@axtrabase/cli 0.1.0

package/README.md

@@ -0,0 +1,130 @@
+# @axtrabase/cli
+
+The `axtrabase` CLI lets a human or a coding agent inspect an AxtraBase
+project — schema, permissions, environment — and build against it through
+`@axtrabase/sdk` or the REST API, without ever touching Dataverse or
+Microsoft OAuth directly.
+
+## Install
+
+```bash
+npm install -g @axtrabase/cli
+# or, without installing:
+npx @axtrabase/cli whoami
+```
+
+## Authenticate
+
+```bash
+axtrabase login
+```
+
+This is a **control-plane credential, not a Dataverse or Microsoft
+credential** — the CLI never asks for, stores, or uses Dataverse/Entra
+secrets. `login` opens (or prints) a dashboard URL where you generate a CLI
+token, shown exactly once; paste it back into the terminal prompt (input is
+masked). The token is stored at `~/.config/axtrabase/credentials.json` with
+`0600` permissions.
+
+```bash
+axtrabase logout            # remove the local credential only
+axtrabase logout --revoke   # also revoke the token on AxtraBase
+```
+
+### Non-interactive / CI use
+
+Set `AXTRABASE_CLI_TOKEN` and skip `login` entirely — every command reads it
+first, before the local credential file, and never persists or logs it.
+Useful for CI and for handing a coding agent a scoped, disposable token.
+
+```bash
+AXTRABASE_CLI_TOKEN=axcli_... axtrabase context --agent
+```
+
+## Select an organisation and project
+
+```bash
+axtrabase organisations list     # alias: orgs
+axtrabase orgs use axtraxia
+
+axtrabase projects list
+axtrabase projects use hr-portal
+```
+
+Selection persists to `~/.config/axtrabase/config.json` (non-secret — base
+URL, active org/project). Every project-scoped command after this is
+concise:
+
+```bash
+axtrabase tables list
+```
+
+## Commands
+
+| Command                                              | What it does                                                                                 |
+| ---------------------------------------------------- | -------------------------------------------------------------------------------------------- |
+| `login` / `logout`                                   | Authenticate/de-authenticate the CLI.                                                        |
+| `whoami`                                             | Signed-in user, organisation, active API.                                                    |
+| `organisations list` / `orgs use <org>`              | Discover and select an organisation.                                                         |
+| `projects list` / `show <project>` / `use <project>` | Discover, inspect, and select a project.                                                     |
+| `connection status` / `verify`                       | The active project's Dataverse connection status; `verify` re-runs the live readiness check. |
+| `tables list` / `describe <table>`                   | The Dataverse table catalog, and one table's full column/lookup metadata.                    |
+| `context [--json\|--agent]`                          | The single most useful command — see below.                                                  |
+| `schema export --format json\|typescript`            | Export table metadata, or generate TypeScript interfaces from it.                            |
+| `permissions list`                                   | Table permission grants (read-only in v1).                                                   |
+| `keys list` / `create` / `revoke`                    | API key metadata (never the raw key after creation), creation, revocation.                   |
+| `requests list` / `get <request-id>`                 | Data-plane request telemetry — the debugging loop.                                           |
+| `config list` / `get` / `set` / `unset`              | Local, non-secret CLI settings.                                                              |
+| `docs` / `openapi`                                   | Open developer docs / print the OpenAPI spec.                                                |
+| `status`                                             | Fast "am I ready to work" summary — auth, org, project, connection, table/key counts.        |
+
+Every command supports `-h`/`--help`.
+
+## `context` — the one command to start with
+
+```bash
+axtrabase context
+axtrabase context --json     # the full payload, machine-readable
+axtrabase context --agent    # compact, purpose-built for a coding agent
+```
+
+Human output: project, organisation, connection health, table counts,
+enabled tables (with per-key access if you pass `--api-key <id>`), whether
+a usable API key exists, and the SDK/REST entry points. `--agent` output
+includes an explicit `axtrabase.rules` array (use the SDK, not Dataverse;
+keep keys server-side; respect the `access` field; don't fabricate
+unresolved metadata).
+
+## Exit codes
+
+| Code | Meaning                                                        |
+| ---- | -------------------------------------------------------------- |
+| 0    | Success                                                        |
+| 1    | Generic failure                                                |
+| 2    | Authentication required (not logged in, revoked/expired token) |
+| 3    | Authorization denied                                           |
+| 4    | Not found                                                      |
+| 5    | Connection not ready                                           |
+| 6    | Invalid arguments (including "no active project selected")     |
+
+`--json` mode returns `{ "error": { "code", "message", "requestId"? } }` on
+failure and never mixes a printed error with exit code 0.
+
+## Environment variables
+
+| Variable                  | Purpose                                                                                |
+| ------------------------- | -------------------------------------------------------------------------------------- |
+| `AXTRABASE_CLI_TOKEN`     | Bypasses `login`/the local credential file. Never persisted or logged.                 |
+| `AXTRABASE_API_URL`       | Overrides the API origin (below saved config, above the production default).           |
+| `AXTRABASE_DASHBOARD_URL` | Overrides where `login` sends you to generate a token.                                 |
+| `AXTRABASE_PROJECT`       | Overrides the active project (below an explicit `--project` flag, above saved config). |
+| `AXTRABASE_CONFIG_DIR`    | Overrides `~/.config/axtrabase/` — mainly for tests/isolated environments.             |
+
+Precedence everywhere it applies: **explicit flag > environment variable >
+saved config > production default.**
+
+## Full documentation
+
+The complete command reference, agent integration guide, and error model
+live in [`docs/cli.md`](https://github.com/erdhem/axtrabase/blob/main/docs/cli.md)
+and [`docs/agents.md`](https://github.com/erdhem/axtrabase/blob/main/docs/agents.md).

package/dist/active-project.d.ts

@@ -0,0 +1,12 @@
+import type { ControlPlaneClient } from "./http/client.js";
+/**
+ * Every project-scoped command calls this first. Resolves --project flag >
+ * AXTRABASE_PROJECT > saved config (build brief §9/§26), then — since a
+ * value from any of those three sources may be a slug, not just an id
+ * saved by `projects use` — resolves a non-UUID value against the live
+ * project list before it's ever sent to a `:projectId` path param the
+ * server validates as a UUID. A clear, actionable error beats a confusing
+ * 404/400 deep inside a request (build brief §27).
+ */
+export declare function resolveActiveProjectId(client: ControlPlaneClient, flagValue?: string): Promise<string>;
+//# sourceMappingURL=active-project.d.ts.map

package/dist/active-project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-project.d.ts","sourceRoot":"","sources":["../src/active-project.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAI3D;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,kBAAkB,EAC1B,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAqBjB"}

package/dist/active-project.js

@@ -0,0 +1,27 @@
+import { resolveProjectId } from "./config/resolve.js";
+import { CliError } from "./http/errors.js";
+import { looksLikeUuid, resolveByIdOrSlug } from "./resolve-entity.js";
+/**
+ * Every project-scoped command calls this first. Resolves --project flag >
+ * AXTRABASE_PROJECT > saved config (build brief §9/§26), then — since a
+ * value from any of those three sources may be a slug, not just an id
+ * saved by `projects use` — resolves a non-UUID value against the live
+ * project list before it's ever sent to a `:projectId` path param the
+ * server validates as a UUID. A clear, actionable error beats a confusing
+ * 404/400 deep inside a request (build brief §27).
+ */
+export async function resolveActiveProjectId(client, flagValue) {
+    const projectId = resolveProjectId(flagValue);
+    if (!projectId) {
+        throw new CliError("AXTRA_CLI_NO_ACTIVE_PROJECT", "No active project.\n\nRun:\n  axtrabase projects list\n  axtrabase projects use <project>\n\nOr pass --project <id-or-slug> to this command.", { status: 0 });
+    }
+    if (looksLikeUuid(projectId))
+        return projectId;
+    const { data } = await client.get("/api/v1/projects");
+    const match = resolveByIdOrSlug(projectId, data);
+    if (!match) {
+        throw new CliError("AXTRA_CLI_NOT_FOUND", `No project matches "${projectId}" in the active organisation. Run \`axtrabase projects list\` to see what's available.`, { status: 0 });
+    }
+    return match.id;
+}
+//# sourceMappingURL=active-project.js.map

package/dist/active-project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-project.js","sourceRoot":"","sources":["../src/active-project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEvE;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAA0B,EAC1B,SAAkB;IAElB,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAChB,6BAA6B,EAC7B,8IAA8I,EAC9I,EAAE,MAAM,EAAE,CAAC,EAAE,CACd,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAE/C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAAmB,kBAAkB,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,uBAAuB,SAAS,wFAAwF,EACxH,EAAE,MAAM,EAAE,CAAC,EAAE,CACd,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,CAAC;AAClB,CAAC"}

package/dist/api-types.d.ts

@@ -0,0 +1,187 @@
+/**
+ * Response shapes this CLI reads from AxtraBase's control plane — kept in
+ * sync with apps/api's route handlers by hand (same "interim technical
+ * debt" tradeoff @axtrabase/openapi's hand-authored spec makes, see that
+ * package's top comment) rather than generated. Extend this file as later
+ * phases add commands; do not duplicate a shape already defined here.
+ */
+export interface MeResponse {
+    user: {
+        id: string;
+        name: string;
+        email: string;
+    };
+    organisation: {
+        id: string;
+        name: string;
+    };
+    platformRole: "AXTRABASE_ADMIN" | null;
+}
+export interface OrganisationSummary {
+    id: string;
+    name: string;
+    slug: string;
+    role: "owner" | "admin" | "member";
+}
+export interface ProjectSummary {
+    id: string;
+    name: string;
+    slug: string;
+    createdAt: string;
+}
+export interface DataverseConnectionResponse {
+    connectionId: string;
+    projectId: string;
+    mode: "axtrabase_managed" | "bring_your_own_app";
+    status: "PENDING" | "PROVISIONING" | "CONNECTED" | "DEGRADED" | "DISCONNECTED" | "REVOKED";
+    tenantId: string | null;
+    tenantDisplayName: string | null;
+    environmentUrl: string | null;
+    environmentId: string | null;
+    environmentDisplayName: string | null;
+    environmentType: string | null;
+    lastVerifiedAt: string | null;
+}
+export interface TableCatalogEntry {
+    logicalName: string;
+    entitySetName: string;
+    displayName: string;
+    isCustom: boolean;
+    primaryKey: string;
+    isEnabled: boolean;
+    permissions: {
+        read: boolean;
+        create: boolean;
+        update: boolean;
+        delete: boolean;
+    };
+    pendingDataverseSync: boolean;
+}
+export interface TableColumn {
+    logicalName: string;
+    schemaName: string | null;
+    displayName: string;
+    type: string;
+    rawAttributeType: string;
+    isPrimaryId: boolean;
+    isPrimaryName: boolean;
+    isRequired: boolean;
+    lookupTargets: string[] | null;
+}
+export interface TablePermissionRow {
+    apiKeyId: string;
+    apiKeyName: string;
+    apiKeyPrefix: string;
+    canRead: boolean;
+    canCreate: boolean;
+    canUpdate: boolean;
+    canDelete: boolean;
+}
+export interface TableMetadataResponse {
+    logicalName: string;
+    schemaName: string | null;
+    entitySetName: string;
+    displayName: string;
+    primaryIdAttribute: string;
+    primaryNameAttribute: string | null;
+    isCustomEntity: boolean;
+    columns: TableColumn[];
+    permissions: TablePermissionRow[];
+}
+export type MetadataResolution = "resolved" | "partial" | "unresolved";
+export interface ApiKeySummary {
+    id: string;
+    name: string;
+    prefix: string;
+    environment: "live" | "test";
+    lastUsedAt: string | null;
+    revokedAt: string | null;
+    createdAt: string;
+}
+export interface CreatedApiKey extends ApiKeySummary {
+    /** Present exactly once, in the response to the create call — never retrievable again. */
+    rawKey: string;
+}
+export interface TablePermissionRowFlat {
+    table: string;
+    isEnabled: boolean;
+    apiKeyId: string;
+    canRead: boolean;
+    canCreate: boolean;
+    canUpdate: boolean;
+    canDelete: boolean;
+}
+export interface RequestLogRow {
+    id: string;
+    requestId: string;
+    method: string;
+    path: string;
+    tableLogicalName: string | null;
+    recordId: string | null;
+    statusCode: number;
+    errorCode: string | null;
+    durationMs: number;
+    dataverseDurationMs: number | null;
+    retryCount: number;
+    client: string | null;
+    apiKeyId: string | null;
+    connectionId: string | null;
+    createdAt: string;
+}
+export interface ProjectContextResponse {
+    project: {
+        id: string;
+        name: string;
+        slug: string;
+    };
+    organisation: {
+        id: string;
+        name: string;
+    } | null;
+    connection: {
+        mode: string;
+        status: string;
+        tenantId: string | null;
+        environmentUrl: string | null;
+        lastVerifiedAt: string | null;
+    } | null;
+    /**
+     * `access` is *effective* access, not desired configuration — computed
+     * server-side from the same predicate that gates real data-plane requests
+     * (apps/api/src/table-access.ts's `isTableActionGranted`). A permission
+     * that's granted but not yet confirmed synced to Dataverse reports
+     * "----", never the requested CRUD flags. `null` means no `apiKeyId` was
+     * given at all (not evaluated); once one is given, every table gets a
+     * real "RCUD"-shorthand string, including an explicit "----" for zero
+     * access — never `null` for "we don't know."
+     */
+    tables: Array<{
+        logicalName: string;
+        displayName: string;
+        access: string | null;
+    }>;
+    tableCounts: {
+        available: number;
+        custom: number;
+        enabled: number;
+    };
+    tablesUnavailableReason: string | null;
+    apiKeys: Array<{
+        id: string;
+        name: string;
+        prefix: string;
+    }>;
+    metadataCapabilities: {
+        columns: MetadataResolution;
+        relationships: MetadataResolution;
+        choiceDefinitions: MetadataResolution;
+        choiceValues: MetadataResolution;
+    };
+    sdk: {
+        package: string;
+    };
+    api: {
+        tablesBasePath: string;
+    };
+}
+//# sourceMappingURL=api-types.d.ts.map

package/dist/api-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-types.d.ts","sourceRoot":"","sources":["../src/api-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,YAAY,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,YAAY,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,mBAAmB,GAAG,oBAAoB,CAAC;IACjD,MAAM,EAAE,SAAS,GAAG,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,cAAc,GAAG,SAAS,CAAC;IAC3F,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAClF,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAED,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,SAAS,GAAG,YAAY,CAAC;AAEvE,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,0FAA0F;IAC1F,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,YAAY,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAClD,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,GAAG,IAAI,CAAC;IACT;;;;;;;;;OASG;IACH,MAAM,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACnF,WAAW,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,oBAAoB,EAAE;QACpB,OAAO,EAAE,kBAAkB,CAAC;QAC5B,aAAa,EAAE,kBAAkB,CAAC;QAClC,iBAAiB,EAAE,kBAAkB,CAAC;QACtC,YAAY,EAAE,kBAAkB,CAAC;KAClC,CAAC;IACF,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACzB,GAAG,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CACjC"}

package/dist/api-types.js

@@ -0,0 +1,9 @@
+/**
+ * Response shapes this CLI reads from AxtraBase's control plane — kept in
+ * sync with apps/api's route handlers by hand (same "interim technical
+ * debt" tradeoff @axtrabase/openapi's hand-authored spec makes, see that
+ * package's top comment) rather than generated. Extend this file as later
+ * phases add commands; do not duplicate a shape already defined here.
+ */
+export {};
+//# sourceMappingURL=api-types.js.map

package/dist/api-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-types.js","sourceRoot":"","sources":["../src/api-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/commands/config.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from "commander";
+export declare function registerConfigCommand(program: Command): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/commands/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgCzC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAkF5D"}

package/dist/commands/config.js

@@ -0,0 +1,98 @@
+import { ConfigStore } from "../config/store.js";
+import { CliError } from "../http/errors.js";
+import { printJson, printLine } from "../output/print.js";
+import { runWithErrorHandling } from "../report-error.js";
+/** kebab-case (what a user types) <-> the CliConfig field it maps to. Deliberately a closed list — config set never accepts an arbitrary key (build brief §25: "do not allow arbitrary secret storage through generic config"). */
+const KEY_ALIASES = {
+    "api-url": "apiUrl",
+    "dashboard-url": "dashboardUrl",
+    organisation: "organisationId",
+    org: "organisationId",
+    project: "projectId"
+};
+function resolveKey(input) {
+    const key = KEY_ALIASES[input];
+    if (!key) {
+        throw new CliError("AXTRA_CLI_VALIDATION_ERROR", `Unknown config key "${input}". Valid keys: ${Object.keys(KEY_ALIASES).join(", ")}.`, { status: 0 });
+    }
+    return key;
+}
+export function registerConfigCommand(program) {
+    const config = program.command("config").description("Inspect or change local CLI configuration");
+    config
+        .command("list")
+        .description("Show every configured value")
+        .action(async function () {
+        const options = this.optsWithGlobals();
+        await runWithErrorHandling(async () => {
+            const values = new ConfigStore().read();
+            if (options.json) {
+                printJson(values);
+                return;
+            }
+            const lines = [];
+            if (values.apiUrl)
+                lines.push(`api-url: ${values.apiUrl}`);
+            if (values.dashboardUrl)
+                lines.push(`dashboard-url: ${values.dashboardUrl}`);
+            if (values.organisationId) {
+                lines.push(`organisation: ${values.organisationSlug ?? values.organisationId} (${values.organisationId})`);
+            }
+            if (values.projectId) {
+                lines.push(`project: ${values.projectSlug ?? values.projectId} (${values.projectId})`);
+            }
+            if (lines.length === 0) {
+                printLine("No config set.");
+                return;
+            }
+            for (const line of lines)
+                printLine(line);
+        }, options);
+    });
+    config
+        .command("get <key>")
+        .description("Show one config value (api-url, dashboard-url, organisation, project)")
+        .action(async function (key, _opts, command) {
+        const options = command.optsWithGlobals();
+        await runWithErrorHandling(async () => {
+            const field = resolveKey(key);
+            const value = new ConfigStore().read()[field];
+            if (options.json) {
+                printJson({ [key]: value ?? null });
+                return;
+            }
+            printLine(value ?? "(not set)");
+        }, options);
+    });
+    config
+        .command("set <key> <value>")
+        .description("Set one config value")
+        .action(async function (key, value, _opts, command) {
+        const options = command.optsWithGlobals();
+        await runWithErrorHandling(async () => {
+            const field = resolveKey(key);
+            new ConfigStore().update({ [field]: value });
+            if (options.json) {
+                printJson({ [key]: value });
+                return;
+            }
+            printLine(`${key} = ${value}`);
+        }, options);
+    });
+    config
+        .command("unset <key>")
+        .description("Remove one config value, reverting it to the default")
+        .action(async function (key, _opts, command) {
+        const options = command.optsWithGlobals();
+        await runWithErrorHandling(async () => {
+            const field = resolveKey(key);
+            new ConfigStore().unset(field);
+            if (options.json) {
+                printJson({ [key]: null });
+                return;
+            }
+            printLine(`${key} unset.`);
+        }, options);
+    });
+}
+//# sourceMappingURL=config.js.map

package/dist/commands/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAkB,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAO1D,mOAAmO;AACnO,MAAM,WAAW,GAAoC;IACnD,SAAS,EAAE,QAAQ;IACnB,eAAe,EAAE,cAAc;IAC/B,YAAY,EAAE,gBAAgB;IAC9B,GAAG,EAAE,gBAAgB;IACrB,OAAO,EAAE,WAAW;CACrB,CAAC;AAEF,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,QAAQ,CAChB,4BAA4B,EAC5B,uBAAuB,KAAK,kBAAkB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACpF,EAAE,MAAM,EAAE,CAAC,EAAE,CACd,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,2CAA2C,CAAC,CAAC;IAElG,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,6BAA6B,CAAC;SAC1C,MAAM,CAAC,KAAK;QACX,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAiB,CAAC;QACtD,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,SAAS,CAAC,MAAM,CAAC,CAAC;gBAClB,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,YAAY;gBAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YAC7E,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CACR,iBAAiB,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,GAAG,CAC/F,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;YACzF,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,SAAS,CAAC,gBAAgB,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,uEAAuE,CAAC;SACpF,MAAM,CAAC,KAAK,WAAW,GAAW,EAAE,KAAc,EAAE,OAAgB;QACnE,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,EAAiB,CAAC;QACzD,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,SAAS,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC;QAClC,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,sBAAsB,CAAC;SACnC,MAAM,CAAC,KAAK,WAAW,GAAW,EAAE,KAAa,EAAE,KAAc,EAAE,OAAgB;QAClF,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,EAAiB,CAAC;QACzD,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,SAAS,CAAC,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CAAC,KAAK,WAAW,GAAW,EAAE,KAAc,EAAE,OAAgB;QACnE,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,EAAiB,CAAC;QACzD,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,SAAS,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;QAC7B,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/connection.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from "commander";
+export declare function registerConnectionCommand(program: Command): void;
+//# sourceMappingURL=connection.d.ts.map

package/dist/commands/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../src/commands/connection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAczC,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsBhE"}

package/dist/commands/connection.js

@@ -0,0 +1,58 @@
+import { resolveActiveProjectId } from "../active-project.js";
+import { requireControlPlaneClient } from "../http/authenticated-client.js";
+import { printJson, printKeyValueBlock, printLine } from "../output/print.js";
+import { runWithErrorHandling } from "../report-error.js";
+export function registerConnectionCommand(program) {
+    const connection = program
+        .command("connection")
+        .description("Inspect the active project's Dataverse connection");
+    connection
+        .command("status")
+        .description("Show connection mode, status, and environment")
+        .option("--project <project>", "override the active project (id or slug)")
+        .action(async function () {
+        const options = this.optsWithGlobals();
+        await runWithErrorHandling(() => runStatus(options), options);
+    });
+    connection
+        .command("verify")
+        .description("Re-verify the connection is actually usable (WhoAmI + read checks)")
+        .option("--project <project>", "override the active project (id or slug)")
+        .action(async function () {
+        const options = this.optsWithGlobals();
+        await runWithErrorHandling(() => runVerify(options), options);
+    });
+}
+function printConnection(connection) {
+    printKeyValueBlock([
+        ["Project", connection.projectId],
+        ["Connection mode", connection.mode],
+        ["Status", connection.status],
+        ["Tenant", connection.tenantDisplayName ?? connection.tenantId ?? "—"],
+        ["Environment", connection.environmentDisplayName ?? connection.environmentUrl ?? "—"],
+        ["Environment type", connection.environmentType ?? "—"],
+        ["Last verified", connection.lastVerifiedAt ?? "never"]
+    ]);
+}
+async function runStatus(options) {
+    const client = requireControlPlaneClient({ apiUrl: options.apiUrl });
+    const projectId = await resolveActiveProjectId(client, options.project);
+    const { data } = await client.get(`/api/v1/projects/${projectId}/dataverse-connection`);
+    if (options.json) {
+        printJson(data);
+        return;
+    }
+    printConnection(data);
+}
+async function runVerify(options) {
+    const client = requireControlPlaneClient({ apiUrl: options.apiUrl });
+    const projectId = await resolveActiveProjectId(client, options.project);
+    const { data } = await client.post(`/api/v1/projects/${projectId}/dataverse-connection/verify`);
+    if (options.json) {
+        printJson(data);
+        return;
+    }
+    printLine(`Status: ${data.status}`);
+    printLine(`Last verified: ${data.lastVerifiedAt}`);
+}
+//# sourceMappingURL=connection.js.map

package/dist/commands/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/commands/connection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAS1D,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,UAAU,GAAG,OAAO;SACvB,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,mDAAmD,CAAC,CAAC;IAEpE,UAAU;SACP,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,+CAA+C,CAAC;SAC5D,MAAM,CAAC,qBAAqB,EAAE,0CAA0C,CAAC;SACzE,MAAM,CAAC,KAAK;QACX,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAqB,CAAC;QAC1D,MAAM,oBAAoB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEL,UAAU;SACP,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,oEAAoE,CAAC;SACjF,MAAM,CAAC,qBAAqB,EAAE,0CAA0C,CAAC;SACzE,MAAM,CAAC,KAAK;QACX,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAqB,CAAC;QAC1D,MAAM,oBAAoB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,eAAe,CAAC,UAAuC;IAC9D,kBAAkB,CAAC;QACjB,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC;QACjC,CAAC,iBAAiB,EAAE,UAAU,CAAC,IAAI,CAAC;QACpC,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;QAC7B,CAAC,QAAQ,EAAE,UAAU,CAAC,iBAAiB,IAAI,UAAU,CAAC,QAAQ,IAAI,GAAG,CAAC;QACtE,CAAC,aAAa,EAAE,UAAU,CAAC,sBAAsB,IAAI,UAAU,CAAC,cAAc,IAAI,GAAG,CAAC;QACtF,CAAC,kBAAkB,EAAE,UAAU,CAAC,eAAe,IAAI,GAAG,CAAC;QACvD,CAAC,eAAe,EAAE,UAAU,CAAC,cAAc,IAAI,OAAO,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAA0B;IACjD,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAC/B,oBAAoB,SAAS,uBAAuB,CACrD,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,eAAe,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAA0B;IACjD,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAK/B,oBAAoB,SAAS,8BAA8B,CAAC,CAAC;IAEhE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,SAAS,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,SAAS,CAAC,kBAAkB,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;AACrD,CAAC"}

package/dist/commands/context.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from "commander";
+export declare function registerContextCommand(program: Command): void;
+//# sourceMappingURL=context.d.ts.map

package/dist/commands/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkCzC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAW7D"}