@cicore/cli 1.0.0

package/dist/commands/ssl/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CiCore CLI - SSL Management Commands
+ *
+ * Cloudflare Origin Certificate automation
+ */
+import { Command } from 'commander';
+export declare function registerSSLCommands(program: Command): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/ssl/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/ssl/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAoD1D"}

package/dist/commands/ssl/index.js

@@ -0,0 +1,275 @@
+/**
+ * CiCore CLI - SSL Management Commands
+ *
+ * Cloudflare Origin Certificate automation
+ */
+import { log, spinner, formatTable } from '../../lib/logger.js';
+import { exec } from '../../lib/shell.js';
+import { confirm } from '../../lib/prompts.js';
+import { getSSHHost, buildSSHCommand } from '../../lib/ssh-config.js';
+import { getCloudflareToken, createOriginCertificate, getZoneByDomain, setSSLMode, upsertDNSRecord } from '../../lib/cloudflare.js';
+export function registerSSLCommands(program) {
+    const ssl = program
+        .command('ssl')
+        .description('SSL certificate management');
+    // vu ssl:create
+    ssl
+        .command('create <domain>')
+        .description('Create and install SSL certificate for domain')
+        .option('-h, --host <host>', 'SSH host name', 'cicore')
+        .option('--skip-dns', 'Skip DNS record creation')
+        .action(async (domain, options) => {
+        await createSSL(domain, options);
+    });
+    // vu ssl:renew
+    ssl
+        .command('renew <domain>')
+        .description('Renew SSL certificate')
+        .option('-h, --host <host>', 'SSH host name', 'cicore')
+        .action(async (domain, options) => {
+        await renewSSL(domain, options);
+    });
+    // vu ssl:list
+    ssl
+        .command('list')
+        .alias('ls')
+        .description('List all SSL certificates')
+        .option('-h, --host <host>', 'SSH host name', 'cicore')
+        .action(async (options) => {
+        await listSSL(options);
+    });
+    // vu ssl:check
+    ssl
+        .command('check <domain>')
+        .description('Check SSL certificate status')
+        .option('-h, --host <host>', 'SSH host name', 'cicore')
+        .action(async (domain, options) => {
+        await checkSSL(domain, options);
+    });
+    // vu ssl:delete
+    ssl
+        .command('delete <domain>')
+        .description('Delete SSL certificate')
+        .option('-h, --host <host>', 'SSH host name', 'cicore')
+        .option('-f, --force', 'Skip confirmation')
+        .action(async (domain, options) => {
+        await deleteSSL(domain, options);
+    });
+}
+// ============================================
+// CREATE SSL
+// ============================================
+async function createSSL(domain, options) {
+    log.title('🔐 Create SSL Certificate');
+    log.blank();
+    const host = await getSSHHost(options.host);
+    if (!host) {
+        log.error(`SSH host "${options.host}" not found`);
+        return;
+    }
+    const token = await getCloudflareToken();
+    if (!token) {
+        log.error('Cloudflare token not configured. Run: vu cloudflare auth --token YOUR_TOKEN');
+        return;
+    }
+    log.kv('Domain', domain);
+    log.kv('Server', `${host.name} (${host.hostname})`);
+    log.blank();
+    const startTime = Date.now();
+    // Step 1: Get zone
+    const zoneSpinner = spinner('Getting Cloudflare zone...').start();
+    const zone = await getZoneByDomain(domain);
+    if (!zone) {
+        zoneSpinner.fail(`Zone not found for domain: ${domain}`);
+        return;
+    }
+    zoneSpinner.succeed(`Zone: ${zone.name} (${zone.id})`);
+    // Step 2: Create DNS records (if not skipped)
+    if (!options.skipDns) {
+        const dnsSpinner = spinner('Creating DNS records...').start();
+        try {
+            // Create A records
+            await upsertDNSRecord(zone.id, 'A', '@', host.hostname, true);
+            await upsertDNSRecord(zone.id, 'A', 'www', host.hostname, true);
+            await upsertDNSRecord(zone.id, 'A', 'api', host.hostname, true);
+            await upsertDNSRecord(zone.id, 'A', '*', host.hostname, true);
+            dnsSpinner.succeed('DNS records created');
+        }
+        catch (error) {
+            dnsSpinner.warn(`DNS: ${error.message}`);
+        }
+    }
+    // Step 3: Set SSL mode
+    const sslModeSpinner = spinner('Setting SSL mode to Full (Strict)...').start();
+    try {
+        await setSSLMode(zone.id, 'strict');
+        sslModeSpinner.succeed('SSL mode: Full (Strict)');
+    }
+    catch (error) {
+        sslModeSpinner.warn(`SSL mode: ${error.message}`);
+    }
+    // Step 4: Create Origin Certificate
+    const certSpinner = spinner('Creating Origin Certificate (15 years)...').start();
+    const hostnames = [domain, `*.${domain}`];
+    const cert = await createOriginCertificate(hostnames);
+    if (!cert) {
+        certSpinner.fail('Certificate creation failed');
+        return;
+    }
+    certSpinner.succeed('Origin Certificate created');
+    // Step 5: Upload to server
+    const uploadSpinner = spinner('Uploading certificate to server...').start();
+    const sslDir = `/home/services/nginx/ssl`;
+    const certPath = `${sslDir}/${domain}.crt`;
+    const keyPath = `${sslDir}/${domain}.key`;
+    // Create directory
+    const mkdirArgs = buildSSHCommand(host, `mkdir -p ${sslDir}`);
+    await exec('ssh', mkdirArgs, { silent: true });
+    // Write certificate
+    const certCmd = `cat > ${certPath} << 'CERTEOF'
+${cert.certificate}
+CERTEOF`;
+    const certArgs = buildSSHCommand(host, certCmd);
+    await exec('ssh', certArgs, { silent: true });
+    // Write private key
+    const keyCmd = `cat > ${keyPath} << 'KEYEOF'
+${cert.private_key}
+KEYEOF`;
+    const keyArgs = buildSSHCommand(host, keyCmd);
+    await exec('ssh', keyArgs, { silent: true });
+    // Set permissions
+    const chmodArgs = buildSSHCommand(host, `chmod 600 ${certPath} ${keyPath}`);
+    await exec('ssh', chmodArgs, { silent: true });
+    uploadSpinner.succeed('Certificate uploaded to server');
+    // Step 6: Reload Nginx
+    const nginxSpinner = spinner('Reloading Nginx...').start();
+    const reloadArgs = buildSSHCommand(host, 'docker exec cicore_global_nginx nginx -s reload 2>/dev/null || true');
+    await exec('ssh', reloadArgs, { silent: true });
+    nginxSpinner.succeed('Nginx reloaded');
+    const elapsed = ((Date.now() - startTime) / 1000).toFixed(1);
+    log.blank();
+    log.box('✅ SSL Certificate Created', [
+        `Domain: ${domain}`,
+        `Certificate: ${certPath}`,
+        `Private Key: ${keyPath}`,
+        `Expires: 15 years`,
+        `Duration: ${elapsed}s`,
+    ]);
+}
+// ============================================
+// RENEW SSL
+// ============================================
+async function renewSSL(domain, options) {
+    log.title('🔄 Renew SSL Certificate');
+    log.blank();
+    // Renew is same as create (Cloudflare Origin Certs are 15 years)
+    await createSSL(domain, { ...options, skipDns: true });
+}
+// ============================================
+// LIST SSL
+// ============================================
+async function listSSL(options) {
+    log.title('📋 SSL Certificates');
+    log.blank();
+    const host = await getSSHHost(options.host);
+    if (!host) {
+        log.error(`SSH host "${options.host}" not found`);
+        return;
+    }
+    const listSpinner = spinner('Listing certificates...').start();
+    const cmd = `
+    for cert in /home/services/nginx/ssl/*.crt 2>/dev/null; do
+      if [ -f "$cert" ]; then
+        domain=$(basename "$cert" .crt)
+        expiry=$(openssl x509 -enddate -noout -in "$cert" 2>/dev/null | cut -d= -f2)
+        echo "$domain|$expiry"
+      fi
+    done
+  `;
+    const args = buildSSHCommand(host, cmd);
+    const result = await exec('ssh', args, { silent: true });
+    listSpinner.stop();
+    if (!result.stdout.trim()) {
+        log.info('No SSL certificates found');
+        return;
+    }
+    const certs = result.stdout.trim().split('\n').map(line => {
+        const [domain, expiry] = line.split('|');
+        const expiryDate = new Date(expiry);
+        const now = new Date();
+        const daysLeft = Math.ceil((expiryDate.getTime() - now.getTime()) / (1000 * 60 * 60 * 24));
+        const status = daysLeft > 30 ? '✅ ACTIVE' : daysLeft > 0 ? '⚠️ EXPIRING' : '❌ EXPIRED';
+        return [domain, expiry || 'Unknown', status];
+    });
+    formatTable(['Domain', 'Expires', 'Status'], certs);
+}
+// ============================================
+// CHECK SSL
+// ============================================
+async function checkSSL(domain, options) {
+    log.title('🔍 SSL Certificate Check');
+    log.blank();
+    const host = await getSSHHost(options.host);
+    if (!host) {
+        log.error(`SSH host "${options.host}" not found`);
+        return;
+    }
+    log.kv('Domain', domain);
+    log.blank();
+    // Check local certificate
+    const localSpinner = spinner('Checking local certificate...').start();
+    const certPath = `/home/services/nginx/ssl/${domain}.crt`;
+    const localCmd = `
+    if [ -f "${certPath}" ]; then
+      openssl x509 -in "${certPath}" -noout -subject -issuer -dates 2>/dev/null
+    else
+      echo "NOT_FOUND"
+    fi
+  `;
+    const localArgs = buildSSHCommand(host, localCmd);
+    const localResult = await exec('ssh', localArgs, { silent: true });
+    if (localResult.stdout.includes('NOT_FOUND')) {
+        localSpinner.fail('Local certificate not found');
+    }
+    else {
+        localSpinner.succeed('Local certificate found');
+        console.log(localResult.stdout);
+    }
+    // Check remote SSL
+    const remoteSpinner = spinner('Checking remote SSL connection...').start();
+    const remoteCmd = `echo | openssl s_client -connect ${domain}:443 -servername ${domain} 2>/dev/null | openssl x509 -noout -dates 2>/dev/null || echo "CONNECTION_FAILED"`;
+    const remoteArgs = buildSSHCommand(host, remoteCmd);
+    const remoteResult = await exec('ssh', remoteArgs, { silent: true });
+    if (remoteResult.stdout.includes('CONNECTION_FAILED')) {
+        remoteSpinner.warn('Remote SSL connection failed');
+    }
+    else {
+        remoteSpinner.succeed('Remote SSL connection OK');
+        console.log(remoteResult.stdout);
+    }
+}
+// ============================================
+// DELETE SSL
+// ============================================
+async function deleteSSL(domain, options) {
+    log.title('🗑️ Delete SSL Certificate');
+    log.blank();
+    const host = await getSSHHost(options.host);
+    if (!host) {
+        log.error(`SSH host "${options.host}" not found`);
+        return;
+    }
+    if (!options.force) {
+        const confirmed = await confirm(`Delete SSL certificate for ${domain}?`, false);
+        if (!confirmed) {
+            log.info('Cancelled');
+            return;
+        }
+    }
+    const deleteSpinner = spinner('Deleting certificate...').start();
+    const cmd = `rm -f /home/services/nginx/ssl/${domain}.crt /home/services/nginx/ssl/${domain}.key`;
+    const args = buildSSHCommand(host, cmd);
+    await exec('ssh', args, { silent: true });
+    deleteSpinner.succeed('Certificate deleted');
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/ssl/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/ssl/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAyB,MAAM,yBAAyB,CAAC;AAC7F,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,UAAU,EACV,eAAe,EAChB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,OAAO;SAChB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,4BAA4B,CAAC,CAAC;IAE7C,gBAAgB;IAChB,GAAG;SACA,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CAAC,+CAA+C,CAAC;SAC5D,MAAM,CAAC,mBAAmB,EAAE,eAAe,EAAE,QAAQ,CAAC;SACtD,MAAM,CAAC,YAAY,EAAE,0BAA0B,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEL,eAAe;IACf,GAAG;SACA,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,uBAAuB,CAAC;SACpC,MAAM,CAAC,mBAAmB,EAAE,eAAe,EAAE,QAAQ,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEL,cAAc;IACd,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,KAAK,CAAC,IAAI,CAAC;SACX,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,mBAAmB,EAAE,eAAe,EAAE,QAAQ,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEL,eAAe;IACf,GAAG;SACA,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,mBAAmB,EAAE,eAAe,EAAE,QAAQ,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEL,gBAAgB;IAChB,GAAG;SACA,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CAAC,wBAAwB,CAAC;SACrC,MAAM,CAAC,mBAAmB,EAAE,eAAe,EAAE,QAAQ,CAAC;SACtD,MAAM,CAAC,aAAa,EAAE,mBAAmB,CAAC;SAC1C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,+CAA+C;AAC/C,aAAa;AACb,+CAA+C;AAC/C,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,OAAY;IACnD,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACvC,GAAG,CAAC,KAAK,EAAE,CAAC;IAEZ,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,IAAI,aAAa,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpD,GAAG,CAAC,KAAK,EAAE,CAAC;IAEZ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,mBAAmB;IACnB,MAAM,WAAW,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC,KAAK,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,WAAW,CAAC,IAAI,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAEvD,8CAA8C;IAC9C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC;YACH,mBAAmB;YACnB,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC9D,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChE,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChE,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC9D,UAAU,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,MAAM,cAAc,GAAG,OAAO,CAAC,sCAAsC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACpC,cAAc,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,cAAc,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,oCAAoC;IACpC,MAAM,WAAW,GAAG,OAAO,CAAC,2CAA2C,CAAC,CAAC,KAAK,EAAE,CAAC;IACjF,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAEtD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,WAAW,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAElD,2BAA2B;IAC3B,MAAM,aAAa,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC,KAAK,EAAE,CAAC;IAE5E,MAAM,MAAM,GAAG,0BAA0B,CAAC;IAC1C,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,MAAM,MAAM,CAAC;IAC3C,MAAM,OAAO,GAAG,GAAG,MAAM,IAAI,MAAM,MAAM,CAAC;IAE1C,mBAAmB;IACnB,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,MAAM,EAAE,CAAC,CAAC;IAC9D,MAAM,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,oBAAoB;IACpB,MAAM,OAAO,GAAG,SAAS,QAAQ;EACjC,IAAI,CAAC,WAAW;QACV,CAAC;IACP,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,oBAAoB;IACpB,MAAM,MAAM,GAAG,SAAS,OAAO;EAC/B,IAAI,CAAC,WAAW;OACX,CAAC;IACN,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,kBAAkB;IAClB,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,aAAa,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC;IAC5E,MAAM,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,aAAa,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAExD,uBAAuB;IACvB,MAAM,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3D,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,qEAAqE,CAAC,CAAC;IAChH,MAAM,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEvC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAE7D,GAAG,CAAC,KAAK,EAAE,CAAC;IACZ,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE;QACnC,WAAW,MAAM,EAAE;QACnB,gBAAgB,QAAQ,EAAE;QAC1B,gBAAgB,OAAO,EAAE;QACzB,mBAAmB;QACnB,aAAa,OAAO,GAAG;KACxB,CAAC,CAAC;AACL,CAAC;AAED,+CAA+C;AAC/C,YAAY;AACZ,+CAA+C;AAC/C,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,OAAY;IAClD,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACtC,GAAG,CAAC,KAAK,EAAE,CAAC;IAEZ,iEAAiE;IACjE,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,+CAA+C;AAC/C,WAAW;AACX,+CAA+C;AAC/C,KAAK,UAAU,OAAO,CAAC,OAAY;IACjC,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACjC,GAAG,CAAC,KAAK,EAAE,CAAC;IAEZ,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,IAAI,aAAa,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;IAE/D,MAAM,GAAG,GAAG;;;;;;;;GAQX,CAAC;IAEF,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzD,WAAW,CAAC,IAAI,EAAE,CAAC;IAEnB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACxD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;QACvF,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,WAAW,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,+CAA+C;AAC/C,YAAY;AACZ,+CAA+C;AAC/C,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,OAAY;IAClD,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACtC,GAAG,CAAC,KAAK,EAAE,CAAC;IAEZ,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,IAAI,aAAa,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzB,GAAG,CAAC,KAAK,EAAE,CAAC;IAEZ,0BAA0B;IAC1B,MAAM,YAAY,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC,KAAK,EAAE,CAAC;IACtE,MAAM,QAAQ,GAAG,4BAA4B,MAAM,MAAM,CAAC;IAC1D,MAAM,QAAQ,GAAG;eACJ,QAAQ;0BACG,QAAQ;;;;GAI/B,CAAC;IACF,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnE,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7C,YAAY,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,mBAAmB;IACnB,MAAM,aAAa,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3E,MAAM,SAAS,GAAG,oCAAoC,MAAM,oBAAoB,MAAM,mFAAmF,CAAC;IAC1K,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACtD,aAAa,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,aAAa;AACb,+CAA+C;AAC/C,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,OAAY;IACnD,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACxC,GAAG,CAAC,KAAK,EAAE,CAAC;IAEZ,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,IAAI,aAAa,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,8BAA8B,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;IACjE,MAAM,GAAG,GAAG,kCAAkC,MAAM,iCAAiC,MAAM,MAAM,CAAC;IAClG,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,aAAa,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAC/C,CAAC"}

package/dist/commands/superadmin/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * CiCore CLI — `ci super-admin` (control-plane platform super-admins)
+ *
+ * Manages `cp_super_admins` in the control-plane DB (vucore_control) — the
+ * registry of platform-level super-admins (K5). Control-plane operations
+ * (brand/domain CRUD, etc.) are gated on membership here, by email: being a
+ * data-plane super-admin on *your own* core does NOT grant authority over the
+ * whole platform's brands. The merkez (cicore.com.tr) platform admin is seeded
+ * here; a whitelabel brand's own super-admin is deliberately absent → denied.
+ *
+ * Deploy-free: writes straight to the control-plane DB over SSH/psql, so the
+ * registry can be seeded + inspected before the PHP gate that reads it ships.
+ */
+import { Command } from 'commander';
+export declare function registerSuperAdminCommands(program: Command): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/superadmin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/superadmin/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAenC,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAkEjE"}

package/dist/commands/superadmin/index.js

@@ -0,0 +1,81 @@
+/**
+ * CiCore CLI — `ci super-admin` (control-plane platform super-admins)
+ *
+ * Manages `cp_super_admins` in the control-plane DB (vucore_control) — the
+ * registry of platform-level super-admins (K5). Control-plane operations
+ * (brand/domain CRUD, etc.) are gated on membership here, by email: being a
+ * data-plane super-admin on *your own* core does NOT grant authority over the
+ * whole platform's brands. The merkez (cicore.com.tr) platform admin is seeded
+ * here; a whitelabel brand's own super-admin is deliberately absent → denied.
+ *
+ * Deploy-free: writes straight to the control-plane DB over SSH/psql, so the
+ * registry can be seeded + inspected before the PHP gate that reads it ships.
+ */
+import { log, formatTable } from '../../lib/logger.js';
+import { getHostConfig } from '../../lib/hosts.js';
+import { dbSelectJson, dbExec } from '../../lib/ops/db.js';
+const CONTROL_DB = 'vucore_control';
+const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+export function registerSuperAdminCommands(program) {
+    const sa = program.command('super-admin').description('Control-plane platform super-admins (cp_super_admins)');
+    sa.command('list')
+        .description('List platform super-admins')
+        .option('-h, --host <host>', 'Host alias (cicore | mkt)')
+        .action(async (options) => {
+        const cfg = resolveHost(options.host);
+        const rows = await dbSelectJson(cfg, CONTROL_DB, `SELECT email, name, is_active, created_at FROM cp_super_admins ORDER BY created_at`);
+        if (rows.length === 0) {
+            log.warn('No platform super-admins registered. Add one with `ci super-admin add <email>`.');
+            return;
+        }
+        formatTable(['Email', 'Name', 'Active'], rows.map(r => [r.email, r.name, r.is_active ? 'yes' : 'no']));
+    });
+    sa.command('add <email>')
+        .description('Register (or re-activate) a platform super-admin')
+        .option('-h, --host <host>', 'Host alias (cicore | mkt)')
+        .option('--name <name>', 'Display name', 'Super Admin')
+        .action(async (email, options) => {
+        const cfg = resolveHost(options.host);
+        const e = email.trim().toLowerCase();
+        if (!EMAIL_RE.test(e)) {
+            log.error(`Invalid email: ${email}`);
+            process.exit(1);
+        }
+        const name = (options.name ?? 'Super Admin').replace(/'/g, "''");
+        // Idempotent upsert: re-adding re-activates + updates the name.
+        const res = await dbExec(cfg, CONTROL_DB, `INSERT INTO cp_super_admins (email, name, is_active) VALUES ('${e}', '${name}', true)
+         ON CONFLICT (email) DO UPDATE SET name = EXCLUDED.name, is_active = true, updated_at = now();`);
+        if (!res.success) {
+            log.error(`Failed to add super-admin: ${res.stderr.trim()}`);
+            process.exit(1);
+        }
+        log.success(`Platform super-admin: ${e} (active)`);
+    });
+    sa.command('remove <email>')
+        .description('Deactivate a platform super-admin (soft — keeps the row)')
+        .option('-h, --host <host>', 'Host alias (cicore | mkt)')
+        .action(async (email, options) => {
+        const cfg = resolveHost(options.host);
+        const e = email.trim().toLowerCase();
+        const res = await dbExec(cfg, CONTROL_DB, `UPDATE cp_super_admins SET is_active = false, updated_at = now() WHERE email = '${e.replace(/'/g, "''")}';`);
+        if (!res.success) {
+            log.error(`Failed to remove super-admin: ${res.stderr.trim()}`);
+            process.exit(1);
+        }
+        log.success(`Platform super-admin deactivated: ${e}`);
+    });
+}
+function resolveHost(alias) {
+    if (alias === undefined) {
+        log.error('--host is required (cicore | mkt). Pass --host <alias>.');
+        process.exit(1);
+    }
+    try {
+        return getHostConfig(alias);
+    }
+    catch (err) {
+        log.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/superadmin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/superadmin/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAmB,MAAM,oBAAoB,CAAA;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAE1D,MAAM,UAAU,GAAG,gBAAgB,CAAA;AACnC,MAAM,QAAQ,GAAG,4BAA4B,CAAA;AAS7C,MAAM,UAAU,0BAA0B,CAAC,OAAgB;IACzD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,uDAAuD,CAAC,CAAA;IAE9G,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,4BAA4B,CAAC;SACzC,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,OAA0B,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B,GAAG,EACH,UAAU,EACV,oFAAoF,CACrF,CAAA;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAA;YAC3F,OAAM;QACR,CAAC;QACD,WAAW,CACT,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAC3B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAC7D,CAAA;IACH,CAAC,CAAC,CAAA;IAEJ,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,kDAAkD,CAAC;SAC/D,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;SACxD,MAAM,CAAC,eAAe,EAAE,cAAc,EAAE,aAAa,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,OAAyC,EAAE,EAAE;QACzE,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAA;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAChE,gEAAgE;QAChE,MAAM,GAAG,GAAG,MAAM,MAAM,CACtB,GAAG,EACH,UAAU,EACV,iEAAiE,CAAC,OAAO,IAAI;uGACkB,CAChG,CAAA;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,WAAW,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEJ,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,0DAA0D,CAAC;SACvE,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,OAA0B,EAAE,EAAE;QAC1D,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,GAAG,GAAG,MAAM,MAAM,CACtB,GAAG,EACH,UAAU,EACV,mFAAmF,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAC7G,CAAA;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;AACN,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,GAAG,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAA;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,KAAK,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/commands/tenant/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * CiCore CLI - Tenant Management Commands
+ */
+import { Command } from 'commander';
+export declare function registerTenantCommands(program: Command): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/tenant/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/tenant/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmD7D"}

package/dist/commands/tenant/index.js

@@ -0,0 +1,192 @@
+/**
+ * CiCore CLI - Tenant Management Commands
+ */
+import { log, spinner } from '../../lib/logger.js';
+import { dockerExec } from '../../lib/shell.js';
+import { containers } from '../../lib/config.js';
+import { confirm } from '../../lib/prompts.js';
+export function registerTenantCommands(program) {
+    const tenant = program
+        .command('tenant')
+        .description('Tenant management commands');
+    // vu tenant:create <name> <core>
+    tenant
+        .command('create <name> <core>')
+        .description('Create a new tenant')
+        .option('-d, --domain <domain>', 'Tenant subdomain')
+        .action(async (name, core, options) => {
+        await createTenant(name, core, options);
+    });
+    // vu tenant:list <core>
+    tenant
+        .command('list <core>')
+        .alias('ls')
+        .description('List tenants in a core')
+        .option('-j, --json', 'Output as JSON')
+        .action(async (core, options) => {
+        await listTenants(core, options);
+    });
+    // vu tenant:delete <name> <core>
+    tenant
+        .command('delete <name> <core>')
+        .alias('rm')
+        .description('Delete a tenant')
+        .option('-f, --force', 'Skip confirmation')
+        .action(async (name, core, options) => {
+        await deleteTenant(name, core, options);
+    });
+    // vu tenant:enable-addon <tenant> <addon>
+    tenant
+        .command('enable-addon <tenant> <addon>')
+        .description('Enable addon for tenant')
+        .option('-c, --core <core>', 'Core name', 'core1')
+        .action(async (tenantName, addonName, options) => {
+        await toggleTenantAddon(tenantName, addonName, options.core, true);
+    });
+    // vu tenant:disable-addon <tenant> <addon>
+    tenant
+        .command('disable-addon <tenant> <addon>')
+        .description('Disable addon for tenant')
+        .option('-c, --core <core>', 'Core name', 'core1')
+        .action(async (tenantName, addonName, options) => {
+        await toggleTenantAddon(tenantName, addonName, options.core, false);
+    });
+}
+async function createTenant(name, core, options) {
+    log.title(`Create Tenant: ${name} in ${core}`);
+    const subdomain = options.domain || name.toLowerCase();
+    log.kv('Tenant Name', name);
+    log.kv('Subdomain', subdomain);
+    log.kv('Core', core);
+    log.blank();
+    const shouldCreate = await confirm('Create tenant with these settings?', true);
+    if (!shouldCreate) {
+        log.warn('Cancelled');
+        return;
+    }
+    const createSpinner = spinner('Creating tenant...').start();
+    // Create tenant via PHP
+    const phpCmd = `php -r "
+    require '/var/www/vendor/autoload.php';
+    
+    \\\$corePath = '/var/www/cores/${core}';
+    \\\$dotenv = Dotenv\\\\Dotenv::createImmutable(\\\$corePath);
+    \\\$dotenv->load();
+    
+    \\\$tenantService = new VuCore\\\\Core\\\\Services\\\\TenantService();
+    \\\$result = \\\$tenantService->create([
+      'name' => '${name}',
+      'subdomain' => '${subdomain}',
+      'status' => 'active'
+    ]);
+    
+    echo json_encode(\\\$result);
+  "`;
+    const result = await dockerExec(containers.php, phpCmd, { silent: true });
+    if (!result.success) {
+        createSpinner.fail('Failed to create tenant');
+        log.error(result.stderr);
+        return;
+    }
+    createSpinner.succeed('Tenant created');
+    log.blank();
+    log.success(`Tenant "${name}" created in ${core}`);
+    log.info(`Access: https://${subdomain}.{domain}`);
+}
+async function listTenants(core, options) {
+    log.title(`Tenants in ${core}`);
+    const phpCmd = `php -r "
+    require '/var/www/vendor/autoload.php';
+    
+    \\\$corePath = '/var/www/cores/${core}';
+    \\\$dotenv = Dotenv\\\\Dotenv::createImmutable(\\\$corePath);
+    \\\$dotenv->load();
+    
+    \\\$tenantService = new VuCore\\\\Core\\\\Services\\\\TenantService();
+    \\\$tenants = \\\$tenantService->getAll();
+    
+    echo json_encode(\\\$tenants);
+  "`;
+    const result = await dockerExec(containers.php, phpCmd, { silent: true });
+    if (!result.success) {
+        log.error('Failed to list tenants');
+        log.error(result.stderr);
+        return;
+    }
+    try {
+        const tenants = JSON.parse(result.stdout);
+        if (options.json) {
+            console.log(JSON.stringify(tenants, null, 2));
+            return;
+        }
+        if (!tenants.length) {
+            log.info('No tenants found');
+            return;
+        }
+        tenants.forEach((t) => {
+            log.item(`${t.name} (${t.subdomain}) - ${t.status}`);
+        });
+        log.blank();
+        log.info(`Total: ${tenants.length} tenant(s)`);
+    }
+    catch {
+        log.error('Failed to parse tenant list');
+    }
+}
+async function deleteTenant(name, core, options) {
+    log.title(`Delete Tenant: ${name} from ${core}`);
+    if (!options.force) {
+        const confirmed = await confirm(`Delete tenant "${name}"? This cannot be undone.`, false);
+        if (!confirmed) {
+            log.warn('Cancelled');
+            return;
+        }
+    }
+    const deleteSpinner = spinner('Deleting tenant...').start();
+    const phpCmd = `php -r "
+    require '/var/www/vendor/autoload.php';
+    
+    \\\$corePath = '/var/www/cores/${core}';
+    \\\$dotenv = Dotenv\\\\Dotenv::createImmutable(\\\$corePath);
+    \\\$dotenv->load();
+    
+    \\\$tenantService = new VuCore\\\\Core\\\\Services\\\\TenantService();
+    \\\$result = \\\$tenantService->deleteByName('${name}');
+    
+    echo json_encode(\\\$result);
+  "`;
+    const result = await dockerExec(containers.php, phpCmd, { silent: true });
+    if (!result.success) {
+        deleteSpinner.fail('Failed to delete tenant');
+        log.error(result.stderr);
+        return;
+    }
+    deleteSpinner.succeed('Tenant deleted');
+    log.success(`Tenant "${name}" deleted from ${core}`);
+}
+async function toggleTenantAddon(tenantName, addonName, core, enable) {
+    const action = enable ? 'Enable' : 'Disable';
+    log.title(`${action} Addon: ${addonName} for ${tenantName}`);
+    const toggleSpinner = spinner(`${action}ing addon...`).start();
+    const phpCmd = `php -r "
+    require '/var/www/vendor/autoload.php';
+    
+    \\\$corePath = '/var/www/cores/${core}';
+    \\\$dotenv = Dotenv\\\\Dotenv::createImmutable(\\\$corePath);
+    \\\$dotenv->load();
+    
+    \\\$tenantService = new VuCore\\\\Core\\\\Services\\\\TenantService();
+    \\\$result = \\\$tenantService->toggleAddon('${tenantName}', '${addonName}', ${enable});
+    
+    echo json_encode(\\\$result);
+  "`;
+    const result = await dockerExec(containers.php, phpCmd, { silent: true });
+    if (!result.success) {
+        toggleSpinner.fail(`Failed to ${action.toLowerCase()} addon`);
+        log.error(result.stderr);
+        return;
+    }
+    toggleSpinner.succeed(`Addon ${enable ? 'enabled' : 'disabled'}`);
+    log.success(`${addonName} is now ${enable ? 'enabled' : 'disabled'} for ${tenantName}`);
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/tenant/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/tenant/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAO,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAS,MAAM,sBAAsB,CAAC;AAEtD,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAG,OAAO;SACnB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,4BAA4B,CAAC,CAAC;IAE7C,iCAAiC;IACjC,MAAM;SACH,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,qBAAqB,CAAC;SAClC,MAAM,CAAC,uBAAuB,EAAE,kBAAkB,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAAY,EAAE,OAAO,EAAE,EAAE;QACpD,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEL,wBAAwB;IACxB,MAAM;SACH,OAAO,CAAC,aAAa,CAAC;SACtB,KAAK,CAAC,IAAI,CAAC;SACX,WAAW,CAAC,wBAAwB,CAAC;SACrC,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC;SACtC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAAO,EAAE,EAAE;QACtC,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEL,iCAAiC;IACjC,MAAM;SACH,OAAO,CAAC,sBAAsB,CAAC;SAC/B,KAAK,CAAC,IAAI,CAAC;SACX,WAAW,CAAC,iBAAiB,CAAC;SAC9B,MAAM,CAAC,aAAa,EAAE,mBAAmB,CAAC;SAC1C,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAAY,EAAE,OAAO,EAAE,EAAE;QACpD,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEL,0CAA0C;IAC1C,MAAM;SACH,OAAO,CAAC,+BAA+B,CAAC;SACxC,WAAW,CAAC,yBAAyB,CAAC;SACtC,MAAM,CAAC,mBAAmB,EAAE,WAAW,EAAE,OAAO,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,SAAiB,EAAE,OAAO,EAAE,EAAE;QAC/D,MAAM,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEL,2CAA2C;IAC3C,MAAM;SACH,OAAO,CAAC,gCAAgC,CAAC;SACzC,WAAW,CAAC,0BAA0B,CAAC;SACvC,MAAM,CAAC,mBAAmB,EAAE,WAAW,EAAE,OAAO,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,SAAiB,EAAE,OAAO,EAAE,EAAE;QAC/D,MAAM,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,OAAY;IAClE,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;IAE/C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;IAEvD,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC5B,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC/B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrB,GAAG,CAAC,KAAK,EAAE,CAAC;IAEZ,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,oCAAoC,EAAE,IAAI,CAAC,CAAC;IAC/E,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;IAE5D,wBAAwB;IACxB,MAAM,MAAM,GAAG;;;qCAGoB,IAAI;;;;;;mBAMtB,IAAI;wBACC,SAAS;;;;;IAK7B,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,aAAa,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IAED,aAAa,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAExC,GAAG,CAAC,KAAK,EAAE,CAAC;IACZ,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACnD,GAAG,CAAC,IAAI,CAAC,mBAAmB,SAAS,WAAW,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAY;IACnD,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAEhC,MAAM,MAAM,GAAG;;;qCAGoB,IAAI;;;;;;;;IAQrC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,OAAO,CAAC,OAAO,CAAC,CAAC,CAAM,EAAE,EAAE;YACzB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,OAAY;IAClE,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,SAAS,IAAI,EAAE,CAAC,CAAC;IAEjD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,kBAAkB,IAAI,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;IAE5D,MAAM,MAAM,GAAG;;;qCAGoB,IAAI;;;;;oDAKW,IAAI;;;IAGpD,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,aAAa,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IAED,aAAa,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,kBAAkB,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,UAAkB,EAClB,SAAiB,EACjB,IAAY,EACZ,MAAe;IAEf,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7C,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,WAAW,SAAS,QAAQ,UAAU,EAAE,CAAC,CAAC;IAE7D,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,KAAK,EAAE,CAAC;IAE/D,MAAM,MAAM,GAAG;;;qCAGoB,IAAI;;;;;mDAKU,UAAU,OAAO,SAAS,MAAM,MAAM;;;IAGrF,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,aAAa,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC9D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IAED,aAAa,CAAC,OAAO,CAAC,SAAS,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAClE,GAAG,CAAC,OAAO,CAAC,GAAG,SAAS,WAAW,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,QAAQ,UAAU,EAAE,CAAC,CAAC;AAC1F,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+/**
+ * CiCore CLI - Main Entry Point
+ *
+ * Professional Multi-Core SaaS Management Tool
+ *
+ * @author ciCore Team
+ * @version 1.0.0
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;GAOG"}