@armoriq/sdk-dev 0.2.15 → 0.3.1

package/dist/cli/commands/auth.d.ts

@@ -0,0 +1,15 @@
+/**
+ * armoriq login / logout / whoami — OAuth 2.0 device-code flow (RFC 8628).
+ * Mirrors armoriq_sdk/cli_auth.py.
+ *
+ * The browser approval page either redirects straight back to our
+ * local callback with the key, or — if the callback can't be reached —
+ * we fall back to polling /auth/device/token.
+ */
+export declare function cmdLogin(args: {
+    backend?: string;
+    org?: string;
+}): Promise<number>;
+export declare function cmdLogout(): number;
+export declare function cmdWhoami(): number;
+//# sourceMappingURL=auth.d.ts.map

package/dist/cli/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAgHH,wBAAsB,QAAQ,CAAC,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA0GxF;AAED,wBAAgB,SAAS,IAAI,MAAM,CAOlC;AAED,wBAAgB,SAAS,IAAI,MAAM,CAkBlC"}

package/dist/cli/commands/auth.js

@@ -0,0 +1,259 @@
+"use strict";
+/**
+ * armoriq login / logout / whoami — OAuth 2.0 device-code flow (RFC 8628).
+ * Mirrors armoriq_sdk/cli_auth.py.
+ *
+ * The browser approval page either redirects straight back to our
+ * local callback with the key, or — if the callback can't be reached —
+ * we fall back to polling /auth/device/token.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cmdLogin = cmdLogin;
+exports.cmdLogout = cmdLogout;
+exports.cmdWhoami = cmdWhoami;
+const http = __importStar(require("http"));
+const net = __importStar(require("net"));
+const url_1 = require("url");
+const child_process_1 = require("child_process");
+const axios_1 = __importDefault(require("axios"));
+const credentials_1 = require("../../credentials");
+const util_1 = require("../util");
+const SUCCESS_HTML = `<!DOCTYPE html>
+<html><head><meta charset="utf-8"><title>ArmorIQ</title>
+<style>
+  body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
+         display: flex; align-items: center; justify-content: center; height: 100vh;
+         margin: 0; background: #f8fafc; color: #1e293b; }
+  .card { text-align: center; padding: 3rem; background: white;
+          border-radius: 1rem; box-shadow: 0 1px 3px rgba(0,0,0,0.1);
+          max-width: 400px; }
+  .check { width: 64px; height: 64px; background: #dcfce7; border-radius: 50%;
+           display: flex; align-items: center; justify-content: center;
+           margin: 0 auto 1.5rem; }
+  .check svg { width: 32px; height: 32px; color: #16a34a; }
+  h2 { margin: 0 0 0.5rem; font-size: 1.25rem; }
+  p { margin: 0; font-size: 0.875rem; color: #64748b; }
+</style></head><body>
+<div class="card">
+  <div class="check">
+    <svg fill="none" stroke="currentColor" viewBox="0 0 24 24">
+      <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 13l4 4L19 7"/>
+    </svg>
+  </div>
+  <h2>Authorized</h2>
+  <p>You can close this tab and return to your terminal.</p>
+</div>
+</body></html>`;
+function findFreePort() {
+    return new Promise((resolve, reject) => {
+        const server = net.createServer();
+        server.unref();
+        server.on('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            const addr = server.address();
+            if (addr && typeof addr === 'object') {
+                const port = addr.port;
+                server.close(() => resolve(port));
+            }
+            else {
+                reject(new Error('Could not get free port'));
+            }
+        });
+    });
+}
+function startCallbackServer(port) {
+    let resolveResult;
+    const once = new Promise((resolve) => {
+        resolveResult = resolve;
+    });
+    const server = http.createServer((req, res) => {
+        const url = new url_1.URL(req.url ?? '/', `http://localhost:${port}`);
+        if (url.pathname === '/callback') {
+            const params = Object.fromEntries(url.searchParams.entries());
+            res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+            res.end(SUCCESS_HTML);
+            const result = {
+                api_key: params.key,
+                email: params.email,
+                user_id: params.user_id,
+                org_id: params.org_id,
+            };
+            if (result.api_key)
+                resolveResult(result);
+        }
+        else {
+            res.writeHead(404);
+            res.end();
+        }
+    });
+    server.listen(port, '127.0.0.1');
+    return { server, once };
+}
+function openBrowser(url) {
+    const cmd = process.platform === 'darwin'
+        ? `open "${url}"`
+        : process.platform === 'win32'
+            ? `start "" "${url}"`
+            : `xdg-open "${url}"`;
+    (0, child_process_1.exec)(cmd, () => {
+        /* best-effort */
+    });
+}
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+async function cmdLogin(args) {
+    const backend = (args.backend ?? process.env.ARMORIQ_BACKEND_URL ?? (0, util_1.backendBase)()).replace(/\/+$/, '');
+    const requestedOrg = (args.org ?? '').trim();
+    (0, util_1.out)('');
+    (0, util_1.out)('  \x1b[1m\x1b[36m┃ ArmorIQ Login\x1b[0m');
+    (0, util_1.out)('');
+    const port = await findFreePort();
+    const callbackUrl = `http://localhost:${port}/callback`;
+    const { server, once: callbackOnce } = startCallbackServer(port);
+    let dc;
+    try {
+        const r = await axios_1.default.post(`${backend}/auth/device/code`, { callback_url: callbackUrl }, { timeout: 10000 });
+        dc = r.data;
+    }
+    catch (e) {
+        server.close();
+        (0, util_1.out)(`  ${util_1.CROSS} Failed to request device code: ${e.message}`);
+        return 1;
+    }
+    const { device_code, user_code, verification_uri_complete } = dc;
+    const interval = Number(dc.interval ?? 5) || 5;
+    const expiresIn = Number(dc.expires_in ?? 600) || 600;
+    const sep = verification_uri_complete.includes('?') ? '&' : '?';
+    let browserUrl = `${verification_uri_complete}${sep}callback=${encodeURIComponent(callbackUrl)}`;
+    if (requestedOrg)
+        browserUrl += `&org=${encodeURIComponent(requestedOrg)}`;
+    (0, util_1.out)('  Opening browser...\n');
+    openBrowser(browserUrl);
+    (0, util_1.out)('  If the browser didn\'t open, visit:');
+    (0, util_1.out)(`    \x1b[36m\x1b[1m${browserUrl}\x1b[0m\n`);
+    (0, util_1.out)(`  Confirm this code in your browser: \x1b[1m${user_code}\x1b[0m\n`);
+    process.stdout.write('  Waiting for authorization...');
+    const deadline = Date.now() + expiresIn * 1000;
+    let result;
+    let lastErr;
+    while (Date.now() < deadline && !result) {
+        // Race callback vs poll; whichever resolves first wins.
+        const callbackOrTimeout = Promise.race([
+            callbackOnce.then((r) => ({ kind: 'cb', value: r })),
+            sleep(interval * 1000).then(() => ({ kind: 'tick' })),
+        ]);
+        const tick = await callbackOrTimeout;
+        if (tick.kind === 'cb' && tick.value.api_key) {
+            result = tick.value;
+            break;
+        }
+        try {
+            const pr = await axios_1.default.post(`${backend}/auth/device/token`, { deviceCode: device_code }, { timeout: 10000, validateStatus: () => true });
+            const data = pr.data ?? {};
+            const err = data.error;
+            if (err === 'authorization_pending' || err === 'slow_down')
+                continue;
+            if (err) {
+                lastErr = data.error_description || err;
+                break;
+            }
+            if (data.api_key) {
+                result = {
+                    api_key: data.api_key,
+                    email: data.email,
+                    user_id: data.user_id,
+                    org_id: data.org_id,
+                };
+                break;
+            }
+        }
+        catch {
+            // network blip; keep polling
+        }
+    }
+    server.close();
+    if (!result || !result.api_key) {
+        (0, util_1.out)(` ${util_1.CROSS}`);
+        (0, util_1.out)(`  ${util_1.CROSS} ${lastErr ?? 'Timed out waiting for authorization. Run `armoriq login` again.'}`);
+        return 1;
+    }
+    (0, credentials_1.saveCredentials)({
+        apiKey: result.api_key,
+        email: result.email ?? '',
+        userId: result.user_id ?? '',
+        orgId: result.org_id ?? '',
+        savedAt: new Date().toISOString(),
+    });
+    (0, util_1.out)(` ${util_1.CHECK}`);
+    (0, util_1.out)('');
+    (0, util_1.out)(`  ${util_1.CHECK} Logged in as \x1b[1m${result.email ?? 'unknown'}\x1b[0m (org: ${result.org_id ?? 'unknown'})`);
+    (0, util_1.out)(`  ${util_1.CHECK} API key saved to ${(0, credentials_1.getCredentialsPath)()}`);
+    (0, util_1.out)('');
+    return 0;
+}
+function cmdLogout() {
+    if ((0, credentials_1.clearCredentials)()) {
+        (0, util_1.out)(`  ${util_1.CHECK} Credentials removed from ${(0, credentials_1.getCredentialsPath)()}`);
+    }
+    else {
+        (0, util_1.out)('  \x1b[2mNo credentials found — already logged out.\x1b[0m');
+    }
+    return 0;
+}
+function cmdWhoami() {
+    const creds = (0, credentials_1.loadCredentials)();
+    if (!creds) {
+        (0, util_1.out)('  \x1b[2mNot logged in. Run `armoriq login` to authenticate.\x1b[0m');
+        return 0;
+    }
+    (0, util_1.out)('');
+    (0, util_1.out)('  \x1b[1m\x1b[36m┃ ArmorIQ Credentials\x1b[0m');
+    (0, util_1.out)('');
+    const keyPreview = creds.apiKey.length > 16 ? creds.apiKey.slice(0, 16) + '...' : creds.apiKey;
+    (0, util_1.out)(`  Email:    \x1b[1m${creds.email || 'unknown'}\x1b[0m`);
+    (0, util_1.out)(`  API Key:  \x1b[2m${keyPreview}\x1b[0m`);
+    (0, util_1.out)(`  User ID:  \x1b[2m${creds.userId || 'n/a'}\x1b[0m`);
+    (0, util_1.out)(`  Org ID:   \x1b[2m${creds.orgId || 'n/a'}\x1b[0m`);
+    (0, util_1.out)(`  Saved at: \x1b[2m${creds.savedAt || 'n/a'}\x1b[0m`);
+    (0, util_1.out)(`  File:     \x1b[2m${(0, credentials_1.getCredentialsPath)()}\x1b[0m`);
+    (0, util_1.out)('');
+    return 0;
+}
+//# sourceMappingURL=auth.js.map

package/dist/cli/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/cli/commands/auth.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgHH,4BA0GC;AAED,8BAOC;AAED,8BAkBC;AArPD,2CAA6B;AAC7B,yCAA2B;AAC3B,6BAA0B;AAC1B,iDAAqC;AACrC,kDAA0B;AAC1B,mDAM2B;AAC3B,kCAAyE;AAEzE,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;eAyBN,CAAC;AAEhB,SAAS,YAAY;IACnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;gBACvB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AASD,SAAS,mBAAmB,CAC1B,IAAY;IAEZ,IAAI,aAA0C,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;QACnD,aAAa,GAAG,OAAO,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,GAAG,GAAG,IAAI,SAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACtB,MAAM,MAAM,GAAmB;gBAC7B,OAAO,EAAE,MAAM,CAAC,GAAG;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;YACF,IAAI,MAAM,CAAC,OAAO;gBAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACjC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,SAAS,GAAG,GAAG;QACjB,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,aAAa,GAAG,GAAG;YACrB,CAAC,CAAC,aAAa,GAAG,GAAG,CAAC;IAC5B,IAAA,oBAAI,EAAC,GAAG,EAAE,GAAG,EAAE;QACb,iBAAiB;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAEM,KAAK,UAAU,QAAQ,CAAC,IAAwC;IACrE,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAA,kBAAW,GAAE,CAAC,CAAC,OAAO,CACxF,MAAM,EACN,EAAE,CACH,CAAC;IACF,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE7C,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,IAAA,UAAG,EAAC,yCAAyC,CAAC,CAAC;IAC/C,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IAER,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;IAClC,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;IACxD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAEjE,IAAI,EAAO,CAAC;IACZ,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,eAAK,CAAC,IAAI,CAAC,GAAG,OAAO,mBAAmB,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7G,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,IAAA,UAAG,EAAC,KAAK,YAAK,mCAAoC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,yBAAyB,EAAE,GAAG,EAAE,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,UAAU,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;IAEtD,MAAM,GAAG,GAAG,yBAAyB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAChE,IAAI,UAAU,GACZ,GAAG,yBAAyB,GAAG,GAAG,YAAY,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;IAClF,IAAI,YAAY;QAAE,UAAU,IAAI,QAAQ,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;IAE3E,IAAA,UAAG,EAAC,wBAAwB,CAAC,CAAC;IAC9B,WAAW,CAAC,UAAU,CAAC,CAAC;IACxB,IAAA,UAAG,EAAC,uCAAuC,CAAC,CAAC;IAC7C,IAAA,UAAG,EAAC,sBAAsB,UAAU,WAAW,CAAC,CAAC;IACjD,IAAA,UAAG,EAAC,+CAA+C,SAAS,WAAW,CAAC,CAAC;IACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;IAC/C,IAAI,MAAkC,CAAC;IACvC,IAAI,OAA2B,CAAC;IAEhC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACxC,wDAAwD;QACxD,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;YACrC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAU,CAAC;YAC7D,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAU,CAAC;SAC/D,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7C,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;YACpB,MAAM;QACR,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,eAAK,CAAC,IAAI,CACzB,GAAG,OAAO,oBAAoB,EAC9B,EAAE,UAAU,EAAE,WAAW,EAAE,EAC3B,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAC/C,CAAC;YACF,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;YACvB,IAAI,GAAG,KAAK,uBAAuB,IAAI,GAAG,KAAK,WAAW;gBAAE,SAAS;YACrE,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,GAAG,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC;gBACxC,MAAM;YACR,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,GAAG;oBACP,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC;gBACF,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,CAAC;IAEf,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAA,UAAG,EAAC,IAAI,YAAK,EAAE,CAAC,CAAC;QACjB,IAAA,UAAG,EAAC,KAAK,YAAK,IAAI,OAAO,IAAI,iEAAiE,EAAE,CAAC,CAAC;QAClG,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAA,6BAAe,EAAC;QACd,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;QACzB,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC1B,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAClC,CAAC,CAAC;IACH,IAAA,UAAG,EAAC,IAAI,YAAK,EAAE,CAAC,CAAC;IACjB,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,IAAA,UAAG,EACD,KAAK,YAAK,wBAAwB,MAAM,CAAC,KAAK,IAAI,SAAS,iBAAiB,MAAM,CAAC,MAAM,IAAI,SAAS,GAAG,CAC1G,CAAC;IACF,IAAA,UAAG,EAAC,KAAK,YAAK,qBAAqB,IAAA,gCAAkB,GAAE,EAAE,CAAC,CAAC;IAC3D,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,SAAS;IACvB,IAAI,IAAA,8BAAgB,GAAE,EAAE,CAAC;QACvB,IAAA,UAAG,EAAC,KAAK,YAAK,6BAA6B,IAAA,gCAAkB,GAAE,EAAE,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,IAAA,UAAG,EAAC,4DAA4D,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,SAAS;IACvB,MAAM,KAAK,GAAG,IAAA,6BAAe,GAAE,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAA,UAAG,EAAC,qEAAqE,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,IAAA,UAAG,EAAC,+CAA+C,CAAC,CAAC;IACrD,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;IAC/F,IAAA,UAAG,EAAC,sBAAsB,KAAK,CAAC,KAAK,IAAI,SAAS,SAAS,CAAC,CAAC;IAC7D,IAAA,UAAG,EAAC,sBAAsB,UAAU,SAAS,CAAC,CAAC;IAC/C,IAAA,UAAG,EAAC,sBAAsB,KAAK,CAAC,MAAM,IAAI,KAAK,SAAS,CAAC,CAAC;IAC1D,IAAA,UAAG,EAAC,sBAAsB,KAAK,CAAC,KAAK,IAAI,KAAK,SAAS,CAAC,CAAC;IACzD,IAAA,UAAG,EAAC,sBAAsB,KAAK,CAAC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC;IAC3D,IAAA,UAAG,EAAC,sBAAsB,IAAA,gCAAkB,GAAE,SAAS,CAAC,CAAC;IACzD,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/commands/keys.d.ts

@@ -0,0 +1,14 @@
+/**
+ * armoriq keys list / revoke / prune — API key management.
+ * Mirrors PR #24 (TS) by symmetry; backend routes already exist:
+ *   GET /api-keys                  (JwtAuthGuard — uses credentials JWT)
+ *   POST /api-keys/:id/revoke      (JwtAuthGuard)
+ */
+export declare function cmdKeysList(): Promise<number>;
+export declare function cmdKeysRevoke(args: {
+    id: string;
+}): Promise<number>;
+export declare function cmdKeysPrune(args: {
+    yes?: boolean;
+}): Promise<number>;
+//# sourceMappingURL=keys.d.ts.map

package/dist/cli/commands/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/keys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiDH,wBAAsB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CA0BnD;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAOzE;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA4C3E"}

package/dist/cli/commands/keys.js

@@ -0,0 +1,132 @@
+"use strict";
+/**
+ * armoriq keys list / revoke / prune — API key management.
+ * Mirrors PR #24 (TS) by symmetry; backend routes already exist:
+ *   GET /api-keys                  (JwtAuthGuard — uses credentials JWT)
+ *   POST /api-keys/:id/revoke      (JwtAuthGuard)
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cmdKeysList = cmdKeysList;
+exports.cmdKeysRevoke = cmdKeysRevoke;
+exports.cmdKeysPrune = cmdKeysPrune;
+const axios_1 = __importDefault(require("axios"));
+const util_1 = require("../util");
+const state_1 = require("../state");
+const KEY_COUNT_WARN_THRESHOLD = 8;
+async function listKeys(apiKey) {
+    const url = `${(0, util_1.backendBase)()}/api-keys`;
+    const response = await axios_1.default.get(url, {
+        headers: { 'X-API-Key': apiKey },
+        timeout: 12000,
+        validateStatus: () => true,
+    });
+    if (response.status === 401)
+        throw new util_1.CLIError('API key rejected (401). Try `armoriq login` again.');
+    if (response.status >= 400)
+        throw new util_1.CLIError(`Failed to list keys (HTTP ${response.status}).`);
+    const data = response.data;
+    if (Array.isArray(data))
+        return data;
+    if (Array.isArray(data?.data))
+        return data.data;
+    return [];
+}
+async function revokeKey(apiKey, keyId) {
+    const url = `${(0, util_1.backendBase)()}/api-keys/${keyId}/revoke`;
+    const response = await axios_1.default.post(url, {}, {
+        headers: { 'X-API-Key': apiKey, 'Content-Type': 'application/json' },
+        timeout: 12000,
+        validateStatus: () => true,
+    });
+    if (response.status === 401)
+        throw new util_1.CLIError('API key rejected (401). Try `armoriq login` again.');
+    if (response.status >= 400) {
+        throw new util_1.CLIError(`Failed to revoke key ${keyId} (HTTP ${response.status}): ${response.data?.message ?? ''}`);
+    }
+}
+async function cmdKeysList() {
+    const creds = (0, util_1.requireCredentials)();
+    const keys = await listKeys(creds.apiKey);
+    if (keys.length === 0) {
+        (0, util_1.out)('No API keys found for this account.');
+        return 0;
+    }
+    const nameW = Math.max('NAME'.length, ...keys.map((k) => (k.name ?? '').length));
+    const idW = Math.max('ID'.length, ...keys.map((k) => k.id.length));
+    (0, util_1.out)(`  ${'NAME'.padEnd(nameW)}  ${'ID'.padEnd(idW)}  STATUS    LAST USED`);
+    (0, util_1.out)('  ' + '-'.repeat(nameW + idW + 30));
+    for (const k of keys) {
+        const name = (k.name ?? '').padEnd(nameW);
+        const id = k.id.padEnd(idW);
+        const status = (k.status ?? 'unknown').padEnd(8);
+        const last = k.lastUsedAt ?? '-';
+        (0, util_1.out)(`  ${name}  ${id}  ${status}  ${last}`);
+    }
+    (0, util_1.out)('');
+    if (keys.length > KEY_COUNT_WARN_THRESHOLD) {
+        (0, util_1.out)(`\x1b[33m!\x1b[0m You have ${keys.length} API keys. Consider \`armoriq keys prune\` to revoke unused keys.`);
+    }
+    (0, state_1.appendLog)('keys-list', { count: keys.length });
+    return 0;
+}
+async function cmdKeysRevoke(args) {
+    if (!args.id)
+        throw new util_1.CLIError('Key id is required: `armoriq keys revoke <id>`.');
+    const creds = (0, util_1.requireCredentials)();
+    await revokeKey(creds.apiKey, args.id);
+    (0, util_1.out)(`${util_1.CHECK} Revoked key ${args.id}.`);
+    (0, state_1.appendLog)('keys-revoke', { id: args.id });
+    return 0;
+}
+async function cmdKeysPrune(args) {
+    const creds = (0, util_1.requireCredentials)();
+    const keys = await listKeys(creds.apiKey);
+    const now = Date.now();
+    const candidates = keys.filter((k) => {
+        if (k.status && k.status.toLowerCase() === 'revoked')
+            return false;
+        if (k.id === creds.apiKey)
+            return false;
+        if (k.expiresAt && new Date(k.expiresAt).getTime() < now)
+            return true;
+        if (k.lastUsedAt) {
+            const ageDays = (now - new Date(k.lastUsedAt).getTime()) / 86400000;
+            if (ageDays > 90)
+                return true;
+        }
+        if (!k.lastUsedAt && k.createdAt) {
+            const ageDays = (now - new Date(k.createdAt).getTime()) / 86400000;
+            if (ageDays > 30)
+                return true;
+        }
+        return false;
+    });
+    if (candidates.length === 0) {
+        (0, util_1.out)('Nothing to prune — all keys are either active, recent, or already revoked.');
+        return 0;
+    }
+    (0, util_1.out)(`Found ${candidates.length} prune candidate(s):`);
+    for (const k of candidates) {
+        (0, util_1.out)(`  ${k.id} ${k.name ?? ''} (last used ${k.lastUsedAt ?? 'never'})`);
+    }
+    if (!args.yes) {
+        (0, util_1.out)('');
+        (0, util_1.out)('Re-run with --yes to actually revoke these.');
+        return 0;
+    }
+    for (const k of candidates) {
+        try {
+            await revokeKey(creds.apiKey, k.id);
+            (0, util_1.out)(`${util_1.CHECK} Revoked ${k.id}`);
+        }
+        catch (e) {
+            (0, util_1.out)(`\x1b[31m✘\x1b[0m Failed to revoke ${k.id}: ${e.message}`);
+        }
+    }
+    (0, state_1.appendLog)('keys-prune', { revoked: candidates.length });
+    return 0;
+}
+//# sourceMappingURL=keys.js.map

package/dist/cli/commands/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../src/cli/commands/keys.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;AAiDH,kCA0BC;AAED,sCAOC;AAED,oCA4CC;AAhID,kDAA0B;AAC1B,kCAAgF;AAChF,oCAAqC;AAErC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAanC,KAAK,UAAU,QAAQ,CAAC,MAAc;IACpC,MAAM,GAAG,GAAG,GAAG,IAAA,kBAAW,GAAE,WAAW,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,GAAG,EAAE;QACpC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;QAChC,OAAO,EAAE,KAAK;QACd,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;KAC3B,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,eAAQ,CAAC,oDAAoD,CAAC,CAAC;IACtG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;QAAE,MAAM,IAAI,eAAQ,CAAC,6BAA6B,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IAChD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,KAAa;IACpD,MAAM,GAAG,GAAG,GAAG,IAAA,kBAAW,GAAE,aAAa,KAAK,SAAS,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE;QACzC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE;QACpE,OAAO,EAAE,KAAK;QACd,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;KAC3B,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,eAAQ,CAAC,oDAAoD,CAAC,CAAC;IACtG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAQ,CAChB,wBAAwB,KAAK,UAAU,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,CAC3F,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,WAAW;IAC/B,MAAM,KAAK,GAAG,IAAA,yBAAkB,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAA,UAAG,EAAC,qCAAqC,CAAC,CAAC;QAC3C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACjF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,IAAA,UAAG,EAAC,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC3E,IAAA,UAAG,EAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC;QACjC,IAAA,UAAG,EAAC,KAAK,IAAI,KAAK,EAAE,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,IAAI,IAAI,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;QAC3C,IAAA,UAAG,EACD,6BAA6B,IAAI,CAAC,MAAM,mEAAmE,CAC5G,CAAC;IACJ,CAAC;IACD,IAAA,iBAAS,EAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC;AAEM,KAAK,UAAU,aAAa,CAAC,IAAoB;IACtD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,eAAQ,CAAC,iDAAiD,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,IAAA,yBAAkB,GAAE,CAAC;IACnC,MAAM,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,IAAA,UAAG,EAAC,GAAG,YAAK,gBAAgB,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACxC,IAAA,iBAAS,EAAC,aAAa,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC;AACX,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,IAAuB;IACxD,MAAM,KAAK,GAAG,IAAA,yBAAkB,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACnC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACnE,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QACtE,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC;YACpE,IAAI,OAAO,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC;YACnE,IAAI,OAAO,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;QAChC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,IAAA,UAAG,EAAC,4EAA4E,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAA,UAAG,EAAC,SAAS,UAAU,CAAC,MAAM,sBAAsB,CAAC,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAA,UAAG,EAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,eAAe,CAAC,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;QACR,IAAA,UAAG,EAAC,6CAA6C,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACpC,IAAA,UAAG,EAAC,GAAG,YAAK,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAA,UAAG,EAAC,qCAAqC,CAAC,CAAC,EAAE,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,IAAA,iBAAS,EAAC,YAAY,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/commands/orgs.d.ts

@@ -0,0 +1,10 @@
+/**
+ * armoriq orgs / switch-org — list and switch ArmorIQ organizations.
+ * Mirrors armoriq_sdk/cli.py:cmd_orgs / cmd_switch_org.
+ */
+export declare function cmdOrgs(): Promise<number>;
+export declare function cmdSwitchOrg(args: {
+    org: string;
+    keyName?: string;
+}): Promise<number>;
+//# sourceMappingURL=orgs.d.ts.map

package/dist/cli/commands/orgs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgs.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/orgs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,wBAAsB,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CA0C/C;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyD3F"}

package/dist/cli/commands/orgs.js

@@ -0,0 +1,152 @@
+"use strict";
+/**
+ * armoriq orgs / switch-org — list and switch ArmorIQ organizations.
+ * Mirrors armoriq_sdk/cli.py:cmd_orgs / cmd_switch_org.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cmdOrgs = cmdOrgs;
+exports.cmdSwitchOrg = cmdSwitchOrg;
+const axios_1 = __importDefault(require("axios"));
+const credentials_1 = require("../../credentials");
+const util_1 = require("../util");
+const state_1 = require("../state");
+const fs = __importStar(require("fs"));
+async function cmdOrgs() {
+    const creds = (0, util_1.requireCredentials)();
+    const url = `${(0, util_1.backendBase)()}/iap/sdk/orgs`;
+    let response;
+    try {
+        response = await axios_1.default.get(url, {
+            headers: { 'X-API-Key': creds.apiKey },
+            timeout: 12000,
+            validateStatus: () => true,
+        });
+    }
+    catch (e) {
+        throw new util_1.CLIError(`Failed to reach ${url}: ${e.message}`);
+    }
+    if (response.status === 401) {
+        throw new util_1.CLIError('API key rejected (401). Try `armoriq login` again.');
+    }
+    if (response.status >= 400) {
+        throw new util_1.CLIError(`Failed to list orgs (HTTP ${response.status}).`);
+    }
+    const orgs = response.data?.data ?? [];
+    if (orgs.length === 0) {
+        (0, util_1.out)("You don't belong to any organizations.");
+        return 0;
+    }
+    const nameW = Math.max('NAME'.length, ...orgs.map((o) => (o.name ?? '').length));
+    const roleW = Math.max('ROLE'.length, ...orgs.map((o) => (o.userRole ?? '').length));
+    const header = `  ${'NAME'.padEnd(nameW)}  ${'ORG_ID'.padEnd(36)}  ${'ROLE'.padEnd(roleW)}  MEMBERS`;
+    (0, util_1.out)(header);
+    (0, util_1.out)('  ' + '-'.repeat(header.length - 2));
+    for (const org of orgs) {
+        const marker = org.active ? `${util_1.CHECK} ` : '  ';
+        const name = (org.name ?? '').padEnd(nameW);
+        const orgId = (org.orgId ?? '').padEnd(36);
+        const role = (org.userRole ?? '').padEnd(roleW);
+        const members = String(org.memberCount ?? 0);
+        (0, util_1.out)(`${marker}${name}  ${orgId}  ${role}  ${members}`);
+    }
+    (0, util_1.out)('');
+    (0, util_1.out)(`Active org is marked with ${util_1.CHECK}. Switch with \`armoriq switch-org <name-or-id>\`.`);
+    (0, state_1.appendLog)('orgs', { count: orgs.length });
+    return 0;
+}
+async function cmdSwitchOrg(args) {
+    const creds = (0, util_1.requireCredentials)();
+    const target = (args.org ?? '').trim();
+    if (!target)
+        throw new util_1.CLIError('Target org (id or name) is required.');
+    const url = `${(0, util_1.backendBase)()}/iap/sdk/switch-org`;
+    const body = { org: target };
+    if (args.keyName)
+        body.keyName = args.keyName;
+    let response;
+    try {
+        response = await axios_1.default.post(url, body, {
+            headers: { 'X-API-Key': creds.apiKey, 'Content-Type': 'application/json' },
+            timeout: 12000,
+            validateStatus: () => true,
+        });
+    }
+    catch (e) {
+        throw new util_1.CLIError(`Failed to reach ${url}: ${e.message}`);
+    }
+    if (response.status === 401)
+        throw new util_1.CLIError('API key rejected (401). Try `armoriq login` again.');
+    if (response.status === 403)
+        throw new util_1.CLIError(`You are not a member of '${target}'.`);
+    if (response.status === 404)
+        throw new util_1.CLIError(`No organization named '${target}' (or matching that id).`);
+    if (response.status === 400) {
+        throw new util_1.CLIError(response.data?.message || 'Bad request.');
+    }
+    if (response.status >= 400) {
+        throw new util_1.CLIError(`Switch failed (HTTP ${response.status}).`);
+    }
+    const payload = response.data ?? {};
+    const newApiKey = payload.api_key;
+    const newOrgId = payload.org_id;
+    const newOrgName = payload.org_name ?? target;
+    if (!newApiKey || !newOrgId) {
+        throw new util_1.CLIError('Switch response missing api_key or org_id.');
+    }
+    (0, credentials_1.saveCredentials)({
+        apiKey: newApiKey,
+        email: creds.email,
+        userId: creds.userId,
+        orgId: newOrgId,
+        savedAt: new Date().toISOString(),
+    });
+    // Agent registration (state.json) was org-scoped — invalidate it so the
+    // next step is obvious.
+    const stateExisted = fs.existsSync(state_1.STATE_FILE);
+    if (stateExisted)
+        (0, state_1.clearState)();
+    (0, util_1.out)(`${util_1.CHECK} Switched to ${newOrgName} (org_id=${newOrgId})`);
+    (0, util_1.out)(`${util_1.CHECK} New API key saved.`);
+    if (stateExisted) {
+        (0, util_1.out)('  Previous agent registration cleared. Re-run `armoriq register` in this org.');
+    }
+    (0, state_1.appendLog)('switch-org', { org_id: newOrgId, org_name: newOrgName, cleared_state: stateExisted });
+    return 0;
+}
+//# sourceMappingURL=orgs.js.map

package/dist/cli/commands/orgs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgs.js","sourceRoot":"","sources":["../../../src/cli/commands/orgs.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQH,0BA0CC;AAED,oCAyDC;AA3GD,kDAA0B;AAC1B,mDAAoD;AACpD,kCAAgF;AAChF,oCAA6D;AAC7D,uCAAyB;AAElB,KAAK,UAAU,OAAO;IAC3B,MAAM,KAAK,GAAG,IAAA,yBAAkB,GAAE,CAAC;IACnC,MAAM,GAAG,GAAG,GAAG,IAAA,kBAAW,GAAE,eAAe,CAAC;IAC5C,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAC9B,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE;YACtC,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC3B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAQ,CAAC,mBAAmB,GAAG,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAQ,CAAC,oDAAoD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAQ,CAAC,6BAA6B,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAU,QAAQ,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;IAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAA,UAAG,EAAC,wCAAwC,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;IACrG,IAAA,UAAG,EAAC,MAAM,CAAC,CAAC;IACZ,IAAA,UAAG,EAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,YAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAA,UAAG,EAAC,GAAG,MAAM,GAAG,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,IAAA,UAAG,EAAC,6BAA6B,YAAK,oDAAoD,CAAC,CAAC;IAC5F,IAAA,iBAAS,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC;AACX,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,IAAuC;IACxE,MAAM,KAAK,GAAG,IAAA,yBAAkB,GAAE,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,eAAQ,CAAC,sCAAsC,CAAC,CAAC;IAExE,MAAM,GAAG,GAAG,GAAG,IAAA,kBAAW,GAAE,qBAAqB,CAAC;IAClD,MAAM,IAAI,GAA4B,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACtD,IAAI,IAAI,CAAC,OAAO;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAE9C,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,eAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;YACrC,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC1E,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC3B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAQ,CAAC,mBAAmB,GAAG,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,eAAQ,CAAC,oDAAoD,CAAC,CAAC;IACtG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,eAAQ,CAAC,4BAA4B,MAAM,IAAI,CAAC,CAAC;IACxF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,eAAQ,CAAC,0BAA0B,MAAM,0BAA0B,CAAC,CAAC;IAC5G,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,cAAc,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAQ,CAAC,uBAAuB,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,SAAS,GAAuB,OAAO,CAAC,OAAO,CAAC;IACtD,MAAM,QAAQ,GAAuB,OAAO,CAAC,MAAM,CAAC;IACpD,MAAM,UAAU,GAAW,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC;IACtD,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAQ,CAAC,4CAA4C,CAAC,CAAC;IACnE,CAAC;IAED,IAAA,6BAAe,EAAC;QACd,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAClC,CAAC,CAAC;IAEH,wEAAwE;IACxE,wBAAwB;IACxB,MAAM,YAAY,GAAG,EAAE,CAAC,UAAU,CAAC,kBAAU,CAAC,CAAC;IAC/C,IAAI,YAAY;QAAE,IAAA,kBAAU,GAAE,CAAC;IAE/B,IAAA,UAAG,EAAC,GAAG,YAAK,gBAAgB,UAAU,YAAY,QAAQ,GAAG,CAAC,CAAC;IAC/D,IAAA,UAAG,EAAC,GAAG,YAAK,qBAAqB,CAAC,CAAC;IACnC,IAAI,YAAY,EAAE,CAAC;QACjB,IAAA,UAAG,EAAC,+EAA+E,CAAC,CAAC;IACvF,CAAC;IACD,IAAA,iBAAS,EAAC,YAAY,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;IACjG,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/commands/status.d.ts

@@ -0,0 +1,9 @@
+/**
+ * armoriq status / logs — local-only commands that read the cached state
+ * and CLI log file. Mirrors armoriq_sdk/cli.py:cmd_status / cmd_logs.
+ */
+export declare function cmdStatus(): number;
+export declare function cmdLogs(args: {
+    follow?: boolean;
+}): number;
+//# sourceMappingURL=status.d.ts.map

package/dist/cli/commands/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/status.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,wBAAgB,SAAS,IAAI,MAAM,CAclC;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAsC1D"}