@enerlence/suntropy-cli 0.9.0 → 0.11.0

package/dist/bin/suntropy.js

@@ -398,6 +398,51 @@ function registerAuthCommands(program2) {
       outputError(handleApiError(err));
     }
   });
+  auth.command("logout").description(
+    "Clear stored credentials for the active profile (or --profile). Removes the\ntoken and account identity but keeps the profile and its server URL.\nUse --all to log out of every profile."
+  ).option("--all", "Clear credentials for ALL profiles").action(async (opts) => {
+    try {
+      const global = getGlobalOpts(auth);
+      const config = loadConfig();
+      const clearProfile = (name) => {
+        const profile = config.profiles[name];
+        if (!profile) return false;
+        const hadToken2 = !!profile.token;
+        delete profile.token;
+        delete profile.authMethod;
+        delete profile.email;
+        delete profile.clientUID;
+        delete profile.userUID;
+        return hadToken2;
+      };
+      if (opts.all) {
+        const names = Object.keys(config.profiles);
+        const clearedWithToken = names.filter(clearProfile);
+        saveConfig(config);
+        output({
+          success: true,
+          message: `Logged out of ${names.length} profile(s).`,
+          profiles: names,
+          hadCredentials: clearedWithToken
+        }, global);
+        return;
+      }
+      const profileName = global.profile || config.activeProfile;
+      if (!config.profiles[profileName]) {
+        outputError(new Error(`Profile "${profileName}" not found. Available: ${Object.keys(config.profiles).join(", ")}`));
+        return;
+      }
+      const hadToken = clearProfile(profileName);
+      saveConfig(config);
+      output({
+        success: true,
+        profile: profileName,
+        message: hadToken ? `Logged out of profile "${profileName}". Credentials cleared (server kept).` : `Profile "${profileName}" had no stored credentials.`
+      }, global);
+    } catch (err) {
+      outputError(err);
+    }
+  });
 }
 
 // src/commands/config/shared.ts
@@ -4347,8 +4392,168 @@ function registerGeocodeCommands(program2) {
   });
 }
 
+// src/access.ts
+var COMMAND_TIERS = ["read", "write", "delete"];
+var TIER_VALUE = { read: 0, write: 1, delete: 2 };
+var DEFAULT_TIER = "delete";
+var ENV_VAR = "SUNTROPY_COMMAND_PROFILE";
+function tierValue(t) {
+  return TIER_VALUE[t];
+}
+function isValidTier(value) {
+  return typeof value === "string" && COMMAND_TIERS.includes(value);
+}
+function getActiveCommandProfile() {
+  const envRaw = process.env[ENV_VAR]?.trim();
+  if (envRaw) {
+    const envNorm = envRaw.toLowerCase();
+    if (isValidTier(envNorm)) return { tier: envNorm, source: "env" };
+    const fallback = resolveFromConfig();
+    return { ...fallback, invalidEnv: envRaw };
+  }
+  return resolveFromConfig();
+}
+function resolveFromConfig() {
+  try {
+    const cfg = loadConfig();
+    if (isValidTier(cfg.commandProfile)) return { tier: cfg.commandProfile, source: "config" };
+  } catch {
+  }
+  return { tier: DEFAULT_TIER, source: "default" };
+}
+function setStoredCommandProfile(tier) {
+  const cfg = loadConfig();
+  if (tier === null) delete cfg.commandProfile;
+  else cfg.commandProfile = tier;
+  saveConfig(cfg);
+}
+var DELETE_VERBS = /* @__PURE__ */ new Set(["delete", "delete-batch", "archive"]);
+var WRITE_VERBS = /* @__PURE__ */ new Set([
+  "create",
+  "update",
+  "edit",
+  "set",
+  "add",
+  "remove",
+  "assemble",
+  "featured",
+  "save",
+  "init",
+  "init-default",
+  "add-comment",
+  "comment",
+  "calculate-results",
+  "optimize-peakpower"
+]);
+var PATH_OVERRIDES = {
+  "studies calculate production": "write"
+};
+function classifyPath(segs) {
+  const key = segs.join(" ");
+  if (PATH_OVERRIDES[key]) return PATH_OVERRIDES[key];
+  let tier = "read";
+  for (const seg of segs) {
+    if (DELETE_VERBS.has(seg)) return "delete";
+    if (WRITE_VERBS.has(seg)) tier = "write";
+  }
+  return tier;
+}
+var EXEMPT_CONFIG_LEAVES = /* @__PURE__ */ new Set(["set", "get", "list", "create-profile", "use"]);
+function isExemptPath(segs) {
+  if (segs[0] === "auth") return true;
+  if (segs[0] === "command-profile") return true;
+  if (segs[0] === "config" && segs.length === 2 && EXEMPT_CONFIG_LEAVES.has(segs[1])) return true;
+  return false;
+}
+function applyCommandProfile(program2) {
+  const resolved = getActiveCommandProfile();
+  pruneChildren(program2, [], tierValue(resolved.tier));
+  return resolved;
+}
+function pruneChildren(parent, parentSegs, max) {
+  const kept = parent.commands.filter((child) => {
+    const segs = [...parentSegs, child.name()];
+    return keepCommand(child, segs, max);
+  });
+  const mutable = parent.commands;
+  mutable.length = 0;
+  mutable.push(...kept);
+}
+function keepCommand(cmd, segs, max) {
+  if (cmd.commands.length > 0) {
+    pruneChildren(cmd, segs, max);
+    if (cmd.commands.length > 0) return true;
+    return isExemptPath(segs);
+  }
+  if (isExemptPath(segs)) return true;
+  return tierValue(classifyPath(segs)) <= max;
+}
+
+// src/commands/command-profile.ts
+function getGlobalOpts16(cmd) {
+  let root = cmd;
+  while (root.parent) root = root.parent;
+  return root.opts();
+}
+function registerCommandProfileCommand(program2) {
+  program2.command("command-profile [tier]", { hidden: true }).description("Admin: get/set the command access profile (read | write | delete | reset)").action((tier) => {
+    try {
+      const global = getGlobalOpts16(program2);
+      if (!tier) {
+        const resolved = getActiveCommandProfile();
+        output(
+          {
+            commandProfile: resolved.tier,
+            source: resolved.source,
+            ...resolved.invalidEnv ? { warning: `Ignoring invalid ${ENV_VAR}="${resolved.invalidEnv}" (expected: ${COMMAND_TIERS.join(" | ")})` } : {},
+            available: COMMAND_TIERS,
+            envVar: ENV_VAR
+          },
+          global
+        );
+        return;
+      }
+      const value = tier.trim().toLowerCase();
+      if (value === "reset") {
+        setStoredCommandProfile(null);
+        const resolved = getActiveCommandProfile();
+        output(
+          {
+            success: true,
+            message: `Stored command profile cleared. Effective tier: ${resolved.tier} (${resolved.source}).`,
+            commandProfile: resolved.tier,
+            source: resolved.source
+          },
+          global
+        );
+        return;
+      }
+      if (!isValidTier(value)) {
+        outputError(new Error(`Invalid tier "${tier}". Expected one of: ${COMMAND_TIERS.join(", ")}, or "reset".`));
+        return;
+      }
+      setStoredCommandProfile(value);
+      const envOverride = getActiveCommandProfile();
+      const message = envOverride.source === "env" ? `Stored command profile set to "${value}", but ${ENV_VAR}="${process.env[ENV_VAR]}" overrides it (effective: ${envOverride.tier}). Unset the env var for the stored value to apply.` : `Command profile set to "${value}". Takes effect on the next command.`;
+      output(
+        {
+          success: true,
+          commandProfile: value,
+          effectiveTier: envOverride.tier,
+          effectiveSource: envOverride.source,
+          default: DEFAULT_TIER,
+          message
+        },
+        global
+      );
+    } catch (err) {
+      outputError(err);
+    }
+  });
+}
+
 // src/index.ts
-var CLI_VERSION = true ? "0.9.0" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.11.0" : "0.0.0-dev";
 function createProgram() {
   const program2 = new Command3();
   program2.name("suntropy").description("Agent-first CLI for Suntropy solar platform. Optimized for programmatic data manipulation and progressive exploration.").version(CLI_VERSION).option("--format <format>", "Output format: json (default), human, csv", "json").option("--fields <fields>", "Comma-separated fields to include in output").option("--server <url>", "Override API server URL").option("--token <jwt>", "Override authentication token").option("--profile <name>", "Use a specific config profile").option("--verbose", "Show HTTP request/response details on stderr").option("--quiet", "Suppress non-data output").option("--save <file>", "Save output to file (also writes to stdout)");
@@ -4363,6 +4568,8 @@ function createProgram() {
   registerShareableCommands(program2);
   registerTemplatesCommands(program2);
   registerGeocodeCommands(program2);
+  registerCommandProfileCommand(program2);
+  applyCommandProfile(program2);
   return program2;
 }