@ciphrix/cli 0.1.0

package/dist/commands/asset.d.ts

@@ -0,0 +1,59 @@
+import type { CredentialStore } from '../credentials.js';
+import { type CliIO } from '../io.js';
+export interface AssetCommonOptions {
+    io: CliIO;
+    apiUrl?: string | undefined;
+    json?: boolean | undefined;
+    credentialStore?: CredentialStore | undefined;
+}
+export declare const assetListCommand: ({ io, apiUrl, json, credentialStore, name, category, status, businessImpact, dataClassification, page, limit, }: AssetCommonOptions & {
+    name?: string | undefined;
+    category?: string | undefined;
+    status?: string | undefined;
+    businessImpact?: string | undefined;
+    dataClassification?: string | undefined;
+    page?: number | undefined;
+    limit?: number | undefined;
+}) => Promise<void>;
+export declare const assetGetCommand: ({ io, name, apiUrl, json, credentialStore, }: AssetCommonOptions & {
+    name: string;
+}) => Promise<void>;
+export declare const assetLinksCommand: ({ io, name, type, apiUrl, json, credentialStore, page, limit, }: AssetCommonOptions & {
+    name: string;
+    type: string;
+    page?: number | undefined;
+    limit?: number | undefined;
+}) => Promise<void>;
+export declare const assetUpdateCommand: ({ io, name, apiUrl, json, yes, credentialStore, changes, }: AssetCommonOptions & {
+    name: string;
+    yes?: boolean | undefined;
+    changes: Record<string, unknown>;
+}) => Promise<void>;
+export declare const assetCreateCommand: ({ io, apiUrl, json, credentialStore, name, category, subCategory, customerAssetKey, externalRefId, description, status, businessImpact, dataClassification, technicalOwner, businessOwner, location, }: AssetCommonOptions & {
+    name: string;
+    category: string;
+    subCategory: string;
+    customerAssetKey?: string | undefined;
+    externalRefId?: string | undefined;
+    description?: string | undefined;
+    status?: string | undefined;
+    businessImpact?: string | undefined;
+    dataClassification?: string | undefined;
+    technicalOwner?: string | undefined;
+    businessOwner?: string | undefined;
+    location?: string | undefined;
+}) => Promise<void>;
+export declare const assetDeleteCommand: ({ io, name, apiUrl, json, yes, credentialStore, }: AssetCommonOptions & {
+    name: string;
+    yes?: boolean | undefined;
+}) => Promise<void>;
+export declare const assetTagsCommand: ({ io, name, apiUrl, json, credentialStore, }: AssetCommonOptions & {
+    name: string;
+}) => Promise<void>;
+export declare const assetTagCommand: ({ io, name, key, value, mappingId, apiUrl, json, yes, credentialStore, }: AssetCommonOptions & {
+    name: string;
+    key?: string | undefined;
+    value?: string | undefined;
+    mappingId?: string | undefined;
+    yes?: boolean | undefined;
+}) => Promise<void>;

package/dist/commands/asset.js

@@ -0,0 +1,237 @@
+import { applyTool } from '../actions.js';
+import { writeLine, writeNextHint, writePageFooter, writeTable, clip } from '../io.js';
+import { asRecord, asText, callTool, errorMessage, resolveToolContext } from '../toolSurface.js';
+const text = (value, fallback = '-') => typeof value === 'string' ? value : typeof value === 'number' ? String(value) : fallback;
+export const assetListCommand = async ({ io, apiUrl, json = false, credentialStore, name, category, status, businessImpact, dataClassification, page, limit, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = {};
+    if (name)
+        input.name = name;
+    if (category)
+        input.category = [category];
+    if (status)
+        input.status = status
+            .split(',')
+            .map((value) => value.trim())
+            .filter(Boolean);
+    if (businessImpact)
+        input.businessImpact = [businessImpact];
+    if (dataClassification)
+        input.dataClassification = [dataClassification];
+    if (page)
+        input.page = page;
+    if (limit)
+        input.limit = limit;
+    const envelope = await callTool(ctx, 'list_assets', input);
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not list assets.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    const assets = Array.isArray(data.assets) ? data.assets : [];
+    writeLine(io.stdout, `${io.theme.bold('Assets')} ${io.theme.dim(`(${text(data.total, String(assets.length))} total)`)}`);
+    if (assets.length === 0) {
+        writeLine(io.stdout, 'No assets found.');
+        return;
+    }
+    writeTable(io, ['CODE', 'NAME', 'CATEGORY', 'STATUS', 'IMPACT', 'CLASSIFICATION'], assets.map((asset) => {
+        const record = asRecord(asset);
+        return [
+            text(record.code, '-'),
+            clip(text(record.name), 60),
+            text(record.category),
+            text(record.status),
+            text(record.businessImpact),
+            text(record.dataClassification),
+        ];
+    }));
+    writePageFooter(io, {
+        shown: assets.length,
+        total: typeof data.total === 'number' ? data.total : assets.length,
+        page: typeof data.page === 'number' ? data.page : 1,
+        limit: typeof data.limit === 'number' ? data.limit : 25,
+        hasMore: data.hasMore === true,
+    });
+    const next = asText(asRecord(assets[0]).code);
+    if (next)
+        writeNextHint(io, `ciphrix asset get ${next}`);
+};
+export const assetGetCommand = async ({ io, name, apiUrl, json = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'get_asset', { name });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Asset not found.'));
+    const asset = asRecord(asRecord(envelope.data).asset);
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(asset, null, 2));
+        return;
+    }
+    writeLine(io.stdout, `${io.theme.bold(asText(asset.name, 'Asset'))} ${io.theme.dim(`· ${asText(asset.code)}`)}`);
+    const fields = [
+        ['Customer key', asset.customerAssetKey],
+        ['Category', asset.category],
+        ['Sub-category', asset.subCategory],
+        ['Status', asset.status],
+        ['Business impact', asset.businessImpact],
+        ['Data classification', asset.dataClassification],
+        ['Technical owner', asset.technicalOwner],
+        ['Business owner', asset.businessOwner],
+        ['External ref', asset.externalRefId],
+        ['Location', asset.location],
+    ];
+    for (const [label, value] of fields) {
+        if (value === undefined || value === null || value === '')
+            continue;
+        writeLine(io.stdout, `  ${io.theme.dim(`${label}:`)} ${text(value)}`);
+    }
+    if (typeof asset.description === 'string' && asset.description.trim() !== '') {
+        writeLine(io.stdout);
+        writeLine(io.stdout, asset.description);
+    }
+};
+export const assetLinksCommand = async ({ io, name, type, apiUrl, json = false, credentialStore, page, limit, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = { name, type };
+    if (page)
+        input.page = page;
+    if (limit)
+        input.limit = limit;
+    const envelope = await callTool(ctx, 'list_asset_links', input);
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, `Could not read asset ${type}.`));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    const items = Array.isArray(data.items) ? data.items : [];
+    writeLine(io.stdout, `${io.theme.bold(`Asset ${type}`)} ${io.theme.dim(`(${text(data.total, String(items.length))})`)}`);
+    if (items.length === 0) {
+        writeLine(io.stdout, `No ${type} mapped.`);
+        return;
+    }
+    writeTable(io, ['ITEM', 'STATUS'], items.map((item) => {
+        const record = asRecord(item);
+        return [
+            text(record.name ?? record.asset_name ?? record.control_name ?? record.risk_title ?? record.id),
+            text(record.status),
+        ];
+    }));
+};
+export const assetUpdateCommand = async ({ io, name, apiUrl, json = false, yes = false, credentialStore, changes, }) => {
+    if (Object.keys(changes).length === 0) {
+        throw new Error('Provide at least one field, for example --status active');
+    }
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'update_asset',
+        input: { name, changes },
+        fallback: 'Could not update the asset.',
+        yes,
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else {
+        const data = asRecord(result.data);
+        const applied = Array.isArray(data.applied) ? data.applied.join(', ') : '';
+        const failed = Array.isArray(data.failed) ? data.failed.length : 0;
+        writeLine(io.stdout, `${io.theme.green('✓')} updated ${name}: ${applied}${failed > 0 ? io.theme.yellow(` · ${failed} refused`) : ''}`);
+    }
+};
+export const assetCreateCommand = async ({ io, apiUrl, json = false, credentialStore, name, category, subCategory, customerAssetKey, externalRefId, description, status, businessImpact, dataClassification, technicalOwner, businessOwner, location, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = { name, category, subCategory };
+    for (const [key, value] of [
+        ['customerAssetKey', customerAssetKey],
+        ['externalRefId', externalRefId],
+        ['description', description],
+        ['status', status],
+        ['businessImpact', businessImpact],
+        ['dataClassification', dataClassification],
+        ['technicalOwner', technicalOwner],
+        ['businessOwner', businessOwner],
+        ['location', location],
+    ]) {
+        if (value !== undefined)
+            input[key] = value;
+    }
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'create_asset',
+        input,
+        fallback: 'Could not create the asset.',
+    });
+    if (!result)
+        return;
+    const data = asRecord(result.data);
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(data, null, 2));
+        return;
+    }
+    writeLine(io.stdout, `${io.theme.green('✓')} asset created: ${asText(data.code, '') || asText(data.id)}`);
+};
+export const assetDeleteCommand = async ({ io, name, apiUrl, json = false, yes = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'delete_asset',
+        input: { name },
+        fallback: 'Could not delete the asset.',
+        yes,
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else
+        writeLine(io.stdout, `${io.theme.green('✓')} asset ${name} deleted`);
+};
+export const assetTagsCommand = async ({ io, name, apiUrl, json = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'list_asset_tags', { name });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not read the tags.'));
+    const data = asRecord(envelope.data);
+    const tags = Array.isArray(data.tags) ? data.tags : [];
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(data, null, 2));
+        return;
+    }
+    writeLine(io.stdout, `${io.theme.bold('Asset tags')} ${io.theme.dim(`(${tags.length})`)}`);
+    if (tags.length === 0) {
+        writeLine(io.stdout, 'No tags assigned.');
+        return;
+    }
+    writeTable(io, ['MAPPING', 'KEY', 'VALUE'], tags.map((tag) => {
+        const record = asRecord(tag);
+        return [asText(record.mappingId, '-'), asText(record.key), asText(record.value)];
+    }));
+};
+export const assetTagCommand = async ({ io, name, key, value, mappingId, apiUrl, json = false, yes = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = mappingId
+        ? { name, action: 'remove', mappingId }
+        : { name, action: 'assign', tags: [{ key: key, value: value }] };
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'set_asset_tag',
+        input,
+        fallback: 'Could not change the tag.',
+        yes,
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else
+        writeLine(io.stdout, `${io.theme.green('✓')} tag ${mappingId ? 'removed from' : 'assigned to'} ${name}`);
+};

package/dist/commands/check.d.ts

@@ -0,0 +1,30 @@
+import type { CredentialStore } from '../credentials.js';
+import { type CliIO } from '../io.js';
+export interface CheckCommonOptions {
+    io: CliIO;
+    apiUrl?: string | undefined;
+    json?: boolean | undefined;
+    credentialStore?: CredentialStore | undefined;
+}
+export interface CheckTargetOptions extends CheckCommonOptions {
+    check: string;
+}
+export declare const checkListCommand: ({ io, apiUrl, json, credentialStore, integrationType, status, page, limit, }: CheckCommonOptions & {
+    integrationType?: string | undefined;
+    status?: string | undefined;
+    page?: number | undefined;
+    limit?: number | undefined;
+}) => Promise<void>;
+export declare const checkResourcesCommand: ({ io, check, apiUrl, json, credentialStore, }: CheckTargetOptions) => Promise<void>;
+export declare const checkRunCommand: ({ io, check, apiUrl, json, credentialStore, }: CheckTargetOptions) => Promise<void>;
+export declare const checkIntegrationsCommand: ({ io, apiUrl, json, credentialStore, }: CheckCommonOptions) => Promise<void>;
+export declare const checkRunsCommand: ({ io, check, apiUrl, json, credentialStore, page, limit, }: CheckTargetOptions & {
+    page?: number | undefined;
+    limit?: number | undefined;
+}) => Promise<void>;
+export declare const checkFindingsCommand: ({ io, check, apiUrl, json, credentialStore, }: CheckTargetOptions) => Promise<void>;
+export declare const checkSetEnabledCommand: ({ io, check, enabled, notes, apiUrl, json, yes, credentialStore, }: CheckTargetOptions & {
+    enabled: boolean;
+    notes?: string | undefined;
+    yes?: boolean | undefined;
+}) => Promise<void>;

package/dist/commands/check.js

@@ -0,0 +1,182 @@
+import { applyTool } from '../actions.js';
+import { writeLine, writeNextHint, writePageFooter, writeTable } from '../io.js';
+import { asRecord, asText, callTool, errorMessage, resolveToolContext } from '../toolSurface.js';
+const text = (value, fallback = '-') => typeof value === 'string' ? value : typeof value === 'number' ? String(value) : fallback;
+export const checkListCommand = async ({ io, apiUrl, json = false, credentialStore, integrationType, status, page, limit, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = {};
+    if (integrationType)
+        input.integrationType = integrationType
+            .split(',')
+            .map((value) => value.trim())
+            .filter(Boolean);
+    if (status)
+        input.status = status
+            .split(',')
+            .map((value) => value.trim())
+            .filter(Boolean);
+    if (page)
+        input.page = page;
+    if (limit)
+        input.limit = limit;
+    const envelope = await callTool(ctx, 'list_checks', input);
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not list checks.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    const checks = Array.isArray(data.checks) ? data.checks : [];
+    writeLine(io.stdout, `${io.theme.bold('Checks')} ${io.theme.dim(`(${text(data.total, String(checks.length))} total)`)}`);
+    if (checks.length === 0) {
+        writeLine(io.stdout, 'No checks found.');
+        return;
+    }
+    writeTable(io, ['CODE', 'NAME', 'INTEGRATION', 'SEVERITY', 'STATUS', 'COMPLIANCE'], checks.map((check) => {
+        const record = asRecord(check);
+        return [
+            text(record.code, '-'),
+            text(record.name),
+            text(record.integration),
+            text(record.severity),
+            text(record.status),
+            record.complianceRate === null || record.complianceRate === undefined
+                ? '-'
+                : `${text(record.complianceRate)}%`,
+        ];
+    }));
+    writePageFooter(io, {
+        shown: checks.length,
+        total: typeof data.total === 'number' ? data.total : checks.length,
+        page: typeof data.page === 'number' ? data.page : 1,
+        limit: typeof data.limit === 'number' ? data.limit : 25,
+        hasMore: data.hasMore === true,
+    });
+    const next = asText(asRecord(checks[0]).code);
+    if (next)
+        writeNextHint(io, `ciphrix check resources ${next}`);
+};
+export const checkResourcesCommand = async ({ io, check, apiUrl, json = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'list_check_resources', { name: check });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not list check resources.'));
+    const data = asRecord(envelope.data);
+    const resources = Array.isArray(data.resources) ? data.resources : [];
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(data, null, 2));
+        return;
+    }
+    writeLine(io.stdout, `${io.theme.bold(check)} ${io.theme.dim(`· ${resources.length} resource(s)`)}`);
+    for (const resource of resources) {
+        const record = asRecord(resource);
+        writeLine(io.stdout, `  ${text(record.resource_name ?? record.name ?? record.resource_id ?? record.id)}`);
+    }
+};
+export const checkRunCommand = async ({ io, check, apiUrl, json = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'get_check_run', { name: check });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not read the check run.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const run = asRecord(asRecord(envelope.data).run);
+    writeLine(io.stdout, `${io.theme.bold(check)} ${io.theme.dim('· latest run')}`);
+    for (const [key, value] of Object.entries(run)) {
+        if (value === undefined || value === null || typeof value === 'object')
+            continue;
+        writeLine(io.stdout, `  ${io.theme.dim(`${key}:`)} ${text(value)}`);
+    }
+};
+export const checkIntegrationsCommand = async ({ io, apiUrl, json = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'list_integrations', {});
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not list integrations.'));
+    const integrations = Array.isArray(asRecord(envelope.data).integrations)
+        ? asRecord(envelope.data).integrations
+        : [];
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(integrations, null, 2));
+        return;
+    }
+    writeLine(io.stdout, `${io.theme.bold('Integrations')} ${io.theme.dim(`(${integrations.length})`)}`);
+    for (const integration of integrations) {
+        writeLine(io.stdout, `  ${asText(integration, text(integration))}`);
+    }
+};
+export const checkRunsCommand = async ({ io, check, apiUrl, json = false, credentialStore, page, limit, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = { name: check };
+    if (page)
+        input.page = page;
+    if (limit)
+        input.limit = limit;
+    const envelope = await callTool(ctx, 'list_check_runs', input);
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not read the run history.'));
+    const data = asRecord(envelope.data);
+    const runs = Array.isArray(data.runs) ? data.runs : [];
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(data, null, 2));
+        return;
+    }
+    writeLine(io.stdout, `${io.theme.bold('Check runs')} ${io.theme.dim(`(${runs.length})`)}`);
+    if (runs.length === 0) {
+        writeLine(io.stdout, 'No runs recorded.');
+        return;
+    }
+    writeTable(io, ['WHEN', 'STATUS', 'COMPLIANCE'], runs.map((run) => {
+        const record = asRecord(run);
+        const rate = record.complianceRate;
+        return [
+            asText(record.runDate).slice(0, 10) || '-',
+            asText(record.status, '-'),
+            typeof rate === 'number' ? `${rate}%` : '-',
+        ];
+    }));
+};
+export const checkFindingsCommand = async ({ io, check, apiUrl, json = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'list_check_findings', { name: check });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not read the findings.'));
+    const data = asRecord(envelope.data);
+    const findings = Array.isArray(data.findings) ? data.findings : [];
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(data, null, 2));
+        return;
+    }
+    writeLine(io.stdout, `${io.theme.bold('Findings')} ${io.theme.dim(`(${findings.length})`)}`);
+    if (findings.length === 0) {
+        writeLine(io.stdout, 'No findings raised from this check.');
+        return;
+    }
+    writeTable(io, ['FINDING', 'STATUS'], findings.map((finding) => {
+        const record = asRecord(finding);
+        return [asText(record.title ?? record.name, asText(record.id)), asText(record.status, '-')];
+    }));
+};
+export const checkSetEnabledCommand = async ({ io, check, enabled, notes, apiUrl, json = false, yes = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = { name: check, enabled };
+    if (notes)
+        input.notes = notes;
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'set_check_enabled',
+        input,
+        fallback: 'Could not change the check.',
+        yes,
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else
+        writeLine(io.stdout, `${io.theme.green('\u2713')} ${enabled ? 'enabled' : 'disabled'} ${check}`);
+};

package/dist/commands/context.d.ts

@@ -0,0 +1,23 @@
+import type { CredentialStore } from '../credentials.js';
+import { type CliIO } from '../io.js';
+export interface ContextCommonOptions {
+    io: CliIO;
+    apiUrl?: string | undefined;
+    json?: boolean | undefined;
+    credentialStore?: CredentialStore | undefined;
+}
+export interface ContextReadOptions extends ContextCommonOptions {
+    store: string;
+}
+export interface ContextActionOptions extends ContextCommonOptions {
+    yes?: boolean | undefined;
+    confirm?: ((question: string) => Promise<boolean>) | undefined;
+}
+export declare const contextGetCommand: ({ io, store, apiUrl, json, credentialStore, }: ContextReadOptions) => Promise<void>;
+export declare const contextStatusCommand: ({ io, store, apiUrl, json, credentialStore, }: ContextReadOptions) => Promise<void>;
+export interface ContextSetOptions extends ContextCommonOptions {
+    target: string;
+    value: string;
+}
+export declare const contextSetCommand: ({ io, apiUrl, json, target, value, credentialStore, }: ContextSetOptions) => Promise<void>;
+export declare const contextResetCommand: ({ io, apiUrl, json, yes, confirm, credentialStore, }: ContextActionOptions) => Promise<void>;

package/dist/commands/context.js

@@ -0,0 +1,102 @@
+import { applyTool } from '../actions.js';
+import { writeLine } from '../io.js';
+import { asRecord, asText, callTool, errorMessage, resolveToolContext } from '../toolSurface.js';
+const assertStore = (store) => {
+    if (store !== 'business' && store !== 'operating') {
+        throw new Error(`Unknown context store "${store}". Use "business" or "operating".`);
+    }
+};
+const count = (value) => typeof value === 'number' ? String(value) : asText(value, '0');
+export const contextGetCommand = async ({ io, store, apiUrl, json = false, credentialStore, }) => {
+    assertStore(store);
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'get_context', { store });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not read context.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    writeLine(io.stdout, `${io.theme.bold('Context')} ${io.theme.dim(`· ${store} · ${count(data.answeredCount)}/${count(data.questionCount)} answered`)}`);
+    writeLine(io.stdout);
+    const digest = asText(data.digestMarkdown);
+    if (digest.trim() === '') {
+        writeLine(io.stdout, io.theme.dim('(no digest yet — answer some questions)'));
+        return;
+    }
+    writeLine(io.stdout, digest.trimEnd());
+};
+export const contextStatusCommand = async ({ io, store, apiUrl, json = false, credentialStore, }) => {
+    assertStore(store);
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'get_context_status', { store });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not read context status.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    writeLine(io.stdout, `${io.theme.bold('Context status')} ${io.theme.dim(`· ${store} · ${count(data.answeredCount)}/${count(data.questionCount)} answered · ${count(data.unansweredCount)} open`)}`);
+    const unanswered = Array.isArray(data.unanswered) ? data.unanswered : [];
+    if (unanswered.length === 0) {
+        writeLine(io.stdout, `${io.theme.green('✓')} Nothing outstanding.`);
+        return;
+    }
+    for (const item of unanswered) {
+        const record = asRecord(item);
+        writeLine(io.stdout, `  ${io.theme.cyan(asText(record.id))} — ${asText(record.label)}`);
+    }
+};
+const parseValue = (raw) => {
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return raw;
+    }
+};
+export const contextSetCommand = async ({ io, apiUrl, json = false, target, value, credentialStore, }) => {
+    const separator = target.indexOf('.');
+    if (separator === -1) {
+        throw new Error('Use <store>.<questionId>, for example business.company_size');
+    }
+    const store = target.slice(0, separator);
+    const questionId = target.slice(separator + 1);
+    assertStore(store);
+    if (!questionId)
+        throw new Error('A question id is required, for example business.company_size');
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'set_context_answer', {
+        store,
+        questionId,
+        value: parseValue(value),
+    });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not save the answer.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    writeLine(io.stdout, `${io.theme.green('✓')} ${store}.${questionId} saved`);
+};
+export const contextResetCommand = async ({ io, apiUrl, json = false, yes = false, confirm, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'reset_context',
+        input: { store: 'business' },
+        fallback: 'Could not reset the context.',
+        yes,
+        confirm,
+    });
+    if (!result)
+        return;
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(result, null, 2));
+        return;
+    }
+    writeLine(io.stdout, `${io.theme.green('✓')} Business Context reset`);
+};

package/dist/commands/control.d.ts

@@ -0,0 +1,44 @@
+import type { CredentialStore } from '../credentials.js';
+import { type CliIO } from '../io.js';
+export interface ControlCommonOptions {
+    io: CliIO;
+    apiUrl?: string | undefined;
+    json?: boolean | undefined;
+    credentialStore?: CredentialStore | undefined;
+}
+export interface ControlReadOptions extends ControlCommonOptions {
+    name: string;
+}
+export declare const controlListCommand: ({ io, apiUrl, json, credentialStore, search, domain, status, applicability, page, limit, }: ControlCommonOptions & {
+    search?: string | undefined;
+    domain?: string | undefined;
+    status?: string | undefined;
+    applicability?: string | undefined;
+    page?: number | undefined;
+    limit?: number | undefined;
+}) => Promise<void>;
+export declare const controlGetCommand: ({ io, name, apiUrl, json, credentialStore, }: ControlReadOptions) => Promise<void>;
+export declare const controlItemsCommand: ({ io, name, apiUrl, json, credentialStore, search, page, limit, }: ControlReadOptions & {
+    search?: string | undefined;
+    page?: number | undefined;
+    limit?: number | undefined;
+}) => Promise<void>;
+export declare const controlAvailableItemsCommand: ({ io, name, itemType, apiUrl, json, credentialStore, search, page, limit, }: ControlReadOptions & {
+    itemType: string;
+    search?: string | undefined;
+    page?: number | undefined;
+    limit?: number | undefined;
+}) => Promise<void>;
+export declare const controlUpdateCommand: ({ io, name, apiUrl, json, yes, confirm, credentialStore, changes, }: ControlReadOptions & {
+    yes?: boolean | undefined;
+    confirm?: ((question: string) => Promise<boolean>) | undefined;
+    changes: Record<string, unknown>;
+}) => Promise<void>;
+export declare const controlLinkCommand: ({ io, name, action, itemType, itemId, apiUrl, json, yes, confirm, credentialStore, }: ControlCommonOptions & {
+    name: string;
+    action: string;
+    itemType: string;
+    itemId: string;
+    yes?: boolean | undefined;
+    confirm?: ((question: string) => Promise<boolean>) | undefined;
+}) => Promise<void>;