monday-cli 0.2.0 → 0.3.0

package/dist/utils/errors.js

@@ -3,8 +3,20 @@
  * `code` from `cli-design.md` §6.5 — agents key off the code, never
  * the English `message`. v0.1 froze 26 codes; `ambiguous_match` ships
  * in v0.2 M12 (`item upsert` with 2+ matches), bringing the count to
- * 27. `dev_*` codes ship in v0.3 but are listed here so the M5b agent
- * doesn't need to backfill the type.
+ * 27. `tag_not_found` registered pre-v0.3-M19 as the writer-expansion
+ * close prerequisite (cli-design §6.5 entry landed at `4c652d5`); the
+ * runtime throw site lands at M19 implementation when the `tags`
+ * friendly translator + `tag-directory.ts` ship — but the union
+ * widens at the M19 pre-flight contract diff so M19 feat commits
+ * throw into a stable typed surface (28 total). `oauth_failed` joined
+ * at the v0.3-M21 pre-flight contract diff as the `monday auth login`
+ * umbrella per cli-design §7.3.3 (29 total) — `details.reason`
+ * discriminates the failure mode (`csrf_mismatch`, `user_denied`,
+ * `authorization_failed`, `code_exchange_failed`, `timeout`,
+ * `port_in_use`, `browser_unavailable`); the runtime throw sites land
+ * at M21 implementation when `src/api/oauth.ts` + `src/commands/auth/*`
+ * ship their wire bodies. `dev_*` codes ship in v0.3 but are listed here
+ * so the M5b agent doesn't need to backfill the type.
  */
 export const ERROR_CODES = [
     'usage_error',
@@ -15,6 +27,7 @@ export const ERROR_CODES = [
     'ambiguous_match',
     'column_not_found',
     'user_not_found',
+    'tag_not_found',
     'unsupported_column_type',
     'column_archived',
     'unauthorized',
@@ -27,6 +40,7 @@ export const ERROR_CODES = [
     'resource_locked',
     'validation_failed',
     'stale_cursor',
+    'oauth_failed',
     'config_error',
     'cache_error',
     'network_error',
@@ -82,6 +96,7 @@ export const CODE_RETRYABLE_DEFAULT = Object.freeze({
     ambiguous_match: false,
     column_not_found: false,
     user_not_found: false,
+    tag_not_found: false,
     unsupported_column_type: false,
     column_archived: false,
     unauthorized: false,
@@ -94,6 +109,7 @@ export const CODE_RETRYABLE_DEFAULT = Object.freeze({
     resource_locked: true,
     validation_failed: false,
     stale_cursor: false,
+    oauth_failed: false,
     config_error: false,
     cache_error: true,
     network_error: true,
@@ -121,6 +137,7 @@ export const CODE_TYPICAL_HTTP_STATUS = Object.freeze({
     ambiguous_match: null,
     column_not_found: null,
     user_not_found: null,
+    tag_not_found: null,
     unsupported_column_type: null,
     column_archived: 200,
     unauthorized: 401,
@@ -133,6 +150,7 @@ export const CODE_TYPICAL_HTTP_STATUS = Object.freeze({
     resource_locked: 423,
     validation_failed: 200,
     stale_cursor: 200,
+    oauth_failed: null,
     config_error: null,
     cache_error: null,
     network_error: null,
@@ -204,6 +222,7 @@ export const exitCodeForError = (code) => {
     switch (code) {
         case 'usage_error':
         case 'confirmation_required':
+        case 'oauth_failed':
             return 1;
         case 'config_error':
             return 3;
@@ -213,6 +232,7 @@ export const exitCodeForError = (code) => {
         case 'ambiguous_match':
         case 'column_not_found':
         case 'user_not_found':
+        case 'tag_not_found':
         case 'unsupported_column_type':
         case 'column_archived':
         case 'unauthorized':
@@ -261,4 +281,51 @@ export const errorForAbortReason = (reason) => {
             return assertNever(reason, 'errorForAbortReason');
     }
 };
+/**
+ * Narrows a caught `unknown` to its message string. The standard
+ * `useUnknownInCatchVariables`-narrowing idiom for project code that
+ * needs the human-readable text without the full Error object.
+ *
+ * **R-NEW-14 lift (post-M23 audit).** Previously inlined 11+ times
+ * across the codebase since M2/M6 — see `docs/v0.3-plan.md` §22
+ * R-NEW-14 entry for the missed-trigger history. M22's
+ * `src/api/probes.ts:errorMessage` is the smoking gun: the developer
+ * needed the helper and wrote a local copy instead of finding the
+ * 9+ inline sites. Lift consolidates those into one canonical
+ * helper.
+ */
+export const errorMessage = (err) => err instanceof Error ? err.message : String(err);
+/**
+ * Coerces a caught `unknown` to a real `Error` for `cause:`
+ * propagation. The companion to {@link errorMessage} for code paths
+ * that want the full Error object to thread through a `cause:`
+ * chain rather than just the message string.
+ *
+ * **R-NEW-15 lift (post-M23 audit).** Previously inlined 6+ times
+ * across M1 + M21 modules (`src/api/cache.ts`,
+ * `src/config/credentials.ts`, `src/config/profiles.ts`,
+ * `src/api/oauth-test-helper.ts`). M22's `src/api/probes.ts:asError`
+ * is the smoking gun (local copy with an `AbortSignal.reason`
+ * fallback parameter — superseded here by the shared helper).
+ * See `docs/v0.3-plan.md` §22 R-NEW-15 for the missed-trigger
+ * history.
+ */
+export const asError = (err) => err instanceof Error ? err : new Error(String(err));
+/**
+ * Extracts the Node `err.code` property in a type-safe way, returning
+ * the string when present and `undefined` otherwise.
+ *
+ * **R-NEW-16 lift (post-M23 audit).** Generalises the
+ * `(err as { code?: unknown }).code` pattern that R-NEW-1's
+ * `isENOENT` open-coded. Three named consumers as of M22 (probes.ts
+ * + transport.ts + utils/fs.ts's `isENOENT`). `isENOENT` is now a
+ * one-liner on top of this. See `docs/v0.3-plan.md` §22 R-NEW-16
+ * for the trigger history.
+ */
+export const errorCode = (err) => {
+    if (typeof err !== 'object' || err === null)
+        return undefined;
+    const code = err.code;
+    return typeof code === 'string' ? code : undefined;
+};
 //# sourceMappingURL=errors.js.map

package/dist/utils/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,aAAa;IACb,uBAAuB;IACvB,WAAW;IACX,gBAAgB;IAChB,kBAAkB;IAClB,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,yBAAyB;IACzB,iBAAiB;IACjB,cAAc;IACd,WAAW;IACX,cAAc;IACd,qBAAqB;IACrB,sBAAsB;IACtB,sBAAsB;IACtB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,cAAc;IACd,cAAc;IACd,aAAa;IACb,eAAe;IACf,SAAS;IACT,oBAAoB;IACpB,yBAAyB;IACzB,gBAAgB;CACR,CAAC;AAoBX;;;;GAIG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,CAAY;IAChB,UAAU,CAAqB;IAC/B,UAAU,CAAqB;IAC/B,SAAS,CAAqB;IAC9B,SAAS,CAAU;IACnB,iBAAiB,CAAqB;IACtC,OAAO,CAAgD;IAEhE,YACE,IAAe,EACf,OAAe,EACf,UAAiC,EAAE;QAEnC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,iEAAiE;QACjE,uEAAuE;QACvE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAyC,MAAM,CAAC,MAAM,CAAC;IACxF,WAAW,EAAE,KAAK;IAClB,qBAAqB,EAAE,KAAK;IAC5B,SAAS,EAAE,KAAK;IAChB,cAAc,EAAE,KAAK;IACrB,gBAAgB,EAAE,KAAK;IACvB,eAAe,EAAE,KAAK;IACtB,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,KAAK;IACrB,uBAAuB,EAAE,KAAK;IAC9B,eAAe,EAAE,KAAK;IACtB,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,IAAI;IAClB,mBAAmB,EAAE,IAAI;IACzB,oBAAoB,EAAE,KAAK;IAC3B,oBAAoB,EAAE,IAAI;IAC1B,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;IACrB,iBAAiB,EAAE,KAAK;IACxB,YAAY,EAAE,KAAK;IACnB,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,IAAI;IACnB,OAAO,EAAE,IAAI;IACb,kBAAkB,EAAE,KAAK;IACzB,uBAAuB,EAAE,KAAK;IAC9B,cAAc,EAAE,KAAK;CACtB,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA+C,MAAM,CAAC,MAAM,CAAC;IAChG,WAAW,EAAE,IAAI;IACjB,qBAAqB,EAAE,IAAI;IAC3B,SAAS,EAAE,GAAG;IACd,cAAc,EAAE,IAAI;IACpB,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,IAAI;IACrB,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,IAAI;IACpB,uBAAuB,EAAE,IAAI;IAC7B,eAAe,EAAE,GAAG;IACpB,YAAY,EAAE,GAAG;IACjB,SAAS,EAAE,GAAG;IACd,YAAY,EAAE,GAAG;IACjB,mBAAmB,EAAE,GAAG;IACxB,oBAAoB,EAAE,GAAG;IACzB,oBAAoB,EAAE,GAAG;IACzB,eAAe,EAAE,GAAG;IACpB,eAAe,EAAE,GAAG;IACpB,iBAAiB,EAAE,GAAG;IACtB,YAAY,EAAE,GAAG;IACjB,YAAY,EAAE,IAAI;IAClB,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,IAAI;IACnB,OAAO,EAAE,IAAI;IACb,kBAAkB,EAAE,IAAI;IACxB,uBAAuB,EAAE,IAAI;IAC7B,cAAc,EAAE,IAAI;CACrB,CAAC,CAAC;AAEH,iEAAiE;AACjE,MAAM,OAAO,UAAW,SAAQ,cAAc;IAC5C,YAAY,OAAe,EAAE,UAAiC,EAAE;QAC9D,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,OAAO,yBAA0B,SAAQ,cAAc;IAC3D,YAAY,OAAe,EAAE,UAAiC,EAAE;QAC9D,KAAK,CAAC,uBAAuB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,WAAY,SAAQ,cAAc;IAC7C,YAAY,OAAe,EAAE,UAAiC,EAAE;QAC9D,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,UAAW,SAAQ,cAAc;IAC5C,YAAY,OAAe,EAAE,UAAiC,EAAE;QAC9D,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,QAAS,SAAQ,cAAc;CAAG;AAE/C,6EAA6E;AAC7E,MAAM,OAAO,aAAc,SAAQ,cAAc;IAC/C,YAAY,OAAe,EAAE,UAAiC,EAAE;QAC9D,KAAK,CAAC,gBAAgB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;CACF;AAaD;;;;;;GAMG;AACH;;;kCAGkC;AAClC,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,OAAe,EAAS,EAAE;IAC3D,MAAM,IAAI,aAAa,CACrB,gBAAgB,OAAO,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAChE,CAAC;AACJ,CAAC,CAAC;AACF,oBAAoB;AAEpB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAe,EAAY,EAAE;IAC5D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa,CAAC;QACnB,KAAK,uBAAuB;YAC1B,OAAO,CAAC,CAAC;QACX,KAAK,cAAc;YACjB,OAAO,CAAC,CAAC;QACX,KAAK,WAAW,CAAC;QACjB,KAAK,gBAAgB,CAAC;QACtB,KAAK,kBAAkB,CAAC;QACxB,KAAK,iBAAiB,CAAC;QACvB,KAAK,kBAAkB,CAAC;QACxB,KAAK,gBAAgB,CAAC;QACtB,KAAK,yBAAyB,CAAC;QAC/B,KAAK,iBAAiB,CAAC;QACvB,KAAK,cAAc,CAAC;QACpB,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,sBAAsB,CAAC;QAC5B,KAAK,sBAAsB,CAAC;QAC5B,KAAK,iBAAiB,CAAC;QACvB,KAAK,iBAAiB,CAAC;QACvB,KAAK,mBAAmB,CAAC;QACzB,KAAK,cAAc,CAAC;QACpB,KAAK,aAAa,CAAC;QACnB,KAAK,eAAe,CAAC;QACrB,KAAK,SAAS,CAAC;QACf,KAAK,oBAAoB,CAAC;QAC1B,KAAK,yBAAyB,CAAC;QAC/B,KAAK,gBAAgB;YACnB,OAAO,CAAC,CAAC;QACX,gEAAgE;QAChE;YACE,OAAO,WAAW,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAmB,EAAkB,EAAE;IACzE,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,SAAS;YACZ,OAAO,IAAI,QAAQ,CACjB,SAAS,EACT,2BAA2B,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EACxD,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAC5C,CAAC;QACJ,KAAK,QAAQ;YACX,+DAA+D;YAC/D,wDAAwD;YACxD,OAAO,IAAI,cAAc,CAAC,gBAAgB,EAAE,mBAAmB,EAAE;gBAC/D,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE;aACpC,CAAC,CAAC;QACL,KAAK,QAAQ;YACX,OAAO,IAAI,cAAc,CACvB,gBAAgB,EAChB,MAAM,CAAC,MAAM,IAAI,WAAW,EAC5B,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,CACxC,CAAC;QACJ,gEAAgE;QAChE;YACE,OAAO,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,aAAa;IACb,uBAAuB;IACvB,WAAW;IACX,gBAAgB;IAChB,kBAAkB;IAClB,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,yBAAyB;IACzB,iBAAiB;IACjB,cAAc;IACd,WAAW;IACX,cAAc;IACd,qBAAqB;IACrB,sBAAsB;IACtB,sBAAsB;IACtB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,cAAc;IACd,cAAc;IACd,cAAc;IACd,aAAa;IACb,eAAe;IACf,SAAS;IACT,oBAAoB;IACpB,yBAAyB;IACzB,gBAAgB;CACR,CAAC;AAoBX;;;;GAIG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,CAAY;IAChB,UAAU,CAAqB;IAC/B,UAAU,CAAqB;IAC/B,SAAS,CAAqB;IAC9B,SAAS,CAAU;IACnB,iBAAiB,CAAqB;IACtC,OAAO,CAAgD;IAEhE,YACE,IAAe,EACf,OAAe,EACf,UAAiC,EAAE;QAEnC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,iEAAiE;QACjE,uEAAuE;QACvE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAyC,MAAM,CAAC,MAAM,CAAC;IACxF,WAAW,EAAE,KAAK;IAClB,qBAAqB,EAAE,KAAK;IAC5B,SAAS,EAAE,KAAK;IAChB,cAAc,EAAE,KAAK;IACrB,gBAAgB,EAAE,KAAK;IACvB,eAAe,EAAE,KAAK;IACtB,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,KAAK;IACrB,aAAa,EAAE,KAAK;IACpB,uBAAuB,EAAE,KAAK;IAC9B,eAAe,EAAE,KAAK;IACtB,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,IAAI;IAClB,mBAAmB,EAAE,IAAI;IACzB,oBAAoB,EAAE,KAAK;IAC3B,oBAAoB,EAAE,IAAI;IAC1B,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;IACrB,iBAAiB,EAAE,KAAK;IACxB,YAAY,EAAE,KAAK;IACnB,YAAY,EAAE,KAAK;IACnB,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,IAAI;IACnB,OAAO,EAAE,IAAI;IACb,kBAAkB,EAAE,KAAK;IACzB,uBAAuB,EAAE,KAAK;IAC9B,cAAc,EAAE,KAAK;CACtB,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA+C,MAAM,CAAC,MAAM,CAAC;IAChG,WAAW,EAAE,IAAI;IACjB,qBAAqB,EAAE,IAAI;IAC3B,SAAS,EAAE,GAAG;IACd,cAAc,EAAE,IAAI;IACpB,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,IAAI;IACrB,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,IAAI;IACpB,aAAa,EAAE,IAAI;IACnB,uBAAuB,EAAE,IAAI;IAC7B,eAAe,EAAE,GAAG;IACpB,YAAY,EAAE,GAAG;IACjB,SAAS,EAAE,GAAG;IACd,YAAY,EAAE,GAAG;IACjB,mBAAmB,EAAE,GAAG;IACxB,oBAAoB,EAAE,GAAG;IACzB,oBAAoB,EAAE,GAAG;IACzB,eAAe,EAAE,GAAG;IACpB,eAAe,EAAE,GAAG;IACpB,iBAAiB,EAAE,GAAG;IACtB,YAAY,EAAE,GAAG;IACjB,YAAY,EAAE,IAAI;IAClB,YAAY,EAAE,IAAI;IAClB,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,IAAI;IACnB,OAAO,EAAE,IAAI;IACb,kBAAkB,EAAE,IAAI;IACxB,uBAAuB,EAAE,IAAI;IAC7B,cAAc,EAAE,IAAI;CACrB,CAAC,CAAC;AAEH,iEAAiE;AACjE,MAAM,OAAO,UAAW,SAAQ,cAAc;IAC5C,YAAY,OAAe,EAAE,UAAiC,EAAE;QAC9D,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,OAAO,yBAA0B,SAAQ,cAAc;IAC3D,YAAY,OAAe,EAAE,UAAiC,EAAE;QAC9D,KAAK,CAAC,uBAAuB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,WAAY,SAAQ,cAAc;IAC7C,YAAY,OAAe,EAAE,UAAiC,EAAE;QAC9D,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,UAAW,SAAQ,cAAc;IAC5C,YAAY,OAAe,EAAE,UAAiC,EAAE;QAC9D,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,QAAS,SAAQ,cAAc;CAAG;AAE/C,6EAA6E;AAC7E,MAAM,OAAO,aAAc,SAAQ,cAAc;IAC/C,YAAY,OAAe,EAAE,UAAiC,EAAE;QAC9D,KAAK,CAAC,gBAAgB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;CACF;AAaD;;;;;;GAMG;AACH;;;kCAGkC;AAClC,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,OAAe,EAAS,EAAE;IAC3D,MAAM,IAAI,aAAa,CACrB,gBAAgB,OAAO,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAChE,CAAC;AACJ,CAAC,CAAC;AACF,oBAAoB;AAEpB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAe,EAAY,EAAE;IAC5D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa,CAAC;QACnB,KAAK,uBAAuB,CAAC;QAC7B,KAAK,cAAc;YACjB,OAAO,CAAC,CAAC;QACX,KAAK,cAAc;YACjB,OAAO,CAAC,CAAC;QACX,KAAK,WAAW,CAAC;QACjB,KAAK,gBAAgB,CAAC;QACtB,KAAK,kBAAkB,CAAC;QACxB,KAAK,iBAAiB,CAAC;QACvB,KAAK,kBAAkB,CAAC;QACxB,KAAK,gBAAgB,CAAC;QACtB,KAAK,eAAe,CAAC;QACrB,KAAK,yBAAyB,CAAC;QAC/B,KAAK,iBAAiB,CAAC;QACvB,KAAK,cAAc,CAAC;QACpB,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,sBAAsB,CAAC;QAC5B,KAAK,sBAAsB,CAAC;QAC5B,KAAK,iBAAiB,CAAC;QACvB,KAAK,iBAAiB,CAAC;QACvB,KAAK,mBAAmB,CAAC;QACzB,KAAK,cAAc,CAAC;QACpB,KAAK,aAAa,CAAC;QACnB,KAAK,eAAe,CAAC;QACrB,KAAK,SAAS,CAAC;QACf,KAAK,oBAAoB,CAAC;QAC1B,KAAK,yBAAyB,CAAC;QAC/B,KAAK,gBAAgB;YACnB,OAAO,CAAC,CAAC;QACX,gEAAgE;QAChE;YACE,OAAO,WAAW,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAmB,EAAkB,EAAE;IACzE,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,SAAS;YACZ,OAAO,IAAI,QAAQ,CACjB,SAAS,EACT,2BAA2B,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EACxD,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAC5C,CAAC;QACJ,KAAK,QAAQ;YACX,+DAA+D;YAC/D,wDAAwD;YACxD,OAAO,IAAI,cAAc,CAAC,gBAAgB,EAAE,mBAAmB,EAAE;gBAC/D,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE;aACpC,CAAC,CAAC;QACL,KAAK,QAAQ;YACX,OAAO,IAAI,cAAc,CACvB,gBAAgB,EAChB,MAAM,CAAC,MAAM,IAAI,WAAW,EAC5B,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,CACxC,CAAC;QACJ,gEAAgE;QAChE;YACE,OAAO,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAY,EAAU,EAAE,CACnD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAEnD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAY,EAAS,EAAE,CAC7C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAEtD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAY,EAAsB,EAAE;IAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,IAAI,GAAI,GAA0B,CAAC,IAAI,CAAC;IAC9C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC,CAAC"}

package/dist/utils/fs.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Filesystem helpers shared across modules that talk to `node:fs`.
+ *
+ * v0.3-M21 Part 2 R-NEW-1: the 5-line `isENOENT` helper was duplicated
+ * verbatim in `src/api/cache.ts`, `src/config/credentials.ts`, and
+ * `src/config/profiles.ts`. The 3-consumer trigger fires at M21 close
+ * (mirrors R45 / R48 / R51 cadence — "lift when a third consumer
+ * lands"). Pure boilerplate consolidation; no behaviour change.
+ *
+ * Kept narrow on purpose. New filesystem-shaped helpers (e.g., a
+ * shared `wrapFsError` factory in R-NEW-3) land here only when their
+ * own consumer-count thresholds fire.
+ */
+/**
+ * Returns `true` when `err` is a Node fs error with `code === 'ENOENT'`.
+ *
+ * v0.3 post-M23 audit (R-NEW-16): refactored from the open-coded
+ * type-guard pattern to call the shared {@link errorCode} helper.
+ * Behaviour preserved (returns `false` for non-object errors,
+ * non-string codes, and missing-code errors); the lift is mechanical.
+ */
+export declare const isENOENT: (err: unknown) => boolean;
+/**
+ * Formats a `stat.mode` numeric field as an octal `'0NNN'` string —
+ * the canonical shape for `chmod`-compatible output in security
+ * diagnostics + cache-permission refusal messages.
+ *
+ * v0.3-M22 close R-NEW-7 lift: the same formatter was duplicated
+ * character-identical across `src/api/cache.ts` + `src/config/
+ * credentials.ts` + `src/api/probes.ts` (M22 cache_writability
+ * probe was the third named consumer). Mirrors the R-NEW-1
+ * `isENOENT` lift cadence — pure fs-helper, no behaviour change.
+ */
+export declare const formatMode: (mode: number) => string;
+//# sourceMappingURL=fs.d.ts.map

package/dist/utils/fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../src/utils/fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,GAAI,KAAK,OAAO,KAAG,OACX,CAAC;AAE9B;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,KAAG,MACS,CAAC"}

package/dist/utils/fs.js

@@ -0,0 +1,36 @@
+/**
+ * Filesystem helpers shared across modules that talk to `node:fs`.
+ *
+ * v0.3-M21 Part 2 R-NEW-1: the 5-line `isENOENT` helper was duplicated
+ * verbatim in `src/api/cache.ts`, `src/config/credentials.ts`, and
+ * `src/config/profiles.ts`. The 3-consumer trigger fires at M21 close
+ * (mirrors R45 / R48 / R51 cadence — "lift when a third consumer
+ * lands"). Pure boilerplate consolidation; no behaviour change.
+ *
+ * Kept narrow on purpose. New filesystem-shaped helpers (e.g., a
+ * shared `wrapFsError` factory in R-NEW-3) land here only when their
+ * own consumer-count thresholds fire.
+ */
+import { errorCode } from './errors.js';
+/**
+ * Returns `true` when `err` is a Node fs error with `code === 'ENOENT'`.
+ *
+ * v0.3 post-M23 audit (R-NEW-16): refactored from the open-coded
+ * type-guard pattern to call the shared {@link errorCode} helper.
+ * Behaviour preserved (returns `false` for non-object errors,
+ * non-string codes, and missing-code errors); the lift is mechanical.
+ */
+export const isENOENT = (err) => errorCode(err) === 'ENOENT';
+/**
+ * Formats a `stat.mode` numeric field as an octal `'0NNN'` string —
+ * the canonical shape for `chmod`-compatible output in security
+ * diagnostics + cache-permission refusal messages.
+ *
+ * v0.3-M22 close R-NEW-7 lift: the same formatter was duplicated
+ * character-identical across `src/api/cache.ts` + `src/config/
+ * credentials.ts` + `src/api/probes.ts` (M22 cache_writability
+ * probe was the third named consumer). Mirrors the R-NEW-1
+ * `isENOENT` lift cadence — pure fs-helper, no behaviour change.
+ */
+export const formatMode = (mode) => `0${(mode & 0o777).toString(8).padStart(3, '0')}`;
+//# sourceMappingURL=fs.js.map

package/dist/utils/fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.js","sourceRoot":"","sources":["../../src/utils/fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAW,EAAE,CAChD,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC;AAE9B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CACjD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC"}

package/dist/utils/json.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Shared JSON-shape type-guards (`docs/v0.3-plan.md` §22 R-NEW-27
+ * lift, post-M24 close-docs audit).
+ *
+ * Before this lift, six structurally-identical `isObject` /
+ * `isJsonObject` / `isPlainObject` guards existed across the
+ * codebase (4 production + 2 test). The pattern accumulated
+ * silently from M2 (fixtures + e2e infrastructure) through M24
+ * (item-history-projection JSON parsing). M24's developer added
+ * a fresh local copy rather than discovering the existing 5 — the
+ * same miss + mass-migrate cadence as R-NEW-14/15/16 (error
+ * utilities) and R-NEW-19 (safeParse → unwrapOrThrow).
+ *
+ * Consumers narrow `unknown` to `Readonly<Record<string, unknown>>`
+ * before reading keyed fields off untrusted external payloads
+ * (Monday wire responses, JSON-from-disk cassettes, e2e fixture
+ * server bodies). `Readonly` is the more defensive choice — none
+ * of the existing consumers mutate the guarded value, and any
+ * downstream code that needs a mutable shape casts explicitly.
+ */
+/**
+ * Type-guard for "value is a plain JSON object" — narrows
+ * `unknown` to `Readonly<Record<string, unknown>>`. Returns
+ * false for null, arrays, and primitives.
+ */
+export declare const isPlainObject: (v: unknown) => v is Readonly<Record<string, unknown>>;
+export interface ParseJsonArgOptions {
+    /**
+     * Free-form message prefix. Lands in `error.message` as
+     * `${context} (${errorMessage(err)})` on parse failure.
+     * Verb-specific phrasing (e.g. `'monday raw: GraphQL
+     * variables are not valid JSON'`, `'--settings: malformed
+     * JSON'`, `'--config must be a valid JSON-encoded string'`).
+     */
+    readonly context: string;
+    /**
+     * Optional `details` map echoed on the surfaced `UsageError`.
+     * Each call site contributes verb-specific keys (e.g.
+     * `source` for `monday raw`, `column_type` + `raw` for
+     * `board column-create`, `board_id` + `hint` for `webhook
+     * create`). Schema is per-verb; the helper passes through
+     * verbatim.
+     */
+    readonly details?: Readonly<Record<string, unknown>>;
+}
+/**
+ * Parses a JSON-encoded argv string. Returns the parsed value
+ * (`unknown` — caller narrows via downstream zod / type-guard);
+ * on `SyntaxError` (or any other thrown value from `JSON.parse`)
+ * throws `UsageError` with the supplied context, the underlying
+ * error as `cause`, and the supplied `details`.
+ *
+ * Use at every argv-parse-boundary that consumes user-supplied
+ * JSON (`--vars`, `--settings`, `--config`, future
+ * `--<field>-json` flags). Do NOT use for response-side parsing
+ * (Monday wire returns) — those go through `unwrapOrThrow` +
+ * a zod schema.
+ */
+export declare const parseJsonArg: (raw: string, options: ParseJsonArgOptions) => unknown;
+//# sourceMappingURL=json.d.ts.map

package/dist/utils/json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../src/utils/json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;GAIG;AACH,eAAO,MAAM,aAAa,GACxB,GAAG,OAAO,KACT,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CACkB,CAAC;AAqC3D,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACtD;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,YAAY,GACvB,KAAK,MAAM,EACX,SAAS,mBAAmB,KAC3B,OAcF,CAAC"}

package/dist/utils/json.js

@@ -0,0 +1,86 @@
+/**
+ * Shared JSON-shape type-guards (`docs/v0.3-plan.md` §22 R-NEW-27
+ * lift, post-M24 close-docs audit).
+ *
+ * Before this lift, six structurally-identical `isObject` /
+ * `isJsonObject` / `isPlainObject` guards existed across the
+ * codebase (4 production + 2 test). The pattern accumulated
+ * silently from M2 (fixtures + e2e infrastructure) through M24
+ * (item-history-projection JSON parsing). M24's developer added
+ * a fresh local copy rather than discovering the existing 5 — the
+ * same miss + mass-migrate cadence as R-NEW-14/15/16 (error
+ * utilities) and R-NEW-19 (safeParse → unwrapOrThrow).
+ *
+ * Consumers narrow `unknown` to `Readonly<Record<string, unknown>>`
+ * before reading keyed fields off untrusted external payloads
+ * (Monday wire responses, JSON-from-disk cassettes, e2e fixture
+ * server bodies). `Readonly` is the more defensive choice — none
+ * of the existing consumers mutate the guarded value, and any
+ * downstream code that needs a mutable shape casts explicitly.
+ */
+/**
+ * Type-guard for "value is a plain JSON object" — narrows
+ * `unknown` to `Readonly<Record<string, unknown>>`. Returns
+ * false for null, arrays, and primitives.
+ */
+export const isPlainObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+/**
+ * `parseJsonArg` (R-NEW-42 lift, post-M27-close drift sweep).
+ *
+ * Three sites in `src/commands/*` consume a JSON-encoded argv
+ * string + reject malformed JSON as `usage_error`:
+ *
+ *   - `monday raw --vars <json>` / `--vars-file <path>`
+ *     (`src/commands/raw/index.ts`)
+ *   - `monday board column-create --settings <json>`
+ *     (`src/commands/board/column-create.ts`)
+ *   - `monday webhook create --config <json>`
+ *     (`src/commands/webhook/create.ts`, M27 IMPL)
+ *
+ * Each site pre-lift wrapped `JSON.parse` in try/catch + threw
+ * `UsageError` with a verb-specific message + `cause: err` +
+ * verb-specific `details`. The shape is structurally identical;
+ * the only variation is the message prefix + which detail-keys
+ * land. M27 IMPL pushed the count to 3, crossing the R7/R8
+ * 3-consumer threshold; this lift ships at the post-M27-close
+ * drift sweep mirroring R-NEW-38's same-cadence lift at
+ * `c71a96d`.
+ *
+ * Behavioural note: pre-lift, `webhook/create.ts` did NOT
+ * interpolate the underlying `JSON.parse` error message
+ * (just the static `'--config must be a valid JSON-encoded
+ * string'` text). The other two sites used `errorMessage(err)`
+ * to surface the SyntaxError detail. The lift normalises to
+ * always interpolate — better diagnostic value, no
+ * agent-facing contract change (the `error.code` stays
+ * `usage_error`; only `error.message` widens).
+ */
+import { UsageError } from './errors.js';
+import { errorMessage } from './errors.js';
+/**
+ * Parses a JSON-encoded argv string. Returns the parsed value
+ * (`unknown` — caller narrows via downstream zod / type-guard);
+ * on `SyntaxError` (or any other thrown value from `JSON.parse`)
+ * throws `UsageError` with the supplied context, the underlying
+ * error as `cause`, and the supplied `details`.
+ *
+ * Use at every argv-parse-boundary that consumes user-supplied
+ * JSON (`--vars`, `--settings`, `--config`, future
+ * `--<field>-json` flags). Do NOT use for response-side parsing
+ * (Monday wire returns) — those go through `unwrapOrThrow` +
+ * a zod schema.
+ */
+export const parseJsonArg = (raw, options) => {
+    try {
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        throw new UsageError(`${options.context} (${errorMessage(err)})`, {
+            cause: err,
+            ...(options.details === undefined
+                ? {}
+                : { details: options.details }),
+        });
+    }
+};
+//# sourceMappingURL=json.js.map

package/dist/utils/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/utils/json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,CAAU,EAC8B,EAAE,CAC1C,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAsB3C;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,GAAW,EACX,OAA4B,EACnB,EAAE;IACX,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAClB,GAAG,OAAO,CAAC,OAAO,KAAK,YAAY,CAAC,GAAG,CAAC,GAAG,EAC3C;YACE,KAAK,EAAE,GAAG;YACV,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;SAClC,CACF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC"}

package/dist/utils/output/ndjson.d.ts

@@ -1,4 +1,4 @@
-import type { Meta, Warning } from './envelope.js';
+import type { ColumnHead, Complexity, DataSource, Meta, Warning } from './envelope.js';
 /**
  * NDJSON renderer for collections (`cli-design.md` §6.3).
  *
@@ -20,7 +20,7 @@ import type { Meta, Warning } from './envelope.js';
  * processing without waiting for the whole walk, not so the
  * presentation layer can drop bytes.
  *
- * Two surfaces:
+ * Three surfaces:
  *
  * - `renderNdjson` (collect-then-emit) — used when the caller
  *   already has the full data array. Single function, no streaming
@@ -34,6 +34,14 @@ import type { Meta, Warning } from './envelope.js';
  *   (M7), `item search` (M18), `update list` (M18). Was previously
  *   a private helper in `src/commands/item/list.ts`; lifted at the
  *   3-consumer trigger.
+ *
+ * - `buildStreamingTrailerMeta` (R53, post-v0.2 cleanup-window lift)
+ *   — sibling to `startNdjsonStream`. Builds the canonical
+ *   §6.3 trailer Meta from the walker result + the three
+ *   source/cache/api inputs. Same three consumers; consolidates
+ *   the ~15-line `buildMeta(...)` boilerplate that was repeated
+ *   across each call site, with cursor-vs-page + column-bearing-
+ *   vs-not divergence handled via optional inputs.
  */
 export interface NdjsonInput {
     readonly data: readonly unknown[];
@@ -55,7 +63,9 @@ export declare const renderNdjson: (input: NdjsonInput, stream: NodeJS.WritableS
  *   (typically `ctx.stdout`).
  * - `secrets` — token bytes the redactor scrubs from every emitted
  *   line (per `.claude/rules/security.md` "value-scanning filter").
- *   Caller passes `collectSecrets(ctx.env)`.
+ *   Caller passes `collectSecrets(ctx.env, ctx.runtimeSecrets)`
+ *   (the v0.3-M21 §7.4.3 redaction-runtime extension folds
+ *   credentials-cache `access_token` values in via the second arg).
  * - `project` — per-item projection callback. Decouples the helper
  *   from per-noun output shape: item list/search projects raw
  *   Monday rows through `projectFromRaw`; update list runs items
@@ -89,4 +99,56 @@ export interface NdjsonStreamHandle<T> {
     readonly writeTrailer: (meta: Meta) => void;
 }
 export declare const startNdjsonStream: <T>(inputs: NdjsonStreamInputs<T>) => NdjsonStreamHandle<T>;
+/**
+ * Inputs to `buildStreamingTrailerMeta` (R53 lift, v0.2-plan §22).
+ * Sibling to `startNdjsonStream` — both implement §6.3.
+ *
+ * Three NDJSON consumers (item list / item search / update list)
+ * end up calling `buildMeta(...)` with structurally near-identical
+ * inputs, varying only on whether the noun carries `next_cursor`
+ * (cursor-walked vs page-walked) and `meta.columns` (column-bearing
+ * or not). The helper takes the walker-shaped `result` block + the
+ * three meta source/cache/api inputs + an optional `columns` slot,
+ * builds the canonical-key-order Meta via `buildMeta`, and returns
+ * it ready for `stream.writeTrailer`.
+ *
+ * Five fields total — within the >4-parameter heuristic that
+ * deferred R44 / R49 / R50, since `ctx` and `result` are
+ * structurally complete units (not flat scalars to count).
+ *
+ * Per-consumer divergence the helper preserves:
+ * - cursor-walked consumers (item list / item search) populate
+ *   `result.nextCursor`; the trailer carries `next_cursor`.
+ * - page-walked consumers (update list) omit `result.nextCursor`;
+ *   the trailer drops `next_cursor` entirely (buildMeta convention:
+ *   undefined input → key absent from output).
+ * - column-bearing consumers (item list / item search) populate
+ *   `columns`; non-bearing consumers (update list) omit it; the
+ *   trailer mirrors the input shape on a per-consumer basis.
+ *
+ * The complexity slot is always required: the cursor-walker exposes
+ * it directly on `result.complexity`; the page-walker exposes it
+ * via `result.lastResponse.complexity`. Each consumer extracts at
+ * the call site; the helper takes the post-extraction value.
+ */
+export interface StreamingTrailerInputs {
+    readonly ctx: {
+        readonly cliVersion: string;
+        readonly requestId: string;
+        readonly clock: () => Date;
+    };
+    readonly apiVersion: string;
+    readonly source: DataSource;
+    readonly cacheAgeSeconds: number | null;
+    readonly result: {
+        readonly hasMore: boolean;
+        readonly totalReturned: number;
+        readonly complexity: Complexity | null;
+        /** Omit for page-walked consumers; trailer drops `next_cursor`. */
+        readonly nextCursor?: string | null;
+    };
+    /** Omit for non-column-bearing nouns; trailer drops `columns`. */
+    readonly columns?: Readonly<Record<string, ColumnHead>>;
+}
+export declare const buildStreamingTrailerMeta: (inputs: StreamingTrailerInputs) => Meta;
 //# sourceMappingURL=ndjson.d.ts.map

package/dist/utils/output/ndjson.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ndjson.d.ts","sourceRoot":"","sources":["../../../src/utils/output/ndjson.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAGnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;CACvC;AAED,eAAO,MAAM,YAAY,GACvB,OAAO,WAAW,EAClB,QAAQ,MAAM,CAAC,cAAc,KAC5B,IAKF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC;CACxC;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;CAC7C;AAgBD,eAAO,MAAM,iBAAiB,GAAI,CAAC,EACjC,QAAQ,kBAAkB,CAAC,CAAC,CAAC,KAC5B,kBAAkB,CAAC,CAAC,CAatB,CAAC"}
+{"version":3,"file":"ndjson.d.ts","sourceRoot":"","sources":["../../../src/utils/output/ndjson.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,UAAU,EACV,IAAI,EACJ,OAAO,EACR,MAAM,eAAe,CAAC;AAIvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;CACvC;AAED,eAAO,MAAM,YAAY,GACvB,OAAO,WAAW,EAClB,QAAQ,MAAM,CAAC,cAAc,KAC5B,IAKF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC;CACxC;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;CAC7C;AAgBD,eAAO,MAAM,iBAAiB,GAAI,CAAC,EACjC,QAAQ,kBAAkB,CAAC,CAAC,CAAC,KAC5B,kBAAkB,CAAC,CAAC,CAatB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE;QACZ,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;QACvC,mEAAmE;QACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACrC,CAAC;IACF,kEAAkE;IAClE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;CACzD;AAED,eAAO,MAAM,yBAAyB,GACpC,QAAQ,sBAAsB,KAC7B,IAoBC,CAAC"}

package/dist/utils/output/ndjson.js

@@ -1,3 +1,4 @@
+import { buildMeta } from './envelope.js';
 import { redact } from '../redact.js';
 export const renderNdjson = (input, stream) => {
     for (const resource of input.data) {
@@ -30,4 +31,24 @@ export const startNdjsonStream = (inputs) => {
         },
     };
 };
+export const buildStreamingTrailerMeta = (inputs) => buildMeta({
+    api_version: inputs.apiVersion,
+    cli_version: inputs.ctx.cliVersion,
+    request_id: inputs.ctx.requestId,
+    source: inputs.source,
+    retrieved_at: inputs.ctx.clock().toISOString(),
+    cache_age_seconds: inputs.cacheAgeSeconds,
+    complexity: inputs.result.complexity,
+    has_more: inputs.result.hasMore,
+    total_returned: inputs.result.totalReturned,
+    // Conditional spreads preserve `exactOptionalPropertyTypes`'s
+    // "undefined ≠ absent" rule: passing the keys with explicit
+    // `undefined` would not compile against the optional `?:` slots
+    // in `MetaInput`, even though `buildMeta` would have stripped
+    // them anyway.
+    ...(inputs.result.nextCursor === undefined
+        ? {}
+        : { next_cursor: inputs.result.nextCursor }),
+    ...(inputs.columns === undefined ? {} : { columns: inputs.columns }),
+});
 //# sourceMappingURL=ndjson.js.map

package/dist/utils/output/ndjson.js.map

@@ -1 +1 @@
-{"version":3,"file":"ndjson.js","sourceRoot":"","sources":["../../../src/utils/output/ndjson.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAkDtC,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,KAAkB,EAClB,MAA6B,EACvB,EAAE;IACR,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC,CAAC;AA6CF,MAAM,aAAa,GAAG,KAAK,EACzB,MAA6B,EAC7B,KAAa,EACE,EAAE;IACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO;IAChC,mEAAmE;IACnE,0DAA0D;IAC1D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,MAA6B,EACN,EAAE;IACzB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC5C,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACrD,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"ndjson.js","sourceRoot":"","sources":["../../../src/utils/output/ndjson.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AA0DtC,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,KAAkB,EAClB,MAA6B,EACvB,EAAE;IACR,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC,CAAC;AA+CF,MAAM,aAAa,GAAG,KAAK,EACzB,MAA6B,EAC7B,KAAa,EACE,EAAE;IACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO;IAChC,mEAAmE;IACnE,0DAA0D;IAC1D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,MAA6B,EACN,EAAE;IACzB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC5C,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACrD,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAsDF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,MAA8B,EACxB,EAAE,CACR,SAAS,CAAC;IACR,WAAW,EAAE,MAAM,CAAC,UAAU;IAC9B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU;IAClC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS;IAChC,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE;IAC9C,iBAAiB,EAAE,MAAM,CAAC,eAAe;IACzC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;IACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;IAC/B,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa;IAC3C,8DAA8D;IAC9D,4DAA4D;IAC5D,gEAAgE;IAChE,8DAA8D;IAC9D,eAAe;IACf,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;QACxC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAC9C,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;CACrE,CAAC,CAAC"}

package/dist/utils/redact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/utils/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AA+BH,MAAM,WAAW,aAAa;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,uEAAuE;IACvE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AA0GD;;;;;;;;GAQG;AACH,eAAO,MAAM,MAAM,GAAI,OAAO,OAAO,EAAE,UAAS,aAAkB,KAAG,OASpE,CAAC"}
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/utils/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAwCH,MAAM,WAAW,aAAa;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,uEAAuE;IACvE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAkID;;;;;;;;GAQG;AACH,eAAO,MAAM,MAAM,GAAI,OAAO,OAAO,EAAE,UAAS,aAAkB,KAAG,OASpE,CAAC"}

package/dist/utils/redact.js

@@ -25,10 +25,19 @@
  * with a `[Circular]` marker — never the original value, never a
  * thrown error that could leak in a stack trace.
  */
+// `access_token` joins the list at v0.3-M21 pre-flight per cli-design
+// §7.4.3 — the credentials cache (§7.4.1) keys per-profile entries
+// under `access_token: <opaque-monday-token>`, so any path that
+// emits a credentials-cache excerpt (debug bundle, error envelopes
+// rooted in a credentials-read failure) scrubs the value via this
+// list. The runtime value-scanning extension that loads + folds
+// credentials values into the secret-bag lands at M21 implementation
+// alongside the `monday auth login` body.
 const DEFAULT_SENSITIVE_KEYS = [
     'apiToken',
     'Authorization',
     'MONDAY_API_TOKEN',
+    'access_token',
 ];
 // Negative lookahead `(?!s)` excludes plural forms (`tokens`,
 // `secrets`, `passwords`, `api_keys`) — those are container key
@@ -125,6 +134,28 @@ const redactInternal = (value, ctx) => {
     const result = {};
     for (const [key, child] of Object.entries(value)) {
         if (isSensitiveKey(key, ctx.extraKeys, ctx.extraPattern)) {
+            // Default: redact. Only booleans, finite numbers, and `null`
+            // are preserved verbatim — these cannot encode a token byte
+            // sequence in JSON output and are the carrier types for
+            // structural-presence shapes like `set: {MONDAY_API_TOKEN:
+            // true}` (M22 `monday status` env-var-pickup probe per
+            // cli-design §11.5.2). Symbols, functions, bigints, and
+            // `undefined` redact wholesale because:
+            //   - Symbol descriptions can encode secret bytes
+            //     (`Symbol("tok-…")`),
+            //   - function source can encode secret bytes,
+            //   - bigints could theoretically encode a numeric token,
+            //   - `undefined` is omitted by `JSON.stringify` (no visible
+            //     side effect), but consistency: anything that isn't a
+            //     bool/number/null defaults to redact.
+            // Codex M22 W8 ratified the allowlist shape so the
+            // loosening doesn't leak via unusual scalar types.
+            if (typeof child === 'boolean' ||
+                typeof child === 'number' ||
+                child === null) {
+                result[key] = child;
+                continue;
+            }
             result[key] = ctx.placeholder;
             continue;
         }

package/dist/utils/redact.js.map

@@ -1 +1 @@
-{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/utils/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,sBAAsB,GAAsB;IAChD,UAAU;IACV,eAAe;IACf,kBAAkB;CACnB,CAAC;AAEF,8DAA8D;AAC9D,gEAAgE;AAChE,iEAAiE;AACjE,iEAAiE;AACjE,gEAAgE;AAChE,kEAAkE;AAClE,qDAAqD;AACrD,6DAA6D;AAC7D,+DAA+D;AAC/D,iEAAiE;AACjE,mDAAmD;AACnD,MAAM,yBAAyB,GAAG,4CAA4C,CAAC;AAE/E,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,kEAAkE;AAClE,wEAAwE;AACxE,wEAAwE;AACxE,uEAAuE;AACvE,uBAAuB;AACvB,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAmB5B,MAAM,cAAc,GAAG,CACrB,GAAW,EACX,SAA4B,EAC5B,YAAgC,EACvB,EAAE;IACX,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,KAAK,MAAM,SAAS,IAAI,sBAAsB,EAAE,CAAC;QAC/C,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,KAAa,EACb,OAA0B,EAC1B,WAAmB,EACX,EAAE;IACV,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACtC,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAUF,MAAM,cAAc,GAAG,CAAC,KAAc,EAAE,GAAoB,EAAW,EAAE;IACvE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAC3B,CAAC,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC;YAC3D,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEpB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,4DAA4D;IAC5D,+DAA+D;IAC/D,iEAAiE;IACjE,mCAAmC;IACnC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,MAAM,GAA4B;YACtC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,sEAAsE;YACtE,MAAM,CAAC,GAAG,CAAC,GAAI,KAA4C,CAAC,GAAG,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,UAAyB,EAAE,EAAW,EAAE;IAC7E,MAAM,GAAG,GAAoB;QAC3B,IAAI,EAAE,IAAI,OAAO,EAAU;QAC3B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;QAClC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,QAAQ;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;KAC/B,CAAC;IACF,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC,CAAC"}
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/utils/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,sEAAsE;AACtE,mEAAmE;AACnE,gEAAgE;AAChE,mEAAmE;AACnE,kEAAkE;AAClE,gEAAgE;AAChE,qEAAqE;AACrE,0CAA0C;AAC1C,MAAM,sBAAsB,GAAsB;IAChD,UAAU;IACV,eAAe;IACf,kBAAkB;IAClB,cAAc;CACf,CAAC;AAEF,8DAA8D;AAC9D,gEAAgE;AAChE,iEAAiE;AACjE,iEAAiE;AACjE,gEAAgE;AAChE,kEAAkE;AAClE,qDAAqD;AACrD,6DAA6D;AAC7D,+DAA+D;AAC/D,iEAAiE;AACjE,mDAAmD;AACnD,MAAM,yBAAyB,GAAG,4CAA4C,CAAC;AAE/E,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,kEAAkE;AAClE,wEAAwE;AACxE,wEAAwE;AACxE,uEAAuE;AACvE,uBAAuB;AACvB,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAmB5B,MAAM,cAAc,GAAG,CACrB,GAAW,EACX,SAA4B,EAC5B,YAAgC,EACvB,EAAE;IACX,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,KAAK,MAAM,SAAS,IAAI,sBAAsB,EAAE,CAAC;QAC/C,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,KAAa,EACb,OAA0B,EAC1B,WAAmB,EACX,EAAE;IACV,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACtC,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAUF,MAAM,cAAc,GAAG,CAAC,KAAc,EAAE,GAAoB,EAAW,EAAE;IACvE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAC3B,CAAC,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC;YAC3D,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEpB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,4DAA4D;IAC5D,+DAA+D;IAC/D,iEAAiE;IACjE,mCAAmC;IACnC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,MAAM,GAA4B;YACtC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,sEAAsE;YACtE,MAAM,CAAC,GAAG,CAAC,GAAI,KAA4C,CAAC,GAAG,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,6DAA6D;YAC7D,4DAA4D;YAC5D,wDAAwD;YACxD,2DAA2D;YAC3D,uDAAuD;YACvD,wDAAwD;YACxD,wCAAwC;YACxC,kDAAkD;YAClD,2BAA2B;YAC3B,+CAA+C;YAC/C,0DAA0D;YAC1D,6DAA6D;YAC7D,2DAA2D;YAC3D,2CAA2C;YAC3C,mDAAmD;YACnD,mDAAmD;YACnD,IACE,OAAO,KAAK,KAAK,SAAS;gBAC1B,OAAO,KAAK,KAAK,QAAQ;gBACzB,KAAK,KAAK,IAAI,EACd,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,UAAyB,EAAE,EAAW,EAAE;IAC7E,MAAM,GAAG,GAAoB;QAC3B,IAAI,EAAE,IAAI,OAAO,EAAU;QAC3B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;QAClC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,QAAQ;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;KAC/B,CAAC;IACF,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "monday-cli",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Agent-first CLI for Monday.com — read boards, file backlog items, transition statuses, and post comments from the terminal. Built for AI coding agents (Claude Code, Codex) with humans as a welcome second audience.",
   "type": "module",
   "engines": {
@@ -69,6 +69,7 @@
     "dotenv": "^17.0.0",
     "graphql": "^16.8.2",
     "ora": "^9.0.0",
+    "smol-toml": "^1.6.1",
     "zod": "^4.0.0"
   },
   "devDependencies": {