@oxagen/cli 0.4.0 → 0.6.0

package/dist/commands/mcp.list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.list.js","sourceRoot":"","sources":["../../src/commands/mcp.list.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAEhE,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KACnD,WAAW,CAAC,0DAA0D,CAAC;KACvE,MAAM,CAAC,WAAW,EAAE,4CAA4C,CAAC;KACjE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,KAAK,EAAE,OAA8C,EAAE,EAAE;IAC/D,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IACtC,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,eAAe,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAErE,yBAAyB;IACzB,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAElD,4BAA4B;IAC5B,MAAM,UAAU,GAKX,EAAE,CAAC;IAER,qBAAqB;IACrB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,UAAU,GAAG,MAAM,CAAC;QACxB,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC/C,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;gBACzF,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,gBAAgB,CAAC;YAChC,CAAC;QACH,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,GAAG;YACjB,MAAM;YACN,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,SAAS;YACvC,OAAO,EAAE,KAAK;YACd,UAAU;SACX,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,UAAU,CAAC,IAAI,CAAC,GAAG;YACjB,MAAM;YACN,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,aAAa;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,eAAe;IACf,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAE9B,0BAA0B;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,EAAE,CAAC;IAE1B,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CACpG,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAClG,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAiC,CAAC;QACtD,MAAM,SAAS,GAAI,MAAM,CAAC,WAAW,CAAY,IAAI,SAAS,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;QAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;QAEjD,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,CACxH,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,SAAS,UAAU,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/mcp.permit.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `oxagen mcp permit <server>` — Set permission rules for an MCP server.
+ *
+ * Writes allow/deny rules to the specified scope file.
+ * Examples:
+ *   oxagen mcp permit github --allow-all --deny delete_repository
+ *   oxagen mcp permit internal-api --allow "query_*,get_*" --deny "delete_*"
+ *   oxagen mcp permit filesystem --default allow
+ */
+import { Command } from "commander";
+export declare const mcpPermitCommand: Command;
+//# sourceMappingURL=mcp.permit.d.ts.map

package/dist/commands/mcp.permit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.permit.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.permit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4BpC,eAAO,MAAM,gBAAgB,SA6FzB,CAAC"}

package/dist/commands/mcp.permit.js

@@ -0,0 +1,117 @@
+/**
+ * `oxagen mcp permit <server>` — Set permission rules for an MCP server.
+ *
+ * Writes allow/deny rules to the specified scope file.
+ * Examples:
+ *   oxagen mcp permit github --allow-all --deny delete_repository
+ *   oxagen mcp permit internal-api --allow "query_*,get_*" --deny "delete_*"
+ *   oxagen mcp permit filesystem --default allow
+ */
+import { Command } from "commander";
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { homedir } from "node:os";
+import { findProjectRoot } from "@oxagen/mcp-config/resolve";
+function getSettingsPath(scope, projectRoot) {
+    switch (scope) {
+        case "user":
+            return join(homedir(), ".config", "oxagen", "settings.json");
+        case "project":
+            return join(projectRoot, ".oxagen", "settings.json");
+        case "local":
+            return join(projectRoot, ".oxagen", "settings.local.json");
+    }
+}
+function readOrCreateSettings(filePath) {
+    if (!existsSync(filePath))
+        return {};
+    try {
+        return JSON.parse(readFileSync(filePath, "utf8"));
+    }
+    catch {
+        return {};
+    }
+}
+export const mcpPermitCommand = new Command("permit")
+    .description("Set permission rules for an MCP server's tools")
+    .argument("<server>", "Server name to configure permissions for")
+    .option("--allow <patterns>", "Glob patterns for tools to allow (comma-separated)")
+    .option("--deny <patterns>", "Glob patterns for tools to deny (comma-separated)")
+    .option("--allow-all", "Set defaultPolicy to allow for this server")
+    .option("--deny-all", "Set defaultPolicy to deny for this server")
+    .option("--ask-all", "Set defaultPolicy to ask for this server (reset to default)")
+    .option("--default <policy>", "Set server defaultPolicy: allow, deny, ask")
+    .option("--scope <scope>", "Config scope: user, project, local", "project")
+    .option("--clear", "Remove all permission rules for this server")
+    .action(async (server, options) => {
+    const scope = options.scope;
+    const projectRoot = findProjectRoot();
+    const filePath = getSettingsPath(scope, projectRoot);
+    const dir = dirname(filePath);
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    const settings = readOrCreateSettings(filePath);
+    // Ensure permissions structure exists
+    if (!settings["permissions"]) {
+        settings["permissions"] = {};
+    }
+    const permissions = settings["permissions"];
+    if (!permissions["mcpServers"]) {
+        permissions["mcpServers"] = {};
+    }
+    const mcpServers = permissions["mcpServers"];
+    if (options.clear) {
+        delete mcpServers[server];
+        writeFileSync(filePath, JSON.stringify(settings, null, 2) + "\n", "utf8");
+        console.log(`Cleared all permission rules for "${server}" in ${scope} scope`);
+        return;
+    }
+    // Build the permission entry
+    if (!mcpServers[server]) {
+        mcpServers[server] = {};
+    }
+    const serverPerms = mcpServers[server];
+    // Default policy
+    if (options.allowAll) {
+        serverPerms["defaultPolicy"] = "allow";
+    }
+    else if (options.denyAll) {
+        serverPerms["defaultPolicy"] = "deny";
+    }
+    else if (options.askAll) {
+        serverPerms["defaultPolicy"] = "ask";
+    }
+    else if (options.default) {
+        if (!["allow", "deny", "ask"].includes(options.default)) {
+            console.error("Error: --default must be allow, deny, or ask");
+            process.exit(1);
+        }
+        serverPerms["defaultPolicy"] = options.default;
+    }
+    // Allow patterns (append to existing)
+    if (options.allow) {
+        const existing = serverPerms["allow"] ?? [];
+        const newPatterns = options.allow.split(",").map((p) => p.trim());
+        serverPerms["allow"] = [...new Set([...existing, ...newPatterns])];
+    }
+    // Deny patterns (append to existing)
+    if (options.deny) {
+        const existing = serverPerms["deny"] ?? [];
+        const newPatterns = options.deny.split(",").map((p) => p.trim());
+        serverPerms["deny"] = [...new Set([...existing, ...newPatterns])];
+    }
+    writeFileSync(filePath, JSON.stringify(settings, null, 2) + "\n", "utf8");
+    // Print summary
+    const parts = [];
+    if (serverPerms["defaultPolicy"])
+        parts.push(`default: ${serverPerms["defaultPolicy"]}`);
+    if (serverPerms["allow"])
+        parts.push(`allow: ${serverPerms["allow"].join(", ")}`);
+    if (serverPerms["deny"])
+        parts.push(`deny: ${serverPerms["deny"].join(", ")}`);
+    console.log(`Updated permissions for "${server}" in ${scope} scope`);
+    if (parts.length > 0)
+        console.log(`  ${parts.join(" | ")}`);
+});
+//# sourceMappingURL=mcp.permit.js.map

package/dist/commands/mcp.permit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.permit.js","sourceRoot":"","sources":["../../src/commands/mcp.permit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAI7D,SAAS,eAAe,CAAC,KAAY,EAAE,WAAmB;IACxD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC/D,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QACvD,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAA4B,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KAClD,WAAW,CAAC,gDAAgD,CAAC;KAC7D,QAAQ,CAAC,UAAU,EAAE,0CAA0C,CAAC;KAChE,MAAM,CAAC,oBAAoB,EAAE,oDAAoD,CAAC;KAClF,MAAM,CAAC,mBAAmB,EAAE,mDAAmD,CAAC;KAChF,MAAM,CAAC,aAAa,EAAE,4CAA4C,CAAC;KACnE,MAAM,CAAC,YAAY,EAAE,2CAA2C,CAAC;KACjE,MAAM,CAAC,WAAW,EAAE,6DAA6D,CAAC;KAClF,MAAM,CAAC,oBAAoB,EAAE,4CAA4C,CAAC;KAC1E,MAAM,CAAC,iBAAiB,EAAE,oCAAoC,EAAE,SAAS,CAAC;KAC1E,MAAM,CAAC,SAAS,EAAE,6CAA6C,CAAC;KAChE,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,OAS9B,EAAE,EAAE;IACH,MAAM,KAAK,GAAG,OAAO,CAAC,KAAc,CAAC;IACrC,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAEhD,sCAAsC;IACtC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,aAAa,CAA4B,CAAC;IACvE,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/B,WAAW,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,YAAY,CAA4C,CAAC;IAExF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1B,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,qCAAqC,MAAM,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAE,CAAC;IAExC,iBAAiB;IACjB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,WAAW,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC;IACzC,CAAC;SAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,WAAW,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC;IACxC,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,WAAW,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC;IACvC,CAAC;SAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,WAAW,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IACjD,CAAC;IAED,sCAAsC;IACtC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAI,WAAW,CAAC,OAAO,CAA0B,IAAI,EAAE,CAAC;QACtE,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,qCAAqC;IACrC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAI,WAAW,CAAC,MAAM,CAA0B,IAAI,EAAE,CAAC;QACrE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAE1E,gBAAgB;IAChB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,WAAW,CAAC,eAAe,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACzF,IAAI,WAAW,CAAC,OAAO,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,UAAW,WAAW,CAAC,OAAO,CAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChG,IAAI,WAAW,CAAC,MAAM,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,SAAU,WAAW,CAAC,MAAM,CAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC"}

package/dist/commands/mcp.remove.d.ts

@@ -0,0 +1,9 @@
+/**
+ * `oxagen mcp remove <name>` — Remove an MCP server from file-based configuration.
+ *
+ * Removes the server entry from the specified scope. Managed servers cannot
+ * be removed. Also deletes stored credentials unless --keep-credentials.
+ */
+import { Command } from "commander";
+export declare const mcpRemoveCommand: Command;
+//# sourceMappingURL=mcp.remove.d.ts.map

package/dist/commands/mcp.remove.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.remove.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.remove.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBpC,eAAO,MAAM,gBAAgB,SA8CzB,CAAC"}

package/dist/commands/mcp.remove.js

@@ -0,0 +1,65 @@
+/**
+ * `oxagen mcp remove <name>` — Remove an MCP server from file-based configuration.
+ *
+ * Removes the server entry from the specified scope. Managed servers cannot
+ * be removed. Also deletes stored credentials unless --keep-credentials.
+ */
+import { Command } from "commander";
+import { readFileSync, writeFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { loadManagedConfig, isManagedServer } from "@oxagen/mcp-config/managed";
+import { deleteCredential } from "@oxagen/mcp-config/credentials";
+import { findProjectRoot } from "@oxagen/mcp-config/resolve";
+function getSettingsPath(scope, projectRoot) {
+    switch (scope) {
+        case "user":
+            return join(homedir(), ".config", "oxagen", "settings.json");
+        case "project":
+            return join(projectRoot, ".oxagen", "settings.json");
+        case "local":
+            return join(projectRoot, ".oxagen", "settings.local.json");
+    }
+}
+export const mcpRemoveCommand = new Command("remove")
+    .description("Remove an MCP server from file-based configuration")
+    .argument("<name>", "Server name to remove")
+    .option("--scope <scope>", "Config scope to remove from: user, project, local", "project")
+    .option("--keep-credentials", "Do not delete stored credentials for this server")
+    .action(async (name, options) => {
+    const scope = options.scope;
+    const projectRoot = findProjectRoot();
+    // Cannot remove managed servers
+    const managed = loadManagedConfig();
+    if (isManagedServer(name, managed)) {
+        console.error(`Error: "${name}" is a managed server provisioned by your organization and cannot be removed.`);
+        process.exit(1);
+    }
+    const filePath = getSettingsPath(scope, projectRoot);
+    if (!existsSync(filePath)) {
+        console.error(`Error: no settings file found at ${filePath}`);
+        process.exit(1);
+    }
+    let settings;
+    try {
+        settings = JSON.parse(readFileSync(filePath, "utf8"));
+    }
+    catch {
+        console.error(`Error: failed to parse ${filePath}`);
+        process.exit(1);
+    }
+    const mcpServers = (settings["mcpServers"] ?? {});
+    if (!(name in mcpServers)) {
+        console.error(`Error: server "${name}" not found in ${scope} scope (${filePath})`);
+        process.exit(1);
+    }
+    delete mcpServers[name];
+    settings["mcpServers"] = mcpServers;
+    writeFileSync(filePath, JSON.stringify(settings, null, 2) + "\n", "utf8");
+    // Clean up credentials unless --keep-credentials
+    if (!options.keepCredentials) {
+        deleteCredential(name);
+    }
+    console.log(`Removed MCP server "${name}" from ${scope} scope (${filePath})`);
+});
+//# sourceMappingURL=mcp.remove.js.map

package/dist/commands/mcp.remove.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.remove.js","sourceRoot":"","sources":["../../src/commands/mcp.remove.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAI7D,SAAS,eAAe,CAAC,KAAY,EAAE,WAAmB;IACxD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC/D,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QACvD,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KAClD,WAAW,CAAC,oDAAoD,CAAC;KACjE,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;KAC3C,MAAM,CAAC,iBAAiB,EAAE,mDAAmD,EAAE,SAAS,CAAC;KACzF,MAAM,CAAC,oBAAoB,EAAE,kDAAkD,CAAC;KAChF,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAAqD,EAAE,EAAE;IACpF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAc,CAAC;IACrC,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IAEtC,gCAAgC;IAChC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,IAAI,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,WAAW,IAAI,+EAA+E,CAAC,CAAC;QAC9G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,QAAiC,CAAC;IACtC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAA4B,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC7E,IAAI,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,kBAAkB,IAAI,kBAAkB,KAAK,WAAW,QAAQ,GAAG,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,GAAG,UAAU,CAAC;IACpC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAE1E,iDAAiD;IACjD,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAC7B,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,UAAU,KAAK,WAAW,QAAQ,GAAG,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC"}

package/dist/commands/mermaid.generate.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const mermaidGenerateCommand: Command;
+//# sourceMappingURL=mermaid.generate.d.ts.map

package/dist/commands/mermaid.generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mermaid.generate.d.ts","sourceRoot":"","sources":["../../src/commands/mermaid.generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,eAAO,MAAM,sBAAsB,SA8B/B,CAAC"}

package/dist/commands/mermaid.generate.js

@@ -0,0 +1,33 @@
+import { Command } from "commander";
+import { apiRequest } from "../lib/api-client.js";
+import * as fs from "fs";
+export const mermaidGenerateCommand = new Command("generate")
+    .description("Generate a Mermaid diagram artifact")
+    .requiredOption("-d, --diagram <source>", "Mermaid diagram source text")
+    .requiredOption("-t, --title <title>", "Diagram title")
+    .option("--theme <theme>", "Mermaid theme: default | dark | neutral | forest (default: default)", "default")
+    .option("-o, --output <path>", "Write the diagram source to a file")
+    .action(async (options) => {
+    try {
+        const result = await apiRequest("/mermaid/generate", {
+            method: "POST",
+            body: JSON.stringify({
+                title: options.title,
+                diagram: options.diagram,
+                theme: options.theme,
+            }),
+        });
+        if (options.output) {
+            fs.writeFileSync(String(options.output), result.source);
+            console.log(`Diagram source written to ${options.output}`);
+        }
+        else {
+            console.log(JSON.stringify(result, null, 2));
+        }
+    }
+    catch (error) {
+        console.error("Failed to generate Mermaid diagram:", error);
+        process.exit(1);
+    }
+});
+//# sourceMappingURL=mermaid.generate.js.map

package/dist/commands/mermaid.generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mermaid.generate.js","sourceRoot":"","sources":["../../src/commands/mermaid.generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAWzB,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC;KAC1D,WAAW,CAAC,qCAAqC,CAAC;KAClD,cAAc,CAAC,wBAAwB,EAAE,6BAA6B,CAAC;KACvE,cAAc,CAAC,qBAAqB,EAAE,eAAe,CAAC;KACtD,MAAM,CACL,iBAAiB,EACjB,qEAAqE,EACrE,SAAS,CACV;KACA,MAAM,CAAC,qBAAqB,EAAE,oCAAoC,CAAC;KACnE,MAAM,CAAC,KAAK,EAAE,OAAgC,EAAE,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAA0B,mBAAmB,EAAE;YAC5E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;SACH,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,6BAA6B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/ontology.neighbors.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const ontologyNeighborsCommand: Command;
+//# sourceMappingURL=ontology.neighbors.d.ts.map

package/dist/commands/ontology.neighbors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ontology.neighbors.d.ts","sourceRoot":"","sources":["../../src/commands/ontology.neighbors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,eAAO,MAAM,wBAAwB,SAmCjC,CAAC"}

package/dist/commands/ontology.neighbors.js

@@ -0,0 +1,34 @@
+import { Command } from "commander";
+import { apiRequest } from "../lib/api-client.js";
+export const ontologyNeighborsCommand = new Command("neighbors")
+    .description("Return the one-hop neighborhood of a node — directly connected nodes, " +
+    "optionally filtered by relationship type and direction.")
+    .requiredOption("-n, --node <publicId>", "publicId of the node whose neighbors to fetch")
+    .option("-e, --edge-types <types>", "Comma-separated relationship types to include (default: all types)")
+    .option("-d, --direction <dir>", "Neighbor direction: out | in | both", "both")
+    .option("--limit <n>", "Maximum neighbors to return (1–500)", "100")
+    .action(async (options) => {
+    try {
+        const edgeTypes = options.edgeTypes
+            ? String(options.edgeTypes)
+                .split(",")
+                .map((s) => s.trim())
+                .filter(Boolean)
+            : undefined;
+        const result = await apiRequest("/ontology/neighbors", {
+            method: "POST",
+            body: JSON.stringify({
+                nodeId: options.node,
+                edgeTypes,
+                direction: options.direction,
+                limit: Number(options.limit),
+            }),
+        });
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (error) {
+        console.error("Failed to fetch node neighbors:", error);
+        process.exit(1);
+    }
+});
+//# sourceMappingURL=ontology.neighbors.js.map

package/dist/commands/ontology.neighbors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ontology.neighbors.js","sourceRoot":"","sources":["../../src/commands/ontology.neighbors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC;KAC7D,WAAW,CACV,wEAAwE;IACtE,yDAAyD,CAC5D;KACA,cAAc,CAAC,uBAAuB,EAAE,+CAA+C,CAAC;KACxF,MAAM,CACL,0BAA0B,EAC1B,oEAAoE,CACrE;KACA,MAAM,CAAC,uBAAuB,EAAE,qCAAqC,EAAE,MAAM,CAAC;KAC9E,MAAM,CAAC,aAAa,EAAE,qCAAqC,EAAE,KAAK,CAAC;KACnE,MAAM,CAAC,KAAK,EAAE,OAAgC,EAAE,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS;YACjC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;iBACtB,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,qBAAqB,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE,OAAO,CAAC,IAAI;gBACpB,SAAS;gBACT,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAC7B,CAAC;SACH,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/ontology.query.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const ontologyQueryCommand: Command;
+//# sourceMappingURL=ontology.query.d.ts.map

package/dist/commands/ontology.query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ontology.query.d.ts","sourceRoot":"","sources":["../../src/commands/ontology.query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,eAAO,MAAM,oBAAoB,SAqC7B,CAAC"}

package/dist/commands/ontology.query.js

@@ -0,0 +1,36 @@
+import { Command } from "commander";
+import { apiRequest } from "../lib/api-client.js";
+export const ontologyQueryCommand = new Command("query")
+    .description("Typed multi-hop traversal from a start node over named relationship type(s). " +
+    "Returns the reachable subgraph (nodes + edges) without writing Cypher.")
+    .requiredOption("-n, --node <publicId>", "publicId of the start node")
+    .option("-e, --edge-types <types>", "Comma-separated relationship types to follow (default: all types)")
+    .option("-d, --direction <dir>", "Traversal direction: out | in | both", "out")
+    .option("--max-depth <n>", "Maximum hop distance (1–5)", "2")
+    .option("--limit <n>", "Maximum nodes to return (1–500)", "100")
+    .action(async (options) => {
+    try {
+        const edgeTypes = options.edgeTypes
+            ? String(options.edgeTypes)
+                .split(",")
+                .map((s) => s.trim())
+                .filter(Boolean)
+            : undefined;
+        const result = await apiRequest("/ontology/query", {
+            method: "POST",
+            body: JSON.stringify({
+                startNodeId: options.node,
+                edgeTypes,
+                direction: options.direction,
+                maxDepth: Number(options.maxDepth),
+                limit: Number(options.limit),
+            }),
+        });
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (error) {
+        console.error("Failed to run ontology query:", error);
+        process.exit(1);
+    }
+});
+//# sourceMappingURL=ontology.query.js.map

package/dist/commands/ontology.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ontology.query.js","sourceRoot":"","sources":["../../src/commands/ontology.query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KACrD,WAAW,CACV,+EAA+E;IAC7E,wEAAwE,CAC3E;KACA,cAAc,CAAC,uBAAuB,EAAE,4BAA4B,CAAC;KACrE,MAAM,CACL,0BAA0B,EAC1B,mEAAmE,CACpE;KACA,MAAM,CAAC,uBAAuB,EAAE,sCAAsC,EAAE,KAAK,CAAC;KAC9E,MAAM,CAAC,iBAAiB,EAAE,4BAA4B,EAAE,GAAG,CAAC;KAC5D,MAAM,CAAC,aAAa,EAAE,iCAAiC,EAAE,KAAK,CAAC;KAC/D,MAAM,CAAC,KAAK,EAAE,OAAgC,EAAE,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS;YACjC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;iBACtB,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,SAAS;gBACT,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAClC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAC7B,CAAC;SACH,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/plugin.org.install_bulk.js

@@ -20,7 +20,7 @@ export const pluginOrgInstallBulkCommand = new Command("install-bulk")
         console.log(`✓ Bulk install complete: ${succeeded} succeeded, ${failed} failed`);
         for (const item of data.installed) {
             if (item.error) {
-                console.log(`  ✗ ${item.catalogServerId ?? "custom"}: ${item.error}`);
+                console.log(`  ✗ ${item.pluginId ?? "custom"}: ${item.error}`);
             }
             else {
                 console.log(`  ✓ ${item.orgListingId}`);

package/dist/commands/plugin.org.install_bulk.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.org.install_bulk.js","sourceRoot":"","sources":["../../src/commands/plugin.org.install_bulk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAU5C,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,OAAO,CAAC,cAAc,CAAC;KACnE,WAAW,CAAC,qEAAqE,CAAC;KAClF,cAAc,CAAC,gBAAgB,EAAE,2GAA2G,CAAC;KAC7I,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;KAC3C,MAAM,CAAC,KAAK,EAAE,OAAwC,EAAE,EAAE;IACzD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAc,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,UAAU,CAA+B,0BAA0B,EAAE;YACtF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK;gBACL,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,QAAQ,EAAE;aAClC,CAAC;SACH,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,4BAA4B,SAAS,eAAe,MAAM,SAAS,CAAC,CAAC;QACjF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,eAAe,IAAI,QAAQ,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"plugin.org.install_bulk.js","sourceRoot":"","sources":["../../src/commands/plugin.org.install_bulk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAU5C,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,OAAO,CAAC,cAAc,CAAC;KACnE,WAAW,CAAC,qEAAqE,CAAC;KAClF,cAAc,CAAC,gBAAgB,EAAE,2GAA2G,CAAC;KAC7I,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;KAC3C,MAAM,CAAC,KAAK,EAAE,OAAwC,EAAE,EAAE;IACzD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAc,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,UAAU,CAA+B,0BAA0B,EAAE;YACtF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK;gBACL,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,QAAQ,EAAE;aAClC,CAAC;SACH,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,4BAA4B,SAAS,eAAe,MAAM,SAAS,CAAC,CAAC;QACjF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/privacy.erase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"privacy.erase.d.ts","sourceRoot":"","sources":["../../src/commands/privacy.erase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBpC,eAAO,MAAM,mBAAmB,SAiD5B,CAAC"}
+{"version":3,"file":"privacy.erase.d.ts","sourceRoot":"","sources":["../../src/commands/privacy.erase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBpC,eAAO,MAAM,mBAAmB,SAmD5B,CAAC"}

package/dist/commands/privacy.erase.js

@@ -1,6 +1,6 @@
 import { Command } from "commander";
 import * as readline from "node:readline";
-import { apiRequest, ApiError } from "../lib/api-client.js";
+import { apiRequest, requireAuth, ApiError } from "../lib/api-client.js";
 async function promptConfirm(message) {
     const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
     return new Promise((resolve) => {
@@ -16,6 +16,7 @@ export const privacyEraseCommand = new Command("erase")
     .option("--org-id <id>", "Organization ID (required when --scope=org)")
     .option("-y, --yes", "Skip interactive confirmation (CI use only)")
     .action(async (options) => {
+    requireAuth();
     if (options.scope !== "user" && options.scope !== "org") {
         console.error("Error: --scope must be 'user' or 'org'");
         process.exit(1);

package/dist/commands/privacy.erase.js.map

@@ -1 +1 @@
-{"version":3,"file":"privacy.erase.js","sourceRoot":"","sources":["../../src/commands/privacy.erase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAS5D,KAAK,UAAU,aAAa,CAAC,OAAe;IAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;YAC9B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KACpD,WAAW,CAAC,yEAAyE,CAAC;KACtF,MAAM,CAAC,qBAAqB,EAAE,sCAAsC,EAAE,MAAM,CAAC;KAC7E,MAAM,CAAC,eAAe,EAAE,6CAA6C,CAAC;KACtE,MAAM,CAAC,WAAW,EAAE,6CAA6C,CAAC;KAClE,MAAM,CAAC,KAAK,EAAE,OAAyD,EAAE,EAAE;IAC1E,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QACxD,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,KAAK,KAAK;YACxC,CAAC,CAAC,gBAAgB,OAAO,CAAC,KAAK,EAAE;YACjC,CAAC,CAAC,cAAc,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,uDAAuD,UAAU,GAAG,CAAC,CAAC;QACpF,OAAO,CAAC,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACpG,MAAM,SAAS,GAAG,MAAM,aAAa,CACnC,mDAAmD,CACpD,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAgB,gBAAgB,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,IAAI;gBACb,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC;SACH,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,0CAA0C,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"privacy.erase.js","sourceRoot":"","sources":["../../src/commands/privacy.erase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AASzE,KAAK,UAAU,aAAa,CAAC,OAAe;IAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;YAC9B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KACpD,WAAW,CAAC,yEAAyE,CAAC;KACtF,MAAM,CAAC,qBAAqB,EAAE,sCAAsC,EAAE,MAAM,CAAC;KAC7E,MAAM,CAAC,eAAe,EAAE,6CAA6C,CAAC;KACtE,MAAM,CAAC,WAAW,EAAE,6CAA6C,CAAC;KAClE,MAAM,CAAC,KAAK,EAAE,OAAyD,EAAE,EAAE;IAC1E,WAAW,EAAE,CAAC;IAEd,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QACxD,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,KAAK,KAAK;YACxC,CAAC,CAAC,gBAAgB,OAAO,CAAC,KAAK,EAAE;YACjC,CAAC,CAAC,cAAc,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,uDAAuD,UAAU,GAAG,CAAC,CAAC;QACpF,OAAO,CAAC,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACpG,MAAM,SAAS,GAAG,MAAM,aAAa,CACnC,mDAAmD,CACpD,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAgB,gBAAgB,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,IAAI;gBACb,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC;SACH,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,0CAA0C,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/privacy.erase.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=privacy.erase.test.d.ts.map

package/dist/commands/privacy.erase.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.erase.test.d.ts","sourceRoot":"","sources":["../../src/commands/privacy.erase.test.ts"],"names":[],"mappings":""}

package/dist/commands/privacy.erase.test.js

@@ -0,0 +1,132 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+// Mock api-client before importing the command so the module factory is hoisted
+vi.mock("../lib/api-client.js", () => ({
+    requireAuth: vi.fn(),
+    apiRequest: vi.fn(),
+    ApiError: class ApiError extends Error {
+        status;
+        constructor(status, message) {
+            super(message);
+            this.name = "ApiError";
+            this.status = status;
+        }
+    },
+}));
+// readline is used for the interactive CONFIRM prompt — mock it so tests don't block on stdin
+vi.mock("node:readline", () => ({
+    createInterface: vi.fn(() => ({
+        question: vi.fn((_msg, cb) => cb("CONFIRM")),
+        close: vi.fn(),
+    })),
+}));
+import * as apiClientModule from "../lib/api-client.js";
+import { privacyEraseCommand } from "./privacy.erase.js";
+const mockRequireAuth = vi.mocked(apiClientModule.requireAuth);
+const mockApiRequest = vi.mocked(apiClientModule.apiRequest);
+// Retrieve ApiError from the mock module so instanceof checks work against the same class
+const { ApiError } = apiClientModule;
+beforeEach(() => {
+    vi.clearAllMocks();
+    // privacyEraseCommand is a module-level singleton; Commander retains parsed
+    // option values across parseAsync() calls, so a prior test's `--scope org`
+    // leaks into the next parse and trips the org-id guard. Reset to declared
+    // defaults before each test so every parse starts from a clean slate.
+    privacyEraseCommand.setOptionValue("scope", "user");
+    privacyEraseCommand.setOptionValue("orgId", undefined);
+    privacyEraseCommand.setOptionValue("yes", undefined);
+});
+/**
+ * Invoke the command action directly by parsing the given argv.
+ * We call parseAsync so the async action handler runs to completion.
+ */
+async function runCommand(argv) {
+    await privacyEraseCommand.parseAsync(argv, { from: "user" });
+}
+describe("privacy erase command — requireAuth gate", () => {
+    it("calls requireAuth() before any other logic", async () => {
+        // requireAuth throws (simulating process.exit) so we can assert it ran
+        mockRequireAuth.mockImplementation(() => {
+            throw new Error("not authenticated");
+        });
+        await expect(runCommand(["--yes"])).rejects.toThrow("not authenticated");
+        // requireAuth must have been called
+        expect(mockRequireAuth).toHaveBeenCalledTimes(1);
+        // apiRequest must NOT have been called — auth check came first
+        expect(mockApiRequest).not.toHaveBeenCalled();
+    });
+    it("calls requireAuth() before showing the interactive confirmation prompt", async () => {
+        // Simulate unauthenticated: requireAuth exits before the prompt
+        let requireAuthCalled = false;
+        mockRequireAuth.mockImplementation(() => {
+            requireAuthCalled = true;
+            throw new Error("exit:1");
+        });
+        await expect(runCommand([])).rejects.toThrow("exit:1");
+        expect(requireAuthCalled).toBe(true);
+        // apiRequest should not be reached
+        expect(mockApiRequest).not.toHaveBeenCalled();
+    });
+});
+describe("privacy erase command — authenticated flow", () => {
+    beforeEach(() => {
+        // Pass-through: auth is satisfied
+        mockRequireAuth.mockReturnValue(undefined);
+    });
+    it("exits non-zero for invalid --scope value", async () => {
+        const exitSpy = vi.spyOn(process, "exit").mockImplementation((code) => {
+            throw new Error(`exit:${code ?? 0}`);
+        });
+        const consoleSpy = vi.spyOn(console, "error").mockImplementation(() => { });
+        await expect(runCommand(["--scope", "invalid", "--yes"])).rejects.toThrow("exit:1");
+        expect(consoleSpy).toHaveBeenCalledWith(expect.stringContaining("--scope must be"));
+        exitSpy.mockRestore();
+        consoleSpy.mockRestore();
+    });
+    it("exits non-zero when --scope=org and --org-id is missing", async () => {
+        const exitSpy = vi.spyOn(process, "exit").mockImplementation((code) => {
+            throw new Error(`exit:${code ?? 0}`);
+        });
+        const consoleSpy = vi.spyOn(console, "error").mockImplementation(() => { });
+        await expect(runCommand(["--scope", "org", "--yes"])).rejects.toThrow("exit:1");
+        expect(consoleSpy).toHaveBeenCalledWith(expect.stringContaining("--org-id is required"));
+        exitSpy.mockRestore();
+        consoleSpy.mockRestore();
+    });
+    it("sends POST to /privacy/erase with --yes flag (skips confirmation)", async () => {
+        mockApiRequest.mockResolvedValueOnce({
+            requestId: "req-123",
+            status: "scheduled",
+            effectiveAt: "2026-06-21T00:00:00Z",
+        });
+        const logSpy = vi.spyOn(console, "log").mockImplementation(() => { });
+        await runCommand(["--yes"]);
+        expect(mockApiRequest).toHaveBeenCalledWith("/privacy/erase", expect.objectContaining({ method: "POST" }));
+        expect(logSpy).toHaveBeenCalledWith(expect.stringContaining("req-123"));
+        logSpy.mockRestore();
+    });
+    it("sends POST with orgId when --scope=org", async () => {
+        mockApiRequest.mockResolvedValueOnce({
+            requestId: "req-456",
+            status: "scheduled",
+            effectiveAt: "2026-06-21T00:00:00Z",
+        });
+        const logSpy = vi.spyOn(console, "log").mockImplementation(() => { });
+        await runCommand(["--scope", "org", "--org-id", "org-abc", "--yes"]);
+        expect(mockApiRequest).toHaveBeenCalledWith("/privacy/erase", expect.objectContaining({
+            body: expect.stringContaining("org-abc"),
+        }));
+        logSpy.mockRestore();
+    });
+    it("prints error and exits non-zero on ApiError", async () => {
+        mockApiRequest.mockRejectedValueOnce(new ApiError(401, "Unauthorized"));
+        const consoleSpy = vi.spyOn(console, "error").mockImplementation(() => { });
+        const exitSpy = vi.spyOn(process, "exit").mockImplementation((code) => {
+            throw new Error(`exit:${code ?? 0}`);
+        });
+        await expect(runCommand(["--yes"])).rejects.toThrow("exit:1");
+        expect(consoleSpy).toHaveBeenCalledWith(expect.stringContaining("Unauthorized"));
+        consoleSpy.mockRestore();
+        exitSpy.mockRestore();
+    });
+});
+//# sourceMappingURL=privacy.erase.test.js.map

package/dist/commands/privacy.erase.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.erase.test.js","sourceRoot":"","sources":["../../src/commands/privacy.erase.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,gFAAgF;AAChF,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,QAAQ,EAAE,MAAM,QAAS,SAAQ,KAAK;QACpC,MAAM,CAAS;QACf,YAAY,MAAc,EAAE,OAAe;YACzC,KAAK,CAAC,OAAO,CAAC,CAAC;YACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;YACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,CAAC;KACF;CACF,CAAC,CAAC,CAAC;AAEJ,8FAA8F;AAC9F,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9B,eAAe,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5B,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAA4B,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9E,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;KACf,CAAC,CAAC;CACJ,CAAC,CAAC,CAAC;AAEJ,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,eAAe,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC/D,MAAM,cAAc,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;AAC7D,0FAA0F;AAC1F,MAAM,EAAE,QAAQ,EAAE,GAAG,eAEpB,CAAC;AAEF,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,sEAAsE;IACtE,mBAAmB,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,mBAAmB,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACvD,mBAAmB,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,KAAK,UAAU,UAAU,CAAC,IAAc;IACtC,MAAM,mBAAmB,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,uEAAuE;QACvE,eAAe,CAAC,kBAAkB,CAAC,GAAG,EAAE;YACtC,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAEzE,oCAAoC;QACpC,MAAM,CAAC,eAAe,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACjD,+DAA+D;QAC/D,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,gEAAgE;QAChE,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,eAAe,CAAC,kBAAkB,CAAC,GAAG,EAAE;YACtC,iBAAiB,GAAG,IAAI,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEvD,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,mCAAmC;QACnC,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,UAAU,CAAC,GAAG,EAAE;QACd,kCAAkC;QAClC,eAAe,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,EAAE;YACpE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAE3E,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpF,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAEpF,OAAO,CAAC,WAAW,EAAE,CAAC;QACtB,UAAU,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,EAAE;YACpE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAE3E,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChF,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAEzF,OAAO,CAAC,WAAW,EAAE,CAAC;QACtB,UAAU,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,cAAc,CAAC,qBAAqB,CAAC;YACnC,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,sBAAsB;SACpC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAErE,MAAM,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAE5B,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzC,gBAAgB,EAChB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAC5C,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;QAExE,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,cAAc,CAAC,qBAAqB,CAAC;YACnC,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,sBAAsB;SACpC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAErE,MAAM,UAAU,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QAErE,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzC,gBAAgB,EAChB,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;SACzC,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,cAAc,CAAC,qBAAqB,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QACxE,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,EAAE;YACpE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC;QAEjF,UAAU,CAAC,WAAW,EAAE,CAAC;QACzB,OAAO,CAAC,WAAW,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/replay.d.ts

@@ -0,0 +1,5 @@
+export interface ReplayOptions {
+    list?: boolean;
+}
+export declare function handleReplay(arg: string | undefined, options?: ReplayOptions): Promise<void>;
+//# sourceMappingURL=replay.d.ts.map

package/dist/commands/replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../src/commands/replay.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAoBf"}