@ivora/cli 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Ivora
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,121 @@
-# Temporary Holding Version
+# Ivora CLI
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+`ivora` is the command-line client for the public Ivora `/v1` API. It is meant for developers
+and operators who manage charging stations, run OCPP diagnostics, test webhooks and migrate
+charger networks from a terminal or a script.
+
+The package will be published on npm as `@ivora/cli`, with the command `ivora`.
+
+## Status
+
+**v0.1 (first release, read-only).** This repository holds the build, test and CI setup and the shared
+library stubs (HTTP client, output, profiles, secret redaction, confirmations). Implemented so
+far: `ivora login`, `ivora profiles`, `ivora whoami` and the read-only resource commands below. Nothing has been published to npm. Do not use it against a live
+account.
+
+Planned for the first release (v0.1):
+
+- `ivora login` with an API key, profiles for the test and live environments, `ivora whoami`
+- station resources: list, show, add, connect, decommission
+- remote commands: trigger, reset, unlock, start, stop, with confirmations
+- `ivora logs tail` (OCPP message log) and `ivora listen` (forward webhook events to a local URL)
+- tariff quotes and simulations, webhook endpoints, and `ivora api` for any public `/v1` path
+
+The CLI only calls the public `/v1` API. It has no staff or admin commands.
+
+## Authentication
+
+```sh
+printf '%s' "$KEY" | ivora login          # or type it at the hidden prompt
+ivora --live login                          # live is an explicit opt-in
+ivora whoami
+ivora profiles list | use <name> | remove <name>
+```
+
+- Keys are never accepted as command-line arguments. `ivora login` reads one from stdin, a
+  hidden prompt or `IVORA_API_KEY`, checks it with `GET /v1/access`, and stores it in the OS
+  keychain (macOS Keychain, or `secret-tool` on Linux). If there is no keychain the CLI refuses
+  to save the key rather than writing it to disk; use `IVORA_API_KEY` instead.
+- The config file (`~/.config/ivora/config.toml`) holds profile names, environments and key
+  references only, never keys.
+- Test keys (`iv_test_`) work with test profiles and live keys (`iv_live_`) with live profiles.
+  A live profile is never the default: pass `--live` (or `--profile <name>`) every time.
+
+## Read-only resources
+
+```sh
+ivora stations list [--name N] [--charger-id ID] [--limit N] [--after CURSOR] [--all]
+ivora stations get <station-id>
+ivora operations list [--status S] [--kind K] [--actor A] [--station-id ID] [--before CURSOR]
+ivora operations get <operation-id>
+ivora tariffs list [--include-archived] | get <tariff-id>
+ivora tariffs quote <tariff-id> --session session.json     # a read-only price computation
+ivora tariffs simulate --tariff tariff.json --session session.json
+ivora webhooks list | get <webhook-id>
+ivora api                                                   # list the callable operationIds
+ivora api locations_read_one_location --path location_id=1
+```
+
+- Output is a table by default and JSON with `--json`. List commands show one page and print the
+  next cursor on stderr; `--all` follows every page. In `--json` output `next_cursor` is `null`
+  once the listing has reached its end.
+- With `--json`, results go to stdout as JSON; errors stay plain text on stderr
+  (`error: ...`), and the exit code tells scripts what happened.
+- Commands use the key's only tenant, or `--tenant <id>` when it reaches several.
+- `ivora api <operationId>` calls only GET operations from the built-in catalog and prints JSON.
+  Anything that writes or controls a charger is refused until after the first publish.
+- Exit codes: 0 ok, 1 API or network error, 2 usage, 4 timeout, 5 authentication. Errors show the
+  API's error code and request id.
+
+## Install from source
+
+Requirements: Node.js 22.12 or later and npm.
+
+```sh
+git clone https://github.com/Ivora-Charge/ivora-cli.git
+cd ivora-cli
+npm ci
+npm run build
+node dist/bin/ivora.js --help
+
+# optional: put `ivora` on your PATH
+npm link
+ivora --version
+```
+
+The default API endpoint is `https://api.ivoracharge.com`. Set `IVORA_API_BASE` (or
+`ivora login --base-url`) to point a test profile at another environment. Live profiles ignore
+`IVORA_API_BASE`, so a leftover test URL never receives a live key; a live profile uses the URL
+stored with `ivora --live login --base-url` or the default.
+
+## Development
+
+```sh
+npm ci          # install the locked dependencies
+npm run build   # type-check and compile src/ to dist/
+npm test        # unit tests and the mock /v1 server tests (no network)
+npm run lint    # ESLint and Prettier checks
+npm run format  # apply Prettier
+```
+
+Tests use the Node.js built-in test runner (`node:test`) against a local mock of the `/v1`
+API in `test/mock-server.ts`. No test talks to a real API.
+
+## Contributing
+
+Issues and pull requests are welcome. Before you open a pull request:
+
+- run `npm run build`, `npm test` and `npm run lint`;
+- keep dependencies few, and do not add packages with install scripts;
+- never include API keys, station passwords, webhook secrets or customer data in code, tests,
+  fixtures or issues. Use obviously fake values in tests.
+
+By contributing you agree that your contribution is licensed under the Apache License 2.0.
+
+## Security
+
+Please do not report security problems in public issues. See [SECURITY.md](SECURITY.md).
+
+## License
+
+Apache License 2.0. See [LICENSE](LICENSE).

package/dist/bin/ivora.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { run } from '../cli.js';
+process.exitCode = await run(process.argv.slice(2));

package/dist/catalog.js

@@ -0,0 +1,170 @@
+/**
+ * The command catalog: every (method, path) in the API spec is either mapped to a command or
+ * excluded with a reason. The catalog test fails on a spec operation that is neither, so a new
+ * API operation is a deliberate decision. Resource commands fill this in from the OpenAPI
+ * snapshot; the scaffold lists only the operations the first commands use.
+ */
+const T = '/v1/tenants/{tenant_id}';
+export const COMMANDS = [
+    {
+        method: 'GET',
+        path: '/v1/access',
+        command: 'whoami',
+        operationId: 'access_and_api_keys_discover_current_csms_access',
+    },
+    {
+        method: 'GET',
+        path: '/v1/capabilities',
+        command: 'whoami',
+        operationId: 'getting_started_capabilities',
+    },
+    {
+        method: 'GET',
+        path: `${T}/stations`,
+        command: 'stations list',
+        operationId: 'stations_list_tenant_charging_stations',
+    },
+    {
+        method: 'GET',
+        path: `${T}/stations/{station_id}`,
+        command: 'stations get',
+        operationId: 'stations_read_station_and_connector_state',
+    },
+    {
+        method: 'POST',
+        path: `${T}/stations`,
+        command: 'stations add',
+        operationId: 'stations_register_a_station_and_return_it',
+    },
+    {
+        method: 'GET',
+        path: `${T}/tariffs`,
+        command: 'tariffs list',
+        operationId: 'tariffs_and_bills_read_tenant_billing_tariffs',
+    },
+    {
+        method: 'GET',
+        path: `${T}/tariffs/{tariff_id}`,
+        command: 'tariffs get',
+        operationId: 'tariffs_and_bills_read_one_tariff',
+    },
+    {
+        method: 'POST',
+        path: `${T}/tariffs/{tariff_id}/quote`,
+        command: 'tariffs quote',
+        operationId: 'tariffs_and_bills_quote_a_session_s_cost_under_a_stored_tariff',
+    },
+    {
+        method: 'POST',
+        path: `${T}/tariffs/simulate`,
+        command: 'tariffs simulate',
+        operationId: 'tariffs_and_bills_simulate_a_tariff_draft_against_a_session',
+    },
+    {
+        method: 'GET',
+        path: `${T}/operations`,
+        command: 'operations list',
+        operationId: 'charging_and_operations_list_the_project_s_operations',
+    },
+    {
+        method: 'GET',
+        path: `${T}/operations/{operation_id}`,
+        command: 'operations get',
+        operationId: 'charging_and_operations_inspect_an_operation_without_redispatching_it',
+    },
+    {
+        method: 'GET',
+        path: `${T}/webhooks`,
+        command: 'webhooks list',
+        operationId: 'webhooks_and_events_list_webhook_endpoints',
+    },
+    {
+        method: 'GET',
+        path: `${T}/webhooks/{webhook_id}`,
+        command: 'webhooks get',
+        operationId: 'webhooks_and_events_read_one_webhook_endpoint',
+    },
+    // Other read-only (GET) operations, reachable through `ivora api <operationId>`.
+    {
+        method: 'GET',
+        path: `${T}/webhooks/{webhook_id}/deliveries`,
+        command: 'api',
+        operationId: 'webhooks_and_events_read_delivery_attempts_for_an_endpoint',
+    },
+    {
+        method: 'GET',
+        path: `${T}/events`,
+        command: 'api',
+        operationId: 'webhooks_and_events_poll_tenant_events_by_cursor',
+    },
+    {
+        method: 'GET',
+        path: `${T}/locations`,
+        command: 'api',
+        operationId: 'locations_list_tenant_locations',
+    },
+    {
+        method: 'GET',
+        path: `${T}/locations/{location_id}`,
+        command: 'api',
+        operationId: 'locations_read_one_location',
+    },
+    {
+        method: 'GET',
+        path: `${T}/transactions`,
+        command: 'api',
+        operationId: 'charging_and_operations_read_charging_usage_and_realized_billing',
+    },
+    {
+        method: 'GET',
+        path: `${T}/transactions/{transaction_id}`,
+        command: 'api',
+        operationId: 'charging_and_operations_read_one_transaction_in_detail',
+    },
+    {
+        method: 'GET',
+        path: '/v1/currencies',
+        command: 'api',
+        operationId: 'tariffs_and_bills_list_the_supported_currencies',
+    },
+];
+/** Looks up a cataloged operation by operationId. */
+export function findOperation(operationId) {
+    return COMMANDS.find((c) => c.operationId === operationId);
+}
+/** The operationIds `ivora api` may call: cataloged GET operations only. */
+export function getOperationIds() {
+    return COMMANDS.filter((c) => c.method === 'GET' && c.operationId).map((c) => c.operationId);
+}
+/** Names of the `{param}` placeholders in a path template. */
+export function pathParams(path) {
+    return [...path.matchAll(/\{([^}]+)\}/g)].map((m) => m[1]);
+}
+export const EXCLUDED = [];
+/** Path prefixes that are never commands (the CLI ships no staff commands). */
+export const EXCLUDED_PREFIXES = ['/v1/admin', '/v1/host', '/v1/internal'];
+const HTTP_METHODS = ['get', 'put', 'post', 'patch', 'delete'];
+export function specOperations(spec) {
+    const ops = [];
+    for (const [path, item] of Object.entries(spec.paths ?? {})) {
+        for (const m of HTTP_METHODS) {
+            if (item[m] !== undefined)
+                ops.push({ method: m.toUpperCase(), path });
+        }
+    }
+    return ops;
+}
+function isExcludedPrefix(path) {
+    return EXCLUDED_PREFIXES.some((p) => path === p || path.startsWith(`${p}/`));
+}
+export function checkCatalog(spec, commands = COMMANDS, excluded = EXCLUDED) {
+    const key = (o) => `${o.method} ${o.path}`;
+    const specOps = specOperations(spec);
+    const ops = new Set(specOps.map(key));
+    const listed = new Set([...commands, ...excluded].map(key));
+    return {
+        unlisted: specOps.filter((op) => !listed.has(key(op)) && !isExcludedPrefix(op.path)).map(key),
+        unknown: [...listed].filter((op) => !ops.has(op)),
+        staff: commands.filter((c) => isExcludedPrefix(c.path)).map(key),
+    };
+}

package/dist/cli.js

@@ -0,0 +1,156 @@
+import { Command, CommanderError, InvalidArgumentError, Option } from 'commander';
+import { CliError, ExitCode, Output } from './lib/output.js';
+import { ttyPrompter } from './lib/confirm.js';
+import { openSecretStore } from './lib/secrets.js';
+import { loginCommand } from './commands/login.js';
+import { profilesCommand } from './commands/profiles.js';
+import { whoamiCommand } from './commands/whoami.js';
+import { stationsCommand } from './commands/stations.js';
+import { operationsCommand } from './commands/operations.js';
+import { tariffsCommand } from './commands/tariffs.js';
+import { webhooksCommand } from './commands/webhooks.js';
+import { apiCommand } from './commands/api.js';
+import { validateIdempotencyKey } from './lib/http.js';
+import { CLI_VERSION, DEFAULT_API_VERSION, SUPPORTED_API_VERSIONS, isSupportedApiVersion, } from './version.js';
+/** Reads a line from the terminal without echoing it. */
+function readHiddenLine(input, stderr, prompt) {
+    return new Promise((resolve, reject) => {
+        stderr.write(prompt);
+        let line = '';
+        const finish = (fn) => {
+            input.setRawMode(false);
+            input.pause();
+            input.off('data', onData);
+            stderr.write('\n');
+            fn();
+        };
+        const onData = (chunk) => {
+            for (const ch of chunk.toString('utf8')) {
+                if (ch === '\r' || ch === '\n' || ch === '\u0004')
+                    return finish(() => resolve(line));
+                if (ch === '\u0003')
+                    return finish(() => reject(new CliError('Cancelled.', ExitCode.ConfirmRefused)));
+                if (ch === '\u007f' || ch === '\b')
+                    line = line.slice(0, -1);
+                else
+                    line += ch;
+            }
+        };
+        input.setRawMode(true);
+        input.resume();
+        input.on('data', onData);
+    });
+}
+export function versionText() {
+    return `ivora ${CLI_VERSION} (API ${DEFAULT_API_VERSION})`;
+}
+function parseApiVersion(value) {
+    if (!isSupportedApiVersion(value)) {
+        throw new InvalidArgumentError(`supported versions: ${SUPPORTED_API_VERSIONS.join(', ')}`);
+    }
+    return value;
+}
+function parseIdempotencyKey(value) {
+    try {
+        return validateIdempotencyKey(value);
+    }
+    catch (err) {
+        throw new InvalidArgumentError(err.message);
+    }
+}
+/** Subcommands do not inherit exitOverride and output settings; without them they exit the process. */
+function inheritSettings(parent) {
+    for (const sub of parent.commands) {
+        sub.copyInheritedSettings(parent);
+        inheritSettings(sub);
+    }
+}
+export function buildProgram(io = {
+    stdout: process.stdout,
+    stderr: process.stderr,
+}) {
+    const program = new Command('ivora')
+        .description('Command-line client for the public Ivora /v1 API (pre-alpha).')
+        .version(versionText(), '-v, --version', 'print the CLI and API versions')
+        .option('--profile <name>', 'profile to use (default: the current profile, else "test")')
+        .option('--live', 'use the live profile')
+        .option('--json', 'machine-readable output on stdout')
+        .option('-y, --yes', 'skip confirmation prompts (required for writes that ask when not on a TTY)')
+        .addOption(new Option('--idempotency-key <key>', 'Idempotency-Key for the write request').argParser(parseIdempotencyKey))
+        .addOption(new Option('--api-version <date>', 'dated API version to send as Ivora-Version')
+        .default(DEFAULT_API_VERSION)
+        .argParser(parseApiVersion))
+        .option('--debug', 'print requests and responses to stderr, with credentials redacted')
+        .showHelpAfterError('(run "ivora --help" for usage)')
+        .exitOverride()
+        .configureOutput({
+        writeOut: (s) => io.stdout.write(s),
+        writeErr: (s) => io.stderr.write(s),
+    })
+        .action(function () {
+        io.stdout.write(this.helpInformation());
+    });
+    const env = io.env ?? process.env;
+    const stdin = io.stdin ?? process.stdin;
+    let store = io.secrets;
+    const ctx = {
+        stdout: io.stdout,
+        stderr: io.stderr,
+        stdin,
+        env,
+        prompter: io.prompter ?? ttyPrompter(),
+        readSecret: io.readSecret ?? ((prompt) => readHiddenLine(stdin, io.stderr, prompt)),
+        secrets: async () => (store ??= await openSecretStore()),
+        ...(io.fetch ? { fetch: io.fetch } : {}),
+        globals: () => program.opts(),
+        out: () => new Output({
+            stdout: io.stdout,
+            stderr: io.stderr,
+            env,
+            json: program.opts().json,
+        }),
+    };
+    program
+        .addCommand(loginCommand(ctx))
+        .addCommand(profilesCommand(ctx))
+        .addCommand(whoamiCommand(ctx))
+        .addCommand(stationsCommand(ctx))
+        .addCommand(operationsCommand(ctx))
+        .addCommand(tariffsCommand(ctx))
+        .addCommand(webhooksCommand(ctx));
+    program.addCommand(apiCommand(ctx));
+    inheritSettings(program);
+    return program;
+}
+/** Runs the CLI and returns the exit code. Never calls process.exit. */
+export async function run(argv, io = {}) {
+    const stdout = io.stdout ?? process.stdout;
+    const stderr = io.stderr ?? process.stderr;
+    const program = buildProgram({ ...io, stdout, stderr });
+    try {
+        await program.parseAsync(argv, { from: 'user' });
+        return ExitCode.Ok;
+    }
+    catch (err) {
+        if (err instanceof CommanderError) {
+            if (err.code === 'commander.version' ||
+                err.code === 'commander.helpDisplayed' ||
+                err.code === 'commander.help') {
+                return ExitCode.Ok;
+            }
+            return ExitCode.Usage;
+        }
+        const out = new Output({
+            stdout,
+            stderr,
+            env: io.env,
+            json: program.opts().json,
+        });
+        if (err instanceof CliError) {
+            out.error(err.message);
+            return err.exitCode;
+        }
+        out.error(err instanceof Error ? err.message : String(err));
+        return ExitCode.ApiError;
+    }
+}