@opvs-ai/cli 0.16.0 → 0.20.1

package/dist/commands/workspace.js

@@ -2,6 +2,7 @@
  * opvs workspace — multi-workspace management
  */
 import { listWorkspaces, setCurrentWorkspace, removeWorkspace, getEffectiveConfig, } from "@opvs-ai/core";
+import { confirmOrExit, YES_HELP } from "../lib/confirm.js";
 export function registerWorkspaceCommands(program) {
     const ws = program.command("workspace").description("Manage workspaces");
     ws.command("list")
@@ -49,8 +50,10 @@ export function registerWorkspaceCommands(program) {
         }
     });
     ws.command("remove <slug>")
-        .description("Remove a saved workspace")
-        .action((slug) => {
+        .description("Remove a saved workspace and its token from this machine (the token stays valid on the server). Asks first; needs --yes off a terminal.")
+        .option("-y, --yes", YES_HELP)
+        .action(async (slug, opts) => {
+        await confirmOrExit(`Remove workspace "${slug}" from this machine?`, opts.yes, "Its saved token is dropped, and getting one back needs a new `opvs auth request` and an approval");
         try {
             removeWorkspace(slug);
             console.log(`Workspace "${slug}" removed.`);

package/dist/commands/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/commands/workspace.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAEvB,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAEzE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACzC,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,IAAI,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAAY,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,4BAA4B,CAAC;SACzC,MAAM,CAAC,GAAG,EAAE;QACX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,UAAU,IAAI,WAAW,SAAS,GAAG,CAAC,QAAQ,IAAI,MAAM,GAAG,CAAC,CAAC;YAC3F,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACtF,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAAY,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,0BAA0B,CAAC;SACvC,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,eAAe,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,YAAY,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAAY,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/commands/workspace.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,kBAAkB,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE5D,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAEzE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACzC,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,IAAI,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAAY,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,4BAA4B,CAAC;SACzC,MAAM,CAAC,GAAG,EAAE;QACX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,UAAU,IAAI,WAAW,SAAS,GAAG,CAAC,QAAQ,IAAI,MAAM,GAAG,CAAC,CAAC;YAC3F,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACtF,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAAY,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,yIAAyI,CAAC;SACtJ,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC;SAC7B,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAAuB,EAAE,EAAE;QACtD,MAAM,aAAa,CACjB,qBAAqB,IAAI,sBAAsB,EAC/C,IAAI,CAAC,GAAG,EACR,kGAAkG,CACnG,CAAC;QACF,IAAI,CAAC;YACH,eAAe,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,YAAY,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAAY,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.js

@@ -20,6 +20,7 @@ import { registerAuthCommands } from "./commands/auth.js";
 import { registerSessionCommands } from "./commands/session.js";
 import { registerBoardCommands } from "./commands/boards.js";
 import { registerProjectCommands } from "./commands/projects.js";
+import { registerScheduledRunCommands } from "./commands/scheduled-runs.js";
 import { registerTaskCommands } from "./commands/tasks.js";
 import { registerCommentCommands } from "./commands/comments.js";
 import { registerDocsCommands } from "./commands/docs.js";
@@ -43,6 +44,7 @@ import { registerMailCommands } from "./commands/mail.js";
 import { registerReportCommands } from "./commands/report.js";
 import { registerProfessionCommands } from "./commands/professions.js";
 import { registerEmployeeCommands } from "./commands/employees.js";
+import { registerCodeCommands } from "./commands/code.js";
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const pkg = JSON.parse(readFileSync(join(__dirname, "..", "package.json"), "utf8"));
 const program = new Command();
@@ -57,6 +59,7 @@ registerWorkspaceCommands(program);
 registerSessionCommands(program);
 registerBoardCommands(program);
 registerProjectCommands(program);
+registerScheduledRunCommands(program);
 registerTaskCommands(program);
 registerCommentCommands(program);
 registerDocsCommands(program);
@@ -78,6 +81,7 @@ registerMailCommands(program);
 registerReportCommands(program);
 registerProfessionCommands(program);
 registerEmployeeCommands(program);
+registerCodeCommands(program);
 registerConfigCommands(program);
 // A config error is a message, not a crash.
 //

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpF,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,wDAAwD,CAAC;KACrE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;KACpB,MAAM,CAAC,wBAAwB,EAAE,sCAAsC,CAAC,CAAC;AAE5E,8BAA8B;AAC9B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,yBAAyB,CAAC,OAAO,CAAC,CAAC;AACnC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,yBAAyB,CAAC,OAAO,CAAC,CAAC;AACnC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,0BAA0B,CAAC,OAAO,CAAC,CAAC;AACpC,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAEhC,4CAA4C;AAC5C,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,SAAS,IAAI,CAAC,CAAU;IACtB,OAAO,CAAC,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;AACtC,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;AAEvC,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpF,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,wDAAwD,CAAC;KACrE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;KACpB,MAAM,CAAC,wBAAwB,EAAE,sCAAsC,CAAC,CAAC;AAE5E,8BAA8B;AAC9B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,yBAAyB,CAAC,OAAO,CAAC,CAAC;AACnC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,4BAA4B,CAAC,OAAO,CAAC,CAAC;AACtC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,yBAAyB,CAAC,OAAO,CAAC,CAAC;AACnC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,0BAA0B,CAAC,OAAO,CAAC,CAAC;AACpC,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAEhC,4CAA4C;AAC5C,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,SAAS,IAAI,CAAC,CAAU;IACtB,OAAO,CAAC,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;AACtC,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;AAEvC,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/lib/auth-poll.d.ts

@@ -2,8 +2,27 @@
  * Polling loop for PAT approval — waits for human to click approve/deny.
  */
 import type { PATWorkspaceToken } from "@opvs-ai/core";
+/**
+ * How long the CLI waits in the foreground before handing off to
+ * `opvs auth resume`. NOT the request's lifetime: the server keeps a request
+ * approvable for 60 minutes (PC-252), and an agent must not sit polling for all
+ * of it — its shell call is killed long before, and that would be a hang.
+ */
+export declare const DEFAULT_WAIT_MS: number;
+/**
+ * When to stop polling: after the local wait, or just past the request's own
+ * expiry — whichever comes first. Always leaves room for one poll, so a request
+ * that has already expired is reported as `expired` by the server rather than
+ * as a local `timeout`.
+ */
+export declare function pollDeadline(now: number, waitMs: number, expiresAt?: string | Date): number;
 export interface PollResult {
-    status: "active" | "denied" | "expired" | "timeout";
+    /**
+     * `timeout` = not decided yet, still approvable. `invalid` = the server does not
+     * recognise this request or its poll token (404/401) — e.g. a stale saved
+     * request; waiting longer cannot change that.
+     */
+    status: "active" | "denied" | "expired" | "timeout" | "invalid";
     token?: string;
     scopes?: string[];
     brand_id?: number;
@@ -11,7 +30,10 @@ export interface PollResult {
     workspaces?: PATWorkspaceToken[];
 }
 /**
- * Poll the PAT request status endpoint until resolved or timed out.
+ * Poll the PAT request status endpoint until resolved or the wait runs out.
  * Prints dots to stderr to show progress.
+ *
+ * `timeout` means only "not decided YET" — the request may still be approvable
+ * on the server; the caller decides whether that is a handoff or a failure.
  */
-export declare function pollForApproval(baseUrl: string, requestId: string, pollToken: string, timeoutMs?: number): Promise<PollResult>;
+export declare function pollForApproval(baseUrl: string, requestId: string, pollToken: string, timeoutMs?: number, expiresAt?: string | Date): Promise<PollResult>;

package/dist/lib/auth-poll.js

@@ -3,13 +3,39 @@
  */
 import { apiUnauthGet } from "@opvs-ai/core";
 const POLL_INTERVAL_MS = 3000;
-const DEFAULT_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes
 /**
- * Poll the PAT request status endpoint until resolved or timed out.
+ * How long the CLI waits in the foreground before handing off to
+ * `opvs auth resume`. NOT the request's lifetime: the server keeps a request
+ * approvable for 60 minutes (PC-252), and an agent must not sit polling for all
+ * of it — its shell call is killed long before, and that would be a hang.
+ */
+export const DEFAULT_WAIT_MS = 5 * 60 * 1000;
+/** Past the server's expiry, one more poll lets the SERVER say "expired". */
+const EXPIRY_GRACE_MS = POLL_INTERVAL_MS + 2000;
+/**
+ * When to stop polling: after the local wait, or just past the request's own
+ * expiry — whichever comes first. Always leaves room for one poll, so a request
+ * that has already expired is reported as `expired` by the server rather than
+ * as a local `timeout`.
+ */
+export function pollDeadline(now, waitMs, expiresAt) {
+    let deadline = now + waitMs;
+    if (expiresAt !== undefined) {
+        const expiry = new Date(expiresAt).getTime();
+        if (Number.isFinite(expiry))
+            deadline = Math.min(deadline, expiry + EXPIRY_GRACE_MS);
+    }
+    return Math.max(deadline, now + 1);
+}
+/**
+ * Poll the PAT request status endpoint until resolved or the wait runs out.
  * Prints dots to stderr to show progress.
+ *
+ * `timeout` means only "not decided YET" — the request may still be approvable
+ * on the server; the caller decides whether that is a handoff or a failure.
  */
-export async function pollForApproval(baseUrl, requestId, pollToken, timeoutMs = DEFAULT_TIMEOUT_MS) {
-    const deadline = Date.now() + timeoutMs;
+export async function pollForApproval(baseUrl, requestId, pollToken, timeoutMs = DEFAULT_WAIT_MS, expiresAt) {
+    const deadline = pollDeadline(Date.now(), timeoutMs, expiresAt);
     process.stderr.write("Waiting for approval ");
     while (Date.now() < deadline) {
         try {
@@ -35,13 +61,20 @@ export async function pollForApproval(baseUrl, requestId, pollToken, timeoutMs =
                 return { status: "expired" };
             }
         }
-        catch {
+        catch (err) {
+            // 404 / 401 are answers, not blips: the request (or its poll token) is not
+            // one the server knows. Polling on would only turn that into a timeout.
+            const httpStatus = err?.status;
+            if (httpStatus === 404 || httpStatus === 401) {
+                process.stderr.write(" not recognised by the server.\n");
+                return { status: "invalid" };
+            }
             // Network error or server error — keep polling
         }
         process.stderr.write(".");
         await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
     }
-    process.stderr.write(" timed out.\n");
+    process.stderr.write(" not approved yet.\n");
     return { status: "timeout" };
 }
 //# sourceMappingURL=auth-poll.js.map

package/dist/lib/auth-poll.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-poll.js","sourceRoot":"","sources":["../../src/lib/auth-poll.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG7C,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAatD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,SAAiB,EACjB,SAAiB,EACjB,SAAS,GAAG,kBAAkB;IAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAE9C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,OAAO,EACP,4BAA4B,SAAS,SAAS,EAC9C,SAAS,CACV,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;YAErD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;gBACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBACrC,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC9B,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBACpC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"auth-poll.js","sourceRoot":"","sources":["../../src/lib/auth-poll.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG7C,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7C,6EAA6E;AAC7E,MAAM,eAAe,GAAG,gBAAgB,GAAG,IAAI,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,MAAc,EAAE,SAAyB;IACjF,IAAI,QAAQ,GAAG,GAAG,GAAG,MAAM,CAAC;IAC5B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAkBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,SAAiB,EACjB,SAAiB,EACjB,SAAS,GAAG,eAAe,EAC3B,SAAyB;IAEzB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAEhE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAE9C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,OAAO,EACP,4BAA4B,SAAS,SAAS,EAC9C,SAAS,CACV,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;YAErD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;gBACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBACrC,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC9B,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBACpC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2EAA2E;YAC3E,wEAAwE;YACxE,MAAM,UAAU,GAAI,GAAkC,EAAE,MAAM,CAAC;YAC/D,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACzD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,+CAA+C;QACjD,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC7C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC"}

package/dist/lib/confirm.d.ts

@@ -26,3 +26,17 @@
  * safe rather than uninformative.
  */
 export declare function confirm(prompt: string, yes: boolean, consequence?: string): Promise<boolean>;
+/**
+ * The help string every gated command uses for `-y, --yes` (AF.7b / ASP-144).
+ *
+ * One string, because the gate is one rule. `boards delete` used to delete at
+ * once while `tasks delete` asked, and nothing but reading every command could
+ * tell which was which.
+ */
+export declare const YES_HELP = "Confirm without a prompt. Required when stdin is not a terminal (an agent loop, CI, a pipe)";
+/**
+ * `confirm`, then exit 1 when the answer is no. A refusal is a non-zero exit so
+ * a script that forgot `--yes` stops, rather than carrying on as if the delete
+ * had happened.
+ */
+export declare function confirmOrExit(prompt: string, yes: boolean | undefined, consequence?: string): Promise<void>;

package/dist/lib/confirm.js

@@ -38,4 +38,21 @@ export async function confirm(prompt, yes, consequence = "This cannot be undone
     rl.close();
     return /^y(es)?$/i.test(answer.trim());
 }
+/**
+ * The help string every gated command uses for `-y, --yes` (AF.7b / ASP-144).
+ *
+ * One string, because the gate is one rule. `boards delete` used to delete at
+ * once while `tasks delete` asked, and nothing but reading every command could
+ * tell which was which.
+ */
+export const YES_HELP = "Confirm without a prompt. Required when stdin is not a terminal (an agent loop, CI, a pipe)";
+/**
+ * `confirm`, then exit 1 when the answer is no. A refusal is a non-zero exit so
+ * a script that forgot `--yes` stops, rather than carrying on as if the delete
+ * had happened.
+ */
+export async function confirmOrExit(prompt, yes, consequence) {
+    if (!(await confirm(prompt, Boolean(yes), consequence)))
+        process.exit(1);
+}
 //# sourceMappingURL=confirm.js.map

package/dist/lib/confirm.js.map

@@ -1 +1 @@
-{"version":3,"file":"confirm.js","sourceRoot":"","sources":["../../src/lib/confirm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAc,EACd,GAAY,EACZ,WAAW,GAAG,iCAAiC;IAE/C,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CACX,YAAY,MAAM,KAAK,WAAW,8DAA8D,CACjG,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CACnD,EAAE,CAAC,QAAQ,CAAC,GAAG,MAAM,SAAS,EAAE,OAAO,CAAC,CACzC,CAAC;IACF,EAAE,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"confirm.js","sourceRoot":"","sources":["../../src/lib/confirm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAc,EACd,GAAY,EACZ,WAAW,GAAG,iCAAiC;IAE/C,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CACX,YAAY,MAAM,KAAK,WAAW,8DAA8D,CACjG,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CACnD,EAAE,CAAC,QAAQ,CAAC,GAAG,MAAM,SAAS,EAAE,OAAO,CAAC,CACzC,CAAC;IACF,EAAE,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,QAAQ,GACnB,6FAA6F,CAAC;AAEhG;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,GAAwB,EACxB,WAAoB;IAEpB,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC"}

package/dist/lib/health.d.ts

@@ -15,6 +15,27 @@
  * The parameter a `not_checked` names is translated to the CLI FLAG that would
  * enable it, because "stale_days" is the API's name and the reader is at a
  * shell prompt.
+ *
+ * ── The exit code is the point (ASP-253) ───────────────────────────────────
+ *
+ * SpiderIQ's planner gates a session on these verbs from bash. Until ASP-253
+ * both commands exited 0 on EVERY verdict, so `opvs boards health X && deploy`
+ * ran the deploy on a board that had just reported a FAIL — a gate that never
+ * fires is worse than no gate, because someone believes it.
+ *
+ * The mapping below is deliberate in both directions:
+ *
+ *   healthy      -> 0   every check ran, none failed
+ *   incomplete   -> 0   YOU SUPPLIED NO THRESHOLD. That is a fact about the
+ *                       REQUEST, not about the board, and a caller who gates on
+ *                       it is gating on their own flags. `--require-complete`
+ *                       is there for a caller who wants it to be fatal.
+ *   not_healthy  -> 2   at least one check FAILED
+ *   anything else-> 1   could not read a verdict -> FAIL CLOSED. Never 0.
+ *
+ * `2` rather than `1` for not_healthy so a script can tell "the board is bad"
+ * from "I could not ask" (`diff`/`grep` use the same split); the transport and
+ * auth failures the commands already had keep 1.
  */
 export interface HealthCheck {
     check: string;
@@ -37,9 +58,85 @@ export interface HealthReport {
 }
 /** API query parameter → the flag `opvs boards|projects health` spells it as. */
 export declare const HEALTH_PARAM_FLAGS: Record<string, string>;
+/** Exit code for a report that was read. See the contract in the file header. */
+export declare const EXIT_OK = 0;
+/** Transport, auth, usage — or a verdict we could not read. Fail closed. */
+export declare const EXIT_ERROR = 1;
+/** The report came back `not_healthy`: at least one check FAILED. */
+export declare const EXIT_NOT_HEALTHY = 2;
+/**
+ * Map a verdict to the process exit code.
+ *
+ * `requireComplete` promotes `incomplete` to a failure for a caller who wants
+ * "you did not supply thresholds" to be fatal. It is OFF by default, because
+ * the server refuses to invent a threshold and a CLI that failed by default on
+ * an unsupplied one would be holding the same opinion through a different door.
+ */
+export declare function healthExitCode(verdict: string | undefined, opts?: {
+    requireComplete?: boolean;
+}): number;
 export declare function levelWord(level: string): string;
+/**
+ * Pick the check rows to print.
+ *
+ * On `not_healthy` the default is the FAIL rows ONLY. A planner runs this on a
+ * gate and reads the wall of PASS exactly once; every run after that, the three
+ * lines it needs are buried in thirty it does not. Every other verdict prints
+ * in full — on `incomplete` the `not_checked` rows ARE the finding, and on
+ * `healthy` there is nothing to bury.
+ *
+ * Nothing is ever dropped silently: the caller is told the count and the flag.
+ */
+export declare function visibleChecks(report: HealthReport, opts?: {
+    allChecks?: boolean;
+}): {
+    shown: HealthCheck[];
+    hidden: number;
+};
 /** Render a board or project health report as plain text lines. */
-export declare function renderHealthReport(report: HealthReport): string;
+export declare function renderHealthReport(report: HealthReport, opts?: {
+    allChecks?: boolean;
+}): string;
+/**
+ * Read the verdict back out of the server's Markdown rendering.
+ *
+ * 🔴 WHY THIS IS ALLOWED TO FAIL, AND WHY IT MUST FAIL CLOSED.
+ *
+ * `?format=md` returns `text/markdown` with no verdict header and no JSON, so
+ * the exit code has to come out of the prose. The server writes exactly one
+ * line for it (`render_health_md`):
+ *
+ *     **Verdict:** `not_healthy` · profile `factory`
+ *
+ * That is a hand-written copy of a contract owned by another repo path, and
+ * the house rule for those is to gate them, not to trust them. We cannot run
+ * the Python renderer from a CLI unit test — so instead of trusting it, this
+ * returns `undefined` when it cannot find the line, and `healthExitCode`
+ * turns that into exit 1. If the server ever reworded the heading, `--format
+ * md` starts erroring and names `--format json`; it does NOT start exiting 0
+ * on an unhealthy board. A drifted gate that shouts is recoverable; one that
+ * silently passes is the defect this whole card exists to remove.
+ */
+export declare function verdictFromMarkdown(md: string): string | undefined;
+/**
+ * Read the verdict back out of the server's YAML rendering.
+ *
+ * `render_health_yaml` is `yaml.dump(report, sort_keys=False)`, so `verdict`
+ * is a top-level scalar. Same fail-closed contract as the Markdown reader: a
+ * miss returns `undefined` and becomes exit 1, never exit 0.
+ */
+export declare function verdictFromYaml(text: string): string | undefined;
+/** `--format` values. `text` is the local rendering and sends no `format=`. */
+export declare const HEALTH_FORMATS: readonly ["text", "json", "md", "yaml"];
+export type HealthFormat = (typeof HEALTH_FORMATS)[number];
+/**
+ * The `format=` query value for a `--format` choice.
+ *
+ * `text` and `json` both want the JSON report (the text rendering is built
+ * from it), and `buildUrl` appends `format=` for anything that is not the
+ * string `json` — so both must arrive here as `json`, never as `text`.
+ */
+export declare function healthWireFormat(fmt: HealthFormat): string;
 /** The shared threshold flags, as query params. Only flags given become params. */
 export declare function healthParams(opts: Record<string, string | undefined>): Record<string, string>;
 /**
@@ -52,3 +149,36 @@ export declare function healthParams(opts: Record<string, string | undefined>):
 export declare function withHealthOptions<T extends {
     option: (flags: string, desc: string) => T;
 }>(cmd: T): T;
+/**
+ * The `--help` epilogue every `health` command carries.
+ *
+ * 🔑 It is not decoration. A caller who guesses the mapping writes a gate that
+ * never fires, which is the defect ASP-253 fixed — so the mapping is stated
+ * where the caller is standing when they write the gate. Every line here is
+ * backed by `healthExitCode` in this same file (AgentCLI LEARNINGS, ASP-25: a
+ * help string that describes behaviour nothing implements).
+ */
+export declare const HEALTH_EXIT_HELP = "Exit codes (a planner gates on these):\n  0  healthy      \u2014 every check ran and none failed\n  0  incomplete   \u2014 a threshold you did not supply left a check NOT CHECKED.\n                    That is a fact about your REQUEST, not about the board, so\n                    it does not fail the gate. Pass --require-complete to make\n                    it exit 2 instead.\n  2  not_healthy  \u2014 at least one check FAILED\n  1  error        \u2014 transport, auth, a bad ref, or a verdict this CLI could not\n                    read. Never confused with 0: a gate that cannot ask must\n                    not report a pass.";
+export interface HealthOutputOpts {
+    format?: string;
+    json?: boolean;
+    allChecks?: boolean;
+    requireComplete?: boolean;
+}
+/** Thrown for a `--format` this CLI does not know. Caught as a usage error. */
+export declare class HealthFormatError extends Error {
+}
+/** `--format` (validated) with `--json` kept working as an alias for it. */
+export declare function resolveHealthFormat(opts: HealthOutputOpts): HealthFormat;
+/**
+ * Print a health response and return the process exit code.
+ *
+ * The exit code is decided by the VERDICT in every format, including the ones
+ * the server renders itself — a gate must not change meaning because someone
+ * wanted Markdown. `yaml`/`md` carry no structured verdict, so the verdict is
+ * read back out of the text and a miss is an error (exit 1), never a pass.
+ */
+export declare function emitHealthReport(res: {
+    json: () => Promise<unknown>;
+    text: () => Promise<string>;
+}, opts: HealthOutputOpts, fmt: HealthFormat): Promise<number>;

package/dist/lib/health.js

@@ -15,6 +15,27 @@
  * The parameter a `not_checked` names is translated to the CLI FLAG that would
  * enable it, because "stale_days" is the API's name and the reader is at a
  * shell prompt.
+ *
+ * ── The exit code is the point (ASP-253) ───────────────────────────────────
+ *
+ * SpiderIQ's planner gates a session on these verbs from bash. Until ASP-253
+ * both commands exited 0 on EVERY verdict, so `opvs boards health X && deploy`
+ * ran the deploy on a board that had just reported a FAIL — a gate that never
+ * fires is worse than no gate, because someone believes it.
+ *
+ * The mapping below is deliberate in both directions:
+ *
+ *   healthy      -> 0   every check ran, none failed
+ *   incomplete   -> 0   YOU SUPPLIED NO THRESHOLD. That is a fact about the
+ *                       REQUEST, not about the board, and a caller who gates on
+ *                       it is gating on their own flags. `--require-complete`
+ *                       is there for a caller who wants it to be fatal.
+ *   not_healthy  -> 2   at least one check FAILED
+ *   anything else-> 1   could not read a verdict -> FAIL CLOSED. Never 0.
+ *
+ * `2` rather than `1` for not_healthy so a script can tell "the board is bad"
+ * from "I could not ask" (`diff`/`grep` use the same split); the transport and
+ * auth failures the commands already had keep 1.
  */
 /** API query parameter → the flag `opvs boards|projects health` spells it as. */
 export const HEALTH_PARAM_FLAGS = {
@@ -34,6 +55,36 @@ const LEVEL_WORD = {
     INFO: "INFO",
     not_checked: "NOT CHECKED",
 };
+import { printJson, printRaw } from "./format.js";
+/** Exit code for a report that was read. See the contract in the file header. */
+export const EXIT_OK = 0;
+/** Transport, auth, usage — or a verdict we could not read. Fail closed. */
+export const EXIT_ERROR = 1;
+/** The report came back `not_healthy`: at least one check FAILED. */
+export const EXIT_NOT_HEALTHY = 2;
+/**
+ * Map a verdict to the process exit code.
+ *
+ * `requireComplete` promotes `incomplete` to a failure for a caller who wants
+ * "you did not supply thresholds" to be fatal. It is OFF by default, because
+ * the server refuses to invent a threshold and a CLI that failed by default on
+ * an unsupplied one would be holding the same opinion through a different door.
+ */
+export function healthExitCode(verdict, opts) {
+    switch (verdict) {
+        case "healthy":
+            return EXIT_OK;
+        case "incomplete":
+            return opts?.requireComplete ? EXIT_NOT_HEALTHY : EXIT_OK;
+        case "not_healthy":
+            return EXIT_NOT_HEALTHY;
+        default:
+            // No verdict, or one this CLI does not know: the server grew a fourth
+            // value, or the body is not a report at all. Either way we cannot say
+            // the board is fine, so we must not say it with an exit code.
+            return EXIT_ERROR;
+    }
+}
 const VERDICT_LINE = {
     healthy: "HEALTHY — every check ran and none failed",
     incomplete: "INCOMPLETE — not every check ran, so this is NOT a pass",
@@ -51,8 +102,27 @@ function flagsFor(parameter) {
         .map((p) => HEALTH_PARAM_FLAGS[p] ?? p)
         .join(", ");
 }
+/**
+ * Pick the check rows to print.
+ *
+ * On `not_healthy` the default is the FAIL rows ONLY. A planner runs this on a
+ * gate and reads the wall of PASS exactly once; every run after that, the three
+ * lines it needs are buried in thirty it does not. Every other verdict prints
+ * in full — on `incomplete` the `not_checked` rows ARE the finding, and on
+ * `healthy` there is nothing to bury.
+ *
+ * Nothing is ever dropped silently: the caller is told the count and the flag.
+ */
+export function visibleChecks(report, opts) {
+    const checks = report.checks ?? [];
+    if (opts?.allChecks || report.verdict !== "not_healthy") {
+        return { shown: checks, hidden: 0 };
+    }
+    const shown = checks.filter((c) => c.level === "FAIL");
+    return { shown, hidden: checks.length - shown.length };
+}
 /** Render a board or project health report as plain text lines. */
-export function renderHealthReport(report) {
+export function renderHealthReport(report, opts) {
     const lines = [];
     const subject = report.project_name
         ? `Project health — ${report.project_name}`
@@ -70,7 +140,12 @@ export function renderHealthReport(report) {
         lines.push(`Not supplied (so their checks made no finding): ${flagsFor(missing.join(","))}`);
     }
     lines.push("");
-    for (const chk of report.checks ?? []) {
+    const { shown, hidden } = visibleChecks(report, opts);
+    if (hidden > 0) {
+        lines.push(`Showing the ${shown.length} FAIL check(s). ${hidden} other row(s) hidden — see them all with --all-checks.`);
+        lines.push("");
+    }
+    for (const chk of shown) {
         const word = levelWord(chk.level).padEnd(WIDTH);
         lines.push(`  ${word}  ${chk.check}${chk.detail ? ` — ${chk.detail}` : ""}`);
         if (chk.level === "not_checked") {
@@ -86,6 +161,53 @@ export function renderHealthReport(report) {
     }
     return lines.join("\n");
 }
+/**
+ * Read the verdict back out of the server's Markdown rendering.
+ *
+ * 🔴 WHY THIS IS ALLOWED TO FAIL, AND WHY IT MUST FAIL CLOSED.
+ *
+ * `?format=md` returns `text/markdown` with no verdict header and no JSON, so
+ * the exit code has to come out of the prose. The server writes exactly one
+ * line for it (`render_health_md`):
+ *
+ *     **Verdict:** `not_healthy` · profile `factory`
+ *
+ * That is a hand-written copy of a contract owned by another repo path, and
+ * the house rule for those is to gate them, not to trust them. We cannot run
+ * the Python renderer from a CLI unit test — so instead of trusting it, this
+ * returns `undefined` when it cannot find the line, and `healthExitCode`
+ * turns that into exit 1. If the server ever reworded the heading, `--format
+ * md` starts erroring and names `--format json`; it does NOT start exiting 0
+ * on an unhealthy board. A drifted gate that shouts is recoverable; one that
+ * silently passes is the defect this whole card exists to remove.
+ */
+export function verdictFromMarkdown(md) {
+    const m = md.match(/\*\*Verdict:\*\*\s*`([a-z_]+)`/);
+    return m?.[1];
+}
+/**
+ * Read the verdict back out of the server's YAML rendering.
+ *
+ * `render_health_yaml` is `yaml.dump(report, sort_keys=False)`, so `verdict`
+ * is a top-level scalar. Same fail-closed contract as the Markdown reader: a
+ * miss returns `undefined` and becomes exit 1, never exit 0.
+ */
+export function verdictFromYaml(text) {
+    const m = text.match(/^verdict:[ \t]*["']?([a-z_]+)["']?[ \t]*$/m);
+    return m?.[1];
+}
+/** `--format` values. `text` is the local rendering and sends no `format=`. */
+export const HEALTH_FORMATS = ["text", "json", "md", "yaml"];
+/**
+ * The `format=` query value for a `--format` choice.
+ *
+ * `text` and `json` both want the JSON report (the text rendering is built
+ * from it), and `buildUrl` appends `format=` for anything that is not the
+ * string `json` — so both must arrive here as `json`, never as `text`.
+ */
+export function healthWireFormat(fmt) {
+    return fmt === "text" ? "json" : fmt;
+}
 /** The shared threshold flags, as query params. Only flags given become params. */
 export function healthParams(opts) {
     const params = {};
@@ -121,6 +243,73 @@ export function withHealthOptions(cmd) {
         .option("--stale-days <n>", "Warn on an open card not updated in N days.")
         .option("--column-age-days <n>", "Warn on an open card in the same column for N days.")
         .option("--star-fanout <n>", "Warn on a prerequisite whose top-layer fan-out exceeds N.")
-        .option("--json", "Print the raw JSON report instead of the text rendering.");
+        .option("--format <fmt>", "text (default, the human rendering) | json (the report VERBATIM, for jq) | md | yaml (the server's own rendering).")
+        .option("--json", "Alias for --format json.")
+        .option("--all-checks", "On a not_healthy report, print every check row, not only the FAIL rows.")
+        .option("--require-complete", "Treat `incomplete` as a failure too (exit 2). Off by default: `incomplete` means YOU supplied no threshold.");
+}
+/**
+ * The `--help` epilogue every `health` command carries.
+ *
+ * 🔑 It is not decoration. A caller who guesses the mapping writes a gate that
+ * never fires, which is the defect ASP-253 fixed — so the mapping is stated
+ * where the caller is standing when they write the gate. Every line here is
+ * backed by `healthExitCode` in this same file (AgentCLI LEARNINGS, ASP-25: a
+ * help string that describes behaviour nothing implements).
+ */
+export const HEALTH_EXIT_HELP = `Exit codes (a planner gates on these):
+  0  healthy      — every check ran and none failed
+  0  incomplete   — a threshold you did not supply left a check NOT CHECKED.
+                    That is a fact about your REQUEST, not about the board, so
+                    it does not fail the gate. Pass --require-complete to make
+                    it exit 2 instead.
+  2  not_healthy  — at least one check FAILED
+  1  error        — transport, auth, a bad ref, or a verdict this CLI could not
+                    read. Never confused with 0: a gate that cannot ask must
+                    not report a pass.`;
+/** Thrown for a `--format` this CLI does not know. Caught as a usage error. */
+export class HealthFormatError extends Error {
+}
+/** `--format` (validated) with `--json` kept working as an alias for it. */
+export function resolveHealthFormat(opts) {
+    if (opts.format === undefined)
+        return opts.json ? "json" : "text";
+    const fmt = opts.format.toLowerCase();
+    if (!HEALTH_FORMATS.includes(fmt)) {
+        throw new HealthFormatError(`Unknown --format "${opts.format}". Use one of: ${HEALTH_FORMATS.join(", ")}.`);
+    }
+    return fmt;
+}
+/**
+ * Print a health response and return the process exit code.
+ *
+ * The exit code is decided by the VERDICT in every format, including the ones
+ * the server renders itself — a gate must not change meaning because someone
+ * wanted Markdown. `yaml`/`md` carry no structured verdict, so the verdict is
+ * read back out of the text and a miss is an error (exit 1), never a pass.
+ */
+export async function emitHealthReport(res, opts, fmt) {
+    const exitOpts = { requireComplete: Boolean(opts.requireComplete) };
+    if (fmt === "json") {
+        // Verbatim — the report as the server sent it, NOT a re-render. A caller
+        // piping this into jq must see the server's field names and nothing else.
+        const report = (await res.json());
+        printJson(report);
+        return healthExitCode(report?.verdict, exitOpts);
+    }
+    if (fmt === "md" || fmt === "yaml") {
+        const text = await res.text();
+        printRaw(text);
+        const verdict = fmt === "md" ? verdictFromMarkdown(text) : verdictFromYaml(text);
+        if (verdict === undefined) {
+            console.error(`Error: printed the ${fmt} report, but could not read a verdict out of it, ` +
+                `so this exit code is NOT a health signal. Gate on --format json instead.`);
+            return EXIT_ERROR;
+        }
+        return healthExitCode(verdict, exitOpts);
+    }
+    const report = (await res.json());
+    console.log(renderHealthReport(report, { allChecks: Boolean(opts.allChecks) }));
+    return healthExitCode(report?.verdict, exitOpts);
 }
 //# sourceMappingURL=health.js.map