[BenAbdou1001]

What and why

Closes the gaps left on #228 to #236 after #237, as listed in the comment on each issue. The issues stay open: Refs, not Closes, because the release (tag, GitHub release, npm publish) and the items that need an API or wording change are not part of this PR.

• mcid-cli: shared foundation for command grammar, output, errors and auth #228: --limit/--page/--all (30 rows, with a stderr note when rows are left out) on project, server, role, sync logs, webhook and discord-webhook lists; -q/--json where missing; two examples on every command, checked by a test against the real command tree (it caught schema preview --step and audit list --action-type, which do not exist); a getting-started screen when run without arguments; doctor --json; hyphenated aliases and webhook submissions of hidden.
• mcid-cli: project commands (create, keys, redirect URIs, server access) #229: project create --server and --scope, and the wizard offers the main server; a test that the key never reaches the config file.
• mcid-cli: server and sync commands with live sync progress #230: sync run --wait prints member deltas and exits 6 on timeout; server update --type --sync-frequency-hours --permission-policy.
• mcid-cli: member, role and permission commands #231: member export --search --joined-after (the export endpoint now accepts joinedAfter); --role takes names.
• mcid-cli: close the inbound webhook loop (send, submissions, watch, export) #233: shared signed-body vectors in @mcid/contracts checked by both the API verifier and the CLI signer; webhook watch dedupe and NDJSON tests.
• mcid-cli: status, monitoring, audit, stats and settings commands #234: audit export takes the same filters as audit list.
• mcid-cli: dev commands to test a project's SSO and permissions end to end #235: dev sso offers to add a missing redirect URI and keeps the stored ones; tests for the key lookup order.
• mcid-cli 1.0: cover the MCID MVP from the terminal #236 and the docs: one page per command group, the install-to-first-project quickstart, the webhook walkthrough, landing card, README Node version, CHANGELOG, and coverage floors raised to 44/35/41/44.

Not done on purpose: project key show --reveal (the API returns only the prefix), role inheritance set <from> <to> (the DTO has no target role), settings reset <key> (the endpoint takes no body), monitor usage --period 24h (the API accepts 7d|30d|90d). These are wording fixes for the issues.

How it was checked

• CLI: 311 tests, tsc, eslint, coverage gate (src/commands/** at 46/37/43/47); the built bundle starts (node apps/cli/bin/mcid-cli.js) and prints the getting-started screen.
• API: 1407 tests, tsc -p tsconfig.build.json, eslint. @mcid/form-schema: 176 tests. Web: 1383 tests including the docs suites, typecheck.
• pnpm docs:api and pnpm --filter mcid-cli generate:api-types were run and committed.
• Not run: the web build, and the commands against a live MCID (the tests use the fake MCID server).

Checklist

• Tests were added or updated, and written to fail first (added alongside the code, not red-first)
• pnpm lint, pnpm typecheck, pnpm test pass (pnpm build ran for the CLI bundle only)
• If an endpoint, a DTO or a Swagger decorator changed: ran pnpm docs:api and committed the result (CI checks this)
• The docs describe the changed behaviour, or no docs are affected

Refs #228
Refs #229
Refs #230
Refs #231
Refs #232
Refs #233
Refs #234
Refs #235
Refs #236

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
mcid	Skipped		Oct 27, 2026 1:11pm UTC