@getpara/cli 2.15.0

package/dist/commands/init.js

@@ -0,0 +1,45 @@
+import { getGlobalOptions, createFormatter, helpText } from "../cli.js";
+import { writeProjectConfig } from "../config/project-config.js";
+import { select } from "../output/prompts.js";
+import { resolveConfig } from "../config/config-manager.js";
+import { existsSync } from "node:fs";
+import { getProjectConfigPath } from "../config/paths.js";
+function registerInitCommand(program) {
+  program.command("init").description("Create a .pararc configuration file in the current project").option("--force", "Overwrite existing .pararc").addHelpText(
+    "after",
+    helpText(`Examples:
+  $ para init                         Saves your org, project, and environment to .pararc
+  $ para init --force                 Overwrite an existing .pararc
+
+The .pararc file pins org, project, and environment to this directory,
+overriding global "para config" defaults. Useful when you work across
+multiple projects so each repo automatically uses the right context.`)
+  ).action(async (cmdOpts, cmd) => {
+    const opts = await getGlobalOptions(cmd);
+    const formatter = createFormatter(opts);
+    const cwd = process.cwd();
+    const configPath = getProjectConfigPath(cwd);
+    if (existsSync(configPath) && !cmdOpts.force) {
+      formatter.warn(".pararc already exists. Use --force to overwrite.");
+      return;
+    }
+    const config = await resolveConfig(opts, cwd);
+    const environment = opts.noInput ? opts.environment : await select("Select default environment:", [
+      { value: "BETA", label: "Beta (default)" },
+      { value: "PROD", label: "Production" },
+      { value: "SANDBOX", label: "Sandbox (internal testing)" },
+      { value: "DEV", label: "Development (local)" }
+    ]);
+    await writeProjectConfig(cwd, {
+      environment,
+      organizationId: config.organizationId,
+      projectId: config.projectId
+    });
+    formatter.json({ environment, organizationId: config.organizationId, projectId: config.projectId });
+    formatter.success(`Created .pararc in ${cwd}`);
+    formatter.flush();
+  });
+}
+export {
+  registerInitCommand
+};

package/dist/commands/keys/archive.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function registerKeysArchiveCommand(parent: Command): void;
+//# sourceMappingURL=archive.d.ts.map

package/dist/commands/keys/archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.d.ts","sourceRoot":"","sources":["../../../src/commands/keys/archive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQzC,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAkDhE"}

package/dist/commands/keys/archive.js

@@ -0,0 +1,49 @@
+import { getGlobalOptions, createFormatter, helpText } from "../../cli.js";
+import { ensureAuthenticated } from "../../auth/session-manager.js";
+import { resolveConfig } from "../../config/config-manager.js";
+import { ParaApiClient } from "../../api/client.js";
+import { CliError } from "../../core/error-handler.js";
+import { confirm } from "../../output/prompts.js";
+function registerKeysArchiveCommand(parent) {
+  parent.command("archive").description("Archive (revoke) an API key").argument("<key-id>", "API key ID to archive").option("-y, --yes", "Skip confirmation prompt").addHelpText(
+    "after",
+    helpText(`Examples:
+  $ para keys archive abc-123          Revoke a key (asks for confirmation)
+  $ para keys archive abc-123 -y       Skip confirmation (for scripts)
+
+This is irreversible \u2014 the archived key stops working immediately.
+Use "para keys list --include-archived" to see archived keys.`)
+  ).action(async (keyId, cmdOpts, cmd) => {
+    const opts = await getGlobalOptions(cmd);
+    const formatter = createFormatter(opts);
+    const config = await resolveConfig(opts);
+    const session = await ensureAuthenticated(config.environment);
+    if (!config.organizationId || !config.projectId) {
+      throw new CliError(
+        "Organization and project required. Run `para orgs switch` and `para projects switch`, or pass --org and --project."
+      );
+    }
+    if (!cmdOpts.yes) {
+      const confirmed = await confirm("Are you sure you want to archive this API key? It will stop working immediately.");
+      if (!confirmed) {
+        formatter.info("Archive cancelled.");
+        formatter.flush();
+        return;
+      }
+    }
+    const client = new ParaApiClient({
+      environment: config.environment,
+      sessionId: session.sessionId
+    });
+    await client.deleteApiKey(config.organizationId, config.projectId, config.environment, keyId);
+    if (opts.json) {
+      formatter.json({ id: keyId, archived: true });
+    } else {
+      formatter.success(`Archived API key ${keyId}`);
+    }
+    formatter.flush();
+  });
+}
+export {
+  registerKeysArchiveCommand
+};

package/dist/commands/keys/config/branding.d.ts

@@ -0,0 +1,23 @@
+import type { Command } from 'commander';
+import { ParaApiClient } from '../../../api/client.js';
+import type { ApiKey } from '../../../api/types.js';
+import type { OutputFormatter } from '../../../output/formatter.js';
+interface BrandingFlags {
+    foregroundColor?: string;
+    fgColor?: string;
+    backgroundColor?: string;
+    bgColor?: string;
+    accentColor?: string;
+    font?: string;
+    homepageUrl?: string;
+    twitterUrl?: string;
+    linkedinUrl?: string;
+    githubUrl?: string;
+    verifyUrl?: string;
+    emailWelcome?: boolean;
+    emailBackupKit?: boolean;
+}
+export declare function registerBrandingConfigCommand(parent: Command): void;
+export declare function runBrandingAction(client: ParaApiClient, orgId: string, projectId: string, environment: string, keyId: string, currentKey: ApiKey, formatter: OutputFormatter, flags?: BrandingFlags): Promise<void>;
+export {};
+//# sourceMappingURL=branding.d.ts.map

package/dist/commands/keys/config/branding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branding.d.ts","sourceRoot":"","sources":["../../../../src/commands/keys/config/branding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,KAAK,EAAE,MAAM,EAAgB,MAAM,uBAAuB,CAAC;AAElE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAWpE,UAAU,aAAa;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAiEnE;AAmBD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,eAAe,EAC1B,KAAK,CAAC,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAyMf"}

package/dist/commands/keys/config/branding.js

@@ -0,0 +1,246 @@
+import { getGlobalOptions, createFormatter, helpText } from "../../../cli.js";
+import { ensureAuthenticated } from "../../../auth/session-manager.js";
+import { resolveConfig } from "../../../config/config-manager.js";
+import { ParaApiClient } from "../../../api/client.js";
+import { CliError } from "../../../core/error-handler.js";
+import { Font } from "../../../api/types.js";
+import { text, select, confirm, p } from "../../../output/prompts.js";
+import { resolveKeyId } from "./categories.js";
+import {
+  validateHexColor,
+  validateHttpsUrl,
+  validateTwitterUrl,
+  validateLinkedinUrl,
+  validateGithubUrl
+} from "../../../validation/index.js";
+function registerBrandingConfigCommand(parent) {
+  parent.command("branding").description("Configure branding settings for an API key").argument("[key-id]", "API key ID (prompted if not given)").option("--foreground-color <hex>", "Foreground color (#RGB or #RRGGBB)").option("--fg-color <hex>", "Foreground color (alias)").option("--background-color <hex>", "Background color (#RGB or #RRGGBB)").option("--bg-color <hex>", "Background color (alias)").option("--accent-color <hex>", "Accent color (#RGB or #RRGGBB)").option("--font <font>", `Font name (${Object.values(Font).join(", ")})`).option("--homepage-url <url>", "Homepage URL (HTTPS)").option("--twitter-url <url>", "Twitter/X profile URL").option("--linkedin-url <url>", "LinkedIn company URL").option("--github-url <url>", "GitHub URL").option("--verify-url <url>", "Verification email URL (HTTPS)").option("--email-welcome", "Enable welcome email").option("--no-email-welcome", "Disable welcome email").option("--email-backup-kit", "Enable backup kit email").option("--no-email-backup-kit", "Disable backup kit email").addHelpText(
+    "after",
+    helpText(`Examples:
+  $ para keys config branding                                        Interactive branding settings
+  $ para keys config branding --fg-color "#333" --bg-color "#fff"    Set colors
+  $ para keys config branding --font "Helvetica"                     Set font
+  $ para keys config branding --homepage-url "https://example.com"   Set homepage
+  $ para keys config branding --no-email-welcome                     Disable welcome email`)
+  ).action(async (keyIdArg, cmdOpts, cmd) => {
+    const opts = await getGlobalOptions(cmd);
+    const formatter = createFormatter(opts);
+    const config = await resolveConfig(opts);
+    const session = await ensureAuthenticated(config.environment);
+    if (!config.organizationId || !config.projectId) {
+      throw new CliError(
+        "Organization and project required. Run `para orgs switch` and `para projects switch`, or pass --org and --project."
+      );
+    }
+    const client = new ParaApiClient({
+      environment: config.environment,
+      sessionId: session.sessionId
+    });
+    const { keyId, key } = await resolveKeyId(
+      client,
+      config.organizationId,
+      config.projectId,
+      config.environment,
+      keyIdArg
+    );
+    await runBrandingAction(
+      client,
+      config.organizationId,
+      config.projectId,
+      config.environment,
+      keyId,
+      key,
+      formatter,
+      cmdOpts
+    );
+  });
+}
+function hasAnyFlag(flags) {
+  if (!flags) return false;
+  return Object.keys(flags).some((k) => flags[k] !== void 0);
+}
+function resolveColor(primary, alias) {
+  return primary ?? alias;
+}
+function validateFont(value) {
+  const validFonts = Object.values(Font);
+  if (!validFonts.includes(value)) {
+    return `Invalid font: "${value}". Valid options: ${validFonts.join(", ")}`;
+  }
+  return void 0;
+}
+async function runBrandingAction(client, orgId, projectId, environment, keyId, currentKey, formatter, flags) {
+  const updates = {};
+  const isInteractive = !hasAnyFlag(flags);
+  const fgFlag = resolveColor(flags?.foregroundColor, flags?.fgColor);
+  const bgFlag = resolveColor(flags?.backgroundColor, flags?.bgColor);
+  if (fgFlag !== void 0) {
+    const err = validateHexColor(fgFlag);
+    if (err) throw new CliError(`Foreground color: ${err}`);
+    updates.foregroundColor = fgFlag;
+  }
+  if (bgFlag !== void 0) {
+    const err = validateHexColor(bgFlag);
+    if (err) throw new CliError(`Background color: ${err}`);
+    updates.backgroundColor = bgFlag;
+  }
+  if (flags?.accentColor !== void 0) {
+    const err = validateHexColor(flags.accentColor);
+    if (err) throw new CliError(`Accent color: ${err}`);
+    updates.accentColor = flags.accentColor;
+  }
+  if (isInteractive) {
+    const section = await select("Branding section:", [
+      { value: "colors", label: "Colors & theme" },
+      { value: "font", label: "Font" },
+      { value: "social", label: "Social links" },
+      { value: "email", label: "Email settings" },
+      { value: "all", label: "All settings" }
+    ]);
+    if (section === "colors" || section === "all") {
+      p.log.info(
+        `Current colors \u2014 fg: ${currentKey.foregroundColor ?? "(default)"}, bg: ${currentKey.backgroundColor ?? "(default)"}, accent: ${currentKey.accentColor ?? "(default)"}`
+      );
+      const fg = await text("Foreground color (empty to skip):", {
+        placeholder: "#333333",
+        initialValue: currentKey.foregroundColor ?? "",
+        validate: (v) => {
+          if (v.trim()) return validateHexColor(v.trim());
+        }
+      });
+      if (fg.trim()) updates.foregroundColor = fg.trim();
+      const bg = await text("Background color (empty to skip):", {
+        placeholder: "#ffffff",
+        initialValue: currentKey.backgroundColor ?? "",
+        validate: (v) => {
+          if (v.trim()) return validateHexColor(v.trim());
+        }
+      });
+      if (bg.trim()) updates.backgroundColor = bg.trim();
+      const accent = await text("Accent color (empty to skip):", {
+        placeholder: "#0066ff",
+        initialValue: currentKey.accentColor ?? "",
+        validate: (v) => {
+          if (v.trim()) return validateHexColor(v.trim());
+        }
+      });
+      if (accent.trim()) updates.accentColor = accent.trim();
+    }
+    if (section === "font" || section === "all") {
+      p.log.info(`Current font: ${currentKey.font ?? "(default)"}`);
+      const fontValues = Object.values(Font);
+      const fontChoice = await select("Font:", [
+        ...fontValues.map((f) => ({ value: f, label: f })),
+        { value: "__skip__", label: "Skip (keep current)" }
+      ]);
+      if (fontChoice !== "__skip__") {
+        updates.font = fontChoice;
+      }
+    }
+    if (section === "social" || section === "all") {
+      p.log.info(
+        `Current links \u2014 homepage: ${currentKey.homepageUrl ?? "(none)"}, twitter: ${currentKey.twitterUrl ?? "(none)"}, linkedin: ${currentKey.linkedinUrl ?? "(none)"}, github: ${currentKey.githubUrl ?? "(none)"}`
+      );
+      const homepage = await text("Homepage URL (empty to skip):", {
+        placeholder: "https://example.com",
+        initialValue: currentKey.homepageUrl ?? "",
+        validate: (v) => {
+          if (v.trim()) return validateHttpsUrl(v.trim());
+        }
+      });
+      if (homepage.trim()) updates.homepageUrl = homepage.trim();
+      const twitter = await text("Twitter/X URL (empty to skip):", {
+        placeholder: "https://twitter.com/username",
+        initialValue: currentKey.twitterUrl ?? "",
+        validate: (v) => {
+          if (v.trim()) return validateTwitterUrl(v.trim());
+        }
+      });
+      if (twitter.trim()) updates.twitterUrl = twitter.trim();
+      const linkedin = await text("LinkedIn URL (empty to skip):", {
+        placeholder: "https://linkedin.com/company/name",
+        initialValue: currentKey.linkedinUrl ?? "",
+        validate: (v) => {
+          if (v.trim()) return validateLinkedinUrl(v.trim());
+        }
+      });
+      if (linkedin.trim()) updates.linkedinUrl = linkedin.trim();
+      const github = await text("GitHub URL (empty to skip):", {
+        placeholder: "https://github.com/org",
+        initialValue: currentKey.githubUrl ?? "",
+        validate: (v) => {
+          if (v.trim()) return validateGithubUrl(v.trim());
+        }
+      });
+      if (github.trim()) updates.githubUrl = github.trim();
+    }
+    if (section === "email" || section === "all") {
+      p.log.info(
+        `Current email settings \u2014 welcome: ${currentKey.emailWelcome ? "on" : "off"}, backup kit: ${currentKey.emailBackupKit ? "on" : "off"}`
+      );
+      p.log.info(`Verification URL: ${currentKey.verifyUrl ?? "(none)"}`);
+      const verifyUrl = await text("Verification email URL (empty to skip):", {
+        placeholder: "https://example.com/verify",
+        initialValue: currentKey.verifyUrl ?? "",
+        validate: (v) => {
+          if (v.trim()) return validateHttpsUrl(v.trim());
+        }
+      });
+      if (verifyUrl.trim()) updates.verifyUrl = verifyUrl.trim();
+      const welcome = await confirm("Enable welcome email?");
+      updates.emailWelcome = welcome;
+      const backupKit = await confirm("Enable backup kit email?");
+      updates.emailBackupKit = backupKit;
+    }
+  } else {
+    if (flags?.font !== void 0) {
+      const err = validateFont(flags.font);
+      if (err) throw new CliError(err);
+      updates.font = flags.font;
+    }
+    if (flags?.homepageUrl !== void 0) {
+      const err = validateHttpsUrl(flags.homepageUrl);
+      if (err) throw new CliError(`Homepage URL: ${err}`);
+      updates.homepageUrl = flags.homepageUrl;
+    }
+    if (flags?.twitterUrl !== void 0) {
+      const err = validateTwitterUrl(flags.twitterUrl);
+      if (err) throw new CliError(`Twitter URL: ${err}`);
+      updates.twitterUrl = flags.twitterUrl;
+    }
+    if (flags?.linkedinUrl !== void 0) {
+      const err = validateLinkedinUrl(flags.linkedinUrl);
+      if (err) throw new CliError(`LinkedIn URL: ${err}`);
+      updates.linkedinUrl = flags.linkedinUrl;
+    }
+    if (flags?.githubUrl !== void 0) {
+      const err = validateGithubUrl(flags.githubUrl);
+      if (err) throw new CliError(`GitHub URL: ${err}`);
+      updates.githubUrl = flags.githubUrl;
+    }
+    if (flags?.verifyUrl !== void 0) {
+      const err = validateHttpsUrl(flags.verifyUrl);
+      if (err) throw new CliError(`Verify URL: ${err}`);
+      updates.verifyUrl = flags.verifyUrl;
+    }
+    if (flags?.emailWelcome !== void 0) {
+      updates.emailWelcome = flags.emailWelcome;
+    }
+    if (flags?.emailBackupKit !== void 0) {
+      updates.emailBackupKit = flags.emailBackupKit;
+    }
+  }
+  if (Object.keys(updates).length === 0) {
+    formatter.info("No changes made.");
+    formatter.flush();
+    return;
+  }
+  await client.updateApiKey(orgId, projectId, environment, keyId, updates);
+  formatter.json({ keyId, updated: updates });
+  formatter.success("Updated branding settings.");
+  formatter.flush();
+}
+export {
+  registerBrandingConfigCommand,
+  runBrandingAction
+};

package/dist/commands/keys/config/categories.d.ts

@@ -0,0 +1,15 @@
+import { ParaApiClient } from '../../../api/client.js';
+import type { ApiKey } from '../../../api/types.js';
+import type { OutputFormatter } from '../../../output/formatter.js';
+export interface CategoryDef {
+    value: string;
+    label: string;
+    hint: string;
+}
+export declare const CATEGORIES: CategoryDef[];
+export declare function resolveKeyId(client: ParaApiClient, orgId: string, projectId: string, environment: string, keyIdArg?: string): Promise<{
+    keyId: string;
+    key: ApiKey;
+}>;
+export declare function runInteractiveMenu(client: ParaApiClient, orgId: string, projectId: string, environment: string, keyId: string, key: ApiKey, formatter: OutputFormatter): Promise<void>;
+//# sourceMappingURL=categories.d.ts.map

package/dist/commands/keys/config/categories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"categories.d.ts","sourceRoot":"","sources":["../../../../src/commands/keys/config/categories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAMpE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,eAAO,MAAM,UAAU,EAAE,WAAW,EAMnC,CAAC;AAIF,wBAAsB,YAAY,CAChC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CA8BzC;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/commands/keys/config/categories.js

@@ -0,0 +1,67 @@
+import { select } from "../../../output/prompts.js";
+import { CliError } from "../../../core/error-handler.js";
+import { maskSecret } from "../../../output/mask.js";
+import { p } from "../../../output/prompts.js";
+const CATEGORIES = [
+  { value: "security", label: "Security", hint: "Origins, auth methods, session, popups, IP allowlist" },
+  { value: "branding", label: "Branding", hint: "Colors, theme, font, social links, email config" },
+  { value: "setup", label: "Setup / Networks", hint: "Wallet types, cosmos prefix, native passkeys" },
+  { value: "ramps", label: "On/Off Ramps", hint: "Buy, receive, withdraw toggles, providers" },
+  { value: "webhooks", label: "Webhooks", hint: "URL, events, test, rotate secret" }
+];
+const EXIT_VALUE = "__exit__";
+async function resolveKeyId(client, orgId, projectId, environment, keyIdArg) {
+  if (keyIdArg) {
+    const key2 = await client.getApiKey(orgId, projectId, environment, keyIdArg);
+    return { keyId: keyIdArg, key: key2 };
+  }
+  const keys = await client.getApiKeys(orgId, projectId, environment);
+  const active = keys.filter((k) => !k.archived);
+  if (active.length === 0) {
+    throw new CliError("No API keys found. Run `para keys create` first.");
+  }
+  if (active.length === 1) {
+    p.log.info(`Using key ${active[0].displayName || active[0].name} (${maskSecret(active[0].apiKey)})`);
+    return { keyId: active[0].id, key: active[0] };
+  }
+  const selected = await select(
+    "Select API key:",
+    active.map((k) => ({
+      value: k.id,
+      label: k.displayName || k.name,
+      hint: maskSecret(k.apiKey)
+    }))
+  );
+  const key = active.find((k) => k.id === selected);
+  if (!key) throw new CliError("Selected API key no longer exists. Please try again.");
+  return { keyId: selected, key };
+}
+async function runInteractiveMenu(client, orgId, projectId, environment, keyId, key, formatter) {
+  const { runSecurityAction } = await import("./security.js");
+  const { runBrandingAction } = await import("./branding.js");
+  const { runSetupAction } = await import("./setup.js");
+  const { runRampsAction } = await import("./ramps.js");
+  const { runWebhooksAction } = await import("./webhooks.js");
+  let currentKey = key;
+  while (true) {
+    const category = await select("Configure:", [
+      ...CATEGORIES.map((c) => ({ value: c.value, label: c.label, hint: c.hint })),
+      { value: EXIT_VALUE, label: "Done", hint: "Exit configuration" }
+    ]);
+    if (category === EXIT_VALUE) break;
+    const actionMap = {
+      security: () => runSecurityAction(client, orgId, projectId, environment, keyId, currentKey, formatter),
+      branding: () => runBrandingAction(client, orgId, projectId, environment, keyId, currentKey, formatter),
+      setup: () => runSetupAction(client, orgId, projectId, environment, keyId, currentKey, formatter),
+      ramps: () => runRampsAction(client, orgId, projectId, environment, keyId, currentKey, formatter),
+      webhooks: () => runWebhooksAction(client, orgId, projectId, environment, keyId, currentKey, formatter)
+    };
+    await actionMap[category]();
+    currentKey = await client.getApiKey(orgId, projectId, environment, keyId);
+  }
+}
+export {
+  CATEGORIES,
+  resolveKeyId,
+  runInteractiveMenu
+};

package/dist/commands/keys/config/index.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function registerKeysConfigCommand(parent: Command): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/keys/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/keys/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAazC,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAmD/D"}

package/dist/commands/keys/config/index.js

@@ -0,0 +1,56 @@
+import { getGlobalOptions, createFormatter, helpText } from "../../../cli.js";
+import { ensureAuthenticated } from "../../../auth/session-manager.js";
+import { resolveConfig } from "../../../config/config-manager.js";
+import { ParaApiClient } from "../../../api/client.js";
+import { CliError } from "../../../core/error-handler.js";
+import { resolveKeyId, runInteractiveMenu } from "./categories.js";
+import { registerSecurityConfigCommand } from "./security.js";
+import { registerBrandingConfigCommand } from "./branding.js";
+import { registerSetupConfigCommand } from "./setup.js";
+import { registerRampsConfigCommand } from "./ramps.js";
+import { registerWebhooksConfigCommand } from "./webhooks.js";
+function registerKeysConfigCommand(parent) {
+  const config = parent.command("config").description("Configure API key settings").argument("[key-id]", "API key ID (prompted if not given)").addHelpText(
+    "after",
+    helpText(`Examples:
+  $ para keys config                    Interactive category menu for the active key
+  $ para keys config abc-123            Interactive menu for a specific key
+  $ para keys config security           Jump directly to security settings
+  $ para keys config branding           Jump directly to branding settings
+
+Categories: security, branding, setup, ramps, webhooks
+
+Each category also accepts flags for non-interactive use:
+  $ para keys config security --origins "https://example.com" --auth-methods "PASSKEY,PIN"`)
+  ).action(async (keyIdArg, _cmdOpts, cmd) => {
+    const opts = await getGlobalOptions(cmd);
+    const formatter = createFormatter(opts);
+    const config2 = await resolveConfig(opts);
+    const session = await ensureAuthenticated(config2.environment);
+    if (!config2.organizationId || !config2.projectId) {
+      throw new CliError(
+        "Organization and project required. Run `para orgs switch` and `para projects switch`, or pass --org and --project."
+      );
+    }
+    const client = new ParaApiClient({
+      environment: config2.environment,
+      sessionId: session.sessionId
+    });
+    const { keyId, key } = await resolveKeyId(
+      client,
+      config2.organizationId,
+      config2.projectId,
+      config2.environment,
+      keyIdArg
+    );
+    await runInteractiveMenu(client, config2.organizationId, config2.projectId, config2.environment, keyId, key, formatter);
+  });
+  registerSecurityConfigCommand(config);
+  registerBrandingConfigCommand(config);
+  registerSetupConfigCommand(config);
+  registerRampsConfigCommand(config);
+  registerWebhooksConfigCommand(config);
+}
+export {
+  registerKeysConfigCommand
+};

package/dist/commands/keys/config/ramps.d.ts

@@ -0,0 +1,18 @@
+import type { Command } from 'commander';
+import { ParaApiClient } from '../../../api/client.js';
+import type { ApiKey } from '../../../api/types.js';
+import type { OutputFormatter } from '../../../output/formatter.js';
+interface RampsFlags {
+    buyEnabled?: boolean;
+    receiveEnabled?: boolean;
+    withdrawEnabled?: boolean;
+    providers?: string;
+    rampApiKey?: string;
+    defaultBuyAmount?: string;
+    defaultOnRampAsset?: string;
+    defaultOnRampNetwork?: string;
+}
+export declare function registerRampsConfigCommand(parent: Command): void;
+export declare function runRampsAction(client: ParaApiClient, orgId: string, projectId: string, environment: string, keyId: string, currentKey: ApiKey, formatter: OutputFormatter, flags?: RampsFlags): Promise<void>;
+export {};
+//# sourceMappingURL=ramps.d.ts.map

package/dist/commands/keys/config/ramps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ramps.d.ts","sourceRoot":"","sources":["../../../../src/commands/keys/config/ramps.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,KAAK,EAAE,MAAM,EAAgB,MAAM,uBAAuB,CAAC;AAElE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAQpE,UAAU,UAAU;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAyBD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CA4DhE;AAOD,wBAAsB,cAAc,CAClC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,eAAe,EAC1B,KAAK,CAAC,EAAE,UAAU,GACjB,OAAO,CAAC,IAAI,CAAC,CAkIf"}