@velaro/cli 1.4.86 → 1.4.87

package/bin/velaro.js

@@ -29,6 +29,7 @@ import { aiConfigCommand }   from '../lib/commands/ai-config.js';
 import { deploymentCommand } from '../lib/commands/deployment.js';
 import { updateCommand }     from '../lib/commands/update.js';
 import { agentCommand }      from '../lib/commands/agent.js';
+import { linkedIdentityCommand } from '../lib/commands/linked-identity.js';
 import { notificationsCommand } from '../lib/commands/notifications.js';
 import { articleCommand }    from '../lib/commands/article.js';
 import { sharepointCommand } from '../lib/commands/sharepoint.js';
@@ -153,6 +154,7 @@ await yargs(hideBin(process.argv))
   .command(deploymentCommand)
   .command(updateCommand)
   .command(agentCommand)
+  .command(linkedIdentityCommand)
   .command(notificationsCommand)
   .command(articleCommand)
   .command(sharepointCommand)

package/lib/commands/linked-identity.js

@@ -0,0 +1,41 @@
+import { messagingGet, messagingDel } from '../api.js';
+import { runCommand } from '../run.js';
+
+function fmtDate(value) {
+  if (!value) return '—';
+  const d = new Date(value);
+  return Number.isNaN(d.getTime()) ? String(value) : d.toISOString().replace('T', ' ').slice(0, 16) + 'Z';
+}
+
+export const linkedIdentityCommand = {
+  command: 'linked-identity <subcommand>',
+  describe: 'See and remove the Google / Microsoft / company sign-in methods linked to your site\'s users',
+  builder: (yargs) => yargs
+    .command({
+      command: 'list',
+      describe: 'List linked sign-in methods. Use when offboarding: disabling a person does not stop a linked Google sign-in.',
+      handler: runCommand(async () => {
+        const rows = await messagingGet('/admin/security/linked-identities');
+        if (!Array.isArray(rows) || rows.length === 0) {
+          console.log('No linked sign-in methods.');
+          return;
+        }
+        const emailW = Math.max(...rows.map(r => (r.userEmail ?? '').length), 5);
+        for (const r of rows) {
+          console.log(`[${String(r.id).padStart(4)}]  ${(r.userEmail ?? '—').padEnd(emailW)}  ${(r.method ?? r.idpKind).padEnd(24)}  linked ${fmtDate(r.linkedAt)}  last used ${fmtDate(r.lastLoginAt)}`);
+        }
+        console.log(`\n${rows.length} linked sign-in method(s)`);
+      }),
+    })
+    .command({
+      command: 'remove <id>',
+      describe: 'Remove one linked sign-in method by id (from `list`). The person keeps any other way they can sign in.',
+      builder: (y) => y.positional('id', { describe: 'Link id from `linked-identity list`', type: 'number' }),
+      handler: runCommand(async (argv) => {
+        if (!Number.isInteger(argv.id) || argv.id <= 0) throw new Error('id must be a positive whole number.');
+        await messagingDel(`/admin/security/linked-identities/${argv.id}`);
+        console.log(`Removed linked sign-in method ${argv.id}.`);
+      }),
+    })
+    .demandCommand(1),
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/cli",
-  "version": "1.4.86",
+  "version": "1.4.87",
   "description": "Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.",
   "type": "module",
   "bin": {