agent-qa 0.1.13 → 0.1.15

package/dist/cli.js

@@ -337,7 +337,7 @@ var init_llm_utils = __esm({
 });
 
 // src/cli.ts
-import { Command as Command19 } from "commander";
+import { Command as Command20 } from "commander";
 
 // src/index.ts
 var index_exports = {};
@@ -501,10 +501,12 @@ import select from "@inquirer/select";
 import input from "@inquirer/input";
 import checkbox from "@inquirer/checkbox";
 import {
+  DEFAULT_AGENT_QA_AUTH_STATES_DIR,
   DEFAULT_AGENT_QA_CACHE_DIR as DEFAULT_AGENT_QA_CACHE_DIR2,
   DEFAULT_AGENT_QA_RUNTIME_DIR
 } from "@vostride/agent-qa-core";
 var INIT_CACHE_DIR = DEFAULT_AGENT_QA_CACHE_DIR2 || ".agent-qa/cache";
+var INIT_AUTH_STATES_DIR = DEFAULT_AGENT_QA_AUTH_STATES_DIR || ".agent-qa/auth-states";
 var INIT_RUNTIME_DIR = DEFAULT_AGENT_QA_RUNTIME_DIR || ".agent-qa";
 var SUBSCRIPTION_AUTH_PACKAGE = "@vostride/agent-qa-subscription-auth";
 var PACKAGE_JSON_FILE = "package.json";
@@ -837,6 +839,7 @@ function buildDefaultConfig(platform, providerOrLLMs, model, baseURL) {
       dashboard: { port: 3100, artifactsDir: ".agent-qa/artifacts" },
       mcp: { enabled: true, transport: "http", host: "127.0.0.1", port: 3471, path: "/mcp" },
       cache: { dir: INIT_CACHE_DIR, ttl: "7d" },
+      authState: { dir: INIT_AUTH_STATES_DIR },
       ...hasWeb(platform) ? {
         accessibility: {
           enabled: true,
@@ -878,7 +881,7 @@ function addYamlComments(yamlStr) {
     if (line.startsWith("workspace:")) {
       result += "# File discovery and project settings\n";
     } else if (line.startsWith("services:")) {
-      result += "\n# Infrastructure services (dashboard, MCP, cache, logging)\n";
+      result += "\n# Infrastructure services (dashboard, MCP, cache, auth state, logging)\n";
     } else if (line.startsWith("registry:")) {
       result += "\n# Named resource definitions (LLM configs, app targets)\n";
     } else if (line.startsWith("plugins:")) {
@@ -933,7 +936,19 @@ var DEFAULT_AGENT_RULES_FILE = "agent-rules.md";
 var DEFAULT_ENV_FILE = ".env";
 var DEFAULT_SECRETS_FILE = ".env.secrets.local";
 var DEFAULT_LOCAL_CONFIG_FILE = "agent-qa.local.yaml";
-var GITIGNORE_ENTRIES = [`${INIT_RUNTIME_DIR}/`, "node_modules/", DEFAULT_LOCAL_CONFIG_FILE, DEFAULT_ENV_FILE, DEFAULT_SECRETS_FILE];
+function directoryGitignoreEntry(value) {
+  return value.endsWith("/") ? value : `${value}/`;
+}
+function buildGitignoreEntries() {
+  return [
+    directoryGitignoreEntry(INIT_RUNTIME_DIR),
+    directoryGitignoreEntry(INIT_AUTH_STATES_DIR),
+    "node_modules/",
+    DEFAULT_LOCAL_CONFIG_FILE,
+    DEFAULT_ENV_FILE,
+    DEFAULT_SECRETS_FILE
+  ];
+}
 function buildLocalConfigTemplate() {
   return `# This file is for machine-specific device, app, and provider bindings.
 # Keep it out of git.
@@ -962,7 +977,10 @@ function appendGitignore(dir) {
   if (existsSync(gitignorePath)) {
     existing = readFileSync(gitignorePath, "utf-8");
   }
-  const missing = GITIGNORE_ENTRIES.filter((entry) => !existing.includes(entry));
+  const existingEntries = new Set(
+    existing.split(/\r?\n/).map((line) => line.trim()).filter(Boolean)
+  );
+  const missing = buildGitignoreEntries().filter((entry) => !existingEntries.has(entry));
   if (missing.length === 0) return;
   const append = (existing.length > 0 && !existing.endsWith("\n") ? "\n" : "") + missing.join("\n") + "\n";
   writeFileSync(gitignorePath, existing + append);
@@ -2096,7 +2114,7 @@ import { randomUUID } from "crypto";
 import { resolve as resolvePath3 } from "path";
 import { Command as Command6 } from "commander";
 import pc7 from "picocolors";
-import { ATTR_RUNNER, ATTR_TRIGGER, buildInternalRunAttributes, DEFAULT_AGENT_QA_ARTIFACTS_DIR, DEFAULT_AGENT_QA_CACHE_DIR as DEFAULT_AGENT_QA_CACHE_DIR3, DEFAULT_AGENT_QA_VIDEOS_DIR, formatRunAttributesBlock, generateRunId, mergeRunAttributes, MobileSetupError, parseRunAttrFlags, resolveMemoryRoot, resolveMobileRunConfig, validateTrustedRunAttributes } from "@vostride/agent-qa-core";
+import { ATTR_RUNNER, ATTR_TRIGGER, AUTH_STATE_SCHEMA_VERSION, buildInternalRunAttributes, DEFAULT_AGENT_QA_ARTIFACTS_DIR, DEFAULT_AGENT_QA_CACHE_DIR as DEFAULT_AGENT_QA_CACHE_DIR3, DEFAULT_AGENT_QA_VIDEOS_DIR, formatRunAttributesBlock, generateRunId, mergeRunAttributes, MobileSetupError, normalizeAuthStateUse, parseRunAttrFlags, redactAuthStateValue, resolveAuthStateForRun, resolveAuthStatePaths, resolveMemoryRoot, resolveMobileRunConfig, validateTrustedRunAttributes } from "@vostride/agent-qa-core";
 import { discoverWorkspaceFiles as discoverWorkspaceFiles2, isWorkspacePathMatch, resolveWorkspaceFileTarget, resolveWorkspacePaths as resolveWorkspacePaths2 } from "@vostride/agent-qa-core";
 
 // src/devices.ts
@@ -2580,7 +2598,7 @@ async function loadRuntimeSecrets(input3) {
   }
 }
 function buildRunArtifactContext(input3) {
-  return {
+  return redactAuthStateValue({
     artifact: {
       kind: input3.kind,
       config: {
@@ -2614,7 +2632,7 @@ function buildRunArtifactContext(input3) {
         attributes: input3.attributes
       }
     }
-  };
+  });
 }
 async function resolveDeviceAndFarmSession(config, deviceName, testPlatform, testName, testTimeout, preResolvedDevice, localBindingsOverride, mobileResolved) {
   if (!deviceName || testPlatform === "web") return {};
@@ -2692,6 +2710,82 @@ function resolveMobileRunOrThrow(input3) {
     wrapMobileSetupError(err);
   }
 }
+function getSelectedAuthStateUse(use) {
+  return normalizeAuthStateUse(use);
+}
+async function resolveSelectedAuthStateForRun(input3) {
+  if (!input3.authState || input3.authState.load === false) return void 0;
+  try {
+    return await resolveAuthStateForRun({
+      configDir: input3.configDir,
+      authStateDir: input3.config.services?.authState?.dir,
+      targetName: input3.resolvedTarget.name,
+      stateName: input3.authState.name,
+      target: { platform: input3.resolvedTarget.platform }
+    });
+  } catch (err) {
+    console.error(pc7.red(`Error: ${err instanceof Error ? err.message : String(err)}`));
+    process.exit(2);
+  }
+}
+function resolveAuthStateCapturePathsForRun(input3) {
+  if (input3.authState?.capture !== true) return void 0;
+  try {
+    return resolveAuthStatePaths({
+      configDir: input3.configDir,
+      authStateDir: input3.config.services?.authState?.dir,
+      targetName: input3.resolvedTarget.name,
+      stateName: input3.authState.name,
+      target: { platform: input3.resolvedTarget.platform }
+    });
+  } catch (err) {
+    console.error(pc7.red(`Error: ${err instanceof Error ? err.message : String(err)}`));
+    process.exit(2);
+  }
+}
+function formatAuthStateCaptureFailure(paths) {
+  return `Could not save auth state "${paths.stateName}" for target "${paths.targetName}".`;
+}
+function getStorageStateContext(adapter) {
+  const maybeGetPage = adapter.getPage;
+  if (typeof maybeGetPage !== "function") return null;
+  const page = maybeGetPage.call(adapter);
+  if (!page || typeof page !== "object") return null;
+  const maybeContext = page.context;
+  if (typeof maybeContext !== "function") return null;
+  const context = maybeContext.call(page);
+  if (!context || typeof context !== "object") return null;
+  const storageState = context.storageState;
+  if (typeof storageState !== "function") return null;
+  return {
+    storageState: storageState.bind(context)
+  };
+}
+async function captureAuthStateForRun(input3) {
+  const context = getStorageStateContext(input3.adapter);
+  if (!context) {
+    throw new Error("Web auth-state capture requires a Playwright browser context.");
+  }
+  const payload = await context.storageState({ indexedDB: true });
+  const capturedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const metadata = {
+    version: AUTH_STATE_SCHEMA_VERSION,
+    kind: "web",
+    target: input3.paths.targetName,
+    name: input3.paths.stateName,
+    capturedAt
+  };
+  const { writeAuthStateFiles: writeAuthStateFiles2 } = await import("@vostride/agent-qa-core");
+  await writeAuthStateFiles2(input3.paths, { payload, metadata });
+  return {
+    version: metadata.version,
+    kind: metadata.kind,
+    targetName: metadata.target,
+    stateName: metadata.name,
+    capturedAt: metadata.capturedAt,
+    storageStatePath: input3.paths.payloadPath
+  };
+}
 async function executeSuites(suiteFiles, opts, config, globalOpts, configContent, effectiveLogLevel, variableContext, hooksContext) {
   const {
     parseSuiteFile: parseSuiteFile2,
@@ -2792,6 +2886,13 @@ async function executeSuites(suiteFiles, opts, config, globalOpts, configContent
       suiteFileContent = await readFile5(suiteFile, "utf-8");
     } catch {
     }
+    const mergedUse = mergeUseBlocks(
+      config.use,
+      suite.use,
+      void 0,
+      {}
+    );
+    const suiteAuthStateUse = getSelectedAuthStateUse(mergedUse);
     const testEntries = [];
     const suiteMembers = [];
     for (const { test: relativePath, id: suiteEntryId } of suite.tests) {
@@ -2911,6 +3012,11 @@ async function executeSuites(suiteFiles, opts, config, globalOpts, configContent
         process.exit(2);
       }
       const testDef = parseResult.tests[0];
+      const childAuthStateUse = getSelectedAuthStateUse(testDef.use);
+      if (suiteAuthStateUse && childAuthStateUse && childAuthStateUse.name !== suiteAuthStateUse.name) {
+        console.error(pc7.red(`Suite auth state "${suiteAuthStateUse.name}" conflicts with child test auth state "${childAuthStateUse.name}". Use one primary auth state per suite.`));
+        process.exit(2);
+      }
       if (testDef["test-id"] && testDef["test-id"] !== suiteEntryId) {
         const mismatchMsg = `ID mismatch in suite "${suite.name}": test file ${relativePath} has test-id "${testDef["test-id"]}" but suite entry specifies id "${suiteEntryId}"`;
         console.error(pc7.red(mismatchMsg));
@@ -2962,12 +3068,18 @@ async function executeSuites(suiteFiles, opts, config, globalOpts, configContent
     }
     const suiteResolvedTarget = suite.target ? resolveTarget(config, suite.target) : resolveTarget(config, testEntries[0][0].target);
     const suitePlatform = suiteResolvedTarget.platform;
-    const mergedUse = mergeUseBlocks(
-      config.use,
-      suite.use,
-      void 0,
-      {}
-    );
+    const suiteAuthState = await resolveSelectedAuthStateForRun({
+      config,
+      configDir,
+      resolvedTarget: suiteResolvedTarget,
+      authState: suiteAuthStateUse
+    });
+    const suiteAuthStateCapturePaths = resolveAuthStateCapturePathsForRun({
+      config,
+      configDir,
+      resolvedTarget: suiteResolvedTarget,
+      authState: suiteAuthStateUse
+    });
     const suiteEffectiveCacheEnabled = opts.cache !== false && mergedUse.cache !== false;
     let suiteDeviceName = opts.device ?? mergedUse.device;
     if ((suitePlatform === "android" || suitePlatform === "ios") && !suiteDeviceName) {
@@ -3051,6 +3163,7 @@ async function executeSuites(suiteFiles, opts, config, globalOpts, configContent
     const suiteBrowser = mergedUse.browser ?? config.use?.browser;
     const suiteLogCapture = mergedUse.logCapture ?? config.use?.logCapture;
     const platformConfig = buildPlatformConfig(suitePlatform, resolvedDevice, testTimeouts, suiteBrowser, suiteLogCapture, farmSession, mobileResolved);
+    platformConfig.authState = suiteAuthState;
     platformConfig.verbose = effectiveLogLevel === "debug";
     if (opts.headless !== void 0 && platformConfig.browser) {
       platformConfig.browser.headless = opts.headless;
@@ -3241,6 +3354,10 @@ async function executeSuites(suiteFiles, opts, config, globalOpts, configContent
       memoryRoot: suiteMemoryRoot,
       circuitBreaker: suiteCircuitBreaker,
       product: resolvedTarget?.product,
+      authStateCapture: suiteAuthStateCapturePaths ? {
+        capture: () => captureAuthStateForRun({ adapter, paths: suiteAuthStateCapturePaths }),
+        failureSummary: formatAuthStateCaptureFailure(suiteAuthStateCapturePaths)
+      } : void 0,
       createAdapter: () => createPlatformAdapter(suitePlatform),
       resolveUrl: (targetName) => {
         try {
@@ -3570,7 +3687,7 @@ Discovered ${files.length} test file(s):
           dashboardDb.insertRunArtifact({
             runId: artifactRunId,
             kind: "test",
-            payload: {
+            payload: redactAuthStateValue({
               config: {
                 rawConfigContent: configContent,
                 parsedConfig: config,
@@ -3601,7 +3718,7 @@ Discovered ${files.length} test file(s):
                 message: error.message,
                 details: error
               }))
-            }
+            })
           });
           dashboardDb.finalizeRunArtifact(artifactRunId);
           dashboardDb.close();
@@ -3773,6 +3890,20 @@ Config for: ${test.name}`));
             }
             const testPlatform = testResolvedTarget.platform;
             analyticsPlatform = testPlatform;
+            const testAuthStateUse = getSelectedAuthStateUse(mergedUse);
+            const testAuthState = await resolveSelectedAuthStateForRun({
+              config,
+              configDir,
+              resolvedTarget: testResolvedTarget,
+              authState: testAuthStateUse
+            });
+            const testAuthStateCapturePaths = resolveAuthStateCapturePathsForRun({
+              config,
+              configDir,
+              resolvedTarget: testResolvedTarget,
+              authState: testAuthStateUse
+            });
+            let activeTestAuthState = testAuthState;
             const testMergedUse = testMergedConfig.use ?? config.use ?? {};
             const testDeviceName = opts.device ?? testMergedUse.device;
             const testTimeoutsForSetup = {
@@ -3852,6 +3983,7 @@ Config for: ${test.name}`));
               adapter = await createPlatformAdapter(testPlatform);
               const mergedBrowser = mergedUse.browser;
               const platformConfig = buildPlatformConfig(testPlatform, testResolvedDevice, testTimeoutsForSetup, mergedBrowser ?? config.use?.browser, testMergedConfig.use?.logCapture ?? config.use?.logCapture, testFarmSession, testMobileResolved);
+              platformConfig.authState = activeTestAuthState;
               platformConfig.verbose = effectiveLogLevel === "debug";
               if (opts.headless !== void 0) {
                 if (platformConfig.browser) {
@@ -3970,10 +4102,12 @@ Config for: ${test.name}`));
               runId,
               artifact: artifactContext.artifact
             });
+            const getAuthAwareSandboxOptions = () => sandboxOptions && activeTestAuthState ? { ...sandboxOptions, authState: activeTestAuthState } : sandboxOptions;
+            const authAwareSandboxOptions = getAuthAwareSandboxOptions();
             let perTestSetupVars = {};
             let testStartTime = Date.now();
             let setupHookFailed = false;
-            if (resolvedHooks && sandboxOptions && testDef.setup?.length) {
+            if (resolvedHooks && authAwareSandboxOptions && testDef.setup?.length) {
               const { runHooks } = await import("@vostride/agent-qa-core");
               const hookDefs = [];
               let hookSetupError;
@@ -3993,7 +4127,7 @@ Config for: ${test.name}`));
                 for (const hookDef of hookDefs) {
                   const hookExecId = randomUUID();
                   await multiReporter.onHookStart({ hookId: hookDef.id, hookName: hookDef.name, phase: "setup", hookExecutionId: hookExecId, runId });
-                  const hookResult = await runHooks([hookDef], { ...sandboxOptions, envVars: { ...sandboxOptions.envVars, ...allVars, ...perTestSetupVars } });
+                  const hookResult = await runHooks([hookDef], { ...authAwareSandboxOptions, envVars: { ...authAwareSandboxOptions.envVars, ...allVars, ...perTestSetupVars } });
                   const hr = hookResult.results.get(hookDef.name);
                   await multiReporter.onHookEnd({
                     hookId: hookDef.id,
@@ -4080,7 +4214,7 @@ Config for: ${test.name}`));
               cliVars,
               hookSetupVars: perTestSetupVars,
               inlineHookDefs: resolvedHooks,
-              inlineHookSandboxOptions: sandboxOptions,
+              inlineHookSandboxOptions: authAwareSandboxOptions,
               logCapture: testLogCapture,
               accessibility: config.services?.accessibility,
               accessibilityCheck: runWebAccessibilityCheck,
@@ -4091,11 +4225,28 @@ Config for: ${test.name}`));
               memoryInitParams,
               circuitBreaker,
               runId,
-              skipReporterOnTestStart: true
+              skipReporterOnTestStart: true,
+              skipReporterOnTestEnd: testAuthStateUse?.capture === true
             }, filePath);
             if (!result.runId) result.runId = runId;
             completedResult = result;
-            if (resolvedHooks && sandboxOptions && testDef.teardown?.length) {
+            if (testAuthStateCapturePaths && result.status === "passed") {
+              try {
+                activeTestAuthState = await captureAuthStateForRun({
+                  adapter,
+                  paths: testAuthStateCapturePaths
+                });
+              } catch {
+                result.status = "failed";
+                result.failureSummary = formatAuthStateCaptureFailure(testAuthStateCapturePaths);
+                result.metadata = {
+                  ...result.metadata,
+                  phase: "auth-state-capture"
+                };
+              }
+            }
+            const teardownSandboxOptions = getAuthAwareSandboxOptions();
+            if (resolvedHooks && teardownSandboxOptions && testDef.teardown?.length) {
               const { runHooks } = await import("@vostride/agent-qa-core");
               for (const hookId of testDef.teardown) {
                 const hook = resolvedHooks.get(hookId);
@@ -4105,7 +4256,7 @@ Config for: ${test.name}`));
                   await multiReporter.onHookStart({ hookId: hook.id, hookName: hook.name, phase: "teardown", hookExecutionId: hookExecId, runId });
                   const allVars = { ...envFileVars, ...perTestSetupVars };
                   if (cliVars) Object.assign(allVars, cliVars);
-                  const hookResult = await runHooks([hook], { ...sandboxOptions, envVars: { ...sandboxOptions.envVars, ...allVars } });
+                  const hookResult = await runHooks([hook], { ...teardownSandboxOptions, envVars: { ...teardownSandboxOptions.envVars, ...allVars } });
                   const hr = hookResult.results.get(hook.name);
                   await multiReporter.onHookEnd({
                     hookId: hook.id,
@@ -4144,7 +4295,8 @@ Config for: ${test.name}`));
               };
             }
             let ablationHandledDeprecation = false;
-            if (memoryProvider && memoryConfig?.ablationEnabled !== false && result.status === "failed") {
+            const authStateCaptureFailed = result.metadata?.phase === "auth-state-capture";
+            if (memoryProvider && memoryConfig?.ablationEnabled !== false && result.status === "failed" && !authStateCaptureFailed) {
               try {
                 const { shouldAblate, collectAllInjectedIds, deprecateOnFailure } = await import("@vostride/agent-qa-core");
                 if (shouldAblate(result, memoryProvider)) {
@@ -4152,6 +4304,7 @@ Config for: ${test.name}`));
                   const ablationAdapter = await createPlatformAdapter(testPlatform);
                   const mergedBrowser = mergedUse.browser;
                   const ablationPlatformConfig = buildPlatformConfig(testPlatform, testResolvedDevice, testTimeoutsForSetup, mergedBrowser ?? config.use?.browser, testMergedConfig.use?.logCapture ?? config.use?.logCapture, testFarmSession, testMobileResolved);
+                  ablationPlatformConfig.authState = activeTestAuthState;
                   ablationPlatformConfig.verbose = effectiveLogLevel === "debug";
                   if (opts.headless !== void 0 && ablationPlatformConfig.browser) {
                     ablationPlatformConfig.browser.headless = opts.headless;
@@ -4183,7 +4336,7 @@ Config for: ${test.name}`));
                       cliVars,
                       hookSetupVars: perTestSetupVars,
                       inlineHookDefs: resolvedHooks,
-                      inlineHookSandboxOptions: sandboxOptions,
+                      inlineHookSandboxOptions: authAwareSandboxOptions,
                       logCapture: testLogCapture,
                       accessibility: config.services?.accessibility,
                       accessibilityCheck: runWebAccessibilityCheck,
@@ -4250,6 +4403,9 @@ Config for: ${test.name}`));
                 console.warn(`  ${pc7.dim("Memory:")} curator error -- ${err.message}`);
               }
             }
+            if (testAuthStateUse?.capture === true) {
+              await multiReporter.onTestEnd(result);
+            }
             results.push(result);
             printRunAttributes(testAttributes);
             if (circuitBreaker && memoryProvider) {
@@ -4260,7 +4416,7 @@ Config for: ${test.name}`));
               circuitBreakerTripped = true;
               console.log(`  ${pc7.yellow("Memory: circuit breaker tripped -- disabling memory injection for remaining tests")}`);
             }
-            if (result.status === "failed" && actionCache && effectiveCacheEnabled && result.steps.length > 0) {
+            if (result.status === "failed" && !authStateCaptureFailed && actionCache && effectiveCacheEnabled && result.steps.length > 0) {
               const { hashStepInstruction: hashStepInstruction2 } = await import("@vostride/agent-qa-core");
               const { rm: rm3 } = await import("fs/promises");
               const { resolve: resolve9, join: join8 } = await import("path");
@@ -4391,7 +4547,7 @@ ${errStack}`;
               status: finalStatus,
               duration: run.startedAt ? Date.now() - new Date(run.startedAt).getTime() : 0,
               endedAt: (/* @__PURE__ */ new Date()).toISOString(),
-              failureSummary: isBrowserClose ? "Browser closed by user" : formattedError.failureSummary
+              failureSummary: isBrowserClose ? "Browser closed by user" : redactAuthStateValue(formattedError.failureSummary)
             });
             try {
               const artifact = _crashDb.getRunArtifact(run.id);
@@ -4404,7 +4560,7 @@ ${errStack}`;
                   errors: [{
                     code: isBrowserClose ? "browser-disconnect" : "process-close",
                     phase: "process-close",
-                    message: isBrowserClose ? "Browser closed by user" : formattedError.failureSummary
+                    message: isBrowserClose ? "Browser closed by user" : redactAuthStateValue(formattedError.failureSummary)
                   }]
                 });
               }
@@ -4560,7 +4716,8 @@ function createMcpCommand() {
       }
       const { startMcpServer } = await import("@vostride/agent-qa-mcp");
       try {
-        await startMcpServer({ analyticsConfig: config });
+        const startupOptions = { analyticsConfig: config, startupOutput: process.stderr };
+        await startMcpServer(startupOptions);
       } finally {
         await flushAnalytics2(config ? { config } : void 0).catch(() => {
         });
@@ -5198,37 +5355,267 @@ function createAuthCommand() {
   return cmd;
 }
 
-// src/commands/devices.ts
+// src/commands/auth-state.ts
 init_config();
+import { createInterface as createInterface3 } from "readline/promises";
+import { dirname as dirname7, resolve as resolvePath4 } from "path";
 import { Command as Command13 } from "commander";
+import pc13 from "picocolors";
+import {
+  AUTH_STATE_SCHEMA_VERSION as AUTH_STATE_SCHEMA_VERSION2,
+  listAuthStateMetadata,
+  readAuthStateMetadata,
+  removeAuthStateFiles,
+  removeAuthStateTarget,
+  resolveAuthStatePaths as resolveAuthStatePaths2,
+  writeAuthStateFiles
+} from "@vostride/agent-qa-core";
+function getGlobalConfigPath3(command) {
+  return command.parent?.parent?.opts().config ?? command.parent?.opts().config;
+}
+function isBrowserName(value) {
+  return value === "chromium" || value === "firefox" || value === "webkit";
+}
+function resolveBrowserName(config) {
+  const name = config.use?.browser?.name;
+  return isBrowserName(name) ? name : "chromium";
+}
+async function loadPlaywrightLaunchers() {
+  const { chromium, firefox, webkit } = await import("playwright-core");
+  return { chromium, firefox, webkit };
+}
+async function waitForCaptureConfirmation(input3) {
+  console.log(input3.message);
+  const rl = createInterface3({ input: process.stdin, output: process.stdout });
+  return await new Promise((resolve9) => {
+    let settled = false;
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      process.off("SIGINT", onSigint);
+      input3.browser.off?.("disconnected", onDisconnected);
+      rl.close();
+      resolve9(result);
+    };
+    const onSigint = () => finish("cancelled");
+    const onDisconnected = () => finish("browser-closed");
+    process.once("SIGINT", onSigint);
+    input3.browser.on("disconnected", onDisconnected);
+    rl.question("").then(() => finish("confirmed")).catch(() => finish("cancelled"));
+  });
+}
+async function authStateExists(paths) {
+  try {
+    await readAuthStateMetadata(paths);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function buildConfirmationMessage(targetName, stateName, exists) {
+  const replace = exists ? " Existing auth state will be replaced." : "";
+  return `Log in in the opened browser, then press Enter to save auth state "${stateName}" for target "${targetName}".${replace} Press Ctrl+C to cancel.`;
+}
+async function loadCommandContext(command) {
+  const configPath = getGlobalConfigPath3(command) ?? "agent-qa.config.yaml";
+  const configDir = dirname7(resolvePath4(configPath));
+  const config = await resolveConfig({ configPath, loadAuthPlugins: false });
+  return { configPath, configDir, config };
+}
+function isSafeAuthStateError(message) {
+  return message.includes("auth state is only supported for web targets") || message.includes("use.mobile.appState: preserve") || message.includes("Auth state name must match") || message.includes("Target name must match");
+}
+function printSafeAuthStateError(error, fallback) {
+  const message = error instanceof Error ? error.message : String(error);
+  console.error(pc13.red(isSafeAuthStateError(message) ? message : fallback));
+}
+function assertWebAuthStateTarget(input3) {
+  resolveAuthStatePaths2({
+    configDir: input3.configDir,
+    authStateDir: input3.config.services?.authState?.dir,
+    targetName: input3.target.name,
+    stateName: "placeholder",
+    target: { platform: input3.target.platform }
+  });
+}
+function printAuthStateList(metadata, targetName) {
+  if (metadata.length === 0) {
+    console.log(targetName ? `No auth states saved for target "${targetName}".` : "No auth states saved.");
+    return;
+  }
+  console.log("Target	Name	Captured	Kind");
+  for (const entry of metadata) {
+    console.log(`${entry.target}	${entry.name}	${entry.capturedAt}	${entry.kind}`);
+  }
+}
+async function closeBrowser(browser) {
+  if (!browser) return;
+  try {
+    await browser.close();
+  } catch {
+  }
+}
+function createAuthStateCommand(deps = {}) {
+  const cmd = new Command13("auth-state").description("Manage product auth state");
+  cmd.addCommand(
+    new Command13("list").description("List saved auth states").option("--target <target>", "target name from agent-qa config").action(async (opts, command) => {
+      try {
+        const { configDir, config } = await loadCommandContext(command);
+        let targetName;
+        if (opts.target) {
+          const target = resolveTarget(config, opts.target);
+          assertWebAuthStateTarget({ configDir, config, target });
+          targetName = target.name;
+        }
+        const metadata = await listAuthStateMetadata({
+          configDir,
+          authStateDir: config.services?.authState?.dir,
+          targetName
+        });
+        printAuthStateList(metadata, targetName);
+      } catch (error) {
+        printSafeAuthStateError(error, "Could not list auth states.");
+        process.exitCode = 1;
+      }
+    })
+  );
+  cmd.addCommand(
+    new Command13("remove").description("Remove saved auth state files for a target").requiredOption("--target <target>", "target name from agent-qa config").option("--name <name>", "logical auth-state name").action(async (opts, command) => {
+      let resolvedTargetName = opts.target;
+      try {
+        const { configDir, config } = await loadCommandContext(command);
+        const target = resolveTarget(config, opts.target);
+        resolvedTargetName = target.name;
+        if (opts.name) {
+          await removeAuthStateFiles({
+            configDir,
+            authStateDir: config.services?.authState?.dir,
+            targetName: target.name,
+            stateName: opts.name,
+            target: { platform: target.platform }
+          });
+          console.log(`Removed auth state "${opts.name}" for target "${target.name}".`);
+          return;
+        }
+        await removeAuthStateTarget({
+          configDir,
+          authStateDir: config.services?.authState?.dir,
+          targetName: target.name,
+          target: { platform: target.platform }
+        });
+        console.log(`Removed auth states for target "${target.name}".`);
+      } catch (error) {
+        printSafeAuthStateError(
+          error,
+          opts.name ? `Could not remove auth state "${opts.name}" for target "${resolvedTargetName}".` : `Could not remove auth states for target "${resolvedTargetName}".`
+        );
+        process.exitCode = 1;
+      }
+    })
+  );
+  cmd.addCommand(
+    new Command13("capture").description("Capture a named web auth state for a target").requiredOption("--target <target>", "target name from agent-qa config").requiredOption("--name <name>", "logical auth-state name").action(async (opts, command) => {
+      let browser;
+      try {
+        const { configDir, config } = await loadCommandContext(command);
+        const target = resolveTarget(config, opts.target);
+        const paths = resolveAuthStatePaths2({
+          configDir,
+          authStateDir: config.services?.authState?.dir,
+          targetName: target.name,
+          stateName: opts.name,
+          target: { platform: target.platform }
+        });
+        if (!target.url) {
+          console.error(pc13.red(`Target "${target.name}" must define a web URL for auth-state capture.`));
+          process.exitCode = 1;
+          return;
+        }
+        const launchers = deps.launchers ?? await loadPlaywrightLaunchers();
+        const browserName = resolveBrowserName(config);
+        browser = await launchers[browserName].launch({ headless: false });
+        const context = await browser.newContext();
+        const page = await context.newPage();
+        await page.goto(target.url, { waitUntil: "domcontentloaded" });
+        const exists = await authStateExists(paths);
+        const waitForConfirmation = deps.waitForConfirmation ?? waitForCaptureConfirmation;
+        const confirmation = await waitForConfirmation({
+          browser,
+          message: buildConfirmationMessage(target.name, opts.name, exists)
+        });
+        if (confirmation === "cancelled") {
+          await closeBrowser(browser);
+          console.log("Auth-state capture cancelled.");
+          process.exitCode = 1;
+          return;
+        }
+        if (confirmation === "browser-closed") {
+          await closeBrowser(browser);
+          console.error(pc13.red("Browser was closed before auth state was saved."));
+          process.exitCode = 1;
+          return;
+        }
+        const payload = await context.storageState({ indexedDB: true });
+        try {
+          await writeAuthStateFiles(paths, {
+            payload,
+            metadata: {
+              version: AUTH_STATE_SCHEMA_VERSION2,
+              kind: "web",
+              target: target.name,
+              name: opts.name,
+              capturedAt: (deps.now ?? (() => /* @__PURE__ */ new Date()))().toISOString()
+            }
+          });
+        } catch {
+          await closeBrowser(browser);
+          console.error(pc13.red(`Could not save auth state "${opts.name}" for target "${target.name}".`));
+          process.exitCode = 1;
+          return;
+        }
+        await closeBrowser(browser);
+        console.log(`Saved auth state "${opts.name}" for target "${target.name}".`);
+      } catch (error) {
+        await closeBrowser(browser);
+        console.error(pc13.red(error instanceof Error ? error.message : String(error)));
+        process.exitCode = 1;
+      }
+    })
+  );
+  return cmd;
+}
+
+// src/commands/devices.ts
+init_config();
+import { Command as Command14 } from "commander";
 import { execSync as execSync2 } from "child_process";
 import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 import { join as join5 } from "path";
 import { stringify as stringify2 } from "yaml";
-import pc13 from "picocolors";
+import pc14 from "picocolors";
 function formatStatus2(transport, localBinding) {
   if (transport !== "local") {
-    return pc13.green("Ready") + pc13.dim(" (no local binding required)");
+    return pc14.green("Ready") + pc14.dim(" (no local binding required)");
   }
   if (!localBinding) {
-    return pc13.red("UNBOUND") + pc13.yellow(" - run `agent-qa devices init`");
+    return pc14.red("UNBOUND") + pc14.yellow(" - run `agent-qa devices init`");
   }
   const keys = Object.entries(localBinding).slice(0, 2);
   const details = keys.map(([k, v]) => `${k}: ${v}`).join(", ");
-  return pc13.green("Bound") + pc13.dim(` (${details})`);
+  return pc14.green("Bound") + pc14.dim(` (${details})`);
 }
 async function listDevices() {
   let config;
   try {
     config = await resolveConfig({});
   } catch (err) {
-    console.error(pc13.red(`Config error: ${err instanceof Error ? err.message : String(err)}`));
+    console.error(pc14.red(`Config error: ${err instanceof Error ? err.message : String(err)}`));
     process.exitCode = 1;
     return;
   }
   const devices = config.registry?.devices;
   if (!devices || Object.keys(devices).length === 0) {
-    console.log(pc13.yellow("No devices configured in registry.devices"));
+    console.log(pc14.yellow("No devices configured in registry.devices"));
     return;
   }
   const localBindings = loadLocalBindings();
@@ -5236,13 +5623,13 @@ async function listDevices() {
   const platWidth = 10;
   const transWidth = 14;
   console.log("");
-  console.log(pc13.bold("  Configured Devices"));
+  console.log(pc14.bold("  Configured Devices"));
   console.log("");
   console.log(
-    `  ${pc13.dim("Name".padEnd(nameWidth))}  ${pc13.dim("Platform".padEnd(platWidth))}  ${pc13.dim("Transport".padEnd(transWidth))}  ${pc13.dim("Status")}`
+    `  ${pc14.dim("Name".padEnd(nameWidth))}  ${pc14.dim("Platform".padEnd(platWidth))}  ${pc14.dim("Transport".padEnd(transWidth))}  ${pc14.dim("Status")}`
   );
   console.log(
-    `  ${pc13.dim("\u2500".repeat(nameWidth))}  ${pc13.dim("\u2500".repeat(platWidth))}  ${pc13.dim("\u2500".repeat(transWidth))}  ${pc13.dim("\u2500".repeat(30))}`
+    `  ${pc14.dim("\u2500".repeat(nameWidth))}  ${pc14.dim("\u2500".repeat(platWidth))}  ${pc14.dim("\u2500".repeat(transWidth))}  ${pc14.dim("\u2500".repeat(30))}`
   );
   for (const [name, profile] of Object.entries(devices)) {
     const localBinding = localBindings?.devices?.[name] ?? null;
@@ -5306,28 +5693,28 @@ async function initDevices() {
   const dir = process.cwd();
   const localFilePath = join5(dir, "agent-qa.local.yaml");
   if (existsSync3(localFilePath)) {
-    console.log(pc13.yellow("agent-qa.local.yaml already exists. Skipping generation."));
+    console.log(pc14.yellow("agent-qa.local.yaml already exists. Skipping generation."));
     return;
   }
-  console.log(pc13.bold("\n  Scanning for connected devices...\n"));
+  console.log(pc14.bold("\n  Scanning for connected devices...\n"));
   const adbDevices = scanAdbDevices();
   const simctlDevices = scanSimctlDevices();
   if (adbDevices.length > 0) {
-    console.log(`  ${pc13.green("Android:")} found ${adbDevices.length} device(s)`);
+    console.log(`  ${pc14.green("Android:")} found ${adbDevices.length} device(s)`);
     for (const d of adbDevices) {
-      console.log(`    ${pc13.dim("\u2022")} ${d.model} (${d.serial})`);
+      console.log(`    ${pc14.dim("\u2022")} ${d.model} (${d.serial})`);
     }
   } else {
-    console.log(`  ${pc13.dim("Android:")} no devices found (adb not available or no devices connected)`);
+    console.log(`  ${pc14.dim("Android:")} no devices found (adb not available or no devices connected)`);
   }
   if (simctlDevices.length > 0) {
     const booted = simctlDevices.filter((d) => d.state === "Booted");
-    console.log(`  ${pc13.green("iOS:")} found ${simctlDevices.length} simulator(s) (${booted.length} booted)`);
+    console.log(`  ${pc14.green("iOS:")} found ${simctlDevices.length} simulator(s) (${booted.length} booted)`);
     for (const d of booted) {
-      console.log(`    ${pc13.dim("\u2022")} ${d.name} (${d.udid})`);
+      console.log(`    ${pc14.dim("\u2022")} ${d.name} (${d.udid})`);
     }
   } else {
-    console.log(`  ${pc13.dim("iOS:")} no simulators found (simctl not available or none installed)`);
+    console.log(`  ${pc14.dim("iOS:")} no simulators found (simctl not available or none installed)`);
   }
   let config;
   try {
@@ -5361,20 +5748,20 @@ async function initDevices() {
   writeFileSync2(localFilePath, yamlContent);
   appendGitignoreEntry(dir, "agent-qa.local.yaml");
   console.log("");
-  console.log(pc13.green(`  Generated agent-qa.local.yaml with ${bindCount} device binding(s)`));
-  console.log(pc13.dim("  Added agent-qa.local.yaml to .gitignore"));
+  console.log(pc14.green(`  Generated agent-qa.local.yaml with ${bindCount} device binding(s)`));
+  console.log(pc14.dim("  Added agent-qa.local.yaml to .gitignore"));
   console.log("");
 }
 function createDevicesCommand() {
-  const cmd = new Command13("devices").description("Manage device profiles and local bindings");
+  const cmd = new Command14("devices").description("Manage device profiles and local bindings");
   cmd.command("list").description("Show configured devices with merged shared + local view").action(listDevices);
   cmd.command("init").description("Scan connected devices and generate agent-qa.local.yaml").action(initDevices);
   return cmd;
 }
 
 // src/commands/ids.ts
-import { Command as Command14 } from "commander";
-import pc14 from "picocolors";
+import { Command as Command15 } from "commander";
+import pc15 from "picocolors";
 import {
   ENTITY_ID_TYPES,
   generateCanonicalId,
@@ -5388,7 +5775,7 @@ function parseEntityType(value) {
   throw new Error(`Unknown ID type "${value}". Expected one of: ${ENTITY_ID_TYPES.join(", ")}`);
 }
 function createIdsCommand() {
-  const cmd = new Command14("ids").description("Generate and validate canonical agent-qa entity IDs");
+  const cmd = new Command15("ids").description("Generate and validate canonical agent-qa entity IDs");
   cmd.command("generate").description("Generate a canonical agent-qa ID using id-agent").argument("<type>", `entity type: ${ENTITY_ID_TYPES.join("|")}`).option("--json", "print structured JSON").action((typeValue, opts) => {
     try {
       const type = parseEntityType(typeValue);
@@ -5400,7 +5787,7 @@ function createIdsCommand() {
         console.log(id);
       }
     } catch (err) {
-      console.error(pc14.red(err instanceof Error ? err.message : String(err)));
+      console.error(pc15.red(err instanceof Error ? err.message : String(err)));
       process.exitCode = 1;
     }
   });
@@ -5419,15 +5806,15 @@ function createIdsCommand() {
       if (opts.json) {
         console.log(JSON.stringify(result, null, 2));
       } else if (valid) {
-        console.log(pc14.green(result.message));
+        console.log(pc15.green(result.message));
       } else {
-        console.error(pc14.red(result.message));
+        console.error(pc15.red(result.message));
       }
       if (!valid) {
         process.exitCode = 1;
       }
     } catch (err) {
-      console.error(pc14.red(err instanceof Error ? err.message : String(err)));
+      console.error(pc15.red(err instanceof Error ? err.message : String(err)));
       process.exitCode = 1;
     }
   });
@@ -5435,18 +5822,18 @@ function createIdsCommand() {
 }
 
 // src/commands/create-test.ts
-import { Command as Command15 } from "commander";
+import { Command as Command16 } from "commander";
 import { generateTestId } from "@vostride/agent-qa-ids";
 import { stringify as stringify3 } from "yaml";
 import { writeFile as writeFile2, mkdir } from "fs/promises";
 import { existsSync as existsSync4 } from "fs";
-import { resolve as resolve6, dirname as dirname7 } from "path";
-import pc15 from "picocolors";
+import { resolve as resolve6, dirname as dirname8 } from "path";
+import pc16 from "picocolors";
 function createCreateTestCommand() {
-  const cmd = new Command15("create-test").description("Scaffold a new test YAML file with auto-generated ID").argument("<path>", "output file path for the test YAML").action(async (path) => {
+  const cmd = new Command16("create-test").description("Scaffold a new test YAML file with auto-generated ID").argument("<path>", "output file path for the test YAML").action(async (path) => {
     const resolved = resolve6(path);
     if (existsSync4(resolved)) {
-      console.error(pc15.red("Error: File already exists: " + resolved));
+      console.error(pc16.red("Error: File already exists: " + resolved));
       process.exitCode = 1;
       return;
     }
@@ -5458,27 +5845,27 @@ function createCreateTestCommand() {
       steps: ["Describe your first test step here"]
     };
     const yamlContent = stringify3(template);
-    await mkdir(dirname7(resolved), { recursive: true });
+    await mkdir(dirname8(resolved), { recursive: true });
     await writeFile2(resolved, yamlContent, "utf-8");
-    console.log(pc15.green("Created " + resolved));
-    console.log(pc15.dim("  test-id: " + testId));
+    console.log(pc16.green("Created " + resolved));
+    console.log(pc16.dim("  test-id: " + testId));
   });
   return cmd;
 }
 
 // src/commands/create-suite.ts
-import { Command as Command16 } from "commander";
+import { Command as Command17 } from "commander";
 import { generateSuiteId } from "@vostride/agent-qa-ids";
 import { stringify as stringify4 } from "yaml";
 import { writeFile as writeFile3, mkdir as mkdir2 } from "fs/promises";
 import { existsSync as existsSync5 } from "fs";
-import { resolve as resolve7, dirname as dirname8 } from "path";
-import pc16 from "picocolors";
+import { resolve as resolve7, dirname as dirname9 } from "path";
+import pc17 from "picocolors";
 function createCreateSuiteCommand() {
-  const cmd = new Command16("create-suite").description("Scaffold a new suite YAML file with auto-generated ID").argument("<path>", "output file path for the suite YAML").action(async (path) => {
+  const cmd = new Command17("create-suite").description("Scaffold a new suite YAML file with auto-generated ID").argument("<path>", "output file path for the suite YAML").action(async (path) => {
     const resolved = resolve7(path);
     if (existsSync5(resolved)) {
-      console.error(pc16.red("Error: File already exists: " + resolved));
+      console.error(pc17.red("Error: File already exists: " + resolved));
       process.exitCode = 1;
       return;
     }
@@ -5492,19 +5879,19 @@ function createCreateSuiteCommand() {
       "tests: []",
       "tests: []\n  # - test: ./path/to/test.yaml\n  #   id: my-test-id"
     );
-    await mkdir2(dirname8(resolved), { recursive: true });
+    await mkdir2(dirname9(resolved), { recursive: true });
     await writeFile3(resolved, yamlContent, "utf-8");
-    console.log(pc16.green("Created " + resolved));
-    console.log(pc16.dim("  suite-id: " + suiteId));
+    console.log(pc17.green("Created " + resolved));
+    console.log(pc17.dim("  suite-id: " + suiteId));
   });
   return cmd;
 }
 
 // src/commands/clean-memory.ts
 init_config();
-import { Command as Command17 } from "commander";
-import pc17 from "picocolors";
-import { createInterface as createInterface3 } from "readline";
+import { Command as Command18 } from "commander";
+import pc18 from "picocolors";
+import { createInterface as createInterface4 } from "readline";
 import { readFile as readFile4, readdir as readdir2, rm as rm2, stat as stat2 } from "fs/promises";
 import { existsSync as existsSync6 } from "fs";
 import { join as join6 } from "path";
@@ -5560,7 +5947,7 @@ async function getOrphanInfo(memoryRoot, tier, scope) {
   };
 }
 function createCleanMemoryCommand() {
-  const cmd = new Command17("clean-memory").description("Remove orphaned memory observation directories").option("-y, --yes", "skip confirmation prompt").action(async (_opts, command) => {
+  const cmd = new Command18("clean-memory").description("Remove orphaned memory observation directories").option("-y, --yes", "skip confirmation prompt").action(async (_opts, command) => {
     const opts = command.opts();
     const configPath = command.parent?.opts()?.config ?? "agent-qa.config.yaml";
     const config = await resolveConfig({ configPath });
@@ -5593,7 +5980,7 @@ function createCleanMemoryCommand() {
     }
     const memoryRoot = resolveMemoryRoot2(config, workspace.configDir);
     if (!existsSync6(memoryRoot)) {
-      console.log(pc17.dim("No memory directory found."));
+      console.log(pc18.dim("No memory directory found."));
       return;
     }
     const TIERS = [
@@ -5623,22 +6010,22 @@ function createCleanMemoryCommand() {
       }
     }
     if (orphans.length === 0) {
-      console.log(pc17.dim("No orphaned memory directories found."));
+      console.log(pc18.dim("No orphaned memory directories found."));
       return;
     }
     const maxPathLen = Math.max("Path".length, ...orphans.map((o) => o.path.length));
     console.log("");
-    console.log(pc17.bold("Orphaned memory directories:"));
+    console.log(pc18.bold("Orphaned memory directories:"));
     console.log("");
-    console.log("  " + pc17.dim("Path".padEnd(maxPathLen + 2) + "Files".padStart(7) + "  " + "Last Confirmed".padEnd(20) + "Size".padStart(10)));
-    console.log("  " + pc17.dim("-".repeat(maxPathLen + 2 + 7 + 2 + 20 + 10)));
+    console.log("  " + pc18.dim("Path".padEnd(maxPathLen + 2) + "Files".padStart(7) + "  " + "Last Confirmed".padEnd(20) + "Size".padStart(10)));
+    console.log("  " + pc18.dim("-".repeat(maxPathLen + 2 + 7 + 2 + 20 + 10)));
     for (const o of orphans) {
-      const confirmed = o.lastConfirmed ?? pc17.dim("never");
+      const confirmed = o.lastConfirmed ?? pc18.dim("never");
       console.log("  " + o.path.padEnd(maxPathLen + 2) + String(o.fileCount).padStart(7) + "  " + String(confirmed).padEnd(20) + formatSize(o.size).padStart(10));
     }
     console.log("");
     if (!opts.yes) {
-      const rl = createInterface3({ input: process.stdin, output: process.stdout });
+      const rl = createInterface4({ input: process.stdin, output: process.stdout });
       const answer = await new Promise((res) => {
         rl.question(`Delete ${orphans.length} orphaned director${orphans.length === 1 ? "y" : "ies"}? (y/N) `, res);
       });
@@ -5651,15 +6038,15 @@ function createCleanMemoryCommand() {
     for (const orphan of orphans) {
       await rm2(join6(memoryRoot, orphan.tier, orphan.scope), { recursive: true, force: true });
     }
-    console.log(pc17.green(`Deleted ${orphans.length} orphaned director${orphans.length === 1 ? "y" : "ies"}.`));
+    console.log(pc18.green(`Deleted ${orphans.length} orphaned director${orphans.length === 1 ? "y" : "ies"}.`));
   });
   return cmd;
 }
 
 // src/commands/skills.ts
-import { Command as Command18 } from "commander";
+import { Command as Command19 } from "commander";
 import { existsSync as existsSync7, readdirSync, readFileSync as readFileSync4, statSync } from "fs";
-import { dirname as dirname9, join as join7, resolve as resolve8 } from "path";
+import { dirname as dirname10, join as join7, resolve as resolve8 } from "path";
 import { fileURLToPath } from "url";
 function findPackageRoot(startDir) {
   let current = resolve8(startDir);
@@ -5674,7 +6061,7 @@ function findPackageRoot(startDir) {
       } catch {
       }
     }
-    const parent = dirname9(current);
+    const parent = dirname10(current);
     if (parent === current) {
       return resolve8(startDir);
     }
@@ -5692,7 +6079,7 @@ function hasSkillDirectories(dir) {
     return false;
   }
 }
-function resolveAgentQaSkillsDirectory(startDir = dirname9(fileURLToPath(import.meta.url))) {
+function resolveAgentQaSkillsDirectory(startDir = dirname10(fileURLToPath(import.meta.url))) {
   const packageRoot = findPackageRoot(startDir);
   const packagedSkills = join7(packageRoot, "skills");
   if (hasSkillDirectories(packagedSkills)) {
@@ -5726,7 +6113,7 @@ function listAgentQaSkills(skillsDir) {
 function createSkillsCommand(options = {}) {
   const stdout = options.stdout ?? process.stdout;
   const stderr = options.stderr ?? process.stderr;
-  return new Command18("skills").description("List packaged agent-qa skills").option("--json", "print machine-readable output").action((opts) => {
+  return new Command19("skills").description("List packaged agent-qa skills").option("--json", "print machine-readable output").action((opts) => {
     const resolved = resolveAgentQaSkillsDirectory(options.startDir);
     const skills = listAgentQaSkills(resolved.path);
     if (resolved.source === "missing" || skills.length === 0) {
@@ -5807,7 +6194,7 @@ function rejectRemovedCliSurface(input3 = {}) {
 
 // src/cli.ts
 rejectRemovedCliSurface();
-var program = new Command19();
+var program = new Command20();
 program.enablePositionalOptions();
 program.name("agent-qa").description("AI-powered testing framework").version(VERSION);
 program.option("--config <path>", "config file path", "agent-qa.config.yaml").option("--log-level <level>", "log verbosity: silent|error|warn|info|debug").option("--verbose", "shorthand for --log-level debug").option("--quiet", "shorthand for --log-level silent");
@@ -5824,6 +6211,7 @@ program.addCommand(createQueueCommand());
 program.addCommand(createCacheCommand());
 program.addCommand(createValidateCommand());
 program.addCommand(createAuthCommand());
+program.addCommand(createAuthStateCommand());
 program.addCommand(createDevicesCommand());
 program.addCommand(createIdsCommand());
 program.addCommand(createCreateTestCommand());