@contenthero/cli 0.1.0

package/README.md

@@ -0,0 +1,108 @@
+# @contenthero/cli
+
+The official ContentHero command-line interface. Generate media, run the content
+pipeline, and read your brand and research context from the terminal or any agent
+shell. It rides the [`@contenthero/sdk`](https://www.npmjs.com/package/@contenthero/sdk)
+kernel, so it talks to the same `/api/v1` surface as the SDK and the
+[MCP server](https://www.npmjs.com/package/@contenthero/mcp).
+
+Built agent-first: JSON by default, predictable exit codes, and a `schema` command
+so an agent can discover every command's inputs without docs.
+
+## Install
+
+```bash
+npm install -g @contenthero/cli
+```
+
+Requires Node 20+. The binary is `contenthero`.
+
+## Authenticate
+
+The CLI resolves your API key in this order: the `--api-key` flag, then the
+`CONTENTHERO_API_KEY` environment variable, then a stored credential.
+
+```bash
+# Browser-assisted (recommended): opens your browser, mints a key for this machine
+contenthero login
+
+# Bring your own key (CI / headless): create one in the app under API Keys
+export CONTENTHERO_API_KEY=ch_live_...
+# ...or store it:
+contenthero login --with-key ch_live_...     # or: echo "$KEY" | contenthero login --with-key
+
+contenthero auth status        # verify the active key and show the account
+contenthero logout             # remove the stored credential
+```
+
+The stored credential lives at `~/.contenthero/credentials` (mode 0600). The env
+var always wins over the stored file, so CI can override a local login.
+
+## Output
+
+JSON is the default (built for agents and scripts). Add `--human` for readable
+tables and key/value output.
+
+```bash
+contenthero account balance
+contenthero model list --type image --human
+```
+
+## Generate
+
+`generate` covers image, video, audio, board, and lip-sync. The waitable kinds
+share `--cost` (preflight, charges nothing), `--wait` / `--no-wait` (default
+waits), and `--timeout <seconds>`.
+
+```bash
+# Preflight the cost, then generate and wait for the URLs
+contenthero generate image "a red ceramic cube on white" --model nano-banana-2 --cost
+contenthero generate image "a red ceramic cube on white" --model nano-banana-2
+
+# Submit without blocking, then poll
+ID=$(contenthero generate video "drone shot over a canyon" --model veo-3.1-fast --no-wait | jq -r .outputId)
+contenthero generation status "$ID"
+contenthero generation wait "$ID" --timeout 300
+
+# Chain: feed a previous output id straight in as a reference (URL or output id)
+contenthero generate video "slow zoom in" --model veo-3.1-fast --start-frame "$ID"
+
+# Audio (synchronous) and upscaling
+contenthero generate audio --model elevenlabs-tts --text "Hello there" --voice <voiceId>
+contenthero upscale "$ID" --model topaz-image-upscale --factor 2x
+```
+
+Exit code 4 means a render was accepted but did not finish before the timeout. The
+`outputId` is still emitted, so you can keep polling.
+
+## The rest of the surface
+
+```
+contenthero media        list | get <id>
+contenthero post         list | get | create | update | archive | schedule | publish
+                         | destination add|update | asset add
+contenthero pipeline     stages
+contenthero brand-kit    list | get | update | archive | section add|update|archive
+contenthero avatar       list | get <id>
+contenthero voice        list | get <id>
+contenthero inspiration  accounts | account <id> | outliers | content <id>
+contenthero brand-account     list | performance <id>
+contenthero connected-account list | get <id>
+contenthero account      balance
+contenthero model        list
+```
+
+## For agents
+
+`schema` dumps every command's arguments and options as JSON, so an agent can wire
+up calls without reading these docs:
+
+```bash
+contenthero schema                 # the whole surface
+contenthero schema generate image  # just one command
+```
+
+## Exit codes
+
+`0` success, `1` general error, `2` usage error, `3` authentication error,
+`4` timeout (the work was accepted but did not finish in time).

package/dist/args.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Small commander option coercers. They throw a usage-coded CliError on bad
+ * input so the central error boundary reports exit 2 with a clear message.
+ */
+/** Parse an integer option value. */
+export declare function toInt(value: string): number;
+/** Parse a numeric option value (integer or decimal). */
+export declare function toFloat(value: string): number;
+/** Collect a repeatable option (e.g. --ref a --ref b) into an array. */
+export declare function collect(value: string, previous?: string[]): string[];
+/** Parse a JSON option value into an unknown, with a usage error on bad JSON. */
+export declare function toJson(value: string): unknown;
+//# sourceMappingURL=args.d.ts.map

package/dist/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,qCAAqC;AACrC,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM3C;AAED,yDAAyD;AACzD,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM7C;AAED,wEAAwE;AACxE,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,EAAO,GAAG,MAAM,EAAE,CAExE;AAED,iFAAiF;AACjF,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAM7C"}

package/dist/args.js

@@ -0,0 +1,35 @@
+/**
+ * Small commander option coercers. They throw a usage-coded CliError on bad
+ * input so the central error boundary reports exit 2 with a clear message.
+ */
+import { CliError, EXIT } from './errors.js';
+/** Parse an integer option value. */
+export function toInt(value) {
+    const n = Number(value);
+    if (!Number.isInteger(n)) {
+        throw new CliError(`Expected an integer, got "${value}".`, EXIT.USAGE);
+    }
+    return n;
+}
+/** Parse a numeric option value (integer or decimal). */
+export function toFloat(value) {
+    const n = Number(value);
+    if (Number.isNaN(n)) {
+        throw new CliError(`Expected a number, got "${value}".`, EXIT.USAGE);
+    }
+    return n;
+}
+/** Collect a repeatable option (e.g. --ref a --ref b) into an array. */
+export function collect(value, previous = []) {
+    return [...previous, value];
+}
+/** Parse a JSON option value into an unknown, with a usage error on bad JSON. */
+export function toJson(value) {
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        throw new CliError(`Expected valid JSON, got "${value}".`, EXIT.USAGE);
+    }
+}
+//# sourceMappingURL=args.js.map

package/dist/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAE5C,qCAAqC;AACrC,MAAM,UAAU,KAAK,CAAC,KAAa;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IACvB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,QAAQ,CAAC,6BAA6B,KAAK,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IACvB,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,QAAQ,CAAC,2BAA2B,KAAK,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,OAAO,CAAC,KAAa,EAAE,WAAqB,EAAE;IAC5D,OAAO,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAA;AAC7B,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,6BAA6B,KAAK,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IACxE,CAAC;AACH,CAAC"}

package/dist/commands/account.d.ts

@@ -0,0 +1,7 @@
+/**
+ * `contenthero account` - account-level reads.
+ *   account balance   credit balance, tier, and auto-top-up state
+ */
+import type { Command } from 'commander';
+export declare function registerAccount(program: Command): void;
+//# sourceMappingURL=account.d.ts.map

package/dist/commands/account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../src/commands/account.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAKxC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAiBtD"}

package/dist/commands/account.js

@@ -0,0 +1,22 @@
+/**
+ * `contenthero account` - account-level reads.
+ *   account balance   credit balance, tier, and auto-top-up state
+ */
+import { makeClient } from '../context.js';
+import { emit, keyValues } from '../output.js';
+export function registerAccount(program) {
+    const account = program.command('account').description('Account-level reads (balance, tier)');
+    account
+        .command('balance')
+        .description('Show the credit balance, subscription tier, and auto-top-up state')
+        .action(async (_opts, command) => {
+        const { client, ctx } = makeClient(command);
+        const balance = await client.getBalance();
+        emit(balance, ctx, (b) => keyValues([
+            ['Balance', `${b.balance} credits`],
+            ['Tier', b.tier],
+            ['Auto top-up', b.autoTopupEnabled ? 'on' : 'off'],
+        ]));
+    });
+}
+//# sourceMappingURL=account.js.map

package/dist/commands/account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../../src/commands/account.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAG9C,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAA;IAE7F,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAgB,EAAE,EAAE;QACxC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAA;QACzC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAU,EAAE,EAAE,CAChC,SAAS,CAAC;YACR,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,UAAU,CAAC;YACnC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;YAChB,CAAC,aAAa,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;SACnD,CAAC,CACH,CAAA;IACH,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/commands/auth.d.ts

@@ -0,0 +1,35 @@
+/**
+ * `contenthero auth` - manage how the CLI authenticates.
+ *   auth login              browser-assisted key provisioning (the primary path)
+ *   auth login --with-key   store a key you already have (flag value or piped stdin)
+ *   auth status             verify the active key and show the account
+ *   auth logout             delete the stored credential
+ *
+ * `login` and `logout` are also exposed at the top level (`contenthero login`)
+ * since that is the headline command. Both forms share these handlers.
+ *
+ * Browser login: we start a localhost listener, open the app's /cli/auth page
+ * (passing the loopback port + a state nonce), the user approves, the page mints a
+ * named `CLI (<host>)` key and navigates back to the listener with it. We verify
+ * the key, then store it. `--with-key` and CONTENTHERO_API_KEY cover headless /
+ * bring-your-own-key (CI, or a key from the app's API Keys tab).
+ */
+import type { Command } from 'commander';
+export interface LoopbackOptions {
+    /** The state nonce the browser callback must echo back. */
+    state: string;
+    /** Called with the bound port once the listener is up (to build + open the URL). */
+    onListening: (port: number) => void;
+    /** Give up after this many ms (default 3 minutes). */
+    timeoutMs?: number;
+}
+/**
+ * Start a localhost listener and resolve with the API key the browser hands back
+ * to `/callback?state=<state>&key=<key>`. Rejects on `error=...`, a listener
+ * failure, or timeout. A callback whose state does not match is rejected with 400
+ * and ignored (the listener keeps waiting), so a stray or forged hit cannot end
+ * the flow. Exported for testing the loopback contract in-process.
+ */
+export declare function awaitLoopbackKey(opts: LoopbackOptions): Promise<string>;
+export declare function registerAuth(program: Command): void;
+//# sourceMappingURL=auth.d.ts.map

package/dist/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AA4DxC,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAA;IACb,oFAAoF;IACpF,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAqDvE;AAiGD,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAanD"}

package/dist/commands/auth.js

@@ -0,0 +1,210 @@
+/**
+ * `contenthero auth` - manage how the CLI authenticates.
+ *   auth login              browser-assisted key provisioning (the primary path)
+ *   auth login --with-key   store a key you already have (flag value or piped stdin)
+ *   auth status             verify the active key and show the account
+ *   auth logout             delete the stored credential
+ *
+ * `login` and `logout` are also exposed at the top level (`contenthero login`)
+ * since that is the headline command. Both forms share these handlers.
+ *
+ * Browser login: we start a localhost listener, open the app's /cli/auth page
+ * (passing the loopback port + a state nonce), the user approves, the page mints a
+ * named `CLI (<host>)` key and navigates back to the listener with it. We verify
+ * the key, then store it. `--with-key` and CONTENTHERO_API_KEY cover headless /
+ * bring-your-own-key (CI, or a key from the app's API Keys tab).
+ */
+import http from 'node:http';
+import { randomBytes } from 'node:crypto';
+import { hostname } from 'node:os';
+import { spawn } from 'node:child_process';
+import { ContentHero } from '@contenthero/sdk';
+import { clearCredential, credentialsPath, writeCredential } from '../config.js';
+import { resolveContext } from '../context.js';
+import { emit, keyValues } from '../output.js';
+import { CliError, EXIT } from '../errors.js';
+const DEFAULT_BASE_URL = 'https://app.contenthero.ai';
+const LOGIN_TIMEOUT_MS = 180_000;
+/** Read piped stdin (returns '' when attached to a TTY or nothing is piped). */
+async function readStdin() {
+    if (process.stdin.isTTY)
+        return '';
+    const chunks = [];
+    for await (const chunk of process.stdin)
+        chunks.push(chunk);
+    return Buffer.concat(chunks).toString('utf8').trim();
+}
+/** Open a URL in the default browser. Best-effort; the URL is always printed too.
+ * Skipped when CONTENTHERO_NO_BROWSER is set (headless / CI). */
+function openBrowser(url) {
+    if (process.env.CONTENTHERO_NO_BROWSER)
+        return;
+    const platform = process.platform;
+    const cmd = platform === 'darwin' ? 'open' : platform === 'win32' ? 'cmd' : 'xdg-open';
+    const args = platform === 'win32' ? ['/c', 'start', '', url] : [url];
+    try {
+        const child = spawn(cmd, args, { stdio: 'ignore', detached: true });
+        child.on('error', () => { });
+        child.unref();
+    }
+    catch {
+        // Ignore: the URL was printed for manual navigation.
+    }
+}
+/** Minimal branded HTML for the loopback success / cancel page. */
+function resultPage(title, sub) {
+    return `<!doctype html><html><head><meta charset="utf-8"><title>${title}</title><style>
+    body{margin:0;height:100vh;display:flex;align-items:center;justify-content:center;background:#f8f9fa;
+    font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;color:#121212}
+    .card{background:#fff;border-radius:24px;padding:40px 48px;box-shadow:0 8px 32px rgba(0,0,0,.08);text-align:center}
+    h1{font-size:20px;margin:0 0 8px} p{color:#6b7280;margin:0;font-size:14px}
+    .dot{color:#d4af37}</style></head>
+    <body><div class="card"><h1><span class="dot">ContentHero</span> ${title}</h1><p>${sub}</p></div></body></html>`;
+}
+/** Verify a key against the API, then persist it and report. */
+async function verifyAndStore(key, ctx, label) {
+    const client = new ContentHero({ apiKey: key, baseUrl: ctx.baseUrl });
+    const balance = await client.getBalance();
+    writeCredential({ apiKey: key, label, createdAt: new Date().toISOString() });
+    const data = { ok: true, stored: credentialsPath(), tier: balance.tier, balance: balance.balance };
+    emit(data, ctx, (d) => keyValues([
+        ['Logged in', 'stored ' + d.stored],
+        ['Tier', d.tier],
+        ['Balance', `${d.balance} credits`],
+    ]));
+}
+/**
+ * Start a localhost listener and resolve with the API key the browser hands back
+ * to `/callback?state=<state>&key=<key>`. Rejects on `error=...`, a listener
+ * failure, or timeout. A callback whose state does not match is rejected with 400
+ * and ignored (the listener keeps waiting), so a stray or forged hit cannot end
+ * the flow. Exported for testing the loopback contract in-process.
+ */
+export function awaitLoopbackKey(opts) {
+    const { state, onListening, timeoutMs = LOGIN_TIMEOUT_MS } = opts;
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (fn) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            server.close();
+            fn();
+        };
+        const server = http.createServer((req, res) => {
+            const reqUrl = new URL(req.url || '/', 'http://127.0.0.1');
+            if (reqUrl.pathname !== '/callback') {
+                res.writeHead(404, { 'content-type': 'text/plain' });
+                res.end('Not found');
+                return;
+            }
+            // Bind the callback to this invocation; ignore anything with a wrong state.
+            if (reqUrl.searchParams.get('state') !== state) {
+                res.writeHead(400, { 'content-type': 'text/html' });
+                res.end(resultPage('login error', 'Invalid request. You can close this tab.'));
+                return;
+            }
+            const error = reqUrl.searchParams.get('error');
+            const got = reqUrl.searchParams.get('key');
+            if (error || !got) {
+                res.writeHead(200, { 'content-type': 'text/html' });
+                res.end(resultPage('login cancelled', 'You can close this tab and return to your terminal.'));
+                finish(() => reject(new CliError('Login was cancelled in the browser.', EXIT.AUTH)));
+                return;
+            }
+            res.writeHead(200, { 'content-type': 'text/html' });
+            res.end(resultPage('CLI connected', 'You can close this tab and return to your terminal.'));
+            finish(() => resolve(got));
+        });
+        server.on('error', (e) => finish(() => reject(new CliError(`Could not start the local login listener: ${e.message}`, EXIT.GENERAL))));
+        const timer = setTimeout(() => finish(() => reject(new CliError('Login timed out after 3 minutes.', EXIT.AUTH))), timeoutMs);
+        server.listen(0, '127.0.0.1', () => {
+            const addr = server.address();
+            const port = addr && typeof addr === 'object' ? addr.port : 0;
+            onListening(port);
+        });
+    });
+}
+/** Run the browser-assisted login: loopback listener + the app's /cli/auth page. */
+async function browserLogin(ctx) {
+    const state = randomBytes(16).toString('hex');
+    const label = hostname();
+    const base = (ctx.baseUrl || DEFAULT_BASE_URL).replace(/\/+$/, '');
+    const key = await awaitLoopbackKey({
+        state,
+        onListening: (port) => {
+            const authUrl = `${base}/cli/auth?port=${port}&state=${state}&label=${encodeURIComponent(label)}`;
+            process.stderr.write(`Opening your browser to authorize the CLI.\nIf it does not open, visit:\n  ${authUrl}\n\nWaiting for authorization...\n`);
+            openBrowser(authUrl);
+        },
+    });
+    await verifyAndStore(key, ctx, label);
+}
+async function loginAction(opts, command) {
+    const ctx = resolveContext(command);
+    // No --with-key: run the browser-assisted flow (the primary path).
+    if (opts.withKey === undefined) {
+        await browserLogin(ctx);
+        return;
+    }
+    const key = typeof opts.withKey === 'string' ? opts.withKey.trim() : await readStdin();
+    if (!key) {
+        throw new CliError('No key provided. Pass it as `--with-key <key>` or pipe it via stdin.', EXIT.USAGE);
+    }
+    await verifyAndStore(key, ctx);
+}
+async function statusAction(_opts, command) {
+    const ctx = resolveContext(command);
+    if (!ctx.apiKey) {
+        throw new CliError('Not authenticated. Run `contenthero login`, set CONTENTHERO_API_KEY, or pass --api-key.', EXIT.AUTH);
+    }
+    // getBalance round-trips the key, so a bad key surfaces as an auth error (exit 3).
+    const client = new ContentHero({ apiKey: ctx.apiKey, baseUrl: ctx.baseUrl });
+    const balance = await client.getBalance();
+    const data = {
+        authenticated: true,
+        keySource: ctx.keySource,
+        baseUrl: ctx.baseUrl ?? DEFAULT_BASE_URL,
+        tier: balance.tier,
+        balance: balance.balance,
+    };
+    emit(data, ctx, (d) => keyValues([
+        ['Authenticated', 'yes'],
+        ['Key source', d.keySource],
+        ['Base URL', d.baseUrl],
+        ['Tier', d.tier],
+        ['Balance', `${d.balance} credits`],
+    ]));
+}
+function logoutAction(_opts, command) {
+    const ctx = resolveContext(command);
+    const removed = clearCredential();
+    emit({ ok: true, removed }, ctx, () => removed ? 'Logged out (stored credential removed).' : 'No stored credential to remove.');
+}
+/** Apply the login description/option/action to a command (shared by both mounts). */
+function configureLogin(cmd) {
+    return cmd
+        .description('Authenticate the CLI. Browser-assisted by default; --with-key stores an existing key.')
+        .option('--with-key [key]', 'store an existing API key (pass the key, or pipe it via stdin). Omit to use the browser flow.')
+        .action(loginAction);
+}
+/** Apply the logout description/action to a command (shared by both mounts). */
+function configureLogout(cmd) {
+    return cmd
+        .description('Delete the stored credential (env / --api-key are unaffected)')
+        .action(logoutAction);
+}
+export function registerAuth(program) {
+    const auth = program.command('auth').description('Manage CLI authentication');
+    configureLogin(auth.command('login'));
+    auth
+        .command('status')
+        .description('Verify the active API key and show the account it resolves to')
+        .action(statusAction);
+    configureLogout(auth.command('logout'));
+    // Top-level aliases for the two headline commands.
+    configureLogin(program.command('login'));
+    configureLogout(program.command('logout'));
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAChF,OAAO,EAAE,cAAc,EAAgB,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAE7C,MAAM,gBAAgB,GAAG,4BAA4B,CAAA;AACrD,MAAM,gBAAgB,GAAG,OAAO,CAAA;AAEhC,gFAAgF;AAChF,KAAK,UAAU,SAAS;IACtB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IAClC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAA;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;AACtD,CAAC;AAED;iEACiE;AACjE,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAAE,OAAM;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,MAAM,GAAG,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAA;IACtF,MAAM,IAAI,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACpE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACnE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC3B,KAAK,CAAC,KAAK,EAAE,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAC,KAAa,EAAE,GAAW;IAC5C,OAAO,2DAA2D,KAAK;;;;;;uEAMF,KAAK,WAAW,GAAG,0BAA0B,CAAA;AACpH,CAAC;AAED,gEAAgE;AAChE,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,GAAY,EAAE,KAAc;IACrE,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAA;IACzC,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IAC5E,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAA;IAClG,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAc,EAAE,EAAE,CACjC,SAAS,CAAC;QACR,CAAC,WAAW,EAAE,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;QACnC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;QAChB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,UAAU,CAAC;KACpC,CAAC,CACH,CAAA;AACH,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAqB;IACpD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAAA;IACjE,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,KAAK,EAAE,CAAA;YACd,EAAE,EAAE,CAAA;QACN,CAAC,CAAA;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAA;YAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;gBACpD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;gBACpB,OAAM;YACR,CAAC;YACD,4EAA4E;YAC5E,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAA;gBACnD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,EAAE,0CAA0C,CAAC,CAAC,CAAA;gBAC9E,OAAM;YACR,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC1C,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAA;gBACnD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,EAAE,qDAAqD,CAAC,CAAC,CAAA;gBAC7F,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,qCAAqC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACpF,OAAM;YACR,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAA;YACnD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,EAAE,qDAAqD,CAAC,CAAC,CAAA;YAC3F,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;QAEF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CACvB,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,6CAA6C,CAAC,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAC3G,CAAA;QAED,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,kCAAkC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EACvF,SAAS,CACV,CAAA;QAED,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;YAC7B,MAAM,IAAI,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YAC7D,WAAW,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,YAAY,CAAC,GAAY;IACtC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;IACxB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAElE,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC;QACjC,KAAK;QACL,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,MAAM,OAAO,GAAG,GAAG,IAAI,kBAAkB,IAAI,UAAU,KAAK,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAA;YACjG,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8EAA8E,OAAO,oCAAoC,CAC1H,CAAA;YACD,WAAW,CAAC,OAAO,CAAC,CAAA;QACtB,CAAC;KACF,CAAC,CAAA;IAEF,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;AACvC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAoC,EAAE,OAAgB;IAC/E,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IAEnC,mEAAmE;IACnE,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACvB,OAAM;IACR,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,SAAS,EAAE,CAAA;IACtF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,QAAQ,CAChB,sEAAsE,EACtE,IAAI,CAAC,KAAK,CACX,CAAA;IACH,CAAC;IACD,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;AAChC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAAc,EAAE,OAAgB;IAC1D,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACnC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAChB,yFAAyF,EACzF,IAAI,CAAC,IAAI,CACV,CAAA;IACH,CAAC;IACD,mFAAmF;IACnF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IAC5E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAA;IAEzC,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,gBAAgB;QACxC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;IACD,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAc,EAAE,EAAE,CACjC,SAAS,CAAC;QACR,CAAC,eAAe,EAAE,KAAK,CAAC;QACxB,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,CAAC;QAC3B,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC;QACvB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;QAChB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,UAAU,CAAC;KACpC,CAAC,CACH,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,OAAgB;IACpD,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACnC,MAAM,OAAO,GAAG,eAAe,EAAE,CAAA;IACjC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CACpC,OAAO,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,iCAAiC,CACxF,CAAA;AACH,CAAC;AAED,sFAAsF;AACtF,SAAS,cAAc,CAAC,GAAY;IAClC,OAAO,GAAG;SACP,WAAW,CAAC,uFAAuF,CAAC;SACpG,MAAM,CACL,kBAAkB,EAClB,+FAA+F,CAChG;SACA,MAAM,CAAC,WAAW,CAAC,CAAA;AACxB,CAAC;AAED,gFAAgF;AAChF,SAAS,eAAe,CAAC,GAAY;IACnC,OAAO,GAAG;SACP,WAAW,CAAC,+DAA+D,CAAC;SAC5E,MAAM,CAAC,YAAY,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAA;IAE7E,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IACrC,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,+DAA+D,CAAC;SAC5E,MAAM,CAAC,YAAY,CAAC,CAAA;IACvB,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;IAEvC,mDAAmD;IACnD,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IACxC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC5C,CAAC"}

package/dist/commands/brandkit.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `contenthero brand-kit` - brand kits (the brand identity documents).
+ *   brand-kit list | get | update | archive
+ *   brand-kit section add | update | archive
+ *
+ * Reads are open; writes need brandkit:write. Free-form identity objects
+ * (positioning, audience, voice profile, content strategy) and section fields
+ * are passed as JSON.
+ */
+import type { Command } from 'commander';
+export declare function registerBrandKit(program: Command): void;
+//# sourceMappingURL=brandkit.d.ts.map

package/dist/commands/brandkit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brandkit.d.ts","sourceRoot":"","sources":["../../src/commands/brandkit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAuBxC,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyJvD"}

package/dist/commands/brandkit.js

@@ -0,0 +1,159 @@
+/**
+ * `contenthero brand-kit` - brand kits (the brand identity documents).
+ *   brand-kit list | get | update | archive
+ *   brand-kit section add | update | archive
+ *
+ * Reads are open; writes need brandkit:write. Free-form identity objects
+ * (positioning, audience, voice profile, content strategy) and section fields
+ * are passed as JSON.
+ */
+import { makeClient } from '../context.js';
+import { emit, keyValues, table } from '../output.js';
+import { CliError, EXIT } from '../errors.js';
+import { compact } from '../generation.js';
+import { collect, toInt, toJson } from '../args.js';
+function recordHuman(s, action) {
+    return keyValues([
+        [action, s.sectionName],
+        ['Section id', s.id],
+        ['Tab', s.tab],
+        ['Sort order', s.sortOrder],
+        ['Fields', s.fields.length],
+    ]);
+}
+export function registerBrandKit(program) {
+    const brandKit = program.command('brand-kit').description('Brand kits (brand identity documents)');
+    brandKit
+        .command('list')
+        .description('List the account\'s brand kits (default first)')
+        .action(async (_opts, command) => {
+        const { client, ctx } = makeClient(command);
+        const kits = await client.listBrandKits();
+        emit(kits, ctx, (rows) => table(['ID', 'NAME', 'BUSINESS', 'DEFAULT', 'ACTIVE'], rows.map((k) => [
+            k.id.slice(0, 8),
+            k.name,
+            k.businessName ?? '',
+            k.isDefault ? 'yes' : '',
+            k.isActive ? 'yes' : '',
+        ])));
+    });
+    brandKit
+        .command('get')
+        .description('Get one brand kit in full (the whole brand document)')
+        .argument('<id>', 'the brand kit id')
+        .action(async (id, _opts, command) => {
+        const { client, ctx } = makeClient(command);
+        const kit = await client.getBrandKit(id);
+        emit(kit, ctx, (k) => keyValues([
+            ['Name', k.name],
+            ['Id', k.id],
+            ['Business', k.businessName ?? ''],
+            ['Niche', k.nicheDefinition ?? ''],
+            ['Primary offer', k.primaryOffer ?? ''],
+            ['Visual style', k.visualStyle ?? ''],
+            ['Sections', k.sections.length],
+            ['Brand accounts', k.brandAccounts.length],
+            ['Inspiration accounts', k.inspirationAccounts.length],
+            ['Knowledge items', k.knowledge.length],
+        ]));
+    });
+    brandKit
+        .command('update')
+        .description('Update a brand kit\'s identity fields (requires brandkit:write)')
+        .argument('<id>', 'the brand kit id')
+        .option('--name <text>')
+        .option('--business-name <text>')
+        .option('--website-url <url>')
+        .option('--primary-offer <text>')
+        .option('--niche <text>', 'niche definition')
+        .option('--visual-style <text>')
+        .option('--positioning <json>', 'positioning object (JSON)', toJson)
+        .option('--audience <json>', 'audience object (JSON)', toJson)
+        .option('--voice-profile <json>', 'voice profile object (JSON)', toJson)
+        .option('--content-strategy <json>', 'content strategy object (JSON)', toJson)
+        .option('--design-principle <text>', 'a design principle; repeatable', collect)
+        .action(async (id, opts, command) => {
+        const input = compact({
+            name: opts.name,
+            businessName: opts.businessName,
+            websiteUrl: opts.websiteUrl,
+            primaryOffer: opts.primaryOffer,
+            nicheDefinition: opts.niche,
+            visualStyle: opts.visualStyle,
+            positioning: opts.positioning,
+            audience: opts.audience,
+            voiceProfile: opts.voiceProfile,
+            contentStrategy: opts.contentStrategy,
+            designPrinciples: opts.designPrinciple,
+        });
+        if (Object.keys(input).length === 0) {
+            throw new CliError('Nothing to update. Pass at least one field to change.', EXIT.USAGE);
+        }
+        const { client, ctx } = makeClient(command);
+        const kit = await client.updateBrandKit(id, input);
+        emit(kit, ctx, (k) => keyValues([
+            ['Updated', k.name],
+            ['Id', k.id],
+        ]));
+    });
+    brandKit
+        .command('archive')
+        .description('Archive a brand kit (reversible; requires brandkit:write)')
+        .argument('<id>', 'the brand kit id')
+        .action(async (id, _opts, command) => {
+        const { client, ctx } = makeClient(command);
+        const k = await client.archiveBrandKit(id);
+        emit(k, ctx, (kit) => keyValues([
+            ['Archived', kit.name],
+            ['Id', kit.id],
+        ]));
+    });
+    // -- brand-kit section ----------------------------------------------------
+    const section = brandKit.command('section').description('Manage a brand kit\'s curated sections');
+    section
+        .command('add')
+        .description('Add a curated section to a brand kit (requires brandkit:write)')
+        .argument('<brandKitId>', 'the brand kit id')
+        .requiredOption('--tab <tab>', 'the tab the section belongs to (e.g. voice, overview)')
+        .requiredOption('--name <name>', 'the section title')
+        .option('--sort-order <n>', 'order within the tab (default end)', toInt)
+        .option('--fields <json>', 'field objects as a JSON array: [{ key, label, type, value }]', toJson)
+        .action(async (brandKitId, opts, command) => {
+        const { client, ctx } = makeClient(command);
+        const s = await client.addBrandKitSection(brandKitId, {
+            tab: opts.tab,
+            sectionName: opts.name,
+            sortOrder: opts.sortOrder,
+            fields: opts.fields,
+        });
+        emit(s, ctx, (rec) => recordHuman(rec, 'Added section'));
+    });
+    section
+        .command('update')
+        .description('Update a brand-kit section (requires brandkit:write)')
+        .argument('<brandKitId>', 'the brand kit id')
+        .argument('<sectionId>', 'the section id (from `brand-kit get`)')
+        .option('--name <name>', 'new section title')
+        .option('--sort-order <n>', 'new order within the tab', toInt)
+        .option('--fields <json>', 'replacement field objects as a JSON array', toJson)
+        .action(async (brandKitId, sectionId, opts, command) => {
+        const { client, ctx } = makeClient(command);
+        const s = await client.updateBrandKitSection(brandKitId, sectionId, {
+            sectionName: opts.name,
+            sortOrder: opts.sortOrder,
+            fields: opts.fields,
+        });
+        emit(s, ctx, (rec) => recordHuman(rec, 'Updated section'));
+    });
+    section
+        .command('archive')
+        .description('Archive a brand-kit section (soft delete, reversible; requires brandkit:write)')
+        .argument('<brandKitId>', 'the brand kit id')
+        .argument('<sectionId>', 'the section id to archive')
+        .action(async (brandKitId, sectionId, _opts, command) => {
+        const { client, ctx } = makeClient(command);
+        const s = await client.archiveBrandKitSection(brandKitId, sectionId);
+        emit(s, ctx, (rec) => recordHuman(rec, 'Archived section'));
+    });
+}
+//# sourceMappingURL=brandkit.js.map