@geoly-ai/social-hub-cli 0.0.1

package/dist/permissions.js

@@ -0,0 +1,101 @@
+import { buildPermissionMatrix, canPerformAction, } from "@geoly-ai/social-hub-authz";
+/** Representative write/high-risk commands mapped to authz resources. */
+export const CLI_PERMISSION_GATES = [
+    { command: "accounts list", resource: "socialAccount", action: "list" },
+    { command: "accounts get", resource: "socialAccount", action: "read" },
+    { command: "accounts create", resource: "socialAccount", action: "create" },
+    { command: "accounts update", resource: "socialAccount", action: "update" },
+    { command: "accounts delete", resource: "socialAccount", action: "delete" },
+    {
+        command: "accounts brand-bindings list",
+        resource: "socialAccount",
+        action: "read",
+    },
+    {
+        command: "accounts brand-bindings add",
+        resource: "socialAccount",
+        action: "update",
+    },
+    {
+        command: "accounts brand-bindings remove",
+        resource: "socialAccount",
+        action: "update",
+    },
+    {
+        command: "accounts status-snapshots list",
+        resource: "socialAccount",
+        action: "read",
+    },
+    { command: "reddit list", resource: "postSnapshot", action: "list" },
+    { command: "reddit create-snapshot", resource: "postSnapshot", action: "create" },
+    { command: "reddit update", resource: "postSnapshot", action: "update" },
+    { command: "reddit delete", resource: "postSnapshot", action: "delete" },
+    { command: "reddit stats", resource: "postSnapshotStats", action: "read" },
+    {
+        command: "reddit refresh-status",
+        resource: "postSnapshotStats",
+        action: "read",
+    },
+    {
+        command: "reddit refresh-all",
+        resource: "postSnapshotRefresh",
+        action: "create",
+    },
+    {
+        command: "reddit refresh",
+        resource: "postSnapshotRefresh",
+        action: "create",
+    },
+    {
+        command: "reddit refresh-progress",
+        resource: "postSnapshotStats",
+        action: "read",
+    },
+    {
+        command: "reddit import-feishu",
+        resource: "postSnapshotImport",
+        action: "create",
+    },
+    { command: "events append", resource: "task", action: "create" },
+    { command: "jobs create", resource: "task", action: "create" },
+    { command: "api-keys list", resource: "apiKey", action: "list" },
+    { command: "api-keys create", resource: "apiKey", action: "create" },
+    { command: "permissions", resource: "apiKey", action: "list" },
+    { command: "permissions-update", resource: "systemMember", action: "update", note: "admin only" },
+];
+export function roleAllows(role, resource, action) {
+    return canPerformAction({ role, resource, action });
+}
+export function formatPermissionDenied(input) {
+    const lines = [
+        `Permission denied for \`${input.command}\`.`,
+        `Current role \`${input.role}\` cannot perform ${input.resource}:${input.action}.`,
+        "Fix: use an API Key with a higher role (manager/supervisor/admin), or ask a team admin to create one.",
+        "Run `social-hub auth explain` to see allowed commands for your role.",
+    ];
+    return lines.join("\n");
+}
+export function explainCliPermissions(role) {
+    const matrix = buildPermissionMatrix();
+    const allowedCommands = [];
+    const deniedCommands = [];
+    for (const gate of CLI_PERMISSION_GATES) {
+        if (roleAllows(role, gate.resource, gate.action)) {
+            allowedCommands.push(gate.command);
+        }
+        else {
+            deniedCommands.push(gate.command);
+        }
+    }
+    return { role, matrix, allowedCommands, deniedCommands };
+}
+export function assertCliPermission(input) {
+    if (roleAllows(input.role, input.resource, input.action))
+        return;
+    console.error(formatPermissionDenied(input));
+    process.exit(1);
+}
+export function findGateForCommand(commandPath) {
+    return CLI_PERMISSION_GATES.find((g) => g.command === commandPath);
+}
+//# sourceMappingURL=permissions.js.map

package/dist/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AAWpC,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE;IACvE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE;IACtE,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3E,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3E,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3E;QACE,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,MAAM;KACf;IACD,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE;IACpE,EAAE,OAAO,EAAE,wBAAwB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE;IACjF,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE;IACxE,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE;IACxE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE;IAC1E;QACE,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,qBAAqB;QAC/B,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,qBAAqB;QAC/B,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAChE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC9D,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;IAChE,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;IACpE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;IAC9D,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE;CAClG,CAAC;AAEF,MAAM,UAAU,UAAU,CACxB,IAAU,EACV,QAAkB,EAClB,MAAc;IAEd,OAAO,gBAAgB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAKtC;IACC,MAAM,KAAK,GAAG;QACZ,2BAA2B,KAAK,CAAC,OAAO,KAAK;QAC7C,kBAAkB,KAAK,CAAC,IAAI,qBAAqB,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG;QAClF,uGAAuG;QACvG,sEAAsE;KACvE,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAU;IAM9C,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;IACvC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAKnC;IACC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO;IACjE,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC;AACrE,CAAC"}

package/dist/permissions.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=permissions.test.d.ts.map

package/dist/permissions.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.test.d.ts","sourceRoot":"","sources":["../src/permissions.test.ts"],"names":[],"mappings":""}

package/dist/permissions.test.js

@@ -0,0 +1,17 @@
+import { describe, expect, it } from "vitest";
+import { explainCliPermissions, roleAllows } from "./permissions.js";
+describe("permissions", () => {
+    it("client can list accounts but not delete", () => {
+        expect(roleAllows("client", "socialAccount", "list")).toBe(true);
+        expect(roleAllows("client", "socialAccount", "delete")).toBe(false);
+    });
+    it("manager can refresh reddit snapshots", () => {
+        expect(roleAllows("manager", "postSnapshotRefresh", "create")).toBe(true);
+    });
+    it("explain lists allowed and denied commands", () => {
+        const explained = explainCliPermissions("client");
+        expect(explained.allowedCommands).toContain("accounts list");
+        expect(explained.deniedCommands).toContain("accounts delete");
+    });
+});
+//# sourceMappingURL=permissions.test.js.map

package/dist/permissions.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.test.js","sourceRoot":"","sources":["../src/permissions.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAErE,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,qBAAqB,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,SAAS,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/register-admin.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from "commander";
+export declare function registerAdminCommands(program: Command): void;
+//# sourceMappingURL=register-admin.d.ts.map

package/dist/register-admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-admin.d.ts","sourceRoot":"","sources":["../src/register-admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKzC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuH5D"}

package/dist/register-admin.js

@@ -0,0 +1,100 @@
+import { requireClient, resolveTeamId } from "./client.js";
+import { assertApplyOrDryRun } from "./dry-run.js";
+import { printResult, withCliErrorBoundary } from "./output.js";
+export function registerAdminCommands(program) {
+    const settings = program.command("settings").description("系统设置（admin）");
+    settings
+        .command("list")
+        .action(async () => {
+        await withCliErrorBoundary(async () => {
+            printResult(await requireClient().listSettings());
+        });
+    });
+    settings
+        .command("get")
+        .argument("<key>", "Setting key")
+        .action(async (key) => {
+        await withCliErrorBoundary(async () => {
+            printResult(await requireClient().getSetting(key));
+        });
+    });
+    settings
+        .command("set")
+        .argument("<key>", "Setting key")
+        .requiredOption("--value <value>", "Value")
+        .option("--dry-run", "预览", false)
+        .option("--apply", "执行写入", false)
+        .action(async (key, opts) => {
+        await withCliErrorBoundary(async () => {
+            if (!assertApplyOrDryRun(opts, {
+                command: "settings set",
+                danger: "admin",
+                summary: { key, value: opts.value },
+            })) {
+                return;
+            }
+            printResult(await requireClient().upsertSetting(key, { value: opts.value }));
+        });
+    });
+    const invites = program.command("invites").description("团队邀请");
+    invites
+        .command("list")
+        .requiredOption("-t, --team <teamId>", "Team UUID")
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            printResult(await requireClient().listTeamInvites(resolveTeamId(opts.team)));
+        });
+    });
+    invites
+        .command("create")
+        .requiredOption("-t, --team <teamId>", "Team UUID")
+        .requiredOption("--email <email>", "邮箱")
+        .requiredOption("--role <role>", "角色")
+        .option("--dry-run", "预览", false)
+        .option("--apply", "执行写入", false)
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            const teamId = resolveTeamId(opts.team);
+            if (!assertApplyOrDryRun(opts, {
+                command: "invites create",
+                danger: "write",
+                summary: { teamId, email: opts.email, role: opts.role },
+            })) {
+                return;
+            }
+            printResult(await requireClient().createTeamInvite(teamId, {
+                email: opts.email,
+                role: opts.role,
+            }));
+        });
+    });
+    invites
+        .command("revoke")
+        .requiredOption("-t, --team <teamId>", "Team UUID")
+        .requiredOption("--id <inviteId>", "邀请 ID")
+        .option("--dry-run", "预览", false)
+        .option("--apply", "执行写入", false)
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            const teamId = resolveTeamId(opts.team);
+            if (!assertApplyOrDryRun(opts, {
+                command: "invites revoke",
+                danger: "delete",
+                summary: { teamId, inviteId: opts.id },
+            })) {
+                return;
+            }
+            printResult(await requireClient().revokeTeamInvite(teamId, opts.id));
+        });
+    });
+    const members = program.command("members").description("成员管理");
+    members
+        .command("list")
+        .option("-t, --team <teamId>", "Team UUID（可选，默认 system）")
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            printResult(await requireClient().listSystemMembers());
+        });
+    });
+}
+//# sourceMappingURL=register-admin.js.map

package/dist/register-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-admin.js","sourceRoot":"","sources":["../src/register-admin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEhE,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAExE,QAAQ;SACL,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;QAC5B,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;SAChC,cAAc,CAAC,iBAAiB,EAAE,OAAO,CAAC;SAC1C,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,IAAI,EAAE,EAAE;QAClC,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;gBACzB,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;aACpC,CAAC,EACF,CAAC;gBACD,OAAO;YACT,CAAC;YACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAChE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE/D,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAChE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC;SACvC,cAAc,CAAC,eAAe,EAAE,IAAI,CAAC;SACrC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;gBACzB,OAAO,EAAE,gBAAgB;gBACzB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;aACxD,CAAC,EACF,CAAC;gBACD,OAAO;YACT,CAAC;YACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC7C,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,iBAAiB,EAAE,OAAO,CAAC;SAC1C,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;gBACzB,OAAO,EAAE,gBAAgB;gBACzB,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE;aACvC,CAAC,EACF,CAAC;gBACD,OAAO;YACT,CAAC;YACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CACxD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE/D,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AAEP,CAAC"}

package/dist/register-batch.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from "commander";
+export declare function registerBatchAndExport(program: Command): void;
+//# sourceMappingURL=register-batch.d.ts.map

package/dist/register-batch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-batch.d.ts","sourceRoot":"","sources":["../src/register-batch.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAwF7D"}

package/dist/register-batch.js

@@ -0,0 +1,85 @@
+import { readFileSync, writeFileSync } from "node:fs";
+import { requireClient, resolveTeamId } from "./client.js";
+import { printResult, withCliErrorBoundary } from "./output.js";
+export function registerBatchAndExport(program) {
+    const runbook = program.command("runbook").description("可回放脚本");
+    runbook
+        .command("replay")
+        .description("按 JSONL 顺序重放 CLI 等价的 API 调用（events append）")
+        .requiredOption("-t, --team <teamId>", "Team UUID")
+        .requiredOption("-f, --file <path>", "JSONL 文件，每行 { \"type\", \"payload\" }")
+        .option("--dry-run", "只打印将执行的操作", false)
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            const teamId = resolveTeamId(opts.team);
+            const lines = readFileSync(opts.file, "utf8")
+                .split("\n")
+                .map((l) => l.trim())
+                .filter(Boolean);
+            const results = [];
+            for (const line of lines) {
+                const row = JSON.parse(line);
+                if (opts.dryRun) {
+                    results.push({ dryRun: true, ...row });
+                    continue;
+                }
+                const res = await requireClient().appendEvent(teamId, {
+                    type: row.type,
+                    payload: row.payload ?? {},
+                });
+                results.push(res);
+            }
+            printResult({ replayed: results.length, results });
+        });
+    });
+    const exportCmd = program.command("export").description("导出");
+    exportCmd
+        .command("agent-context")
+        .requiredOption("-t, --team <teamId>", "Team UUID")
+        .requiredOption("--account <ref>", "账号 ref")
+        .option("--format <fmt>", "json|md", "json")
+        .option("-o, --output <path>", "输出文件")
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            const teamId = resolveTeamId(opts.team);
+            const data = await requireClient().getAccountAgentContext(teamId, opts.account, { expand: "pools,jobs,persona,risk,env,guardrails" });
+            let text;
+            if (opts.format === "md") {
+                text = `# Agent context: ${opts.account}\n\n\`\`\`json\n${JSON.stringify(data, null, 2)}\n\`\`\`\n`;
+            }
+            else {
+                text = `${JSON.stringify(data, null, 2)}\n`;
+            }
+            if (opts.output) {
+                writeFileSync(opts.output, text);
+                printResult({ ok: true, path: opts.output });
+            }
+            else {
+                console.log(text);
+            }
+        });
+    });
+    exportCmd
+        .command("events-jsonl")
+        .requiredOption("-t, --team <teamId>", "Team UUID")
+        .option("-n, --limit <n>", "条数", "100")
+        .option("-o, --output <path>", "输出文件（默认 stdout）")
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            const teamId = resolveTeamId(opts.team);
+            const res = await requireClient().listEventsFiltered(teamId, {
+                limit: Number(opts.limit),
+            });
+            const items = res.items ?? [];
+            const lines = items.map((row) => JSON.stringify(row)).join("\n");
+            if (opts.output) {
+                writeFileSync(opts.output, `${lines}\n`);
+                printResult({ ok: true, count: items.length, path: opts.output });
+            }
+            else {
+                console.log(lines);
+            }
+        });
+    });
+}
+//# sourceMappingURL=register-batch.js.map

package/dist/register-batch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-batch.js","sourceRoot":"","sources":["../src/register-batch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEhE,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAEhE,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,4CAA4C,CAAC;SACzD,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,mBAAmB,EAAE,uCAAuC,CAAC;SAC5E,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC;SACvC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;iBAC1C,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,OAAO,GAAc,EAAE,CAAC;YAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAG1B,CAAC;gBACF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChB,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;oBACvC,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE;oBACpD,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;iBAC3B,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YACD,WAAW,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAE9D,SAAS;SACN,OAAO,CAAC,eAAe,CAAC;SACxB,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,iBAAiB,EAAE,QAAQ,CAAC;SAC3C,MAAM,CAAC,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC;SAC3C,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC;SACrC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC,sBAAsB,CACvD,MAAM,EACN,IAAI,CAAC,OAAO,EACZ,EAAE,MAAM,EAAE,wCAAwC,EAAE,CACrD,CAAC;YACF,IAAI,IAAY,CAAC;YACjB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACzB,IAAI,GAAG,oBAAoB,IAAI,CAAC,OAAO,mBAAmB,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC;YACtG,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;YAC9C,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACjC,WAAW,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,SAAS;SACN,OAAO,CAAC,cAAc,CAAC;SACvB,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,MAAM,CAAC,iBAAiB,EAAE,IAAI,EAAE,KAAK,CAAC;SACtC,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE;gBAC3D,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aAC1B,CAAC,CAAC;YACH,MAAM,KAAK,GAAI,GAA6B,CAAC,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC;gBACzC,WAAW,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/register-extensions.d.ts

@@ -0,0 +1,9 @@
+import type { Command } from "commander";
+import type { Role } from "@geoly-ai/social-hub-authz";
+export declare function registerAuthAndConfig(program: Command): void;
+export declare function registerPermissionsExplain(permissionsCmd: Command): void;
+export declare function registerRedditExtensions(reddit: Command): void;
+export declare function registerAccountsExtensions(accounts: Command): void;
+/** Optional helper for existing commands — gate by command path if registered. */
+export declare function maybeAssertCliPermission(commandPath: string, role: Role): void;
+//# sourceMappingURL=register-extensions.d.ts.map

package/dist/register-extensions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-extensions.d.ts","sourceRoot":"","sources":["../src/register-extensions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAoB,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAoDzE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyT5D;AAED,wBAAgB,0BAA0B,CAAC,cAAc,EAAE,OAAO,GAAG,IAAI,CAiBxE;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAuQ9D;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAkJlE;AAED,kFAAkF;AAClF,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,IAAI,GACT,IAAI,CASN"}