@noodleseed/one 0.153.0 → 0.154.0

package/dist/commands/billing-org-transfer-files.js

@@ -0,0 +1,112 @@
+import { randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { link, lstat, open, unlink } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { BillingOrganizationTransferArtifactSchema, } from '@noodle-borg/wire-contracts';
+const MAX_ARTIFACT_BYTES = 64 * 1024;
+/** Refuse caller-controlled links and special files before a preview request is made. */
+export async function assertBillingTransferArtifactDestination(path) {
+    try {
+        await lstat(path);
+    }
+    catch (error) {
+        if (isMissing(error))
+            return;
+        throw artifactFileError();
+    }
+    throw artifactFileError();
+}
+/** Install an already-synced private artifact without replacing a raced directory entry. */
+export async function installBillingTransferArtifactNoReplace(temporaryPath, destinationPath) {
+    const directory = dirname(destinationPath);
+    if (dirname(temporaryPath) !== directory) {
+        await unlink(temporaryPath).catch(() => undefined);
+        throw artifactFileError();
+    }
+    try {
+        await link(temporaryPath, destinationPath);
+        await unlink(temporaryPath);
+        const directoryHandle = await open(directory, constants.O_RDONLY);
+        try {
+            await directoryHandle.sync();
+        }
+        finally {
+            await directoryHandle.close();
+        }
+    }
+    catch {
+        await unlink(temporaryPath).catch(() => undefined);
+        throw artifactFileError();
+    }
+}
+/** Write private reviewed evidence through a same-directory, exclusive temporary file. */
+export async function writeBillingTransferArtifact(path, artifact) {
+    const validated = BillingOrganizationTransferArtifactSchema.parse(artifact);
+    const contents = `${JSON.stringify(validated, null, 2)}\n`;
+    if (Buffer.byteLength(contents, 'utf8') > MAX_ARTIFACT_BYTES)
+        throw artifactFileError();
+    await assertBillingTransferArtifactDestination(path);
+    const temporaryPath = `${path}.${process.pid}.${randomUUID()}.tmp`;
+    let handle;
+    try {
+        handle = await open(temporaryPath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+        await handle.chmod(0o600);
+        await handle.writeFile(contents, 'utf8');
+        await handle.sync();
+        await handle.close();
+        handle = undefined;
+        await installBillingTransferArtifactNoReplace(temporaryPath, path);
+    }
+    catch {
+        throw artifactFileError();
+    }
+    finally {
+        await handle?.close().catch(() => undefined);
+        await unlink(temporaryPath).catch(() => undefined);
+    }
+}
+/** Read strict private evidence from an opened descriptor without following a symlink. */
+export async function readBillingTransferArtifact(path, authorityPath) {
+    let handle;
+    try {
+        handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    }
+    catch {
+        throw artifactFileError();
+    }
+    try {
+        const stat = await handle.stat();
+        if (!stat.isFile() || (stat.mode & 0o7777) !== 0o600 || stat.size > MAX_ARTIFACT_BYTES) {
+            throw artifactFileError();
+        }
+        const contents = await handle.readFile('utf8');
+        if (Buffer.byteLength(contents, 'utf8') > MAX_ARTIFACT_BYTES)
+            throw artifactFileError();
+        const parsed = BillingOrganizationTransferArtifactSchema.parse(JSON.parse(contents));
+        if (parsed.authorityPath !== authorityPath)
+            throw artifactFileError();
+        return parsed;
+    }
+    catch {
+        throw artifactFileError();
+    }
+    finally {
+        await handle.close();
+    }
+}
+class BillingTransferArtifactFileError extends Error {
+    constructor() {
+        super('The billing transfer preview artifact is invalid.');
+        this.name = 'BillingTransferArtifactFileError';
+    }
+}
+function artifactFileError() {
+    return new BillingTransferArtifactFileError();
+}
+function isMissing(error) {
+    return (typeof error === 'object' &&
+        error !== null &&
+        'code' in error &&
+        error.code === 'ENOENT');
+}
+//# sourceMappingURL=billing-org-transfer-files.js.map

package/dist/commands/billing-org-transfer-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-org-transfer-files.js","sourceRoot":"","sources":["../../src/commands/billing-org-transfer-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAEL,yCAAyC,GAE1C,MAAM,6BAA6B,CAAC;AAErC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AAErC,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAAC,IAAY;IACzE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7B,MAAM,iBAAiB,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,iBAAiB,EAAE,CAAC;AAC5B,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,aAAqB,EACrB,eAAuB;IAEvB,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,aAAa,CAAC,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,iBAAiB,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAC3C,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,iBAAiB,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAY,EACZ,QAA6C;IAE7C,MAAM,SAAS,GAAG,yCAAyC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC3D,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,kBAAkB;QAAE,MAAM,iBAAiB,EAAE,CAAC;IACxF,MAAM,wCAAwC,CAAC,IAAI,CAAC,CAAC;IAErD,MAAM,aAAa,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACnE,IAAI,MAAoD,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CACjB,aAAa,EACb,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAChF,KAAK,CACN,CAAC;QACF,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,uCAAuC,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,EAAE,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAG/C,IAAY,EACZ,aAAyB;IASzB,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;YACvF,MAAM,iBAAiB,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,kBAAkB;YAAE,MAAM,iBAAiB,EAAE,CAAC;QACxF,MAAM,MAAM,GAAG,yCAAyC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrF,IAAI,MAAM,CAAC,aAAa,KAAK,aAAa;YAAE,MAAM,iBAAiB,EAAE,CAAC;QACtE,OAAO,MAGN,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,EAAE,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,gCAAiC,SAAQ,KAAK;IAClD;QACE,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AAED,SAAS,iBAAiB;IACxB,OAAO,IAAI,gCAAgC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACd,KAAqC,CAAC,IAAI,KAAK,QAAQ,CACzD,CAAC;AACJ,CAAC"}

package/dist/commands/billing-org-transfer-ops.d.ts

@@ -0,0 +1,4 @@
+import type { BillingOrganizationTransferAuthorityPath } from '@noodle-borg/wire-contracts';
+import { type ConfigLocation } from '../config.js';
+export declare function runBillingOrganizationTransfer(authorityPath: BillingOrganizationTransferAuthorityPath, rest: readonly string[], env: NodeJS.ProcessEnv, home: ConfigLocation): Promise<number>;
+//# sourceMappingURL=billing-org-transfer-ops.d.ts.map

package/dist/commands/billing-org-transfer-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-org-transfer-ops.d.ts","sourceRoot":"","sources":["../../src/commands/billing-org-transfer-ops.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,wCAAwC,EAGzC,MAAM,6BAA6B,CAAC;AAarC,OAAO,EAAE,KAAK,cAAc,EAAiC,MAAM,cAAc,CAAC;AAyBlF,wBAAsB,8BAA8B,CAClD,aAAa,EAAE,wCAAwC,EACvD,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,MAAM,CAAC,CAiBjB"}

package/dist/commands/billing-org-transfer-ops.js

@@ -0,0 +1,534 @@
+import { BILLING_ORGANIZATION_TRANSFER_ERROR_CODES, BillingAdministrationTransferApplyRequestSchema, BillingAdministrationTransferPreviewRequestSchema, BillingOrganizationTransferApplyClientResponseSchema, BillingOrganizationTransferApplyRequestSchema, BillingOrganizationTransferCandidatesClientResponseSchema, BillingOrganizationTransferCandidatesRequestSchema, BillingOrganizationTransferPreviewClientResponseSchema, BillingOrganizationTransferPreviewRequestSchema, normalizeBillingOrganizationTransferServiceOrigin, } from '@noodle-borg/wire-contracts';
+import { readConfig, resolveServiceUrl } from '../config.js';
+import { resolveControlPlaneToken, ServiceRequestError, serviceJson } from '../control-plane.js';
+import { DEFAULT_SERVICE_URL } from '../deploy.js';
+import { assertBillingTransferArtifactDestination, readBillingTransferArtifact, writeBillingTransferArtifact, } from './billing-org-transfer-files.js';
+import { EXIT, printJsonOk } from './output.js';
+import { authRequired, parseCommandFlags, printCliFailure } from './shared.js';
+const STABLE_TRANSFER_CODES = new Set(BILLING_ORGANIZATION_TRANSFER_ERROR_CODES);
+export async function runBillingOrganizationTransfer(authorityPath, rest, env, home) {
+    const action = rest[0];
+    const actionRest = rest.slice(1);
+    if (authorityPath === 'customer' && action === 'candidates') {
+        return runCandidates(actionRest, env, home);
+    }
+    if (action === 'preview')
+        return runPreview(authorityPath, actionRest, env, home);
+    if (action === 'apply')
+        return runApply(authorityPath, actionRest, env, home);
+    const command = commandName(authorityPath, action ?? '');
+    return printCliFailure(command, usageFailure(command, `${command} requires ${authorityPath === 'customer' ? 'candidates, preview, or apply' : 'preview or apply'}`), rest.includes('--json'));
+}
+async function runCandidates(rest, env, home) {
+    const command = 'billing org transfer candidates';
+    const parsedArgs = parseCandidatesArgs(rest, command);
+    if (!parsedArgs.ok)
+        return printCliFailure(command, parsedArgs.error, rest.includes('--json'));
+    const args = parsedArgs.args;
+    const request = BillingOrganizationTransferCandidatesRequestSchema.safeParse({
+        ...(args.query === undefined ? {} : { query: args.query }),
+        ...(args.cursor === undefined ? {} : { cursor: args.cursor }),
+        ...(args.limit === undefined ? {} : { limit: Number(args.limit) }),
+    });
+    const destination = BillingOrganizationTransferPreviewRequestSchema.safeParse({
+        schemaVersion: 1,
+        destinationBillingAccountId: args.account,
+    });
+    if (!request.success || !destination.success) {
+        return printCliFailure(command, usageFailure(command, 'candidate arguments failed validation'), args.json);
+    }
+    const configuredOrigin = configuredServiceOrigin(args, env, home, command);
+    if (!configuredOrigin.ok)
+        return printCliFailure(command, configuredOrigin.error, args.json);
+    const resolved = await resolveControlPlaneToken(commonResolution(args, env, home));
+    if (resolved.token === undefined)
+        return printCliFailure(command, authRequired(), args.json);
+    const normalized = parsedServiceOrigin(resolved.serviceUrl, command);
+    if (!normalized.ok)
+        return printCliFailure(command, normalized.error, args.json);
+    const service = normalized.origin;
+    if (service !== configuredOrigin.origin) {
+        return printCliFailure(command, serviceOriginFailure(command), args.json);
+    }
+    const query = new URLSearchParams();
+    if (request.data.query !== undefined)
+        query.set('query', request.data.query);
+    if (request.data.cursor !== undefined)
+        query.set('cursor', request.data.cursor);
+    query.set('limit', String(request.data.limit));
+    const url = `${service}/v1/billing-accounts/${encodeURIComponent(destination.data.destinationBillingAccountId)}/organization-transfer-candidates?${query.toString()}`;
+    try {
+        const response = BillingOrganizationTransferCandidatesClientResponseSchema.parse(await serviceJson(url, resolved.token));
+        if (args.json)
+            printJsonOk({ service, candidates: response.data });
+        else
+            printCandidatePage(response.data);
+        return EXIT.OK;
+    }
+    catch (error) {
+        return printCliFailure(command, transferServiceFailure(error, command), args.json);
+    }
+}
+async function runPreview(authorityPath, rest, env, home) {
+    const command = commandName(authorityPath, 'preview');
+    const parsedArgs = parsePreviewArgs(authorityPath, rest, command);
+    if (!parsedArgs.ok)
+        return printCliFailure(command, parsedArgs.error, rest.includes('--json'));
+    const args = parsedArgs.args;
+    let request;
+    if (authorityPath === 'customer') {
+        const parsed = BillingAdministrationTransferPreviewRequestSchema.omit({
+            administrativeReason: true,
+        }).safeParse({
+            schemaVersion: 1,
+            organizationSlug: args.org,
+            destinationBillingAccountId: args.account,
+        });
+        if (!parsed.success) {
+            return printCliFailure(command, usageFailure(command, 'preview arguments failed validation'), args.json);
+        }
+        request = parsed.data;
+    }
+    else {
+        const parsed = BillingAdministrationTransferPreviewRequestSchema.safeParse({
+            schemaVersion: 1,
+            organizationSlug: args.org,
+            destinationBillingAccountId: args.account,
+            administrativeReason: args.reason,
+        });
+        if (!parsed.success) {
+            return printCliFailure(command, usageFailure(command, 'preview arguments failed validation'), args.json);
+        }
+        request = parsed.data;
+    }
+    try {
+        await assertBillingTransferArtifactDestination(args.out);
+    }
+    catch {
+        return printCliFailure(command, artifactDestinationFailure(args.out, privateInputs(args)), args.json);
+    }
+    const configuredOrigin = configuredServiceOrigin(args, env, home, command);
+    if (!configuredOrigin.ok)
+        return printCliFailure(command, configuredOrigin.error, args.json);
+    const resolved = await resolveControlPlaneToken(commonResolution(args, env, home));
+    if (resolved.token === undefined)
+        return printCliFailure(command, authRequired(), args.json);
+    const normalized = parsedServiceOrigin(resolved.serviceUrl, command);
+    if (!normalized.ok)
+        return printCliFailure(command, normalized.error, args.json);
+    const service = normalized.origin;
+    if (service !== configuredOrigin.origin) {
+        return printCliFailure(command, serviceOriginFailure(command), args.json);
+    }
+    const url = authorityPath === 'customer'
+        ? `${service}/v1/orgs/${encodeURIComponent(args.org)}/billing-transfer/preview`
+        : `${service}/v1/billing-administration/organization-transfers/preview`;
+    try {
+        const serviceRequest = authorityPath === 'customer'
+            ? BillingOrganizationTransferPreviewRequestSchema.parse({
+                schemaVersion: request.schemaVersion,
+                destinationBillingAccountId: request.destinationBillingAccountId,
+            })
+            : request;
+        const response = BillingOrganizationTransferPreviewClientResponseSchema.parse(await serviceJson(url, resolved.token, jsonPost(serviceRequest)));
+        const artifact = {
+            schemaVersion: 1,
+            serviceOrigin: service,
+            authorityPath,
+            request,
+            preview: response.data,
+        };
+        await writeBillingTransferArtifact(args.out, artifact);
+        if (args.json) {
+            printJsonOk({
+                service,
+                authority: authorityPath,
+                ...(authorityPath === 'super_admin'
+                    ? {
+                        administrativeReason: request
+                            .administrativeReason,
+                    }
+                    : {}),
+                preview: response.data,
+                previewFile: args.out,
+            });
+        }
+        else {
+            printTransferPreview(response.data, args.out, authorityPath, authorityPath === 'super_admin'
+                ? request.administrativeReason
+                : undefined);
+        }
+        return response.data.blockers.length === 0 ? EXIT.OK : EXIT.FAILURE;
+    }
+    catch (error) {
+        const failure = error instanceof ServiceRequestError
+            ? transferServiceFailure(error, command)
+            : artifactDestinationFailure(args.out, privateInputs(args));
+        return printCliFailure(command, failure, args.json);
+    }
+}
+async function runApply(authorityPath, rest, env, home) {
+    const command = commandName(authorityPath, 'apply');
+    const parsedArgs = parseApplyArgs(rest, command);
+    if (!parsedArgs.ok)
+        return printCliFailure(command, parsedArgs.error, rest.includes('--json'));
+    const args = parsedArgs.args;
+    let artifact;
+    try {
+        artifact = await readBillingTransferArtifact(args.previewFile, authorityPath);
+    }
+    catch {
+        return printCliFailure(command, artifactFailure(args.previewFile, [args.idempotencyKey]), args.json);
+    }
+    if (artifact.preview.blockers.length > 0) {
+        return printCliFailure(command, blockedArtifactFailure(args.previewFile, privateInputs(args, artifact)), args.json);
+    }
+    const additions = {
+        expectedLinkVersion: artifact.preview.expectedLinkVersion,
+        previewChecksum: artifact.preview.previewChecksum,
+        idempotencyKey: args.idempotencyKey,
+        confirmed: true,
+    };
+    const parsedRequest = authorityPath === 'customer'
+        ? BillingOrganizationTransferApplyRequestSchema.safeParse({
+            schemaVersion: artifact.request.schemaVersion,
+            destinationBillingAccountId: artifact.request.destinationBillingAccountId,
+            ...additions,
+        })
+        : BillingAdministrationTransferApplyRequestSchema.safeParse({
+            ...artifact.request,
+            ...additions,
+        });
+    if (!parsedRequest.success) {
+        return printCliFailure(command, artifactFailure(args.previewFile, privateInputs(args, artifact)), args.json);
+    }
+    const configuredOrigin = configuredServiceOrigin(args, env, home, command);
+    if (!configuredOrigin.ok)
+        return printCliFailure(command, configuredOrigin.error, args.json);
+    if (configuredOrigin.origin !== artifact.serviceOrigin) {
+        return printCliFailure(command, artifactFailure(args.previewFile, privateInputs(args, artifact)), args.json);
+    }
+    const resolved = await resolveControlPlaneToken(commonResolution(args, env, home));
+    const normalized = parsedServiceOrigin(resolved.serviceUrl, command);
+    if (!normalized.ok)
+        return printCliFailure(command, normalized.error, args.json);
+    const currentService = normalized.origin;
+    if (currentService !== artifact.serviceOrigin) {
+        return printCliFailure(command, artifactFailure(args.previewFile, privateInputs(args, artifact)), args.json);
+    }
+    if (resolved.token === undefined)
+        return printCliFailure(command, authRequired(), args.json);
+    const url = authorityPath === 'customer'
+        ? `${artifact.serviceOrigin}/v1/orgs/${encodeURIComponent(artifact.request.organizationSlug)}/billing-transfer`
+        : `${artifact.serviceOrigin}/v1/billing-administration/organization-transfers`;
+    try {
+        const response = BillingOrganizationTransferApplyClientResponseSchema.parse(await serviceJson(url, resolved.token, jsonPost(parsedRequest.data)));
+        if (args.json)
+            printJsonOk({
+                service: artifact.serviceOrigin,
+                authority: authorityPath,
+                transfer: response.data,
+            });
+        else
+            printTransferResult(response.data, authorityPath);
+        return EXIT.OK;
+    }
+    catch (error) {
+        return printCliFailure(command, transferServiceFailure(error, command), args.json);
+    }
+}
+function parseCandidatesArgs(rest, command) {
+    const parsed = parseCommandFlags(rest, {
+        values: {
+            '--account': 'account',
+            '--query': 'query',
+            '--cursor': 'cursor',
+            '--limit': 'limit',
+            '--service': 'service',
+            '--auth-token': 'authToken',
+        },
+        booleans: { '--json': 'json' },
+    });
+    if (parsed.parseError !== undefined)
+        return failedUsage(command, parsed.parseError);
+    const duplicate = duplicateFlag(rest);
+    if (duplicate !== undefined)
+        return failedUsage(command, `${duplicate} may be supplied once`);
+    if (parsed.positional.length > 0)
+        return failedUsage(command, 'candidates accepts no positional arguments');
+    if (parsed.account === undefined)
+        return failedUsage(command, '--account is required');
+    return {
+        ok: true,
+        args: {
+            account: parsed.account,
+            ...commonArgs(parsed),
+            ...(parsed.query === undefined ? {} : { query: parsed.query }),
+            ...(parsed.cursor === undefined ? {} : { cursor: parsed.cursor }),
+            ...(parsed.limit === undefined ? {} : { limit: parsed.limit }),
+        },
+    };
+}
+function parsePreviewArgs(authorityPath, rest, command) {
+    const parsed = parseCommandFlags(rest, {
+        values: {
+            '--org': 'org',
+            '--account': 'account',
+            '--reason': 'reason',
+            '--out': 'out',
+            '--service': 'service',
+            '--auth-token': 'authToken',
+        },
+        booleans: { '--json': 'json' },
+    });
+    if (parsed.parseError !== undefined)
+        return failedUsage(command, parsed.parseError);
+    const duplicate = duplicateFlag(rest);
+    if (duplicate !== undefined)
+        return failedUsage(command, `${duplicate} may be supplied once`);
+    if (authorityPath === 'customer' && (parsed.org !== undefined || parsed.reason !== undefined))
+        return failedUsage(command, 'unknown customer preview option');
+    const org = authorityPath === 'customer' ? parsed.positional[0] : parsed.org;
+    if (parsed.account === undefined)
+        return failedUsage(command, '--account is required');
+    if (parsed.out === undefined)
+        return failedUsage(command, '--out is required');
+    if (org === undefined)
+        return failedUsage(command, authorityPath === 'customer' ? 'one organization slug is required' : '--org is required');
+    if (authorityPath === 'customer' && parsed.positional.length !== 1)
+        return failedUsage(command, 'exactly one organization slug is required');
+    if (authorityPath === 'super_admin' && parsed.positional.length > 0)
+        return failedUsage(command, 'administrator preview accepts no positional arguments');
+    if (authorityPath === 'super_admin' && parsed.reason === undefined)
+        return failedUsage(command, '--reason is required');
+    return {
+        ok: true,
+        args: {
+            org,
+            account: parsed.account,
+            out: parsed.out,
+            ...(parsed.reason === undefined ? {} : { reason: parsed.reason }),
+            ...commonArgs(parsed),
+        },
+    };
+}
+function parseApplyArgs(rest, command) {
+    const parsed = parseCommandFlags(rest, {
+        values: {
+            '--preview-file': 'previewFile',
+            '--idempotency-key': 'idempotencyKey',
+            '--service': 'service',
+            '--auth-token': 'authToken',
+        },
+        booleans: { '--yes': 'yes', '--json': 'json' },
+    });
+    if (parsed.parseError !== undefined)
+        return failedUsage(command, parsed.parseError);
+    const duplicate = duplicateFlag(rest);
+    if (duplicate !== undefined)
+        return failedUsage(command, `${duplicate} may be supplied once`);
+    if (parsed.positional.length > 0)
+        return failedUsage(command, 'apply accepts no positional arguments');
+    if (parsed.previewFile === undefined)
+        return failedUsage(command, '--preview-file is required');
+    if (parsed.idempotencyKey === undefined)
+        return failedUsage(command, '--idempotency-key is required');
+    if (!parsed.yes)
+        return failedUsage(command, '--yes is required');
+    return {
+        ok: true,
+        args: {
+            previewFile: parsed.previewFile,
+            idempotencyKey: parsed.idempotencyKey,
+            ...commonArgs(parsed),
+        },
+    };
+}
+function duplicateFlag(rest) {
+    const flags = rest.filter((argument) => argument.startsWith('--'));
+    return flags.find((flag, index) => flags.indexOf(flag) !== index);
+}
+function commonArgs(parsed) {
+    return {
+        ...(parsed.service === undefined ? {} : { service: parsed.service }),
+        ...(parsed.authToken === undefined ? {} : { authToken: parsed.authToken }),
+        json: parsed.json,
+    };
+}
+function configuredServiceOrigin(args, env, home, command) {
+    try {
+        return parsedServiceOrigin(resolveServiceUrl(args.service, env, readConfig(home)) ?? DEFAULT_SERVICE_URL, command);
+    }
+    catch {
+        return { ok: false, error: serviceOriginFailure(command) };
+    }
+}
+function parsedServiceOrigin(value, command) {
+    try {
+        return { ok: true, origin: normalizeBillingOrganizationTransferServiceOrigin(value) };
+    }
+    catch {
+        return { ok: false, error: serviceOriginFailure(command) };
+    }
+}
+function commonResolution(args, env, home) {
+    return { serviceFlag: args.service, authFlag: args.authToken, env, home };
+}
+function jsonPost(body) {
+    return {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify(body),
+    };
+}
+function printCandidatePage(page) {
+    console.log(`Billing organization transfer candidates: ${page.items.length}`);
+    if (page.items.length === 0)
+        console.log('No owned organizations matched this request.');
+    for (const candidate of page.items) {
+        console.log(`${candidate.organization.displayName} (${candidate.organization.slug}) — ${candidate.state}`);
+        printCodes('Warnings', candidate.warnings);
+        printCodes('Blockers', candidate.blockers);
+    }
+    console.log(`Next cursor: ${page.nextCursor ?? 'none'}`);
+}
+function printTransferPreview(preview, file, authorityPath, administrativeReason) {
+    console.log(`Billing organization transfer preview: ${preview.blockers.length === 0 ? 'READY' : 'BLOCKED'}`);
+    console.log(`Authority: ${authorityPath === 'customer' ? 'CUSTOMER OWNER' : 'SUPER ADMIN'}`);
+    if (administrativeReason !== undefined)
+        console.log(`Administrative reason: ${administrativeReason}`);
+    console.log(`Organization: ${preview.organization.displayName} (${preview.organization.slug})`);
+    console.log(`Destination: ${preview.destination.displayName} (${preview.destination.id})`);
+    console.log(`Plan: ${preview.currentPlan?.code ?? 'unavailable'} → ${preview.resultingPlan?.code ?? 'unavailable'}`);
+    console.log(`Production apps: ${preview.productionCapacity.prospective}/${preview.productionCapacity.limit} after move`);
+    console.log(`Fallback: ${preview.fallback}`);
+    printCodes('Warnings', preview.warnings);
+    printCodes('Blockers', preview.blockers);
+    console.log(`Reviewed preview: ${file}`);
+    console.log('No changes were made.');
+}
+function printTransferResult(result, authorityPath) {
+    console.log(`Billing organization transfer: ${result.replayed ? 'ALREADY APPLIED' : 'APPLIED'}`);
+    console.log(`Authority: ${authorityPath === 'customer' ? 'CUSTOMER OWNER' : 'SUPER ADMIN'}`);
+    console.log(`Operation ID: ${result.operationId}`);
+    console.log(`Organization: ${result.organization.displayName} (${result.organization.slug})`);
+    console.log(`Destination: ${result.destination.displayName} (${result.destination.id})`);
+    console.log(`Resulting plan: ${result.resultingPlan.code}`);
+    console.log(`Production apps: ${result.productionCapacity.prospective}/${result.productionCapacity.limit}`);
+    console.log(`Effective: ${result.effectiveAt}`);
+    console.log(`Audit recorded: ${result.recordedAt}`);
+    printCodes('Warnings', result.warnings);
+    if (result.replayed)
+        console.log('The exact stored result was returned; no duplicate transfer was made.');
+}
+function printCodes(label, codes) {
+    console.log(`${label}: ${codes.length}`);
+    for (const code of codes)
+        console.log(`  [${code}]`);
+}
+function commandName(authorityPath, action) {
+    return authorityPath === 'customer'
+        ? `billing org transfer${action.length > 0 ? ` ${action}` : ''}`
+        : `billing administration transfer${action.length > 0 ? ` ${action}` : ''}`;
+}
+function usageFailure(command, message) {
+    return {
+        code: 'usage_error',
+        message,
+        cause: 'The billing organization transfer arguments are invalid.',
+        fix: 'Supply every required exact-review input.',
+        next: `noodle ${command} --help`,
+        exitCode: EXIT.USAGE,
+    };
+}
+function failedUsage(command, message) {
+    return { ok: false, error: usageFailure(command, message) };
+}
+function artifactFailure(file, privateValues = []) {
+    const location = redact(file, privateValues);
+    return {
+        code: 'invalid_billing_transfer_preview_file',
+        message: `Cannot use billing organization transfer preview file ${location}.`,
+        cause: 'The private preview file is missing, unsafe, malformed, mismatched, or no longer exact.',
+        fix: 'Capture a fresh private preview from the same service and authority path; do not edit it.',
+        next: 'Run the matching billing organization transfer preview command again.',
+        exitCode: EXIT.FAILURE,
+    };
+}
+function artifactDestinationFailure(file, privateValues) {
+    const location = redact(file, privateValues);
+    return {
+        code: 'invalid_billing_transfer_preview_file',
+        message: `Cannot write billing organization transfer preview file ${location}.`,
+        cause: 'The output path is unsafe, unavailable, or already exists.',
+        fix: 'Choose a new output path; reviewed preview artifacts are never overwritten.',
+        next: 'Run the matching billing organization transfer preview command with a new --out path.',
+        exitCode: EXIT.FAILURE,
+    };
+}
+function blockedArtifactFailure(file, privateValues) {
+    const location = redact(file, privateValues);
+    return {
+        code: 'billing_transfer_preview_blocked',
+        message: `The reviewed billing organization transfer preview at ${location} is blocked.`,
+        cause: 'The saved preview contains one or more blockers.',
+        fix: 'Resolve every blocker and capture a fresh preview.',
+        next: 'Run the matching billing organization transfer preview command again.',
+        exitCode: EXIT.FAILURE,
+    };
+}
+function serviceOriginFailure(command) {
+    return {
+        code: 'invalid_service_origin',
+        message: 'The billing organization transfer service must be one HTTP(S) origin.',
+        cause: 'The configured service includes an invalid URL, credentials, path, query, or fragment.',
+        fix: 'Use only the canonical control-plane origin.',
+        next: `noodle ${command} --service <https-origin>`,
+        exitCode: EXIT.USAGE,
+    };
+}
+function transferServiceFailure(error, command) {
+    const service = error instanceof ServiceRequestError ? error : undefined;
+    const auth = service?.status === 401 || service?.status === 403;
+    const unreachable = service?.status === 0;
+    const code = service?.code !== undefined && STABLE_TRANSFER_CODES.has(service.code)
+        ? service.code
+        : auth
+            ? 'auth_failed'
+            : unreachable
+                ? 'service_unreachable'
+                : 'service_error';
+    return {
+        code,
+        message: auth
+            ? 'The billing organization transfer request was not authorized.'
+            : unreachable
+                ? 'The billing organization transfer service could not be reached.'
+                : 'The billing organization transfer request failed.',
+        cause: auth
+            ? 'The current identity is not authorized for this transfer authority path.'
+            : unreachable
+                ? 'The service outcome is uncertain; preserve the reviewed preview file and private idempotency key.'
+                : 'The service rejected the request without exposing private billing details.',
+        fix: unreachable
+            ? 'Retry the exact apply with the same preview file and private idempotency key.'
+            : 'Check the typed failure and capture a fresh preview when required.',
+        next: unreachable
+            ? `noodle ${command} --preview-file <same-reviewed-preview.json> --idempotency-key <same-private-key> --yes`
+            : `noodle ${command} --help`,
+        exitCode: auth ? EXIT.AUTH : unreachable ? EXIT.UNREACHABLE : EXIT.FAILURE,
+    };
+}
+function privateInputs(args, artifact) {
+    return [
+        args.reason,
+        args.idempotencyKey,
+        artifact?.authorityPath === 'super_admin' ? artifact.request.administrativeReason : undefined,
+    ];
+}
+function redact(value, privateValues) {
+    return privateValues.reduce((safe, privateValue) => privateValue === undefined || privateValue.length === 0
+        ? safe
+        : safe.split(privateValue).join('[redacted]'), value);
+}
+//# sourceMappingURL=billing-org-transfer-ops.js.map