@nebulr-group/bridge-cli 0.6.6 → 1.0.0-alpha.0

package/dist/prompts/product-decisions.json

@@ -1,338 +0,0 @@
-{
-  "_comment": [
-    "The product decisions Bridge tools and commands never make for the developer (TBP-713).",
-    "\"ask\": refused with DECISION_NEEDED, naming the question, and nothing changes. \"only-when-given\": never set unless passed.",
-    "Source: PRODUCT_DECISIONS in bridge-api, microservices/account/nebulr-api/mcp/tools/product-decisions.ts.",
-    "Generated, never edited by hand: in bridge-api run `bun scripts/generate-product-decisions-json.ts > <bridge-cli>/bridge-cli/prompts/product-decisions.json` (in the bridge-api container). guide-currency.spec.ts fails when the two disagree."
-  ],
-  "source": "bridge-api feature/mcp-journey e9762f2",
-  "decisions": [
-    {
-      "tool": "create_plan",
-      "cli": "bridge plan create",
-      "field": "amount",
-      "guide": "payments",
-      "enforcement": "ask",
-      "question": "What does this plan cost per billing period? (0 for a free or contact-sales plan)",
-      "type": "number"
-    },
-    {
-      "tool": "create_plan",
-      "cli": "bridge plan create",
-      "field": "interval",
-      "guide": "payments",
-      "enforcement": "ask",
-      "question": "Is it billed monthly, yearly, weekly or daily?",
-      "type": "enum",
-      "options": [
-        "day",
-        "week",
-        "month",
-        "year"
-      ]
-    },
-    {
-      "tool": "create_plan",
-      "cli": "bridge plan create",
-      "field": "currency",
-      "guide": "payments",
-      "enforcement": "ask",
-      "question": "In which currency is it charged? (ISO code, e.g. USD, EUR, SEK)",
-      "type": "string"
-    },
-    {
-      "tool": "create_plan",
-      "cli": "bridge plan create",
-      "field": "trial",
-      "guide": "payments",
-      "enforcement": "ask",
-      "question": "Is there a free trial on this plan?",
-      "type": "boolean"
-    },
-    {
-      "tool": "create_plan",
-      "cli": "bridge plan create",
-      "field": "trialDays",
-      "guide": "payments",
-      "enforcement": "ask",
-      "question": "How many days does the free trial last?",
-      "type": "number"
-    },
-    {
-      "tool": "apply_plan",
-      "cli": "bridge plan apply",
-      "field": "name",
-      "guide": "payments",
-      "enforcement": "ask",
-      "question": "What is this plan called?",
-      "type": "string"
-    },
-    {
-      "tool": "apply_plan",
-      "cli": "bridge plan apply",
-      "field": "prices.amount",
-      "guide": "payments",
-      "enforcement": "ask",
-      "question": "What does this plan cost per billing period? (0 for a free or contact-sales plan)",
-      "type": "number"
-    },
-    {
-      "tool": "apply_plan",
-      "cli": "bridge plan apply",
-      "field": "prices.interval",
-      "guide": "payments",
-      "enforcement": "ask",
-      "question": "Is it billed monthly, yearly, weekly or daily?",
-      "type": "enum",
-      "options": [
-        "day",
-        "week",
-        "month",
-        "year"
-      ]
-    },
-    {
-      "tool": "apply_plan",
-      "cli": "bridge plan apply",
-      "field": "prices.currency",
-      "guide": "payments",
-      "enforcement": "ask",
-      "question": "In which currency is it charged? (ISO code, e.g. USD, EUR, SEK)",
-      "type": "string"
-    },
-    {
-      "tool": "apply_plan",
-      "cli": "bridge plan apply",
-      "field": "trial",
-      "guide": "payments",
-      "enforcement": "ask",
-      "question": "Is there a free trial on this plan?",
-      "type": "boolean"
-    },
-    {
-      "tool": "apply_plan",
-      "cli": "bridge plan apply",
-      "field": "trialDays",
-      "guide": "payments",
-      "enforcement": "ask",
-      "question": "How many days does the free trial last?",
-      "type": "number"
-    },
-    {
-      "tool": "set_plan_price",
-      "cli": "bridge plan price set",
-      "field": "currency",
-      "guide": "payments",
-      "enforcement": "ask",
-      "question": "In which currency is it charged? (ISO code, e.g. USD, EUR, SEK)",
-      "type": "string"
-    },
-    {
-      "tool": "update_app",
-      "cli": "bridge app update",
-      "field": "paymentsAutoRedirect",
-      "guide": "payments",
-      "enforcement": "only-when-given",
-      "question": "Must a new customer pick a plan before they can use the app?",
-      "type": "boolean"
-    },
-    {
-      "tool": "invite_user",
-      "cli": "bridge user invite",
-      "field": "role",
-      "guide": "teams",
-      "enforcement": "ask",
-      "question": "Which role should this person get? (a role key from list_roles; the default role is only a starting suggestion)",
-      "type": "string"
-    },
-    {
-      "tool": "update_app",
-      "cli": "bridge app update",
-      "field": "tenantSelfSignup",
-      "guide": "teams",
-      "enforcement": "only-when-given",
-      "question": "Can anyone sign up and get a workspace of their own, or only people who are invited?",
-      "type": "boolean"
-    },
-    {
-      "tool": "update_auth_methods",
-      "cli": "bridge app update",
-      "field": "mfaEnabled",
-      "guide": "login",
-      "enforcement": "only-when-given",
-      "question": "Should two-factor sign-in be available?",
-      "type": "boolean"
-    },
-    {
-      "tool": "update_auth_methods",
-      "cli": "bridge app update",
-      "field": "passkeysEnabled",
-      "guide": "login",
-      "enforcement": "only-when-given",
-      "question": "Should people be able to sign in with a passkey?",
-      "type": "boolean"
-    },
-    {
-      "tool": "update_auth_methods",
-      "cli": "bridge app update",
-      "field": "magicLinkEnabled",
-      "guide": "login",
-      "enforcement": "only-when-given",
-      "question": "Should people be able to sign in with an emailed link?",
-      "type": "boolean"
-    },
-    {
-      "tool": "update_auth_methods",
-      "cli": "bridge app update",
-      "field": "googleSsoEnabled",
-      "guide": "login",
-      "enforcement": "only-when-given",
-      "question": "Should people be able to sign in with Google?",
-      "type": "boolean"
-    },
-    {
-      "tool": "update_auth_methods",
-      "cli": "bridge app update",
-      "field": "linkedinSsoEnabled",
-      "guide": "login",
-      "enforcement": "only-when-given",
-      "question": "Should people be able to sign in with LinkedIn?",
-      "type": "boolean"
-    },
-    {
-      "tool": "update_auth_methods",
-      "cli": "bridge app update",
-      "field": "azureAdSsoEnabled",
-      "guide": "login",
-      "enforcement": "only-when-given",
-      "question": "Should people be able to sign in with Microsoft (Azure AD)?",
-      "type": "boolean"
-    },
-    {
-      "tool": "update_auth_methods",
-      "cli": "bridge app update",
-      "field": "appleSsoEnabled",
-      "guide": "login",
-      "enforcement": "only-when-given",
-      "question": "Should people be able to sign in with Apple?",
-      "type": "boolean"
-    },
-    {
-      "tool": "update_auth_methods",
-      "cli": "bridge app update",
-      "field": "githubSsoEnabled",
-      "guide": "login",
-      "enforcement": "only-when-given",
-      "question": "Should people be able to sign in with GitHub?",
-      "type": "boolean"
-    },
-    {
-      "tool": "update_auth_methods",
-      "cli": "bridge app update",
-      "field": "facebookSsoEnabled",
-      "guide": "login",
-      "enforcement": "only-when-given",
-      "question": "Should people be able to sign in with Facebook?",
-      "type": "boolean"
-    },
-    {
-      "tool": "update_branding",
-      "cli": "bridge branding update",
-      "field": "bgColor",
-      "guide": "look-and-feel",
-      "enforcement": "only-when-given",
-      "question": "Which page background colour?",
-      "type": "string"
-    },
-    {
-      "tool": "update_branding",
-      "cli": "bridge branding update",
-      "field": "textColor",
-      "guide": "look-and-feel",
-      "enforcement": "only-when-given",
-      "question": "Which text colour?",
-      "type": "string"
-    },
-    {
-      "tool": "update_branding",
-      "cli": "bridge branding update",
-      "field": "linkColor",
-      "guide": "look-and-feel",
-      "enforcement": "only-when-given",
-      "question": "Which link colour?",
-      "type": "string"
-    },
-    {
-      "tool": "update_branding",
-      "cli": "bridge branding update",
-      "field": "primaryButtonBgColor",
-      "guide": "look-and-feel",
-      "enforcement": "only-when-given",
-      "question": "Which colour for the main button?",
-      "type": "string"
-    },
-    {
-      "tool": "update_branding",
-      "cli": "bridge branding update",
-      "field": "primaryButtonTextColor",
-      "guide": "look-and-feel",
-      "enforcement": "only-when-given",
-      "question": "Which text colour on the main button?",
-      "type": "string"
-    },
-    {
-      "tool": "update_branding",
-      "cli": "bridge branding update",
-      "field": "fontFamily",
-      "guide": "look-and-feel",
-      "enforcement": "only-when-given",
-      "question": "Which font?",
-      "type": "string"
-    },
-    {
-      "tool": "update_branding",
-      "cli": "bridge branding update",
-      "field": "borderRadius",
-      "guide": "look-and-feel",
-      "enforcement": "only-when-given",
-      "question": "How rounded should corners be?",
-      "type": "string"
-    },
-    {
-      "tool": "update_app",
-      "cli": "bridge app update",
-      "field": "uiUrl",
-      "guide": "going-live",
-      "enforcement": "only-when-given",
-      "question": "What is the production address of the frontend?",
-      "type": "string"
-    },
-    {
-      "tool": "update_app",
-      "cli": "bridge app update",
-      "field": "defaultCallbackUri",
-      "guide": "going-live",
-      "enforcement": "only-when-given",
-      "question": "Which production address should sign-in return to?",
-      "type": "string"
-    },
-    {
-      "tool": "setup_communication",
-      "cli": "bridge setup communication",
-      "field": "fromAddress",
-      "guide": "going-live",
-      "enforcement": "only-when-given",
-      "question": "Which address should emails come from?",
-      "type": "string"
-    },
-    {
-      "tool": "setup_communication",
-      "cli": "bridge setup communication",
-      "field": "fromName",
-      "guide": "going-live",
-      "enforcement": "only-when-given",
-      "question": "Which sender name should emails show?",
-      "type": "string"
-    }
-  ]
-}

package/dist/resolve.d.ts

@@ -1,110 +0,0 @@
-import type { FlagResponse } from '@nebulr-group/bridge-auth-core';
-/**
- * Error carrying a stable machine-readable `code`, so `outputError` can emit
- * something better than UNKNOWN_ERROR for resolution failures.
- */
-export declare class ResolveError extends Error {
-    readonly code: string;
-    constructor(code: string, message: string);
-}
-export interface ResolveSpec<T> {
-    /** Capitalised singular noun used in messages, e.g. `'Flag'`. */
-    noun: string;
-    /** Flag the user types to address by id, e.g. `'--id'` or `'--user-id'`. */
-    idOption: string;
-    /** Flag the user types to address by key, e.g. `'--key'`, `'--email'`. */
-    keyOption: string;
-    /** What the key option holds, in prose: `'key'`, `'name'`, `'email'`. */
-    keyLabel: string;
-    /** Command that lists the candidates, e.g. `'bridge flag list'`. */
-    listCommand: string;
-    /** Fetches every candidate. Only called when resolving by key. */
-    list: () => Promise<T[]>;
-    idOf: (item: T) => string;
-    /** The item's key; `undefined` when the item has none (skipped in matching). */
-    keyOf: (item: T) => string | undefined;
-    /**
-     * Comparison normaliser. Defaults to identity (exact, case-sensitive).
-     * Emails pass `(s) => s.toLowerCase()`.
-     */
-    normalize?: (value: string) => string;
-    /** One-line rendering of a candidate, used in the ambiguity error. */
-    describe?: (item: T) => string;
-}
-export interface ResolveTarget {
-    id?: string;
-    key?: string;
-}
-/**
- * Turn `{ id }` or `{ key }` into an id.
- *
- * - both supplied  → INVALID_OPTIONS
- * - neither        → INVALID_OPTIONS, naming both options
- * - id supplied    → returned as-is (no network call)
- * - key supplied   → one `list()` call, then exact-match on the key
- *   - 0 matches    → `<NOUN>_NOT_FOUND`, naming the list command
- *   - >1 matches   → `<NOUN>_AMBIGUOUS`, listing every candidate. Nothing acts.
- */
-export declare function resolveResourceId<T>(target: ResolveTarget, spec: ResolveSpec<T>): Promise<string>;
-/** `bridge flag …` — flag keys are unique. */
-export declare function resolveFlagId(target: ResolveTarget): Promise<string>;
-/**
- * Resolve to the whole flag record rather than just its id.
- *
- * TBP-548. `flag toggle` has to read the flag's current `state` before it
- * writes: turning a `state: "on-with-rule"` flag fully on would widen it from
- * the rule's audience to everyone, which is not what a switch labelled
- * "toggle" is understood to do. One `list()` serves both the resolution and
- * that check, and it costs the `--id` path its previous no-network property —
- * deliberately, since an `--id` that matches nothing now fails here by name
- * instead of as an opaque server 404.
- */
-export declare function resolveFlag(target: ResolveTarget): Promise<FlagResponse>;
-/** `bridge role …` — role keys are unique (e.g. ADMIN). */
-export declare function resolveRoleId(target: ResolveTarget): Promise<string>;
-/**
- * `bridge tenant …` — tenants have NO key field. `name` is optional and the
- * platform does not enforce uniqueness on it, so a duplicate name is a real
- * possibility and always fails loudly rather than picking one.
- */
-export declare function resolveTenantIdByName(target: ResolveTarget): Promise<string>;
-/**
- * `bridge user …` — users have no key either; email is the natural
- * human-readable identifier and is unique within a tenant. Matched
- * case-insensitively, as email addresses are.
- */
-export declare function resolveUserId(target: ResolveTarget, tenantId: string): Promise<string>;
-/**
- * TBP-592 — turn privilege KEYS into the ids `POST/PUT /account/role` stores.
- *
- * `--privileges` is documented as taking keys, and keys are the only form a
- * human or agent has: they are what `bridge role list` prints and what the app
- * is designed around. But `role.model.ts` types `privileges` as
- * `Types.ObjectId[]` and resolves them with `findByIdsAndApp`, so a key
- * resolved to nothing, the array came back empty, and the model's pre-save
- * hook threw "A role needs at least one privilege".
- *
- * That error is the real cost. It reads as "you passed none" when the truth is
- * "the ones you passed were dropped", and nothing in it points at keys-vs-ids —
- * the only way to find out was to read the model.
- *
- * So: resolve here, and make an unknown identifier a hard failure that NAMES
- * the offenders. Silently dropping one privilege out of ten would create a role
- * that looks right and under-permits, which is worse than any error.
- *
- * Ids are still accepted and passed through untouched. Mixed input works. That
- * keeps `--privileges` honest for scripts that already pass ids, and means no
- * caller has to know which form the API wants.
- */
-export declare function resolvePrivilegeIds(identifiers: string[]): Promise<string[]>;
-/**
- * `bridge privilege …` — privilege keys are unique within an app, so a key
- * addresses exactly one. Same shape as `resolveRoleId`.
- */
-export declare function resolvePrivilegeId(target: ResolveTarget): Promise<string>;
-/**
- * `bridge token …` — API tokens have no key; `name` is free text and is NOT
- * enforced unique, so two tokens can legitimately share one.
- */
-export declare function resolveTokenIdByName(target: ResolveTarget): Promise<string>;
-//# sourceMappingURL=resolve.d.ts.map

package/dist/resolve.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAGnE;;;GAGG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC;IAC1B,gFAAgF;IAChF,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,GAAG,SAAS,CAAC;IACvC;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACtC,sEAAsE;IACtE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAQD;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,MAAM,CAAC,CA+CjB;AAqBD,8CAA8C;AAC9C,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAEpE;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAgB9E;AAED,2DAA2D;AAC3D,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAYpE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAe5E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CActF;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAmClF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAYzE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAa3E"}