@heossi/qnsi 0.3.2

package/dist/cli/commands/observability.js

@@ -0,0 +1,97 @@
+import { EXIT_CODES } from "../config.js";
+import { getAuthHeaders } from "../utils/auth.js";
+import { getEffectiveConfig } from "../utils/command-config.js";
+import { fetchWithBackendHandling } from "../utils/fetcher.js";
+import { printError, printJson, printTable } from "../utils/output.js";
+export function registerObservabilityCommands(program, config) {
+    const observability = program
+        .command("observability")
+        .description("Observability service commands");
+    const slos = observability.command("slos").description("SLO operations");
+    slos
+        .command("list")
+        .description("List SLOs")
+        .option("--limit <number>", "Number of SLOs to return", "50")
+        .option("--cursor <cursor>", "Pagination cursor")
+        .action(async (options, command) => {
+        if (!config.tenantId) {
+            printError("QNSP_TENANT_ID must be set");
+            process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+            return;
+        }
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            const headers = await getAuthHeaders(effectiveConfig);
+            const obsUrl = effectiveConfig.observabilityServiceUrl;
+            const url = new URL(`${obsUrl}/observability/v1/slos`);
+            url.searchParams.set("limit", options.limit);
+            if (options.cursor) {
+                url.searchParams.set("cursor", options.cursor);
+            }
+            const response = await fetchWithBackendHandling(effectiveConfig, url.toString(), {
+                headers,
+            });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to list SLOs: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            const data = (await response.json());
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable((data.slos ?? []));
+            }
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to list SLOs");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+    const otlp = observability.command("otlp").description("OTLP ingestion endpoints");
+    otlp
+        .command("status")
+        .description("Get OTLP ingestion status")
+        .action(async (_options, command) => {
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            const headers = await getAuthHeaders(effectiveConfig);
+            const obsUrl = effectiveConfig.observabilityServiceUrl;
+            const response = await fetchWithBackendHandling(effectiveConfig, `${obsUrl}/health`, {
+                headers,
+            });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to get status: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            const data = await response.json();
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable(data);
+            }
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to get OTLP status");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+}
+//# sourceMappingURL=observability.js.map

package/dist/cli/commands/observability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.js","sourceRoot":"","sources":["../../../src/cli/commands/observability.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,UAAU,6BAA6B,CAAC,OAAgB,EAAE,MAAiB;IAChF,MAAM,aAAa,GAAG,OAAO;SAC3B,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,gCAAgC,CAAC,CAAC;IAEhD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAEzE,IAAI;SACF,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,WAAW,CAAC;SACxB,MAAM,CAAC,kBAAkB,EAAE,0BAA0B,EAAE,IAAI,CAAC;SAC5D,MAAM,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,UAAU,CAAC,4BAA4B,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC3C,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,eAAe,CAAC,uBAAuB,CAAC;YACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,wBAAwB,CAAC,CAAC;YACvD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,eAAe,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAChF,OAAO;aACP,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyC,CAAC;YAE7E,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAA8B,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC3E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;IAEJ,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAEnF,IAAI;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACnC,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,eAAe,CAAC,uBAAuB,CAAC;YAEvD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,eAAe,EAAE,GAAG,MAAM,SAAS,EAAE;gBACpF,OAAO;aACP,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,yBAAyB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,IAA+B,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;YACjF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/search.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { CliConfig } from "../config.js";
+export declare function registerSearchCommands(program: Command, config: CliConfig): void;
+//# sourceMappingURL=search.d.ts.map

package/dist/cli/commands/search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/search.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAiEhF"}

package/dist/cli/commands/search.js

@@ -0,0 +1,66 @@
+import { EXIT_CODES } from "../config.js";
+import { getAuthHeaders } from "../utils/auth.js";
+import { getEffectiveConfig } from "../utils/command-config.js";
+import { fetchWithBackendHandling } from "../utils/fetcher.js";
+import { printError, printJson, printTable } from "../utils/output.js";
+export function registerSearchCommands(program, config) {
+    const search = program.command("search").description("Search service commands");
+    search
+        .command("query")
+        .description("Execute search query")
+        .requiredOption("--query <query>", "Search query")
+        .option("--limit <number>", "Number of results to return", "20")
+        .action(async (options, command) => {
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            if (!effectiveConfig.tenantId) {
+                printError("QNSP_TENANT_ID must be set");
+                process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+                return;
+            }
+            const headers = await getAuthHeaders(effectiveConfig);
+            const searchUrl = effectiveConfig.searchServiceUrl;
+            const url = new URL(`${searchUrl}/search/v1/documents`);
+            url.searchParams.set("tenantId", effectiveConfig.tenantId);
+            url.searchParams.set("q", options.query);
+            url.searchParams.set("limit", String(Number.parseInt(options.limit, 10)));
+            const response = await fetchWithBackendHandling(effectiveConfig, url.toString(), {
+                headers,
+            });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Search failed: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            const data = (await response.json());
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable((data.items ?? []));
+            }
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Search failed");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+    const indexes = search.command("indexes").description("Index operations");
+    indexes
+        .command("list")
+        .description("List search indexes")
+        .action(async () => {
+        printError("search indexes list is unavailable: search-service does not expose a list-indexes endpoint. " +
+            "Use search query, or the optimization endpoints in search-service.");
+        process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+        return;
+    });
+}
+//# sourceMappingURL=search.js.map

package/dist/cli/commands/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../../src/cli/commands/search.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,UAAU,sBAAsB,CAAC,OAAgB,EAAE,MAAiB;IACzE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAEhF,MAAM;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,sBAAsB,CAAC;SACnC,cAAc,CAAC,iBAAiB,EAAE,cAAc,CAAC;SACjD,MAAM,CAAC,kBAAkB,EAAE,6BAA6B,EAAE,IAAI,CAAC;SAC/D,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAC/B,UAAU,CAAC,4BAA4B,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAC3C,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,eAAe,CAAC,gBAAgB,CAAC;YACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,SAAS,sBAAsB,CAAC,CAAC;YACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACzC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1E,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,eAAe,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAChF,OAAO;aACP,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,kBAAkB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsD,CAAC;YAE1F,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAA8B,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAE1E,OAAO;SACL,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,qBAAqB,CAAC;SAClC,MAAM,CAAC,KAAK,IAAI,EAAE;QAClB,UAAU,CACT,8FAA8F;YAC7F,oEAAoE,CACrE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC3C,OAAO;IACR,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/security.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { CliConfig } from "../config.js";
+export declare function registerSecurityCommands(program: Command, config: CliConfig): void;
+//# sourceMappingURL=security.d.ts.map

package/dist/cli/commands/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAiJlF"}

package/dist/cli/commands/security.js

@@ -0,0 +1,136 @@
+import { EXIT_CODES } from "../config.js";
+import { getAuthHeaders } from "../utils/auth.js";
+import { getEffectiveConfig } from "../utils/command-config.js";
+import { fetchWithBackendHandling } from "../utils/fetcher.js";
+import { printError, printJson, printTable } from "../utils/output.js";
+export function registerSecurityCommands(program, config) {
+    const security = program.command("security").description("Security monitoring service commands");
+    const alerts = security.command("alerts").description("Security alert operations");
+    alerts
+        .command("list")
+        .description("List security alerts")
+        .option("--severity <severity>", "Filter by severity")
+        .option("--status <status>", "Filter by status")
+        .option("--limit <number>", "Number of alerts to return", "50")
+        .option("--cursor <cursor>", "Pagination cursor")
+        .action(async (options, command) => {
+        if (!config.tenantId) {
+            printError("QNSP_TENANT_ID must be set");
+            process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+            return;
+        }
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            if (!effectiveConfig.tenantId) {
+                printError("QNSP_TENANT_ID must be set");
+                process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+                return;
+            }
+            const headers = await getAuthHeaders(effectiveConfig);
+            const secUrl = effectiveConfig.securityMonitoringServiceUrl;
+            const url = new URL(`${secUrl}/security/v1/alerts`);
+            url.searchParams.set("tenantId", effectiveConfig.tenantId);
+            url.searchParams.set("limit", options.limit);
+            if (options.severity) {
+                url.searchParams.set("severity", options.severity);
+            }
+            if (options.status) {
+                url.searchParams.set("status", options.status);
+            }
+            if (options.cursor) {
+                url.searchParams.set("cursor", options.cursor);
+            }
+            const response = await fetchWithBackendHandling(effectiveConfig, url.toString(), {
+                headers,
+            });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to list alerts: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            const data = (await response.json());
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable((data.items ?? []));
+            }
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to list alerts");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+    alerts
+        .command("get")
+        .description("Get alert details")
+        .argument("<alertId>", "Alert identifier")
+        .action(async () => {
+        printError("security alerts get is not available: security-monitoring-service does not expose /security/v1/alerts/:id. " +
+            "Use security alerts list with filters instead.");
+        process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+    });
+    const breaches = security.command("breaches").description("Data breach detection");
+    breaches
+        .command("list")
+        .description("List detected breaches")
+        .option("--limit <number>", "Number of breaches to return", "50")
+        .option("--cursor <cursor>", "Pagination cursor")
+        .action(async (options, command) => {
+        if (!config.tenantId) {
+            printError("QNSP_TENANT_ID must be set");
+            process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+            return;
+        }
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            if (!effectiveConfig.tenantId) {
+                printError("QNSP_TENANT_ID must be set");
+                process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+                return;
+            }
+            const headers = await getAuthHeaders(effectiveConfig);
+            const secUrl = effectiveConfig.securityMonitoringServiceUrl;
+            const url = new URL(`${secUrl}/security/v1/breaches`);
+            url.searchParams.set("tenantId", effectiveConfig.tenantId);
+            url.searchParams.set("limit", options.limit);
+            if (options.cursor) {
+                url.searchParams.set("cursor", options.cursor);
+            }
+            const response = await fetchWithBackendHandling(effectiveConfig, url.toString(), {
+                headers,
+            });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to list breaches: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            const data = (await response.json());
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable((data.breaches ?? []));
+            }
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to list breaches");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+}
+//# sourceMappingURL=security.js.map

package/dist/cli/commands/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/cli/commands/security.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,UAAU,wBAAwB,CAAC,OAAgB,EAAE,MAAiB;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,sCAAsC,CAAC,CAAC;IAEjG,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAEnF,MAAM;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sBAAsB,CAAC;SACnC,MAAM,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;SACrD,MAAM,CAAC,mBAAmB,EAAE,kBAAkB,CAAC;SAC/C,MAAM,CAAC,kBAAkB,EAAE,4BAA4B,EAAE,IAAI,CAAC;SAC9D,MAAM,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,UAAU,CAAC,4BAA4B,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC3C,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAC/B,UAAU,CAAC,4BAA4B,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAC3C,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,eAAe,CAAC,4BAA4B,CAAC;YAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,qBAAqB,CAAC,CAAC;YACpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,eAAe,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAChF,OAAO;aACP,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,0BAA0B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACrE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsD,CAAC;YAE1F,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAA8B,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;IAEJ,MAAM;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,mBAAmB,CAAC;SAChC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;SACzC,MAAM,CAAC,KAAK,IAAI,EAAE;QAClB,UAAU,CACT,6GAA6G;YAC5G,gDAAgD,CACjD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEJ,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAEnF,QAAQ;SACN,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wBAAwB,CAAC;SACrC,MAAM,CAAC,kBAAkB,EAAE,8BAA8B,EAAE,IAAI,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,UAAU,CAAC,4BAA4B,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC3C,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAC/B,UAAU,CAAC,4BAA4B,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAC3C,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,eAAe,CAAC,4BAA4B,CAAC;YAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,uBAAuB,CAAC,CAAC;YACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,eAAe,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAChF,OAAO;aACP,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,4BAA4B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YAEF,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAA8B,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;YAC/E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/storage.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { CliConfig } from "../config.js";
+export declare function registerStorageCommands(program: Command, config: CliConfig): void;
+//# sourceMappingURL=storage.d.ts.map

package/dist/cli/commands/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAyFjF"}

package/dist/cli/commands/storage.js

@@ -0,0 +1,85 @@
+import { EXIT_CODES } from "../config.js";
+import { getAuthHeaders } from "../utils/auth.js";
+import { getEffectiveConfig } from "../utils/command-config.js";
+import { fetchWithBackendHandling } from "../utils/fetcher.js";
+import { printError, printJson, printTable } from "../utils/output.js";
+export function registerStorageCommands(program, config) {
+    const storage = program.command("storage").description("Storage service commands");
+    const objects = storage.command("objects").description("Object operations");
+    objects
+        .command("list")
+        .description("List storage objects")
+        .option("--limit <number>", "Number of objects to return", "100")
+        .option("--cursor <cursor>", "Pagination cursor")
+        .option("--prefix <prefix>", "Filter by prefix")
+        .action(async (options, command) => {
+        if (!config.tenantId) {
+            printError("QNSP_TENANT_ID must be set");
+            process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+            return;
+        }
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            if (!effectiveConfig.tenantId) {
+                printError("QNSP_TENANT_ID must be set");
+                process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+                return;
+            }
+            const headers = await getAuthHeaders(effectiveConfig);
+            const storageUrl = effectiveConfig.storageServiceUrl;
+            const url = new URL(`${storageUrl}/storage/v1/documents`);
+            url.searchParams.set("limit", options.limit);
+            if (options.cursor) {
+                url.searchParams.set("cursor", options.cursor);
+            }
+            if (options.prefix) {
+                url.searchParams.set("prefix", options.prefix);
+            }
+            const response = await fetchWithBackendHandling(effectiveConfig, url.toString(), {
+                headers,
+            });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to list objects: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            const data = (await response.json());
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable((data.items ?? []));
+            }
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to list objects");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+    objects
+        .command("get")
+        .description("Get storage object metadata")
+        .argument("<objectId>", "Object identifier")
+        .action(async (_objectId) => {
+        printError("storage objects get is not available: storage-service does not expose GET /storage/v1/documents/:id. " +
+            "Use storage objects list or the document policy endpoints via the platform APIs.");
+        process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+    });
+    objects
+        .command("delete")
+        .description("Delete storage object")
+        .argument("<objectId>", "Object identifier")
+        .action(async (_objectId) => {
+        printError("storage objects delete is not available: storage-service does not expose a delete endpoint for documents. " +
+            "Use retention/lifecycle policies or administrative workflows.");
+        process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+    });
+}
+//# sourceMappingURL=storage.js.map

package/dist/cli/commands/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../src/cli/commands/storage.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,UAAU,uBAAuB,CAAC,OAAgB,EAAE,MAAiB;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAEnF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAE5E,OAAO;SACL,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sBAAsB,CAAC;SACnC,MAAM,CAAC,kBAAkB,EAAE,6BAA6B,EAAE,KAAK,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;SAChD,MAAM,CAAC,mBAAmB,EAAE,kBAAkB,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,UAAU,CAAC,4BAA4B,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC3C,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAC/B,UAAU,CAAC,4BAA4B,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAC3C,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,eAAe,CAAC,iBAAiB,CAAC;YACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,UAAU,uBAAuB,CAAC,CAAC;YAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,eAAe,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAChF,OAAO;aACP,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,2BAA2B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACtE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;YAE9D,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAA8B,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;YAC9E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;IAEJ,OAAO;SACL,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,6BAA6B,CAAC;SAC1C,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,EAAE;QACnC,UAAU,CACT,uGAAuG;YACtG,kFAAkF,CACnF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEJ,OAAO;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uBAAuB,CAAC;SACpC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,EAAE;QACnC,UAAU,CACT,4GAA4G;YAC3G,+DAA+D,CAChE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/tenant.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { CliConfig } from "../config.js";
+export declare function registerTenantCommands(program: Command, config: CliConfig): void;
+//# sourceMappingURL=tenant.d.ts.map

package/dist/cli/commands/tenant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/tenant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CA2FhF"}

package/dist/cli/commands/tenant.js

@@ -0,0 +1,82 @@
+import { EXIT_CODES } from "../config.js";
+import { getAuthHeaders } from "../utils/auth.js";
+import { getEffectiveConfig } from "../utils/command-config.js";
+import { fetchWithBackendHandling } from "../utils/fetcher.js";
+import { printError, printJson, printTable } from "../utils/output.js";
+export function registerTenantCommands(program, config) {
+    const tenant = program.command("tenant").description("Tenant service commands");
+    tenant
+        .command("get")
+        .description("Get tenant details")
+        .argument("<tenantId>", "Tenant identifier")
+        .action(async (tenantId, _options, command) => {
+        try {
+            const effectiveConfig = getEffectiveConfig(config, command);
+            if (!effectiveConfig.tenantId) {
+                printError("QNSP_TENANT_ID must be set");
+                process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+                return;
+            }
+            if (tenantId !== effectiveConfig.tenantId) {
+                printError("Cross-tenant access is not allowed from qnsp CLI. " +
+                    "The requested tenantId must match QNSP_TENANT_ID.");
+                process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+                return;
+            }
+            const headers = await getAuthHeaders(effectiveConfig);
+            const tenantUrl = effectiveConfig.tenantServiceUrl;
+            const response = await fetchWithBackendHandling(effectiveConfig, `${tenantUrl}/tenant/v1/tenants/${tenantId}`, { headers });
+            if (!response.ok && [429, 402, 403, 507].includes(response.status)) {
+                return;
+            }
+            if (response.status === 404) {
+                printError(`Tenant not found: ${tenantId}`);
+                process.exit(EXIT_CODES.NOT_FOUND);
+                return;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                printError(`Failed to get tenant: ${response.status} ${errorText}`);
+                process.exit(EXIT_CODES.GENERAL_ERROR);
+                return;
+            }
+            const data = await response.json();
+            if (effectiveConfig.outputFormat === "json") {
+                printJson(data);
+            }
+            else {
+                printTable(data);
+            }
+            process.exit(EXIT_CODES.SUCCESS);
+            return;
+        }
+        catch (error) {
+            printError(error instanceof Error ? error.message : "Failed to get tenant");
+            process.exit(EXIT_CODES.NETWORK_ERROR);
+            return;
+        }
+    });
+    tenant
+        .command("list")
+        .description("List tenants")
+        .option("--limit <number>", "Number of tenants to return", "100")
+        .option("--cursor <cursor>", "Pagination cursor")
+        .action(async () => {
+        printError("tenant list is unavailable in qnsp CLI to prevent cross-tenant enumeration. " +
+            "Use the Cloud Portal for tenant administration.");
+        process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+        return;
+    });
+    tenant
+        .command("create")
+        .description("Create a new tenant")
+        .requiredOption("--name <name>", "Tenant name")
+        .option("--tier <tier>", "Pricing tier", "free")
+        .action(async (_options) => {
+        printError("tenant create is not available in qnsp CLI. " +
+            "Use the Cloud Portal signup flow (or the platform APIs) for tenant provisioning.");
+        process.exit(EXIT_CODES.INVALID_ARGUMENTS);
+        return;
+    });
+}
+//# sourceMappingURL=tenant.js.map

package/dist/cli/commands/tenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../../../src/cli/commands/tenant.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,UAAU,sBAAsB,CAAC,OAAgB,EAAE,MAAiB;IACzE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAEhF,MAAM;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,oBAAoB,CAAC;SACjC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACrD,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAC/B,UAAU,CAAC,4BAA4B,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAC3C,OAAO;YACR,CAAC;YACD,IAAI,QAAQ,KAAK,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAC3C,UAAU,CACT,oDAAoD;oBACnD,mDAAmD,CACpD,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAC3C,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,eAAe,CAAC,gBAAgB,CAAC;YAEnD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC9C,eAAe,EACf,GAAG,SAAS,sBAAsB,QAAQ,EAAE,EAC5C,EAAE,OAAO,EAAE,CACX,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7B,UAAU,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACnC,OAAO;YACR,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,UAAU,CAAC,yBAAyB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBACvC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,IAAI,eAAe,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,UAAU,CAAC,IAA+B,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;YAC5E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACvC,OAAO;QACR,CAAC;IACF,CAAC,CAAC,CAAC;IAEJ,MAAM;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,cAAc,CAAC;SAC3B,MAAM,CAAC,kBAAkB,EAAE,6BAA6B,EAAE,KAAK,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;SAChD,MAAM,CAAC,KAAK,IAAI,EAAE;QAClB,UAAU,CACT,8EAA8E;YAC7E,iDAAiD,CAClD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC3C,OAAO;IACR,CAAC,CAAC,CAAC;IAEJ,MAAM;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,qBAAqB,CAAC;SAClC,cAAc,CAAC,eAAe,EAAE,aAAa,CAAC;SAC9C,MAAM,CAAC,eAAe,EAAE,cAAc,EAAE,MAAM,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC1B,UAAU,CACT,8CAA8C;YAC7C,kFAAkF,CACnF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC3C,OAAO;IACR,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/test-utils.d.ts

@@ -0,0 +1,15 @@
+import type { Mock, MockInstance } from "vitest";
+import type { CliConfig } from "../config.js";
+/** Explicit return type for setupTestEnvironment to avoid non-portable inferred types from @vitest/spy. */
+export interface TestEnvironment {
+    readonly mockFetch: Mock;
+    readonly mockExit: MockInstance;
+    readonly mockLog: MockInstance;
+    readonly mockError: MockInstance;
+    readonly mockTable: MockInstance;
+    readonly cleanup: () => void;
+}
+export declare function createMockResponse(data: unknown, status?: number, ok?: boolean, headers?: Record<string, string>): Response;
+export declare const mockConfig: CliConfig;
+export declare function setupTestEnvironment(): TestEnvironment;
+//# sourceMappingURL=test-utils.d.ts.map

package/dist/cli/commands/test-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-utils.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/test-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,2GAA2G;AAC3G,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC7B;AAGD,wBAAgB,kBAAkB,CACjC,IAAI,EAAE,OAAO,EACb,MAAM,SAAM,EACZ,EAAE,UAAO,EACT,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAClC,QAAQ,CAgBV;AAED,eAAO,MAAM,UAAU,EAAE,SAmBxB,CAAC;AAEF,wBAAgB,oBAAoB,IAAI,eAAe,CAmCtD"}

package/dist/cli/commands/test-utils.js

@@ -0,0 +1,72 @@
+import { vi } from "vitest";
+// Helper to create Response objects that can be cloned
+export function createMockResponse(data, status = 200, ok = true, headers = {}) {
+    const body = JSON.stringify(data);
+    const responseHeaders = new Headers(headers);
+    // Create a response that mimics the Fetch API Response object
+    // tailored for our tests which use clone()
+    return {
+        ok,
+        status,
+        headers: responseHeaders,
+        json: async () => JSON.parse(body),
+        text: async () => body,
+        clone() {
+            return createMockResponse(data, status, ok, headers);
+        },
+    };
+}
+export const mockConfig = {
+    edgeGatewayUrl: null,
+    cloudPortalUrl: "https://cloud.qnsp.cuilabs.io",
+    authServiceUrl: "http://localhost:8081",
+    serviceId: "test-service-id",
+    serviceSecret: "test-secret",
+    tenantId: "test-tenant",
+    kmsServiceUrl: "http://localhost:8095",
+    vaultServiceUrl: "http://localhost:8090",
+    auditServiceUrl: "http://localhost:8103",
+    tenantServiceUrl: "http://localhost:8108",
+    billingServiceUrl: "http://localhost:8106/billing",
+    accessControlServiceUrl: "http://localhost:8102",
+    securityMonitoringServiceUrl: "http://localhost:8104",
+    storageServiceUrl: "http://localhost:8092",
+    searchServiceUrl: "http://localhost:8101",
+    observabilityServiceUrl: "http://localhost:8105",
+    outputFormat: "json",
+    verbose: false,
+};
+export function setupTestEnvironment() {
+    const mockFetch = vi.fn();
+    const mockExit = vi.spyOn(process, "exit").mockImplementation(() => undefined);
+    const mockLog = vi.spyOn(console, "log").mockImplementation(() => { });
+    const mockError = vi.spyOn(console, "error").mockImplementation(() => { });
+    const mockTable = vi.spyOn(console, "table").mockImplementation(() => { });
+    // Intercept global fetch
+    global.fetch = mockFetch;
+    // Override process.stdin.isTTY
+    Object.defineProperty(process.stdin, "isTTY", {
+        value: false,
+        configurable: true,
+    });
+    // Reset NODE_ENV to development to avoid HTTPS validation exit
+    const originalNodeEnv = process.env["NODE_ENV"];
+    process.env["NODE_ENV"] = "development";
+    return {
+        mockFetch,
+        mockExit,
+        mockLog,
+        mockError,
+        mockTable,
+        cleanup: () => {
+            if (originalNodeEnv === undefined) {
+                delete process.env["NODE_ENV"];
+            }
+            else {
+                process.env["NODE_ENV"] = originalNodeEnv;
+            }
+            vi.restoreAllMocks();
+        },
+    };
+}
+//# sourceMappingURL=test-utils.js.map