@xano/cli 1.0.6-beta.19 → 1.0.6-beta.20

package/README.md

@@ -576,9 +576,12 @@ xano tenant get <tenant_name>
 xano tenant create "My Tenant"
 xano tenant create "My Tenant" -d "Description" --type tier2 --cluster_id 1 --platform_id 5
 xano tenant create "My Tenant" --type tier2 --cluster_id 1 --license ./license.yaml
+xano tenant create "Production" --required_reviewers 1 --allow_deploy_bypass
 
 # Edit a tenant
 xano tenant edit <tenant_name> --display "New Name" -d "New description"
+xano tenant edit <tenant_name> --required_reviewers 1
+xano tenant edit <tenant_name> --required_reviewers 0
 
 # Delete a tenant (confirmation required)
 xano tenant delete <tenant_name>
@@ -629,6 +632,60 @@ xano tenant deploy_release <tenant_name> --release v1.0
 xano tenant deploy_platform <tenant_name> --platform_id 5 --license ./license.yaml
 ```
 
+If a tenant has `required_reviewers` set above 0, `tenant deploy_release` fails with an
+error naming the `tenant_deploy_request` command to run instead — see below.
+
+#### Tenant Deploy Requests
+
+When a tenant has `required_reviewers` set above 0 (see `tenant create`/`tenant edit`
+above), a release may only be deployed to it through an **approved deploy request**,
+requiring that many distinct reviewer approvals. An author with no deploy permission
+opens a request; a named reviewer who does hold deploy permission on the tenant votes to
+approve it, and once enough reviewers have approved, it deploys as part of that action.
+
+```bash
+# List deploy requests in a workspace (results show the target tenant and release)
+xano tenant_deploy_request list
+xano tenant_deploy_request list --tenant prod --status pending
+xano tenant_deploy_request list --tenant prod --release v1.2
+xano tenant_deploy_request list --to-review
+
+# Get details of a specific deploy request
+xano tenant_deploy_request get <id>
+
+# Open a deploy request (submits for review immediately unless --draft is passed)
+xano tenant_deploy_request create "Deploy v1.2 to prod" --tenant prod --release v1.2 --reviewers 12,45
+xano tenant_deploy_request create "Deploy v1.2 to prod" --tenant prod --release v1.2 --draft
+
+# Edit a deploy request's title, description or reviewers
+xano tenant_deploy_request edit <id> --title "Deploy v1.2.1 to prod"
+xano tenant_deploy_request edit <id> --reviewers 12,45,67
+
+# Change status: draft, submit, approve, request_changes, close, or reopen
+# (approve records one reviewer's vote; once enough votes are in it deploys the
+# release as part of that same call)
+xano tenant_deploy_request set_status <id> --status submit
+xano tenant_deploy_request set_status <id> --status approve
+xano tenant_deploy_request set_status <id> --status request_changes --reason "Needs a migration note"
+xano tenant_deploy_request set_status <id> --status close --reason "Superseded by a newer request"
+xano tenant_deploy_request set_status <id> --status reopen
+
+# Link a newer release to a request after changes were requested (author only)
+xano tenant_deploy_request revision <id> --release v1.2.1 --note "Added the missing migration"
+
+# Deploy past the approval gate under the deploy-bypass permission (requires the
+# tenant's allow_deploy_bypass to be enabled, and a separately-grantable RBAC
+# permission). Every use is audited.
+xano tenant_deploy_request bypass <id> --reason "Prod incident, reviewer unavailable"
+```
+
+CI example (e.g. a GitHub Action step):
+
+```bash
+xano tenant_deploy_request create "$PR_TITLE" --tenant prod --release v1.2 \
+  --description "$PR_BODY" --reviewers 12,45 -o json
+```
+
 #### Tenant License
 
 ```bash

package/dist/commands/tenant/create/index.d.ts

@@ -6,6 +6,8 @@ export default class TenantCreate extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
+        allow_deploy_bypass: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        allow_quick_deploy: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         cluster_id: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
         description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         domain: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
@@ -13,6 +15,7 @@ export default class TenantCreate extends BaseCommand {
         license: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         platform_id: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        required_reviewers: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
         type: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         tasks: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;

package/dist/commands/tenant/create/index.js

@@ -17,9 +17,20 @@ Created tenant: Production (production) - ID: 42
 `,
         `$ xano tenant create "Staging" --description "Staging env" --cluster_id 1 --platform_id 1 --type tier2 -o json`,
         `$ xano tenant create "Staging" --type tier2 --cluster_id 1 --license ./license.yaml`,
+        `$ xano tenant create "Production" --required_reviewers 1 --allow_deploy_bypass`,
     ];
     static flags = {
         ...BaseCommand.baseFlags,
+        allow_deploy_bypass: Flags.boolean({
+            default: false,
+            description: 'Allow authorized users to bypass the deploy approval gate on this tenant (via tenant_deploy_request bypass). Has no effect unless --required_reviewers is also set above 0.',
+            required: false,
+        }),
+        allow_quick_deploy: Flags.boolean({
+            default: false,
+            description: 'Allow this tenant to skip the deploy approval gate entirely for quick deploys, regardless of --required_reviewers.',
+            required: false,
+        }),
         cluster_id: Flags.integer({
             description: 'Cluster ID to deploy to (required for tier2/tier3)',
             required: false,
@@ -54,6 +65,11 @@ Created tenant: Production (production) - ID: 42
             description: 'Platform ID to use',
             required: false,
         }),
+        required_reviewers: Flags.integer({
+            default: 0,
+            description: 'When greater than 0, that many distinct reviewers must approve a tenant_deploy_request before a release may be deployed to this tenant. 0 (default) means not gated.',
+            required: false,
+        }),
         type: Flags.string({
             default: 'tier1',
             description: 'Tenant type',
@@ -79,6 +95,11 @@ Created tenant: Production (production) - ID: 42
             this.error('No workspace ID provided. Use --workspace flag or set one in your profile.');
         }
         const body = {
+            deploy_settings: {
+                allow_deploy_bypass: flags.allow_deploy_bypass,
+                allow_quick_deploy: flags.allow_quick_deploy,
+                required_reviewers: flags.required_reviewers,
+            },
             display: args.display,
             ingress: flags.ingress,
             license: flags.type,

package/dist/commands/tenant/deploy_release/index.d.ts

@@ -14,4 +14,25 @@ export default class TenantDeployRelease extends BaseCommand {
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
+    /**
+     * Does an approved tenant_deploy_request already exist for this (tenant, release)
+     * pair? The list endpoint has no release filter, so this fetches approved
+     * requests for the tenant and filters client-side by the resolved release name.
+     */
+    private hasApprovedDeployRequest;
+    /**
+     * Does this tenant have the deploy approval gate enabled?
+     *
+     * Returns false if the tenant has `allow_quick_deploy` set — that flag lets a
+     * tenant skip the approval gate entirely for quick deploys, regardless of
+     * `required_reviewers`.
+     *
+     * Deliberately uses `tenant list` rather than `tenant get`: the single-tenant
+     * GET route's output whitelist (tenant-detail.yaml) omits `deploy_settings`
+     * (which holds `required_reviewers`, `allow_deploy_bypass`, and
+     * `allow_quick_deploy`) even though the list route's output includes it
+     * — confirmed live against a running instance. Filed as a backend bug; this
+     * is the workaround until it's fixed. See TENANT_DEPLOY_REQUEST_TEST.md.
+     */
+    private tenantRequiresApproval;
 }

package/dist/commands/tenant/deploy_release/index.js

@@ -43,6 +43,27 @@ Deployed release "v1.0" to tenant: My Tenant (my-tenant)
         }
         const releaseName = flags.release;
         const tenantName = args.tenant_name;
+        // Pre-flight: the "approval required" error must always be shown before any
+        // permission/RBAC error. The backend's own deploy route checks RBAC first
+        // and the approval gate second (inside mvp:tenant_deploy_release), so a
+        // caller who lacks deploy permission would otherwise never learn a request
+        // is what's actually needed. Checking here first, with an endpoint that
+        // only needs read scope, guarantees the right error is shown regardless of
+        // whether the caller can deploy at all.
+        const requiresApproval = await this.tenantRequiresApproval(profile, workspaceId, tenantName, flags.verbose);
+        if (requiresApproval) {
+            const hasApprovedRequest = await this.hasApprovedDeployRequest({
+                profile,
+                releaseName,
+                tenantName,
+                verbose: flags.verbose,
+                workspaceId,
+            });
+            if (!hasApprovedRequest) {
+                this.error(`Tenant "${tenantName}" requires an approved deploy request before "${releaseName}" can be deployed.\n` +
+                    `Run: xano tenant_deploy_request create "Deploy ${releaseName} to ${tenantName}" --tenant ${tenantName} --release ${releaseName} --reviewers <id,id,...>`);
+            }
+        }
         const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/tenant/${tenantName}/deploy`;
         this.warn('This may take a few minutes. Please be patient.');
         const startTime = Date.now();
@@ -57,8 +78,17 @@ Deployed release "v1.0" to tenant: My Tenant (my-tenant)
                 method: 'POST',
             }, flags.verbose, profile.access_token);
             if (!response.ok) {
-                const errorText = await response.text();
-                this.error(`API request failed with status ${response.status}: ${response.statusText}\n${errorText}`);
+                let message = await this.parseApiError(response, 'API request failed');
+                // Only reached once the pre-flight above has already confirmed the
+                // approval gate is satisfied or not applicable — so a permission error
+                // here is genuinely about RBAC, not about a missing approval. If the
+                // tenant supports deploy requests, mention that path as an alternative
+                // to direct deploy, since opening a request doesn't require deploy
+                // permission.
+                if ((response.status === 401 || response.status === 403) && requiresApproval) {
+                    message += `\n\nYou don't have permission to deploy to this tenant directly, but it supports deploy requests: xano tenant_deploy_request create "Deploy ${releaseName} to ${tenantName}" --tenant ${tenantName} --release ${releaseName} --reviewers <id,id,...>`;
+                }
+                this.error(message);
             }
             const tenant = (await response.json());
             if (flags.output === 'json') {
@@ -83,4 +113,66 @@ Deployed release "v1.0" to tenant: My Tenant (my-tenant)
             }
         }
     }
+    /**
+     * Does an approved tenant_deploy_request already exist for this (tenant, release)
+     * pair? The list endpoint has no release filter, so this fetches approved
+     * requests for the tenant and filters client-side by the resolved release name.
+     */
+    async hasApprovedDeployRequest(opts) {
+        const { profile, releaseName, tenantName, verbose, workspaceId } = opts;
+        const params = new URLSearchParams({ per_page: '100', status: 'approved', tenant_name: tenantName });
+        const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/approval_request?${params}`;
+        const response = await this.verboseFetch(apiUrl, {
+            headers: {
+                accept: 'application/json',
+                Authorization: `Bearer ${profile.access_token}`,
+            },
+            method: 'GET',
+        }, verbose, profile.access_token);
+        if (!response.ok) {
+            // A read-scope failure here means something is more broadly wrong (e.g.
+            // no workspace access at all) — surface it rather than silently treating
+            // it as "no approval found", which would misreport as approval-required.
+            const message = await this.parseApiError(response, 'Failed to check for an approved deploy request');
+            this.error(message);
+        }
+        const data = (await response.json());
+        const items = Array.isArray(data) ? data : (data.items ?? []);
+        return items.some((item) => item.status === 'approved' && item._release?.name === releaseName);
+    }
+    /**
+     * Does this tenant have the deploy approval gate enabled?
+     *
+     * Returns false if the tenant has `allow_quick_deploy` set — that flag lets a
+     * tenant skip the approval gate entirely for quick deploys, regardless of
+     * `required_reviewers`.
+     *
+     * Deliberately uses `tenant list` rather than `tenant get`: the single-tenant
+     * GET route's output whitelist (tenant-detail.yaml) omits `deploy_settings`
+     * (which holds `required_reviewers`, `allow_deploy_bypass`, and
+     * `allow_quick_deploy`) even though the list route's output includes it
+     * — confirmed live against a running instance. Filed as a backend bug; this
+     * is the workaround until it's fixed. See TENANT_DEPLOY_REQUEST_TEST.md.
+     */
+    async tenantRequiresApproval(profile, workspaceId, tenantName, verbose) {
+        const params = new URLSearchParams({ per_page: '100' });
+        const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/tenant?${params}`;
+        const response = await this.verboseFetch(apiUrl, {
+            headers: {
+                accept: 'application/json',
+                Authorization: `Bearer ${profile.access_token}`,
+            },
+            method: 'GET',
+        }, verbose, profile.access_token);
+        if (!response.ok) {
+            const message = await this.parseApiError(response, 'Failed to look up tenant');
+            this.error(message);
+        }
+        const data = (await response.json());
+        const items = Array.isArray(data) ? data : (data.items ?? []);
+        const tenant = items.find((item) => item.name === tenantName);
+        if (tenant?.deploy_settings?.allow_quick_deploy)
+            return false;
+        return (tenant?.deploy_settings?.required_reviewers ?? 0) > 0;
+    }
 }

package/dist/commands/tenant/edit/index.d.ts

@@ -6,6 +6,7 @@ export default class TenantEdit extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
+        allow_quick_deploy: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         display: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         domain: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
@@ -13,6 +14,7 @@ export default class TenantEdit extends BaseCommand {
         output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         proxy: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         rbac: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        required_reviewers: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
         tasks: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;

package/dist/commands/tenant/edit/index.js

@@ -13,9 +13,15 @@ export default class TenantEdit extends BaseCommand {
 Updated tenant: New Name (my-tenant) - ID: 42
 `,
         `$ xano tenant edit t1234-abcd-xyz1 --no-tasks --no-ingress -o json`,
+        `$ xano tenant edit t1234-abcd-xyz1 --required_reviewers 1`,
     ];
     static flags = {
         ...BaseCommand.baseFlags,
+        allow_quick_deploy: Flags.boolean({
+            allowNo: true,
+            description: 'Allow this tenant to skip the deploy approval gate entirely for quick deploys, regardless of --required_reviewers.',
+            required: false,
+        }),
         description: Flags.string({
             char: 'd',
             description: 'New description',
@@ -50,6 +56,10 @@ Updated tenant: New Name (my-tenant) - ID: 42
             description: '[CRITICAL] NEVER disable RBAC without explicit user confirmation; this removes role-based access controls on the tenant. Enables/disables RBAC.',
             required: false,
         }),
+        required_reviewers: Flags.integer({
+            description: 'When greater than 0, that many distinct reviewers must approve a tenant_deploy_request before a release may be deployed to this tenant. 0 means not gated.',
+            required: false,
+        }),
         tasks: Flags.boolean({
             allowNo: true,
             description: '[IMPORTANT] ALWAYS confirm with the user before disabling background tasks; this stops scheduled jobs on the tenant. Enables/disables background tasks.',
@@ -76,8 +86,17 @@ Updated tenant: New Name (my-tenant) - ID: 42
             'Content-Type': 'application/json',
         };
         try {
-            // Fetch current tenant state (PUT requires all fields)
-            const getResponse = await this.verboseFetch(baseUrl, {
+            // Fetch current tenant state (PUT requires all fields). Deliberately uses
+            // `tenant list` rather than `tenant get`: the single-tenant GET route's
+            // output whitelist (tenant-detail.yaml) omits `deploy_settings` (which
+            // holds `required_reviewers`, `allow_deploy_bypass`, and
+            // `allow_quick_deploy`) even though the list route's output includes it
+            // — confirmed live against a running instance. Using GET here would
+            // silently reset those fields to their defaults on every edit that doesn't
+            // explicitly pass them. Filed as a backend bug; this is the workaround
+            // until it's fixed. See TENANT_DEPLOY_REQUEST_TEST.md.
+            const listParams = new URLSearchParams({ per_page: '100' });
+            const getResponse = await this.verboseFetch(`${profile.instance_origin}/api:meta/workspace/${workspaceId}/tenant?${listParams}`, {
                 headers: {
                     'accept': 'application/json',
                     'Authorization': `Bearer ${profile.access_token}`,
@@ -88,9 +107,25 @@ Updated tenant: New Name (my-tenant) - ID: 42
                 const errorText = await getResponse.text();
                 this.error(`Failed to fetch tenant: ${getResponse.status} ${getResponse.statusText}\n${errorText}`);
             }
-            const current = await getResponse.json();
-            // Merge in user-provided values
+            const listData = (await getResponse.json());
+            const listItems = Array.isArray(listData) ? listData : (listData.items ?? []);
+            const current = listItems.find((item) => item.name === tenantName);
+            if (!current) {
+                this.error(`Tenant "${tenantName}" not found`);
+            }
+            // Merge in user-provided values. allow_deploy_bypass has no edit flag (it's
+            // fixed at `tenant create` time), but the PUT still requires the full body,
+            // so its current value is preserved here rather than reset.
             const body = {
+                deploy_settings: {
+                    allow_deploy_bypass: current.deploy_settings?.allow_deploy_bypass ?? false,
+                    allow_quick_deploy: flags.allow_quick_deploy !== undefined
+                        ? flags.allow_quick_deploy
+                        : (current.deploy_settings?.allow_quick_deploy ?? false),
+                    required_reviewers: flags.required_reviewers !== undefined
+                        ? flags.required_reviewers
+                        : (current.deploy_settings?.required_reviewers ?? 0),
+                },
                 description: flags.description !== undefined ? flags.description : (current.description ?? ''),
                 display: flags.display !== undefined ? flags.display : (current.display ?? current.name),
                 domain: flags.domain !== undefined ? flags.domain : (current.domain ?? ''),

package/dist/commands/tenant_deploy_request/bypass/index.d.ts

@@ -0,0 +1,20 @@
+import BaseCommand from '../../../base-command.js';
+export default class TenantDeployRequestBypass extends BaseCommand {
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<number, {
+            max?: number;
+            min?: number;
+        }>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        reason: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/tenant_deploy_request/bypass/index.js

@@ -0,0 +1,79 @@
+import { Args, Flags } from '@oclif/core';
+import BaseCommand from '../../../base-command.js';
+export default class TenantDeployRequestBypass extends BaseCommand {
+    static args = {
+        id: Args.integer({
+            description: 'Tenant deploy request ID',
+            required: true,
+        }),
+    };
+    static description = "[CRITICAL] STOP and confirm with the user before running this; it deploys the release immediately, past the review workflow. Deploy the request's release past the approval gate under the tenant_center:deploy:bypass_approval permission. Only available if the tenant has enabled bypass (allow_deploy_bypass), and every use is logged with the given reason. The approval request's own status is left untouched.";
+    static examples = [
+        `$ xano tenant_deploy_request bypass 12 --reason "Prod incident, reviewer unavailable"
+Deployed tenant release, bypassing deploy request #12's approval gate.
+`,
+    ];
+    static flags = {
+        ...BaseCommand.baseFlags,
+        output: Flags.string({
+            char: 'o',
+            default: 'summary',
+            description: 'Output format',
+            options: ['summary', 'json'],
+            required: false,
+        }),
+        reason: Flags.string({
+            description: 'Reason for bypassing the approval gate (required, audited)',
+            required: true,
+        }),
+        workspace: Flags.string({
+            char: 'w',
+            description: 'Workspace ID (uses profile workspace if not provided)',
+            required: false,
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(TenantDeployRequestBypass);
+        const { profile } = this.resolveProfile(flags);
+        const workspaceId = flags.workspace || profile.workspace;
+        if (!workspaceId) {
+            this.error('No workspace ID provided. Use --workspace flag or set one in your profile.');
+        }
+        const body = {
+            reason: flags.reason,
+        };
+        const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/approval_request/${args.id}/override`;
+        try {
+            const response = await this.verboseFetch(apiUrl, {
+                body: JSON.stringify(body),
+                headers: {
+                    accept: 'application/json',
+                    Authorization: `Bearer ${profile.access_token}`,
+                    'Content-Type': 'application/json',
+                },
+                method: 'POST',
+            }, flags.verbose, profile.access_token);
+            if (!response.ok) {
+                const message = await this.parseApiError(response, 'Failed to bypass tenant deploy request approval gate');
+                this.error(message);
+            }
+            const deploy = (await response.json());
+            if (flags.output === 'json') {
+                this.log(JSON.stringify(deploy, null, 2));
+            }
+            else {
+                this.log(`Deployed tenant release, bypassing deploy request #${args.id}'s approval gate.`);
+                if (deploy.duration_ms !== undefined)
+                    this.log(`  Time: ${(deploy.duration_ms / 1000).toFixed(1)}s`);
+            }
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                this.error(`Failed to bypass tenant deploy request approval gate: ${error.message}`);
+            }
+            else {
+                this.error(`Failed to bypass tenant deploy request approval gate: ${String(error)}`);
+            }
+        }
+    }
+}

package/dist/commands/tenant_deploy_request/create/index.d.ts

@@ -0,0 +1,21 @@
+import BaseCommand from '../../../base-command.js';
+export default class TenantDeployRequestCreate extends BaseCommand {
+    static args: {
+        title: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        draft: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        release: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        reviewers: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        tenant: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/tenant_deploy_request/create/index.js

@@ -0,0 +1,108 @@
+import { Args, Flags } from '@oclif/core';
+import BaseCommand from '../../../base-command.js';
+export default class TenantDeployRequestCreate extends BaseCommand {
+    static args = {
+        title: Args.string({
+            description: 'Short title for the deploy request',
+            required: true,
+        }),
+    };
+    static description = 'Open a tenant deploy request asking named reviewers to approve deploying a release to a tenant. Submits for review immediately unless --draft is passed.';
+    static examples = [
+        `$ xano tenant_deploy_request create "Deploy v1.2 to prod" --tenant prod --release v1.2 --reviewers 12,45
+Created deploy request #12: "Deploy v1.2 to prod" [pending]
+`,
+        `$ xano tenant_deploy_request create "Deploy v1.2 to prod" --tenant prod --release v1.2 --draft`,
+        `$ xano tenant_deploy_request create "$PR_TITLE" --tenant prod --release v1.2 --description "$PR_BODY" --reviewers 12,45 -o json`,
+    ];
+    static flags = {
+        ...BaseCommand.baseFlags,
+        description: Flags.string({
+            char: 'd',
+            description: 'Longer description of what is being deployed and why',
+            required: false,
+        }),
+        draft: Flags.boolean({
+            default: false,
+            description: 'Save as a draft instead of submitting immediately (reviewers are not notified until submitted)',
+            required: false,
+        }),
+        output: Flags.string({
+            char: 'o',
+            default: 'summary',
+            description: 'Output format',
+            options: ['summary', 'json'],
+            required: false,
+        }),
+        release: Flags.string({
+            char: 'r',
+            description: 'Name of the release to deploy',
+            required: true,
+        }),
+        reviewers: Flags.string({
+            description: 'Comma-separated user IDs to request review from',
+            required: false,
+        }),
+        tenant: Flags.string({
+            char: 't',
+            description: 'Name of the target tenant',
+            required: true,
+        }),
+        workspace: Flags.string({
+            char: 'w',
+            description: 'Workspace ID (uses profile workspace if not provided)',
+            required: false,
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(TenantDeployRequestCreate);
+        const { profile } = this.resolveProfile(flags);
+        const workspaceId = flags.workspace || profile.workspace;
+        if (!workspaceId) {
+            this.error('No workspace ID provided. Use --workspace flag or set one in your profile.');
+        }
+        const reviewerIds = flags.reviewers
+            ? flags.reviewers.split(',').map((id) => Number.parseInt(id.trim(), 10))
+            : [];
+        const body = {
+            release_name: flags.release,
+            reviewer_ids: reviewerIds,
+            status: flags.draft ? 'draft' : 'pending',
+            tenant_name: flags.tenant,
+            title: args.title,
+        };
+        if (flags.description)
+            body.description = flags.description;
+        const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/approval_request`;
+        try {
+            const response = await this.verboseFetch(apiUrl, {
+                body: JSON.stringify(body),
+                headers: {
+                    accept: 'application/json',
+                    Authorization: `Bearer ${profile.access_token}`,
+                    'Content-Type': 'application/json',
+                },
+                method: 'POST',
+            }, flags.verbose, profile.access_token);
+            if (!response.ok) {
+                const message = await this.parseApiError(response, 'Failed to create tenant deploy request');
+                this.error(message);
+            }
+            const item = (await response.json());
+            if (flags.output === 'json') {
+                this.log(JSON.stringify(item, null, 2));
+            }
+            else {
+                this.log(`Created deploy request #${item.id}: "${item.title}" [${item.status}]`);
+            }
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                this.error(`Failed to create tenant deploy request: ${error.message}`);
+            }
+            else {
+                this.error(`Failed to create tenant deploy request: ${String(error)}`);
+            }
+        }
+    }
+}

package/dist/commands/tenant_deploy_request/edit/index.d.ts

@@ -0,0 +1,22 @@
+import BaseCommand from '../../../base-command.js';
+export default class TenantDeployRequestEdit extends BaseCommand {
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<number, {
+            max?: number;
+            min?: number;
+        }>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        reviewers: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        title: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}