@nebulr-group/bridge-cli 0.6.6 → 1.0.0-alpha.0

package/dist/commands/runtime-dir.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-dir.d.ts","sourceRoot":"","sources":["../../src/commands/runtime-dir.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,WAAW,EAAE,MAAgD,CAAC"}

package/dist/commands/runtime-dir.js

@@ -1,18 +0,0 @@
-import { dirname } from 'node:path';
-import { fileURLToPath } from 'node:url';
-/**
- * Absolute path to this module's own directory — `dist/commands` in the built
- * (ESM) CLI. Bundled prompts ship at `dist/prompts`, i.e. `../prompts` from
- * here.
- *
- * The `import.meta` token is deliberately confined to this single file. The
- * production build is ESM (`"type": "module"`), so `import.meta.url` resolves
- * correctly at runtime. Under ts-jest, however, sources are loaded as
- * CommonJS, where `import.meta` is an *uncatchable parse-time* SyntaxError
- * ("Cannot use 'import.meta' outside a module") that crashes the whole module
- * on import. To keep the rest of the command code importable by the jest
- * suite, jest maps this module to a CJS-safe stub (`runtime-dir.stub.ts`) via
- * `moduleNameMapper` — see jest.config.cjs.
- */
-export const commandsDir = dirname(fileURLToPath(import.meta.url));
-//# sourceMappingURL=runtime-dir.js.map

package/dist/commands/runtime-dir.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-dir.js","sourceRoot":"","sources":["../../src/commands/runtime-dir.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,WAAW,GAAW,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC"}

package/dist/commands/setup.command.d.ts

@@ -1,63 +0,0 @@
-import { Command } from 'commander';
-export declare const SSO_PROVIDERS: {
-    readonly google: {
-        readonly clientId: "googleClientId";
-        readonly clientSecret: "googleClientSecret";
-        readonly enable: "googleSsoEnabled";
-    };
-    readonly github: {
-        readonly clientId: "githubClientId";
-        readonly clientSecret: "githubClientSecret";
-        readonly enable: "githubSsoEnabled";
-    };
-    readonly linkedin: {
-        readonly clientId: "linkedinClientId";
-        readonly clientSecret: "linkedinClientSecret";
-        readonly enable: "linkedinSsoEnabled";
-    };
-    readonly facebook: {
-        readonly clientId: "facebookClientId";
-        readonly clientSecret: "facebookClientSecret";
-        readonly enable: "facebookSsoEnabled";
-    };
-    readonly azure: {
-        readonly clientId: "microsoftAzureADClientId";
-        readonly clientSecret: "microsoftAzureADClientSecret";
-        readonly tenantId: "microsoftAzureADTenantId";
-        readonly enable: "azureAdSsoEnabled";
-    };
-};
-export type SupportedSsoProvider = keyof typeof SSO_PROVIDERS;
-/** Carries a machine-readable `code`, which `outputError` reports. */
-export declare class SetupError extends Error {
-    readonly code: string;
-    constructor(message: string, code: string);
-}
-export interface SetupSsoOptions {
-    provider: string;
-    clientId?: string;
-    clientSecret?: string;
-    tenantId?: string;
-    metadataUrl?: string;
-    discoveryUrl?: string;
-}
-export declare function setupSso(opts: SetupSsoOptions): Promise<{
-    provider: "google" | "linkedin" | "github" | "facebook" | "azure";
-    enabled: boolean;
-    callbackUrl: string;
-    app: import("@nebulr-group/bridge-auth-core").AppResponse;
-}>;
-export interface SetupCommunicationOptions {
-    fromAddress?: string;
-    fromName?: string;
-    provider?: string;
-    apiKey?: string;
-}
-export declare function setupCommunication(opts: SetupCommunicationOptions): Promise<{
-    configured: boolean;
-    emailSenderEmail: string | null;
-    emailSenderName: string | null;
-    app: import("@nebulr-group/bridge-auth-core").AppResponse;
-}>;
-export declare function registerSetupCommands(program: Command): void;
-//# sourceMappingURL=setup.command.d.ts.map

package/dist/commands/setup.command.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"setup.command.d.ts","sourceRoot":"","sources":["../../src/commands/setup.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAiC5C,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;CAW6B,CAAC;AAExD,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,aAAa,CAAC;AAS9D,sEAAsE;AACtE,qBAAa,UAAW,SAAQ,KAAK;IACN,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAtC,OAAO,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM;CAInD;AASD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,eAAe;;;;;GA4CnD;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB;;;;;GA+BvE;AAKD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyC5D"}

package/dist/commands/setup.command.js

@@ -1,148 +0,0 @@
-import { Option } from 'commander';
-import { getManagementClient } from '../config.js';
-import { outputSuccess, outputError } from '../output.js';
-export const SSO_PROVIDERS = {
-    google: { clientId: 'googleClientId', clientSecret: 'googleClientSecret', enable: 'googleSsoEnabled' },
-    github: { clientId: 'githubClientId', clientSecret: 'githubClientSecret', enable: 'githubSsoEnabled' },
-    linkedin: { clientId: 'linkedinClientId', clientSecret: 'linkedinClientSecret', enable: 'linkedinSsoEnabled' },
-    facebook: { clientId: 'facebookClientId', clientSecret: 'facebookClientSecret', enable: 'facebookSsoEnabled' },
-    azure: {
-        clientId: 'microsoftAzureADClientId',
-        clientSecret: 'microsoftAzureADClientSecret',
-        tenantId: 'microsoftAzureADTenantId',
-        enable: 'azureAdSsoEnabled',
-    },
-};
-const SUPPORTED = Object.keys(SSO_PROVIDERS).join(', ');
-const EMAIL = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-/** Carries a machine-readable `code`, which `outputError` reports. */
-export class SetupError extends Error {
-    code;
-    constructor(message, code) {
-        super(message);
-        this.code = code;
-        this.name = 'SetupError';
-    }
-}
-const NOT_SAVED = ' Nothing was saved.';
-const invalid = (message) => new SetupError(message + NOT_SAVED, 'INVALID_ARGUMENT');
-function isSupported(provider) {
-    return Object.prototype.hasOwnProperty.call(SSO_PROVIDERS, provider);
-}
-export async function setupSso(opts) {
-    const provider = String(opts.provider).toLowerCase();
-    if (!isSupported(provider)) {
-        throw new SetupError(provider === 'saml' || provider === 'oidc'
-            ? `SSO provider "${provider}" is not supported by the Bridge API: it has no fields for SAML or OIDC ` +
-                `connections. Set them up in the Bridge admin UI. Supported here: ${SUPPORTED}.${NOT_SAVED}`
-            : `Unknown SSO provider "${provider}". Supported: ${SUPPORTED}.${NOT_SAVED}`, 'SSO_PROVIDER_NOT_SUPPORTED');
-    }
-    for (const [flag, value] of [['--metadata-url', opts.metadataUrl], ['--discovery-url', opts.discoveryUrl]]) {
-        if (value !== undefined) {
-            throw new SetupError(`${flag} was removed: the Bridge API has no field for it (SAML and OIDC are set up in the Bridge admin UI).${NOT_SAVED}`, 'SSO_PROVIDER_NOT_SUPPORTED');
-        }
-    }
-    if (!opts.clientId || !opts.clientSecret) {
-        throw invalid('--client-id and --client-secret are required (from the provider console).');
-    }
-    const fields = SSO_PROVIDERS[provider];
-    const credentials = {
-        [fields.clientId]: opts.clientId,
-        [fields.clientSecret]: opts.clientSecret,
-    };
-    if ('tenantId' in fields) {
-        if (!opts.tenantId) {
-            throw invalid('azure needs --tenant-id: the Directory (tenant) ID from the Entra ID app registration.');
-        }
-        credentials[fields.tenantId] = opts.tenantId;
-    }
-    else if (opts.tenantId !== undefined) {
-        throw invalid(`--tenant-id applies to azure only, not "${provider}".`);
-    }
-    const mgmt = getManagementClient();
-    await mgmt.app.updateCredentials(credentials);
-    const enable = { [fields.enable]: true };
-    await mgmt.app.update(enable);
-    const app = await mgmt.app.get();
-    return { provider, enabled: true, callbackUrl: app.defaultCallbackUri, app };
-}
-export async function setupCommunication(opts) {
-    if (opts.provider !== undefined || opts.apiKey !== undefined) {
-        throw new SetupError('--provider and --api-key were removed: Bridge sends all email through its own provider, so there is ' +
-            'no provider or API key to configure (the Bridge API has never accepted one). ' +
-            `Pass only --from-address and/or --from-name.${NOT_SAVED}`, 'EMAIL_PROVIDER_NOT_SUPPORTED');
-    }
-    const { fromAddress, fromName } = opts;
-    if (fromAddress === undefined && fromName === undefined) {
-        throw invalid('Nothing to set: pass --from-address, --from-name, or both.');
-    }
-    if (fromAddress !== undefined && !EMAIL.test(fromAddress)) {
-        throw invalid('--from-address must be an email address, e.g. "no-reply@example.com".');
-    }
-    if (fromName !== undefined && fromName.trim() === '') {
-        throw invalid('--from-name must not be empty.');
-    }
-    const update = {};
-    if (fromAddress !== undefined)
-        update.emailSenderEmail = fromAddress;
-    if (fromName !== undefined)
-        update.emailSenderName = fromName;
-    const app = await getManagementClient().app.update(update);
-    return {
-        configured: true,
-        emailSenderEmail: app.emailSenderEmail ?? null,
-        emailSenderName: app.emailSenderName ?? null,
-        app,
-    };
-}
-/** Accepted only to refuse it with an explanation instead of commander's bare "unknown option". */
-const removed = (flags, description) => new Option(flags, description).hideHelp();
-export function registerSetupCommands(program) {
-    const setup = program.command('setup').description('Run setup workflows (multi-step operations)');
-    setup.command('sso')
-        .description('Enable an SSO login provider and get the callback URL to register with it')
-        .requiredOption('--provider <provider>', `SSO provider: ${SUPPORTED} (SAML/OIDC are set up in the Bridge admin UI)`)
-        .requiredOption('--client-id <id>', 'OAuth client ID from the provider console')
-        .requiredOption('--client-secret <secret>', 'OAuth client secret from the provider console')
-        .option('--tenant-id <id>', 'azure only, required: Entra ID Directory (tenant) ID (not a Bridge tenant)')
-        .addOption(removed('--metadata-url <url>', 'removed: SAML is not supported by the Bridge API'))
-        .addOption(removed('--discovery-url <url>', 'removed: OIDC is not supported by the Bridge API'))
-        .action(async (opts) => {
-        try {
-            outputSuccess(await setupSso(opts));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    setup.command('payments')
-        .description('Connect Stripe and optionally create plans')
-        .requiredOption('--stripe-key <key>', 'Stripe secret key')
-        .option('--stripe-public-key <key>', 'Stripe public key')
-        .action(async (opts) => {
-        try {
-            outputSuccess(await getManagementClient().workflows.setupPayments({
-                stripeSecretKey: opts.stripeKey,
-                stripePublicKey: opts.stripePublicKey,
-            }));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    setup.command('communication')
-        .description("Set the sender name and address of your app's emails (sent through Bridge's own email provider)")
-        .option('--from-address <email>', 'Sender email address. A new address is verified by email before Bridge uses it')
-        .option('--from-name <name>', 'Sender display name')
-        .addOption(removed('--provider <provider>', 'removed: email goes through Bridge\'s own provider'))
-        .addOption(removed('--api-key <key>', 'removed: email goes through Bridge\'s own provider'))
-        .action(async (opts) => {
-        try {
-            outputSuccess(await setupCommunication(opts));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-}
-//# sourceMappingURL=setup.command.js.map

package/dist/commands/setup.command.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"setup.command.js","sourceRoot":"","sources":["../../src/commands/setup.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,MAAM,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AA8B1D,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,MAAM,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,MAAM,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,QAAQ,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,EAAE,oBAAoB,EAAE;IAC9G,QAAQ,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,EAAE,oBAAoB,EAAE;IAC9G,KAAK,EAAE;QACL,QAAQ,EAAE,0BAA0B;QACpC,YAAY,EAAE,8BAA8B;QAC5C,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,mBAAmB;KAC5B;CACoD,CAAC;AAQxD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxD,MAAM,KAAK,GAAG,4BAA4B,CAAC;AAE3C,sEAAsE;AACtE,MAAM,OAAO,UAAW,SAAQ,KAAK;IACG;IAAtC,YAAY,OAAe,EAAW,IAAY;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,SAAI,GAAJ,IAAI,CAAQ;QAEhD,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,SAAS,GAAG,qBAAqB,CAAC;AACxC,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,OAAO,GAAG,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAE7F,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;AACvE,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAqB;IAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAClB,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,MAAM;YACxC,CAAC,CAAC,iBAAiB,QAAQ,0EAA0E;gBACnG,oEAAoE,SAAS,IAAI,SAAS,EAAE;YAC9F,CAAC,CAAC,yBAAyB,QAAQ,iBAAiB,SAAS,IAAI,SAAS,EAAE,EAC9E,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,CAAU,EAAE,CAAC;QACpH,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,sGAAsG,SAAS,EAAE,EACxH,4BAA4B,CAC7B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,OAAO,CAAC,2EAA2E,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,WAAW,GAA6C;QAC5D,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ;QAChC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY;KACzC,CAAC;IACF,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,OAAO,CAAC,wFAAwF,CAAC,CAAC;QAC1G,CAAC;QACD,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/C,CAAC;SAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,OAAO,CAAC,2CAA2C,QAAQ,IAAI,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,MAAM,GAA6C,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;IACnF,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAEjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC;AAC/E,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAA+B;IACtE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,IAAI,UAAU,CAClB,sGAAsG;YACpG,+EAA+E;YAC/E,+CAA+C,SAAS,EAAE,EAC5D,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IACvC,IAAI,WAAW,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACxD,MAAM,OAAO,CAAC,4DAA4D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1D,MAAM,OAAO,CAAC,uEAAuE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,MAAM,GAA4D,EAAE,CAAC;IAC3E,IAAI,WAAW,KAAK,SAAS;QAAE,MAAM,CAAC,gBAAgB,GAAG,WAAW,CAAC;IACrE,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,eAAe,GAAG,QAAQ,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,mBAAmB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE3D,OAAO;QACL,UAAU,EAAE,IAAI;QAChB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,IAAI,IAAI;QAC9C,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI;QAC5C,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,WAAmB,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;AAElG,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,6CAA6C,CAAC,CAAC;IAElG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;SACjB,WAAW,CAAC,2EAA2E,CAAC;SACxF,cAAc,CAAC,uBAAuB,EAAE,iBAAiB,SAAS,gDAAgD,CAAC;SACnH,cAAc,CAAC,kBAAkB,EAAE,2CAA2C,CAAC;SAC/E,cAAc,CAAC,0BAA0B,EAAE,+CAA+C,CAAC;SAC3F,MAAM,CAAC,kBAAkB,EAAE,4EAA4E,CAAC;SACxG,SAAS,CAAC,OAAO,CAAC,sBAAsB,EAAE,kDAAkD,CAAC,CAAC;SAC9F,SAAS,CAAC,OAAO,CAAC,uBAAuB,EAAE,kDAAkD,CAAC,CAAC;SAC/F,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,aAAa,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;SACtB,WAAW,CAAC,4CAA4C,CAAC;SACzD,cAAc,CAAC,oBAAoB,EAAE,mBAAmB,CAAC;SACzD,MAAM,CAAC,2BAA2B,EAAE,mBAAmB,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,aAAa,CAAC,MAAM,mBAAmB,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC;gBAChE,eAAe,EAAE,IAAI,CAAC,SAAS;gBAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;SAC3B,WAAW,CAAC,iGAAiG,CAAC;SAC9G,MAAM,CAAC,wBAAwB,EAAE,gFAAgF,CAAC;SAClH,MAAM,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;SACnD,SAAS,CAAC,OAAO,CAAC,uBAAuB,EAAE,oDAAoD,CAAC,CAAC;SACjG,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,oDAAoD,CAAC,CAAC;SAC3F,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,aAAa,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/stripe.command.d.ts

@@ -1,29 +0,0 @@
-import { Command } from 'commander';
-import type { CredentialsState } from '@nebulr-group/bridge-auth-core';
-export type ServerCredentialsState = CredentialsState;
-/** Webhook health fields on the app response (TBP-658). All optional: older APIs omit them. */
-export interface ServerAppStripeState {
-    stripeSetupStatus?: 'pending' | 'completed' | 'failed' | null;
-    stripeSetupError?: string | null;
-    stripeLastWebhookAt?: string | null;
-    stripeLastWebhookRejectedAt?: string | null;
-    stripeLastWebhookRejectionReason?: string | null;
-}
-/** `true` only when the server confirms stored Stripe keys; never undefined. */
-export declare function stripeConnectedFrom(state: unknown): boolean;
-/** `null` when the API does not report it (older account API), so absence is not read as broken. */
-export declare function stripeWebhookConfiguredFrom(state: unknown): boolean | null;
-export interface StripeStatus {
-    connected: boolean;
-    webhookConfigured: boolean | null;
-    webhookHealthy: boolean | null;
-    lastWebhookAt: string | null;
-    lastWebhookRejectedAt: string | null;
-    lastWebhookRejectionReason: string | null;
-    setupStatus: string | null;
-    setupError: string | null;
-    message: string;
-}
-export declare function stripeStatusFrom(state: unknown, app: unknown): StripeStatus;
-export declare function registerStripeCommands(program: Command): void;
-//# sourceMappingURL=stripe.command.d.ts.map

package/dist/commands/stripe.command.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"stripe.command.d.ts","sourceRoot":"","sources":["../../src/commands/stripe.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAavE,MAAM,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAEtD,+FAA+F;AAC/F,MAAM,WAAW,oBAAoB;IACnC,iBAAiB,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC9D,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,2BAA2B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,gCAAgC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClD;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE3D;AAED,oGAAoG;AACpG,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAG1E;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;IAClC,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAyBD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,YAAY,CAuB3E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAqC7D"}

package/dist/commands/stripe.command.js

@@ -1,99 +0,0 @@
-import { getManagementClient } from '../config.js';
-import { outputSuccess, outputError } from '../output.js';
-/** `true` only when the server confirms stored Stripe keys; never undefined. */
-export function stripeConnectedFrom(state) {
-    return state?.stripeCredentialsAdded === true;
-}
-/** `null` when the API does not report it (older account API), so absence is not read as broken. */
-export function stripeWebhookConfiguredFrom(state) {
-    const value = state?.stripeWebhookConfigured;
-    return typeof value === 'boolean' ? value : null;
-}
-const CONNECT_HINT = 'run: bridge stripe connect --secret-key sk_... --publishable-key pk_...';
-const REPAIR_HINT = 'Checkout still works, but subscription changes, cancellations and payment failures are not ' +
-    'reaching Bridge. Repair: re-run `bridge setup payments` with the same keys, or use "Repair ' +
-    'webhook" in the Bridge admin payment settings.';
-/*
- * Mirrors bridge-api's `AppService._stripeWebhookUnhealthy` plus the two
- * explicit failure signals. `null` = the API gave us nothing to judge by.
- */
-function webhookHealthy(configured, app) {
-    if (configured === false || app.stripeSetupStatus === 'failed')
-        return false;
-    const rejectedAt = app.stripeLastWebhookRejectedAt;
-    if (rejectedAt) {
-        const lastAt = app.stripeLastWebhookAt;
-        if (!lastAt || new Date(rejectedAt).getTime() > new Date(lastAt).getTime())
-            return false;
-    }
-    return configured;
-}
-export function stripeStatusFrom(state, app) {
-    const a = (app ?? {});
-    const connected = stripeConnectedFrom(state);
-    const webhookConfigured = stripeWebhookConfiguredFrom(state);
-    const healthy = connected ? webhookHealthy(webhookConfigured, a) : null;
-    let message;
-    if (!connected)
-        message = `Stripe is not connected — ${CONNECT_HINT}`;
-    else if (healthy === false)
-        message = `Stripe is connected, but its webhook is not working. ${REPAIR_HINT}`;
-    else if (healthy === null)
-        message = 'Stripe is connected (webhook health not reported by this API)';
-    else
-        message = 'Stripe is connected and its webhook is configured';
-    return {
-        connected,
-        webhookConfigured,
-        webhookHealthy: healthy,
-        lastWebhookAt: a.stripeLastWebhookAt ?? null,
-        lastWebhookRejectedAt: a.stripeLastWebhookRejectedAt ?? null,
-        lastWebhookRejectionReason: a.stripeLastWebhookRejectionReason ?? null,
-        setupStatus: a.stripeSetupStatus ?? null,
-        setupError: a.stripeSetupError ?? null,
-        message,
-    };
-}
-export function registerStripeCommands(program) {
-    const stripe = program.command('stripe').description('Manage Stripe integration');
-    stripe.command('status')
-        .description('Show whether Stripe credentials are configured and whether its webhook works')
-        .action(async () => {
-        try {
-            const client = getManagementClient();
-            const [state, app] = await Promise.all([
-                client.app.getCredentialsState(),
-                client.app.get(),
-            ]);
-            outputSuccess(stripeStatusFrom(state, app));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    stripe.command('connect')
-        .description('Set Stripe API credentials')
-        .requiredOption('--secret-key <key>', 'Stripe secret key (sk_live_... or sk_test_...)')
-        .requiredOption('--publishable-key <key>', 'Stripe publishable key (pk_live_... or pk_test_...)')
-        .action(async (opts) => {
-        try {
-            const state = await getManagementClient().app.updateCredentials({
-                stripeSecretKey: opts.secretKey,
-                stripePublicKey: opts.publishableKey,
-            });
-            const connected = stripeConnectedFrom(state);
-            const webhookConfigured = stripeWebhookConfiguredFrom(state);
-            let message = connected
-                ? 'Stripe connected successfully'
-                : 'Credentials saved but Stripe did not confirm — check your keys and try again';
-            if (connected && webhookConfigured === false) {
-                message += '. Warning: the Stripe webhook is not configured — run `bridge stripe status` for details';
-            }
-            outputSuccess({ connected, webhookConfigured, message });
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-}
-//# sourceMappingURL=stripe.command.js.map

package/dist/commands/stripe.command.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stripe.command.js","sourceRoot":"","sources":["../../src/commands/stripe.command.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAsB1D,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAQ,KAA4D,EAAE,sBAAsB,KAAK,IAAI,CAAC;AACxG,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,MAAM,KAAK,GAAI,KAA4D,EAAE,uBAAuB,CAAC;IACrG,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAcD,MAAM,YAAY,GAAG,yEAAyE,CAAC;AAC/F,MAAM,WAAW,GACf,6FAA6F;IAC7F,6FAA6F;IAC7F,gDAAgD,CAAC;AAEnD;;;GAGG;AACH,SAAS,cAAc,CACrB,UAA0B,EAC1B,GAAyB;IAEzB,IAAI,UAAU,KAAK,KAAK,IAAI,GAAG,CAAC,iBAAiB,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,UAAU,GAAG,GAAG,CAAC,2BAA2B,CAAC;IACnD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,CAAC;QACvC,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;YAAE,OAAO,KAAK,CAAC;IAC3F,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,GAAY;IAC3D,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAyB,CAAC;IAC9C,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAExE,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,6BAA6B,YAAY,EAAE,CAAC;SACjE,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,GAAG,wDAAwD,WAAW,EAAE,CAAC;SACvG,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,GAAG,+DAA+D,CAAC;;QAChG,OAAO,GAAG,mDAAmD,CAAC;IAEnE,OAAO;QACL,SAAS;QACT,iBAAiB;QACjB,cAAc,EAAE,OAAO;QACvB,aAAa,EAAE,CAAC,CAAC,mBAAmB,IAAI,IAAI;QAC5C,qBAAqB,EAAE,CAAC,CAAC,2BAA2B,IAAI,IAAI;QAC5D,0BAA0B,EAAE,CAAC,CAAC,gCAAgC,IAAI,IAAI;QACtE,WAAW,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;QACxC,UAAU,EAAE,CAAC,CAAC,gBAAgB,IAAI,IAAI;QACtC,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAElF,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;SACrB,WAAW,CAAC,8EAA8E,CAAC;SAC3F,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACrC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACrC,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE;gBAChC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;aACjB,CAAC,CAAC;YACH,aAAa,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;SACtB,WAAW,CAAC,4BAA4B,CAAC;SACzC,cAAc,CAAC,oBAAoB,EAAE,gDAAgD,CAAC;SACtF,cAAc,CAAC,yBAAyB,EAAE,qDAAqD,CAAC;SAChG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,mBAAmB,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBAC9D,eAAe,EAAE,IAAI,CAAC,SAAS;gBAC/B,eAAe,EAAE,IAAI,CAAC,cAAc;aACrC,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;YAC7D,IAAI,OAAO,GAAG,SAAS;gBACrB,CAAC,CAAC,+BAA+B;gBACjC,CAAC,CAAC,8EAA8E,CAAC;YACnF,IAAI,SAAS,IAAI,iBAAiB,KAAK,KAAK,EAAE,CAAC;gBAC7C,OAAO,IAAI,0FAA0F,CAAC;YACxG,CAAC;YACD,aAAa,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/tenant.command.d.ts

@@ -1,3 +0,0 @@
-import { Command } from 'commander';
-export declare function registerTenantCommands(program: Command): void;
-//# sourceMappingURL=tenant.command.d.ts.map

package/dist/commands/tenant.command.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tenant.command.d.ts","sourceRoot":"","sources":["../../src/commands/tenant.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA0H7D"}

package/dist/commands/tenant.command.js

@@ -1,135 +0,0 @@
-import { getManagementClient, getManagementHttp } from '../config.js';
-import { outputSuccess, outputError } from '../output.js';
-import { resolveTenantIdByName } from '../resolve.js';
-import { shapeTenant } from '../shape.js';
-import { dryRunPreview } from '../preview.js';
-export function registerTenantCommands(program) {
-    const tenant = program.command('tenant').description('Manage tenants');
-    tenant.command('list')
-        .description('List all tenants')
-        .action(async () => {
-        try {
-            outputSuccess((await getManagementClient().tenants.list()).map(shapeTenant));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    tenant.command('get')
-        .description('Get a tenant by --name or --id')
-        .option('--name <name>', 'Tenant name to address (alternative to --id; must be unique)')
-        .option('--id <id>', 'Tenant ID to address (alternative to --name)')
-        .action(async (opts) => {
-        try {
-            const id = await resolveTenantIdByName({ id: opts.id, key: opts.name });
-            outputSuccess(shapeTenant(await getManagementClient().tenants.get(id)));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    tenant.command('create')
-        .description('Create a new tenant')
-        .requiredOption('--owner-email <email>', 'Owner email address')
-        .option('--name <name>', 'Tenant name')
-        .option('--plan <plan>', 'Plan key')
-        .option('--locale <locale>', 'Locale (ISO 639-1)')
-        .action(async (opts) => {
-        try {
-            outputSuccess(shapeTenant(await getManagementClient().tenants.create({
-                owner: { email: opts.ownerEmail },
-                name: opts.name,
-                plan: opts.plan,
-                locale: opts.locale,
-            })));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    tenant.command('update')
-        .description('Update a tenant by --name or --id')
-        .option('--name <name>', 'Tenant name to address when --id is absent; with --id, renames the tenant')
-        .option('--id <id>', 'Tenant ID to address (alternative to --name)')
-        .option('--new-name <name>', 'Rename the tenant to this name')
-        .option('--locale <locale>', 'Locale')
-        .option('--logo <url>', 'Logo URL')
-        .action(async (opts) => {
-        try {
-            // TBP-586. `--name` is overloaded for backwards compatibility: before
-            // name-addressing existed, `tenant update --id X --name Y` renamed the
-            // tenant, and that still works. So `--name` addresses only when `--id`
-            // is absent; alongside `--id` it keeps its old rename meaning.
-            // `--new-name` renames in either addressing mode.
-            const addressedById = opts.id !== undefined;
-            const renameTo = opts.newName !== undefined
-                ? opts.newName
-                : (addressedById ? opts.name : undefined);
-            const id = await resolveTenantIdByName({
-                id: opts.id,
-                key: addressedById ? undefined : opts.name,
-            });
-            const data = { name: renameTo, locale: opts.locale, logo: opts.logo };
-            const cleaned = Object.fromEntries(Object.entries(data).filter(([, v]) => v !== undefined));
-            outputSuccess(shapeTenant(await getManagementClient().tenants.update(id, cleaned)));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    // TBP-806 — the dashboard's plan picker on a workspace, from the terminal:
-    // the same route, which also moves a paid Stripe subscription. What clears a
-    // plan before `plan delete`.
-    tenant.command('set-plan')
-        .description('Move a tenant to another plan by --name or --id (a paid Stripe subscription moves with it)')
-        .option('--name <name>', 'Tenant name to address (alternative to --id; fails if not unique)')
-        .option('--id <id>', 'Tenant ID to address (alternative to --name)')
-        .requiredOption('--plan <key>', 'Plan key to move the tenant to')
-        .option('--interval <interval>', "Which of the plan's prices: day | week | month | year (default: its first price)")
-        .option('--currency <code>', "Which of the plan's prices: its currency, e.g. usd")
-        .action(async (opts) => {
-        try {
-            const id = await resolveTenantIdByName({ id: opts.id, key: opts.name });
-            const plans = (await getManagementClient().plans.list());
-            const plan = plans.find((p) => p.key === opts.plan);
-            if (!plan) {
-                throw new Error(`Plan not found: ${opts.plan}. Existing plan keys: ${plans.map((p) => p.key).join(', ') || '(none)'}.`);
-            }
-            const currency = opts.currency?.toUpperCase();
-            const prices = plan.prices ?? [];
-            const price = prices.find((p) => (!currency || p.currency.toUpperCase() === currency) && (!opts.interval || p.recurrenceInterval === opts.interval));
-            if (!price) {
-                throw new Error(`Plan ${opts.plan} has no matching price. Its prices: ` +
-                    (prices.map((p) => `${p.currency} ${p.recurrenceInterval} ${p.amount}`).join(', ') || '(none)') + '.');
-            }
-            await getManagementHttp().post(`/v1/account/tenant/${encodeURIComponent(id)}/planDetails`, {
-                planKey: opts.plan,
-                priceOffer: { currency: price.currency, recurrenceInterval: price.recurrenceInterval },
-            });
-            outputSuccess({ id, plan: opts.plan, price: { currency: price.currency, recurrenceInterval: price.recurrenceInterval, amount: price.amount } });
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    tenant.command('delete')
-        .description('Delete a tenant by --name or --id')
-        .option('--name <name>', 'Tenant name to address (alternative to --id; fails if not unique)')
-        .option('--id <id>', 'Tenant ID to address (alternative to --name)')
-        .option('--dry-run', 'Show the members, login accounts and side effects the delete would have, and delete nothing')
-        .action(async (opts) => {
-        try {
-            const id = await resolveTenantIdByName({ id: opts.id, key: opts.name });
-            if (opts.dryRun) {
-                outputSuccess(await dryRunPreview(`/v1/account/tenant/${encodeURIComponent(id)}`));
-                return;
-            }
-            await getManagementClient().tenants.delete(id);
-            outputSuccess({ deleted: true, id });
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-}
-//# sourceMappingURL=tenant.command.js.map

package/dist/commands/tenant.command.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tenant.command.js","sourceRoot":"","sources":["../../src/commands/tenant.command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAEvE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACnB,WAAW,CAAC,kBAAkB,CAAC;SAC/B,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YAAC,aAAa,CAAC,CAAC,MAAM,mBAAmB,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QAAC,CAAC;QACrF,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEL,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SAClB,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,eAAe,EAAE,8DAA8D,CAAC;SACvF,MAAM,CAAC,WAAW,EAAE,8CAA8C,CAAC;SACnE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,aAAa,CAAC,WAAW,CAAC,MAAM,mBAAmB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;SACrB,WAAW,CAAC,qBAAqB,CAAC;SAClC,cAAc,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;SAC9D,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC;SACtC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC;SACnC,MAAM,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,aAAa,CAAC,WAAW,CAAC,MAAM,mBAAmB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;gBACnE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;SACrB,WAAW,CAAC,mCAAmC,CAAC;SAChD,MAAM,CAAC,eAAe,EAAE,2EAA2E,CAAC;SACpG,MAAM,CAAC,WAAW,EAAE,8CAA8C,CAAC;SACnE,MAAM,CAAC,mBAAmB,EAAE,gCAAgC,CAAC;SAC7D,MAAM,CAAC,mBAAmB,EAAE,QAAQ,CAAC;SACrC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,+DAA+D;YAC/D,kDAAkD;YAClD,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS;gBACzC,CAAC,CAAC,IAAI,CAAC,OAAO;gBACd,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC;gBACrC,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;aAC3C,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACtE,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC;YAC5F,aAAa,CAAC,WAAW,CAAC,MAAM,mBAAmB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,2EAA2E;IAC3E,6EAA6E;IAC7E,6BAA6B;IAC7B,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;SACvB,WAAW,CAAC,4FAA4F,CAAC;SACzG,MAAM,CAAC,eAAe,EAAE,mEAAmE,CAAC;SAC5F,MAAM,CAAC,WAAW,EAAE,8CAA8C,CAAC;SACnE,cAAc,CAAC,cAAc,EAAE,gCAAgC,CAAC;SAChE,MAAM,CAAC,uBAAuB,EAAE,kFAAkF,CAAC;SACnH,MAAM,CAAC,mBAAmB,EAAE,oDAAoD,CAAC;SACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,CAAC,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAGrD,CAAC;YACH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,IAAI,yBAAyB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC;YAC1H,CAAC;YACD,MAAM,QAAQ,GAAI,IAAI,CAAC,QAA+B,EAAE,WAAW,EAAE,CAAC;YACtE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,kBAAkB,KAAK,IAAI,CAAC,QAAQ,CAAC,CAC1H,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CACb,QAAQ,IAAI,CAAC,IAAI,sCAAsC;oBACrD,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,GAAG,CACxG,CAAC;YACJ,CAAC;YACD,MAAM,iBAAiB,EAAE,CAAC,IAAI,CAAC,sBAAsB,kBAAkB,CAAC,EAAE,CAAC,cAAc,EAAE;gBACzF,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;aACvF,CAAC,CAAC;YACH,aAAa,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;SACrB,WAAW,CAAC,mCAAmC,CAAC;SAChD,MAAM,CAAC,eAAe,EAAE,mEAAmE,CAAC;SAC5F,MAAM,CAAC,WAAW,EAAE,8CAA8C,CAAC;SACnE,MAAM,CAAC,WAAW,EAAE,6FAA6F,CAAC;SAClH,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,aAAa,CAAC,MAAM,aAAa,CAAC,sBAAsB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnF,OAAO;YACT,CAAC;YACD,MAAM,mBAAmB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/C,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/token.command.d.ts

@@ -1,3 +0,0 @@
-import { Command } from 'commander';
-export declare function registerTokenCommands(program: Command): void;
-//# sourceMappingURL=token.command.d.ts.map

package/dist/commands/token.command.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"token.command.d.ts","sourceRoot":"","sources":["../../src/commands/token.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyC5D"}

package/dist/commands/token.command.js

@@ -1,54 +0,0 @@
-import { getManagementClient } from '../config.js';
-import { outputSuccess, outputError } from '../output.js';
-import { resolveTokenIdByName } from '../resolve.js';
-import { dryRunPreview } from '../preview.js';
-export function registerTokenCommands(program) {
-    const token = program.command('token').description('Manage API tokens');
-    token.command('list')
-        .description('List all API tokens')
-        .action(async () => {
-        try {
-            outputSuccess(await getManagementClient().tokens.list());
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    token.command('create')
-        .description('Create a new API token')
-        .requiredOption('--name <name>', 'Token name')
-        .option('--privileges <list>', 'Comma-separated privilege keys', (v) => v.split(','))
-        .option('--expire-at <date>', 'Expiration date (ISO format)')
-        .action(async (opts) => {
-        try {
-            outputSuccess(await getManagementClient().tokens.create({
-                name: opts.name,
-                privileges: opts.privileges ?? [],
-                expireAt: opts.expireAt,
-            }));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    token.command('revoke')
-        .description('Revoke an API token by --name or --id')
-        .option('--name <name>', 'Token name to address (alternative to --id; fails if not unique)')
-        .option('--id <id>', 'Token ID to address (alternative to --name)')
-        .option('--dry-run', 'Show the token\'s privileges and last use, and whether it is your own login, and revoke nothing')
-        .action(async (opts) => {
-        try {
-            const id = await resolveTokenIdByName({ id: opts.id, key: opts.name });
-            if (opts.dryRun) {
-                outputSuccess(await dryRunPreview(`/v1/account/api-token/app/${encodeURIComponent(id)}`));
-                return;
-            }
-            await getManagementClient().tokens.revoke(id);
-            outputSuccess({ revoked: true, id });
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-}
-//# sourceMappingURL=token.command.js.map

package/dist/commands/token.command.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token.command.js","sourceRoot":"","sources":["../../src/commands/token.command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAExE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;SAClB,WAAW,CAAC,qBAAqB,CAAC;SAClC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YAAC,aAAa,CAAC,MAAM,mBAAmB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QACjE,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEL,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;SACpB,WAAW,CAAC,wBAAwB,CAAC;SACrC,cAAc,CAAC,eAAe,EAAE,YAAY,CAAC;SAC7C,MAAM,CAAC,qBAAqB,EAAE,gCAAgC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SACpF,MAAM,CAAC,oBAAoB,EAAE,8BAA8B,CAAC;SAC5D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,aAAa,CAAC,MAAM,mBAAmB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;gBACtD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;gBACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;SACpB,WAAW,CAAC,uCAAuC,CAAC;SACpD,MAAM,CAAC,eAAe,EAAE,kEAAkE,CAAC;SAC3F,MAAM,CAAC,WAAW,EAAE,6CAA6C,CAAC;SAClE,MAAM,CAAC,WAAW,EAAE,iGAAiG,CAAC;SACtH,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACvE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,aAAa,CAAC,MAAM,aAAa,CAAC,6BAA6B,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC1F,OAAO;YACT,CAAC;YACD,MAAM,mBAAmB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9C,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/user.command.d.ts

@@ -1,3 +0,0 @@
-import { Command } from 'commander';
-export declare function registerUserCommands(program: Command): void;
-//# sourceMappingURL=user.command.d.ts.map

package/dist/commands/user.command.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user.command.d.ts","sourceRoot":"","sources":["../../src/commands/user.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA6BpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsF3D"}