@nebulr-group/bridge-cli 0.6.6 → 1.0.0-alpha.1

package/dist/program.js.map

@@ -1 +1 @@
-{"version":3,"file":"program.js","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACnC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,gGAAgG;IAChG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACrC,6EAA6E;IAC7E,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAGD;;;;GAIG;AACH,MAAM,cAAc,GAAG;IACrB,YAAY;IACZ,aAAa;IACb,aAAa;IACb,UAAU;IACV,UAAU;IACV,SAAS;IACT,YAAY;IACZ,OAAO;IACP,KAAK;IACL,OAAO;CACR,CAAC;AAEF,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAmB,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,8EAA8E;AAC9E,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC;QACE,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,MAAM,CACL,mCAAmC,EACnC,yEAAyE,CAC1E;SACA,MAAM,CACL,iBAAiB,EACjB,8KAA8K,CAC/K,CAAC;IAEJ,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE;QAC7D,yEAAyE;QACzE,+DAA+D;QAC/D,kBAAkB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,OAA6B,CAAC,CAAC;QAErE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,GAAyB,CAAC;QACzD,MAAM,aAAa,GACjB,aAAa,KAAK,WAAW,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACzF,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,GAAG,KAAK,SAAS;gBAAE,aAAa,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAChE,cAAc,CAAC,IAAI,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,cAAc,CAAC,GAAG,CAAC,CAAC;QAEpB,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO;QAE/E,IAAI,CAAC;YACH,MAAM,iBAAiB,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;YACjB,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"program.js","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAU,EAAE,OAAO,GAAG,OAAO;IACxD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,OAAO;SACJ,IAAI,CAAC,QAAQ,CAAC;SACd,WAAW,CAAC,gHAAgH,CAAC;SAC7H,OAAO,CAAC,OAAO,CAAC;SAChB,MAAM,CAAC,gBAAgB,EAAE,iEAAiE,CAAC;SAC3F,MAAM,CAAC,YAAY,EAAE,oFAAoF,CAAC;SAC1G,kBAAkB,EAAE,CAAC;IACxB,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvC,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvC,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nebulr-group/bridge-cli",
-  "version": "0.6.6",
-  "description": "The Bridge CLI: set up and manage sign-in, roles, plans, feature flags and API tokens from your terminal or AI coding agent.",
+  "version": "1.0.0-alpha.1",
+  "description": "The Bridge CLI: set up your app on Bridge from the terminal. Sign in, then create apps and their addresses, keys, plans with prices and trials, Stripe in test mode, and feature flags with their rules.",
   "author": "Nebulr Group",
   "license": "MIT",
   "type": "module",
@@ -15,16 +15,16 @@
     "README.md",
     "LICENSE"
   ],
+  "engines": {
+    "node": ">=20"
+  },
   "scripts": {
-    "build": "tsc && npm run copy:prompts",
-    "copy:prompts": "node -e \"const fs=require('fs'),path=require('path');function cp(s,d){if(fs.statSync(s).isDirectory()){fs.mkdirSync(d,{recursive:true});for(const f of fs.readdirSync(s))cp(path.join(s,f),path.join(d,f));}else fs.copyFileSync(s,d);}fs.rmSync('dist/prompts',{recursive:true,force:true});cp('prompts','dist/prompts');console.log('Copied prompts/ -> dist/prompts/');\"",
+    "build": "tsc",
     "prepublishOnly": "npm run build",
     "test": "jest --passWithNoTests",
-    "test:coverage": "jest --coverage",
-    "publish:local": "npm run build && node -e \"const fs=require('fs'),p=JSON.parse(fs.readFileSync('package.json','utf8')),v=p.version.match(/^(\\d+\\.\\d+\\.\\d+)-alpha\\.(\\d+)$/);if(v){p.version=v[1]+'-alpha.'+(+v[2]+1);}else{p.version=p.version+'-alpha.0';}fs.writeFileSync('package.json',JSON.stringify(p,null,'  ')+'\\n');console.log('Version bumped to '+p.version);\" && npm publish --registry http://host.docker.internal:4873 --no-git-checks --ignore-scripts && npm dist-tag add @nebulr-group/bridge-cli@$(node -p \"require('./package.json').version\") alpha --registry http://host.docker.internal:4873"
+    "test:coverage": "jest --coverage"
   },
   "dependencies": {
-    "@nebulr-group/bridge-auth-core": "0.8.0",
     "commander": "^12.0.0"
   },
   "devDependencies": {
@@ -39,7 +39,6 @@
     "ai-agent",
     "claude-code",
     "cursor",
-    "mcp",
     "devtools",
     "the-bridge",
     "bridge",

package/dist/auth/api-client.d.ts

@@ -1,50 +0,0 @@
-/**
- * Thin client for the bridge-api `/v1/auth/cli/*` endpoints.
- *
- * - `exchangeCode(...)` calls `POST /v1/auth/cli/token` with `{code, code_verifier}`.
- * - `revokeToken(...)` calls `POST /v1/auth/cli/revoke` with `x-api-key: <jwt>`.
- *
- * Errors come back RFC-style as `{ error, error_description }`. We translate
- * the common cases to friendly messages so end-users don't see RFC tags.
- *
- * The CLI authenticates as `x-api-key: <jwt>` (NOT `Authorization: Bearer`) —
- * see TBP-111 contract notes.
- */
-export interface CliTokenExchangeResponse {
-    api_token: string;
-    expires_at: string;
-    app: {
-        id: string;
-        name: string;
-    };
-    user: {
-        id: string;
-        email: string;
-    };
-    /** TBP-769 — what the login covers. Absent from servers before TBP-769. */
-    app_access?: 'app' | 'workspace';
-}
-export interface CliApiClientOptions {
-    /** Base URL of bridge-api, e.g. `https://api.thebridge.dev`. No trailing slash. */
-    baseUrl: string;
-    /** Used for diagnostics; do NOT log secrets. */
-    debug?: boolean;
-    /** Override fetch (for tests). Defaults to the global `fetch`. */
-    fetchImpl?: typeof fetch;
-}
-export declare class CliAuthApiError extends Error {
-    /** RFC error code returned by bridge-api (`invalid_request`, `invalid_grant`, ...). */
-    readonly code: string;
-    readonly status: number;
-    constructor(code: string, message: string, status: number);
-}
-export declare function createCliApiClient(options: CliApiClientOptions): {
-    exchangeCode: (args: {
-        code: string;
-        codeVerifier: string;
-    }) => Promise<CliTokenExchangeResponse>;
-    revokeToken: (token: string) => Promise<{
-        revoked: boolean;
-    }>;
-};
-//# sourceMappingURL=api-client.d.ts.map

package/dist/auth/api-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../src/auth/api-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,2EAA2E;IAC3E,UAAU,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,mFAAmF;IACnF,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,kEAAkE;IAClE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,eAAgB,SAAQ,KAAK;IACxC,uFAAuF;IACvF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAM1D;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB;yBAU3B;QAChC,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,MAAM,CAAC;KACtB,KAAG,OAAO,CAAC,wBAAwB,CAAC;yBA+BH,MAAM,KAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;EA2BzE"}

package/dist/auth/api-client.js

@@ -1,109 +0,0 @@
-/**
- * Thin client for the bridge-api `/v1/auth/cli/*` endpoints.
- *
- * - `exchangeCode(...)` calls `POST /v1/auth/cli/token` with `{code, code_verifier}`.
- * - `revokeToken(...)` calls `POST /v1/auth/cli/revoke` with `x-api-key: <jwt>`.
- *
- * Errors come back RFC-style as `{ error, error_description }`. We translate
- * the common cases to friendly messages so end-users don't see RFC tags.
- *
- * The CLI authenticates as `x-api-key: <jwt>` (NOT `Authorization: Bearer`) —
- * see TBP-111 contract notes.
- */
-export class CliAuthApiError extends Error {
-    /** RFC error code returned by bridge-api (`invalid_request`, `invalid_grant`, ...). */
-    code;
-    status;
-    constructor(code, message, status) {
-        super(message);
-        this.name = 'CliAuthApiError';
-        this.code = code;
-        this.status = status;
-    }
-}
-export function createCliApiClient(options) {
-    const baseUrl = options.baseUrl.replace(/\/$/, '');
-    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
-    if (typeof fetchImpl !== 'function') {
-        throw new Error('No global `fetch` is available. Run bridge-cli on Node.js >= 18.');
-    }
-    async function exchangeCode(args) {
-        const url = `${baseUrl}/v1/auth/cli/token`;
-        const res = await fetchImpl(url, {
-            method: 'POST',
-            headers: { 'content-type': 'application/json' },
-            body: JSON.stringify({
-                code: args.code,
-                code_verifier: args.codeVerifier,
-            }),
-        });
-        if (!res.ok) {
-            throw await translateError(res);
-        }
-        const body = (await res.json());
-        if (!body || typeof body.api_token !== 'string') {
-            throw new CliAuthApiError('invalid_response', 'Bridge API returned an unexpected response from /v1/auth/cli/token.', res.status);
-        }
-        return body;
-    }
-    /**
-     * Best-effort revoke. The CLI uses self-revoke (token is identified by the
-     * `x-api-key` it sends). 401 means the token is already gone — treat as
-     * success.
-     */
-    async function revokeToken(token) {
-        const url = `${baseUrl}/v1/auth/cli/revoke`;
-        let res;
-        try {
-            res = await fetchImpl(url, {
-                method: 'POST',
-                headers: {
-                    'content-type': 'application/json',
-                    'x-api-key': token,
-                },
-                body: '{}',
-            });
-        }
-        catch (err) {
-            // Network failure — caller can still delete the local file.
-            throw new CliAuthApiError('network_error', `Could not reach bridge-api to revoke token: ${err instanceof Error ? err.message : String(err)}`, 0);
-        }
-        if (res.ok)
-            return { revoked: true };
-        if (res.status === 401)
-            return { revoked: true }; // already revoked / expired
-        throw await translateError(res);
-    }
-    return { exchangeCode, revokeToken };
-}
-async function translateError(res) {
-    let raw;
-    try {
-        raw = await res.json();
-    }
-    catch {
-        return new CliAuthApiError('http_error', `Bridge API returned HTTP ${res.status}.`, res.status);
-    }
-    const obj = (raw && typeof raw === 'object' ? raw : {});
-    const code = typeof obj.error === 'string' ? obj.error : 'http_error';
-    const desc = typeof obj.error_description === 'string' ? obj.error_description : undefined;
-    let friendly;
-    switch (code) {
-        case 'invalid_request':
-            friendly = desc ?? 'The login request was rejected as malformed.';
-            break;
-        case 'invalid_grant':
-            friendly = 'The authorization code has already been used or is invalid. Please run `bridge auth login` again.';
-            break;
-        case 'expired_grant':
-            friendly = 'The authorization code expired before it could be exchanged. Please run `bridge auth login` again.';
-            break;
-        case 'access_denied':
-            friendly = 'Login cancelled.';
-            break;
-        default:
-            friendly = desc ?? `Bridge API returned HTTP ${res.status}.`;
-    }
-    return new CliAuthApiError(code, friendly, res.status);
-}
-//# sourceMappingURL=api-client.js.map

package/dist/auth/api-client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../src/auth/api-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoBH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,uFAAuF;IAC9E,IAAI,CAAS;IACb,MAAM,CAAS;IACxB,YAAY,IAAY,EAAE,OAAe,EAAE,MAAc;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IAExD,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,IAG3B;QACC,MAAM,GAAG,GAAG,GAAG,OAAO,oBAAoB,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,aAAa,EAAE,IAAI,CAAC,YAAY;aACjC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA6B,CAAC;QAC5D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,qEAAqE,EACrE,GAAG,CAAC,MAAM,CACX,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,WAAW,CAAC,KAAa;QACtC,MAAM,GAAG,GAAG,GAAG,OAAO,qBAAqB,CAAC;QAC5C,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBACzB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,WAAW,EAAE,KAAK;iBACnB;gBACD,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,4DAA4D;YAC5D,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACjG,CAAC,CACF,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,4BAA4B;QAC9E,MAAM,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAa;IACzC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,eAAe,CACxB,YAAY,EACZ,4BAA4B,GAAG,CAAC,MAAM,GAAG,EACzC,GAAG,CAAC,MAAM,CACX,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IACnF,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;IACtE,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAE3F,IAAI,QAAgB,CAAC;IACrB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB;YACpB,QAAQ,GAAG,IAAI,IAAI,8CAA8C,CAAC;YAClE,MAAM;QACR,KAAK,eAAe;YAClB,QAAQ,GAAG,mGAAmG,CAAC;YAC/G,MAAM;QACR,KAAK,eAAe;YAClB,QAAQ,GAAG,oGAAoG,CAAC;YAChH,MAAM;QACR,KAAK,eAAe;YAClB,QAAQ,GAAG,kBAAkB,CAAC;YAC9B,MAAM;QACR;YACE,QAAQ,GAAG,IAAI,IAAI,4BAA4B,GAAG,CAAC,MAAM,GAAG,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC"}

package/dist/auth/relative-time.d.ts

@@ -1,2 +0,0 @@
-export declare function formatRelativeTime(deltaMs: number): string;
-//# sourceMappingURL=relative-time.d.ts.map

package/dist/auth/relative-time.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"relative-time.d.ts","sourceRoot":"","sources":["../../src/auth/relative-time.ts"],"names":[],"mappings":"AAkBA,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAS1D"}

package/dist/auth/relative-time.js

@@ -1,27 +0,0 @@
-/**
- * Tiny human-readable relative time formatter — avoids pulling in dayjs/date-fns.
- *
- * Examples:
- *   formatRelativeTime(+9 days)  → "in 9 days"
- *   formatRelativeTime(+3 hours) → "in 3 hours"
- *   formatRelativeTime(0)        → "just now"
- *   formatRelativeTime(-2 days)  → "2 days ago"
- */
-const UNITS = [
-    { name: 'year', ms: 365 * 24 * 60 * 60 * 1000 },
-    { name: 'month', ms: 30 * 24 * 60 * 60 * 1000 },
-    { name: 'day', ms: 24 * 60 * 60 * 1000 },
-    { name: 'hour', ms: 60 * 60 * 1000 },
-    { name: 'minute', ms: 60 * 1000 },
-    { name: 'second', ms: 1000 },
-];
-export function formatRelativeTime(deltaMs) {
-    const abs = Math.abs(deltaMs);
-    if (abs < 1000)
-        return 'just now';
-    const unit = UNITS.find((u) => abs >= u.ms) ?? UNITS[UNITS.length - 1];
-    const value = Math.round(abs / unit.ms);
-    const noun = `${unit.name}${value === 1 ? '' : 's'}`;
-    return deltaMs >= 0 ? `in ${value} ${noun}` : `${value} ${noun} ago`;
-}
-//# sourceMappingURL=relative-time.js.map

package/dist/auth/relative-time.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"relative-time.js","sourceRoot":"","sources":["../../src/auth/relative-time.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,KAAK,GAAwC;IACjD,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE;IAC/C,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE;IAC/C,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE;IACxC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE;IACpC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE;IACjC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE;CAC7B,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,GAAG,GAAG,IAAI;QAAE,OAAO,UAAU,CAAC;IAElC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAErD,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,MAAM,CAAC;AACvE,CAAC"}

package/dist/auth/scopes.d.ts

@@ -1,30 +0,0 @@
-/**
- * OAuth-style scopes the CLI can request at login (TBP-593).
- *
- * Deliberately a standalone, side-effect-free module: `login.command.ts` pulls
- * in config, credentials and the loopback server at import time, and importing
- * that from a test leaked state into unrelated suites.
- */
-/** Default scope — read, list, create and update. No destructive authority. */
-export declare const SCOPE_MANAGEMENT = "management";
-/**
- * Opt-in elevated scope, requested by `bridge auth login --admin`.
- *
- * Adds the destructive privileges plus `TOKEN_WRITE`, which is what
- * `bridge token create` requires. Without it a newly provisioned app can never
- * be given its own API key through the CLI.
- *
- * Not the default on purpose: this token is written to disk and lives for ten
- * days, and a credential like that should not carry delete authority unless
- * someone asked for it (TBP-552 made destructive privileges opt-in per token).
- */
-export declare const SCOPE_MANAGEMENT_ADMIN = "management:admin";
-/**
- * Privileges the default scope does NOT grant and `--admin` does.
- *
- * Duplicated from the server rather than fetched so the CLI can still give an
- * actionable hint against an older bridge-api; a stale entry costs a slightly
- * wrong hint, not a broken command.
- */
-export declare const ADMIN_SCOPE_PRIVILEGES: Set<string>;
-//# sourceMappingURL=scopes.d.ts.map

package/dist/auth/scopes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../../src/auth/scopes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAE7C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAEzD;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,aASjC,CAAC"}

package/dist/auth/scopes.js

@@ -1,39 +0,0 @@
-/**
- * OAuth-style scopes the CLI can request at login (TBP-593).
- *
- * Deliberately a standalone, side-effect-free module: `login.command.ts` pulls
- * in config, credentials and the loopback server at import time, and importing
- * that from a test leaked state into unrelated suites.
- */
-/** Default scope — read, list, create and update. No destructive authority. */
-export const SCOPE_MANAGEMENT = 'management';
-/**
- * Opt-in elevated scope, requested by `bridge auth login --admin`.
- *
- * Adds the destructive privileges plus `TOKEN_WRITE`, which is what
- * `bridge token create` requires. Without it a newly provisioned app can never
- * be given its own API key through the CLI.
- *
- * Not the default on purpose: this token is written to disk and lives for ten
- * days, and a credential like that should not carry delete authority unless
- * someone asked for it (TBP-552 made destructive privileges opt-in per token).
- */
-export const SCOPE_MANAGEMENT_ADMIN = 'management:admin';
-/**
- * Privileges the default scope does NOT grant and `--admin` does.
- *
- * Duplicated from the server rather than fetched so the CLI can still give an
- * actionable hint against an older bridge-api; a stale entry costs a slightly
- * wrong hint, not a broken command.
- */
-export const ADMIN_SCOPE_PRIVILEGES = new Set([
-    'TOKEN_WRITE',
-    'TENANT_DELETE',
-    'USER_DELETE',
-    'ROLE_DELETE',
-    'FLAG_DELETE',
-    'APP_DELETE',
-    'BRANDING_DELETE',
-    'COMMUNICATION_DELETE',
-]);
-//# sourceMappingURL=scopes.js.map

package/dist/auth/scopes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../src/auth/scopes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAE7C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IAC5C,aAAa;IACb,eAAe;IACf,aAAa;IACb,aAAa;IACb,aAAa;IACb,YAAY;IACZ,iBAAiB;IACjB,sBAAsB;CACvB,CAAC,CAAC"}

package/dist/auth/workspace-client.d.ts

@@ -1,70 +0,0 @@
-/**
- * Thin client for the bridge-api `/v1/cli/workspace/*` routes (TBP-769).
- *
- * One `bridge auth login` covers every app of the workspace (unless the user
- * chose "only this app" on the consent screen). These routes are how the CLI
- * lists those apps, creates one, and trades the login token for a short-lived
- * token for ANOTHER app — the same shape the MCP server's `app` argument uses.
- *
- * Every call authenticates with the LOGIN token (`x-api-key`); per-app tokens
- * are never accepted here, and are never written to disk by the CLI.
- *
- * Errors come back as `{ code, message, fix }`. They are surfaced as a
- * `WorkspaceApiError` whose `code` and `hint` (= the server's `fix`) are picked
- * up by `outputError`, so the reader gets the next step, not just the failure.
- */
-export interface WorkspaceApp {
-    id: string;
-    name: string;
-    home: boolean;
-}
-export interface WorkspaceAppsResponse {
-    scope: 'workspace' | 'app';
-    homeAppId: string;
-    apps: WorkspaceApp[];
-}
-export interface WorkspaceAppToken {
-    apiKey: string;
-    expiresAt: string;
-    app: {
-        id: string;
-        name: string;
-    };
-}
-export declare class WorkspaceApiError extends Error {
-    readonly code: string;
-    readonly hint?: string;
-    readonly status: number;
-    constructor(code: string, message: string, status: number, hint?: string);
-}
-export interface WorkspaceClientOptions {
-    baseUrl: string;
-    /** The `bridge auth login` token. */
-    loginToken: string;
-    fetchImpl?: typeof fetch;
-}
-export declare function createWorkspaceClient(options: WorkspaceClientOptions): {
-    listApps: () => Promise<WorkspaceAppsResponse>;
-    appToken: (appId: string) => Promise<WorkspaceAppToken>;
-    createApp: (input: {
-        name: string;
-        callbackUrl?: string;
-    }) => Promise<{
-        app: {
-            id: string;
-            name: string;
-        };
-    }>;
-};
-/** App ids are Mongo ObjectIds. Anything else is treated as an app name. */
-export declare function looksLikeAppId(value: string): boolean;
-/**
- * Resolve `<id|name>` against a list of apps. Id first (exact), then name
- * (case-insensitive). Two apps sharing a name is an ERROR, never a first match
- * — acting on the wrong app is the failure this whole area exists to prevent.
- */
-export declare function resolveAppSelector<T extends {
-    id: string;
-    name: string;
-}>(selector: string, apps: T[]): T;
-//# sourceMappingURL=workspace-client.d.ts.map

package/dist/auth/workspace-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"workspace-client.d.ts","sourceRoot":"","sources":["../../src/auth/workspace-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,WAAW,GAAG,KAAK,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,YAAY,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACnC;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAOzE;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB;;sBA4B/C,MAAM;uBAEL;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;aAC3C;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE;;EAE7C;AA2BD,4EAA4E;AAC5E,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACvE,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,CAAC,EAAE,GACR,CAAC,CAqBH"}

package/dist/auth/workspace-client.js

@@ -1,105 +0,0 @@
-/**
- * Thin client for the bridge-api `/v1/cli/workspace/*` routes (TBP-769).
- *
- * One `bridge auth login` covers every app of the workspace (unless the user
- * chose "only this app" on the consent screen). These routes are how the CLI
- * lists those apps, creates one, and trades the login token for a short-lived
- * token for ANOTHER app — the same shape the MCP server's `app` argument uses.
- *
- * Every call authenticates with the LOGIN token (`x-api-key`); per-app tokens
- * are never accepted here, and are never written to disk by the CLI.
- *
- * Errors come back as `{ code, message, fix }`. They are surfaced as a
- * `WorkspaceApiError` whose `code` and `hint` (= the server's `fix`) are picked
- * up by `outputError`, so the reader gets the next step, not just the failure.
- */
-export class WorkspaceApiError extends Error {
-    code;
-    hint;
-    status;
-    constructor(code, message, status, hint) {
-        super(message);
-        this.name = 'WorkspaceApiError';
-        this.code = code;
-        this.status = status;
-        if (hint)
-            this.hint = hint;
-    }
-}
-export function createWorkspaceClient(options) {
-    const baseUrl = options.baseUrl.replace(/\/$/, '');
-    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
-    async function call(method, path, body) {
-        let res;
-        try {
-            res = await fetchImpl(`${baseUrl}/v1/cli/workspace${path}`, {
-                method,
-                headers: {
-                    'x-api-key': options.loginToken,
-                    ...(body !== undefined ? { 'content-type': 'application/json' } : {}),
-                },
-                ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
-            });
-        }
-        catch (err) {
-            throw new WorkspaceApiError('NETWORK_ERROR', `Could not reach ${baseUrl}: ${err instanceof Error ? err.message : String(err)}`, 0);
-        }
-        if (!res.ok)
-            throw await translateError(res);
-        return (await res.json());
-    }
-    return {
-        listApps: () => call('GET', '/apps'),
-        appToken: (appId) => call('POST', `/apps/${encodeURIComponent(appId)}/token`),
-        createApp: (input) => call('POST', '/apps', input),
-    };
-}
-async function translateError(res) {
-    let raw;
-    try {
-        raw = await res.json();
-    }
-    catch {
-        raw = undefined;
-    }
-    const obj = (raw && typeof raw === 'object' ? raw : {});
-    const str = (v) => (typeof v === 'string' && v.length > 0 ? v : undefined);
-    let code = str(obj.code) ?? `HTTP_${res.status}`;
-    let message = str(obj.message) ?? `Bridge API returned HTTP ${res.status}.`;
-    let fix = str(obj.fix);
-    if (res.status === 401) {
-        code = str(obj.code) ?? 'UNAUTHORIZED';
-        if (!str(obj.message))
-            message = 'Your login is no longer valid.';
-        fix = fix ?? 'Run `bridge auth login` again.';
-    }
-    else if (res.status === 403 && !fix && !str(obj.code)) {
-        // A token that is not a `bridge auth login` token (e.g. BRIDGE_API_KEY).
-        fix = 'App selection needs a `bridge auth login` credential.';
-    }
-    return new WorkspaceApiError(code, message, res.status, fix);
-}
-/** App ids are Mongo ObjectIds. Anything else is treated as an app name. */
-export function looksLikeAppId(value) {
-    return /^[a-f0-9]{24}$/i.test(value.trim());
-}
-/**
- * Resolve `<id|name>` against a list of apps. Id first (exact), then name
- * (case-insensitive). Two apps sharing a name is an ERROR, never a first match
- * — acting on the wrong app is the failure this whole area exists to prevent.
- */
-export function resolveAppSelector(selector, apps) {
-    const needle = selector.trim();
-    const byId = apps.find((a) => a.id === needle);
-    if (byId)
-        return byId;
-    const lower = needle.toLowerCase();
-    const byName = apps.filter((a) => a.name.toLowerCase() === lower);
-    if (byName.length === 1)
-        return byName[0];
-    if (byName.length > 1) {
-        throw new WorkspaceApiError('APP_AMBIGUOUS', `"${needle}" matches ${byName.length} apps by name (${byName.map((a) => a.id).join(', ')}).`, 0, 'Select the app by id instead. `bridge app list` shows them.');
-    }
-    throw new WorkspaceApiError('APP_NOT_FOUND', `No app in this login matches "${needle}". Known: ${apps.map((a) => `${a.name} (${a.id})`).join(', ') || '(none)'}.`, 0, 'Run `bridge app list` to see the apps this login covers.');
-}
-//# sourceMappingURL=workspace-client.js.map

package/dist/auth/workspace-client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workspace-client.js","sourceRoot":"","sources":["../../src/auth/workspace-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAoBH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAS;IACb,IAAI,CAAU;IACd,MAAM,CAAS;IACxB,YAAY,IAAY,EAAE,OAAe,EAAE,MAAc,EAAE,IAAa;QACtE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAC7B,CAAC;CACF;AASD,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IAExD,KAAK,UAAU,IAAI,CAAI,MAAsB,EAAE,IAAY,EAAE,IAAc;QACzE,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,oBAAoB,IAAI,EAAE,EAAE;gBAC1D,MAAM;gBACN,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO,CAAC,UAAU;oBAC/B,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtE;gBACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,iBAAiB,CACzB,eAAe,EACf,mBAAmB,OAAO,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACjF,CAAC,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAwB,KAAK,EAAE,OAAO,CAAC;QAC3D,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE,CAC1B,IAAI,CAAoB,MAAM,EAAE,SAAS,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7E,SAAS,EAAE,CAAC,KAA6C,EAAE,EAAE,CAC3D,IAAI,CAAwC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAa;IACzC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IACnF,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEpF,IAAI,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;IACjD,IAAI,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,4BAA4B,GAAG,CAAC,MAAM,GAAG,CAAC;IAC5E,IAAI,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEvB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,gCAAgC,CAAC;QAClE,GAAG,GAAG,GAAG,IAAI,gCAAgC,CAAC;IAChD,CAAC;SAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,yEAAyE;QACzE,GAAG,GAAG,uDAAuD,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,IAAS;IAET,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC/C,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,iBAAiB,CACzB,eAAe,EACf,IAAI,MAAM,aAAa,MAAM,CAAC,MAAM,kBAAkB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAC5F,CAAC,EACD,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,iBAAiB,CACzB,eAAe,EACf,iCAAiC,MAAM,aAAa,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,EACpH,CAAC,EACD,0DAA0D,CAC3D,CAAC;AACJ,CAAC"}

package/dist/commands/auth/config.command.d.ts

@@ -1,8 +0,0 @@
-/**
- * `bridge auth config|mfa|password-policy` — the original auth subcommands
- * that pre-date TBP-113. Kept as-is; just lifted out of `auth.command.ts`
- * so the file stays small and testable.
- */
-import type { Command } from 'commander';
-export declare function registerAuthConfigCommands(auth: Command): void;
-//# sourceMappingURL=config.command.d.ts.map

package/dist/commands/auth/config.command.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.command.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/config.command.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAyD9D"}

package/dist/commands/auth/config.command.js

@@ -1,60 +0,0 @@
-import { getManagementClient } from '../../config.js';
-import { outputSuccess, outputError } from '../../output.js';
-export function registerAuthConfigCommands(auth) {
-    auth
-        .command('config')
-        .description('Get current auth configuration')
-        .action(async () => {
-        try {
-            const app = await getManagementClient().app.get();
-            outputSuccess({
-                mfaEnabled: app.mfaEnabled,
-                passkeysEnabled: app.passkeysEnabled,
-                magicLinkEnabled: app.magicLinkEnabled,
-                googleSsoEnabled: app.googleSsoEnabled,
-                azureAdSsoEnabled: app.azureAdSsoEnabled,
-                githubSsoEnabled: app.githubSsoEnabled,
-                linkedinSsoEnabled: app.linkedinSsoEnabled,
-                facebookSsoEnabled: app.facebookSsoEnabled,
-                appleSsoEnabled: app.appleSsoEnabled,
-                onboardingFlow: app.onboardingFlow,
-                tenantSelfSignup: app.tenantSelfSignup,
-                accessTokenTTL: app.accessTokenTTL,
-                refreshTokenTTL: app.refreshTokenTTL,
-            });
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    auth
-        .command('mfa')
-        .description('Enable or disable MFA')
-        .requiredOption('--enabled <bool>', 'true or false', (v) => v === 'true')
-        .action(async (opts) => {
-        try {
-            outputSuccess(await getManagementClient().app.update({ mfaEnabled: opts.enabled }));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    auth
-        .command('password-policy')
-        .description('Update access token TTL')
-        .option('--access-token-ttl <seconds>', 'Access token TTL in seconds', parseInt)
-        .option('--refresh-token-ttl <seconds>', 'Refresh token TTL in seconds', parseInt)
-        .action(async (opts) => {
-        try {
-            const data = Object.fromEntries(Object.entries({
-                accessTokenTTL: opts.accessTokenTtl,
-                refreshTokenTTL: opts.refreshTokenTtl,
-            }).filter(([, v]) => v !== undefined));
-            outputSuccess(await getManagementClient().app.update(data));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-}
-//# sourceMappingURL=config.command.js.map

package/dist/commands/auth/config.command.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.command.js","sourceRoot":"","sources":["../../../src/commands/auth/config.command.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE7D,MAAM,UAAU,0BAA0B,CAAC,IAAa;IACtD,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,mBAAmB,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAClD,aAAa,CAAC;gBACZ,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,eAAe,EAAE,GAAG,CAAC,eAAe;aACrC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,uBAAuB,CAAC;SACpC,cAAc,CAAC,kBAAkB,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC;SACxE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,aAAa,CAAC,MAAM,mBAAmB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CAAC,yBAAyB,CAAC;SACtC,MAAM,CAAC,8BAA8B,EAAE,6BAA6B,EAAE,QAAQ,CAAC;SAC/E,MAAM,CAAC,+BAA+B,EAAE,8BAA8B,EAAE,QAAQ,CAAC;SACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAC7B,MAAM,CAAC,OAAO,CAAC;gBACb,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CACtC,CAAC;YACF,aAAa,CAAC,MAAM,mBAAmB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}