@xano/cli 1.0.6-beta.2 → 1.0.6-beta.20

package/dist/commands/static_host/list/index.js

@@ -1,5 +1,6 @@
 import { Flags } from '@oclif/core';
 import BaseCommand from '../../../base-command.js';
+import { buildPagingJson, buildPagingParams, formatPagingFooter, normalizeListResponse, pagingFlags } from '../../../utils/paging.js';
 export default class StaticHostList extends BaseCommand {
     static args = {};
     static description = 'List all static hosts in a workspace from the Xano Metadata API';
@@ -15,13 +16,17 @@ Available static hosts:
   - another-host (ID: 2)
 `,
         `$ xano static_host:list -w 40 --output json
-[
-  {
-    "id": 1,
-    "name": "my-static-host",
-    "domain": "example.com"
-  }
-]
+{
+  "count": 1,
+  "page": 1,
+  "total": 3,
+  "items": [
+    {
+      "id": 1,
+      "name": "my-static-host"
+    }
+  ]
+}
 `,
         `$ xano static_host:list -p staging -o json --page 2
 [
@@ -41,16 +46,7 @@ Available static hosts:
             options: ['summary', 'json'],
             required: false,
         }),
-        page: Flags.integer({
-            default: 1,
-            description: 'Page number for pagination',
-            required: false,
-        }),
-        per_page: Flags.integer({
-            default: 50,
-            description: 'Number of results per page',
-            required: false,
-        }),
+        ...pagingFlags('page-only-envelope', { fixedPerPage: 100 }),
         workspace: Flags.string({
             char: 'w',
             description: 'Workspace ID (optional if set in profile)',
@@ -74,13 +70,7 @@ Available static hosts:
                 `  2. Set it in your profile using: xano profile:edit ${profileName} -w <workspace_id>`);
         }
         // Build query parameters
-        const queryParams = new URLSearchParams({
-            page: flags.page.toString(),
-        });
-        // Only add per_page if it's not the default value
-        if (flags.per_page !== 50) {
-            queryParams.append('per_page', flags.per_page.toString());
-        }
+        const queryParams = new URLSearchParams(buildPagingParams(flags, 'page-only-envelope'));
         // Construct the API URL
         const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/static_host?${queryParams.toString()}`;
         // Fetch static hosts from the API
@@ -96,24 +86,11 @@ Available static hosts:
                 const errorText = await response.text();
                 this.error(`API request failed with status ${response.status}: ${response.statusText}\n${errorText}`);
             }
-            const data = await response.json();
-            // Handle different response formats
-            let staticHosts;
-            if (Array.isArray(data)) {
-                staticHosts = data;
-            }
-            else if (data && typeof data === 'object' && 'static_hosts' in data && Array.isArray(data.static_hosts)) {
-                staticHosts = data.static_hosts;
-            }
-            else if (data && typeof data === 'object' && 'items' in data && Array.isArray(data.items)) {
-                staticHosts = data.items;
-            }
-            else {
-                this.error('Unexpected API response format');
-            }
+            const list = normalizeListResponse(await response.json(), ['static_hosts']);
+            const staticHosts = list.items;
             // Output results
             if (flags.output === 'json') {
-                this.log(JSON.stringify(staticHosts, null, 2));
+                this.log(JSON.stringify(buildPagingJson(list, { page: flags.page, tier: 'page-only-envelope' }), null, 2));
             }
             else {
                 // summary format
@@ -132,6 +109,9 @@ Available static hosts:
                         }
                     }
                 }
+                const footer = formatPagingFooter(list, { noun: 'static host', page: flags.page, tier: 'page-only-envelope' });
+                if (footer)
+                    this.log(footer);
             }
         }
         catch (error) {

package/dist/commands/static_host/migrate/index.js

@@ -1,5 +1,6 @@
 import { Args, Flags } from '@oclif/core';
 import BaseCommand from '../../../base-command.js';
+import { normalizeListResponse } from '../../../utils/paging.js';
 export default class StaticHostMigrate extends BaseCommand {
     static args = {
         static_host: Args.string({
@@ -85,9 +86,12 @@ Would migrate 3 v1 host(s): newsite, marketing, legacy
     /** List all static hosts in the workspace (paginates until exhausted). */
     async listHosts(profile, workspaceId, verbose) {
         const hosts = [];
-        const perPage = 100;
         for (let page = 1;; page++) {
-            const listUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/static_host?page=${page}&per_page=${perPage}`;
+            // per_page is not an input on this endpoint — the server fixes the page
+            // size — so it is deliberately not sent. Termination uses the response's
+            // own itemsTotal rather than "the page came back full", which would skip
+            // hosts if the server page size ever differed from a hardcoded guess.
+            const listUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/static_host?page=${page}`;
             // eslint-disable-next-line no-await-in-loop
             const response = await this.verboseFetch(listUrl, {
                 headers: {
@@ -100,14 +104,14 @@ Would migrate 3 v1 host(s): newsite, marketing, legacy
                 const errorText = await response.text(); // eslint-disable-line no-await-in-loop
                 this.error(`Failed to list static hosts: ${response.status} ${response.statusText}\n${errorText}`);
             }
-            const data = (await response.json()); // eslint-disable-line no-await-in-loop
-            const pageHosts = Array.isArray(data)
-                ? data
-                : data && typeof data === 'object' && 'items' in data && Array.isArray(data.items)
-                    ? data.items
-                    : [];
-            hosts.push(...pageHosts);
-            if (pageHosts.length < perPage)
+            const list = normalizeListResponse(await response.json(), ['static_hosts']); // eslint-disable-line no-await-in-loop
+            hosts.push(...list.items);
+            // Stop on the server's own total when it gives us one. Fall back to an
+            // empty page otherwise — one extra request, but it cannot under-collect
+            // and silently migrate a subset.
+            if (list.items.length === 0)
+                break;
+            if (list.itemsTotal !== undefined && hosts.length >= list.itemsTotal)
                 break;
         }
         return hosts;

package/dist/commands/tenant/backup/list/index.js

@@ -1,5 +1,6 @@
 import { Args, Flags } from '@oclif/core';
 import BaseCommand from '../../../../base-command.js';
+import { buildPagingJson } from '../../../../utils/paging.js';
 export default class TenantBackupList extends BaseCommand {
     static args = {
         tenant_name: Args.string({
@@ -70,23 +71,21 @@ Backups for tenant t1234-abcd-xyz1:
                 this.error('Unexpected API response format');
             }
             if (flags.output === 'json') {
-                this.log(JSON.stringify(backups, null, 2));
+                this.log(JSON.stringify(buildPagingJson({ items: backups }, { tier: 'none' }), null, 2));
+            }
+            else if (backups.length === 0) {
+                this.log(`No backups found for tenant ${tenantName}`);
             }
             else {
-                if (backups.length === 0) {
-                    this.log(`No backups found for tenant ${tenantName}`);
-                }
-                else {
-                    this.log(`Backups for tenant ${tenantName}:`);
-                    for (const backup of backups) {
-                        let date = 'unknown';
-                        if (backup.created_at) {
-                            const d = new Date(backup.created_at);
-                            date = Number.isNaN(d.getTime()) ? backup.created_at : d.toISOString().split('T')[0];
-                        }
-                        const desc = backup.description || 'No description';
-                        this.log(`  - #${backup.id} - ${desc} (${date})`);
+                this.log(`Backups for tenant ${tenantName}:`);
+                for (const backup of backups) {
+                    let date = 'unknown';
+                    if (backup.created_at) {
+                        const d = new Date(backup.created_at);
+                        date = Number.isNaN(d.getTime()) ? backup.created_at : d.toISOString().split('T')[0];
                     }
+                    const desc = backup.description || 'No description';
+                    this.log(`  - #${backup.id} - ${desc} (${date})`);
                 }
             }
         }

package/dist/commands/tenant/cluster/list/index.js

@@ -1,5 +1,6 @@
 import { Flags } from '@oclif/core';
 import BaseCommand from '../../../../base-command.js';
+import { buildPagingJson } from '../../../../utils/paging.js';
 export default class TenantClusterList extends BaseCommand {
     static description = 'List all tenant clusters';
     static examples = [
@@ -48,18 +49,16 @@ Tenant clusters:
                 this.error('Unexpected API response format');
             }
             if (flags.output === 'json') {
-                this.log(JSON.stringify(clusters, null, 2));
+                this.log(JSON.stringify(buildPagingJson({ items: clusters }, { tier: 'none' }), null, 2));
+            }
+            else if (clusters.length === 0) {
+                this.log('No tenant clusters found');
             }
             else {
-                if (clusters.length === 0) {
-                    this.log('No tenant clusters found');
-                }
-                else {
-                    this.log('Tenant clusters:');
-                    for (const cluster of clusters) {
-                        const type = cluster.type ? ` (${cluster.type})` : '';
-                        this.log(`  - ${cluster.name}${type} [ID: ${cluster.id}]`);
-                    }
+                this.log('Tenant clusters:');
+                for (const cluster of clusters) {
+                    const type = cluster.type ? ` (${cluster.type})` : '';
+                    this.log(`  - ${cluster.name}${type} [ID: ${cluster.id}]`);
                 }
             }
         }

package/dist/commands/tenant/create/index.d.ts

@@ -6,6 +6,8 @@ export default class TenantCreate extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
+        allow_deploy_bypass: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        allow_quick_deploy: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         cluster_id: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
         description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         domain: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
@@ -13,6 +15,7 @@ export default class TenantCreate extends BaseCommand {
         license: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         platform_id: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        required_reviewers: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
         type: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         tasks: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;

package/dist/commands/tenant/create/index.js

@@ -17,9 +17,20 @@ Created tenant: Production (production) - ID: 42
 `,
         `$ xano tenant create "Staging" --description "Staging env" --cluster_id 1 --platform_id 1 --type tier2 -o json`,
         `$ xano tenant create "Staging" --type tier2 --cluster_id 1 --license ./license.yaml`,
+        `$ xano tenant create "Production" --required_reviewers 1 --allow_deploy_bypass`,
     ];
     static flags = {
         ...BaseCommand.baseFlags,
+        allow_deploy_bypass: Flags.boolean({
+            default: false,
+            description: 'Allow authorized users to bypass the deploy approval gate on this tenant (via tenant_deploy_request bypass). Has no effect unless --required_reviewers is also set above 0.',
+            required: false,
+        }),
+        allow_quick_deploy: Flags.boolean({
+            default: false,
+            description: 'Allow this tenant to skip the deploy approval gate entirely for quick deploys, regardless of --required_reviewers.',
+            required: false,
+        }),
         cluster_id: Flags.integer({
             description: 'Cluster ID to deploy to (required for tier2/tier3)',
             required: false,
@@ -54,6 +65,11 @@ Created tenant: Production (production) - ID: 42
             description: 'Platform ID to use',
             required: false,
         }),
+        required_reviewers: Flags.integer({
+            default: 0,
+            description: 'When greater than 0, that many distinct reviewers must approve a tenant_deploy_request before a release may be deployed to this tenant. 0 (default) means not gated.',
+            required: false,
+        }),
         type: Flags.string({
             default: 'tier1',
             description: 'Tenant type',
@@ -79,6 +95,11 @@ Created tenant: Production (production) - ID: 42
             this.error('No workspace ID provided. Use --workspace flag or set one in your profile.');
         }
         const body = {
+            deploy_settings: {
+                allow_deploy_bypass: flags.allow_deploy_bypass,
+                allow_quick_deploy: flags.allow_quick_deploy,
+                required_reviewers: flags.required_reviewers,
+            },
             display: args.display,
             ingress: flags.ingress,
             license: flags.type,

package/dist/commands/tenant/deploy_release/index.d.ts

@@ -14,4 +14,25 @@ export default class TenantDeployRelease extends BaseCommand {
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
+    /**
+     * Does an approved tenant_deploy_request already exist for this (tenant, release)
+     * pair? The list endpoint has no release filter, so this fetches approved
+     * requests for the tenant and filters client-side by the resolved release name.
+     */
+    private hasApprovedDeployRequest;
+    /**
+     * Does this tenant have the deploy approval gate enabled?
+     *
+     * Returns false if the tenant has `allow_quick_deploy` set — that flag lets a
+     * tenant skip the approval gate entirely for quick deploys, regardless of
+     * `required_reviewers`.
+     *
+     * Deliberately uses `tenant list` rather than `tenant get`: the single-tenant
+     * GET route's output whitelist (tenant-detail.yaml) omits `deploy_settings`
+     * (which holds `required_reviewers`, `allow_deploy_bypass`, and
+     * `allow_quick_deploy`) even though the list route's output includes it
+     * — confirmed live against a running instance. Filed as a backend bug; this
+     * is the workaround until it's fixed. See TENANT_DEPLOY_REQUEST_TEST.md.
+     */
+    private tenantRequiresApproval;
 }

package/dist/commands/tenant/deploy_release/index.js

@@ -43,6 +43,27 @@ Deployed release "v1.0" to tenant: My Tenant (my-tenant)
         }
         const releaseName = flags.release;
         const tenantName = args.tenant_name;
+        // Pre-flight: the "approval required" error must always be shown before any
+        // permission/RBAC error. The backend's own deploy route checks RBAC first
+        // and the approval gate second (inside mvp:tenant_deploy_release), so a
+        // caller who lacks deploy permission would otherwise never learn a request
+        // is what's actually needed. Checking here first, with an endpoint that
+        // only needs read scope, guarantees the right error is shown regardless of
+        // whether the caller can deploy at all.
+        const requiresApproval = await this.tenantRequiresApproval(profile, workspaceId, tenantName, flags.verbose);
+        if (requiresApproval) {
+            const hasApprovedRequest = await this.hasApprovedDeployRequest({
+                profile,
+                releaseName,
+                tenantName,
+                verbose: flags.verbose,
+                workspaceId,
+            });
+            if (!hasApprovedRequest) {
+                this.error(`Tenant "${tenantName}" requires an approved deploy request before "${releaseName}" can be deployed.\n` +
+                    `Run: xano tenant_deploy_request create "Deploy ${releaseName} to ${tenantName}" --tenant ${tenantName} --release ${releaseName} --reviewers <id,id,...>`);
+            }
+        }
         const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/tenant/${tenantName}/deploy`;
         this.warn('This may take a few minutes. Please be patient.');
         const startTime = Date.now();
@@ -57,8 +78,17 @@ Deployed release "v1.0" to tenant: My Tenant (my-tenant)
                 method: 'POST',
             }, flags.verbose, profile.access_token);
             if (!response.ok) {
-                const errorText = await response.text();
-                this.error(`API request failed with status ${response.status}: ${response.statusText}\n${errorText}`);
+                let message = await this.parseApiError(response, 'API request failed');
+                // Only reached once the pre-flight above has already confirmed the
+                // approval gate is satisfied or not applicable — so a permission error
+                // here is genuinely about RBAC, not about a missing approval. If the
+                // tenant supports deploy requests, mention that path as an alternative
+                // to direct deploy, since opening a request doesn't require deploy
+                // permission.
+                if ((response.status === 401 || response.status === 403) && requiresApproval) {
+                    message += `\n\nYou don't have permission to deploy to this tenant directly, but it supports deploy requests: xano tenant_deploy_request create "Deploy ${releaseName} to ${tenantName}" --tenant ${tenantName} --release ${releaseName} --reviewers <id,id,...>`;
+                }
+                this.error(message);
             }
             const tenant = (await response.json());
             if (flags.output === 'json') {
@@ -83,4 +113,66 @@ Deployed release "v1.0" to tenant: My Tenant (my-tenant)
             }
         }
     }
+    /**
+     * Does an approved tenant_deploy_request already exist for this (tenant, release)
+     * pair? The list endpoint has no release filter, so this fetches approved
+     * requests for the tenant and filters client-side by the resolved release name.
+     */
+    async hasApprovedDeployRequest(opts) {
+        const { profile, releaseName, tenantName, verbose, workspaceId } = opts;
+        const params = new URLSearchParams({ per_page: '100', status: 'approved', tenant_name: tenantName });
+        const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/approval_request?${params}`;
+        const response = await this.verboseFetch(apiUrl, {
+            headers: {
+                accept: 'application/json',
+                Authorization: `Bearer ${profile.access_token}`,
+            },
+            method: 'GET',
+        }, verbose, profile.access_token);
+        if (!response.ok) {
+            // A read-scope failure here means something is more broadly wrong (e.g.
+            // no workspace access at all) — surface it rather than silently treating
+            // it as "no approval found", which would misreport as approval-required.
+            const message = await this.parseApiError(response, 'Failed to check for an approved deploy request');
+            this.error(message);
+        }
+        const data = (await response.json());
+        const items = Array.isArray(data) ? data : (data.items ?? []);
+        return items.some((item) => item.status === 'approved' && item._release?.name === releaseName);
+    }
+    /**
+     * Does this tenant have the deploy approval gate enabled?
+     *
+     * Returns false if the tenant has `allow_quick_deploy` set — that flag lets a
+     * tenant skip the approval gate entirely for quick deploys, regardless of
+     * `required_reviewers`.
+     *
+     * Deliberately uses `tenant list` rather than `tenant get`: the single-tenant
+     * GET route's output whitelist (tenant-detail.yaml) omits `deploy_settings`
+     * (which holds `required_reviewers`, `allow_deploy_bypass`, and
+     * `allow_quick_deploy`) even though the list route's output includes it
+     * — confirmed live against a running instance. Filed as a backend bug; this
+     * is the workaround until it's fixed. See TENANT_DEPLOY_REQUEST_TEST.md.
+     */
+    async tenantRequiresApproval(profile, workspaceId, tenantName, verbose) {
+        const params = new URLSearchParams({ per_page: '100' });
+        const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/tenant?${params}`;
+        const response = await this.verboseFetch(apiUrl, {
+            headers: {
+                accept: 'application/json',
+                Authorization: `Bearer ${profile.access_token}`,
+            },
+            method: 'GET',
+        }, verbose, profile.access_token);
+        if (!response.ok) {
+            const message = await this.parseApiError(response, 'Failed to look up tenant');
+            this.error(message);
+        }
+        const data = (await response.json());
+        const items = Array.isArray(data) ? data : (data.items ?? []);
+        const tenant = items.find((item) => item.name === tenantName);
+        if (tenant?.deploy_settings?.allow_quick_deploy)
+            return false;
+        return (tenant?.deploy_settings?.required_reviewers ?? 0) > 0;
+    }
 }

package/dist/commands/tenant/edit/index.d.ts

@@ -6,6 +6,7 @@ export default class TenantEdit extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
+        allow_quick_deploy: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         display: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         domain: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
@@ -13,6 +14,7 @@ export default class TenantEdit extends BaseCommand {
         output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         proxy: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         rbac: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        required_reviewers: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
         tasks: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;

package/dist/commands/tenant/edit/index.js

@@ -13,9 +13,15 @@ export default class TenantEdit extends BaseCommand {
 Updated tenant: New Name (my-tenant) - ID: 42
 `,
         `$ xano tenant edit t1234-abcd-xyz1 --no-tasks --no-ingress -o json`,
+        `$ xano tenant edit t1234-abcd-xyz1 --required_reviewers 1`,
     ];
     static flags = {
         ...BaseCommand.baseFlags,
+        allow_quick_deploy: Flags.boolean({
+            allowNo: true,
+            description: 'Allow this tenant to skip the deploy approval gate entirely for quick deploys, regardless of --required_reviewers.',
+            required: false,
+        }),
         description: Flags.string({
             char: 'd',
             description: 'New description',
@@ -50,6 +56,10 @@ Updated tenant: New Name (my-tenant) - ID: 42
             description: '[CRITICAL] NEVER disable RBAC without explicit user confirmation; this removes role-based access controls on the tenant. Enables/disables RBAC.',
             required: false,
         }),
+        required_reviewers: Flags.integer({
+            description: 'When greater than 0, that many distinct reviewers must approve a tenant_deploy_request before a release may be deployed to this tenant. 0 means not gated.',
+            required: false,
+        }),
         tasks: Flags.boolean({
             allowNo: true,
             description: '[IMPORTANT] ALWAYS confirm with the user before disabling background tasks; this stops scheduled jobs on the tenant. Enables/disables background tasks.',
@@ -76,8 +86,17 @@ Updated tenant: New Name (my-tenant) - ID: 42
             'Content-Type': 'application/json',
         };
         try {
-            // Fetch current tenant state (PUT requires all fields)
-            const getResponse = await this.verboseFetch(baseUrl, {
+            // Fetch current tenant state (PUT requires all fields). Deliberately uses
+            // `tenant list` rather than `tenant get`: the single-tenant GET route's
+            // output whitelist (tenant-detail.yaml) omits `deploy_settings` (which
+            // holds `required_reviewers`, `allow_deploy_bypass`, and
+            // `allow_quick_deploy`) even though the list route's output includes it
+            // — confirmed live against a running instance. Using GET here would
+            // silently reset those fields to their defaults on every edit that doesn't
+            // explicitly pass them. Filed as a backend bug; this is the workaround
+            // until it's fixed. See TENANT_DEPLOY_REQUEST_TEST.md.
+            const listParams = new URLSearchParams({ per_page: '100' });
+            const getResponse = await this.verboseFetch(`${profile.instance_origin}/api:meta/workspace/${workspaceId}/tenant?${listParams}`, {
                 headers: {
                     'accept': 'application/json',
                     'Authorization': `Bearer ${profile.access_token}`,
@@ -88,9 +107,25 @@ Updated tenant: New Name (my-tenant) - ID: 42
                 const errorText = await getResponse.text();
                 this.error(`Failed to fetch tenant: ${getResponse.status} ${getResponse.statusText}\n${errorText}`);
             }
-            const current = await getResponse.json();
-            // Merge in user-provided values
+            const listData = (await getResponse.json());
+            const listItems = Array.isArray(listData) ? listData : (listData.items ?? []);
+            const current = listItems.find((item) => item.name === tenantName);
+            if (!current) {
+                this.error(`Tenant "${tenantName}" not found`);
+            }
+            // Merge in user-provided values. allow_deploy_bypass has no edit flag (it's
+            // fixed at `tenant create` time), but the PUT still requires the full body,
+            // so its current value is preserved here rather than reset.
             const body = {
+                deploy_settings: {
+                    allow_deploy_bypass: current.deploy_settings?.allow_deploy_bypass ?? false,
+                    allow_quick_deploy: flags.allow_quick_deploy !== undefined
+                        ? flags.allow_quick_deploy
+                        : (current.deploy_settings?.allow_quick_deploy ?? false),
+                    required_reviewers: flags.required_reviewers !== undefined
+                        ? flags.required_reviewers
+                        : (current.deploy_settings?.required_reviewers ?? 0),
+                },
                 description: flags.description !== undefined ? flags.description : (current.description ?? ''),
                 display: flags.display !== undefined ? flags.display : (current.display ?? current.name),
                 domain: flags.domain !== undefined ? flags.domain : (current.domain ?? ''),

package/dist/commands/tenant/env/list/index.js

@@ -1,5 +1,6 @@
 import { Args, Flags } from '@oclif/core';
 import BaseCommand from '../../../../base-command.js';
+import { formatPagingFooter } from '../../../../utils/paging.js';
 export default class TenantEnvList extends BaseCommand {
     static args = {
         tenant_name: Args.string({
@@ -68,6 +69,9 @@ Environment variables for tenant my-tenant:
                         this.log(`  - ${envVar.name}`);
                     }
                 }
+                const footer = formatPagingFooter({ items: envVars }, { noun: 'environment variable', tier: 'none' });
+                if (footer)
+                    this.log(footer);
             }
         }
         catch (error) {

package/dist/commands/tenant/list/index.js

@@ -1,5 +1,6 @@
 import { Flags } from '@oclif/core';
 import BaseCommand from '../../../base-command.js';
+import { buildPagingJson } from '../../../utils/paging.js';
 export default class TenantList extends BaseCommand {
     static description = 'List all tenants in a workspace';
     static examples = [
@@ -65,28 +66,26 @@ Tenants in workspace 5:
                 this.error('Unexpected API response format');
             }
             if (flags.output === 'json') {
-                this.log(JSON.stringify(tenants, null, 2));
+                this.log(JSON.stringify(buildPagingJson({ items: tenants }, { tier: 'none' }), null, 2));
+            }
+            else if (tenants.length === 0) {
+                this.log('No tenants found');
             }
             else {
-                if (tenants.length === 0) {
-                    this.log('No tenants found');
-                }
-                else {
-                    this.log(`Tenants in workspace ${workspaceId}:`);
-                    for (const tenant of tenants) {
-                        const state = tenant.state ? ` [${tenant.state}]` : '';
-                        const license = tenant.license ? ` - ${tenant.license}` : '';
-                        const typeLabel = tenant.type && tenant.type !== 'standard' ? ` [${tenant.type}]` : '';
-                        this.log(`  - ${tenant.display || tenant.name} (${tenant.name})${state}${license}${typeLabel}`);
-                        if (tenant.cluster?.name)
-                            this.log(`      Cluster: ${tenant.cluster.name}`);
-                        const releaseName = typeof tenant.release === 'string' ? tenant.release : tenant.release?.name;
-                        const releaseId = typeof tenant.release === 'object' ? tenant.release?.id : undefined;
-                        if (releaseName)
-                            this.log(`      Release: ${releaseName} (ID: ${releaseId})`);
-                        if (tenant.platform?.name)
-                            this.log(`      Platform: ${tenant.platform.name}`);
-                    }
+                this.log(`Tenants in workspace ${workspaceId}:`);
+                for (const tenant of tenants) {
+                    const state = tenant.state ? ` [${tenant.state}]` : '';
+                    const license = tenant.license ? ` - ${tenant.license}` : '';
+                    const typeLabel = tenant.type && tenant.type !== 'standard' ? ` [${tenant.type}]` : '';
+                    this.log(`  - ${tenant.display || tenant.name} (${tenant.name})${state}${license}${typeLabel}`);
+                    if (tenant.cluster?.name)
+                        this.log(`      Cluster: ${tenant.cluster.name}`);
+                    const releaseName = typeof tenant.release === 'string' ? tenant.release : tenant.release?.name;
+                    const releaseId = typeof tenant.release === 'object' ? tenant.release?.id : undefined;
+                    if (releaseName)
+                        this.log(`      Release: ${releaseName} (ID: ${releaseId})`);
+                    if (tenant.platform?.name)
+                        this.log(`      Platform: ${tenant.platform.name}`);
                 }
             }
         }

package/dist/commands/tenant/pull/index.d.ts

@@ -14,10 +14,4 @@ export default class Pull extends BaseCommand {
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
-    /**
-     * Sanitize a document name for use as a filename.
-     * Strips quotes, replaces spaces with underscores, and removes
-     * characters that are unsafe in filenames.
-     */
-    private sanitizeFilename;
 }