@tempoxyz/id 0.0.0-stage → 0.0.1

package/dist/cli/commands/admin/apps/index.js

@@ -0,0 +1,14 @@
+/** `tempo-id admin apps`: the commands that register and change OAuth apps. @module */
+import { Cli } from 'incur';
+export default Cli.command({
+    description: 'Manage OAuth apps, their redirect URIs, and their scopes.',
+    // Hidden from MCP clients, as is every `admin apps` command, since the group returns client secrets.
+    mcp: false,
+    run(c) {
+        return c.error({
+            code: 'missing_command',
+            message: 'Missing command. Run `tempo-id admin apps --help` to list the commands.',
+        });
+    },
+});
+//# sourceMappingURL=index.js.map

package/dist/cli/commands/admin/apps/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/apps/index.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAE3B,eAAe,GAAG,CAAC,OAAO,CAAC;IACzB,WAAW,EAAE,2DAA2D;IACxE,qGAAqG;IACrG,GAAG,EAAE,KAAK;IACV,GAAG,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,KAAK,CAAC;YACb,IAAI,EAAE,iBAAiB;YACvB,OAAO,EACL,yEAAyE;SAC5E,CAAC,CAAA;IACJ,CAAC;CACF,CAAC,CAAA"}

package/dist/cli/commands/admin/apps/list.d.ts

@@ -0,0 +1,10 @@
+/** `tempo-id admin apps list`: lists every OAuth app, oldest first. @module */
+import { Cli } from 'incur';
+declare const _default: Cli.FileCommand<undefined, import("zod").ZodObject<{
+    DATABASE_SCHEMA: import("zod").ZodOptional<import("zod").ZodString>;
+    DATABASE_URL: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    databaseUrl: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, undefined>;
+export default _default;
+//# sourceMappingURL=list.d.ts.map

package/dist/cli/commands/admin/apps/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/apps/list.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA"}

package/dist/cli/commands/admin/apps/list.js

@@ -0,0 +1,26 @@
+/** `tempo-id admin apps list`: lists every OAuth app, oldest first. @module */
+import { Cli } from 'incur';
+import * as Admin from '../../../Admin.js';
+export default Cli.command({
+    description: 'List every OAuth app, oldest first.',
+    env: Admin.env,
+    // Hidden from MCP clients, as is every `admin apps` command, since the group returns client secrets.
+    mcp: false,
+    options: Admin.options,
+    async run(c) {
+        const connectionString = c.options.databaseUrl ?? c.env.DATABASE_URL;
+        if (!connectionString)
+            return c.error(Admin.missingDatabaseUrl);
+        const Apps = await Admin.loadApps();
+        if (!Apps)
+            return c.error(Admin.missingPeers);
+        const client = Apps.connect({ connectionString });
+        try {
+            return { apps: await Apps.Apps.list(client.db) };
+        }
+        finally {
+            await client.end();
+        }
+    },
+});
+//# sourceMappingURL=list.js.map

package/dist/cli/commands/admin/apps/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/apps/list.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAC3B,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAE1C,eAAe,GAAG,CAAC,OAAO,CAAC;IACzB,WAAW,EAAE,qCAAqC;IAClD,GAAG,EAAE,KAAK,CAAC,GAAG;IACd,qGAAqG;IACrG,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,KAAK,CAAC,OAAO;IACtB,KAAK,CAAC,GAAG,CAAC,CAAC;QACT,MAAM,gBAAgB,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAA;QACpE,IAAI,CAAC,gBAAgB;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QAE/D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAA;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAE7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;QAClD,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAA;QACpB,CAAC;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cli/commands/admin/apps/rotate-secret.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `tempo-id admin apps rotate-secret`: replaces an OAuth app's client secret. The earlier secret
+ * stops working at once, and the output holds the new one.
+ * @module
+ */
+import { Cli, z } from 'incur';
+declare const _default: Cli.FileCommand<z.ZodObject<{
+    clientId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    DATABASE_SCHEMA: z.ZodOptional<z.ZodString>;
+    DATABASE_URL: z.ZodOptional<z.ZodString>;
+    TEMPO_ID_CLIENT_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    databaseUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, undefined>;
+export default _default;
+//# sourceMappingURL=rotate-secret.d.ts.map

package/dist/cli/commands/admin/apps/rotate-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotate-secret.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/apps/rotate-secret.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,OAAO,CAAA"}

package/dist/cli/commands/admin/apps/rotate-secret.js

@@ -0,0 +1,47 @@
+/**
+ * `tempo-id admin apps rotate-secret`: replaces an OAuth app's client secret. The earlier secret
+ * stops working at once, and the output holds the new one.
+ * @module
+ */
+import { Cli, z } from 'incur';
+import * as Admin from '../../../Admin.js';
+export default Cli.command({
+    args: z.object({
+        clientId: z.string().describe("OAuth app's client ID."),
+    }),
+    description: "Replace an app's client secret. The earlier secret stops working at once.",
+    env: Admin.env.extend({
+        TEMPO_ID_CLIENT_SECRET: z
+            .string()
+            .optional()
+            .describe('New client secret, such as one that another deployment issued. No flag takes it, so it stays out of the shell history. Defaults to a random secret.'),
+    }),
+    // Hidden from MCP clients, as is every `admin apps` command, since the group returns client secrets.
+    mcp: false,
+    options: Admin.options,
+    async run(c) {
+        const connectionString = c.options.databaseUrl ?? c.env.DATABASE_URL;
+        if (!connectionString)
+            return c.error(Admin.missingDatabaseUrl);
+        const Apps = await Admin.loadApps();
+        if (!Apps)
+            return c.error(Admin.missingPeers);
+        const client = Apps.connect({ connectionString });
+        try {
+            return await Apps.Apps.rotateSecret(client.db, {
+                clientId: c.args.clientId,
+                clientSecret: c.env.TEMPO_ID_CLIENT_SECRET,
+            });
+        }
+        catch (error) {
+            const refusal = Apps.error(error);
+            if (refusal)
+                return c.error(refusal);
+            throw error;
+        }
+        finally {
+            await client.end();
+        }
+    },
+});
+//# sourceMappingURL=rotate-secret.js.map

package/dist/cli/commands/admin/apps/rotate-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotate-secret.js","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/apps/rotate-secret.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAE1C,eAAe,GAAG,CAAC,OAAO,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;KACxD,CAAC;IACF,WAAW,EACT,2EAA2E;IAC7E,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QACpB,sBAAsB,EAAE,CAAC;aACtB,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,qJAAqJ,CACtJ;KACJ,CAAC;IACF,qGAAqG;IACrG,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,KAAK,CAAC,OAAO;IACtB,KAAK,CAAC,GAAG,CAAC,CAAC;QACT,MAAM,gBAAgB,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAA;QACpE,IAAI,CAAC,gBAAgB;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QAE/D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAA;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAE7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE;gBAC7C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;gBACzB,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,sBAAsB;aAC3C,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACjC,IAAI,OAAO;gBAAE,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACpC,MAAM,KAAK,CAAA;QACb,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAA;QACpB,CAAC;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cli/commands/admin/apps/update.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `tempo-id admin apps update`: changes an OAuth app. A value left out stays.
+ * @module
+ */
+import { Cli, z } from 'incur';
+declare const _default: Cli.FileCommand<z.ZodObject<{
+    clientId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    DATABASE_SCHEMA: z.ZodOptional<z.ZodString>;
+    DATABASE_URL: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    databaseUrl: z.ZodOptional<z.ZodString>;
+    clearPostLogoutRedirectUris: z.ZodDefault<z.ZodBoolean>;
+    name: z.ZodOptional<z.ZodString>;
+    postLogoutRedirectUri: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    redirectUri: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    sign: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>, undefined>;
+export default _default;
+//# sourceMappingURL=update.d.ts.map

package/dist/cli/commands/admin/apps/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/apps/update.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,OAAO,CAAA"}

package/dist/cli/commands/admin/apps/update.js

@@ -0,0 +1,71 @@
+/**
+ * `tempo-id admin apps update`: changes an OAuth app. A value left out stays.
+ * @module
+ */
+import { Cli, z } from 'incur';
+import * as Admin from '../../../Admin.js';
+export default Cli.command({
+    args: z.object({
+        clientId: z.string().describe("OAuth app's client ID."),
+    }),
+    description: "Change an app's name, redirect URIs, post-logout redirect URIs, or scopes. A value left out stays.",
+    env: Admin.env,
+    // Hidden from MCP clients, as is every `admin apps` command, since the group returns client secrets.
+    mcp: false,
+    options: Admin.options.extend({
+        clearPostLogoutRedirectUris: z
+            .boolean()
+            .default(false)
+            .describe('Remove every post-logout redirect URI. Logout then ends the session without a redirect.'),
+        name: z.string().optional().describe('Display name.'),
+        postLogoutRedirectUri: z
+            .array(z.string())
+            .optional()
+            .describe('URI that the app returns to after it ends the session. Repeat the flag for each URI. The URIs replace the earlier ones.'),
+        redirectUri: z
+            .array(z.string())
+            .optional()
+            .describe('Redirect URI. Repeat the flag for each URI. The URIs replace the earlier ones.'),
+        sign: z
+            .boolean()
+            .optional()
+            .describe('Grant the tempo-id:sign scope, or remove it with --no-sign.'),
+    }),
+    async run(c) {
+        const connectionString = c.options.databaseUrl ?? c.env.DATABASE_URL;
+        if (!connectionString)
+            return c.error(Admin.missingDatabaseUrl);
+        const Apps = await Admin.loadApps();
+        if (!Apps)
+            return c.error(Admin.missingPeers);
+        if (c.options.clearPostLogoutRedirectUris &&
+            c.options.postLogoutRedirectUri)
+            return c.error({
+                code: 'invalid_app',
+                message: 'Invalid options: --clear-post-logout-redirect-uris and --post-logout-redirect-uri conflict. Pass one of them.',
+            });
+        const client = Apps.connect({ connectionString });
+        try {
+            const app = await Apps.Apps.update(client.db, {
+                clientId: c.args.clientId,
+                name: c.options.name,
+                postLogoutRedirectUris: c.options.clearPostLogoutRedirectUris
+                    ? []
+                    : c.options.postLogoutRedirectUri,
+                redirectUris: c.options.redirectUri,
+                sign: c.options.sign,
+            });
+            return { app };
+        }
+        catch (error) {
+            const refusal = Apps.error(error);
+            if (refusal)
+                return c.error(refusal);
+            throw error;
+        }
+        finally {
+            await client.end();
+        }
+    },
+});
+//# sourceMappingURL=update.js.map

package/dist/cli/commands/admin/apps/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/apps/update.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAE1C,eAAe,GAAG,CAAC,OAAO,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;KACxD,CAAC;IACF,WAAW,EACT,oGAAoG;IACtG,GAAG,EAAE,KAAK,CAAC,GAAG;IACd,qGAAqG;IACrG,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5B,2BAA2B,EAAE,CAAC;aAC3B,OAAO,EAAE;aACT,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CACP,yFAAyF,CAC1F;QACH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;QACrD,qBAAqB,EAAE,CAAC;aACrB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,yHAAyH,CAC1H;QACH,WAAW,EAAE,CAAC;aACX,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,gFAAgF,CACjF;QACH,IAAI,EAAE,CAAC;aACJ,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,6DAA6D,CAAC;KAC3E,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,CAAC;QACT,MAAM,gBAAgB,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAA;QACpE,IAAI,CAAC,gBAAgB;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QAE/D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAA;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAE7C,IACE,CAAC,CAAC,OAAO,CAAC,2BAA2B;YACrC,CAAC,CAAC,OAAO,CAAC,qBAAqB;YAE/B,OAAO,CAAC,CAAC,KAAK,CAAC;gBACb,IAAI,EAAE,aAAa;gBACnB,OAAO,EACL,+GAA+G;aAClH,CAAC,CAAA;QAEJ,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;gBAC5C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;gBACzB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;gBACpB,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B;oBAC3D,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB;gBACnC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW;gBACnC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;aACrB,CAAC,CAAA;YACF,OAAO,EAAE,GAAG,EAAE,CAAA;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACjC,IAAI,OAAO;gBAAE,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACpC,MAAM,KAAK,CAAA;QACb,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAA;QACpB,CAAC;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cli/commands/admin/index.d.ts

@@ -0,0 +1,5 @@
+/** `tempo-id admin`: the commands that reach a Tempo ID database directly. @module */
+import { Cli } from 'incur';
+declare const _default: Cli.FileCommand<undefined, undefined, undefined, undefined>;
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/commands/admin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/admin/index.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA"}

package/dist/cli/commands/admin/index.js

@@ -0,0 +1,13 @@
+/** `tempo-id admin`: the commands that reach a Tempo ID database directly. @module */
+import { Cli } from 'incur';
+export default Cli.command({
+    description: 'Operate a Tempo ID database.',
+    mcp: false,
+    run(c) {
+        return c.error({
+            code: 'missing_command',
+            message: 'Missing command. Run `tempo-id admin --help` to list the commands.',
+        });
+    },
+});
+//# sourceMappingURL=index.js.map

package/dist/cli/commands/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/index.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAE3B,eAAe,GAAG,CAAC,OAAO,CAAC;IACzB,WAAW,EAAE,8BAA8B;IAC3C,GAAG,EAAE,KAAK;IACV,GAAG,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,KAAK,CAAC;YACb,IAAI,EAAE,iBAAiB;YACvB,OAAO,EACL,oEAAoE;SACvE,CAAC,CAAA;IACJ,CAAC;CACF,CAAC,CAAA"}

package/dist/cli/commands/admin/migrate.d.ts

@@ -0,0 +1,10 @@
+/** `tempo-id admin migrate`: applies the package's pending migrations. @module */
+import { Cli } from 'incur';
+declare const _default: Cli.FileCommand<undefined, import("zod").ZodObject<{
+    DATABASE_SCHEMA: import("zod").ZodOptional<import("zod").ZodString>;
+    DATABASE_URL: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    databaseUrl: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, undefined>;
+export default _default;
+//# sourceMappingURL=migrate.d.ts.map

package/dist/cli/commands/admin/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/admin/migrate.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA"}

package/dist/cli/commands/admin/migrate.js

@@ -0,0 +1,20 @@
+/** `tempo-id admin migrate`: applies the package's pending migrations. @module */
+import { Cli } from 'incur';
+import * as Migrations from '../../../internal/Migrations.js';
+import * as Admin from '../../Admin.js';
+export default Cli.command({
+    description: "Apply the package's pending migrations.",
+    env: Admin.env,
+    mcp: false,
+    options: Admin.options,
+    async run(c) {
+        const connectionString = c.options.databaseUrl ?? c.env.DATABASE_URL;
+        if (!connectionString)
+            return c.error(Admin.missingDatabaseUrl);
+        return await Migrations.apply({
+            connectionString,
+            schema: c.env.DATABASE_SCHEMA,
+        });
+    },
+});
+//# sourceMappingURL=migrate.js.map

package/dist/cli/commands/admin/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/migrate.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAC3B,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAA;AAC7D,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAA;AAEvC,eAAe,GAAG,CAAC,OAAO,CAAC;IACzB,WAAW,EAAE,yCAAyC;IACtD,GAAG,EAAE,KAAK,CAAC,GAAG;IACd,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,KAAK,CAAC,OAAO;IACtB,KAAK,CAAC,GAAG,CAAC,CAAC;QACT,MAAM,gBAAgB,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAA;QACpE,IAAI,CAAC,gBAAgB;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QAC/D,OAAO,MAAM,UAAU,CAAC,KAAK,CAAC;YAC5B,gBAAgB;YAChB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe;SAC9B,CAAC,CAAA;IACJ,CAAC;CACF,CAAC,CAAA"}

package/dist/cli/commands/admin/realms/add.d.ts

@@ -0,0 +1,13 @@
+/** `tempo-id admin realms add`: adds a realm, a new set of Tempo Accounts. @module */
+import { Cli, z } from 'incur';
+declare const _default: Cli.FileCommand<z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    DATABASE_SCHEMA: z.ZodOptional<z.ZodString>;
+    DATABASE_URL: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    databaseUrl: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strip>, undefined>;
+export default _default;
+//# sourceMappingURL=add.d.ts.map

package/dist/cli/commands/admin/realms/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/realms/add.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,OAAO,CAAA"}

package/dist/cli/commands/admin/realms/add.js

@@ -0,0 +1,42 @@
+/** `tempo-id admin realms add`: adds a realm, a new set of Tempo Accounts. @module */
+import { Cli, z } from 'incur';
+import * as Admin from '../../../Admin.js';
+export default Cli.command({
+    args: z.object({
+        id: z
+            .string()
+            .describe('Realm ID, in lowercase kebab case, such as tempo-cash.'),
+    }),
+    description: 'Add a realm. Set its owner configurations, such as its Privy app, with their own commands.',
+    env: Admin.env,
+    mcp: false,
+    options: Admin.options.extend({
+        name: z.string().describe('Display name, such as "Tempo Cash".'),
+    }),
+    async run(c) {
+        const connectionString = c.options.databaseUrl ?? c.env.DATABASE_URL;
+        if (!connectionString)
+            return c.error(Admin.missingDatabaseUrl);
+        const Realms = await Admin.loadRealms();
+        if (!Realms)
+            return c.error(Admin.missingPeers);
+        const client = Realms.connect({ connectionString });
+        try {
+            const realm = await Realms.Realm.add(client.db, {
+                id: c.args.id,
+                name: c.options.name,
+            });
+            return { realm };
+        }
+        catch (error) {
+            const refusal = Realms.error(error);
+            if (refusal)
+                return c.error(refusal);
+            throw error;
+        }
+        finally {
+            await client.end();
+        }
+    },
+});
+//# sourceMappingURL=add.js.map

package/dist/cli/commands/admin/realms/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/realms/add.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAE1C,eAAe,GAAG,CAAC,OAAO,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,QAAQ,CAAC,wDAAwD,CAAC;KACtE,CAAC;IACF,WAAW,EACT,4FAA4F;IAC9F,GAAG,EAAE,KAAK,CAAC,GAAG;IACd,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;KACjE,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,CAAC;QACT,MAAM,gBAAgB,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAA;QACpE,IAAI,CAAC,gBAAgB;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QAE/D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAA;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAE/C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE;gBAC9C,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE;gBACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;aACrB,CAAC,CAAA;YACF,OAAO,EAAE,KAAK,EAAE,CAAA;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACnC,IAAI,OAAO;gBAAE,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACpC,MAAM,KAAK,CAAA;QACb,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAA;QACpB,CAAC;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cli/commands/admin/realms/index.d.ts

@@ -0,0 +1,5 @@
+/** `tempo-id admin realms`: the commands that define realms and the realms of each app. @module */
+import { Cli } from 'incur';
+declare const _default: Cli.FileCommand<undefined, undefined, undefined, undefined>;
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/commands/admin/realms/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/realms/index.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA"}

package/dist/cli/commands/admin/realms/index.js

@@ -0,0 +1,13 @@
+/** `tempo-id admin realms`: the commands that define realms and the realms of each app. @module */
+import { Cli } from 'incur';
+export default Cli.command({
+    description: 'Manage realms, and the realms that each app reaches.',
+    mcp: false,
+    run(c) {
+        return c.error({
+            code: 'missing_command',
+            message: 'Missing command. Run `tempo-id admin realms --help` to list the commands.',
+        });
+    },
+});
+//# sourceMappingURL=index.js.map

package/dist/cli/commands/admin/realms/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/realms/index.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAE3B,eAAe,GAAG,CAAC,OAAO,CAAC;IACzB,WAAW,EAAE,sDAAsD;IACnE,GAAG,EAAE,KAAK;IACV,GAAG,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,KAAK,CAAC;YACb,IAAI,EAAE,iBAAiB;YACvB,OAAO,EACL,2EAA2E;SAC9E,CAAC,CAAA;IACJ,CAAC;CACF,CAAC,CAAA"}

package/dist/cli/commands/admin/realms/list.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `tempo-id admin realms list`: lists every realm, or the realms of one app in order.
+ * @module
+ */
+import { Cli, z } from 'incur';
+declare const _default: Cli.FileCommand<undefined, z.ZodObject<{
+    DATABASE_SCHEMA: z.ZodOptional<z.ZodString>;
+    DATABASE_URL: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    databaseUrl: z.ZodOptional<z.ZodString>;
+    clientId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, undefined>;
+export default _default;
+//# sourceMappingURL=list.d.ts.map

package/dist/cli/commands/admin/realms/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/realms/list.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,OAAO,CAAA"}

package/dist/cli/commands/admin/realms/list.js

@@ -0,0 +1,36 @@
+/**
+ * `tempo-id admin realms list`: lists every realm, or the realms of one app in order.
+ * @module
+ */
+import { Cli, z } from 'incur';
+import * as Admin from '../../../Admin.js';
+export default Cli.command({
+    description: 'List every realm, or the realms that one app reaches, in order.',
+    env: Admin.env,
+    mcp: false,
+    options: Admin.options.extend({
+        clientId: z
+            .string()
+            .optional()
+            .describe("OAuth app's client ID. Lists the app's realms instead of every realm."),
+    }),
+    async run(c) {
+        const connectionString = c.options.databaseUrl ?? c.env.DATABASE_URL;
+        if (!connectionString)
+            return c.error(Admin.missingDatabaseUrl);
+        const Realms = await Admin.loadRealms();
+        if (!Realms)
+            return c.error(Admin.missingPeers);
+        const client = Realms.connect({ connectionString });
+        try {
+            const realms = c.options.clientId
+                ? await Realms.Realm.forApp(client.db, { clientId: c.options.clientId })
+                : await Realms.Realm.list(client.db);
+            return { realms };
+        }
+        finally {
+            await client.end();
+        }
+    },
+});
+//# sourceMappingURL=list.js.map

package/dist/cli/commands/admin/realms/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../../src/cli/commands/admin/realms/list.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAE1C,eAAe,GAAG,CAAC,OAAO,CAAC;IACzB,WAAW,EACT,iEAAiE;IACnE,GAAG,EAAE,KAAK,CAAC,GAAG;IACd,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5B,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,uEAAuE,CACxE;KACJ,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,CAAC;QACT,MAAM,gBAAgB,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAA;QACpE,IAAI,CAAC,gBAAgB;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QAE/D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAA;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAE/C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ;gBAC/B,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACxE,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACtC,OAAO,EAAE,MAAM,EAAE,CAAA;QACnB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAA;QACpB,CAAC;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cli/commands/admin/realms/passkeys/index.d.ts

@@ -0,0 +1,5 @@
+/** `tempo-id admin realms passkeys`: the commands that set the passkey relying party of a realm. @module */
+import { Cli } from 'incur';
+declare const _default: Cli.FileCommand<undefined, undefined, undefined, undefined>;
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/commands/admin/realms/passkeys/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/cli/commands/admin/realms/passkeys/index.ts"],"names":[],"mappings":"AAAA,4GAA4G;AAC5G,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA"}

package/dist/cli/commands/admin/realms/passkeys/index.js

@@ -0,0 +1,13 @@
+/** `tempo-id admin realms passkeys`: the commands that set the passkey relying party of a realm. @module */
+import { Cli } from 'incur';
+export default Cli.command({
+    description: "Manage the passkey relying party whose passkeys own a realm's accounts.",
+    mcp: false,
+    run(c) {
+        return c.error({
+            code: 'missing_command',
+            message: 'Missing command. Run `tempo-id admin realms passkeys --help` to list the commands.',
+        });
+    },
+});
+//# sourceMappingURL=index.js.map

package/dist/cli/commands/admin/realms/passkeys/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/cli/commands/admin/realms/passkeys/index.ts"],"names":[],"mappings":"AAAA,4GAA4G;AAC5G,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAE3B,eAAe,GAAG,CAAC,OAAO,CAAC;IACzB,WAAW,EACT,yEAAyE;IAC3E,GAAG,EAAE,KAAK;IACV,GAAG,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,KAAK,CAAC;YACb,IAAI,EAAE,iBAAiB;YACvB,OAAO,EACL,oFAAoF;SACvF,CAAC,CAAA;IACJ,CAAC;CACF,CAAC,CAAA"}

package/dist/cli/commands/admin/realms/passkeys/set.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `tempo-id admin realms passkeys set`: sets the passkey relying party of a realm, whose passkeys
+ * then sign in and own accounts in it.
+ * @module
+ */
+import { Cli, z } from 'incur';
+declare const _default: Cli.FileCommand<z.ZodObject<{
+    realmId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    DATABASE_SCHEMA: z.ZodOptional<z.ZodString>;
+    DATABASE_URL: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    databaseUrl: z.ZodOptional<z.ZodString>;
+    rpId: z.ZodString;
+}, z.core.$strip>, undefined>;
+export default _default;
+//# sourceMappingURL=set.d.ts.map

package/dist/cli/commands/admin/realms/passkeys/set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set.d.ts","sourceRoot":"","sources":["../../../../../../src/cli/commands/admin/realms/passkeys/set.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,OAAO,CAAA"}

package/dist/cli/commands/admin/realms/passkeys/set.js

@@ -0,0 +1,46 @@
+/**
+ * `tempo-id admin realms passkeys set`: sets the passkey relying party of a realm, whose passkeys
+ * then sign in and own accounts in it.
+ * @module
+ */
+import { Cli, z } from 'incur';
+import * as Admin from '../../../../Admin.js';
+export default Cli.command({
+    args: z.object({
+        realmId: z.string().describe('Realm ID, such as default.'),
+    }),
+    description: "Set the passkey relying party whose passkeys own a realm's accounts. It replaces an earlier relying party.",
+    env: Admin.env,
+    mcp: false,
+    options: Admin.options.extend({
+        rpId: z
+            .string()
+            .describe('Relying party ID, a registrable domain such as tempo.xyz.'),
+    }),
+    async run(c) {
+        const connectionString = c.options.databaseUrl ?? c.env.DATABASE_URL;
+        if (!connectionString)
+            return c.error(Admin.missingDatabaseUrl);
+        const Realms = await Admin.loadRealms();
+        if (!Realms)
+            return c.error(Admin.missingPeers);
+        const client = Realms.connect({ connectionString });
+        try {
+            const realm = await Realms.Realm.setPasskeys(client.db, {
+                realmId: c.args.realmId,
+                rpId: c.options.rpId,
+            });
+            return { realm };
+        }
+        catch (error) {
+            const refusal = Realms.error(error);
+            if (refusal)
+                return c.error(refusal);
+            throw error;
+        }
+        finally {
+            await client.end();
+        }
+    },
+});
+//# sourceMappingURL=set.js.map

package/dist/cli/commands/admin/realms/passkeys/set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set.js","sourceRoot":"","sources":["../../../../../../src/cli/commands/admin/realms/passkeys/set.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,KAAK,MAAM,sBAAsB,CAAA;AAE7C,eAAe,GAAG,CAAC,OAAO,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;KAC3D,CAAC;IACF,WAAW,EACT,4GAA4G;IAC9G,GAAG,EAAE,KAAK,CAAC,GAAG;IACd,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,CAAC,2DAA2D,CAAC;KACzE,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,CAAC;QACT,MAAM,gBAAgB,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAA;QACpE,IAAI,CAAC,gBAAgB;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QAE/D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAA;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAE/C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE;gBACtD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO;gBACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;aACrB,CAAC,CAAA;YACF,OAAO,EAAE,KAAK,EAAE,CAAA;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACnC,IAAI,OAAO;gBAAE,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACpC,MAAM,KAAK,CAAA;QACb,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAA;QACpB,CAAC;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cli/commands/admin/realms/privy/index.d.ts

@@ -0,0 +1,5 @@
+/** `tempo-id admin realms privy`: the commands that set the Privy app of a realm. @module */
+import { Cli } from 'incur';
+declare const _default: Cli.FileCommand<undefined, undefined, undefined, undefined>;
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/commands/admin/realms/privy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/cli/commands/admin/realms/privy/index.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA"}

package/dist/cli/commands/admin/realms/privy/index.js

@@ -0,0 +1,13 @@
+/** `tempo-id admin realms privy`: the commands that set the Privy app of a realm. @module */
+import { Cli } from 'incur';
+export default Cli.command({
+    description: "Manage the Privy app that holds a realm's Privy owners.",
+    mcp: false,
+    run(c) {
+        return c.error({
+            code: 'missing_command',
+            message: 'Missing command. Run `tempo-id admin realms privy --help` to list the commands.',
+        });
+    },
+});
+//# sourceMappingURL=index.js.map

package/dist/cli/commands/admin/realms/privy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/cli/commands/admin/realms/privy/index.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAE3B,eAAe,GAAG,CAAC,OAAO,CAAC;IACzB,WAAW,EAAE,yDAAyD;IACtE,GAAG,EAAE,KAAK;IACV,GAAG,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,KAAK,CAAC;YACb,IAAI,EAAE,iBAAiB;YACvB,OAAO,EACL,iFAAiF;SACpF,CAAC,CAAA;IACJ,CAAC;CACF,CAAC,CAAA"}

package/dist/cli/commands/admin/realms/privy/set.d.ts

@@ -0,0 +1,19 @@
+/**
+ * `tempo-id admin realms privy set`: sets the Privy app of a realm. The database holds the app
+ * secret only as encrypted with `SECRET`.
+ * @module
+ */
+import { Cli, z } from 'incur';
+declare const _default: Cli.FileCommand<z.ZodObject<{
+    realmId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    DATABASE_SCHEMA: z.ZodOptional<z.ZodString>;
+    DATABASE_URL: z.ZodOptional<z.ZodString>;
+    PRIVY_APP_SECRET: z.ZodOptional<z.ZodString>;
+    SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    databaseUrl: z.ZodOptional<z.ZodString>;
+    appId: z.ZodString;
+}, z.core.$strip>, undefined>;
+export default _default;
+//# sourceMappingURL=set.d.ts.map