@nebulr-group/bridge-cli 0.6.6 → 1.0.0-alpha.1

package/dist/commands/journeys.js

@@ -1,221 +0,0 @@
-import { readFile } from 'node:fs/promises';
-import { join } from 'node:path';
-import { commandsDir } from './runtime-dir.js';
-import { outputError, outputPrompt, outputSuccess } from '../output.js';
-import { cliPromptUrl } from '../prompt-urls.js';
-/*
- * TBP-712 — the Bridge's seven journeys by name: `bridge guide add-login` etc.
- *
- * The same seven are prompts (client commands) on the Bridge MCP server, and
- * both surfaces compose the same content: the journey's decision guide
- * (TBP-540) or, until it is written, the framework-agnostic master that exists
- * today, then the per-framework guide. The MCP prompt steers to tools; this
- * steers to the matching `bridge …` commands.
- */
-/** The seven TBP-540 decision domains a journey can open with. */
-export const DECISION_DOMAINS = [
-    'login', 'teams', 'roles', 'payments', 'feature-control', 'look-and-feel', 'going-live',
-];
-const PRODUCT_QUESTIONS = 'Product questions (what to charge, who may do what, what a plan includes, what users see) belong to the ' +
-    'developer: ask them and wait. Mechanics you decide, following the guide, and state the reason in one line.';
-export const JOURNEYS = [
-    {
-        name: 'add-login',
-        title: 'Add login',
-        domain: 'login',
-        master: 'auth',
-        feature: 'auth',
-        steps: [
-            'Goal: users can sign up and sign in to this app through the Bridge.',
-            'Sign-in happens inside the app (SDK mode), styled to match its existing design; tell the developer in one line. (If they explicitly ask for Bridge\'s hosted sign-in page, or the app already uses it, respect that.)',
-            'Read the current setup with `bridge app get` and `bridge auth config`.',
-            'See every sign-in method with `bridge auth methods list`; ask the developer which they want, then `bridge auth methods enable|disable`. A social provider needs its credentials first: `bridge setup sso`.',
-            'Register the callback URL with `bridge app redirect-uris add` (never replace the list).',
-            'Prove it works at the end by asking the developer to sign up and sign in themselves in the running app: sign up at /auth/signup, open the verification email, set a password, sign in, sign out. Do not create test users. If any step fails, `bridge event auth-attempts --user <their email>` names the reason and the fix.',
-        ],
-    },
-    {
-        name: 'add-paid-plan',
-        title: 'Add a paid plan',
-        domain: 'payments',
-        master: 'billing',
-        feature: 'billing',
-        steps: [
-            'Goal: a customer can pick a paid plan and pay for it.',
-            'Read the current plans with `bridge plan list`.',
-            'Plan names, prices, trials and quotas are product decisions: ask the developer, then `bridge plan create`, `bridge plan price set`, `bridge plan quota set`.',
-            'Check payments with `bridge stripe status`; `bridge stripe connect` if it is not connected.',
-            'A /welcome page for new customers is an offer: suggest it, and create it only if the developer says yes.',
-        ],
-    },
-    {
-        name: 'add-feature-flag',
-        title: 'Add a feature flag',
-        domain: 'feature-control',
-        master: 'flags',
-        feature: 'feature-flags',
-        steps: [
-            'Goal: a feature in the app is controlled by a Bridge flag.',
-            'Read the current flags with `bridge flag list`.',
-            'How flags, plans, roles and limits fit together: `bridge guide fit-together`. A feature a plan sells goes on the plan (`bridge plan feature add`) and the rule points at `bridge:billing.entitlement.<feature>`; who someone is goes in a rule on a privilege, never a role check in code.',
-            'Who should see the feature is the developer\'s call: ask, then `bridge flag create` with that rule.',
-            'Read the flag in the app with the SDK surface the guide names, never by hand against SDK internals.',
-        ],
-    },
-    {
-        name: 'add-teams',
-        title: 'Add teams',
-        domain: 'teams',
-        master: null,
-        feature: 'team',
-        steps: [
-            'Goal: a customer can invite teammates into their workspace, each with a role.',
-            'Read the current roles with `bridge role list`: what a role can do is only the default setup until you have read it.',
-            'Which roles exist and what each may do are product decisions: ask the developer, then `bridge role create` / `bridge role update`.',
-            'Wire the team UI with the SDK surface the per-framework team guide names.',
-        ],
-    },
-    {
-        name: 'go-live',
-        title: 'Go live',
-        domain: 'going-live',
-        master: null,
-        feature: null,
-        steps: [
-            'Goal: nothing on the readiness checklist blocks real users.',
-            'Run `bridge setup status` and start from its productionNeeds. Take each item in turn with the developer: production URLs, redirect URIs and origins, the email sender (`bridge setup communication`), live Stripe keys.',
-            'Finish with `bridge setup status` again and show the developer what is left.',
-        ],
-    },
-    {
-        name: 'verify-setup',
-        title: 'Verify setup',
-        domain: null,
-        master: null,
-        feature: null,
-        steps: [
-            'Goal: evidence that sign-in works end to end, not an opinion.',
-            '1. `bridge diagnose` in the project: it reads the .env files and reports every difference with its fix.',
-            '2. `bridge setup status` for the readiness checklist.',
-            '3. Ask the developer to sign up and sign in themselves in the running app (signup, the verification email, sign-in, sign-out). Do not create test users. If a step fails, `bridge event auth-attempts --user <their email>` gives the reason and the fix.',
-        ],
-    },
-    {
-        name: 'whats-wrong',
-        title: 'What is wrong',
-        domain: null,
-        master: null,
-        feature: null,
-        steps: [
-            'Goal: the reason for the failure and its fix, from evidence.',
-            'Someone cannot sign in: `bridge event auth-attempts` for their email; each failed attempt carries its reason and fix.',
-            'The app itself misbehaves: `bridge diagnose` in the project, then `bridge setup status`.',
-            'To tell a Bridge problem from an app-code problem: `bridge test-user create` and `bridge test-user verify`. If that works, the app code is the difference.',
-        ],
-    },
-];
-export function findJourney(name) {
-    return JOURNEYS.find((j) => j.name === name);
-}
-/**
- * THE seam for TBP-540: a decision guide is `prompts/decisions/<domain>.md`,
- * beside the masters. Read like them (dev override, then bundled), then from
- * GitHub so a CLI released before a guide was written still finds it — the
- * same path the MCP server reads. Null means not written yet.
- */
-export async function fetchDecisionGuide(domain) {
-    const filename = `${domain}.md`;
-    const localDir = process.env.BRIDGE_GUIDE_LOCAL_DIR;
-    const candidates = [
-        ...(localDir ? [join(localDir, 'bridge-cli', 'bridge-cli', 'prompts', 'decisions', filename)] : []),
-        join(commandsDir, '..', 'prompts', 'decisions', filename),
-        join(commandsDir, '..', '..', 'prompts', 'decisions', filename),
-    ];
-    for (const path of candidates) {
-        try {
-            return await readFile(path, 'utf-8');
-        }
-        catch {
-            /* try next */
-        }
-    }
-    try {
-        const res = await fetch(cliPromptUrl('decisions', filename));
-        return res.ok ? await res.text() : null;
-    }
-    catch {
-        return null;
-    }
-}
-export async function composeJourney(journey, framework, sources) {
-    const header = [`# ${journey.title} — a Bridge journey`, '', ...journey.steps, '', PRODUCT_QUESTIONS, ''];
-    if (journey.feature) {
-        header.push(framework
-            ? `Framework: ${framework}.`
-            : 'Framework not detected from package.json: re-run with `--framework <name>` ' +
-                '(svelte, react, angular, nextjs, nestjs, express) to include the per-framework guide, or ask the developer.');
-    }
-    header.push(`In an MCP client the same journey is the \`${journey.name}\` prompt of the Bridge server.`);
-    const sections = [header.join('\n')];
-    let opensWith = 'none';
-    if (journey.domain) {
-        const decision = await sources.decision(journey.domain);
-        if (decision) {
-            sections.push(decision);
-            opensWith = 'decision';
-        }
-        else if (journey.master) {
-            sections.push(`(The decision guide for ${journey.domain} is not written yet; this is the closest existing guide.)\n\n` +
-                (await sources.master(journey.master)));
-            opensWith = 'master';
-        }
-        else {
-            sections.push(`(The decision guide for ${journey.domain} is not written yet, and no framework-agnostic guide covers it. ` +
-                'Work from the steps above, and take every product decision to the developer.)');
-        }
-    }
-    if (journey.feature && framework) {
-        const features = sources.coverage()[framework] ?? [];
-        const feature = journey.feature === 'auth' && features.includes('sdk-auth') ? 'sdk-auth' : journey.feature;
-        sections.push(await sources.frameworkGuide(framework, feature));
-    }
-    return { journey: journey.name, framework, opensWith, guide: sections.join('\n\n---\n\n') };
-}
-/** The message for `bridge guide <name>` when nothing matches: names what does. */
-export function unknownGuideMessage(name, frameworks) {
-    return (`No guide named '${name}'. Journeys: ${JOURNEYS.map((j) => j.name).join(', ')}. ` +
-        `Frameworks: ${frameworks.join(', ')} (e.g. \`bridge guide svelte auth\`). ` +
-        'Also: orientation (what Bridge does), fit-together (how roles, plans, limits and flags fit together), ' +
-        'decision <domain>, flags, billing, mechanisms, custom, list. ' +
-        '`bridge guide` alone prints the integration master.');
-}
-export function registerJourneyCommands(guide, sources, detectFramework) {
-    for (const journey of JOURNEYS) {
-        const cmd = guide
-            .command(journey.name)
-            .description(`Journey: ${journey.title.toLowerCase()} (the same as the Bridge MCP prompt)`)
-            .option('--json', 'Emit a JSON envelope instead of the raw markdown prompt');
-        if (journey.feature) {
-            cmd
-                .option('--framework <name>', 'svelte | react | angular | nextjs | nestjs | express (auto-detected from package.json when omitted)')
-                .option('--cwd <path>', 'Project dir used for framework detection', process.cwd());
-        }
-        cmd.action(async (_opts, command) => {
-            try {
-                const opts = command.optsWithGlobals();
-                const framework = journey.feature
-                    ? (await detectFramework(opts.framework, opts.cwd ?? process.cwd())) ?? null
-                    : null;
-                const composed = await composeJourney(journey, framework, sources);
-                if (opts.json)
-                    outputSuccess(composed);
-                else
-                    outputPrompt(composed.guide);
-            }
-            catch (err) {
-                outputError(err);
-            }
-        });
-    }
-}
-//# sourceMappingURL=journeys.js.map

package/dist/commands/journeys.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"journeys.js","sourceRoot":"","sources":["../../src/commands/journeys.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD;;;;;;;;GAQG;AAEH,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY;CAC/E,CAAC;AAgBX,MAAM,iBAAiB,GACrB,0GAA0G;IAC1G,4GAA4G,CAAC;AAE/G,MAAM,CAAC,MAAM,QAAQ,GAAc;IACjC;QACE,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,MAAM;QACf,KAAK,EAAE;YACL,qEAAqE;YACrE,uNAAuN;YACvN,wEAAwE;YACxE,4MAA4M;YAC5M,yFAAyF;YACzF,+TAA+T;SAChU;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE;YACL,uDAAuD;YACvD,iDAAiD;YACjD,8JAA8J;YAC9J,6FAA6F;YAC7F,0GAA0G;SAC3G;KACF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,iBAAiB;QACzB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,eAAe;QACxB,KAAK,EAAE;YACL,4DAA4D;YAC5D,iDAAiD;YACjD,4RAA4R;YAC5R,qGAAqG;YACrG,qGAAqG;SACtG;KACF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,MAAM;QACf,KAAK,EAAE;YACL,+EAA+E;YAC/E,sHAAsH;YACtH,oIAAoI;YACpI,2EAA2E;SAC5E;KACF;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI;QACb,KAAK,EAAE;YACL,6DAA6D;YAC7D,yNAAyN;YACzN,8EAA8E;SAC/E;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,cAAc;QACrB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI;QACb,KAAK,EAAE;YACL,+DAA+D;YAC/D,yGAAyG;YACzG,uDAAuD;YACvD,2PAA2P;SAC5P;KACF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI;QACb,KAAK,EAAE;YACL,8DAA8D;YAC9D,uHAAuH;YACvH,0FAA0F;YAC1F,4JAA4J;SAC7J;KACF;CACF,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAsB;IAC7D,MAAM,QAAQ,GAAG,GAAG,MAAM,KAAK,CAAC;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACpD,MAAM,UAAU,GAAG;QACjB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC;QACzD,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC;KAChE,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7D,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAmBD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAgB,EAChB,SAAwB,EACxB,OAAuB;IAEvB,MAAM,MAAM,GAAG,CAAC,KAAK,OAAO,CAAC,KAAK,qBAAqB,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC1G,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CACT,SAAS;YACP,CAAC,CAAC,cAAc,SAAS,GAAG;YAC5B,CAAC,CAAC,6EAA6E;gBAC3E,6GAA6G,CACpH,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,8CAA8C,OAAO,CAAC,IAAI,iCAAiC,CAAC,CAAC;IAEzG,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,IAAI,SAAS,GAAiC,MAAM,CAAC;IAErD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,SAAS,GAAG,UAAU,CAAC;QACzB,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CACX,2BAA2B,OAAO,CAAC,MAAM,+DAA+D;gBACtG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CACzC,CAAC;YACF,SAAS,GAAG,QAAQ,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CACX,2BAA2B,OAAO,CAAC,MAAM,kEAAkE;gBACzG,+EAA+E,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC3G,QAAQ,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,UAAoB;IACpE,OAAO,CACL,mBAAmB,IAAI,gBAAgB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACjF,eAAe,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC;QAC5E,wGAAwG;QACxG,+DAA+D;QAC/D,qDAAqD,CACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAc,EACd,OAAuB,EACvB,eAA2F;IAE3F,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,KAAK;aACd,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;aACrB,WAAW,CAAC,YAAY,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,sCAAsC,CAAC;aAC1F,MAAM,CAAC,QAAQ,EAAE,yDAAyD,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG;iBACA,MAAM,CAAC,oBAAoB,EAAE,qGAAqG,CAAC;iBACnI,MAAM,CAAC,cAAc,EAAE,0CAA0C,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAgB,EAAE,EAAE;YAC3C,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,EAA0D,CAAC;gBAC/F,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO;oBAC/B,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI;oBAC5E,CAAC,CAAC,IAAI,CAAC;gBACT,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;gBACnE,IAAI,IAAI,CAAC,IAAI;oBAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;;oBAClC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/commands/ops.command.d.ts

@@ -1,17 +0,0 @@
-/**
- * `bridge ops` — operator / platform-internal commands.
- *
- * Phase E of Billing 2.0 (US-18) is hidden-hero: there is no admin-UI surface
- * for the reconciliation pipeline. Operators trigger / inspect it through this
- * CLI subcommand, which calls the `/admin/reconcile/...` endpoints on
- * bridge-api directly. Auth re-uses the standard CLI credentials (TBP-111
- * loopback PKCE flow → `x-api-key: <jwt>`).
- *
- * Subcommands:
- *   bridge ops reconcile --workspace <id>
- *   bridge ops reconcile --workspace <id> --metric <metric>
- *   bridge ops reconcile --workspace <id> [--json]
- */
-import { Command } from 'commander';
-export declare function registerOpsCommands(program: Command): void;
-//# sourceMappingURL=ops.command.d.ts.map

package/dist/commands/ops.command.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ops.command.d.ts","sourceRoot":"","sources":["../../src/commands/ops.command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyBpC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+B1D"}

package/dist/commands/ops.command.js

@@ -1,129 +0,0 @@
-import { DEFAULT_BASE_URL } from '../config.js';
-import { isExpired, readCredentials } from '../credentials.js';
-import { outputError, outputSuccess } from '../output.js';
-export function registerOpsCommands(program) {
-    const ops = program
-        .command('ops')
-        .description('Operator / platform-internal commands');
-    ops
-        .command('reconcile')
-        .description('Trigger Bridge↔Stripe usage reconciliation for a workspace (Billing 2.0 US-18). ' +
-        'Diffs Bridge raw events against Stripe usage records and replays the missing ones.')
-        .requiredOption('--workspace <id>', 'Workspace (tenant) id to reconcile')
-        .option('--metric <metric>', 'Scope to one metric instead of all metered metrics')
-        .option('--json', 'Emit raw JSON instead of the human-readable table')
-        .action(async (opts) => {
-        try {
-            const result = await callReconcile(opts.workspace, opts.metric);
-            if (opts.json) {
-                outputSuccess(result);
-                return;
-            }
-            // Default: render a friendly table; still go through outputSuccess so
-            // the success envelope + exit code stay consistent with the rest of the
-            // CLI. The pretty table is appended to stderr so machine parsers that
-            // only watch stdout get the JSON.
-            printReconciliationTable(result);
-            outputSuccess(result);
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-}
-async function callReconcile(workspaceId, metric) {
-    const { apiKey, baseUrl } = resolveCredentials();
-    const path = metric
-        ? `/v1/admin/reconcile/${encodeURIComponent(workspaceId)}/${encodeURIComponent(metric)}`
-        : `/v1/admin/reconcile/${encodeURIComponent(workspaceId)}`;
-    const url = `${baseUrl.replace(/\/$/, '')}${path}`;
-    const res = await fetch(url, {
-        method: 'POST',
-        headers: {
-            'content-type': 'application/json',
-            'x-api-key': apiKey,
-        },
-        body: '{}',
-    });
-    if (!res.ok) {
-        let body;
-        try {
-            body = await res.json();
-        }
-        catch {
-            body = await res.text().catch(() => '');
-        }
-        const message = (body && typeof body === 'object' && 'message' in body
-            ? String(body.message)
-            : '') || `HTTP ${res.status}`;
-        const err = new Error(message);
-        err.status = res.status;
-        err.body = body;
-        throw err;
-    }
-    return (await res.json());
-}
-function resolveCredentials() {
-    const envKey = process.env.BRIDGE_API_KEY?.trim();
-    const envBase = process.env.BRIDGE_BASE_URL?.trim();
-    const creds = safeReadCredentials();
-    if (creds && !isExpired(creds)) {
-        return {
-            apiKey: creds.apiKey,
-            baseUrl: envBase && envBase.length > 0 ? envBase : creds.baseUrl,
-        };
-    }
-    if (envKey && envKey.length > 0) {
-        return {
-            apiKey: envKey,
-            baseUrl: envBase && envBase.length > 0 ? envBase : DEFAULT_BASE_URL,
-        };
-    }
-    throw new Error('Not logged in. Run `bridge auth login`.');
-}
-function safeReadCredentials() {
-    try {
-        return readCredentials();
-    }
-    catch {
-        return null;
-    }
-}
-function printReconciliationTable(result) {
-    const lines = [];
-    lines.push('');
-    lines.push(`workspace=${result.workspaceId} app=${result.appId}`);
-    if (result.metrics.length === 0) {
-        lines.push('  (no metered metrics reconciled)');
-        process.stderr.write(lines.join('\n') + '\n');
-        return;
-    }
-    const header = [
-        'metric'.padEnd(28),
-        'status'.padEnd(14),
-        'bridge'.padStart(7),
-        'provider'.padStart(9),
-        'missing'.padStart(8),
-        'healed'.padStart(7),
-        'attempts'.padStart(9),
-    ].join(' ');
-    lines.push(header);
-    lines.push('-'.repeat(header.length));
-    for (const m of result.metrics) {
-        lines.push([
-            m.metric.padEnd(28).slice(0, 28),
-            m.status.padEnd(14),
-            String(m.bridgeCount).padStart(7),
-            String(m.providerCount).padStart(9),
-            String(m.missing).padStart(8),
-            String(m.healed).padStart(7),
-            String(m.attempts).padStart(9),
-        ].join(' '));
-        if (m.failed.length > 0) {
-            lines.push(`    failed: ${m.failed.slice(0, 3).join('; ')}`);
-        }
-    }
-    lines.push('');
-    process.stderr.write(lines.join('\n') + '\n');
-}
-//# sourceMappingURL=ops.command.js.map

package/dist/commands/ops.command.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ops.command.js","sourceRoot":"","sources":["../../src/commands/ops.command.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAsB1D,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,OAAO;SAChB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,uCAAuC,CAAC,CAAC;IAExD,GAAG;SACA,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CACV,kFAAkF;QAChF,oFAAoF,CACvF;SACA,cAAc,CAAC,kBAAkB,EAAE,oCAAoC,CAAC;SACxE,MAAM,CAAC,mBAAmB,EAAE,oDAAoD,CAAC;SACjF,MAAM,CAAC,QAAQ,EAAE,mDAAmD,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,IAA4D,EAAE,EAAE;QAC7E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,sEAAsE;YACtE,wEAAwE;YACxE,sEAAsE;YACtE,kCAAkC;YAClC,wBAAwB,CAAC,MAAM,CAAC,CAAC;YACjC,aAAa,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,WAAmB,EACnB,MAAe;IAEf,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,kBAAkB,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM;QACjB,CAAC,CAAC,uBAAuB,kBAAkB,CAAC,WAAW,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE;QACxF,CAAC,CAAC,uBAAuB,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IAEnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,MAAM;SACpB;QACD,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,OAAO,GACX,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,SAAS,IAAI,IAAI;YACpD,CAAC,CAAC,MAAM,CAAE,IAAgC,CAAC,OAAO,CAAC;YACnD,CAAC,CAAC,EAAE,CAAC,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,GAAG,GAAgD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5E,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACxB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAChB,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;AACpD,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IAEpC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;SACjE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;SACpE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,mBAAmB;IAC1B,IAAI,CAAC;QACH,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,MAA4B;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,WAAW,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG;QACb,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpB,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtB,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrB,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpB,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;KACvB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR;YACE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAChC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACnB,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;SAC/B,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;QACF,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AAChD,CAAC"}

package/dist/commands/privilege.command.d.ts

@@ -1,16 +0,0 @@
-import { Command } from 'commander';
-/**
- * TBP-589 / TBP-592 — `bridge privilege` did not exist.
- *
- * The account API has served full CRUD under `/account/role/privilege` all
- * along; nothing in the CLI reached it. An app with custom privileges — which
- * is most non-trivial apps — therefore could not be provisioned by the CLI at
- * all. Porting one real app meant ten raw `POST /account/role/privilege` calls
- * with the credential JWT passed as `x-api-key`, entirely outside the tool
- * that exists to do this.
- *
- * `role create --privileges` also depends on `list` here: it resolves the keys
- * a human types into the ids the API stores.
- */
-export declare function registerPrivilegeCommands(program: Command): void;
-//# sourceMappingURL=privilege.command.d.ts.map

package/dist/commands/privilege.command.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"privilege.command.d.ts","sourceRoot":"","sources":["../../src/commands/privilege.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyDhE"}

package/dist/commands/privilege.command.js

@@ -1,86 +0,0 @@
-import { getManagementClient } from '../config.js';
-import { outputSuccess, outputError } from '../output.js';
-import { resolvePrivilegeId } from '../resolve.js';
-/**
- * TBP-589 / TBP-592 — `bridge privilege` did not exist.
- *
- * The account API has served full CRUD under `/account/role/privilege` all
- * along; nothing in the CLI reached it. An app with custom privileges — which
- * is most non-trivial apps — therefore could not be provisioned by the CLI at
- * all. Porting one real app meant ten raw `POST /account/role/privilege` calls
- * with the credential JWT passed as `x-api-key`, entirely outside the tool
- * that exists to do this.
- *
- * `role create --privileges` also depends on `list` here: it resolves the keys
- * a human types into the ids the API stores.
- */
-export function registerPrivilegeCommands(program) {
-    const privilege = program
-        .command('privilege')
-        .description('Manage the privileges roles are built from');
-    privilege.command('list')
-        .description('List all privileges defined for this app')
-        .action(async () => {
-        try {
-            outputSuccess(await getManagementClient().roles.listPrivileges());
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    privilege.command('create')
-        .description('Create a new privilege')
-        .requiredOption('--key <key>', 'Privilege key, e.g. CASE_READ')
-        .option('--description <desc>', 'What this privilege grants')
-        .action(async (opts) => {
-        try {
-            outputSuccess(await getManagementClient().roles.createPrivilege({
-                key: opts.key,
-                description: opts.description,
-            }));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    privilege.command('update')
-        .description('Update a privilege by --key or --id')
-        .option('--key <key>', 'Privilege key to address (alternative to --id)')
-        .option('--id <id>', 'Privilege ID to address (alternative to --key)')
-        .option('--new-key <key>', 'Rename the privilege to this key')
-        .option('--description <desc>', 'What this privilege grants')
-        .action(async (opts) => {
-        try {
-            const id = await resolvePrivilegeId({ id: opts.id, key: opts.key });
-            // `--key` addresses; `--new-key` renames. Keeping them separate means
-            // addressing by key can never be misread as a rename (TBP-586).
-            const data = {};
-            if (opts.newKey !== undefined)
-                data.key = opts.newKey;
-            if (opts.description !== undefined)
-                data.description = opts.description;
-            outputSuccess(await getManagementClient().roles.updatePrivilege(id, data));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    privilege.command('delete')
-        .description('Delete a privilege by --key or --id')
-        .option('--key <key>', 'Privilege key to address (alternative to --id)')
-        .option('--id <id>', 'Privilege ID to address (alternative to --key)')
-        .action(async (opts) => {
-        try {
-            const id = await resolvePrivilegeId({ id: opts.id, key: opts.key });
-            // Needs ROLE_DELETE on the token. Destructive privileges are opt-in
-            // (TBP-552) — a plain `bridge auth login` token is refused with 403;
-            // `bridge auth login --admin` requests them (TBP-593).
-            await getManagementClient().roles.deletePrivilege(id);
-            outputSuccess({ deleted: true, id });
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-}
-//# sourceMappingURL=privilege.command.js.map

package/dist/commands/privilege.command.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"privilege.command.js","sourceRoot":"","sources":["../../src/commands/privilege.command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,SAAS,GAAG,OAAO;SACtB,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,4CAA4C,CAAC,CAAC;IAE7D,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;SACtB,WAAW,CAAC,0CAA0C,CAAC;SACvD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YAAC,aAAa,CAAC,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;QAAC,CAAC;QAC1E,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEL,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;SACxB,WAAW,CAAC,wBAAwB,CAAC;SACrC,cAAc,CAAC,aAAa,EAAE,+BAA+B,CAAC;SAC9D,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;SAC5D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,aAAa,CAAC,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;gBAC9D,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;SACxB,WAAW,CAAC,qCAAqC,CAAC;SAClD,MAAM,CAAC,aAAa,EAAE,gDAAgD,CAAC;SACvE,MAAM,CAAC,WAAW,EAAE,gDAAgD,CAAC;SACrE,MAAM,CAAC,iBAAiB,EAAE,kCAAkC,CAAC;SAC7D,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;SAC5D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACpE,sEAAsE;YACtE,gEAAgE;YAChE,MAAM,IAAI,GAA2C,EAAE,CAAC;YACxD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;YACtD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YACxE,aAAa,CAAC,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;SACxB,WAAW,CAAC,qCAAqC,CAAC;SAClD,MAAM,CAAC,aAAa,EAAE,gDAAgD,CAAC;SACvE,MAAM,CAAC,WAAW,EAAE,gDAAgD,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACpE,oEAAoE;YACpE,qEAAqE;YACrE,uDAAuD;YACvD,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACtD,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/role.command.d.ts

@@ -1,3 +0,0 @@
-import { Command } from 'commander';
-export declare function registerRoleCommands(program: Command): void;
-//# sourceMappingURL=role.command.d.ts.map

package/dist/commands/role.command.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"role.command.d.ts","sourceRoot":"","sources":["../../src/commands/role.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAoF3D"}

package/dist/commands/role.command.js

@@ -1,101 +0,0 @@
-import { getManagementClient } from '../config.js';
-import { outputSuccess, outputError } from '../output.js';
-import { resolvePrivilegeIds, resolveRoleId } from '../resolve.js';
-import { shapeRoleList } from '../shape.js';
-export function registerRoleCommands(program) {
-    const role = program.command('role').description('Manage access roles');
-    role.command('list')
-        .description('List all access roles')
-        .action(async () => {
-        try {
-            outputSuccess(shapeRoleList(await getManagementClient().roles.list()));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    role.command('create')
-        .description('Create a new access role')
-        .requiredOption('--name <name>', 'Role name')
-        .requiredOption('--key <key>', 'Role key')
-        .option('--description <desc>', 'Description')
-        .option('--privileges <list>', 'Comma-separated privilege keys (ids also accepted)', (v) => v.split(','))
-        .option('--is-default', 'Make this the role people get when added to a workspace without a role named', false)
-        .action(async (opts) => {
-        try {
-            // TBP-592: --privileges is documented as taking KEYS, but the API
-            // stores ObjectIds and silently drops anything that isn't one. Resolve
-            // here so the documented behaviour is the real behaviour.
-            const privileges = await resolvePrivilegeIds(opts.privileges ?? []);
-            outputSuccess(await getManagementClient().roles.create({
-                name: opts.name,
-                key: opts.key,
-                description: opts.description,
-                privileges,
-                isDefault: opts.isDefault,
-            }));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    role.command('update')
-        .description('Update an access role by --key or --id')
-        .option('--key <key>', 'Role key to address, e.g. ADMIN (alternative to --id)')
-        .option('--id <id>', 'Role ID to address (alternative to --key)')
-        .option('--name <name>', 'Role name')
-        .option('--description <desc>', 'Description')
-        .option('--privileges <list>', 'Comma-separated privilege keys (ids also accepted)', (v) => v.split(','))
-        // TBP-758: no default value — an absent flag must stay absent so an update
-        // that only renames a role never touches which role is the default.
-        .option('--is-default', 'Make this the default role (the previous default stops being default)')
-        .action(async (opts) => {
-        try {
-            // TBP-586: `--key`/`--id` are addressing only — strip both out of the
-            // write payload so addressing by key can never be read as a rename.
-            const { id: _id, key: _key, ...data } = opts;
-            const roleId = await resolveRoleId({ id: opts.id, key: opts.key });
-            const cleaned = Object.fromEntries(Object.entries(data).filter(([, v]) => v !== undefined));
-            // TBP-592: same key->id resolution as `create`. Only when the caller
-            // actually passed --privileges: an absent key must stay absent so an
-            // update that renames a role does not blank its privileges.
-            if (opts.privileges !== undefined) {
-                cleaned.privileges = await resolvePrivilegeIds(opts.privileges);
-            }
-            outputSuccess(await getManagementClient().roles.update(roleId, cleaned));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    // TBP-758: which role people get when added to a workspace without a role
-    // named. The API keeps exactly one default per app, so promoting this role
-    // demotes the previous one; there is nothing to "unset".
-    role.command('set-default')
-        .description('Make an existing role the default for people added without a role named')
-        .argument('<key>', 'Role key, e.g. MEMBER (see `bridge role list`)')
-        .action(async (key) => {
-        try {
-            const id = await resolveRoleId({ key });
-            outputSuccess(await getManagementClient().roles.update(id, { isDefault: true }));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    role.command('delete')
-        .description('Delete an access role by --key or --id')
-        .option('--key <key>', 'Role key to address, e.g. ADMIN (alternative to --id)')
-        .option('--id <id>', 'Role ID to address (alternative to --key)')
-        .action(async (opts) => {
-        try {
-            const id = await resolveRoleId({ id: opts.id, key: opts.key });
-            await getManagementClient().roles.delete(id);
-            outputSuccess({ deleted: true, id });
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-}
-//# sourceMappingURL=role.command.js.map

package/dist/commands/role.command.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"role.command.js","sourceRoot":"","sources":["../../src/commands/role.command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;IAExE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;SACjB,WAAW,CAAC,uBAAuB,CAAC;SACpC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YAAC,aAAa,CAAC,aAAa,CAAC,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAC/E,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEL,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;SACnB,WAAW,CAAC,0BAA0B,CAAC;SACvC,cAAc,CAAC,eAAe,EAAE,WAAW,CAAC;SAC5C,cAAc,CAAC,aAAa,EAAE,UAAU,CAAC;SACzC,MAAM,CAAC,sBAAsB,EAAE,aAAa,CAAC;SAC7C,MAAM,CAAC,qBAAqB,EAAE,oDAAoD,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SACxG,MAAM,CAAC,cAAc,EAAE,8EAA8E,EAAE,KAAK,CAAC;SAC7G,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,kEAAkE;YAClE,uEAAuE;YACvE,0DAA0D;YAC1D,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YACpE,aAAa,CAAC,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;gBACrD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU;gBACV,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;SACnB,WAAW,CAAC,wCAAwC,CAAC;SACrD,MAAM,CAAC,aAAa,EAAE,uDAAuD,CAAC;SAC9E,MAAM,CAAC,WAAW,EAAE,2CAA2C,CAAC;SAChE,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC;SACpC,MAAM,CAAC,sBAAsB,EAAE,aAAa,CAAC;SAC7C,MAAM,CAAC,qBAAqB,EAAE,oDAAoD,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzG,2EAA2E;QAC3E,oEAAoE;SACnE,MAAM,CAAC,cAAc,EAAE,uEAAuE,CAAC;SAC/F,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,sEAAsE;YACtE,oEAAoE;YACpE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC;YAC5F,qEAAqE;YACrE,qEAAqE;YACrE,4DAA4D;YAC5D,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAClC,OAAO,CAAC,UAAU,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClE,CAAC;YACD,aAAa,CAAC,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,0EAA0E;IAC1E,2EAA2E;IAC3E,yDAAyD;IACzD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;SACxB,WAAW,CAAC,yEAAyE,CAAC;SACtF,QAAQ,CAAC,OAAO,EAAE,gDAAgD,CAAC;SACnE,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YACxC,aAAa,CAAC,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;SACnB,WAAW,CAAC,wCAAwC,CAAC;SACrD,MAAM,CAAC,aAAa,EAAE,uDAAuD,CAAC;SAC9E,MAAM,CAAC,WAAW,EAAE,2CAA2C,CAAC;SAChE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/D,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7C,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/runtime-dir.d.ts

@@ -1,16 +0,0 @@
-/**
- * Absolute path to this module's own directory — `dist/commands` in the built
- * (ESM) CLI. Bundled prompts ship at `dist/prompts`, i.e. `../prompts` from
- * here.
- *
- * The `import.meta` token is deliberately confined to this single file. The
- * production build is ESM (`"type": "module"`), so `import.meta.url` resolves
- * correctly at runtime. Under ts-jest, however, sources are loaded as
- * CommonJS, where `import.meta` is an *uncatchable parse-time* SyntaxError
- * ("Cannot use 'import.meta' outside a module") that crashes the whole module
- * on import. To keep the rest of the command code importable by the jest
- * suite, jest maps this module to a CJS-safe stub (`runtime-dir.stub.ts`) via
- * `moduleNameMapper` — see jest.config.cjs.
- */
-export declare const commandsDir: string;
-//# sourceMappingURL=runtime-dir.d.ts.map