@platforma-sdk/pl-cli 0.8.29 → 0.9.1

package/dist/index.js

@@ -1,2 +1,2 @@
-import { _ as e, a as t, c as n, d as r, f as i, g as a, h as o, i as s, l as c, m as l, n as u, o as d, p as f, s as p, t as m, u as h } from "./output-KEq0q5fS.js";
-export { a as createAdminPlConnection, e as createPlConnection, d as deduplicateName, p as deleteProject, n as duplicateProject, m as formatDate, u as formatTable, c as getExistingLabelsInTx, h as getProjectInfo, r as getProjectListRid, i as listProjects, f as navigateToUserRoot, s as outputJson, t as outputText, l as renameProject, o as resolveProject };
+import { a as e, b as t, c as n, d as r, f as i, g as a, i as o, m as s, n as c, o as l, s as u, t as d, u as f, v as p, x as m, y as h } from "./output-BAuWMUzX.js";
+export { t as createAdminPlConnection, m as createPlConnection, l as deduplicateName, u as deleteProject, n as duplicateProject, d as formatDate, c as formatTable, f as getExistingLabelsInTx, r as getProjectInfo, i as getProjectListRid, s as listProjects, a as navigateToUserRoot, o as outputJson, e as outputText, p as renameProject, h as resolveProject };

package/dist/output-BAuWMUzX.js

@@ -0,0 +1,232 @@
+import { PlClient as e, UnauthenticatedPlClient as t, field as n, isNotFoundError as r, isNullSignedResourceId as i, plAddressToConfig as a, resourceIdToString as o } from "@milaboratories/pl-client";
+import { randomUUID as s } from "node:crypto";
+import { ProjectCreatedTimestamp as c, ProjectLastModifiedTimestamp as l, ProjectMetaKey as u, ProjectStructureKey as d, ProjectsField as f, ProjectsResourceType as p, SchemaVersionKey as m, duplicateProject as h } from "@milaboratories/pl-middle-layer";
+//#region src/connection.ts
+async function g(n) {
+	let r = a(n.address);
+	n.user !== void 0 && (r.user = n.user), n.password !== void 0 && (r.password = n.password);
+	let i = await t.build(r), o;
+	if (await i.requireAuth()) {
+		if (r.user === void 0 || r.password === void 0) throw Error("Server requires authentication but no credentials provided. Use --user/--password flags or PL_USER/PL_PASSWORD env vars.");
+		o = await i.login(r.user, r.password);
+	} else o = {};
+	return await e.init(r, { authInformation: o });
+}
+async function _(n) {
+	let r = a(n.address), i = await (await t.build(r)).login(n.adminUser, n.adminPassword);
+	return await e.init(r, { authInformation: i });
+}
+//#endregion
+//#region src/project_ops.ts
+async function v(e, t) {
+	return await e.withReadTx("listProjects", async (e) => {
+		let n = await e.getResourceData(t, !0), r = [];
+		for (let t of n.fields) {
+			if (i(t.value)) continue;
+			let [n, a, s] = await Promise.all([
+				e.getKValueStringIfExists(t.value, u),
+				e.getKValueStringIfExists(t.value, c),
+				e.getKValueStringIfExists(t.value, l)
+			]), d = n ? JSON.parse(n) : { label: "(unknown)" }, f = o(t.value);
+			r.push({
+				id: f,
+				rid: t.value,
+				label: d.label,
+				created: a ? new Date(Number(a)) : /* @__PURE__ */ new Date(0),
+				lastModified: s ? new Date(Number(s)) : /* @__PURE__ */ new Date(0)
+			});
+		}
+		return r.sort((e, t) => t.lastModified.getTime() - e.lastModified.getTime()), r;
+	});
+}
+async function y(e, t) {
+	return await e.withReadTx("listProjectIdentities", async (e) => await b(e, t));
+}
+async function b(e, t) {
+	let n = await e.getResourceData(t, !0), r = [];
+	for (let t of n.fields) {
+		if (i(t.value)) continue;
+		let n = await e.getKValueStringIfExists(t.value, u), a = n ? JSON.parse(n) : { label: "(unknown)" };
+		r.push({
+			id: o(t.value),
+			rid: t.value,
+			fieldName: t.name,
+			label: a.label
+		});
+	}
+	return r;
+}
+async function x(e, t, n) {
+	return await e.withReadTx("getProjectInfo", async (e) => {
+		let r = await e.listKeyValuesString(n), i = r.find((e) => e.key === u), a = r.find((e) => e.key === c), o = r.find((e) => e.key === l), s = r.find((e) => e.key === m), f = r.find((e) => e.key === d), p = i ? JSON.parse(i.value) : { label: "(unknown)" }, h = s ? JSON.parse(s.value) : void 0, g = [];
+		if (f) {
+			let e = JSON.parse(f.value);
+			for (let t of e.groups ?? []) for (let e of t.blocks ?? []) g.push(e.id);
+		}
+		return {
+			id: t,
+			rid: n,
+			label: p.label,
+			created: a ? new Date(Number(a.value)) : /* @__PURE__ */ new Date(0),
+			lastModified: o ? new Date(Number(o.value)) : /* @__PURE__ */ new Date(0),
+			schemaVersion: h,
+			blockCount: g.length,
+			blockIds: g
+		};
+	});
+}
+async function S(e, t, n) {
+	return await e.withReadTx("resolveProject", async (e) => {
+		let r = await e.getResourceData(t, !0);
+		for (let e of r.fields) {
+			if (i(e.value)) continue;
+			let t = o(e.value);
+			if (t === n) return {
+				id: t,
+				rid: e.value,
+				fieldName: e.name
+			};
+		}
+		for (let t of r.fields) {
+			if (i(t.value)) continue;
+			let r = await e.getKValueStringIfExists(t.value, u);
+			if (r && JSON.parse(r).label === n) return {
+				id: o(t.value),
+				rid: t.value,
+				fieldName: t.name
+			};
+		}
+		throw Error(`Project "${n}" not found (searched by id and label).`);
+	});
+}
+async function C(e, t) {
+	let n = await e.getResourceData(t, !0), r = [];
+	for (let t of n.fields) {
+		if (i(t.value)) continue;
+		let n = await e.getKValueStringIfExists(t.value, u);
+		if (n) {
+			let e = JSON.parse(n);
+			r.push(e.label);
+		}
+	}
+	return r;
+}
+function w(e, t) {
+	let n = `${e} (Copy)`, r = 2;
+	for (; t.includes(n);) n = `${e} (Copy ${r})`, r++;
+	return n;
+}
+async function T(e, t, n) {
+	await e.withWriteTx("renameProject", async (e) => {
+		let r = await e.getKValueString(t, u), i = {
+			...JSON.parse(r),
+			label: n
+		};
+		e.setKValue(t, u, JSON.stringify(i)), e.setKValue(t, l, String(Date.now())), await e.commit();
+	});
+}
+async function E(e, t, r) {
+	await e.withWriteTx("deleteProject", async (e) => {
+		e.removeField(n(t, r)), await e.commit();
+	});
+}
+async function D(e, t, r) {
+	return await e.withWriteTx("moveProjects", async (e) => {
+		let i = await b(e, t);
+		if (i.length === 0) return [];
+		let a = await C(e, r), o = [];
+		for (let c of i) {
+			let i = await e.getKValueString(c.rid, u), d = JSON.parse(i), f = d.label, p = f;
+			a.includes(p) && (p = w(f, a), e.setKValue(c.rid, u, JSON.stringify({
+				...d,
+				label: p
+			})), e.setKValue(c.rid, l, String(Date.now()))), a.push(p), e.createField(n(r, s()), "Dynamic", c.rid), e.removeField(n(t, c.fieldName)), o.push({
+				id: c.id,
+				sourceLabel: f,
+				targetLabel: p
+			});
+		}
+		return await e.commit(), o;
+	});
+}
+async function O(e) {
+	return await e.withReadTx("getProjectList", async (e) => {
+		let t = await e.getField({
+			resourceId: e.clientRoot,
+			fieldName: f
+		});
+		if (i(t.value)) throw Error("No project list found for this user.");
+		return t.value;
+	});
+}
+async function k(e, t) {
+	let a;
+	try {
+		a = await e.getUserRoot({ login: t });
+	} catch (e) {
+		throw r(e) ? Error(`User "${t}" not found on this server.`) : e;
+	}
+	if (a === void 0) throw Error(`User "${t}" not found on this server (no root resource).`);
+	return await e.withReadTx("openUserRoot", async (e) => {
+		let t = await e.getFieldIfExists(n(a, f));
+		return t === void 0 || i(t.value) ? {
+			userRoot: a,
+			projectListRid: void 0
+		} : {
+			userRoot: a,
+			projectListRid: t.value
+		};
+	});
+}
+async function A(e, t) {
+	return await e.withWriteTx("ensureUserProjectList", async (e) => {
+		let r = n(t, f);
+		e.createField(r, "Dynamic");
+		let a = await e.getField(r);
+		if (!i(a.value)) return await e.commit(), a.value;
+		let o = e.createEphemeral(p);
+		return e.lock(o), e.setField(r, o), await e.commit(), await o.globalId;
+	});
+}
+async function j(e, t) {
+	let n;
+	if (n = await e.getUserRoot({ login: t }), n === void 0) throw Error(`User "${t}" not found on this server (no root resource).`);
+	return await e.withReadTx("navigateToUserProjects", async (e) => {
+		let r = await e.getField({
+			resourceId: n,
+			fieldName: f
+		});
+		if (i(r.value)) throw Error(`User "${t}" has no project list.`);
+		return {
+			userRoot: n,
+			projectListRid: r.value
+		};
+	});
+}
+//#endregion
+//#region src/output.ts
+function M(e) {
+	console.log(e);
+}
+function N(e) {
+	console.log(JSON.stringify(e, null, 2));
+}
+function P(e, t) {
+	let n = (e) => /[",\r\n]/.test(e) ? `"${e.replace(/"/g, "\"\"")}"` : e, r = [e, ...t].map((e) => e.map(n).join(","));
+	console.log(r.join("\n"));
+}
+function F(e, t) {
+	let n = e.map((e, n) => Math.max(e.length, ...t.map((e) => (e[n] ?? "").length))), r = n.map((e) => "-".repeat(e)).join("  ");
+	return [
+		e.map((e, t) => e.padEnd(n[t])).join("  "),
+		r,
+		...t.map((e) => e.map((e, t) => (e ?? "").padEnd(n[t])).join("  "))
+	].join("\n");
+}
+function I(e) {
+	return e.getTime() === 0 ? "(unknown)" : e.toISOString().replace("T", " ").replace(/\.\d+Z$/, "Z");
+}
+//#endregion
+export { k as _, M as a, _ as b, h as c, x as d, O as f, j as g, D as h, N as i, A as l, v as m, F as n, w as o, y as p, P as r, E as s, I as t, C as u, T as v, g as x, S as y };
+
+//# sourceMappingURL=output-BAuWMUzX.js.map

package/dist/output-BAuWMUzX.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-BAuWMUzX.js","names":[],"sources":["../src/connection.ts","../src/project_ops.ts","../src/output.ts"],"sourcesContent":["import {\n  PlClient,\n  UnauthenticatedPlClient,\n  plAddressToConfig,\n  type AuthInformation,\n  type PlClientConfig,\n} from \"@milaboratories/pl-client\";\n\nexport interface PlConnectionOptions {\n  address: string;\n  user?: string;\n  password?: string;\n}\n\nexport interface AdminConnectionOptions {\n  address: string;\n  adminUser: string;\n  adminPassword: string;\n}\n\n/** Creates an authenticated PlClient from address + credentials. */\nexport async function createPlConnection(opts: PlConnectionOptions): Promise<PlClient> {\n  const config: PlClientConfig = plAddressToConfig(opts.address);\n\n  if (opts.user !== undefined) config.user = opts.user;\n  if (opts.password !== undefined) config.password = opts.password;\n\n  const unauth = await UnauthenticatedPlClient.build(config);\n  let authInformation: AuthInformation;\n\n  if (await unauth.requireAuth()) {\n    if (config.user === undefined || config.password === undefined) {\n      throw new Error(\n        \"Server requires authentication but no credentials provided. \" +\n          \"Use --user/--password flags or PL_USER/PL_PASSWORD env vars.\",\n      );\n    }\n    authInformation = await unauth.login(config.user, config.password);\n  } else {\n    authInformation = {};\n  }\n\n  return await PlClient.init(config, { authInformation });\n}\n\n/** Creates a PlClient with admin/controller credentials. */\nexport async function createAdminPlConnection(opts: AdminConnectionOptions): Promise<PlClient> {\n  const config: PlClientConfig = plAddressToConfig(opts.address);\n\n  const unauth = await UnauthenticatedPlClient.build(config);\n  const authInformation: AuthInformation = await unauth.login(opts.adminUser, opts.adminPassword);\n\n  return await PlClient.init(config, { authInformation });\n}\n","import type { PlClient, SignedResourceId, PlTransaction } from \"@milaboratories/pl-client\";\nimport {\n  field,\n  isNotFoundError,\n  isNullSignedResourceId,\n  resourceIdToString,\n} from \"@milaboratories/pl-client\";\nimport { randomUUID } from \"node:crypto\";\nimport {\n  ProjectMetaKey,\n  ProjectCreatedTimestamp,\n  ProjectLastModifiedTimestamp,\n  SchemaVersionKey,\n  ProjectStructureKey,\n  ProjectsField,\n  ProjectsResourceType,\n  duplicateProject,\n} from \"@milaboratories/pl-middle-layer\";\nimport type { ProjectMeta } from \"@milaboratories/pl-middle-layer\";\n\nexport interface ProjectEntry {\n  id: string;\n  rid: SignedResourceId;\n  label: string;\n  created: Date;\n  lastModified: Date;\n}\n\nexport interface ProjectIdentity {\n  /** Project ID (resourceIdToString of resource ID) */\n  id: string;\n  /** Signed resource ID for use in transactions */\n  rid: SignedResourceId;\n  /** UUID field name in the project list resource */\n  fieldName: string;\n}\n\nexport interface ProjectInfo extends ProjectEntry {\n  schemaVersion: string | undefined;\n  blockCount: number;\n  blockIds: string[];\n}\n\n/** List all projects from a project list resource. */\nexport async function listProjects(\n  pl: PlClient,\n  projectListRid: SignedResourceId,\n): Promise<ProjectEntry[]> {\n  return await pl.withReadTx(\"listProjects\", async (tx) => {\n    const data = await tx.getResourceData(projectListRid, true);\n    const entries: ProjectEntry[] = [];\n\n    for (const f of data.fields) {\n      if (isNullSignedResourceId(f.value)) continue;\n\n      const [metaStr, createdStr, modifiedStr] = await Promise.all([\n        tx.getKValueStringIfExists(f.value, ProjectMetaKey),\n        tx.getKValueStringIfExists(f.value, ProjectCreatedTimestamp),\n        tx.getKValueStringIfExists(f.value, ProjectLastModifiedTimestamp),\n      ]);\n\n      const meta: ProjectMeta = metaStr ? JSON.parse(metaStr) : { label: \"(unknown)\" };\n\n      const projectId = resourceIdToString(f.value);\n      entries.push({\n        id: projectId,\n        rid: f.value,\n        label: meta.label,\n        created: createdStr ? new Date(Number(createdStr)) : new Date(0),\n        lastModified: modifiedStr ? new Date(Number(modifiedStr)) : new Date(0),\n      });\n    }\n\n    entries.sort((a, b) => b.lastModified.getTime() - a.lastModified.getTime());\n    return entries;\n  });\n}\n\n/** A project's identity plus its label — what a whole-root operation needs per project. */\nexport interface ProjectIdentityWithLabel extends ProjectIdentity {\n  label: string;\n}\n\n/**\n * Lists every project in a project list with the field name holding it, which\n * {@link listProjects} omits. Whole-root operations (moving a user's projects out before the\n * account is deleted) need that field name to detach each project from its old owner.\n */\nexport async function listProjectIdentities(\n  pl: PlClient,\n  projectListRid: SignedResourceId,\n): Promise<ProjectIdentityWithLabel[]> {\n  return await pl.withReadTx(\"listProjectIdentities\", async (tx) => {\n    return await listProjectIdentitiesInTx(tx, projectListRid);\n  });\n}\n\n/**\n * {@link listProjectIdentities} against a transaction the caller already holds, so a write that\n * acts on the list can read it in the same transaction rather than trusting an earlier snapshot.\n */\nexport async function listProjectIdentitiesInTx(\n  tx: PlTransaction,\n  projectListRid: SignedResourceId,\n): Promise<ProjectIdentityWithLabel[]> {\n  const data = await tx.getResourceData(projectListRid, true);\n  const projects: ProjectIdentityWithLabel[] = [];\n\n  for (const f of data.fields) {\n    if (isNullSignedResourceId(f.value)) continue;\n\n    const metaStr = await tx.getKValueStringIfExists(f.value, ProjectMetaKey);\n    const meta: ProjectMeta = metaStr ? JSON.parse(metaStr) : { label: \"(unknown)\" };\n\n    projects.push({\n      id: resourceIdToString(f.value),\n      rid: f.value,\n      fieldName: f.name,\n      label: meta.label,\n    });\n  }\n\n  return projects;\n}\n\n/** Get detailed info about a project. */\nexport async function getProjectInfo(\n  pl: PlClient,\n  projectId: string,\n  rid: SignedResourceId,\n): Promise<ProjectInfo> {\n  return await pl.withReadTx(\"getProjectInfo\", async (tx) => {\n    const kvs = await tx.listKeyValuesString(rid);\n\n    const metaKV = kvs.find((kv: { key: string }) => kv.key === ProjectMetaKey);\n    const createdKV = kvs.find((kv: { key: string }) => kv.key === ProjectCreatedTimestamp);\n    const modifiedKV = kvs.find((kv: { key: string }) => kv.key === ProjectLastModifiedTimestamp);\n    const schemaKV = kvs.find((kv: { key: string }) => kv.key === SchemaVersionKey);\n    const structureKV = kvs.find((kv: { key: string }) => kv.key === ProjectStructureKey);\n\n    const meta: ProjectMeta = metaKV ? JSON.parse(metaKV.value) : { label: \"(unknown)\" };\n    const schemaVersion = schemaKV ? JSON.parse(schemaKV.value) : undefined;\n\n    const blockIds: string[] = [];\n    if (structureKV) {\n      const structure = JSON.parse(structureKV.value);\n      for (const group of structure.groups ?? []) {\n        for (const block of group.blocks ?? []) {\n          blockIds.push(block.id);\n        }\n      }\n    }\n\n    return {\n      id: projectId,\n      rid: rid,\n      label: meta.label,\n      created: createdKV ? new Date(Number(createdKV.value)) : new Date(0),\n      lastModified: modifiedKV ? new Date(Number(modifiedKV.value)) : new Date(0),\n      schemaVersion,\n      blockCount: blockIds.length,\n      blockIds,\n    };\n  });\n}\n\n/** Resolve a project identifier (id or label) to its project ID, ResourceId and field name. */\nexport async function resolveProject(\n  pl: PlClient,\n  projectListRid: SignedResourceId,\n  identifier: string,\n): Promise<ProjectIdentity> {\n  return await pl.withReadTx(\"resolveProject\", async (tx) => {\n    const data = await tx.getResourceData(projectListRid, true);\n    for (const f of data.fields) {\n      if (isNullSignedResourceId(f.value)) continue;\n      const projectId = resourceIdToString(f.value);\n      if (projectId === identifier) {\n        return { id: projectId, rid: f.value, fieldName: f.name };\n      }\n    }\n    // Fallback: match by label\n    for (const f of data.fields) {\n      if (isNullSignedResourceId(f.value)) continue;\n      const metaStr = await tx.getKValueStringIfExists(f.value, ProjectMetaKey);\n      if (metaStr) {\n        const meta: ProjectMeta = JSON.parse(metaStr);\n        if (meta.label === identifier) {\n          return { id: resourceIdToString(f.value), rid: f.value, fieldName: f.name };\n        }\n      }\n    }\n\n    throw new Error(`Project \"${identifier}\" not found (searched by id and label).`);\n  });\n}\n\n/** Read all project labels within an existing transaction. */\nexport async function getExistingLabelsInTx(\n  tx: PlTransaction,\n  projectListRid: SignedResourceId,\n): Promise<string[]> {\n  const data = await tx.getResourceData(projectListRid, true);\n  const labels: string[] = [];\n  for (const f of data.fields) {\n    if (isNullSignedResourceId(f.value)) continue;\n    const metaStr = await tx.getKValueStringIfExists(f.value, ProjectMetaKey);\n    if (metaStr) {\n      const meta: ProjectMeta = JSON.parse(metaStr);\n      labels.push(meta.label);\n    }\n  }\n  return labels;\n}\n\n/** Get all project labels from a project list. */\nexport async function getProjectLabels(\n  pl: PlClient,\n  projectListRid: SignedResourceId,\n): Promise<string[]> {\n  return await pl.withReadTx(\"getProjectLabels\", async (tx) => {\n    return getExistingLabelsInTx(tx, projectListRid);\n  });\n}\n\n/**\n * Deduplicates a project name against existing labels.\n * \"X\" → \"X (Copy)\" → \"X (Copy 2)\" → ...\n */\nexport function deduplicateName(baseName: string, existingLabels: string[]): string {\n  let candidate = `${baseName} (Copy)`;\n  let i = 2;\n  while (existingLabels.includes(candidate)) {\n    candidate = `${baseName} (Copy ${i})`;\n    i++;\n  }\n  return candidate;\n}\n\n/** Rename a project (update its label). */\nexport async function renameProject(\n  pl: PlClient,\n  projectRid: SignedResourceId,\n  newLabel: string,\n): Promise<void> {\n  await pl.withWriteTx(\"renameProject\", async (tx) => {\n    const metaStr = await tx.getKValueString(projectRid, ProjectMetaKey);\n    const meta: ProjectMeta = JSON.parse(metaStr);\n    const updated: ProjectMeta = { ...meta, label: newLabel };\n    tx.setKValue(projectRid, ProjectMetaKey, JSON.stringify(updated));\n    tx.setKValue(projectRid, ProjectLastModifiedTimestamp, String(Date.now()));\n    await tx.commit();\n  });\n}\n\n/** Delete a project from the project list. */\nexport async function deleteProject(\n  pl: PlClient,\n  projectListRid: SignedResourceId,\n  fieldName: string,\n): Promise<void> {\n  await pl.withWriteTx(\"deleteProject\", async (tx) => {\n    tx.removeField(field(projectListRid, fieldName));\n    await tx.commit();\n  });\n}\n\n/** One project moved by {@link moveProjects}, as it ended up in the target root. */\nexport interface MovedProject {\n  id: string;\n  /** Label the project had in the source root. */\n  sourceLabel: string;\n  /** Label it carries in the target root — differs when the name collided and was deduplicated. */\n  targetLabel: string;\n}\n\n/**\n * Re-attaches projects from one user's project list to another's, keeping the same project\n * resources — no copy is made, so nothing is duplicated and no data is rewritten.\n *\n * This works across roots because the backend permits a reference between differently coloured\n * resources when the caller holds write access to both, which admin credentials do. Names that\n * collide in the target are deduplicated the way {@link duplicateProject} callers deduplicate\n * theirs, so a move never silently shadows a project the target user already has.\n *\n * The whole batch is one transaction: either every project lands in the target root, or none\n * moves and both roots are untouched.\n */\nexport async function moveProjects(\n  pl: PlClient,\n  sourceProjectListRid: SignedResourceId,\n  targetProjectListRid: SignedResourceId,\n): Promise<MovedProject[]> {\n  return await pl.withWriteTx(\"moveProjects\", async (tx) => {\n    // Read here rather than taken from the caller: a list read before an operator answered a\n    // confirmation prompt describes the account as it was minutes ago, and a project attached\n    // since then would be left on the source root — where the account deletion that follows\n    // destroys it. Moving what this transaction sees narrows that to the transaction itself.\n    const projects = await listProjectIdentitiesInTx(tx, sourceProjectListRid);\n    if (projects.length === 0) return [];\n\n    const takenLabels = await getExistingLabelsInTx(tx, targetProjectListRid);\n    const moved: MovedProject[] = [];\n\n    for (const project of projects) {\n      const metaStr = await tx.getKValueString(project.rid, ProjectMetaKey);\n      const meta: ProjectMeta = JSON.parse(metaStr);\n      const sourceLabel = meta.label;\n\n      let targetLabel = sourceLabel;\n      if (takenLabels.includes(targetLabel)) {\n        targetLabel = deduplicateName(sourceLabel, takenLabels);\n        tx.setKValue(project.rid, ProjectMetaKey, JSON.stringify({ ...meta, label: targetLabel }));\n        tx.setKValue(project.rid, ProjectLastModifiedTimestamp, String(Date.now()));\n      }\n      // Reserved even when the label was free, so two source projects with the same name do not\n      // both keep it.\n      takenLabels.push(targetLabel);\n\n      // Attached to the target before being detached from the source: the project keeps a\n      // reference throughout, so it is never momentarily unreferenced.\n      tx.createField(field(targetProjectListRid, randomUUID()), \"Dynamic\", project.rid);\n      tx.removeField(field(sourceProjectListRid, project.fieldName));\n\n      moved.push({ id: project.id, sourceLabel, targetLabel });\n    }\n\n    await tx.commit();\n    return moved;\n  });\n}\n\n/** Get the project list ResourceId for the connected user. */\nexport async function getProjectListRid(pl: PlClient): Promise<SignedResourceId> {\n  return await pl.withReadTx(\"getProjectList\", async (tx) => {\n    const fieldData = await tx.getField({\n      resourceId: tx.clientRoot,\n      fieldName: ProjectsField,\n    });\n    if (isNullSignedResourceId(fieldData.value)) {\n      throw new Error(\"No project list found for this user.\");\n    }\n    return fieldData.value;\n  });\n}\n\n/**\n * Resolves a user's root and, if they have one, their project list.\n *\n * Unlike {@link navigateToUserRoot} a missing project list is not an error here: a user who has\n * never opened the app has a root and no list, and that account is still a legitimate target for\n * whole-account operations. Callers that need a list to write into use\n * {@link ensureUserProjectList}.\n */\nexport async function openUserRoot(\n  pl: PlClient,\n  username: string,\n): Promise<{ userRoot: SignedResourceId; projectListRid: SignedResourceId | undefined }> {\n  let userRoot: SignedResourceId | undefined;\n  try {\n    userRoot = await pl.getUserRoot({ login: username });\n  } catch (e) {\n    // The backend reports an unknown login as NOT_FOUND on the root, which reads as a missing\n    // resource rather than a missing user. Name the actual problem.\n    if (isNotFoundError(e)) {\n      throw new Error(`User \"${username}\" not found on this server.`);\n    }\n    throw e;\n  }\n  if (userRoot === undefined) {\n    throw new Error(`User \"${username}\" not found on this server (no root resource).`);\n  }\n\n  return await pl.withReadTx(\"openUserRoot\", async (tx) => {\n    const projectsField = await tx.getFieldIfExists(field(userRoot, ProjectsField));\n    if (projectsField === undefined || isNullSignedResourceId(projectsField.value)) {\n      return { userRoot, projectListRid: undefined };\n    }\n    return { userRoot, projectListRid: projectsField.value };\n  });\n}\n\n/**\n * Returns a user's project list, creating an empty one when the root has none — the same lazy\n * creation the middle layer performs for the signed-in user, but against an impersonated root, so\n * projects can be re-homed to a user who has never opened the app.\n */\nexport async function ensureUserProjectList(\n  pl: PlClient,\n  userRoot: SignedResourceId,\n): Promise<SignedResourceId> {\n  return await pl.withWriteTx(\"ensureUserProjectList\", async (tx) => {\n    const projectsField = field(userRoot, ProjectsField);\n    tx.createField(projectsField, \"Dynamic\");\n    const fieldData = await tx.getField(projectsField);\n    if (!isNullSignedResourceId(fieldData.value)) {\n      await tx.commit();\n      return fieldData.value;\n    }\n\n    const list = tx.createEphemeral(ProjectsResourceType);\n    tx.lock(list);\n    tx.setField(projectsField, list);\n    await tx.commit();\n    return await list.globalId;\n  });\n}\n\n/**\n * Navigates to a specific user's project list resource ID.\n * Tries ListUserResources first (new backend), falls back to SHA256 named resource lookup.\n */\nexport async function navigateToUserRoot(\n  pl: PlClient,\n  username: string,\n): Promise<{ userRoot: SignedResourceId; projectListRid: SignedResourceId }> {\n  let userRootRid: SignedResourceId | undefined;\n\n  userRootRid = await pl.getUserRoot({ login: username });\n  if (userRootRid === undefined) {\n    throw new Error(`User \"${username}\" not found on this server (no root resource).`);\n  }\n\n  // Read the projects field from the resolved user root\n  return await pl.withReadTx(\"navigateToUserProjects\", async (tx) => {\n    const projectsFieldData = await tx.getField({\n      resourceId: userRootRid,\n      fieldName: ProjectsField,\n    });\n\n    if (isNullSignedResourceId(projectsFieldData.value)) {\n      throw new Error(`User \"${username}\" has no project list.`);\n    }\n\n    return { userRoot: userRootRid, projectListRid: projectsFieldData.value };\n  });\n}\n\n// Re-export duplicateProject from pl-middle-layer for use in commands\nexport { duplicateProject };\n","export type OutputFormat = \"text\" | \"json\" | \"csv\";\n\n/** Outputs a line of text to stdout. */\nexport function outputText(message: string): void {\n  console.log(message);\n}\n\n/** Outputs data as formatted JSON to stdout. */\nexport function outputJson(data: unknown): void {\n  console.log(JSON.stringify(data, null, 2));\n}\n\n/** Outputs a header row + data rows as RFC-4180-ish CSV to stdout. */\nexport function outputCsv(headers: string[], rows: string[][]): void {\n  const esc = (v: string) => (/[\",\\r\\n]/.test(v) ? `\"${v.replace(/\"/g, '\"\"')}\"` : v);\n  const lines = [headers, ...rows].map((r) => r.map(esc).join(\",\"));\n  console.log(lines.join(\"\\n\"));\n}\n\n/** Formats a table as aligned text columns. */\nexport function formatTable(headers: string[], rows: string[][]): string {\n  const colWidths = headers.map((h, i) =>\n    Math.max(h.length, ...rows.map((r) => (r[i] ?? \"\").length)),\n  );\n\n  const sep = colWidths.map((w) => \"-\".repeat(w)).join(\"  \");\n  const headerLine = headers.map((h, i) => h.padEnd(colWidths[i])).join(\"  \");\n  const dataLines = rows.map((row) =>\n    row.map((cell, i) => (cell ?? \"\").padEnd(colWidths[i])).join(\"  \"),\n  );\n\n  return [headerLine, sep, ...dataLines].join(\"\\n\");\n}\n\n/** Formats a Date as a short human-readable string. */\nexport function formatDate(d: Date): string {\n  if (d.getTime() === 0) return \"(unknown)\";\n  return d\n    .toISOString()\n    .replace(\"T\", \" \")\n    .replace(/\\.\\d+Z$/, \"Z\");\n}\n"],"mappings":";;;;AAqBA,eAAsB,EAAmB,GAA8C;CACrF,IAAM,IAAyB,EAAkB,EAAK,QAAQ;AAG9D,CADI,EAAK,SAAS,KAAA,MAAW,EAAO,OAAO,EAAK,OAC5C,EAAK,aAAa,KAAA,MAAW,EAAO,WAAW,EAAK;CAExD,IAAM,IAAS,MAAM,EAAwB,MAAM,EAAO,EACtD;AAEJ,KAAI,MAAM,EAAO,aAAa,EAAE;AAC9B,MAAI,EAAO,SAAS,KAAA,KAAa,EAAO,aAAa,KAAA,EACnD,OAAU,MACR,2HAED;AAEH,MAAkB,MAAM,EAAO,MAAM,EAAO,MAAM,EAAO,SAAS;OAElE,KAAkB,EAAE;AAGtB,QAAO,MAAM,EAAS,KAAK,GAAQ,EAAE,oBAAiB,CAAC;;AAIzD,eAAsB,EAAwB,GAAiD;CAC7F,IAAM,IAAyB,EAAkB,EAAK,QAAQ,EAGxD,IAAmC,OAD1B,MAAM,EAAwB,MAAM,EAAO,EACJ,MAAM,EAAK,WAAW,EAAK,cAAc;AAE/F,QAAO,MAAM,EAAS,KAAK,GAAQ,EAAE,oBAAiB,CAAC;;;;ACRzD,eAAsB,EACpB,GACA,GACyB;AACzB,QAAO,MAAM,EAAG,WAAW,gBAAgB,OAAO,MAAO;EACvD,IAAM,IAAO,MAAM,EAAG,gBAAgB,GAAgB,GAAK,EACrD,IAA0B,EAAE;AAElC,OAAK,IAAM,KAAK,EAAK,QAAQ;AAC3B,OAAI,EAAuB,EAAE,MAAM,CAAE;GAErC,IAAM,CAAC,GAAS,GAAY,KAAe,MAAM,QAAQ,IAAI;IAC3D,EAAG,wBAAwB,EAAE,OAAO,EAAe;IACnD,EAAG,wBAAwB,EAAE,OAAO,EAAwB;IAC5D,EAAG,wBAAwB,EAAE,OAAO,EAA6B;IAClE,CAAC,EAEI,IAAoB,IAAU,KAAK,MAAM,EAAQ,GAAG,EAAE,OAAO,aAAa,EAE1E,IAAY,EAAmB,EAAE,MAAM;AAC7C,KAAQ,KAAK;IACX,IAAI;IACJ,KAAK,EAAE;IACP,OAAO,EAAK;IACZ,SAAS,IAAa,IAAI,KAAK,OAAO,EAAW,CAAC,mBAAG,IAAI,KAAK,EAAE;IAChE,cAAc,IAAc,IAAI,KAAK,OAAO,EAAY,CAAC,mBAAG,IAAI,KAAK,EAAE;IACxE,CAAC;;AAIJ,SADA,EAAQ,MAAM,GAAG,MAAM,EAAE,aAAa,SAAS,GAAG,EAAE,aAAa,SAAS,CAAC,EACpE;GACP;;AAaJ,eAAsB,EACpB,GACA,GACqC;AACrC,QAAO,MAAM,EAAG,WAAW,yBAAyB,OAAO,MAClD,MAAM,EAA0B,GAAI,EAAe,CAC1D;;AAOJ,eAAsB,EACpB,GACA,GACqC;CACrC,IAAM,IAAO,MAAM,EAAG,gBAAgB,GAAgB,GAAK,EACrD,IAAuC,EAAE;AAE/C,MAAK,IAAM,KAAK,EAAK,QAAQ;AAC3B,MAAI,EAAuB,EAAE,MAAM,CAAE;EAErC,IAAM,IAAU,MAAM,EAAG,wBAAwB,EAAE,OAAO,EAAe,EACnE,IAAoB,IAAU,KAAK,MAAM,EAAQ,GAAG,EAAE,OAAO,aAAa;AAEhF,IAAS,KAAK;GACZ,IAAI,EAAmB,EAAE,MAAM;GAC/B,KAAK,EAAE;GACP,WAAW,EAAE;GACb,OAAO,EAAK;GACb,CAAC;;AAGJ,QAAO;;AAIT,eAAsB,EACpB,GACA,GACA,GACsB;AACtB,QAAO,MAAM,EAAG,WAAW,kBAAkB,OAAO,MAAO;EACzD,IAAM,IAAM,MAAM,EAAG,oBAAoB,EAAI,EAEvC,IAAS,EAAI,MAAM,MAAwB,EAAG,QAAQ,EAAe,EACrE,IAAY,EAAI,MAAM,MAAwB,EAAG,QAAQ,EAAwB,EACjF,IAAa,EAAI,MAAM,MAAwB,EAAG,QAAQ,EAA6B,EACvF,IAAW,EAAI,MAAM,MAAwB,EAAG,QAAQ,EAAiB,EACzE,IAAc,EAAI,MAAM,MAAwB,EAAG,QAAQ,EAAoB,EAE/E,IAAoB,IAAS,KAAK,MAAM,EAAO,MAAM,GAAG,EAAE,OAAO,aAAa,EAC9E,IAAgB,IAAW,KAAK,MAAM,EAAS,MAAM,GAAG,KAAA,GAExD,IAAqB,EAAE;AAC7B,MAAI,GAAa;GACf,IAAM,IAAY,KAAK,MAAM,EAAY,MAAM;AAC/C,QAAK,IAAM,KAAS,EAAU,UAAU,EAAE,CACxC,MAAK,IAAM,KAAS,EAAM,UAAU,EAAE,CACpC,GAAS,KAAK,EAAM,GAAG;;AAK7B,SAAO;GACL,IAAI;GACC;GACL,OAAO,EAAK;GACZ,SAAS,IAAY,IAAI,KAAK,OAAO,EAAU,MAAM,CAAC,mBAAG,IAAI,KAAK,EAAE;GACpE,cAAc,IAAa,IAAI,KAAK,OAAO,EAAW,MAAM,CAAC,mBAAG,IAAI,KAAK,EAAE;GAC3E;GACA,YAAY,EAAS;GACrB;GACD;GACD;;AAIJ,eAAsB,EACpB,GACA,GACA,GAC0B;AAC1B,QAAO,MAAM,EAAG,WAAW,kBAAkB,OAAO,MAAO;EACzD,IAAM,IAAO,MAAM,EAAG,gBAAgB,GAAgB,GAAK;AAC3D,OAAK,IAAM,KAAK,EAAK,QAAQ;AAC3B,OAAI,EAAuB,EAAE,MAAM,CAAE;GACrC,IAAM,IAAY,EAAmB,EAAE,MAAM;AAC7C,OAAI,MAAc,EAChB,QAAO;IAAE,IAAI;IAAW,KAAK,EAAE;IAAO,WAAW,EAAE;IAAM;;AAI7D,OAAK,IAAM,KAAK,EAAK,QAAQ;AAC3B,OAAI,EAAuB,EAAE,MAAM,CAAE;GACrC,IAAM,IAAU,MAAM,EAAG,wBAAwB,EAAE,OAAO,EAAe;AACzE,OAAI,KACwB,KAAK,MAAM,EAAQ,CACpC,UAAU,EACjB,QAAO;IAAE,IAAI,EAAmB,EAAE,MAAM;IAAE,KAAK,EAAE;IAAO,WAAW,EAAE;IAAM;;AAKjF,QAAU,MAAM,YAAY,EAAW,yCAAyC;GAChF;;AAIJ,eAAsB,EACpB,GACA,GACmB;CACnB,IAAM,IAAO,MAAM,EAAG,gBAAgB,GAAgB,GAAK,EACrD,IAAmB,EAAE;AAC3B,MAAK,IAAM,KAAK,EAAK,QAAQ;AAC3B,MAAI,EAAuB,EAAE,MAAM,CAAE;EACrC,IAAM,IAAU,MAAM,EAAG,wBAAwB,EAAE,OAAO,EAAe;AACzE,MAAI,GAAS;GACX,IAAM,IAAoB,KAAK,MAAM,EAAQ;AAC7C,KAAO,KAAK,EAAK,MAAM;;;AAG3B,QAAO;;AAiBT,SAAgB,EAAgB,GAAkB,GAAkC;CAClF,IAAI,IAAY,GAAG,EAAS,UACxB,IAAI;AACR,QAAO,EAAe,SAAS,EAAU,EAEvC,CADA,IAAY,GAAG,EAAS,SAAS,EAAE,IACnC;AAEF,QAAO;;AAIT,eAAsB,EACpB,GACA,GACA,GACe;AACf,OAAM,EAAG,YAAY,iBAAiB,OAAO,MAAO;EAClD,IAAM,IAAU,MAAM,EAAG,gBAAgB,GAAY,EAAe,EAE9D,IAAuB;GAAE,GADL,KAAK,MAAM,EAAQ;GACL,OAAO;GAAU;AAGzD,EAFA,EAAG,UAAU,GAAY,GAAgB,KAAK,UAAU,EAAQ,CAAC,EACjE,EAAG,UAAU,GAAY,GAA8B,OAAO,KAAK,KAAK,CAAC,CAAC,EAC1E,MAAM,EAAG,QAAQ;GACjB;;AAIJ,eAAsB,EACpB,GACA,GACA,GACe;AACf,OAAM,EAAG,YAAY,iBAAiB,OAAO,MAAO;AAElD,EADA,EAAG,YAAY,EAAM,GAAgB,EAAU,CAAC,EAChD,MAAM,EAAG,QAAQ;GACjB;;AAwBJ,eAAsB,EACpB,GACA,GACA,GACyB;AACzB,QAAO,MAAM,EAAG,YAAY,gBAAgB,OAAO,MAAO;EAKxD,IAAM,IAAW,MAAM,EAA0B,GAAI,EAAqB;AAC1E,MAAI,EAAS,WAAW,EAAG,QAAO,EAAE;EAEpC,IAAM,IAAc,MAAM,EAAsB,GAAI,EAAqB,EACnE,IAAwB,EAAE;AAEhC,OAAK,IAAM,KAAW,GAAU;GAC9B,IAAM,IAAU,MAAM,EAAG,gBAAgB,EAAQ,KAAK,EAAe,EAC/D,IAAoB,KAAK,MAAM,EAAQ,EACvC,IAAc,EAAK,OAErB,IAAc;AAelB,GAdI,EAAY,SAAS,EAAY,KACnC,IAAc,EAAgB,GAAa,EAAY,EACvD,EAAG,UAAU,EAAQ,KAAK,GAAgB,KAAK,UAAU;IAAE,GAAG;IAAM,OAAO;IAAa,CAAC,CAAC,EAC1F,EAAG,UAAU,EAAQ,KAAK,GAA8B,OAAO,KAAK,KAAK,CAAC,CAAC,GAI7E,EAAY,KAAK,EAAY,EAI7B,EAAG,YAAY,EAAM,GAAsB,GAAY,CAAC,EAAE,WAAW,EAAQ,IAAI,EACjF,EAAG,YAAY,EAAM,GAAsB,EAAQ,UAAU,CAAC,EAE9D,EAAM,KAAK;IAAE,IAAI,EAAQ;IAAI;IAAa;IAAa,CAAC;;AAI1D,SADA,MAAM,EAAG,QAAQ,EACV;GACP;;AAIJ,eAAsB,EAAkB,GAAyC;AAC/E,QAAO,MAAM,EAAG,WAAW,kBAAkB,OAAO,MAAO;EACzD,IAAM,IAAY,MAAM,EAAG,SAAS;GAClC,YAAY,EAAG;GACf,WAAW;GACZ,CAAC;AACF,MAAI,EAAuB,EAAU,MAAM,CACzC,OAAU,MAAM,uCAAuC;AAEzD,SAAO,EAAU;GACjB;;AAWJ,eAAsB,EACpB,GACA,GACuF;CACvF,IAAI;AACJ,KAAI;AACF,MAAW,MAAM,EAAG,YAAY,EAAE,OAAO,GAAU,CAAC;UAC7C,GAAG;AAMV,QAHI,EAAgB,EAAE,GACV,MAAM,SAAS,EAAS,6BAA6B,GAE3D;;AAER,KAAI,MAAa,KAAA,EACf,OAAU,MAAM,SAAS,EAAS,gDAAgD;AAGpF,QAAO,MAAM,EAAG,WAAW,gBAAgB,OAAO,MAAO;EACvD,IAAM,IAAgB,MAAM,EAAG,iBAAiB,EAAM,GAAU,EAAc,CAAC;AAI/E,SAHI,MAAkB,KAAA,KAAa,EAAuB,EAAc,MAAM,GACrE;GAAE;GAAU,gBAAgB,KAAA;GAAW,GAEzC;GAAE;GAAU,gBAAgB,EAAc;GAAO;GACxD;;AAQJ,eAAsB,EACpB,GACA,GAC2B;AAC3B,QAAO,MAAM,EAAG,YAAY,yBAAyB,OAAO,MAAO;EACjE,IAAM,IAAgB,EAAM,GAAU,EAAc;AACpD,IAAG,YAAY,GAAe,UAAU;EACxC,IAAM,IAAY,MAAM,EAAG,SAAS,EAAc;AAClD,MAAI,CAAC,EAAuB,EAAU,MAAM,CAE1C,QADA,MAAM,EAAG,QAAQ,EACV,EAAU;EAGnB,IAAM,IAAO,EAAG,gBAAgB,EAAqB;AAIrD,SAHA,EAAG,KAAK,EAAK,EACb,EAAG,SAAS,GAAe,EAAK,EAChC,MAAM,EAAG,QAAQ,EACV,MAAM,EAAK;GAClB;;AAOJ,eAAsB,EACpB,GACA,GAC2E;CAC3E,IAAI;AAGJ,KADA,IAAc,MAAM,EAAG,YAAY,EAAE,OAAO,GAAU,CAAC,EACnD,MAAgB,KAAA,EAClB,OAAU,MAAM,SAAS,EAAS,gDAAgD;AAIpF,QAAO,MAAM,EAAG,WAAW,0BAA0B,OAAO,MAAO;EACjE,IAAM,IAAoB,MAAM,EAAG,SAAS;GAC1C,YAAY;GACZ,WAAW;GACZ,CAAC;AAEF,MAAI,EAAuB,EAAkB,MAAM,CACjD,OAAU,MAAM,SAAS,EAAS,wBAAwB;AAG5D,SAAO;GAAE,UAAU;GAAa,gBAAgB,EAAkB;GAAO;GACzE;;;;AChbJ,SAAgB,EAAW,GAAuB;AAChD,SAAQ,IAAI,EAAQ;;AAItB,SAAgB,EAAW,GAAqB;AAC9C,SAAQ,IAAI,KAAK,UAAU,GAAM,MAAM,EAAE,CAAC;;AAI5C,SAAgB,EAAU,GAAmB,GAAwB;CACnE,IAAM,KAAO,MAAe,WAAW,KAAK,EAAE,GAAG,IAAI,EAAE,QAAQ,MAAM,OAAK,CAAC,KAAK,GAC1E,IAAQ,CAAC,GAAS,GAAG,EAAK,CAAC,KAAK,MAAM,EAAE,IAAI,EAAI,CAAC,KAAK,IAAI,CAAC;AACjE,SAAQ,IAAI,EAAM,KAAK,KAAK,CAAC;;AAI/B,SAAgB,EAAY,GAAmB,GAA0B;CACvE,IAAM,IAAY,EAAQ,KAAK,GAAG,MAChC,KAAK,IAAI,EAAE,QAAQ,GAAG,EAAK,KAAK,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,CAC5D,EAEK,IAAM,EAAU,KAAK,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC,KAAK,KAAK;AAM1D,QAAO;EALY,EAAQ,KAAK,GAAG,MAAM,EAAE,OAAO,EAAU,GAAG,CAAC,CAAC,KAAK,KAAK;EAKvD;EAAK,GAJP,EAAK,KAAK,MAC1B,EAAI,KAAK,GAAM,OAAO,KAAQ,IAAI,OAAO,EAAU,GAAG,CAAC,CAAC,KAAK,KAAK,CACnE;EAEqC,CAAC,KAAK,KAAK;;AAInD,SAAgB,EAAW,GAAiB;AAE1C,QADI,EAAE,SAAS,KAAK,IAAU,cACvB,EACJ,aAAa,CACb,QAAQ,KAAK,IAAI,CACjB,QAAQ,WAAW,IAAI"}

package/dist/project_ops.d.ts

@@ -22,6 +22,21 @@ export interface ProjectInfo extends ProjectEntry {
 }
 /** List all projects from a project list resource. */
 export declare function listProjects(pl: PlClient, projectListRid: SignedResourceId): Promise<ProjectEntry[]>;
+/** A project's identity plus its label — what a whole-root operation needs per project. */
+export interface ProjectIdentityWithLabel extends ProjectIdentity {
+    label: string;
+}
+/**
+ * Lists every project in a project list with the field name holding it, which
+ * {@link listProjects} omits. Whole-root operations (moving a user's projects out before the
+ * account is deleted) need that field name to detach each project from its old owner.
+ */
+export declare function listProjectIdentities(pl: PlClient, projectListRid: SignedResourceId): Promise<ProjectIdentityWithLabel[]>;
+/**
+ * {@link listProjectIdentities} against a transaction the caller already holds, so a write that
+ * acts on the list can read it in the same transaction rather than trusting an earlier snapshot.
+ */
+export declare function listProjectIdentitiesInTx(tx: PlTransaction, projectListRid: SignedResourceId): Promise<ProjectIdentityWithLabel[]>;
 /** Get detailed info about a project. */
 export declare function getProjectInfo(pl: PlClient, projectId: string, rid: SignedResourceId): Promise<ProjectInfo>;
 /** Resolve a project identifier (id or label) to its project ID, ResourceId and field name. */
@@ -39,8 +54,47 @@ export declare function deduplicateName(baseName: string, existingLabels: string
 export declare function renameProject(pl: PlClient, projectRid: SignedResourceId, newLabel: string): Promise<void>;
 /** Delete a project from the project list. */
 export declare function deleteProject(pl: PlClient, projectListRid: SignedResourceId, fieldName: string): Promise<void>;
+/** One project moved by {@link moveProjects}, as it ended up in the target root. */
+export interface MovedProject {
+    id: string;
+    /** Label the project had in the source root. */
+    sourceLabel: string;
+    /** Label it carries in the target root — differs when the name collided and was deduplicated. */
+    targetLabel: string;
+}
+/**
+ * Re-attaches projects from one user's project list to another's, keeping the same project
+ * resources — no copy is made, so nothing is duplicated and no data is rewritten.
+ *
+ * This works across roots because the backend permits a reference between differently coloured
+ * resources when the caller holds write access to both, which admin credentials do. Names that
+ * collide in the target are deduplicated the way {@link duplicateProject} callers deduplicate
+ * theirs, so a move never silently shadows a project the target user already has.
+ *
+ * The whole batch is one transaction: either every project lands in the target root, or none
+ * moves and both roots are untouched.
+ */
+export declare function moveProjects(pl: PlClient, sourceProjectListRid: SignedResourceId, targetProjectListRid: SignedResourceId): Promise<MovedProject[]>;
 /** Get the project list ResourceId for the connected user. */
 export declare function getProjectListRid(pl: PlClient): Promise<SignedResourceId>;
+/**
+ * Resolves a user's root and, if they have one, their project list.
+ *
+ * Unlike {@link navigateToUserRoot} a missing project list is not an error here: a user who has
+ * never opened the app has a root and no list, and that account is still a legitimate target for
+ * whole-account operations. Callers that need a list to write into use
+ * {@link ensureUserProjectList}.
+ */
+export declare function openUserRoot(pl: PlClient, username: string): Promise<{
+    userRoot: SignedResourceId;
+    projectListRid: SignedResourceId | undefined;
+}>;
+/**
+ * Returns a user's project list, creating an empty one when the root has none — the same lazy
+ * creation the middle layer performs for the signed-in user, but against an impersonated root, so
+ * projects can be re-homed to a user who has never opened the app.
+ */
+export declare function ensureUserProjectList(pl: PlClient, userRoot: SignedResourceId): Promise<SignedResourceId>;
 /**
  * Navigates to a specific user's project list resource ID.
  * Tries ListUserResources first (new backend), falls back to SHA256 named resource lookup.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@platforma-sdk/pl-cli",
-  "version": "0.8.29",
+  "version": "0.9.1",
   "description": "CLI for Platforma server state manipulation",
   "license": "UNLICENSED",
   "bin": {
@@ -23,8 +23,8 @@
   },
   "dependencies": {
     "commander": "^15.0.0",
-    "@milaboratories/pl-client": "3.14.7",
-    "@milaboratories/pl-middle-layer": "1.68.0"
+    "@milaboratories/pl-client": "3.15.0",
+    "@milaboratories/pl-middle-layer": "1.68.2"
   },
   "devDependencies": {
     "@types/node": "~24.5.2",
@@ -33,8 +33,8 @@
     "vite": "^8.0.6",
     "vite-plugin-dts": "^5.0.3",
     "vitest": "^4.1.3",
-    "@milaboratories/ts-builder": "1.7.1",
     "@milaboratories/build-configs": "2.0.1",
+    "@milaboratories/ts-builder": "1.7.2",
     "@milaboratories/ts-configs": "1.4.0"
   },
   "scripts": {

package/src/cli.ts

@@ -6,6 +6,7 @@ import projectRenameCommand from "./cmd/project/rename";
 import projectDeleteCommand from "./cmd/project/delete";
 import adminCopyProjectCommand from "./cmd/admin/copy-project";
 import adminUserListCommand from "./cmd/admin/user-list";
+import adminDeleteUserCommand from "./cmd/admin/delete-user";
 
 export function buildProgram(): Command {
   const program = new Command();
@@ -24,6 +25,7 @@ export function buildProgram(): Command {
   );
   admin.addCommand(adminCopyProjectCommand());
   admin.addCommand(adminUserListCommand());
+  admin.addCommand(adminDeleteUserCommand());
   program.addCommand(admin);
 
   return program;

package/src/cmd/admin/delete-user.ts

@@ -0,0 +1,210 @@
+import { Command, Option } from "commander";
+import { createInterface } from "node:readline";
+import { connectClient } from "../../base_command";
+import { addOptions, GlobalOptions, AdminAuthOptions } from "../../cmd-opts";
+import {
+  ensureUserProjectList,
+  listProjectIdentities,
+  moveProjects,
+  openUserRoot,
+} from "../../project_ops";
+import type { MovedProject, ProjectIdentityWithLabel } from "../../project_ops";
+import { formatTable, outputJson, outputText } from "../../output";
+
+export default function adminDeleteUserCommand(): Command {
+  const cmd = new Command("delete-user").description(
+    "Delete a user account. Optionally re-homes the user's projects to another user first. " +
+      "Requires admin/controller credentials.",
+  );
+
+  cmd.argument("<user>", "Username of the account to delete");
+  addOptions(cmd, GlobalOptions(), AdminAuthOptions());
+  cmd.addOption(
+    new Option(
+      "--move-projects-to <user>",
+      "Re-home the deleted user's projects to this user before deleting the account",
+    ),
+  );
+  cmd.addOption(
+    new Option(
+      "--delete-projects",
+      "Delete the user's projects along with the account, losing their data",
+    ),
+  );
+  cmd.option("--force", "Skip confirmation", false);
+
+  cmd.action(async (user: string, flags) => {
+    // The two modes are alternatives, not a combination: one keeps the projects, the other
+    // destroys them, and a request for both says nothing about which was meant.
+    if (flags.moveProjectsTo && flags.deleteProjects) {
+      throw new Error("--move-projects-to and --delete-projects are mutually exclusive");
+    }
+    if (flags.moveProjectsTo === user) {
+      throw new Error("--move-projects-to must name a different user than the one being deleted");
+    }
+    // Caught here as well as server-side, where it is authoritative: the operator gets the reason
+    // instead of a failure from whichever lookup happens to run first.
+    if (flags.adminUser === user) {
+      throw new Error(
+        `Refusing to delete "${user}" — it is the account these credentials authenticate as.`,
+      );
+    }
+
+    const pl = await connectClient(flags);
+    try {
+      const source = await openUserRoot(pl, user);
+      // No project list means the account never opened the app, so it owns nothing — a state to
+      // delete straight through, not to fail on.
+      const projects =
+        source.projectListRid === undefined
+          ? []
+          : await listProjectIdentities(pl, source.projectListRid);
+
+      // Neither mode given while the account still owns projects: refuse rather than pick. Both
+      // defaults are wrong to assume — one silently destroys data, the other silently hands it to
+      // someone. An account with no projects has nothing to decide about, so it just proceeds.
+      if (projects.length > 0 && !flags.moveProjectsTo && !flags.deleteProjects) {
+        throw new Error(
+          `User "${user}" owns ${projects.length} project(s). Pass --move-projects-to <user> to ` +
+            "re-home them, or --delete-projects to delete them with the account.",
+        );
+      }
+
+      const confirmed = await confirmDeletion(user, projects, flags);
+      if (!confirmed) {
+        outputText("Aborted.");
+        return;
+      }
+
+      let moved: MovedProject[] = [];
+      if (flags.moveProjectsTo && projects.length > 0) {
+        const target = await openUserRoot(pl, flags.moveProjectsTo);
+        // Created if the target has none, so re-homing to a user who has never opened the app
+        // works rather than failing halfway with the account still present.
+        const targetList = await ensureUserProjectList(pl, target.userRoot);
+        moved = await moveProjects(pl, source.projectListRid!, targetList);
+      }
+
+      // deleteUser takes the root and everything still attached to it. The listing, the prompt and
+      // the move each ran in an earlier transaction, so re-read: a project attached since then would
+      // be destroyed without ever being reviewed.
+      const remaining =
+        source.projectListRid === undefined
+          ? []
+          : await listProjectIdentities(pl, source.projectListRid);
+      assertProjectsAccountedFor(user, flags, projects, remaining);
+
+      const report = await pl.deleteUser(user);
+
+      if (flags.format === "json") {
+        outputJson({
+          deleted: true,
+          user,
+          movedTo: flags.moveProjectsTo ?? null,
+          movedProjects: moved,
+          deletedProjects: flags.moveProjectsTo ? [] : remaining.map((p) => p.label),
+          userRootId: report.userRootId === undefined ? null : report.userRootId.toString(),
+          userRootDeleted: report.userRootDeleted,
+          revokedGrants: report.revokedGrants,
+          removedIdentityIndexEntries: report.removedIdentityIndexEntries,
+        });
+      } else {
+        outputText(renderResult(user, flags.moveProjectsTo, moved, remaining));
+      }
+    } finally {
+      await pl.close();
+    }
+  });
+
+  return cmd;
+}
+
+/**
+ * Refuses while the root holds a project the operator never agreed to lose — attached after the
+ * listing, or left behind by the move.
+ *
+ * A last read, not a lock: it closes the prompt-sized window, not the round trip that follows.
+ */
+function assertProjectsAccountedFor(
+  user: string,
+  flags: { moveProjectsTo?: string },
+  approved: ProjectIdentityWithLabel[],
+  remaining: ProjectIdentityWithLabel[],
+): void {
+  if (flags.moveProjectsTo) {
+    if (remaining.length === 0) return;
+    throw new Error(
+      `User "${user}" still owns ${remaining.length} project(s) after the move: ` +
+        `${remaining.map((p) => p.label).join(", ")}. The account was NOT deleted — ` +
+        "the projects were attached while the move ran. Re-run the command to move them too.",
+    );
+  }
+
+  const approvedIds = new Set(approved.map((p) => p.id));
+  const unapproved = remaining.filter((p) => !approvedIds.has(p.id));
+  if (unapproved.length === 0) return;
+  throw new Error(
+    `User "${user}" gained ${unapproved.length} project(s) since the list you confirmed: ` +
+      `${unapproved.map((p) => p.label).join(", ")}. The account was NOT deleted — ` +
+      "deleting it now would destroy them unreviewed. Re-run the command to see the current list.",
+  );
+}
+
+/** Asks the operator to confirm, naming the affected projects and their fate. */
+async function confirmDeletion(
+  user: string,
+  projects: ProjectIdentityWithLabel[],
+  flags: { moveProjectsTo?: string; force?: boolean },
+): Promise<boolean> {
+  if (flags.force) return true;
+
+  const fate = flags.moveProjectsTo
+    ? `${projects.length} project(s) will move to "${flags.moveProjectsTo}"`
+    : projects.length > 0
+      ? `${projects.length} project(s) will be PERMANENTLY DELETED`
+      : "the account owns no projects";
+
+  process.stderr.write(`Delete user "${user}"? ${fate}.\n`);
+  if (projects.length > 0) {
+    process.stderr.write(projects.map((p) => `  - ${p.label}`).join("\n") + "\n");
+  }
+
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  try {
+    const answer = await new Promise<string>((resolve) => {
+      rl.question("Proceed? [y/N] ", resolve);
+    });
+    return answer.toLowerCase() === "y";
+  } finally {
+    rl.close();
+  }
+}
+
+function renderResult(
+  user: string,
+  movedTo: string | undefined,
+  moved: MovedProject[],
+  projects: ProjectIdentityWithLabel[],
+): string {
+  const lines: string[] = [];
+
+  if (movedTo) {
+    if (moved.length > 0) {
+      lines.push(`Moved ${moved.length} project(s) from ${user} to ${movedTo}:`);
+      lines.push(
+        formatTable(
+          ["id", "name", "name in target"],
+          moved.map((p) => [p.id, p.sourceLabel, p.targetLabel]),
+        ),
+      );
+    } else {
+      lines.push(`User ${user} had no projects to move.`);
+    }
+  } else if (projects.length > 0) {
+    lines.push(`Deleted ${projects.length} project(s) belonging to ${user}:`);
+    lines.push(projects.map((p) => `  - ${p.label}`).join("\n"));
+  }
+
+  lines.push(`Deleted user "${user}".`);
+  return lines.join("\n");
+}