monday-cli 0.2.0 → 0.4.0

package/dist/cli/run.d.ts

@@ -3,6 +3,7 @@ import { type ExitCode } from '../utils/errors.js';
 import { type RequestIdGenerator } from '../utils/request-id.js';
 import { type MetaBuilder } from './envelope-out.js';
 import type { Transport } from '../api/transport.js';
+import type { MultipartTransport } from '../api/multipart-transport.js';
 import type { CommandModule } from '../commands/types.js';
 /**
  * Testable CLI runner (`v0.1-plan.md` §3 M0).
@@ -27,6 +28,17 @@ export interface RunOptions {
     readonly cliDescription?: string;
     readonly clock?: () => Date;
     readonly transport?: Transport;
+    /**
+     * Multipart-transport seam for the v0.4-M31 asset-upload verbs
+     * (`item upload` / `update upload`). Mirrors `transport` for the
+     * JSON path: integration tests inject a `MultipartFixtureTransport`
+     * here so the runner-level multipart wire is deterministic. When
+     * unset, `commands/item/upload.ts` + `commands/update/upload.ts`
+     * build a real `createMultipartFetchTransport(...)` instance from
+     * the resolved config (mirroring `resolveClient`'s
+     * `ctx.transport ?? createFetchTransport(...)` shape).
+     */
+    readonly multipartTransport?: MultipartTransport;
     readonly requestIdGenerator?: RequestIdGenerator;
     /**
      * External abort source. `runWithSignals` provides one tied to
@@ -71,6 +83,14 @@ export interface RunContext {
     readonly isTTY: boolean;
     readonly clock: () => Date;
     readonly transport: Transport | undefined;
+    /**
+     * Optional multipart-transport override threaded from
+     * {@link RunOptions.multipartTransport}. Asset-upload action bodies
+     * (`item upload` / `update upload`) read this slot and fall back to
+     * `createMultipartFetchTransport(...)` when unset — same shape as
+     * `transport`'s production-vs-test split.
+     */
+    readonly multipartTransport: MultipartTransport | undefined;
     readonly requestId: string;
     readonly cliVersion: string;
     /**
@@ -90,6 +110,18 @@ export interface RunContext {
      * `envelope-out.ts` (M2.5 R2).
      */
     readonly meta: MetaBuilder;
+    /**
+     * Per-run accumulator of literal secret values to scrub from every
+     * emitted byte (cli-design §7.4.3 redaction-runtime extension). The
+     * `program.ts` preAction hook pushes every loaded credentials-file
+     * `access_token` value here once, before any command action runs;
+     * `collectSecrets(ctx.env, ctx.runtimeSecrets)` then folds those
+     * values into the secret-bag passed to `redact()` on every emission
+     * path. The field is a mutable array via a `readonly` reference —
+     * commands never reassign it, but the preAction hook pushes into
+     * it during context setup.
+     */
+    readonly runtimeSecrets: string[];
 }
 export declare const run: (options: RunOptions) => Promise<RunResult>;
 /**

package/dist/cli/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/cli/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAGL,KAAK,QAAQ,EACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAClD;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,KAAK,IAAI,CAAC;CACzE;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAaD,eAAO,MAAM,GAAG,GAAU,SAAS,UAAU,KAAG,OAAO,CAAC,SAAS,CAuEhE,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,cAAc,GACzB,SAAS,UAAU,KAClB,OAAO,CAAC,SAAS,CAYnB,CAAC"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/cli/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAGL,KAAK,QAAQ,EACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B;;;;;;;;;OASG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAClD;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,KAAK,IAAI,CAAC;CACzE;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;CACnC;AAaD,eAAO,MAAM,GAAG,GAAU,SAAS,UAAU,KAAG,OAAO,CAAC,SAAS,CA0EhE,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,cAAc,GACzB,SAAS,UAAU,KAClB,OAAO,CAAC,SAAS,CAYnB,CAAC"}

package/dist/cli/run.js

@@ -35,10 +35,12 @@ export const run = async (options) => {
         isTTY: options.isTTY,
         clock,
         transport: options.transport,
+        multipartTransport: options.multipartTransport,
         requestId,
         cliVersion: options.cliVersion,
         signal: combinedSignal,
         meta,
+        runtimeSecrets: [],
     };
     const program = buildProgram(options, ctx);
     try {
@@ -65,6 +67,7 @@ export const run = async (options) => {
         writeErrorEnvelope(cliError, {
             stderr: options.stderr,
             env: options.env,
+            runtimeSecrets: ctx.runtimeSecrets,
             meta: buildBaseMeta({
                 snapshot: meta.snapshot(),
                 env: options.env,

package/dist/cli/run.js.map

@@ -1 +1 @@
-{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/cli/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAgB,MAAM,WAAW,CAAC;AACzD,OAAO,EACL,gBAAgB,GAGjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,yBAAyB,GAE1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,kBAAkB,GAEnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA8F5C,MAAM,cAAc,GAAG,CAAC,MAAe,EAAW,EAAE;IAClD;;wEAEoE;IACpE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,MAA4B,CAAC;IAC5C,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;AAClC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,GAAG,GAAG,KAAK,EAAE,OAAmB,EAAsB,EAAE;IACnE,MAAM,SAAS,GAAG,CAChB,OAAO,CAAC,kBAAkB,IAAI,yBAAyB,CACxD,EAAE,CAAC;IACJ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;IAE1C,gEAAgE;IAChE,gEAAgE;IAChE,+DAA+D;IAC/D,iEAAiE;IACjE,2BAA2B;IAC3B,MAAM,aAAa,GAAG,IAAI,eAAe,EAAE,CAAC;IAC5C,MAAM,cAAc,GAClB,OAAO,CAAC,MAAM,KAAK,SAAS;QAC1B,CAAC,CAAC,aAAa,CAAC,MAAM;QACtB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAE9D,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IAEjC,MAAM,GAAG,GAAe;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS;QACT,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,cAAc;QACtB,IAAI;KACL,CAAC;IAEF,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,cAAc,CAAC,OAAO,IAAI,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,8DAA8D;QAC9D,+DAA+D;QAC/D,4DAA4D;QAC5D,uBAAuB;QACvB,IAAI,cAAc,CAAC,OAAO,IAAI,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QAC3B,CAAC;QAED,iEAAiE;QACjE,yCAAyC;QACzC,IAAI,GAAG,YAAY,cAAc,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACpC,kBAAkB,CAAC,QAAQ,EAAE;YAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,aAAa,CAAC;gBAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;gBACzB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS;gBACT,WAAW;aACZ,CAAC;SACH,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACvD,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,OAAmB,EACC,EAAE;IACtB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,MAAM,MAAM,GAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/cli/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAgB,MAAM,WAAW,CAAC;AACzD,OAAO,EACL,gBAAgB,GAGjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,yBAAyB,GAE1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,kBAAkB,GAEnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA8H5C,MAAM,cAAc,GAAG,CAAC,MAAe,EAAW,EAAE;IAClD;;wEAEoE;IACpE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,MAA4B,CAAC;IAC5C,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;AAClC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,GAAG,GAAG,KAAK,EAAE,OAAmB,EAAsB,EAAE;IACnE,MAAM,SAAS,GAAG,CAChB,OAAO,CAAC,kBAAkB,IAAI,yBAAyB,CACxD,EAAE,CAAC;IACJ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;IAE1C,gEAAgE;IAChE,gEAAgE;IAChE,+DAA+D;IAC/D,iEAAiE;IACjE,2BAA2B;IAC3B,MAAM,aAAa,GAAG,IAAI,eAAe,EAAE,CAAC;IAC5C,MAAM,cAAc,GAClB,OAAO,CAAC,MAAM,KAAK,SAAS;QAC1B,CAAC,CAAC,aAAa,CAAC,MAAM;QACtB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAE9D,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IAEjC,MAAM,GAAG,GAAe;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,SAAS;QACT,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,cAAc;QACtB,IAAI;QACJ,cAAc,EAAE,EAAE;KACnB,CAAC;IAEF,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,cAAc,CAAC,OAAO,IAAI,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,8DAA8D;QAC9D,+DAA+D;QAC/D,4DAA4D;QAC5D,uBAAuB;QACvB,IAAI,cAAc,CAAC,OAAO,IAAI,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QAC3B,CAAC;QAED,iEAAiE;QACjE,yCAAyC;QACzC,IAAI,GAAG,YAAY,cAAc,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACpC,kBAAkB,CAAC,QAAQ,EAAE;YAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,IAAI,EAAE,aAAa,CAAC;gBAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;gBACzB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS;gBACT,WAAW;aACZ,CAAC;SACH,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACvD,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,OAAmB,EACC,EAAE;IACtB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,MAAM,MAAM,GAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC,CAAC"}

package/dist/commands/account/tags.d.ts

@@ -0,0 +1,37 @@
+/**
+ * `monday account tags` — emits the per-account tag directory
+ * (`cli-design.md` §4.3, M19 Commit 5).
+ *
+ * GraphQL operation(s) called (via the cache-aware loader):
+ *   - `account { tags { id, name } }` (AccountTags) — fired on cache
+ *     miss / expiry / `--no-cache`.
+ *
+ * Idempotent: yes — pure read.
+ *
+ * **Why this verb is M19-fold mandatory.** The `tag_not_found` error
+ * (cli-design §6.5, registered at `4c652d5`) emits a default hint
+ * pointing at `monday account tags` so an agent who hits an unknown
+ * tag has a self-fulfilling next step. Without this verb the hint
+ * would dangle. Codex round-1 P2-9 closed this question.
+ *
+ * The output schema mirrors the cache-on-disk shape — `tags: [{id,
+ * name}]` plus a `total` count that's redundant with `tags.length`
+ * but makes table rendering one-line and saves agents the count.
+ * `meta.source` / `meta.cache_age_seconds` / `meta.complexity`
+ * surface through the standard envelope so an agent can verify
+ * cache health on a per-call basis.
+ */
+import { z } from 'zod';
+import { type CommandModule } from '../types.js';
+export declare const accountTagsOutputSchema: z.ZodObject<{
+    tags: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strict>>;
+    total: z.ZodNumber;
+}, z.core.$strict>;
+export type AccountTagsOutput = z.infer<typeof accountTagsOutputSchema>;
+declare const inputSchema: z.ZodObject<{}, z.core.$strict>;
+export declare const accountTagsCommand: CommandModule<z.infer<typeof inputSchema>, AccountTagsOutput>;
+export {};
+//# sourceMappingURL=tags.d.ts.map

package/dist/commands/account/tags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags.d.ts","sourceRoot":"","sources":["../../../src/commands/account/tags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAoB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAYnE,eAAO,MAAM,uBAAuB;;;;;;kBAKzB,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,QAAA,MAAM,WAAW,iCAAwB,CAAC;AAE1C,eAAO,MAAM,kBAAkB,EAAE,aAAa,CAC5C,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,EAC3B,iBAAiB,CAgDlB,CAAC"}

package/dist/commands/account/tags.js

@@ -0,0 +1,84 @@
+/**
+ * `monday account tags` — emits the per-account tag directory
+ * (`cli-design.md` §4.3, M19 Commit 5).
+ *
+ * GraphQL operation(s) called (via the cache-aware loader):
+ *   - `account { tags { id, name } }` (AccountTags) — fired on cache
+ *     miss / expiry / `--no-cache`.
+ *
+ * Idempotent: yes — pure read.
+ *
+ * **Why this verb is M19-fold mandatory.** The `tag_not_found` error
+ * (cli-design §6.5, registered at `4c652d5`) emits a default hint
+ * pointing at `monday account tags` so an agent who hits an unknown
+ * tag has a self-fulfilling next step. Without this verb the hint
+ * would dangle. Codex round-1 P2-9 closed this question.
+ *
+ * The output schema mirrors the cache-on-disk shape — `tags: [{id,
+ * name}]` plus a `total` count that's redundant with `tags.length`
+ * but makes table rendering one-line and saves agents the count.
+ * `meta.source` / `meta.cache_age_seconds` / `meta.complexity`
+ * surface through the standard envelope so an agent can verify
+ * cache health on a per-call basis.
+ */
+import { z } from 'zod';
+import { ensureSubcommand } from '../types.js';
+import { emitSuccess } from '../emit.js';
+import { resolveClient } from '../../api/resolve-client.js';
+import { loadAccountTags } from '../../api/tag-directory.js';
+const tagSchema = z
+    .object({
+    id: z.string().min(1),
+    name: z.string(),
+})
+    .strict();
+export const accountTagsOutputSchema = z
+    .object({
+    tags: z.array(tagSchema),
+    total: z.number().int().nonnegative(),
+})
+    .strict();
+const inputSchema = z.object({}).strict();
+export const accountTagsCommand = {
+    name: 'account.tags',
+    summary: 'List the per-account tag directory (cache-aware)',
+    examples: [
+        'monday account tags',
+        'monday account tags --json',
+        'monday account tags --no-cache',
+    ],
+    idempotent: true,
+    inputSchema,
+    outputSchema: accountTagsOutputSchema,
+    attach: (program, ctx) => {
+        const noun = ensureSubcommand(program, 'account', 'Account commands');
+        noun
+            .command('tags')
+            .description(accountTagsCommand.summary)
+            .addHelpText('after', ['', 'Examples:', ...accountTagsCommand.examples.map((e) => `  ${e}`), ''].join('\n'))
+            .action(async (opts) => {
+            accountTagsCommand.inputSchema.parse(opts);
+            const { client, globalFlags, apiVersion } = resolveClient(ctx, program.opts());
+            const result = await loadAccountTags({
+                client,
+                env: ctx.env,
+                noCache: globalFlags.noCache,
+            });
+            ctx.meta.setSource(result.source);
+            emitSuccess({
+                ctx,
+                data: {
+                    tags: [...result.tags],
+                    total: result.tags.length,
+                },
+                schema: accountTagsCommand.outputSchema,
+                programOpts: program.opts(),
+                source: result.source,
+                apiVersion,
+                complexity: result.complexity,
+                cacheAgeSeconds: result.cacheAgeSeconds,
+            });
+        });
+    },
+};
+//# sourceMappingURL=tags.js.map

package/dist/commands/account/tags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags.js","sourceRoot":"","sources":["../../../src/commands/account/tags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAsB,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,MAAM,SAAS,GAAG,CAAC;KAChB,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE1C,MAAM,CAAC,MAAM,kBAAkB,GAG3B;IACF,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,kDAAkD;IAC3D,QAAQ,EAAE;QACR,qBAAqB;QACrB,4BAA4B;QAC5B,gCAAgC;KACjC;IACD,UAAU,EAAE,IAAI;IAChB,WAAW;IACX,YAAY,EAAE,uBAAuB;IACrC,MAAM,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACtE,IAAI;aACD,OAAO,CAAC,MAAM,CAAC;aACf,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC;aACvC,WAAW,CACV,OAAO,EACP,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACtF;aACA,MAAM,CAAC,KAAK,EAAE,IAAa,EAAE,EAAE;YAC9B,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,aAAa,CACvD,GAAG,EACH,OAAO,CAAC,IAAI,EAAE,CACf,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;gBACnC,MAAM;gBACN,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,WAAW,CAAC;gBACV,GAAG;gBACH,IAAI,EAAE;oBACJ,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;oBACtB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;iBAC1B;gBACD,MAAM,EAAE,kBAAkB,CAAC,YAAY;gBACvC,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU;gBACV,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;aACxC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;CACF,CAAC"}

package/dist/commands/auth/login.d.ts

@@ -0,0 +1,14 @@
+import { z } from 'zod';
+import { type CommandModule } from '../types.js';
+declare const inputSchema: z.ZodObject<{
+    profile: z.ZodString;
+}, z.core.$strict>;
+declare const loginOutputSchema: z.ZodObject<{
+    profile: z.ZodString;
+    account_id: z.ZodString;
+    scopes: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type AuthLoginOutput = z.infer<typeof loginOutputSchema>;
+export declare const authLoginCommand: CommandModule<z.infer<typeof inputSchema>, AuthLoginOutput>;
+export {};
+//# sourceMappingURL=login.d.ts.map

package/dist/commands/auth/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/login.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAoB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAgCnE,QAAA,MAAM,WAAW;;kBAIN,CAAC;AAEZ,QAAA,MAAM,iBAAiB;;;;kBAMZ,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAkHhE,eAAO,MAAM,gBAAgB,EAAE,aAAa,CAC1C,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,EAC3B,eAAe,CAwNhB,CAAC"}

package/dist/commands/auth/login.js

@@ -0,0 +1,314 @@
+/**
+ * `monday auth login --profile <name>` — OAuth flow + credentials cache
+ * write per cli-design §7.3 / §7.4 (v0.3-plan §3 M21).
+ *
+ * **Flow shape (cli-design §7.3.1):**
+ *
+ *   1. Generate per-attempt CSRF state.
+ *   2. Bind a local listener on `127.0.0.1:9876` (or call the
+ *      `__test_oauth_helper` seam when set).
+ *   3. Build the consent URL + open the browser; print the URL to
+ *      stderr as a headless-friendly fallback.
+ *   4. Wait for the redirect.
+ *   5. Verify CSRF (constant-time compare; length mismatches route to
+ *      `csrf_mismatch`, NOT `internal_error`).
+ *   6. Map redirect kind: `code` → exchange; `error: 'access_denied'`
+ *      → `oauth_failed.user_denied`; any other error →
+ *      `oauth_failed.authorization_failed`.
+ *   7. Exchange the code at `/oauth2/token`.
+ *   8. Query `account { id }` with the new token to populate the
+ *      success envelope's `account_id`.
+ *   9. Persist via {@link setProfileCredentials}.
+ *  10. Emit success envelope (token NEVER in `data` per §7.4.3).
+ */
+import { spawn } from 'node:child_process';
+import { z } from 'zod';
+import { ensureSubcommand } from '../types.js';
+import { ApiError, UsageError } from '../../utils/errors.js';
+import { unwrapOrThrow } from '../../utils/parse-boundary.js';
+import { parseGlobalFlags } from '../../types/global-flags.js';
+import { emitSuccess } from '../emit.js';
+import { bindOAuthListener, exchangeCode, generateOAuthState, verifyCsrf, OAUTH_AUTHORIZE_URL, OAUTH_CALLBACK_PATH, OAUTH_CLIENT_ID, OAUTH_CLIENT_SECRET, OAUTH_UNREGISTERED_PLACEHOLDER, OAUTH_DEFAULT_REQUESTED_SCOPES, } from '../../api/oauth.js';
+import { buildTestOAuthListener, readTestOAuthFixture, TEST_OAUTH_HELPER_ENV_VAR, } from '../../api/oauth-test-helper.js';
+import { setProfileCredentials, } from '../../config/credentials.js';
+import { createFetchTransport } from '../../api/transport.js';
+import { MondayClient, PINNED_API_VERSION } from '../../api/client.js';
+const inputSchema = z
+    .object({
+    profile: z.string().min(1),
+})
+    .strict();
+const loginOutputSchema = z
+    .object({
+    profile: z.string().min(1),
+    account_id: z.string().min(1),
+    scopes: z.array(z.string()),
+})
+    .strict();
+const accountIdQuery = 'query AuthLoginAccountId { account { id } }';
+const accountIdResponseSchema = z
+    .object({
+    account: z
+        .object({
+        id: z.string().min(1),
+    })
+        .loose(),
+})
+    .loose();
+/**
+ * Best-effort browser-open via the platform's default opener. Spawned
+ * detached + unref'd so a missing opener doesn't keep the parent
+ * process alive. Returns `true` if the spawn appeared to start; the
+ * fallback URL print runs regardless so headless boxes still see the
+ * link.
+ */
+/* c8 ignore start — production-only browser-open path; tests bypass
+   it via the __test_oauth_helper seam. */
+const tryOpenBrowser = (url) => {
+    const opener = process.platform === 'darwin'
+        ? 'open'
+        : process.platform === 'win32'
+            ? 'start'
+            : 'xdg-open';
+    try {
+        const child = spawn(opener, [url], {
+            detached: true,
+            stdio: 'ignore',
+        });
+        child.unref();
+        child.on('error', () => {
+            // Swallow — the URL print covers headless boxes.
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+/* c8 ignore stop */
+/**
+ * Fetches `account { id }` with the just-obtained token. Honours
+ * `ctx.transport` if present (test path) — production builds a fresh
+ * `FetchTransport` carrying the new token.
+ */
+const fetchAccountId = async (accessToken, ctx) => {
+    // Tests inject `ctx.transport` (FixtureTransport); production hits
+    // the `createFetchTransport` fallback to issue a fresh client
+    // carrying the just-obtained OAuth token.
+    /* c8 ignore next 8 */
+    const transport = ctx.transport ??
+        createFetchTransport({
+            endpoint: 'https://api.monday.com/v2',
+            apiToken: accessToken,
+            apiVersion: PINNED_API_VERSION,
+            timeoutMs: 30_000,
+        });
+    const client = new MondayClient({
+        transport,
+        signal: ctx.signal,
+        retries: 0,
+        verbose: false,
+    });
+    const response = await client.raw(accountIdQuery, undefined, {
+        operationName: 'AuthLoginAccountId',
+    });
+    // R-NEW-19 lift — canonical parse-failure via `unwrapOrThrow`;
+    // Monday's `account { id }` surface is contract-stable so this
+    // path stays defensive (c8-ignore-wrapped — the helper itself is
+    // tested end-to-end, the per-site failure is not reachable from
+    // unit tests).
+    /* c8 ignore start */
+    const parsedData = unwrapOrThrow(accountIdResponseSchema.safeParse(response.data), {
+        context: 'post-OAuth `account { id }` response',
+    });
+    return parsedData.account.id;
+    /* c8 ignore stop */
+};
+const credentialsHomeOptions = (ctx) => {
+    const home = ctx.env.HOME;
+    // The HOME-undefined arm falls through to homedir() inside
+    // resolveCredentialsPath; testing it would write to the user's
+    // real ~/.monday-cli/credentials, so the branch is production-only.
+    /* c8 ignore next 3 */
+    return home !== undefined && home.length > 0
+        ? { home, env: ctx.env }
+        : { env: ctx.env };
+};
+const buildConsentUrl = (state, redirectUri) => {
+    const url = new URL(OAUTH_AUTHORIZE_URL);
+    url.searchParams.set('client_id', OAUTH_CLIENT_ID);
+    url.searchParams.set('redirect_uri', redirectUri);
+    url.searchParams.set('state', state);
+    url.searchParams.set('scope', OAUTH_DEFAULT_REQUESTED_SCOPES.join(' '));
+    return url.toString();
+};
+export const authLoginCommand = {
+    name: 'auth.login',
+    summary: 'OAuth flow that writes a per-profile credentials cache entry',
+    examples: [
+        'monday auth login --profile work',
+        'monday auth login --profile personal',
+    ],
+    // OAuth flow itself is non-idempotent (each `code` is single-use per
+    // OAuth's spec) but the credentials-write layer is idempotent
+    // (re-running overwrites the named profile entry per §7.3.2).
+    idempotent: true,
+    inputSchema,
+    outputSchema: loginOutputSchema,
+    attach: (program, ctx) => {
+        const noun = ensureSubcommand(program, 'auth', 'OAuth-issued credentials cache (cli-design §7.3 / §7.4)');
+        noun
+            .command('login')
+            .description(authLoginCommand.summary)
+            .addHelpText('after', [
+            '',
+            'Examples:',
+            ...authLoginCommand.examples.map((e) => `  ${e}`),
+            '',
+        ].join('\n'))
+            .action(async () => {
+            // Production-only placeholder guard. When the shipped OAuth
+            // credentials are still the `<UNREGISTERED_PENDING_OAUTH_APP>`
+            // placeholders, the upstream `/oauth2/token` exchange would
+            // fail with a cryptic `oauth_failed.code_exchange_failed`.
+            // Surface a clear `usage_error` pointing at the API-token
+            // path instead. OAuth login is deferred to a future version
+            // per v0.3-plan §8 Decision 11 rejection. The test seam
+            // (`__test_oauth_helper`) bypasses this — integration tests
+            // stub `/oauth2/token` and don't depend on real credentials.
+            const helperPath = ctx.env[TEST_OAUTH_HELPER_ENV_VAR];
+            if (OAUTH_CLIENT_ID === OAUTH_UNREGISTERED_PLACEHOLDER &&
+                (helperPath === undefined || helperPath.length === 0)) {
+                throw new UsageError('`monday auth login` is not available in this release; authenticate via the MONDAY_API_TOKEN env var instead. OAuth login is deferred to a future version.', {
+                    details: {
+                        reason: 'oauth_unregistered',
+                        hint: 'set MONDAY_API_TOKEN=<your-monday-api-token> (mint from Monday → Profile → Developers → My Access Tokens) and re-run any `monday` command without `monday auth login`',
+                    },
+                });
+            }
+            const flags = parseGlobalFlags(program.opts(), ctx.env);
+            if (flags.profile === undefined || flags.profile.length === 0) {
+                throw new UsageError('`monday auth login` requires `--profile <name>` (or `MONDAY_PROFILE` env)', {
+                    details: {
+                        hint: 'each profile authenticates against a (possibly different) Monday account; the credentials cache is per-profile so the verb cannot infer a target.',
+                    },
+                });
+            }
+            authLoginCommand.inputSchema.parse({ profile: flags.profile });
+            const state = generateOAuthState();
+            // Step 2: bind listener (or test seam).
+            let listener;
+            if (helperPath !== undefined && helperPath.length > 0) {
+                const fixture = await readTestOAuthFixture(helperPath);
+                listener = buildTestOAuthListener(fixture, state);
+            }
+            else {
+                // Production-only socket bind path; unit tests use the test
+                // seam, integration tests stub the env.
+                /* c8 ignore start */
+                listener = await bindOAuthListener();
+                /* c8 ignore stop */
+            }
+            try {
+                const redirectUri = `http://127.0.0.1:${String(
+                // Production listener.port > 0; only the test-helper path
+                // (port: 0) reaches the truthy arm.
+                /* c8 ignore next */
+                listener.port === 0 ? 9876 : listener.port)}${OAUTH_CALLBACK_PATH}`;
+                const consentUrl = buildConsentUrl(state, redirectUri);
+                // Step 3: open browser + print URL fallback. Skipped under
+                // the test seam (no browser to open in tests; the helper
+                // synthesises the redirect directly). Production-only path.
+                /* c8 ignore start */
+                if (helperPath === undefined) {
+                    tryOpenBrowser(consentUrl);
+                    ctx.stderr.write(`Open this URL in your browser to continue: ${consentUrl}\n`);
+                }
+                /* c8 ignore stop */
+                // Step 4: wait for redirect.
+                const payload = await listener.awaitRedirect();
+                // Step 5: verify CSRF.
+                if (!verifyCsrf(payload.state, state)) {
+                    throw new ApiError('oauth_failed', 'CSRF state mismatch on OAuth redirect — refusing to exchange code', {
+                        details: {
+                            reason: 'csrf_mismatch',
+                            hint: 're-run `monday auth login --profile <name>` to start a fresh OAuth flow',
+                        },
+                    });
+                }
+                // Step 6: map error redirects.
+                if (payload.kind === 'error') {
+                    if (payload.error === 'access_denied') {
+                        throw new ApiError('oauth_failed', 'OAuth authorization was denied at the consent screen', {
+                            details: {
+                                reason: 'user_denied',
+                                hint: 're-run `monday auth login --profile <name>` and approve the consent screen',
+                            },
+                        });
+                    }
+                    throw new ApiError('oauth_failed', `OAuth authorization failed: ${payload.error}${payload.errorDescription !== undefined ? ` — ${payload.errorDescription}` : ''}`, {
+                        mondayCode: payload.error,
+                        details: {
+                            reason: 'authorization_failed',
+                            monday_code: payload.error,
+                            ...(payload.errorDescription !== undefined
+                                ? { monday_description: payload.errorDescription }
+                                : {}),
+                            hint: 'check the OAuth app configuration (scopes / client settings) and retry; for `temporary_unavailable`, retry shortly',
+                        },
+                    });
+                }
+                // Step 7: exchange code.
+                const tokenResponse = await exchangeCode({
+                    code: payload.code,
+                    redirectUri,
+                    clientId: OAUTH_CLIENT_ID,
+                    clientSecret: OAUTH_CLIENT_SECRET,
+                });
+                // Fold the just-obtained token into the value-scan secret
+                // bag BEFORE any subsequent emission can echo it. The
+                // preAction redaction-runtime preload (program.ts) runs
+                // BEFORE the OAuth exchange so the new token isn't in
+                // `ctx.runtimeSecrets` yet; if the post-exchange
+                // `account { id }` probe below fails with a GraphQL
+                // error.message echoing the presented Authorization
+                // header, the error envelope's value-scan layer needs
+                // this entry to scrub it (cli-design §7.4.3 — Codex
+                // M21 Part 2 P1 finding).
+                ctx.runtimeSecrets.push(tokenResponse.accessToken);
+                // Step 8: post-exchange `account { id }`.
+                const accountId = await fetchAccountId(tokenResponse.accessToken, ctx);
+                // Step 9: persist credentials.
+                const scopesArray = tokenResponse.scope
+                    .split(' ')
+                    .filter((s) => s.length > 0);
+                const entry = {
+                    access_token: tokenResponse.accessToken,
+                    obtained_at: ctx.clock().toISOString(),
+                    expires_at: null,
+                    scopes: scopesArray,
+                    account_id: accountId,
+                };
+                await setProfileCredentials({ profileName: flags.profile, entry }, credentialsHomeOptions(ctx));
+                // Step 10: emit success envelope. Token NEVER in `data`.
+                emitSuccess({
+                    ctx,
+                    data: {
+                        profile: flags.profile,
+                        account_id: accountId,
+                        scopes: scopesArray,
+                    },
+                    schema: authLoginCommand.outputSchema,
+                    programOpts: program.opts(),
+                    source: 'live',
+                    apiVersion: PINNED_API_VERSION,
+                    cacheAgeSeconds: null,
+                });
+            }
+            finally {
+                listener.close();
+            }
+        });
+    },
+};
+//# sourceMappingURL=login.js.map

package/dist/commands/auth/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/commands/auth/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAsB,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,8BAA8B,EAC9B,8BAA8B,GAE/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,qBAAqB,GAEtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAIvE,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,cAAc,GAAG,6CAA6C,CAAC;AAErE,MAAM,uBAAuB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACtB,CAAC;SACD,KAAK,EAAE;CACX,CAAC;KACD,KAAK,EAAE,CAAC;AAEX;;;;;;GAMG;AACH;0CAC0C;AAC1C,MAAM,cAAc,GAAG,CAAC,GAAW,EAAW,EAAE;IAC9C,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,UAAU,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE;YACjC,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,iDAAiD;QACnD,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AACF,oBAAoB;AAEpB;;;;GAIG;AACH,MAAM,cAAc,GAAG,KAAK,EAC1B,WAAmB,EACnB,GAAe,EACE,EAAE;IACnB,mEAAmE;IACnE,8DAA8D;IAC9D,0CAA0C;IAC1C,sBAAsB;IACtB,MAAM,SAAS,GACb,GAAG,CAAC,SAAS;QACb,oBAAoB,CAAC;YACnB,QAAQ,EAAE,2BAA2B;YACrC,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,kBAAkB;YAC9B,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC9B,SAAS;QACT,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAU,cAAc,EAAE,SAAS,EAAE;QACpE,aAAa,EAAE,oBAAoB;KACpC,CAAC,CAAC;IACH,+DAA+D;IAC/D,+DAA+D;IAC/D,iEAAiE;IACjE,gEAAgE;IAChE,eAAe;IACf,qBAAqB;IACrB,MAAM,UAAU,GAAG,aAAa,CAC9B,uBAAuB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAChD;QACE,OAAO,EAAE,sCAAsC;KAChD,CACF,CAAC;IACF,OAAO,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7B,oBAAoB;AACtB,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,GAAe,EAC4B,EAAE;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;IAC1B,2DAA2D;IAC3D,+DAA+D;IAC/D,oEAAoE;IACpE,sBAAsB;IACtB,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAC1C,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;QACxB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,KAAa,EAAE,WAAmB,EAAU,EAAE;IACrE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACzC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IACnD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAGzB;IACF,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,8DAA8D;IACvE,QAAQ,EAAE;QACR,kCAAkC;QAClC,sCAAsC;KACvC;IACD,qEAAqE;IACrE,8DAA8D;IAC9D,8DAA8D;IAC9D,UAAU,EAAE,IAAI;IAChB,WAAW;IACX,YAAY,EAAE,iBAAiB;IAC/B,MAAM,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,gBAAgB,CAC3B,OAAO,EACP,MAAM,EACN,yDAAyD,CAC1D,CAAC;QACF,IAAI;aACD,OAAO,CAAC,OAAO,CAAC;aAChB,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC;aACrC,WAAW,CACV,OAAO,EACP;YACE,EAAE;YACF,WAAW;YACX,GAAG,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb;aACA,MAAM,CAAC,KAAK,IAAI,EAAE;YACjB,4DAA4D;YAC5D,+DAA+D;YAC/D,4DAA4D;YAC5D,2DAA2D;YAC3D,0DAA0D;YAC1D,4DAA4D;YAC5D,wDAAwD;YACxD,4DAA4D;YAC5D,6DAA6D;YAC7D,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YACtD,IACE,eAAe,KAAK,8BAA8B;gBAClD,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,EACrD,CAAC;gBACD,MAAM,IAAI,UAAU,CAClB,2JAA2J,EAC3J;oBACE,OAAO,EAAE;wBACP,MAAM,EAAE,oBAAoB;wBAC5B,IAAI,EAAE,uKAAuK;qBAC9K;iBACF,CACF,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,UAAU,CAClB,2EAA2E,EAC3E;oBACE,OAAO,EAAE;wBACP,IAAI,EAAE,mJAAmJ;qBAC1J;iBACF,CACF,CAAC;YACJ,CAAC;YACD,gBAAgB,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAE/D,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;YAEnC,wCAAwC;YACxC,IAAI,QAA6B,CAAC;YAClC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAC;gBACvD,QAAQ,GAAG,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,4DAA4D;gBAC5D,wCAAwC;gBACxC,qBAAqB;gBACrB,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;gBACrC,oBAAoB;YACtB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,oBAAoB,MAAM;gBAC5C,0DAA0D;gBAC1D,oCAAoC;gBACpC,oBAAoB;gBACpB,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAC3C,GAAG,mBAAmB,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBAEvD,2DAA2D;gBAC3D,yDAAyD;gBACzD,4DAA4D;gBAC5D,qBAAqB;gBACrB,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,cAAc,CAAC,UAAU,CAAC,CAAC;oBAC3B,GAAG,CAAC,MAAM,CAAC,KAAK,CACd,8CAA8C,UAAU,IAAI,CAC7D,CAAC;gBACJ,CAAC;gBACD,oBAAoB;gBAEpB,6BAA6B;gBAC7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,CAAC;gBAE/C,uBAAuB;gBACvB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;oBACtC,MAAM,IAAI,QAAQ,CAChB,cAAc,EACd,mEAAmE,EACnE;wBACE,OAAO,EAAE;4BACP,MAAM,EAAE,eAAe;4BACvB,IAAI,EAAE,yEAAyE;yBAChF;qBACF,CACF,CAAC;gBACJ,CAAC;gBAED,+BAA+B;gBAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC7B,IAAI,OAAO,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;wBACtC,MAAM,IAAI,QAAQ,CAChB,cAAc,EACd,sDAAsD,EACtD;4BACE,OAAO,EAAE;gCACP,MAAM,EAAE,aAAa;gCACrB,IAAI,EAAE,4EAA4E;6BACnF;yBACF,CACF,CAAC;oBACJ,CAAC;oBACD,MAAM,IAAI,QAAQ,CAChB,cAAc,EACd,+BAA+B,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAC/H;wBACE,UAAU,EAAE,OAAO,CAAC,KAAK;wBACzB,OAAO,EAAE;4BACP,MAAM,EAAE,sBAAsB;4BAC9B,WAAW,EAAE,OAAO,CAAC,KAAK;4BAC1B,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gCACxC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,gBAAgB,EAAE;gCAClD,CAAC,CAAC,EAAE,CAAC;4BACP,IAAI,EAAE,oHAAoH;yBAC3H;qBACF,CACF,CAAC;gBACJ,CAAC;gBAED,yBAAyB;gBACzB,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC;oBACvC,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,WAAW;oBACX,QAAQ,EAAE,eAAe;oBACzB,YAAY,EAAE,mBAAmB;iBAClC,CAAC,CAAC;gBAEH,0DAA0D;gBAC1D,sDAAsD;gBACtD,wDAAwD;gBACxD,sDAAsD;gBACtD,iDAAiD;gBACjD,oDAAoD;gBACpD,oDAAoD;gBACpD,sDAAsD;gBACtD,oDAAoD;gBACpD,0BAA0B;gBAC1B,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;gBAEnD,0CAA0C;gBAC1C,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC,aAAa,CAAC,WAAW,EACzB,GAAG,CACJ,CAAC;gBAEF,+BAA+B;gBAC/B,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK;qBACpC,KAAK,CAAC,GAAG,CAAC;qBACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC/B,MAAM,KAAK,GAAiB;oBAC1B,YAAY,EAAE,aAAa,CAAC,WAAW;oBACvC,WAAW,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE;oBACtC,UAAU,EAAE,IAAI;oBAChB,MAAM,EAAE,WAAW;oBACnB,UAAU,EAAE,SAAS;iBACtB,CAAC;gBACF,MAAM,qBAAqB,CACzB,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,EACrC,sBAAsB,CAAC,GAAG,CAAC,CAC5B,CAAC;gBAEF,yDAAyD;gBACzD,WAAW,CAAC;oBACV,GAAG;oBACH,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE,WAAW;qBACpB;oBACD,MAAM,EAAE,gBAAgB,CAAC,YAAY;oBACrC,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE;oBAC3B,MAAM,EAAE,MAAM;oBACd,UAAU,EAAE,kBAAkB;oBAC9B,eAAe,EAAE,IAAI;iBACtB,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC;CACF,CAAC"}

package/dist/commands/auth/logout.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `monday auth logout --profile <name>` — deletes the named profile's
+ * entry from the credentials cache per cli-design §7.3.2 (v0.3-plan
+ * §3 M21).
+ *
+ * Idempotent — deletes the named profile entry; no-op + `ok: true`
+ * with `was_present: false` on a missing entry. NOT under the
+ * destructive-confirmation gate (§3.1) — credential rotation is a
+ * routine agent operation, not data mutation requiring `--yes`.
+ *
+ * When the post-delete profiles map is empty, the credentials file
+ * is **still written** as `{schema_version: '1', profiles: {}}`
+ * rather than deleted outright (cli-design §7.3.2 — keeps the
+ * schema-version pin discoverable + avoids fresh-install ambiguity).
+ */
+import { z } from 'zod';
+import { type CommandModule } from '../types.js';
+declare const inputSchema: z.ZodObject<{
+    profile: z.ZodString;
+}, z.core.$strict>;
+declare const logoutOutputSchema: z.ZodObject<{
+    profile: z.ZodString;
+    was_present: z.ZodBoolean;
+}, z.core.$strict>;
+export type AuthLogoutOutput = z.infer<typeof logoutOutputSchema>;
+export declare const authLogoutCommand: CommandModule<z.infer<typeof inputSchema>, AuthLogoutOutput>;
+export {};
+//# sourceMappingURL=logout.d.ts.map

package/dist/commands/auth/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/logout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAoB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAQnE,QAAA,MAAM,WAAW;;kBAIN,CAAC;AAEZ,QAAA,MAAM,kBAAkB;;;kBAKb,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAelE,eAAO,MAAM,iBAAiB,EAAE,aAAa,CAC3C,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,EAC3B,gBAAgB,CAiEjB,CAAC"}