)").helpGroup(SERVER_GROUP)).option("--no-open", "don't open a browser on first run").option("--dev", "development: API only, the console runs on Vite (:5173)").allowExcessArguments().action(async (o, cmd) => {
 	if (cmd.args.length) throw new Error(unknownCommand(cmd.args[0]));
-	const { runForeground } = await import("./server-BmxoM9--.js");
+	const { runForeground } = await import("./server-0wxSpx6s.js");
 	await runForeground({
 		...configInput(o),
 		dev: !!o.dev,
@@ -144,7 +144,7 @@ const { registerConnectionsCommands } = await import("./commands-CgmkYCYG.js");
 registerConnectionsCommands(program);
 const { registerExtensionCommands } = await import("./cli-B8cuKWiS.js");
 registerExtensionCommands(program);
-const { registerSmokeCommands } = await import("./cli-yN8ExqrA.js");
+const { registerSmokeCommands } = await import("./cli-Wp2ejVBT.js");
 registerSmokeCommands(program);
 const { registerSettingsCommands } = await import("./settings-cli-DfWc-yWJ.js");
 registerSettingsCommands(program);

package/dist/{run-D3Qmg-MB.js → run-zakbVgQR.js}

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
+import { r as cleanLine } from "./content-Di_U9ZZ6.js";
 import { t as NPX } from "./version-BxH7OuWD.js";
-import { a as smokeSubjectPrefix, f as PARSE_LIMITS, i as smokeName, n as SMOKE_TEMP_RE, s as attachmentKind, t as SMOKE_NAME_RE } from "./smoke-DA7EXNuS.js";
+import { a as smokeSubjectPrefix, f as PARSE_LIMITS, i as smokeName, n as SMOKE_TEMP_RE, s as attachmentKind, t as SMOKE_NAME_RE } from "./smoke-ZqEGwDQl.js";
 import "./agent-mYT2noTp.js";
 import { t as finish } from "./report-BLbtzUlC.js";
 import { chmodSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readdirSync, rmSync, writeFileSync } from "node:fs";
@@ -212,13 +213,14 @@ const MAIL_TOOLS = [
 	"create_draft"
 ];
 /**
-* What get_attachment (server/mcp/attachments.ts) shows inline instead of saving to disk, from its own rules:
-* attachmentKind() on the listed type and name, images under MAX_ATTACHMENT_BYTES, PDF/DOCX/XLSX/PPTX/CSV under
-* PARSE_LIMITS.inputBytes, text and HTML at any size (it reads the first part). Everything else is saved, so the run
-* never asks for it. The bytes aren't known here: attachmentKind's content sniff (a PDF sent as octet-stream without
-* an extension) sees an empty buffer and says "other", which skips the file. That errs on the safe side.
+* What get_attachment (server/mcp/attachments.ts) can show inline, from its own rules: attachmentKind() on the listed
+* type and name, images under MAX_ATTACHMENT_BYTES, PDF/DOCX/XLSX/PPTX/CSV under PARSE_LIMITS.inputBytes, text and
+* HTML at any size (it reads the first part). The run asks with format "inline", which never saves; for anything
+* else that would only download the owner's file to answer "not shown", so the run doesn't ask. The bytes aren't
+* known here: attachmentKind's content sniff (a PDF sent as octet-stream without an extension) sees an empty buffer
+* and says "other", which skips the file.
 */
-const SKIPPED_WOULD_SAVE = "skipped (would be saved to disk)";
+const SKIPPED_NOT_INLINE = "skipped (can't be shown inline)";
 /** The kind get_attachment would show inline, or null when it would save the file to disk (so the run skips it). */
 function inlineKind(a) {
 	const kind = attachmentKind(a.mimeType, a.filename, Buffer.alloc(0));
@@ -297,7 +299,7 @@ function planLines(marker, account, connection) {
 		"Reads (existing files and mail, read only; prints names, the subject, kinds and sizes, never content):",
 		"  - Drive: search the newest Doc, Sheet and Slides file, list the top of My Drive, get, read and export each",
 		"  - Gmail: ONE email with attachments: list its attachments and extract each one get_attachment shows",
-		"    inline (anything it would save to disk is skipped)",
+		"    inline, asking it never to save a copy (anything it can't show inline is skipped)",
 		`Writes (only inside a new Drive folder "${marker}" at the top of My Drive; every write is checked first):`,
 		"  - Docs: create a doc from markdown, append, find and replace (count checked), comment, read back",
 		"  - Sheets: create a sheet, write a range, append rows, read back",
@@ -363,6 +365,27 @@ function describeExtraction(out) {
 	if (res?.resource?.blob !== void 0) return `binary, ${res.resource.blob.length} chars (base64)`;
 	return `text, ${blocks.filter((b) => b.type === "text").map((b) => b.text ?? "").join("\n").split("\n").slice(1).join("\n").length} chars`;
 }
+/**
+* Parse failures that are the file's own doing: the smoke passes them as "couldn't read (…)". Every other one (corrupt,
+* a parser that's missing, crashed, timed out, busy, …) may be xaq's fault, and this run is what would notice.
+*/
+const FILE_OWN_PARSE_FAILURES = /* @__PURE__ */ new Set(["password", "encrypted"]);
+/**
+* A format "inline" answer that didn't show the file (structuredContent.attachment.notShown): its code, the parser's
+* failure code when it couldn't read it, and the reason without a closing period. The reason is xaq's own words (the
+* parser's fixed messages), never the file's content, unless the parser child is subverted (it's cleaned anyway).
+*/
+function notShownOf(out) {
+	const a = out.structured?.attachment;
+	if (!a || typeof a.notShown !== "string" || !a.notShown) return null;
+	const reason = typeof a.reason === "string" ? cleanLine(a.reason, 200).replace(/\.$/, "") : "";
+	const parseFailure = typeof a.parseFailure === "string" && a.parseFailure ? cleanLine(a.parseFailure, 40) : null;
+	return {
+		code: cleanLine(a.notShown, 40),
+		parseFailure,
+		reason: reason || "no reason given"
+	};
+}
 /** A get_attachment answer that saved the file to disk (A2: structuredContent.attachment.savedPath). */
 function savedPathOf(out) {
 	const a = out.structured?.attachment;
@@ -757,12 +780,13 @@ var SmokeRun = class {
 		});
 		for (const a of attachments.slice(0, 10)) await this.step("get_attachment", `extract "${a.filename}"`, async () => {
 			const kind = inlineKind(a);
-			if (!kind) return SKIPPED_WOULD_SAVE;
+			if (!kind) return SKIPPED_NOT_INLINE;
 			const m = message;
 			const out = await this.rawCall("get_attachment", {
 				account,
 				message_id: m.id,
-				attachment_id: a.id
+				attachment_id: a.id,
+				format: "inline"
 			});
 			const saved = savedPathOf(out);
 			if (saved) {
@@ -770,6 +794,12 @@ var SmokeRun = class {
 				throw new Error(`get_attachment saved "${a.filename}" to disk (${saved}) instead of showing it`);
 			}
 			if (out.isError) throw new Error(out.text);
+			const not = notShownOf(out);
+			if (not?.code === "unreadable") {
+				if (not.parseFailure && FILE_OWN_PARSE_FAILURES.has(not.parseFailure)) return `${kind}: couldn't read (${not.reason})`;
+				throw new Error(`get_attachment couldn't read "${a.filename}" (${not.parseFailure ?? "no failure code"}: ${not.reason})`);
+			}
+			if (not) return `${kind}: not shown inline (${not.reason})`;
 			return `${kind}: ${describeExtraction(out)}`;
 		});
 	}
@@ -1222,4 +1252,4 @@ var SmokeRun = class {
 //#endregion
 export { SmokeRun };
 
-//# sourceMappingURL=run-D3Qmg-MB.js.map
+//# sourceMappingURL=run-zakbVgQR.js.map