ops-deploy-01
210e516cd8
ci/woodpecker/pr/ci Pipeline was canceled
ensureSession credential resolution when sign-in is needed, in order: 1. explicit --email flag (highest) 2. non-TTY stdin: line 1 email, line 2 password (printf 'email\npassword\n' | …) — for headless callers without argv access 3. interactive prompt (TTY only) Precedence documented on ensureSession and in --help; headless with NO credentials exits 2 with guidance instead of hanging on prompts. Password never read from argv (ps-visible); stdin line kept untrimmed. New piped-credentials.ts module so the reader is testable against real streams (4 stream specs) while token-ops specs mock the seam (5 specs).