@atlasauth/cli 0.0.0-stage → 0.1.0

package/dist/commands/shared.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveAuth = resolveAuth;
+exports.requireClient = requireClient;
+exports.wantsJson = wantsJson;
+exports.requireArg = requireArg;
+exports.maskSecret = maskSecret;
+const backend_1 = require("@atlasauth/backend");
+const args_1 = require("../args");
+const errors_1 = require("../errors");
+/**
+ * Resolve which credential to use, with env overrides winning over the stored
+ * profile — the same precedence `auth0-cli` and most cloud CLIs use, so a CI
+ * job can set `ATLAS_SECRET_KEY` without a `login` step. Throws a clean error
+ * (not a stack) when nothing supplies a key.
+ */
+function resolveAuth(ctx, values) {
+    const file = ctx.config.load();
+    const profile = (0, args_1.str)(values, 'profile') || file.active_profile || 'default';
+    const stored = file.profiles[profile];
+    const envKey = ctx.env.ATLAS_SECRET_KEY?.trim();
+    const secretKey = envKey || stored?.secret_key;
+    if (!secretKey) {
+        throw new errors_1.CliError(`Not logged in (profile '${profile}'). Run 'atlas login'` +
+            ((0, args_1.str)(values, 'profile') ? ` --profile ${profile}` : '') +
+            ' or set ATLAS_SECRET_KEY.');
+    }
+    const envUrl = ctx.env.ATLAS_API_URL?.trim();
+    const apiUrl = envUrl || stored?.api_url || backend_1.DEFAULT_API_URL;
+    return {
+        profile,
+        apiUrl,
+        secretKey,
+        keySource: envKey ? 'env' : 'config',
+        urlSource: envUrl ? 'env' : stored?.api_url ? 'config' : 'default',
+    };
+}
+/** Resolve the credential and build the Backend API client bound to it. */
+function requireClient(ctx, values) {
+    const auth = resolveAuth(ctx, values);
+    return { client: ctx.makeClient({ secretKey: auth.secretKey, apiUrl: auth.apiUrl }), auth };
+}
+/** True when `--json` was passed. */
+function wantsJson(values) {
+    return values.json === true;
+}
+/** The first positional after the resource word — e.g. an id for `users get <id>`. */
+function requireArg(positionals, index, name) {
+    const value = positionals[index];
+    if (!value)
+        throw new errors_1.CliError(`Missing required argument: <${name}>.`);
+    return value;
+}
+/** Mask a secret for display: keep the `sk_live_`-style prefix and the last 4. */
+function maskSecret(key) {
+    if (key.length <= 12)
+        return '****';
+    return `${key.slice(0, 8)}…${key.slice(-4)}`;
+}
+//# sourceMappingURL=shared.js.map

package/dist/commands/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/commands/shared.ts"],"names":[],"mappings":";;AAwBA,kCAyBC;AAGD,sCAMC;AAGD,8BAEC;AAGD,gCAIC;AAGD,gCAGC;AA5ED,gDAAqD;AACrD,kCAA2C;AAE3C,sCAAqC;AAerC;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,GAAe,EAAE,MAAc;IACzD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,SAAS,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,IAAI,MAAM,EAAE,UAAU,CAAC;IAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,iBAAQ,CAChB,2BAA2B,OAAO,uBAAuB;YACvD,CAAC,IAAA,UAAG,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,2BAA2B,CAC9B,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,MAAM,EAAE,OAAO,IAAI,yBAAe,CAAC;IAE5D,OAAO;QACL,OAAO;QACP,MAAM;QACN,SAAS;QACT,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QACpC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KACnE,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAgB,aAAa,CAAC,GAAe,EAAE,MAAc;IAI3D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;AAC9F,CAAC;AAED,qCAAqC;AACrC,SAAgB,SAAS,CAAC,MAAc;IACtC,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;AAC9B,CAAC;AAED,sFAAsF;AACtF,SAAgB,UAAU,CAAC,WAAqB,EAAE,KAAa,EAAE,IAAY;IAC3E,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,iBAAQ,CAAC,+BAA+B,IAAI,IAAI,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAClF,SAAgB,UAAU,CAAC,GAAW;IACpC,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IACpC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC"}

package/dist/commands/users.d.ts

@@ -0,0 +1,4 @@
+import { type ParsedArgs } from '../args';
+import type { RunContext } from '../context';
+/** `atlas users <list|get|create|delete>` — maps 1:1 onto `client.users.*`. */
+export declare function users(ctx: RunContext, args: ParsedArgs): Promise<number>;

package/dist/commands/users.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.users = users;
+const args_1 = require("../args");
+const errors_1 = require("../errors");
+const output_1 = require("../output");
+const shared_1 = require("./shared");
+/** Columns for the human `users list` table — User carries no email inline. */
+const COLUMNS = [
+    { header: 'ID', get: (u) => u.id },
+    { header: 'USERNAME', get: (u) => u.username },
+    { header: 'NAME', get: (u) => [u.first_name, u.last_name].filter(Boolean).join(' ') },
+    { header: 'BANNED', get: (u) => u.banned },
+    { header: 'CREATED', get: (u) => (0, output_1.fmtTime)(u.created_at) },
+];
+/** `atlas users <list|get|create|delete>` — maps 1:1 onto `client.users.*`. */
+async function users(ctx, args) {
+    const sub = args.positionals[1];
+    const json = (0, shared_1.wantsJson)(args.values);
+    switch (sub) {
+        case 'list': {
+            const { client } = (0, shared_1.requireClient)(ctx, args.values);
+            // users.list is cursor-paginated: { data, has_more, next_cursor }.
+            const page = await client.users.list({
+                limit: (0, args_1.limit)(args.values),
+                starting_after: (0, args_1.str)(args.values, 'starting-after'),
+            });
+            (0, output_1.printList)(ctx.io, { json, columns: COLUMNS }, page);
+            return 0;
+        }
+        case 'get': {
+            const id = (0, shared_1.requireArg)(args.positionals, 2, 'user-id');
+            const { client } = (0, shared_1.requireClient)(ctx, args.values);
+            const user = await client.users.get(id);
+            if (json)
+                (0, output_1.printJson)(ctx.io, user);
+            else
+                ctx.io.out(renderUser(user));
+            return 0;
+        }
+        case 'create': {
+            const email = (0, args_1.str)(args.values, 'email');
+            if (!email)
+                throw new errors_1.CliError("users create requires --email <address>.");
+            const { client } = (0, shared_1.requireClient)(ctx, args.values);
+            const user = await client.users.create({
+                email_address: email,
+                first_name: (0, args_1.str)(args.values, 'first-name'),
+                last_name: (0, args_1.str)(args.values, 'last-name'),
+                password: (0, args_1.str)(args.values, 'password'),
+            });
+            if (json)
+                (0, output_1.printJson)(ctx.io, user);
+            else
+                ctx.io.out(`Created user ${user.id}.`);
+            return 0;
+        }
+        case 'delete': {
+            const id = (0, shared_1.requireArg)(args.positionals, 2, 'user-id');
+            const { client } = (0, shared_1.requireClient)(ctx, args.values);
+            const result = await client.users.delete(id);
+            if (json)
+                (0, output_1.printJson)(ctx.io, result);
+            else
+                ctx.io.out(`Deleted user ${result.id}.`);
+            return 0;
+        }
+        default:
+            throw new errors_1.CliError(sub
+                ? `Unknown subcommand 'users ${sub}'. Try: list, get, create, delete.`
+                : "users needs a subcommand: list, get, create, delete.");
+    }
+}
+/** A single user as a compact key/value block for the non-JSON `get`. */
+function renderUser(u) {
+    return [
+        `ID:         ${u.id}`,
+        `Username:   ${u.username ?? ''}`,
+        `Name:       ${[u.first_name, u.last_name].filter(Boolean).join(' ')}`,
+        `Banned:     ${u.banned}`,
+        `Locked:     ${u.locked}`,
+        `MFA:        ${u.mfa_enabled}`,
+        `Last sign-in: ${(0, output_1.fmtTime)(u.last_sign_in_at)}`,
+        `Created:    ${(0, output_1.fmtTime)(u.created_at)}`,
+    ].join('\n');
+}
+//# sourceMappingURL=users.js.map

package/dist/commands/users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/commands/users.ts"],"names":[],"mappings":";;AAiBA,sBAwDC;AAxED,kCAAsD;AAEtD,sCAAqC;AACrC,sCAAuE;AACvE,qCAAgE;AAEhE,+EAA+E;AAC/E,MAAM,OAAO,GAAmB;IAC9B,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;IAClC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;IACrF,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE;IAC1C,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE;CACzD,CAAC;AAEF,+EAA+E;AACxE,KAAK,UAAU,KAAK,CAAC,GAAe,EAAE,IAAgB;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEpC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,mEAAmE;YACnE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBACnC,KAAK,EAAE,IAAA,YAAK,EAAC,IAAI,CAAC,MAAM,CAAC;gBACzB,cAAc,EAAE,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC;aACnD,CAAC,CAAC;YACH,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YACtD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxC,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;;gBAC7B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,iBAAQ,CAAC,0CAA0C,CAAC,CAAC;YAC3E,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;gBACrC,aAAa,EAAE,KAAK;gBACpB,UAAU,EAAE,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;gBAC1C,SAAS,EAAE,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;gBACxC,QAAQ,EAAE,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC;aACvC,CAAC,CAAC;YACH,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;;gBAC7B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5C,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YACtD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7C,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;;gBAC/B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC;QACX,CAAC;QAED;YACE,MAAM,IAAI,iBAAQ,CAChB,GAAG;gBACD,CAAC,CAAC,6BAA6B,GAAG,oCAAoC;gBACtE,CAAC,CAAC,sDAAsD,CAC3D,CAAC;IACN,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU,CAAC,CAAO;IACzB,OAAO;QACL,eAAe,CAAC,CAAC,EAAE,EAAE;QACrB,eAAe,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE;QACjC,eAAe,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACtE,eAAe,CAAC,CAAC,MAAM,EAAE;QACzB,eAAe,CAAC,CAAC,MAAM,EAAE;QACzB,eAAe,CAAC,CAAC,WAAW,EAAE;QAC9B,iBAAiB,IAAA,gBAAO,EAAC,CAAC,CAAC,eAAe,CAAC,EAAE;QAC7C,eAAe,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE;KACvC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/commands/webhooks.d.ts

@@ -0,0 +1,4 @@
+import type { ParsedArgs } from '../args';
+import type { RunContext } from '../context';
+/** `atlas webhooks list` — the one read `client.webhooks` exposes for endpoints. */
+export declare function webhooks(ctx: RunContext, args: ParsedArgs): Promise<number>;

package/dist/commands/webhooks.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.webhooks = webhooks;
+const errors_1 = require("../errors");
+const output_1 = require("../output");
+const shared_1 = require("./shared");
+const COLUMNS = [
+    { header: 'ID', get: (w) => w.id },
+    { header: 'URL', get: (w) => w.url },
+    { header: 'ACTIVE', get: (w) => w.active },
+    { header: 'EVENTS', get: (w) => w.enabled_events },
+    { header: 'CREATED', get: (w) => (0, output_1.fmtTime)(w.created_at) },
+];
+/** `atlas webhooks list` — the one read `client.webhooks` exposes for endpoints. */
+async function webhooks(ctx, args) {
+    const sub = args.positionals[1];
+    const json = (0, shared_1.wantsJson)(args.values);
+    switch (sub) {
+        case 'list': {
+            const { client } = (0, shared_1.requireClient)(ctx, args.values);
+            const page = await client.webhooks.endpoints.list();
+            if (json)
+                (0, output_1.printJson)(ctx.io, page);
+            else
+                ctx.io.out((0, output_1.renderTable)(COLUMNS, page.data));
+            return 0;
+        }
+        default:
+            throw new errors_1.CliError(sub
+                ? `Unknown subcommand 'webhooks ${sub}'. Try: list.`
+                : 'webhooks needs a subcommand: list.');
+    }
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/commands/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/commands/webhooks.ts"],"names":[],"mappings":";;AAgBA,4BAoBC;AAjCD,sCAAqC;AACrC,sCAAyE;AACzE,qCAAoD;AAEpD,MAAM,OAAO,GAA8B;IACzC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;IAClC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;IACpC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE;IAC1C,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE;IAClD,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE;CACzD,CAAC;AAEF,oFAAoF;AAC7E,KAAK,UAAU,QAAQ,CAAC,GAAe,EAAE,IAAgB;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEpC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;;gBAC7B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,oBAAW,EAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC;QACX,CAAC;QAED;YACE,MAAM,IAAI,iBAAQ,CAChB,GAAG;gBACD,CAAC,CAAC,gCAAgC,GAAG,eAAe;gBACpD,CAAC,CAAC,oCAAoC,CACzC,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,48 @@
+/**
+ * One stored instance credential. The secret key sits on disk in plaintext —
+ * the same trade-off `auth0-cli` and the `gh` CLI make: a long-lived token in a
+ * 0600 file under the user's home, not an OS keychain. {@link FileConfigStore}
+ * enforces the 0600 so another user on the box cannot read it.
+ */
+export interface Profile {
+    api_url: string;
+    secret_key: string;
+}
+/** The whole config file: named profiles plus which one is active. */
+export interface ConfigFile {
+    active_profile?: string;
+    profiles: Record<string, Profile>;
+}
+/**
+ * The persistence seam. Commands depend on this interface, never on `fs`, so a
+ * test injects a store backed by a temp path (or memory) and the real
+ * `~/.config/...` file is never touched.
+ */
+export interface ConfigStore {
+    /** Where this store reads/writes — surfaced for `login`'s success message. */
+    readonly path: string;
+    load(): ConfigFile;
+    save(config: ConfigFile): void;
+}
+/**
+ * Resolve the default config path: `$XDG_CONFIG_HOME/atlasauth/config.json`,
+ * falling back to `~/.config/atlasauth/config.json`. Honoring XDG keeps the CLI
+ * a good citizen on Linux while still working on macOS, where `~/.config` is
+ * the de-facto convention CLIs use.
+ */
+export declare function defaultConfigPath(env?: NodeJS.ProcessEnv): string;
+/** The real store: a JSON file written with 0600 perms and a 0700 parent dir. */
+export declare class FileConfigStore implements ConfigStore {
+    readonly path: string;
+    constructor(path: string);
+    load(): ConfigFile;
+    save(config: ConfigFile): void;
+}
+/** An in-memory store for tests that still want to exercise the resolve logic. */
+export declare class MemoryConfigStore implements ConfigStore {
+    readonly path = "<memory>";
+    private data;
+    constructor(initial?: ConfigFile);
+    load(): ConfigFile;
+    save(config: ConfigFile): void;
+}

package/dist/config.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryConfigStore = exports.FileConfigStore = void 0;
+exports.defaultConfigPath = defaultConfigPath;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const errors_1 = require("./errors");
+const EMPTY = { profiles: {} };
+/**
+ * Resolve the default config path: `$XDG_CONFIG_HOME/atlasauth/config.json`,
+ * falling back to `~/.config/atlasauth/config.json`. Honoring XDG keeps the CLI
+ * a good citizen on Linux while still working on macOS, where `~/.config` is
+ * the de-facto convention CLIs use.
+ */
+function defaultConfigPath(env = process.env) {
+    const base = env.XDG_CONFIG_HOME?.trim() || (0, node_path_1.join)((0, node_os_1.homedir)(), '.config');
+    return (0, node_path_1.join)(base, 'atlasauth', 'config.json');
+}
+/** The real store: a JSON file written with 0600 perms and a 0700 parent dir. */
+class FileConfigStore {
+    path;
+    constructor(path) {
+        this.path = path;
+    }
+    load() {
+        let text;
+        try {
+            text = (0, node_fs_1.readFileSync)(this.path, 'utf8');
+        }
+        catch {
+            // Missing file is the first-run state, not an error.
+            return { profiles: {} };
+        }
+        try {
+            const parsed = JSON.parse(text);
+            // Guard against a hand-corrupted file so every later `.profiles[...]` is safe.
+            return { active_profile: parsed.active_profile, profiles: parsed.profiles ?? {} };
+        }
+        catch {
+            throw new errors_1.CliError(`Config file at ${this.path} is not valid JSON. Fix or remove it, then run 'atlas login' again.`);
+        }
+    }
+    save(config) {
+        (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(this.path), { recursive: true, mode: 0o700 });
+        // Write THEN chmod: `mode` on writeFile is masked by umask and skipped
+        // entirely if the file already exists, so an explicit chmod is the only
+        // way to guarantee 0600 on every save.
+        (0, node_fs_1.writeFileSync)(this.path, JSON.stringify(config, null, 2) + '\n', { mode: 0o600 });
+        (0, node_fs_1.chmodSync)(this.path, 0o600);
+    }
+}
+exports.FileConfigStore = FileConfigStore;
+/** An in-memory store for tests that still want to exercise the resolve logic. */
+class MemoryConfigStore {
+    path = '<memory>';
+    data;
+    constructor(initial = EMPTY) {
+        this.data = structuredClone(initial);
+    }
+    load() {
+        return structuredClone(this.data);
+    }
+    save(config) {
+        this.data = structuredClone(config);
+    }
+}
+exports.MemoryConfigStore = MemoryConfigStore;
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;AA0CA,8CAGC;AA7CD,qCAA4E;AAC5E,qCAAkC;AAClC,yCAA0C;AAC1C,qCAAoC;AA+BpC,MAAM,KAAK,GAAe,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAE3C;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,SAAS,CAAC,CAAC;IACvE,OAAO,IAAA,gBAAI,EAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;AAChD,CAAC;AAED,iFAAiF;AACjF,MAAa,eAAe;IACL;IAArB,YAAqB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAErC,IAAI;QACF,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;YACrD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;YAC9C,+EAA+E;YAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAQ,CAChB,kBAAkB,IAAI,CAAC,IAAI,qEAAqE,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAkB;QACrB,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,uEAAuE;QACvE,wEAAwE;QACxE,uCAAuC;QACvC,IAAA,uBAAa,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,IAAA,mBAAS,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;CACF;AA9BD,0CA8BC;AAED,kFAAkF;AAClF,MAAa,iBAAiB;IACnB,IAAI,GAAG,UAAU,CAAC;IACnB,IAAI,CAAa;IACzB,YAAY,UAAsB,KAAK;QACrC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,IAAI;QACF,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,MAAkB;QACrB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;CACF;AAZD,8CAYC"}

package/dist/context.d.ts

@@ -0,0 +1,35 @@
+import { type AtlasClient } from '@atlasauth/backend';
+import { type ConfigStore } from './config';
+import { type IO } from './io';
+import { type Prompter } from './prompt';
+/**
+ * The exact slice of the Backend API client this CLI drives. Narrowed from the
+ * full {@link AtlasClient} on purpose: it documents — and the typechecker
+ * enforces — that the command set maps only onto namespaces that really exist,
+ * and it keeps the fake a test injects small (five namespaces, not forty).
+ */
+export type ManagementClient = Pick<AtlasClient, 'users' | 'organizations' | 'apiKeys' | 'webhooks' | 'sessions'>;
+/**
+ * Everything a command touches the outside world through, in one injectable
+ * bag. Production wires the real IO/config/prompt/client; every test builds
+ * this with fakes so a handler runs with no network, no TTY and no real
+ * `~/.config` file.
+ */
+export interface RunContext {
+    io: IO;
+    /** Process environment — read for `ATLAS_SECRET_KEY` / `ATLAS_API_URL`. */
+    env: NodeJS.ProcessEnv;
+    config: ConfigStore;
+    prompt: Prompter;
+    /** Builds the Backend API client from a resolved credential. */
+    makeClient: (opts: {
+        secretKey: string;
+        apiUrl: string;
+    }) => ManagementClient;
+}
+/**
+ * The production context, with any piece overridable. Tests call this with a
+ * `config` pointed at a temp path and a `makeClient` returning a stub, so the
+ * same `run()` path is exercised end to end without side effects.
+ */
+export declare function defaultContext(overrides?: Partial<RunContext>): RunContext;

package/dist/context.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultContext = defaultContext;
+const backend_1 = require("@atlasauth/backend");
+const config_1 = require("./config");
+const io_1 = require("./io");
+const prompt_1 = require("./prompt");
+/**
+ * The production context, with any piece overridable. Tests call this with a
+ * `config` pointed at a temp path and a `makeClient` returning a stub, so the
+ * same `run()` path is exercised end to end without side effects.
+ */
+function defaultContext(overrides = {}) {
+    return {
+        io: (0, io_1.defaultIO)(),
+        env: process.env,
+        config: new config_1.FileConfigStore((0, config_1.defaultConfigPath)()),
+        prompt: (0, prompt_1.defaultPrompter)(),
+        makeClient: ({ secretKey, apiUrl }) => (0, backend_1.createAtlasClient)({ secretKey, apiUrl }),
+        ...overrides,
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":";;AAqCA,wCASC;AA9CD,gDAAyE;AACzE,qCAAgF;AAChF,6BAA0C;AAC1C,qCAA0D;AA6B1D;;;;GAIG;AACH,SAAgB,cAAc,CAAC,YAAiC,EAAE;IAChE,OAAO;QACL,EAAE,EAAE,IAAA,cAAS,GAAE;QACf,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,wBAAe,CAAC,IAAA,0BAAiB,GAAE,CAAC;QAChD,MAAM,EAAE,IAAA,wBAAe,GAAE;QACzB,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAA,2BAAiB,EAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAC/E,GAAG,SAAS;KACb,CAAC;AACJ,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The one error a command handler throws to abort with a clean, user-facing
+ * message and a chosen exit code. {@link run} catches it, prints `message` to
+ * stderr (no stack), and returns `exitCode` — so a bad flag or a missing key
+ * never dumps a stack trace at the terminal the way an uncaught throw would.
+ *
+ * API failures are NOT CliErrors: they arrive as `AtlasApiError` from
+ * `@atlasauth/backend` and {@link run} formats those separately so the stable
+ * error `code` and HTTP status survive to the user.
+ */
+export declare class CliError extends Error {
+    readonly name = "CliError";
+    readonly exitCode: number;
+    constructor(message: string, exitCode?: number);
+}

package/dist/errors.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CliError = void 0;
+/**
+ * The one error a command handler throws to abort with a clean, user-facing
+ * message and a chosen exit code. {@link run} catches it, prints `message` to
+ * stderr (no stack), and returns `exitCode` — so a bad flag or a missing key
+ * never dumps a stack trace at the terminal the way an uncaught throw would.
+ *
+ * API failures are NOT CliErrors: they arrive as `AtlasApiError` from
+ * `@atlasauth/backend` and {@link run} formats those separately so the stable
+ * error `code` and HTTP status survive to the user.
+ */
+class CliError extends Error {
+    name = 'CliError';
+    exitCode;
+    constructor(message, exitCode = 1) {
+        super(message);
+        this.exitCode = exitCode;
+        // Keep `instanceof CliError` working under down-level compile targets.
+        Object.setPrototypeOf(this, CliError.prototype);
+    }
+}
+exports.CliError = CliError;
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;GASG;AACH,MAAa,QAAS,SAAQ,KAAK;IACf,IAAI,GAAG,UAAU,CAAC;IAC3B,QAAQ,CAAS;IAE1B,YAAY,OAAe,EAAE,QAAQ,GAAG,CAAC;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,uEAAuE;QACvE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF;AAVD,4BAUC"}

package/dist/help.d.ts

@@ -0,0 +1,8 @@
+/**
+ * All help text lives here as plain strings — the CLI's "docs" surface. Kept
+ * out of the handlers so the dispatch code stays about control flow and the
+ * copy can be read (and kept consistent) in one place.
+ */
+export declare const TOP_HELP = "atlas \u2014 manage an Atlas instance from the terminal\n\nUsage: atlas <command> [subcommand] [arguments] [options]\n\nCommands:\n  login                      Authenticate and store a profile credential\n  logout                     Remove a stored profile credential\n  whoami                     Show the active profile and instance\n  users list|get|create|delete\n  orgs list|get|members\n  api-keys list|create|revoke\n  webhooks list\n  sessions revoke\n\nGlobal options:\n  --profile <name>           Use a named profile (default: active, else \"default\")\n  --json                     Emit raw JSON instead of a human table\n  --limit <n>                Page size for list commands that paginate\n  --starting-after <cursor>  Pagination cursor (from a prior page's hint)\n  -h, --help                 Show this help, or help for a command\n  -v, --version              Print the version\n\nEnvironment overrides:\n  ATLAS_SECRET_KEY           Secret key to use instead of the stored one\n  ATLAS_API_URL              API URL to use instead of the stored one\n\nRun 'atlas <command> --help' for command-specific help.";
+/** Per-command help, keyed by the resource word. */
+export declare const COMMAND_HELP: Record<string, string>;

package/dist/help.js

@@ -0,0 +1,79 @@
+"use strict";
+/**
+ * All help text lives here as plain strings — the CLI's "docs" surface. Kept
+ * out of the handlers so the dispatch code stays about control flow and the
+ * copy can be read (and kept consistent) in one place.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.COMMAND_HELP = exports.TOP_HELP = void 0;
+exports.TOP_HELP = `atlas — manage an Atlas instance from the terminal
+
+Usage: atlas <command> [subcommand] [arguments] [options]
+
+Commands:
+  login                      Authenticate and store a profile credential
+  logout                     Remove a stored profile credential
+  whoami                     Show the active profile and instance
+  users list|get|create|delete
+  orgs list|get|members
+  api-keys list|create|revoke
+  webhooks list
+  sessions revoke
+
+Global options:
+  --profile <name>           Use a named profile (default: active, else "default")
+  --json                     Emit raw JSON instead of a human table
+  --limit <n>                Page size for list commands that paginate
+  --starting-after <cursor>  Pagination cursor (from a prior page's hint)
+  -h, --help                 Show this help, or help for a command
+  -v, --version              Print the version
+
+Environment overrides:
+  ATLAS_SECRET_KEY           Secret key to use instead of the stored one
+  ATLAS_API_URL              API URL to use instead of the stored one
+
+Run 'atlas <command> --help' for command-specific help.`;
+/** Per-command help, keyed by the resource word. */
+exports.COMMAND_HELP = {
+    login: `atlas login — authenticate and store a profile credential
+
+Usage: atlas login [--profile <name>] [--url <api-url>] [--secret-key <sk_...>]
+
+Prompts for an API URL and a secret key, validates the key with one Backend
+call, then stores it (0600) under the profile. --url / --secret-key skip the
+prompts for non-interactive setup.`,
+    logout: `atlas logout — remove a stored profile credential
+
+Usage: atlas logout [--profile <name>]`,
+    whoami: `atlas whoami — show the active profile and instance
+
+Usage: atlas whoami [--profile <name>] [--json]`,
+    users: `atlas users — manage users
+
+Usage:
+  atlas users list [--limit <n>] [--starting-after <cursor>] [--json]
+  atlas users get <user-id> [--json]
+  atlas users create --email <address> [--first-name <n>] [--last-name <n>] [--password <p>] [--json]
+  atlas users delete <user-id> [--json]`,
+    orgs: `atlas orgs — manage organizations
+
+Usage:
+  atlas orgs list [--limit <n>] [--starting-after <cursor>] [--json]
+  atlas orgs get <org-id> [--json]
+  atlas orgs members <org-id> [--json]`,
+    'api-keys': `atlas api-keys — manage end-user API keys
+
+Usage:
+  atlas api-keys list [--subject-type <user|organization>] [--subject-id <id>] [--json]
+  atlas api-keys create --subject-type <user|organization> --subject-id <id> [--name <n>] [--json]
+  atlas api-keys revoke <api-key-id> [--json]`,
+    webhooks: `atlas webhooks — inspect webhook endpoints
+
+Usage:
+  atlas webhooks list [--json]`,
+    sessions: `atlas sessions — manage sessions
+
+Usage:
+  atlas sessions revoke <session-id> [--json]`,
+};
+//# sourceMappingURL=help.js.map

package/dist/help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEU,QAAA,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;wDA0BgC,CAAC;AAEzD,oDAAoD;AACvC,QAAA,YAAY,GAA2B;IAClD,KAAK,EAAE;;;;;;mCAM0B;IAEjC,MAAM,EAAE;;uCAE6B;IAErC,MAAM,EAAE;;gDAEsC;IAE9C,KAAK,EAAE;;;;;;wCAM+B;IAEtC,IAAI,EAAE;;;;;uCAK+B;IAErC,UAAU,EAAE;;;;;8CAKgC;IAE5C,QAAQ,EAAE;;;+BAGmB;IAE7B,QAAQ,EAAE;;;8CAGkC;CAC7C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Library surface of `@atlasauth/cli`. The package ships a bin (`atlas`), but
+ * exporting the pieces lets the handlers be unit-tested with injected deps and
+ * lets another tool embed the CLI (e.g. `create-atlas-app`) without spawning a
+ * child process.
+ */
+export { run, type Handler } from './run';
+export { defaultContext, type RunContext, type ManagementClient } from './context';
+export { CliError } from './errors';
+export { defaultIO, captureIO, type IO, type CaptureIO } from './io';
+export { FileConfigStore, MemoryConfigStore, defaultConfigPath, type ConfigStore, type ConfigFile, type Profile, } from './config';
+export { defaultPrompter, type Prompter } from './prompt';
+export { getVersion } from './version';
+export { login, logout, whoami } from './commands/auth';
+export { users } from './commands/users';
+export { orgs } from './commands/orgs';
+export { apiKeys } from './commands/api-keys';
+export { webhooks } from './commands/webhooks';
+export { sessions } from './commands/sessions';

package/dist/index.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessions = exports.webhooks = exports.apiKeys = exports.orgs = exports.users = exports.whoami = exports.logout = exports.login = exports.getVersion = exports.defaultPrompter = exports.defaultConfigPath = exports.MemoryConfigStore = exports.FileConfigStore = exports.captureIO = exports.defaultIO = exports.CliError = exports.defaultContext = exports.run = void 0;
+/**
+ * Library surface of `@atlasauth/cli`. The package ships a bin (`atlas`), but
+ * exporting the pieces lets the handlers be unit-tested with injected deps and
+ * lets another tool embed the CLI (e.g. `create-atlas-app`) without spawning a
+ * child process.
+ */
+var run_1 = require("./run");
+Object.defineProperty(exports, "run", { enumerable: true, get: function () { return run_1.run; } });
+var context_1 = require("./context");
+Object.defineProperty(exports, "defaultContext", { enumerable: true, get: function () { return context_1.defaultContext; } });
+var errors_1 = require("./errors");
+Object.defineProperty(exports, "CliError", { enumerable: true, get: function () { return errors_1.CliError; } });
+var io_1 = require("./io");
+Object.defineProperty(exports, "defaultIO", { enumerable: true, get: function () { return io_1.defaultIO; } });
+Object.defineProperty(exports, "captureIO", { enumerable: true, get: function () { return io_1.captureIO; } });
+var config_1 = require("./config");
+Object.defineProperty(exports, "FileConfigStore", { enumerable: true, get: function () { return config_1.FileConfigStore; } });
+Object.defineProperty(exports, "MemoryConfigStore", { enumerable: true, get: function () { return config_1.MemoryConfigStore; } });
+Object.defineProperty(exports, "defaultConfigPath", { enumerable: true, get: function () { return config_1.defaultConfigPath; } });
+var prompt_1 = require("./prompt");
+Object.defineProperty(exports, "defaultPrompter", { enumerable: true, get: function () { return prompt_1.defaultPrompter; } });
+var version_1 = require("./version");
+Object.defineProperty(exports, "getVersion", { enumerable: true, get: function () { return version_1.getVersion; } });
+// The individual command handlers, exported for direct testing/embedding.
+var auth_1 = require("./commands/auth");
+Object.defineProperty(exports, "login", { enumerable: true, get: function () { return auth_1.login; } });
+Object.defineProperty(exports, "logout", { enumerable: true, get: function () { return auth_1.logout; } });
+Object.defineProperty(exports, "whoami", { enumerable: true, get: function () { return auth_1.whoami; } });
+var users_1 = require("./commands/users");
+Object.defineProperty(exports, "users", { enumerable: true, get: function () { return users_1.users; } });
+var orgs_1 = require("./commands/orgs");
+Object.defineProperty(exports, "orgs", { enumerable: true, get: function () { return orgs_1.orgs; } });
+var api_keys_1 = require("./commands/api-keys");
+Object.defineProperty(exports, "apiKeys", { enumerable: true, get: function () { return api_keys_1.apiKeys; } });
+var webhooks_1 = require("./commands/webhooks");
+Object.defineProperty(exports, "webhooks", { enumerable: true, get: function () { return webhooks_1.webhooks; } });
+var sessions_1 = require("./commands/sessions");
+Object.defineProperty(exports, "sessions", { enumerable: true, get: function () { return sessions_1.sessions; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACH,6BAA0C;AAAjC,0FAAA,GAAG,OAAA;AACZ,qCAAmF;AAA1E,yGAAA,cAAc,OAAA;AACvB,mCAAoC;AAA3B,kGAAA,QAAQ,OAAA;AACjB,2BAAqE;AAA5D,+FAAA,SAAS,OAAA;AAAE,+FAAA,SAAS,OAAA;AAC7B,mCAOkB;AANhB,yGAAA,eAAe,OAAA;AACf,2GAAA,iBAAiB,OAAA;AACjB,2GAAA,iBAAiB,OAAA;AAKnB,mCAA0D;AAAjD,yGAAA,eAAe,OAAA;AACxB,qCAAuC;AAA9B,qGAAA,UAAU,OAAA;AAEnB,0EAA0E;AAC1E,wCAAwD;AAA/C,6FAAA,KAAK,OAAA;AAAE,8FAAA,MAAM,OAAA;AAAE,8FAAA,MAAM,OAAA;AAC9B,0CAAyC;AAAhC,8FAAA,KAAK,OAAA;AACd,wCAAuC;AAA9B,4FAAA,IAAI,OAAA;AACb,gDAA8C;AAArC,mGAAA,OAAO,OAAA;AAChB,gDAA+C;AAAtC,oGAAA,QAAQ,OAAA;AACjB,gDAA+C;AAAtC,oGAAA,QAAQ,OAAA"}

package/dist/io.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The two sinks every command writes through, named so tests can capture
+ * output instead of spying on `console`. `out` is the data channel (tables,
+ * JSON, the answer a script would pipe); `err` is for diagnostics, prompts'
+ * echoes and error messages — exactly the stdout/stderr split a `--json`
+ * consumer relies on to parse stdout cleanly.
+ */
+export interface IO {
+    out(text: string): void;
+    err(text: string): void;
+}
+/** The real IO: a trailing newline is added so callers pass bare lines. */
+export declare function defaultIO(stdout?: NodeJS.WriteStream, stderr?: NodeJS.WriteStream): IO;
+/** An in-memory IO for tests, exposing the captured lines plus joined views. */
+export interface CaptureIO extends IO {
+    readonly outLines: string[];
+    readonly errLines: string[];
+    stdout(): string;
+    stderr(): string;
+}
+export declare function captureIO(): CaptureIO;