monday-cli 0.2.0 → 0.3.0

package/dist/commands/workspace/update.js

@@ -44,6 +44,7 @@ import { parseArgv } from '../parse-argv.js';
 import { ApiError, UsageError } from '../../utils/errors.js';
 import { unwrapOrThrow } from '../../utils/parse-boundary.js';
 import { WORKSPACE_FIELDS_FRAGMENT, workspaceProjectionSchema, } from '../../api/workspace-projection.js';
+import { assertResponseFieldPresent } from '../../api/response-root.js';
 const WORKSPACE_UPDATE_PREFLIGHT_QUERY = `
   query WorkspaceUpdatePreflight($ids: [ID!]) {
     workspaces(ids: $ids) {
@@ -196,21 +197,20 @@ export const workspaceUpdateCommand = {
                     'verify the response shape and update responseSchema if ' +
                     'Monday\'s contract has changed.',
             });
-            // Codex M14 round-3 F1: distinguish "root key absent"
-            // (schema-drift → internal_error) from "value null"
-            // (workspace missing → not_found). Pre-fix, both landed
-            // as not_found and agents couldn't tell a CLI/API contract
-            // break from a normal resource absence.
-            if (!('update_workspace' in data)) {
-                throw new ApiError('internal_error', `Monday's WorkspaceUpdate response is missing the update_workspace root field`, {
-                    details: {
-                        workspace_id: parsed.workspaceId,
-                        hint: 'this is a schema-drift error in Monday\'s GraphQL ' +
-                            'response; verify the mutation declaration and update ' +
-                            'the response schema if Monday\'s contract has changed.',
-                    },
-                });
-            }
+            // R42 (post-v0.2 → v0.3 cleanup follow-up): consolidate the
+            // M14 round-3 F1 inline missing-key check onto the shared
+            // helper. Distinguishes "root key absent" (schema-drift →
+            // internal_error) from "value null" (workspace missing →
+            // not_found via projectUpdatedWorkspace). M14 workspace verbs
+            // were missed by the initial R42 sweep (the §22 sites list
+            // jumped M13 → M15); folded in here.
+            assertResponseFieldPresent({
+                data,
+                key: 'update_workspace',
+                operationLabel: 'WorkspaceUpdate',
+                details: { workspace_id: parsed.workspaceId },
+                nullHandling: 'caller_handles',
+            });
             const projected = projectUpdatedWorkspace(data.update_workspace, parsed.workspaceId);
             emitMutation({
                 ctx,

package/dist/commands/workspace/update.js.map

@@ -1 +1 @@
-{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../src/commands/workspace/update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAsB,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAE1B,MAAM,mCAAmC,CAAC;AAE3C,MAAM,gCAAgC,GAAG;;;QAGjC,yBAAyB;;;CAGhC,CAAC;AAEF,MAAM,yBAAyB,GAAG;;;QAG1B,yBAAyB;;;CAGhC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC;AAIrE,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,WAAW,EAAE,iBAAiB;IAC9B,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE;QAClC,OAAO,EAAE,wDAAwD;KAClE,CAAC;SACD,QAAQ,EAAE;IACb,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAClF;IACE,OAAO,EACL,2EAA2E;CAC9E,CACF,CAAC;AAEJ,MAAM,uBAAuB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,KAAK,EAAE,CAAC;AAEX,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;CAC9B,CAAC;KACD,KAAK,EAAE,CAAC;AAOX,MAAM,CAAC,MAAM,sBAAsB,GAG/B;IACF,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,0CAA0C;IACnD,QAAQ,EAAE;QACR,uDAAuD;QACvD,6CAA6C;QAC7C,wEAAwE;QACxE,8DAA8D;KAC/D;IACD,mEAAmE;IACnE,kEAAkE;IAClE,yCAAyC;IACzC,UAAU,EAAE,IAAI;IAChB,WAAW;IACX,YAAY,EAAE,2BAA2B;IACzC,MAAM,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC;QAC1E,IAAI;aACD,OAAO,CAAC,sBAAsB,CAAC;aAC/B,WAAW,CAAC,sBAAsB,CAAC,OAAO,CAAC;aAC3C,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAAC;aAC1C,MAAM,CAAC,YAAY,EAAE,iCAAiC,CAAC;aACvD,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;aACxD,WAAW,CACV,OAAO,EACP,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,sBAAsB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC1F;aACA,MAAM,CAAC,KAAK,EAAE,WAAoB,EAAE,IAAa,EAAE,EAAE;YACpD,MAAM,MAAM,GAAG,SAAS,CAAC,sBAAsB,CAAC,WAAW,EAAE;gBAC3D,WAAW;gBACX,GAAI,IAA0C;aAC/C,CAAC,CAAC;YACH,6DAA6D;YAC7D,4DAA4D;YAC5D,6DAA6D;YAC7D,2DAA2D;YAC3D,wDAAwD;YACxD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;YAExC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,aAAa,CAC/D,GAAG,EACH,OAAO,CAAC,IAAI,EAAE,CACf,CAAC;YAEF,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;gBACvB,0DAA0D;gBAC1D,wDAAwD;gBACxD,uDAAuD;gBACvD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,CAChC,gCAAgC,EAChC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAC7B,EAAE,aAAa,EAAE,0BAA0B,EAAE,CAC9C,CAAC;gBACF,MAAM,aAAa,GAAG,aAAa,CACjC,uBAAuB,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,EACjD;oBACE,OAAO,EACL,+DAA+D;oBACjE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE;iBAC9C,CACF,CAAC;gBACF,MAAM,KAAK,GAAY,CAAC,aAAa,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC1C,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,uCAAuC,MAAM,CAAC,WAAW,EAAE,EAC3D,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAClD,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAG,aAAa,CAC3B,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,EAC5C;oBACE,OAAO,EAAE,2DAA2D;oBACpE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE;iBAC9C,CACF,CAAC;gBAEF,MAAM,IAAI,GAA8B,EAAE,CAAC;gBAC3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,IAAI,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;gBACtD,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC9B,IAAI,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;gBACtD,CAAC;gBACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;oBACrC,IAAI,CAAC,WAAW,GAAG;wBACjB,IAAI,EAAE,OAAO,CAAC,WAAW;wBACzB,EAAE,EAAE,MAAM,CAAC,WAAW;qBACvB,CAAC;gBACJ,CAAC;gBAED,UAAU,CAAC;oBACT,GAAG;oBACH,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE;oBAC3B,cAAc,EAAE;wBACd;4BACE,SAAS,EAAE,kBAAkB;4BAC7B,YAAY,EAAE,MAAM,CAAC,WAAW;4BAChC,IAAI;yBACL;qBACF;oBACD,MAAM,EAAE,MAAM;oBACd,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU;iBACX,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,sDAAsD;YACtD,4DAA4D;YAC5D,wCAAwC;YACxC,MAAM,UAAU,GAA4B,EAAE,CAAC;YAC/C,IAAI,WAAW,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,GAAG,WAAW,CAAC;YAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YAC7D,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACrC,UAAU,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YAC9C,CAAC;YACD,2DAA2D;YAC3D,0DAA0D;YAC1D,+DAA+D;YAC/D,4DAA4D;YAC5D,4DAA4D;YAC5D,sBAAsB;YACtB,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,UAAU,CAClB,2EAA2E,EAC3E,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAClD,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAC/B,yBAAyB,EACzB,EAAE,EAAE,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,EACtC,EAAE,aAAa,EAAE,iBAAiB,EAAE,CACrC,CAAC;YACF,MAAM,IAAI,GAAG,aAAa,CACxB,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC3C;gBACE,OAAO,EAAE,sDAAsD;gBAC/D,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC7C,IAAI,EACF,wDAAwD;oBACxD,yDAAyD;oBACzD,iCAAiC;aACpC,CACF,CAAC;YACF,sDAAsD;YACtD,oDAAoD;YACpD,wDAAwD;YACxD,2DAA2D;YAC3D,wCAAwC;YACxC,IAAI,CAAC,CAAC,kBAAkB,IAAI,IAAI,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,QAAQ,CAChB,gBAAgB,EAChB,8EAA8E,EAC9E;oBACE,OAAO,EAAE;wBACP,YAAY,EAAE,MAAM,CAAC,WAAW;wBAChC,IAAI,EACF,oDAAoD;4BACpD,uDAAuD;4BACvD,wDAAwD;qBAC3D;iBACF,CACF,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,uBAAuB,CACvC,IAAI,CAAC,gBAAgB,EACrB,MAAM,CAAC,WAAW,CACnB,CAAC;YAEF,YAAY,CAAC;gBACX,GAAG;gBACH,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,sBAAsB,CAAC,YAAY;gBAC3C,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE;gBAC3B,QAAQ,EAAE,EAAE;gBACZ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACnB,MAAM,EAAE,MAAM;gBACd,eAAe,EAAE,IAAI;aACtB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;CACF,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAC9B,GAAY,EACZ,WAAmB,EACI,EAAE;IACzB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,qEAAqE,WAAW,EAAE,EAClF,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAClB,2BAA2B,CAAC,SAAS,CAAC,GAAG,CAAC,EAC1C;QACE,OAAO,EAAE,wDAAwD,WAAW,EAAE;QAC9E,OAAO,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE;KACvC,CACF,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../src/commands/workspace/update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAsB,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAExE,MAAM,gCAAgC,GAAG;;;QAGjC,yBAAyB;;;CAGhC,CAAC;AAEF,MAAM,yBAAyB,GAAG;;;QAG1B,yBAAyB;;;CAGhC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC;AAIrE,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,WAAW,EAAE,iBAAiB;IAC9B,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE;QAClC,OAAO,EAAE,wDAAwD;KAClE,CAAC;SACD,QAAQ,EAAE;IACb,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAClF;IACE,OAAO,EACL,2EAA2E;CAC9E,CACF,CAAC;AAEJ,MAAM,uBAAuB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,KAAK,EAAE,CAAC;AAEX,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;CAC9B,CAAC;KACD,KAAK,EAAE,CAAC;AAOX,MAAM,CAAC,MAAM,sBAAsB,GAG/B;IACF,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,0CAA0C;IACnD,QAAQ,EAAE;QACR,uDAAuD;QACvD,6CAA6C;QAC7C,wEAAwE;QACxE,8DAA8D;KAC/D;IACD,mEAAmE;IACnE,kEAAkE;IAClE,yCAAyC;IACzC,UAAU,EAAE,IAAI;IAChB,WAAW;IACX,YAAY,EAAE,2BAA2B;IACzC,MAAM,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC;QAC1E,IAAI;aACD,OAAO,CAAC,sBAAsB,CAAC;aAC/B,WAAW,CAAC,sBAAsB,CAAC,OAAO,CAAC;aAC3C,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAAC;aAC1C,MAAM,CAAC,YAAY,EAAE,iCAAiC,CAAC;aACvD,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;aACxD,WAAW,CACV,OAAO,EACP,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,sBAAsB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC1F;aACA,MAAM,CAAC,KAAK,EAAE,WAAoB,EAAE,IAAa,EAAE,EAAE;YACpD,MAAM,MAAM,GAAG,SAAS,CAAC,sBAAsB,CAAC,WAAW,EAAE;gBAC3D,WAAW;gBACX,GAAI,IAA0C;aAC/C,CAAC,CAAC;YACH,6DAA6D;YAC7D,4DAA4D;YAC5D,6DAA6D;YAC7D,2DAA2D;YAC3D,wDAAwD;YACxD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;YAExC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,aAAa,CAC/D,GAAG,EACH,OAAO,CAAC,IAAI,EAAE,CACf,CAAC;YAEF,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;gBACvB,0DAA0D;gBAC1D,wDAAwD;gBACxD,uDAAuD;gBACvD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,CAChC,gCAAgC,EAChC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAC7B,EAAE,aAAa,EAAE,0BAA0B,EAAE,CAC9C,CAAC;gBACF,MAAM,aAAa,GAAG,aAAa,CACjC,uBAAuB,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,EACjD;oBACE,OAAO,EACL,+DAA+D;oBACjE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE;iBAC9C,CACF,CAAC;gBACF,MAAM,KAAK,GAAY,CAAC,aAAa,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC1C,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,uCAAuC,MAAM,CAAC,WAAW,EAAE,EAC3D,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAClD,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAG,aAAa,CAC3B,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,EAC5C;oBACE,OAAO,EAAE,2DAA2D;oBACpE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE;iBAC9C,CACF,CAAC;gBAEF,MAAM,IAAI,GAA8B,EAAE,CAAC;gBAC3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,IAAI,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;gBACtD,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC9B,IAAI,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;gBACtD,CAAC;gBACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;oBACrC,IAAI,CAAC,WAAW,GAAG;wBACjB,IAAI,EAAE,OAAO,CAAC,WAAW;wBACzB,EAAE,EAAE,MAAM,CAAC,WAAW;qBACvB,CAAC;gBACJ,CAAC;gBAED,UAAU,CAAC;oBACT,GAAG;oBACH,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE;oBAC3B,cAAc,EAAE;wBACd;4BACE,SAAS,EAAE,kBAAkB;4BAC7B,YAAY,EAAE,MAAM,CAAC,WAAW;4BAChC,IAAI;yBACL;qBACF;oBACD,MAAM,EAAE,MAAM;oBACd,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU;iBACX,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,sDAAsD;YACtD,4DAA4D;YAC5D,wCAAwC;YACxC,MAAM,UAAU,GAA4B,EAAE,CAAC;YAC/C,IAAI,WAAW,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,GAAG,WAAW,CAAC;YAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YAC7D,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACrC,UAAU,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YAC9C,CAAC;YACD,2DAA2D;YAC3D,0DAA0D;YAC1D,+DAA+D;YAC/D,4DAA4D;YAC5D,4DAA4D;YAC5D,sBAAsB;YACtB,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,UAAU,CAClB,2EAA2E,EAC3E,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAClD,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAC/B,yBAAyB,EACzB,EAAE,EAAE,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,EACtC,EAAE,aAAa,EAAE,iBAAiB,EAAE,CACrC,CAAC;YACF,MAAM,IAAI,GAAG,aAAa,CACxB,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC3C;gBACE,OAAO,EAAE,sDAAsD;gBAC/D,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC7C,IAAI,EACF,wDAAwD;oBACxD,yDAAyD;oBACzD,iCAAiC;aACpC,CACF,CAAC;YACF,4DAA4D;YAC5D,0DAA0D;YAC1D,0DAA0D;YAC1D,yDAAyD;YACzD,8DAA8D;YAC9D,2DAA2D;YAC3D,qCAAqC;YACrC,0BAA0B,CAAC;gBACzB,IAAI;gBACJ,GAAG,EAAE,kBAAkB;gBACvB,cAAc,EAAE,iBAAiB;gBACjC,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC7C,YAAY,EAAE,gBAAgB;aAC/B,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,uBAAuB,CACvC,IAAI,CAAC,gBAAgB,EACrB,MAAM,CAAC,WAAW,CACnB,CAAC;YAEF,YAAY,CAAC;gBACX,GAAG;gBACH,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,sBAAsB,CAAC,YAAY;gBAC3C,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE;gBAC3B,QAAQ,EAAE,EAAE;gBACZ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACnB,MAAM,EAAE,MAAM;gBACd,eAAe,EAAE,IAAI;aACtB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;CACF,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAC9B,GAAY,EACZ,WAAmB,EACI,EAAE;IACzB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,qEAAqE,WAAW,EAAE,EAClF,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAClB,2BAA2B,CAAC,SAAS,CAAC,GAAG,CAAC,EAC1C;QACE,OAAO,EAAE,wDAAwD,WAAW,EAAE;QAC9E,OAAO,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE;KACvC,CACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/config/credentials.d.ts

@@ -0,0 +1,189 @@
+/**
+ * Credentials cache primitive for the v0.3-M21 `monday auth login` /
+ * `monday auth logout` verbs (cli-design §7.4 — closes Decision 3).
+ *
+ * **What this module owns.** The mode-`0600` per-profile credentials
+ * file at `~/.monday-cli/credentials`, read/write/delete primitives,
+ * and the per-profile token-source-order resolver
+ * (§7.4.1: credentials cache > `api_token_env` > `config_error`).
+ *
+ * **What this module does NOT own.** The credentials file shape is
+ * intentionally orthogonal to:
+ *   - the OAuth wire flow (`src/api/oauth.ts`),
+ *   - the TOML profile loader (`src/config/profiles.ts`),
+ *   - the redaction layer (`src/utils/redact.ts`).
+ *
+ * **Mirrors `src/api/cache.ts writeJsonFile` verbatim** per cli-design
+ * §7.4.2. The R-candidate "secure-file primitive shared between cache
+ * + credentials" (v0.3-plan §22) flags consolidation when a third
+ * consumer lands; today's two-consumer state stays below threshold,
+ * so this module duplicates the disk-discipline shape rather than
+ * extracting it. The duplication is intentional and the §7.4.2
+ * "mirror verbatim" wording is the in-design backstop.
+ *
+ * **Disk discipline (§7.4.2):**
+ *
+ *   1. `mkdir({ recursive: true, mode: 0o700 })` + explicit `chmod
+ *      0o700` on the parent dir (advisory under umask on some
+ *      platforms; mirrors `src/api/cache.ts`).
+ *   2. Atomic-replace via `writeFile(tmp, payload, { mode: 0o600 })`
+ *      → `chmod(tmp, 0o600)` → `rename(tmp, final)`.
+ *   3. Read-time `fs.fstat`-against-open-descriptor permission check
+ *      (`(stats.mode & 0o077) !== 0` → refuse, surface
+ *      `config_error` with `details.path` + `details.hint`).
+ */
+import { z } from 'zod';
+/**
+ * File-mode constant for the credentials file. Mirrors
+ * `src/api/cache.ts CACHE_FILE_MODE`. The R-candidate consolidation
+ * (v0.3-plan §22) would re-export this from a shared `secure-file`
+ * primitive; the constant lives here for pre-flight to keep the two
+ * surfaces independent.
+ */
+export declare const CREDENTIALS_FILE_MODE = 384;
+/**
+ * Bitmask used to detect group/world readable bits on read. A non-
+ * zero result means the file is loose; the read path refuses to
+ * open it.
+ */
+export declare const CREDENTIALS_INSECURE_BITS = 63;
+/**
+ * Pinned at `"1"` for v0.3; reserved for a future migration if the
+ * per-profile shape grows incompatibly. Mirrors the cache module's
+ * `CACHE_SCHEMA_VERSION`.
+ */
+export declare const CREDENTIALS_SCHEMA_VERSION = "1";
+/** Filename under `~/.monday-cli/`. Pinned for HOME-scoping. */
+export declare const CREDENTIALS_FILE_NAME = "credentials";
+/** Parent directory under HOME. Pinned to match cli-design §7.4.2. */
+export declare const CREDENTIALS_DIR_NAME = ".monday-cli";
+/**
+ * Per-profile credentials entry per cli-design §7.4.1.
+ */
+export declare const profileEntrySchema: z.ZodObject<{
+    access_token: z.ZodString;
+    obtained_at: z.ZodString;
+    expires_at: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+    scopes: z.ZodArray<z.ZodString>;
+    account_id: z.ZodString;
+}, z.core.$strict>;
+export type ProfileEntry = z.infer<typeof profileEntrySchema>;
+/**
+ * Top-level credentials file shape per cli-design §7.4.1.
+ *
+ * **`schema_version` pinned to literal `"1"`** so a future-version
+ * credentials file (e.g., `"2"` after a v0.4 schema change) fails
+ * parse-time at this security-bearing surface rather than passing
+ * through and getting reinterpreted under the v0.3 schema.
+ */
+export declare const credentialsFileSchema: z.ZodObject<{
+    schema_version: z.ZodLiteral<"1">;
+    profiles: z.ZodRecord<z.ZodString, z.ZodObject<{
+        access_token: z.ZodString;
+        obtained_at: z.ZodString;
+        expires_at: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+        scopes: z.ZodArray<z.ZodString>;
+        account_id: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type CredentialsFile = z.infer<typeof credentialsFileSchema>;
+/**
+ * Discriminated union for the per-profile token source. Mirrors the
+ * §7.4.1 source order: `credentials cache > api_token_env >
+ * config_error`.
+ */
+export type ProfileTokenSource = 'credentials_cache' | 'api_token_env';
+export interface ResolvedProfileToken {
+    readonly token: string;
+    readonly source: ProfileTokenSource;
+}
+/**
+ * Common options object for every read/write helper — the `home`
+ * override exists so tests can drop a fixture file under a tmp dir
+ * without touching the real `~/.monday-cli/`. `env` mirrors the
+ * cache layer's existing test-isolation pattern.
+ */
+export interface CredentialsRootOptions {
+    readonly env?: NodeJS.ProcessEnv;
+    readonly home?: string;
+}
+/**
+ * Inputs to {@link setProfileCredentials} — the read-modify-write
+ * convenience used by `monday auth login`. Decoupled from the raw
+ * `writeCredentials` so callers don't have to load-then-modify-then-
+ * write themselves; the helper handles the missing-file case (creates
+ * a fresh file with one profile) and the existing-file case (merges
+ * the entry into the existing profiles map).
+ */
+export interface SetProfileCredentialsInputs {
+    readonly profileName: string;
+    readonly entry: ProfileEntry;
+}
+/**
+ * Resolves the absolute credentials-file path. Pure helper — does
+ * not touch the filesystem.
+ */
+export declare const resolveCredentialsPath: (options?: CredentialsRootOptions) => string;
+/**
+ * Reads the credentials file, parses it through
+ * {@link credentialsFileSchema}, and returns the parsed shape.
+ *
+ * Returns `undefined` when the file does not exist (typical first-
+ * run state). Throws `config_error` for every other failure mode
+ * (insecure mode, malformed JSON, schema mismatch).
+ */
+export declare const readCredentials: (options?: CredentialsRootOptions) => Promise<CredentialsFile | undefined>;
+/**
+ * Atomically writes the credentials file. Mirrors `src/api/cache.ts
+ * writeEntry` verbatim:
+ *
+ *   1. `mkdir({ recursive: true, mode: 0o700 })` + `chmod 0o700`.
+ *   2. `writeFile(tmpPath, payload, { mode: 0o600 })`.
+ *   3. `chmod(tmpPath, 0o600)` (re-applied because `writeFile`'s
+ *      `mode` is advisory under umask).
+ *   4. `rename(tmpPath, finalPath)` (atomic on the same filesystem).
+ *
+ * Best-effort cleanup of `tmpPath` on any failure so a half-written
+ * `.tmp` doesn't accumulate.
+ */
+export declare const writeCredentials: (file: CredentialsFile, options?: CredentialsRootOptions) => Promise<void>;
+/**
+ * Read-modify-write convenience for `monday auth login`'s success
+ * path. Loads the existing file (or starts a fresh `{schema_version,
+ * profiles: {}}` if absent), inserts/replaces the named profile's
+ * entry, and writes the result back via {@link writeCredentials}.
+ */
+export declare const setProfileCredentials: (inputs: SetProfileCredentialsInputs, options?: CredentialsRootOptions) => Promise<void>;
+/**
+ * Idempotent profile delete for `monday auth logout`. Loads the
+ * file (no-op if file is absent), removes the named profile from
+ * `profiles`, writes the result back. When the post-delete
+ * `profiles` map is empty, **still writes
+ * `{schema_version, profiles: {}}`** rather than deleting the file
+ * outright (per cli-design §7.3.2 — keeps the schema-version pin
+ * discoverable + avoids a fresh-install vs all-logged-out
+ * ambiguity).
+ *
+ * Returns whether the named profile was present pre-delete — the
+ * caller surfaces this in the success envelope's `was_present`
+ * slot.
+ */
+export declare const deleteProfileCredentials: (profileName: string, options?: CredentialsRootOptions) => Promise<{
+    readonly wasPresent: boolean;
+}>;
+/**
+ * Per-profile token-source resolver per cli-design §7.4.1 source
+ * order: credentials cache > `api_token_env` > `config_error`.
+ *
+ * The credentials cache wins over `api_token_env` because
+ * `monday auth login` is the explicit user action that wrote the
+ * cache; honouring it without requiring a config-file edit is the
+ * agent-ergonomic default. `monday auth logout --profile <name>`
+ * removes the cache entry, restoring the env-fallback path.
+ */
+export interface ResolveProfileTokenInputs {
+    readonly profileName: string;
+    readonly apiTokenEnvName: string | undefined;
+}
+export declare const resolveProfileToken: (inputs: ResolveProfileTokenInputs, options?: CredentialsRootOptions) => Promise<ResolvedProfileToken>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/config/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/config/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAOH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,MAAQ,CAAC;AAE3C;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,KAAQ,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAE9C,gEAAgE;AAChE,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAEnD,sEAAsE;AACtE,eAAO,MAAM,oBAAoB,gBAAgB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;kBAQpB,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;kBAKvB,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,GAAG,eAAe,CAAC;AAEvE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;CAC9B;AAUD;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GACjC,UAAS,sBAA2B,KACnC,MAGF,CAAC;AAKF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,GAC1B,UAAS,sBAA2B,KACnC,OAAO,CAAC,eAAe,GAAG,SAAS,CA8DrC,CAAC;AAoBF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB,GAC3B,MAAM,eAAe,EACrB,UAAS,sBAA2B,KACnC,OAAO,CAAC,IAAI,CA0Bd,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GAChC,QAAQ,2BAA2B,EACnC,UAAS,sBAA2B,KACnC,OAAO,CAAC,IAAI,CAUd,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,wBAAwB,GACnC,aAAa,MAAM,EACnB,UAAS,sBAA2B,KACnC,OAAO,CAAC;IAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAqB1C,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED,eAAO,MAAM,mBAAmB,GAC9B,QAAQ,yBAAyB,EACjC,UAAS,sBAA2B,KACnC,OAAO,CAAC,oBAAoB,CA2B9B,CAAC"}

package/dist/config/credentials.js

@@ -0,0 +1,300 @@
+/**
+ * Credentials cache primitive for the v0.3-M21 `monday auth login` /
+ * `monday auth logout` verbs (cli-design §7.4 — closes Decision 3).
+ *
+ * **What this module owns.** The mode-`0600` per-profile credentials
+ * file at `~/.monday-cli/credentials`, read/write/delete primitives,
+ * and the per-profile token-source-order resolver
+ * (§7.4.1: credentials cache > `api_token_env` > `config_error`).
+ *
+ * **What this module does NOT own.** The credentials file shape is
+ * intentionally orthogonal to:
+ *   - the OAuth wire flow (`src/api/oauth.ts`),
+ *   - the TOML profile loader (`src/config/profiles.ts`),
+ *   - the redaction layer (`src/utils/redact.ts`).
+ *
+ * **Mirrors `src/api/cache.ts writeJsonFile` verbatim** per cli-design
+ * §7.4.2. The R-candidate "secure-file primitive shared between cache
+ * + credentials" (v0.3-plan §22) flags consolidation when a third
+ * consumer lands; today's two-consumer state stays below threshold,
+ * so this module duplicates the disk-discipline shape rather than
+ * extracting it. The duplication is intentional and the §7.4.2
+ * "mirror verbatim" wording is the in-design backstop.
+ *
+ * **Disk discipline (§7.4.2):**
+ *
+ *   1. `mkdir({ recursive: true, mode: 0o700 })` + explicit `chmod
+ *      0o700` on the parent dir (advisory under umask on some
+ *      platforms; mirrors `src/api/cache.ts`).
+ *   2. Atomic-replace via `writeFile(tmp, payload, { mode: 0o600 })`
+ *      → `chmod(tmp, 0o600)` → `rename(tmp, final)`.
+ *   3. Read-time `fs.fstat`-against-open-descriptor permission check
+ *      (`(stats.mode & 0o077) !== 0` → refuse, surface
+ *      `config_error` with `details.path` + `details.hint`).
+ */
+import { constants as fsConstants } from 'node:fs';
+import { chmod, mkdir, open, rename, unlink, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { ConfigError, asError } from '../utils/errors.js';
+import { formatMode, isENOENT } from '../utils/fs.js';
+/**
+ * File-mode constant for the credentials file. Mirrors
+ * `src/api/cache.ts CACHE_FILE_MODE`. The R-candidate consolidation
+ * (v0.3-plan §22) would re-export this from a shared `secure-file`
+ * primitive; the constant lives here for pre-flight to keep the two
+ * surfaces independent.
+ */
+export const CREDENTIALS_FILE_MODE = 0o600;
+/**
+ * Bitmask used to detect group/world readable bits on read. A non-
+ * zero result means the file is loose; the read path refuses to
+ * open it.
+ */
+export const CREDENTIALS_INSECURE_BITS = 0o077;
+/**
+ * Pinned at `"1"` for v0.3; reserved for a future migration if the
+ * per-profile shape grows incompatibly. Mirrors the cache module's
+ * `CACHE_SCHEMA_VERSION`.
+ */
+export const CREDENTIALS_SCHEMA_VERSION = '1';
+/** Filename under `~/.monday-cli/`. Pinned for HOME-scoping. */
+export const CREDENTIALS_FILE_NAME = 'credentials';
+/** Parent directory under HOME. Pinned to match cli-design §7.4.2. */
+export const CREDENTIALS_DIR_NAME = '.monday-cli';
+/**
+ * Per-profile credentials entry per cli-design §7.4.1.
+ */
+export const profileEntrySchema = z
+    .object({
+    access_token: z.string().min(1),
+    obtained_at: z.string().min(1),
+    expires_at: z.union([z.string(), z.null()]),
+    scopes: z.array(z.string()),
+    account_id: z.string().min(1),
+})
+    .strict();
+/**
+ * Top-level credentials file shape per cli-design §7.4.1.
+ *
+ * **`schema_version` pinned to literal `"1"`** so a future-version
+ * credentials file (e.g., `"2"` after a v0.4 schema change) fails
+ * parse-time at this security-bearing surface rather than passing
+ * through and getting reinterpreted under the v0.3 schema.
+ */
+export const credentialsFileSchema = z
+    .object({
+    schema_version: z.literal(CREDENTIALS_SCHEMA_VERSION),
+    profiles: z.record(z.string().min(1), profileEntrySchema),
+})
+    .strict();
+const wrapAsConfigError = (err, message, details = {}) => {
+    return new ConfigError(message, { cause: asError(err), details });
+};
+/**
+ * Resolves the absolute credentials-file path. Pure helper — does
+ * not touch the filesystem.
+ */
+export const resolveCredentialsPath = (options = {}) => {
+    const home = options.home ?? homedir();
+    return join(home, CREDENTIALS_DIR_NAME, CREDENTIALS_FILE_NAME);
+};
+const credentialsDirPath = (options) => join(options.home ?? homedir(), CREDENTIALS_DIR_NAME);
+/**
+ * Reads the credentials file, parses it through
+ * {@link credentialsFileSchema}, and returns the parsed shape.
+ *
+ * Returns `undefined` when the file does not exist (typical first-
+ * run state). Throws `config_error` for every other failure mode
+ * (insecure mode, malformed JSON, schema mismatch).
+ */
+export const readCredentials = async (options = {}) => {
+    const fullPath = resolveCredentialsPath(options);
+    let handle;
+    try {
+        handle = await open(fullPath, fsConstants.O_RDONLY);
+    }
+    catch (err) {
+        if (isENOENT(err)) {
+            return undefined;
+        }
+        throw wrapAsConfigError(err, `cannot read credentials file ${fullPath}`, {
+            path: fullPath,
+        });
+    }
+    try {
+        const stats = await handle.stat();
+        if ((stats.mode & CREDENTIALS_INSECURE_BITS) !== 0) {
+            throw new ConfigError(`refusing to read credentials file with insecure permissions ${formatMode(stats.mode)}`, {
+                details: {
+                    path: fullPath,
+                    mode: formatMode(stats.mode),
+                    hint: `permissions must be 0600 — run \`chmod 600 ${fullPath}\``,
+                },
+            });
+        }
+        const raw = await handle.readFile('utf8');
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (err) {
+            throw wrapAsConfigError(err, `malformed JSON in credentials file ${fullPath}`, {
+                path: fullPath,
+                hint: `delete the file and re-run \`monday auth login --profile <name>\``,
+            });
+        }
+        const result = credentialsFileSchema.safeParse(parsed);
+        if (!result.success) {
+            const issues = result.error.issues.map((i) => ({
+                path: i.path.join('.'),
+                message: i.message,
+                code: i.code,
+            }));
+            throw new ConfigError(`credentials file does not conform to v${CREDENTIALS_SCHEMA_VERSION} schema`, {
+                cause: result.error,
+                details: {
+                    path: fullPath,
+                    issues,
+                    hint: `delete the file and re-run \`monday auth login --profile <name>\``,
+                },
+            });
+        }
+        return result.data;
+    }
+    finally {
+        await handle.close();
+    }
+};
+const ensureSecureDir = async (path) => {
+    // mkdir respects umask, so the explicit `mode` is advisory on some
+    // platforms. Re-apply via chmod so a tightened-after-creation
+    // directory doesn't betray credentials to another user.
+    try {
+        await mkdir(path, { recursive: true, mode: 0o700 });
+        await chmod(path, 0o700);
+    }
+    catch (err) {
+        // Disk-full / permissions-denied path; not reproducible from a
+        // unit test against a tmp dir.
+        /* c8 ignore start */
+        throw wrapAsConfigError(err, `cannot prepare credentials directory ${path}`, {
+            path,
+        });
+        /* c8 ignore stop */
+    }
+};
+/**
+ * Atomically writes the credentials file. Mirrors `src/api/cache.ts
+ * writeEntry` verbatim:
+ *
+ *   1. `mkdir({ recursive: true, mode: 0o700 })` + `chmod 0o700`.
+ *   2. `writeFile(tmpPath, payload, { mode: 0o600 })`.
+ *   3. `chmod(tmpPath, 0o600)` (re-applied because `writeFile`'s
+ *      `mode` is advisory under umask).
+ *   4. `rename(tmpPath, finalPath)` (atomic on the same filesystem).
+ *
+ * Best-effort cleanup of `tmpPath` on any failure so a half-written
+ * `.tmp` doesn't accumulate.
+ */
+export const writeCredentials = async (file, options = {}) => {
+    // Re-validate before write so a caller passing a malformed shape
+    // (e.g., a hand-built object that bypassed the schema) can't slip
+    // a bad file onto disk.
+    const validated = credentialsFileSchema.parse(file);
+    const fullPath = resolveCredentialsPath(options);
+    const dir = credentialsDirPath(options);
+    await ensureSecureDir(dir);
+    const payload = JSON.stringify(validated, null, 2);
+    const tmpPath = `${fullPath}.${randomUUID()}.tmp`;
+    try {
+        await writeFile(tmpPath, payload, { mode: CREDENTIALS_FILE_MODE });
+        await chmod(tmpPath, CREDENTIALS_FILE_MODE);
+        await rename(tmpPath, fullPath);
+    }
+    catch (err) {
+        // Disk-full / atomic-rename failure path; not reproducible from a
+        // unit test against a tmp dir.
+        /* c8 ignore start */
+        await unlink(tmpPath).catch(() => undefined);
+        throw wrapAsConfigError(err, `cannot write credentials file ${fullPath}`, {
+            path: fullPath,
+        });
+        /* c8 ignore stop */
+    }
+};
+/**
+ * Read-modify-write convenience for `monday auth login`'s success
+ * path. Loads the existing file (or starts a fresh `{schema_version,
+ * profiles: {}}` if absent), inserts/replaces the named profile's
+ * entry, and writes the result back via {@link writeCredentials}.
+ */
+export const setProfileCredentials = async (inputs, options = {}) => {
+    const existing = await readCredentials(options);
+    const next = {
+        schema_version: CREDENTIALS_SCHEMA_VERSION,
+        profiles: {
+            ...(existing?.profiles ?? {}),
+            [inputs.profileName]: inputs.entry,
+        },
+    };
+    await writeCredentials(next, options);
+};
+/**
+ * Idempotent profile delete for `monday auth logout`. Loads the
+ * file (no-op if file is absent), removes the named profile from
+ * `profiles`, writes the result back. When the post-delete
+ * `profiles` map is empty, **still writes
+ * `{schema_version, profiles: {}}`** rather than deleting the file
+ * outright (per cli-design §7.3.2 — keeps the schema-version pin
+ * discoverable + avoids a fresh-install vs all-logged-out
+ * ambiguity).
+ *
+ * Returns whether the named profile was present pre-delete — the
+ * caller surfaces this in the success envelope's `was_present`
+ * slot.
+ */
+export const deleteProfileCredentials = async (profileName, options = {}) => {
+    const existing = await readCredentials(options);
+    if (existing === undefined) {
+        return { wasPresent: false };
+    }
+    const wasPresent = Object.prototype.hasOwnProperty.call(existing.profiles, profileName);
+    if (!wasPresent) {
+        return { wasPresent: false };
+    }
+    const nextProfiles = Object.fromEntries(Object.entries(existing.profiles).filter(([key]) => key !== profileName));
+    const next = {
+        schema_version: CREDENTIALS_SCHEMA_VERSION,
+        profiles: nextProfiles,
+    };
+    await writeCredentials(next, options);
+    return { wasPresent: true };
+};
+export const resolveProfileToken = async (inputs, options = {}) => {
+    const credentials = await readCredentials(options);
+    const cached = credentials?.profiles[inputs.profileName];
+    if (cached !== undefined) {
+        return { token: cached.access_token, source: 'credentials_cache' };
+    }
+    if (inputs.apiTokenEnvName !== undefined) {
+        const env = options.env ?? process.env;
+        const fromEnv = env[inputs.apiTokenEnvName];
+        if (fromEnv !== undefined && fromEnv.length > 0) {
+            return { token: fromEnv, source: 'api_token_env' };
+        }
+    }
+    const hint = inputs.apiTokenEnvName !== undefined
+        ? `no token for profile \`${inputs.profileName}\` — run \`monday auth login --profile ${inputs.profileName}\` or set ${inputs.apiTokenEnvName}`
+        : `no token for profile \`${inputs.profileName}\` — run \`monday auth login --profile ${inputs.profileName}\``;
+    throw new ConfigError(`no credentials available for profile \`${inputs.profileName}\``, {
+        details: {
+            profile: inputs.profileName,
+            api_token_env: inputs.apiTokenEnvName ?? null,
+            hint,
+        },
+    });
+};
+//# sourceMappingURL=credentials.js.map

package/dist/config/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/config/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C,gEAAgE;AAChE,MAAM,CAAC,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAEnD,sEAAsE;AACtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAElD;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAwCZ,MAAM,iBAAiB,GAAG,CACxB,GAAY,EACZ,OAAe,EACf,UAA6C,EAAE,EAClC,EAAE;IACf,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,UAAkC,EAAE,EAC5B,EAAE;IACV,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IACvC,OAAO,IAAI,CAAC,IAAI,EAAE,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,OAA+B,EAAU,EAAE,CACrE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,UAAkC,EAAE,EACE,EAAE;IACxC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEjD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,iBAAiB,CAAC,GAAG,EAAE,gCAAgC,QAAQ,EAAE,EAAE;YACvE,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,WAAW,CACnB,+DAA+D,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EACvF;gBACE,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC5B,IAAI,EAAE,8CAA8C,QAAQ,IAAI;iBACjE;aACF,CACF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,iBAAiB,CAAC,GAAG,EAAE,sCAAsC,QAAQ,EAAE,EAAE;gBAC7E,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,mEAAmE;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;gBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC,CAAC;YACJ,MAAM,IAAI,WAAW,CACnB,yCAAyC,0BAA0B,SAAS,EAC5E;gBACE,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,MAAM;oBACN,IAAI,EAAE,mEAAmE;iBAC1E;aACF,CACF,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;IAC5D,mEAAmE;IACnE,8DAA8D;IAC9D,wDAAwD;IACxD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+DAA+D;QAC/D,+BAA+B;QAC/B,qBAAqB;QACrB,MAAM,iBAAiB,CAAC,GAAG,EAAE,wCAAwC,IAAI,EAAE,EAAE;YAC3E,IAAI;SACL,CAAC,CAAC;QACH,oBAAoB;IACtB,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,IAAqB,EACrB,UAAkC,EAAE,EACrB,EAAE;IACjB,iEAAiE;IACjE,kEAAkE;IAClE,wBAAwB;IACxB,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAExC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,UAAU,EAAE,MAAM,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAC5C,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,+BAA+B;QAC/B,qBAAqB;QACrB,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,iBAAiB,CAAC,GAAG,EAAE,iCAAiC,QAAQ,EAAE,EAAE;YACxE,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,oBAAoB;IACtB,CAAC;AACH,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,MAAmC,EACnC,UAAkC,EAAE,EACrB,EAAE;IACjB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,IAAI,GAAoB;QAC5B,cAAc,EAAE,0BAA0B;QAC1C,QAAQ,EAAE;YACR,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;YAC7B,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK;SACnC;KACF,CAAC;IACF,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACxC,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,WAAmB,EACnB,UAAkC,EAAE,EACO,EAAE;IAC7C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CACrD,QAAQ,CAAC,QAAQ,EACjB,WAAW,CACZ,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,YAAY,GAAiC,MAAM,CAAC,WAAW,CACnE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC,CACzE,CAAC;IACF,MAAM,IAAI,GAAoB;QAC5B,cAAc,EAAE,0BAA0B;QAC1C,QAAQ,EAAE,YAAY;KACvB,CAAC;IACF,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC,CAAC;AAiBF,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,MAAiC,EACjC,UAAkC,EAAE,EACL,EAAE;IACjC,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACvC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GACR,MAAM,CAAC,eAAe,KAAK,SAAS;QAClC,CAAC,CAAC,0BAA0B,MAAM,CAAC,WAAW,0CAA0C,MAAM,CAAC,WAAW,aAAa,MAAM,CAAC,eAAe,EAAE;QAC/I,CAAC,CAAC,0BAA0B,MAAM,CAAC,WAAW,0CAA0C,MAAM,CAAC,WAAW,IAAI,CAAC;IACnH,MAAM,IAAI,WAAW,CACnB,0CAA0C,MAAM,CAAC,WAAW,IAAI,EAChE;QACE,OAAO,EAAE;YACP,OAAO,EAAE,MAAM,CAAC,WAAW;YAC3B,aAAa,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;YAC7C,IAAI;SACL;KACF,CACF,CAAC;AACJ,CAAC,CAAC"}