@zincapp/znvault-cli 2.11.0 → 2.12.0

package/dist/commands/completion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"completion.d.ts","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AAmUzC,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyCjE"}
+{"version":3,"file":"completion.d.ts","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AAqWzC,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyCjE"}

package/dist/commands/completion.js

@@ -13,7 +13,7 @@ _znvault_completions() {
     _init_completion || return
 
     # Top-level commands
-    local commands="login logout whoami config profile health status cluster tenant user superadmin lockdown audit emergency cert agent update apikey policy permissions secret kms role backup notification tui dashboard self-update advisor completion version help"
+    local commands="login logout whoami config profile health status cluster tenant user superadmin lockdown audit emergency cert agent update apikey policy permissions secret kms role backup notification tui dashboard self-update advisor crypto device unseal completion version help"
 
     # Subcommands for each command group
     local cluster_cmds="status takeover release promote maintenance"
@@ -35,6 +35,9 @@ _znvault_completions() {
     local advisor_cmds="audit rules suggest llm"
     local advisor_llm_cmds="status get config test delete"
     local profile_cmds="list create delete use rename"
+    local crypto_cmds="status list grant revoke transfer-root"
+    local device_cmds="list revoke enroll"
+    local unseal_cmds="status seal"
     local completion_cmds="bash zsh"
 
     case "\${cword}" in
@@ -60,6 +63,9 @@ _znvault_completions() {
                 notification) COMPREPLY=( \$(compgen -W "\${notification_cmds}" -- "\${cur}") ) ;;
                 advisor) COMPREPLY=( \$(compgen -W "\${advisor_cmds}" -- "\${cur}") ) ;;
                 profile) COMPREPLY=( \$(compgen -W "\${profile_cmds}" -- "\${cur}") ) ;;
+                crypto) COMPREPLY=( \$(compgen -W "\${crypto_cmds}" -- "\${cur}") ) ;;
+                device) COMPREPLY=( \$(compgen -W "\${device_cmds}" -- "\${cur}") ) ;;
+                unseal) COMPREPLY=( \$(compgen -W "\${unseal_cmds}" -- "\${cur}") ) ;;
                 completion) COMPREPLY=( \$(compgen -W "\${completion_cmds}" -- "\${cur}") ) ;;
                 *) ;;
             esac
@@ -178,6 +184,9 @@ _znvault() {
                 'dashboard:Launch interactive dashboard'
                 'self-update:Update znvault CLI'
                 'advisor:AI-powered security advisor'
+                'crypto:Manage admin crypto access grants'
+                'device:Manage enrolled devices'
+                'unseal:Unseal the vault for crypto operations'
                 'completion:Generate shell completion scripts'
                 'version:Show version'
                 'help:Display help'
@@ -300,6 +309,31 @@ _znvault() {
                     fi
                     _describe -t subcommands 'subcommand' subcommands
                     ;;
+                crypto)
+                    subcommands=(
+                        'status:Show crypto mode status'
+                        'list:List crypto grants'
+                        'grant:Grant crypto access to an admin'
+                        'revoke:Revoke crypto access from an admin'
+                        'transfer-root:Transfer tenant root to another user'
+                    )
+                    _describe -t subcommands 'subcommand' subcommands
+                    ;;
+                device)
+                    subcommands=(
+                        'list:List enrolled devices'
+                        'revoke:Revoke a device'
+                        'enroll:Show enrollment instructions'
+                    )
+                    _describe -t subcommands 'subcommand' subcommands
+                    ;;
+                unseal)
+                    subcommands=(
+                        'status:Check unseal status'
+                        'seal:Seal the vault'
+                    )
+                    _describe -t subcommands 'subcommand' subcommands
+                    ;;
                 completion)
                     subcommands=(
                         'bash:Generate bash completion'

package/dist/commands/completion.js.map

@@ -1 +1 @@
-{"version":3,"file":"completion.js","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAG/C,OAAO,KAAK,MAAM,MAAM,kBAAkB,CAAC;AAE3C;;GAEG;AACH,SAAS,sBAAsB;IAC7B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2GR,CAAC;AACF,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB;IAC5B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuMR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAgB;IACzD,MAAM,UAAU,GAAG,OAAO;SACvB,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,mCAAmC,CAAC,CAAC;IAEpD,UAAU;SACP,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,iCAAiC,CAAC;SAC9C,MAAM,CAAC,GAAG,EAAE;QACX,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEL,UAAU;SACP,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,GAAG,EAAE;QACX,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEL,iDAAiD;IACjD,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE;QACrB,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;QAC/F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"completion.js","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAG/C,OAAO,KAAK,MAAM,MAAM,kBAAkB,CAAC;AAE3C;;GAEG;AACH,SAAS,sBAAsB;IAC7B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiHR,CAAC;AACF,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB;IAC5B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmOR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAgB;IACzD,MAAM,UAAU,GAAG,OAAO;SACvB,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,mCAAmC,CAAC,CAAC;IAEpD,UAAU;SACP,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,iCAAiC,CAAC;SAC9C,MAAM,CAAC,GAAG,EAAE;QACX,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEL,UAAU;SACP,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,GAAG,EAAE;QACX,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEL,iDAAiD;IACjD,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE;QACrB,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;QAC/F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/plugin.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Plugin Management Commands
+ *
+ * Commands for installing, uninstalling, and managing CLI plugins.
+ */
+import { type Command } from 'commander';
+export declare function registerPluginCommands(program: Command): void;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/commands/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/commands/plugin.ts"],"names":[],"mappings":"AACA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AA2MzC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAic7D"}

package/dist/commands/plugin.js

@@ -0,0 +1,548 @@
+// Path: znvault-cli/src/commands/plugin.ts
+/**
+ * Plugin Management Commands
+ *
+ * Commands for installing, uninstalling, and managing CLI plugins.
+ */
+import { execSync, spawn } from 'node:child_process';
+import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import ora from 'ora';
+import chalk from 'chalk';
+import * as output from '../lib/output.js';
+import { getPlugins, addPlugin, removePlugin, setPluginEnabled, getConfigPath, } from '../lib/config.js';
+// ZincApp plugin namespace
+const ZINCAPP_PREFIX = '@zincapp/znvault-plugin-';
+/**
+ * Get the plugins directory path (alongside config.json)
+ */
+function getPluginsDir() {
+    const configPath = getConfigPath();
+    return join(dirname(configPath), 'plugins');
+}
+/**
+ * Ensure plugins directory exists with package.json
+ */
+function ensurePluginsDir() {
+    const pluginsDir = getPluginsDir();
+    if (!existsSync(pluginsDir)) {
+        mkdirSync(pluginsDir, { recursive: true });
+    }
+    const packageJsonPath = join(pluginsDir, 'package.json');
+    if (!existsSync(packageJsonPath)) {
+        writeFileSync(packageJsonPath, JSON.stringify({
+            name: 'znvault-plugins',
+            version: '1.0.0',
+            private: true,
+            description: 'ZNVault CLI plugins',
+            type: 'module',
+        }, null, 2));
+    }
+    return pluginsDir;
+}
+/**
+ * Resolve plugin name to full package name
+ * - "payara" -> "@zincapp/znvault-plugin-payara"
+ * - "@zincapp/znvault-plugin-payara" -> "@zincapp/znvault-plugin-payara"
+ * - "@other/plugin" -> "@other/plugin"
+ */
+function resolvePluginName(name) {
+    // Already a scoped or full package name
+    if (name.startsWith('@') || name.includes('/')) {
+        return name;
+    }
+    // Check if it's a simple name, prepend ZincApp prefix
+    return `${ZINCAPP_PREFIX}${name}`;
+}
+/**
+ * Get short name from full package name
+ */
+function getShortName(packageName) {
+    if (packageName.startsWith(ZINCAPP_PREFIX)) {
+        return packageName.slice(ZINCAPP_PREFIX.length);
+    }
+    return packageName;
+}
+/**
+ * Check if a package exists on npm
+ */
+async function packageExists(packageName) {
+    try {
+        execSync(`npm view ${packageName} version`, { stdio: 'pipe' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Get package version from npm
+ */
+function getPackageVersion(packageName) {
+    try {
+        return execSync(`npm view ${packageName} version`, { stdio: 'pipe' }).toString().trim();
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Get installed package version
+ */
+function getInstalledVersion(packageName, pluginsDir) {
+    try {
+        const packageJsonPath = join(pluginsDir, 'node_modules', packageName, 'package.json');
+        if (existsSync(packageJsonPath)) {
+            const pkg = JSON.parse(readFileSync(packageJsonPath, 'utf-8'));
+            return pkg.version;
+        }
+    }
+    catch {
+        // Ignore
+    }
+    return null;
+}
+/**
+ * Run npm command in plugins directory
+ */
+function runNpm(args, pluginsDir) {
+    return new Promise((resolve) => {
+        const npm = spawn('npm', args, {
+            cwd: pluginsDir,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let stdout = '';
+        let stderr = '';
+        npm.stdout.on('data', (data) => {
+            stdout += data.toString();
+        });
+        npm.stderr.on('data', (data) => {
+            stderr += data.toString();
+        });
+        npm.on('close', (code) => {
+            resolve({
+                success: code === 0,
+                output: stdout + stderr,
+            });
+        });
+        npm.on('error', (err) => {
+            resolve({
+                success: false,
+                output: err.message,
+            });
+        });
+    });
+}
+/**
+ * Validate that a package is a valid znvault CLI plugin
+ */
+async function validatePlugin(packageName, pluginsDir) {
+    try {
+        const packageJsonPath = join(pluginsDir, 'node_modules', packageName, 'package.json');
+        if (!existsSync(packageJsonPath)) {
+            return { valid: false, error: 'Package not found after installation' };
+        }
+        const pkg = JSON.parse(readFileSync(packageJsonPath, 'utf-8'));
+        // Check for CLI plugin export
+        const hasCliExport = pkg.exports?.['./cli'] || pkg.main;
+        if (!hasCliExport) {
+            return { valid: false, error: 'Package does not export a CLI plugin' };
+        }
+        // Try to dynamically import and validate
+        try {
+            const modulePath = join(pluginsDir, 'node_modules', packageName);
+            const cliPath = pkg.exports?.['./cli']?.import || pkg.exports?.['./cli'] || './dist/cli.js';
+            const fullPath = join(modulePath, cliPath);
+            // Check if the CLI module exists
+            if (!existsSync(fullPath.replace(/\.js$/, '.js')) && !existsSync(fullPath)) {
+                // Try without ./cli export - main export might have createPayaraCLIPlugin
+                const mainPath = join(modulePath, pkg.exports?.['.']?.import || pkg.main || 'dist/index.js');
+                if (!existsSync(mainPath)) {
+                    return { valid: false, error: 'CLI module not found' };
+                }
+            }
+            return { valid: true };
+        }
+        catch (err) {
+            return { valid: false, error: `Failed to validate plugin: ${err}` };
+        }
+    }
+    catch (err) {
+        return { valid: false, error: `Validation error: ${err}` };
+    }
+}
+export function registerPluginCommands(program) {
+    const plugin = program
+        .command('plugin')
+        .description('Manage CLI plugins');
+    // ============================================================================
+    // plugin install <name>
+    // ============================================================================
+    plugin
+        .command('install <name>')
+        .alias('add')
+        .description('Install a CLI plugin')
+        .option('-f, --force', 'Force reinstall even if already installed')
+        .option('-g, --global', 'Install globally instead of in plugins directory')
+        .action(async (name, options) => {
+        const spinner = ora('Resolving plugin...').start();
+        try {
+            // Resolve plugin name
+            let packageName = resolvePluginName(name);
+            let foundWithPrefix = true;
+            // Check if @zincapp prefixed version exists
+            if (packageName.startsWith(ZINCAPP_PREFIX)) {
+                const exists = await packageExists(packageName);
+                if (!exists) {
+                    // Try the original name directly
+                    const directExists = await packageExists(name);
+                    if (directExists) {
+                        packageName = name;
+                        foundWithPrefix = false;
+                    }
+                    else {
+                        spinner.fail(`Plugin not found: ${packageName}`);
+                        output.error(`Could not find '${packageName}' or '${name}' on npm.`);
+                        console.log();
+                        console.log('Available ZincApp plugins:');
+                        console.log(`  ${chalk.cyan('payara')} - Payara WAR deployment`);
+                        process.exit(1);
+                    }
+                }
+            }
+            spinner.text = `Installing ${packageName}...`;
+            // Check if already configured
+            const existingPlugins = getPlugins();
+            const alreadyConfigured = existingPlugins.some(p => p.package === packageName);
+            if (alreadyConfigured && !options.force) {
+                spinner.info(`Plugin ${chalk.cyan(getShortName(packageName))} is already installed.`);
+                console.log(`Use ${chalk.cyan('--force')} to reinstall.`);
+                return;
+            }
+            // Ensure plugins directory
+            const pluginsDir = ensurePluginsDir();
+            // Install package
+            spinner.text = `Installing ${packageName}...`;
+            const installResult = await runNpm(['install', packageName], pluginsDir);
+            if (!installResult.success) {
+                spinner.fail(`Failed to install ${packageName}`);
+                output.error(installResult.output);
+                process.exit(1);
+            }
+            // Validate it's a valid plugin
+            spinner.text = 'Validating plugin...';
+            const validation = await validatePlugin(packageName, pluginsDir);
+            if (!validation.valid) {
+                spinner.fail(`Invalid plugin: ${validation.error}`);
+                // Uninstall the invalid package
+                await runNpm(['uninstall', packageName], pluginsDir);
+                output.error('The package was installed but is not a valid znvault CLI plugin.');
+                process.exit(1);
+            }
+            // Add to config
+            addPlugin({ package: packageName, enabled: true });
+            const version = getInstalledVersion(packageName, pluginsDir);
+            spinner.succeed(`Installed ${chalk.cyan(getShortName(packageName))}${version ? ` v${version}` : ''}`);
+            console.log();
+            console.log(chalk.dim('Plugin will be loaded on next command execution.'));
+            if (foundWithPrefix && name !== packageName) {
+                console.log(chalk.dim(`Resolved '${name}' to '${packageName}'`));
+            }
+        }
+        catch (err) {
+            spinner.fail('Installation failed');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // ============================================================================
+    // plugin uninstall <name>
+    // ============================================================================
+    plugin
+        .command('uninstall <name>')
+        .alias('remove')
+        .description('Uninstall a CLI plugin')
+        .action(async (name) => {
+        const spinner = ora('Uninstalling plugin...').start();
+        try {
+            // Resolve plugin name
+            const packageName = resolvePluginName(name);
+            // Check if configured
+            const plugins = getPlugins();
+            const found = plugins.find(p => p.package === packageName ||
+                p.package === name ||
+                getShortName(p.package ?? '') === name);
+            if (!found) {
+                spinner.fail(`Plugin not found: ${name}`);
+                output.error('Plugin is not installed. Use "znvault plugin list" to see installed plugins.');
+                process.exit(1);
+            }
+            const actualPackage = found.package;
+            // Remove from plugins directory
+            const pluginsDir = getPluginsDir();
+            if (existsSync(join(pluginsDir, 'node_modules', actualPackage))) {
+                spinner.text = `Removing ${actualPackage}...`;
+                const uninstallResult = await runNpm(['uninstall', actualPackage], pluginsDir);
+                if (!uninstallResult.success) {
+                    spinner.warn('Failed to uninstall npm package, but removing from config...');
+                }
+            }
+            // Remove from config
+            removePlugin(actualPackage);
+            spinner.succeed(`Uninstalled ${chalk.cyan(getShortName(actualPackage))}`);
+        }
+        catch (err) {
+            spinner.fail('Uninstall failed');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // ============================================================================
+    // plugin list
+    // ============================================================================
+    plugin
+        .command('list')
+        .alias('ls')
+        .description('List installed plugins')
+        .option('--json', 'Output as JSON')
+        .action((options) => {
+        const plugins = getPlugins();
+        const pluginsDir = getPluginsDir();
+        if (plugins.length === 0) {
+            if (options.json) {
+                console.log(JSON.stringify([], null, 2));
+            }
+            else {
+                console.log(chalk.dim('No plugins installed.'));
+                console.log();
+                console.log(`Install a plugin with: ${chalk.cyan('znvault plugin install <name>')}`);
+                console.log();
+                console.log('Available plugins:');
+                console.log(`  ${chalk.cyan('payara')} - Payara WAR deployment`);
+            }
+            return;
+        }
+        const pluginList = plugins.map(p => {
+            const packageName = p.package || p.path || 'unknown';
+            const shortName = getShortName(packageName);
+            const version = p.package ? getInstalledVersion(p.package, pluginsDir) : null;
+            const enabled = p.enabled !== false;
+            return {
+                name: shortName,
+                package: packageName,
+                version: version || 'unknown',
+                enabled,
+                source: p.path ? 'local' : 'npm',
+            };
+        });
+        if (options.json) {
+            console.log(JSON.stringify(pluginList, null, 2));
+            return;
+        }
+        console.log(chalk.bold('Installed Plugins'));
+        console.log();
+        for (const p of pluginList) {
+            const status = p.enabled ? chalk.green('●') : chalk.gray('○');
+            const versionStr = chalk.dim(`v${p.version}`);
+            const disabledStr = p.enabled ? '' : chalk.yellow(' (disabled)');
+            console.log(`  ${status} ${chalk.cyan(p.name)} ${versionStr}${disabledStr}`);
+            if (p.package !== p.name) {
+                console.log(`    ${chalk.dim(p.package)}`);
+            }
+        }
+        console.log();
+        console.log(chalk.dim(`Plugins directory: ${pluginsDir}`));
+    });
+    // ============================================================================
+    // plugin update [name]
+    // ============================================================================
+    plugin
+        .command('update [name]')
+        .alias('upgrade')
+        .description('Update plugins (all or specific)')
+        .action(async (name) => {
+        const plugins = getPlugins();
+        if (plugins.length === 0) {
+            console.log(chalk.dim('No plugins installed.'));
+            return;
+        }
+        const pluginsDir = getPluginsDir();
+        const spinner = ora('Checking for updates...').start();
+        try {
+            // Filter to specific plugin if name provided
+            let toUpdate = plugins.filter(p => p.package);
+            if (name) {
+                const packageName = resolvePluginName(name);
+                toUpdate = toUpdate.filter(p => p.package === packageName ||
+                    p.package === name ||
+                    getShortName(p.package ?? '') === name);
+                if (toUpdate.length === 0) {
+                    spinner.fail(`Plugin not found: ${name}`);
+                    process.exit(1);
+                }
+            }
+            const updates = [];
+            for (const p of toUpdate) {
+                const packageName = p.package;
+                const currentVersion = getInstalledVersion(packageName, pluginsDir);
+                const latestVersion = getPackageVersion(packageName);
+                if (currentVersion && latestVersion && currentVersion !== latestVersion) {
+                    updates.push({
+                        name: getShortName(packageName),
+                        from: currentVersion,
+                        to: latestVersion,
+                    });
+                }
+            }
+            if (updates.length === 0) {
+                spinner.succeed('All plugins are up to date.');
+                return;
+            }
+            spinner.text = `Updating ${updates.length} plugin(s)...`;
+            // Update all at once
+            const packagesToUpdate = toUpdate.map(p => p.package);
+            const updateResult = await runNpm(['update', ...packagesToUpdate], pluginsDir);
+            if (!updateResult.success) {
+                spinner.fail('Update failed');
+                output.error(updateResult.output);
+                process.exit(1);
+            }
+            spinner.succeed('Plugins updated');
+            console.log();
+            for (const u of updates) {
+                console.log(`  ${chalk.cyan(u.name)}: ${u.from} → ${chalk.green(u.to)}`);
+            }
+        }
+        catch (err) {
+            spinner.fail('Update failed');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // ============================================================================
+    // plugin enable <name>
+    // ============================================================================
+    plugin
+        .command('enable <name>')
+        .description('Enable a disabled plugin')
+        .action((name) => {
+        const plugins = getPlugins();
+        const packageName = resolvePluginName(name);
+        const found = plugins.find(p => p.package === packageName ||
+            p.package === name ||
+            getShortName(p.package ?? '') === name);
+        if (!found) {
+            output.error(`Plugin not found: ${name}`);
+            console.log('Use "znvault plugin list" to see installed plugins.');
+            process.exit(1);
+        }
+        if (found.enabled !== false) {
+            console.log(`Plugin ${chalk.cyan(getShortName(found.package ?? name))} is already enabled.`);
+            return;
+        }
+        setPluginEnabled(found.package ?? found.path ?? '', true);
+        output.success(`Enabled plugin: ${getShortName(found.package ?? name)}`);
+    });
+    // ============================================================================
+    // plugin disable <name>
+    // ============================================================================
+    plugin
+        .command('disable <name>')
+        .description('Disable a plugin without uninstalling')
+        .action((name) => {
+        const plugins = getPlugins();
+        const packageName = resolvePluginName(name);
+        const found = plugins.find(p => p.package === packageName ||
+            p.package === name ||
+            getShortName(p.package ?? '') === name);
+        if (!found) {
+            output.error(`Plugin not found: ${name}`);
+            console.log('Use "znvault plugin list" to see installed plugins.');
+            process.exit(1);
+        }
+        if (found.enabled === false) {
+            console.log(`Plugin ${chalk.cyan(getShortName(found.package ?? name))} is already disabled.`);
+            return;
+        }
+        setPluginEnabled(found.package ?? found.path ?? '', false);
+        output.success(`Disabled plugin: ${getShortName(found.package ?? name)}`);
+    });
+    // ============================================================================
+    // plugin info <name>
+    // ============================================================================
+    plugin
+        .command('info <name>')
+        .description('Show plugin information')
+        .action(async (name) => {
+        const spinner = ora('Fetching plugin info...').start();
+        try {
+            const packageName = resolvePluginName(name);
+            const plugins = getPlugins();
+            const pluginsDir = getPluginsDir();
+            // Check if installed locally
+            const installed = plugins.find(p => p.package === packageName ||
+                p.package === name ||
+                getShortName(p.package ?? '') === name);
+            // Get npm info
+            let npmInfo = null;
+            try {
+                const infoStr = execSync(`npm view ${packageName} --json`, { stdio: 'pipe' }).toString();
+                npmInfo = JSON.parse(infoStr);
+            }
+            catch {
+                // Try without prefix
+                if (packageName !== name) {
+                    try {
+                        const infoStr = execSync(`npm view ${name} --json`, { stdio: 'pipe' }).toString();
+                        npmInfo = JSON.parse(infoStr);
+                    }
+                    catch {
+                        // Not found
+                    }
+                }
+            }
+            spinner.stop();
+            if (!installed && !npmInfo) {
+                output.error(`Plugin not found: ${name}`);
+                process.exit(1);
+            }
+            console.log();
+            console.log(chalk.bold(getShortName(packageName)));
+            console.log();
+            if (npmInfo) {
+                console.log(`  Package:     ${chalk.cyan(packageName)}`);
+                console.log(`  Version:     ${npmInfo.version}`);
+                if (npmInfo.description) {
+                    console.log(`  Description: ${npmInfo.description}`);
+                }
+                if (npmInfo.homepage) {
+                    console.log(`  Homepage:    ${chalk.blue(npmInfo.homepage)}`);
+                }
+            }
+            if (installed) {
+                const localVersion = getInstalledVersion(installed.package, pluginsDir);
+                console.log();
+                console.log(chalk.dim('Local Installation:'));
+                console.log(`  Installed:   ${chalk.green('Yes')}`);
+                console.log(`  Version:     ${localVersion || 'unknown'}`);
+                console.log(`  Enabled:     ${installed.enabled !== false ? chalk.green('Yes') : chalk.yellow('No')}`);
+                if (npmInfo && localVersion && localVersion !== npmInfo.version) {
+                    console.log();
+                    console.log(chalk.yellow(`  Update available: ${localVersion} → ${npmInfo.version}`));
+                    console.log(chalk.dim(`  Run: znvault plugin update ${getShortName(packageName)}`));
+                }
+            }
+            else {
+                console.log();
+                console.log(chalk.dim('Not installed locally.'));
+                console.log(`Install with: ${chalk.cyan(`znvault plugin install ${getShortName(packageName)}`)}`);
+            }
+        }
+        catch (err) {
+            spinner.fail('Failed to fetch info');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=plugin.js.map