@selleragent/sa-admin 0.3.0 → 0.4.0

package/dist/cli.js

@@ -10,6 +10,7 @@ const help_1 = require("./help");
 const provisioning_1 = require("./provisioning");
 const rollout_1 = require("./rollout");
 const project_1 = require("./project");
+const conversations_1 = require("./conversations");
 const render_1 = require("./render");
 function flagValue(args, name) {
     const index = args.indexOf(name);
@@ -57,11 +58,16 @@ function normalizeCommandTokens(tokens) {
     }
     return tokens;
 }
+function resolveProfileFlag(args) {
+    return (flagValue(args, '--profile') ??
+        flagValue(args, '--business-profile-slug') ??
+        flagValue(args, '--business-profile'));
+}
 function resolveProfileSlug(args, manifestBusinessSlug) {
-    return flagValue(args, '--business-profile-slug') ?? manifestBusinessSlug;
+    return resolveProfileFlag(args) ?? manifestBusinessSlug;
 }
 function resolveScopedBusinessSlug(args, manifestBusinessSlug, options = {}) {
-    const explicit = flagValue(args, '--business-profile-slug');
+    const explicit = resolveProfileFlag(args);
     if (explicit) {
         return explicit;
     }
@@ -169,6 +175,152 @@ function summarizeWorkspaceCapabilities(accessContext, workspaceSlug) {
         canManageTeam: isSystemAdmin || roleRank(role) >= roleRank('workspace_admin')
     };
 }
+function summarizeProfileCapabilities(input) {
+    const fallback = summarizeWorkspaceCapabilities(input.accessContext, input.workspaceSlug);
+    return {
+        ...fallback,
+        workspaceName: input.workspaceName ?? fallback.workspaceName,
+        membershipStatus: input.membershipStatus ?? fallback.membershipStatus,
+        role: input.role ?? fallback.role
+    };
+}
+function describeWorkspaceAccess(input) {
+    if (input.isSystemAdmin) {
+        return `${input.workspaceSlug} (${input.workspaceName ?? 'unknown workspace'}): full access as system admin`;
+    }
+    const capabilities = ['read'];
+    if (roleRank(input.role) >= roleRank('workspace_admin')) {
+        capabilities.push('upload', 'activate', 'manage team');
+    }
+    return `${input.workspaceSlug} (${input.workspaceName ?? 'unknown workspace'}): ${input.role ?? 'no role'} [${capabilities.join(', ')}]`;
+}
+function uniqueByWorkspaceSlug(entries) {
+    const seen = new Set();
+    const result = [];
+    for (const entry of entries) {
+        if (seen.has(entry.workspaceSlug)) {
+            continue;
+        }
+        seen.add(entry.workspaceSlug);
+        result.push(entry);
+    }
+    return result;
+}
+async function collectAccessibleProfiles(input) {
+    const explicitProfile = input.explicitProfile?.trim() || null;
+    if (input.accessContext?.isSystemAdmin) {
+        const listed = await input.auth.client.businessProfiles.list({});
+        const profiles = listed.profiles.map((profile) => ({
+            workspaceSlug: profile.businessProfileSlug,
+            workspaceName: profile.businessProfileName,
+            status: profile.status,
+            role: null,
+            membershipStatus: null
+        }));
+        const filtered = explicitProfile
+            ? profiles.filter((profile) => profile.workspaceSlug === explicitProfile)
+            : profiles;
+        if (explicitProfile && filtered.length === 0) {
+            throw new Error(`Business profile ${explicitProfile} was not found.`);
+        }
+        return filtered;
+    }
+    const memberships = uniqueByWorkspaceSlug((input.accessContext?.memberships ?? []).map((membership) => ({
+        workspaceSlug: membership.workspaceSlug,
+        workspaceName: membership.workspaceName,
+        status: 'active',
+        role: membership.role,
+        membershipStatus: membership.status
+    })));
+    const filtered = explicitProfile
+        ? memberships.filter((membership) => membership.workspaceSlug === explicitProfile)
+        : memberships;
+    if (explicitProfile && filtered.length === 0) {
+        throw new Error(`Current account does not have access to profile ${explicitProfile}.`);
+    }
+    return filtered;
+}
+async function renderProfileAccessView(input) {
+    const auth = await (0, auth_1.resolveAuthenticatedClient)({ context: input.context });
+    const whoami = await (0, auth_1.resolveWhoAmI)(input.context, {
+        preferActive: true,
+        allowAnyActiveFallback: !Boolean(flagValue(input.args, '--base-url') || flagValue(input.args, '--environment'))
+    });
+    const explicitProfile = resolveProfileFlag(input.args);
+    const profiles = await collectAccessibleProfiles({
+        auth,
+        accessContext: whoami.accessContext,
+        explicitProfile
+    });
+    (0, render_1.renderOutput)({
+        session: whoami.session,
+        authenticated: whoami.accessContext?.authenticated ?? false,
+        operator: whoami.accessContext?.operator ?? null,
+        isSystemAdmin: whoami.accessContext?.isSystemAdmin ?? false,
+        profiles: profiles.map((profile) => summarizeProfileCapabilities({
+            accessContext: whoami.accessContext,
+            workspaceSlug: profile.workspaceSlug,
+            workspaceName: profile.workspaceName,
+            membershipStatus: profile.membershipStatus,
+            role: profile.role
+        }))
+    }, input.outputMode);
+}
+async function renderProfileMembersList(input) {
+    const auth = await (0, auth_1.resolveAuthenticatedClient)({ context: input.context });
+    const whoami = await (0, auth_1.resolveWhoAmI)(input.context, {
+        preferActive: true,
+        allowAnyActiveFallback: !Boolean(flagValue(input.args, '--base-url') || flagValue(input.args, '--environment'))
+    });
+    const profiles = await collectAccessibleProfiles({
+        auth,
+        accessContext: whoami.accessContext,
+        explicitProfile: resolveProfileFlag(input.args)
+    });
+    const entries = await Promise.all(profiles.map(async (profile) => ({
+        ...(await auth.client.auth.listWorkspaceMembers({
+            workspaceSlug: profile.workspaceSlug
+        })),
+        profileAccess: summarizeProfileCapabilities({
+            accessContext: whoami.accessContext,
+            workspaceSlug: profile.workspaceSlug,
+            workspaceName: profile.workspaceName,
+            membershipStatus: profile.membershipStatus,
+            role: profile.role
+        })
+    })));
+    (0, render_1.renderOutput)({
+        authenticated: whoami.accessContext?.authenticated ?? false,
+        operator: whoami.accessContext?.operator ?? null,
+        isSystemAdmin: whoami.accessContext?.isSystemAdmin ?? false,
+        profiles: entries
+    }, input.outputMode);
+}
+function formatAuthLoginSuccess(input) {
+    const lines = [
+        `Authenticated as ${input.accessContext?.operator?.email ?? input.state.operatorEmail ?? 'unknown account'}`,
+        `Target: ${input.state.environment} (${input.state.baseUrl})`,
+        `Session store: ${input.context.authFilePath}`
+    ];
+    if (input.accessContext?.isSystemAdmin) {
+        lines.push('Platform access: system admin');
+    }
+    const memberships = input.accessContext?.memberships
+        .map((membership) => describeWorkspaceAccess({
+        workspaceSlug: membership.workspaceSlug,
+        workspaceName: membership.workspaceName,
+        role: membership.role,
+        isSystemAdmin: input.accessContext?.isSystemAdmin ?? false
+    })) ?? [];
+    if (memberships.length > 0) {
+        lines.push('Workspace access:');
+        lines.push(...memberships.map((entry) => `- ${entry}`));
+    }
+    else if (!(input.accessContext?.isSystemAdmin ?? false)) {
+        lines.push('Workspace access: none');
+    }
+    return lines.join('\n');
+}
 function parseEmployeeRole(value, fallback = 'operator') {
     const normalized = value?.trim().toLowerCase();
     if (normalized === 'admin' || normalized === 'workspace_admin') {
@@ -183,7 +335,7 @@ function parseEmployeeRole(value, fallback = 'operator') {
     throw new Error(`Unsupported role ${value}. Use employee|admin|observer.`);
 }
 function resolveAuthBusinessProfileSlug(context, args) {
-    const explicit = flagValue(args, '--business-profile-slug') ?? flagValue(args, '--business-profile');
+    const explicit = resolveProfileFlag(args);
     if (explicit) {
         return explicit;
     }
@@ -191,7 +343,7 @@ function resolveAuthBusinessProfileSlug(context, args) {
     if (manifestBusinessSlug) {
         return manifestBusinessSlug;
     }
-    throw new Error('This command requires --business-profile-slug when you are not inside a business-profile repo.');
+    throw new Error('This command requires --profile when you are not inside a business-profile repo.');
 }
 function parseDeployActions(args) {
     const values = [
@@ -207,12 +359,19 @@ function parseDeployActions(args) {
 }
 async function handleProfileCommand(input) {
     const { args, subcommand, context, outputMode } = input;
+    const repoContext = 'manifest' in context ? context : null;
     if (subcommand === 'validate') {
-        (0, render_1.renderOutput)(await (0, project_1.validateProfileProject)(context), outputMode);
+        if (!repoContext) {
+            throw new Error('profile validate requires a business-profile repo checkout.');
+        }
+        (0, render_1.renderOutput)(await (0, project_1.validateProfileProject)(repoContext), outputMode);
         return;
     }
     if (subcommand === 'upload') {
-        const prepared = await (0, project_1.buildProfileBundleForUpload)(context);
+        if (!repoContext) {
+            throw new Error('profile upload requires a business-profile repo checkout.');
+        }
+        const prepared = await (0, project_1.buildProfileBundleForUpload)(repoContext);
         const auth = await (0, auth_1.resolveAuthenticatedClient)({
             context
         });
@@ -227,8 +386,8 @@ async function handleProfileCommand(input) {
         (0, render_1.renderOutput)({
             ...result,
             authMode: auth.authMode,
-            projectRoot: context.root.rootDir,
-            manifestPath: context.root.manifestPath,
+            projectRoot: repoContext.root.rootDir,
+            manifestPath: repoContext.root.manifestPath,
             sourceRepositoryUrl: prepared.sourceRepositoryUrl,
             sourceCommitSha: prepared.sourceCommitSha,
             resolvedBaseUrl: context.baseUrl,
@@ -238,15 +397,18 @@ async function handleProfileCommand(input) {
         return;
     }
     if (subcommand === 'download') {
+        if (!repoContext) {
+            throw new Error('profile download requires a business-profile repo checkout.');
+        }
         const auth = await (0, auth_1.resolveAuthenticatedClient)({
             context
         });
-        const businessProfileSlug = resolveProfileSlug(args, context.manifest.business_slug);
+        const businessProfileSlug = resolveProfileSlug(args, repoContext.manifest.business_slug);
         const result = await auth.client.businessProfiles.downloadBundle({
             businessProfileSlug,
             versionId: flagValue(args, '--version-id')
         });
-        const outputDir = (0, node_path_1.resolve)(context.root.rootDir, flagValue(args, '--output-dir') ?? '.');
+        const outputDir = (0, node_path_1.resolve)(repoContext.root.rootDir, flagValue(args, '--output-dir') ?? '.');
         await (0, project_1.writeDownloadedProfileBundle)({
             rootDir: outputDir,
             bundle: result.bundle
@@ -260,6 +422,9 @@ async function handleProfileCommand(input) {
         return;
     }
     if (subcommand === 'activate') {
+        if (!repoContext) {
+            throw new Error('profile activate requires a business-profile repo checkout.');
+        }
         const specifier = flagValue(args, '--version') ?? flagValue(args, '--version-id');
         if (!specifier) {
             throw new Error('profile activate requires --version <latest|active|version-id>.');
@@ -267,7 +432,7 @@ async function handleProfileCommand(input) {
         const auth = await (0, auth_1.resolveAuthenticatedClient)({
             context
         });
-        const businessProfileSlug = resolveProfileSlug(args, context.manifest.business_slug);
+        const businessProfileSlug = resolveProfileSlug(args, repoContext.manifest.business_slug);
         const resolvedVersion = await resolveVersionId({
             client: auth.client,
             businessProfileSlug,
@@ -285,10 +450,13 @@ async function handleProfileCommand(input) {
         return;
     }
     if (subcommand === 'status') {
+        if (!repoContext) {
+            throw new Error('profile status requires a business-profile repo checkout.');
+        }
         const auth = await (0, auth_1.resolveAuthenticatedClient)({
             context
         });
-        const businessProfileSlug = resolveProfileSlug(args, context.manifest.business_slug);
+        const businessProfileSlug = resolveProfileSlug(args, repoContext.manifest.business_slug);
         const [profile, versions, members] = await Promise.all([
             auth.client.businessProfiles.get({
                 businessProfileSlug
@@ -310,10 +478,13 @@ async function handleProfileCommand(input) {
         return;
     }
     if (subcommand === 'versions') {
+        if (!repoContext) {
+            throw new Error('profile versions requires a business-profile repo checkout.');
+        }
         const auth = await (0, auth_1.resolveAuthenticatedClient)({
             context
         });
-        const businessProfileSlug = resolveProfileSlug(args, context.manifest.business_slug);
+        const businessProfileSlug = resolveProfileSlug(args, repoContext.manifest.business_slug);
         const versions = await auth.client.businessProfiles.listVersions({
             businessProfileSlug
         });
@@ -324,15 +495,11 @@ async function handleProfileCommand(input) {
         return;
     }
     if (subcommand === 'access') {
-        const whoami = await (0, auth_1.resolveWhoAmI)(context);
-        (0, render_1.renderOutput)({
-            session: whoami.session,
-            authenticated: whoami.accessContext?.authenticated ?? false,
-            operator: whoami.accessContext?.operator ?? null,
-            isSystemAdmin: whoami.accessContext?.isSystemAdmin ?? false,
-            businessProfileSlug: context.manifest.business_slug,
-            access: summarizeWorkspaceCapabilities(whoami.accessContext, context.manifest.business_slug)
-        }, outputMode);
+        await renderProfileAccessView({
+            args,
+            context,
+            outputMode
+        });
         return;
     }
     if (subcommand === 'members') {
@@ -340,15 +507,20 @@ async function handleProfileCommand(input) {
             context
         });
         const memberAction = args[2] ?? null;
-        const workspaceSlug = context.manifest.business_slug;
         if (memberAction === 'list') {
-            (0, render_1.renderOutput)(await auth.client.auth.listWorkspaceMembers({
-                workspaceSlug
-            }), outputMode);
+            await renderProfileMembersList({
+                args,
+                context,
+                outputMode
+            });
             return;
         }
         if (memberAction === 'add') {
+            const workspaceSlug = resolveProfileFlag(args);
             const email = flagValue(args, '--email');
+            if (!workspaceSlug) {
+                throw new Error('profile members add requires --profile.');
+            }
             if (!email) {
                 throw new Error('profile members add requires --email.');
             }
@@ -361,7 +533,11 @@ async function handleProfileCommand(input) {
             return;
         }
         if (memberAction === 'promote') {
+            const workspaceSlug = resolveProfileFlag(args);
             const email = flagValue(args, '--email');
+            if (!workspaceSlug) {
+                throw new Error('profile members promote requires --profile.');
+            }
             if (!email) {
                 throw new Error('profile members promote requires --email.');
             }
@@ -377,6 +553,49 @@ async function handleProfileCommand(input) {
     }
     throw new Error(`Unknown profile command: ${subcommand ?? '(missing)'}.`);
 }
+async function handleConversationCommand(input) {
+    const { args, subcommand, context, outputMode } = input;
+    if (subcommand === 'export') {
+        const conversationId = flagValue(args, '--conversation-id');
+        const channelKind = flagValue(args, '--channel-kind');
+        const threadRef = flagValue(args, '--thread-ref');
+        const result = await (0, conversations_1.exportConversationTranscript)({
+            context,
+            lookup: {
+                ...(conversationId ? { conversationId } : {}),
+                ...(channelKind ? { channelKind } : {}),
+                ...(threadRef ? { threadRef } : {})
+            },
+            outputFile: flagValue(args, '--output-file'),
+            transcriptId: flagValue(args, '--transcript-id'),
+            familyId: flagValue(args, '--family-id')
+        });
+        (0, render_1.renderOutput)(result, outputMode);
+        return;
+    }
+    if (subcommand === 'replay') {
+        const transcriptFile = flagValue(args, '--file');
+        if (!transcriptFile) {
+            throw new Error('conversation replay requires --file <canonical-transcript.yaml>.');
+        }
+        const channelKind = flagValue(args, '--channel-kind');
+        const result = await (0, conversations_1.replayConversationTranscript)({
+            context,
+            transcriptFile,
+            outputFile: flagValue(args, '--output-file'),
+            transcriptId: flagValue(args, '--transcript-id'),
+            familyId: flagValue(args, '--family-id'),
+            channelKind,
+            channelAccountId: flagValue(args, '--channel-account-id'),
+            threadRef: flagValue(args, '--thread-ref'),
+            externalUserId: flagValue(args, '--external-user-id'),
+            displayName: flagValue(args, '--display-name')
+        });
+        (0, render_1.renderOutput)(result, outputMode);
+        return;
+    }
+    throw new Error(`Unknown conversation command: ${subcommand ?? '(missing)'}.`);
+}
 async function handleTelegramIntegrationsCommand(input) {
     const { args, action, context, outputMode } = input;
     if (action === 'upload') {
@@ -1185,18 +1404,30 @@ async function handleAuthCommand(input) {
         allowAnyActiveFallback: !explicitTarget
     };
     if (subcommand === 'login') {
+        const positionalEmail = (() => {
+            const candidate = args[2] ?? null;
+            return candidate && !candidate.startsWith('-') ? candidate : null;
+        })();
         const result = await (0, auth_1.loginAdminSession)({
             context,
-            email: flagValue(args, '--email'),
+            email: flagValue(args, '--email') ?? positionalEmail,
             nextPath: flagValue(args, '--next-path'),
             timeoutSeconds: Number(flagValue(args, '--timeout-seconds') ?? '600'),
-            openBrowser: !hasFlag(args, '--no-browser'),
+            openBrowser: positionalEmail || flagValue(args, '--email') ? false : !hasFlag(args, '--no-browser'),
             onStatus: outputMode === 'pretty'
                 ? (message) => {
                     process.stdout.write(`${message}\n`);
                 }
                 : null
         });
+        if (outputMode === 'pretty') {
+            (0, render_1.renderOutput)(formatAuthLoginSuccess({
+                context,
+                state: result.state,
+                accessContext: result.accessContext
+            }), outputMode);
+            return;
+        }
         (0, render_1.renderOutput)({
             authMode: 'employee_login',
             state: result.state,
@@ -1260,9 +1491,7 @@ async function handleAuthCommand(input) {
             authMode: auth.authMode,
             ...(await auth.client.auth.listSessions({
                 source: flagValue(args, '--source') ?? null,
-                businessProfileSlug: flagValue(args, '--business-profile-slug') ??
-                    flagValue(args, '--business-profile') ??
-                    null,
+                businessProfileSlug: resolveProfileFlag(args),
                 includeRevoked: hasFlag(args, '--include-revoked')
             }))
         }, outputMode);
@@ -1339,14 +1568,47 @@ async function main() {
         await handleAuthCommand({ args, subcommand, context: authContext, outputMode });
         return;
     }
+    if (command === 'profile') {
+        const authOnlyProfileCommand = subcommand === 'access' ||
+            (subcommand === 'members' &&
+                (action === 'list' || action === 'add' || action === 'promote'));
+        if (authOnlyProfileCommand) {
+            try {
+                const repoAwareContext = await (0, context_1.resolveSaAdminContext)({
+                    ...(explicitCwd ? { cwd: explicitCwd } : {}),
+                    baseUrl: flagValue(args, '--base-url'),
+                    environment: flagValue(args, '--environment'),
+                    envFiles: flagValues(args, '--env-file')
+                });
+                await handleProfileCommand({ args, subcommand, context: repoAwareContext, outputMode });
+                return;
+            }
+            catch {
+                const authContext = await (0, context_1.resolveSaAdminAuthContext)({
+                    baseUrl: flagValue(args, '--base-url'),
+                    environment: flagValue(args, '--environment')
+                });
+                await handleProfileCommand({ args, subcommand, context: authContext, outputMode });
+                return;
+            }
+        }
+        const context = await (0, context_1.resolveSaAdminContext)({
+            ...(explicitCwd ? { cwd: explicitCwd } : {}),
+            baseUrl: flagValue(args, '--base-url'),
+            environment: flagValue(args, '--environment'),
+            envFiles: flagValues(args, '--env-file')
+        });
+        await handleProfileCommand({ args, subcommand, context, outputMode });
+        return;
+    }
     const context = await (0, context_1.resolveSaAdminContext)({
         ...(explicitCwd ? { cwd: explicitCwd } : {}),
         baseUrl: flagValue(args, '--base-url'),
         environment: flagValue(args, '--environment'),
         envFiles: flagValues(args, '--env-file')
     });
-    if (command === 'profile') {
-        await handleProfileCommand({ args, subcommand, context, outputMode });
+    if (command === 'conversation') {
+        await handleConversationCommand({ args, subcommand, context, outputMode });
         return;
     }
     if (command === 'db') {