@knowzai/cli 0.1.0 → 0.3.0

package/dist/commands/knowledge/create.js

@@ -3,6 +3,8 @@ import { KnowzError, ExitCode } from '@knowzai/core';
 import { BaseCommand } from '../../base-command.js';
 import { resolveContentInput } from '../../lib/content.js';
 import { pollUntilTerminal, isTerminalStatus } from '../../lib/poll.js';
+import { uploadAndAttach, assertReadableFiles, applyAttachExitCode, } from '../../lib/attach.js';
+import { assertNoRawUploadUnderCmek, encryptOutboundContent } from '../../lib/cmek-guard.js';
 const TYPES = ['Note', 'Document', 'Code', 'Link', 'File'];
 export default class KnowledgeCreate extends BaseCommand {
     static description = 'Create a knowledge item (content from --content, --file, or stdin).';
@@ -13,6 +15,12 @@ export default class KnowledgeCreate extends BaseCommand {
         file: Flags.file({ description: 'Read content from a file', exists: true }),
         type: Flags.string({ description: 'Knowledge type', options: TYPES, default: 'Note' }),
         tag: Flags.string({ description: 'Tag (repeatable)', multiple: true }),
+        attach: Flags.file({
+            description: 'Upload a local file and attach it to the new item (repeatable)',
+            multiple: true,
+            exists: true,
+        }),
+        passphrase: Flags.string({ description: 'CMEK passphrase (if the profile is CMEK-enabled)' }),
         wait: Flags.boolean({ description: 'Poll until enrichment reaches a terminal state' }),
     };
     async run() {
@@ -20,26 +28,40 @@ export default class KnowledgeCreate extends BaseCommand {
         const title = args.title ?? flags.title;
         if (!title)
             throw new KnowzError('A title is required (positional or --title).', ExitCode.Usage);
+        const encryptor = this.cmekEncryptor(flags);
+        // H4 — refuse before the item exists, so a CMEK profile never ends up with a
+        // half-created item plus a plaintext attachment in the cloud.
+        if (flags.attach?.length)
+            assertNoRawUploadUnderCmek(encryptor, '--attach');
         const client = await this.apiClient(flags);
         const content = await resolveContentInput({ content: flags.content, file: flags.file });
         const vaultId = await this.resolveVaultId(client, flags);
         const created = await client.knowledge.create({
             vaultId,
             title,
-            content,
+            // H4 — this direct write bypassed CMEK entirely; encrypt before the
+            // content leaves the machine, exactly as `sync push` does.
+            content: encryptOutboundContent(encryptor, content),
             type: flags.type,
             tags: flags.tag,
         });
         if (!this.jsonEnabled())
             this.log(created.id);
+        // Attach before any --wait poll, so enrichment is observed with the files linked.
+        let attachments;
+        if (flags.attach?.length) {
+            assertReadableFiles(flags.attach);
+            attachments = await uploadAndAttach(client, created.id, flags.attach);
+            applyAttachExitCode(attachments);
+        }
         if (flags.wait) {
             const status = await pollUntilTerminal(() => client.knowledge.status(created.id), (s) => isTerminalStatus(s.enrichmentStatus), { label: 'enrichment' });
             if (this.jsonEnabled())
-                return status;
+                return attachments ? { ...status, attachments } : status;
             this.log(`status: ${status.enrichmentStatus}`);
-            return status;
+            return attachments ? { ...status, attachments } : status;
         }
-        return created;
+        return attachments ? { ...created, attachments } : created;
     }
 }
 //# sourceMappingURL=create.js.map

package/dist/commands/knowledge/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/commands/knowledge/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAExE,MAAM,KAAK,GAAoB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE5E,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IACtD,MAAM,CAAU,WAAW,GAAG,qEAAqE,CAAC;IACpG,MAAM,CAAU,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;IAClF,MAAM,CAAU,KAAK,GAAG;QACtB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;QACjF,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QACtD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC3E,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACtF,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACtE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC;KACvF,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,8CAA8C,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEjG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YAC5C,OAAO;YACP,KAAK;YACL,OAAO;YACP,IAAI,EAAE,KAAK,CAAC,IAAqB;YACjC,IAAI,EAAE,KAAK,CAAC,GAAG;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAE9C,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,MAAM,GAAoB,MAAM,iBAAiB,CACrD,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EACzC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAC3C,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;YACF,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO,MAAM,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC/C,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/commands/knowledge/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAE7F,MAAM,KAAK,GAAoB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAK5E,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IACtD,MAAM,CAAU,WAAW,GAAG,qEAAqE,CAAC;IACpG,MAAM,CAAU,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;IAClF,MAAM,CAAU,KAAK,GAAG;QACtB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;QACjF,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QACtD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC3E,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACtF,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACtE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;YACjB,WAAW,EAAE,gEAAgE;YAC7E,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;SACb,CAAC;QACF,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kDAAkD,EAAE,CAAC;QAC7F,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC;KACvF,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,8CAA8C,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEjG,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5C,6EAA6E;QAC7E,8DAA8D;QAC9D,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM;YAAE,0BAA0B,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YAC5C,OAAO;YACP,KAAK;YACL,oEAAoE;YACpE,2DAA2D;YAC3D,OAAO,EAAE,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC;YACnD,IAAI,EAAE,KAAK,CAAC,IAAqB;YACjC,IAAI,EAAE,KAAK,CAAC,GAAG;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAE9C,kFAAkF;QAClF,IAAI,WAAuC,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YACzB,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClC,WAAW,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACtE,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,MAAM,GAAoB,MAAM,iBAAiB,CACrD,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EACzC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAC3C,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;YACF,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YACjF,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC/C,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3D,CAAC;QACD,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7D,CAAC"}

package/dist/commands/knowledge/update.d.ts

@@ -10,6 +10,7 @@ export default class KnowledgeUpdate extends BaseCommand {
         content: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         file: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         tag: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        passphrase: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<KnowledgeDetail>;
 }

package/dist/commands/knowledge/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/commands/knowledge/update.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IACtD,OAAgB,WAAW,SAA+D;IAC1F,OAAgB,IAAI;;MAAwE;IAC5F,OAAgB,KAAK;;;;;MAKnB;IAEI,GAAG,IAAI,OAAO,CAAC,eAAe,CAAC;CAkBtC"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/commands/knowledge/update.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IACtD,OAAgB,WAAW,SAA+D;IAC1F,OAAgB,IAAI;;MAAwE;IAC5F,OAAgB,KAAK;;;;;;MAMnB;IAEI,GAAG,IAAI,OAAO,CAAC,eAAe,CAAC;CAmBtC"}

package/dist/commands/knowledge/update.js

@@ -1,6 +1,7 @@
 import { Args, Flags } from '@oclif/core';
 import { BaseCommand } from '../../base-command.js';
 import { resolveContentInput } from '../../lib/content.js';
+import { encryptOutboundContent } from '../../lib/cmek-guard.js';
 export default class KnowledgeUpdate extends BaseCommand {
     static description = 'Update a knowledge item (title, content, tags, or vault).';
     static args = { id: Args.string({ description: 'Knowledge id', required: true }) };
@@ -9,6 +10,7 @@ export default class KnowledgeUpdate extends BaseCommand {
         content: Flags.string({ description: 'New content text' }),
         file: Flags.file({ description: 'Read new content from a file', exists: true }),
         tag: Flags.string({ description: 'Replace tags (repeatable)', multiple: true }),
+        passphrase: Flags.string({ description: 'CMEK passphrase (if the profile is CMEK-enabled)' }),
     };
     async run() {
         const { args, flags } = await this.parse(KnowledgeUpdate);
@@ -19,7 +21,8 @@ export default class KnowledgeUpdate extends BaseCommand {
         const vaultId = flags.vault ? await this.resolveVaultId(client, flags) : undefined;
         const updated = await client.knowledge.update(args.id, {
             title: flags.title,
-            content,
+            // H4 — encrypt before the content leaves the machine when CMEK is on.
+            content: encryptOutboundContent(this.cmekEncryptor(flags), content),
             tags: flags.tag,
             vaultId,
         });

package/dist/commands/knowledge/update.js.map

@@ -1 +1 @@
-{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../src/commands/knowledge/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IACtD,MAAM,CAAU,WAAW,GAAG,2DAA2D,CAAC;IAC1F,MAAM,CAAU,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5F,MAAM,CAAU,KAAK,GAAG;QACtB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QACjD,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;QAC1D,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC/E,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KAChF,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI;YACvC,CAAC,CAAC,MAAM,mBAAmB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACzE,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;YACrD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO;YACP,IAAI,EAAE,KAAK,CAAC,GAAG;YACf,OAAO;SACR,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,OAAO,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;QACxD,OAAO,OAAO,CAAC;IACjB,CAAC"}
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../src/commands/knowledge/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IACtD,MAAM,CAAU,WAAW,GAAG,2DAA2D,CAAC;IAC1F,MAAM,CAAU,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5F,MAAM,CAAU,KAAK,GAAG;QACtB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QACjD,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;QAC1D,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC/E,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kDAAkD,EAAE,CAAC;KAC9F,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI;YACvC,CAAC,CAAC,MAAM,mBAAmB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACzE,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;YACrD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,sEAAsE;YACtE,OAAO,EAAE,sBAAsB,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;YACnE,IAAI,EAAE,KAAK,CAAC,GAAG;YACf,OAAO;SACR,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,OAAO,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;QACxD,OAAO,OAAO,CAAC;IACjB,CAAC"}

package/dist/commands/login.d.ts

@@ -1,9 +1,23 @@
 import { BaseCommand } from '../base-command.js';
 import { type LoginResult } from '../lib/login.js';
+export declare function resolveRegistrationPassword(flags: {
+    password?: string;
+    'password-stdin'?: boolean;
+}, env: Readonly<Record<string, string | undefined>>, deps: {
+    readStdin: () => Promise<string>;
+    isTty: boolean;
+    prompt: () => Promise<string>;
+}): Promise<{
+    password: string;
+    source: 'env' | 'stdin' | 'flag' | 'prompt';
+}>;
 export default class Login extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
+        sso: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        oauth: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'no-open': import("@oclif/core/interfaces").BooleanFlag<boolean>;
         register: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         'self-hosted': import("@oclif/core/interfaces").BooleanFlag<boolean>;
         key: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
@@ -12,12 +26,14 @@ export default class Login extends BaseCommand {
         email: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         name: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         password: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'password-stdin': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'age-13-plus': import("@oclif/core/interfaces").BooleanFlag<boolean>;
         force: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<LoginResult>;
-    /** Non-interactive / flag-driven input (scripts, --key-stdin, --register …). Unchanged behavior. */
+    /** Device-code SSO → minted ukz_ key, then the regular verify-and-store path. */
+    private completeSso;
+    /** Non-interactive / flag-driven input (scripts, --key-stdin, --register, --sso …). */
     private flagLogin;
-    /** Guided sign-in: pick a method, then collect inputs with helpful validation. */
-    private guidedLogin;
 }
 //# sourceMappingURL=login.d.ts.map

package/dist/commands/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAiC,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAyBlF,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,WAAW;IAC5C,OAAgB,WAAW,SACmF;IAC9G,OAAgB,QAAQ,WAKtB;IACF,OAAgB,KAAK;;;;;;;;;;MAYnB;IAEI,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC;IAkCjC,oGAAoG;YACtF,SAAS;IAiCvB,kFAAkF;YACpE,WAAW;CAqC1B"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAA8C,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAK/F,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,EACxD,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACjD,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;CAAE,GACxF,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAA;CAAE,CAAC,CAgB5E;AAED,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,WAAW;IAC5C,OAAgB,WAAW,SACgG;IAC3H,OAAgB,QAAQ,WAOtB;IACF,OAAgB,KAAK;;;;;;;;;;;;;;;MAiCnB;IAEI,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC;IAsDjC,iFAAiF;YACnE,WAAW;IAmBzB,uFAAuF;YACzE,SAAS;CAuExB"}

package/dist/commands/login.js

@@ -1,39 +1,53 @@
 import { Flags } from '@oclif/core';
-import { loadConfig, saveConfig, resolveProfileName, resolveApiUrl, enforceTls, logger, registerSecret, validateKeyFormat, KnowzError, ExitCode, } from '@knowzai/core';
+import { hostname } from 'node:os';
+import { loadConfig, saveConfig, resolveProfileName, resolveApiUrlInfo, formatApiUrlSourceNotices, enforceTls, logger, registerSecret, KnowzError, ExitCode, } from '@knowzai/core';
 import { createApiClient } from '@knowzai/api-client';
+import { guidedLogin, replaceConfirmer } from '../lib/login-guided.js';
 import { BaseCommand } from '../base-command.js';
-import { performLogin } from '../lib/login.js';
-import { readKeyFromStdin, promptHidden } from '../lib/prompt.js';
-/**
- * If a key doesn't start with a known prefix but contains one, the user almost
- * certainly pasted a stray leading character (e.g. "Vukz_…"). Tell them exactly.
- */
-function keyHint(key) {
-    for (const prefix of ['kzin_', 'ukz_', 'kz_', 'ksh_', 'sh-']) {
-        const i = key.indexOf(prefix);
-        if (i > 0) {
-            return `it looks like there ${i === 1 ? 'is' : 'are'} ${i} stray character${i === 1 ? '' : 's'} before "${prefix}" — remove the leading "${key.slice(0, i)}"`;
-        }
+import { performLogin, tenantLabel } from '../lib/login.js';
+import { readKeyFromStdin, readStdinText, promptHidden } from '../lib/prompt.js';
+import { openBrowser } from '../lib/browser.js';
+import { runCliSsoLogin } from '../lib/sso-login.js';
+export async function resolveRegistrationPassword(flags, env, deps) {
+    const fromEnv = env.KNOWZ_PASSWORD?.trim();
+    if (fromEnv)
+        return { password: fromEnv, source: 'env' };
+    if (flags['password-stdin']) {
+        const fromStdin = (await deps.readStdin()).trim();
+        if (fromStdin)
+            return { password: fromStdin, source: 'stdin' };
     }
-    return undefined;
-}
-/** Human-readable validation message for a rejected key (prefix + near-miss hint). */
-function explainKey(key) {
-    const r = validateKeyFormat(key.trim());
-    if (r.ok)
-        return true;
-    const hint = keyHint(key.trim());
-    return `${r.reason}${hint ? ` — ${hint}` : ''}`;
+    if (flags.password)
+        return { password: flags.password, source: 'flag' };
+    if (deps.isTty) {
+        const prompted = (await deps.prompt()).trim();
+        if (prompted)
+            return { password: prompted, source: 'prompt' };
+    }
+    throw new KnowzError('No registration password provided. Use KNOWZ_PASSWORD or --password-stdin.', ExitCode.Usage);
 }
 export default class Login extends BaseCommand {
-    static description = 'Authenticate: paste an API key, register a new tenant, or use a self-hosted key. Verifies before storing.';
+    static description = 'Authenticate: browser SSO, paste an API key, register a new tenant, or use a self-hosted key. Verifies before storing.';
     static examples = [
         '<%= config.bin %> login                # guided sign-in (pick a method)',
+        '<%= config.bin %> login --sso          # browser SSO (device authorization)',
         '<%= config.bin %> login --key-stdin    # echo $KEY | knowz login --key-stdin',
-        '<%= config.bin %> login --register --name "Me" --email me@example.com',
+        'printf \'%s\\n\' "$KNOWZ_PASSWORD" | <%= config.bin %> login --register --name "Me" --email me@example.com --password-stdin --age-13-plus',
         '<%= config.bin %> login --self-hosted --api-url http://localhost:5000 --key-stdin',
+        '<%= config.bin %> login --profile work --force  # re-point a profile already registered to another tenant',
     ];
     static flags = {
+        sso: Flags.boolean({
+            description: 'Sign in via browser SSO (device authorization). Mints a user API key and stores it durably.',
+            exclusive: ['register', 'self-hosted', 'key', 'key-stdin'],
+        }),
+        oauth: Flags.boolean({
+            description: 'Alias of --sso (device-authorization browser sign-in)',
+            exclusive: ['register', 'self-hosted', 'key', 'key-stdin', 'sso'],
+        }),
+        'no-open': Flags.boolean({
+            description: 'With --sso, do not open a browser; print the verification URL and user code',
+        }),
         register: Flags.boolean({ description: 'Register a new tenant' }),
         'self-hosted': Flags.boolean({ description: 'Use a self-hosted key' }),
         key: Flags.string({ description: 'API key (prefer --key-stdin; flags leak via shell history)' }),
@@ -43,41 +57,86 @@ export default class Login extends BaseCommand {
         }),
         email: Flags.string({ description: 'Email (with --register)' }),
         name: Flags.string({ description: 'Name (with --register)' }),
-        password: Flags.string({ description: 'Password (with --register)' }),
-        force: Flags.boolean({ description: 'Overwrite an existing different-tenant profile' }),
+        password: Flags.string({
+            description: 'Password (with --register; prefer env or --password-stdin because flags leak via shell history)',
+        }),
+        'password-stdin': Flags.boolean({ description: 'Read the registration password from stdin' }),
+        'age-13-plus': Flags.boolean({
+            description: 'Confirm you are at least 13 years old (required to register)',
+        }),
+        force: Flags.boolean({
+            description: 'Replace the credentials a profile is already registered with (also honored by the guided sign-in)',
+        }),
     };
     async run() {
         const { flags } = await this.parse(Login);
         const cfg = loadConfig();
         const profile = resolveProfileName({ profileFlag: flags.profile }, cfg);
-        const apiUrl = resolveApiUrl({ apiUrlFlag: flags['api-url'], profileFlag: flags.profile }, cfg);
+        const urlInfo = resolveApiUrlInfo({ apiUrlFlag: flags['api-url'], profileFlag: flags.profile }, cfg);
+        const apiUrl = urlInfo.url;
+        if (!this.jsonEnabled()) {
+            for (const line of formatApiUrlSourceNotices(urlInfo))
+                this.log(line);
+        }
         const store = (await this.authState(flags)).store;
         // Guided interactive sign-in: no mode/key flags, a real terminal, human output.
-        const noFlags = !flags.register && !flags['self-hosted'] && !flags.key && !flags['key-stdin'];
-        const input = noFlags && process.stdin.isTTY && !this.jsonEnabled()
-            ? await this.guidedLogin(profile, apiUrl)
+        const noFlags = !flags.register && !flags['self-hosted'] && !flags.key && !flags['key-stdin'] && !flags.sso && !flags.oauth;
+        let input = noFlags && process.stdin.isTTY && !this.jsonEnabled()
+            ? await guidedLogin(profile, apiUrl, flags.force, (line) => this.log(line))
             : await this.flagLogin(flags, profile, apiUrl);
+        if (input.mode === 'sso') {
+            input = await this.completeSso(input, flags['no-open']);
+        }
         if (input.key)
             registerSecret(input.key);
         if (flags.password)
             registerSecret(flags.password);
         enforceTls(input.apiUrl);
         const anon = createApiClient({ baseUrl: input.apiUrl });
+        const confirmReplace = replaceConfirmer({ isTty: process.stdin.isTTY === true, json: this.jsonEnabled() });
         const res = await performLogin(input, {
             store,
             config: cfg,
             saveConfig,
             validateKey: (apiKey) => anon.auth.validateKey({ apiKey }),
             register: (req) => anon.auth.register(req),
+            signIn: (req) => anon.auth.login(req),
+            createApiKey: (req, token) => anon.apiKeys.create(req, { token }),
+            ...(confirmReplace ? { confirmReplace } : {}),
         });
         if (this.jsonEnabled())
             return res;
-        this.log(`✓ Logged in to profile '${res.profile}' (${res.keyType ?? 'key'})${res.tenantId ? ` — tenant ${res.tenantId}` : ''}.`);
+        const tenant = tenantLabel({ id: res.tenantId, name: res.tenantName });
+        this.log(`✓ Logged in to profile '${res.profile}' (${res.keyType ?? 'key'})${res.tenantId || res.tenantName ? ` — tenant ${res.tenantName ?? tenant}` : ''}.`);
+        if (res.alreadyRegistered) {
+            this.log(`  This profile was already registered to ${tenant}; its stored key was replaced.`);
+        }
+        if (res.createdApiKey) {
+            this.log('  A new API key was created for this machine (manage it under Settings → API keys).');
+        }
         return res;
     }
-    /** Non-interactive / flag-driven input (scripts, --key-stdin, --register …). Unchanged behavior. */
+    /** Device-code SSO → minted ukz_ key, then the regular verify-and-store path. */
+    async completeSso(input, noOpen) {
+        const minted = await runCliSsoLogin(input.apiUrl, {
+            fetch: globalThis.fetch,
+            openBrowser,
+            now: Date.now,
+            sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
+            emit: (line) => (this.jsonEnabled() ? this.logToStderr(line) : this.log(line)),
+        }, {
+            noOpen,
+            clientName: `Knowz CLI (${input.profile}@${hostname()})`,
+        });
+        registerSecret(minted.credential);
+        return { ...input, mode: 'paste', key: minted.credential };
+    }
+    /** Non-interactive / flag-driven input (scripts, --key-stdin, --register, --sso …). */
     async flagLogin(flags, profile, apiUrl) {
         enforceTls(apiUrl);
+        if (flags.sso || flags.oauth) {
+            return { profile, apiUrl, mode: 'sso', force: flags.force };
+        }
         const mode = flags.register ? 'register' : flags['self-hosted'] ? 'self-hosted' : 'paste';
         let key;
         if (mode !== 'register') {
@@ -92,9 +151,22 @@ export default class Login extends BaseCommand {
                 key = await promptHidden('API key: ');
             }
             else {
-                throw new KnowzError('No API key provided. Use --key-stdin or --key.', ExitCode.Usage);
+                throw new KnowzError('No API key provided. Use --sso, --key-stdin, or --key.', ExitCode.Usage);
             }
         }
+        let registrationPassword;
+        if (mode === 'register') {
+            const resolved = await resolveRegistrationPassword(flags, process.env, {
+                readStdin: readStdinText,
+                isTty: process.stdin.isTTY === true,
+                prompt: () => promptHidden('Password: '),
+            });
+            registrationPassword = resolved.password;
+            if (resolved.source === 'flag') {
+                logger.warn('Passing --password on the command line can leak via shell history; prefer KNOWZ_PASSWORD or --password-stdin.');
+            }
+            registerSecret(registrationPassword);
+        }
         return {
             profile,
             apiUrl,
@@ -102,38 +174,15 @@ export default class Login extends BaseCommand {
             key,
             storeTenantKey: flags['store-tenant-key'],
             force: flags.force,
-            register: mode === 'register' ? { name: flags.name ?? '', email: flags.email ?? '', password: flags.password } : undefined,
+            register: mode === 'register'
+                ? {
+                    name: flags.name ?? '',
+                    email: flags.email ?? '',
+                    password: registrationPassword,
+                    ageAttested: flags['age-13-plus'],
+                }
+                : undefined,
         };
     }
-    /** Guided sign-in: pick a method, then collect inputs with helpful validation. */
-    async guidedLogin(profile, apiUrl) {
-        const { select, input: ask, password } = await import('@inquirer/prompts');
-        this.log(`\nSign in to Knowz  ·  profile '${profile}'  →  ${apiUrl}`);
-        this.log("Don't have a key yet? Choose “Register” to create an account.\n");
-        const method = await select({
-            message: 'How do you want to sign in?',
-            choices: [
-                { name: 'Paste an existing API key', value: 'paste', description: 'You already have a ukz_ or kz_ key' },
-                { name: 'Register a new account', value: 'register', description: 'Create a tenant and get a key' },
-                { name: 'Connect a self-hosted instance', value: 'self', description: 'Point at your own Knowz host' },
-            ],
-        });
-        if (method === 'register') {
-            const name = (await ask({ message: 'Your name', required: true })).trim();
-            const email = (await ask({ message: 'Email', required: true })).trim();
-            const pw = (await password({ message: 'Password (optional — press enter to skip)' })).trim();
-            return { profile, apiUrl, mode: 'register', register: { name, email, password: pw || undefined } };
-        }
-        let url = apiUrl;
-        if (method === 'self') {
-            url = (await ask({ message: 'API base URL', default: apiUrl, required: true })).trim();
-            enforceTls(url); // fail fast with a clear message before asking for the key
-        }
-        const key = (await password({
-            message: 'Paste your API key (input is hidden; starts with ukz_ or kz_)',
-            validate: (v) => explainKey(v),
-        })).trim();
-        return { profile, apiUrl: url, mode: method === 'self' ? 'self-hosted' : 'paste', key };
-    }
 }
 //# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EACL,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,MAAM,EACN,cAAc,EACd,iBAAiB,EACjB,UAAU,EACV,QAAQ,GACT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAqC,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAElE;;;GAGG;AACH,SAAS,OAAO,CAAC,GAAW;IAC1B,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,MAAM,2BAA2B,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;QAChK,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,sFAAsF;AACtF,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,WAAW;IAC5C,MAAM,CAAU,WAAW,GACzB,2GAA2G,CAAC;IAC9G,MAAM,CAAU,QAAQ,GAAG;QACzB,yEAAyE;QACzE,8EAA8E;QAC9E,uEAAuE;QACvE,mFAAmF;KACpF,CAAC;IACF,MAAM,CAAU,KAAK,GAAG;QACtB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;QACjE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;QACtE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,4DAA4D,EAAE,CAAC;QAChG,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;QAC1E,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC;YAChC,WAAW,EAAE,wEAAwE;SACtF,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;QAC/D,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;QAC7D,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;QACrE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC;KACxF,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAChG,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAElD,gFAAgF;QAChF,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9F,MAAM,KAAK,GACT,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YACnD,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC;YACzC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEnD,IAAI,KAAK,CAAC,GAAG;YAAE,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,QAAQ;YAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEnD,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE;YACpC,KAAK;YACL,MAAM,EAAE,GAAG;YACX,UAAU;YACV,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;YAC1D,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;SAC3C,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,GAAG,CAAC;QACnC,IAAI,CAAC,GAAG,CACN,2BAA2B,GAAG,CAAC,OAAO,MAAM,GAAG,CAAC,OAAO,IAAI,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CACvH,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,oGAAoG;IAC5F,KAAK,CAAC,SAAS,CACrB,KAA4L,EAC5L,OAAe,EACf,MAAc;QAEd,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;QAE1F,IAAI,GAAuB,CAAC;QAC5B,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;gBACjG,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;YAClB,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9B,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAC;YACjC,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,GAAG,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,UAAU,CAAC,gDAAgD,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO;YACP,MAAM;YACN,IAAI;YACJ,GAAG;YACH,cAAc,EAAE,KAAK,CAAC,kBAAkB,CAAC;YACzC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;SAC3H,CAAC;IACJ,CAAC;IAED,kFAAkF;IAC1E,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,MAAc;QACvD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAE3E,IAAI,CAAC,GAAG,CAAC,mCAAmC,OAAO,SAAS,MAAM,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAgC;YACzD,OAAO,EAAE,6BAA6B;YACtC,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,oCAAoC,EAAE;gBACxG,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,+BAA+B,EAAE;gBACnG,EAAE,IAAI,EAAE,gCAAgC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,8BAA8B,EAAE;aACvG;SACF,CAAC,CAAC;QAEH,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1E,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACvE,MAAM,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7F,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,SAAS,EAAE,EAAE,CAAC;QACrG,CAAC;QAED,IAAI,GAAG,GAAG,MAAM,CAAC;QACjB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACvF,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,2DAA2D;QAC9E,CAAC;QAED,MAAM,GAAG,GAAG,CACV,MAAM,QAAQ,CAAC;YACb,OAAO,EAAE,+DAA+D;YACxE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;SAC/B,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;QAET,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;IAC1F,CAAC"}
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EACL,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,yBAAyB,EACzB,UAAU,EACV,MAAM,EACN,cAAc,EACd,UAAU,EACV,QAAQ,GACT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAqC,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAwD,EACxD,GAAiD,EACjD,IAAyF;IAEzF,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACzD,IAAI,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,SAAS;YAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACxE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,UAAU,CAClB,4EAA4E,EAC5E,QAAQ,CAAC,KAAK,CACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,WAAW;IAC5C,MAAM,CAAU,WAAW,GACzB,wHAAwH,CAAC;IAC3H,MAAM,CAAU,QAAQ,GAAG;QACzB,yEAAyE;QACzE,6EAA6E;QAC7E,8EAA8E;QAC9E,2IAA2I;QAC3I,mFAAmF;QACnF,2GAA2G;KAC5G,CAAC;IACF,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC;YACjB,WAAW,EAAE,6FAA6F;YAC1G,SAAS,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,CAAC;SAC3D,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;YACnB,WAAW,EAAE,uDAAuD;YACpE,SAAS,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC;SAClE,CAAC;QACF,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;YACvB,WAAW,EAAE,6EAA6E;SAC3F,CAAC;QACF,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;QACjE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;QACtE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,4DAA4D,EAAE,CAAC;QAChG,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;QAC1E,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC;YAChC,WAAW,EAAE,wEAAwE;SACtF,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;QAC/D,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;QAC7D,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;YACrB,WAAW,EACT,iGAAiG;SACpG,CAAC;QACF,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;QAC7F,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC;YAC3B,WAAW,EAAE,8DAA8D;SAC5E,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;YACnB,WAAW,EACT,mGAAmG;SACtG,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,KAAK,MAAM,IAAI,IAAI,yBAAyB,CAAC,OAAO,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAElD,gFAAgF;QAChF,MAAM,OAAO,GACX,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9G,IAAI,KAAK,GACP,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YACnD,CAAC,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEnD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACzB,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,KAAK,CAAC,GAAG;YAAE,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,QAAQ;YAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEnD,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,gBAAgB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC3G,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE;YACpC,KAAK;YACL,MAAM,EAAE,GAAG;YACX,UAAU;YACV,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;YAC1D,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC1C,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACrC,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC;YACjE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,GAAG,CAAC;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG,CACN,2BAA2B,GAAG,CAAC,OAAO,MAAM,GAAG,CAAC,OAAO,IAAI,KAAK,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CACrJ,CAAC;QACF,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,4CAA4C,MAAM,gCAAgC,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,iFAAiF;IACzE,KAAK,CAAC,WAAW,CAAC,KAAiB,EAAE,MAAgB;QAC3D,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,KAAK,CAAC,MAAM,EACZ;YACE,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,WAAW;YACX,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SAC/E,EACD;YACE,MAAM;YACN,UAAU,EAAE,cAAc,KAAK,CAAC,OAAO,IAAI,QAAQ,EAAE,GAAG;SACzD,CACF,CAAC;QACF,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAClC,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IAC7D,CAAC;IAED,uFAAuF;IAC/E,KAAK,CAAC,SAAS,CACrB,KAcC,EACD,OAAe,EACf,MAAc;QAEd,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9D,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;QAE1F,IAAI,GAAuB,CAAC;QAC5B,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;gBACjG,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;YAClB,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9B,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAC;YACjC,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,GAAG,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,UAAU,CAAC,wDAAwD,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;QAED,IAAI,oBAAwC,CAAC;QAC7C,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE;gBACrE,SAAS,EAAE,aAAa;gBACxB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;gBACnC,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC;aACzC,CAAC,CAAC;YACH,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,CAAC;YACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,+GAA+G,CAAC,CAAC;YAC/H,CAAC;YACD,cAAc,CAAC,oBAAoB,CAAC,CAAC;QACvC,CAAC;QAED,OAAO;YACL,OAAO;YACP,MAAM;YACN,IAAI;YACJ,GAAG;YACH,cAAc,EAAE,KAAK,CAAC,kBAAkB,CAAC;YACzC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EACN,IAAI,KAAK,UAAU;gBACjB,CAAC,CAAC;oBACE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;oBACtB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;oBACxB,QAAQ,EAAE,oBAAoB;oBAC9B,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC;iBAClC;gBACH,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC"}

package/dist/commands/logout.d.ts

@@ -7,5 +7,7 @@ export default class Logout extends BaseCommand {
     run(): Promise<{
         removed: string;
     }>;
+    /** Clear tenant bindings only for profiles whose credentials were removed. */
+    private forgetTenants;
 }
 //# sourceMappingURL=logout.d.ts.map

package/dist/commands/logout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,WAAW;IAC7C,OAAgB,WAAW,SAAyE;IACpG,OAAgB,KAAK;;MAEnB;IAEI,GAAG,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAY1C"}
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAqBjD,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,WAAW;IAC7C,OAAgB,WAAW,SAC0E;IACrG,OAAgB,KAAK;;MAEnB;IAEI,GAAG,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAmBzC,8EAA8E;IAC9E,OAAO,CAAC,aAAa;CAKtB"}

package/dist/commands/logout.js

@@ -1,23 +1,57 @@
 import { Flags } from '@oclif/core';
+import { loadConfig, saveConfig } from '@knowzai/core';
 import { BaseCommand } from '../base-command.js';
+/**
+ * Drop the tenant binding a profile picked up at login. `apiUrl`, `label`,
+ * `defaultVaultId` and `pgDsn` are the user's own settings and survive — only
+ * the identity the deleted key stood for goes away, so the next `knowz login`
+ * sees a clean profile instead of refusing as "already registered" (#669).
+ */
+function clearTenantBinding(cfg, profiles) {
+    let changed = false;
+    for (const name of profiles) {
+        const profile = cfg.profiles[name];
+        if (!profile)
+            continue;
+        if (profile.tenantId === undefined && profile.email === undefined)
+            continue;
+        const { tenantId: _tenantId, email: _email, ...rest } = profile;
+        cfg.profiles[name] = rest;
+        changed = true;
+    }
+    return changed;
+}
 export default class Logout extends BaseCommand {
-    static description = 'Remove stored credentials for the active profile (or all profiles).';
+    static description = 'Remove stored credentials for the active profile (or all profiles) and clear its tenant binding.';
     static flags = {
         all: Flags.boolean({ description: 'Remove credentials for all profiles' }),
     };
     async run() {
         const { flags } = await this.parse(Logout);
         const auth = await this.authState(flags);
+        // The store delete comes first and is never caught: config must not claim a
+        // logout the keychain refused to perform.
         if (flags.all) {
+            const before = await auth.store.listProfiles();
             await auth.store.deleteAll();
+            const remaining = new Set(await auth.store.listProfiles());
+            this.forgetTenants(before.filter((profile) => !remaining.has(profile)));
             if (!this.jsonEnabled())
                 this.log('Removed credentials for all profiles.');
             return { removed: 'all' };
         }
         await auth.store.deleteSecret(auth.profile);
+        this.forgetTenants(auth.profile);
         if (!this.jsonEnabled())
             this.log(`Logged out of profile '${auth.profile}'.`);
         return { removed: auth.profile };
     }
+    /** Clear tenant bindings only for profiles whose credentials were removed. */
+    forgetTenants(profile) {
+        const cfg = loadConfig();
+        const names = Array.isArray(profile) ? profile : [profile];
+        if (clearTenantBinding(cfg, names))
+            saveConfig(cfg);
+    }
 }
 //# sourceMappingURL=logout.js.map

package/dist/commands/logout.js.map

@@ -1 +1 @@
-{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,WAAW;IAC7C,MAAM,CAAU,WAAW,GAAG,qEAAqE,CAAC;IACpG,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;KAC3E,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YAC3E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAC9E,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC"}
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAoB,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,GAAgB,EAAE,QAAkB;IAC9D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QAC5E,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QAChE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAC1B,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,WAAW;IAC7C,MAAM,CAAU,WAAW,GACzB,kGAAkG,CAAC;IACrG,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;KAC3E,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,4EAA4E;QAC5E,0CAA0C;QAC1C,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACxE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YAC3E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAC9E,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC;IAED,8EAA8E;IACtE,aAAa,CAAC,OAA0B;QAC9C,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC"}

package/dist/commands/mcp/serve.d.ts

@@ -0,0 +1,16 @@
+import { Command } from '@oclif/core';
+import { LocalMcpServer } from '../../lib/local-mcp-server.js';
+export declare function openRepoLocalMcpServer(path: string, maxChars?: number): Promise<{
+    server: LocalMcpServer;
+    close(): Promise<void>;
+}>;
+export default class McpServe extends Command {
+    static id: string;
+    static description: string;
+    static flags: {
+        path: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'max-chars': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=serve.d.ts.map

package/dist/commands/mcp/serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../../src/commands/mcp/serve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAO7C,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAG/D,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,QAAQ,SAAS,GAChB,OAAO,CAAC;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAqB7D;AAED,MAAM,CAAC,OAAO,OAAO,QAAS,SAAQ,OAAO;IAC3C,OAAgB,EAAE,SAAe;IACjC,OAAgB,WAAW,SACmE;IAC9F,OAAgB,KAAK;;;MAGnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAS3B"}