@eide/foir-cli 0.1.12 → 0.1.14

package/dist/cli.js

@@ -24,6 +24,7 @@ import { registerSegmentsCommands } from './commands/segments.js';
 import { registerExperimentsCommands } from './commands/experiments.js';
 import { registerSettingsCommands } from './commands/settings.js';
 import { registerApiKeysCommands } from './commands/api-keys.js';
+import { registerAuthProvidersCommands } from './commands/auth-providers.js';
 import { registerExtensionsCommands } from './commands/extensions.js';
 import { registerOperationsCommands } from './commands/operations.js';
 import { registerSchedulesCommands } from './commands/schedules.js';
@@ -67,6 +68,7 @@ registerSegmentsCommands(program, getGlobalOpts);
 registerExperimentsCommands(program, getGlobalOpts);
 registerSettingsCommands(program, getGlobalOpts);
 registerApiKeysCommands(program, getGlobalOpts);
+registerAuthProvidersCommands(program, getGlobalOpts);
 registerExtensionsCommands(program, getGlobalOpts);
 registerOperationsCommands(program, getGlobalOpts);
 registerSchedulesCommands(program, getGlobalOpts);

package/dist/codegen/generators/documents.d.ts

@@ -3,4 +3,10 @@
  */
 import type { CodegenModel } from '../fetch-models.js';
 export declare function generateModelDocuments(model: CodegenModel): string;
+/**
+ * Generate the shared ShareFields fragment file.
+ * This must be emitted once (not per-model) to avoid duplicate fragment errors
+ * in Apollo iOS and other codegen tools that validate across all .graphql files.
+ */
+export declare function generateSharedFragments(): string;
 //# sourceMappingURL=documents.d.ts.map

package/dist/codegen/generators/documents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"documents.d.ts","sourceRoot":"","sources":["../../../src/codegen/generators/documents.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAiGlE"}
+{"version":3,"file":"documents.d.ts","sourceRoot":"","sources":["../../../src/codegen/generators/documents.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAiGlE;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAgBhD"}

package/dist/codegen/generators/documents.js

@@ -99,8 +99,15 @@ mutation Unpublish${typeName}($id: ID!) {
 }
 ${model.config.sharing?.enabled ? generateSharingOperations(model.key, typeName, pluralName) : ''}`;
 }
-function generateSharingOperations(modelKey, typeName, pluralName) {
-    return `# Sharing operations
+/**
+ * Generate the shared ShareFields fragment file.
+ * This must be emitted once (not per-model) to avoid duplicate fragment errors
+ * in Apollo iOS and other codegen tools that validate across all .graphql files.
+ */
+export function generateSharedFragments() {
+    return `# Shared fragments used across multiple model documents
+# @generated by foir — DO NOT EDIT MANUALLY
+
 fragment ShareFields on Share {
   id
   resourceType
@@ -112,6 +119,10 @@ fragment ShareFields on Share {
   createdAt
   revokedAt
 }
+`;
+}
+function generateSharingOperations(modelKey, typeName, pluralName) {
+    return `# Sharing operations
 
 mutation Share${typeName}($recordId: ID!, $sharedWithCustomerId: ID!, $permission: SharePermission!) {
   shareRecord(recordId: $recordId, sharedWithCustomerId: $sharedWithCustomerId, permission: $permission) {

package/dist/commands/auth-providers.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from 'commander';
+import type { GlobalOptions } from '../lib/config.js';
+export declare function registerAuthProvidersCommands(program: Command, globalOpts: () => GlobalOptions): void;
+//# sourceMappingURL=auth-providers.d.ts.map

package/dist/commands/auth-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-providers.d.ts","sourceRoot":"","sources":["../../src/commands/auth-providers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAsBtD,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,MAAM,aAAa,GAC9B,IAAI,CA4PN"}

package/dist/commands/auth-providers.js

@@ -0,0 +1,202 @@
+import chalk from 'chalk';
+import { withErrorHandler } from '../lib/errors.js';
+import { createClient } from '../lib/client.js';
+import { formatOutput, formatList, success } from '../lib/output.js';
+import { parseInputData, confirmAction } from '../lib/input.js';
+import { LIST_AUTH_PROVIDERS, GET_AUTH_PROVIDER, CREATE_AUTH_PROVIDER, UPDATE_AUTH_PROVIDER, DELETE_AUTH_PROVIDER, } from '../graphql/queries.js';
+const VALID_TYPES = [
+    'OAUTH2',
+    'TOKEN_SSO',
+    'SAML',
+    'OTP_VERIFY',
+    'OIDC',
+    'EXTERNAL',
+];
+export function registerAuthProvidersCommands(program, globalOpts) {
+    const authProviders = program
+        .command('auth-providers')
+        .description('Manage customer auth providers');
+    // list
+    authProviders
+        .command('list')
+        .description('List auth providers')
+        .option('--enabled-only', 'Show only enabled providers')
+        .action(withErrorHandler(globalOpts, async (cmdOpts) => {
+        const opts = globalOpts();
+        const client = await createClient(opts);
+        const data = await client.request(LIST_AUTH_PROVIDERS, {
+            enabledOnly: !!cmdOpts.enabledOnly,
+        });
+        formatList(data.customerAuthProviders, opts, {
+            columns: [
+                { key: 'id', header: 'ID', width: 28 },
+                { key: 'key', header: 'Key', width: 20 },
+                { key: 'name', header: 'Name', width: 24 },
+                { key: 'type', header: 'Type', width: 12 },
+                {
+                    key: 'enabled',
+                    header: 'Enabled',
+                    width: 8,
+                    format: (v) => (v ? 'yes' : 'no'),
+                },
+                {
+                    key: 'isDefault',
+                    header: 'Default',
+                    width: 8,
+                    format: (v) => (v ? 'yes' : 'no'),
+                },
+                { key: 'priority', header: 'Priority', width: 8 },
+            ],
+        });
+    }));
+    // get
+    authProviders
+        .command('get <id>')
+        .description('Get auth provider details')
+        .action(withErrorHandler(globalOpts, async (id) => {
+        const opts = globalOpts();
+        const client = await createClient(opts);
+        const data = await client.request(GET_AUTH_PROVIDER, { id });
+        if (!data.customerAuthProvider) {
+            throw new Error(`Auth provider not found: ${id}`);
+        }
+        if (opts.json || opts.jsonl) {
+            formatOutput(data.customerAuthProvider, opts);
+        }
+        else {
+            const p = data.customerAuthProvider;
+            console.log(chalk.bold(`${p.name}`) + chalk.gray(` (${p.key})`));
+            console.log(`  Type:     ${p.type}`);
+            console.log(`  Enabled:  ${p.enabled ? 'yes' : 'no'}`);
+            console.log(`  Default:  ${p.isDefault ? 'yes' : 'no'}`);
+            console.log(`  Priority: ${p.priority}`);
+            console.log(`  Verify External Customer: ${p.verifyExternalCustomer ? 'yes' : 'no'}`);
+            console.log(`  Capture Metadata:         ${p.captureMetadata ? 'yes' : 'no'}`);
+            if (p.configDisplay) {
+                console.log(`  Config:`);
+                console.log(chalk.gray(JSON.stringify(p.configDisplay, null, 2).replace(/^/gm, '    ')));
+            }
+            console.log(chalk.gray(`  Created: ${p.createdAt}`));
+            console.log(chalk.gray(`  Updated: ${p.updatedAt}`));
+        }
+    }));
+    // create
+    authProviders
+        .command('create')
+        .description('Create a new auth provider')
+        .requiredOption('--key <key>', 'Unique provider key')
+        .requiredOption('--name <name>', 'Display name')
+        .requiredOption('--type <type>', `Provider type (${VALID_TYPES.join(', ')})`)
+        .option('-d, --data <json>', 'Provider config as JSON string')
+        .option('--file <path>', 'Provider config from JSON file')
+        .option('--enabled', 'Enable the provider')
+        .option('--is-default', 'Set as default provider')
+        .option('--priority <n>', 'Display priority (higher = first)')
+        .option('--verify-external-customer', 'Verify customer exists in external system')
+        .option('--capture-metadata', 'Capture metadata from provider during auth')
+        .action(withErrorHandler(globalOpts, async (cmdOpts) => {
+        const opts = globalOpts();
+        const type = cmdOpts.type.toUpperCase();
+        if (!VALID_TYPES.includes(type)) {
+            throw new Error(`Invalid type "${cmdOpts.type}". Valid types: ${VALID_TYPES.join(', ')}`);
+        }
+        const config = await parseInputData({
+            data: cmdOpts.data,
+            file: cmdOpts.file,
+        });
+        const input = {
+            key: cmdOpts.key,
+            name: cmdOpts.name,
+            type,
+            config,
+        };
+        if (cmdOpts.enabled !== undefined)
+            input.enabled = true;
+        if (cmdOpts.isDefault !== undefined)
+            input.isDefault = true;
+        if (cmdOpts.priority !== undefined)
+            input.priority = parseInt(String(cmdOpts.priority), 10);
+        if (cmdOpts.verifyExternalCustomer !== undefined)
+            input.verifyExternalCustomer = true;
+        if (cmdOpts.captureMetadata !== undefined)
+            input.captureMetadata = true;
+        const client = await createClient(opts);
+        const data = await client.request(CREATE_AUTH_PROVIDER, { input });
+        if (opts.json || opts.jsonl) {
+            formatOutput(data.createCustomerAuthProvider, opts);
+        }
+        else {
+            success(`Created auth provider: ${data.createCustomerAuthProvider.name} (${data.createCustomerAuthProvider.key})`);
+        }
+    }));
+    // update
+    authProviders
+        .command('update <id>')
+        .description('Update an auth provider')
+        .option('--name <name>', 'Display name')
+        .option('-d, --data <json>', 'Provider config as JSON string')
+        .option('--file <path>', 'Provider config from JSON file')
+        .option('--enabled', 'Enable the provider')
+        .option('--no-enabled', 'Disable the provider')
+        .option('--is-default', 'Set as default provider')
+        .option('--priority <n>', 'Display priority (higher = first)')
+        .option('--verify-external-customer', 'Verify customer exists in external system')
+        .option('--capture-metadata', 'Capture metadata from provider during auth')
+        .action(withErrorHandler(globalOpts, async (id, cmdOpts) => {
+        const opts = globalOpts();
+        const input = {};
+        if (cmdOpts.name !== undefined)
+            input.name = cmdOpts.name;
+        if (cmdOpts.isDefault !== undefined)
+            input.isDefault = true;
+        if (cmdOpts.priority !== undefined)
+            input.priority = parseInt(String(cmdOpts.priority), 10);
+        if (cmdOpts.verifyExternalCustomer !== undefined)
+            input.verifyExternalCustomer = true;
+        if (cmdOpts.captureMetadata !== undefined)
+            input.captureMetadata = true;
+        // Commander's --no-enabled sets enabled=false, --enabled sets enabled=true
+        if (cmdOpts.enabled !== undefined) {
+            input.enabled = !!cmdOpts.enabled;
+        }
+        // Config from --data or --file (optional for update)
+        if (cmdOpts.data || cmdOpts.file) {
+            input.config = await parseInputData({
+                data: cmdOpts.data,
+                file: cmdOpts.file,
+            });
+        }
+        if (Object.keys(input).length === 0) {
+            throw new Error('No update fields provided.');
+        }
+        const client = await createClient(opts);
+        const data = await client.request(UPDATE_AUTH_PROVIDER, { id, input });
+        if (opts.json || opts.jsonl) {
+            formatOutput(data.updateCustomerAuthProvider, opts);
+        }
+        else {
+            success(`Updated auth provider: ${data.updateCustomerAuthProvider.name} (${data.updateCustomerAuthProvider.key})`);
+        }
+    }));
+    // delete
+    authProviders
+        .command('delete <id>')
+        .description('Delete an auth provider')
+        .option('--confirm', 'Skip confirmation prompt')
+        .action(withErrorHandler(globalOpts, async (id, cmdOpts) => {
+        const opts = globalOpts();
+        const confirmed = await confirmAction(`Delete auth provider ${id}? This cannot be undone.`, { confirm: !!cmdOpts.confirm });
+        if (!confirmed) {
+            console.log('Aborted.');
+            return;
+        }
+        const client = await createClient(opts);
+        const data = await client.request(DELETE_AUTH_PROVIDER, { id });
+        if (opts.json || opts.jsonl) {
+            formatOutput({ deleted: data.deleteCustomerAuthProvider, id }, opts);
+        }
+        else {
+            success(`Deleted auth provider ${id}`);
+        }
+    }));
+}

package/dist/commands/pull.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pull.d.ts","sourceRoot":"","sources":["../../src/commands/pull.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAuBtD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,MAAM,aAAa,GAC9B,IAAI,CA4LN"}
+{"version":3,"file":"pull.d.ts","sourceRoot":"","sources":["../../src/commands/pull.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAuBtD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,MAAM,aAAa,GAC9B,IAAI,CAuMN"}

package/dist/commands/pull.js

@@ -10,7 +10,7 @@ import { generateFieldTypesFile } from '../codegen/generators/field-types.js';
 import { generateConfigFile } from '../codegen/generators/config.js';
 import { generateModelTypes } from '../codegen/generators/model-types.js';
 import { generateModelIndex } from '../codegen/generators/model-index.js';
-import { generateModelDocuments } from '../codegen/generators/documents.js';
+import { generateModelDocuments, generateSharedFragments } from '../codegen/generators/documents.js';
 import { generateSwiftModelFile } from '../codegen/generators/swift-types.js';
 import { generateSwiftFieldTypesFile } from '../codegen/generators/swift-field-types.js';
 import { generateSwiftModelKeys } from '../codegen/generators/swift-model-keys.js';
@@ -96,6 +96,14 @@ export function registerPullCommand(program, globalOpts) {
                 content: generateModelDocuments(model),
             });
         }
+        // 5a. Shared fragments (emitted once when any model uses sharing)
+        const hasSharingModels = publicModels.some((m) => m.config.sharing?.enabled);
+        if (hasSharingModels) {
+            files.push({
+                path: resolve(docsDir, '_shared.graphql'),
+                content: generateSharedFragments(),
+            });
+        }
         // 5b. Customer profile GraphQL documents (always — static platform operations)
         files.push({
             path: resolve(docsDir, 'customer-profile.graphql'),

package/dist/graphql/queries.d.ts

@@ -4,6 +4,11 @@ export declare const GET_API_KEY = "\n  query($id: ID!) { getApiKey(id: $id) { i
 export declare const CREATE_API_KEY = "\n  mutation($input: CreateApiKeyInput!) { createApiKey(input: $input) { apiKey { id name keyPrefix isActive scopes createdAt } plainKey warning } }\n";
 export declare const ROTATE_API_KEY = "\n  mutation($id: ID!) { rotateApiKey(id: $id) { apiKey { id name keyPrefix rotatedAt } plainKey warning } }\n";
 export declare const REVOKE_API_KEY = "\n  mutation($id: ID!) { revokeApiKey(id: $id) { id name isActive revokedAt } }\n";
+export declare const LIST_AUTH_PROVIDERS = "\n  query($enabledOnly: Boolean) {\n    customerAuthProviders(enabledOnly: $enabledOnly) {\n      id key name type enabled isDefault priority createdAt updatedAt\n    }\n  }\n";
+export declare const GET_AUTH_PROVIDER = "\n  query($id: ID!) {\n    customerAuthProvider(id: $id) {\n      id key name type configDisplay enabled isDefault priority\n      verifyExternalCustomer captureMetadata createdAt updatedAt createdBy updatedBy\n    }\n  }\n";
+export declare const CREATE_AUTH_PROVIDER = "\n  mutation($input: CreateAuthProviderInput!) {\n    createCustomerAuthProvider(input: $input) {\n      id key name type enabled isDefault priority createdAt\n    }\n  }\n";
+export declare const UPDATE_AUTH_PROVIDER = "\n  mutation($id: ID!, $input: UpdateAuthProviderInput!) {\n    updateCustomerAuthProvider(id: $id, input: $input) {\n      id key name type enabled isDefault priority updatedAt\n    }\n  }\n";
+export declare const DELETE_AUTH_PROVIDER = "\n  mutation($id: ID!) { deleteCustomerAuthProvider(id: $id) }\n";
 export declare const RECORD = "\n  query($id: ID!) { record(id: $id) { id modelKey naturalKey recordType parentId data metadata currentVersionId publishedVersionId publishedVersionNumber publishedAt publishedBy publishStatus versionNumber customerId createdAt updatedAt createdBy updatedBy } }\n";
 export declare const RECORD_BY_KEY = "\n  query($modelKey: String!, $naturalKey: String!) { recordByKey(modelKey: $modelKey, naturalKey: $naturalKey) { id modelKey naturalKey recordType parentId data metadata currentVersionId publishedVersionId publishedVersionNumber publishedAt publishedBy publishStatus versionNumber customerId createdAt updatedAt createdBy updatedBy } }\n";
 export declare const RECORDS = "\n  query($modelKey: String!, $limit: Int, $offset: Int, $filters: [FilterInput!], $sort: SortInput) {\n    records(modelKey: $modelKey, limit: $limit, offset: $offset, filters: $filters, sort: $sort) {\n      items { id modelKey naturalKey recordType publishStatus versionNumber customerId createdAt updatedAt }\n      total\n    }\n  }\n";

package/dist/graphql/queries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queries.d.ts","sourceRoot":"","sources":["../../src/graphql/queries.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,mBAAmB,8HAE/B,CAAC;AAIF,eAAO,MAAM,aAAa,oVAOzB,CAAC;AAEF,eAAO,MAAM,WAAW,oOAEvB,CAAC;AAEF,eAAO,MAAM,cAAc,2JAE1B,CAAC;AAEF,eAAO,MAAM,cAAc,mHAE1B,CAAC;AAEF,eAAO,MAAM,cAAc,sFAE1B,CAAC;AAIF,eAAO,MAAM,MAAM,6QAElB,CAAC;AAEF,eAAO,MAAM,aAAa,uVAEzB,CAAC;AAEF,eAAO,MAAM,OAAO,wVAOnB,CAAC;AAEF,eAAO,MAAM,aAAa,+MAEzB,CAAC;AAEF,eAAO,MAAM,aAAa,qJAEzB,CAAC;AAEF,eAAO,MAAM,aAAa,kFAEzB,CAAC;AAEF,eAAO,MAAM,eAAe,8EAE3B,CAAC;AAEF,eAAO,MAAM,gBAAgB,0DAE5B,CAAC;AAEF,eAAO,MAAM,gBAAgB,kLAE5B,CAAC;AAEF,eAAO,MAAM,eAAe,uOAE3B,CAAC;AAEF,eAAO,MAAM,eAAe,wMAE3B,CAAC;AAIF,eAAO,MAAM,kBAAkB,sKAO9B,CAAC;AAEF,eAAO,MAAM,YAAY,uPAExB,CAAC;AAEF,eAAO,MAAM,MAAM,4QAOlB,CAAC;AAEF,eAAO,MAAM,YAAY,qHAExB,CAAC;AAEF,eAAO,MAAM,YAAY,qHAExB,CAAC;AAEF,eAAO,MAAM,YAAY,sDAExB,CAAC;AAEF,eAAO,MAAM,cAAc,wNAE1B,CAAC;AAIF,eAAO,MAAM,aAAa,2UAOzB,CAAC;AAIF,eAAO,MAAM,uBAAuB,uNAEnC,CAAC;AAEF,eAAO,MAAM,8BAA8B,0QAE1C,CAAC;AAEF,eAAO,MAAM,gBAAgB,kKAE5B,CAAC;AAEF,eAAO,MAAM,oBAAoB,+KAEhC,CAAC;AAIF,eAAO,MAAM,SAAS,qTAOrB,CAAC;AAEF,eAAO,MAAM,QAAQ,oGAEpB,CAAC;AAEF,eAAO,MAAM,iBAAiB,wHAE7B,CAAC;AAEF,eAAO,MAAM,eAAe,iHAE3B,CAAC;AAEF,eAAO,MAAM,eAAe,+EAE3B,CAAC;AAIF,eAAO,MAAM,QAAQ,qNAEpB,CAAC;AAEF,eAAO,MAAM,OAAO,+LAEnB,CAAC;AAEF,eAAO,MAAM,cAAc,2MAE1B,CAAC;AAEF,eAAO,MAAM,cAAc,oHAE1B,CAAC;AAEF,eAAO,MAAM,cAAc,uIAE1B,CAAC;AAEF,eAAO,MAAM,cAAc,wDAE1B,CAAC;AAEF,eAAO,MAAM,qBAAqB,iKAEjC,CAAC;AAEF,eAAO,MAAM,uBAAuB,8JAEnC,CAAC;AAIF,eAAO,MAAM,WAAW,uQAEvB,CAAC;AAEF,eAAO,MAAM,UAAU,4SAEtB,CAAC;AAEF,eAAO,MAAM,iBAAiB,wTAE7B,CAAC;AAEF,eAAO,MAAM,iBAAiB,iIAE7B,CAAC;AAEF,eAAO,MAAM,iBAAiB,oJAE7B,CAAC;AAEF,eAAO,MAAM,iBAAiB,2DAE7B,CAAC;AAEF,eAAO,MAAM,gBAAgB,+GAE5B,CAAC;AAEF,eAAO,MAAM,gBAAgB,+GAE5B,CAAC;AAEF,eAAO,MAAM,iBAAiB,gHAE7B,CAAC;AAEF,eAAO,MAAM,cAAc,6GAE1B,CAAC;AAEF,eAAO,MAAM,gBAAgB,mLAE5B,CAAC;AAIF,eAAO,MAAM,YAAY,oIAExB,CAAC;AAEF,eAAO,MAAM,oBAAoB,oLAEhC,CAAC;AAEF,eAAO,MAAM,OAAO,0JAEnB,CAAC;AAEF,eAAO,MAAM,WAAW,wHAEvB,CAAC;AAEF,eAAO,MAAM,cAAc,+DAE1B,CAAC;AAIF,eAAO,MAAM,UAAU,kRAEtB,CAAC;AAEF,eAAO,MAAM,SAAS,4NAErB,CAAC;AAEF,eAAO,MAAM,gBAAgB,wOAE5B,CAAC;AAEF,eAAO,MAAM,kBAAkB,yIAE9B,CAAC;AAEF,eAAO,MAAM,sBAAsB,oHAElC,CAAC;AAIF,eAAO,MAAM,UAAU,sQAEtB,CAAC;AAEF,eAAO,MAAM,SAAS,+SAErB,CAAC;AAEF,eAAO,MAAM,iBAAiB,iKAE7B,CAAC;AAEF,eAAO,MAAM,yBAAyB,4KAErC,CAAC;AAEF,eAAO,MAAM,sBAAsB,sUAOlC,CAAC;AAEF,eAAO,MAAM,iBAAiB,oIAE7B,CAAC;AAEF,eAAO,MAAM,mBAAmB,+FAE/B,CAAC;AAIF,eAAO,MAAM,SAAS,sSAOrB,CAAC;AAEF,eAAO,MAAM,QAAQ,wQAEpB,CAAC;AAEF,eAAO,MAAM,eAAe,2HAE3B,CAAC;AAEF,eAAO,MAAM,eAAe,qJAE3B,CAAC;AAEF,eAAO,MAAM,eAAe,gEAE3B,CAAC;AAEF,eAAO,MAAM,cAAc,4FAE1B,CAAC;AAEF,eAAO,MAAM,eAAe,oFAE3B,CAAC;AAEF,eAAO,MAAM,gBAAgB,yFAE5B,CAAC;AAIF,eAAO,MAAM,aAAa,8QASzB,CAAC;AAEF,eAAO,MAAM,sBAAsB,oFAElC,CAAC;AAEF,eAAO,MAAM,2BAA2B,gDAEvC,CAAC;AAIF,eAAO,MAAM,OAAO,mPAEnB,CAAC;AAEF,eAAO,MAAM,MAAM,4IAElB,CAAC;AAEF,eAAO,MAAM,cAAc,4JAE1B,CAAC;AAEF,eAAO,MAAM,cAAc,qGAE1B,CAAC;AAEF,eAAO,MAAM,aAAa,6HAEzB,CAAC;AAEF,eAAO,MAAM,aAAa,gJAEzB,CAAC;AAEF,eAAO,MAAM,aAAa,uDAEzB,CAAC;AAIF,eAAO,MAAM,KAAK,+VAOjB,CAAC;AAEF,eAAO,MAAM,IAAI,yKAEhB,CAAC;AAEF,eAAO,MAAM,kBAAkB,uFAE9B,CAAC;AAEF,eAAO,MAAM,WAAW,uRAEvB,CAAC;AAEF,eAAO,MAAM,oBAAoB,qOAEhC,CAAC;AAEF,eAAO,MAAM,WAAW,qDAEvB,CAAC;AAIF,eAAO,MAAM,KAAK,6XAOjB,CAAC;AAEF,eAAO,MAAM,IAAI,qLAEhB,CAAC;AAEF,eAAO,MAAM,WAAW,8HAEvB,CAAC;AAEF,eAAO,MAAM,YAAY,qHAExB,CAAC;AAEF,eAAO,MAAM,WAAW,iEAEvB,CAAC;AAIF,eAAO,MAAM,eAAe,qNAE3B,CAAC;AAEF,eAAO,MAAM,qBAAqB,yIAEjC,CAAC;AAEF,eAAO,MAAM,4BAA4B,qJAExC,CAAC;AAEF,eAAO,MAAM,4BAA4B,iJAExC,CAAC;AAEF,eAAO,MAAM,4BAA4B,oKAExC,CAAC;AAEF,eAAO,MAAM,4BAA4B,oEAExC,CAAC"}
+{"version":3,"file":"queries.d.ts","sourceRoot":"","sources":["../../src/graphql/queries.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,mBAAmB,8HAE/B,CAAC;AAIF,eAAO,MAAM,aAAa,oVAOzB,CAAC;AAEF,eAAO,MAAM,WAAW,oOAEvB,CAAC;AAEF,eAAO,MAAM,cAAc,2JAE1B,CAAC;AAEF,eAAO,MAAM,cAAc,mHAE1B,CAAC;AAEF,eAAO,MAAM,cAAc,sFAE1B,CAAC;AAIF,eAAO,MAAM,mBAAmB,oLAM/B,CAAC;AAEF,eAAO,MAAM,iBAAiB,oOAO7B,CAAC;AAEF,eAAO,MAAM,oBAAoB,iLAMhC,CAAC;AAEF,eAAO,MAAM,oBAAoB,oMAMhC,CAAC;AAEF,eAAO,MAAM,oBAAoB,qEAEhC,CAAC;AAIF,eAAO,MAAM,MAAM,6QAElB,CAAC;AAEF,eAAO,MAAM,aAAa,uVAEzB,CAAC;AAEF,eAAO,MAAM,OAAO,wVAOnB,CAAC;AAEF,eAAO,MAAM,aAAa,+MAEzB,CAAC;AAEF,eAAO,MAAM,aAAa,qJAEzB,CAAC;AAEF,eAAO,MAAM,aAAa,kFAEzB,CAAC;AAEF,eAAO,MAAM,eAAe,8EAE3B,CAAC;AAEF,eAAO,MAAM,gBAAgB,0DAE5B,CAAC;AAEF,eAAO,MAAM,gBAAgB,kLAE5B,CAAC;AAEF,eAAO,MAAM,eAAe,uOAE3B,CAAC;AAEF,eAAO,MAAM,eAAe,wMAE3B,CAAC;AAIF,eAAO,MAAM,kBAAkB,sKAO9B,CAAC;AAEF,eAAO,MAAM,YAAY,uPAExB,CAAC;AAEF,eAAO,MAAM,MAAM,4QAOlB,CAAC;AAEF,eAAO,MAAM,YAAY,qHAExB,CAAC;AAEF,eAAO,MAAM,YAAY,qHAExB,CAAC;AAEF,eAAO,MAAM,YAAY,sDAExB,CAAC;AAEF,eAAO,MAAM,cAAc,wNAE1B,CAAC;AAIF,eAAO,MAAM,aAAa,2UAOzB,CAAC;AAIF,eAAO,MAAM,uBAAuB,uNAEnC,CAAC;AAEF,eAAO,MAAM,8BAA8B,0QAE1C,CAAC;AAEF,eAAO,MAAM,gBAAgB,kKAE5B,CAAC;AAEF,eAAO,MAAM,oBAAoB,+KAEhC,CAAC;AAIF,eAAO,MAAM,SAAS,qTAOrB,CAAC;AAEF,eAAO,MAAM,QAAQ,oGAEpB,CAAC;AAEF,eAAO,MAAM,iBAAiB,wHAE7B,CAAC;AAEF,eAAO,MAAM,eAAe,iHAE3B,CAAC;AAEF,eAAO,MAAM,eAAe,+EAE3B,CAAC;AAIF,eAAO,MAAM,QAAQ,qNAEpB,CAAC;AAEF,eAAO,MAAM,OAAO,+LAEnB,CAAC;AAEF,eAAO,MAAM,cAAc,2MAE1B,CAAC;AAEF,eAAO,MAAM,cAAc,oHAE1B,CAAC;AAEF,eAAO,MAAM,cAAc,uIAE1B,CAAC;AAEF,eAAO,MAAM,cAAc,wDAE1B,CAAC;AAEF,eAAO,MAAM,qBAAqB,iKAEjC,CAAC;AAEF,eAAO,MAAM,uBAAuB,8JAEnC,CAAC;AAIF,eAAO,MAAM,WAAW,uQAEvB,CAAC;AAEF,eAAO,MAAM,UAAU,4SAEtB,CAAC;AAEF,eAAO,MAAM,iBAAiB,wTAE7B,CAAC;AAEF,eAAO,MAAM,iBAAiB,iIAE7B,CAAC;AAEF,eAAO,MAAM,iBAAiB,oJAE7B,CAAC;AAEF,eAAO,MAAM,iBAAiB,2DAE7B,CAAC;AAEF,eAAO,MAAM,gBAAgB,+GAE5B,CAAC;AAEF,eAAO,MAAM,gBAAgB,+GAE5B,CAAC;AAEF,eAAO,MAAM,iBAAiB,gHAE7B,CAAC;AAEF,eAAO,MAAM,cAAc,6GAE1B,CAAC;AAEF,eAAO,MAAM,gBAAgB,mLAE5B,CAAC;AAIF,eAAO,MAAM,YAAY,oIAExB,CAAC;AAEF,eAAO,MAAM,oBAAoB,oLAEhC,CAAC;AAEF,eAAO,MAAM,OAAO,0JAEnB,CAAC;AAEF,eAAO,MAAM,WAAW,wHAEvB,CAAC;AAEF,eAAO,MAAM,cAAc,+DAE1B,CAAC;AAIF,eAAO,MAAM,UAAU,kRAEtB,CAAC;AAEF,eAAO,MAAM,SAAS,4NAErB,CAAC;AAEF,eAAO,MAAM,gBAAgB,wOAE5B,CAAC;AAEF,eAAO,MAAM,kBAAkB,yIAE9B,CAAC;AAEF,eAAO,MAAM,sBAAsB,oHAElC,CAAC;AAIF,eAAO,MAAM,UAAU,sQAEtB,CAAC;AAEF,eAAO,MAAM,SAAS,+SAErB,CAAC;AAEF,eAAO,MAAM,iBAAiB,iKAE7B,CAAC;AAEF,eAAO,MAAM,yBAAyB,4KAErC,CAAC;AAEF,eAAO,MAAM,sBAAsB,sUAOlC,CAAC;AAEF,eAAO,MAAM,iBAAiB,oIAE7B,CAAC;AAEF,eAAO,MAAM,mBAAmB,+FAE/B,CAAC;AAIF,eAAO,MAAM,SAAS,sSAOrB,CAAC;AAEF,eAAO,MAAM,QAAQ,wQAEpB,CAAC;AAEF,eAAO,MAAM,eAAe,2HAE3B,CAAC;AAEF,eAAO,MAAM,eAAe,qJAE3B,CAAC;AAEF,eAAO,MAAM,eAAe,gEAE3B,CAAC;AAEF,eAAO,MAAM,cAAc,4FAE1B,CAAC;AAEF,eAAO,MAAM,eAAe,oFAE3B,CAAC;AAEF,eAAO,MAAM,gBAAgB,yFAE5B,CAAC;AAIF,eAAO,MAAM,aAAa,8QASzB,CAAC;AAEF,eAAO,MAAM,sBAAsB,oFAElC,CAAC;AAEF,eAAO,MAAM,2BAA2B,gDAEvC,CAAC;AAIF,eAAO,MAAM,OAAO,mPAEnB,CAAC;AAEF,eAAO,MAAM,MAAM,4IAElB,CAAC;AAEF,eAAO,MAAM,cAAc,4JAE1B,CAAC;AAEF,eAAO,MAAM,cAAc,qGAE1B,CAAC;AAEF,eAAO,MAAM,aAAa,6HAEzB,CAAC;AAEF,eAAO,MAAM,aAAa,gJAEzB,CAAC;AAEF,eAAO,MAAM,aAAa,uDAEzB,CAAC;AAIF,eAAO,MAAM,KAAK,+VAOjB,CAAC;AAEF,eAAO,MAAM,IAAI,yKAEhB,CAAC;AAEF,eAAO,MAAM,kBAAkB,uFAE9B,CAAC;AAEF,eAAO,MAAM,WAAW,uRAEvB,CAAC;AAEF,eAAO,MAAM,oBAAoB,qOAEhC,CAAC;AAEF,eAAO,MAAM,WAAW,qDAEvB,CAAC;AAIF,eAAO,MAAM,KAAK,6XAOjB,CAAC;AAEF,eAAO,MAAM,IAAI,qLAEhB,CAAC;AAEF,eAAO,MAAM,WAAW,8HAEvB,CAAC;AAEF,eAAO,MAAM,YAAY,qHAExB,CAAC;AAEF,eAAO,MAAM,WAAW,iEAEvB,CAAC;AAIF,eAAO,MAAM,eAAe,qNAE3B,CAAC;AAEF,eAAO,MAAM,qBAAqB,yIAEjC,CAAC;AAEF,eAAO,MAAM,4BAA4B,qJAExC,CAAC;AAEF,eAAO,MAAM,4BAA4B,iJAExC,CAAC;AAEF,eAAO,MAAM,4BAA4B,oKAExC,CAAC;AAEF,eAAO,MAAM,4BAA4B,oEAExC,CAAC"}

package/dist/graphql/queries.js

@@ -27,6 +27,39 @@ export const ROTATE_API_KEY = `
 export const REVOKE_API_KEY = `
   mutation($id: ID!) { revokeApiKey(id: $id) { id name isActive revokedAt } }
 `;
+// --- Auth Providers ---
+export const LIST_AUTH_PROVIDERS = `
+  query($enabledOnly: Boolean) {
+    customerAuthProviders(enabledOnly: $enabledOnly) {
+      id key name type enabled isDefault priority createdAt updatedAt
+    }
+  }
+`;
+export const GET_AUTH_PROVIDER = `
+  query($id: ID!) {
+    customerAuthProvider(id: $id) {
+      id key name type configDisplay enabled isDefault priority
+      verifyExternalCustomer captureMetadata createdAt updatedAt createdBy updatedBy
+    }
+  }
+`;
+export const CREATE_AUTH_PROVIDER = `
+  mutation($input: CreateAuthProviderInput!) {
+    createCustomerAuthProvider(input: $input) {
+      id key name type enabled isDefault priority createdAt
+    }
+  }
+`;
+export const UPDATE_AUTH_PROVIDER = `
+  mutation($id: ID!, $input: UpdateAuthProviderInput!) {
+    updateCustomerAuthProvider(id: $id, input: $input) {
+      id key name type enabled isDefault priority updatedAt
+    }
+  }
+`;
+export const DELETE_AUTH_PROVIDER = `
+  mutation($id: ID!) { deleteCustomerAuthProvider(id: $id) }
+`;
 // --- Records ---
 export const RECORD = `
   query($id: ID!) { record(id: $id) { id modelKey naturalKey recordType parentId data metadata currentVersionId publishedVersionId publishedVersionNumber publishedAt publishedBy publishStatus versionNumber customerId createdAt updatedAt createdBy updatedBy } }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eide/foir-cli",
-  "version": "0.1.12",
+  "version": "0.1.14",
   "description": "Universal platform CLI for EIDE — scriptable, composable resource management",
   "type": "module",
   "publishConfig": {