@gojinko/cli 2.22.1 → 2.24.0

package/README.md

@@ -10,21 +10,28 @@ npm install -g @gojinko/cli
 
 ## Authentication
 
+Jinko authenticates with a **tenant API key** (`jnk_...`). Get one from
+**dashboard.gojinko.com → Developers → API keys**.
+
 ```bash
-# API key (recommended for agents, CI/CD)
-export JINKO_API_KEY=jnk_YOUR_KEY
+# Store an API key (recommended)
+jinko auth login --key jnk_YOUR_KEY
 
-# OAuth (interactive humans — opens a browser)
+# Or interactively — prompts for the key
 jinko auth login
+
+# Or pass it via the environment (agents, CI/CD)
+export JINKO_API_KEY=jnk_YOUR_KEY
 ```
 
-Create API keys at https://builders.gojinko.com. OAuth tokens auto-refresh.
+> **OAuth sign-in is deprecated** and no longer supported for the data plane.
+> Use an API key.
 
 ### Auth commands
 
 ```bash
-jinko auth login              # Interactive login
-jinko auth login --key jnk_…  # Store an API key
+jinko auth login --key jnk_…  # Store an API key (recommended)
+jinko auth login              # Interactive — prompts for an API key
 jinko auth status             # Show current method, expiry
 jinko auth logout             # Clear stored credentials
 ```
@@ -56,10 +63,11 @@ Prod and sandbox keys are stored separately in `~/.jinko/config.yaml`. Resolutio
 
 | Command | Description |
 |---|---|
-| `flight-search` | Direct search by route + dates OR price-check an `offer_token`. Returns bookable `trip_item_token`. |
+| `flight-search` | Direct search by route + dates OR price-check an `offer_token`. Returns bookable `trip_item_token`. Carries the full shop filter set (stops, time windows, layovers, fare attributes, alternate airports) and reports which filters the results honor. |
 | `price-monitoring` | Cache-only price snapshot for a fixed OD + dates — intended for scheduled polling. Semantically distinct from `flight-search` (one-shot live shopping). |
 | `hotel-search` | Live hotel search by city / query / geo / hotel-ids. Returns hotels with rooms, rates, `htl_*` offer tokens. |
 | `hotel-details` | Lazy lookup for a specific hotel — images, amenities, location detail. Pairs with `hotel-search` when the user wants the full picture before booking. |
+| `ground-search` | Live rail / coach / ferry search. Each result's `id` is itself the `trip_item_token` — no prefix. |
 | `trip` | Create/update a trip, add flight or hotel items, set travelers |
 
 ### Legacy
@@ -72,10 +80,10 @@ Prod and sandbox keys are stored separately in `~/.jinko/config.yaml`. Resolutio
 | Command | Description |
 |---|---|
 | `checkout` | Finalize a trip → returns `checkout_url` (human pays in a browser) + `agent_spt_params` (agent pays programmatically) + items + total. (`book` is a deprecated alias.) |
-| `agent-pay submit` | Pay programmatically with a Shared Payment Token: present `--trip-id` + `--token`; the BFF schedules the agent fulfillment and redeems the SPT. Falls back to `checkout_url` on a 3DS step-up. |
+| `agent-pay submit` | Pay programmatically with a Shared Payment Token: present `--trip-id` + `--token`; the BFF schedules the agent fulfillment and redeems the SPT. Returns the Jinko `booking_ref` (`JNK-…`) once authorized. Falls back to `checkout_url` on a 3DS step-up. |
 | `get-ancillaries` | List a trip's purchasable ancillaries (bags / seats / meals) without generating a checkout URL |
 | `select-ancillaries` | Optional: preselect bags / seats / meals before handoff |
-| `trip-status` | Full lifecycle state: cart, quote, fulfillment, bookings |
+| `trip-status` | Full lifecycle state: cart, quote, fulfillment, bookings — plus the Jinko `booking_ref` once fulfillment has been scheduled (it can be present before payment completes — read `fulfillment.status` for paid), the value `get-booking` / `hotel-cancel` / `refund` / `exchange` take as `--booking-ref` |
 
 ### Post-booking
 
@@ -113,12 +121,27 @@ Quote is automatic — `checkout` handles it internally. A human pays on the ret
 # Live flight search by route + dates (returns trip_item_token directly)
 jinko flight-search --origin PAR --destination NYC --departure-date 2026-06-15
 
+# Filtered search — non-stop, morning departure, checked bag in the fare
+jinko flight-search --origin JFK --destination CDG --departure-date 2026-09-01 \
+  --max-stops 0 --departure-time-range 06:00-11:00 --checked-bag-included
+
+# Widen the search to more departure airports (the anchor still decides ranking)
+jinko flight-search --origin JFK --destination CDG --departure-date 2026-09-01 \
+  --origin-alternate-airports EWR LGA
+
 # Or price-check an offer_token from flight-calendar
 jinko flight-search --offer-token <offer_token>
 
 # Live hotel search (returns htl_* tokens that plug into trip the same way as flight tokens)
 jinko hotel-search --city-name "Paris" --country-code FR --checkin 2026-07-15 --checkout 2026-07-18 --adults 2
 
+# Live ground search — rail, coach, ferry. Codes are ISO-country + city (GBLON), NOT IATA (LON).
+jinko ground-search --departure-city GBLON --arrival-city FRPAR --date 2026-08-28 --adults 2 --currency GBP
+# --currency is currently REQUIRED despite the schema marking it optional:
+# without it the provider rejects the search and you get an unhelpful "Please retry."
+# Each connection's id IS the trip item token — pass it through unmodified:
+jinko trip --trip-item-token <connection_id>
+
 # Multi-domain cart: add flight + hotel to the same trip → one Stripe checkout
 jinko trip --trip-item-token <flight_token>            # returns trip_id
 jinko trip --trip-id <trip_id> --trip-item-token <htl_*>
@@ -148,11 +171,44 @@ jinko refund check  --booking-ref <ref> --pnr <pnr>
 jinko refund commit --booking-ref <ref> --pnr <pnr> --reason "schedule change"
 
 # Hotel cancellations (idempotent — safe to retry)
-jinko hotel-cancel --ref <booking_ref> --last-name <name>
+jinko hotel-cancel --booking-ref <booking_ref> --last-name <name>
 # Or via the authenticated shortcut:
 jinko hotel-cancel --provider-booking-id <id> --provider nuitee
 ```
 
+## Flight search filters
+
+`flight-search` exposes every filter the `POST /v1/flight_search` contract
+accepts, one option per field — run `jinko flight-search --help` for the list.
+Two things are worth knowing before you use them:
+
+**The response says which filters were honored.** Every search comes back with
+`applied_filters` (the ones these results DO honor) and `unapplied_filters`
+(the ones they do not, each with a reason). A filter the platform could not
+enforce is a reported outcome, not an error: the call still returns 200 with
+offers. Post-filter them yourself, or tell the user the constraint could not be
+met. `--format table` prints the report under the results; JSON output carries
+both lists as response fields.
+
+**Alternate airports widen an airport anchor.** `--origin-alternate-airports`
+and `--destination-alternate-airports` add departure/arrival airports beside
+`--origin` / `--destination` — widening only, so they can add results but never
+remove any. The anchor decides ranking and truncation, which makes the two
+airports NOT interchangeable: put the airport that matters most in `--origin`.
+Against a city anchor (`--origin-type city`, or a code the platform resolves to
+a city) the list is ignored — a city already searches its whole metro area —
+and comes back in `unapplied_filters` under the name `origin` or `destination`,
+never under the option name it was sent with.
+
+```bash
+jinko flight-search --origin PAR --destination NYC --departure-date 2026-06-15 \
+  --origin-alternate-airports ORY --format table
+# ...offers...
+#
+# Unapplied filters:
+#   origin — <the reason the platform gives for not enforcing it>
+```
+
 ## Output Formats
 
 ```bash

package/SKILL.md

@@ -4,21 +4,21 @@ You are using `jinko`, a CLI for the Jinko developer platform. A trip can be pai
 
 ## Authentication
 
-### Option 1: API Key (recommended for agents and CI/CD)
+Jinko authenticates with a **tenant API key** (`jnk_...`). Get one from
+**dashboard.gojinko.com → Developers → API keys**.
 
 ```
+# Store the key (recommended)
+jinko auth login --key jnk_...
+
+# Or via the environment (agents, CI/CD)
 export JINKO_API_KEY=jnk_...
 ```
 
-Create keys at https://builders.gojinko.com.
-
-### Option 2: OAuth (interactive humans)
-
-```
-jinko auth login
-```
+`jinko auth login` (no flag) prompts for the key interactively and stores it in
+`~/.jinko/config.yaml`.
 
-Opens a browser for WorkOS device flow login. Token is stored in `~/.jinko/config.yaml`.
+> OAuth sign-in is deprecated and no longer supported — use an API key.
 
 ## Tools
 
@@ -28,17 +28,20 @@ Opens a browser for WorkOS device flow login. Token is stored in `~/.jinko/confi
 
 ### Pricing (live)
 - `flight-search` — direct search by route + dates OR price-check an `offer_token`. Returns `trip_item_token`.
+  Carries the full shop filter set (`--max-stops`, `--departure-time-range`, `--refundable-only`,
+  `--checked-bag-included`, `--via-airports`, `--origin-alternate-airports`, …) — run
+  `jinko flight-search --help` for the list.
 
 ### Trip building
 - `trip` — create/update a trip (add items, set travelers + contact). Returns `trip_id`.
 
 ### Checkout
 - `checkout` — finalize a trip; returns BOTH `checkout_url` (a human opens it to pay) AND `agent_spt_params` (an agent uses them to pay programmatically), plus items + ancillaries + total. (`book` is a deprecated alias.)
-- `agent-pay submit --trip-id <id> --token <spt>` — pay programmatically: mint a Shared Payment Token scoped to `checkout`'s `agent_spt_params`, then submit it; the BFF schedules the agent fulfillment and redeems the token. A 3DS step-up / decline falls back to a `checkout_url`.
+- `agent-pay submit --trip-id <id> --token <spt>` — pay programmatically: mint a Shared Payment Token scoped to `checkout`'s `agent_spt_params`, then submit it; the BFF schedules the agent fulfillment and redeems the token. Returns the Jinko `booking_ref` (`JNK-…`) once authorized. A 3DS step-up / decline falls back to a `checkout_url`.
 - `select-ancillaries` — (optional) preselect bags/seats/meals before checkout.
 
 ### Status
-- `trip-status` — full lifecycle state: cart, quote, fulfillment, bookings (PNRs).
+- `trip-status` — full lifecycle state: cart, quote, fulfillment, bookings (PNRs). Once fulfillment has been scheduled it also carries the Jinko `booking_ref` — the value `get-booking` / `hotel-cancel` / `refund` / `exchange` take as `--booking-ref`. It can be present before payment completes (a hosted checkout still in progress, or an `agent-pay submit` that fell back to `checkout_url`), so presence does not mean paid — read `fulfillment.status`. `bookings[].booking_reference` is the supplier's confirmation, not that handle.
 
 ### Post-booking
 - `refund check` / `refund commit`
@@ -49,7 +52,7 @@ Opens a browser for WorkOS device flow login. Token is stored in `~/.jinko/confi
 ## Canonical Flow
 
 ```
-1. jinko flight-search --from PAR --to NYC --date 2026-05-01
+1. jinko flight-search --origin PAR --destination NYC --departure-date 2026-05-01
    → each fare has a trip_item_token (live pricing already applied)
 
 2. jinko trip \
@@ -67,10 +70,11 @@ Opens a browser for WorkOS device flow login. Token is stored in `~/.jinko/confi
 5a. Human path: send the user to checkout_url — they complete payment on the Jinko web page.
 5b. Agent path: mint a Shared Payment Token scoped to agent_spt_params, then
     jinko agent-pay submit --trip-id <trip_id> --token <spt>
-    → { status: "processing", payment_verified: true }  (or a checkout_url fallback on 3DS)
+    → { status: "processing", payment_verified: true, booking_ref: "JNK-…" }  (or a checkout_url fallback on 3DS)
 
 6. jinko trip-status --trip-id <trip_id>
    → poll until status = "fulfilled" (or "partially_fulfilled") to get PNRs.
+   → booking_ref is the Jinko reference for get-booking / hotel-cancel / refund / exchange (--booking-ref).
 ```
 
 ## Important Notes
@@ -82,4 +86,14 @@ Opens a browser for WorkOS device flow login. Token is stored in `~/.jinko/confi
 - Dates: YYYY-MM-DD.
 - Gender: MALE | FEMALE (uppercase).
 - Passenger types: ADULT | CHILD | INFANT.
-- Cabin classes: economy | premium_economy | business | first.
+- Cabin classes: economy | premium_economy | business | first. Cabin is ADVISORY —
+  providers may still return other cabins, so read each fare's own `cabin_class`.
+- `flight-search` reports what it enforced: `applied_filters` lists the requested
+  filters the results honor, `unapplied_filters` the ones they do not, each with a
+  reason. An unapplied filter is not an error — the call still returns 200. Either
+  post-filter the offers yourself or tell the user the constraint could not be met.
+- `--origin-alternate-airports` / `--destination-alternate-airports` WIDEN an airport
+  anchor: they add airports beside `--origin` / `--destination`, never remove results.
+  The anchor decides ranking, so put the airport that matters most in `--origin`.
+  Against a city anchor the list is ignored and reported back under `origin` /
+  `destination` in `unapplied_filters`.

package/dist/commands/agent-pay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-pay.d.ts","sourceRoot":"","sources":["../../src/commands/agent-pay.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsBnE"}
+{"version":3,"file":"agent-pay.d.ts","sourceRoot":"","sources":["../../src/commands/agent-pay.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuBnE"}

package/dist/commands/agent-pay.js

@@ -1,4 +1,4 @@
-import { withClient, output } from './shared.js';
+import { withClient, output, userIntentOption } from './shared.js';
 export function registerAgentPaymentCommands(program) {
     const agent = program
         .command('agent-pay')
@@ -10,6 +10,7 @@ export function registerAgentPaymentCommands(program) {
         .description('Present a trip ID and a Shared Payment Token: the BFF schedules the agent fulfillment and redeems the token to authorize the booking server-side, advancing it to fulfillment. If the issuer requires customer action (3DS) the response carries a checkout_url fallback instead of confirming.')
         .requiredOption('--trip-id <id>', 'trip ID (from the trip command) [required]')
         .requiredOption('--token <spt>', 'Shared Payment Token (spt_...) [required]')
+        .addOption(userIntentOption())
         .action(withClient(async (client, globals, opts) => {
         const response = await client.submitAgentPayment(opts.tripId, opts.token);
         output(response, { format: globals.format });

package/dist/commands/agent-pay.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-pay.js","sourceRoot":"","sources":["../../src/commands/agent-pay.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,UAAU,4BAA4B,CAAC,OAAgB;IAC3D,MAAM,KAAK,GAAG,OAAO;SAClB,OAAO,CAAC,WAAW,CAAC;SACpB,OAAO,CAAC,gFAAgF,CAAC;SACzF,WAAW,CACV,0ZAA0Z,CAC3Z,CAAC;IAEJ,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,OAAO,CAAC,mEAAmE,CAAC;SAC5E,WAAW,CACV,iSAAiS,CAClS;SACA,cAAc,CAAC,gBAAgB,EAAE,4CAA4C,CAAC;SAC9E,cAAc,CAAC,eAAe,EAAE,2CAA2C,CAAC;SAC5E,MAAM,CACL,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CACH,CAAC;AACN,CAAC"}
+{"version":3,"file":"agent-pay.js","sourceRoot":"","sources":["../../src/commands/agent-pay.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEnE,MAAM,UAAU,4BAA4B,CAAC,OAAgB;IAC3D,MAAM,KAAK,GAAG,OAAO;SAClB,OAAO,CAAC,WAAW,CAAC;SACpB,OAAO,CAAC,gFAAgF,CAAC;SACzF,WAAW,CACV,0ZAA0Z,CAC3Z,CAAC;IAEJ,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,OAAO,CAAC,mEAAmE,CAAC;SAC5E,WAAW,CACV,iSAAiS,CAClS;SACA,cAAc,CAAC,gBAAgB,EAAE,4CAA4C,CAAC;SAC9E,cAAc,CAAC,eAAe,EAAE,2CAA2C,CAAC;SAC5E,SAAS,CAAC,gBAAgB,EAAE,CAAC;SAC7B,MAAM,CACL,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CACH,CAAC;AACN,CAAC"}

package/dist/commands/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6K3D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AA0C5C,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+G3D"}

package/dist/commands/auth/index.js

@@ -1,100 +1,66 @@
-import { resolveAuth, resolveEnvironment, writeEnvAuth, clearAuthConfig, clearCliSession, readConfigFile, CONFIG_FILE, requestDeviceAuthorization, pollForToken, OAuthError, } from '@gojinko/api-client';
+import { Option } from 'commander';
+import { resolveAuth, resolveEnvironment, writeEnvAuth, clearAuthConfig, clearCliSession, readConfigFile, CONFIG_FILE, } from '@gojinko/api-client';
 import { output, outputError } from '../shared.js';
 import { getGlobalOptions } from '../../config/config.js';
-import { promptChoice, promptText } from './prompt.js';
+import { promptText } from './prompt.js';
+// The single documented way to authenticate the Jinko data plane. OAuth
+// sign-in was retired, so every "how do I authenticate?" message points here.
+const API_KEY_SOURCE = 'dashboard.gojinko.com → Developers → API keys';
+/**
+ * Validate a `jnk_` API key and persist it to the environment's credential
+ * slot. Exits with code 3 on a missing/malformed key. `writeEnvAuth` deep-merges
+ * a fresh config object, so the on-disk config is replaced, never mutated.
+ */
+async function saveApiKey(env, token, globals) {
+    if (!token) {
+        outputError({ code: 'INVALID_TOKEN', message: `No API key provided. Get one from ${API_KEY_SOURCE}.` }, globals);
+        process.exit(3);
+    }
+    if (!token.startsWith('jnk_')) {
+        outputError({ code: 'INVALID_TOKEN', message: `API key must start with "jnk_". Get one from ${API_KEY_SOURCE}.` }, globals);
+        process.exit(3);
+    }
+    await writeEnvAuth(env, { api_key: token });
+    output({
+        status: 'ok',
+        method: 'api_key',
+        environment: env,
+        message: `API key saved to ${CONFIG_FILE} (environment: ${env})`,
+    }, { format: globals.format });
+}
 export function registerAuthCommands(program) {
     const auth = program
         .command('auth')
         .description('Manage authentication.');
     auth
         .command('login')
-        .description('Authenticate with Jinko (OAuth or API key).')
-        .option('--key <token>', 'API key (jnk_...) — skip interactive prompt')
+        .description(`Authenticate with a Jinko API key (jnk_...). Get one from ${API_KEY_SOURCE}.`)
+        .option('--key <token>', 'API key (jnk_...) — skip the interactive prompt')
+        // Hidden escape hatch. OAuth sign-in is deprecated and no longer works for
+        // the data plane; this flag exists only so anyone reaching for the old flow
+        // gets a clear signpost to API keys instead of a cryptic "unknown option".
+        .addOption(new Option('--oauth', 'Deprecated — OAuth sign-in is no longer supported').hideHelp())
         .action(async (opts, cmd) => {
         const globals = getGlobalOptions(cmd);
         // Credentials are stored per-environment so prod and sandbox keys coexist.
         const env = await resolveEnvironment(globals.environment);
-        // Fast path: --key flag → direct API key save
-        if (opts['key']) {
-            const token = opts['key'];
-            if (!token.startsWith('jnk_')) {
-                outputError({ code: 'INVALID_TOKEN', message: 'API key must start with "jnk_". Get one from the Jinko developer platform.' }, globals);
-                process.exit(3);
-            }
-            await writeEnvAuth(env, { api_key: token });
-            output({
-                status: 'ok',
-                method: 'api_key',
-                environment: env,
-                message: `API key saved to ${CONFIG_FILE} (environment: ${env})`,
-            }, { format: globals.format });
-            return;
+        // Deprecated OAuth path — do not run the device flow; point at API keys.
+        if (opts['oauth']) {
+            outputError({
+                code: 'OAUTH_DEPRECATED',
+                message: `OAuth sign-in is deprecated and no longer supported. Get an API key from ${API_KEY_SOURCE}, then run \`jinko auth login --key jnk_...\`.`,
+            }, globals);
+            process.exit(3);
         }
-        // Interactive: choose auth method
-        const method = await promptChoice('How would you like to authenticate?', [
-            { label: 'OAuth — sign in with browser (recommended)', value: 'oauth' },
-            { label: 'API key — paste a jnk_... token', value: 'api_key' },
-        ]);
-        if (method === 'api_key') {
-            const token = await promptText('Enter your Jinko API key (jnk_...): ');
-            if (!token) {
-                outputError({ code: 'INVALID_TOKEN', message: 'No API key provided.' }, globals);
-                process.exit(3);
-            }
-            if (!token.startsWith('jnk_')) {
-                outputError({ code: 'INVALID_TOKEN', message: 'API key must start with "jnk_". Get one from the Jinko developer platform.' }, globals);
-                process.exit(3);
-            }
-            await writeEnvAuth(env, { api_key: token });
-            output({
-                status: 'ok',
-                method: 'api_key',
-                environment: env,
-                message: `API key saved to ${CONFIG_FILE} (environment: ${env})`,
-            }, { format: globals.format });
+        // Fast path: --key flag → save without prompting.
+        if (opts['key']) {
+            await saveApiKey(env, opts['key'], globals);
             return;
         }
-        // OAuth Device Authorization Flow
-        try {
-            console.log('Requesting device authorization...\n');
-            const device = await requestDeviceAuthorization();
-            console.log(`Visit this URL to authenticate:\n`);
-            console.log(`  ${device.verification_uri_complete}\n`);
-            console.log(`Or go to ${device.verification_uri} and enter code: ${device.user_code}\n`);
-            // Try to open browser automatically
-            try {
-                const open = await import('open');
-                await open.default(device.verification_uri_complete);
-            }
-            catch {
-                // Browser open failed — URL is already printed above
-            }
-            console.log('Waiting for approval...');
-            const tokens = await pollForToken(device.device_code, {
-                intervalSeconds: device.interval,
-                expiresIn: device.expires_in,
-            });
-            await writeEnvAuth(env, {
-                oauth: {
-                    access_token: tokens.access_token,
-                    refresh_token: tokens.refresh_token,
-                    expires_at: tokens.expires_at,
-                },
-            });
-            output({
-                status: 'ok',
-                method: 'oauth',
-                environment: env,
-                message: `Authenticated successfully. Credentials saved to ${CONFIG_FILE} (environment: ${env})`,
-            }, { format: globals.format });
-        }
-        catch (error) {
-            if (error instanceof OAuthError) {
-                outputError({ code: 'OAUTH_ERROR', message: error.message }, globals);
-                process.exit(3);
-            }
-            throw error;
-        }
+        // Interactive: API keys are the only supported auth, so prompt for one
+        // directly — no method-choice menu.
+        const token = await promptText('Enter your Jinko API key (jnk_...): ');
+        await saveApiKey(env, token, globals);
     });
     auth
         .command('logout')
@@ -143,7 +109,9 @@ export function registerAuthCommands(program) {
             token: masked,
             source,
         };
-        // Add expiry info for OAuth — prefer the per-env slot, fall back to legacy top-level.
+        // Add expiry info for OAuth — prefer the per-env slot, fall back to legacy
+        // top-level. OAuth login is deprecated; this branch only fires for
+        // pre-existing OAuth credentials still present in ~/.jinko/config.yaml.
         if (auth.method === 'oauth' && source === 'config') {
             const config = await readConfigFile();
             const oauth = config?.environments?.[env]?.oauth ?? config?.oauth;

package/dist/commands/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/auth/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,cAAc,EACd,WAAW,EACX,0BAA0B,EAC1B,YAAY,EACZ,UAAU,GACX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEvD,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAEzC,IAAI;SACD,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,6CAA6C,CAAC;SAC1D,MAAM,CAAC,eAAe,EAAE,6CAA6C,CAAC;SACtE,MAAM,CAAC,KAAK,EAAE,IAA6B,EAAE,GAAY,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtC,2EAA2E;QAC3E,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAE1D,8CAA8C;QAC9C,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAW,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,WAAW,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,4EAA4E,EAAE,EAAE,OAAO,CAAC,CAAC;gBACvI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,YAAY,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5C,MAAM,CAAC;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,SAAS;gBACjB,WAAW,EAAE,GAAG;gBAChB,OAAO,EAAE,oBAAoB,WAAW,kBAAkB,GAAG,GAAG;aACjE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,kCAAkC;QAClC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,qCAAqC,EAAE;YACvE,EAAE,KAAK,EAAE,4CAA4C,EAAE,KAAK,EAAE,OAAgB,EAAE;YAChF,EAAE,KAAK,EAAE,iCAAiC,EAAE,KAAK,EAAE,SAAkB,EAAE;SACxE,CAAC,CAAC;QAEH,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,sCAAsC,CAAC,CAAC;YACvE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,WAAW,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,OAAO,CAAC,CAAC;gBACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,WAAW,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,4EAA4E,EAAE,EAAE,OAAO,CAAC,CAAC;gBACvI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,YAAY,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5C,MAAM,CAAC;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,SAAS;gBACjB,WAAW,EAAE,GAAG;gBAChB,OAAO,EAAE,oBAAoB,WAAW,kBAAkB,GAAG,GAAG;aACjE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,0BAA0B,EAAE,CAAC;YAElD,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,yBAAyB,IAAI,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,gBAAgB,oBAAoB,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;YAEzF,oCAAoC;YACpC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;gBAClC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,qDAAqD;YACvD,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE;gBACpD,eAAe,EAAE,MAAM,CAAC,QAAQ;gBAChC,SAAS,EAAE,MAAM,CAAC,UAAU;aAC7B,CAAC,CAAC;YAEH,MAAM,YAAY,CAAC,GAAG,EAAE;gBACtB,KAAK,EAAE;oBACL,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B;aACF,CAAC,CAAC;YAEH,MAAM,CAAC;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,OAAO;gBACf,WAAW,EAAE,GAAG;gBAChB,OAAO,EAAE,oDAAoD,WAAW,kBAAkB,GAAG,GAAG;aACjG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;gBAChC,WAAW,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;gBACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,KAAK,EAAE,KAA8B,EAAE,GAAY,EAAE,EAAE;QAC7D,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAC3B,+DAA+D;QAC/D,2CAA2C;QAC3C,MAAM,eAAe,EAAE,CAAC;QACxB,MAAM,CAAC;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,GAAG;YAChB,OAAO,EAAE,wCAAwC,GAAG,GAAG;SACxD,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,qCAAqC,CAAC;SAClD,MAAM,CAAC,KAAK,EAAE,KAA8B,EAAE,GAAY,EAAE,EAAE;QAC7D,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAEpD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC;gBACL,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,GAAG;gBAChB,OAAO,EAAE,8CAA8C,GAAG,mCAAmC,GAAG,0BAA0B;aAC3H,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;YACnC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvD,CAAC,CAAC,KAAK,CAAC;QAEV,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;gBAC5B,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,QAAQ,CAAC;QAEf,MAAM,IAAI,GAA4B;YACpC,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,GAAG;YAChB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,MAAM;YACb,MAAM;SACP,CAAC;QAEF,sFAAsF;QACtF,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,MAAM,EAAE,KAAK,CAAC;YAClE,IAAI,KAAK,EAAE,UAAU,EAAE,CAAC;gBACtB,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,CAAC;oBACjD,IAAI,CAAC,YAAY,CAAC,GAAG,GAAG,OAAO,UAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACtE,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,YAAY,CAAC,GAAG,6CAA6C,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,cAAc,EACd,WAAW,GAEZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAsB,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,wEAAwE;AACxE,8EAA8E;AAC9E,MAAM,cAAc,GAAG,+CAA+C,CAAC;AAEvE;;;;GAIG;AACH,KAAK,UAAU,UAAU,CAAC,GAAgB,EAAE,KAAa,EAAE,OAAsB;IAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,WAAW,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,qCAAqC,cAAc,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QACjH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,WAAW,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,gDAAgD,cAAc,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QAC5H,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,YAAY,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC;QACL,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,GAAG;QAChB,OAAO,EAAE,oBAAoB,WAAW,kBAAkB,GAAG,GAAG;KACjE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAEzC,IAAI;SACD,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,6DAA6D,cAAc,GAAG,CAAC;SAC3F,MAAM,CAAC,eAAe,EAAE,iDAAiD,CAAC;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;SAC1E,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,mDAAmD,CAAC,CAAC,QAAQ,EAAE,CAAC;SAChG,MAAM,CAAC,KAAK,EAAE,IAA6B,EAAE,GAAY,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtC,2EAA2E;QAC3E,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAE1D,yEAAyE;QACzE,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClB,WAAW,CAAC;gBACV,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,4EAA4E,cAAc,gDAAgD;aACpJ,EAAE,OAAO,CAAC,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,kDAAkD;QAClD,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChB,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAW,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,oCAAoC;QACpC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,sCAAsC,CAAC,CAAC;QACvE,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,KAAK,EAAE,KAA8B,EAAE,GAAY,EAAE,EAAE;QAC7D,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAC3B,+DAA+D;QAC/D,2CAA2C;QAC3C,MAAM,eAAe,EAAE,CAAC;QACxB,MAAM,CAAC;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,GAAG;YAChB,OAAO,EAAE,wCAAwC,GAAG,GAAG;SACxD,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,qCAAqC,CAAC;SAClD,MAAM,CAAC,KAAK,EAAE,KAA8B,EAAE,GAAY,EAAE,EAAE;QAC7D,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAEpD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC;gBACL,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,GAAG;gBAChB,OAAO,EAAE,8CAA8C,GAAG,mCAAmC,GAAG,0BAA0B;aAC3H,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;YACnC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvD,CAAC,CAAC,KAAK,CAAC;QAEV,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;gBAC5B,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,QAAQ,CAAC;QAEf,MAAM,IAAI,GAA4B;YACpC,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,GAAG;YAChB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,MAAM;YACb,MAAM;SACP,CAAC;QAEF,2EAA2E;QAC3E,mEAAmE;QACnE,wEAAwE;QACxE,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,MAAM,EAAE,KAAK,CAAC;YAClE,IAAI,KAAK,EAAE,UAAU,EAAE,CAAC;gBACtB,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,CAAC;oBACjD,IAAI,CAAC,YAAY,CAAC,GAAG,GAAG,OAAO,UAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACtE,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,YAAY,CAAC,GAAG,6CAA6C,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/auth/prompt.d.ts

@@ -1,14 +1,5 @@
-interface Choice<T> {
-    readonly label: string;
-    readonly value: T;
-}
-/**
- * Interactive numbered-menu prompt. Returns selected value.
- */
-export declare function promptChoice<T>(question: string, choices: ReadonlyArray<Choice<T>>): Promise<T>;
 /**
  * Simple text prompt. Returns trimmed input.
  */
 export declare function promptText(question: string): Promise<string>;
-export {};
 //# sourceMappingURL=prompt.d.ts.map

package/dist/commands/auth/prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/prompt.ts"],"names":[],"mappings":"AAEA,UAAU,MAAM,CAAC,CAAC;IAChB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;CACnB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAgBrG;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQlE"}
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/prompt.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQlE"}

package/dist/commands/auth/prompt.js

@@ -1,22 +1,4 @@
 import { createInterface } from 'node:readline';
-/**
- * Interactive numbered-menu prompt. Returns selected value.
- */
-export async function promptChoice(question, choices) {
-    const rl = createInterface({ input: process.stdin, output: process.stdout });
-    const menu = choices.map((c, i) => `  ${i + 1}) ${c.label}`).join('\n');
-    return new Promise((resolve, reject) => {
-        rl.question(`${question}\n${menu}\n\nChoice: `, (answer) => {
-            rl.close();
-            const index = parseInt(answer.trim(), 10) - 1;
-            if (isNaN(index) || index < 0 || index >= choices.length) {
-                reject(new Error('Invalid choice'));
-                return;
-            }
-            resolve(choices[index].value);
-        });
-    });
-}
 /**
  * Simple text prompt. Returns trimmed input.
  */

package/dist/commands/auth/prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../../src/commands/auth/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAOhD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,QAAgB,EAAE,OAAiC;IACvF,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE7E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAExE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,KAAK,IAAI,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE;YACzD,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAE,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACrC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../../src/commands/auth/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACrC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/checkout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../src/commands/checkout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuB9D"}
+{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../src/commands/checkout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6B9D"}

package/dist/commands/checkout.js

@@ -1,13 +1,18 @@
-import { withClient, output } from './shared.js';
+import { withClient, output, userIntentOption } from './shared.js';
+import { printPriceChangeNotices } from '../output/price-change.js';
 export function registerCheckoutCommand(program) {
     program
         .command('checkout')
         .summary('Checkout a trip — returns a checkout URL the user opens to pay, plus agent payment params')
         .description('Finalize a finalized trip. Use it once the trip is set and traveler details are filled in, for example after the user picks a Paris to Tokyo round trip and adds a hotel for the stay. The response carries two payment paths: `checkout_url` is what a human opens in a browser to pay, and `agent_spt_params` (max amount, currency, profile) is what an agent uses to mint a Shared Payment Token and pay programmatically via `agent-pay submit`.')
         .requiredOption('--trip-id <id>', 'trip ID (from trip command) [required]')
+        .addOption(userIntentOption())
         .action(withClient(async (client, globals, opts) => {
         const response = await client.checkout(opts.tripId);
         output(response, { format: globals.format });
+        // Last thing the user reads before they open checkout_url: the price
+        // they are about to pay is not the one they were shown in search.
+        printPriceChangeNotices(response);
     }));
     // DEPRECATED alias — `book` was renamed to `checkout` (JIN-1131). Kept so
     // existing scripts keep working; mcp-apps still exposes `book`.
@@ -15,9 +20,11 @@ export function registerCheckoutCommand(program) {
         .command('book', { hidden: true })
         .summary('DEPRECATED — use `checkout`. Alias retained for backward compatibility.')
         .requiredOption('--trip-id <id>', 'trip ID (from trip command) [required]')
+        .addOption(userIntentOption())
         .action(withClient(async (client, globals, opts) => {
         const response = await client.book(opts.tripId);
         output(response, { format: globals.format });
+        printPriceChangeNotices(response);
     }));
 }
 //# sourceMappingURL=checkout.js.map

package/dist/commands/checkout.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkout.js","sourceRoot":"","sources":["../../src/commands/checkout.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,OAAO;SACJ,OAAO,CAAC,UAAU,CAAC;SACnB,OAAO,CAAC,2FAA2F,CAAC;SACpG,WAAW,CACV,ubAAub,CACxb;SACA,cAAc,CAAC,gBAAgB,EAAE,wCAAwC,CAAC;SAC1E,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACjD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC,CAAC;IAEN,0EAA0E;IAC1E,gEAAgE;IAChE,OAAO;SACJ,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SACjC,OAAO,CAAC,yEAAyE,CAAC;SAClF,cAAc,CAAC,gBAAgB,EAAE,wCAAwC,CAAC;SAC1E,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACjD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC,CAAC;AACR,CAAC"}
+{"version":3,"file":"checkout.js","sourceRoot":"","sources":["../../src/commands/checkout.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,OAAO;SACJ,OAAO,CAAC,UAAU,CAAC;SACnB,OAAO,CAAC,2FAA2F,CAAC;SACpG,WAAW,CACV,ubAAub,CACxb;SACA,cAAc,CAAC,gBAAgB,EAAE,wCAAwC,CAAC;SAC1E,SAAS,CAAC,gBAAgB,EAAE,CAAC;SAC7B,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACjD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7C,qEAAqE;QACrE,kEAAkE;QAClE,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC,CAAC;IAEN,0EAA0E;IAC1E,gEAAgE;IAChE,OAAO;SACJ,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SACjC,OAAO,CAAC,yEAAyE,CAAC;SAClF,cAAc,CAAC,gBAAgB,EAAE,wCAAwC,CAAC;SAC1E,SAAS,CAAC,gBAAgB,EAAE,CAAC;SAC7B,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACjD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7C,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/commands/exchange.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exchange.d.ts","sourceRoot":"","sources":["../../src/commands/exchange.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuF9D"}
+{"version":3,"file":"exchange.d.ts","sourceRoot":"","sources":["../../src/commands/exchange.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAqF9D"}