feat: add auth password-login, pull, and push commands

[moranshe-max]

Note

Description

This PR introduces a new auth command group for managing app authentication settings from the CLI. It adds auth password-login (with --enable/--disable flags), auth pull (fetch remote auth config to local file), and auth push (sync local auth config to Base44). The deploy command is also updated to push auth config automatically as part of deployment.

Related Issue

None

Type of Change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update
• Refactoring (no functional changes)
• Other (please describe):

Changes Made

• Added packages/cli/src/cli/commands/auth/ with index.ts, password-login.ts, pull.ts, and push.ts commands
• Added packages/cli/src/core/resources/auth-config/ resource module with API client, config file management, schema (Zod), and resource interface
• Registered auth command in program.ts
• Updated project config (config.ts, schema.ts, types.ts) to include authDir and load auth config during readProjectConfig()
• Updated deploy command to push auth config to Base44 as part of the deployment flow
• Added auth password-login --enable/--disable non-interactive flag-based API (no interactive prompts)
• Added warning when disabling password login leaves no login methods enabled (lockout prevention)
• Added CLI integration test (auth_password_setup.spec.ts) and core unit tests (auth-password.spec.ts)

Testing

• I have tested these changes locally
• I have added/updated tests as needed
• All tests pass (npm test)

Checklist

• My code follows the project's style guidelines
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation (if applicable)
• My changes generate no new warnings
• I have updated docs/ (AGENTS.md) if I made architectural changes

Additional Notes

The auth-config resource follows the established Resource<T> pattern with separate pull.ts and push.ts modules, consistent with the existing resource architecture. Auth config is stored locally in the project's authDir and synced to/from the Base44 API.

---

_{🤖 Generated by Claude | 2026-03-22 00:00 UTC}

[github-actions]

🚀 Package Preview Available!

---

Install this PR's preview build with npm:

npm i @base44-preview/cli@0.0.47-pr.422.e7d50a7

Prefer not to change any import paths? Install using npm alias so your code still imports base44:

npm i "base44@npm:@base44-preview/cli@0.0.47-pr.422.e7d50a7"

Or add it to your package.json dependencies:

{
  "dependencies": {
    "base44": "npm:@base44-preview/cli@0.0.47-pr.422.e7d50a7"
  }
}

• 📦 Preview Package: @base44-preview/cli@0.0.47-pr.422.e7d50a7
• 🔗 View this commit on GitHub

---

_{Preview published to npm registry — try new features instantly!}

[Paveltarno]

claude is pretty dumb sometimes