@getstackrun/cli 0.6.0 → 0.7.0

package/dist/dropoffs.js

@@ -0,0 +1,140 @@
+// dropoffs subcommands.
+//
+// Drop-offs are point-to-point schema-validated handoffs between agents.
+// Schema files passed via --schema must be a path to a JSON file; the
+// CLI reads + parses it before POSTing.
+import { stdout, stderr, exit } from 'node:process';
+import { readFile } from 'node:fs/promises';
+import { api, takeFlag } from './api.js';
+import { invokeHint } from './auth.js';
+import { printJson, printTable, printRecord, fmt, fmtTs } from './format.js';
+async function readJsonFile(path) {
+    const raw = await readFile(path, 'utf8');
+    return JSON.parse(raw);
+}
+async function cmdList(json) {
+    const list = await api('GET', '/v1/dropoffs');
+    if (json)
+        return printJson(list);
+    if (list.length === 0) {
+        stdout.write('(no drop-offs)\n');
+        return;
+    }
+    const rows = list.map((d) => [d.id, d.from_agent_id, d.to_agent_id, statusBadge(d.status), fmtTs(d.created_at), fmtTs(d.expires_at)]);
+    printTable(['ID', 'FROM', 'TO', 'STATUS', 'CREATED', 'EXPIRES'], rows);
+}
+async function cmdShow(id, json) {
+    const out = await api('GET', `/v1/dropoffs/${encodeURIComponent(id)}`);
+    if (json)
+        return printJson(out);
+    printRecord(out);
+}
+async function cmdCreate(args, json) {
+    const from = takeFlag(args, '--from');
+    const to = takeFlag(args, '--to');
+    const schemaPath = takeFlag(args, '--schema');
+    const ttl = takeFlag(args, '--ttl');
+    const onExpire = takeFlag(args, '--on-expire');
+    if (typeof from !== 'string' || typeof to !== 'string' || typeof schemaPath !== 'string') {
+        stderr.write(`usage: ${invokeHint('dropoff create --from <agent-id> --to <agent-id> --schema <file.json> [--ttl <seconds>] [--on-expire notify|retry|fail]')}\n`);
+        exit(2);
+    }
+    const schema = await readJsonFile(schemaPath);
+    const body = {
+        from_agent_id: from,
+        to_agent_id: to,
+        schema,
+    };
+    if (typeof ttl === 'string')
+        body.ttl_seconds = parseInt(ttl, 10);
+    if (typeof onExpire === 'string')
+        body.on_expire = onExpire;
+    const out = await api('POST', '/v1/dropoffs', { body });
+    if (json)
+        return printJson(out);
+    stdout.write(`created ${out.id}\n  from ${out.from_agent_id} → ${out.to_agent_id}\n  expires ${fmtTs(out.expires_at)}\n`);
+}
+async function cmdDeposit(id, args, json) {
+    const agentId = takeFlag(args, '--agent');
+    const payloadPath = takeFlag(args, '--payload');
+    if (typeof agentId !== 'string' || typeof payloadPath !== 'string') {
+        stderr.write(`usage: ${invokeHint('dropoff deposit <id> --agent <agent-id> --payload <file.json>')}\n`);
+        exit(2);
+    }
+    const payload = await readJsonFile(payloadPath);
+    const out = await api('POST', `/v1/dropoffs/${encodeURIComponent(id)}/deposit`, {
+        body: { agent_id: agentId, payload },
+    });
+    if (json)
+        return printJson(out);
+    stdout.write(`deposited to ${id}\n`);
+}
+async function cmdCollect(id, args, json) {
+    const agentId = takeFlag(args, '--agent');
+    if (typeof agentId !== 'string') {
+        stderr.write(`usage: ${invokeHint('dropoff collect <id> --agent <agent-id>')}\n`);
+        exit(2);
+    }
+    const out = await api('POST', `/v1/dropoffs/${encodeURIComponent(id)}/collect`, {
+        body: { agent_id: agentId },
+    });
+    if (json)
+        return printJson(out);
+    stdout.write(JSON.stringify(out.payload, null, 2) + '\n');
+}
+async function cmdExpire(id, json) {
+    const out = await api('POST', `/v1/dropoffs/${encodeURIComponent(id)}/expire`);
+    if (json)
+        return printJson(out);
+    stdout.write(`expired ${id}\n`);
+}
+function statusBadge(s) {
+    if (s === 'collected')
+        return fmt.ok(s);
+    if (s === 'expired')
+        return fmt.dim(s);
+    if (s === 'deposited')
+        return fmt.warn(s);
+    return s;
+}
+export async function cmdDropoff(args) {
+    const json = !!takeFlag(args, '--json');
+    const sub = args[0];
+    const arg1 = args[1];
+    if (sub === 'list' || sub === 'ls')
+        return cmdList(json);
+    if (sub === 'show' || sub === 'status') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('dropoff show <id>')}\n`);
+            exit(2);
+        }
+        return cmdShow(arg1, json);
+    }
+    if (sub === 'create')
+        return cmdCreate(args.slice(1), json);
+    if (sub === 'deposit') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('dropoff deposit <id> --agent <agent-id> --payload <file.json>')}\n`);
+            exit(2);
+        }
+        return cmdDeposit(arg1, args.slice(2), json);
+    }
+    if (sub === 'collect') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('dropoff collect <id> --agent <agent-id>')}\n`);
+            exit(2);
+        }
+        return cmdCollect(arg1, args.slice(2), json);
+    }
+    if (sub === 'expire') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('dropoff expire <id>')}\n`);
+            exit(2);
+        }
+        return cmdExpire(arg1, json);
+    }
+    stderr.write(`error: unknown dropoff subcommand "${sub ?? ''}".\n` +
+        `Use list | show | create | deposit | collect | expire\n`);
+    exit(2);
+}
+//# sourceMappingURL=dropoffs.js.map

package/dist/dropoffs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dropoffs.js","sourceRoot":"","sources":["../src/dropoffs.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,wCAAwC;AAExC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAW7E,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAa;IAClC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAY,KAAK,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACtI,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,EAAU,EAAE,IAAa;IAC9C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,WAAW,CAAC,GAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAc,EAAE,IAAa;IACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACzF,MAAM,CAAC,KAAK,CACV,UAAU,UAAU,CAAC,yHAAyH,CAAC,IAAI,CACpJ,CAAC;QACF,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,IAAI,GAA4B;QACpC,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,EAAE;QACf,MAAM;KACP,CAAC;IACF,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAU,MAAM,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC,aAAa,MAAM,GAAG,CAAC,WAAW,eAAe,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC5H,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EAAU,EAAE,IAAc,EAAE,IAAa;IACjE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACnE,MAAM,CAAC,KAAK,CACV,UAAU,UAAU,CAAC,+DAA+D,CAAC,IAAI,CAC1F,CAAC;QACF,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE;QAC9E,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;KACrC,CAAC,CAAC;IACH,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EAAU,EAAE,IAAc,EAAE,IAAa;IACjE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,yCAAyC,CAAC,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAuB,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE;QACpG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;KAC5B,CAAC,CAAC;IACH,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,EAAU,EAAE,IAAa;IAChD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/E,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,KAAK,WAAW;QAAE,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,WAAW;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAErB,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,+DAA+D,CAAC,IAAI,CAAC,CAAC;YACxG,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,yCAAyC,CAAC,IAAI,CAAC,CAAC;YAClF,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC9D,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,CAAC,KAAK,CACV,sCAAsC,GAAG,IAAI,EAAE,MAAM;QACnD,yDAAyD,CAC5D,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC"}

package/dist/events.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdEvent(args: string[]): Promise<void>;
+//# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAgEA,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB5D"}

package/dist/events.js

@@ -0,0 +1,77 @@
+// security-events subcommands.
+import { stdout, stderr, exit } from 'node:process';
+import { api, takeFlag } from './api.js';
+import { invokeHint } from './auth.js';
+import { printJson, printTable, printRecord, fmt, fmtTs } from './format.js';
+async function cmdList(args, json) {
+    const agentId = takeFlag(args, '--agent');
+    const limit = takeFlag(args, '--limit');
+    const out = await api('GET', '/v1/security-events', {
+        query: {
+            agent_id: typeof agentId === 'string' ? agentId : undefined,
+            limit: typeof limit === 'string' ? limit : undefined,
+        },
+    });
+    const list = Array.isArray(out) ? out : (out?.events ?? []);
+    if (json)
+        return printJson(list);
+    if (list.length === 0) {
+        stdout.write('(no security events)\n');
+        return;
+    }
+    const rows = list.map((e) => [
+        e.id,
+        severityBadge(e.severity),
+        e.signal_type,
+        e.agent_id ?? '—',
+        e.resolved ? fmt.ok('yes') : fmt.warn('no'),
+        fmtTs(e.created_at ?? null),
+        (e.message ?? '').slice(0, 60),
+    ]);
+    printTable(['ID', 'SEV', 'SIGNAL', 'AGENT', 'RESOLVED', 'CREATED', 'MESSAGE'], rows);
+}
+async function cmdShow(id, json) {
+    const out = await api('GET', `/v1/security-events/${encodeURIComponent(id)}`);
+    if (json)
+        return printJson(out);
+    printRecord(out);
+}
+async function cmdResolve(id, json) {
+    const out = await api('POST', `/v1/security-events/${encodeURIComponent(id)}/resolve`);
+    if (json)
+        return printJson(out);
+    stdout.write(`resolved ${id}\n`);
+}
+function severityBadge(s) {
+    if (s === 'critical')
+        return fmt.err(s);
+    if (s === 'warning')
+        return fmt.warn(s);
+    if (s === 'info')
+        return fmt.dim(s);
+    return s;
+}
+export async function cmdEvent(args) {
+    const json = !!takeFlag(args, '--json');
+    const sub = args[0];
+    const arg1 = args[1];
+    if (sub === 'list' || sub === 'ls')
+        return cmdList(args.slice(1), json);
+    if (sub === 'show' || sub === 'get') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('event show <id>')}\n`);
+            exit(2);
+        }
+        return cmdShow(arg1, json);
+    }
+    if (sub === 'resolve') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('event resolve <id>')}\n`);
+            exit(2);
+        }
+        return cmdResolve(arg1, json);
+    }
+    stderr.write(`error: unknown event subcommand "${sub ?? ''}".\nUse list | show | resolve\n`);
+    exit(2);
+}
+//# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAE/B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAa7E,KAAK,UAAU,OAAO,CAAC,IAAc,EAAE,IAAa;IAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAiD,KAAK,EAAE,qBAAqB,EAAE;QAClG,KAAK,EAAE;YACL,QAAQ,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC3D,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SACrD;KACF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC,CAAC,EAAE;QACJ,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzB,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,QAAQ,IAAI,GAAG;QACjB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3C,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC;QAC3B,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;KAC/B,CAAC,CAAC;IACH,UAAU,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;AACvF,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,EAAU,EAAE,IAAa;IAC9C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,uBAAuB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,WAAW,CAAC,GAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EAAU,EAAE,IAAa;IACjD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,uBAAuB,kBAAkB,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IACvF,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAErB,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACxE,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,CAAC,KAAK,CACV,oCAAoC,GAAG,IAAI,EAAE,iCAAiC,CAC/E,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC"}

package/dist/format.d.ts

@@ -0,0 +1,16 @@
+/** Print rows as an aligned table. Headers are bold/dim. */
+export declare function printTable(headers: string[], rows: string[][]): void;
+export declare function printJson(data: unknown): void;
+/** Render a single record as label/value lines. */
+export declare function printRecord(record: Record<string, unknown>): void;
+/** Tone helpers for table cells. */
+export declare const fmt: {
+    ok: (s: string) => string;
+    warn: (s: string) => string;
+    err: (s: string) => string;
+    dim: (s: string) => string;
+    bold: (s: string) => string;
+};
+/** Render a timestamp (ISO string or unix-ms) as a compact short form. */
+export declare function fmtTs(ts: string | number | null | undefined): string;
+//# sourceMappingURL=format.d.ts.map

package/dist/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../src/format.ts"],"names":[],"mappings":"AAmBA,4DAA4D;AAC5D,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAqBpE;AAMD,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAE7C;AAED,mDAAmD;AACnD,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAUjE;AAED,oCAAoC;AACpC,eAAO,MAAM,GAAG;YACN,MAAM;cACJ,MAAM;aACP,MAAM;aACN,MAAM;cACL,MAAM;CACjB,CAAC;AAEF,0EAA0E;AAC1E,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CASpE"}

package/dist/format.js

@@ -0,0 +1,77 @@
+// Output formatting helpers — table for terminal humans, JSON for
+// pipes + scripts. Every command supports `--json` to switch from
+// the table to a machine-readable dump.
+import { stdout, env } from 'node:process';
+const useColor = stdout.isTTY === true && !env['NO_COLOR'];
+const color = (n) => (useColor ? `\x1b[${n}m` : '');
+const C = {
+    reset: color('0'),
+    bold: color('1'),
+    dim: color('2'),
+    gray: color('90'),
+    cyan: color('36'),
+    green: color('32'),
+    yellow: color('33'),
+    red: color('31'),
+};
+/** Print rows as an aligned table. Headers are bold/dim. */
+export function printTable(headers, rows) {
+    if (rows.length === 0) {
+        stdout.write(`${C.gray}(no results)${C.reset}\n`);
+        return;
+    }
+    const widths = headers.map((h, i) => Math.max(h.length, ...rows.map((r) => stripAnsi(r[i] ?? '').length)));
+    const headerLine = headers.map((h, i) => `${C.dim}${C.bold}${h.padEnd(widths[i] ?? 0)}${C.reset}`).join('  ');
+    stdout.write(`${headerLine}\n`);
+    for (const row of rows) {
+        const line = row.map((cell, i) => {
+            const visibleLen = stripAnsi(cell ?? '').length;
+            const pad = ' '.repeat(Math.max(0, (widths[i] ?? 0) - visibleLen));
+            return `${cell ?? ''}${pad}`;
+        }).join('  ');
+        stdout.write(`${line}\n`);
+    }
+}
+function stripAnsi(s) {
+    return s.replace(/\x1b\[[0-9;]*m/g, '');
+}
+export function printJson(data) {
+    stdout.write(JSON.stringify(data, null, 2) + '\n');
+}
+/** Render a single record as label/value lines. */
+export function printRecord(record) {
+    const labelWidth = Math.max(...Object.keys(record).map((k) => k.length));
+    for (const [k, v] of Object.entries(record)) {
+        const value = v === null || v === undefined
+            ? `${C.gray}—${C.reset}`
+            : typeof v === 'object'
+                ? JSON.stringify(v)
+                : String(v);
+        stdout.write(`  ${C.gray}${k.padEnd(labelWidth)}${C.reset}  ${value}\n`);
+    }
+}
+/** Tone helpers for table cells. */
+export const fmt = {
+    ok: (s) => `${C.green}${s}${C.reset}`,
+    warn: (s) => `${C.yellow}${s}${C.reset}`,
+    err: (s) => `${C.red}${s}${C.reset}`,
+    dim: (s) => `${C.gray}${s}${C.reset}`,
+    bold: (s) => `${C.bold}${s}${C.reset}`,
+};
+/** Render a timestamp (ISO string or unix-ms) as a compact short form. */
+export function fmtTs(ts) {
+    if (ts === null || ts === undefined)
+        return fmt.dim('—');
+    const d = typeof ts === 'number' ? new Date(ts) : new Date(ts);
+    if (Number.isNaN(d.getTime()))
+        return fmt.dim('—');
+    const now = new Date();
+    if (d.toDateString() === now.toDateString()) {
+        return `${pad(d.getHours())}:${pad(d.getMinutes())}`;
+    }
+    return `${d.toLocaleDateString('en-CA')}`;
+}
+function pad(n) {
+    return String(n).padStart(2, '0');
+}
+//# sourceMappingURL=format.js.map

package/dist/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../src/format.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,kEAAkE;AAClE,wCAAwC;AAExC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC3D,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC5D,MAAM,CAAC,GAAG;IACR,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;IACjB,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;IAChB,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;IACf,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;IACjB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;IAClB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;IACnB,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC;CACjB,CAAC;AAEF,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CAAC,OAAiB,EAAE,IAAgB;IAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClC,IAAI,CAAC,GAAG,CACN,CAAC,CAAC,MAAM,EACR,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CACjD,CACF,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9G,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YAC/B,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAChD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;YACnE,OAAO,GAAG,IAAI,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,WAAW,CAAC,MAA+B;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;YACzC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE;YACxB,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ;gBACrB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBACnB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,oCAAoC;AACpC,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,EAAE,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE;IAC7C,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE;IAChD,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE;IAC5C,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE;IAC7C,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE;CAC/C,CAAC;AAEF,0EAA0E;AAC1E,MAAM,UAAU,KAAK,CAAC,EAAsC;IAC1D,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,YAAY,EAAE,KAAK,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;QAC5C,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC"}

package/dist/identity.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdIdentity(args: string[]): Promise<void>;
+//# sourceMappingURL=identity.d.ts.map

package/dist/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AA0EA,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB/D"}

package/dist/identity.js

@@ -0,0 +1,86 @@
+// identity subcommands.
+import { stdout, stderr, exit } from 'node:process';
+import { api, takeFlag } from './api.js';
+import { invokeHint } from './auth.js';
+import { printJson, printTable, printRecord, fmt, fmtTs } from './format.js';
+async function cmdSettings(json) {
+    const out = await api('GET', '/v1/operators/me/identity-settings');
+    if (json)
+        return printJson(out);
+    printRecord(out);
+}
+async function cmdUpdateSettings(args, json) {
+    const inheritance = takeFlag(args, '--inheritance');
+    const ttl = takeFlag(args, '--ttl');
+    const autoRevoke = takeFlag(args, '--auto-revoke');
+    const body = {};
+    if (typeof inheritance === 'string')
+        body.identity_claim_inheritance = inheritance;
+    if (typeof ttl === 'string')
+        body.identity_claim_ttl = ttl;
+    if (autoRevoke !== undefined)
+        body.identity_auto_revoke = autoRevoke === true || autoRevoke === 'true';
+    if (Object.keys(body).length === 0) {
+        stderr.write(`usage: ${invokeHint('identity update-settings [--inheritance auto|opt_in] [--ttl 30d|90d|180d|1y] [--auto-revoke true|false]')}\n`);
+        exit(2);
+    }
+    const out = await api('PATCH', '/v1/operators/me/identity-settings', { body });
+    if (json)
+        return printJson(out);
+    printRecord(out);
+}
+async function cmdProviders(json) {
+    const out = await api('GET', '/v1/identity/providers');
+    if (json)
+        return printJson(out);
+    printJson(out);
+}
+async function cmdClaims(json) {
+    const out = await api('GET', '/v1/identity/claims');
+    const list = Array.isArray(out) ? out : (out?.claims ?? []);
+    if (json)
+        return printJson(list);
+    if (list.length === 0) {
+        stdout.write('(no claims)\n');
+        return;
+    }
+    const rows = list.map((c) => [
+        c.id,
+        c.provider_key,
+        c.layer,
+        c.assurance_level,
+        c.revoked_at ? fmt.dim('revoked') : fmt.ok('active'),
+        fmtTs(c.verified_at ?? null),
+    ]);
+    printTable(['ID', 'PROVIDER', 'LAYER', 'ASSURANCE', 'STATUS', 'VERIFIED'], rows);
+}
+async function cmdRevokeClaim(id, json) {
+    const out = await api('DELETE', `/v1/identity/claims/${encodeURIComponent(id)}`);
+    if (json)
+        return printJson(out);
+    stdout.write(`revoked ${id}\n`);
+}
+export async function cmdIdentity(args) {
+    const json = !!takeFlag(args, '--json');
+    const sub = args[0];
+    const arg1 = args[1];
+    if (sub === 'settings' || sub === 'get-settings')
+        return cmdSettings(json);
+    if (sub === 'update-settings')
+        return cmdUpdateSettings(args.slice(1), json);
+    if (sub === 'providers')
+        return cmdProviders(json);
+    if (sub === 'claims' || sub === 'list')
+        return cmdClaims(json);
+    if (sub === 'revoke-claim') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('identity revoke-claim <claim-id>')}\n`);
+            exit(2);
+        }
+        return cmdRevokeClaim(arg1, json);
+    }
+    stderr.write(`error: unknown identity subcommand "${sub ?? ''}".\n` +
+        `Use settings | update-settings | providers | claims | revoke-claim\n`);
+    exit(2);
+}
+//# sourceMappingURL=identity.js.map

package/dist/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA,wBAAwB;AAExB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAa7E,KAAK,UAAU,WAAW,CAAC,IAAa;IACtC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACnE,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,WAAW,CAAC,GAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAc,EAAE,IAAa;IAC5D,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACnD,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,IAAI,CAAC,0BAA0B,GAAG,WAAW,CAAC;IACnF,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC;IAC3D,IAAI,UAAU,KAAK,SAAS;QAAE,IAAI,CAAC,oBAAoB,GAAG,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,MAAM,CAAC;IACvG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,KAAK,CACV,UAAU,UAAU,CAAC,yGAAyG,CAAC,IAAI,CACpI,CAAC;QACF,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,oCAAoC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,WAAW,CAAC,GAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAa;IACvC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAY,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAClE,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,SAAS,CAAC,GAAG,CAAC,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAa;IACpC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAkB,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA+C,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;IACzG,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACpD,KAAK,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC;KAC7B,CAAC,CAAC;IACH,UAAU,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,EAAU,EAAE,IAAa;IACrD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,uBAAuB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAErB,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,cAAc;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3E,IAAI,GAAG,KAAK,iBAAiB;QAAE,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7E,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,kCAAkC,CAAC,IAAI,CAAC,CAAC;YAC3E,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,CAAC,KAAK,CACV,uCAAuC,GAAG,IAAI,EAAE,MAAM;QACpD,sEAAsE,CACzE,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC"}

package/dist/index.js

@@ -2,6 +2,15 @@
 import { argv, env, stdout, stderr } from 'node:process';
 import { cmdLogin, cmdLogout, cmdStatus, getAccessToken } from './auth.js';
 import { cmdAgent } from './agent.js';
+import { cmdPassport } from './passports.js';
+import { cmdService } from './services.js';
+import { cmdDropoff } from './dropoffs.js';
+import { cmdSkill } from './skills.js';
+import { cmdIdentity } from './identity.js';
+import { cmdAudit } from './audit.js';
+import { cmdEvent } from './events.js';
+import { cmdTeam } from './team.js';
+import { cmdMe } from './me.js';
 const DASHBOARD_URL = 'https://getstack.run';
 const API_URL = env['STACK_API_URL'] ?? 'https://api.getstack.run';
 // ── ANSI helpers ────────────────────────────────────────────────────
@@ -251,15 +260,86 @@ ${C.gray}https://getstack.run${C.reset}
 ${C.white}Usage${C.reset}
   npx @getstackrun/cli ${C.cyan}<command>${C.reset} [options]
 
-${C.white}Commands${C.reset}
+${C.white}Account${C.reset}
   ${C.cyan}auth login${C.reset}                       Sign in via browser (Device flow, RFC 8628)
   ${C.cyan}auth status${C.reset}                      Show current sign-in state
   ${C.cyan}auth logout${C.reset}                      Revoke session and clear local credentials
-  ${C.cyan}agent enroll${C.reset} <name|id>           Generate keypair + enroll an agent (operator-side)
-  ${C.cyan}agent rotate${C.reset} <name|id>           Rotate an enrolled agent's keypair (admin only)
+  ${C.cyan}me${C.reset}                               Print your operator profile
+
+${C.white}Agents${C.reset}
+  ${C.cyan}agent list${C.reset}                       List all your agents
+  ${C.cyan}agent show${C.reset} <name|id>             Detail on one agent
+  ${C.cyan}agent register${C.reset} <name>            Register a new agent
+  ${C.cyan}agent enroll${C.reset} <name|id>           Generate keypair + enroll (operator-side)
+  ${C.cyan}agent rotate${C.reset} <name|id>           Rotate keypair (admin only)
+  ${C.cyan}agent suspend${C.reset} <name|id>          Suspend an agent
+  ${C.cyan}agent unsuspend${C.reset} <name|id>        Re-activate a suspended agent
+  ${C.cyan}agent delete${C.reset} <name|id>           Delete an agent
+
+${C.white}Passports${C.reset}
+  ${C.cyan}passport list${C.reset}                    List active passports
+  ${C.cyan}passport issue${C.reset} --agent ... --intent ... --services ...
+  ${C.cyan}passport verify${C.reset} <token>          Verify a passport JWT
+  ${C.cyan}passport refresh${C.reset} <jti> --token <jwt>
+  ${C.cyan}passport revoke${C.reset} <jti>            Revoke one passport
+  ${C.cyan}passport revoke-agent${C.reset} <id>       Revoke all passports for an agent
+  ${C.cyan}passport revoke-all${C.reset} --yes        Revoke every active passport
+
+${C.white}Services${C.reset}
+  ${C.cyan}service catalog${C.reset}                  Browse available service catalog
+  ${C.cyan}service connections${C.reset}              List your connected services
+  ${C.cyan}service show${C.reset} <connection-id>     Detail on one connection
+  ${C.cyan}service verify${C.reset} <connection-id>   Re-test connection health
+  ${C.cyan}service disconnect${C.reset} <id>          Disconnect a service
+  ${C.cyan}service credential${C.reset} <provider>    Retrieve raw credential (operator only)
+
+${C.white}Drop-offs${C.reset}
+  ${C.cyan}dropoff list${C.reset}                     List your drop-offs
+  ${C.cyan}dropoff show${C.reset} <id>                Detail on one drop-off
+  ${C.cyan}dropoff create${C.reset} --from <a> --to <b> --schema <f>
+  ${C.cyan}dropoff deposit${C.reset} <id> --agent <a> --payload <f>
+  ${C.cyan}dropoff collect${C.reset} <id> --agent <a>
+  ${C.cyan}dropoff expire${C.reset} <id>              Force-expire a drop-off
+
+${C.white}Skills${C.reset}
+  ${C.cyan}skill list${C.reset} [--q "..."]           Browse the skills marketplace
+  ${C.cyan}skill mine${C.reset}                       List your own published skills
+  ${C.cyan}skill show${C.reset} <id>                  Detail on one skill
+  ${C.cyan}skill suspend${C.reset} <id>               Suspend a published skill
+  ${C.cyan}skill activate${C.reset} <id>              Re-activate a suspended skill
+  ${C.cyan}skill requests${C.reset}                   List skill requests
+  ${C.cyan}skill post-request${C.reset} "<desc>"      Post a new skill request
+
+${C.white}Identity${C.reset}
+  ${C.cyan}identity settings${C.reset}                Get operator identity settings
+  ${C.cyan}identity update-settings${C.reset} [--inheritance ...] [--ttl ...] [--auto-revoke ...]
+  ${C.cyan}identity providers${C.reset}               List identity-verification providers
+  ${C.cyan}identity claims${C.reset}                  List your verified identity claims
+  ${C.cyan}identity revoke-claim${C.reset} <id>       Revoke an identity claim
+
+${C.white}Audit${C.reset}
+  ${C.cyan}audit list${C.reset} [--limit N] [--agent <id>]
+  ${C.cyan}audit chain-head${C.reset}                 Current audit-chain head hash
+  ${C.cyan}audit verify-chain${C.reset}               Verify your audit chain integrity
+
+${C.white}Security events${C.reset}
+  ${C.cyan}event list${C.reset} [--agent <id>]
+  ${C.cyan}event show${C.reset} <id>
+  ${C.cyan}event resolve${C.reset} <id>
+
+${C.white}Team${C.reset}
+  ${C.cyan}team list${C.reset}                        List team members
+  ${C.cyan}team invite${C.reset} <email> [--role ...]
+  ${C.cyan}team update${C.reset} <id> [--role ...] [--status ...]
+  ${C.cyan}team revoke${C.reset} <id>
+
+${C.white}Other${C.reset}
   ${C.cyan}register${C.reset}                         Print signup + MCP install instructions
   ${C.cyan}monitor${C.reset} [--demo|--follow]        Tail STACK activity in your terminal
 
+${C.white}Global flags${C.reset}
+  --json                   Emit raw JSON instead of formatted tables.
+
 ${C.white}monitor flags${C.reset}
   --demo                   Replay a real-shape mission (no auth needed).
                            Same row format as --follow, just scripted.
@@ -308,10 +388,46 @@ async function main() {
         stderr.write(`error: unknown auth subcommand "${sub ?? ''}". Use login | logout | status.\n`);
         process.exit(2);
     }
-    if (command === 'agent') {
+    if (command === 'agent' || command === 'agents') {
         await cmdAgent(argv.slice(3));
         return;
     }
+    if (command === 'passport' || command === 'passports') {
+        await cmdPassport(argv.slice(3));
+        return;
+    }
+    if (command === 'service' || command === 'services') {
+        await cmdService(argv.slice(3));
+        return;
+    }
+    if (command === 'dropoff' || command === 'dropoffs') {
+        await cmdDropoff(argv.slice(3));
+        return;
+    }
+    if (command === 'skill' || command === 'skills') {
+        await cmdSkill(argv.slice(3));
+        return;
+    }
+    if (command === 'identity') {
+        await cmdIdentity(argv.slice(3));
+        return;
+    }
+    if (command === 'audit') {
+        await cmdAudit(argv.slice(3));
+        return;
+    }
+    if (command === 'event' || command === 'events' || command === 'security-event' || command === 'security-events') {
+        await cmdEvent(argv.slice(3));
+        return;
+    }
+    if (command === 'team' || command === 'members' || command === 'member') {
+        await cmdTeam(argv.slice(3));
+        return;
+    }
+    if (command === 'me' || command === 'whoami') {
+        await cmdMe(argv.slice(3));
+        return;
+    }
     if (command === 'register') {
         stdout.write(`
   STACK — Infrastructure for agents