@axtrabase/cli 0.1.0

package/dist/commands/whoami.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.d.ts","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAazC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAQ5D"}

package/dist/commands/whoami.js

@@ -0,0 +1,41 @@
+import { requireControlPlaneClient } from "../http/authenticated-client.js";
+import { resolveApiUrl } from "../config/resolve.js";
+import { printJson, printKeyValueBlock, printLine } from "../output/print.js";
+import { runWithErrorHandling } from "../report-error.js";
+export function registerWhoamiCommand(program) {
+    program
+        .command("whoami")
+        .description("Show the signed-in user, organisation, and active API")
+        .action(async function () {
+        const options = this.optsWithGlobals();
+        await runWithErrorHandling(() => runWhoami(options), options);
+    });
+}
+async function runWhoami(options) {
+    const client = requireControlPlaneClient({ apiUrl: options.apiUrl });
+    const { data } = await client.get("/api/v1/me");
+    const apiUrl = resolveApiUrl(options.apiUrl);
+    if (options.json) {
+        printJson({
+            user: data.user,
+            organisation: data.organisation,
+            platformRole: data.platformRole,
+            api: { baseUrl: apiUrl }
+        });
+        return;
+    }
+    printLine("Signed in as:");
+    printLine(data.user.name);
+    printLine(data.user.email);
+    printLine();
+    printLine("Organisation:");
+    printLine(data.organisation.name);
+    printLine();
+    printLine("API:");
+    printLine(apiUrl);
+    if (data.platformRole) {
+        printLine();
+        printKeyValueBlock([["Platform role", data.platformRole]]);
+    }
+}
+//# sourceMappingURL=whoami.js.map

package/dist/commands/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAQ1D,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uDAAuD,CAAC;SACpE,MAAM,CAAC,KAAK;QACX,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAiB,CAAC;QACtD,MAAM,oBAAoB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAsB;IAC7C,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAAa,YAAY,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE7C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,SAAS,CAAC;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;SACzB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,SAAS,CAAC,eAAe,CAAC,CAAC;IAC3B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,SAAS,EAAE,CAAC;IACZ,SAAS,CAAC,eAAe,CAAC,CAAC;IAC3B,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,SAAS,EAAE,CAAC;IACZ,SAAS,CAAC,MAAM,CAAC,CAAC;IAClB,SAAS,CAAC,MAAM,CAAC,CAAC;IAClB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,SAAS,EAAE,CAAC;QACZ,kBAAkB,CAAC,CAAC,CAAC,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/concurrency.d.ts

@@ -0,0 +1,18 @@
+/**
+ * A small worker-pool mapper — no new dependency for something this simple
+ * (build brief §2/§37: "zero unnecessary framework weight"). At most
+ * `limit` calls to `fn` are ever in flight at once, regardless of `items`'
+ * length, so a schema export over hundreds of tables can't fire hundreds of
+ * simultaneous Dataverse/control-plane calls. Preserves the caller's input
+ * order in the returned array — results are written to fixed index slots,
+ * never pushed in completion order — so output stays deterministic even
+ * though completion timing isn't.
+ *
+ * Failure semantics are unchanged from a plain `Promise.all`: the first
+ * rejection propagates and stops the whole operation. That's a deliberate
+ * decision, not an oversight — a partial schema export silently missing
+ * some tables would be a worse failure mode than a clear, whole-command
+ * error.
+ */
+export declare function mapWithConcurrencyLimit<T, R>(items: readonly T[], limit: number, fn: (item: T, index: number) => Promise<R>): Promise<R[]>;
+//# sourceMappingURL=concurrency.d.ts.map

package/dist/concurrency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrency.d.ts","sourceRoot":"","sources":["../src/concurrency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,uBAAuB,CAAC,CAAC,EAAE,CAAC,EAChD,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GACzC,OAAO,CAAC,CAAC,EAAE,CAAC,CAgBd"}

package/dist/concurrency.js

@@ -0,0 +1,32 @@
+/**
+ * A small worker-pool mapper — no new dependency for something this simple
+ * (build brief §2/§37: "zero unnecessary framework weight"). At most
+ * `limit` calls to `fn` are ever in flight at once, regardless of `items`'
+ * length, so a schema export over hundreds of tables can't fire hundreds of
+ * simultaneous Dataverse/control-plane calls. Preserves the caller's input
+ * order in the returned array — results are written to fixed index slots,
+ * never pushed in completion order — so output stays deterministic even
+ * though completion timing isn't.
+ *
+ * Failure semantics are unchanged from a plain `Promise.all`: the first
+ * rejection propagates and stops the whole operation. That's a deliberate
+ * decision, not an oversight — a partial schema export silently missing
+ * some tables would be a worse failure mode than a clear, whole-command
+ * error.
+ */
+export async function mapWithConcurrencyLimit(items, limit, fn) {
+    const results = new Array(items.length);
+    let nextIndex = 0;
+    async function worker() {
+        for (;;) {
+            const currentIndex = nextIndex++;
+            if (currentIndex >= items.length)
+                return;
+            results[currentIndex] = await fn(items[currentIndex], currentIndex);
+        }
+    }
+    const workerCount = Math.max(1, Math.min(limit, items.length));
+    await Promise.all(Array.from({ length: workerCount }, () => worker()));
+    return results;
+}
+//# sourceMappingURL=concurrency.js.map

package/dist/concurrency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrency.js","sourceRoot":"","sources":["../src/concurrency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAmB,EACnB,KAAa,EACb,EAA0C;IAE1C,MAAM,OAAO,GAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,UAAU,MAAM;QACnB,SAAS,CAAC;YACR,MAAM,YAAY,GAAG,SAAS,EAAE,CAAC;YACjC,IAAI,YAAY,IAAI,KAAK,CAAC,MAAM;gBAAE,OAAO;YACzC,OAAO,CAAC,YAAY,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAM,EAAE,YAAY,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEvE,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/config/credentials.d.ts

@@ -0,0 +1,17 @@
+export interface StoredCredentials {
+    token: string;
+}
+/**
+ * Local storage for the CLI token — a plain file with 0600 permissions, not
+ * an OS keychain. This is a deliberate v1 tradeoff (see docs/cli.md's
+ * security section): native keychain bindings need per-platform builds,
+ * which conflicts with this monorepo's plain-`tsc`/zero-native-deps
+ * convention and would break headless CI. Never stores a Microsoft or
+ * Dataverse credential — only ever an `axcli_...` control-plane token.
+ */
+export declare class CredentialStore {
+    read(): StoredCredentials | undefined;
+    write(credentials: StoredCredentials): void;
+    clear(): void;
+}
+//# sourceMappingURL=credentials.d.ts.map

package/dist/config/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/config/credentials.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,qBAAa,eAAe;IAC1B,IAAI,IAAI,iBAAiB,GAAG,SAAS;IAsBrC,KAAK,CAAC,WAAW,EAAE,iBAAiB,GAAG,IAAI;IAc3C,KAAK,IAAI,IAAI;CAQd"}

package/dist/config/credentials.js

@@ -0,0 +1,77 @@
+import { chmodSync, mkdirSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { credentialsFilePath } from "./paths.js";
+const SECRET_FILE_MODE = 0o600;
+/**
+ * Local storage for the CLI token — a plain file with 0600 permissions, not
+ * an OS keychain. This is a deliberate v1 tradeoff (see docs/cli.md's
+ * security section): native keychain bindings need per-platform builds,
+ * which conflicts with this monorepo's plain-`tsc`/zero-native-deps
+ * convention and would break headless CI. Never stores a Microsoft or
+ * Dataverse credential — only ever an `axcli_...` control-plane token.
+ */
+export class CredentialStore {
+    read() {
+        let raw;
+        try {
+            raw = readFileSync(credentialsFilePath(), "utf8");
+        }
+        catch (error) {
+            if (isErrnoException(error) && error.code === "ENOENT")
+                return undefined;
+            throw error;
+        }
+        warnIfPermissionsAreLoose();
+        try {
+            const parsed = JSON.parse(raw);
+            if (isRecord(parsed) && typeof parsed.token === "string" && parsed.token.length > 0) {
+                return { token: parsed.token };
+            }
+            return undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    write(credentials) {
+        const path = credentialsFilePath();
+        mkdirSync(dirname(path), { recursive: true });
+        writeFileSync(path, `${JSON.stringify(credentials, null, 2)}\n`, {
+            encoding: "utf8",
+            mode: SECRET_FILE_MODE
+        });
+        // writeFileSync's `mode` option only applies when creating the file — an
+        // existing file (e.g. from a prior login) keeps its old mode, which may
+        // have been widened by umask or a prior version. Setting it explicitly
+        // every write is what actually guarantees 0600, not just on first login.
+        chmodSync(path, SECRET_FILE_MODE);
+    }
+    clear() {
+        try {
+            rmSync(credentialsFilePath());
+        }
+        catch (error) {
+            if (isErrnoException(error) && error.code === "ENOENT")
+                return;
+            throw error;
+        }
+    }
+}
+function warnIfPermissionsAreLoose() {
+    try {
+        const mode = statSync(credentialsFilePath()).mode & 0o777;
+        if (mode !== SECRET_FILE_MODE) {
+            process.stderr.write(`Warning: ${credentialsFilePath()} has permissions ${mode.toString(8)}, not 0600. Your CLI token may be readable by other local users. Run: chmod 600 ${credentialsFilePath()}\n`);
+        }
+    }
+    catch {
+        // Best-effort — never block a read over a stat failure.
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isErrnoException(error) {
+    return error instanceof Error && "code" in error;
+}
+//# sourceMappingURL=credentials.js.map

package/dist/config/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/config/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAM/B;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IAC1B,IAAI;QACF,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,mBAAmB,EAAE,EAAE,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACzE,MAAM,KAAK,CAAC;QACd,CAAC;QAED,yBAAyB,EAAE,CAAC;QAE5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpF,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACjC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAA8B;QAClC,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACnC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC/D,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,gBAAgB;SACvB,CAAC,CAAC;QACH,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,SAAS,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACpC,CAAC;IAED,KAAK;QACH,IAAI,CAAC;YACH,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,SAAS,yBAAyB;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QAC1D,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,YAAY,mBAAmB,EAAE,oBAAoB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,mFAAmF,mBAAmB,EAAE,IAAI,CAClL,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/dist/config/paths.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `~/.config/axtrabase/` on every platform — the build brief explicitly
+ * allows "or platform-standard equivalent" and a single well-documented
+ * path is simpler to reason about and test than per-OS branching (no
+ * `%APPDATA%`/XDG special-casing). Overridable via AXTRABASE_CONFIG_DIR for
+ * tests and for anyone who wants config isolated from their real home dir.
+ */
+export declare function configDir(): string;
+export declare function configFilePath(): string;
+/** Kept in a separate file from config.json so file permissions (0600) apply only to the credential, not to non-secret settings a user might reasonably want to inspect/edit more casually. */
+export declare function credentialsFilePath(): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/config/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,+LAA+L;AAC/L,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C"}

package/dist/config/paths.js

@@ -0,0 +1,20 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+/**
+ * `~/.config/axtrabase/` on every platform — the build brief explicitly
+ * allows "or platform-standard equivalent" and a single well-documented
+ * path is simpler to reason about and test than per-OS branching (no
+ * `%APPDATA%`/XDG special-casing). Overridable via AXTRABASE_CONFIG_DIR for
+ * tests and for anyone who wants config isolated from their real home dir.
+ */
+export function configDir() {
+    return process.env.AXTRABASE_CONFIG_DIR ?? join(homedir(), ".config", "axtrabase");
+}
+export function configFilePath() {
+    return join(configDir(), "config.json");
+}
+/** Kept in a separate file from config.json so file permissions (0600) apply only to the credential, not to non-secret settings a user might reasonably want to inspect/edit more casually. */
+export function credentialsFilePath() {
+    return join(configDir(), "credentials.json");
+}
+//# sourceMappingURL=paths.js.map

package/dist/config/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;GAMG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;AAC1C,CAAC;AAED,+LAA+L;AAC/L,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAC/C,CAAC"}

package/dist/config/resolve.d.ts

@@ -0,0 +1,22 @@
+export declare const DEFAULT_API_URL = "https://api.axtrabase.com";
+export declare const DEFAULT_DASHBOARD_URL = "https://app.axtrabase.com";
+/** explicit flag > environment variable > saved config > production default (build brief §6). */
+export declare function resolveApiUrl(flagValue?: string): string;
+/** Same precedence as resolveApiUrl — the dashboard is a separate origin from the API, so it gets its own override (see docs/cli.md). */
+export declare function resolveDashboardUrl(flagValue?: string): string;
+/** explicit flag > AXTRABASE_PROJECT environment variable > saved config (build brief §9, §26). */
+export declare function resolveProjectId(flagValue?: string): string | undefined;
+export declare function resolveOrganisationId(flagValue?: string): string | undefined;
+export interface ResolvedToken {
+    token: string;
+    /** "env" tokens (AXTRABASE_CLI_TOKEN) are never persisted or logged — see build brief §26. */
+    source: "env" | "file";
+}
+/**
+ * AXTRABASE_CLI_TOKEN environment variable > the locally persisted
+ * credential (see credentials.ts). The env var exists specifically for CI
+ * and ephemeral agent environments — it is read fresh on every call and
+ * never written to disk.
+ */
+export declare function resolveToken(): ResolvedToken | undefined;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/config/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/config/resolve.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,eAAe,8BAA8B,CAAC;AAC3D,eAAO,MAAM,qBAAqB,8BAA8B,CAAC;AAEjE,iGAAiG;AACjG,wBAAgB,aAAa,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAOxD;AAED,yIAAyI;AACzI,wBAAgB,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAO9D;AAED,mGAAmG;AACnG,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEvE;AAED,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE5E;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,8FAA8F;IAC9F,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,aAAa,GAAG,SAAS,CAMxD"}

package/dist/config/resolve.js

@@ -0,0 +1,41 @@
+import { CredentialStore } from "./credentials.js";
+import { ConfigStore } from "./store.js";
+export const DEFAULT_API_URL = "https://api.axtrabase.com";
+export const DEFAULT_DASHBOARD_URL = "https://app.axtrabase.com";
+/** explicit flag > environment variable > saved config > production default (build brief §6). */
+export function resolveApiUrl(flagValue) {
+    const value = flagValue ??
+        process.env.AXTRABASE_API_URL ??
+        new ConfigStore().read().apiUrl ??
+        DEFAULT_API_URL;
+    return value.replace(/\/$/, "");
+}
+/** Same precedence as resolveApiUrl — the dashboard is a separate origin from the API, so it gets its own override (see docs/cli.md). */
+export function resolveDashboardUrl(flagValue) {
+    const value = flagValue ??
+        process.env.AXTRABASE_DASHBOARD_URL ??
+        new ConfigStore().read().dashboardUrl ??
+        DEFAULT_DASHBOARD_URL;
+    return value.replace(/\/$/, "");
+}
+/** explicit flag > AXTRABASE_PROJECT environment variable > saved config (build brief §9, §26). */
+export function resolveProjectId(flagValue) {
+    return flagValue ?? process.env.AXTRABASE_PROJECT ?? new ConfigStore().read().projectId;
+}
+export function resolveOrganisationId(flagValue) {
+    return flagValue ?? new ConfigStore().read().organisationId;
+}
+/**
+ * AXTRABASE_CLI_TOKEN environment variable > the locally persisted
+ * credential (see credentials.ts). The env var exists specifically for CI
+ * and ephemeral agent environments — it is read fresh on every call and
+ * never written to disk.
+ */
+export function resolveToken() {
+    const envToken = process.env.AXTRABASE_CLI_TOKEN;
+    if (envToken && envToken.length > 0)
+        return { token: envToken, source: "env" };
+    const stored = new CredentialStore().read();
+    return stored ? { token: stored.token, source: "file" } : undefined;
+}
+//# sourceMappingURL=resolve.js.map

package/dist/config/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/config/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAC3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AAEjE,iGAAiG;AACjG,MAAM,UAAU,aAAa,CAAC,SAAkB;IAC9C,MAAM,KAAK,GACT,SAAS;QACT,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,IAAI,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM;QAC/B,eAAe,CAAC;IAClB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,yIAAyI;AACzI,MAAM,UAAU,mBAAmB,CAAC,SAAkB;IACpD,MAAM,KAAK,GACT,SAAS;QACT,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACnC,IAAI,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,YAAY;QACrC,qBAAqB,CAAC;IACxB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,SAAkB;IACjD,OAAO,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAkB;IACtD,OAAO,SAAS,IAAI,IAAI,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,cAAc,CAAC;AAC9D,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACjD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAE/E,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC,IAAI,EAAE,CAAC;IAC5C,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC"}

package/dist/config/store.d.ts

@@ -0,0 +1,24 @@
+export interface CliConfig {
+    /** Overrides the default AxtraBase API origin — see http/base-url.ts for the full precedence order. */
+    apiUrl?: string;
+    /** Where `axtrabase login` sends a user to generate a CLI token. Independent of apiUrl — the dashboard and API are separate origins (see docs/cli.md). */
+    dashboardUrl?: string;
+    organisationId?: string;
+    organisationSlug?: string;
+    projectId?: string;
+    projectSlug?: string;
+}
+/**
+ * Non-secret local CLI state — base URL override and the active
+ * organisation/project selected by `orgs use`/`projects use`. Deliberately
+ * a separate file from credentials.json (see paths.ts) so nothing here
+ * needs restrictive permissions.
+ */
+export declare class ConfigStore {
+    read(): CliConfig;
+    write(config: CliConfig): void;
+    update(patch: Partial<CliConfig>): CliConfig;
+    /** Sets a single key to undefined (removes it) — used by `config unset`/clearing a stale project selection. */
+    unset(key: keyof CliConfig): CliConfig;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/config/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/config/store.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,SAAS;IACxB,uGAAuG;IACvG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0JAA0J;IAC1J,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAeD;;;;;GAKG;AACH,qBAAa,WAAW;IACtB,IAAI,IAAI,SAAS;IAiBjB,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;IAK9B,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS;IAM5C,+GAA+G;IAC/G,KAAK,CAAC,GAAG,EAAE,MAAM,SAAS,GAAG,SAAS;CAMvC"}

package/dist/config/store.js

@@ -0,0 +1,72 @@
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { configFilePath } from "./paths.js";
+const CONFIG_KEYS = [
+    "apiUrl",
+    "dashboardUrl",
+    "organisationId",
+    "organisationSlug",
+    "projectId",
+    "projectSlug"
+];
+function isConfigKey(key) {
+    return CONFIG_KEYS.includes(key);
+}
+/**
+ * Non-secret local CLI state — base URL override and the active
+ * organisation/project selected by `orgs use`/`projects use`. Deliberately
+ * a separate file from credentials.json (see paths.ts) so nothing here
+ * needs restrictive permissions.
+ */
+export class ConfigStore {
+    read() {
+        let raw;
+        try {
+            raw = readFileSync(configFilePath(), "utf8");
+        }
+        catch (error) {
+            if (isErrnoException(error) && error.code === "ENOENT")
+                return {};
+            throw error;
+        }
+        try {
+            const parsed = JSON.parse(raw);
+            return isRecord(parsed) ? sanitize(parsed) : {};
+        }
+        catch {
+            // A corrupt config file shouldn't crash every CLI invocation — treat it as empty and let the next `config set`/`login` overwrite it.
+            return {};
+        }
+    }
+    write(config) {
+        mkdirSync(dirname(configFilePath()), { recursive: true });
+        writeFileSync(configFilePath(), `${JSON.stringify(config, null, 2)}\n`, "utf8");
+    }
+    update(patch) {
+        const next = { ...this.read(), ...patch };
+        this.write(next);
+        return next;
+    }
+    /** Sets a single key to undefined (removes it) — used by `config unset`/clearing a stale project selection. */
+    unset(key) {
+        const next = this.read();
+        delete next[key];
+        this.write(next);
+        return next;
+    }
+}
+function sanitize(record) {
+    const config = {};
+    for (const [key, value] of Object.entries(record)) {
+        if (isConfigKey(key) && typeof value === "string")
+            config[key] = value;
+    }
+    return config;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isErrnoException(error) {
+    return error instanceof Error && "code" in error;
+}
+//# sourceMappingURL=store.js.map

package/dist/config/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/config/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAa5C,MAAM,WAAW,GAAG;IAClB,QAAQ;IACR,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,WAAW;IACX,aAAa;CACkC,CAAC;AAElD,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAQ,WAAiC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IACtB,IAAI;QACF,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,qIAAqI;YACrI,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAiB;QACrB,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,aAAa,CAAC,cAAc,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,CAAC,KAAyB;QAC9B,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+GAA+G;IAC/G,KAAK,CAAC,GAAoB;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,MAA+B;IAC/C,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/dist/exit-codes.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Stable exit-code contract for scripts/CI/coding agents — see docs/cli.md.
+ * Deliberately a small, closed set (build brief §23: "do not over-engineer
+ * dozens of exit codes").
+ */
+export declare const EXIT_CODES: {
+    readonly SUCCESS: 0;
+    readonly GENERIC_FAILURE: 1;
+    readonly AUTHENTICATION_REQUIRED: 2;
+    readonly AUTHORIZATION_DENIED: 3;
+    readonly NOT_FOUND: 4;
+    readonly CONNECTION_NOT_READY: 5;
+    readonly INVALID_ARGUMENTS: 6;
+};
+export type ExitCode = (typeof EXIT_CODES)[keyof typeof EXIT_CODES];
+/** Maps a control-plane AxtraErrorCode (see @axtrabase/shared, mirrored here without a workspace dependency — see http/errors.ts's doc comment) to this CLI's exit-code contract. */
+export declare function exitCodeForErrorCode(code: string): ExitCode;
+//# sourceMappingURL=exit-codes.d.ts.map

package/dist/exit-codes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.d.ts","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,UAAU;;;;;;;;CAQb,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEpE,qLAAqL;AACrL,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAuB3D"}

package/dist/exit-codes.js

@@ -0,0 +1,40 @@
+/**
+ * Stable exit-code contract for scripts/CI/coding agents — see docs/cli.md.
+ * Deliberately a small, closed set (build brief §23: "do not over-engineer
+ * dozens of exit codes").
+ */
+export const EXIT_CODES = {
+    SUCCESS: 0,
+    GENERIC_FAILURE: 1,
+    AUTHENTICATION_REQUIRED: 2,
+    AUTHORIZATION_DENIED: 3,
+    NOT_FOUND: 4,
+    CONNECTION_NOT_READY: 5,
+    INVALID_ARGUMENTS: 6
+};
+/** Maps a control-plane AxtraErrorCode (see @axtrabase/shared, mirrored here without a workspace dependency — see http/errors.ts's doc comment) to this CLI's exit-code contract. */
+export function exitCodeForErrorCode(code) {
+    switch (code) {
+        case "AXTRA_AUTHENTICATION_ERROR":
+        case "AXTRA_CLI_TOKEN_REVOKED":
+        case "AXTRA_CLI_TOKEN_EXPIRED":
+        case "AXTRA_API_KEY_REVOKED":
+        case "AXTRA_CLI_NOT_LOGGED_IN":
+            return EXIT_CODES.AUTHENTICATION_REQUIRED;
+        case "AXTRA_AUTHORISATION_ERROR":
+        case "AXTRA_TABLE_PERMISSION_DENIED":
+            return EXIT_CODES.AUTHORIZATION_DENIED;
+        case "AXTRA_RECORD_NOT_FOUND":
+        case "AXTRA_TABLE_NOT_FOUND":
+            return EXIT_CODES.NOT_FOUND;
+        case "AXTRA_CONNECTION_NOT_READY":
+            return EXIT_CODES.CONNECTION_NOT_READY;
+        case "AXTRA_VALIDATION_ERROR":
+        case "AXTRA_CLI_VALIDATION_ERROR":
+        case "AXTRA_CLI_NO_ACTIVE_PROJECT":
+            return EXIT_CODES.INVALID_ARGUMENTS;
+        default:
+            return EXIT_CODES.GENERIC_FAILURE;
+    }
+}
+//# sourceMappingURL=exit-codes.js.map

package/dist/exit-codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.js","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,OAAO,EAAE,CAAC;IACV,eAAe,EAAE,CAAC;IAClB,uBAAuB,EAAE,CAAC;IAC1B,oBAAoB,EAAE,CAAC;IACvB,SAAS,EAAE,CAAC;IACZ,oBAAoB,EAAE,CAAC;IACvB,iBAAiB,EAAE,CAAC;CACZ,CAAC;AAIX,qLAAqL;AACrL,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,4BAA4B,CAAC;QAClC,KAAK,yBAAyB,CAAC;QAC/B,KAAK,yBAAyB,CAAC;QAC/B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,yBAAyB;YAC5B,OAAO,UAAU,CAAC,uBAAuB,CAAC;QAC5C,KAAK,2BAA2B,CAAC;QACjC,KAAK,+BAA+B;YAClC,OAAO,UAAU,CAAC,oBAAoB,CAAC;QACzC,KAAK,wBAAwB,CAAC;QAC9B,KAAK,uBAAuB;YAC1B,OAAO,UAAU,CAAC,SAAS,CAAC;QAC9B,KAAK,4BAA4B;YAC/B,OAAO,UAAU,CAAC,oBAAoB,CAAC;QACzC,KAAK,wBAAwB,CAAC;QAC9B,KAAK,4BAA4B,CAAC;QAClC,KAAK,6BAA6B;YAChC,OAAO,UAAU,CAAC,iBAAiB,CAAC;QACtC;YACE,OAAO,UAAU,CAAC,eAAe,CAAC;IACtC,CAAC;AACH,CAAC"}

package/dist/generators/typescript.d.ts

@@ -0,0 +1,5 @@
+import type { TableMetadataResponse } from "../api-types.js";
+/** Generates a single `export interface` for one table's columns, over metadata fetched via HTTP (never Dataverse directly). */
+export declare function generateInterface(table: TableMetadataResponse): string;
+export declare function generateTypeScriptModule(tables: TableMetadataResponse[]): string;
+//# sourceMappingURL=typescript.d.ts.map

package/dist/generators/typescript.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript.d.ts","sourceRoot":"","sources":["../../src/generators/typescript.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAe,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AA6C1E,gIAAgI;AAChI,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAItE;AAsBD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAGhF"}

package/dist/generators/typescript.js

@@ -0,0 +1,70 @@
+/**
+ * Deliberately duplicated from (not imported from) `@axtrabase/dataverse`'s
+ * `generateInterface` (packages/dataverse/src/metadata/typescript-generator.ts),
+ * kept in sync by hand. This CLI is meant to be installable standalone
+ * (`npm install -g @axtrabase/cli`), same as @axtrabase/sdk — and like the
+ * SDK's errors.ts explains for its own error type, a package meant to ship
+ * to npm on its own must not take a runtime dependency on an internal,
+ * never-published workspace package just to reuse ~15 lines of pure logic.
+ * `@axtrabase/dataverse` itself carries Dataverse auth/client machinery this
+ * CLI has no business depending on at all — the whole point of the sprint
+ * is that this CLI never touches Dataverse directly.
+ */
+const TS_TYPE_BY_COLUMN_TYPE = {
+    string: "string",
+    number: "number",
+    boolean: "boolean",
+    datetime: "string",
+    guid: "string",
+    money: "number",
+    decimal: "number",
+    choice: "number",
+    lookup: "string",
+    owner: "string",
+    state: "number",
+    status: "number",
+    unknown: "unknown"
+};
+function toPascalCase(logicalName) {
+    return logicalName
+        .split(/[_-]+/)
+        .filter(Boolean)
+        .map((part) => part.charAt(0).toUpperCase() + part.slice(1))
+        .join("");
+}
+function fieldLine(column) {
+    const tsType = TS_TYPE_BY_COLUMN_TYPE[column.type] ?? "unknown";
+    const optional = column.isPrimaryId ? "" : "?";
+    const nullable = column.isPrimaryId ? "" : " | null";
+    return `  ${column.logicalName}${optional}: ${tsType}${nullable};`;
+}
+/** Generates a single `export interface` for one table's columns, over metadata fetched via HTTP (never Dataverse directly). */
+export function generateInterface(table) {
+    const name = toPascalCase(table.logicalName);
+    const lines = table.columns.map(fieldLine);
+    return [`export interface ${name} {`, ...lines, `}`].join("\n");
+}
+/**
+ * The generated-file header states the known metadata gap explicitly
+ * (build brief's anti-fabrication rule) rather than silently omitting
+ * relationships/choice values with no explanation.
+ */
+function generatedHeader(tableNames) {
+    return [
+        "/**",
+        " * Generated by `axtrabase schema export --format typescript` — do not edit by hand.",
+        ` * Tables: ${tableNames.join(", ")}`,
+        " *",
+        " * Known gaps (see `axtrabase context --json`'s metadataCapabilities):",
+        " * - Incoming (one-to-many) relationships are not represented.",
+        " * - Choice/option-set values are not represented — choice columns are typed",
+        " *   `number` (the underlying option value), not a literal union of known options.",
+        " */",
+        ""
+    ].join("\n");
+}
+export function generateTypeScriptModule(tables) {
+    const interfaces = tables.map((table) => generateInterface(table));
+    return `${generatedHeader(tables.map((t) => t.logicalName))}\n${interfaces.join("\n\n")}\n`;
+}
+//# sourceMappingURL=typescript.js.map

package/dist/generators/typescript.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript.js","sourceRoot":"","sources":["../../src/generators/typescript.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,MAAM,sBAAsB,GAA2B;IACrD,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,QAAQ;IAClB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,QAAQ;IACjB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;CACnB,CAAC;AAEF,SAAS,YAAY,CAAC,WAAmB;IACvC,OAAO,WAAW;SACf,KAAK,CAAC,OAAO,CAAC;SACd,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,MAAmB;IACpC,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,OAAO,KAAK,MAAM,CAAC,WAAW,GAAG,QAAQ,KAAK,MAAM,GAAG,QAAQ,GAAG,CAAC;AACrE,CAAC;AAED,gIAAgI;AAChI,MAAM,UAAU,iBAAiB,CAAC,KAA4B;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3C,OAAO,CAAC,oBAAoB,IAAI,IAAI,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,UAAoB;IAC3C,OAAO;QACL,KAAK;QACL,sFAAsF;QACtF,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACrC,IAAI;QACJ,wEAAwE;QACxE,gEAAgE;QAChE,8EAA8E;QAC9E,oFAAoF;QACpF,KAAK;QACL,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA+B;IACtE,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;AAC9F,CAAC"}

package/dist/http/authenticated-client.d.ts

@@ -0,0 +1,10 @@
+import { ControlPlaneClient } from "./client.js";
+export interface ClientOverrides {
+    apiUrl?: string;
+    organisationId?: string;
+}
+/** For the rare command that works whether or not the caller is logged in (none in v1, but keeps the option open) — never throws for a missing token. */
+export declare function createControlPlaneClient(overrides?: ClientOverrides): ControlPlaneClient;
+/** Every command that needs to act as a signed-in user calls this — throws a clear, exit-code-2 error rather than letting an unauthenticated request 401 confusingly deep inside a command. */
+export declare function requireControlPlaneClient(overrides?: ClientOverrides): ControlPlaneClient;
+//# sourceMappingURL=authenticated-client.d.ts.map

package/dist/http/authenticated-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticated-client.d.ts","sourceRoot":"","sources":["../../src/http/authenticated-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjD,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,yJAAyJ;AACzJ,wBAAgB,wBAAwB,CAAC,SAAS,GAAE,eAAoB,GAAG,kBAAkB,CAM5F;AAED,+LAA+L;AAC/L,wBAAgB,yBAAyB,CAAC,SAAS,GAAE,eAAoB,GAAG,kBAAkB,CAc7F"}