@mainwp/control 1.0.0

package/dist/core/safety-controller.js

@@ -0,0 +1,229 @@
+/**
+ * Safety Controller for mainwpcontrol
+ *
+ * Enforces the destructive action protocol defined in PLAN.md:
+ * - Safety check happens BEFORE any network call
+ * - dry_run and confirm are mutually exclusive
+ * - Destructive abilities require preview first
+ *
+ * INVARIANT: AI is the primary interaction surface, NOT the execution authority.
+ */
+import { MutualExclusionError, ConfirmationRequiredError } from '../utils/errors.js';
+/**
+ * Safety Controller class
+ *
+ * SAFETY RULES (HARD - from PLAN.md §2.1):
+ * 1. If destructive === true:
+ *    - dry_run: true → preview mode
+ *    - confirm: true → execution mode
+ *    - Neither → error mainwp_confirmation_required
+ * 2. dry_run and confirm are MUTUALLY EXCLUSIVE
+ * 3. Safety check happens BEFORE any network call
+ */
+/** Default annotations for abilities without explicit metadata */
+const DEFAULT_ANNOTATIONS = {
+    readonly: false,
+    destructive: false,
+    idempotent: false,
+};
+export class SafetyController {
+    /**
+     * Classify an ability's safety requirements
+     *
+     * Safety classification derives ONLY from ability annotations.
+     * No heuristics are permitted.
+     */
+    classify(ability) {
+        const annotations = this.validateAnnotations(ability.meta?.annotations ?? DEFAULT_ANNOTATIONS);
+        // SECURITY: Defense-in-depth — force destructive classification for
+        // abilities whose names match known-destructive patterns, regardless
+        // of what the API reports. Prevents a compromised server from
+        // downgrading destructive abilities to bypass the safety flow.
+        const destructive = annotations.destructive || this.isKnownDestructivePattern(ability.name);
+        const readonly_ = destructive ? false : annotations.readonly;
+        return {
+            isDestructive: destructive,
+            isReadOnly: readonly_,
+            isIdempotent: annotations.idempotent,
+            requiresSafetyFlow: destructive && !readonly_,
+        };
+    }
+    /**
+     * Known-destructive ability name patterns.
+     * These abilities require the safety flow regardless of API-reported annotations.
+     */
+    static DESTRUCTIVE_PATTERNS = [
+        /^(?:mainwp\/)?delete-/,
+        /^(?:mainwp\/)?disconnect-/,
+        /^(?:mainwp\/)?suspend-/,
+        /^(?:mainwp\/)?deactivate-/,
+        /^(?:mainwp\/)?remove-/,
+        /^(?:mainwp\/)?run-updates-/,
+        /^(?:mainwp\/)?update-all-/,
+    ];
+    isKnownDestructivePattern(name) {
+        return SafetyController.DESTRUCTIVE_PATTERNS.some(pattern => pattern.test(name));
+    }
+    /**
+     * Validate annotation fields and resolve contradictions.
+     *
+     * - Non-boolean values fall back to safe defaults.
+     * - Contradictory annotations (destructive + readonly) → warn and treat as destructive.
+     */
+    validateAnnotations(annotations) {
+        const defaults = DEFAULT_ANNOTATIONS;
+        const destructive = typeof annotations.destructive === 'boolean'
+            ? annotations.destructive : defaults.destructive;
+        let readonly_ = typeof annotations.readonly === 'boolean'
+            ? annotations.readonly : defaults.readonly;
+        const idempotent = typeof annotations.idempotent === 'boolean'
+            ? annotations.idempotent : defaults.idempotent;
+        // Contradictory: both destructive and readonly — treat as destructive (safe default)
+        if (destructive && readonly_) {
+            console.error('Warning: Ability has contradictory annotations (destructive + readonly). ' +
+                'Treating as destructive for safety.');
+            readonly_ = false;
+        }
+        return { destructive, readonly: readonly_, idempotent };
+    }
+    /**
+     * Check if an ability requires the safety flow
+     */
+    requiresSafetyFlow(ability) {
+        return this.classify(ability).requiresSafetyFlow;
+    }
+    /**
+     * Validate execution flags BEFORE any network call
+     *
+     * @throws MutualExclusionError if dry_run and confirm are both true
+     * @throws InputError if destructive ability has neither flag
+     */
+    validateExecutionFlags(ability, dryRun, confirm) {
+        // RULE 2: Mutual exclusion check
+        if (dryRun === true && confirm === true) {
+            throw new MutualExclusionError('dry_run and confirm are mutually exclusive', 'Use either --dry-run (preview) or --confirm (execute), not both');
+        }
+        const classification = this.classify(ability);
+        // RULE 1: Destructive abilities require explicit flag
+        if (classification.requiresSafetyFlow) {
+            if (dryRun !== true && confirm !== true) {
+                throw new ConfirmationRequiredError(`Destructive ability "${ability.name}" requires --dry-run (preview) or --confirm (execute).`, undefined, 'Use --dry-run to preview changes or --confirm to execute');
+            }
+        }
+    }
+    /**
+     * Determine execution intent from flags
+     */
+    determineIntent(dryRun, confirm) {
+        if (dryRun === true) {
+            return { mode: 'preview' };
+        }
+        if (confirm === true) {
+            return { mode: 'execute' };
+        }
+        return { mode: 'auto' };
+    }
+    /**
+     * Check if execution should proceed directly (without preview)
+     *
+     * Returns true for:
+     * - Read-only abilities
+     * - Explicit confirm flag
+     * - Non-destructive abilities
+     */
+    shouldExecuteDirectly(ability, dryRun, confirm) {
+        const classification = this.classify(ability);
+        // Read-only abilities always execute directly
+        if (classification.isReadOnly) {
+            return true;
+        }
+        // Explicit confirm flag means execute
+        if (confirm === true) {
+            return true;
+        }
+        // Non-destructive abilities execute directly
+        if (!classification.requiresSafetyFlow) {
+            return true;
+        }
+        // Preview mode
+        if (dryRun === true) {
+            return false;
+        }
+        // Destructive without flags - this should have been caught by validateExecutionFlags
+        return false;
+    }
+    /**
+     * Format a preview result from API response
+     */
+    formatPreviewResult(ability, input, apiResult) {
+        // Extract affected items from result
+        const data = apiResult.data;
+        const affected = this.extractAffectedItems(data);
+        return {
+            affected,
+            summary: this.generatePreviewSummary(ability, affected),
+            requiresApproval: true,
+            abilityName: ability.name,
+            input,
+        };
+    }
+    /**
+     * Extract affected items from API preview response
+     */
+    extractAffectedItems(data) {
+        if (!data) {
+            return [];
+        }
+        // Common patterns for affected items
+        if (Array.isArray(data['affected'])) {
+            return data['affected'];
+        }
+        if (Array.isArray(data['items'])) {
+            return data['items'];
+        }
+        if (Array.isArray(data['sites'])) {
+            return data['sites'];
+        }
+        if (Array.isArray(data['data'])) {
+            return data['data'];
+        }
+        // Single item preview
+        if (data['preview']) {
+            return [data['preview']];
+        }
+        return [];
+    }
+    /** Ability name keywords → past-tense action verbs */
+    static ACTION_VERBS = [
+        ['delete', 'deleted'], ['remove', 'removed'], ['update', 'updated'],
+        ['deactivate', 'deactivated'], ['activate', 'activated'],
+        ['suspend', 'suspended'], ['disconnect', 'disconnected'],
+    ];
+    /**
+     * Generate human-readable preview summary
+     */
+    generatePreviewSummary(ability, affected) {
+        const count = affected.length;
+        const name = ability.name.toLowerCase();
+        const action = SafetyController.ACTION_VERBS.find(([k]) => name.includes(k))?.[1] ?? 'affected';
+        if (count === 0)
+            return `No items would be ${action}.`;
+        if (count === 1)
+            return `1 item would be ${action}.`;
+        return `${count} items would be ${action}.`;
+    }
+}
+/**
+ * Singleton instance
+ */
+let instance = null;
+/**
+ * Get the safety controller singleton
+ */
+export function getSafetyController() {
+    if (!instance) {
+        instance = new SafetyController();
+    }
+    return instance;
+}
+//# sourceMappingURL=safety-controller.js.map

package/dist/core/safety-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-controller.js","sourceRoot":"","sources":["../../src/core/safety-controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAwCrF;;;;;;;;;;GAUG;AACH,kEAAkE;AAClE,MAAM,mBAAmB,GAAuB;IAC9C,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,KAAK;IAClB,UAAU,EAAE,KAAK;CAClB,CAAC;AAEF,MAAM,OAAO,gBAAgB;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,OAAgB;QACvB,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAC1C,OAAO,CAAC,IAAI,EAAE,WAAW,IAAI,mBAAmB,CACjD,CAAC;QAEF,oEAAoE;QACpE,qEAAqE;QACrE,8DAA8D;QAC9D,+DAA+D;QAC/D,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,IAAI,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5F,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;QAE7D,OAAO;YACL,aAAa,EAAE,WAAW;YAC1B,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,WAAW,CAAC,UAAU;YACpC,kBAAkB,EAAE,WAAW,IAAI,CAAC,SAAS;SAC9C,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,MAAM,CAAU,oBAAoB,GAAG;QAC7C,uBAAuB;QACvB,2BAA2B;QAC3B,wBAAwB;QACxB,2BAA2B;QAC3B,uBAAuB;QACvB,4BAA4B;QAC5B,2BAA2B;KAC5B,CAAC;IAEM,yBAAyB,CAAC,IAAY;QAC5C,OAAO,gBAAgB,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CAAC,WAA+B;QACzD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QAErC,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,WAAW,KAAK,SAAS;YAC9D,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnD,IAAI,SAAS,GAAG,OAAO,WAAW,CAAC,QAAQ,KAAK,SAAS;YACvD,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7C,MAAM,UAAU,GAAG,OAAO,WAAW,CAAC,UAAU,KAAK,SAAS;YAC5D,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAEjD,qFAAqF;QACrF,IAAI,WAAW,IAAI,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CACX,2EAA2E;gBAC3E,qCAAqC,CACtC,CAAC;YACF,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,OAAgB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACH,sBAAsB,CACpB,OAAgB,EAChB,MAAgB,EAChB,OAAiB;QAEjB,iCAAiC;QACjC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,oBAAoB,CAC5B,4CAA4C,EAC5C,iEAAiE,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE9C,sDAAsD;QACtD,IAAI,cAAc,CAAC,kBAAkB,EAAE,CAAC;YACtC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACxC,MAAM,IAAI,yBAAyB,CACjC,wBAAwB,OAAO,CAAC,IAAI,wDAAwD,EAC5F,SAAS,EACT,0DAA0D,CAC3D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,MAAgB,EAAE,OAAiB;QACjD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED;;;;;;;OAOG;IACH,qBAAqB,CACnB,OAAgB,EAChB,MAAgB,EAChB,OAAiB;QAEjB,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE9C,8CAA8C;QAC9C,IAAI,cAAc,CAAC,UAAU,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sCAAsC;QACtC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,eAAe;QACf,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qFAAqF;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAgB,EAChB,KAA8B,EAC9B,SAA0B;QAE1B,qCAAqC;QACrC,MAAM,IAAI,GAAG,SAAS,CAAC,IAA2C,CAAC;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAEjD,OAAO;YACL,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC;YACvD,gBAAgB,EAAE,IAAI;YACtB,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,KAAK;SACN,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,IAAyC;QACpE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,qCAAqC;QACrC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAED,sBAAsB;QACtB,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,sDAAsD;IAC9C,MAAM,CAAU,YAAY,GAAuB;QACzD,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;QACnE,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;QACxD,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC;KACzD,CAAC;IAEF;;OAEG;IACK,sBAAsB,CAAC,OAAgB,EAAE,QAAmB;QAClE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;QAEhG,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,qBAAqB,MAAM,GAAG,CAAC;QACvD,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,mBAAmB,MAAM,GAAG,CAAC;QACrD,OAAO,GAAG,KAAK,mBAAmB,MAAM,GAAG,CAAC;IAC9C,CAAC;;AAIH;;GAEG;AACH,IAAI,QAAQ,GAA4B,IAAI,CAAC;AAE7C;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/hooks/command-not-found.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Oclif hook: command_not_found
+ *
+ * Provides helpful suggestions when a user enters an unknown command:
+ * 1. Ability names typed as commands → suggest `abilities run <name>`
+ * 2. Typos in known commands → "Did you mean ...?"
+ * 3. Everything else → generic error with help hint
+ */
+import { Hook } from '@oclif/core';
+declare const hook: Hook<'command_not_found'>;
+export default hook;
+//# sourceMappingURL=command-not-found.d.ts.map

package/dist/hooks/command-not-found.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-not-found.d.ts","sourceRoot":"","sources":["../../src/hooks/command-not-found.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAuBnC,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,mBAAmB,CA2CnC,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/hooks/command-not-found.js

@@ -0,0 +1,58 @@
+/**
+ * Oclif hook: command_not_found
+ *
+ * Provides helpful suggestions when a user enters an unknown command:
+ * 1. Ability names typed as commands → suggest `abilities run <name>`
+ * 2. Typos in known commands → "Did you mean ...?"
+ * 3. Everything else → generic error with help hint
+ */
+import { ExitCode } from '../utils/exit-codes.js';
+/** Simple Levenshtein distance (no external deps) */
+function levenshtein(a, b) {
+    const m = a.length;
+    const n = b.length;
+    const dp = Array.from({ length: m + 1 }, () => Array(n + 1).fill(0));
+    for (let i = 0; i <= m; i++)
+        dp[i][0] = i;
+    for (let j = 0; j <= n; j++)
+        dp[0][j] = j;
+    for (let i = 1; i <= m; i++) {
+        for (let j = 1; j <= n; j++) {
+            dp[i][j] =
+                a[i - 1] === b[j - 1]
+                    ? dp[i - 1][j - 1]
+                    : 1 + Math.min(dp[i - 1][j], dp[i][j - 1], dp[i - 1][j - 1]);
+        }
+    }
+    return dp[m][n];
+}
+const hook = async function ({ id, config }) {
+    // Strip common prefix mistakes (e.g., "mainwp/list-updates-v1")
+    const name = id.replace(/^mainwp\//, '');
+    // Ability name pattern: suggest abilities run
+    if (/-v\d+$/.test(name)) {
+        const suggestion = `${config.bin} abilities run ${name}`;
+        this.error(`"${id}" is not a command. It looks like an ability name.\n\nRun it with:\n  ${suggestion}`, { exit: ExitCode.INPUT_ERROR });
+    }
+    // Find closest matching command using Levenshtein distance
+    const commandIDs = [
+        ...config.commandIDs,
+        ...config.commands.flatMap((c) => c.aliases),
+    ].filter((cid) => !config.commands.find((cmd) => cmd.id === cid || cmd.aliases?.includes(cid))?.hidden);
+    if (commandIDs.length > 0) {
+        const matches = commandIDs
+            .map((cmd) => ({ cmd, distance: levenshtein(id, cmd) }))
+            .sort((a, b) => a.distance - b.distance);
+        const best = matches[0];
+        const threshold = Math.max(Math.ceil(id.length * 0.4), 3);
+        if (best && best.distance <= threshold) {
+            // Convert oclif internal separator (:) to display format (space)
+            const displayCmd = best.cmd.replace(/:/g, ' ');
+            this.error(`"${id.replace(/:/g, ' ')}" is not a ${config.bin} command. Did you mean "${displayCmd}"?\n\nRun ${config.bin} help for a list of available commands.`, { exit: ExitCode.INPUT_ERROR });
+        }
+    }
+    // Fallback: no close match found
+    this.error(`command "${id.replace(/:/g, ' ')}" not found. Run ${config.bin} help for a list of available commands.`, { exit: ExitCode.INPUT_ERROR });
+};
+export default hook;
+//# sourceMappingURL=command-not-found.js.map

package/dist/hooks/command-not-found.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-not-found.js","sourceRoot":"","sources":["../../src/hooks/command-not-found.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,qDAAqD;AACrD,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,MAAM,EAAE,GAAe,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CACxD,KAAK,CAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAC7B,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBACnB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE;oBACpB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAC;AACpB,CAAC;AAED,MAAM,IAAI,GAA8B,KAAK,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE;IACpE,gEAAgE;IAChE,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAEzC,8CAA8C;IAC9C,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,GAAG,kBAAkB,IAAI,EAAE,CAAC;QACzD,IAAI,CAAC,KAAK,CACR,IAAI,EAAE,yEAAyE,UAAU,EAAE,EAC3F,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,CAC/B,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,MAAM,UAAU,GAAG;QACjB,GAAG,MAAM,CAAC,UAAU;QACpB,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;KAC7C,CAAC,MAAM,CACN,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAC9F,CAAC;IAEF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,UAAU;aACvB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;aACvD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE3C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;YACvC,iEAAiE;YACjE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,CACR,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,MAAM,CAAC,GAAG,2BAA2B,UAAU,aAAa,MAAM,CAAC,GAAG,yCAAyC,EACtJ,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,CAC/B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,IAAI,CAAC,KAAK,CACR,YAAY,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,oBAAoB,MAAM,CAAC,GAAG,yCAAyC,EACxG,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,CAC/B,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * MainWP Control CLI
+ *
+ * AI-first command-line interface for managing MainWP Dashboards.
+ */
+export { run } from '@oclif/core';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+/**
+ * MainWP Control CLI
+ *
+ * AI-first command-line interface for managing MainWP Dashboards.
+ */
+export { run } from '@oclif/core';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC"}

package/dist/lib/base-command.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Base command for mainwpcontrol
+ *
+ * Provides common functionality for all CLI commands:
+ * - Profile and authentication management
+ * - JSON/human output handling
+ * - AbilitiesExecutor initialization
+ */
+import { Command, Interfaces } from '@oclif/core';
+import { type Profile } from '../config/profile-store.js';
+import { type ResolvedSettings, type Settings } from '../config/settings.js';
+import { type AbilitiesExecutor } from '../core/abilities-executor.js';
+import { type BatchManager } from '../core/batch-manager.js';
+/**
+ * Common flags available to all commands
+ */
+export declare const commonFlags: {
+    json: Interfaces.BooleanFlag<boolean>;
+    quiet: Interfaces.BooleanFlag<boolean>;
+    profile: Interfaces.OptionFlag<string | undefined, Interfaces.CustomOptions>;
+    debug: Interfaces.BooleanFlag<boolean>;
+};
+/**
+ * Parsed flags type helper
+ */
+type CommonFlags = Interfaces.InferredFlags<typeof commonFlags>;
+/**
+ * Base command class
+ *
+ * All mainwpcontrol commands should extend this class.
+ */
+export declare abstract class BaseCommand extends Command {
+    /**
+     * Current active profile
+     */
+    protected currentProfile: Profile | undefined;
+    /**
+     * Whether to output JSON
+     */
+    protected jsonOutput: boolean;
+    /**
+     * Debug mode flag
+     */
+    protected debugMode: boolean;
+    /**
+     * Whether debug was explicitly requested on the CLI.
+     */
+    protected explicitDebugMode: boolean;
+    /**
+     * Quiet mode flag — suppress stdout output (exit code only)
+     */
+    protected quietMode: boolean;
+    /**
+     * Raw settings from settings.json
+     */
+    protected rawSettings: Settings;
+    /**
+     * Validated and normalized settings
+     */
+    protected settings: ResolvedSettings;
+    /**
+     * Cached executor instance
+     */
+    private executor;
+    /**
+     * Cached batch manager instance
+     */
+    private batchManagerInstance;
+    /**
+     * Whether this command needs a profile to be loaded.
+     * Override to return false for commands like `login` that don't need a profile.
+     */
+    protected needsProfile(): boolean;
+    /**
+     * Initialize common functionality.
+     * Call this at the start of each command's run() method.
+     */
+    protected initCommon(flags: CommonFlags): Promise<void>;
+    /**
+     * Load the specified or active profile
+     */
+    private loadProfile;
+    /**
+     * Get the AbilitiesExecutor instance
+     */
+    protected getExecutor(): Promise<AbilitiesExecutor>;
+    /**
+     * Get the BatchManager instance (lazy, cached)
+     */
+    protected getBatchManager(): Promise<BatchManager>;
+    /**
+     * Build common transport configuration using profile-scoped settings first.
+     */
+    protected getTransportConfig(): {
+        skipSSLVerification: boolean;
+        allowInsecureHttp: boolean;
+        timeout: number;
+    };
+    /**
+     * Emit redacted debug output to stderr.
+     */
+    protected debugLog(message: string, context?: Record<string, unknown>): void;
+    private shouldEmitDebug;
+    private redactDebugContext;
+    /**
+     * Output data in JSON or human-readable format.
+     *
+     * @param data - The data to output (used for JSON mode)
+     * @param humanFormatter - Optional function that returns human-readable string
+     */
+    protected output<T>(data: T, humanFormatter?: () => string): void;
+    /**
+     * Handle errors with appropriate exit codes
+     */
+    protected catch(err: Error & {
+        exitCode?: number;
+        oclif?: {
+            exit?: number;
+        };
+    }): Promise<void>;
+}
+export {};
+//# sourceMappingURL=base-command.d.ts.map

package/dist/lib/base-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-command.d.ts","sourceRoot":"","sources":["../../src/lib/base-command.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAS,UAAU,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAE3E,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAChG,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAMjF;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;CAkBvB,CAAC;AAEF;;GAEG;AACH,KAAK,WAAW,GAAG,UAAU,CAAC,aAAa,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhE;;;;GAIG;AACH,8BAAsB,WAAY,SAAQ,OAAO;IAC/C;;OAEG;IACH,SAAS,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC;IAE9C;;OAEG;IACH,SAAS,CAAC,UAAU,UAAS;IAE7B;;OAEG;IACH,SAAS,CAAC,SAAS,UAAS;IAE5B;;OAEG;IACH,SAAS,CAAC,iBAAiB,UAAS;IAEpC;;OAEG;IACH,SAAS,CAAC,SAAS,UAAS;IAE5B;;OAEG;IACH,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAM;IAErC;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,gBAAgB,CAOlC;IAEF;;OAEG;IACH,OAAO,CAAC,QAAQ,CAAgC;IAEhD;;OAEG;IACH,OAAO,CAAC,oBAAoB,CAA2B;IAEvD;;;OAGG;IACH,SAAS,CAAC,YAAY,IAAI,OAAO;IAIjC;;;OAGG;cACa,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB7D;;OAEG;YACW,WAAW;IAiCzB;;OAEG;cACa,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAgCzD;;OAEG;cACa,eAAe,IAAI,OAAO,CAAC,YAAY,CAAC;IAgCxD;;OAEG;IACH,SAAS,CAAC,kBAAkB,IAAI;QAC9B,mBAAmB,EAAE,OAAO,CAAC;QAC7B,iBAAiB,EAAE,OAAO,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC;KACjB;IASD;;OAEG;IACH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAa5E,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,kBAAkB;IA0B1B;;;;;OAKG;IACH,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,cAAc,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI;IAcjE;;OAEG;cACa,KAAK,CAAC,GAAG,EAAE,KAAK,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAmBpG"}