@nebulr-group/bridge-cli 0.6.6 → 1.0.0-alpha.1

package/dist/commands/accounts.command.js

@@ -0,0 +1,166 @@
+import { appInvites, invites, members, privileges, roles, workspaces } from '../api/accounts.js';
+import { withAppKey } from '../api/keys.js';
+import { CliError, isCliError } from '../core/errors.js';
+import { action, collect } from './context.js';
+/**
+ * Roles, privileges, workspaces and members: version 2 offers these routes
+ * to the app's own server only, so each command runs with an app key:
+ * `BRIDGE_APP_KEY`, or a one-day key the CLI makes and revokes at once.
+ */
+async function asApp(ctx, needs, fn) {
+    const { c, appId } = await ctx.forApp();
+    return withAppKey(c, appId, needs, ctx.env, (key) => fn(c, key), { warn: (message) => ctx.io.info(message) });
+}
+const KEY_NOTE = ' Runs with BRIDGE_APP_KEY, or a short-lived key the CLI makes (needs a recent sign-in).';
+/**
+ * An invite Bridge would not send because the app has no email-links
+ * address: say where to add one. For the developer's own workspace there is
+ * nothing to add here, and Bridge's message stands.
+ */
+function withEmailLinksHint(error, appWorkspace) {
+    if (appWorkspace && isCliError(error) && error.kind === 'conflict' && /email-links/i.test(error.message)) {
+        throw new CliError('conflict', error.message, {
+            status: error.status,
+            details: error.details,
+            hint: "Add the page that opens your app's email links: `bridge app address add <url> --use email-links`.",
+        });
+    }
+    throw error;
+}
+function roleFields(opts) {
+    return {
+        ...(opts.name === undefined ? {} : { name: opts.name }),
+        ...(opts.description === undefined ? {} : { description: opts.description }),
+        ...(opts.privilege === undefined ? {} : { privileges: opts.privilege }),
+        ...(opts.default === undefined ? {} : { isDefault: opts.default }),
+    };
+}
+export function registerAccountCommands(program, deps) {
+    const role = program.command('role').description(`The app's roles and the privileges each holds.${KEY_NOTE}`);
+    role.command('list').action(action(deps, async (ctx) => {
+        ctx.io.result(await asApp(ctx, [], (c, key) => roles.list(c, key)));
+    }));
+    role
+        .command('create <key>')
+        .requiredOption('--name <name>', 'The role\'s name')
+        .option('--description <text>', 'What the role is for')
+        .option('--privilege <privilege>', 'A privilege it holds; repeat for several', collect)
+        .option('--default', 'New members get this role')
+        .action(action(deps, async (ctx, key, opts) => {
+        ctx.io.result(await asApp(ctx, [], (c, appKey) => roles.create(c, appKey, { ...roleFields(opts), key, name: opts.name })));
+    }));
+    role
+        .command('update <role>')
+        .description('Change a role, by its key or id. --privilege replaces the role\'s privileges')
+        .option('--name <name>', 'The role\'s name')
+        .option('--description <text>', 'What the role is for')
+        .option('--privilege <privilege>', 'A privilege it holds; repeat for several', collect)
+        .option('--default', 'New members get this role')
+        .action(action(deps, async (ctx, which, opts) => {
+        const fields = roleFields(opts);
+        if (Object.keys(fields).length === 0)
+            throw new CliError('invalid', 'Nothing to change.');
+        ctx.io.result(await asApp(ctx, [], (c, key) => roles.update(c, key, which, fields)));
+    }));
+    role.command('delete <role>').action(action(deps, async (ctx, which) => {
+        ctx.io.result(await asApp(ctx, ['ROLE_DELETE'], (c, key) => roles.remove(c, key, which)));
+    }));
+    const privilege = program.command('privilege').description(`The app's privileges, which roles hold.${KEY_NOTE}`);
+    privilege.command('list').action(action(deps, async (ctx) => {
+        ctx.io.result(await asApp(ctx, [], (c, key) => privileges.list(c, key)));
+    }));
+    privilege
+        .command('create <key>')
+        .option('--description <text>', 'What it allows')
+        .action(action(deps, async (ctx, key, opts) => {
+        ctx.io.result(await asApp(ctx, [], (c, appKey) => privileges.create(c, appKey, { key, ...(opts.description === undefined ? {} : { description: opts.description }) })));
+    }));
+    privilege
+        .command('update <privilege>')
+        .option('--new-key <key>', 'Rename it')
+        .option('--description <text>', 'What it allows')
+        .action(action(deps, async (ctx, which, opts) => {
+        const fields = { ...(opts.newKey === undefined ? {} : { key: opts.newKey }), ...(opts.description === undefined ? {} : { description: opts.description }) };
+        if (Object.keys(fields).length === 0)
+            throw new CliError('invalid', 'Nothing to change.');
+        ctx.io.result(await asApp(ctx, [], (c, key) => privileges.update(c, key, which, fields)));
+    }));
+    privilege.command('delete <privilege>').action(action(deps, async (ctx, which) => {
+        ctx.io.result(await asApp(ctx, ['ROLE_DELETE'], (c, key) => privileges.remove(c, key, which)));
+    }));
+    const workspace = program.command('workspace').description(`The app's workspaces (its customers' teams).${KEY_NOTE}`);
+    workspace
+        .command('list')
+        .option('--search <text>', 'Only workspaces whose name has this')
+        .option('--limit <n>', 'At most this many')
+        .option('--after <cursor>', 'The page after this cursor')
+        .action(action(deps, async (ctx, opts) => {
+        ctx.io.result(await asApp(ctx, [], (c, key) => workspaces.list(c, key, opts)));
+    }));
+    const member = program.command('member').description(`The members of one of the app's workspaces.${KEY_NOTE}`);
+    const withWorkspace = (cmd) => cmd.requiredOption('--workspace <id>', 'The workspace (`bridge workspace list` shows them)');
+    withWorkspace(member.command('list'))
+        .option('--search <text>', 'Only members whose name or email has this')
+        .option('--limit <n>', 'At most this many')
+        .option('--after <cursor>', 'The page after this cursor')
+        .action(action(deps, async (ctx, opts) => {
+        const { workspace: ws, ...query } = opts;
+        ctx.io.result(await asApp(ctx, ['USER_READ'], (c, key) => members.list(c, key, ws, query)));
+    }));
+    withWorkspace(member.command('get <member>')).action(action(deps, async (ctx, id, opts) => {
+        ctx.io.result(await asApp(ctx, ['USER_READ'], (c, key) => members.get(c, key, opts.workspace, id)));
+    }));
+    withWorkspace(member.command('update <member>'))
+        .option('--role <role>', 'Give the member this role')
+        .option('--disable', 'Stop the member from signing in to this workspace')
+        .option('--enable', 'Let the member sign in again')
+        .action(action(deps, async (ctx, id, opts) => {
+        if (opts.disable && opts.enable)
+            throw new CliError('invalid', '--disable or --enable, not both.');
+        const fields = { ...(opts.role === undefined ? {} : { role: opts.role }), ...(opts.disable ? { enabled: false } : opts.enable ? { enabled: true } : {}) };
+        if (Object.keys(fields).length === 0)
+            throw new CliError('invalid', 'Nothing to change: give --role, --disable or --enable.');
+        ctx.io.result(await asApp(ctx, ['USER_WRITE'], (c, key) => members.update(c, key, opts.workspace, id, fields)));
+    }));
+    withWorkspace(member.command('remove <member>'))
+        .requiredOption('--yes', 'Confirm')
+        .action(action(deps, async (ctx, id, opts) => {
+        ctx.io.result(await asApp(ctx, ['USER_WRITE'], (c, key) => members.remove(c, key, opts.workspace, id)));
+    }));
+    const invite = program
+        .command('invite')
+        .description("Invites by email. Without --workspace, into your own workspace on Bridge (the one you signed in to), with your sign-in. " +
+        "With --workspace, into one of the app's workspaces, with BRIDGE_APP_KEY or a short-lived key the CLI makes (needs a recent sign-in).");
+    const inWorkspace = (cmd) => cmd.option('--workspace <id>', "One of the app's workspaces (`bridge workspace list` shows them); leave out for your own");
+    inWorkspace(invite.command('list').description('The open invites')).action(action(deps, async (ctx, opts) => {
+        const ws = opts.workspace;
+        if (ws === undefined)
+            ctx.io.result(await invites.list(await ctx.client()));
+        else
+            ctx.io.result(await asApp(ctx, ['USER_READ'], (c, key) => appInvites.list(c, key, ws)));
+    }));
+    inWorkspace(invite
+        .command('send <email>')
+        .description('Email an invite. Sending again to the same address sends a new link, and the old one stops working. An invite lasts 30 days')
+        .option('--role <role>', "The role they join with; left out, the workspace's default")).action(action(deps, async (ctx, email, opts) => {
+        const fields = { email, ...(opts.role === undefined ? {} : { role: opts.role }) };
+        const ws = opts.workspace;
+        try {
+            if (ws === undefined)
+                ctx.io.result(await invites.send(await ctx.client(), fields));
+            else
+                ctx.io.result(await asApp(ctx, ['USER_WRITE'], (c, key) => appInvites.send(c, key, ws, fields)));
+        }
+        catch (error) {
+            withEmailLinksHint(error, ws !== undefined);
+        }
+    }));
+    inWorkspace(invite.command('revoke <invite>').description('Revoke an invite by its id: its link stops working')).action(action(deps, async (ctx, id, opts) => {
+        const ws = opts.workspace;
+        if (ws === undefined)
+            ctx.io.result(await invites.revoke(await ctx.client(), id));
+        else
+            ctx.io.result(await asApp(ctx, ['USER_WRITE'], (c, key) => appInvites.revoke(c, key, ws, id)));
+    }));
+}
+//# sourceMappingURL=accounts.command.js.map

package/dist/commands/accounts.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.command.js","sourceRoot":"","sources":["../../src/commands/accounts.command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAsC,MAAM,oBAAoB,CAAC;AACrI,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAE,MAAM,EAAE,OAAO,EAA2B,MAAM,cAAc,CAAC;AAExE;;;;GAIG;AACH,KAAK,UAAU,KAAK,CAAI,GAAY,EAAE,KAAe,EAAE,EAAgD;IACrG,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;IACxC,OAAO,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChH,CAAC;AAED,MAAM,QAAQ,GAAG,yFAAyF,CAAC;AAE3G;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAc,EAAE,YAAqB;IAC/D,IAAI,YAAY,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE;YAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,mGAAmG;SAC1G,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAAsF;IACxG,OAAO;QACL,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAgB,EAAE,IAAU;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,iDAAiD,QAAQ,EAAE,CAAC,CAAC;IAC9G,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CACzB,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CACH,CAAC;IACF,IAAI;SACD,OAAO,CAAC,cAAc,CAAC;SACvB,cAAc,CAAC,eAAe,EAAE,kBAAkB,CAAC;SACnD,MAAM,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;SACtD,MAAM,CAAC,yBAAyB,EAAE,0CAA0C,EAAE,OAAO,CAAC;SACtF,MAAM,CAAC,WAAW,EAAE,2BAA2B,CAAC;SAChD,MAAM,CACL,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAW,EAAE,IAAqF,EAAE,EAAE;QAC7H,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7H,CAAC,CAAC,CACH,CAAC;IACJ,IAAI;SACD,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,8EAA8E,CAAC;SAC3F,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC;SAC3C,MAAM,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;SACtD,MAAM,CAAC,yBAAyB,EAAE,0CAA0C,EAAE,OAAO,CAAC;SACtF,MAAM,CAAC,WAAW,EAAE,2BAA2B,CAAC;SAChD,MAAM,CACL,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAa,EAAE,IAAsF,EAAE,EAAE;QAChI,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAC1F,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC,CACH,CAAC;IACJ,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,CAClC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAa,EAAE,EAAE;QACxC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,0CAA0C,QAAQ,EAAE,CAAC,CAAC;IACjH,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC9B,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CACH,CAAC;IACF,SAAS;SACN,OAAO,CAAC,cAAc,CAAC;SACvB,MAAM,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;SAChD,MAAM,CACL,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAW,EAAE,IAA8B,EAAE,EAAE;QACtE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1K,CAAC,CAAC,CACH,CAAC;IACJ,SAAS;SACN,OAAO,CAAC,oBAAoB,CAAC;SAC7B,MAAM,CAAC,iBAAiB,EAAE,WAAW,CAAC;SACtC,MAAM,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;SAChD,MAAM,CACL,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAa,EAAE,IAA+C,EAAE,EAAE;QACzF,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC5J,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAC1F,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CACH,CAAC;IACJ,SAAS,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAC5C,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAa,EAAE,EAAE;QACxC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,+CAA+C,QAAQ,EAAE,CAAC,CAAC;IACtH,SAAS;SACN,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,iBAAiB,EAAE,qCAAqC,CAAC;SAChE,MAAM,CAAC,aAAa,EAAE,mBAAmB,CAAC;SAC1C,MAAM,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;SACxD,MAAM,CACL,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAyD,EAAE,EAAE;QACpF,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CACH,CAAC;IAEJ,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,8CAA8C,QAAQ,EAAE,CAAC,CAAC;IAC/G,MAAM,aAAa,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,kBAAkB,EAAE,oDAAoD,CAAC,CAAC;IACrI,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SAClC,MAAM,CAAC,iBAAiB,EAAE,2CAA2C,CAAC;SACtE,MAAM,CAAC,aAAa,EAAE,mBAAmB,CAAC;SAC1C,MAAM,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;SACxD,MAAM,CACL,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAA4E,EAAE,EAAE;QACvG,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QACzC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CACH,CAAC;IACJ,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAClD,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAU,EAAE,IAA2B,EAAE,EAAE;QAClE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACtG,CAAC,CAAC,CACH,CAAC;IACF,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;SAC7C,MAAM,CAAC,eAAe,EAAE,2BAA2B,CAAC;SACpD,MAAM,CAAC,WAAW,EAAE,mDAAmD,CAAC;SACxE,MAAM,CAAC,UAAU,EAAE,8BAA8B,CAAC;SAClD,MAAM,CACL,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAU,EAAE,IAA+E,EAAE,EAAE;QACtH,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,kCAAkC,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1J,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,wDAAwD,CAAC,CAAC;QAC9H,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAClH,CAAC,CAAC,CACH,CAAC;IACJ,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;SAC7C,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC;SAClC,MAAM,CACL,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAU,EAAE,IAA2B,EAAE,EAAE;QAClE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1G,CAAC,CAAC,CACH,CAAC;IAEJ,MAAM,MAAM,GAAG,OAAO;SACnB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,0HAA0H;QACxH,sIAAsI,CACzI,CAAC;IACJ,MAAM,WAAW,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,0FAA0F,CAAC,CAAC;IACjK,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CACxE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAA4B,EAAE,EAAE;QACvD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,EAAE,KAAK,SAAS;YAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;;YACvE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC,CACH,CAAC;IACF,WAAW,CACT,MAAM;SACH,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,6HAA6H,CAAC;SAC1I,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC,CACzF,CAAC,MAAM,CACN,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAa,EAAE,IAA2C,EAAE,EAAE;QACrF,MAAM,MAAM,GAAiB,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAChG,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,CAAC;YACH,IAAI,EAAE,KAAK,SAAS;gBAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;;gBAC/E,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACxG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kBAAkB,CAAC,KAAK,EAAE,EAAE,KAAK,SAAS,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,WAAW,CAAC,oDAAoD,CAAC,CAAC,CAAC,MAAM,CACrH,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAU,EAAE,IAA4B,EAAE,EAAE;QACnE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,EAAE,KAAK,SAAS;YAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;;YAC7E,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACtG,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/commands/app.command.d.ts

@@ -1,3 +1,4 @@
-import { Command } from 'commander';
-export declare function registerAppCommands(program: Command): void;
+import type { Command } from 'commander';
+import { type Deps } from './context.js';
+export declare function registerAppCommands(program: Command, deps: Deps): void;
 //# sourceMappingURL=app.command.d.ts.map

package/dist/commands/app.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.command.d.ts","sourceRoot":"","sources":["../../src/commands/app.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAUpC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmH1D"}
+{"version":3,"file":"app.command.d.ts","sourceRoot":"","sources":["../../src/commands/app.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,EAAmB,KAAK,IAAI,EAAE,MAAM,cAAc,CAAC;AA6B1D,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,IAAI,CAoJtE"}

package/dist/commands/app.command.js

@@ -1,239 +1,138 @@
-import { ConfigError, getManagementClient, resolveSelectedCredential, resetManagementClient } from '../config.js';
-import { outputSuccess, outputError } from '../output.js';
-import { updateCredential } from '../credentials.js';
-import { createWorkspaceClient, resolveAppSelector, } from '../auth/workspace-client.js';
-export function registerAppCommands(program) {
-    const app = program.command('app').description('Manage app configuration');
-    // TBP-769 — one login, every app of the workspace (MCP parity).
-    app.command('list')
-        .description('List the apps your login covers, marking the home app and the current one')
-        .action(async () => {
-        try {
-            outputSuccess(await runAppList());
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    app.command('use <id|name>')
-        .description('Make another app of your workspace login the default for every command (local, no re-login)')
-        .action(async (selector) => {
-        try {
-            outputSuccess(await runAppUse(selector));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    app.command('create')
-        .description('Create a new app in your workspace')
-        .requiredOption('--name <name>', 'App name')
-        .option('--callback-url <url>', 'OAuth callback URL to register on the new app')
-        .option('--use', 'Also make the new app the current one (like `bridge app use`)')
-        .action(async (opts) => {
-        try {
-            outputSuccess(await runAppCreate(opts));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    app.command('get')
-        .description('Get current app configuration')
-        .action(async () => {
-        try {
-            outputSuccess(await getManagementClient().app.get());
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    app.command('update')
-        .description('Update app settings')
-        .option('--name <name>', 'App name')
-        .option('--api-url <url>', 'API URL')
-        .option('--ui-url <url>', "Your app's base URL. Links in Bridge emails (invites, password resets, payment notices) open here when your backend calls the API without an Origin header. Must also be listed in --allowed-origins")
-        .option('--webhook-url <url>', 'Webhook URL')
-        .option('--tenant-self-signup <bool>', 'Allow tenant self-signup', parseBool)
-        .option('--mfa-enabled <bool>', 'Enable MFA', parseBool)
-        .option('--passkeys-enabled <bool>', 'Enable passkeys', parseBool)
-        .option('--magic-link-enabled <bool>', 'Enable magic links', parseBool)
-        .option('--payments-auto-redirect <bool>', 'Force new users to pick a plan before entering the app (billing paywall)', parseBool)
-        .option('--redirect-uris <uris>', 'Comma-separated list of allowed OAuth callback URIs', parseList)
-        .option('--allowed-origins <origins>', 'Comma-separated list of allowed CORS origins', parseList)
-        .option('--default-callback-uri <uri>', 'Default OAuth callback URI')
-        .action(async (opts) => {
-        try {
-            const data = stripUndefined({
-                name: opts.name,
-                apiUrl: opts.apiUrl,
-                uiUrl: opts.uiUrl,
-                webhookUrl: opts.webhookUrl,
-                tenantSelfSignup: opts.tenantSelfSignup,
-                mfaEnabled: opts.mfaEnabled,
-                passkeysEnabled: opts.passkeysEnabled,
-                magicLinkEnabled: opts.magicLinkEnabled,
-                paymentsAutoRedirect: opts.paymentsAutoRedirect,
-                redirectUris: opts.redirectUris,
-                allowedOrigins: opts.allowedOrigins,
-                defaultCallbackUri: opts.defaultCallbackUri,
-            });
-            outputSuccess(await getManagementClient().app.update(data));
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    const redirectUris = app
-        .command('redirect-uris')
-        .description('Manage allowed OAuth callback URIs without replacing the whole list');
-    redirectUris.command('list')
-        .description('List registered redirect URIs')
-        .action(async () => {
-        try {
-            const current = await getManagementClient().app.get();
-            outputSuccess({ redirectUris: current.redirectUris ?? [] });
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    redirectUris.command('add <url>')
-        .description('Register a redirect URI (existing entries are kept)')
-        .action(async (url) => {
-        try {
-            validateRedirectUri(url);
-            const client = getManagementClient();
-            const current = (await client.app.get()).redirectUris ?? [];
-            if (current.includes(url)) {
-                outputSuccess({ added: false, message: `Already registered: ${url}`, redirectUris: current });
-                return;
-            }
-            const next = [...current, url];
-            await client.app.update({ redirectUris: next });
-            outputSuccess({ added: true, redirectUris: next });
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-    redirectUris.command('remove <url>')
-        .description('Remove a registered redirect URI')
-        .action(async (url) => {
-        try {
-            const client = getManagementClient();
-            const current = (await client.app.get()).redirectUris ?? [];
-            if (!current.includes(url)) {
-                throw new Error(`Redirect URI not registered: ${url}. Registered URIs: ${current.length ? current.join(', ') : '(none)'}`);
-            }
-            const next = current.filter((u) => u !== url);
-            await client.app.update({ redirectUris: next });
-            outputSuccess({ removed: true, redirectUris: next });
-        }
-        catch (err) {
-            outputError(err);
-        }
-    });
-}
-/** The stored login these commands work with; BRIDGE_API_KEY cannot list apps. */
-function loginContext() {
-    const selected = resolveSelectedCredential();
-    if (!selected.creds || !selected.key) {
-        throw Object.assign(new ConfigError('App selection needs a login from `bridge auth login`; BRIDGE_API_KEY is bound to one app.'), { hint: 'Run `bridge auth login` (it covers every app of the workspace by default).' });
+import { ADDRESS_USES, apps, checkUses } from '../api/apps.js';
+import { CliError } from '../core/errors.js';
+import { action, collect } from './context.js';
+/** The profile fields given; "none" clears one. */
+function profile(opts) {
+    const fields = {};
+    for (const name of ['logo', 'website', 'privacyPolicy', 'termsOfService']) {
+        const value = opts[name];
+        if (value !== undefined)
+            fields[name] = value === 'none' ? null : value;
     }
-    return { key: selected.key, creds: selected.creds, baseUrl: selected.baseUrl };
+    return { ...(opts.name === undefined ? {} : { name: opts.name }), ...fields };
 }
-function workspaceClient(ctx) {
-    return createWorkspaceClient({ baseUrl: ctx.baseUrl, loginToken: ctx.creds.apiKey });
-}
-/** Current = the locally chosen app of this login, else its home app. */
-function currentAppId(creds) {
-    return creds.appAccess === 'workspace' && creds.currentApp ? creds.currentApp.id : creds.app.id;
-}
-/** Learn the login's scope from the server (credentials from before TBP-769 lack it). */
-function rememberScope(key, creds, scope) {
-    const appAccess = scope === 'workspace' ? 'workspace' : 'app';
-    return creds.appAccess === appAccess ? creds : updateCredential(key, { appAccess });
-}
-async function runAppList() {
-    const ctx = loginContext();
-    const res = await workspaceClient(ctx).listApps();
-    const creds = rememberScope(ctx.key, ctx.creds, res.scope);
-    const current = currentAppId(creds);
-    return {
-        scope: res.scope,
-        homeAppId: res.homeAppId,
-        currentAppId: current,
-        apps: res.apps.map((a) => ({ id: a.id, name: a.name, home: a.home, current: a.id === current })),
-    };
-}
-async function runAppUse(selector) {
-    const ctx = loginContext();
-    const home = ctx.creds.app;
-    const lower = selector.trim().toLowerCase();
-    let target;
-    if (selector.trim() === home.id || lower === home.name.toLowerCase()) {
-        target = home;
-    }
-    else {
-        const res = await workspaceClient(ctx).listApps();
-        rememberScope(ctx.key, ctx.creds, res.scope);
-        if (res.scope !== 'workspace') {
-            throw Object.assign(new ConfigError(`This login covers only the app ${home.name} (${home.id}), so it cannot switch to "${selector}".`), {
-                code: 'APP_NOT_IN_CONNECTION',
-                hint: 'Run `bridge auth login` again and choose "Every app in <workspace>" on the consent ' +
-                    'screen; one login then covers every app and `bridge app use` switches between them.',
+const withProfileOptions = (cmd) => cmd
+    .option('--logo <url>', 'Logo address ("none" clears it)')
+    .option('--website <url>', 'Website ("none" clears it)')
+    .option('--privacy-policy <url>', 'Privacy policy ("none" clears it)')
+    .option('--terms-of-service <url>', 'Terms of service ("none" clears it)');
+const USES = `one of ${ADDRESS_USES.join(', ')}; repeat for several`;
+export function registerAppCommands(program, deps) {
+    const app = program.command('app').description('Your apps: create them, choose the one commands act on, set their addresses');
+    app
+        .command('list')
+        .description('The apps of your workspace')
+        .action(action(deps, async (ctx) => {
+        const c = await ctx.client();
+        const current = (await ctx.settings()).apps?.[await ctx.issuer()];
+        ctx.io.result((await apps.list(c)).map((each) => ({ ...each, current: each.id === current })));
+    }));
+    withProfileOptions(app
+        .command('create')
+        .description('Create an app, and choose it for the commands that follow')
+        .requiredOption('--name <name>', 'The app\'s name')
+        .option('--sign-in-return <url>', 'An address sign-in may return to; repeat for several', collect)
+        .option('--email-links <url>', 'The page email links (sign-up, password reset, invites) open', collect)
+        .option('--browser-origin <origin>', 'An origin whose pages may call Bridge from the browser; repeat for several', collect)
+        .option('--no-use', 'Create it without choosing it')).action(action(deps, async (ctx, opts) => {
+        const c = await ctx.client();
+        const byUrl = new Map();
+        const add = (urls, use) => urls?.forEach((url) => byUrl.set(url, (byUrl.get(url) ?? new Set()).add(use)));
+        add(opts.signInReturn, 'sign-in-return');
+        add(opts.emailLinks, 'email-links');
+        add(opts.browserOrigin, 'browser-origin');
+        const addresses = [...byUrl].map(([url, uses]) => ({ url, uses: checkUses([...uses]) }));
+        const made = await apps.create(c, {
+            ...profile(opts),
+            name: opts.name,
+            ...(addresses.length === 0 ? {} : { addresses }),
+            ...(opts.signInReturn?.[0] === undefined ? {} : { defaultReturn: opts.signInReturn[0] }),
+        });
+        if (opts.use !== false) {
+            const issuer = await ctx.issuer();
+            await ctx.config.update((settings) => {
+                settings.apps = { ...settings.apps, [issuer]: made.id };
             });
-        }
-        target = resolveAppSelector(selector, res.apps);
-    }
-    const isHome = target.id === home.id;
-    updateCredential(ctx.key, { currentApp: isHome ? undefined : { id: target.id, name: target.name } });
-    resetManagementClient();
-    return {
-        currentApp: { id: target.id, name: target.name, home: isHome },
-        message: isHome
-            ? `Now using the home app ${target.name} (${target.id}).`
-            : `Now using ${target.name} (${target.id}). Commands act on it until \`bridge app use\` again; \`--app\` overrides it for one command.`,
-    };
-}
-async function runAppCreate(opts) {
-    const ctx = loginContext();
-    const res = await workspaceClient(ctx).createApp({
-        name: opts.name,
-        ...(opts.callbackUrl ? { callbackUrl: opts.callbackUrl } : {}),
-    });
-    let current = false;
-    if (opts.use) {
-        // A create that succeeded proves the login spans the workspace.
-        updateCredential(ctx.key, {
-            appAccess: 'workspace',
-            currentApp: res.app.id === ctx.creds.app.id ? undefined : { id: res.app.id, name: res.app.name },
+            ctx.io.info(`Created ${made.name} (${made.id}); commands now act on it.`);
+        }
+        ctx.io.result(made);
+    }));
+    app
+        .command('use <id>')
+        .description('Choose the app the commands act on')
+        .action(action(deps, async (ctx, id) => {
+        const c = await ctx.client();
+        const found = await apps.get(c, id);
+        const issuer = await ctx.issuer();
+        await ctx.config.update((settings) => {
+            settings.apps = { ...settings.apps, [issuer]: found.id };
         });
-        resetManagementClient();
-        current = true;
-    }
-    return { app: res.app, current };
-}
-function validateRedirectUri(value) {
-    let parsed;
-    try {
-        parsed = new URL(value);
-    }
-    catch {
-        throw new Error(`Invalid redirect URI: "${value}" is not an absolute URL (expected e.g. https://app.example.com/auth/oauth-callback).`);
-    }
-    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
-        throw new Error(`Invalid redirect URI: "${value}" must use http or https.`);
-    }
-}
-function parseBool(val) {
-    return val === 'true';
-}
-function parseList(val) {
-    return val.split(',').map((s) => s.trim()).filter(Boolean);
-}
-function stripUndefined(obj) {
-    return Object.fromEntries(Object.entries(obj).filter(([, v]) => v !== undefined));
+        ctx.io.info(`Commands now act on ${found.name} (${found.id}).`);
+        ctx.io.result({ id: found.id, name: found.name });
+    }));
+    app
+        .command('get')
+        .description('The app: its addresses, profile and how its tokens are checked')
+        .action(action(deps, async (ctx) => {
+        const { c, appId } = await ctx.forApp();
+        ctx.io.result(await apps.get(c, appId));
+    }));
+    withProfileOptions(app.command('update').description('Rename the app or change its public profile').option('--name <name>', 'The app\'s name')).action(action(deps, async (ctx, opts) => {
+        const fields = profile(opts);
+        if (Object.keys(fields).length === 0)
+            throw new CliError('invalid', 'Nothing to change: give --name, --logo, --website, --privacy-policy or --terms-of-service.');
+        const { c, appId } = await ctx.forApp();
+        ctx.io.result(await apps.update(c, appId, fields));
+    }));
+    app
+        .command('delete')
+        .description('Delete the app. Its keys, plans and flags go with it')
+        .requiredOption('--yes', 'Confirm the deletion')
+        .action(action(deps, async (ctx) => {
+        const { c, appId } = await ctx.forApp();
+        const issuer = await ctx.issuer();
+        const answer = await apps.remove(c, appId);
+        await ctx.config.update((settings) => {
+            if (settings.apps?.[issuer] === appId)
+                delete settings.apps[issuer];
+        });
+        ctx.io.result(answer ?? { deleted: appId });
+    }));
+    app
+        .command('default-return <url>')
+        .description('The sign-in return used when a sign-in names none ("none" clears it). It must be one of the app\'s sign-in returns')
+        .action(action(deps, async (ctx, url) => {
+        const { c, appId } = await ctx.forApp();
+        ctx.io.result(await apps.update(c, appId, { defaultReturn: url === 'none' ? null : url }));
+    }));
+    const address = app.command('address').description('The app\'s addresses: sign-in returns, email links, browser origins, sign-out and checkout returns');
+    address
+        .command('list')
+        .description('Every address of the app and what it is used for')
+        .action(action(deps, async (ctx) => {
+        const { c, appId } = await ctx.forApp();
+        const found = await apps.get(c, appId);
+        ctx.io.result({ addresses: found.addresses ?? [], defaultReturn: found.defaultReturn });
+    }));
+    address
+        .command('add <url>')
+        .description('Add an address, or add uses to one the app has')
+        .requiredOption('--use <use>', USES, collect)
+        .action(action(deps, async (ctx, url, opts) => {
+        const uses = checkUses(opts.use);
+        const { c, appId } = await ctx.forApp();
+        const changed = await apps.addAddress(c, appId, url, uses);
+        ctx.io.result({ addresses: changed.addresses, defaultReturn: changed.defaultReturn });
+    }));
+    address
+        .command('remove <url>')
+        .description('Remove an address, or only some of its uses')
+        .option('--use <use>', `Only this use (${USES})`, collect)
+        .action(action(deps, async (ctx, url, opts) => {
+        const uses = opts.use === undefined ? [] : checkUses(opts.use);
+        const { c, appId } = await ctx.forApp();
+        const changed = await apps.removeAddress(c, appId, url, uses);
+        ctx.io.result({ addresses: changed.addresses, defaultReturn: changed.defaultReturn });
+    }));
 }
 //# sourceMappingURL=app.command.js.map