@portaidentity/cli 0.1.0

package/dist/commands/provision.js

@@ -0,0 +1,400 @@
+/**
+ * Provision command — declarative tenant infrastructure from YAML/JSON.
+ *
+ * Reads a YAML (or JSON) provisioning file with a nested structure
+ * (organizations → applications → clients/roles/permissions/claims),
+ * transforms it into the flat import manifest format, and sends it
+ * to the import API via the SDK. All entities are created in a single
+ * transaction.
+ *
+ * Supports three modes:
+ *   merge (default): skip existing entities, create new
+ *   overwrite:       update existing entities, create new
+ *   dry-run:         preview what would change without applying
+ *
+ * Usage:
+ *   porta provision --file infrastructure.yaml
+ *   porta provision --file infrastructure.yaml --dry-run
+ *   porta provision --file infrastructure.yaml --mode overwrite
+ *   porta provision --file infrastructure.yaml --json
+ *
+ * @module commands/provision
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { parse as parseYaml } from 'yaml';
+import { createClient } from '../client-factory.js';
+import { handleError } from '../error-handler.js';
+import { printTable, printJson, success, warn, error as printError } from '../output.js';
+// ============================================================================
+// Slug generation — simple kebab-case conversion
+// ============================================================================
+/**
+ * Generate a URL-safe slug from a name.
+ *
+ * Converts to lowercase, replaces non-alphanumeric chars with hyphens,
+ * collapses multiple hyphens, and trims leading/trailing hyphens.
+ */
+function slugify(name) {
+    return name
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/-+/g, '-')
+        .replace(/^-|-$/g, '');
+}
+// ============================================================================
+// Duration parser — converts human-friendly durations to ISO dates
+// ============================================================================
+/**
+ * Parse a duration string into a future Date.
+ *
+ * Supports: Nd (days), Nm (months), Ny (years), Nh (hours).
+ * Examples: "90d" (90 days), "6m" (6 months), "1y" (1 year), "24h" (24 hours).
+ */
+export function parseDuration(duration) {
+    const match = duration.match(/^(\d+)([dmyh])$/);
+    if (!match) {
+        throw new Error(`Invalid duration format: "${duration}". Use Nd, Nm, Ny, or Nh (e.g., 90d, 6m, 1y, 24h).`);
+    }
+    const amount = parseInt(match[1], 10);
+    const unit = match[2];
+    const date = new Date();
+    switch (unit) {
+        case 'd':
+            date.setDate(date.getDate() + amount);
+            break;
+        case 'm':
+            date.setMonth(date.getMonth() + amount);
+            break;
+        case 'y':
+            date.setFullYear(date.getFullYear() + amount);
+            break;
+        case 'h':
+            date.setHours(date.getHours() + amount);
+            break;
+    }
+    return date;
+}
+// ============================================================================
+// File parser — reads YAML or JSON based on extension
+// ============================================================================
+/**
+ * Read and parse a provisioning file from disk or stdin.
+ *
+ * Detects format by file extension (.yaml/.yml for YAML, .json for JSON).
+ * When reading from `/dev/stdin` (no extension), defaults to YAML parsing
+ * which also handles valid JSON since YAML is a superset of JSON.
+ */
+export function parseProvisioningFile(filePath) {
+    const isStdin = filePath === '/dev/stdin';
+    if (!isStdin && !fs.existsSync(filePath)) {
+        throw new Error(`File not found: ${filePath}`);
+    }
+    const content = fs.readFileSync(filePath, 'utf-8');
+    const ext = path.extname(filePath).toLowerCase();
+    if (ext === '.yaml' || ext === '.yml') {
+        return parseYaml(content);
+    }
+    else if (ext === '.json') {
+        return JSON.parse(content);
+    }
+    else if (isStdin || ext === '') {
+        return parseYaml(content);
+    }
+    else {
+        throw new Error(`Unsupported file format: ${ext}. Use .yaml, .yml, or .json`);
+    }
+}
+/**
+ * Transform a nested provisioning file into a flat import manifest.
+ *
+ * Walks the nested org → app → (clients, roles, permissions, claims) tree
+ * and produces flat arrays with explicit organization_slug and application_slug
+ * references for each entity.
+ */
+function transformToManifest(input) {
+    const manifest = {
+        version: input.version,
+        organizations: [],
+        applications: [],
+        clients: [],
+        roles: [],
+        permissions: [],
+        claim_definitions: [],
+        users: [],
+        application_modules: [],
+        role_permission_mappings: [],
+        user_role_assignments: [],
+        user_claim_values: [],
+    };
+    // Validate allow_passwords enforcement
+    if (!input.allow_passwords) {
+        for (const org of input.organizations) {
+            for (const user of org.users ?? []) {
+                if (user.password) {
+                    throw new Error(`User "${user.email}": password field requires "allow_passwords: true" at top level. ` +
+                        'Password provisioning is for development/testing only.');
+                }
+            }
+        }
+    }
+    for (const org of input.organizations) {
+        const orgSlug = org.slug ?? slugify(org.name);
+        // Add organization
+        manifest.organizations.push({
+            name: org.name,
+            slug: orgSlug,
+            default_locale: org.default_locale,
+            default_login_methods: org.default_login_methods,
+            two_factor_policy: org.two_factor_policy,
+            branding_primary_color: org.branding?.primary_color,
+            branding_company_name: org.branding?.company_name,
+            branding_custom_css: org.branding?.custom_css,
+            branding_logo_url: org.branding?.logo_url,
+            branding_favicon_url: org.branding?.favicon_url,
+        });
+        // Flatten users + extract role/claim assignments
+        for (const user of org.users ?? []) {
+            manifest.users.push({
+                email: user.email,
+                organization_slug: orgSlug,
+                given_name: user.given_name,
+                family_name: user.family_name,
+                locale: user.locale,
+                status: user.status,
+                email_verified: user.email_verified,
+                password: user.password,
+            });
+            for (const roleRef of user.roles ?? []) {
+                manifest.user_role_assignments.push({
+                    email: user.email,
+                    organization_slug: orgSlug,
+                    application_slug: roleRef.app,
+                    role_slug: roleRef.role,
+                });
+            }
+            for (const claimRef of user.claims ?? []) {
+                manifest.user_claim_values.push({
+                    email: user.email,
+                    organization_slug: orgSlug,
+                    application_slug: claimRef.app,
+                    claim_slug: claimRef.claim,
+                    value: claimRef.value,
+                });
+            }
+        }
+        for (const app of org.applications ?? []) {
+            const appSlug = app.slug ?? slugify(app.name);
+            // Add application
+            manifest.applications.push({
+                name: app.name,
+                slug: appSlug,
+                organization_slug: orgSlug,
+                description: app.description,
+            });
+            // Flatten clients
+            for (const clientDef of app.clients ?? []) {
+                // Validate and flatten secret block
+                if (clientDef.secret) {
+                    if (clientDef.client_type === 'public') {
+                        throw new Error(`Client "${clientDef.client_name}": secret block not allowed on public clients`);
+                    }
+                    if (clientDef.secret.expires_at && clientDef.secret.expires_in) {
+                        throw new Error(`Client "${clientDef.client_name}": expires_at and expires_in are mutually exclusive`);
+                    }
+                }
+                let secretLabel;
+                let secretExpiresAt;
+                if (clientDef.secret) {
+                    secretLabel = clientDef.secret.label;
+                    if (clientDef.secret.expires_at) {
+                        secretExpiresAt = clientDef.secret.expires_at;
+                    }
+                    else if (clientDef.secret.expires_in) {
+                        secretExpiresAt = parseDuration(clientDef.secret.expires_in).toISOString();
+                    }
+                }
+                const { secret: _secretBlock, ...clientFields } = clientDef;
+                manifest.clients.push({
+                    ...clientFields,
+                    application_slug: appSlug,
+                    organization_slug: orgSlug,
+                    ...(secretLabel !== undefined ? { secret_label: secretLabel } : {}),
+                    ...(secretExpiresAt !== undefined ? { secret_expires_at: secretExpiresAt } : {}),
+                });
+            }
+            // Flatten permissions
+            for (const perm of app.permissions ?? []) {
+                manifest.permissions.push({
+                    ...perm,
+                    application_slug: appSlug,
+                    organization_slug: orgSlug,
+                });
+            }
+            // Flatten roles + extract permission mappings
+            for (const role of app.roles ?? []) {
+                const roleSlug = role.slug ?? slugify(role.name);
+                manifest.roles.push({
+                    name: role.name,
+                    slug: roleSlug,
+                    description: role.description,
+                    application_slug: appSlug,
+                    organization_slug: orgSlug,
+                });
+                if (role.permissions && role.permissions.length > 0) {
+                    manifest.role_permission_mappings.push({
+                        role_slug: roleSlug,
+                        permission_slugs: role.permissions,
+                        application_slug: appSlug,
+                        organization_slug: orgSlug,
+                    });
+                }
+            }
+            // Flatten claim definitions
+            for (const claim of app.claim_definitions ?? []) {
+                manifest.claim_definitions.push({
+                    ...claim,
+                    application_slug: appSlug,
+                    organization_slug: orgSlug,
+                });
+            }
+            // Flatten application modules
+            for (const mod of app.modules ?? []) {
+                manifest.application_modules.push({
+                    name: mod.name,
+                    slug: mod.slug,
+                    description: mod.description,
+                    status: mod.status,
+                    application_slug: appSlug,
+                    organization_slug: orgSlug,
+                });
+            }
+        }
+    }
+    // Attach config overrides
+    if (input.config) {
+        manifest.config = input.config;
+    }
+    return manifest;
+}
+// ============================================================================
+// Result display helpers
+// ============================================================================
+/**
+ * Display a summary of the import result.
+ */
+function displayResult(result, mode) {
+    const label = mode === 'dry-run' ? 'Dry-run preview' : 'Provisioning complete';
+    if (result.dryRun) {
+        success(`${label} (dry-run mode)`);
+    }
+    else {
+        success(`${label} (${mode} mode)`);
+    }
+    console.log();
+    // Display entity counts
+    const countEntries = Object.entries(result.counts);
+    if (countEntries.length > 0) {
+        printTable(['Entity Type', 'Count'], countEntries.map(([type, count]) => [
+            formatTypeName(type),
+            String(count),
+        ]));
+    }
+    // Display errors
+    if (result.errors.length > 0) {
+        console.log();
+        printError(`${result.errors.length} error(s):`);
+        printTable(['Entity Type', 'Identifier', 'Error'], result.errors.map((e) => [e.entityType, e.identifier, e.error]));
+    }
+    else {
+        console.log(`  Errors: 0`);
+    }
+}
+/**
+ * Format an entity type name for display (e.g., "claim_definitions" → "Claim Definitions").
+ */
+function formatTypeName(type) {
+    return type
+        .split('_')
+        .map((w) => w.charAt(0).toUpperCase() + w.slice(1))
+        .join(' ');
+}
+export const provisionCommand = {
+    command: 'provision',
+    describe: 'Provision tenant infrastructure from a YAML or JSON file',
+    builder: (yargs) => yargs
+        .option('file', {
+        alias: 'f',
+        type: 'string',
+        describe: 'Path to provisioning YAML or JSON file',
+        demandOption: true,
+    })
+        .option('mode', {
+        type: 'string',
+        describe: 'Import mode: merge (skip existing) or overwrite (update existing)',
+        choices: ['merge', 'overwrite'],
+        default: 'merge',
+    })
+        .option('dry-run', {
+        type: 'boolean',
+        describe: 'Preview what would change without applying',
+        default: false,
+    }),
+    handler: async (argv) => {
+        try {
+            const isJson = argv.json;
+            const isDryRun = argv['dry-run'];
+            // 1. Read and parse provisioning file
+            if (!isJson) {
+                console.log(`Reading ${argv.file}...`);
+            }
+            const rawData = parseProvisioningFile(argv.file);
+            // 2. Basic validation
+            const data = rawData;
+            if (!data.version || !data.organizations || !Array.isArray(data.organizations)) {
+                throw new Error('Invalid provisioning file: must contain "version" and "organizations" array');
+            }
+            // 3. Transform nested → flat manifest
+            const manifest = transformToManifest(data);
+            if (!isJson) {
+                const entityCount = manifest.organizations.length +
+                    manifest.applications.length +
+                    manifest.clients.length +
+                    manifest.roles.length +
+                    manifest.permissions.length +
+                    manifest.claim_definitions.length +
+                    manifest.users.length;
+                const mappingCount = manifest.role_permission_mappings.length;
+                const hasConfig = !!manifest.config;
+                console.log(`Found ${entityCount} entities, ${mappingCount} role-permission mappings${hasConfig ? ', config overrides' : ''}`);
+                console.log();
+            }
+            // 4. Determine import mode
+            const importMode = isDryRun ? 'dry-run' : argv.mode;
+            // 5. Send via SDK imports.provision()
+            const client = createClient(argv);
+            const sdkManifest = {
+                data: manifest,
+                mode: isDryRun ? undefined : argv.mode,
+                dryRun: isDryRun,
+            };
+            const result = await client.imports.provision(sdkManifest);
+            // 6. Display results
+            if (isJson) {
+                printJson(result);
+            }
+            else {
+                displayResult(result, importMode);
+            }
+            // 7. Show dry-run warning
+            if (isDryRun && !isJson) {
+                console.log();
+                warn('Dry-run mode — no changes were applied. Remove --dry-run to apply.');
+            }
+        }
+        catch (err) {
+            handleError(err, argv.verbose);
+        }
+    },
+};
+//# sourceMappingURL=provision.js.map

package/dist/commands/provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/commands/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAI1C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,cAAc,CAAC;AAEzF,+EAA+E;AAC/E,iDAAiD;AACjD,+EAA+E;AAE/E;;;;;GAKG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,mEAAmE;AACnE,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,6BAA6B,QAAQ,oDAAoD,CAC1F,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAExB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,GAAG;YAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;YAAC,MAAM;QACvD,KAAK,GAAG;YAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC;YAAC,MAAM;QACzD,KAAK,GAAG;YAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,CAAC;YAAC,MAAM;QAC/D,KAAK,GAAG;YAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC;YAAC,MAAM;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,sDAAsD;AACtD,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,OAAO,GAAG,QAAQ,KAAK,YAAY,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAEjD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;SAAM,IAAI,OAAO,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,4BAA4B,GAAG,6BAA6B,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAuND;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,KAAuB;IAClD,MAAM,QAAQ,GAAiB;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,EAAE;QACjB,YAAY,EAAE,EAAE;QAChB,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE;QACT,WAAW,EAAE,EAAE;QACf,iBAAiB,EAAE,EAAE;QACrB,KAAK,EAAE,EAAE;QACT,mBAAmB,EAAE,EAAE;QACvB,wBAAwB,EAAE,EAAE;QAC5B,qBAAqB,EAAE,EAAE;QACzB,iBAAiB,EAAE,EAAE;KACtB,CAAC;IAEF,uCAAuC;IACvC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACtC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,CAAC,KAAK,mEAAmE;wBACtF,wDAAwD,CACzD,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE9C,mBAAmB;QACnB,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC;YAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,OAAO;YACb,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;YAChD,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,sBAAsB,EAAE,GAAG,CAAC,QAAQ,EAAE,aAAa;YACnD,qBAAqB,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY;YACjD,mBAAmB,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU;YAC7C,iBAAiB,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ;YACzC,oBAAoB,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW;SAChD,CAAC,CAAC;QAEH,iDAAiD;QACjD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACnC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAClB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,iBAAiB,EAAE,OAAO;gBAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;YAEH,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACvC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC;oBAClC,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,iBAAiB,EAAE,OAAO;oBAC1B,gBAAgB,EAAE,OAAO,CAAC,GAAG;oBAC7B,SAAS,EAAE,OAAO,CAAC,IAAI;iBACxB,CAAC,CAAC;YACL,CAAC;YAED,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACzC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC;oBAC9B,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,iBAAiB,EAAE,OAAO;oBAC1B,gBAAgB,EAAE,QAAQ,CAAC,GAAG;oBAC9B,UAAU,EAAE,QAAQ,CAAC,KAAK;oBAC1B,KAAK,EAAE,QAAQ,CAAC,KAAK;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAE9C,kBAAkB;YAClB,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC;gBACzB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,OAAO;gBACb,iBAAiB,EAAE,OAAO;gBAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;aAC7B,CAAC,CAAC;YAEH,kBAAkB;YAClB,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;gBAC1C,oCAAoC;gBACpC,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;oBACrB,IAAI,SAAS,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;wBACvC,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,CAAC,WAAW,+CAA+C,CAChF,CAAC;oBACJ,CAAC;oBACD,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;wBAC/D,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,CAAC,WAAW,qDAAqD,CACtF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,IAAI,WAA+B,CAAC;gBACpC,IAAI,eAAmC,CAAC;gBAExC,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;oBACrB,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;oBACrC,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;wBAChC,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;oBAChD,CAAC;yBAAM,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;wBACvC,eAAe,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC7E,CAAC;gBACH,CAAC;gBAED,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,GAAG,SAAS,CAAC;gBAE5D,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;oBACpB,GAAG,YAAY;oBACf,gBAAgB,EAAE,OAAO;oBACzB,iBAAiB,EAAE,OAAO;oBAC1B,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjF,CAAC,CAAC;YACL,CAAC;YAED,sBAAsB;YACtB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;gBACzC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;oBACxB,GAAG,IAAI;oBACP,gBAAgB,EAAE,OAAO;oBACzB,iBAAiB,EAAE,OAAO;iBAC3B,CAAC,CAAC;YACL,CAAC;YAED,8CAA8C;YAC9C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAEjD,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,gBAAgB,EAAE,OAAO;oBACzB,iBAAiB,EAAE,OAAO;iBAC3B,CAAC,CAAC;gBAEH,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpD,QAAQ,CAAC,wBAAwB,CAAC,IAAI,CAAC;wBACrC,SAAS,EAAE,QAAQ;wBACnB,gBAAgB,EAAE,IAAI,CAAC,WAAW;wBAClC,gBAAgB,EAAE,OAAO;wBACzB,iBAAiB,EAAE,OAAO;qBAC3B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,4BAA4B;YAC5B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC;gBAChD,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC;oBAC9B,GAAG,KAAK;oBACR,gBAAgB,EAAE,OAAO;oBACzB,iBAAiB,EAAE,OAAO;iBAC3B,CAAC,CAAC;YACL,CAAC;YAED,8BAA8B;YAC9B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;gBACpC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC;oBAChC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,gBAAgB,EAAE,OAAO;oBACzB,iBAAiB,EAAE,OAAO;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACjC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,aAAa,CAAC,MAAoB,EAAE,IAAY;IACvD,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAE/E,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,wBAAwB;IACxB,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,UAAU,CACR,CAAC,aAAa,EAAE,OAAO,CAAC,EACxB,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YAClC,cAAc,CAAC,IAAI,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC;SACd,CAAC,CACH,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,YAAY,CAAC,CAAC;QAChD,UAAU,CACR,CAAC,aAAa,EAAE,YAAY,EAAE,OAAO,CAAC,EACtC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAChE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAClD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAYD,MAAM,CAAC,MAAM,gBAAgB,GAAmD;IAC9E,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,wCAAwC;QAClD,YAAY,EAAE,IAAI;KACnB,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,mEAAmE;QAC7E,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,CAAU;QACxC,OAAO,EAAE,OAAgB;KAC1B,CAAC;SACD,MAAM,CAAC,SAAS,EAAE;QACjB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,4CAA4C;QACtD,OAAO,EAAE,KAAK;KACf,CAAC;IAEN,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;YAEjC,sCAAsC;YACtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEjD,sBAAsB;YACtB,MAAM,IAAI,GAAG,OAA2B,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC/E,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;YACJ,CAAC;YAED,sCAAsC;YACtC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAE3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,WAAW,GACf,QAAQ,CAAC,aAAa,CAAC,MAAM;oBAC7B,QAAQ,CAAC,YAAY,CAAC,MAAM;oBAC5B,QAAQ,CAAC,OAAO,CAAC,MAAM;oBACvB,QAAQ,CAAC,KAAK,CAAC,MAAM;oBACrB,QAAQ,CAAC,WAAW,CAAC,MAAM;oBAC3B,QAAQ,CAAC,iBAAiB,CAAC,MAAM;oBACjC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;gBACxB,MAAM,YAAY,GAAG,QAAQ,CAAC,wBAAwB,CAAC,MAAM,CAAC;gBAC9D,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACpC,OAAO,CAAC,GAAG,CACT,SAAS,WAAW,cAAc,YAAY,4BAA4B,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,CAClH,CAAC;gBACF,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;YAED,2BAA2B;YAC3B,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAEpD,sCAAsC;YACtC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,WAAW,GAAmB;gBAClC,IAAI,EAAE,QAA8C;gBACpD,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,IAA8B;gBACjE,MAAM,EAAE,QAAQ;aACjB,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAE3D,qBAAqB;YACrB,IAAI,MAAM,EAAE,CAAC;gBACX,SAAS,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACpC,CAAC;YAED,0BAA0B;YAC1B,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,IAAI,CAAC,oEAAoE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/commands/sessions.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Sessions command — manage admin sessions.
+ *
+ * Subcommands:
+ *   list             List active admin sessions
+ *   revoke           Revoke a specific session by ID
+ *   revoke-user      Revoke all sessions for a user
+ *
+ * @module commands/sessions
+ */
+import type { CommandModule } from 'yargs';
+import type { GlobalOptions } from '../global-options.js';
+export declare const sessionsCommand: CommandModule<GlobalOptions, GlobalOptions>;
+//# sourceMappingURL=sessions.d.ts.map

package/dist/commands/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/commands/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA4B1D,eAAO,MAAM,eAAe,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,CAqIvE,CAAC"}

package/dist/commands/sessions.js

@@ -0,0 +1,122 @@
+/**
+ * Sessions command — manage admin sessions.
+ *
+ * Subcommands:
+ *   list             List active admin sessions
+ *   revoke           Revoke a specific session by ID
+ *   revoke-user      Revoke all sessions for a user
+ *
+ * @module commands/sessions
+ */
+import { createClient } from '../client-factory.js';
+import { handleError } from '../error-handler.js';
+import { printTable, printJson, success, warn, formatDate, truncate } from '../output.js';
+import { confirm } from '../prompt.js';
+// ---------------------------------------------------------------------------
+// Command
+// ---------------------------------------------------------------------------
+export const sessionsCommand = {
+    command: 'sessions',
+    describe: 'Manage admin sessions',
+    builder: (yargs) => yargs
+        // ── list ──────────────────────────────────────────────────────────
+        .command('list', 'List active admin sessions', (y) => y
+        .option('user-id', {
+        type: 'string',
+        describe: 'Filter by user ID',
+    })
+        .option('page', {
+        type: 'number',
+        describe: 'Page number',
+    })
+        .option('page-size', {
+        type: 'number',
+        describe: 'Results per page',
+    }), async (argv) => {
+        try {
+            const client = createClient(argv);
+            const result = await client.sessions.list({
+                userId: argv['user-id'],
+                page: argv.page,
+                pageSize: argv['page-size'],
+            });
+            if (argv.json) {
+                printJson(result);
+                return;
+            }
+            const sessions = result.data ?? [];
+            if (sessions.length === 0) {
+                warn('No active sessions found');
+                return;
+            }
+            printTable(['Session ID', 'User ID', 'IP', 'Last Activity', 'Expires'], sessions.map((s) => [
+                truncate(s.sessionId, 12),
+                truncate(s.userId, 12),
+                s.ipAddress ?? '—',
+                formatDate(s.lastActivityAt),
+                formatDate(s.expiresAt),
+            ]));
+            success(`${sessions.length} session(s)`);
+        }
+        catch (err) {
+            handleError(err, argv.verbose);
+        }
+    })
+        // ── revoke ────────────────────────────────────────────────────────
+        .command('revoke <id>', 'Revoke a specific session', (y) => y.positional('id', {
+        type: 'string',
+        describe: 'Session ID to revoke',
+        demandOption: true,
+    }), async (argv) => {
+        try {
+            if (!argv.force) {
+                const ok = await confirm(`Revoke session ${truncate(argv.id, 12)}?`);
+                if (!ok) {
+                    warn('Aborted');
+                    return;
+                }
+            }
+            const client = createClient(argv);
+            await client.sessions.revoke(argv.id);
+            if (argv.json) {
+                printJson({ revoked: argv.id });
+                return;
+            }
+            success(`Revoked session ${truncate(argv.id, 12)}`);
+        }
+        catch (err) {
+            handleError(err, argv.verbose);
+        }
+    })
+        // ── revoke-user ───────────────────────────────────────────────────
+        .command('revoke-user <user-id>', 'Revoke all sessions for a user', (y) => y.positional('user-id', {
+        type: 'string',
+        describe: 'User ID',
+        demandOption: true,
+    }), async (argv) => {
+        try {
+            if (!argv.force) {
+                const ok = await confirm(`Revoke all sessions for user ${truncate(argv['user-id'], 12)}?`);
+                if (!ok) {
+                    warn('Aborted');
+                    return;
+                }
+            }
+            const client = createClient(argv);
+            await client.sessions.revokeForUser(argv['user-id']);
+            if (argv.json) {
+                printJson({ revokedForUser: argv['user-id'] });
+                return;
+            }
+            success(`Revoked all sessions for user ${truncate(argv['user-id'], 12)}`);
+        }
+        catch (err) {
+            handleError(err, argv.verbose);
+        }
+    })
+        .demandCommand(1, 'Please specify a sessions subcommand: list, revoke, revoke-user'),
+    handler: () => {
+        // No-op — subcommands handle execution
+    },
+};
+//# sourceMappingURL=sessions.js.map

package/dist/commands/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../src/commands/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAoBvC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,CAAC,MAAM,eAAe,GAAgD;IAC1E,OAAO,EAAE,UAAU;IACnB,QAAQ,EAAE,uBAAuB;IACjC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;QACH,qEAAqE;SACpE,OAAO,CACN,MAAM,EACN,4BAA4B,EAC5B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;SACE,MAAM,CAAC,SAAS,EAAE;QACjB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,mBAAmB;KAC9B,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,aAAa;KACxB,CAAC;SACD,MAAM,CAAC,WAAW,EAAE;QACnB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,kBAAkB;KAC7B,CAAC,EACN,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACxC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;aAC5B,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,SAAS,CAAC,MAAM,CAAC,CAAC;gBAClB,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBACjC,OAAO;YACT,CAAC;YAED,UAAU,CACR,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,CAAC,EAC3D,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAClB,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;gBACzB,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBACtB,CAAC,CAAC,SAAS,IAAI,GAAG;gBAClB,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;gBAC5B,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;aACxB,CAAC,CACH,CAAC;YACF,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CACF;QAED,qEAAqE;SACpE,OAAO,CACN,aAAa,EACb,2BAA2B,EAC3B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE;QACjB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,sBAAsB;QAChC,YAAY,EAAE,IAAI;KACnB,CAAC,EACJ,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,kBAAkB,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBACrE,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,IAAI,CAAC,SAAS,CAAC,CAAC;oBAChB,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEtC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YAED,OAAO,CAAC,mBAAmB,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CACF;QAED,qEAAqE;SACpE,OAAO,CACN,uBAAuB,EACvB,gCAAgC,EAChC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE;QACtB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,IAAI;KACnB,CAAC,EACJ,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,gCAAgC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBAC3F,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,IAAI,CAAC,SAAS,CAAC,CAAC;oBAChB,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAErD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,SAAS,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YAED,OAAO,CAAC,iCAAiC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CACF;SACA,aAAa,CAAC,CAAC,EAAE,iEAAiE,CAAC;IACxF,OAAO,EAAE,GAAG,EAAE;QACZ,uCAAuC;IACzC,CAAC;CACF,CAAC"}

package/dist/commands/stats.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Stats command — view dashboard statistics.
+ *
+ * Subcommands:
+ *   show       Display dashboard statistics
+ *
+ * @module commands/stats
+ */
+import type { CommandModule } from 'yargs';
+import type { GlobalOptions } from '../global-options.js';
+export declare const statsCommand: CommandModule<GlobalOptions, GlobalOptions>;
+//# sourceMappingURL=stats.d.ts.map

package/dist/commands/stats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../src/commands/stats.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAS1D,eAAO,MAAM,YAAY,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,CAwCpE,CAAC"}

package/dist/commands/stats.js

@@ -0,0 +1,46 @@
+/**
+ * Stats command — view dashboard statistics.
+ *
+ * Subcommands:
+ *   show       Display dashboard statistics
+ *
+ * @module commands/stats
+ */
+import { createClient } from '../client-factory.js';
+import { handleError } from '../error-handler.js';
+import { printTable, printJson, success } from '../output.js';
+// ---------------------------------------------------------------------------
+// Command
+// ---------------------------------------------------------------------------
+export const statsCommand = {
+    command: 'stats',
+    describe: 'View dashboard statistics',
+    builder: (yargs) => yargs
+        .command('show', 'Display dashboard statistics', (y) => y, async (argv) => {
+        try {
+            const client = createClient(argv);
+            const stats = await client.stats.get();
+            if (argv.json) {
+                printJson(stats);
+                return;
+            }
+            printTable(['Metric', 'Total', 'Active'], [
+                ['Organizations', String(stats.organizations.total), String(stats.organizations.active)],
+                ['Applications', String(stats.applications.total), String(stats.applications.active)],
+                ['Clients', String(stats.clients.total), String(stats.clients.active)],
+                ['Users', String(stats.users.total), String(stats.users.active)],
+                ['Active Sessions', String(stats.activeSessionCount), '—'],
+                ['Audit Events', String(stats.auditEventCount), '—'],
+            ]);
+            success('Dashboard statistics');
+        }
+        catch (err) {
+            handleError(err, argv.verbose);
+        }
+    })
+        .demandCommand(1, 'Please specify a stats subcommand: show'),
+    handler: () => {
+        // No-op — subcommands handle execution
+    },
+};
+//# sourceMappingURL=stats.js.map

package/dist/commands/stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../src/commands/stats.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE9D,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAgD;IACvE,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,2BAA2B;IACrC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,OAAO,CACN,MAAM,EACN,8BAA8B,EAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EACR,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAEvC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,SAAS,CAAC,KAAK,CAAC,CAAC;gBACjB,OAAO;YACT,CAAC;YAED,UAAU,CACR,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,EAC7B;gBACE,CAAC,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;gBACxF,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBACrF,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACtE,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChE,CAAC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,GAAG,CAAC;gBAC1D,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,GAAG,CAAC;aACrD,CACF,CAAC;YACF,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CACF;SACA,aAAa,CAAC,CAAC,EAAE,yCAAyC,CAAC;IAChE,OAAO,EAAE,GAAG,EAAE;QACZ,uCAAuC;IACzC,CAAC;CACF,CAAC"}

package/dist/commands/user-claim.d.ts

@@ -0,0 +1,17 @@
+/**
+ * CLI user custom claim value subcommands.
+ *
+ * Manages custom claim values for users within an organization.
+ *
+ * Usage:
+ *   porta user claims list --org <org-id> <user-id>
+ *   porta user claims set --org <org-id> <user-id> --claim <claim-id> --value <value>
+ *   porta user claims remove --org <org-id> <user-id> --claim <claim-id>
+ *
+ * @module commands/user-claim
+ */
+import type { CommandModule } from 'yargs';
+import type { GlobalOptions } from '../global-options.js';
+/** User claims subcommand group — registered under `user` */
+export declare const userClaimsCommand: CommandModule<GlobalOptions, GlobalOptions>;
+//# sourceMappingURL=user-claim.d.ts.map

package/dist/commands/user-claim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-claim.d.ts","sourceRoot":"","sources":["../../src/commands/user-claim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA4B1D,6DAA6D;AAC7D,eAAO,MAAM,iBAAiB,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,CA2HzE,CAAC"}