@ciphrix/cli 0.1.0

package/dist/commands/test.d.ts

@@ -0,0 +1,54 @@
+import type { CredentialStore } from '../credentials.js';
+import { type CliIO } from '../io.js';
+export interface TestCommonOptions {
+    io: CliIO;
+    apiUrl?: string | undefined;
+    json?: boolean | undefined;
+    credentialStore?: CredentialStore | undefined;
+}
+export interface TestReadOptions extends TestCommonOptions {
+    name: string;
+    runId?: string | undefined;
+}
+export interface TestActionOptions extends TestCommonOptions {
+    name: string;
+    runId?: string | undefined;
+    yes?: boolean | undefined;
+    confirm?: ((question: string) => Promise<boolean>) | undefined;
+}
+export declare const testListCommand: ({ io, apiUrl, json, credentialStore, search, status, page, limit, }: TestCommonOptions & {
+    search?: string | undefined;
+    status?: string | undefined;
+    page?: number | undefined;
+    limit?: number | undefined;
+}) => Promise<void>;
+export declare const testGetCommand: ({ io, name, apiUrl, json, credentialStore, }: TestReadOptions) => Promise<void>;
+export declare const testRunsCommand: ({ io, name, apiUrl, json, credentialStore, }: TestReadOptions) => Promise<void>;
+export declare const testItemsCommand: ({ io, name, runId, apiUrl, json, credentialStore, }: TestReadOptions) => Promise<void>;
+export declare const testRunCreateCommand: ({ io, name, apiUrl, json, credentialStore, runAt, }: TestReadOptions & {
+    runAt?: string | undefined;
+}) => Promise<void>;
+export declare const testRunResultCommand: ({ io, name, runId, apiUrl, json, credentialStore, status, note, }: TestReadOptions & {
+    status: string;
+    note?: string | undefined;
+}) => Promise<void>;
+export declare const testRunDeleteCommand: ({ io, name, runId, apiUrl, json, yes, confirm, credentialStore, }: TestActionOptions) => Promise<void>;
+export interface TestAttachOptions extends TestReadOptions {
+    itemType: string;
+    itemId?: string | undefined;
+    uploadIds?: string[] | undefined;
+    file?: string | undefined;
+    unlink?: boolean | undefined;
+}
+export declare const testAttachCommand: ({ io, name, runId, apiUrl, json, credentialStore, itemType, itemId, uploadIds, file, unlink, }: TestAttachOptions) => Promise<void>;
+export declare const testAvailableItemsCommand: ({ io, name, runId, itemType, apiUrl, json, credentialStore, search, }: TestReadOptions & {
+    itemType: string;
+    search?: string | undefined;
+}) => Promise<void>;
+export declare const testLinksCommand: ({ io, name, apiUrl, json, credentialStore, }: TestReadOptions) => Promise<void>;
+export declare const testUpdateCommand: ({ io, name, apiUrl, json, yes, confirm, credentialStore, changes, }: TestReadOptions & {
+    yes?: boolean | undefined;
+    confirm?: ((question: string) => Promise<boolean>) | undefined;
+    changes: Record<string, unknown>;
+}) => Promise<void>;
+export declare const testDeleteCommand: ({ io, name, apiUrl, json, yes, confirm, credentialStore, }: TestActionOptions) => Promise<void>;

package/dist/commands/test.js

@@ -0,0 +1,331 @@
+import { applyTool } from '../actions.js';
+import { randomUUID } from 'node:crypto';
+import { uploadLocalFile } from '../upload.js';
+import { writeLine, writeNextHint, writePageFooter, writeTable } from '../io.js';
+import { asRecord, asText, callTool, errorMessage, resolveToolContext } from '../toolSurface.js';
+const text = (value, fallback = '-') => {
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'number')
+        return String(value);
+    return fallback;
+};
+const assessmentLabel = (assessment) => {
+    const record = asRecord(assessment);
+    const state = asText(record.state, 'unknown');
+    if (state !== 'ready')
+        return state;
+    return `${text(record.level, '-')} (${state})`;
+};
+export const testListCommand = async ({ io, apiUrl, json = false, credentialStore, search, status, page, limit, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = {};
+    if (search)
+        input.search = search;
+    if (status)
+        input.latestRunStatus = status
+            .split(',')
+            .map((value) => value.trim())
+            .filter(Boolean);
+    if (page)
+        input.page = page;
+    if (limit)
+        input.limit = limit;
+    const envelope = await callTool(ctx, 'list_tests', input);
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not list tests.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    const tests = Array.isArray(data.tests) ? data.tests : [];
+    writeLine(io.stdout, `${io.theme.bold('Tests')} ${io.theme.dim(`(${text(data.total, String(tests.length))})`)}`);
+    if (tests.length === 0) {
+        writeLine(io.stdout, 'No tests found.');
+        return;
+    }
+    writeTable(io, ['CODE', 'NAME', 'APPLICABILITY', 'LATEST RUN'], tests.map((test) => {
+        const record = asRecord(test);
+        return [
+            text(record.code, '-'),
+            text(record.name),
+            text(record.applicability),
+            text(record.latestRunStatus),
+        ];
+    }));
+    writePageFooter(io, {
+        shown: tests.length,
+        total: typeof data.total === 'number' ? data.total : tests.length,
+        page: typeof data.page === 'number' ? data.page : 1,
+        limit: typeof data.limit === 'number' ? data.limit : 25,
+        hasMore: data.hasMore === true,
+    });
+    const next = asText(asRecord(tests[0]).code);
+    if (next)
+        writeNextHint(io, `ciphrix test get ${next}`);
+};
+export const testGetCommand = async ({ io, name, apiUrl, json = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'get_test', { name });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Test not found.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const test = asRecord(asRecord(envelope.data).test);
+    const runs = Array.isArray(test.runs) ? test.runs : [];
+    const assurance = asRecord(asRecord(test.aiAssessments).runs);
+    writeLine(io.stdout, `${io.theme.bold(text(test.testName, 'Test'))} ${io.theme.dim(`· ${text(test.applicability)} · ${runs.length} run(s)`)}`);
+    writeLine(io.stdout);
+    renderRuns(io, runs, assurance);
+};
+export const testRunsCommand = async ({ io, name, apiUrl, json = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'list_test_runs', { name });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Test not found.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    const runs = Array.isArray(data.runs) ? data.runs : [];
+    writeLine(io.stdout, `${io.theme.bold(text(data.name, 'Test'))} ${io.theme.dim(`· ${runs.length} run(s)`)}`);
+    writeLine(io.stdout);
+    renderRuns(io, runs, asRecord(data.assurance));
+};
+const renderRuns = (io, runs, assurance) => {
+    if (runs.length === 0) {
+        writeLine(io.stdout, 'No runs yet.');
+        return;
+    }
+    writeTable(io, ['RUN', 'STATUS', 'WHEN', 'ITEMS', 'ASSURANCE'], runs.map((run) => {
+        const record = asRecord(run);
+        const counts = asRecord(record.itemCounts);
+        const items = Number(counts.upload ?? 0) + Number(counts.native_doc ?? 0) + Number(counts.check ?? 0);
+        return [
+            text(record.id),
+            text(record.status),
+            text(record.runAt).slice(0, 10),
+            String(items),
+            assuranceLabel(assurance[text(record.id)]),
+        ];
+    }));
+};
+const assuranceLabel = (assessment) => assessmentLabel(assessment);
+export const testItemsCommand = async ({ io, name, runId, apiUrl, json = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = { name };
+    if (runId)
+        input.runId = runId;
+    const envelope = await callTool(ctx, 'list_run_items', input);
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not read run items.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    const items = Array.isArray(data.items) ? data.items : [];
+    const relevance = asRecord(data.relevance);
+    writeLine(io.stdout, `${io.theme.bold('Run items')} ${io.theme.dim(`· run ${text(data.runId)}`)}`);
+    if (items.length === 0) {
+        writeLine(io.stdout, 'No evidence attached.');
+        return;
+    }
+    writeTable(io, ['ITEM', 'TYPE', 'RELEVANCE'], items.map((item) => {
+        const record = asRecord(item);
+        return [
+            text(record.name, text(record.id)),
+            text(record.itemType ?? record.type),
+            assessmentLabel(relevance[text(record.id)]),
+        ];
+    }));
+};
+export const testRunCreateCommand = async ({ io, name, apiUrl, json = false, credentialStore, runAt, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = { name };
+    if (runAt)
+        input.runAt = runAt;
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'create_test_run',
+        input,
+        fallback: 'Could not create a run.',
+    });
+    if (json && result)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else if (result)
+        writeLine(io.stdout, `${io.theme.green('✓')} run created: ${text(asRecord(result.data).runId)}`);
+};
+export const testRunResultCommand = async ({ io, name, runId, apiUrl, json = false, credentialStore, status, note, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = { name, status };
+    if (runId)
+        input.runId = runId;
+    if (note)
+        input.note = note;
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'set_test_run_status',
+        input,
+        fallback: 'Could not record the result.',
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else
+        writeLine(io.stdout, `${io.theme.green('✓')} run result: ${status}`);
+};
+export const testRunDeleteCommand = async ({ io, name, runId, apiUrl, json = false, yes = false, confirm, credentialStore, }) => {
+    if (!runId)
+        throw new Error('Provide --run <id> to delete a run.');
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'delete_test_run',
+        input: { name, runId },
+        fallback: 'Could not delete the run.',
+        yes,
+        confirm,
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else
+        writeLine(io.stdout, `${io.theme.green('✓')} run ${runId} deleted`);
+};
+export const testAttachCommand = async ({ io, name, runId, apiUrl, json = false, credentialStore, itemType, itemId, uploadIds, file, unlink = false, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    let resolvedItemType = itemType;
+    let resolvedItemId = itemId;
+    let resolvedUploadIds = uploadIds;
+    if (file) {
+        const upload = await uploadLocalFile(ctx, file, 'test');
+        resolvedItemType = 'upload';
+        resolvedItemId = undefined;
+        resolvedUploadIds = [upload.id];
+    }
+    const input = {
+        name,
+        action: unlink ? 'unlink' : 'link',
+        itemType: resolvedItemType,
+    };
+    if (runId)
+        input.runId = runId;
+    if (resolvedItemId)
+        input.itemId = resolvedItemId;
+    if (resolvedUploadIds && resolvedUploadIds.length > 0)
+        input.uploadIds = resolvedUploadIds;
+    const envelope = await callTool(ctx, 'attach_run_item', input, { idempotencyKey: randomUUID() });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not attach the item.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    const job = asText(data.aiTaskId);
+    writeLine(io.stdout, `${io.theme.green('✓')} ${unlink ? 'unlinked' : 'linked'} ${resolvedItemType} on run ${text(data.runId)}${job ? io.theme.dim(` · job ${job}`) : ''}`);
+};
+export const testAvailableItemsCommand = async ({ io, name, runId, itemType, apiUrl, json = false, credentialStore, search, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = { name, itemType };
+    if (runId)
+        input.runId = runId;
+    if (search)
+        input.search = search;
+    const envelope = await callTool(ctx, 'list_test_items_available', input);
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not read available items.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    const items = Array.isArray(data.items) ? data.items : [];
+    writeLine(io.stdout, `${io.theme.bold(`Available ${itemType}s`)} ${io.theme.dim(`(${items.length})`)}`);
+    if (items.length === 0) {
+        writeLine(io.stdout, 'Nothing available to attach.');
+        return;
+    }
+    writeTable(io, ['ITEM', 'TYPE', 'STATUS'], items.map((item) => {
+        const record = asRecord(item);
+        return [
+            text(record.name, text(record.id)),
+            text(record.itemType ?? record.type),
+            text(record.status),
+        ];
+    }));
+};
+export const testLinksCommand = async ({ io, name, apiUrl, json = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'list_test_links', { name });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not read the test links.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    const controls = Array.isArray(data.controls) ? data.controls : [];
+    const clauses = Array.isArray(data.clauses) ? data.clauses : [];
+    writeLine(io.stdout, `${io.theme.bold('Controls')} ${io.theme.dim(`(${controls.length})`)}`);
+    for (const control of controls) {
+        const record = asRecord(control);
+        writeLine(io.stdout, `  ${text(record.controlCode ?? record.code)}  ${text(record.controlName ?? record.name, text(record.id))}`);
+    }
+    writeLine(io.stdout, `${io.theme.bold('Clauses')} ${io.theme.dim(`(${clauses.length})`)}`);
+    for (const clause of clauses) {
+        const record = asRecord(clause);
+        writeLine(io.stdout, `  ${text(record.clauseCode ?? record.code)}  ${text(record.clauseName ?? record.name, text(record.id))}`);
+    }
+};
+export const testUpdateCommand = async ({ io, name, apiUrl, json = false, yes = false, confirm, credentialStore, changes, }) => {
+    if (Object.keys(changes).length === 0) {
+        throw new Error('Provide at least one field, for example --applicability in_scope');
+    }
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'update_test',
+        input: { name, changes },
+        fallback: 'Could not update the test.',
+        yes,
+        confirm,
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else {
+        const applied = asRecord(result.data).applied;
+        writeLine(io.stdout, `${io.theme.green('✓')} updated ${name}: ${Array.isArray(applied) ? applied.join(', ') : ''}`);
+    }
+};
+export const testDeleteCommand = async ({ io, name, apiUrl, json = false, yes = false, confirm, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'delete_test',
+        input: { name },
+        fallback: 'Could not delete the test.',
+        yes,
+        confirm,
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else
+        writeLine(io.stdout, `${io.theme.green('✓')} test ${name} deleted`);
+};

package/dist/commands/vendor.d.ts

@@ -0,0 +1,45 @@
+import type { CredentialStore } from '../credentials.js';
+import { type CliIO } from '../io.js';
+export interface VendorCommonOptions {
+    io: CliIO;
+    apiUrl?: string | undefined;
+    json?: boolean | undefined;
+    credentialStore?: CredentialStore | undefined;
+}
+export interface VendorReadOptions extends VendorCommonOptions {
+    name: string;
+}
+export interface VendorActionOptions extends VendorCommonOptions {
+    name?: string | undefined;
+    yes?: boolean | undefined;
+    confirm?: ((question: string) => Promise<boolean>) | undefined;
+}
+export declare const vendorListCommand: ({ io, apiUrl, json, credentialStore, name, criticality, relationshipStatus, page, limit, }: VendorCommonOptions & {
+    name?: string | undefined;
+    criticality?: string | undefined;
+    relationshipStatus?: string | undefined;
+    page?: number | undefined;
+    limit?: number | undefined;
+}) => Promise<void>;
+export declare const vendorGetCommand: ({ io, name, apiUrl, json, credentialStore, }: VendorReadOptions) => Promise<void>;
+export declare const vendorCreateCommand: ({ io, apiUrl, json, credentialStore, name, category, criticality, description, }: VendorCommonOptions & {
+    name: string;
+    category?: string | undefined;
+    criticality?: string | undefined;
+    description?: string | undefined;
+}) => Promise<void>;
+export interface VendorUpdateOptions extends VendorReadOptions {
+    changes: Record<string, string>;
+}
+export declare const vendorUpdateCommand: ({ io, name, apiUrl, json, credentialStore, changes, }: VendorUpdateOptions) => Promise<void>;
+export declare const vendorDeleteCommand: ({ io, name, apiUrl, json, yes, confirm, credentialStore, }: VendorActionOptions) => Promise<void>;
+export declare const vendorFilesCommand: ({ io, name, apiUrl, json, credentialStore, }: VendorReadOptions) => Promise<void>;
+export declare const vendorAttachCommand: ({ io, name, file, uploadId, apiUrl, json, yes, credentialStore, }: VendorReadOptions & {
+    file?: string | undefined;
+    uploadId?: string | undefined;
+    yes?: boolean | undefined;
+}) => Promise<void>;
+export declare const vendorDetachCommand: ({ io, name, mappingId, apiUrl, json, yes, credentialStore, }: VendorReadOptions & {
+    mappingId: string;
+    yes?: boolean | undefined;
+}) => Promise<void>;

package/dist/commands/vendor.js

@@ -0,0 +1,218 @@
+import { applyTool } from '../actions.js';
+import { writeLine, writeNextHint, writePageFooter, writeTable } from '../io.js';
+import { asRecord, callTool, errorMessage, resolveToolContext, asText } from '../toolSurface.js';
+import { uploadLocalFile } from '../upload.js';
+const text = (value, fallback = '-') => typeof value === 'string' ? value : typeof value === 'number' ? String(value) : fallback;
+export const vendorListCommand = async ({ io, apiUrl, json = false, credentialStore, name, criticality, relationshipStatus, page, limit, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = {};
+    if (name)
+        input.name = name;
+    if (criticality)
+        input.criticality = criticality;
+    if (relationshipStatus)
+        input.relationshipStatus = relationshipStatus;
+    if (page)
+        input.page = page;
+    if (limit)
+        input.limit = limit;
+    const envelope = await callTool(ctx, 'list_vendors', input);
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not list vendors.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    const vendors = Array.isArray(data.vendors) ? data.vendors : [];
+    writeLine(io.stdout, `${io.theme.bold('Vendors')} ${io.theme.dim(`(${text(data.total, String(vendors.length))} total)`)}`);
+    if (vendors.length === 0) {
+        writeLine(io.stdout, 'No vendors found.');
+        return;
+    }
+    writeTable(io, ['CODE', 'NAME', 'CATEGORY', 'CRITICALITY', 'RELATIONSHIP', 'REVIEW'], vendors.map((vendor) => {
+        const record = asRecord(vendor);
+        return [
+            text(record.code, '-'),
+            text(record.name),
+            text(record.category),
+            text(record.criticality),
+            text(record.relationshipStatus),
+            text(record.reviewStatus),
+        ];
+    }));
+    writePageFooter(io, {
+        shown: vendors.length,
+        total: typeof data.total === 'number' ? data.total : vendors.length,
+        page: typeof data.page === 'number' ? data.page : 1,
+        limit: typeof data.limit === 'number' ? data.limit : 25,
+        hasMore: data.hasMore === true,
+    });
+    const next = asText(asRecord(vendors[0]).code);
+    if (next)
+        writeNextHint(io, `ciphrix vendor get ${next}`);
+};
+export const vendorGetCommand = async ({ io, name, apiUrl, json = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'get_vendor', { name });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Vendor not found.'));
+    const vendor = asRecord(asRecord(envelope.data).vendor);
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(vendor, null, 2));
+        return;
+    }
+    writeLine(io.stdout, io.theme.bold(text(vendor.vendor_name ?? vendor.name, 'Vendor')));
+    const fields = [
+        ['Category', vendor.vendor_category ?? vendor.category],
+        ['Criticality', vendor.business_criticality ?? vendor.criticality],
+        ['Data sensitivity', vendor.data_sensitivity],
+        ['Relationship', vendor.vendor_relationship_status],
+        ['Review status', vendor.workflow_status ?? vendor.vendor_review_status],
+        ['Website', vendor.vendor_website ?? vendor.website],
+        ['Description', vendor.vendor_description ?? vendor.description],
+    ];
+    for (const [label, value] of fields) {
+        if (value === undefined || value === null || value === '')
+            continue;
+        writeLine(io.stdout, `  ${io.theme.dim(`${label}:`)} ${text(value)}`);
+    }
+};
+export const vendorCreateCommand = async ({ io, apiUrl, json = false, credentialStore, name, category, criticality, description, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const input = { name };
+    if (category)
+        input.category = category;
+    if (criticality)
+        input.criticality = criticality;
+    if (description)
+        input.description = description;
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'create_vendor',
+        input,
+        fallback: 'Could not create the vendor.',
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else
+        writeLine(io.stdout, `${io.theme.green('✓')} vendor created: ${text(asRecord(result.data).name)}`);
+};
+export const vendorUpdateCommand = async ({ io, name, apiUrl, json = false, credentialStore, changes, }) => {
+    if (Object.keys(changes).length === 0) {
+        throw new Error('Provide at least one field, for example --criticality high');
+    }
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'update_vendor',
+        input: { name, changes },
+        fallback: 'Could not update the vendor.',
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else {
+        const data = asRecord(result.data);
+        const applied = Array.isArray(data.applied)
+            ? data.applied.map((value) => text(value)).join(', ')
+            : '';
+        writeLine(io.stdout, `${io.theme.green('✓')} updated ${name}: ${applied}`);
+    }
+};
+export const vendorDeleteCommand = async ({ io, name, apiUrl, json = false, yes = false, confirm, credentialStore, }) => {
+    if (!name)
+        throw new Error('Provide the vendor name.');
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'delete_vendor',
+        input: { name },
+        fallback: 'Could not delete the vendor.',
+        yes,
+        confirm,
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else
+        writeLine(io.stdout, `${io.theme.green('✓')} vendor ${name} deleted`);
+};
+export const vendorFilesCommand = async ({ io, name, apiUrl, json = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const envelope = await callTool(ctx, 'list_vendor_files', { name });
+    if (envelope.status !== 'ok')
+        throw new Error(errorMessage(envelope, 'Could not read vendor files.'));
+    if (json) {
+        writeLine(io.stdout, JSON.stringify(envelope.data, null, 2));
+        return;
+    }
+    const data = asRecord(envelope.data);
+    const files = Array.isArray(data.files) ? data.files : [];
+    writeLine(io.stdout, `${io.theme.bold('Vendor files')} ${io.theme.dim(`(${files.length})`)}`);
+    if (files.length === 0) {
+        writeLine(io.stdout, 'No files attached.');
+        return;
+    }
+    writeTable(io, ['MAPPING', 'FILE', 'ATTACHED'], files.map((file) => {
+        const record = asRecord(file);
+        return [
+            text(record.mappingId, '-'),
+            text(record.name),
+            asText(record.attachedAt).slice(0, 10) || '-',
+        ];
+    }));
+};
+export const vendorAttachCommand = async ({ io, name, file, uploadId, apiUrl, json = false, yes = false, credentialStore, }) => {
+    if (!file && !uploadId)
+        throw new Error('Provide --file <path> or --upload <uploadId>');
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    let uploadIds;
+    if (uploadId) {
+        uploadIds = [uploadId];
+    }
+    else if (file) {
+        uploadIds = [(await uploadLocalFile(ctx, file, 'vendor')).id];
+    }
+    else {
+        throw new Error('Provide --file <path> or --upload <uploadId>');
+    }
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'link_vendor_file',
+        input: { name, action: 'link', uploadIds },
+        fallback: 'Could not attach the file.',
+        yes,
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else
+        writeLine(io.stdout, `${io.theme.green('✓')} attached ${uploadIds.length} file(s) to ${name}`);
+};
+export const vendorDetachCommand = async ({ io, name, mappingId, apiUrl, json = false, yes = false, credentialStore, }) => {
+    const ctx = await resolveToolContext(apiUrl, credentialStore);
+    const result = await applyTool({
+        ctx,
+        io,
+        toolName: 'link_vendor_file',
+        input: { name, action: 'unlink', mappingId },
+        fallback: 'Could not detach the file.',
+        yes,
+    });
+    if (!result)
+        return;
+    if (json)
+        writeLine(io.stdout, JSON.stringify(result.data, null, 2));
+    else
+        writeLine(io.stdout, `${io.theme.green('✓')} detached ${mappingId} from ${name}`);
+};

package/dist/config.d.ts

@@ -0,0 +1,12 @@
+/** Public client identifier registered with the Ciphrix device-authorization endpoint. */
+export declare const CLI_CLIENT_ID = "ciphrix-cli";
+/** Production API base. Override with `--api-url` or `CIPHRIX_API_URL`. */
+export declare const DEFAULT_API_BASE_URL = "https://global.api.ciphrix.app/api";
+/** Used by the CLI hooks to scope the command-line opt-in to one command invocation. */
+export declare const setCliInsecureHttpOptIn: (allowed: boolean) => void;
+export declare const normalizeBaseUrl: (value: string) => string;
+export declare const resolveApiBaseUrl: ({ flag, env, }?: {
+    flag?: string | undefined;
+    env?: NodeJS.ProcessEnv | undefined;
+}) => string;
+export declare const configDir: (env?: NodeJS.ProcessEnv) => string;