@circleback/cli 0.2.3 → 0.3.1

package/README.md

@@ -14,7 +14,7 @@ Requires Node.js 18 or later. The package installs two binaries: `circleback` an
 
 ```bash
 # Authenticate via browser
-cb login
+cb auth login
 
 # Search recent meetings
 cb meetings
@@ -39,8 +39,9 @@ cb meetings --json
 
 | Command                        | Description                                                  |
 | ------------------------------ | ------------------------------------------------------------ |
-| `cb login`                     | Authenticate with Circleback via browser                     |
-| `cb logout`                    | Clear stored authentication tokens                           |
+| `cb auth login`                | Login with Circleback via browser                            |
+| `cb auth login --api-key`      | Authenticate with a Public API key                           |
+| `cb auth logout`               | Clear stored login credentials                               |
 | `cb update`                    | Update CLI to the latest version                             |
 | `cb meetings [search]`         | Search meetings                                              |
 | `cb meetings read <ids...>`    | Read detailed meeting info, notes, and action items (max 50) |
@@ -88,10 +89,21 @@ cb meetings "standup" --json | jq '.[].name'
 ## Authentication
 
 ```bash
-cb login    # Opens browser to authenticate
-cb logout   # Clears stored tokens
+cb auth login              # Opens the browser for OAuth
+cb auth login --api-key    # Prompts securely for a Public API key
+cb auth logout             # Clears stored credentials
 ```
 
+API-key login links to [Settings → API keys](https://circleback.ai/settings?tab=api-access), verifies the key, and stores it locally on your device.
+
+For stateless automation, set `CIRCLEBACK_API_KEY` instead of logging in:
+
+```bash
+CIRCLEBACK_API_KEY=cb_your_api_key cb meetings --json
+```
+
+`CIRCLEBACK_API_KEY` takes precedence over stored credentials. Unset it before running `cb auth login`; `cb auth logout` cannot clear an environment variable from your shell.
+
 ## Agents
 
 The CLI is designed to work well with AI agents and tool-use systems:

package/dist/auth/apiKey.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateApiKey = exports.promptForApiKey = void 0;
+const node_readline_1 = require("node:readline");
+const constants_1 = require("../constants");
+const promptForApiKey = async () => {
+    if (!process.stdin.isTTY || !process.stdout.isTTY) {
+        throw new Error(`API key login requires an interactive terminal. Set ${constants_1.API_KEY_ENVIRONMENT_VARIABLE} for automation.`);
+    }
+    process.stdout.write('API key: ');
+    (0, node_readline_1.emitKeypressEvents)(process.stdin);
+    process.stdin.setRawMode(true);
+    return new Promise((resolve, reject) => {
+        const characters = [];
+        const finish = (result) => {
+            process.stdin.off('keypress', handleKeypress);
+            process.stdin.setRawMode(false);
+            process.stdin.pause();
+            process.stdout.write('\n');
+            if (result instanceof Error)
+                reject(result);
+            else
+                resolve(result);
+        };
+        const handleKeypress = (input, key) => {
+            if (key.ctrl && key.name === 'c') {
+                finish(new Error('API key login canceled.'));
+                return;
+            }
+            if (key.name === 'return' || key.name === 'enter') {
+                const apiKey = characters.join('').trim();
+                finish(apiKey || new Error('API key is required.'));
+                return;
+            }
+            if (key.name === 'backspace' ||
+                key.name === 'delete' ||
+                input === '\b' ||
+                input === '\x7f') {
+                if (characters.pop())
+                    process.stdout.write('\b \b');
+                return;
+            }
+            if (!input || key.ctrl || key.meta || /[\u0000-\u001f\u007f]/.test(input))
+                return;
+            characters.push(...input);
+            process.stdout.write('*'.repeat([...input].length));
+        };
+        process.stdin.on('keypress', handleKeypress);
+    });
+};
+exports.promptForApiKey = promptForApiKey;
+const validateApiKey = async (apiKey) => {
+    if (!apiKey.startsWith(constants_1.API_KEY_PREFIX)) {
+        throw new Error('The provided API key is invalid or has been revoked.');
+    }
+    try {
+        const response = await fetch(`${constants_1.BASE_URL}/api/meetings`, {
+            headers: { Authorization: `Bearer ${apiKey}` },
+        });
+        if (response.ok)
+            return;
+        if (response.status === 401) {
+            throw new Error('The provided API key is invalid or has been revoked.');
+        }
+        if (response.status === 403) {
+            throw new Error('The provided API key does not have read access.');
+        }
+        throw new Error(`API key verification failed with status ${response.status}.`);
+    }
+    catch (error) {
+        if (error instanceof TypeError && error.message.includes('fetch failed')) {
+            throw new Error('Unable to verify the API key. Check your internet connection and try again.');
+        }
+        throw error;
+    }
+};
+exports.validateApiKey = validateApiKey;

package/dist/auth/credentials.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCredentialSnapshot = exports.getEnvironmentApiKey = void 0;
+const constants_1 = require("../constants");
+const types_1 = require("../types");
+const oauth_1 = require("./oauth");
+const tokenStorage_1 = require("./tokenStorage");
+const getEnvironmentApiKey = () => {
+    const apiKey = process.env[constants_1.API_KEY_ENVIRONMENT_VARIABLE]?.trim();
+    return apiKey || undefined;
+};
+exports.getEnvironmentApiKey = getEnvironmentApiKey;
+const requireCredentials = () => {
+    const environmentApiKey = (0, exports.getEnvironmentApiKey)();
+    if (environmentApiKey) {
+        if (!environmentApiKey.startsWith(constants_1.API_KEY_PREFIX)) {
+            throw new Error(`${constants_1.API_KEY_ENVIRONMENT_VARIABLE} must start with ${constants_1.API_KEY_PREFIX}.`);
+        }
+        return {
+            type: types_1.CredentialType.ApiKey,
+            apiKey: environmentApiKey,
+            source: types_1.CredentialSource.Environment,
+        };
+    }
+    const storedCredentials = (0, tokenStorage_1.loadCredentials)();
+    if (!storedCredentials) {
+        throw new Error(`Not authenticated. Run \`circleback auth login\` or set ${constants_1.API_KEY_ENVIRONMENT_VARIABLE}.`);
+    }
+    if ((0, types_1.isStoredApiKey)(storedCredentials)) {
+        return {
+            ...storedCredentials,
+            source: types_1.CredentialSource.Stored,
+        };
+    }
+    return { type: types_1.CredentialType.OAuth, tokens: storedCredentials };
+};
+const getCredentialSnapshot = async () => {
+    const credentials = requireCredentials();
+    if (credentials.type === types_1.CredentialType.OAuth) {
+        const tokens = await (0, oauth_1.getValidOAuthTokens)(credentials.tokens);
+        return {
+            bearerCredential: tokens.accessToken,
+            refresh: () => (0, oauth_1.forceRefreshOAuthToken)(tokens),
+        };
+    }
+    const source = credentials.source === types_1.CredentialSource.Environment
+        ? constants_1.API_KEY_ENVIRONMENT_VARIABLE
+        : 'The stored API key';
+    return {
+        bearerCredential: credentials.apiKey,
+        refresh: () => {
+            throw new Error(`${source} is invalid or has been revoked.`);
+        },
+    };
+};
+exports.getCredentialSnapshot = getCredentialSnapshot;

package/dist/auth/oauth.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.forceRefreshToken = exports.getValidAccessToken = exports.login = void 0;
+exports.forceRefreshOAuthToken = exports.getValidOAuthTokens = exports.login = void 0;
 const node_child_process_1 = require("node:child_process");
 const node_crypto_1 = __importDefault(require("node:crypto"));
 const constants_1 = require("../constants");
@@ -125,7 +125,7 @@ const login = async (options = {}) => {
             codeVerifier: verifier,
         });
         const tokens = (0, tokenStorage_1.buildStoredTokens)(tokenResponse, clientId);
-        (0, tokenStorage_1.saveTokens)(tokens);
+        (0, tokenStorage_1.saveCredentials)(tokens);
         return tokens;
     }
     catch (error) {
@@ -134,30 +134,19 @@ const login = async (options = {}) => {
     }
 };
 exports.login = login;
-const requireTokens = () => {
-    const tokens = (0, tokenStorage_1.loadTokens)();
-    if (!tokens) {
-        throw new Error('Not authenticated. Run `circleback login` to authenticate.');
-    }
-    return tokens;
-};
 const refreshAndSave = async (tokens) => {
     const refreshed = await refreshAccessToken(tokens.refreshToken, tokens.clientId);
     const updatedTokens = (0, tokenStorage_1.buildStoredTokens)(refreshed, tokens.clientId);
-    (0, tokenStorage_1.saveTokens)(updatedTokens);
-    return updatedTokens.accessToken;
+    (0, tokenStorage_1.saveCredentials)(updatedTokens);
+    return updatedTokens;
 };
-const getValidAccessToken = async () => {
-    const tokens = requireTokens();
+const getValidOAuthTokens = async (tokens) => {
     const bufferSeconds = 60;
     const isExpired = Math.floor(Date.now() / 1000) >= tokens.expiresAt - bufferSeconds;
     if (!isExpired)
-        return tokens.accessToken;
-    return refreshAndSave(tokens);
-};
-exports.getValidAccessToken = getValidAccessToken;
-const forceRefreshToken = async () => {
-    const tokens = requireTokens();
+        return tokens;
     return refreshAndSave(tokens);
 };
-exports.forceRefreshToken = forceRefreshToken;
+exports.getValidOAuthTokens = getValidOAuthTokens;
+const forceRefreshOAuthToken = async (tokens) => (await refreshAndSave(tokens)).accessToken;
+exports.forceRefreshOAuthToken = forceRefreshOAuthToken;

package/dist/auth/tokenStorage.js

@@ -3,12 +3,23 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.clearTokens = exports.saveTokens = exports.loadTokens = exports.buildStoredTokens = void 0;
+exports.clearCredentials = exports.saveCredentials = exports.loadCredentials = exports.buildStoredTokens = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const constants_1 = require("../constants");
 const types_1 = require("../types");
 const DIRECTORY_PERMISSIONS_MODE = 0o700;
 const FILE_PERMISSIONS_MODE = 0o600;
+const isFileNotFoundError = (error) => error instanceof Error && 'code' in error && error.code === 'ENOENT';
+const openCredentialsFile = () => {
+    try {
+        return node_fs_1.default.openSync(constants_1.TOKENS_FILE, 'r+');
+    }
+    catch (error) {
+        if (!isFileNotFoundError(error))
+            throw error;
+        return node_fs_1.default.openSync(constants_1.TOKENS_FILE, 'wx+', FILE_PERMISSIONS_MODE);
+    }
+};
 const buildStoredTokens = (response, clientId) => ({
     accessToken: response.access_token,
     refreshToken: response.refresh_token,
@@ -17,35 +28,43 @@ const buildStoredTokens = (response, clientId) => ({
     scope: response.scope,
 });
 exports.buildStoredTokens = buildStoredTokens;
-const loadTokens = () => {
+const loadCredentials = () => {
     try {
         const content = node_fs_1.default.readFileSync(constants_1.TOKENS_FILE, 'utf-8');
         const parsed = JSON.parse(content);
-        if (!(0, types_1.isStoredTokens)(parsed))
-            return;
-        return parsed;
+        return (0, types_1.parseStoredCredentials)(parsed);
     }
     catch {
         return;
     }
 };
-exports.loadTokens = loadTokens;
-const saveTokens = (tokens) => {
+exports.loadCredentials = loadCredentials;
+const saveCredentials = (credentials) => {
     node_fs_1.default.mkdirSync(constants_1.CONFIG_DIRECTORY, {
         recursive: true,
         mode: DIRECTORY_PERMISSIONS_MODE,
     });
-    node_fs_1.default.writeFileSync(constants_1.TOKENS_FILE, JSON.stringify(tokens, null, 2), {
-        mode: FILE_PERMISSIONS_MODE,
-    });
+    node_fs_1.default.chmodSync(constants_1.CONFIG_DIRECTORY, DIRECTORY_PERMISSIONS_MODE);
+    const fileDescriptor = openCredentialsFile();
+    try {
+        node_fs_1.default.fchmodSync(fileDescriptor, FILE_PERMISSIONS_MODE);
+        node_fs_1.default.ftruncateSync(fileDescriptor);
+        node_fs_1.default.writeFileSync(fileDescriptor, JSON.stringify(credentials, null, 2));
+    }
+    finally {
+        node_fs_1.default.closeSync(fileDescriptor);
+    }
 };
-exports.saveTokens = saveTokens;
-const clearTokens = () => {
+exports.saveCredentials = saveCredentials;
+const clearCredentials = () => {
     try {
         node_fs_1.default.unlinkSync(constants_1.TOKENS_FILE);
+        return true;
     }
-    catch {
-        // File may not exist.
+    catch (error) {
+        if (isFileNotFoundError(error))
+            return false;
+        throw error;
     }
 };
-exports.clearTokens = clearTokens;
+exports.clearCredentials = clearCredentials;

package/dist/client/jsonRpc.js

@@ -1,30 +1,32 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.callTool = void 0;
+const zod_1 = require("zod");
 const constants_1 = require("../constants");
 const types_1 = require("../types");
-const oauth_1 = require("../auth/oauth");
+const credentials_1 = require("../auth/credentials");
 const TOOLS_CALL_METHOD = 'tools/call';
+const errorResponseSchema = zod_1.z.object({
+    error: zod_1.z.string().optional(),
+    message: zod_1.z.string().optional(),
+});
 let requestId = 0;
 const nextId = () => ++requestId;
 const extractErrorMessage = async (response) => {
     const text = await response.text();
     try {
         const body = JSON.parse(text);
-        if (typeof body !== 'object' || body === null)
-            return text;
-        const error = 'error' in body && typeof body.error === 'string' ? body.error : undefined;
-        const message = 'message' in body && typeof body.message === 'string'
-            ? body.message
-            : undefined;
-        return error ?? message ?? text;
+        const result = errorResponseSchema.safeParse(body);
+        return result.success
+            ? (result.data.error ?? result.data.message ?? text)
+            : text;
     }
     catch {
         return text;
     }
 };
 const HTTP_ERROR_MESSAGES = {
-    401: 'Authentication expired. Run `circleback login` to re-authenticate.',
+    401: 'Authentication expired. Run `circleback auth login` to re-authenticate.',
     403: 'Permission denied.',
     404: 'Resource not found.',
     429: 'Rate limit exceeded. Please try again later.',
@@ -101,8 +103,8 @@ const sendRequestWithNetworkError = async (method, params, accessToken) => {
         throw error;
     }
 };
-const retryWithRefresh = async (method, params) => {
-    const accessToken = await (0, oauth_1.forceRefreshToken)();
+const retryWithRefresh = async (method, params, refresh) => {
+    const accessToken = await refresh();
     const response = await sendRequestWithNetworkError(method, params, accessToken);
     if (!response.ok) {
         const message = await extractErrorMessage(response);
@@ -111,11 +113,11 @@ const retryWithRefresh = async (method, params) => {
     return parseResponse(response);
 };
 const callTool = async (toolName, toolArguments) => {
-    const accessToken = await (0, oauth_1.getValidAccessToken)();
+    const credentialSnapshot = await (0, credentials_1.getCredentialSnapshot)();
     const params = { name: toolName, arguments: toolArguments };
-    const response = await sendRequestWithNetworkError(TOOLS_CALL_METHOD, params, accessToken);
+    const response = await sendRequestWithNetworkError(TOOLS_CALL_METHOD, params, credentialSnapshot.bearerCredential);
     if (response.status === 401) {
-        return retryWithRefresh(TOOLS_CALL_METHOD, params);
+        return retryWithRefresh(TOOLS_CALL_METHOD, params, credentialSnapshot.refresh);
     }
     if (!response.ok) {
         const fallback = HTTP_ERROR_MESSAGES[response.status];

package/dist/commands/actionItems.js

@@ -1,15 +1,12 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.searchActionItemsCommand = void 0;
 const commander_1 = require("commander");
-const chalk_1 = __importDefault(require("chalk"));
 const jsonRpc_1 = require("../client/jsonRpc");
 const constants_1 = require("../constants");
 const date_1 = require("../helpers/date");
 const error_1 = require("../helpers/error");
+const output_1 = require("../helpers/output");
 const formatter_1 = require("../helpers/formatter");
 const parse_1 = require("../helpers/parse");
 const tag_1 = require("../helpers/tag");
@@ -27,7 +24,7 @@ exports.searchActionItemsCommand = new commander_1.Command('search')
     .action(async (query, options) => {
     try {
         if (options.last && options.from) {
-            console.error(chalk_1.default.red(constants_1.LAST_AND_FROM_CONFLICT_ERROR));
+            (0, output_1.printText)(constants_1.LAST_AND_FROM_CONFLICT_ERROR, output_1.TextType.Error);
             process.exit(1);
         }
         const jsonMode = exports.searchActionItemsCommand.parent?.parent?.opts().json ?? false;
@@ -61,7 +58,7 @@ exports.searchActionItemsCommand = new commander_1.Command('search')
     }
     catch (error) {
         const message = error instanceof Error ? error.message : constants_1.SEARCH_FAILED_ERROR;
-        console.error(chalk_1.default.red((0, error_1.formatMcpError)(message) ?? message));
+        (0, output_1.printText)((0, error_1.formatMcpError)(message) ?? message, output_1.TextType.Error);
         process.exit(1);
     }
 });

package/dist/commands/auth.js

@@ -3,11 +3,16 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.logoutCommand = exports.loginCommand = void 0;
+exports.authCommand = void 0;
 const commander_1 = require("commander");
 const chalk_1 = __importDefault(require("chalk"));
+const apiKey_1 = require("../auth/apiKey");
+const credentials_1 = require("../auth/credentials");
 const oauth_1 = require("../auth/oauth");
 const tokenStorage_1 = require("../auth/tokenStorage");
+const constants_1 = require("../constants");
+const output_1 = require("../helpers/output");
+const types_1 = require("../types");
 const AUTHORIZATION_URL_FALLBACK_DELAY_MILLISECONDS = 500;
 const getOpenUrlInstruction = () => process.platform === 'darwin' ? '⌘-click' : 'Ctrl-click';
 const createAuthorizationUrlFallback = () => {
@@ -16,8 +21,8 @@ const createAuthorizationUrlFallback = () => {
         const timeout = setTimeout(() => {
             if (abortController.signal.aborted)
                 return;
-            console.log(`Browser didn't open? ${getOpenUrlInstruction()} the URL below to log in.\n`);
-            console.log(chalk_1.default.cyan(url));
+            (0, output_1.printText)(`Browser didn't open? ${getOpenUrlInstruction()} the URL below to log in.\n`, output_1.TextType.Default);
+            (0, output_1.printText)(chalk_1.default.cyan(url), output_1.TextType.Default);
         }, AUTHORIZATION_URL_FALLBACK_DELAY_MILLISECONDS);
         abortController.signal.addEventListener('abort', () => clearTimeout(timeout), { once: true });
     };
@@ -26,16 +31,30 @@ const createAuthorizationUrlFallback = () => {
         cleanup: () => abortController.abort(),
     };
 };
-exports.loginCommand = new commander_1.Command('login')
-    .description('Authenticate with Circleback via browser.')
-    .action(async () => {
+const loginCommand = new commander_1.Command('login')
+    .description('Authenticate with Circleback.')
+    .option('--api-key', 'Authenticate with a Public API key')
+    .action(async (options) => {
     try {
-        const existing = (0, tokenStorage_1.loadTokens)();
-        if (existing) {
-            console.log(chalk_1.default.yellow('Already authenticated. Run `circleback logout` first to re-authenticate.'));
+        if ((0, credentials_1.getEnvironmentApiKey)()) {
+            (0, output_1.printText)(`${constants_1.API_KEY_ENVIRONMENT_VARIABLE} is active. Unset it before changing stored authentication.`, output_1.TextType.Warning);
             return;
         }
-        console.log('Opening your browser for authentication…\n');
+        if ((0, tokenStorage_1.loadCredentials)()) {
+            (0, output_1.printText)('Already authenticated. Run `circleback auth logout` first to re-authenticate.', output_1.TextType.Warning);
+            return;
+        }
+        if (options.apiKey) {
+            (0, output_1.printText)('Create an API key at:\n', output_1.TextType.Default);
+            (0, output_1.printText)(chalk_1.default.cyan(constants_1.API_KEY_SETTINGS_URL), output_1.TextType.Default);
+            (0, output_1.printText)('', output_1.TextType.Default);
+            const apiKey = await (0, apiKey_1.promptForApiKey)();
+            await (0, apiKey_1.validateApiKey)(apiKey);
+            (0, tokenStorage_1.saveCredentials)({ type: types_1.CredentialType.ApiKey, apiKey });
+            (0, output_1.printText)('API key authentication successful.', output_1.TextType.Success);
+            return;
+        }
+        (0, output_1.printText)('Opening your browser for authentication…\n', output_1.TextType.Default);
         const authorizationUrlFallback = createAuthorizationUrlFallback();
         try {
             await (0, oauth_1.login)({
@@ -45,22 +64,34 @@ exports.loginCommand = new commander_1.Command('login')
         finally {
             authorizationUrlFallback.cleanup();
         }
-        console.log(chalk_1.default.green('Authentication successful.'));
+        (0, output_1.printText)('Authentication successful.', output_1.TextType.Success);
     }
     catch (error) {
         const message = error instanceof Error ? error.message : 'Authentication failed.';
-        console.error(chalk_1.default.red(message));
+        (0, output_1.printText)(message, output_1.TextType.Error);
         process.exit(1);
     }
 });
-exports.logoutCommand = new commander_1.Command('logout')
-    .description('Clear stored authentication tokens.')
+const logoutCommand = new commander_1.Command('logout')
+    .description('Clear stored authentication credentials.')
     .action(() => {
-    const existing = (0, tokenStorage_1.loadTokens)();
-    if (!existing) {
-        console.log(chalk_1.default.yellow('Not currently authenticated.'));
+    const environmentApiKey = (0, credentials_1.getEnvironmentApiKey)();
+    const didClearCredentials = (0, tokenStorage_1.clearCredentials)();
+    if (!didClearCredentials) {
+        if (environmentApiKey) {
+            (0, output_1.printText)(`No stored credentials to clear. ${constants_1.API_KEY_ENVIRONMENT_VARIABLE} is still active.`, output_1.TextType.Warning);
+            return;
+        }
+        (0, output_1.printText)('Not currently authenticated.', output_1.TextType.Warning);
+        return;
+    }
+    if (environmentApiKey) {
+        (0, output_1.printText)(`Stored credentials cleared. ${constants_1.API_KEY_ENVIRONMENT_VARIABLE} is still active.`, output_1.TextType.Warning);
         return;
     }
-    (0, tokenStorage_1.clearTokens)();
-    console.log(chalk_1.default.green('Logged out successfully.'));
+    (0, output_1.printText)('Logged out successfully.', output_1.TextType.Success);
 });
+exports.authCommand = new commander_1.Command('auth')
+    .description('Manage authentication.')
+    .addCommand(loginCommand)
+    .addCommand(logoutCommand);

package/dist/commands/calendar.js

@@ -1,15 +1,12 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.searchCalendarCommand = void 0;
 const commander_1 = require("commander");
-const chalk_1 = __importDefault(require("chalk"));
 const jsonRpc_1 = require("../client/jsonRpc");
 const constants_1 = require("../constants");
 const date_1 = require("../helpers/date");
 const error_1 = require("../helpers/error");
+const output_1 = require("../helpers/output");
 const formatter_1 = require("../helpers/formatter");
 const parse_1 = require("../helpers/parse");
 exports.searchCalendarCommand = new commander_1.Command('search')
@@ -20,7 +17,7 @@ exports.searchCalendarCommand = new commander_1.Command('search')
     .action(async (options) => {
     try {
         if (options.last && options.from) {
-            console.error(chalk_1.default.red(constants_1.LAST_AND_FROM_CONFLICT_ERROR));
+            (0, output_1.printText)(constants_1.LAST_AND_FROM_CONFLICT_ERROR, output_1.TextType.Error);
             process.exit(1);
         }
         const jsonMode = exports.searchCalendarCommand.parent?.parent?.opts().json ?? false;
@@ -41,7 +38,7 @@ exports.searchCalendarCommand = new commander_1.Command('search')
     }
     catch (error) {
         const message = error instanceof Error ? error.message : 'Calendar search failed.';
-        console.error(chalk_1.default.red((0, error_1.formatMcpError)(message) ?? message));
+        (0, output_1.printText)((0, error_1.formatMcpError)(message) ?? message, output_1.TextType.Error);
         process.exit(1);
     }
 });

package/dist/commands/companies.js

@@ -1,13 +1,10 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.searchCompaniesCommand = void 0;
 const commander_1 = require("commander");
-const chalk_1 = __importDefault(require("chalk"));
 const jsonRpc_1 = require("../client/jsonRpc");
 const error_1 = require("../helpers/error");
+const output_1 = require("../helpers/output");
 const formatter_1 = require("../helpers/formatter");
 exports.searchCompaniesCommand = new commander_1.Command('search')
     .description('Search companies.')
@@ -22,7 +19,7 @@ exports.searchCompaniesCommand = new commander_1.Command('search')
     }
     catch (error) {
         const message = error instanceof Error ? error.message : 'Company search failed.';
-        console.error(chalk_1.default.red((0, error_1.formatMcpError)(message) ?? message));
+        (0, output_1.printText)((0, error_1.formatMcpError)(message) ?? message, output_1.TextType.Error);
         process.exit(1);
     }
 });

package/dist/commands/emails.js

@@ -1,14 +1,11 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.searchEmailsCommand = void 0;
 const commander_1 = require("commander");
-const chalk_1 = __importDefault(require("chalk"));
 const jsonRpc_1 = require("../client/jsonRpc");
 const constants_1 = require("../constants");
 const error_1 = require("../helpers/error");
+const output_1 = require("../helpers/output");
 const formatter_1 = require("../helpers/formatter");
 const parse_1 = require("../helpers/parse");
 exports.searchEmailsCommand = new commander_1.Command('search')
@@ -18,7 +15,7 @@ exports.searchEmailsCommand = new commander_1.Command('search')
     .action(async (query, options) => {
     try {
         if (query !== undefined && query.trim() === '') {
-            console.error(chalk_1.default.red('Search term cannot be empty.'));
+            (0, output_1.printText)('Search term cannot be empty.', output_1.TextType.Error);
             process.exit(1);
         }
         const jsonMode = exports.searchEmailsCommand.parent?.parent?.opts().json ?? false;
@@ -33,7 +30,7 @@ exports.searchEmailsCommand = new commander_1.Command('search')
     }
     catch (error) {
         const message = error instanceof Error ? error.message : 'Email search failed.';
-        console.error(chalk_1.default.red((0, error_1.formatMcpError)(message) ?? message));
+        (0, output_1.printText)((0, error_1.formatMcpError)(message) ?? message, output_1.TextType.Error);
         process.exit(1);
     }
 });

package/dist/commands/meetings.js

@@ -1,15 +1,12 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.readMeetingsCommand = exports.searchMeetingsCommand = void 0;
 const commander_1 = require("commander");
-const chalk_1 = __importDefault(require("chalk"));
 const jsonRpc_1 = require("../client/jsonRpc");
 const constants_1 = require("../constants");
 const date_1 = require("../helpers/date");
 const error_1 = require("../helpers/error");
+const output_1 = require("../helpers/output");
 const formatter_1 = require("../helpers/formatter");
 const parse_1 = require("../helpers/parse");
 const tag_1 = require("../helpers/tag");
@@ -27,7 +24,7 @@ exports.searchMeetingsCommand = new commander_1.Command('search')
     .action(async (query, options) => {
     try {
         if (options.last && options.from) {
-            console.error(chalk_1.default.red(constants_1.LAST_AND_FROM_CONFLICT_ERROR));
+            (0, output_1.printText)(constants_1.LAST_AND_FROM_CONFLICT_ERROR, output_1.TextType.Error);
             process.exit(1);
         }
         const jsonMode = exports.searchMeetingsCommand.parent?.parent?.opts().json ?? false;
@@ -61,7 +58,7 @@ exports.searchMeetingsCommand = new commander_1.Command('search')
     }
     catch (error) {
         const message = error instanceof Error ? error.message : constants_1.SEARCH_FAILED_ERROR;
-        console.error(chalk_1.default.red((0, error_1.formatMcpError)(message) ?? message));
+        (0, output_1.printText)((0, error_1.formatMcpError)(message) ?? message, output_1.TextType.Error);
         process.exit(1);
     }
 });
@@ -80,7 +77,7 @@ exports.readMeetingsCommand = new commander_1.Command('read')
     }
     catch (error) {
         const message = error instanceof Error ? error.message : constants_1.READ_FAILED_ERROR;
-        console.error(chalk_1.default.red((0, error_1.formatMcpError)(message) ?? message));
+        (0, output_1.printText)((0, error_1.formatMcpError)(message) ?? message, output_1.TextType.Error);
         process.exit(1);
     }
 });

package/dist/commands/profiles.js

@@ -1,13 +1,10 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.searchProfilesCommand = void 0;
 const commander_1 = require("commander");
-const chalk_1 = __importDefault(require("chalk"));
 const jsonRpc_1 = require("../client/jsonRpc");
 const error_1 = require("../helpers/error");
+const output_1 = require("../helpers/output");
 const formatter_1 = require("../helpers/formatter");
 exports.searchProfilesCommand = new commander_1.Command('search')
     .description('Search people by name.')
@@ -22,7 +19,7 @@ exports.searchProfilesCommand = new commander_1.Command('search')
     }
     catch (error) {
         const message = error instanceof Error ? error.message : 'People search failed.';
-        console.error(chalk_1.default.red((0, error_1.formatMcpError)(message) ?? message));
+        (0, output_1.printText)((0, error_1.formatMcpError)(message) ?? message, output_1.TextType.Error);
         process.exit(1);
     }
 });

package/dist/commands/registry.js

@@ -13,11 +13,7 @@ const support_1 = require("./support");
 const tags_1 = require("./tags");
 const transcripts_1 = require("./transcripts");
 const update_1 = require("./update");
-const standaloneCommands = [
-    auth_1.loginCommand,
-    auth_1.logoutCommand,
-    update_1.updateCommand,
-];
+const standaloneCommands = [auth_1.authCommand, update_1.updateCommand];
 const commandGroups = [
     {
         name: 'meetings',

package/dist/commands/support.js

@@ -1,13 +1,10 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.searchSupportCommand = void 0;
 const commander_1 = require("commander");
-const chalk_1 = __importDefault(require("chalk"));
 const jsonRpc_1 = require("../client/jsonRpc");
 const error_1 = require("../helpers/error");
+const output_1 = require("../helpers/output");
 const formatter_1 = require("../helpers/formatter");
 exports.searchSupportCommand = new commander_1.Command('search')
     .description('Search Circleback support articles.')
@@ -24,7 +21,7 @@ exports.searchSupportCommand = new commander_1.Command('search')
     }
     catch (error) {
         const message = error instanceof Error ? error.message : 'Support search failed.';
-        console.error(chalk_1.default.red((0, error_1.formatMcpError)(message) ?? message));
+        (0, output_1.printText)((0, error_1.formatMcpError)(message) ?? message, output_1.TextType.Error);
         process.exit(1);
     }
 });

package/dist/commands/tags.js

@@ -1,13 +1,10 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.listTagsCommand = void 0;
 const commander_1 = require("commander");
-const chalk_1 = __importDefault(require("chalk"));
 const jsonRpc_1 = require("../client/jsonRpc");
 const error_1 = require("../helpers/error");
+const output_1 = require("../helpers/output");
 const formatter_1 = require("../helpers/formatter");
 exports.listTagsCommand = new commander_1.Command('list')
     .description('List all tags.')
@@ -21,7 +18,7 @@ exports.listTagsCommand = new commander_1.Command('list')
     }
     catch (error) {
         const message = error instanceof Error ? error.message : 'Failed to list tags.';
-        console.error(chalk_1.default.red((0, error_1.formatMcpError)(message) ?? message));
+        (0, output_1.printText)((0, error_1.formatMcpError)(message) ?? message, output_1.TextType.Error);
         process.exit(1);
     }
 });

package/dist/commands/transcripts.js

@@ -1,14 +1,11 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getTranscriptsCommand = exports.searchTranscriptsCommand = void 0;
 const commander_1 = require("commander");
-const chalk_1 = __importDefault(require("chalk"));
 const jsonRpc_1 = require("../client/jsonRpc");
 const constants_1 = require("../constants");
 const error_1 = require("../helpers/error");
+const output_1 = require("../helpers/output");
 const formatter_1 = require("../helpers/formatter");
 const parse_1 = require("../helpers/parse");
 const tag_1 = require("../helpers/tag");
@@ -38,7 +35,7 @@ exports.searchTranscriptsCommand = new commander_1.Command('search')
     }
     catch (error) {
         const message = error instanceof Error ? error.message : 'Transcript search failed.';
-        console.error(chalk_1.default.red((0, error_1.formatMcpError)(message) ?? message));
+        (0, output_1.printText)((0, error_1.formatMcpError)(message) ?? message, output_1.TextType.Error);
         process.exit(1);
     }
 });
@@ -58,7 +55,7 @@ exports.getTranscriptsCommand = new commander_1.Command('read')
     }
     catch (error) {
         const message = error instanceof Error ? error.message : 'Transcript retrieval failed.';
-        console.error(chalk_1.default.red((0, error_1.formatMcpError)(message) ?? message));
+        (0, output_1.printText)((0, error_1.formatMcpError)(message) ?? message, output_1.TextType.Error);
         process.exit(1);
     }
 });

package/dist/commands/update.js

@@ -8,28 +8,28 @@ const commander_1 = require("commander");
 const node_child_process_1 = require("node:child_process");
 const chalk_1 = __importDefault(require("chalk"));
 const constants_1 = require("../constants");
+const output_1 = require("../helpers/output");
 const update_1 = require("../helpers/update");
 exports.updateCommand = new commander_1.Command('update')
     .description('Update Circleback CLI to the latest version.')
     .action(async () => {
-    console.log(chalk_1.default.dim(`Current version: ${constants_1.CLIENT_VERSION}`));
-    console.log(chalk_1.default.dim('Checking for updates…'));
+    (0, output_1.printText)(chalk_1.default.dim(`Current version: ${constants_1.CLIENT_VERSION}`), output_1.TextType.Default);
+    (0, output_1.printText)(chalk_1.default.dim('Checking for updates…'), output_1.TextType.Default);
     const result = await (0, update_1.getUpdateCheckResult)(constants_1.CLIENT_PACKAGE_NAME);
     if (!result.updateAvailable) {
-        console.log(chalk_1.default.green('Already on the latest version.'));
+        (0, output_1.printText)('Already on the latest version.', output_1.TextType.Success);
         return;
     }
-    console.log(chalk_1.default.yellow(`New version available: ${result.currentVersion} → ${result.latestVersion}`));
-    console.log(chalk_1.default.dim(`Running: npm install -g ${constants_1.CLIENT_PACKAGE_NAME}@latest`));
+    (0, output_1.printText)(`New version available: ${result.currentVersion} → ${result.latestVersion}`, output_1.TextType.Warning);
+    (0, output_1.printText)(chalk_1.default.dim(`Running: npm install -g ${constants_1.CLIENT_PACKAGE_NAME}@latest`), output_1.TextType.Default);
     try {
         (0, node_child_process_1.execSync)(`npm install -g ${constants_1.CLIENT_PACKAGE_NAME}@latest`, {
             stdio: 'inherit',
         });
-        console.log(chalk_1.default.green(`\nSuccessfully updated to ${result.latestVersion}.`));
+        (0, output_1.printText)(`Successfully updated to ${result.latestVersion}.`, output_1.TextType.Success);
     }
     catch {
-        console.error(chalk_1.default.red('\nUpdate failed. Try running manually with sudo:'));
-        console.error(chalk_1.default.cyan(`  sudo npm install -g ${constants_1.CLIENT_PACKAGE_NAME}@latest`));
+        (0, output_1.printText)(`Update failed. Try running manually with sudo:\n  sudo npm install -g ${constants_1.CLIENT_PACKAGE_NAME}@latest`, output_1.TextType.Error);
         process.exit(1);
     }
 });

package/dist/constants.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.READ_FAILED_ERROR = exports.SEARCH_FAILED_ERROR = exports.LAST_AND_FROM_CONFLICT_ERROR = exports.DOMAINS_OPTION_DESCRIPTION = exports.PROFILES_OPTION_DESCRIPTION = exports.TAGS_OPTION_DESCRIPTION = exports.END_DATE_OPTION_DESCRIPTION = exports.START_DATE_OPTION_DESCRIPTION = exports.PAGE_OPTION_DESCRIPTION = exports.UNASSIGNED_ACTION_ITEM_ASSIGNEE_LABEL = exports.DEFAULT_MEETING_NAME = exports.CALLBACK_TIMEOUT_MILLISECONDS = exports.OAUTH_SCOPE = exports.TOKENS_FILE = exports.CONFIG_DIRECTORY = exports.ASCII_LOGO = exports.SECONDARY_COLOR = exports.BRAND_COLOR = exports.CLIENT_VERSION_HEADER = exports.CLIENT_VERSION = exports.CLIENT_PACKAGE_NAME = exports.CLIENT_NAME = exports.BASE_URL = void 0;
+exports.READ_FAILED_ERROR = exports.SEARCH_FAILED_ERROR = exports.LAST_AND_FROM_CONFLICT_ERROR = exports.DOMAINS_OPTION_DESCRIPTION = exports.PROFILES_OPTION_DESCRIPTION = exports.TAGS_OPTION_DESCRIPTION = exports.END_DATE_OPTION_DESCRIPTION = exports.START_DATE_OPTION_DESCRIPTION = exports.PAGE_OPTION_DESCRIPTION = exports.UNASSIGNED_ACTION_ITEM_ASSIGNEE_LABEL = exports.DEFAULT_MEETING_NAME = exports.CALLBACK_TIMEOUT_MILLISECONDS = exports.OAUTH_SCOPE = exports.TOKENS_FILE = exports.CONFIG_DIRECTORY = exports.ASCII_LOGO = exports.SECONDARY_COLOR = exports.BRAND_COLOR = exports.API_KEY_SETTINGS_URL = exports.API_KEY_ENVIRONMENT_VARIABLE = exports.API_KEY_PREFIX = exports.CLIENT_VERSION_HEADER = exports.CLIENT_VERSION = exports.CLIENT_PACKAGE_NAME = exports.CLIENT_NAME = exports.BASE_URL = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const node_os_1 = __importDefault(require("node:os"));
@@ -16,6 +16,10 @@ exports.CLIENT_PACKAGE_NAME = '@circleback/cli';
 exports.CLIENT_VERSION = packageJson.version;
 // Must match CIRCLEBACK_CLI_VERSION_HEADER in apps/web/helpers/api/mcp/version.ts.
 exports.CLIENT_VERSION_HEADER = 'x-circleback-cli-version';
+// Must match API_KEY_PREFIX in packages/constants/auth.ts.
+exports.API_KEY_PREFIX = 'cb_';
+exports.API_KEY_ENVIRONMENT_VARIABLE = 'CIRCLEBACK_API_KEY';
+exports.API_KEY_SETTINGS_URL = `${exports.BASE_URL}/settings?tab=api-access`;
 exports.BRAND_COLOR = '#F24E1D';
 exports.SECONDARY_COLOR = '#4262FF';
 exports.ASCII_LOGO = `

package/dist/helpers/formatter.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.formatOutput = void 0;
 const table_1 = require("./table");
 const parse_1 = require("./parse");
+const output_1 = require("./output");
 const zod_1 = require("zod");
 const stringify = (value) => typeof value === 'string' ? value : JSON.stringify(value, null, 2);
 const formatForTool = (toolName, data) => {
@@ -38,10 +39,12 @@ const formatForTool = (toolName, data) => {
 const formatOutput = (toolName, rawText, jsonMode) => {
     const parsed = (0, parse_1.extractAndValidateObjectFromString)(rawText, zod_1.z.json());
     if (jsonMode) {
-        console.log(stringify(parsed));
+        (0, output_1.printText)(stringify(parsed), output_1.TextType.Default);
         return;
     }
     const formatted = formatForTool(toolName, parsed);
-    console.log(formatted ?? stringify(parsed));
+    (0, output_1.printText)(formatted ?? stringify(parsed), Array.isArray(parsed) && parsed.length === 0
+        ? output_1.TextType.Warning
+        : output_1.TextType.Default);
 };
 exports.formatOutput = formatOutput;

package/dist/helpers/output.js

@@ -0,0 +1,34 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.printTextToStderr = exports.printText = exports.formatText = exports.TextType = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+var TextType;
+(function (TextType) {
+    TextType["Default"] = "Default";
+    TextType["Error"] = "Error";
+    TextType["Success"] = "Success";
+    TextType["Warning"] = "Warning";
+})(TextType || (exports.TextType = TextType = {}));
+const TEXT_STYLES = {
+    [TextType.Default]: (message) => message,
+    [TextType.Error]: chalk_1.default.red,
+    [TextType.Success]: chalk_1.default.green,
+    [TextType.Warning]: chalk_1.default.yellow,
+};
+const formatText = (message, type) => {
+    const text = TEXT_STYLES[type](message);
+    return type === TextType.Default ? `${text}\n` : `\n${text}\n\n`;
+};
+exports.formatText = formatText;
+const printText = (message, type) => {
+    const stream = type === TextType.Error ? process.stderr : process.stdout;
+    stream.write((0, exports.formatText)(message, type));
+};
+exports.printText = printText;
+const printTextToStderr = (message, type) => {
+    process.stderr.write((0, exports.formatText)(message, type));
+};
+exports.printTextToStderr = printTextToStderr;

package/dist/helpers/parse.js

@@ -1,18 +1,15 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateMeetingIdentifiers = exports.parseNumericIds = exports.parseIntOption = exports.extractAndValidateObjectFromString = void 0;
-const chalk_1 = __importDefault(require("chalk"));
 const zod_1 = require("zod");
+const output_1 = require("./output");
 const extractAndValidateObjectFromString = (rawText, schema) => {
     try {
         const json = JSON.parse(rawText);
         const result = schema.safeParse(json);
         if (result.success)
             return result.data;
-        console.error(chalk_1.default.red('Failed to parse response.'));
+        (0, output_1.printText)('Failed to parse response.', output_1.TextType.Error);
         process.exit(1);
     }
     catch {
@@ -25,7 +22,7 @@ const numericIdsSchema = zod_1.z.array(intSchema);
 const parseIntOption = (value, flagName) => {
     const result = intSchema.safeParse(value);
     if (!result.success) {
-        console.error(chalk_1.default.red(`Invalid number for ${flagName}.`));
+        (0, output_1.printText)(`Invalid number for ${flagName}.`, output_1.TextType.Error);
         process.exit(1);
     }
     return result.data;
@@ -34,7 +31,7 @@ exports.parseIntOption = parseIntOption;
 const parseNumericIds = (value, label) => {
     const result = numericIdsSchema.safeParse(value.split(','));
     if (!result.success) {
-        console.error(chalk_1.default.red(`Invalid ${label}. Expected numeric IDs.`));
+        (0, output_1.printText)(`Invalid ${label}. Expected numeric IDs.`, output_1.TextType.Error);
         process.exit(1);
     }
     return result.data;
@@ -45,7 +42,7 @@ const validateMeetingIdentifiers = (values) => {
     const isValidIdentifier = /^[A-Za-z0-9_-]{1,64}$/;
     if (cleanedValues.length === 0 ||
         cleanedValues.some((value) => !isValidIdentifier.test(value))) {
-        console.error(chalk_1.default.red('Invalid meeting identifiers. Expected one or more meeting IDs.'));
+        (0, output_1.printText)('Invalid meeting identifiers. Expected one or more meeting IDs.', output_1.TextType.Error);
         process.exit(1);
     }
     return cleanedValues;

package/dist/helpers/table.js

@@ -38,7 +38,7 @@ const formatSender = (sender) => {
 };
 const formatMeetingsList = (meetings) => {
     if (meetings.length === 0)
-        return chalk_1.default.yellow('No meetings found.');
+        return 'No meetings found.';
     const idWidth = idColumnWidth(meetings.map((meeting) => meeting.id));
     const nameWidth = 40;
     const dateWidth = 14;
@@ -65,7 +65,7 @@ const formatMeetingsList = (meetings) => {
 exports.formatMeetingsList = formatMeetingsList;
 const formatMeetingDetails = (meetings) => {
     if (meetings.length === 0)
-        return chalk_1.default.yellow('No meetings found.');
+        return 'No meetings found.';
     return meetings
         .map((meeting) => {
         const header = chalk_1.default.bold.cyan(`\n# ${meeting.name}`);
@@ -98,7 +98,7 @@ const formatMeetingDetails = (meetings) => {
 exports.formatMeetingDetails = formatMeetingDetails;
 const formatTranscriptSearchResults = (results) => {
     if (results.length === 0)
-        return chalk_1.default.yellow('No transcript matches found.');
+        return 'No transcript matches found.';
     const idWidth = idColumnWidth(results.map((result) => result.meetingId));
     const meetingWidth = 25;
     const contentWidth = 60;
@@ -118,7 +118,7 @@ const formatTranscriptSearchResults = (results) => {
 exports.formatTranscriptSearchResults = formatTranscriptSearchResults;
 const formatTranscriptReadResults = (results) => {
     if (results.length === 0)
-        return chalk_1.default.yellow('No transcripts found.');
+        return 'No transcripts found.';
     return results
         .map((result) => {
         const header = chalk_1.default.bold.cyan(`\n# ${result.meetingName}`);
@@ -136,7 +136,7 @@ const formatTranscriptReadResults = (results) => {
 exports.formatTranscriptReadResults = formatTranscriptReadResults;
 const formatCalendarEvents = (events) => {
     if (events.length === 0)
-        return chalk_1.default.yellow('No calendar events found.');
+        return 'No calendar events found.';
     const table = new cli_table3_1.default({
         head: [
             style_1.brand.bold('Title'),
@@ -161,7 +161,7 @@ const formatCalendarEvents = (events) => {
 exports.formatCalendarEvents = formatCalendarEvents;
 const formatProfiles = (profiles) => {
     if (profiles.length === 0)
-        return chalk_1.default.yellow('No people found.');
+        return 'No people found.';
     const idWidth = idColumnWidth(profiles.map((profile) => profile.id));
     const nameWidth = 25;
     const emailWidth = 30;
@@ -191,7 +191,7 @@ const formatProfiles = (profiles) => {
 exports.formatProfiles = formatProfiles;
 const formatCompanies = (companies) => {
     if (companies.length === 0)
-        return chalk_1.default.yellow('No companies found.');
+        return 'No companies found.';
     const table = new cli_table3_1.default({
         head: [style_1.brand.bold('Company'), style_1.brand.bold('Domain')],
         style: style_1.tableStyle,
@@ -202,7 +202,7 @@ const formatCompanies = (companies) => {
 exports.formatCompanies = formatCompanies;
 const formatSupportArticles = (articles) => {
     if (articles.length === 0)
-        return chalk_1.default.yellow('No articles found.');
+        return 'No articles found.';
     return articles
         .map((article) => `${(0, string_1.link)(chalk_1.default.bold.cyan(article.title), article.url)}\n${(0, string_1.link)(chalk_1.default.dim.underline(article.url), article.url)}\n${article.description}`)
         .join('\n\n');
@@ -210,7 +210,7 @@ const formatSupportArticles = (articles) => {
 exports.formatSupportArticles = formatSupportArticles;
 const formatActionItems = (actionItems) => {
     if (actionItems.length === 0)
-        return chalk_1.default.yellow('No action items found.');
+        return 'No action items found.';
     const idWidth = idColumnWidth(actionItems.map((item) => item.id));
     const titleWidth = 35;
     const statusWidth = 10;
@@ -250,7 +250,7 @@ const formatActionItems = (actionItems) => {
 exports.formatActionItems = formatActionItems;
 const formatTags = (tags) => {
     if (tags.length === 0)
-        return chalk_1.default.yellow('No tags found.');
+        return 'No tags found.';
     const idWidth = idColumnWidth(tags.map((tag) => tag.id));
     const nameWidth = 40;
     const table = new cli_table3_1.default({
@@ -273,7 +273,7 @@ const formatMessage = (message) => {
 };
 const formatEmails = (threads) => {
     if (threads.length === 0)
-        return chalk_1.default.yellow('No emails found.');
+        return 'No emails found.';
     return threads
         .flatMap((thread) => thread.messages.map(formatMessage))
         .join('\n\n---\n');

package/dist/helpers/tag.js

@@ -1,12 +1,9 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveTagValues = void 0;
-const chalk_1 = __importDefault(require("chalk"));
 const zod_1 = require("zod");
 const jsonRpc_1 = require("../client/jsonRpc");
+const output_1 = require("./output");
 const parse_1 = require("./parse");
 const tagItemSchema = zod_1.z.object({
     id: zod_1.z.number(),
@@ -25,12 +22,12 @@ const resolveTagValues = async (value) => {
         .map((part) => part.trim())
         .filter((part) => part.length > 0);
     if (parts.length === 0) {
-        console.error(chalk_1.default.red('No tag values provided.'));
+        (0, output_1.printText)('No tag values provided.', output_1.TextType.Error);
         process.exit(1);
     }
     const tagList = await fetchUserTags();
     if (typeof tagList === 'string') {
-        console.error(chalk_1.default.red('Failed to fetch tags.'));
+        (0, output_1.printText)('Failed to fetch tags.', output_1.TextType.Error);
         process.exit(1);
     }
     return parts.map((part) => {
@@ -41,7 +38,7 @@ const resolveTagValues = async (value) => {
         if (!isNaN(numericId) && tagList.some((tag) => tag.id === numericId)) {
             return numericId;
         }
-        console.error(chalk_1.default.red(`Tag "${part}" not found.`));
+        (0, output_1.printText)(`Tag "${part}" not found.`, output_1.TextType.Error);
         process.exit(1);
     });
 };

package/dist/helpers/update.js

@@ -8,6 +8,7 @@ const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const chalk_1 = __importDefault(require("chalk"));
 const constants_1 = require("../constants");
+const output_1 = require("./output");
 const CACHE_FILE = node_path_1.default.join(constants_1.CONFIG_DIRECTORY, 'update-check.json');
 const CHECK_INTERVAL_MILLISECONDS = 60 * 60 * 1000; // 1 hour
 const REGISTRY_TIMEOUT_MILLISECONDS = 3_000;
@@ -96,11 +97,9 @@ const printUpdateNotification = (result) => {
     if (!result.updateAvailable)
         return;
     const message = [
-        '',
-        chalk_1.default.yellow(`  Update available: ${chalk_1.default.dim(result.currentVersion)} → ${chalk_1.default.green(result.latestVersion)}`),
-        chalk_1.default.yellow(`  Run ${chalk_1.default.cyan('circleback update')} or ${chalk_1.default.cyan('cb update')} to update.`),
-        '',
+        `  Update available: ${chalk_1.default.dim(result.currentVersion)} → ${chalk_1.default.green(result.latestVersion)}`,
+        `  Run ${chalk_1.default.cyan('circleback update')} or ${chalk_1.default.cyan('cb update')} to update.`,
     ].join('\n');
-    console.error(message);
+    process.stderr.write((0, output_1.formatText)(message, output_1.TextType.Warning));
 };
 exports.printUpdateNotification = printUpdateNotification;

package/dist/index.js

@@ -5,22 +5,28 @@ const commander_1 = require("commander");
 const registry_1 = require("./commands/registry");
 const constants_1 = require("./constants");
 const help_1 = require("./helpers/help");
+const output_1 = require("./helpers/output");
 const style_1 = require("./helpers/style");
 const update_1 = require("./helpers/update");
 const program = new commander_1.Command();
 const updateCheck = (0, update_1.getUpdateCheckResult)(constants_1.CLIENT_PACKAGE_NAME);
+const configureCommandOutput = (command) => {
+    command.configureOutput({
+        writeOut: (text) => (0, output_1.printText)((0, help_1.styleHelpOutput)(text).trimEnd(), output_1.TextType.Default),
+        writeErr: (text) => (0, output_1.printTextToStderr)((0, help_1.styleHelpOutput)(text).trimEnd(), output_1.TextType.Default),
+        outputError: (text) => (0, output_1.printText)((0, help_1.styleHelpOutput)(text).trim(), output_1.TextType.Error),
+    });
+    command.commands.forEach(configureCommandOutput);
+};
 program
     .name('circleback')
     .description('Search and access meetings, emails, calendar events, and more.')
     .version(constants_1.CLIENT_VERSION)
     .option('--json', 'Output raw JSON instead of formatted text')
     .addHelpText('before', style_1.BANNER)
-    .exitOverride()
-    .configureOutput({
-    writeOut: (text) => process.stdout.write((0, help_1.styleHelpOutput)(text)),
-    writeErr: (text) => process.stderr.write((0, help_1.styleHelpOutput)(text)),
-});
+    .exitOverride();
 (0, registry_1.getAllCommands)().reduce((p, command) => p.addCommand(command), program);
+configureCommandOutput(program);
 program.hook('postAction', async (_thisCommand, actionCommand) => {
     if (actionCommand.name() === 'update')
         return;
@@ -32,6 +38,6 @@ program.hook('postAction', async (_thisCommand, actionCommand) => {
 program.parseAsync().catch((error) => {
     if (error instanceof commander_1.CommanderError)
         process.exit(error.exitCode);
-    console.error(error);
+    (0, output_1.printText)(error instanceof Error ? error.message : String(error), output_1.TextType.Error);
     process.exit(1);
 });

package/dist/types.js

@@ -1,19 +1,39 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isJsonRpcResponse = exports.isOAuthTokenResponse = exports.isStoredTokens = void 0;
-const isStoredTokens = (value) => typeof value === 'object' &&
-    value !== null &&
-    'accessToken' in value &&
-    typeof value.accessToken === 'string' &&
-    'refreshToken' in value &&
-    typeof value.refreshToken === 'string' &&
-    'expiresAt' in value &&
-    typeof value.expiresAt === 'number' &&
-    'clientId' in value &&
-    typeof value.clientId === 'string' &&
-    'scope' in value &&
-    typeof value.scope === 'string';
-exports.isStoredTokens = isStoredTokens;
+exports.isJsonRpcResponse = exports.isOAuthTokenResponse = exports.isStoredApiKey = exports.parseStoredCredentials = exports.CredentialSource = exports.CredentialType = void 0;
+const zod_1 = require("zod");
+var CredentialType;
+(function (CredentialType) {
+    CredentialType["ApiKey"] = "apiKey";
+    CredentialType["OAuth"] = "oauth";
+})(CredentialType || (exports.CredentialType = CredentialType = {}));
+var CredentialSource;
+(function (CredentialSource) {
+    CredentialSource["Environment"] = "environment";
+    CredentialSource["Stored"] = "stored";
+})(CredentialSource || (exports.CredentialSource = CredentialSource = {}));
+const storedTokensSchema = zod_1.z.object({
+    accessToken: zod_1.z.string(),
+    refreshToken: zod_1.z.string(),
+    expiresAt: zod_1.z.number(),
+    clientId: zod_1.z.string(),
+    scope: zod_1.z.string(),
+});
+const storedApiKeySchema = zod_1.z.object({
+    type: zod_1.z.literal(CredentialType.ApiKey),
+    apiKey: zod_1.z.string().trim().min(1),
+});
+const storedCredentialsSchema = zod_1.z.union([
+    storedApiKeySchema,
+    storedTokensSchema,
+]);
+const parseStoredCredentials = (value) => {
+    const result = storedCredentialsSchema.safeParse(value);
+    return result.success ? result.data : undefined;
+};
+exports.parseStoredCredentials = parseStoredCredentials;
+const isStoredApiKey = (value) => storedApiKeySchema.safeParse(value).success;
+exports.isStoredApiKey = isStoredApiKey;
 const isOAuthTokenResponse = (value) => typeof value === 'object' &&
     value !== null &&
     'access_token' in value &&

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@circleback/cli",
-  "version": "0.2.3",
+  "version": "0.3.1",
   "description": "Circleback CLI. Search and access meetings, emails, calendar events, and more.",
   "license": "MIT",
   "author": "Circleback <support@circleback.ai> (https://circleback.ai)",