@aderis-erp/cli 1.0.1 → 1.0.2

package/dist/commands/auth.js

@@ -1,871 +0,0 @@
-import { Args, Command, Flags } from '@oclif/core';
-import { ApiError, apiRequest } from '../lib/api-client.js';
-import { getContext, getCurrentContext } from '../lib/config.js';
-// Add 'import' action if both create and update exist
-const HAS_IMPORT = false;
-const HAS_EXPORT = false;
-const HAS_CAMT053 = false;
-const NESTED_IMPORTS = [];
-const SUBCOMMANDS = [
-    'login', 'logout', 'callback', 'success', 'me', 'create-agent-tenant-token',
-    ...(HAS_IMPORT ? ['import'] : []),
-    ...(HAS_EXPORT ? ['export'] : []),
-    ...NESTED_IMPORTS.map((n) => `import-${n}`),
-];
-const ENDPOINTS = {
-    callback: {
-        hasBody: false,
-        method: 'GET',
-        path: '/v1/auth/callback',
-        pathParams: [],
-        summary: 'OAuth callback handler',
-    },
-    'create-agent-tenant-token': {
-        hasBody: true,
-        method: 'POST',
-        path: '/v1/auth/agent/tenant-token',
-        pathParams: [],
-        summary: 'Mint a tenant-scoped token for agent workflows',
-    },
-    login: { hasBody: false, method: 'GET', path: '/v1/auth/login', pathParams: [], summary: 'Initiate OAuth login flow' },
-    logout: { hasBody: false, method: 'GET', path: '/v1/auth/logout', pathParams: [], summary: 'Logout and clear session' },
-    me: { hasBody: false, method: 'GET', path: '/v1/auth/me', pathParams: [], summary: 'Get current authenticated user' },
-    success: { hasBody: false, method: 'GET', path: '/v1/auth/success', pathParams: [], summary: 'Login success page' },
-};
-export default class Auth extends Command {
-    static args = {
-        action: Args.string({ description: 'Action: ' + SUBCOMMANDS.join(', '), required: true }),
-        id: Args.string({ description: 'Resource ID (for get, update, delete operations)', required: false }),
-    };
-    static description = 'Manage auth';
-    static examples = [];
-    static flags = {
-        context: Flags.string({ char: 'c', description: 'Context to use' }),
-        csv: Flags.boolean({ description: 'Output as CSV (shortcut for --output csv)' }),
-        data: Flags.string({ char: 'd', description: 'JSON data for request body' }),
-        fields: Flags.string({ description: 'Comma-separated list of fields to show (e.g. --fields=id,name,status)' }),
-        file: Flags.string({ char: 'f', description: 'Read request body from file' }),
-        include: Flags.string({ description: 'Relations to include' }),
-        limit: Flags.string({ description: 'Items per page' }),
-        output: Flags.string({
-            char: 'o',
-            description: 'Output format (default: table for import, json for other commands)',
-            options: ['json', 'table', 'csv'],
-        }),
-        page: Flags.string({ description: 'Page number' }),
-        query: Flags.string({ description: 'Additional query params as JSON' }),
-        sanitize: Flags.boolean({ description: 'Remove null values, audit fields, and duplicate UUIDs from output' }),
-        search: Flags.string({ description: 'Search term' }),
-        set: Flags.string({ char: 's', description: 'Set individual field (e.g. --set firstName=John)', multiple: true }),
-        'sort-by': Flags.string({ description: 'Sort field' }),
-        table: Flags.boolean({ char: 't', description: 'Output as table (shortcut for --output table)' }),
-    };
-    async run() {
-        const { args, flags } = await this.parse(Auth);
-        // Handle import action specially
-        if (args.action === 'import') {
-            if (!HAS_IMPORT)
-                this.error('Import not available for this resource');
-            await this.runImport(flags);
-            return;
-        }
-        // Handle export action specially
-        if (args.action === 'export') {
-            if (!HAS_EXPORT)
-                this.error('Export not available for this resource');
-            await this.runExport(flags);
-            return;
-        }
-        // Handle CAMT.053 import specially - sends raw XML
-        if (args.action === 'import-camt053') {
-            if (!HAS_CAMT053)
-                this.error('CAMT.053 import not available for this resource');
-            await this.runCamt053Import(flags);
-            return;
-        }
-        // Handle nested resource imports (e.g., import-prices)
-        if (args.action.startsWith('import-')) {
-            const suffix = args.action.replace('import-', '');
-            if (NESTED_IMPORTS.includes(suffix)) {
-                await this.runNestedImport(suffix, args.id, flags);
-                return;
-            }
-        }
-        const endpoint = ENDPOINTS[args.action];
-        if (!endpoint)
-            this.error(`Unknown action: ${args.action}. Available: ${SUBCOMMANDS.join(', ')}`);
-        const context = flags.context ? getContext(flags.context) : getCurrentContext();
-        if (!context)
-            this.error('No context configured. Run: aderis auth login --new');
-        if (!context.tokens)
-            this.error('Not logged in. Run: aderis auth login');
-        let apiPath = endpoint.path;
-        for (const param of endpoint.pathParams) {
-            let value;
-            if (param === 'id') {
-                // Use positional argument for 'id' parameter
-                value = args.id;
-                if (!value)
-                    this.error('Missing required argument: id. Usage: aderis auth <action> <id>');
-            }
-            else {
-                const flagName = param
-                    .replaceAll('.', '-')
-                    .replaceAll(/([A-Z])/g, '-$1')
-                    .toLowerCase()
-                    .replace(/^-/, '');
-                value = flags[flagName];
-                if (!value)
-                    this.error(`Missing required parameter: --${flagName}`);
-            }
-            apiPath = apiPath.replace(`{${param}}`, String(value));
-        }
-        const queryParams = {};
-        if (flags.page)
-            queryParams.page = flags.page;
-        if (flags.limit)
-            queryParams.limit = flags.limit;
-        if (flags.include)
-            queryParams.include = flags.include;
-        if (flags.search)
-            queryParams.search = flags.search;
-        if (flags['sort-by'])
-            queryParams.sortBy = flags['sort-by'];
-        if (flags.query) {
-            try {
-                Object.assign(queryParams, JSON.parse(flags.query));
-            }
-            catch {
-                this.error('Invalid JSON in --query');
-            }
-        }
-        let data;
-        if (endpoint.hasBody) {
-            if (flags.file) {
-                const fsModule = await import('node:fs');
-                try {
-                    data = JSON.parse(fsModule.readFileSync(flags.file, 'utf8'));
-                }
-                catch {
-                    this.error(`Failed to read file: ${flags.file}`);
-                }
-            }
-            else if (flags.data) {
-                try {
-                    data = JSON.parse(flags.data);
-                }
-                catch {
-                    this.error('Invalid JSON in --data');
-                }
-            }
-            // Apply --set flags (can be combined with --data or --file)
-            if (flags.set && flags.set.length > 0) {
-                data = data || {};
-                for (const pair of flags.set) {
-                    const eqIndex = pair.indexOf('=');
-                    if (eqIndex === -1)
-                        this.error(`Invalid --set format: ${pair}. Use: --set key=value`);
-                    const key = pair.slice(0, eqIndex);
-                    let value = pair.slice(eqIndex + 1);
-                    // Try to parse as JSON for numbers, booleans, arrays, objects
-                    try {
-                        value = JSON.parse(value);
-                    }
-                    catch {
-                        /* keep as string */
-                    }
-                    // Support nested keys like "address.city"
-                    const keys = key.split('.');
-                    let obj = data;
-                    for (let i = 0; i < keys.length - 1; i++) {
-                        if (!(keys[i] in obj) || typeof obj[keys[i]] !== 'object') {
-                            obj[keys[i]] = {};
-                        }
-                        obj = obj[keys[i]];
-                    }
-                    obj[keys.at(-1)] = value;
-                }
-            }
-        }
-        try {
-            const response = await apiRequest(endpoint.method, apiPath, {
-                acceptAny: true,
-                contextName: flags.context,
-                data,
-                params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
-            });
-            // Check content-type for non-JSON responses (XML, text, etc.)
-            const contentType = (response.headers['content-type'] || '').toLowerCase();
-            if (contentType.includes('xml') || contentType.includes('text/plain') || contentType.includes('text/html')) {
-                // Output raw content for XML/text responses
-                this.log(String(response.data));
-                return;
-            }
-            // Parse JSON if response came as string (due to acceptAny)
-            let output = response.data;
-            if (typeof output === 'string') {
-                try {
-                    output = JSON.parse(output);
-                }
-                catch {
-                    /* keep as string */
-                }
-            }
-            // For list operations, extract the data array if present
-            if (args.action === 'list' && output && typeof output === 'object' && 'data' in output) {
-                output = output.data;
-            }
-            // Filter fields if --fields flag is provided
-            if (flags.fields) {
-                const fieldList = flags.fields.split(',').map((f) => f.trim());
-                output = this.filterFields(output, fieldList);
-            }
-            // Sanitize output if requested
-            if (flags.sanitize) {
-                output = this.sanitizeOutput(output);
-            }
-            const fieldList = flags.fields?.split(',').map((f) => f.trim());
-            if (flags.csv || flags.output === 'csv')
-                this.printCsv(output, fieldList);
-            else if (flags.table || flags.output === 'table')
-                this.printTable(output, fieldList);
-            else
-                this.log(JSON.stringify(output, null, 2));
-        }
-        catch (error) {
-            if (error instanceof ApiError) {
-                if (error.status === 404)
-                    this.error(error.message);
-                this.error(`API Error (${error.status}): ${error.message}`);
-            }
-            throw error;
-        }
-    }
-    filterFields(data, fields) {
-        const pick = (obj, keys) => {
-            const result = {};
-            for (const key of keys) {
-                if (key.includes('.')) {
-                    // Handle nested fields like 'customer.name'
-                    const [first, ...rest] = key.split('.');
-                    if (obj[first] && typeof obj[first] === 'object') {
-                        const nested = pick(obj[first], [rest.join('.')]);
-                        result[first] = { ...result[first], ...nested };
-                    }
-                }
-                else if (key in obj) {
-                    result[key] = obj[key];
-                }
-            }
-            return result;
-        };
-        if (Array.isArray(data)) {
-            return data.map((item) => pick(item, fields));
-        }
-        return pick(data, fields);
-    }
-    getColumns(data, fields, flatten = false) {
-        const items = Array.isArray(data) ? data : [data];
-        if (items.length === 0)
-            return { cols: [], items: [] };
-        const first = items[0];
-        const hiddenFields = new Set(['_type', 'tenantId']);
-        if (fields) {
-            return { cols: fields, items: items };
-        }
-        // Recursively collect all column paths, flattening objects (but not arrays)
-        const collectPaths = (obj, prefix = '') => {
-            const paths = [];
-            for (const key of Object.keys(obj)) {
-                const fullKey = prefix ? `${prefix}.${key}` : key;
-                if (hiddenFields.has(key))
-                    continue;
-                const val = obj[key];
-                if (val !== null && typeof val === 'object' && !Array.isArray(val)) {
-                    // Flatten nested objects (but not arrays)
-                    if (flatten) {
-                        paths.push(...collectPaths(val, fullKey));
-                    }
-                    // Skip objects when not flattening
-                }
-                else if (!Array.isArray(val)) {
-                    // Include primitives (and null)
-                    paths.push(fullKey);
-                }
-                // Skip arrays entirely
-            }
-            return paths;
-        };
-        const cols = collectPaths(first);
-        return { cols: flatten ? cols : cols.slice(0, 8), items: items };
-    }
-    getValue(row, col) {
-        let val = row[col];
-        if (col.includes('.')) {
-            const parts = col.split('.');
-            val = parts.reduce((o, k) => (o && typeof o === 'object' ? o[k] : undefined), row);
-        }
-        return String(val ?? '');
-    }
-    printCsv(data, fields) {
-        const { cols, items } = this.getColumns(data, fields, true); // flatten=true for CSV
-        if (items.length === 0) {
-            this.log('No results');
-            return;
-        }
-        const escape = (val) => {
-            if (val.includes(',') || val.includes('"') || val.includes('\n')) {
-                return '"' + val.replaceAll('"', '""') + '"';
-            }
-            return val;
-        };
-        // Print header
-        this.log(cols.map(escape).join(','));
-        // Print rows
-        for (const item of items) {
-            const row = cols.map((col) => escape(this.getValue(item, col)));
-            this.log(row.join(','));
-        }
-    }
-    printTable(data, fields) {
-        const { cols, items } = this.getColumns(data, fields);
-        if (items.length === 0) {
-            this.log('No results');
-            return;
-        }
-        // Calculate column widths
-        const widths = cols.map((c) => c.length);
-        for (const item of items) {
-            for (const [i, col] of cols.entries()) {
-                const val = this.getValue(item, col).slice(0, 40);
-                widths[i] = Math.max(widths[i], val.length);
-            }
-        }
-        // Print header
-        const header = cols.map((c, i) => c.padEnd(widths[i])).join('  ');
-        this.log(header);
-        this.log(widths.map((w) => '-'.repeat(w)).join('  '));
-        // Print rows
-        for (const item of items) {
-            const row = cols
-                .map((col, i) => {
-                const val = this.getValue(item, col).slice(0, 40);
-                return val.padEnd(widths[i]);
-            })
-                .join('  ');
-            this.log(row);
-        }
-    }
-    async runCamt053Import(flags) {
-        const context = flags.context ? getContext(flags.context) : getCurrentContext();
-        if (!context)
-            this.error('No context configured. Run: aderis auth login --new');
-        if (!context.tokens)
-            this.error('Not logged in. Run: aderis auth login');
-        if (!flags.file) {
-            this.error('CAMT.053 import requires --file (-f) flag with path to XML file');
-        }
-        const fsModule = await import('node:fs');
-        let xmlContent;
-        try {
-            xmlContent = fsModule.readFileSync(flags.file, 'utf8');
-        }
-        catch {
-            this.error(`Failed to read file: ${flags.file}`);
-        }
-        const endpoint = ENDPOINTS['import-camt053'];
-        try {
-            const response = await apiRequest(endpoint.method, endpoint.path, {
-                contentType: 'application/xml',
-                contextName: flags.context,
-                data: xmlContent,
-            });
-            // Extract transactions array and counts from response
-            let transactions = [];
-            let imported = 0;
-            let skipped = 0;
-            if (response.data && typeof response.data === 'object') {
-                const data = response.data;
-                if ('data' in data && Array.isArray(data.data)) {
-                    transactions = data.data;
-                }
-                else if ('transactions' in data && Array.isArray(data.transactions)) {
-                    transactions = data.transactions;
-                }
-                else if (Array.isArray(response.data)) {
-                    transactions = response.data;
-                }
-                if (typeof data.imported === 'number')
-                    imported = data.imported;
-                if (typeof data.skipped === 'number')
-                    skipped = data.skipped;
-            }
-            else if (Array.isArray(response.data)) {
-                transactions = response.data;
-            }
-            if (imported === 0 && skipped === 0 && transactions.length > 0) {
-                for (const tx of transactions) {
-                    const t = tx;
-                    if (t.status === 'skipped' || t.skipped === true) {
-                        skipped++;
-                    }
-                    else {
-                        imported++;
-                    }
-                }
-                if (imported === 0 && skipped === 0) {
-                    imported = transactions.length;
-                }
-            }
-            let output = transactions;
-            if (flags.sanitize) {
-                output = this.sanitizeOutput(transactions);
-            }
-            const fieldList = flags.fields ? flags.fields.split(',').map((f) => f.trim()) : undefined;
-            if (flags.csv || flags.output === 'csv') {
-                this.printCsv(output, fieldList);
-            }
-            else if (flags.table || flags.output === 'table') {
-                this.printTable(output, fieldList);
-            }
-            else {
-                this.log(JSON.stringify(output, null, 2));
-            }
-            this.log('');
-            this.log(`Summary: ${imported} imported, ${skipped} skipped`);
-        }
-        catch (error) {
-            if (error instanceof ApiError) {
-                if (error.status === 404)
-                    this.error(error.message);
-                this.error(`API Error (${error.status}): ${error.message}`);
-            }
-            throw error;
-        }
-    }
-    async runExport(flags) {
-        const context = flags.context ? getContext(flags.context) : getCurrentContext();
-        if (!context)
-            this.error('No context configured. Run: aderis auth login --new');
-        if (!context.tokens)
-            this.error('Not logged in. Run: aderis auth login');
-        const listEndpoint = ENDPOINTS.list;
-        if (!listEndpoint)
-            this.error('Export requires a list endpoint');
-        const allItems = [];
-        let page = 1;
-        const limit = 100;
-        let hasMore = true;
-        // Build base query params
-        const baseParams = {};
-        if (flags.search)
-            baseParams.search = flags.search;
-        if (flags['sort-by'])
-            baseParams.sortBy = flags['sort-by'];
-        if (flags.include)
-            baseParams.include = flags.include;
-        if (flags.query) {
-            try {
-                Object.assign(baseParams, JSON.parse(flags.query));
-            }
-            catch {
-                this.error('Invalid JSON in --query');
-            }
-        }
-        // Fetch all pages
-        process.stderr.write('Exporting...');
-        while (hasMore) {
-            const params = { ...baseParams, limit, page };
-            const response = await apiRequest('GET', listEndpoint.path, {
-                contextName: flags.context,
-                params,
-            });
-            let items = [];
-            const data = response.data;
-            // Handle paginated response format
-            if (data && typeof data === 'object' && 'data' in data && Array.isArray(data.data)) {
-                items = data.data;
-            }
-            else if (Array.isArray(response.data)) {
-                items = response.data;
-            }
-            allItems.push(...items);
-            process.stderr.write(` ${allItems.length}`);
-            // Check if there are more pages
-            if (items.length < limit) {
-                hasMore = false;
-            }
-            else {
-                page++;
-            }
-        }
-        process.stderr.write(' done\n');
-        // Filter fields if specified
-        let output = allItems;
-        if (flags.fields) {
-            const fieldList = flags.fields.split(',').map((f) => f.trim());
-            output = this.filterFields(allItems, fieldList);
-        }
-        // Sanitize output if requested
-        if (flags.sanitize) {
-            output = this.sanitizeOutput(output);
-        }
-        // Output in requested format
-        const fieldList = flags.fields ? flags.fields.split(',').map((f) => f.trim()) : undefined;
-        if (flags.csv || flags.output === 'csv') {
-            this.printCsv(output, fieldList);
-        }
-        else {
-            this.log(JSON.stringify(output, null, 2));
-        }
-    }
-    async runImport(flags) {
-        const context = flags.context ? getContext(flags.context) : getCurrentContext();
-        if (!context)
-            this.error('No context configured. Run: aderis auth login --new');
-        if (!context.tokens)
-            this.error('Not logged in. Run: aderis auth login');
-        // Get data from file, --data, or --set flags
-        let items = [];
-        if (flags.file) {
-            const fsModule = await import('node:fs');
-            try {
-                const content = JSON.parse(fsModule.readFileSync(flags.file, 'utf8'));
-                items = Array.isArray(content) ? content : [content];
-            }
-            catch {
-                this.error(`Failed to read file: ${flags.file}`);
-            }
-        }
-        else if (flags.data) {
-            try {
-                const content = JSON.parse(flags.data);
-                items = Array.isArray(content) ? content : [content];
-            }
-            catch {
-                this.error('Invalid JSON in --data');
-            }
-        }
-        else if (flags.set && flags.set.length > 0) {
-            const item = {};
-            for (const pair of flags.set) {
-                const eqIndex = pair.indexOf('=');
-                if (eqIndex === -1)
-                    this.error(`Invalid --set format: ${pair}. Use: --set key=value`);
-                const key = pair.slice(0, eqIndex);
-                let value = pair.slice(eqIndex + 1);
-                try {
-                    value = JSON.parse(value);
-                }
-                catch {
-                    /* keep as string */
-                }
-                const keys = key.split('.');
-                let obj = item;
-                for (let i = 0; i < keys.length - 1; i++) {
-                    if (!(keys[i] in obj))
-                        obj[keys[i]] = {};
-                    obj = obj[keys[i]];
-                }
-                obj[keys.at(-1)] = value;
-            }
-            items = [item];
-        }
-        else {
-            this.error('Import requires --file, --data, or --set flags');
-        }
-        const createEndpoint = ENDPOINTS.create;
-        const updateEndpoint = ENDPOINTS.update;
-        if (!createEndpoint || !updateEndpoint) {
-            this.error('Import requires both create and update endpoints');
-        }
-        // Helper to extract identifier from item (id, code, or xxxCode)
-        const getItemIdentifier = (item) => {
-            if (item.id)
-                return String(item.id);
-            if (item.code)
-                return String(item.code);
-            // Look for xxxCode fields (e.g., ledgerCode, accountCode)
-            for (const key of Object.keys(item)) {
-                if (key.endsWith('Code') && item[key])
-                    return String(item[key]);
-            }
-            // Look for name as fallback
-            if (item.name)
-                return String(item.name).slice(0, 30);
-            return '';
-        };
-        const results = [];
-        for (const item of items) {
-            const identifier = getItemIdentifier(item);
-            try {
-                // Try to create
-                const response = await apiRequest('POST', createEndpoint.path, {
-                    contextName: flags.context,
-                    data: item,
-                });
-                const id = response.data?.id;
-                results.push({ id: id ? String(id) : undefined, identifier, status: 'created' });
-            }
-            catch (error) {
-                if (error instanceof ApiError && error.status === 409) {
-                    // Conflict - try to update existing
-                    const errorData = error.data;
-                    const existingId = errorData?.existingId;
-                    if (existingId) {
-                        try {
-                            const updatePath = updateEndpoint.path.replace('{id}', existingId);
-                            await apiRequest('PATCH', updatePath, {
-                                contextName: flags.context,
-                                data: item,
-                            });
-                            results.push({ id: existingId, identifier, status: 'updated' });
-                        }
-                        catch (updateError) {
-                            const msg = updateError instanceof ApiError ? updateError.message : String(updateError);
-                            results.push({ error: `Update failed: ${msg}`, id: existingId, identifier, status: 'error' });
-                        }
-                    }
-                    else {
-                        results.push({ error: 'Conflict but no existingId returned', identifier, status: 'error' });
-                    }
-                }
-                else {
-                    const msg = error instanceof ApiError ? `(${error.status}) ${error.message}` : String(error);
-                    results.push({ error: msg, identifier, status: 'error' });
-                }
-            }
-        }
-        // Summary counts
-        const created = results.filter((r) => r.status === 'created').length;
-        const updated = results.filter((r) => r.status === 'updated').length;
-        const errors = results.filter((r) => r.status === 'error');
-        // Output results based on format (default: table)
-        const outputFormat = flags.output || 'table';
-        if (outputFormat === 'json') {
-            this.log(JSON.stringify(results, null, 2));
-        }
-        else if (outputFormat === 'csv' || flags.csv) {
-            // CSV output
-            this.log('status,identifier,id,error');
-            for (const r of results) {
-                const err = (r.error || '').replaceAll('"', '""');
-                this.log(`${r.status},${r.identifier || ''},${r.id || ''},"${err}"`);
-            }
-        }
-        else {
-            // Table output (default)
-            if (results.length > 0) {
-                const statusWidth = 8;
-                const identifierWidth = Math.max(10, ...results.map((r) => (r.identifier || '').length));
-                this.log(`${'status'.padEnd(statusWidth)}  ${'identifier'.padEnd(identifierWidth)}  error`);
-                this.log(`${'-'.repeat(statusWidth)}  ${'-'.repeat(identifierWidth)}  ${'-'.repeat(50)}`);
-                for (const r of results) {
-                    const status = r.status === 'created' ? 'created' : r.status === 'updated' ? 'updated' : 'error';
-                    this.log(`${status.padEnd(statusWidth)}  ${(r.identifier || '').padEnd(identifierWidth)}  ${r.error || ''}`);
-                }
-            }
-        }
-        // Always show summary at the end
-        this.log('');
-        this.log(`Summary: ${created} created, ${updated} updated, ${errors.length} failed`);
-    }
-    async runNestedImport(suffix, parentId, flags) {
-        if (!parentId) {
-            this.error(`Missing required argument: id. Usage: aderis auth import-${suffix} <parent-id> --file data.json`);
-        }
-        const context = flags.context ? getContext(flags.context) : getCurrentContext();
-        if (!context)
-            this.error('No context configured. Run: aderis auth login --new');
-        if (!context.tokens)
-            this.error('Not logged in. Run: aderis auth login');
-        // Get data from file, --data, or --set flags
-        let items = [];
-        if (flags.file) {
-            const fsModule = await import('node:fs');
-            try {
-                const content = JSON.parse(fsModule.readFileSync(flags.file, 'utf8'));
-                items = Array.isArray(content) ? content : [content];
-            }
-            catch {
-                this.error(`Failed to read file: ${flags.file}`);
-            }
-        }
-        else if (flags.data) {
-            try {
-                const content = JSON.parse(flags.data);
-                items = Array.isArray(content) ? content : [content];
-            }
-            catch {
-                this.error('Invalid JSON in --data');
-            }
-        }
-        else if (flags.set && flags.set.length > 0) {
-            const item = {};
-            for (const pair of flags.set) {
-                const eqIndex = pair.indexOf('=');
-                if (eqIndex === -1)
-                    this.error(`Invalid --set format: ${pair}. Use: --set key=value`);
-                const key = pair.slice(0, eqIndex);
-                let value = pair.slice(eqIndex + 1);
-                try {
-                    value = JSON.parse(value);
-                }
-                catch {
-                    /* keep as string */
-                }
-                const keys = key.split('.');
-                let obj = item;
-                for (let i = 0; i < keys.length - 1; i++) {
-                    if (!(keys[i] in obj))
-                        obj[keys[i]] = {};
-                    obj = obj[keys[i]];
-                }
-                obj[keys.at(-1)] = value;
-            }
-            items = [item];
-        }
-        else {
-            this.error(`Import requires --file, --data, or --set flags`);
-        }
-        const createEndpoint = ENDPOINTS[`create-${suffix}`];
-        const updateEndpoint = ENDPOINTS[`update-${suffix}`];
-        if (!createEndpoint || !updateEndpoint) {
-            this.error(`Import requires both create-${suffix} and update-${suffix} endpoints`);
-        }
-        // Build the base path with parent ID
-        const basePath = createEndpoint.path.replace('{id}', parentId);
-        // Helper to extract identifier from item
-        const getItemIdentifier = (item) => {
-            if (item.id)
-                return String(item.id);
-            if (item.itemId)
-                return String(item.itemId);
-            if (item.code)
-                return String(item.code);
-            for (const key of Object.keys(item)) {
-                if (key.endsWith('Id') && item[key])
-                    return String(item[key]);
-                if (key.endsWith('Code') && item[key])
-                    return String(item[key]);
-            }
-            return '';
-        };
-        const results = [];
-        for (const item of items) {
-            const identifier = getItemIdentifier(item);
-            try {
-                // Try to create
-                const response = await apiRequest('POST', basePath, {
-                    contextName: flags.context,
-                    data: item,
-                });
-                const id = response.data?.id;
-                results.push({ id: id ? String(id) : undefined, identifier, status: 'created' });
-            }
-            catch (error) {
-                if (error instanceof ApiError && error.status === 409) {
-                    // Conflict - try to update existing
-                    const errorData = error.data;
-                    const existingId = errorData?.existingId || item.id;
-                    if (existingId) {
-                        try {
-                            // Find the nested ID param name (e.g., 'priceId' for prices)
-                            const nestedIdParam = updateEndpoint.pathParams.find((p) => p !== 'id');
-                            let updatePath = updateEndpoint.path.replace('{id}', parentId);
-                            if (nestedIdParam) {
-                                updatePath = updatePath.replace(`{${nestedIdParam}}`, existingId);
-                            }
-                            await apiRequest('PATCH', updatePath, {
-                                contextName: flags.context,
-                                data: item,
-                            });
-                            results.push({ id: existingId, identifier, status: 'updated' });
-                        }
-                        catch (updateError) {
-                            const msg = updateError instanceof ApiError ? updateError.message : String(updateError);
-                            results.push({ error: `Update failed: ${msg}`, id: existingId, identifier, status: 'error' });
-                        }
-                    }
-                    else {
-                        results.push({ error: 'Conflict but no existingId returned', identifier, status: 'error' });
-                    }
-                }
-                else {
-                    const msg = error instanceof ApiError ? `(${error.status}) ${error.message}` : String(error);
-                    results.push({ error: msg, identifier, status: 'error' });
-                }
-            }
-        }
-        // Summary counts
-        const created = results.filter((r) => r.status === 'created').length;
-        const updated = results.filter((r) => r.status === 'updated').length;
-        const errors = results.filter((r) => r.status === 'error');
-        // Output results based on format (default: table)
-        const outputFormat = flags.output || 'table';
-        if (outputFormat === 'json') {
-            this.log(JSON.stringify(results, null, 2));
-        }
-        else if (outputFormat === 'csv' || flags.csv) {
-            this.log('status,identifier,id,error');
-            for (const r of results) {
-                const err = (r.error || '').replaceAll('"', '""');
-                this.log(`${r.status},${r.identifier || ''},${r.id || ''},"${err}"`);
-            }
-        }
-        else if (results.length > 0) {
-            const statusWidth = 8;
-            const identifierWidth = Math.max(10, ...results.map((r) => (r.identifier || '').length));
-            this.log(`${'status'.padEnd(statusWidth)}  ${'identifier'.padEnd(identifierWidth)}  error`);
-            this.log(`${'-'.repeat(statusWidth)}  ${'-'.repeat(identifierWidth)}  ${'-'.repeat(50)}`);
-            for (const r of results) {
-                const status = r.status === 'created' ? 'created' : r.status === 'updated' ? 'updated' : 'error';
-                this.log(`${status.padEnd(statusWidth)}  ${(r.identifier || '').padEnd(identifierWidth)}  ${r.error || ''}`);
-            }
-        }
-        this.log('');
-        this.log(`Summary: ${created} created, ${updated} updated, ${errors.length} failed`);
-    }
-    sanitizeOutput(data) {
-        const auditFields = new Set(['_type', 'createdAt', 'createdBy', 'tenantId', 'updatedAt', 'updatedBy']);
-        const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-        const sanitize = (obj, parentUuids = new Set()) => {
-            if (obj === null || obj === undefined)
-                return undefined;
-            if (Array.isArray(obj)) {
-                const result = obj.map((item) => sanitize(item, new Set(parentUuids))).filter((item) => item !== undefined);
-                return result.length > 0 ? result : undefined;
-            }
-            if (typeof obj === 'object') {
-                const input = obj;
-                const result = {};
-                // Collect UUIDs from this level to pass to children
-                const currentUuids = new Set(parentUuids);
-                for (const [key, value] of Object.entries(input)) {
-                    if (typeof value === 'string' && uuidRegex.test(value)) {
-                        currentUuids.add(value);
-                    }
-                }
-                for (const [key, value] of Object.entries(input)) {
-                    // Skip audit fields
-                    if (auditFields.has(key))
-                        continue;
-                    // Skip null/undefined values
-                    if (value === null || value === undefined)
-                        continue;
-                    // Skip UUID values that exist in parent
-                    if (typeof value === 'string' && uuidRegex.test(value) && parentUuids.has(value))
-                        continue;
-                    // Recursively sanitize nested objects/arrays
-                    const sanitized = sanitize(value, currentUuids);
-                    if (sanitized !== undefined) {
-                        result[key] = sanitized;
-                    }
-                }
-                return Object.keys(result).length > 0 ? result : undefined;
-            }
-            return obj;
-        };
-        return sanitize(data) ?? (Array.isArray(data) ? [] : {});
-    }
-}