@pmate/cli 0.16.2 → 0.16.3

package/dist/index.d.ts

@@ -22,6 +22,8 @@ declare enum Command {
     Collect = "collect",
     Agent = "agent",
     Ns = "ns",
+    Role = "role",
+    Account = "account",
     Store = "store",
     App = "app",
     Vercel = "vercel"
@@ -239,6 +241,46 @@ type OssCommandArgs = {
     filePath: string;
     objectKey: string;
 };
+type RoleCommandArgs = {
+    type: Command.Role;
+    resource: "definition";
+    action: "list";
+    baseUrl?: string;
+    json: boolean;
+} | {
+    type: Command.Role;
+    resource: "definition";
+    action: "create";
+    role: string;
+    displayName?: string;
+    description?: string;
+    baseUrl?: string;
+    json: boolean;
+};
+type AccountCommandArgs = {
+    type: Command.Account;
+    action: "view";
+    account?: string;
+    mobile?: string;
+    nickName?: string;
+    baseUrl?: string;
+    json: boolean;
+} | {
+    type: Command.Account;
+    action: "role-list";
+    account: string;
+    namespace?: string;
+    baseUrl?: string;
+    json: boolean;
+} | {
+    type: Command.Account;
+    action: "role-add" | "role-remove";
+    account: string;
+    namespace: string;
+    role: string;
+    baseUrl?: string;
+    json: boolean;
+};
 type QrcodeCommandArgs = {
     type: Command.Qrcode;
 };
@@ -421,7 +463,7 @@ type VercelDeploysCommandArgs = {
     lastWeek: boolean;
 };
 type VercelCommandArgs = VercelProjectsCommandArgs | VercelDeploysCommandArgs;
-type CommandArgs = NoneCommandArgs | ListCommandArgs | LoginCommandArgs | AddDnsCommandArgs | StsCommandArgs | BucketCommandArgs | DeployCommandArgs | LogCommandArgs | InitCommandArgs | DevCommandArgs | EnvCommandArgs | PrCommandArgs | CommitCommandArgs | SummaryCommandArgs | LinearCommandArgs | NotionCommandArgs | OssCommandArgs | QrcodeCommandArgs | RandomCommandArgs | CollectCommandArgs | AgentCommandArgs | NsCommandArgs | StoreCommandArgs | AppCommandArgs | VercelCommandArgs;
+type CommandArgs = NoneCommandArgs | ListCommandArgs | LoginCommandArgs | AddDnsCommandArgs | StsCommandArgs | BucketCommandArgs | DeployCommandArgs | LogCommandArgs | InitCommandArgs | DevCommandArgs | EnvCommandArgs | PrCommandArgs | CommitCommandArgs | SummaryCommandArgs | LinearCommandArgs | NotionCommandArgs | OssCommandArgs | QrcodeCommandArgs | RandomCommandArgs | CollectCommandArgs | AgentCommandArgs | NsCommandArgs | RoleCommandArgs | AccountCommandArgs | StoreCommandArgs | AppCommandArgs | VercelCommandArgs;
 
 interface ParsedArgs {
     help: boolean;

package/dist/index.js

@@ -19811,6 +19811,236 @@ var VercelCommandHandler = class {
   }
 };
 
+// src/commands/RoleCommandHandler.ts
+init_sessionStore();
+var RoleCommandHandler = class {
+  async handle(args) {
+    const token = this.readToken();
+    const baseUrl = this.resolveBaseUrl(args.baseUrl);
+    switch (args.action) {
+      case "list": {
+        const items = await this.request(
+          baseUrl,
+          token,
+          "GET",
+          "/role/definitions"
+        );
+        this.renderList(items, args.json);
+        return;
+      }
+      case "create": {
+        const item = await this.request(
+          baseUrl,
+          token,
+          "POST",
+          "/role/definitions",
+          {
+            role: args.role,
+            displayName: args.displayName ?? args.role,
+            description: args.description ?? ""
+          }
+        );
+        ui.success(`Created role definition ${item.role}`);
+        this.renderJson(item, args.json);
+        return;
+      }
+    }
+  }
+  resolveBaseUrl(baseUrl) {
+    return (baseUrl || process.env.PMATE_AUTH_API_BASE_URL || process.env.AUTH_API_BASE_URL || "https://auth-api-v2.pmate.chat").replace(/\/+$/, "");
+  }
+  readToken() {
+    return readRequiredSession({
+      preferredApp: DEFAULT_APP_ID,
+      fallbackToActiveApp: true
+    }).token;
+  }
+  async request(baseUrl, token, method, pathname, body) {
+    const response = await fetch(`${baseUrl}${pathname}`, {
+      method,
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "Content-Type": "application/json"
+      },
+      ...body !== void 0 ? { body: JSON.stringify(body) } : {}
+    });
+    let payload = null;
+    try {
+      payload = await response.json();
+    } catch {
+      payload = null;
+    }
+    if (!response.ok || !payload?.success) {
+      throw new Error(payload?.message || `Request failed with status ${response.status}`);
+    }
+    return payload.data;
+  }
+  renderList(items, asJson) {
+    if (asJson) {
+      ui.plain(JSON.stringify(items, null, 2));
+      return;
+    }
+    if (items.length === 0) {
+      ui.warn("No role definitions found.");
+      return;
+    }
+    for (const item of items) {
+      ui.info(item.role, {
+        builtin: item.builtin,
+        status: item.status
+      });
+    }
+  }
+  renderJson(value, asJson) {
+    if (!asJson) {
+      return;
+    }
+    ui.plain(JSON.stringify(value, null, 2));
+  }
+};
+
+// src/commands/AccountCommandHandler.ts
+init_sessionStore();
+var AccountCommandHandler = class {
+  async handle(args) {
+    const token = this.readToken();
+    const baseUrl = this.resolveBaseUrl(args.baseUrl);
+    switch (args.action) {
+      case "view": {
+        const result = await this.request(
+          baseUrl,
+          token,
+          "GET",
+          `/accounts/view?${this.buildAccountViewQuery(args)}`
+        );
+        this.renderAccountView(result.items, args.json);
+        return;
+      }
+      case "role-list": {
+        const items = await this.request(
+          baseUrl,
+          token,
+          "GET",
+          `/role/bindings?${this.buildRoleBindingsQuery(args)}`
+        );
+        this.renderRoleBindings(items, args.json);
+        return;
+      }
+      case "role-add": {
+        const item = await this.request(
+          baseUrl,
+          token,
+          "POST",
+          "/role/bindings",
+          {
+            account: args.account,
+            namespace: args.namespace,
+            role: args.role
+          }
+        );
+        ui.success(`Added ${item.role} for ${item.account} in ${item.namespace}`);
+        this.renderJson(item, args.json);
+        return;
+      }
+      case "role-remove": {
+        await this.request(
+          baseUrl,
+          token,
+          "DELETE",
+          "/role/bindings",
+          {
+            account: args.account,
+            namespace: args.namespace,
+            role: args.role
+          }
+        );
+        ui.success(`Removed ${args.role} for ${args.account} in ${args.namespace}`);
+        return;
+      }
+    }
+  }
+  resolveBaseUrl(baseUrl) {
+    return (baseUrl || process.env.PMATE_AUTH_API_BASE_URL || process.env.AUTH_API_BASE_URL || "https://auth-api-v2.pmate.chat").replace(/\/+$/, "");
+  }
+  readToken() {
+    return readRequiredSession({
+      preferredApp: DEFAULT_APP_ID,
+      fallbackToActiveApp: true
+    }).token;
+  }
+  buildAccountViewQuery(args) {
+    const params = new URLSearchParams();
+    if (args.account) params.set("account", args.account);
+    if (args.mobile) params.set("mobile", args.mobile);
+    if (args.nickName) params.set("nickName", args.nickName);
+    return params.toString();
+  }
+  buildRoleBindingsQuery(args) {
+    const params = new URLSearchParams();
+    params.set("account", args.account);
+    if (args.namespace) params.set("namespace", args.namespace);
+    return params.toString();
+  }
+  async request(baseUrl, token, method, pathname, body) {
+    const response = await fetch(`${baseUrl}${pathname}`, {
+      method,
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "Content-Type": "application/json"
+      },
+      ...body !== void 0 ? { body: JSON.stringify(body) } : {}
+    });
+    let payload = null;
+    try {
+      payload = await response.json();
+    } catch {
+      payload = null;
+    }
+    if (!response.ok || !payload?.success) {
+      throw new Error(payload?.message || `Request failed with status ${response.status}`);
+    }
+    return payload.data;
+  }
+  renderRoleBindings(items, asJson) {
+    if (asJson) {
+      ui.plain(JSON.stringify(items, null, 2));
+      return;
+    }
+    if (items.length === 0) {
+      ui.warn("No role bindings found.");
+      return;
+    }
+    for (const item of items) {
+      ui.info(`${item.account} ${item.namespace}/${item.role}`, {
+        source: item.source
+      });
+    }
+  }
+  renderAccountView(items, asJson) {
+    if (asJson) {
+      ui.plain(JSON.stringify(items, null, 2));
+      return;
+    }
+    if (items.length === 0) {
+      ui.warn("No accounts found.");
+      return;
+    }
+    for (const item of items) {
+      ui.info(item.account.id, {
+        mobile: item.account.mobile,
+        nickNames: item.nickNames,
+        roles: item.roles.map((role) => `${role.namespace}/${role.role}`)
+      });
+    }
+  }
+  renderJson(value, asJson) {
+    if (!asJson) {
+      return;
+    }
+    ui.plain(JSON.stringify(value, null, 2));
+  }
+};
+
 // src/agentCommandParser.ts
 var DEFAULT_AGENT_NAMESPACE = "pmate";
 function parseAgentArgs(tokens) {
@@ -19821,7 +20051,7 @@ function parseAgentArgs(tokens) {
   }
   let baseUrl;
   let json = false;
-  const takeSharedOptions3 = () => {
+  const takeSharedOptions4 = () => {
     while (rest.length > 0) {
       const token = rest[0];
       if (token === "--base-url") {
@@ -19838,7 +20068,7 @@ function parseAgentArgs(tokens) {
     }
   };
   if (action === "namespaces") {
-    takeSharedOptions3();
+    takeSharedOptions4();
     if (rest.length > 0) {
       throw new Error(`Unknown agent namespaces option: ${rest[0]}`);
     }
@@ -19880,7 +20110,7 @@ function parseAgentArgs(tokens) {
         `Usage: agent ${action} [<namespace>] <name> [--base-url <url>] [--json]`
       );
     }
-    takeSharedOptions3();
+    takeSharedOptions4();
     if (rest.length > 0) {
       throw new Error(`Unknown agent ${action} option: ${rest[0]}`);
     }
@@ -20248,7 +20478,7 @@ function parseAppArgs(tokens) {
   }
   let baseUrl;
   let json = false;
-  const takeSharedOptions3 = () => {
+  const takeSharedOptions4 = () => {
     while (rest.length > 0) {
       const token = rest[0];
       if (token === "--base-url") {
@@ -20265,7 +20495,7 @@ function parseAppArgs(tokens) {
     }
   };
   if (action === "list") {
-    takeSharedOptions3();
+    takeSharedOptions4();
     if (rest.length > 0) {
       throw new Error(`Unknown app list option: ${rest[0]}`);
     }
@@ -20278,7 +20508,7 @@ function parseAppArgs(tokens) {
         `Usage: app ${action} <id> [--base-url <url>] [--json]`
       );
     }
-    takeSharedOptions3();
+    takeSharedOptions4();
     if (rest.length > 0) {
       throw new Error(`Unknown app ${action} option: ${rest[0]}`);
     }
@@ -20346,6 +20576,227 @@ function requireValue4(tokens, optionName) {
   return value;
 }
 
+// src/roleCommandParser.ts
+function parseRoleArgs(tokens) {
+  const rest = [...tokens];
+  const resource = rest.shift();
+  if (resource !== "definition") {
+    throw new Error("Missing role resource. Use: role definition list|create");
+  }
+  const action = rest.shift();
+  if (!action) {
+    throw new Error("Missing role action. Use: role definition list|create");
+  }
+  let baseUrl;
+  let json = false;
+  if (action === "list") {
+    takeSharedOptions3(rest, {
+      onBaseUrl: (value) => {
+        baseUrl = value;
+      },
+      onJson: () => {
+        json = true;
+      }
+    });
+    return {
+      type: "role" /* Role */,
+      resource,
+      action,
+      baseUrl,
+      json
+    };
+  }
+  if (action === "create") {
+    const role = rest.shift();
+    if (!role || role.startsWith("-")) {
+      throw new Error(
+        "Usage: role definition create <role> [--display-name <name>] [--description <text>] [--base-url <url>] [--json]"
+      );
+    }
+    let displayName;
+    let description;
+    while (rest.length > 0) {
+      const token = rest.shift();
+      switch (token) {
+        case "--display-name":
+          displayName = requireValue5(rest, token);
+          break;
+        case "--description":
+          description = requireValue5(rest, token);
+          break;
+        case "--base-url":
+          baseUrl = requireValue5(rest, token);
+          break;
+        case "--json":
+          json = true;
+          break;
+        default:
+          throw new Error(`Unknown role create option: ${token}`);
+      }
+    }
+    return {
+      type: "role" /* Role */,
+      resource,
+      action,
+      role,
+      displayName,
+      description,
+      baseUrl,
+      json
+    };
+  }
+  throw new Error(`Unknown role action: ${action}`);
+}
+function takeSharedOptions3(rest, handlers) {
+  while (rest.length > 0) {
+    const token = rest.shift();
+    switch (token) {
+      case "--base-url":
+        handlers.onBaseUrl(requireValue5(rest, token));
+        break;
+      case "--json":
+        handlers.onJson();
+        break;
+      default:
+        throw new Error(`Unknown role option: ${token}`);
+    }
+  }
+}
+function requireValue5(tokens, optionName) {
+  const value = tokens.shift();
+  if (!value || value.startsWith("-")) {
+    throw new Error(`Missing value for ${optionName}`);
+  }
+  return value;
+}
+
+// src/accountCommandParser.ts
+function parseAccountArgs(tokens) {
+  const rest = [...tokens];
+  const action = rest.shift();
+  if (!action) {
+    throw new Error("Missing account action. Use: account view|role");
+  }
+  if (action === "view") {
+    let account2;
+    let mobile;
+    let nickName;
+    let baseUrl2;
+    let json2 = false;
+    while (rest.length > 0) {
+      const token = rest.shift();
+      switch (token) {
+        case "--account":
+          account2 = requireValue6(rest, token);
+          break;
+        case "--mobile":
+          mobile = requireValue6(rest, token);
+          break;
+        case "--nickname":
+        case "--nickName":
+          nickName = requireValue6(rest, token);
+          break;
+        case "--base-url":
+          baseUrl2 = requireValue6(rest, token);
+          break;
+        case "--json":
+          json2 = true;
+          break;
+        default:
+          throw new Error(`Unknown account view option: ${token}`);
+      }
+    }
+    const provided = [account2, mobile, nickName].filter(Boolean).length;
+    if (provided !== 1) {
+      throw new Error(
+        "Usage: account view (--account <id> | --mobile <mobile> | --nickname <nickname>) [--base-url <url>] [--json]"
+      );
+    }
+    return {
+      type: "account" /* Account */,
+      action,
+      account: account2,
+      mobile,
+      nickName,
+      baseUrl: baseUrl2,
+      json: json2
+    };
+  }
+  if (action !== "role") {
+    throw new Error(`Unknown account action: ${action}`);
+  }
+  const roleAction = rest.shift();
+  if (!roleAction) {
+    throw new Error("Missing account role action. Use: account role list|add|remove");
+  }
+  let account;
+  let namespace;
+  let role;
+  let baseUrl;
+  let json = false;
+  while (rest.length > 0) {
+    const token = rest.shift();
+    switch (token) {
+      case "--account":
+        account = requireValue6(rest, token);
+        break;
+      case "--namespace":
+        namespace = requireValue6(rest, token);
+        break;
+      case "--role":
+        role = requireValue6(rest, token);
+        break;
+      case "--base-url":
+        baseUrl = requireValue6(rest, token);
+        break;
+      case "--json":
+        json = true;
+        break;
+      default:
+        throw new Error(`Unknown account role option: ${token}`);
+    }
+  }
+  if (roleAction === "list") {
+    if (!account) {
+      throw new Error(
+        "Usage: account role list --account <id> [--namespace <ns>] [--base-url <url>] [--json]"
+      );
+    }
+    return {
+      type: "account" /* Account */,
+      action: "role-list",
+      account,
+      namespace,
+      baseUrl,
+      json
+    };
+  }
+  if (roleAction === "add" || roleAction === "remove") {
+    if (!account || !namespace || !role) {
+      throw new Error(
+        `Usage: account role ${roleAction} --account <id> --namespace <ns> --role <role> [--base-url <url>] [--json]`
+      );
+    }
+    return {
+      type: "account" /* Account */,
+      action: roleAction === "add" ? "role-add" : "role-remove",
+      account,
+      namespace,
+      role,
+      baseUrl,
+      json
+    };
+  }
+  throw new Error(`Unknown account role action: ${roleAction}`);
+}
+function requireValue6(tokens, optionName) {
+  const value = tokens.shift();
+  if (!value || value.startsWith("-")) {
+    throw new Error(`Missing value for ${optionName}`);
+  }
+  return value;
+}
+
 // src/index.ts
 var pkg = JSON.parse(
   (0, import_node_fs15.readFileSync)(import_node_path20.default.resolve(__dirname, "..", "package.json"), "utf8")
@@ -20436,6 +20887,16 @@ var HELP_TEXT = [
   `  ${import_chalk3.default.gray("                  list [--chain <chain>] [--base-url <url>] [--json]")}`,
   `  ${import_chalk3.default.gray("                  get <namespace> [--chain <chain>] [--base-url <url>] [--json]")}`,
   `  ${import_chalk3.default.gray("                  create <namespace> [--chain <chain>] [--base-url <url>] [--json]")}`,
+  `  ${import_chalk3.default.cyan("role")}             Manage role definitions via auth-api`,
+  `  ${import_chalk3.default.gray("                  definition list [--base-url <url>] [--json]")}`,
+  `  ${import_chalk3.default.gray("                  definition create <role> [--display-name <name>] [--description <text>] [--base-url <url>] [--json]")}`,
+  `  ${import_chalk3.default.gray("                  default base URL: https://auth-api-v2.pmate.chat")}`,
+  `  ${import_chalk3.default.cyan("account")}          View accounts and manage account role bindings`,
+  `  ${import_chalk3.default.gray("                  view (--account <id> | --mobile <mobile> | --nickname <nickname>) [--base-url <url>] [--json]")}`,
+  `  ${import_chalk3.default.gray("                  role list --account <id> [--namespace <ns>] [--base-url <url>] [--json]")}`,
+  `  ${import_chalk3.default.gray("                  role add --account <id> --namespace <ns> --role <role> [--base-url <url>] [--json]")}`,
+  `  ${import_chalk3.default.gray("                  role remove --account <id> --namespace <ns> --role <role> [--base-url <url>] [--json]")}`,
+  `  ${import_chalk3.default.gray("                  default base URL: https://auth-api-v2.pmate.chat")}`,
   `  ${import_chalk3.default.cyan("store")}            Manage @pmate/store namespaces, tables, and kv stores`,
   `  ${import_chalk3.default.gray("                  namespace list [--chain <chain>] [--indexer-base-url <url>] [--json]")}`,
   `  ${import_chalk3.default.gray("                  table list|get|exists|create|update|delete <name> [options]")}`,
@@ -20508,7 +20969,7 @@ function parseCommandArgs(args) {
       const token = rest.shift();
       switch (token) {
         case "--app":
-          app = requireValue5(rest, token);
+          app = requireValue7(rest, token);
           break;
         default:
           throw new Error(`Unknown login option: ${token}`);
@@ -20576,6 +21037,12 @@ function parseCommandArgs(args) {
   if (args.rest[0] === "ns" || args.rest[0] === "namespace") {
     return parseNsArgs(args.rest.slice(1));
   }
+  if (args.rest[0] === "role") {
+    return parseRoleArgs(args.rest.slice(1));
+  }
+  if (args.rest[0] === "account") {
+    return parseAccountArgs(args.rest.slice(1));
+  }
   if (args.rest[0] === "store") {
     return parseStoreArgs(args.rest.slice(1));
   }
@@ -20599,7 +21066,7 @@ function parseVercelArgs(tokens) {
       const token = rest.shift();
       switch (token) {
         case "--scope":
-          scope = requireValue5(rest, token);
+          scope = requireValue7(rest, token);
           break;
         default:
           throw new Error(`Unknown vercel option: ${token}`);
@@ -20619,10 +21086,10 @@ function parseVercelArgs(tokens) {
       const token = rest.shift();
       switch (token) {
         case "--scope":
-          scope = requireValue5(rest, token);
+          scope = requireValue7(rest, token);
           break;
         case "--project":
-          project = requireValue5(rest, token);
+          project = requireValue7(rest, token);
           break;
         case "--last-week":
           lastWeek = true;
@@ -20653,16 +21120,16 @@ function parseAddDnsArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--type":
-        options.dnsType = requireValue5(rest, token);
+        options.dnsType = requireValue7(rest, token);
         break;
       case "--value":
-        options.dnsValue = requireValue5(rest, token);
+        options.dnsValue = requireValue7(rest, token);
         break;
       case "--rr":
-        options.dnsRr = requireValue5(rest, token);
+        options.dnsRr = requireValue7(rest, token);
         break;
       case "--ttl": {
-        const ttlValue = requireValue5(rest, token);
+        const ttlValue = requireValue7(rest, token);
         const ttl = Number.parseInt(ttlValue, 10);
         if (!Number.isFinite(ttl) || ttl <= 0) {
           throw new Error(`Invalid --ttl value: ${ttlValue}`);
@@ -20671,7 +21138,7 @@ function parseAddDnsArgs(tokens) {
         break;
       }
       case "--domain":
-        options.dnsDomain = requireValue5(rest, token);
+        options.dnsDomain = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown add-dns option: ${token}`);
@@ -20704,13 +21171,13 @@ function parseBucketArgs(tokens) {
         options.bucketCreate = true;
         break;
       case "--name":
-        options.bucketName = requireValue5(rest, token);
+        options.bucketName = requireValue7(rest, token);
         break;
       case "--subdomain":
-        options.bucketSubdomain = requireValue5(rest, token);
+        options.bucketSubdomain = requireValue7(rest, token);
         break;
       case "--domain":
-        options.bucketDomain = requireValue5(rest, token);
+        options.bucketDomain = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown bucket option: ${token}`);
@@ -20749,7 +21216,7 @@ function parseDeployArgs(tokens) {
         options.deployAction = "logs";
         break;
       case "--cwd":
-        options.deployCwd = requireValue5(rest, token);
+        options.deployCwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown deploy option: ${token}`);
@@ -20774,13 +21241,13 @@ function parseLogArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--cwd":
-        options.logCwd = requireValue5(rest, token);
+        options.logCwd = requireValue7(rest, token);
         break;
       case "--ns":
-        options.logNamespace = requireValue5(rest, token);
+        options.logNamespace = requireValue7(rest, token);
         break;
       case "--page": {
-        const value = requireValue5(rest, token);
+        const value = requireValue7(rest, token);
         const page = Number.parseInt(value, 10);
         if (!Number.isFinite(page) || page < 0) {
           throw new Error(`Invalid log page: ${value}`);
@@ -20792,7 +21259,7 @@ function parseLogArgs(tokens) {
         options.logHistory = true;
         break;
       case "--search":
-        options.logSearch = requireValue5(rest, token);
+        options.logSearch = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown log option: ${token}`);
@@ -20815,7 +21282,7 @@ function parseInitArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--cwd":
-        options.initCwd = requireValue5(rest, token);
+        options.initCwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown init option: ${token}`);
@@ -20838,7 +21305,7 @@ function parseDevArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--cwd":
-        options.devCwd = requireValue5(rest, token);
+        options.devCwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown dev option: ${token}`);
@@ -20868,13 +21335,13 @@ function parseOssArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--bucket":
-        bucket = requireValue5(rest, token);
+        bucket = requireValue7(rest, token);
         break;
       case "--file":
-        filePath = requireValue5(rest, token);
+        filePath = requireValue7(rest, token);
         break;
       case "--key":
-        objectKey = requireValue5(rest, token);
+        objectKey = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown oss option: ${token}`);
@@ -20907,7 +21374,7 @@ function parseEnvArgs(tokens) {
           throw new Error("Only one env action is allowed.");
         }
         action = "set";
-        key = requireValue5(rest, token);
+        key = requireValue7(rest, token);
         break;
       case "--list":
         if (action) {
@@ -20920,17 +21387,17 @@ function parseEnvArgs(tokens) {
           throw new Error("Only one env action is allowed.");
         }
         action = "delete";
-        key = requireValue5(rest, token);
+        key = requireValue7(rest, token);
         break;
       case "--value":
-        value = requireValue5(rest, token);
+        value = requireValue7(rest, token);
         break;
       case "--verbose":
       case "-v":
         verbose = true;
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown env option: ${token}`);
@@ -20988,7 +21455,7 @@ function parseCommitArgs(tokens) {
         push = true;
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown commit option: ${token}`);
@@ -21004,10 +21471,10 @@ function parseSummaryArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--pr":
-        prRef = requireValue5(rest, token);
+        prRef = requireValue7(rest, token);
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown summary option: ${token}`);
@@ -21076,10 +21543,10 @@ function parseLinearPrArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21108,35 +21575,35 @@ function parseLinearCreateArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--repl":
         useRepl = true;
         break;
       case "--title":
-        title = requireValue5(rest, token);
+        title = requireValue7(rest, token);
         break;
       case "--desc":
       case "--description":
-        description = decodeEscapedNewlines(requireValue5(rest, token));
+        description = decodeEscapedNewlines(requireValue7(rest, token));
         break;
       case "--team-id":
-        teamId = requireValue5(rest, token);
+        teamId = requireValue7(rest, token);
         break;
       case "--team-key":
-        teamKey = requireValue5(rest, token);
+        teamKey = requireValue7(rest, token);
         break;
       case "--priority":
-        priority = parseLinearPriority(requireValue5(rest, token));
+        priority = parseLinearPriority(requireValue7(rest, token));
         break;
       case "--parent-id":
-        parentId = requireValue5(rest, token);
+        parentId = requireValue7(rest, token);
         break;
       case "--state-id":
-        stateId = requireValue5(rest, token);
+        stateId = requireValue7(rest, token);
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21171,10 +21638,10 @@ function parseLinearWhoamiArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21199,10 +21666,10 @@ function parseLinearViewArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21237,32 +21704,32 @@ function parseLinearUpdateArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--title":
-        title = requireValue5(rest, token);
+        title = requireValue7(rest, token);
         break;
       case "--desc":
       case "--description":
-        description = decodeEscapedNewlines(requireValue5(rest, token));
+        description = decodeEscapedNewlines(requireValue7(rest, token));
         break;
       case "--team-id":
-        teamId = requireValue5(rest, token);
+        teamId = requireValue7(rest, token);
         break;
       case "--team-key":
-        teamKey = requireValue5(rest, token);
+        teamKey = requireValue7(rest, token);
         break;
       case "--priority":
-        priority = parseLinearPriority(requireValue5(rest, token));
+        priority = parseLinearPriority(requireValue7(rest, token));
         break;
       case "--parent-id":
-        parentId = requireValue5(rest, token);
+        parentId = requireValue7(rest, token);
         break;
       case "--state-id":
-        stateId = requireValue5(rest, token);
+        stateId = requireValue7(rest, token);
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21300,10 +21767,10 @@ function parseLinearSubIssuesArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21330,15 +21797,15 @@ function parseLinearCommentArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--body":
       case "--desc":
       case "--description":
-        body = decodeEscapedNewlines(requireValue5(rest, token));
+        body = decodeEscapedNewlines(requireValue7(rest, token));
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21368,10 +21835,10 @@ function parseLinearCommentsArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21395,16 +21862,16 @@ function parseLinearCycleArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--team-id":
-        teamId = requireValue5(rest, token);
+        teamId = requireValue7(rest, token);
         break;
       case "--team-key":
-        teamKey = requireValue5(rest, token);
+        teamKey = requireValue7(rest, token);
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21427,10 +21894,10 @@ function parseLinearTeamsArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21457,16 +21924,16 @@ function parseLinearUserIssuesArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--cycle":
-        cycle = parseLinearCycle(requireValue5(rest, token));
+        cycle = parseLinearCycle(requireValue7(rest, token));
         break;
       case "--status":
-        status = parseLinearStatus(requireValue5(rest, token));
+        status = parseLinearStatus(requireValue7(rest, token));
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21500,28 +21967,28 @@ function parseLinearIssuesArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--team-id":
-        teamId = requireValue5(rest, token);
+        teamId = requireValue7(rest, token);
         break;
       case "--team-key":
-        teamKey = requireValue5(rest, token);
+        teamKey = requireValue7(rest, token);
         break;
       case "--user":
-        user = requireValue5(rest, token);
+        user = requireValue7(rest, token);
         break;
       case "--cycle":
-        cycle = parseLinearCycle(requireValue5(rest, token));
+        cycle = parseLinearCycle(requireValue7(rest, token));
         break;
       case "--status":
-        status = parseLinearStatus(requireValue5(rest, token));
+        status = parseLinearStatus(requireValue7(rest, token));
         break;
       case "--query":
-        query = requireValue5(rest, token).trim();
+        query = requireValue7(rest, token).trim();
         break;
       case "--limit": {
-        const value = Number.parseInt(requireValue5(rest, token), 10);
+        const value = Number.parseInt(requireValue7(rest, token), 10);
         if (!Number.isInteger(value) || value < 1 || value > 250) {
           throw new Error("Invalid --limit. Expected an integer between 1 and 250.");
         }
@@ -21529,7 +21996,7 @@ function parseLinearIssuesArgs(tokens) {
         break;
       }
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21570,10 +22037,10 @@ function parseLinearLegacyArgs(tokens) {
         useScreenshot = true;
         break;
       case "--account":
-        account = requireValue5(rest, token);
+        account = requireValue7(rest, token);
         break;
       case "--cwd":
-        cwd = requireValue5(rest, token);
+        cwd = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown linear option: ${token}`);
@@ -21667,19 +22134,19 @@ function parseNotionArgs(tokens) {
       const token = rest.shift();
       switch (token) {
         case "--parent":
-          parentPageId = requireValue5(rest, token);
+          parentPageId = requireValue7(rest, token);
           break;
         case "--title":
-          title = requireValue5(rest, token);
+          title = requireValue7(rest, token);
           break;
         case "--private":
           isPrivate = true;
           break;
         case "--content":
-          content2 = requireValue5(rest, token);
+          content2 = requireValue7(rest, token);
           break;
         case "--file":
-          filePath2 = requireValue5(rest, token);
+          filePath2 = requireValue7(rest, token);
           break;
         default:
           throw new Error(`Unknown notion option: ${token}`);
@@ -21723,10 +22190,10 @@ function parseNotionArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--content":
-        content = requireValue5(rest, token);
+        content = requireValue7(rest, token);
         break;
       case "--file":
-        filePath = requireValue5(rest, token);
+        filePath = requireValue7(rest, token);
         break;
       case "--append":
         append = true;
@@ -21771,11 +22238,11 @@ function parseRandomArgs(tokens) {
         mode = "easy";
         break;
       case "--length":
-        length = parsePositiveInt(requireValue5(rest, token), token);
+        length = parsePositiveInt(requireValue7(rest, token), token);
         seenLength = true;
         break;
       case "--charset": {
-        const value = requireValue5(rest, token);
+        const value = requireValue7(rest, token);
         if (!["base64url", "hex", "alnum", "ascii"].includes(value)) {
           throw new Error(
             `Invalid --charset value: ${value}. Use base64url|hex|alnum|ascii.`
@@ -21786,18 +22253,18 @@ function parseRandomArgs(tokens) {
         break;
       }
       case "--count":
-        count = parsePositiveInt(requireValue5(rest, token), token);
+        count = parsePositiveInt(requireValue7(rest, token), token);
         break;
       case "--words":
-        words = parsePositiveInt(requireValue5(rest, token), token);
+        words = parsePositiveInt(requireValue7(rest, token), token);
         seenWords = true;
         break;
       case "--digits":
-        digits = parseNonNegativeInt(requireValue5(rest, token), token);
+        digits = parseNonNegativeInt(requireValue7(rest, token), token);
         seenDigits = true;
         break;
       case "--separator":
-        separator = requireValue5(rest, token);
+        separator = requireValue7(rest, token);
         seenSeparator = true;
         break;
       default:
@@ -21840,7 +22307,7 @@ function parseCollectArgs(tokens) {
     const token = rest.shift();
     switch (token) {
       case "--endpoint":
-        options.endpoint = requireValue5(rest, token);
+        options.endpoint = requireValue7(rest, token);
         break;
       case "--json":
         options.json = true;
@@ -21850,7 +22317,7 @@ function parseCollectArgs(tokens) {
         break;
       case "--thread":
         options.mode = "thread";
-        options.threadName = requireValue5(rest, token);
+        options.threadName = requireValue7(rest, token);
         break;
       default:
         throw new Error(`Unknown collect option: ${token}`);
@@ -21861,7 +22328,7 @@ function parseCollectArgs(tokens) {
   }
   return { type: "collect" /* Collect */, ...options };
 }
-function requireValue5(tokens, optionName) {
+function requireValue7(tokens, optionName) {
   const value = tokens.shift();
   if (!value) {
     throw new Error(`Missing value for ${optionName}`);
@@ -22007,6 +22474,16 @@ async function main() {
         await handler.handle(commandArgs);
         return;
       }
+      case "role" /* Role */: {
+        const handler = new RoleCommandHandler();
+        await handler.handle(commandArgs);
+        return;
+      }
+      case "account" /* Account */: {
+        const handler = new AccountCommandHandler();
+        await handler.handle(commandArgs);
+        return;
+      }
       case "store" /* Store */: {
         const handler = new StoreCommandHandler();
         await handler.handle(commandArgs);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pmate/cli",
-  "version": "0.16.2",
+  "version": "0.16.3",
   "description": "CLI utilities for the pMate project",
   "license": "MIT",
   "bin": {