@heossi/qnsi 0.3.2

package/dist/cli/commands/auth.js

@@ -0,0 +1,46 @@
+import { EXIT_CODES } from "../config.js";
+import { requestServiceToken } from "../utils/auth.js";
+import { printError, printJson, printSuccess } from "../utils/output.js";
+export function registerAuthCommands(program, config) {
+    const auth = program.command("auth").description("Authentication commands");
+    auth
+        .command("token")
+        .description("Request a service token from auth-service")
+        .option("--service-id <id>", "Service account ID")
+        .option("--service-secret <secret>", "Service account secret")
+        .option("--audience <audience>", "Token audience", "internal-service")
+        .action(async (options) => {
+        const serviceId = options.serviceId ?? config.serviceId;
+        const serviceSecret = options.serviceSecret ?? config.serviceSecret;
+        if (!serviceId || !serviceSecret) {
+            printError("Service ID and secret are required");
+            process.exit(EXIT_CODES.AUTH_ERROR);
+            return;
+        }
+        const tokenConfig = {
+            ...config,
+            serviceId,
+            serviceSecret,
+        };
+        try {
+            const token = await requestServiceToken(tokenConfig);
+            if (token) {
+                if (config.outputFormat === "json") {
+                    printJson({ accessToken: token });
+                }
+                else {
+                    printSuccess("Service token obtained");
+                    console.log(token);
+                }
+                process.exit(EXIT_CODES.SUCCESS);
+                return;
+            }
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to get token");
+            process.exit(EXIT_CODES.AUTH_ERROR);
+            return;
+        }
+    });
+}
+//# sourceMappingURL=auth.js.map

package/dist/cli/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/cli/commands/auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEzE,MAAM,UAAU,oBAAoB,CAAC,OAAgB,EAAE,MAAiB;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAE5E,IAAI;SACF,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,2CAA2C,CAAC;SACxD,MAAM,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;SACjD,MAAM,CAAC,2BAA2B,EAAE,wBAAwB,CAAC;SAC7D,MAAM,CAAC,uBAAuB,EAAE,gBAAgB,EAAE,kBAAkB,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACzB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;QACxD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC;QAEpE,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,UAAU,CAAC,oCAAoC,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACpC,OAAO;QACR,CAAC;QAED,MAAM,WAAW,GAAG;YACnB,GAAG,MAAM;YACT,SAAS;YACT,aAAa;SACb,CAAC;QAEF,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;YACrD,IAAI,KAAK,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;oBACpC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnC,CAAC;qBAAM,CAAC;oBACP,YAAY,CAAC,wBAAwB,CAAC,CAAC;oBACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACpB,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACjC,OAAO;YACR,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC3E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACpC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/billing.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { CliConfig } from "../config.js";
+export declare function registerBillingCommands(program: Command, config: CliConfig): void;
+//# sourceMappingURL=billing.d.ts.map

package/dist/cli/commands/billing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/billing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAgNjF"}

package/dist/cli/commands/billing.js

@@ -0,0 +1,179 @@
+import { EXIT_CODES } from "../config.js";
+import { getAuthHeaders } from "../utils/auth.js";
+import { getEffectiveConfig } from "../utils/command-config.js";
+import { fetchWithBackendHandling } from "../utils/fetcher.js";
+import { printError, printJson, printSuccess, printTable } from "../utils/output.js";
+export function registerBillingCommands(program, config) {
+    const billing = program.command("billing").description("Billing service commands");
+    const addons = billing.command("addons").description("Add-on management");
+    addons
+        .command("list")
+        .description("List enabled add-ons for tenant")
+        .action(async (_options, command) => {
+        if (!config.tenantId) {
+            printError("QNSP_TENANT_ID must be set");
+            process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+            return;
+        }
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            const headers = await getAuthHeaders(effectiveConfig);
+            const billingUrl = effectiveConfig.billingServiceUrl;
+            const response = await fetchWithBackendHandling(effectiveConfig, `${billingUrl}/addons/${effectiveConfig.tenantId}`, { headers });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to list add-ons: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            const data = (await response.json());
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable((data.addOns ?? []));
+            }
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to list add-ons");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+    addons
+        .command("catalog")
+        .description("List all available add-ons")
+        .action(async (_options, command) => {
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            const headers = await getAuthHeaders(effectiveConfig);
+            const billingUrl = effectiveConfig.billingServiceUrl;
+            const response = await fetchWithBackendHandling(effectiveConfig, `${billingUrl}/addons/catalog`, {
+                headers,
+            });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to get catalog: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            const data = (await response.json());
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable((data.catalog ?? []));
+            }
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to get catalog");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+    addons
+        .command("enable")
+        .description("Enable an add-on")
+        .requiredOption("--addon-id <id>", "Add-on identifier")
+        .action(async (options, command) => {
+        if (!config.tenantId) {
+            printError("QNSP_TENANT_ID must be set");
+            process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+            return;
+        }
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            const headers = await getAuthHeaders(effectiveConfig);
+            const billingUrl = effectiveConfig.billingServiceUrl;
+            const response = await fetchWithBackendHandling(effectiveConfig, `${billingUrl}/addons/enable`, {
+                method: "POST",
+                headers,
+                body: JSON.stringify({
+                    tenantId: effectiveConfig.tenantId,
+                    addonId: options.addonId,
+                }),
+            });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to enable add-on: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            printSuccess(`Add-on enabled: ${options.addonId}`);
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to enable add-on");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+    billing
+        .command("usage")
+        .description("Get usage metrics for tenant")
+        .option("--start <date>", "Start date (ISO 8601)")
+        .option("--end <date>", "End date (ISO 8601)")
+        .action(async (options, command) => {
+        if (!config.tenantId) {
+            printError("QNSP_TENANT_ID must be set");
+            process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+        }
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            const headers = await getAuthHeaders(effectiveConfig);
+            const billingUrl = effectiveConfig.billingServiceUrl;
+            // billingServiceUrl already resolves to the /billing root (edge: /proxy/billing
+            // rewritten to /billing; local: localhost:8106/billing). Append only the
+            // post-/billing path — the addons commands above do the same. A leading
+            // "/billing" here produced /billing/billing/v1/usage -> 404 in prod.
+            const url = new URL(`${billingUrl}/v1/usage/${effectiveConfig.tenantId}`);
+            if (options.start) {
+                url.searchParams.set("start", options.start);
+            }
+            if (options.end) {
+                url.searchParams.set("end", options.end);
+            }
+            const response = await fetchWithBackendHandling(effectiveConfig, url.toString(), {
+                headers,
+            });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to get usage: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            const data = await response.json();
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable(data);
+            }
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to get usage");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+}
+//# sourceMappingURL=billing.js.map

package/dist/cli/commands/billing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["../../../src/cli/commands/billing.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErF,MAAM,UAAU,uBAAuB,CAAC,OAAgB,EAAE,MAAiB;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAEnF,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAE1E,MAAM;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,iCAAiC,CAAC;SAC9C,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,UAAU,CAAC,4BAA4B,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC3C,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,eAAe,CAAC,iBAAiB,CAAC;YAErD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC9C,eAAe,EACf,GAAG,UAAU,WAAW,eAAe,CAAC,QAAQ,EAAE,EAClD,EAAE,OAAO,EAAE,CACX,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,2BAA2B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACtE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;YAEF,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAA8B,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;YAC9E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;IAEJ,MAAM;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,4BAA4B,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACnC,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,eAAe,CAAC,iBAAiB,CAAC;YAErD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC9C,eAAe,EACf,GAAG,UAAU,iBAAiB,EAC9B;gBACC,OAAO;aACP,CACD,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,0BAA0B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACrE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;YAEF,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAA8B,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;IAEJ,MAAM;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,kBAAkB,CAAC;SAC/B,cAAc,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,UAAU,CAAC,4BAA4B,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC3C,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,eAAe,CAAC,iBAAiB,CAAC;YAErD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC9C,eAAe,EACf,GAAG,UAAU,gBAAgB,EAC7B;gBACC,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACpB,QAAQ,EAAE,eAAe,CAAC,QAAQ;oBAClC,OAAO,EAAE,OAAO,CAAC,OAAO;iBACxB,CAAC;aACF,CACD,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,4BAA4B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,YAAY,CAAC,mBAAmB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;YAC/E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;IAEJ,OAAO;SACL,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;SACjD,MAAM,CAAC,cAAc,EAAE,qBAAqB,CAAC;SAC7C,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,UAAU,CAAC,4BAA4B,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,eAAe,CAAC,iBAAiB,CAAC;YACrD,gFAAgF;YAChF,yEAAyE;YACzE,wEAAwE;YACxE,qEAAqE;YACrE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,UAAU,aAAa,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1E,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBACjB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,eAAe,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAChF,OAAO;aACP,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,IAA+B,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC3E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/crypto-policy.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { CliConfig } from "../config.js";
+export declare function registerCryptoPolicyCommands(program: Command, config: CliConfig): void;
+//# sourceMappingURL=crypto-policy.d.ts.map

package/dist/cli/commands/crypto-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-policy.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/crypto-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAoJtF"}

package/dist/cli/commands/crypto-policy.js

@@ -0,0 +1,130 @@
+import { EXIT_CODES } from "../config.js";
+import { getAuthHeaders } from "../utils/auth.js";
+import { getEffectiveConfig } from "../utils/command-config.js";
+import { fetchWithBackendHandling } from "../utils/fetcher.js";
+import { printError, printJson, printSuccess, printTable } from "../utils/output.js";
+export function registerCryptoPolicyCommands(program, config) {
+    const cryptoPolicy = program
+        .command("crypto-policy")
+        .description("Tenant crypto policy management commands");
+    cryptoPolicy
+        .command("get")
+        .description("Get tenant crypto policy")
+        .action(async (_options, command) => {
+        if (!config.tenantId) {
+            printError("QNSP_TENANT_ID must be set");
+            process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+            return;
+        }
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            if (!effectiveConfig.tenantId) {
+                printError("QNSP_TENANT_ID must be set");
+                process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+                return;
+            }
+            const headers = await getAuthHeaders(effectiveConfig);
+            const tenantUrl = effectiveConfig.tenantServiceUrl;
+            const response = await fetchWithBackendHandling(effectiveConfig, `${tenantUrl}/tenant/v1/tenants/${effectiveConfig.tenantId}/crypto-policy`, { headers });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (response.status === 404) {
+                printError("Crypto policy not found");
+                process.exit(EXIT_CODES.NOT_FOUND);
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to get crypto policy: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            const data = (await response.json());
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable(data);
+            }
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to get crypto policy");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+    cryptoPolicy
+        .command("update")
+        .description("Update tenant crypto policy")
+        .option("--tier <tier>", "Policy tier (free, pro, enterprise)")
+        .option("--kem-algorithms <algorithms>", "Comma-separated list of allowed KEM algorithms")
+        .option("--signature-algorithms <algorithms>", "Comma-separated list of allowed signature algorithms")
+        .option("--require-hsm-for-root-keys", "Require HSM for root keys")
+        .option("--max-key-age-days <days>", "Maximum key age in days")
+        .action(async (options, command) => {
+        if (!config.tenantId) {
+            printError("QNSP_TENANT_ID must be set");
+            process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+            return;
+        }
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            if (!effectiveConfig.tenantId) {
+                printError("QNSP_TENANT_ID must be set");
+                process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+                return;
+            }
+            if (!options.tier) {
+                printError("--tier is required");
+                process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+                return;
+            }
+            const headers = await getAuthHeaders(effectiveConfig);
+            const tenantUrl = effectiveConfig.tenantServiceUrl;
+            const body = {
+                policyTier: options.tier,
+                customAllowedKemAlgorithms: options.kemAlgorithms
+                    ? options.kemAlgorithms.split(",").map((s) => s.trim())
+                    : undefined,
+                customAllowedSignatureAlgorithms: options.signatureAlgorithms
+                    ? options.signatureAlgorithms.split(",").map((s) => s.trim())
+                    : undefined,
+                requireHsmForRootKeys: options.requireHsmForRootKeys ?? false,
+                maxKeyAgeDays: options.maxKeyAgeDays ? parseInt(options.maxKeyAgeDays, 10) : undefined,
+            };
+            const response = await fetchWithBackendHandling(effectiveConfig, `${tenantUrl}/tenant/v1/tenants/${effectiveConfig.tenantId}/crypto-policy`, {
+                method: "PUT",
+                headers,
+                body: JSON.stringify(body),
+            });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to update crypto policy: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            const data = (await response.json());
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printSuccess("Crypto policy updated successfully");
+                printTable(data);
+            }
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to update crypto policy");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+}
+//# sourceMappingURL=crypto-policy.js.map

package/dist/cli/commands/crypto-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-policy.js","sourceRoot":"","sources":["../../../src/cli/commands/crypto-policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErF,MAAM,UAAU,4BAA4B,CAAC,OAAgB,EAAE,MAAiB;IAC/E,MAAM,YAAY,GAAG,OAAO;SAC1B,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,0CAA0C,CAAC,CAAC;IAE1D,YAAY;SACV,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,0BAA0B,CAAC;SACvC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,UAAU,CAAC,4BAA4B,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC3C,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAC/B,UAAU,CAAC,4BAA4B,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAC3C,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,eAAe,CAAC,gBAAgB,CAAC;YAEnD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC9C,eAAe,EACf,GAAG,SAAS,sBAAsB,eAAe,CAAC,QAAQ,gBAAgB,EAC1E,EAAE,OAAO,EAAE,CACX,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7B,UAAU,CAAC,yBAAyB,CAAC,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACnC,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,gCAAgC,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBAC3E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;YAEhE,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;IAEJ,YAAY;SACV,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,6BAA6B,CAAC;SAC1C,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC;SAC9D,MAAM,CAAC,+BAA+B,EAAE,gDAAgD,CAAC;SACzF,MAAM,CACN,qCAAqC,EACrC,sDAAsD,CACtD;SACA,MAAM,CAAC,6BAA6B,EAAE,2BAA2B,CAAC;SAClE,MAAM,CAAC,2BAA2B,EAAE,yBAAyB,CAAC;SAC9D,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,UAAU,CAAC,4BAA4B,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC3C,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAC/B,UAAU,CAAC,4BAA4B,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAC3C,OAAO;YACR,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACnB,UAAU,CAAC,oBAAoB,CAAC,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAC3C,OAAO;YACR,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,eAAe,CAAC,gBAAgB,CAAC;YAEnD,MAAM,IAAI,GAAG;gBACZ,UAAU,EAAE,OAAO,CAAC,IAAI;gBACxB,0BAA0B,EAAE,OAAO,CAAC,aAAa;oBAChD,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC/D,CAAC,CAAC,SAAS;gBACZ,gCAAgC,EAAE,OAAO,CAAC,mBAAmB;oBAC5D,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBACrE,CAAC,CAAC,SAAS;gBACZ,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,KAAK;gBAC7D,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;aACtF,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC9C,eAAe,EACf,GAAG,SAAS,sBAAsB,eAAe,CAAC,QAAQ,gBAAgB,EAC1E;gBACC,MAAM,EAAE,KAAK;gBACb,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC1B,CACD,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,mCAAmC,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBAC9E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;YAEhE,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,YAAY,CAAC,oCAAoC,CAAC,CAAC;gBACnD,UAAU,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/kms.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { CliConfig } from "../config.js";
+export declare function registerKmsCommands(program: Command, config: CliConfig): void;
+//# sourceMappingURL=kms.d.ts.map

package/dist/cli/commands/kms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kms.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/kms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAoK7E"}

package/dist/cli/commands/kms.js

@@ -0,0 +1,153 @@
+import { EXIT_CODES } from "../config.js";
+import { getAuthHeaders } from "../utils/auth.js";
+import { getEffectiveConfig } from "../utils/command-config.js";
+import { fetchWithBackendHandling } from "../utils/fetcher.js";
+import { printError, printJson, printSuccess, printTable } from "../utils/output.js";
+export function registerKmsCommands(program, config) {
+    const kms = program.command("kms").description("KMS key management commands");
+    const keys = kms.command("keys").description("Key operations");
+    keys
+        .command("list")
+        .description("List KMS keys")
+        .option("--limit <number>", "Number of keys to return", "100")
+        .option("--cursor <cursor>", "Pagination cursor")
+        .action(async (options, command) => {
+        if (!config.tenantId) {
+            printError("QNSP_TENANT_ID must be set");
+            return process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+        }
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            const headers = await getAuthHeaders(effectiveConfig);
+            const url = new URL(`${effectiveConfig.kmsServiceUrl}/kms/v1/keys`);
+            url.searchParams.set("tenantId", effectiveConfig.tenantId ?? "");
+            url.searchParams.set("limit", options.limit);
+            if (options.cursor) {
+                url.searchParams.set("cursor", options.cursor);
+            }
+            const response = await fetchWithBackendHandling(effectiveConfig, url.toString(), {
+                headers,
+            });
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to list keys: ${response.status} ${errorText}`);
+                return process.exit(EXIT_CODES.GENERAL_ERROR);
+            }
+            const data = (await response.json());
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable(data.items ?? []);
+            }
+            return process.exit(EXIT_CODES.SUCCESS);
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.startsWith("__EXIT__")) {
+                return;
+            }
+            printError(error instanceof Error ? error.message : "Failed to list keys");
+            return process.exit(EXIT_CODES.NETWORK_ERROR);
+        }
+    });
+    keys
+        .command("get")
+        .description("Get KMS key details")
+        .argument("<keyId>", "Key identifier")
+        .action(async (keyId, _options, command) => {
+        if (!config.tenantId) {
+            printError("QNSP_TENANT_ID must be set");
+            return process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+        }
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            if (!effectiveConfig.tenantId) {
+                printError("QNSP_TENANT_ID must be set");
+                return process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+            }
+            const headers = await getAuthHeaders(effectiveConfig);
+            const url = new URL(`${effectiveConfig.kmsServiceUrl}/kms/v1/keys/${keyId}`);
+            url.searchParams.set("tenantId", effectiveConfig.tenantId);
+            const response = await fetchWithBackendHandling(effectiveConfig, url.toString(), {
+                headers,
+            });
+            if (response.status === 404) {
+                printError(`Key not found: ${keyId}`);
+                return process.exit(EXIT_CODES.NOT_FOUND);
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to get key: ${response.status} ${errorText}`);
+                return process.exit(EXIT_CODES.GENERAL_ERROR);
+            }
+            const data = (await response.json());
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable(data);
+            }
+            return process.exit(EXIT_CODES.SUCCESS);
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.startsWith("__EXIT__")) {
+                return;
+            }
+            printError(error instanceof Error ? error.message : "Failed to get key");
+            return process.exit(EXIT_CODES.NETWORK_ERROR);
+        }
+    });
+    keys
+        .command("create")
+        .description("Create a new KMS key")
+        .option("--name <name>", "Key name")
+        .option("--algorithm <algorithm>", "Key algorithm", "aes-256-gcm")
+        .option("--purpose <purpose>", "Key purpose", "encryption")
+        .action(async (options, command) => {
+        if (!config.tenantId) {
+            printError("QNSP_TENANT_ID must be set");
+            return process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+        }
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            if (!effectiveConfig.tenantId) {
+                printError("QNSP_TENANT_ID must be set");
+                return process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+            }
+            const headers = await getAuthHeaders(effectiveConfig);
+            const body = {
+                tenantId: effectiveConfig.tenantId,
+                name: options.name ?? `key-${Date.now()}`,
+                algorithm: options.algorithm,
+                purpose: options.purpose,
+            };
+            const response = await fetchWithBackendHandling(effectiveConfig, `${effectiveConfig.kmsServiceUrl}/kms/v1/keys`, {
+                method: "POST",
+                headers,
+                body: JSON.stringify(body),
+            });
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to create key: ${response.status} ${errorText}`);
+                return process.exit(EXIT_CODES.GENERAL_ERROR);
+            }
+            const data = (await response.json());
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printSuccess(`Key created: ${data.keyId}`);
+                printTable(data);
+            }
+            return process.exit(EXIT_CODES.SUCCESS);
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.startsWith("__EXIT__")) {
+                return;
+            }
+            printError(error instanceof Error ? error.message : "Failed to create key");
+            return process.exit(EXIT_CODES.NETWORK_ERROR);
+        }
+    });
+}
+//# sourceMappingURL=kms.js.map

package/dist/cli/commands/kms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kms.js","sourceRoot":"","sources":["../../../src/cli/commands/kms.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErF,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,MAAiB;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,6BAA6B,CAAC,CAAC;IAE9E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAE/D,IAAI;SACF,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,eAAe,CAAC;SAC5B,MAAM,CAAC,kBAAkB,EAAE,0BAA0B,EAAE,KAAK,CAAC;SAC7D,MAAM,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,UAAU,CAAC,4BAA4B,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,CAAC,aAAa,cAAc,CAAC,CAAC;YACpE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;YACjE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,eAAe,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAChF,OAAO;aACP,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACnE,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0C,CAAC;YAE9E,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YACD,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC3E,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC,CAAC,CAAC;IAEJ,IAAI;SACF,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,qBAAqB,CAAC;SAClC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;SACrC,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,UAAU,CAAC,4BAA4B,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAC/B,UAAU,CAAC,4BAA4B,CAAC,CAAC;gBACzC,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,CAAC,aAAa,gBAAgB,KAAK,EAAE,CAAC,CAAC;YAC7E,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;YAE3D,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,eAAe,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAChF,OAAO;aACP,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7B,UAAU,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;gBACtC,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,sBAAsB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACjE,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;YAEhE,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YACD,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YACzE,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC,CAAC,CAAC;IAEJ,IAAI;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,sBAAsB,CAAC;SACnC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC;SACnC,MAAM,CAAC,yBAAyB,EAAE,eAAe,EAAE,aAAa,CAAC;SACjE,MAAM,CAAC,qBAAqB,EAAE,aAAa,EAAE,YAAY,CAAC;SAC1D,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,UAAU,CAAC,4BAA4B,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAC/B,UAAU,CAAC,4BAA4B,CAAC,CAAC;gBACzC,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG;gBACZ,QAAQ,EAAE,eAAe,CAAC,QAAQ;gBAClC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE;gBACzC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;aACxB,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC9C,eAAe,EACf,GAAG,eAAe,CAAC,aAAa,cAAc,EAC9C;gBACC,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC1B,CACD,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,yBAAyB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACpE,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiD,CAAC;YAErF,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,YAAY,CAAC,gBAAgB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC3C,UAAU,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YACD,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;YAC5E,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/observability.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { CliConfig } from "../config.js";
+export declare function registerObservabilityCommands(program: Command, config: CliConfig): void;
+//# sourceMappingURL=observability.d.ts.map

package/dist/cli/commands/observability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/observability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAmGvF"}