@01.software/cli 0.20.3 → 0.21.1

package/dist/index.js

@@ -216,6 +216,14 @@ var EXTERNAL_CUSTOMER_LINK_ENDPOINT_OPERATIONS = {
     "/external-links/clear-previous-state"
   )
 };
+var BENEFIT_VOUCHER_ENDPOINT_OPERATIONS = {
+  issue: operation("customers", "post", "/benefit-vouchers/issue"),
+  get: operation("customers", "post", "/benefit-vouchers/get"),
+  list: operation("customers", "post", "/benefit-vouchers/list"),
+  redeem: operation("customers", "post", "/benefit-vouchers/redeem"),
+  void: operation("customers", "post", "/benefit-vouchers/void"),
+  listMine: operation("customers", "get", "/me/benefit-vouchers")
+};
 var CUSTOMER_GROUP_ENDPOINT_OPERATIONS = {
   members: operation("customer-groups", "get", "/:id/members"),
   grant: operation("customer-groups", "post", "/:id/members/grant"),
@@ -370,10 +378,11 @@ var EmbeddedAdminManagementClient = class {
   validateConfiguration(input) {
     this.validateManagementAccess();
     const console2 = inferConsoleOrigin(this.apiUrl);
-    return normalizeEmbeddedAdminBindingConfiguration(
+    const { allowedRoles, ...binding } = normalizeEmbeddedAdminBindingConfiguration(
       { ...input, enabled: true, path: input.path ?? "/" },
       console2
     );
+    return input.allowedRoles === void 0 ? binding : { ...binding, allowedRoles };
   }
   show() {
     this.validateManagementAccess();
@@ -382,6 +391,7 @@ var EmbeddedAdminManagementClient = class {
   configure(input) {
     const binding = this.validateConfiguration(input);
     return this.request(EMBEDDED_ADMIN_ENDPOINT_OPERATIONS.configure, {
+      ...binding.allowedRoles === void 0 ? {} : { allowedRoles: binding.allowedRoles },
       label: binding.label,
       origin: binding.origin,
       path: binding.path
@@ -5822,11 +5832,15 @@ function registerEmbeddedAppCommands(program, getClient, getFormat) {
       exitWithError(error);
     }
   });
-  embeddedApp.command("configure").description("Configure and enable the active tenant embedded app").requiredOption("--label <label>", "Display label shown in Console").requiredOption("--origin <origin>", "Exact HTTPS app origin").option("--path <path>", "Relative app path", "/").option("--dry-run", "Validate inputs without executing").action(
+  embeddedApp.command("configure").description("Configure and enable the active tenant embedded app").requiredOption("--label <label>", "Display label shown in Console").requiredOption("--origin <origin>", "Exact HTTPS app origin").option("--path <path>", "Relative app path", "/").option(
+    "--allowed-roles <roles...>",
+    "Exact execution roles (omitted: preserve policy; new binding: tenant-admin)"
+  ).option("--dry-run", "Validate inputs without executing").action(
     async (options) => {
       try {
         const client = getClient();
         const input = {
+          allowedRoles: options.allowedRoles,
           label: options.label,
           origin: options.origin,
           path: options.path