@exayard/cli 0.2.0 → 0.5.1

package/dist/index.d.ts

@@ -12,24 +12,39 @@ interface CommandContext {
     json: boolean;
     write: (line: string) => void;
     writeErr: (line: string) => void;
+    /** Opens the sign-in page; the default opens the system browser (tests pass their own). */
+    openBrowser?: (url: string) => void | Promise<void>;
 }
 declare const COMMANDS: Record<string, (ctx: CommandContext) => Promise<number>>;
 
+interface OAuthSession {
+    accessToken: string;
+    refreshToken?: string;
+    /** Epoch milliseconds; unset when the server gave no `expires_in`. */
+    expiresAt?: number;
+    clientId: string;
+    tokenEndpoint: string;
+    redirectUri: string;
+    /** The RFC 8707 resource the token was asked for (the API). */
+    resource?: string;
+}
+
 /**
  * Credential storage for the Exayard CLI.
  *
  * Written to ~/.exayard/config.json with mode 600 (readable only by the
- * owner) — same pattern `gh`, `stripe`, and `vercel` use. Env vars take
- * precedence so CI runs don't need to persist anything to disk.
+ * owner), in a 700 directory — same pattern `gh`, `stripe`, and `vercel` use.
+ * Env vars take precedence so CI runs don't need to persist anything to disk.
  *
- * The file is intentionally tiny: api key + last-used org. Richer state
- * (saved commands, history, etc.) can be added without changing the
- * precedence rules.
+ * Holds an API key (`exayard login --api-key`) or a browser sign-in session
+ * (`exayard login`: access and refresh token), plus the last-used org. An API
+ * key wins over the session.
  */
 interface ExayardConfig {
     apiKey?: string;
     organizationId?: string;
     baseUrl?: string;
+    oauth?: OAuthSession;
 }
 declare const readConfig: () => ExayardConfig;
 declare const writeConfig: (config: ExayardConfig) => void;