@portaidentity/cli 1.7.3 → 1.9.0

package/dist/output.js

@@ -13,6 +13,25 @@
  */
 import Table from 'cli-table3';
 import chalk from 'chalk';
+/**
+ * Replace terminal control characters before rendering untrusted text.
+ *
+ * JSON output remains untouched because `JSON.stringify` escapes controls for machine consumers.
+ * Human output uses this boundary to prevent stored names or labels from emitting terminal escape
+ * sequences, changing the screen, or writing to the clipboard.
+ *
+ * @param value - Text that may originate from the server or command input
+ * @returns Printable text with C0, DEL, and C1 controls replaced
+ */
+export function sanitizeTerminalText(value) {
+    return Array.from(value, (character) => {
+        const codePoint = character.codePointAt(0);
+        return codePoint !== undefined &&
+            (codePoint <= 0x1f || (codePoint >= 0x7f && codePoint <= 0x9f))
+            ? '\ufffd'
+            : character;
+    }).join('');
+}
 /**
  * Formats data as a table and prints to stdout.
  *
@@ -27,9 +46,9 @@ import chalk from 'chalk';
  */
 export function printTable(headers, rows) {
     const table = new Table({
-        head: headers.map((h) => chalk.bold(h)),
+        head: headers.map((header) => chalk.bold(sanitizeTerminalText(header))),
     });
-    rows.forEach((row) => table.push(row));
+    rows.forEach((row) => table.push(row.map(sanitizeTerminalText)));
     console.log(table.toString());
 }
 /**
@@ -49,7 +68,7 @@ export function printJson(data) {
  * @param message - The success message
  */
 export function success(message) {
-    console.log(chalk.green(`✓ ${message}`));
+    console.log(chalk.green(`✓ ${sanitizeTerminalText(message)}`));
 }
 /**
  * Prints a warning message in yellow to stderr.
@@ -57,7 +76,7 @@ export function success(message) {
  * @param message - The warning message
  */
 export function warn(message) {
-    console.error(chalk.yellow(`⚠ ${message}`));
+    console.error(chalk.yellow(`⚠ ${sanitizeTerminalText(message)}`));
 }
 /**
  * Prints an error message in red to stderr.
@@ -65,7 +84,7 @@ export function warn(message) {
  * @param message - The error message
  */
 export function error(message) {
-    console.error(chalk.red(`✗ ${message}`));
+    console.error(chalk.red(`✗ ${sanitizeTerminalText(message)}`));
 }
 /**
  * Prints an info message in blue.
@@ -73,7 +92,7 @@ export function error(message) {
  * @param message - The info message
  */
 export function info(message) {
-    console.log(chalk.blue(`ℹ ${message}`));
+    console.log(chalk.blue(`ℹ ${sanitizeTerminalText(message)}`));
 }
 /**
  * Formats a date string or Date object for display.

package/dist/output.js.map

@@ -1 +1 @@
-{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CAAC,OAAiB,EAAE,IAAgB;IAC5D,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACxC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;AAChC,CAAC;AAGD;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,OAAe;IACnC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,IAAsC;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,CAAC,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAM,GAAG,EAAE;IAC/C,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,GAAG,CAAC;IACrC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,EAAE;QACrC,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,SAAS,KAAK,SAAS;YAC5B,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC,CAAC;YAC/D,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CAAC,OAAiB,EAAE,IAAgB;IAC5D,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;KACxE,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,OAAe;IACnC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,IAAsC;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,CAAC,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAM,GAAG,EAAE;IAC/C,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,GAAG,CAAC;IACrC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;AAC1C,CAAC"}

package/dist/prompt.d.ts

@@ -17,7 +17,7 @@
  * @param message - The confirmation question
  * @returns true if the user answers 'y' or 'yes'
  */
-export declare function confirm(message: string): Promise<boolean>;
+export declare function confirm(message: string, signal?: AbortSignal): Promise<boolean>;
 /**
  * Asks the user for type-to-confirm input.
  *
@@ -35,7 +35,7 @@ export declare function confirmTyped(message: string, expected: string): Promise
  * @param prompt - The prompt message to display
  * @returns The user's input string
  */
-export declare function question(prompt: string): Promise<string>;
+export declare function question(prompt: string, signal?: AbortSignal): Promise<string>;
 /**
  * Prompts the user for password input (hidden).
  *

package/dist/prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH;;;;;;;;GAQG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG/D;AAED;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGtF;AAMD;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAY9D;AAED;;;;;;;;;GASG;AACH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAyB9D"}
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH;;;;;;;;GAQG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAGrF;AAED;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGtF;AAMD;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BpF;AAED;;;;;;;;;GASG;AACH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA0B9D"}

package/dist/prompt.js

@@ -9,6 +9,7 @@
  * @module prompt
  */
 import { createInterface } from 'node:readline';
+import { sanitizeTerminalText } from './output.js';
 // ---------------------------------------------------------------------------
 // Confirmation Prompt
 // ---------------------------------------------------------------------------
@@ -21,8 +22,8 @@ import { createInterface } from 'node:readline';
  * @param message - The confirmation question
  * @returns true if the user answers 'y' or 'yes'
  */
-export async function confirm(message) {
-    const answer = await question(`${message} [y/N] `);
+export async function confirm(message, signal) {
+    const answer = await question(`${message} [y/N] `, signal);
     return answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes';
 }
 /**
@@ -48,13 +49,31 @@ export async function confirmTyped(message, expected) {
  * @param prompt - The prompt message to display
  * @returns The user's input string
  */
-export async function question(prompt) {
+export async function question(prompt, signal) {
+    const safePrompt = sanitizeTerminalText(prompt);
     const rl = createInterface({
         input: process.stdin,
         output: process.stderr, // Prompt on stderr so stdout stays clean for piping
     });
-    return new Promise((resolve) => {
-        rl.question(prompt, (answer) => {
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const abort = () => {
+            if (settled)
+                return;
+            settled = true;
+            rl.close();
+            reject(new DOMException('The operation was aborted', 'AbortError'));
+        };
+        if (signal?.aborted) {
+            abort();
+            return;
+        }
+        signal?.addEventListener('abort', abort, { once: true });
+        rl.question(safePrompt, (answer) => {
+            if (settled)
+                return;
+            settled = true;
+            signal?.removeEventListener('abort', abort);
             rl.close();
             resolve(answer.trim());
         });
@@ -71,6 +90,7 @@ export async function question(prompt) {
  * @returns The entered password string
  */
 export async function password(prompt) {
+    const safePrompt = sanitizeTerminalText(prompt);
     const rl = createInterface({
         input: process.stdin,
         output: process.stderr,
@@ -78,7 +98,7 @@ export async function password(prompt) {
     // Suppress echoing of password characters
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     rl._writeToOutput = function _writeToOutput(str) {
-        if (str.includes(prompt)) {
+        if (str.includes(safePrompt)) {
             // Show the prompt itself
             process.stderr.write(str);
         }
@@ -88,7 +108,7 @@ export async function password(prompt) {
         }
     };
     return new Promise((resolve) => {
-        rl.question(prompt, (answer) => {
+        rl.question(safePrompt, (answer) => {
             process.stderr.write('\n'); // New line after hidden input
             rl.close();
             resolve(answer);

package/dist/prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAe;IAC3C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACxE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,QAAgB;IAClE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IAC9C,OAAO,MAAM,KAAK,QAAQ,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAc;IAC3C,MAAM,EAAE,GAAG,eAAe,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,oDAAoD;KAC7E,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACrC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;YAC7B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAc;IAC3C,MAAM,EAAE,GAAG,eAAe,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,0CAA0C;IAC1C,8DAA8D;IAC7D,EAAU,CAAC,cAAc,GAAG,SAAS,cAAc,CAAC,GAAW;QAC9D,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,yBAAyB;YACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,0CAA0C;YAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACrC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B;YAC1D,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAe,EAAE,MAAoB;IACjE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,OAAO,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACxE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,QAAgB;IAClE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IAC9C,OAAO,MAAM,KAAK,QAAQ,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,MAAoB;IACjE,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,eAAe,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,oDAAoD;KAC7E,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,GAAS,EAAE;YACvB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC;QACF,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,KAAK,EAAE,CAAC;YACR,OAAO;QACT,CAAC;QACD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE;YACjC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAc;IAC3C,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,eAAe,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,0CAA0C;IAC1C,8DAA8D;IAC7D,EAAU,CAAC,cAAc,GAAG,SAAS,cAAc,CAAC,GAAW;QAC9D,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,yBAAyB;YACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,0CAA0C;YAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACrC,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B;YAC1D,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@portaidentity/cli",
-  "version": "1.7.3",
+  "version": "1.9.0",
   "description": "Standalone CLI for the Porta Identity Platform",
   "type": "module",
   "bin": {
@@ -15,6 +15,7 @@
   "scripts": {
     "build": "../../node_modules/@typescript/native/bin/tsc",
     "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
     "test:watch": "vitest",
     "lint": "eslint 'src/**/*.ts' 'tests/**/*.ts'",
     "typecheck": "../../node_modules/@typescript/native/bin/tsc --noEmit",
@@ -22,12 +23,15 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@portaidentity/sdk": "1.7.3",
+    "@jsvision/core": "1.7.1",
+    "@jsvision/files": "1.7.1",
+    "@jsvision/ui": "1.7.1",
+    "@portaidentity/sdk": "1.9.0",
     "chalk": "^6.0.0",
     "cli-table3": "^0.6.5",
+    "fs-ext-extra-prebuilt": "2.2.13",
     "jose": "^6.2.8",
     "open": "^11.0.0",
-    "yaml": "^2.9.0",
     "yargs": "^18.1.0"
   },
   "devDependencies": {

package/dist/commands/gui.d.ts

@@ -1,21 +0,0 @@
-/**
- * `porta gui` command — Launch the standalone Admin GUI.
- *
- * Dynamically imports `@portaidentity/admin-gui` and calls `startServer()`.
- * If the package is not installed, prints install instructions.
- *
- * The admin-gui package is NOT a dependency of the CLI — it is discovered
- * at runtime via dynamic import. This avoids bloating the CLI with
- * React + FluentUI dependencies.
- *
- * @module commands/gui
- */
-import type { CommandModule } from 'yargs';
-import type { GlobalOptions } from '../global-options.js';
-interface GuiOptions extends GlobalOptions {
-    port?: number;
-    'no-open'?: boolean;
-}
-export declare const guiCommand: CommandModule<GlobalOptions, GuiOptions>;
-export {};
-//# sourceMappingURL=gui.d.ts.map

package/dist/commands/gui.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gui.d.ts","sourceRoot":"","sources":["../../src/commands/gui.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,UAAU,UAAW,SAAQ,aAAa;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,eAAO,MAAM,UAAU,EAAE,aAAa,CAAC,aAAa,EAAE,UAAU,CAqD/D,CAAC"}

package/dist/commands/gui.js

@@ -1,67 +0,0 @@
-/**
- * `porta gui` command — Launch the standalone Admin GUI.
- *
- * Dynamically imports `@portaidentity/admin-gui` and calls `startServer()`.
- * If the package is not installed, prints install instructions.
- *
- * The admin-gui package is NOT a dependency of the CLI — it is discovered
- * at runtime via dynamic import. This avoids bloating the CLI with
- * React + FluentUI dependencies.
- *
- * @module commands/gui
- */
-import { error, warn } from '../output.js';
-export const guiCommand = {
-    command: 'gui',
-    describe: 'Launch the Porta Admin GUI in your browser',
-    builder: (yargs) => yargs
-        .option('port', {
-        type: 'number',
-        describe: 'BFF listen port',
-        default: 4002,
-    })
-        .option('no-open', {
-        type: 'boolean',
-        describe: 'Do not open browser on startup',
-        default: false,
-    }),
-    handler: async (argv) => {
-        try {
-            // Dynamic import — admin-gui is an optional peer, not a CLI dependency.
-            // Use a variable so TypeScript won't resolve the module at compile time
-            // (the package may not be installed or built during CLI typecheck).
-            const guiModule = '@portaidentity/admin-gui';
-            const adminGui = (await import(/* webpackIgnore: true */ guiModule));
-            await adminGui.startServer({
-                server: argv.server,
-                port: argv.port,
-                open: !argv['no-open'],
-                insecure: argv.insecure,
-            });
-        }
-        catch (err) {
-            // Check if it's a module-not-found error
-            if (isModuleNotFound(err)) {
-                warn('The Porta Admin GUI package is not installed.\n');
-                console.log('  Install it with:\n');
-                console.log('    npm install -g @portaidentity/admin-gui\n');
-                console.log('  Or run it directly with:\n');
-                console.log('    npx @portaidentity/admin-gui --server <porta-server-url>\n');
-                process.exit(1);
-            }
-            // Other error — rethrow
-            error(err instanceof Error ? err.message : String(err));
-            process.exit(1);
-        }
-    },
-};
-/**
- * Check if an error is a module-not-found error for @portaidentity/admin-gui.
- */
-function isModuleNotFound(err) {
-    if (!(err instanceof Error))
-        return false;
-    const code = err.code;
-    return code === 'ERR_MODULE_NOT_FOUND' && err.message.includes('@portaidentity/admin-gui');
-}
-//# sourceMappingURL=gui.js.map

package/dist/commands/gui.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gui.js","sourceRoot":"","sources":["../../src/commands/gui.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAO3C,MAAM,CAAC,MAAM,UAAU,GAA6C;IAClE,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,4CAA4C;IACtD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,iBAAiB;QAC3B,OAAO,EAAE,IAAI;KACd,CAAC;SACD,MAAM,CAAC,SAAS,EAAE;QACjB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,gCAAgC;QAC1C,OAAO,EAAE,KAAK;KACf,CAAC;IAEN,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,CAAC;YACH,wEAAwE;YACxE,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,SAAS,GAAG,0BAA0B,CAAC;YAC7C,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAOlE,CAAC;YAEF,MAAM,QAAQ,CAAC,WAAW,CAAC;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;gBACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,yCAAyC;YACzC,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,iDAAiD,CAAC,CAAC;gBACxD,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;gBAC7D,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;gBAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,wBAAwB;YACxB,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;IACjD,OAAO,IAAI,KAAK,sBAAsB,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;AAC7F,CAAC"}

package/dist/commands/provision.d.ts

@@ -1,47 +0,0 @@
-/**
- * Provision command — declarative tenant infrastructure from YAML/JSON.
- *
- * Reads a YAML (or JSON) provisioning file with a nested structure
- * (organizations → applications → clients/roles/permissions/claims),
- * transforms it into the flat import manifest format, and sends it
- * to the import API via the SDK. All entities are created in a single
- * transaction.
- *
- * Supports three modes:
- *   merge (default): skip existing entities, create new
- *   overwrite:       update existing entities, create new
- *   dry-run:         preview what would change without applying
- *
- * Usage:
- *   porta provision --file infrastructure.yaml
- *   porta provision --file infrastructure.yaml --dry-run
- *   porta provision --file infrastructure.yaml --mode overwrite
- *   porta provision --file infrastructure.yaml --json
- *
- * @module commands/provision
- */
-import type { CommandModule } from 'yargs';
-import type { GlobalOptions } from '../global-options.js';
-/**
- * Parse a duration string into a future Date.
- *
- * Supports: Nd (days), Nm (months), Ny (years), Nh (hours).
- * Examples: "90d" (90 days), "6m" (6 months), "1y" (1 year), "24h" (24 hours).
- */
-export declare function parseDuration(duration: string): Date;
-/**
- * Read and parse a provisioning file from disk or stdin.
- *
- * Detects format by file extension (.yaml/.yml for YAML, .json for JSON).
- * When reading from `/dev/stdin` (no extension), defaults to YAML parsing
- * which also handles valid JSON since YAML is a superset of JSON.
- */
-export declare function parseProvisioningFile(filePath: string): unknown;
-interface ProvisionOptions extends GlobalOptions {
-    file: string;
-    mode: 'merge' | 'overwrite';
-    'dry-run'?: boolean;
-}
-export declare const provisionCommand: CommandModule<GlobalOptions, ProvisionOptions>;
-export {};
-//# sourceMappingURL=provision.d.ts.map

package/dist/commands/provision.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../../src/commands/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA4B1D;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CA2BpD;AAMD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAkB/D;AA+gBD,UAAU,gBAAiB,SAAQ,aAAa;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,GAAG,WAAW,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,eAAO,MAAM,gBAAgB,EAAE,aAAa,CAAC,aAAa,EAAE,gBAAgB,CAyF3E,CAAC"}