@noodleseed/one 0.125.0 → 0.126.0

package/node_modules/@noodle-borg/cli-catalog/dist/catalog-data-auth-discovery.js

@@ -0,0 +1,358 @@
+const OPTIONAL_FLAG = {
+    required: false,
+    repeatable: false,
+    sensitive: false,
+    aliases: [],
+    conflictsWith: [],
+};
+const GOOGLE_ACTION_FLAGS = [
+    {
+        ...OPTIONAL_FLAG,
+        name: 'org',
+        type: 'string',
+        value: '<slug>',
+        summary: 'Organization slug.',
+    },
+    {
+        ...OPTIONAL_FLAG,
+        name: 'app',
+        type: 'string',
+        value: '<slug>',
+        summary: 'Application slug.',
+    },
+    {
+        ...OPTIONAL_FLAG,
+        name: 'env',
+        type: 'string',
+        value: '<env>',
+        summary: 'Environment slug.',
+    },
+    {
+        ...OPTIONAL_FLAG,
+        name: 'service',
+        type: 'string',
+        value: '<url>',
+        summary: 'Control-plane service URL.',
+    },
+    {
+        ...OPTIONAL_FLAG,
+        name: 'auth-token',
+        type: 'string',
+        value: '<token>',
+        summary: 'Control-plane authentication token.',
+        sensitive: true,
+    },
+    {
+        ...OPTIONAL_FLAG,
+        name: 'json',
+        type: 'boolean',
+        summary: 'Emit JSON output.',
+    },
+];
+const SERVICE_PRINCIPAL_COMMON_FLAGS = [
+    {
+        ...OPTIONAL_FLAG,
+        name: 'org',
+        type: 'string',
+        value: '<slug>',
+        summary: 'Organization that owns the service principal.',
+        required: true,
+    },
+    GOOGLE_ACTION_FLAGS[3],
+    GOOGLE_ACTION_FLAGS[4],
+    GOOGLE_ACTION_FLAGS[5],
+];
+const PRINCIPAL_ARGUMENT = {
+    name: 'principal-id',
+    type: 'string',
+    summary: 'Service-principal client identifier.',
+    required: true,
+    variadic: false,
+    sensitive: false,
+    constraints: { minLength: 40, maxLength: 40 },
+};
+const LABEL_FLAG = {
+    ...OPTIONAL_FLAG,
+    name: 'label',
+    type: 'string',
+    value: '<label>',
+    summary: 'Human-readable credential label.',
+    required: true,
+    constraints: { minLength: 1, maxLength: 80 },
+};
+const EXPIRES_AT_FLAG = {
+    ...OPTIONAL_FLAG,
+    name: 'expires-at',
+    type: 'string',
+    value: '<timestamp>',
+    summary: 'Optional credential expiry as an ISO 8601 timestamp.',
+};
+const YES_FLAG = {
+    ...OPTIONAL_FLAG,
+    name: 'yes',
+    type: 'boolean',
+    summary: 'Confirm revocation without an interactive prompt.',
+};
+const SERVICE_PRINCIPAL_SUBCOMMANDS = [
+    {
+        name: 'create',
+        summary: 'Create an organization-owned OAuth service principal.',
+        arguments: [
+            {
+                name: 'name',
+                type: 'string',
+                summary: 'Human-readable service-principal name.',
+                required: true,
+                variadic: false,
+                sensitive: false,
+                constraints: { minLength: 1, maxLength: 80 },
+            },
+        ],
+        flags: SERVICE_PRINCIPAL_COMMON_FLAGS,
+        jsonOutput: { mode: 'single' },
+    },
+    {
+        name: 'list',
+        summary: 'List service principals owned by an organization.',
+        arguments: [],
+        flags: SERVICE_PRINCIPAL_COMMON_FLAGS,
+        jsonOutput: { mode: 'single' },
+    },
+    {
+        name: 'show',
+        summary: 'Show one service principal with its grants and redacted credentials.',
+        arguments: [PRINCIPAL_ARGUMENT],
+        flags: SERVICE_PRINCIPAL_COMMON_FLAGS,
+        jsonOutput: { mode: 'single' },
+    },
+    {
+        name: 'grant',
+        summary: 'Grant a service principal access to one deployed app environment.',
+        arguments: [PRINCIPAL_ARGUMENT],
+        flags: [
+            {
+                ...OPTIONAL_FLAG,
+                name: 'app',
+                type: 'string',
+                value: '<slug>',
+                summary: 'Target application slug.',
+                required: true,
+            },
+            {
+                ...OPTIONAL_FLAG,
+                name: 'env',
+                type: 'string',
+                value: '<env>',
+                summary: 'Target environment slug.',
+                required: true,
+            },
+            {
+                ...OPTIONAL_FLAG,
+                name: 'scope',
+                type: 'string',
+                value: '<scope>',
+                summary: 'OAuth scope ceiling; repeat for multiple scopes.',
+                repeatable: true,
+            },
+            ...SERVICE_PRINCIPAL_COMMON_FLAGS,
+        ],
+        jsonOutput: { mode: 'single' },
+    },
+    {
+        name: 'revoke-grant',
+        summary: 'Revoke one app-environment grant.',
+        arguments: [
+            PRINCIPAL_ARGUMENT,
+            {
+                name: 'grant-id',
+                type: 'string',
+                summary: 'Grant identifier to revoke.',
+                required: true,
+                variadic: false,
+                sensitive: false,
+                constraints: { minLength: 40, maxLength: 40 },
+            },
+        ],
+        flags: [YES_FLAG, ...SERVICE_PRINCIPAL_COMMON_FLAGS],
+        jsonOutput: { mode: 'single' },
+    },
+    {
+        name: 'add-jwk',
+        summary: 'Add an RS256 or ES256 public JWK credential from a file.',
+        arguments: [PRINCIPAL_ARGUMENT],
+        flags: [
+            LABEL_FLAG,
+            {
+                ...OPTIONAL_FLAG,
+                name: 'file',
+                type: 'string',
+                value: '<path>',
+                summary: 'Path to one public JWK JSON object.',
+                required: true,
+            },
+            EXPIRES_AT_FLAG,
+            ...SERVICE_PRINCIPAL_COMMON_FLAGS,
+        ],
+        jsonOutput: { mode: 'single' },
+    },
+    {
+        name: 'create-secret',
+        summary: 'Create a client secret that is returned once.',
+        arguments: [PRINCIPAL_ARGUMENT],
+        flags: [LABEL_FLAG, EXPIRES_AT_FLAG, ...SERVICE_PRINCIPAL_COMMON_FLAGS],
+        jsonOutput: { mode: 'single' },
+    },
+    {
+        name: 'revoke-credential',
+        summary: 'Revoke one public-key or client-secret credential.',
+        arguments: [
+            PRINCIPAL_ARGUMENT,
+            {
+                name: 'credential-id',
+                type: 'string',
+                summary: 'Credential identifier to revoke.',
+                required: true,
+                variadic: false,
+                sensitive: false,
+                constraints: { minLength: 40, maxLength: 40 },
+            },
+        ],
+        flags: [YES_FLAG, ...SERVICE_PRINCIPAL_COMMON_FLAGS],
+        jsonOutput: { mode: 'single' },
+    },
+    {
+        name: 'revoke',
+        summary: 'Revoke a service principal and all of its access.',
+        arguments: [PRINCIPAL_ARGUMENT],
+        flags: [YES_FLAG, ...SERVICE_PRINCIPAL_COMMON_FLAGS],
+        jsonOutput: { mode: 'single' },
+    },
+];
+export const CATALOG_AUTH_DISCOVERY = [
+    {
+        name: 'auth',
+        section: 'account',
+        helpRank: 9,
+        summary: 'Manage service identities and diagnose downstream auth readiness.',
+        arguments: [],
+        flags: [],
+        subcommands: [
+            {
+                name: 'doctor',
+                summary: 'Check remote MCP OAuth readiness and optionally probe a deployed customer credential exchange.',
+                arguments: [
+                    {
+                        name: 'server.ts',
+                        type: 'string',
+                        summary: 'Authored server entrypoint.',
+                        required: false,
+                        variadic: false,
+                        sensitive: false,
+                        constraints: {},
+                    },
+                ],
+                flags: [
+                    {
+                        ...OPTIONAL_FLAG,
+                        name: 'live',
+                        type: 'boolean',
+                        summary: 'Probe real delegated exchanges without a business tool.',
+                    },
+                    GOOGLE_ACTION_FLAGS[0],
+                    GOOGLE_ACTION_FLAGS[1],
+                    GOOGLE_ACTION_FLAGS[2],
+                    {
+                        ...OPTIONAL_FLAG,
+                        name: 'version',
+                        type: 'string',
+                        value: '<version>',
+                        summary: 'Pinned deployed MCP version to probe.',
+                    },
+                    GOOGLE_ACTION_FLAGS[3],
+                    GOOGLE_ACTION_FLAGS[5],
+                ],
+                jsonOutput: { mode: 'single' },
+            },
+            {
+                name: 'google',
+                summary: 'Manage an environment-scoped Google Workload Identity Federation subject.',
+                arguments: [],
+                flags: [],
+                subcommands: [
+                    {
+                        name: 'prepare',
+                        summary: 'Prepare Google Workload Identity Federation.',
+                        arguments: [],
+                        flags: [
+                            {
+                                ...OPTIONAL_FLAG,
+                                name: 'project-number',
+                                type: 'string',
+                                value: '<number>',
+                                summary: 'Google Cloud project number.',
+                                required: true,
+                                constraints: { minLength: 6, maxLength: 32 },
+                            },
+                            {
+                                ...OPTIONAL_FLAG,
+                                name: 'pool',
+                                type: 'string',
+                                value: '<id>',
+                                summary: 'Workload Identity Pool identifier.',
+                                required: true,
+                                constraints: { minLength: 4, maxLength: 32 },
+                            },
+                            {
+                                ...OPTIONAL_FLAG,
+                                name: 'provider',
+                                type: 'string',
+                                value: '<id>',
+                                summary: 'Workload Identity Provider identifier.',
+                                required: true,
+                                constraints: { minLength: 4, maxLength: 32 },
+                            },
+                            {
+                                ...OPTIONAL_FLAG,
+                                name: 'service-account',
+                                type: 'string',
+                                value: '<email>',
+                                summary: 'Google service account email.',
+                            },
+                            ...GOOGLE_ACTION_FLAGS,
+                        ],
+                        jsonOutput: { mode: 'single' },
+                    },
+                    {
+                        name: 'status',
+                        summary: 'Show Google Workload Identity Federation status.',
+                        arguments: [],
+                        flags: GOOGLE_ACTION_FLAGS,
+                        jsonOutput: { mode: 'single' },
+                    },
+                    {
+                        name: 'doctor',
+                        summary: 'Diagnose Google Workload Identity Federation.',
+                        arguments: [],
+                        flags: GOOGLE_ACTION_FLAGS,
+                        jsonOutput: { mode: 'single' },
+                    },
+                    {
+                        name: 'revoke',
+                        summary: 'Revoke Google Workload Identity Federation.',
+                        arguments: [],
+                        flags: GOOGLE_ACTION_FLAGS,
+                        jsonOutput: { mode: 'single' },
+                    },
+                ],
+            },
+            {
+                name: 'service-principals',
+                summary: 'Manage organization-owned OAuth service principals for headless MCP callers.',
+                arguments: [],
+                flags: [],
+                subcommands: SERVICE_PRINCIPAL_SUBCOMMANDS,
+            },
+        ],
+    },
+];
+//# sourceMappingURL=catalog-data-auth-discovery.js.map

package/node_modules/@noodle-borg/cli-catalog/dist/catalog-data-auth-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-data-auth-discovery.js","sourceRoot":"","sources":["../src/catalog-data-auth-discovery.ts"],"names":[],"mappings":"AAGA,MAAM,aAAa,GAAG;IACpB,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,KAAK;IACjB,SAAS,EAAE,KAAK;IAChB,OAAO,EAAE,EAAE;IACX,aAAa,EAAE,EAAE;CACT,CAAC;AAEX,MAAM,mBAAmB,GAAG;IAC1B;QACE,GAAG,aAAa;QAChB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,GAAG,aAAa;QAChB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,mBAAmB;KAC7B;IACD;QACE,GAAG,aAAa;QAChB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,mBAAmB;KAC7B;IACD;QACE,GAAG,aAAa;QAChB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,4BAA4B;KACtC;IACD;QACE,GAAG,aAAa;QAChB,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,qCAAqC;QAC9C,SAAS,EAAE,IAAI;KAChB;IACD;QACE,GAAG,aAAa;QAChB,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,mBAAmB;KAC7B;CACqC,CAAC;AAEzC,MAAM,8BAA8B,GAAG;IACrC;QACE,GAAG,aAAa;QAChB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,+CAA+C;QACxD,QAAQ,EAAE,IAAI;KACf;IACD,mBAAmB,CAAC,CAAC,CAAC;IACtB,mBAAmB,CAAC,CAAC,CAAC;IACtB,mBAAmB,CAAC,CAAC,CAAC;CACgB,CAAC;AAEzC,MAAM,kBAAkB,GAAG;IACzB,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,sCAAsC;IAC/C,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;IAChB,WAAW,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;CACrC,CAAC;AAEX,MAAM,UAAU,GAAG;IACjB,GAAG,aAAa;IAChB,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,kCAAkC;IAC3C,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;CACjB,CAAC;AAE9B,MAAM,eAAe,GAAG;IACtB,GAAG,aAAa;IAChB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,aAAa;IACpB,OAAO,EAAE,sDAAsD;CACpC,CAAC;AAE9B,MAAM,QAAQ,GAAG;IACf,GAAG,aAAa;IAChB,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,mDAAmD;CACjC,CAAC;AAE9B,MAAM,6BAA6B,GAAG;IACpC;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,uDAAuD;QAChE,SAAS,EAAE;YACT;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,wCAAwC;gBACjD,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;aAC7C;SACF;QACD,KAAK,EAAE,8BAA8B;QACrC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC/B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,mDAAmD;QAC5D,SAAS,EAAE,EAAE;QACb,KAAK,EAAE,8BAA8B;QACrC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC/B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,sEAAsE;QAC/E,SAAS,EAAE,CAAC,kBAAkB,CAAC;QAC/B,KAAK,EAAE,8BAA8B;QACrC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC/B;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,mEAAmE;QAC5E,SAAS,EAAE,CAAC,kBAAkB,CAAC;QAC/B,KAAK,EAAE;YACL;gBACE,GAAG,aAAa;gBAChB,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,0BAA0B;gBACnC,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,GAAG,aAAa;gBAChB,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,OAAO;gBACd,OAAO,EAAE,0BAA0B;gBACnC,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,GAAG,aAAa;gBAChB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,kDAAkD;gBAC3D,UAAU,EAAE,IAAI;aACjB;YACD,GAAG,8BAA8B;SAClC;QACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC/B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,mCAAmC;QAC5C,SAAS,EAAE;YACT,kBAAkB;YAClB;gBACE,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,6BAA6B;gBACtC,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;aAC9C;SACF;QACD,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,8BAA8B,CAAC;QACpD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC/B;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,0DAA0D;QACnE,SAAS,EAAE,CAAC,kBAAkB,CAAC;QAC/B,KAAK,EAAE;YACL,UAAU;YACV;gBACE,GAAG,aAAa;gBAChB,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,qCAAqC;gBAC9C,QAAQ,EAAE,IAAI;aACf;YACD,eAAe;YACf,GAAG,8BAA8B;SAClC;QACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC/B;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,+CAA+C;QACxD,SAAS,EAAE,CAAC,kBAAkB,CAAC;QAC/B,KAAK,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,GAAG,8BAA8B,CAAC;QACvE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC/B;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,oDAAoD;QAC7D,SAAS,EAAE;YACT,kBAAkB;YAClB;gBACE,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,kCAAkC;gBAC3C,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;aAC9C;SACF;QACD,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,8BAA8B,CAAC;QACpD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC/B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,mDAAmD;QAC5D,SAAS,EAAE,CAAC,kBAAkB,CAAC;QAC/B,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,8BAA8B,CAAC;QACpD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC/B;CACyD,CAAC;AAE7D,MAAM,CAAC,MAAM,sBAAsB,GAA2B;IAC5D;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,mEAAmE;QAC5E,SAAS,EAAE,EAAE;QACb,KAAK,EAAE,EAAE;QACT,WAAW,EAAE;YACX;gBACE,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,gGAAgG;gBAClG,SAAS,EAAE;oBACT;wBACE,IAAI,EAAE,WAAW;wBACjB,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,6BAA6B;wBACtC,QAAQ,EAAE,KAAK;wBACf,QAAQ,EAAE,KAAK;wBACf,SAAS,EAAE,KAAK;wBAChB,WAAW,EAAE,EAAE;qBAChB;iBACF;gBACD,KAAK,EAAE;oBACL;wBACE,GAAG,aAAa;wBAChB,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,yDAAyD;qBACnE;oBACD,mBAAmB,CAAC,CAAC,CAAC;oBACtB,mBAAmB,CAAC,CAAC,CAAC;oBACtB,mBAAmB,CAAC,CAAC,CAAC;oBACtB;wBACE,GAAG,aAAa;wBAChB,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,WAAW;wBAClB,OAAO,EAAE,uCAAuC;qBACjD;oBACD,mBAAmB,CAAC,CAAC,CAAC;oBACtB,mBAAmB,CAAC,CAAC,CAAC;iBACvB;gBACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC/B;YACD;gBACE,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,2EAA2E;gBACpF,SAAS,EAAE,EAAE;gBACb,KAAK,EAAE,EAAE;gBACT,WAAW,EAAE;oBACX;wBACE,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,8CAA8C;wBACvD,SAAS,EAAE,EAAE;wBACb,KAAK,EAAE;4BACL;gCACE,GAAG,aAAa;gCAChB,IAAI,EAAE,gBAAgB;gCACtB,IAAI,EAAE,QAAQ;gCACd,KAAK,EAAE,UAAU;gCACjB,OAAO,EAAE,8BAA8B;gCACvC,QAAQ,EAAE,IAAI;gCACd,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;6BAC7C;4BACD;gCACE,GAAG,aAAa;gCAChB,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,QAAQ;gCACd,KAAK,EAAE,MAAM;gCACb,OAAO,EAAE,oCAAoC;gCAC7C,QAAQ,EAAE,IAAI;gCACd,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;6BAC7C;4BACD;gCACE,GAAG,aAAa;gCAChB,IAAI,EAAE,UAAU;gCAChB,IAAI,EAAE,QAAQ;gCACd,KAAK,EAAE,MAAM;gCACb,OAAO,EAAE,wCAAwC;gCACjD,QAAQ,EAAE,IAAI;gCACd,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;6BAC7C;4BACD;gCACE,GAAG,aAAa;gCAChB,IAAI,EAAE,iBAAiB;gCACvB,IAAI,EAAE,QAAQ;gCACd,KAAK,EAAE,SAAS;gCAChB,OAAO,EAAE,+BAA+B;6BACzC;4BACD,GAAG,mBAAmB;yBACvB;wBACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC/B;oBACD;wBACE,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,kDAAkD;wBAC3D,SAAS,EAAE,EAAE;wBACb,KAAK,EAAE,mBAAmB;wBAC1B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC/B;oBACD;wBACE,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,+CAA+C;wBACxD,SAAS,EAAE,EAAE;wBACb,KAAK,EAAE,mBAAmB;wBAC1B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC/B;oBACD;wBACE,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,6CAA6C;wBACtD,SAAS,EAAE,EAAE;wBACb,KAAK,EAAE,mBAAmB;wBAC1B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC/B;iBACF;aACF;YACD;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,8EAA8E;gBACvF,SAAS,EAAE,EAAE;gBACb,KAAK,EAAE,EAAE;gBACT,WAAW,EAAE,6BAA6B;aAC3C;SACF;KACF;CACF,CAAC"}

package/node_modules/@noodle-borg/cli-catalog/dist/catalog-data-billing.d.ts

@@ -0,0 +1,4 @@
+/** Billing command catalog data with flags attached to their real nested action leaves. */
+import type { CommandSpec } from './catalog-types.js';
+export declare const BILLING_COMMAND: CommandSpec;
+//# sourceMappingURL=catalog-data-billing.d.ts.map

package/node_modules/@noodle-borg/cli-catalog/dist/catalog-data-billing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-data-billing.d.ts","sourceRoot":"","sources":["../src/catalog-data-billing.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,KAAK,EAAgB,WAAW,EAA4B,MAAM,oBAAoB,CAAC;AAoU9F,eAAO,MAAM,eAAe,EAAE,WA2B7B,CAAC"}

package/node_modules/@noodle-borg/cli-catalog/dist/catalog-data-billing.js

@@ -0,0 +1,312 @@
+const ARGUMENT_FIELDS = { variadic: false, sensitive: false, constraints: {} };
+const FLAG_FIELDS = {
+    required: false,
+    repeatable: false,
+    sensitive: false,
+    aliases: [],
+    conflictsWith: [],
+};
+const SUBCOMMAND_FIELDS = { arguments: [], flags: [] };
+const LEAF_FIELDS = { arguments: [], flags: [] };
+function argument(value) {
+    return value;
+}
+function flag(value) {
+    return value;
+}
+function subcommand(value) {
+    return value;
+}
+const SERVICE_FLAG = flag({
+    ...FLAG_FIELDS,
+    name: 'service',
+    type: 'string',
+    value: '<url>',
+    summary: 'Control-plane service URL.',
+});
+const AUTH_TOKEN_FLAG = flag({
+    ...FLAG_FIELDS,
+    name: 'auth-token',
+    type: 'string',
+    value: '<token>',
+    summary: 'Control-plane authentication token.',
+    sensitive: true,
+});
+const JSON_FLAG = flag({
+    ...FLAG_FIELDS,
+    name: 'json',
+    type: 'boolean',
+    summary: 'Emit one JSON result envelope.',
+});
+const YES_FLAG = flag({
+    ...FLAG_FIELDS,
+    name: 'yes',
+    type: 'boolean',
+    summary: 'Confirm the requested billing operation.',
+});
+const COMMON_FLAGS = [SERVICE_FLAG, AUTH_TOKEN_FLAG, JSON_FLAG];
+const REASON_FLAG = flag({
+    ...FLAG_FIELDS,
+    name: 'reason',
+    type: 'string',
+    value: '<text>',
+    summary: 'Operator reason recorded with the billing operation.',
+    required: true,
+});
+const IDEMPOTENCY_FLAG = flag({
+    ...FLAG_FIELDS,
+    name: 'idempotency-key',
+    type: 'string',
+    value: '<key>',
+    summary: 'Private replay key for a billing mutation.',
+    required: true,
+    sensitive: true,
+});
+function leaf(name, summary, options) {
+    return subcommand({
+        ...SUBCOMMAND_FIELDS,
+        name,
+        summary,
+        arguments: options.arguments,
+        flags: [...options.flags, ...COMMON_FLAGS],
+        jsonOutput: { mode: 'single' },
+    });
+}
+function branch(name, summary, subcommands) {
+    return subcommand({ ...SUBCOMMAND_FIELDS, name, summary, subcommands });
+}
+function accountArgument(required) {
+    return argument({
+        ...ARGUMENT_FIELDS,
+        name: 'account-id',
+        type: 'string',
+        summary: 'Billing account identifier.',
+        required,
+    });
+}
+const ACCOUNTS = branch('accounts', 'Inspect an account, purchase a plan, or open its billing portal.', [
+    leaf('list', 'List billing accounts visible to the current identity.', LEAF_FIELDS),
+    leaf('inspect', 'Inspect one billing account.', {
+        ...LEAF_FIELDS,
+        arguments: [accountArgument(true)],
+    }),
+    leaf('checkout', 'Create a Stripe Checkout session for one billing account.', {
+        ...LEAF_FIELDS,
+        arguments: [accountArgument(true)],
+        flags: [
+            flag({
+                ...FLAG_FIELDS,
+                name: 'plan',
+                type: 'string',
+                value: '<plan>',
+                summary: 'Paid plan selected for Stripe Checkout.',
+                required: true,
+                constraints: { choices: ['pro', 'scale'] },
+            }),
+            flag({
+                ...FLAG_FIELDS,
+                name: 'interval',
+                type: 'string',
+                value: '<interval>',
+                summary: 'Stripe Checkout billing interval.',
+                required: true,
+                constraints: { choices: ['month', 'year'] },
+            }),
+            flag({ ...FLAG_FIELDS, ...IDEMPOTENCY_FLAG, required: false }),
+        ],
+    }),
+    leaf('portal', 'Open the Stripe billing portal for one billing account.', {
+        ...LEAF_FIELDS,
+        arguments: [accountArgument(true)],
+    }),
+]);
+const ENFORCEMENT = branch('enforcement', 'Inspect or seal the classification-only cohort, then manage activation.', [
+    branch('cohort', 'Inspect or seal the classification-only billing cohort.', [
+        leaf('status', 'Inspect classification-only cohort readiness.', LEAF_FIELDS),
+        leaf('seal', 'Seal the classification-only cohort.', {
+            ...LEAF_FIELDS,
+            flags: [REASON_FLAG, IDEMPOTENCY_FLAG, YES_FLAG],
+        }),
+    ]),
+    branch('activation', 'Inspect, preview, activate, or roll back billing enforcement.', [
+        leaf('status', 'Inspect billing-enforcement activation state.', LEAF_FIELDS),
+        leaf('preview', 'Preview billing-enforcement activation evidence.', {
+            ...LEAF_FIELDS,
+            flags: [
+                flag({
+                    ...FLAG_FIELDS,
+                    name: 'file',
+                    type: 'string',
+                    value: '<approval.json>',
+                    summary: 'Private reviewed activation approval file.',
+                    required: true,
+                    sensitive: true,
+                }),
+            ],
+        }),
+        leaf('activate', 'Activate billing enforcement from reviewed evidence.', {
+            ...LEAF_FIELDS,
+            flags: [
+                flag({
+                    ...FLAG_FIELDS,
+                    name: 'file',
+                    type: 'string',
+                    value: '<approval.json>',
+                    summary: 'Private reviewed activation approval file.',
+                    required: true,
+                    sensitive: true,
+                }),
+                flag({
+                    ...FLAG_FIELDS,
+                    name: 'preview-file',
+                    type: 'string',
+                    value: '<ready-preview.json>',
+                    summary: 'Private reviewed READY preview file.',
+                    required: true,
+                    sensitive: true,
+                }),
+                REASON_FLAG,
+                IDEMPOTENCY_FLAG,
+                YES_FLAG,
+            ],
+        }),
+        leaf('rollback', 'Roll back one billing-enforcement activation generation.', {
+            ...LEAF_FIELDS,
+            flags: [
+                flag({
+                    ...FLAG_FIELDS,
+                    name: 'epoch',
+                    type: 'string',
+                    value: '<epoch-id>',
+                    summary: 'Billing activation epoch identifier.',
+                    required: true,
+                }),
+                flag({
+                    ...FLAG_FIELDS,
+                    name: 'generation',
+                    type: 'integer',
+                    value: '<n>',
+                    summary: 'Activation generation expected for rollback.',
+                    required: true,
+                    constraints: { minimum: 1 },
+                }),
+                REASON_FLAG,
+                IDEMPOTENCY_FLAG,
+                YES_FLAG,
+            ],
+        }),
+    ]),
+]);
+const METERING = branch('metering', 'Inspect readiness or manage a validation-only epoch as a super-admin.', [
+    leaf('readiness', 'Inspect authoritative-meter technical readiness.', LEAF_FIELDS),
+    branch('validation', 'Manage validation-only meter epochs.', [
+        leaf('prepare', 'Prepare a validation-only meter epoch.', {
+            ...LEAF_FIELDS,
+            flags: [REASON_FLAG, IDEMPOTENCY_FLAG, YES_FLAG],
+        }),
+        leaf('retire', 'Retire a validation-only meter epoch.', {
+            ...LEAF_FIELDS,
+            flags: [
+                flag({
+                    ...FLAG_FIELDS,
+                    name: 'epoch',
+                    type: 'string',
+                    value: '<epoch-id>',
+                    summary: 'Validation epoch identifier.',
+                    required: true,
+                }),
+                REASON_FLAG,
+                IDEMPOTENCY_FLAG,
+                YES_FLAG,
+            ],
+        }),
+    ]),
+]);
+const MIGRATION = branch('migration', 'Run the super-admin-only legacy shadow-migration workflow.', [
+    leaf('preview', 'Preview the legacy billing migration.', {
+        ...LEAF_FIELDS,
+        flags: [
+            flag({
+                ...FLAG_FIELDS,
+                name: 'file',
+                type: 'string',
+                value: '<mapping.json>',
+                summary: 'Private legacy billing mapping file.',
+                sensitive: true,
+            }),
+        ],
+    }),
+    leaf('apply', 'Apply a reviewed legacy billing migration in shadow mode.', {
+        ...LEAF_FIELDS,
+        flags: [
+            flag({
+                ...FLAG_FIELDS,
+                name: 'file',
+                type: 'string',
+                value: '<mapping.json>',
+                summary: 'Private legacy billing mapping file.',
+                required: true,
+                sensitive: true,
+            }),
+            flag({
+                ...FLAG_FIELDS,
+                name: 'preview-file',
+                type: 'string',
+                value: '<ready-preview.json>',
+                summary: 'Private reviewed READY preview evidence file.',
+                required: true,
+                sensitive: true,
+            }),
+            flag({
+                ...FLAG_FIELDS,
+                name: 'plan-evidence',
+                type: 'string',
+                value: '<plan-evidence.json>',
+                summary: 'Private reviewed plan evidence file.',
+                required: true,
+                sensitive: true,
+            }),
+            flag({
+                ...FLAG_FIELDS,
+                name: 'mode',
+                type: 'string',
+                value: '<mode>',
+                summary: 'Legacy migration application mode.',
+                required: true,
+                constraints: { choices: ['shadow'] },
+            }),
+            REASON_FLAG,
+            IDEMPOTENCY_FLAG,
+            YES_FLAG,
+        ],
+    }),
+]);
+export const BILLING_COMMAND = {
+    name: 'billing',
+    section: 'operate',
+    helpRank: 15,
+    summary: 'Inspect billing accounts, buy a plan, and manage billing.',
+    arguments: [],
+    subcommands: [
+        ACCOUNTS,
+        branch('org', 'Inspect an organization’s effective billing entitlements.', [
+            leaf('inspect', 'Inspect effective billing entitlements for one organization.', {
+                ...LEAF_FIELDS,
+                arguments: [
+                    argument({
+                        ...ARGUMENT_FIELDS,
+                        name: 'org-slug',
+                        type: 'string',
+                        summary: 'Organization slug; defaults to the resolved organization.',
+                        required: false,
+                    }),
+                ],
+            }),
+        ]),
+        ENFORCEMENT,
+        METERING,
+        MIGRATION,
+    ],
+    flags: [],
+};
+//# sourceMappingURL=catalog-data-billing.js.map