@portaidentity/cli 1.7.3 → 1.8.0

package/dist/commands/export.js

@@ -0,0 +1,182 @@
+/** Conventional command for exporting selective Porta portability manifests. */
+import { access, writeFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { createClient } from '../client-factory.js';
+import { handleError } from '../error-handler.js';
+import { info, printJson, success } from '../output.js';
+import { confirm } from '../prompt.js';
+/** Manifest categories accepted by the public portability contract. */
+const CATEGORIES = [
+    'organizations',
+    'applications_authorization',
+    'users_assignments',
+    'oidc_clients',
+];
+/** Categories whose records and relationships require an application selection. */
+const APPLICATION_CATEGORIES = new Set([
+    'applications_authorization',
+    'users_assignments',
+    'oidc_clients',
+]);
+/** Application slugs rejected by the server's application domain. */
+const RESERVED_APPLICATION_SLUGS = new Set([
+    'admin',
+    'api',
+    'system',
+    'internal',
+    'default',
+    'health',
+    'status',
+]);
+/** Return whether a Node filesystem error represents an absent path. */
+function isMissingFile(error) {
+    return error instanceof Error && 'code' in error && error.code === 'ENOENT';
+}
+/** Return whether a slug follows the application identifier contract. */
+function isApplicationSlug(value) {
+    return (value.length >= 3 &&
+        value.length <= 100 &&
+        /^[a-z0-9][a-z0-9-]*[a-z0-9]$/.test(value) &&
+        !RESERVED_APPLICATION_SLUGS.has(value));
+}
+/** Reject ambiguous or incomplete export selections before any SDK request. */
+function validateSelection(arguments_) {
+    if (Boolean(arguments_.organization) === arguments_.environment) {
+        throw new Error('Choose exactly one of --organization or --environment.');
+    }
+    if (new Set(arguments_.category).size !== arguments_.category.length) {
+        throw new Error('Each --category value may be selected only once.');
+    }
+    const applications = arguments_.application ?? [];
+    if (new Set(applications).size !== applications.length) {
+        throw new Error('Each --application value may be selected only once.');
+    }
+    if (!applications.every(isApplicationSlug)) {
+        throw new Error('Every --application value must be a valid application slug.');
+    }
+    const needsApplications = arguments_.category.some((category) => APPLICATION_CATEGORIES.has(category));
+    const hasExplicitApplications = applications.length > 0;
+    if (needsApplications && hasExplicitApplications === arguments_['all-applications']) {
+        throw new Error('Choose exactly one of --application or --all-applications.');
+    }
+    if (!needsApplications && (hasExplicitApplications || arguments_['all-applications'])) {
+        throw new Error('Application selection requires an application-related category.');
+    }
+    return true;
+}
+/** Return whether the output path already exists without hiding unrelated filesystem failures. */
+async function outputExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch (error) {
+        if (isMissingFile(error))
+            return false;
+        throw error;
+    }
+}
+/** Count records in every manifest collection for concise command output. */
+function manifestCounts(manifest) {
+    return {
+        organizations: manifest.organizations.length,
+        applications: manifest.applications.length,
+        application_modules: manifest.application_modules.length,
+        roles: manifest.roles.length,
+        permissions: manifest.permissions.length,
+        claim_definitions: manifest.claim_definitions.length,
+        role_permission_mappings: manifest.role_permission_mappings.length,
+        users: manifest.users.length,
+        user_role_assignments: manifest.user_role_assignments.length,
+        user_claim_values: manifest.user_claim_values.length,
+        clients: manifest.clients.length,
+    };
+}
+/** Build the exact server request from validated command arguments. */
+function manifestRequest(arguments_) {
+    return {
+        scope: arguments_.organization
+            ? { kind: 'organization', organization_slug: arguments_.organization }
+            : { kind: 'environment' },
+        categories: arguments_.category,
+        application_selection: {
+            all_applications: arguments_['all-applications'],
+            application_slugs: arguments_.application ?? [],
+        },
+    };
+}
+/** Export selected Porta data to one local JSON file. */
+export const exportCommand = {
+    command: 'export',
+    describe: 'Export a selective Porta manifest',
+    builder: (yargs) => yargs
+        .command('manifest', 'Export a portability manifest', (command) => command
+        .option('organization', {
+        type: 'string',
+        describe: 'Export one organization by slug',
+    })
+        .option('environment', {
+        type: 'boolean',
+        default: false,
+        describe: 'Export the complete non-control-plane environment',
+    })
+        .option('category', {
+        type: 'string',
+        array: true,
+        choices: CATEGORIES,
+        demandOption: true,
+        describe: 'Manifest category to include; repeat to select more than one',
+    })
+        .option('application', {
+        type: 'string',
+        array: true,
+        describe: 'Application slug to include; repeat to select more than one',
+    })
+        .option('all-applications', {
+        type: 'boolean',
+        default: false,
+        describe: 'Include every eligible application',
+    })
+        .option('output', {
+        alias: 'o',
+        type: 'string',
+        demandOption: true,
+        describe: 'Local JSON file to write',
+    })
+        .option('yes', {
+        type: 'boolean',
+        default: false,
+        describe: 'Replace an existing output file without confirmation',
+    })
+        .check(validateSelection), async (arguments_) => {
+        try {
+            const outputPath = resolve(arguments_.output);
+            if ((await outputExists(outputPath)) && !arguments_.yes) {
+                const replace = await confirm(`Replace existing file ${outputPath}?`);
+                if (!replace)
+                    return;
+            }
+            const response = await createClient(arguments_).exports.manifest(manifestRequest(arguments_));
+            await writeFile(outputPath, JSON.stringify(response.manifest, null, 2), 'utf-8');
+            const status = {
+                path: outputPath,
+                filename: response.filename,
+                counts: manifestCounts(response.manifest),
+            };
+            if (arguments_.json) {
+                printJson(status);
+                return;
+            }
+            success(`Wrote portability manifest to ${outputPath}`);
+            for (const [category, count] of Object.entries(status.counts)) {
+                info(`${category}: ${count}`);
+            }
+        }
+        catch (error) {
+            handleError(error, arguments_.verbose);
+        }
+    })
+        .demandCommand(1, 'Please specify the export subcommand: manifest'),
+    handler: () => undefined,
+};
+//# sourceMappingURL=export.js.map

package/dist/commands/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../src/commands/export.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,uEAAuE;AACvE,MAAM,UAAU,GAAG;IACjB,eAAe;IACf,4BAA4B;IAC5B,mBAAmB;IACnB,cAAc;CACmC,CAAC;AAEpD,mFAAmF;AACnF,MAAM,sBAAsB,GAAqC,IAAI,GAAG,CAAC;IACvE,4BAA4B;IAC5B,mBAAmB;IACnB,cAAc;CACf,CAAC,CAAC;AAEH,qEAAqE;AACrE,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IAC9D,OAAO;IACP,KAAK;IACL,QAAQ;IACR,UAAU;IACV,SAAS;IACT,QAAQ;IACR,QAAQ;CACT,CAAC,CAAC;AAaH,wEAAwE;AACxE,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC9E,CAAC;AAED,yEAAyE;AACzE,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,CACL,KAAK,CAAC,MAAM,IAAI,CAAC;QACjB,KAAK,CAAC,MAAM,IAAI,GAAG;QACnB,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1C,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,iBAAiB,CAAC,UAAmC;IAC5D,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC;IAClD,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC9D,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,CACrC,CAAC;IACF,MAAM,uBAAuB,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACxD,IAAI,iBAAiB,IAAI,uBAAuB,KAAK,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,iBAAiB,IAAI,CAAC,uBAAuB,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc,CAAC,QAA6B;IACnD,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM;QAC5C,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,MAAM;QAC1C,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,CAAC,MAAM;QACxD,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;QAC5B,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM;QACxC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,CAAC,MAAM;QACpD,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB,CAAC,MAAM;QAClE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;QAC5B,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB,CAAC,MAAM;QAC5D,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,CAAC,MAAM;QACpD,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;KACjC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,SAAS,eAAe,CAAC,UAAmC;IAC1D,OAAO;QACL,KAAK,EAAE,UAAU,CAAC,YAAY;YAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,CAAC,YAAY,EAAE;YACtE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE;QAC3B,UAAU,EAAE,UAAU,CAAC,QAAQ;QAC/B,qBAAqB,EAAE;YACrB,gBAAgB,EAAE,UAAU,CAAC,kBAAkB,CAAC;YAChD,iBAAiB,EAAE,UAAU,CAAC,WAAW,IAAI,EAAE;SAChD;KACF,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,MAAM,aAAa,GAAgD;IACxE,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,mCAAmC;IAC7C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,OAAO,CACN,UAAU,EACV,+BAA+B,EAC/B,CAAC,OAAO,EAAE,EAAE,CACV,OAAO;SACJ,MAAM,CAAC,cAAc,EAAE;QACtB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,iCAAiC;KAC5C,CAAC;SACD,MAAM,CAAC,aAAa,EAAE;QACrB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,mDAAmD;KAC9D,CAAC;SACD,MAAM,CAAC,UAAU,EAAE;QAClB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,8DAA8D;KACzE,CAAC;SACD,MAAM,CAAC,aAAa,EAAE;QACrB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,6DAA6D;KACxE,CAAC;SACD,MAAM,CAAC,kBAAkB,EAAE;QAC1B,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,oCAAoC;KAC/C,CAAC;SACD,MAAM,CAAC,QAAQ,EAAE;QAChB,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,0BAA0B;KACrC,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,sDAAsD;KACjE,CAAC;SACD,KAAK,CAAC,iBAAiB,CAAC,EAC7B,KAAK,EAAE,UAAU,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;gBACxD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,UAAU,GAAG,CAAC,CAAC;gBACtE,IAAI,CAAC,OAAO;oBAAE,OAAO;YACvB,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,QAAQ,CAC9D,eAAe,CAAC,UAAU,CAAC,CAC5B,CAAC;YACF,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG;gBACb,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAC1C,CAAC;YACF,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpB,SAAS,CAAC,MAAM,CAAC,CAAC;gBAClB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,iCAAiC,UAAU,EAAE,CAAC,CAAC;YACvD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,GAAG,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CACF;SACA,aAAa,CAAC,CAAC,EAAE,gDAAgD,CAAC;IACvE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;CACzB,CAAC"}

package/dist/commands/import.d.ts

@@ -0,0 +1,6 @@
+/** Conventional command for previewing and applying Porta portability manifests. */
+import type { CommandModule } from 'yargs';
+import type { GlobalOptions } from '../global-options.js';
+/** Preview and optionally apply one local portability manifest. */
+export declare const importCommand: CommandModule<GlobalOptions, GlobalOptions>;
+//# sourceMappingURL=import.d.ts.map

package/dist/commands/import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import.d.ts","sourceRoot":"","sources":["../../src/commands/import.ts"],"names":[],"mappings":"AAAA,oFAAoF;AAKpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAG3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAuG1D,mEAAmE;AACnE,eAAO,MAAM,aAAa,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,CA0DrE,CAAC"}

package/dist/commands/import.js

@@ -0,0 +1,142 @@
+/** Conventional command for previewing and applying Porta portability manifests. */
+import { readFile, stat } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { createClient } from '../client-factory.js';
+import { handleError } from '../error-handler.js';
+import { printJson, printTable, success, warn } from '../output.js';
+import { confirm } from '../prompt.js';
+/** Largest local manifest accepted before an SDK request. */
+const MAX_MANIFEST_BYTES = 64 * 1024 * 1024;
+/** Read one bounded JSON document without exposing local filesystem details. */
+async function readManifest(path) {
+    let size;
+    try {
+        size = (await stat(path)).size;
+    }
+    catch {
+        throw new Error('Unable to read manifest file.');
+    }
+    if (size > MAX_MANIFEST_BYTES) {
+        throw new Error('Manifest file is too large; the limit is 64 MiB.');
+    }
+    let content;
+    try {
+        content = await readFile(path, 'utf-8');
+    }
+    catch {
+        throw new Error('Unable to read manifest file.');
+    }
+    try {
+        const parsed = JSON.parse(content);
+        // The SDK type describes the outgoing wire contract. The server remains the single strict
+        // validation authority, so the CLI deliberately does not maintain a second manifest schema.
+        return parsed;
+    }
+    catch {
+        throw new Error('Manifest contains invalid JSON.');
+    }
+}
+/** Convert a public natural key to stable readable text. */
+function naturalKeyText(naturalKey) {
+    return Object.entries(naturalKey)
+        .map(([key, value]) => `${key}=${value}`)
+        .join(', ');
+}
+/** Print the ordered bounded errors from one rejected operation. */
+function printRejected(result, json) {
+    if (json) {
+        printJson(result);
+    }
+    else {
+        printTable(['Entity', 'Natural key', 'Code'], result.errors.map((error) => [
+            error.entity_type,
+            naturalKeyText(error.natural_key),
+            error.code,
+        ]));
+    }
+    process.exitCode = 1;
+}
+/** Print aggregate operation counts without exposing manifest contents. */
+function printSummary(result) {
+    printTable(['Entity', 'Created', 'Updated', 'Skipped', 'Rejected'], Object.entries(result.summary).map(([entity, counts]) => [
+        entity,
+        String(counts.created),
+        String(counts.updated),
+        String(counts.skipped),
+        String(counts.rejected),
+    ]));
+}
+/** Print a committed result and each generated credential exactly once. */
+function printApplied(result, json) {
+    if (json) {
+        printJson(result);
+        return;
+    }
+    printSummary(result);
+    if (result.credentials && result.credentials.length > 0) {
+        printTable(['Client ID', 'Label', 'Expires', 'Secret'], result.credentials.map((credential) => [
+            credential.client_id,
+            credential.label,
+            credential.expires_at,
+            credential.secret,
+        ]));
+        warn('Client secrets are shown once. Store them securely now.');
+    }
+    success('Portability manifest imported');
+}
+/** Preview and optionally apply one local portability manifest. */
+export const importCommand = {
+    command: 'import',
+    describe: 'Import a Porta portability manifest',
+    builder: (yargs) => yargs
+        .command('manifest [path]', 'Preview and apply a portability manifest', (command) => command
+        .positional('path', {
+        type: 'string',
+        describe: 'Local JSON manifest file',
+    })
+        .option('mode', {
+        type: 'string',
+        choices: ['keep-existing', 'update-existing'],
+        demandOption: true,
+        describe: 'How to handle matching destination records',
+    })
+        .option('yes', {
+        type: 'boolean',
+        default: false,
+        describe: 'Apply a successful preview without confirmation',
+    })
+        .check((arguments_) => {
+        if (!arguments_.path)
+            throw new Error('Manifest path is required.');
+        return true;
+    }), async (arguments_) => {
+        try {
+            const manifest = await readManifest(resolve(arguments_.path));
+            const client = createClient(arguments_);
+            const preview = await client.imports.preview(manifest);
+            if (preview.errors.length > 0) {
+                printRejected(preview, arguments_.json);
+                return;
+            }
+            if (!arguments_.yes) {
+                if (!arguments_.json)
+                    printSummary(preview);
+                const approved = await confirm('Apply this portability plan?');
+                if (!approved)
+                    return;
+            }
+            const applied = await client.imports.apply(manifest, arguments_.mode);
+            if (applied.errors.length > 0) {
+                printRejected(applied, arguments_.json);
+                return;
+            }
+            printApplied(applied, arguments_.json);
+        }
+        catch (error) {
+            handleError(error, arguments_.verbose);
+        }
+    })
+        .demandCommand(1, 'Please specify the import subcommand: manifest'),
+    handler: () => undefined,
+};
+//# sourceMappingURL=import.js.map

package/dist/commands/import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import.js","sourceRoot":"","sources":["../../src/commands/import.ts"],"names":[],"mappings":"AAAA,oFAAoF;AAEpF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,6DAA6D;AAC7D,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAS5C,gFAAgF;AAChF,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,GAAG,kBAAkB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,0FAA0F;QAC1F,4FAA4F;QAC5F,OAAO,MAA6B,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,SAAS,cAAc,CAAC,UAA4C;IAClE,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;SACxC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,oEAAoE;AACpE,SAAS,aAAa,CAAC,MAAyB,EAAE,IAAa;IAC7D,IAAI,IAAI,EAAE,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,UAAU,CACR,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,EACjC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC3B,KAAK,CAAC,WAAW;YACjB,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC;YACjC,KAAK,CAAC,IAAI;SACX,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,MAAyB;IAC7C,UAAU,CACR,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,EACvD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;QACvD,MAAM;QACN,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACtB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;KACxB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,MAAyB,EAAE,IAAa;IAC5D,IAAI,IAAI,EAAE,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,CAAC;QAClB,OAAO;IACT,CAAC;IACD,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,UAAU,CACR,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,EAC3C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;YACrC,UAAU,CAAC,SAAS;YACpB,UAAU,CAAC,KAAK;YAChB,UAAU,CAAC,UAAU;YACrB,UAAU,CAAC,MAAM;SAClB,CAAC,CACH,CAAC;QACF,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAC3C,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,aAAa,GAAgD;IACxE,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,qCAAqC;IAC/C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,OAAO,CACN,iBAAiB,EACjB,0CAA0C,EAC1C,CAAC,OAAO,EAAE,EAAE,CACV,OAAO;SACJ,UAAU,CAAC,MAAM,EAAE;QAClB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,0BAA0B;KACrC,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,CAAC,eAAe,EAAE,iBAAiB,CAAU;QACtD,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,4CAA4C;KACvD,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,iDAAiD;KAC5D,CAAC;SACD,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE;QACpB,IAAI,CAAC,UAAU,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,EACN,KAAK,EAAE,UAAU,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;gBACpB,IAAI,CAAC,UAAU,CAAC,IAAI;oBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAC;gBAC/D,IAAI,CAAC,QAAQ;oBAAE,OAAO;YACxB,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;YACtE,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CACF;SACA,aAAa,CAAC,CAAC,EAAE,gDAAgD,CAAC;IACvE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;CACzB,CAAC"}

package/dist/commands/keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/commands/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAgB1D,eAAO,MAAM,WAAW,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,CAoGnE,CAAC"}
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/commands/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAsB1D,eAAO,MAAM,WAAW,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,CAwGnE,CAAC"}

package/dist/commands/keys.js

@@ -10,8 +10,13 @@
  */
 import { createClient } from '../client-factory.js';
 import { handleError } from '../error-handler.js';
-import { printTable, printJson, success, warn, formatDate, truncate } from '../output.js';
+import { printTable, printJson, success, warn, info, formatDate, truncate } from '../output.js';
 import { confirm } from '../prompt.js';
+/** Print the process-restart boundary that activates a committed signing-key change. */
+function printKeyActivationGuidance() {
+    info('Restart every running Porta instance.');
+    info('After restarting, run `porta keys list` and verify the committed active signing key.');
+}
 // ---------------------------------------------------------------------------
 // Command
 // ---------------------------------------------------------------------------
@@ -55,7 +60,8 @@ export const keysCommand = {
                 printJson(key);
                 return;
             }
-            success(`Generated signing key: ${key.kid} (${truncate(key.id, 12)})`);
+            success(`Added another active signing key without retiring existing active keys: ${key.kid} (${truncate(key.id, 12)})`);
+            printKeyActivationGuidance();
         }
         catch (err) {
             handleError(err, argv.verbose);
@@ -65,7 +71,7 @@ export const keysCommand = {
         .command('rotate', 'Rotate signing keys (generate new + retire current active)', (y) => y, async (argv) => {
         try {
             if (!argv.force) {
-                const ok = await confirm('Rotate signing keys? This will retire the current active key.');
+                const ok = await confirm('Rotate signing keys? This will retire every active key and create one new active key.');
                 if (!ok) {
                     warn('Aborted');
                     return;
@@ -77,7 +83,8 @@ export const keysCommand = {
                 printJson(key);
                 return;
             }
-            success(`Rotated signing keys. New active key: ${key.kid}`);
+            success(`Retired every active key and created one new active key: ${key.kid}`);
+            printKeyActivationGuidance();
         }
         catch (err) {
             handleError(err, argv.verbose);

package/dist/commands/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/commands/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAQvC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,CAAC,MAAM,WAAW,GAAgD;IACtE,OAAO,EAAE,MAAM;IACf,QAAQ,EAAE,qBAAqB;IAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;QACH,qEAAqE;SACpE,OAAO,CACN,MAAM,EACN,uBAAuB,EACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EACR,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAEtC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YAED,UAAU,CACR,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAC1D,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACd,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBACjC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvB,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;aACxB,CAAC,CACH,CAAC;YACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,iBAAiB,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CACF;QAED,qEAAqE;SACpE,OAAO,CACN,UAAU,EACV,+BAA+B,EAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EACR,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAEzC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,SAAS,CAAC,GAAG,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YAED,OAAO,CAAC,0BAA0B,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CACF;QAED,qEAAqE;SACpE,OAAO,CACN,QAAQ,EACR,4DAA4D,EAC5D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EACR,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,EAAE,GAAG,MAAM,OAAO,CACtB,+DAA+D,CAChE,CAAC;gBACF,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,IAAI,CAAC,SAAS,CAAC,CAAC;oBAChB,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAEvC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,SAAS,CAAC,GAAG,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YAED,OAAO,CAAC,yCAAyC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CACF;SACA,aAAa,CAAC,CAAC,EAAE,0DAA0D,CAAC;IACjF,OAAO,EAAE,GAAG,EAAE;QACZ,uCAAuC;IACzC,CAAC;CACF,CAAC"}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/commands/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAQvC,wFAAwF;AACxF,SAAS,0BAA0B;IACjC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAC9C,IAAI,CAAC,sFAAsF,CAAC,CAAC;AAC/F,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,CAAC,MAAM,WAAW,GAAgD;IACtE,OAAO,EAAE,MAAM;IACf,QAAQ,EAAE,qBAAqB;IAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;QACH,qEAAqE;SACpE,OAAO,CACN,MAAM,EACN,uBAAuB,EACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EACR,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAEtC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YAED,UAAU,CACR,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAC1D,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACd,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBACjC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvB,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;aACxB,CAAC,CACH,CAAC;YACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,iBAAiB,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CACF;QAED,qEAAqE;SACpE,OAAO,CACN,UAAU,EACV,+BAA+B,EAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EACR,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAEzC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,SAAS,CAAC,GAAG,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YAED,OAAO,CACL,2EAA2E,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAC/G,CAAC;YACF,0BAA0B,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CACF;QAED,qEAAqE;SACpE,OAAO,CACN,QAAQ,EACR,4DAA4D,EAC5D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EACR,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,EAAE,GAAG,MAAM,OAAO,CACtB,uFAAuF,CACxF,CAAC;gBACF,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,IAAI,CAAC,SAAS,CAAC,CAAC;oBAChB,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAEvC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,SAAS,CAAC,GAAG,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YAED,OAAO,CAAC,4DAA4D,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/E,0BAA0B,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CACF;SACA,aAAa,CAAC,CAAC,EAAE,0DAA0D,CAAC;IACjF,OAAO,EAAE,GAAG,EAAE;QACZ,uCAAuC;IACzC,CAAC;CACF,CAAC"}

package/dist/commands/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAiB1D,4CAA4C;AAC5C,UAAU,YAAa,SAAQ,aAAa;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;CACvB;AAMD;;;;;GAKG;AACH,eAAO,MAAM,YAAY,EAAE,aAAa,CAAC,aAAa,EAAE,YAAY,CA4CnE,CAAC"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAoB1D,4CAA4C;AAC5C,UAAU,YAAa,SAAQ,aAAa;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;CACvB;AAMD;;;;;GAKG;AACH,eAAO,MAAM,YAAY,EAAE,aAAa,CAAC,aAAa,EAAE,YAAY,CA6DnE,CAAC"}

package/dist/commands/login.js

@@ -17,10 +17,13 @@
  *
  * @module commands/login
  */
-import { executeBrowserFlow } from '../auth/browser-flow.js';
-import { saveCredentials } from '../credential-store.js';
+import { authenticateCliSession } from '../auth/login-coordinator.js';
+import { isContainerized } from '../auth/callback-server.js';
+import { loadCredentials, saveCredentialsDurably } from '../credential-store.js';
 import { success } from '../output.js';
 import { handleError } from '../error-handler.js';
+import { confirm, question } from '../prompt.js';
+import { normalizeServerOrigin } from '../global-options.js';
 // ---------------------------------------------------------------------------
 // Constants
 // ---------------------------------------------------------------------------
@@ -59,15 +62,26 @@ export const loginCommand = {
             if (argv.insecure) {
                 process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
             }
-            // Execute the OIDC browser flow
-            const result = await executeBrowserFlow({
-                server: argv.server,
+            const server = normalizeServerOrigin(argv.server);
+            const current = loadCredentials();
+            const controller = new AbortController();
+            const result = await authenticateCliSession({
+                server,
                 clientId: argv['client-id'],
-                noBrowser: argv['no-browser'],
-            });
-            // Store credentials to disk
-            saveCredentials(result);
-            success(`Logged in as ${result.userInfo.email || result.userInfo.sub}`);
+                noBrowser: argv['no-browser'] || isContainerized(),
+                currentServer: current ? normalizeServerOrigin(current.server) : undefined,
+                persistCredentials: async (credentials) => saveCredentialsDurably(credentials, controller.signal),
+            }, {
+                presentAuthorizationUrl: async (url) => {
+                    console.log('Open this URL in your browser to log in:\n');
+                    console.log(`  ${url.toString()}\n`);
+                },
+                requestManualCallback: async (signal) => question('Paste the callback URL: ', signal),
+                confirmCredentialReplacement: async (currentServer, nextServer, signal) => confirm(`Replace credentials for ${currentServer.origin} with ${nextServer.origin}?`, signal),
+            }, { signal: controller.signal });
+            if (result.status === 'cancelled')
+                return;
+            success(`Logged in as ${result.identity.email || result.identity.sub}`);
             process.exit(0);
         }
         catch (err) {

package/dist/commands/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,qDAAqD;AACrD,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAalD,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAA+C;IACtE,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,kCAAkC;IAE5C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,QAAQ,EAAE;QAChB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,cAAc;KACxB,CAAC;SACD,MAAM,CAAC,WAAW,EAAE;QACnB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,iEAAiE;KAC5E,CAAC;SACD,MAAM,CAAC,YAAY,EAAE;QACpB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,4CAA4C;QACtD,OAAO,EAAE,KAAK;KACf,CAAC;IAEN,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,CAAC;YACH,+CAA+C;YAC/C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAC;YACjD,CAAC;YAED,gCAAgC;YAChC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;gBACtC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;aAC9B,CAAC,CAAC;YAEH,4BAA4B;YAC5B,eAAe,CAAC,MAAM,CAAC,CAAC;YAExB,OAAO,CAAC,gBAAgB,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,qDAAqD;AACrD,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAalD,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAA+C;IACtE,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,kCAAkC;IAE5C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,QAAQ,EAAE;QAChB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,cAAc;KACxB,CAAC;SACD,MAAM,CAAC,WAAW,EAAE;QACnB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,iEAAiE;KAC5E,CAAC;SACD,MAAM,CAAC,YAAY,EAAE;QACpB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,4CAA4C;QACtD,OAAO,EAAE,KAAK;KACf,CAAC;IAEN,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,CAAC;YACH,+CAA+C;YAC/C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAC;YACjD,CAAC;YAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC;gBACE,MAAM;gBACN,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,eAAe,EAAE;gBAClD,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC1E,kBAAkB,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CACxC,sBAAsB,CAAC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC;aACzD,EACD;gBACE,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBACrC,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;oBAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACvC,CAAC;gBACD,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;gBACrF,4BAA4B,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,CACxE,OAAO,CACL,2BAA2B,aAAa,CAAC,MAAM,SAAS,UAAU,CAAC,MAAM,GAAG,EAC5E,MAAM,CACP;aACJ,EACD,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAC9B,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO;YAC1C,OAAO,CAAC,gBAAgB,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/commands/org.d.ts

@@ -6,16 +6,14 @@
  *
  * Usage:
  *   porta org create --name "Acme Corp" [--slug acme-corp] [--locale en]
- *   porta org list [--status active|suspended|archived] [--page 1] [--page-size 20]
+ *   porta org list [--status active|suspended] [--page 1] [--page-size 20]
  *   porta org show <id-or-slug>
  *   porta org update <id-or-slug> --name "New Name" [--default-locale fr]
  *   porta org suspend <id-or-slug>
  *   porta org activate <id-or-slug>
- *   porta org archive <id-or-slug>
- *   porta org restore <id-or-slug>
+ *   porta org delete <id-or-slug>
  *   porta org history <id-or-slug>
  *   porta org branding <id-or-slug> --primary-color "#..." [--company-name "..."]
- *   porta org destroy <id-or-slug>
  *
  * @module commands/org
  */

package/dist/commands/org.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../../src/commands/org.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA8C1D,sEAAsE;AACtE,eAAO,MAAM,UAAU,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,CAudlE,CAAC"}
+{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../../src/commands/org.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA8C1D,sEAAsE;AACtE,eAAO,MAAM,UAAU,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,CAoYlE,CAAC"}