monday-cli 0.2.0

package/dist/api/dates.js

@@ -0,0 +1,490 @@
+/**
+ * Pure date-resolution helpers for the `date` column-value
+ * translator (`cli-design.md` §5.3 step 3 + the
+ * "Relative dates and timezone" subsection).
+ *
+ * Two surfaces:
+ *
+ *   - `parseDateInput` — accepts every input shape `cli-design.md`
+ *     §5.3 step 3 enumerates: ISO date (`YYYY-MM-DD`), ISO date+time
+ *     (`YYYY-MM-DDTHH:MM[:SS]`), and the relative-token set
+ *     (`today`, `tomorrow`, `+Nd`, `-Nw`, `+Nh`). Returns the
+ *     Monday wire payload (`{date}` or `{date, time}`) plus the
+ *     `resolvedFrom` echo `cli-design.md` §6.4 puts on the
+ *     dry-run envelope.
+ *   - `formatNowInTimezone` — used internally to format an
+ *     instant in an IANA timezone for the `resolvedFrom.now`
+ *     echo. Exported because the dry-run engine (M5a follow-up)
+ *     will need the same shape for non-date columns' `now`
+ *     timestamp.
+ *
+ * **Why a separate module.** column-values.ts owns translator
+ * *dispatch* — the switch over WritableColumnType, the
+ * mutation-selection helper, and the ApiError builder. The date
+ * translator's machinery is ~150 LOC of regex + Intl
+ * gymnastics with no dispatch concerns. Splitting keeps
+ * column-values.ts at one screen of dispatch logic and the date
+ * machinery isolated for unit testing.
+ *
+ * **No external dep.** Uses only `Intl.DateTimeFormat` for tz
+ * formatting + `Date` arithmetic. The CLI rules forbid pulling
+ * in luxon / date-fns / dayjs for stdlib-doable work; Node 22
+ * ships full ICU and `longOffset` tz formatting, which covers
+ * everything `cli-design.md` §5.3 needs.
+ */
+import { UsageError } from '../utils/errors.js';
+/**
+ * Parses a `date` column input per cli-design §5.3 step 3.
+ *
+ * Accepted inputs:
+ *   - **ISO date** `YYYY-MM-DD` → `{date}` payload, no
+ *     resolution echo.
+ *   - **ISO date+time** `YYYY-MM-DDTHH:MM` or
+ *     `YYYY-MM-DDTHH:MM:SS` → `{date, time}` payload, no
+ *     resolution echo. Seconds default to `:00`.
+ *   - **Relative tokens**:
+ *     - `today` → today's date in `ctx.timezone`.
+ *     - `tomorrow` → today + 1 day in `ctx.timezone`.
+ *     - `+Nd` / `-Nd` (days), `+Nw` / `-Nw` (weeks) →
+ *       date-only output, calendar arithmetic in `ctx.timezone`.
+ *     - `+Nh` / `-Nh` (hours) → date+time output, instant
+ *       arithmetic (UTC offset preserved across DST per
+ *       industry standard — `+24h` from a GMT instant lands
+ *       at the same UTC instant +24h, which may shift the
+ *       wall-clock time by an hour on a DST boundary day).
+ *
+ * Throws `usage_error` with a structured `details` shape for
+ * unrecognised input. The error message lists the supported
+ * forms so an agent's debug log shows the right shape to
+ * paste-and-edit.
+ *
+ * @param raw - The raw user-supplied value (post-`--set`
+ *   parsing).
+ * @param columnId - Column ID for error messages.
+ * @param ctx - Resolution context. Defaults to system clock +
+ *   system tz when omitted; M5b's command layer plumbs the
+ *   `MONDAY_TIMEZONE` env override.
+ */
+export const parseDateInput = (raw, columnId, ctx = {}) => {
+    const trimmed = raw.trim();
+    if (trimmed.length === 0) {
+        throw unrecognisedDateInputError(columnId, raw);
+    }
+    // Try the explicit shapes first — they're cheaper and more
+    // common for agent-driven workflows that already have an
+    // absolute due date in hand.
+    const isoDate = parseIsoDate(trimmed);
+    if (isoDate !== null) {
+        return { payload: { date: isoDate }, resolvedFrom: null };
+    }
+    const isoDateTime = parseIsoDateTime(trimmed);
+    if (isoDateTime !== null) {
+        return { payload: isoDateTime, resolvedFrom: null };
+    }
+    // Lower-case relative tokens — `Today`, `TOMORROW`, `+3D`
+    // all resolve identically. Case-fold here, not in the input
+    // (the resolvedFrom echo carries `raw` verbatim so the
+    // dry-run output shows what the agent typed).
+    const relative = parseRelative(trimmed.toLowerCase(), raw, columnId, ctx);
+    if (relative !== null) {
+        return relative;
+    }
+    throw unrecognisedDateInputError(columnId, raw);
+};
+/**
+ * Validates `YYYY-MM-DD` and returns the literal string when
+ * it represents a real calendar date. Returns `null` when the
+ * shape doesn't match or the date is impossible (e.g.
+ * `2026-02-30`, `2026-13-01`).
+ */
+const parseIsoDate = (raw) => {
+    const match = /^(\d{4})-(\d{2})-(\d{2})$/u.exec(raw);
+    if (match === null)
+        return null;
+    const [, yStr, mStr, dStr] = match;
+    // The regex captures fix the array shape, but TS's regex
+    // typings don't narrow the tuple — the explicit guard keeps
+    // noUncheckedIndexedAccess happy without an `as const` cast.
+    /* c8 ignore next 3 — defensive: regex captures three groups,
+       so all three are always defined post-match. */
+    if (yStr === undefined || mStr === undefined || dStr === undefined) {
+        return null;
+    }
+    const y = Number(yStr);
+    const m = Number(mStr);
+    const d = Number(dStr);
+    if (!isCalendarDate(y, m, d))
+        return null;
+    return `${yStr}-${mStr}-${dStr}`;
+};
+/**
+ * Validates `YYYY-MM-DDTHH:MM` or `YYYY-MM-DDTHH:MM:SS` and
+ * returns the date+time payload (with `time` always
+ * `HH:MM:SS`, seconds defaulting to `:00` when omitted).
+ * Returns `null` when the shape or values are invalid.
+ *
+ * Does NOT accept a `Z` or offset suffix — the contract per
+ * cli-design §5.3 line 725 is the literal local time the
+ * column should display, not a UTC instant. An agent that
+ * needs UTC submits `2026-04-29T14:30:00` after converting.
+ */
+const parseIsoDateTime = (raw) => {
+    const match = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2})(?::(\d{2}))?$/u.exec(raw);
+    if (match === null)
+        return null;
+    const [, yStr, mStr, dStr, hStr, minStr, secStr] = match;
+    /* c8 ignore next 5 — defensive: required regex groups are
+       always defined post-match. The optional seconds group
+       (`secStr`) genuinely can be undefined and is handled below. */
+    if (yStr === undefined || mStr === undefined || dStr === undefined ||
+        hStr === undefined || minStr === undefined) {
+        return null;
+    }
+    const y = Number(yStr);
+    const m = Number(mStr);
+    const d = Number(dStr);
+    const h = Number(hStr);
+    const min = Number(minStr);
+    const s = secStr === undefined ? 0 : Number(secStr);
+    if (!isCalendarDate(y, m, d))
+        return null;
+    if (h < 0 || h > 23 || min < 0 || min > 59 || s < 0 || s > 59)
+        return null;
+    const sec = secStr ?? '00';
+    return {
+        date: `${yStr}-${mStr}-${dStr}`,
+        time: `${hStr}:${minStr}:${sec}`,
+    };
+};
+/**
+ * Validates that a year/month/day triple represents a real
+ * calendar date. Catches `2026-02-30`, `2026-13-01`,
+ * `2026-04-31`. Round-trips through `setUTCFullYear` — `Date.UTC`
+ * alone maps two-digit years 0-99 onto 1900-1999, so a literal
+ * `0001-01-01` would land at `1901-01-01` and round-trip past
+ * the equality check incorrectly. `setUTCFullYear` accepts the
+ * literal year so pre-1900 inputs validate honestly. The
+ * translator's contract is "produce the documented wire shape,
+ * let Monday reject" — Monday rejects ancient dates as
+ * `validation_failed` and the CLI shouldn't pre-empt that
+ * decision with a silent local conversion. Codex review pass-1
+ * finding F2.
+ */
+const isCalendarDate = (y, m, d) => {
+    if (m < 1 || m > 12 || d < 1 || d > 31)
+        return false;
+    const dt = new Date(0);
+    dt.setUTCFullYear(y, m - 1, d);
+    return (dt.getUTCFullYear() === y &&
+        dt.getUTCMonth() === m - 1 &&
+        dt.getUTCDate() === d);
+};
+/**
+ * Resolves a relative token (`today`, `tomorrow`, `+3d`,
+ * `-1w`, `+2h`) against the resolution context. Returns
+ * `null` when the input doesn't match any relative token shape
+ * (the caller falls through to the unrecognised-input error).
+ *
+ * @param normalised - The lowercased input (`+3d`, `today`).
+ * @param verbatim - The original input — preserved in
+ *   `resolvedFrom.input` so the dry-run output shows what the
+ *   agent typed, not the lowercased form.
+ * @param columnId - Column ID, threaded through to
+ *   `outOfRangeRelativeOffsetError` so out-of-bound errors
+ *   carry `column_id` in details (Codex review pass-2 finding).
+ */
+const parseRelative = (normalised, verbatim, columnId, ctx) => {
+    const now = (ctx.now ?? defaultNow)();
+    const timezone = ctx.timezone ?? defaultTimezone();
+    // Word forms first — the exact-match path is faster and
+    // the regex below would also match `to3d` (it doesn't, but
+    // the assertion is loud).
+    if (normalised === 'today') {
+        return resolveDateOnly(now, 0, timezone, verbatim);
+    }
+    if (normalised === 'tomorrow') {
+        return resolveDateOnly(now, 1, timezone, verbatim);
+    }
+    // +Nd / -Nd / +Nw / -Nw — date-only output (calendar
+    // arithmetic in tz, no time component).
+    const dayWeek = /^([+-])(\d+)([dw])$/u.exec(normalised);
+    if (dayWeek !== null) {
+        const [, signStr, amountStr, unit] = dayWeek;
+        /* c8 ignore next 3 — required regex groups always defined. */
+        if (signStr === undefined || amountStr === undefined || unit === undefined) {
+            return null;
+        }
+        const amount = Number(amountStr);
+        if (!Number.isSafeInteger(amount))
+            return null;
+        const days = amount * (unit === 'w' ? 7 : 1);
+        if (days > MAX_RELATIVE_DAYS) {
+            throw outOfRangeRelativeOffsetError(columnId, verbatim, 'days', days, MAX_RELATIVE_DAYS);
+        }
+        const signed = signStr === '-' ? -days : days;
+        return resolveDateOnly(now, signed, timezone, verbatim);
+    }
+    // +Nh / -Nh — date+time output (instant arithmetic, UTC
+    // offset preserved). cli-design line 763 lists `+2h`
+    // explicitly; minutes/seconds aren't in the v0.1 grammar.
+    const hour = /^([+-])(\d+)h$/u.exec(normalised);
+    if (hour !== null) {
+        const [, signStr, amountStr] = hour;
+        /* c8 ignore next 3 — required regex groups always defined. */
+        if (signStr === undefined || amountStr === undefined)
+            return null;
+        const amount = Number(amountStr);
+        if (!Number.isSafeInteger(amount))
+            return null;
+        if (amount > MAX_RELATIVE_HOURS) {
+            throw outOfRangeRelativeOffsetError(columnId, verbatim, 'hours', amount, MAX_RELATIVE_HOURS);
+        }
+        const signedHours = signStr === '-' ? -amount : amount;
+        return resolveDateTime(now, signedHours, timezone, verbatim);
+    }
+    return null;
+};
+/**
+ * Maximum magnitude for a `+Nd` / `-Nd` / `+Nw` / `-Nw`
+ * relative offset, expressed in days. ~100 years covers every
+ * reasonable agent use case (project deadlines, retention
+ * windows, compliance dates) and stays well inside JavaScript's
+ * Date range (±100M days from epoch). Beyond this bound the
+ * date math would silently wrap into nonsense (`+99999999d`
+ * produced `{date:"0NaN-NaN-NaN"}` pre-fix). Codex review
+ * pass-1 finding F1.
+ */
+const MAX_RELATIVE_DAYS = 36_500;
+/**
+ * Maximum magnitude for a `+Nh` / `-Nh` relative offset, in
+ * hours. ~100 years matches MAX_RELATIVE_DAYS so the two
+ * grammars have a consistent bound; beyond this the
+ * `now.getTime() + offset` math could land outside Date range
+ * and throw RangeError instead of the typed UsageError the
+ * translator's contract promises.
+ */
+const MAX_RELATIVE_HOURS = 876_000;
+/**
+ * Builds the `usage_error` for a relative offset that fits in
+ * the safe-integer range but exceeds the translator's max
+ * magnitude bound. Carries the column_id + the literal input +
+ * the unit + the actual / max magnitudes so an agent's debug
+ * log shows what to clamp to without consulting Monday's
+ * docs. The `column_id` field matches the shape of every
+ * other date `usage_error` so an agent that handles one
+ * details payload handles them all (Codex review pass-2
+ * finding).
+ */
+const outOfRangeRelativeOffsetError = (columnId, input, unit, amount, maxAmount) => new UsageError(`Date column "${columnId}" relative offset "${input}" resolves to ` +
+    `${amount.toString()} ${unit}, which exceeds the translator's ` +
+    `maximum magnitude of ${maxAmount.toString()} ${unit} (~100 ` +
+    `years). Use an explicit ISO date instead, or --set-raw ` +
+    `<col>=<json> with the literal Monday wire shape.`, {
+    details: {
+        column_id: columnId,
+        column_type: 'date',
+        raw_input: input,
+        unit,
+        amount,
+        max_amount: maxAmount,
+        hint: `example: --set ${columnId}=2126-04-29 (explicit ISO)`,
+    },
+});
+/**
+ * Resolves a date-only relative offset (today, tomorrow, +Nd,
+ * +Nw). Calendar arithmetic in the user's tz: extract today's
+ * y/m/d in tz, add `dayOffset` days via UTC component math,
+ * format as `YYYY-MM-DD`.
+ *
+ * Why this is correct across DST: we're producing a *calendar
+ * date*, not a UTC instant. The user's tz determines what
+ * "today" means; once we have y/m/d as integers, adding 1 day
+ * is a pure calendar operation that doesn't care about DST
+ * (Date.UTC component math handles month rollovers, leap
+ * years, and the absent ambiguity correctly).
+ */
+const resolveDateOnly = (now, dayOffset, timezone, input) => {
+    const today = formatYmdInTimezone(now, timezone);
+    const offsetMs = Date.UTC(today.year, today.month - 1, today.day + dayOffset);
+    const target = new Date(offsetMs);
+    const y = target.getUTCFullYear();
+    const m = String(target.getUTCMonth() + 1).padStart(2, '0');
+    const d = String(target.getUTCDate()).padStart(2, '0');
+    return {
+        payload: { date: `${String(y).padStart(4, '0')}-${m}-${d}` },
+        resolvedFrom: {
+            input,
+            timezone,
+            now: formatNowInTimezone(now, timezone),
+        },
+    };
+};
+/**
+ * Resolves an hour-granularity relative offset (+Nh, -Nh).
+ * Instant arithmetic — N hours in absolute time — then
+ * format the result in the user's tz to extract date + time.
+ * Across a DST boundary this means `+24h` from a GMT instant
+ * may shift the wall-clock hour by 1 (industry standard;
+ * matches luxon / date-fns-tz / Temporal `Instant.add`
+ * semantics).
+ */
+const resolveDateTime = (now, hourOffset, timezone, input) => {
+    const targetMs = now.getTime() + hourOffset * 3_600_000;
+    const target = new Date(targetMs);
+    const parts = formatYmdHmsInTimezone(target, timezone);
+    const date = `${String(parts.year).padStart(4, '0')}-${pad2(parts.month)}-${pad2(parts.day)}`;
+    const time = `${pad2(parts.hour)}:${pad2(parts.minute)}:${pad2(parts.second)}`;
+    return {
+        payload: { date, time },
+        resolvedFrom: {
+            input,
+            timezone,
+            now: formatNowInTimezone(now, timezone),
+        },
+    };
+};
+const pad2 = (n) => String(n).padStart(2, '0');
+/**
+ * Extracts year/month/day for an instant in an IANA timezone
+ * via Intl.DateTimeFormat. Returns numbers (not strings) so
+ * caller can do component arithmetic without parseInt clutter.
+ *
+ * Intl reports `hour: '24'` for midnight in some locales; we
+ * use 'en-US' explicitly + `hourCycle: 'h23'` (downstream)
+ * to get 0-23, which avoids the bug. For the date-only
+ * extraction here, hour isn't read — but the formatter is
+ * shared with formatYmdHmsInTimezone, which does.
+ */
+const formatYmdInTimezone = (instant, timezone) => {
+    const parts = formatYmdHmsInTimezone(instant, timezone);
+    return { year: parts.year, month: parts.month, day: parts.day };
+};
+const formatYmdHmsInTimezone = (instant, timezone) => {
+    const fmt = new Intl.DateTimeFormat('en-US', {
+        timeZone: timezone,
+        hourCycle: 'h23',
+        year: 'numeric',
+        month: '2-digit',
+        day: '2-digit',
+        hour: '2-digit',
+        minute: '2-digit',
+        second: '2-digit',
+    });
+    const parts = fmt.formatToParts(instant);
+    const get = (type) => {
+        const part = parts.find((p) => p.type === type);
+        /* c8 ignore next 7 — defensive: every type the formatter
+           was configured to emit is always present in the output;
+           this guard exists for noUncheckedIndexedAccess narrowing. */
+        if (part === undefined) {
+            throw new Error(`Intl.DateTimeFormat did not emit expected part "${type}" for tz "${timezone}"`);
+        }
+        return Number(part.value);
+    };
+    return {
+        year: get('year'),
+        month: get('month'),
+        day: get('day'),
+        hour: get('hour'),
+        minute: get('minute'),
+        second: get('second'),
+    };
+};
+/**
+ * Formats an instant as a local-time ISO string with UTC
+ * offset, e.g. `2026-04-25T14:00:00+01:00`. cli-design §5.3
+ * line 786 sample pins this exact shape.
+ *
+ * Uses Intl's `longOffset` token (Node 22+ ICU full data) for
+ * the offset suffix; falls back to `+00:00` if the runtime's
+ * Intl reports an unparseable form. Exported for the dry-run
+ * engine which uses the same formatter for non-date columns'
+ * `now` echo.
+ */
+export const formatNowInTimezone = (instant, timezone) => {
+    const parts = formatYmdHmsInTimezone(instant, timezone);
+    const ymd = `${String(parts.year).padStart(4, '0')}-${pad2(parts.month)}-${pad2(parts.day)}`;
+    const hms = `${pad2(parts.hour)}:${pad2(parts.minute)}:${pad2(parts.second)}`;
+    const offset = utcOffsetForTimezone(instant, timezone);
+    return `${ymd}T${hms}${offset}`;
+};
+/**
+ * Returns the UTC offset of an instant in an IANA timezone as
+ * `±HH:MM`. Uses Intl's `longOffset` form (e.g. `GMT+01:00`)
+ * and trims the `GMT` prefix; the literal `GMT` (offset 0)
+ * comes back as plain `GMT` and is mapped to `+00:00` for
+ * stable formatting.
+ */
+const utcOffsetForTimezone = (instant, timezone) => {
+    const fmt = new Intl.DateTimeFormat('en-US', {
+        timeZone: timezone,
+        timeZoneName: 'longOffset',
+    });
+    const parts = fmt.formatToParts(instant);
+    const tzName = parts.find((p) => p.type === 'timeZoneName')?.value;
+    /* c8 ignore next 4 — defensive: every modern Node runtime
+       emits a timeZoneName part when the option is set; the
+       fallback exists so a future ICU regression doesn't
+       produce a malformed envelope. */
+    if (tzName === undefined)
+        return '+00:00';
+    if (tzName === 'GMT')
+        return '+00:00';
+    // longOffset form is `GMT+HH:MM` or `GMT-HH:MM`.
+    const match = /^GMT([+-])(\d{2}):(\d{2})$/u.exec(tzName);
+    /* c8 ignore next 2 — defensive: longOffset emits this exact
+       shape on Node 22+ ICU; fallback handles ICU edge cases. */
+    if (match === null)
+        return '+00:00';
+    // Captures are guaranteed defined post-match for this regex
+    // (no optional groups). The non-null assertions satisfy
+    // noUncheckedIndexedAccess without adding `?? '...'` defaults
+    // that would inflate branch count for unreachable cases.
+    const sign = match[1];
+    const hh = match[2];
+    const mm = match[3];
+    /* c8 ignore next 4 — defensive: regex captures all three
+       groups by construction. The guard exists for type-narrowing
+       under noUncheckedIndexedAccess; it cannot fire at runtime. */
+    if (sign === undefined || hh === undefined || mm === undefined) {
+        return '+00:00';
+    }
+    return `${sign}${hh}:${mm}`;
+};
+const defaultNow = () => new Date();
+/**
+ * System default IANA timezone via Intl.DateTimeFormat. Falls
+ * back to `UTC` if the runtime's Intl returns an empty string
+ * (extremely rare on modern Node, but the contract is
+ * "default to system tz" — UTC is the sane fallback when
+ * "system tz" is genuinely unknown).
+ */
+const defaultTimezone = () => {
+    const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    /* c8 ignore next 2 — defensive fallback when Intl returns an
+       empty string. Full-ICU Node 22 always populates the
+       timeZone field; the fallback keeps the contract "default
+       to a real tz, never throw on resolution". */
+    if (tz.length === 0)
+        return 'UTC';
+    return tz;
+};
+/**
+ * Builds the `usage_error` for inputs that don't match any of
+ * the cli-design §5.3 step 3 forms. The hint enumerates the
+ * full grammar so an agent's debug log shows every supported
+ * form without consulting docs.
+ */
+const unrecognisedDateInputError = (columnId, raw) => new UsageError(`Date column "${columnId}" got input "${raw}" that does not match ` +
+    `any supported form. Supported: ` +
+    `ISO date "YYYY-MM-DD", ISO date+time "YYYY-MM-DDTHH:MM[:SS]", ` +
+    `or a relative token (today, tomorrow, +Nd, -Nw, +Nh).`, {
+    details: {
+        column_id: columnId,
+        column_type: 'date',
+        raw_input: raw,
+        hint: 'examples: --set due=2026-05-01, --set due=2026-05-01T14:30, ' +
+            '--set due=tomorrow, --set due=+3d, --set due=+2h',
+    },
+});
+//# sourceMappingURL=dates.js.map

package/dist/api/dates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dates.js","sourceRoot":"","sources":["../../src/api/dates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAyEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,GAAW,EACX,QAAgB,EAChB,MAA6B,EAAE,EACd,EAAE;IACnB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,0BAA0B,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,2DAA2D;IAC3D,yDAAyD;IACzD,6BAA6B;IAC7B,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IACD,0DAA0D;IAC1D,4DAA4D;IAC5D,uDAAuD;IACvD,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,0BAA0B,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,YAAY,GAAG,CAAC,GAAW,EAAiB,EAAE;IAClD,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IACnC,yDAAyD;IACzD,4DAA4D;IAC5D,6DAA6D;IAC7D;qDACiD;IACjD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,GAAG,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;AACnC,CAAC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAsB,EAAE;IAC3D,MAAM,KAAK,GAAG,yDAAyD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IACzD;;qEAEiE;IACjE,IACE,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAC9D,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAC1C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3E,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC;IAC3B,OAAO;QACL,IAAI,EAAE,GAAG,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE;QAC/B,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,IAAI,GAAG,EAAE;KACjC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,cAAc,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,CAAS,EAAW,EAAE;IAClE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,OAAO,CACL,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC;QACzB,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC;QAC1B,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CACtB,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,aAAa,GAAG,CACpB,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,GAA0B,EACF,EAAE;IAC1B,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAC;IAEnD,wDAAwD;IACxD,2DAA2D;IAC3D,0BAA0B;IAC1B,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,eAAe,CAAC,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,eAAe,CAAC,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IACD,qDAAqD;IACrD,wCAAwC;IACxC,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC;QAC7C,8DAA8D;QAC9D,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,IAAI,GAAG,iBAAiB,EAAE,CAAC;YAC7B,MAAM,6BAA6B,CACjC,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,IAAI,EACJ,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,OAAO,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;IACD,wDAAwD;IACxD,qDAAqD;IACrD,0DAA0D;IAC1D,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC;QACpC,8DAA8D;QAC9D,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,MAAM,GAAG,kBAAkB,EAAE,CAAC;YAChC,MAAM,6BAA6B,CACjC,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,MAAM,EACN,kBAAkB,CACnB,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,OAAO,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC;;;;;;;GAOG;AACH,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC;;;;;;;;;;GAUG;AACH,MAAM,6BAA6B,GAAG,CACpC,QAAgB,EAChB,KAAa,EACb,IAAsB,EACtB,MAAc,EACd,SAAiB,EACL,EAAE,CACd,IAAI,UAAU,CACZ,gBAAgB,QAAQ,sBAAsB,KAAK,gBAAgB;IACjE,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,mCAAmC;IAC/D,wBAAwB,SAAS,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS;IAC7D,yDAAyD;IACzD,kDAAkD,EACpD;IACE,OAAO,EAAE;QACP,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,MAAM;QACnB,SAAS,EAAE,KAAK;QAChB,IAAI;QACJ,MAAM;QACN,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,kBAAkB,QAAQ,4BAA4B;KAC7D;CACF,CACF,CAAC;AAEJ;;;;;;;;;;;;GAYG;AACH,MAAM,eAAe,GAAG,CACtB,GAAS,EACT,SAAiB,EACjB,QAAgB,EAChB,KAAa,EACI,EAAE;IACnB,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO;QACL,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;QAC5D,YAAY,EAAE;YACZ,KAAK;YACL,QAAQ;YACR,GAAG,EAAE,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC;SACxC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,eAAe,GAAG,CACtB,GAAS,EACT,UAAkB,EAClB,QAAgB,EAChB,KAAa,EACI,EAAE;IACnB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,UAAU,GAAG,SAAS,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9F,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/E,OAAO;QACL,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QACvB,YAAY,EAAE;YACZ,KAAK;YACL,QAAQ;YACR,GAAG,EAAE,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC;SACxC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAE/D;;;;;;;;;;GAUG;AACH,MAAM,mBAAmB,GAAG,CAC1B,OAAa,EACb,QAAgB,EAC8B,EAAE;IAChD,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,OAAa,EACb,QAAgB,EAQhB,EAAE;IACF,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;QAC3C,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,CAAC,IAAkC,EAAU,EAAE;QACzD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAChD;;uEAE+D;QAC/D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,mDAAmD,IAAI,aAAa,QAAQ,GAAG,CAChF,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC;QACf,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;QACjB,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC;KACtB,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAa,EAAE,QAAgB,EAAU,EAAE;IAC7E,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,GAAG,GACP,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IACnF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9E,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvD,OAAO,GAAG,GAAG,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;AAClC,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG,CAAC,OAAa,EAAE,QAAgB,EAAU,EAAE;IACvE,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;QAC3C,QAAQ,EAAE,QAAQ;QAClB,YAAY,EAAE,YAAY;KAC3B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,EAAE,KAAK,CAAC;IACnE;;;uCAGmC;IACnC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC1C,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IACtC,iDAAiD;IACjD,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzD;iEAC6D;IAC7D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACpC,4DAA4D;IAC5D,wDAAwD;IACxD,8DAA8D;IAC9D,yDAAyD;IACzD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB;;oEAEgE;IAChE,IAAI,IAAI,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,IAAI,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,GAAW,EAAE;IACnC,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC5D;;;mDAG+C;IAC/C,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,CACjC,QAAgB,EAChB,GAAW,EACC,EAAE,CACd,IAAI,UAAU,CACZ,gBAAgB,QAAQ,gBAAgB,GAAG,wBAAwB;IACjE,iCAAiC;IACjC,gEAAgE;IAChE,uDAAuD,EACzD;IACE,OAAO,EAAE;QACP,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,MAAM;QACnB,SAAS,EAAE,GAAG;QACd,IAAI,EACF,8DAA8D;YAC9D,kDAAkD;KACrD;CACF,CACF,CAAC"}

package/dist/api/destructive-gate.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Destructive-verb confirmation gate (`v0.2-plan.md` §20 R29).
+ *
+ * Five sites pre-lift duplicated the same `parseGlobalFlags + if
+ * (!dryRun && !yes) throw ConfirmationRequiredError` block:
+ *
+ *   - `src/commands/item/archive.ts` (M10)
+ *   - `src/commands/item/delete.ts` (M10)
+ *   - `src/commands/update/delete.ts` (M13)
+ *   - `src/commands/update/clear-all.ts` (M13)
+ *   - `src/commands/workspace/delete.ts` (M14)
+ *
+ * Each block was ~17 lines, diverging only in the verb name, the
+ * target id (`item_id` / `update_id` / `workspace_id`), the action
+ * phrase ("archive the item" / "delete every update on the item"),
+ * and the verb-specific hint text. M14's workspace delete arrived
+ * as the 5th consumer; the lift fired per the §20 trigger
+ * (≥3 sites diverging only in parameters).
+ *
+ * **Load-bearing invariant** (Codex M10 round-1 P2): the gate must
+ * fire BEFORE `resolveClient` so that a missing
+ * `MONDAY_API_TOKEN` doesn't mask `confirmation_required` as
+ * `config_error`. Agents key off `error.code` and the destructive-
+ * gate signal must be unconditional. The helper preserves this
+ * by taking `globalFlags` as already-parsed — callers MUST run
+ * `parseGlobalFlags(program.opts(), ctx.env)` (a synchronous
+ * argv-only operation) before invoking the gate, NOT `resolveClient`
+ * (which can throw `config_error` on a missing token). Passing
+ * already-parsed flags rather than re-parsing them inside the
+ * helper makes the ordering trap visible at the call site.
+ *
+ * Pure refactor — every existing test passes byte-identical pre-
+ * lift vs post-lift. Message templates are reproduced verbatim
+ * from the inline blocks. cli-design §6.5 documents the per-code
+ * `details` schema; this helper produces the canonical shape:
+ * `{<detailKey>: target, hint}`.
+ */
+import type { GlobalFlags } from '../types/global-flags.js';
+export interface EnforceDestructiveGateInputs {
+    /**
+     * Already-parsed global flags. Forces the call site to invoke
+     * `parseGlobalFlags` BEFORE `resolveClient` so the gate-before-
+     * resolveClient ordering invariant (M10 round-1 P2) is visible
+     * in the type signature itself, not buried in helper-internal
+     * code.
+     */
+    readonly globalFlags: GlobalFlags;
+    /**
+     * CLI verb name as it appears in the user's invocation, e.g.
+     * `'item archive'` / `'workspace delete'` / `'update clear-all'`.
+     * Used verbatim in the leading `monday <verb> <target>` portion
+     * of the error message.
+     */
+    readonly verb: string;
+    /**
+     * The target resource id (or other identifier). Appears
+     * verbatim in the message after `monday <verb>` AND lands in
+     * `details.<detailKey>` so agents can extract it
+     * programmatically.
+     */
+    readonly target: string;
+    /**
+     * Snake_case detail key matching the resource (`item_id`,
+     * `update_id`, `workspace_id`). cli-design §6.5 pins the
+     * per-code shape; agents read `error.details.<detailKey>` to
+     * extract the target id without re-parsing argv.
+     */
+    readonly detailKey: string;
+    /**
+     * Optional extra `details.*` fields merged into the
+     * `confirmation_required` envelope alongside `[detailKey]: target`
+     * + `hint`. Used by verbs whose wire signature is two-tuple — M16
+     * `board column-delete` echoes `{board_id, column_id, hint}` per
+     * cli-design §6.5 single-target shape (the wire signature carries
+     * both ids); M17 `board group-archive` / `group-delete` will use
+     * the same shape. `[detailKey]: target` always wins on key
+     * collision (extraDetails is merged FIRST).
+     */
+    readonly extraDetails?: Readonly<Record<string, unknown>>;
+    /**
+     * The action phrase that follows `would` in the message body.
+     * Verb-specific:
+     * - `'archive the item'` (item archive)
+     * - `'delete the item'` (item delete)
+     * - `'delete the update'` (update delete)
+     * - `'delete every update on the item'` (update clear-all)
+     * - `'delete the workspace'` (workspace delete)
+     */
+    readonly action: string;
+    /**
+     * Verb-specific hint included in `details.hint`. Explains the
+     * reversibility window (Monday's 30-day trash for items /
+     * updates / workspaces) and any verb-specific recovery story
+     * (recreate via `monday workspace create`, etc.).
+     */
+    readonly hint: string;
+    /**
+     * Optional override for the "or --dry-run to preview." trailing
+     * suffix. Only `update clear-all` uses this — its preview
+     * behaviour ("the would-delete IDs") differs enough from the
+     * single-target verbs to warrant explicit phrasing. Default:
+     * `'or --dry-run to preview.'`.
+     */
+    readonly previewSuffix?: string;
+}
+export declare const enforceDestructiveGate: (inputs: EnforceDestructiveGateInputs) => void;
+//# sourceMappingURL=destructive-gate.d.ts.map

package/dist/api/destructive-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destructive-gate.d.ts","sourceRoot":"","sources":["../../src/api/destructive-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG5D,MAAM,WAAW,4BAA4B;IAC3C;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;OASG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAID,eAAO,MAAM,sBAAsB,GACjC,QAAQ,4BAA4B,KACnC,IAiBF,CAAC"}

package/dist/api/destructive-gate.js

@@ -0,0 +1,19 @@
+import { ConfirmationRequiredError } from '../utils/errors.js';
+const DEFAULT_PREVIEW_SUFFIX = 'or --dry-run to preview.';
+export const enforceDestructiveGate = (inputs) => {
+    if (inputs.globalFlags.dryRun || inputs.globalFlags.yes)
+        return;
+    const previewSuffix = inputs.previewSuffix ?? DEFAULT_PREVIEW_SUFFIX;
+    // `extraDetails` lands FIRST so the canonical `[detailKey]: target`
+    // + `hint` always win on key collision. Two-tuple verbs (M16
+    // column-delete, M17 group-archive / group-delete) populate
+    // extraDetails with the secondary id (board_id paired with
+    // column_id / group_id) per cli-design §6.5 single-target shape.
+    const details = {
+        ...(inputs.extraDetails ?? {}),
+        [inputs.detailKey]: inputs.target,
+        hint: inputs.hint,
+    };
+    throw new ConfirmationRequiredError(`monday ${inputs.verb} ${inputs.target} would ${inputs.action}. Re-run with --yes to confirm, ${previewSuffix}`, { details });
+};
+//# sourceMappingURL=destructive-gate.js.map

package/dist/api/destructive-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destructive-gate.js","sourceRoot":"","sources":["../../src/api/destructive-gate.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAsE/D,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AAE1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,MAAoC,EAC9B,EAAE;IACR,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG;QAAE,OAAO;IAChE,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACrE,oEAAoE;IACpE,6DAA6D;IAC7D,4DAA4D;IAC5D,2DAA2D;IAC3D,iEAAiE;IACjE,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;QAC9B,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM;QACjC,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;IACF,MAAM,IAAI,yBAAyB,CACjC,UAAU,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,UAAU,MAAM,CAAC,MAAM,mCAAmC,aAAa,EAAE,EAC/G,EAAE,OAAO,EAAE,CACZ,CAAC;AACJ,CAAC,CAAC"}