@getstackrun/cli 0.6.1 → 0.7.0

package/dist/passports.js

@@ -0,0 +1,157 @@
+// passports subcommands — thin wrappers over /v1/passports/*.
+import { stdout, stderr, exit } from 'node:process';
+import { api, takeFlag } from './api.js';
+import { invokeHint } from './auth.js';
+import { printJson, printTable, printRecord, fmt, fmtTs } from './format.js';
+async function cmdList(args, json) {
+    const agentId = takeFlag(args, '--agent');
+    const sessionId = takeFlag(args, '--session');
+    const list = await api('GET', '/v1/passports/active', {
+        query: {
+            agent_id: typeof agentId === 'string' ? agentId : undefined,
+            session_id: typeof sessionId === 'string' ? sessionId : undefined,
+        },
+    });
+    if (json)
+        return printJson(list);
+    if (list.length === 0) {
+        stdout.write('(no active passports)\n');
+        return;
+    }
+    const rows = list.map((p) => [
+        p.jti,
+        p.agent_id,
+        String(p.delegation_depth),
+        fmtTs(p.issued_at),
+        fmtTs(p.expires_at),
+    ]);
+    printTable(['JTI', 'AGENT', 'DEPTH', 'ISSUED', 'EXPIRES'], rows);
+}
+async function cmdIssue(args, json) {
+    const agentId = takeFlag(args, '--agent');
+    const intentSummary = takeFlag(args, '--intent');
+    const servicesRaw = takeFlag(args, '--services');
+    const ttl = takeFlag(args, '--ttl');
+    if (typeof agentId !== 'string' || typeof intentSummary !== 'string' || typeof servicesRaw !== 'string') {
+        stderr.write(`usage: ${invokeHint('passport issue --agent <id> --intent "<summary>" --services slack,stripe [--ttl <seconds>]')}\n`);
+        exit(2);
+    }
+    const serviceList = servicesRaw.split(',').map((s) => s.trim()).filter(Boolean);
+    const body = {
+        agent_id: agentId,
+        intent: { summary: intentSummary, services: serviceList },
+        scopes: serviceList.map((service_id) => ({ service_id })),
+    };
+    if (typeof ttl === 'string')
+        body.ttl_seconds = parseInt(ttl, 10);
+    const issued = await api('POST', '/v1/passports/issue', { body });
+    if (json)
+        return printJson(issued);
+    stdout.write(`issued ${issued.jti}\n  expires ${fmtTs(issued.expires_at)}\n  token: ${issued.token}\n`);
+}
+async function cmdRefresh(jti, args, json) {
+    // /v1/passports/refresh takes a token, not a jti. Caller must pipe in
+    // the token via --token (or stdin) since the CLI doesn't store
+    // passports locally. Surface the constraint with a clear usage line
+    // when --token is absent.
+    const tokenFlag = takeFlag(args, '--token');
+    if (typeof tokenFlag !== 'string') {
+        stderr.write(`usage: ${invokeHint(`passport refresh <jti> --token <jwt>`)}\n` +
+            `(refresh takes the full passport JWT, not just the jti — pass via --token)\n`);
+        exit(2);
+    }
+    void jti; // accepted for symmetry but unused — token is the source
+    const ttl = takeFlag(args, '--ttl');
+    const body = { token: tokenFlag };
+    if (typeof ttl === 'string')
+        body.ttl_seconds = parseInt(ttl, 10);
+    const out = await api('POST', '/v1/passports/refresh', { body });
+    if (json)
+        return printJson(out);
+    printRecord(out);
+}
+async function cmdVerify(token, json) {
+    const out = await api('POST', '/v1/passports/verify', { body: { token } });
+    if (json)
+        return printJson(out);
+    printRecord(out);
+}
+async function cmdRevoke(jti, args, json) {
+    const reason = takeFlag(args, '--reason');
+    const out = await api('POST', '/v1/passports/revoke', {
+        body: { jti, reason: typeof reason === 'string' ? reason : undefined },
+    });
+    if (json)
+        return printJson(out);
+    stdout.write(`revoked ${jti}\n`);
+}
+async function cmdRevokeAgent(agentId, args, json) {
+    const reason = takeFlag(args, '--reason');
+    const out = await api('POST', `/v1/passports/revoke-agent/${encodeURIComponent(agentId)}`, {
+        body: { reason: typeof reason === 'string' ? reason : 'CLI revoke' },
+    });
+    if (json)
+        return printJson(out);
+    stdout.write(`revoked ${out.revoked_count} passport(s) for ${agentId}\n`);
+}
+async function cmdRevokeAll(args, json) {
+    const yes = !!takeFlag(args, '--yes');
+    const reason = takeFlag(args, '--reason');
+    if (!yes) {
+        stderr.write(`error: passport revoke-all is destructive across all agents.\n` +
+            `Pass --yes to confirm. Optional: --reason "<text>".\n`);
+        exit(2);
+    }
+    const out = await api('POST', '/v1/passports/revoke-all', {
+        body: { confirm: true, reason: typeof reason === 'string' ? reason : 'CLI revoke-all' },
+    });
+    if (json)
+        return printJson(out);
+    stdout.write(`revoked ${out.revoked_count} passport(s)\n`);
+}
+export async function cmdPassport(args) {
+    const json = !!takeFlag(args, '--json');
+    const sub = args[0];
+    const arg1 = args[1];
+    if (sub === 'list' || sub === 'ls' || sub === 'active')
+        return cmdList(args.slice(1), json);
+    if (sub === 'issue')
+        return cmdIssue(args.slice(1), json);
+    if (sub === 'refresh') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('passport refresh <jti> --token <jwt>')}\n`);
+            exit(2);
+        }
+        return cmdRefresh(arg1, args.slice(2), json);
+    }
+    if (sub === 'verify') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('passport verify <jwt-token>')}\n`);
+            exit(2);
+        }
+        return cmdVerify(arg1, json);
+    }
+    if (sub === 'revoke') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('passport revoke <jti> [--reason "..."]')}\n`);
+            exit(2);
+        }
+        return cmdRevoke(arg1, args.slice(2), json);
+    }
+    if (sub === 'revoke-agent') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('passport revoke-agent <agent-id> [--reason "..."]')}\n`);
+            exit(2);
+        }
+        return cmdRevokeAgent(arg1, args.slice(2), json);
+    }
+    if (sub === 'revoke-all')
+        return cmdRevokeAll(args.slice(1), json);
+    stderr.write(`error: unknown passport subcommand "${sub ?? ''}".\n` +
+        `Use list | issue | refresh | verify | revoke | revoke-agent | revoke-all\n`);
+    exit(2);
+}
+// Silence the unused-imports warnings for the fields we re-export-like
+// when building the table headers.
+void fmt;
+//# sourceMappingURL=passports.js.map

package/dist/passports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passports.js","sourceRoot":"","sources":["../src/passports.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAE9D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAY7E,KAAK,UAAU,OAAO,CAAC,IAAc,EAAE,IAAa;IAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAmB,KAAK,EAAE,sBAAsB,EAAE;QACtE,KAAK,EAAE;YACL,QAAQ,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC3D,UAAU,EAAE,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SAClE;KACF,CAAC,CAAC;IACH,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,QAAQ;QACV,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC1B,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAClB,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;KACpB,CAAC,CAAC;IACH,UAAU,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAc,EAAE,IAAa;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACxG,MAAM,CAAC,KAAK,CACV,UAAU,UAAU,CAAC,4FAA4F,CAAC,IAAI,CACvH,CAAC;QACF,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;IACD,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChF,MAAM,IAAI,GAA4B;QACpC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE;QACzD,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;KAC1D,CAAC;IACF,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAqD,MAAM,EAAE,qBAAqB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACtH,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,UAAU,MAAM,CAAC,GAAG,eAAe,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;AAC1G,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,IAAc,EAAE,IAAa;IAClE,sEAAsE;IACtE,+DAA+D;IAC/D,oEAAoE;IACpE,0BAA0B;IAC1B,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CACV,UAAU,UAAU,CAAC,sCAAsC,CAAC,IAAI;YAC9D,8EAA8E,CACjF,CAAC;QACF,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;IACD,KAAK,GAAG,CAAC,CAAC,yDAAyD;IACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,IAAI,GAA4B,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC3D,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,WAAW,CAAC,GAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,IAAa;IACnD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,WAAW,CAAC,GAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,IAAc,EAAE,IAAa;IACjE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE;QACpD,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE;KACvE,CAAC,CAAC;IACH,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,IAAc,EAAE,IAAa;IAC1E,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,GAAG,CAA4B,MAAM,EAAE,8BAA8B,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE;QACpH,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE;KACrE,CAAC,CAAC;IACH,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,aAAa,oBAAoB,OAAO,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAc,EAAE,IAAa;IACvD,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,CAAC,KAAK,CACV,gEAAgE;YAC9D,uDAAuD,CAC1D,CAAC;QACF,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAA4B,MAAM,EAAE,0BAA0B,EAAE;QACnF,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,EAAE;KACxF,CAAC,CAAC;IACH,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,aAAa,gBAAgB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAErB,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5F,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1D,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,sCAAsC,CAAC,IAAI,CAAC,CAAC;YAC/E,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;YACtE,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,wCAAwC,CAAC,IAAI,CAAC,CAAC;YACjF,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,mDAAmD,CAAC,IAAI,CAAC,CAAC;YAC5F,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,GAAG,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAEnE,MAAM,CAAC,KAAK,CACV,uCAAuC,GAAG,IAAI,EAAE,MAAM;QACpD,4EAA4E,CAC/E,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC;AAED,uEAAuE;AACvE,mCAAmC;AACnC,KAAK,GAAG,CAAC"}

package/dist/services.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdService(args: string[]): Promise<void>;
+//# sourceMappingURL=services.d.ts.map

package/dist/services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../src/services.ts"],"names":[],"mappings":"AAyEA,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAyC9D"}

package/dist/services.js

@@ -0,0 +1,97 @@
+// services subcommands — thin wrappers over /v1/services/* + /v1/credentials/*.
+import { stdout, stderr, exit } from 'node:process';
+import { api, takeFlag } from './api.js';
+import { invokeHint } from './auth.js';
+import { printJson, printTable, printRecord, fmt } from './format.js';
+async function cmdCatalog(json) {
+    const list = await api('GET', '/v1/services');
+    if (json)
+        return printJson(list);
+    const rows = list.map((s) => [s.provider, s.name, s.available === false ? fmt.dim('soon') : fmt.ok('yes')]);
+    printTable(['PROVIDER', 'NAME', 'AVAILABLE'], rows);
+}
+async function cmdConnections(json) {
+    // /v1/services returns the catalog (services + connections). Dashboard
+    // route returns `{connections: [...]}` envelope after auth filter.
+    // Re-use that path so a CLI user sees the same authoritative list.
+    const out = await api('GET', '/v1/services');
+    const list = Array.isArray(out) ? out : (out?.connections ?? []);
+    if (json)
+        return printJson(list);
+    if (list.length === 0) {
+        stdout.write('(no service connections)\n');
+        return;
+    }
+    const rows = list.map((c) => [c.id, c.provider, c.status, (c.scopes ?? []).join(', ')]);
+    printTable(['ID', 'PROVIDER', 'STATUS', 'SCOPES'], rows);
+}
+async function cmdShow(connectionId, json) {
+    const out = await api('GET', `/v1/services/${encodeURIComponent(connectionId)}`);
+    if (json)
+        return printJson(out);
+    printRecord(out);
+}
+async function cmdVerify(connectionId, json) {
+    const out = await api('POST', `/v1/services/${encodeURIComponent(connectionId)}/verify`);
+    if (json)
+        return printJson(out);
+    printRecord(out);
+}
+async function cmdDisconnect(connectionId, json) {
+    const out = await api('DELETE', `/v1/services/${encodeURIComponent(connectionId)}/disconnect`);
+    if (json)
+        return printJson(out);
+    stdout.write(`disconnected ${connectionId}\n`);
+}
+async function cmdCredential(provider, json) {
+    // Returns the raw credential — operator-only path. WARNING for the
+    // human: shouldn't be in shell history; we don't suppress that here
+    // because pipeline use cases (e.g. `cred = $(stack-cli services
+    // credential stripe --json | jq .access_token)`) are legitimate.
+    const out = await api('GET', `/v1/credentials/${encodeURIComponent(provider)}`);
+    if (json)
+        return printJson(out);
+    printRecord(out);
+}
+export async function cmdService(args) {
+    const json = !!takeFlag(args, '--json');
+    const sub = args[0];
+    const arg1 = args[1];
+    if (sub === 'catalog' || sub === 'available' || sub === 'list')
+        return cmdCatalog(json);
+    if (sub === 'connections' || sub === 'connected')
+        return cmdConnections(json);
+    if (sub === 'show') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('service show <connection-id>')}\n`);
+            exit(2);
+        }
+        return cmdShow(arg1, json);
+    }
+    if (sub === 'verify') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('service verify <connection-id>')}\n`);
+            exit(2);
+        }
+        return cmdVerify(arg1, json);
+    }
+    if (sub === 'disconnect') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('service disconnect <connection-id>')}\n`);
+            exit(2);
+        }
+        return cmdDisconnect(arg1, json);
+    }
+    if (sub === 'credential') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('service credential <provider>')}\n`);
+            exit(2);
+        }
+        return cmdCredential(arg1, json);
+    }
+    stderr.write(`error: unknown service subcommand "${sub ?? ''}".\n` +
+        `Use catalog | connections | show | verify | disconnect | credential\n` +
+        `Note: connecting a new service is OAuth-driven via the dashboard.\n`);
+    exit(2);
+}
+//# sourceMappingURL=services.js.map

package/dist/services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../src/services.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAkBtE,KAAK,UAAU,UAAU,CAAC,IAAa;IACrC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAY,KAAK,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5G,UAAU,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAa;IACzC,uEAAuE;IACvE,mEAAmE;IACnE,mEAAmE;IACnE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAwC,KAAK,EAAE,cAAc,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAsC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;IACrG,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxF,UAAU,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,YAAoB,EAAE,IAAa;IACxD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACjF,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,WAAW,CAAC,GAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,YAAoB,EAAE,IAAa;IAC1D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACzF,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,WAAW,CAAC,GAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,YAAoB,EAAE,IAAa;IAC9D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,gBAAgB,kBAAkB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IAC/F,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,gBAAgB,YAAY,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,IAAa;IAC1D,mEAAmE;IACnE,oEAAoE;IACpE,gEAAgE;IAChE,iEAAiE;IACjE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,mBAAmB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChF,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,WAAW,CAAC,GAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAErB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;IAC9E,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;YACvE,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,gCAAgC,CAAC,IAAI,CAAC,CAAC;YACzE,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,oCAAoC,CAAC,IAAI,CAAC,CAAC;YAC7E,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC;YACxE,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,CAAC,KAAK,CACV,sCAAsC,GAAG,IAAI,EAAE,MAAM;QACnD,uEAAuE;QACvE,qEAAqE,CACxE,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC"}

package/dist/skills.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdSkill(args: string[]): Promise<void>;
+//# sourceMappingURL=skills.d.ts.map

package/dist/skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../src/skills.ts"],"names":[],"mappings":"AAuEA,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkC5D"}

package/dist/skills.js

@@ -0,0 +1,96 @@
+// skills subcommands.
+import { stdout, stderr, exit } from 'node:process';
+import { api, takeFlag } from './api.js';
+import { invokeHint } from './auth.js';
+import { printJson, printTable, printRecord, fmt } from './format.js';
+async function cmdBrowse(args, json) {
+    const query = takeFlag(args, '--q');
+    const list = await api('GET', '/v1/skills', {
+        query: { q: typeof query === 'string' ? query : undefined },
+    });
+    if (json)
+        return printJson(list);
+    if (list.length === 0) {
+        stdout.write('(no skills match)\n');
+        return;
+    }
+    const rows = list.map((s) => [
+        s.id,
+        s.name,
+        s.trust_required ?? '—',
+        s.price_cents != null ? `$${(s.price_cents / 100).toFixed(2)}` : fmt.dim('free'),
+    ]);
+    printTable(['ID', 'NAME', 'TRUST', 'PRICE'], rows);
+}
+async function cmdMine(json) {
+    const list = await api('GET', '/v1/skills/mine');
+    if (json)
+        return printJson(list);
+    if (list.length === 0) {
+        stdout.write('(you have no published skills)\n');
+        return;
+    }
+    const rows = list.map((s) => [s.id, s.name, s.status ?? '—']);
+    printTable(['ID', 'NAME', 'STATUS'], rows);
+}
+async function cmdShow(id, json) {
+    const out = await api('GET', `/v1/skills/${encodeURIComponent(id)}`);
+    if (json)
+        return printJson(out);
+    printRecord(out);
+}
+async function cmdSuspend(id, state, json) {
+    const out = await api('POST', `/v1/skills/${encodeURIComponent(id)}/${state}`);
+    if (json)
+        return printJson(out);
+    stdout.write(`${state}d ${id}\n`);
+}
+async function cmdRequestsList(json) {
+    const out = await api('GET', '/v1/skill-requests');
+    const list = Array.isArray(out) ? out : (out?.requests ?? []);
+    if (json)
+        return printJson(list);
+    printJson(list);
+}
+async function cmdRequestPost(description, json) {
+    const out = await api('POST', '/v1/skill-requests', { body: { description } });
+    if (json)
+        return printJson(out);
+    printRecord(out);
+}
+export async function cmdSkill(args) {
+    const json = !!takeFlag(args, '--json');
+    const sub = args[0];
+    const arg1 = args[1];
+    if (sub === 'list' || sub === 'browse')
+        return cmdBrowse(args.slice(1), json);
+    if (sub === 'mine' || sub === 'published')
+        return cmdMine(json);
+    if (sub === 'show' || sub === 'get') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('skill show <id>')}\n`);
+            exit(2);
+        }
+        return cmdShow(arg1, json);
+    }
+    if (sub === 'suspend' || sub === 'activate') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint(`skill ${sub} <id>`)}\n`);
+            exit(2);
+        }
+        return cmdSuspend(arg1, sub, json);
+    }
+    if (sub === 'requests')
+        return cmdRequestsList(json);
+    if (sub === 'post-request') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('skill post-request "<description>"')}\n`);
+            exit(2);
+        }
+        return cmdRequestPost(arg1, json);
+    }
+    stderr.write(`error: unknown skill subcommand "${sub ?? ''}".\n` +
+        `Use list | mine | show | suspend | activate | requests | post-request\n`);
+    exit(2);
+}
+//# sourceMappingURL=skills.js.map

package/dist/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../src/skills.ts"],"names":[],"mappings":"AAAA,sBAAsB;AAEtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAWtE,KAAK,UAAU,SAAS,CAAC,IAAc,EAAE,IAAa;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAU,KAAK,EAAE,YAAY,EAAE;QACnD,KAAK,EAAE,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE;KAC5D,CAAC,CAAC;IACH,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,cAAc,IAAI,GAAG;QACvB,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;KACjF,CAAC,CAAC;IACH,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAa;IAClC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAU,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAC1D,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC;IAC9D,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,EAAU,EAAE,IAAa;IAC9C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,cAAc,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACrE,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,WAAW,CAAC,GAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EAAU,EAAE,KAA6B,EAAE,IAAa;IAChF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,cAAc,kBAAkB,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAC/E,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAa;IAC1C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAsC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC9D,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,SAAS,CAAC,IAAI,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,WAAmB,EAAE,IAAa;IAC9D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IAC/E,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,WAAW,CAAC,GAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAErB,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9E,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,oCAAoC,CAAC,IAAI,CAAC,CAAC;YAC7E,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,CAAC,KAAK,CACV,oCAAoC,GAAG,IAAI,EAAE,MAAM;QACjD,yEAAyE,CAC5E,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC"}

package/dist/team.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdTeam(args: string[]): Promise<void>;
+//# sourceMappingURL=team.d.ts.map

package/dist/team.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.d.ts","sourceRoot":"","sources":["../src/team.ts"],"names":[],"mappings":"AAmEA,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAyB3D"}

package/dist/team.js

@@ -0,0 +1,86 @@
+// team / members subcommands.
+import { stdout, stderr, exit } from 'node:process';
+import { api, takeFlag } from './api.js';
+import { invokeHint } from './auth.js';
+import { printJson, printTable, printRecord, fmt, fmtTs } from './format.js';
+async function cmdList(json) {
+    const list = await api('GET', '/v1/team/members');
+    if (json)
+        return printJson(list);
+    if (list.length === 0) {
+        stdout.write('(no team members)\n');
+        return;
+    }
+    const rows = list.map((m) => [
+        m.id,
+        m.email,
+        m.role,
+        m.status === 'active' ? fmt.ok(m.status) : m.status === 'pending' ? fmt.warn(m.status) : fmt.dim(m.status),
+        fmtTs(m.created_at ?? null),
+    ]);
+    printTable(['ID', 'EMAIL', 'ROLE', 'STATUS', 'JOINED'], rows);
+}
+async function cmdInvite(args, json) {
+    const email = args[0];
+    const role = takeFlag(args, '--role');
+    if (!email) {
+        stderr.write(`usage: ${invokeHint('team invite <email> [--role admin|standard|readonly]')}\n`);
+        exit(2);
+    }
+    const body = { email };
+    if (typeof role === 'string')
+        body.role = role;
+    const out = await api('POST', '/v1/team/members', { body });
+    if (json)
+        return printJson(out);
+    stdout.write(`invited ${out.email} (${out.id}) — role=${out.role}\n`);
+}
+async function cmdUpdate(id, args, json) {
+    const role = takeFlag(args, '--role');
+    const status = takeFlag(args, '--status');
+    const body = {};
+    if (typeof role === 'string')
+        body.role = role;
+    if (typeof status === 'string')
+        body.status = status;
+    if (Object.keys(body).length === 0) {
+        stderr.write(`usage: ${invokeHint('team update <id> [--role ...] [--status ...]')}\n`);
+        exit(2);
+    }
+    const out = await api('PATCH', `/v1/team/members/${encodeURIComponent(id)}`, { body });
+    if (json)
+        return printJson(out);
+    printRecord(out);
+}
+async function cmdRevoke(id, json) {
+    const out = await api('DELETE', `/v1/team/members/${encodeURIComponent(id)}`);
+    if (json)
+        return printJson(out);
+    stdout.write(`revoked ${id}\n`);
+}
+export async function cmdTeam(args) {
+    const json = !!takeFlag(args, '--json');
+    const sub = args[0];
+    const arg1 = args[1];
+    if (sub === 'list' || sub === 'ls')
+        return cmdList(json);
+    if (sub === 'invite')
+        return cmdInvite(args.slice(1), json);
+    if (sub === 'update') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('team update <id> [--role ...] [--status ...]')}\n`);
+            exit(2);
+        }
+        return cmdUpdate(arg1, args.slice(2), json);
+    }
+    if (sub === 'revoke' || sub === 'remove') {
+        if (!arg1) {
+            stderr.write(`usage: ${invokeHint('team revoke <id>')}\n`);
+            exit(2);
+        }
+        return cmdRevoke(arg1, json);
+    }
+    stderr.write(`error: unknown team subcommand "${sub ?? ''}".\nUse list | invite | update | revoke\n`);
+    exit(2);
+}
+//# sourceMappingURL=team.js.map

package/dist/team.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.js","sourceRoot":"","sources":["../src/team.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAE9B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAU7E,KAAK,UAAU,OAAO,CAAC,IAAa;IAClC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAW,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC5D,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1G,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC;KAC5B,CAAC,CAAC;IACH,UAAU,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAc,EAAE,IAAa;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,sDAAsD,CAAC,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;IACD,MAAM,IAAI,GAA4B,EAAE,KAAK,EAAE,CAAC;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAS,MAAM,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,EAAU,EAAE,IAAc,EAAE,IAAa;IAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACrD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,8CAA8C,CAAC,IAAI,CAAC,CAAC;QACvF,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,oBAAoB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACvF,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,WAAW,CAAC,GAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,EAAU,EAAE,IAAa;IAChD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,oBAAoB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAErB,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,8CAA8C,CAAC,IAAI,CAAC,CAAC;YACvF,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,CAAC,KAAK,CACV,mCAAmC,GAAG,IAAI,EAAE,2CAA2C,CACxF,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstackrun/cli",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "description": "Tail STACK runtime activity in your terminal — replay a real-shape demo or stream your own audit_log.",
   "type": "module",
   "bin": {