@tokenbuddy/tb-admin 1.0.0

package/src/cli.ts

@@ -0,0 +1,780 @@
+import { Command } from "commander";
+import { ConfigManager } from "./config.js";
+import { AdminClient } from "./client.js";
+import { FlyProvider } from "./server-cmd.js";
+import {
+  loadRegistryFile,
+  SellerRegistryDocument,
+  validateRegistryDocument
+} from "./bootstrap-registry.js";
+import Table from "cli-table3";
+import * as fs from "fs";
+import YAML from "js-yaml";
+
+interface BootstrapConfigDocument {
+  bind?: {
+    host?: string;
+    port?: number;
+  };
+  clawtip: {
+    payTo: string;
+    sm4KeyBase64: string;
+    skillSlug: string;
+    skillId: string;
+    description: string;
+    resourceUrl: string;
+    activationFeeFen: number;
+    microsPerFen: number;
+  };
+  sellerRegistryPath: string;
+  allowLocalSellerUrls?: boolean;
+}
+
+type SellerConfigDocument = Record<string, any>;
+
+function requireString(value: unknown, field: string): string {
+  const normalized = String(value || "").trim();
+  if (!normalized) {
+    throw new Error(`${field} is required`);
+  }
+  return normalized;
+}
+
+function positiveInteger(value: unknown, field: string): number {
+  const raw = Number(value);
+  if (!Number.isInteger(raw) || raw < 1) {
+    throw new Error(`${field} must be >= 1`);
+  }
+  return raw;
+}
+
+function validateBootstrapConfigDocument(input: any): BootstrapConfigDocument {
+  if (!input || typeof input !== "object") {
+    throw new Error("bootstrap config document is required");
+  }
+  if (!input.clawtip || typeof input.clawtip !== "object") {
+    throw new Error("clawtip config is required");
+  }
+  return {
+    bind: {
+      host: requireString(input.bind?.host || "0.0.0.0", "bind.host"),
+      port: positiveInteger(input.bind?.port || 8080, "bind.port")
+    },
+    clawtip: {
+      payTo: requireString(input.clawtip.payTo, "pay_to"),
+      sm4KeyBase64: requireString(input.clawtip.sm4KeyBase64, "sm4_key_base64"),
+      skillSlug: requireString(input.clawtip.skillSlug, "skill_slug"),
+      skillId: requireString(input.clawtip.skillId, "skill_id"),
+      description: requireString(input.clawtip.description, "description"),
+      resourceUrl: requireString(input.clawtip.resourceUrl, "resource_url"),
+      activationFeeFen: positiveInteger(input.clawtip.activationFeeFen, "activation_fee_fen"),
+      microsPerFen: positiveInteger(input.clawtip.microsPerFen, "micros_per_fen")
+    },
+    sellerRegistryPath: requireString(input.sellerRegistryPath, "seller_registry_path"),
+    allowLocalSellerUrls: Boolean(input.allowLocalSellerUrls)
+  };
+}
+
+function loadBootstrapConfigFile(filePath: string): BootstrapConfigDocument {
+  const content = fs.readFileSync(filePath, "utf8");
+  const parsed = YAML.load(content);
+  return validateBootstrapConfigDocument(parsed);
+}
+
+function validateSellerConfigDocument(input: any): SellerConfigDocument {
+  if (!input || typeof input !== "object" || Array.isArray(input)) {
+    throw new Error("seller config document is required");
+  }
+  requireString(input.upstreamUrl, "upstreamUrl");
+  if (input.clawtip !== undefined && input.clawtip !== null) {
+    requireString(input.clawtip.payTo, "clawtip.payTo");
+    requireString(input.clawtip.sm4KeyBase64, "clawtip.sm4KeyBase64");
+    requireString(input.clawtip.skillSlug, "clawtip.skillSlug");
+    requireString(input.clawtip.skillId, "clawtip.skillId");
+    requireString(input.clawtip.description, "clawtip.description");
+    requireString(input.clawtip.resourceUrl, "clawtip.resourceUrl");
+    positiveInteger(input.clawtip.activationFeeFen ?? 1, "clawtip.activationFeeFen");
+    positiveInteger(input.clawtip.microsPerFen ?? 10000, "clawtip.microsPerFen");
+  }
+  return input;
+}
+
+function loadSellerConfigFile(filePath: string): SellerConfigDocument {
+  const content = fs.readFileSync(filePath, "utf8");
+  const parsed = YAML.load(content);
+  return validateSellerConfigDocument(parsed);
+}
+
+function sellerConfigUpdateSummary(response: any, document: SellerConfigDocument): string {
+  const updated = response.config || document;
+  return `path=${response.configPath || "memory"} upstream=${updated.upstreamUrl} allowMock=${Boolean(updated.allowMock)} clawtip=${updated.clawtip ? "configured" : "disabled"}`;
+}
+
+function collectOption(value: string, previous: string[]): string[] {
+  previous.push(value);
+  return previous;
+}
+
+function optionalNumber(value: unknown, field: string): number | undefined {
+  if (value === undefined || value === null || value === "") {
+    return undefined;
+  }
+  const parsed = Number(value);
+  if (!Number.isFinite(parsed)) {
+    throw new Error(`${field} must be a number`);
+  }
+  return parsed;
+}
+
+function parseModelAliases(values: string[] | undefined): Record<string, string> {
+  const aliases: Record<string, string> = {};
+  for (const value of values || []) {
+    const index = value.indexOf("=");
+    if (index <= 0 || index === value.length - 1) {
+      throw new Error(`model alias must use alias=target format: ${value}`);
+    }
+    aliases[value.slice(0, index)] = value.slice(index + 1);
+  }
+  return aliases;
+}
+
+function loadYamlOrJsonFile(filePath: string): any {
+  return YAML.load(fs.readFileSync(filePath, "utf8"));
+}
+
+export function buildAdminCli(configManager: ConfigManager): Command {
+  const program = new Command();
+  program
+    .name("tb-admin")
+    .description("Remote admin CLI for TokenBuddy seller apps")
+    .version("1.0.0")
+    .option("--url <url>", "Remote seller core API url")
+    .option("--token <token>", "Operator Bearer token")
+    .option("--profile <profile>", "Use custom profile instead of default")
+    .option("--config <path>", "Use custom config file path");
+
+  // Helper to resolve client
+  function getClient(): AdminClient {
+    const opts = program.opts();
+    const configPath = opts.config;
+    const mgr = configPath ? new ConfigManager(configPath) : configManager;
+
+    const url = opts.url || process.env.TOKENBUDDY_ADMIN_URL;
+    const token = opts.token || process.env.TOKENBUDDY_ADMIN_TOKEN;
+    const profileName = opts.profile || process.env.TOKENBUDDY_ADMIN_PROFILE;
+
+    if (url && token) {
+      return new AdminClient(url, token);
+    }
+
+    const activeProfile = mgr.getProfile(profileName);
+    if (!activeProfile) {
+      throw new Error(
+        "No active profile found. Provide --url and --token, or set TOKENBUDDY_ADMIN_URL, or register config profiles."
+      );
+    }
+    return new AdminClient(activeProfile.url, activeProfile.token);
+  }
+
+  function getBaseUrl(): string {
+    const opts = program.opts();
+    const configPath = opts.config;
+    const mgr = configPath ? new ConfigManager(configPath) : configManager;
+
+    const url = opts.url || process.env.TOKENBUDDY_ADMIN_URL;
+    const profileName = opts.profile || process.env.TOKENBUDDY_ADMIN_PROFILE;
+    if (url) {
+      return url.replace(/\/+$/, "");
+    }
+
+    const activeProfile = mgr.getProfile(profileName);
+    if (!activeProfile) {
+      throw new Error("No active profile found. Provide --url, set TOKENBUDDY_ADMIN_URL, or register config profiles.");
+    }
+    return activeProfile.url.replace(/\/+$/, "");
+  }
+
+  async function publicGet(path: string): Promise<any> {
+    const response = await fetch(`${getBaseUrl()}${path}`);
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new Error(`HTTP Error ${response.status}: ${errorText || response.statusText}`);
+    }
+    const text = await response.text();
+    return text ? JSON.parse(text) : {};
+  }
+
+  async function getSellerConfig(client: AdminClient): Promise<SellerConfigDocument> {
+    const data = await client.get("/operator/admin/config");
+    return validateSellerConfigDocument(data.config || data);
+  }
+
+  async function putSellerConfig(client: AdminClient, document: SellerConfigDocument): Promise<any> {
+    validateSellerConfigDocument(document);
+    return client.put("/operator/admin/config", { config: document });
+  }
+
+  // 1. Status Command
+  program
+    .command("status")
+    .description("Show status of the seller server")
+    .action(async () => {
+      try {
+        const client = getClient();
+        const data = await client.get("/operator/status");
+        console.log("=== Seller Server Operator Status ===");
+        console.log(JSON.stringify(data, null, 2));
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  // 2. Service Command
+  program
+    .command("service")
+    .description("Show admin service info")
+    .action(async () => {
+      try {
+        const client = getClient();
+        const data = await client.get("/operator/admin/service");
+        console.log("=== Seller Service Info ===");
+        console.log(JSON.stringify(data, null, 2));
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  // 3. Payments Group
+  const payments = program.command("payments").description("Manage payment methods");
+  
+  payments
+    .command("list")
+    .description("List payment methods")
+    .action(async () => {
+      try {
+        const client = getClient();
+        const data = await client.get("/operator/admin/payments");
+        console.log("=== Configured Payments ===");
+        console.log(JSON.stringify(data, null, 2));
+      } catch (err: any) {
+        console.error("Error:", err.message);
+      }
+    });
+
+  payments
+    .command("set-clawtip")
+    .description("Configure ClawTip payment parameters")
+    .requiredOption("--pay-to <pay_to>", "Pay target account")
+    .requiredOption("--sm4-key-base64 <key>", "JD SM4 key encoded in base64")
+    .requiredOption("--skill-slug <slug>", "Skill Slug")
+    .requiredOption("--skill-id <id>", "Skill ID")
+    .requiredOption("--description <desc>", "Order description")
+    .requiredOption("--resource-url <url>", "Resource verification url")
+    .option("--micros-per-fen <micros>", "Micros per Fen exchange ratio", "10000")
+    .action(async (options) => {
+      try {
+        const client = getClient();
+        const document = await getSellerConfig(client);
+        document.clawtip = {
+          payTo: options.payTo,
+          sm4KeyBase64: options.sm4KeyBase64,
+          skillSlug: options.skillSlug,
+          skillId: options.skillId,
+          description: options.description,
+          resourceUrl: options.resourceUrl,
+          activationFeeFen: 1,
+          microsPerFen: parseInt(options.microsPerFen, 10)
+        };
+        const data = await putSellerConfig(client, document);
+        console.log(`ClawTip parameters successfully set: ${sellerConfigUpdateSummary(data, document)}`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+      }
+    });
+
+  payments
+    .command("clear-clawtip")
+    .description("Disable ClawTip payment parameters")
+    .action(async () => {
+      try {
+        const client = getClient();
+        const document = await getSellerConfig(client);
+        delete document.clawtip;
+        const data = await putSellerConfig(client, document);
+        console.log(`ClawTip parameters cleared: ${sellerConfigUpdateSummary(data, document)}`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+      }
+    });
+
+  payments
+    .command("enable-mock")
+    .description("Enable mock payment for developers")
+    .action(async () => {
+      try {
+        const client = getClient();
+        const document = await getSellerConfig(client);
+        document.allowMock = true;
+        const data = await putSellerConfig(client, document);
+        console.log(`Mock payment enabled: ${sellerConfigUpdateSummary(data, document)}`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+      }
+    });
+
+  payments
+    .command("disable-mock")
+    .description("Disable mock payment")
+    .action(async () => {
+      try {
+        const client = getClient();
+        const document = await getSellerConfig(client);
+        document.allowMock = false;
+        const data = await putSellerConfig(client, document);
+        console.log(`Mock payment disabled: ${sellerConfigUpdateSummary(data, document)}`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+      }
+    });
+
+  // 4. Models Command
+  program
+    .command("models")
+    .description("List available upstream models")
+    .action(async () => {
+      try {
+        const client = getClient();
+        const data = await client.get("/operator/admin/upstreams");
+        const table = new Table({ head: ["Model ID", "Input Price/1M", "Output Price/1M", "Streaming"] });
+        
+        for (const ups of data.upstreams || []) {
+          for (const model of ups.models || []) {
+            table.push([
+              model.id,
+              `${model.inputPriceMicrosPer1m} micros`,
+              `${model.outputPriceMicrosPer1m} micros`,
+              model.streaming ? "Yes" : "No"
+            ]);
+          }
+        }
+        console.log("=== Upstream Model Configurations ===");
+        console.log(table.toString());
+      } catch (err: any) {
+        console.error("Error:", err.message);
+      }
+    });
+
+  const upstreams = program.command("upstreams").description("Manage seller upstream config through full seller config updates");
+
+  upstreams
+    .command("get")
+    .description("Fetch seller upstream config summary")
+    .action(async () => {
+      try {
+        const client = getClient();
+        const data = await client.get("/operator/admin/upstreams");
+        console.log(JSON.stringify(data, null, 2));
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  upstreams
+    .command("update")
+    .description("Update upstream fields by fetching and pushing the full seller config")
+    .option("--upstream-url <url>", "Upstream base URL")
+    .option("--api-key <key>", "Upstream API key")
+    .option("--chat-completions <state>", "chatCompletions capability")
+    .option("--responses <state>", "responses capability")
+    .option("--messages <state>", "messages capability")
+    .option("--markup-ratio <ratio>", "Markup ratio")
+    .option("--discount-ratio <ratio>", "Discount ratio")
+    .option("--models-file <path>", "YAML/JSON file containing an array of model configs")
+    .option("--clear-aliases", "Clear model aliases before applying --model-alias")
+    .option("--model-alias <alias=target>", "Add or update model alias", collectOption, [])
+    .action(async (options) => {
+      try {
+        const client = getClient();
+        const document = await getSellerConfig(client);
+
+        if (options.upstreamUrl) {
+          document.upstreamUrl = options.upstreamUrl;
+        }
+        if (options.apiKey !== undefined) {
+          document.upstreamApiKey = options.apiKey;
+        }
+        const capabilities = {
+          ...(document.upstreamCapabilities || {})
+        };
+        if (options.chatCompletions) {
+          capabilities.chatCompletions = options.chatCompletions;
+        }
+        if (options.responses) {
+          capabilities.responses = options.responses;
+        }
+        if (options.messages) {
+          capabilities.messages = options.messages;
+        }
+        if (Object.keys(capabilities).length > 0) {
+          document.upstreamCapabilities = capabilities;
+        }
+        const markupRatio = optionalNumber(options.markupRatio, "markupRatio");
+        if (markupRatio !== undefined) {
+          document.markupRatio = markupRatio;
+        }
+        const discountRatio = optionalNumber(options.discountRatio, "discountRatio");
+        if (discountRatio !== undefined) {
+          document.discountRatio = discountRatio;
+        }
+        if (options.modelsFile) {
+          const models = loadYamlOrJsonFile(options.modelsFile);
+          if (!Array.isArray(models)) {
+            throw new Error("models file must contain a YAML/JSON array");
+          }
+          document.models = models;
+        }
+        if (options.clearAliases) {
+          document.modelAliases = {};
+        }
+        const aliases = parseModelAliases(options.modelAlias);
+        if (Object.keys(aliases).length > 0) {
+          document.modelAliases = {
+            ...(document.modelAliases || {}),
+            ...aliases
+          };
+        }
+
+        const response = await putSellerConfig(client, document);
+        const updated = response.config || document;
+        console.log(`Updated upstream config: path=${response.configPath || "memory"} upstream=${updated.upstreamUrl} models=${Array.isArray(updated.models) ? updated.models.length : 0}`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  upstreams
+    .command("refresh")
+    .description("Ask seller to refresh its transient upstream model catalog")
+    .option("--auto-models", "Replace configured models from refreshed OpenRouter catalog")
+    .action(async (options) => {
+      try {
+        const client = getClient();
+        const response = await client.post("/operator/admin/upstreams/refresh", { autoModels: Boolean(options.autoModels) });
+        console.log(`Refreshed upstream catalog: path=${response.configPath || "memory"} models=${response.refreshedModels} autoModels=${Boolean(response.autoModels)}`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  // 5. Seller Runtime Config Command
+  const sellerConfig = program.command("seller-config").description("Manage seller runtime YAML config");
+
+  sellerConfig
+    .command("get")
+    .description("Fetch seller runtime config")
+    .action(async () => {
+      try {
+        const client = getClient();
+        const document = await getSellerConfig(client);
+        console.log(YAML.dump(document, { lineWidth: 120, noRefs: true, sortKeys: false }));
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  sellerConfig
+    .command("put")
+    .description("Update seller runtime config from YAML")
+    .requiredOption("--file <path>", "Seller runtime YAML config file")
+    .action(async (options) => {
+      try {
+        const document = loadSellerConfigFile(options.file);
+        const client = getClient();
+        const response = await putSellerConfig(client, document);
+        console.log(`Updated seller config: path=${response.configPath || "memory"} upstream=${response.config?.upstreamUrl || document.upstreamUrl}`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  sellerConfig
+    .command("validate")
+    .description("Validate seller runtime YAML config")
+    .requiredOption("--file <path>", "Seller runtime YAML config file")
+    .action((options) => {
+      try {
+        const document = loadSellerConfigFile(options.file);
+        console.log(`Seller config valid: upstream=${document.upstreamUrl} models=${Array.isArray(document.models) ? document.models.length : 0}`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  // 5. Billing Command
+  const billing = program.command("billing").description("Query payment and inference billing records");
+  
+  billing
+    .command("purchases")
+    .description("List all remote token purchase / payment transactions")
+    .action(async () => {
+      try {
+        const client = getClient();
+        const data = await client.get("/operator/admin/purchases");
+        const table = new Table({ head: ["Purchase ID", "Provider", "Amount", "State", "Date"] });
+        
+        for (const p of data.purchases || []) {
+          table.push([
+            p.purchase_id,
+            p.payment_provider,
+            `${p.amount_micros} micros`,
+            p.state,
+            p.created_at
+          ]);
+        }
+        console.log("=== Remote Token Purchase / Payment History ===");
+        console.log(table.toString());
+      } catch (err: any) {
+        console.error("Error:", err.message);
+      }
+    });
+
+  billing
+    .command("requests")
+    .description("List all remote inference usage consumption logs")
+    .action(async () => {
+      try {
+        const client = getClient();
+        const data = await client.get("/operator/admin/requests");
+        const table = new Table({ head: ["Request ID", "Model", "State", "Reserved", "Settled", "Tokens (I/O)", "Date"] });
+        
+        for (const r of data.requests || []) {
+          table.push([
+            r.request_id,
+            r.model,
+            r.state,
+            `${r.reserved_micros} micros`,
+            `${r.settled_micros} micros`,
+            `${r.prompt_tokens} / ${r.completion_tokens}`,
+            r.created_at
+          ]);
+        }
+        console.log("=== Inference Usage Consumption Ledger ===");
+        console.log(table.toString());
+      } catch (err: any) {
+        console.error("Error:", err.message);
+      }
+    });
+
+  // 6. Bootstrap Registry Command
+  const bootstrap = program.command("bootstrap").description("Manage wallet bootstrap service");
+  const bootstrapSellers = bootstrap.command("sellers").description("Manage public seller registry");
+  const bootstrapConfig = bootstrap.command("config").description("Manage wallet bootstrap YAML config");
+
+  bootstrapSellers
+    .command("get")
+    .description("Fetch public seller registry")
+    .action(async () => {
+      try {
+        const data = await publicGet("/registry/sellers") as SellerRegistryDocument;
+        console.log(JSON.stringify(data, null, 2));
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  bootstrapSellers
+    .command("put")
+    .description("Update public seller registry")
+    .requiredOption("--file <path>", "Seller registry JSON file")
+    .action(async (options) => {
+      try {
+        const document = loadRegistryFile(options.file);
+        const client = getClient();
+        const response = await client.put("/operator/registry/sellers", document) as SellerRegistryDocument;
+        console.log(`Updated seller registry: version=${response.version} sellers=${response.sellers.length}`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  bootstrapSellers
+    .command("validate")
+    .description("Validate seller registry JSON")
+    .requiredOption("--file <path>", "Seller registry JSON file")
+    .action((options) => {
+      try {
+        const document = loadRegistryFile(options.file);
+        validateRegistryDocument(document);
+        console.log(`Seller registry valid: version=${document.version} sellers=${document.sellers.length}`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  bootstrapConfig
+    .command("get")
+    .description("Fetch wallet bootstrap runtime config")
+    .action(async () => {
+      try {
+        const client = getClient();
+        const data = await client.get("/operator/config") as BootstrapConfigDocument;
+        console.log(YAML.dump(data, { lineWidth: 120, noRefs: true }));
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  bootstrapConfig
+    .command("put")
+    .description("Update wallet bootstrap runtime config from YAML")
+    .requiredOption("--file <path>", "Wallet bootstrap YAML config file")
+    .action(async (options) => {
+      try {
+        const document = loadBootstrapConfigFile(options.file);
+        const client = getClient();
+        const response = await client.put("/operator/config", document) as BootstrapConfigDocument;
+        console.log(`Updated wallet bootstrap config: skillSlug=${response.clawtip.skillSlug} registry=${response.sellerRegistryPath}`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  bootstrapConfig
+    .command("validate")
+    .description("Validate wallet bootstrap YAML config")
+    .requiredOption("--file <path>", "Wallet bootstrap YAML config file")
+    .action((options) => {
+      try {
+        const document = loadBootstrapConfigFile(options.file);
+        console.log(`Wallet bootstrap config valid: skillSlug=${document.clawtip.skillSlug} registry=${document.sellerRegistryPath}`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+        process.exit(1);
+      }
+    });
+
+  // 7. Config Command (Local)
+  const configCmd = program.command("config").description("Manage local admin profiles");
+
+  configCmd
+    .command("set <profileName>")
+    .description("Add or update an admin connection profile")
+    .option("--url <url>", "Remote seller core API url")
+    .option("--token <token>", "Bearer Operator secret token")
+    .action((profileName, options) => {
+      const opts = program.opts();
+      const configPath = opts.config;
+      const mgr = configPath ? new ConfigManager(configPath) : configManager;
+
+      const url = options.url || opts.url || process.env.TOKENBUDDY_ADMIN_URL;
+      const token = options.token || opts.token || process.env.TOKENBUDDY_ADMIN_TOKEN;
+
+      if (!url || !token) {
+        console.error("error: required option '--url <url>' and '--token <token>' not specified");
+        process.exit(1);
+      }
+
+      mgr.setProfile(profileName, { url, token });
+      console.log(`Profile \`${profileName}\` successfully configured.`);
+    });
+
+  configCmd
+    .command("use <profileName>")
+    .description("Switch default profile to select")
+    .action((profileName) => {
+      const opts = program.opts();
+      const configPath = opts.config;
+      const mgr = configPath ? new ConfigManager(configPath) : configManager;
+
+      try {
+        mgr.useProfile(profileName);
+        console.log(`Now using profile \`${profileName}\` by default.`);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+      }
+    });
+
+  configCmd
+    .command("list")
+    .description("List all configured profiles")
+    .action(() => {
+      const opts = program.opts();
+      const configPath = opts.config;
+      const mgr = configPath ? new ConfigManager(configPath) : configManager;
+
+      const profiles = mgr.listProfiles();
+      const config = mgr.load();
+      console.log("=== Configured Local Profiles ===");
+      for (const p of profiles) {
+        const isDefault = p === config.default_profile ? "* " : "  ";
+        const details = config.profiles[p];
+        console.log(`${isDefault}${p} -> ${details.url}`);
+      }
+    });
+
+  // 8. Seller Command (Fly.io)
+  const sellerCmd = program.command("seller").description("Deploy and manage seller containers on Fly.io");
+  const flyProvider = new FlyProvider();
+
+  sellerCmd
+    .command("ls")
+    .description("List all deployed apps on Fly.io")
+    .action(() => {
+      try {
+        const out = flyProvider.listApps();
+        console.log(out);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+      }
+    });
+
+  sellerCmd
+    .command("create <name>")
+    .description("Deploy a new machines instance on Fly.io")
+    .option("--region <region>", "Deployment fly region (default: hkg)", "hkg")
+    .option("--image <image>", "Docker image name target")
+    .requiredOption("--operator-secret <secret>", "Operator secret to configure")
+    .option("--dry-run", "Dry run display without actual execution")
+    .action((name, options) => {
+      try {
+        const res = flyProvider.createSeller({
+          name,
+          region: options.region,
+          image: options.image,
+          operatorSecret: options.operatorSecret,
+          dryRun: options.dryRun
+        });
+        console.log(res);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+      }
+    });
+
+  sellerCmd
+    .command("remove <name>")
+    .description("Completely destroy a seller app on Fly.io")
+    .option("--dry-run", "Dry run")
+    .action((name, options) => {
+      try {
+        const res = flyProvider.removeSeller(name, options.dryRun);
+        console.log(res);
+      } catch (err: any) {
+        console.error("Error:", err.message);
+      }
+    });
+
+  return program;
+}