@portaidentity/cli 0.1.0

package/dist/auth/pkce.d.ts

@@ -0,0 +1,42 @@
+/**
+ * PKCE (Proof Key for Code Exchange) helpers.
+ *
+ * Implements RFC 7636 for the CLI login flow. PKCE prevents
+ * authorization code interception attacks by binding the code
+ * exchange to a cryptographically random verifier.
+ *
+ * INV1 resolution: PKCE functions were originally inline in
+ * `src/cli/commands/login.ts`. Extracted here as standalone
+ * helpers for the standalone CLI package.
+ *
+ * @module auth/pkce
+ */
+/**
+ * Generate a cryptographically random PKCE code_verifier.
+ *
+ * Per RFC 7636 §4.1: 32 random bytes encoded as base64url produces
+ * a 43-character string, well within the 43–128 character requirement.
+ *
+ * @returns Base64url-encoded code verifier
+ */
+export declare function generateCodeVerifier(): string;
+/**
+ * Generate the PKCE code_challenge from a code_verifier using S256.
+ *
+ * Per RFC 7636 §4.2: code_challenge = BASE64URL(SHA256(code_verifier))
+ *
+ * @param verifier - The code_verifier to hash
+ * @returns Base64url-encoded SHA-256 hash of the verifier
+ */
+export declare function generateCodeChallenge(verifier: string): string;
+/**
+ * Generate a cryptographically random state parameter.
+ *
+ * Used to prevent CSRF attacks on the OAuth callback. The CLI
+ * generates this value before opening the browser and validates
+ * it when the callback is received.
+ *
+ * @returns Base64url-encoded random state string
+ */
+export declare function generateState(): string;
+//# sourceMappingURL=pkce.d.ts.map

package/dist/auth/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../src/auth/pkce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAQH;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}

package/dist/auth/pkce.js

@@ -0,0 +1,52 @@
+/**
+ * PKCE (Proof Key for Code Exchange) helpers.
+ *
+ * Implements RFC 7636 for the CLI login flow. PKCE prevents
+ * authorization code interception attacks by binding the code
+ * exchange to a cryptographically random verifier.
+ *
+ * INV1 resolution: PKCE functions were originally inline in
+ * `src/cli/commands/login.ts`. Extracted here as standalone
+ * helpers for the standalone CLI package.
+ *
+ * @module auth/pkce
+ */
+import { randomBytes, createHash } from 'node:crypto';
+// ---------------------------------------------------------------------------
+// PKCE Generation
+// ---------------------------------------------------------------------------
+/**
+ * Generate a cryptographically random PKCE code_verifier.
+ *
+ * Per RFC 7636 §4.1: 32 random bytes encoded as base64url produces
+ * a 43-character string, well within the 43–128 character requirement.
+ *
+ * @returns Base64url-encoded code verifier
+ */
+export function generateCodeVerifier() {
+    return randomBytes(32).toString('base64url');
+}
+/**
+ * Generate the PKCE code_challenge from a code_verifier using S256.
+ *
+ * Per RFC 7636 §4.2: code_challenge = BASE64URL(SHA256(code_verifier))
+ *
+ * @param verifier - The code_verifier to hash
+ * @returns Base64url-encoded SHA-256 hash of the verifier
+ */
+export function generateCodeChallenge(verifier) {
+    return createHash('sha256').update(verifier).digest('base64url');
+}
+/**
+ * Generate a cryptographically random state parameter.
+ *
+ * Used to prevent CSRF attacks on the OAuth callback. The CLI
+ * generates this value before opening the browser and validates
+ * it when the callback is received.
+ *
+ * @returns Base64url-encoded random state string
+ */
+export function generateState() {
+    return randomBytes(16).toString('base64url');
+}
+//# sourceMappingURL=pkce.js.map

package/dist/auth/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../src/auth/pkce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC"}

package/dist/auth/types.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Types for the CLI authentication flow.
+ *
+ * Defines the data structures used during the OIDC Authorization Code
+ * + PKCE login flow: admin metadata discovery, token responses, and
+ * the intermediate auth flow result.
+ *
+ * @module auth/types
+ */
+/**
+ * Response shape from the admin metadata endpoint.
+ *
+ * `GET /api/admin/metadata` returns this data — an unauthenticated
+ * endpoint that exposes the OIDC client_id, issuer, and organization
+ * slug needed to initiate the login flow.
+ */
+export interface AdminMetadata {
+    /** OIDC issuer URL (e.g., "https://porta.local:3443/porta-admin") */
+    issuer: string;
+    /** OIDC client_id for the admin CLI PKCE client */
+    clientId: string;
+    /** Organization slug for the admin org (e.g., "porta-admin") */
+    orgSlug: string;
+}
+/**
+ * Token response from the OIDC token endpoint.
+ *
+ * Returned after exchanging an authorization code for tokens via
+ * `POST /{orgSlug}/token`.
+ */
+export interface TokenResponse {
+    /** JWT access token for API authorization */
+    access_token: string;
+    /** Refresh token for obtaining new access tokens */
+    refresh_token: string;
+    /** OIDC ID token containing user identity claims */
+    id_token: string;
+    /** Seconds until the access token expires */
+    expires_in: number;
+}
+/**
+ * Result of the browser-based auth flow.
+ *
+ * Contains all tokens and user info needed to store credentials
+ * after a successful login.
+ */
+export interface AuthFlowResult {
+    /** Server URL that was authenticated against */
+    server: string;
+    /** Organization slug used during login */
+    orgSlug: string;
+    /** OIDC client ID used during login */
+    clientId: string;
+    /** JWT access token */
+    accessToken: string;
+    /** Refresh token for renewing access */
+    refreshToken: string;
+    /** OIDC ID token */
+    idToken: string;
+    /** ISO 8601 expiry timestamp for the access token */
+    expiresAt: string;
+    /** Decoded user info from the ID token */
+    userInfo: {
+        /** OIDC subject identifier (user ID) */
+        sub: string;
+        /** User email address */
+        email: string;
+        /** User display name (optional) */
+        name?: string;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,6CAA6C;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,QAAQ,EAAE;QACR,wCAAwC;QACxC,GAAG,EAAE,MAAM,CAAC;QACZ,yBAAyB;QACzB,KAAK,EAAE,MAAM,CAAC;QACd,mCAAmC;QACnC,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH"}

package/dist/auth/types.js

@@ -0,0 +1,11 @@
+/**
+ * Types for the CLI authentication flow.
+ *
+ * Defines the data structures used during the OIDC Authorization Code
+ * + PKCE login flow: admin metadata discovery, token responses, and
+ * the intermediate auth flow result.
+ *
+ * @module auth/types
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/auth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/client-factory.d.ts

@@ -0,0 +1,29 @@
+/**
+ * SDK client factory for CLI commands.
+ *
+ * Creates a configured `PortaClient` instance from CLI global options.
+ * Uses the SDK's `createCliAuth` provider which reads credentials from
+ * `~/.porta/credentials.json` and handles automatic token refresh.
+ *
+ * The factory resolves the server URL via the priority chain
+ * (--server > PORTA_SERVER > credentials file) and configures
+ * TLS handling based on the `--insecure` flag.
+ *
+ * @module client-factory
+ */
+import type { PortaClient } from '@portaidentity/sdk';
+import { type GlobalOptions } from './global-options.js';
+/**
+ * Creates a PortaClient configured from CLI global options.
+ *
+ * Resolves the server URL, sets up CLI auth (with auto-refresh),
+ * and creates a Node.js transport. The `--insecure` flag controls
+ * whether TLS certificate verification is skipped by setting the
+ * NODE_TLS_REJECT_UNAUTHORIZED environment variable.
+ *
+ * @param options - Global CLI options
+ * @returns A configured PortaClient ready for API calls
+ * @throws Error if no server URL can be resolved
+ */
+export declare function createClient(options: GlobalOptions): PortaClient;
+//# sourceMappingURL=client-factory.d.ts.map

package/dist/client-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-factory.d.ts","sourceRoot":"","sources":["../src/client-factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAoB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAM3E;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,WAAW,CAahE"}

package/dist/client-factory.js

@@ -0,0 +1,43 @@
+/**
+ * SDK client factory for CLI commands.
+ *
+ * Creates a configured `PortaClient` instance from CLI global options.
+ * Uses the SDK's `createCliAuth` provider which reads credentials from
+ * `~/.porta/credentials.json` and handles automatic token refresh.
+ *
+ * The factory resolves the server URL via the priority chain
+ * (--server > PORTA_SERVER > credentials file) and configures
+ * TLS handling based on the `--insecure` flag.
+ *
+ * @module client-factory
+ */
+import { createPortaClient } from '@portaidentity/sdk';
+import { createNodeTransport, createCliAuth } from '@portaidentity/sdk/node';
+import { resolveServerUrl } from './global-options.js';
+// ---------------------------------------------------------------------------
+// Client Creation
+// ---------------------------------------------------------------------------
+/**
+ * Creates a PortaClient configured from CLI global options.
+ *
+ * Resolves the server URL, sets up CLI auth (with auto-refresh),
+ * and creates a Node.js transport. The `--insecure` flag controls
+ * whether TLS certificate verification is skipped by setting the
+ * NODE_TLS_REJECT_UNAUTHORIZED environment variable.
+ *
+ * @param options - Global CLI options
+ * @returns A configured PortaClient ready for API calls
+ * @throws Error if no server URL can be resolved
+ */
+export function createClient(options) {
+    const baseUrl = resolveServerUrl(options);
+    // Handle --insecure flag for self-signed certificates
+    // This must be set before creating the transport so fetch() picks it up
+    if (options.insecure) {
+        process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
+    }
+    const auth = createCliAuth();
+    const transport = createNodeTransport({ baseUrl, auth });
+    return createPortaClient({ transport });
+}
+//# sourceMappingURL=client-factory.js.map

package/dist/client-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-factory.js","sourceRoot":"","sources":["../src/client-factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7E,OAAO,EAAE,gBAAgB,EAAsB,MAAM,qBAAqB,CAAC;AAE3E,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE1C,sDAAsD;IACtD,wEAAwE;IACxE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAC;IACjD,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,mBAAmB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzD,OAAO,iBAAiB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1C,CAAC"}

package/dist/commands/app-claim.d.ts

@@ -0,0 +1,9 @@
+/**
+ * CLI custom claim definition subcommands.
+ *
+ * @module commands/app-claim
+ */
+import type { CommandModule } from 'yargs';
+import type { GlobalOptions } from '../global-options.js';
+export declare const appClaimCommand: CommandModule<GlobalOptions, GlobalOptions>;
+//# sourceMappingURL=app-claim.d.ts.map

package/dist/commands/app-claim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-claim.d.ts","sourceRoot":"","sources":["../../src/commands/app-claim.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAuC1D,eAAO,MAAM,eAAe,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,CAoJvE,CAAC"}

package/dist/commands/app-claim.js

@@ -0,0 +1,128 @@
+/**
+ * CLI custom claim definition subcommands.
+ *
+ * @module commands/app-claim
+ */
+import { createClient } from '../client-factory.js';
+import { handleError } from '../error-handler.js';
+import { printTable, printJson, success, warn, info, formatDate, truncate } from '../output.js';
+// ---------------------------------------------------------------------------
+// Command definition
+// ---------------------------------------------------------------------------
+export const appClaimCommand = {
+    command: 'claim',
+    describe: 'Manage custom claim definitions',
+    builder: (yargs) => {
+        return yargs
+            .command('create <app-id>', 'Create a custom claim definition', (y) => y
+            .positional('app-id', { type: 'string', demandOption: true, description: 'Application ID' })
+            .option('name', { type: 'string', demandOption: true, description: 'Claim name' })
+            .option('slug', { type: 'string', description: 'Claim slug' })
+            .option('type', {
+            type: 'string',
+            demandOption: true,
+            choices: ['string', 'number', 'boolean', 'json'],
+            description: 'Claim value type',
+        })
+            .option('description', { type: 'string', description: 'Claim description' }), async (argv) => {
+            try {
+                const client = createClient(argv);
+                const claim = await client.customClaims.create(argv['app-id'], {
+                    applicationId: argv['app-id'],
+                    name: argv.name,
+                    slug: argv.slug,
+                    valueType: argv.type,
+                    description: argv.description,
+                });
+                if (argv.json) {
+                    printJson(claim);
+                }
+                else {
+                    success(`Claim created: ${claim.name} (${claim.slug})`);
+                    printTable(['Field', 'Value'], [
+                        ['ID', claim.id],
+                        ['Name', claim.name],
+                        ['Slug', claim.slug],
+                        ['Type', claim.valueType],
+                        ['Created', formatDate(claim.createdAt)],
+                    ]);
+                }
+            }
+            catch (err) {
+                handleError(err, argv.verbose);
+            }
+        })
+            .command('list <app-id>', 'List claim definitions for an application', (y) => y
+            .positional('app-id', { type: 'string', demandOption: true, description: 'Application ID' })
+            .option('page', { type: 'number', default: 1, description: 'Page number' })
+            .option('page-size', { type: 'number', default: 20, description: 'Items per page' }), async (argv) => {
+            try {
+                const client = createClient(argv);
+                const result = await client.customClaims.list(argv['app-id'], {
+                    page: argv.page,
+                    pageSize: argv['page-size'],
+                });
+                if (result.data.length === 0) {
+                    warn('No claim definitions found');
+                    return;
+                }
+                if (argv.json) {
+                    printJson(result);
+                }
+                else {
+                    printTable(['ID', 'Name', 'Slug', 'Type', 'Created'], result.data.map((c) => [
+                        truncate(c.id, 8),
+                        c.name,
+                        c.slug,
+                        c.valueType,
+                        formatDate(c.createdAt),
+                    ]));
+                    info(`Total: ${result.total} claim definitions`);
+                }
+            }
+            catch (err) {
+                handleError(err, argv.verbose);
+            }
+        })
+            .command('show <app-id> <claim-id>', 'Show claim definition details', (y) => y
+            .positional('app-id', { type: 'string', demandOption: true, description: 'Application ID' })
+            .positional('claim-id', { type: 'string', demandOption: true, description: 'Claim definition ID' }), async (argv) => {
+            try {
+                const client = createClient(argv);
+                const claim = await client.customClaims.get(argv['app-id'], argv['claim-id']);
+                if (argv.json) {
+                    printJson(claim);
+                }
+                else {
+                    printTable(['Field', 'Value'], [
+                        ['ID', claim.id],
+                        ['Name', claim.name],
+                        ['Slug', claim.slug],
+                        ['Type', claim.valueType],
+                        ['Description', claim.description ?? '—'],
+                        ['Created', formatDate(claim.createdAt)],
+                        ['Updated', formatDate(claim.updatedAt)],
+                    ]);
+                }
+            }
+            catch (err) {
+                handleError(err, argv.verbose);
+            }
+        })
+            .command('archive <app-id> <claim-id>', 'Archive a claim definition', (y) => y
+            .positional('app-id', { type: 'string', demandOption: true, description: 'Application ID' })
+            .positional('claim-id', { type: 'string', demandOption: true, description: 'Claim definition ID' }), async (argv) => {
+            try {
+                const client = createClient(argv);
+                await client.customClaims.archive(argv['app-id'], argv['claim-id']);
+                success('Claim definition archived');
+            }
+            catch (err) {
+                handleError(err, argv.verbose);
+            }
+        })
+            .demandCommand(1, 'Specify a claim subcommand: create, list, show, archive');
+    },
+    handler: () => { },
+};
+//# sourceMappingURL=app-claim.js.map

package/dist/commands/app-claim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-claim.js","sourceRoot":"","sources":["../../src/commands/app-claim.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AA8BhG,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,eAAe,GAAgD;IAC1E,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,iCAAiC;IAC3C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACjB,OAAO,KAAK;aACT,OAAO,CACN,iBAAiB,EACjB,kCAAkC,EAClC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;aACE,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;aAC3F,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;aACjF,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;aAC7D,MAAM,CAAC,MAAM,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;YAChD,WAAW,EAAE,kBAAkB;SAChC,CAAC;aACD,MAAM,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,EAChF,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAC7D,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC;oBAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,SAAS,EAAE,IAAI,CAAC,IAAsB;oBACtC,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC,CAAC;gBAEH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,SAAS,CAAC,KAAK,CAAC,CAAC;gBACnB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,kBAAkB,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;oBACxD,UAAU,CACR,CAAC,OAAO,EAAE,OAAO,CAAC,EAClB;wBACE,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;wBAChB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;wBACpB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;wBACpB,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;wBACzB,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;qBACzC,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CACF;aAEA,OAAO,CACN,eAAe,EACf,2CAA2C,EAC3C,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;aACE,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;aAC3F,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;aAC1E,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,EACxF,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAC5D,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;iBAC5B,CAAC,CAAC;gBAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC7B,IAAI,CAAC,4BAA4B,CAAC,CAAC;oBACnC,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,SAAS,CAAC,MAAM,CAAC,CAAC;gBACpB,CAAC;qBAAM,CAAC;oBACN,UAAU,CACR,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;wBACrB,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACjB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,SAAS;wBACX,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;qBACxB,CAAC,CACH,CAAC;oBACF,IAAI,CAAC,UAAU,MAAM,CAAC,KAAK,oBAAoB,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CACF;aAEA,OAAO,CACN,0BAA0B,EAC1B,+BAA+B,EAC/B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;aACE,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;aAC3F,UAAU,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC,EACvG,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;gBAE9E,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,SAAS,CAAC,KAAK,CAAC,CAAC;gBACnB,CAAC;qBAAM,CAAC;oBACN,UAAU,CACR,CAAC,OAAO,EAAE,OAAO,CAAC,EAClB;wBACE,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;wBAChB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;wBACpB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;wBACpB,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;wBACzB,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC;wBACzC,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;wBACxC,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;qBACzC,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CACF;aAEA,OAAO,CACN,6BAA6B,EAC7B,4BAA4B,EAC5B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;aACE,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;aAC3F,UAAU,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC,EACvG,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;gBACpE,OAAO,CAAC,2BAA2B,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CACF;aACA,aAAa,CAAC,CAAC,EAAE,yDAAyD,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;CAClB,CAAC"}

package/dist/commands/app-module.d.ts

@@ -0,0 +1,9 @@
+/**
+ * CLI application module subcommands.
+ *
+ * @module commands/app-module
+ */
+import type { CommandModule } from 'yargs';
+import type { GlobalOptions } from '../global-options.js';
+export declare const appModuleCommand: CommandModule<GlobalOptions, GlobalOptions>;
+//# sourceMappingURL=app-module.d.ts.map

package/dist/commands/app-module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-module.d.ts","sourceRoot":"","sources":["../../src/commands/app-module.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAqC1D,eAAO,MAAM,gBAAgB,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,CAsHxE,CAAC"}

package/dist/commands/app-module.js

@@ -0,0 +1,104 @@
+/**
+ * CLI application module subcommands.
+ *
+ * @module commands/app-module
+ */
+import { createClient } from '../client-factory.js';
+import { handleError } from '../error-handler.js';
+import { printTable, printJson, success, warn, info, formatDate, truncate } from '../output.js';
+// ---------------------------------------------------------------------------
+// Command definition
+// ---------------------------------------------------------------------------
+export const appModuleCommand = {
+    command: 'module',
+    describe: 'Manage application modules',
+    builder: (yargs) => {
+        return yargs
+            .command('add <app-id>', 'Add a module to an application', (y) => y
+            .positional('app-id', { type: 'string', demandOption: true, description: 'Application ID' })
+            .option('name', { type: 'string', demandOption: true, description: 'Module name' })
+            .option('slug', { type: 'string', description: 'Module slug' })
+            .option('description', { type: 'string', description: 'Module description' }), async (argv) => {
+            try {
+                const client = createClient(argv);
+                const mod = await client.applications.addModule(argv['app-id'], {
+                    name: argv.name,
+                    slug: argv.slug,
+                    description: argv.description,
+                });
+                if (argv.json) {
+                    printJson(mod);
+                }
+                else {
+                    success(`Module added: ${mod.name} (${mod.slug})`);
+                }
+            }
+            catch (err) {
+                handleError(err, argv.verbose);
+            }
+        })
+            .command('list <app-id>', 'List modules for an application', (y) => y.positional('app-id', { type: 'string', demandOption: true, description: 'Application ID' }), async (argv) => {
+            try {
+                const client = createClient(argv);
+                const modules = await client.applications.listModules(argv['app-id']);
+                if (modules.length === 0) {
+                    warn('No modules found');
+                    return;
+                }
+                if (argv.json) {
+                    printJson(modules);
+                }
+                else {
+                    printTable(['ID', 'Name', 'Slug', 'Active', 'Created'], modules.map((m) => [
+                        truncate(m.id, 8),
+                        m.name,
+                        m.slug,
+                        String(m.isActive),
+                        formatDate(m.createdAt),
+                    ]));
+                    info(`Total: ${modules.length} modules`);
+                }
+            }
+            catch (err) {
+                handleError(err, argv.verbose);
+            }
+        })
+            .command('update <app-id> <module-id>', 'Update a module', (y) => y
+            .positional('app-id', { type: 'string', demandOption: true, description: 'Application ID' })
+            .positional('module-id', { type: 'string', demandOption: true, description: 'Module ID' })
+            .option('name', { type: 'string', description: 'New module name' })
+            .option('description', { type: 'string', description: 'New description' }), async (argv) => {
+            try {
+                const client = createClient(argv);
+                const updated = await client.applications.updateModule(argv['app-id'], argv['module-id'], {
+                    name: argv.name,
+                    description: argv.description,
+                });
+                if (argv.json) {
+                    printJson(updated);
+                }
+                else {
+                    success(`Module updated: ${updated.name}`);
+                }
+            }
+            catch (err) {
+                handleError(err, argv.verbose);
+            }
+        })
+            .command('remove <app-id> <module-id>', 'Remove a module from an application', (y) => y
+            .positional('app-id', { type: 'string', demandOption: true, description: 'Application ID' })
+            .positional('module-id', { type: 'string', demandOption: true, description: 'Module ID' }), async (argv) => {
+            try {
+                const client = createClient(argv);
+                await client.applications.removeModule(argv['app-id'], argv['module-id']);
+                success('Module removed');
+            }
+            catch (err) {
+                handleError(err, argv.verbose);
+            }
+        })
+            .demandCommand(1, 'Specify a module subcommand: add, list, update, remove');
+    },
+    handler: () => { },
+};
+//# sourceMappingURL=app-module.js.map

package/dist/commands/app-module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-module.js","sourceRoot":"","sources":["../../src/commands/app-module.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AA6BhG,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,gBAAgB,GAAgD;IAC3E,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,4BAA4B;IACtC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACjB,OAAO,KAAK;aACT,OAAO,CACN,cAAc,EACd,gCAAgC,EAChC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;aACE,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;aAC3F,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;aAClF,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;aAC9D,MAAM,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,EACjF,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAC9D,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC,CAAC;gBAEH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,SAAS,CAAC,GAAG,CAAC,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,iBAAiB,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CACF;aAEA,OAAO,CACN,eAAe,EACf,iCAAiC,EACjC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,EAC/F,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAEtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,IAAI,CAAC,kBAAkB,CAAC,CAAC;oBACzB,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,SAAS,CAAC,OAAO,CAAC,CAAC;gBACrB,CAAC;qBAAM,CAAC;oBACN,UAAU,CACR,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,EAC3C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;wBACjB,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACjB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,IAAI;wBACN,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;wBAClB,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;qBACxB,CAAC,CACH,CAAC;oBACF,IAAI,CAAC,UAAU,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CACF;aAEA,OAAO,CACN,6BAA6B,EAC7B,iBAAiB,EACjB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;aACE,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;aAC3F,UAAU,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;aACzF,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;aAClE,MAAM,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,EAC9E,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE;oBACxF,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC,CAAC;gBAEH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,SAAS,CAAC,OAAO,CAAC,CAAC;gBACrB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,mBAAmB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CACF;aAEA,OAAO,CACN,6BAA6B,EAC7B,qCAAqC,EACrC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;aACE,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;aAC3F,UAAU,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,EAC9F,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC1E,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CACF;aACA,aAAa,CAAC,CAAC,EAAE,wDAAwD,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;CAClB,CAAC"}

package/dist/commands/app-permission.d.ts

@@ -0,0 +1,9 @@
+/**
+ * CLI application permission subcommands.
+ *
+ * @module commands/app-permission
+ */
+import type { CommandModule } from 'yargs';
+import type { GlobalOptions } from '../global-options.js';
+export declare const appPermissionCommand: CommandModule<GlobalOptions, GlobalOptions>;
+//# sourceMappingURL=app-permission.d.ts.map

package/dist/commands/app-permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-permission.d.ts","sourceRoot":"","sources":["../../src/commands/app-permission.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAqC1D,eAAO,MAAM,oBAAoB,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,CA0I5E,CAAC"}