@zincapp/znvault-cli 2.29.1 → 2.29.2

package/dist/commands/ssh/types.js

@@ -0,0 +1,3 @@
+// Path: src/commands/ssh/types.ts
+export {};
+//# sourceMappingURL=types.js.map

package/dist/commands/ssh/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/commands/ssh/types.ts"],"names":[],"mappings":"AAAA,kCAAkC"}

package/dist/commands/ssh-ca/helpers.d.ts

@@ -1,11 +1,4 @@
-/**
- * Format TTL in human-readable form
- */
-export declare function formatTtl(seconds: number | undefined | null): string;
-/**
- * Format date in a readable format
- */
-export declare function formatDate(date: string | null | undefined): string;
+export { formatTtl, formatDate } from '../../lib/format-helpers.js';
 /**
  * Format certificate validity status
  */

package/dist/commands/ssh-ca/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/commands/ssh-ca/helpers.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAOpE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAIlE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAkB5E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGjE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAI7D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBlE"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/commands/ssh-ca/helpers.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEpE;;GAEG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAkB5E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGjE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAI7D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBlE"}

package/dist/commands/ssh-ca/helpers.js

@@ -3,29 +3,8 @@
  * Helper functions for SSH CA commands
  */
 import chalk from 'chalk';
-/**
- * Format TTL in human-readable form
- */
-export function formatTtl(seconds) {
-    if (seconds === undefined || seconds === null)
-        return '-';
-    if (seconds < 60)
-        return `${seconds}s`;
-    if (seconds < 3600)
-        return `${Math.floor(seconds / 60)}m`;
-    if (seconds < 86400)
-        return `${Math.floor(seconds / 3600)}h`;
-    return `${Math.floor(seconds / 86400)}d`;
-}
-/**
- * Format date in a readable format
- */
-export function formatDate(date) {
-    if (!date)
-        return '-';
-    const d = new Date(date);
-    return d.toLocaleString();
-}
+// Re-export common formatters from centralized location
+export { formatTtl, formatDate } from '../../lib/format-helpers.js';
 /**
  * Format certificate validity status
  */

package/dist/commands/ssh-ca/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/commands/ssh-ca/helpers.ts"],"names":[],"mappings":"AAAA,uCAAuC;AAEvC;;GAEG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,OAAkC;IAC1D,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAE1D,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,GAAG,CAAC;IACvC,IAAI,OAAO,GAAG,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC;IAC1D,IAAI,OAAO,GAAG,KAAK;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;IAC7D,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,IAA+B;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC;IACtB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,OAAgB;IAClE,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACpF,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAA2B;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC;IACzB,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAoB;IACnD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACvD,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAa;IAC/C,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAEvC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,2BAA2B;IAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;AACzF,CAAC"}
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/commands/ssh-ca/helpers.ts"],"names":[],"mappings":"AAAA,uCAAuC;AAEvC;;GAEG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,wDAAwD;AACxD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEpE;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,OAAgB;IAClE,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACpF,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAA2B;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC;IACzB,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAoB;IACnD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACvD,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAa;IAC/C,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAEvC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,2BAA2B;IAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;AACzF,CAAC"}

package/dist/commands/sso/crud.d.ts

@@ -0,0 +1,6 @@
+/**
+ * SSO App CRUD operations (list, get, create, update, delete, rotate-secret)
+ */
+import type { Command } from 'commander';
+export declare function registerCrudCommands(parent: Command): void;
+//# sourceMappingURL=crud.d.ts.map

package/dist/commands/sso/crud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crud.d.ts","sourceRoot":"","sources":["../../../src/commands/sso/crud.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqVzC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAyE1D"}

package/dist/commands/sso/crud.js

@@ -0,0 +1,360 @@
+// Path: src/commands/sso/crud.ts
+import ora from 'ora';
+import { client } from '../../lib/client.js';
+import { promptConfirm } from '../../lib/prompts.js';
+import * as output from '../../lib/output.js';
+import { formatTtl, buildTenantQuery } from './helpers.js';
+// ============================================================================
+// Command Implementations
+// ============================================================================
+async function listApps(options) {
+    const spinner = ora('Fetching SSO apps...').start();
+    try {
+        const query = {};
+        if (options.tenant)
+            query.tenantId = options.tenant;
+        if (options.status)
+            query.status = options.status;
+        const queryString = Object.keys(query).length > 0
+            ? '?' + new URLSearchParams(query).toString()
+            : '';
+        const response = await client.get(`/v1/sso/apps${queryString}`);
+        spinner.stop();
+        if (options.json) {
+            output.json(response.apps);
+            return;
+        }
+        if (response.apps.length === 0) {
+            output.info('No SSO apps found');
+            return;
+        }
+        output.table(['Name', 'Slug', 'Client ID', 'Status', 'Users', 'Grant Types'], response.apps.map(app => [
+            app.name,
+            app.slug,
+            app.client_id.substring(0, 16) + '...',
+            app.active ? '✓ Active' : '✗ Inactive',
+            app.user_count ?? '-',
+            app.allowed_grant_types.join(', '),
+        ]));
+        output.info(`Total: ${response.apps.length} app(s)`);
+    }
+    catch (err) {
+        spinner.fail('Failed to list SSO apps');
+        output.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+}
+async function getApp(id, options) {
+    const spinner = ora('Fetching SSO app...').start();
+    try {
+        const query = buildTenantQuery(options.tenant);
+        const app = await client.get(`/v1/sso/apps/${encodeURIComponent(id)}${query}`);
+        spinner.stop();
+        if (options.json) {
+            output.json(app);
+            return;
+        }
+        output.section('SSO App Details');
+        output.keyValue({
+            'Name': app.name,
+            'Slug': app.slug,
+            'Description': app.description ?? '-',
+            'Status': app.active ? '✓ Active' : '✗ Inactive',
+            'Client ID': app.client_id,
+            'Created': output.formatDate(app.created_at),
+            'Updated': output.formatDate(app.updated_at),
+        });
+        output.section('OAuth Configuration');
+        output.keyValue({
+            'Redirect URIs': app.redirect_uris?.join('\n                  ') || '-',
+            'Allowed Origins': app.allowed_origins?.join(', ') || '-',
+            'Grant Types': app.allowed_grant_types?.join(', ') || '-',
+            'Scopes': app.allowed_scopes?.join(', ') || '-',
+            'PKCE Required': app.require_pkce ? 'Yes' : 'No',
+            'Access Token TTL': formatTtl(app.access_token_ttl_seconds),
+            'Refresh Token TTL': formatTtl(app.refresh_token_ttl_seconds),
+        });
+        output.section('Roles');
+        output.keyValue({
+            'Available Roles': app.roles?.join(', ') || '-',
+            'Default Role': app.default_role || '-',
+        });
+        if (app.user_count !== undefined || app.active_token_count !== undefined) {
+            output.section('Usage');
+            output.keyValue({
+                'Users': app.user_count ?? '-',
+                'Active Tokens': app.active_token_count ?? '-',
+            });
+        }
+        console.log();
+    }
+    catch (err) {
+        spinner.fail('Failed to get SSO app');
+        output.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+}
+async function createApp(name, slug, options) {
+    const spinner = ora('Creating SSO app...').start();
+    try {
+        const body = {
+            name,
+            slug,
+            description: options.description,
+            redirect_uris: options.redirectUri,
+            allowed_origins: options.origin || [],
+            allowed_scopes: options.scope,
+            allowed_grant_types: options.grantType,
+            access_token_ttl_seconds: parseInt(String(options.tokenTtl)) || 3600,
+            refresh_token_ttl_seconds: parseInt(String(options.refreshTtl)) || 604800,
+            require_pkce: options.pkce !== false,
+            roles: options.role,
+            default_role: options.defaultRole,
+        };
+        const query = buildTenantQuery(options.tenant);
+        const response = await client.post(`/v1/sso/apps${query}`, body);
+        spinner.succeed(`SSO app "${name}" created successfully`);
+        if (options.json) {
+            output.json({ ...response.app, client_secret: response.client_secret });
+            return;
+        }
+        output.section('Client Credentials');
+        output.warn('Save the client secret now - it will not be shown again!');
+        console.log();
+        output.keyValue({
+            'Client ID': response.app.client_id,
+            'Client Secret': response.client_secret,
+        });
+        console.log();
+        output.info('Redirect URIs:');
+        for (const uri of response.app.redirect_uris) {
+            console.log(`  • ${uri}`);
+        }
+        console.log();
+        output.section('Example OAuth2 Authorization URL');
+        const authUrl = new URL('/oauth/authorize', 'https://vault.example.com');
+        authUrl.searchParams.set('client_id', response.app.client_id);
+        authUrl.searchParams.set('redirect_uri', response.app.redirect_uris[0]);
+        authUrl.searchParams.set('response_type', 'code');
+        authUrl.searchParams.set('scope', response.app.allowed_scopes.join(' '));
+        if (response.app.require_pkce) {
+            authUrl.searchParams.set('code_challenge', '<SHA256_HASH>');
+            authUrl.searchParams.set('code_challenge_method', 'S256');
+        }
+        console.log(authUrl.toString().replace('https://vault.example.com', '<VAULT_URL>'));
+        console.log();
+    }
+    catch (err) {
+        spinner.fail('Failed to create SSO app');
+        output.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+}
+async function updateApp(id, options) {
+    const spinner = ora('Updating SSO app...').start();
+    try {
+        const query = buildTenantQuery(options.tenant);
+        // First fetch current app to merge arrays
+        const current = await client.get(`/v1/sso/apps/${encodeURIComponent(id)}${query}`);
+        // Build update payload
+        const updates = {};
+        if (options.name)
+            updates.name = options.name;
+        if (options.description !== undefined)
+            updates.description = options.description;
+        // Handle redirect URIs
+        if (options.addRedirectUri || options.removeRedirectUri) {
+            let uris = [...current.redirect_uris];
+            if (options.addRedirectUri) {
+                uris = [...new Set([...uris, ...options.addRedirectUri])];
+            }
+            const removeUris = options.removeRedirectUri;
+            if (removeUris) {
+                uris = uris.filter(u => !removeUris.includes(u));
+            }
+            updates.redirect_uris = uris;
+        }
+        // Handle origins
+        if (options.addOrigin || options.removeOrigin) {
+            let origins = [...current.allowed_origins];
+            if (options.addOrigin) {
+                origins = [...new Set([...origins, ...options.addOrigin])];
+            }
+            const removeOrigins = options.removeOrigin;
+            if (removeOrigins) {
+                origins = origins.filter(o => !removeOrigins.includes(o));
+            }
+            updates.allowed_origins = origins;
+        }
+        // Handle scopes
+        if (options.addScope || options.removeScope) {
+            let scopes = [...current.allowed_scopes];
+            if (options.addScope) {
+                scopes = [...new Set([...scopes, ...options.addScope])];
+            }
+            const removeScopes = options.removeScope;
+            if (removeScopes) {
+                scopes = scopes.filter(s => !removeScopes.includes(s));
+            }
+            updates.allowed_scopes = scopes;
+        }
+        if (options.tokenTtl)
+            updates.access_token_ttl_seconds = parseInt(options.tokenTtl);
+        if (options.refreshTtl)
+            updates.refresh_token_ttl_seconds = parseInt(options.refreshTtl);
+        if (options.pkce !== undefined)
+            updates.require_pkce = options.pkce;
+        if (options.status)
+            updates.active = options.status === 'active';
+        if (Object.keys(updates).length === 0) {
+            spinner.fail('No updates specified');
+            output.info('Use --name, --description, --add-redirect-uri, etc.');
+            process.exit(1);
+        }
+        const app = await client.patch(`/v1/sso/apps/${encodeURIComponent(id)}${query}`, updates);
+        spinner.stop();
+        output.success(`SSO app "${app.name}" updated successfully`);
+        if (options.json) {
+            output.json(app);
+            return;
+        }
+        output.keyValue({
+            'Name': app.name,
+            'Status': app.active ? '✓ Active' : '✗ Inactive',
+            'Redirect URIs': app.redirect_uris.join(', '),
+            'Updated': output.formatDate(app.updated_at),
+        });
+    }
+    catch (err) {
+        spinner.fail('Failed to update SSO app');
+        output.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+}
+async function deleteApp(id, options) {
+    try {
+        const query = buildTenantQuery(options.tenant);
+        // Fetch app name for confirmation
+        const app = await client.get(`/v1/sso/apps/${encodeURIComponent(id)}${query}`);
+        if (!options.yes) {
+            output.warn(`This will permanently delete the SSO app "${app.name}" and revoke all tokens.`);
+            const confirmed = await promptConfirm('Are you sure you want to delete this app?');
+            if (!confirmed) {
+                output.info('Delete cancelled');
+                return;
+            }
+        }
+        const spinner = ora('Deleting SSO app...').start();
+        try {
+            await client.delete(`/v1/sso/apps/${encodeURIComponent(id)}${query}`);
+            spinner.stop();
+            output.success(`SSO app "${app.name}" deleted successfully`);
+        }
+        catch (err) {
+            spinner.fail('Failed to delete SSO app');
+            throw err;
+        }
+    }
+    catch (err) {
+        output.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+}
+async function rotateSecret(id, options) {
+    const spinner = ora('Rotating client secret...').start();
+    try {
+        const query = buildTenantQuery(options.tenant);
+        const response = await client.post(`/v1/sso/apps/${encodeURIComponent(id)}/rotate-secret${query}`, {});
+        spinner.stop();
+        output.success('Client secret rotated successfully');
+        if (options.json) {
+            output.json(response);
+            return;
+        }
+        output.warn('Save the new client secret now - it will not be shown again!');
+        console.log();
+        output.keyValue({
+            'New Client Secret': response.client_secret,
+            'Rotated At': output.formatDate(response.rotated_at),
+        });
+        console.log();
+    }
+    catch (err) {
+        spinner.fail('Failed to rotate client secret');
+        output.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+}
+// ============================================================================
+// Command Registration
+// ============================================================================
+export function registerCrudCommands(parent) {
+    // List SSO Apps
+    parent
+        .command('list')
+        .description('List SSO applications')
+        .option('--tenant <id>', 'Filter by tenant (superadmin only)')
+        .option('--status <status>', 'Filter by status (active|inactive)')
+        .option('--json', 'Output as JSON')
+        .action(listApps);
+    // Get SSO App
+    parent
+        .command('get <id>')
+        .description('Get SSO app details (by ID or slug)')
+        .option('--tenant <id>', 'Tenant ID (superadmin only, required for slug lookup)')
+        .option('--json', 'Output as JSON')
+        .action(getApp);
+    // Create SSO App
+    parent
+        .command('create <name> <slug>')
+        .description('Create a new SSO application')
+        .option('--tenant <id>', 'Tenant ID (superadmin only)')
+        .option('--description <text>', 'App description')
+        .requiredOption('--redirect-uri <uri...>', 'Redirect URIs (required, can specify multiple)')
+        .option('--origin <origin...>', 'Allowed CORS origins')
+        .option('--scope <scope...>', 'Default scopes', ['openid', 'profile', 'email'])
+        .option('--grant-type <type...>', 'Grant types', ['authorization_code', 'refresh_token'])
+        .option('--token-ttl <seconds>', 'Access token TTL in seconds', '3600')
+        .option('--refresh-ttl <seconds>', 'Refresh token TTL in seconds', '604800')
+        .option('--pkce', 'Require PKCE (default: true)')
+        .option('--no-pkce', 'Do not require PKCE')
+        .option('--role <role...>', 'Available roles', ['admin', 'user'])
+        .option('--default-role <role>', 'Default role for new users', 'user')
+        .option('--json', 'Output as JSON')
+        .action(createApp);
+    // Update SSO App
+    parent
+        .command('update <id>')
+        .description('Update an SSO application')
+        .option('--tenant <id>', 'Tenant ID (superadmin only)')
+        .option('--name <name>', 'New app name')
+        .option('--description <text>', 'New description')
+        .option('--add-redirect-uri <uri...>', 'Add redirect URIs')
+        .option('--remove-redirect-uri <uri...>', 'Remove redirect URIs')
+        .option('--add-origin <origin...>', 'Add allowed origins')
+        .option('--remove-origin <origin...>', 'Remove allowed origins')
+        .option('--add-scope <scope...>', 'Add scopes')
+        .option('--remove-scope <scope...>', 'Remove scopes')
+        .option('--token-ttl <seconds>', 'Access token TTL in seconds')
+        .option('--refresh-ttl <seconds>', 'Refresh token TTL in seconds')
+        .option('--pkce', 'Require PKCE')
+        .option('--no-pkce', 'Do not require PKCE')
+        .option('--status <status>', 'Set status (active|inactive)')
+        .option('--json', 'Output as JSON')
+        .action(updateApp);
+    // Delete SSO App
+    parent
+        .command('delete <id>')
+        .description('Delete an SSO application')
+        .option('--tenant <id>', 'Tenant ID (superadmin only)')
+        .option('-y, --yes', 'Skip confirmation')
+        .action(deleteApp);
+    // Rotate Client Secret
+    parent
+        .command('rotate-secret <id>')
+        .description('Rotate the client secret for an SSO app')
+        .option('--tenant <id>', 'Tenant ID (superadmin only)')
+        .option('--json', 'Output as JSON')
+        .action(rotateSecret);
+}
+//# sourceMappingURL=crud.js.map

package/dist/commands/sso/crud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crud.js","sourceRoot":"","sources":["../../../src/commands/sso/crud.ts"],"names":[],"mappings":"AAAA,iCAAiC;AAOjC,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,MAAM,MAAM,qBAAqB,CAAC;AAa9C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE3D,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,KAAK,UAAU,QAAQ,CAAC,OAAoB;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,MAAM;YAAE,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAElD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YAC/C,CAAC,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAmB,eAAe,WAAW,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,IAAI,EAAE,CAAC;QAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,MAAM,CAAC,KAAK,CACV,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,EAC/D,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI;YACR,GAAG,CAAC,IAAI;YACR,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;YACtC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;YACtC,GAAG,CAAC,UAAU,IAAI,GAAG;YACrB,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;SACnC,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,EAAU,EAAE,OAAmB;IACnD,MAAM,OAAO,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAS,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACvF,OAAO,CAAC,IAAI,EAAE,CAAC;QAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QAED,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAClC,MAAM,CAAC,QAAQ,CAAC;YACd,MAAM,EAAE,GAAG,CAAC,IAAI;YAChB,MAAM,EAAE,GAAG,CAAC,IAAI;YAChB,aAAa,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG;YACrC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;YAChD,WAAW,EAAE,GAAG,CAAC,SAAS;YAC1B,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;YAC5C,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;SAC7C,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC;YACd,eAAe,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,sBAAsB,CAAC,IAAI,GAAG;YACvE,iBAAiB,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG;YACzD,aAAa,EAAE,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG;YACzD,QAAQ,EAAE,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG;YAC/C,eAAe,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YAChD,kBAAkB,EAAE,SAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC;YAC3D,mBAAmB,EAAE,SAAS,CAAC,GAAG,CAAC,yBAAyB,CAAC;SAC9D,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC;YACd,iBAAiB,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG;YAC/C,cAAc,EAAE,GAAG,CAAC,YAAY,IAAI,GAAG;SACxC,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACzE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACxB,MAAM,CAAC,QAAQ,CAAC;gBACd,OAAO,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG;gBAC9B,eAAe,EAAE,GAAG,CAAC,kBAAkB,IAAI,GAAG;aAC/C,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,OAAsB;IACzE,MAAM,OAAO,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG;YACX,IAAI;YACJ,IAAI;YACJ,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,aAAa,EAAE,OAAO,CAAC,WAAW;YAClC,eAAe,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;YACrC,cAAc,EAAE,OAAO,CAAC,KAAK;YAC7B,mBAAmB,EAAE,OAAO,CAAC,SAAS;YACtC,wBAAwB,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI;YACpE,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,MAAM;YACzE,YAAY,EAAE,OAAO,CAAC,IAAI,KAAK,KAAK;YACpC,KAAK,EAAE,OAAO,CAAC,IAAI;YACnB,YAAY,EAAE,OAAO,CAAC,WAAW;SAClC,CAAC;QAEF,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAoB,eAAe,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QACpF,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,wBAAwB,CAAC,CAAC;QAE1D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QAED,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,QAAQ,CAAC;YACd,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS;YACnC,eAAe,EAAE,QAAQ,CAAC,aAAa;SACxC,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,kBAAkB,EAAE,2BAA2B,CAAC,CAAC;QACzE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACzE,IAAI,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC9B,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;YAC5D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,2BAA2B,EAAE,aAAa,CAAC,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,EAAU,EAAE,OAAsB;IACzD,MAAM,OAAO,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAE/C,0CAA0C;QAC1C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAS,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QAE3F,uBAAuB;QACvB,MAAM,OAAO,GAA4B,EAAE,CAAC;QAE5C,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC9C,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAEjF,uBAAuB;QACvB,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACxD,IAAI,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;YACtC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC3B,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAC7C,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,CAAC;YACD,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;QAC/B,CAAC;QAED,iBAAiB;QACjB,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC9C,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;YAC3C,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC;QACpC,CAAC;QAED,gBAAgB;QAChB,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;YACzC,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,CAAC,cAAc,GAAG,MAAM,CAAC;QAClC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,CAAC,wBAAwB,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpF,IAAI,OAAO,CAAC,UAAU;YAAE,OAAO,CAAC,yBAAyB,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;QACpE,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC;QAEjE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAS,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QAClG,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,IAAI,wBAAwB,CAAC,CAAC;QAE7D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC;YACd,MAAM,EAAE,GAAG,CAAC,IAAI;YAChB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;YAChD,eAAe,EAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7C,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,EAAU,EAAE,OAAsB;IACzD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAE/C,kCAAkC;QAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAS,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QAEvF,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,6CAA6C,GAAG,CAAC,IAAI,0BAA0B,CAAC,CAAC;YAC7F,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,2CAA2C,CAAC,CAAC;YACnF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEnD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,IAAI,wBAAwB,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACzC,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,EAAU,EAAE,OAA4B;IAClE,MAAM,OAAO,GAAG,GAAG,CAAC,2BAA2B,CAAC,CAAC,KAAK,EAAE,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,KAAK,EAAE,EAC9D,EAAE,CACH,CAAC;QACF,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QAErD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,QAAQ,CAAC;YACd,mBAAmB,EAAE,QAAQ,CAAC,aAAa;YAC3C,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;SACrD,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,gBAAgB;IAChB,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,uBAAuB,CAAC;SACpC,MAAM,CAAC,eAAe,EAAE,oCAAoC,CAAC;SAC7D,MAAM,CAAC,mBAAmB,EAAE,oCAAoC,CAAC;SACjE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEpB,cAAc;IACd,MAAM;SACH,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,qCAAqC,CAAC;SAClD,MAAM,CAAC,eAAe,EAAE,uDAAuD,CAAC;SAChF,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,MAAM,CAAC,CAAC;IAElB,iBAAiB;IACjB,MAAM;SACH,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,eAAe,EAAE,6BAA6B,CAAC;SACtD,MAAM,CAAC,sBAAsB,EAAE,iBAAiB,CAAC;SACjD,cAAc,CAAC,yBAAyB,EAAE,gDAAgD,CAAC;SAC3F,MAAM,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;SACtD,MAAM,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;SAC9E,MAAM,CAAC,wBAAwB,EAAE,aAAa,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;SACxF,MAAM,CAAC,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,CAAC;SACtE,MAAM,CAAC,yBAAyB,EAAE,8BAA8B,EAAE,QAAQ,CAAC;SAC3E,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;SAChD,MAAM,CAAC,WAAW,EAAE,qBAAqB,CAAC;SAC1C,MAAM,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;SAChE,MAAM,CAAC,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,CAAC;SACrE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,SAAS,CAAC,CAAC;IAErB,iBAAiB;IACjB,MAAM;SACH,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,eAAe,EAAE,6BAA6B,CAAC;SACtD,MAAM,CAAC,eAAe,EAAE,cAAc,CAAC;SACvC,MAAM,CAAC,sBAAsB,EAAE,iBAAiB,CAAC;SACjD,MAAM,CAAC,6BAA6B,EAAE,mBAAmB,CAAC;SAC1D,MAAM,CAAC,gCAAgC,EAAE,sBAAsB,CAAC;SAChE,MAAM,CAAC,0BAA0B,EAAE,qBAAqB,CAAC;SACzD,MAAM,CAAC,6BAA6B,EAAE,wBAAwB,CAAC;SAC/D,MAAM,CAAC,wBAAwB,EAAE,YAAY,CAAC;SAC9C,MAAM,CAAC,2BAA2B,EAAE,eAAe,CAAC;SACpD,MAAM,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;SAC9D,MAAM,CAAC,yBAAyB,EAAE,8BAA8B,CAAC;SACjE,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC;SAChC,MAAM,CAAC,WAAW,EAAE,qBAAqB,CAAC;SAC1C,MAAM,CAAC,mBAAmB,EAAE,8BAA8B,CAAC;SAC3D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,SAAS,CAAC,CAAC;IAErB,iBAAiB;IACjB,MAAM;SACH,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,eAAe,EAAE,6BAA6B,CAAC;SACtD,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC;SACxC,MAAM,CAAC,SAAS,CAAC,CAAC;IAErB,uBAAuB;IACvB,MAAM;SACH,OAAO,CAAC,oBAAoB,CAAC;SAC7B,WAAW,CAAC,yCAAyC,CAAC;SACtD,MAAM,CAAC,eAAe,EAAE,6BAA6B,CAAC;SACtD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,YAAY,CAAC,CAAC;AAC1B,CAAC"}

package/dist/commands/sso/helpers.d.ts

@@ -0,0 +1,9 @@
+/**
+ * SSO command helper functions
+ */
+export { formatTtl } from '../../lib/format-helpers.js';
+/**
+ * Build tenant query string
+ */
+export declare function buildTenantQuery(tenant?: string): string;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/commands/sso/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/commands/sso/helpers.ts"],"names":[],"mappings":"AAEA;;GAEG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAExD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAExD"}

package/dist/commands/sso/helpers.js

@@ -0,0 +1,13 @@
+// Path: src/commands/sso/helpers.ts
+/**
+ * SSO command helper functions
+ */
+// Re-export common formatters from centralized location
+export { formatTtl } from '../../lib/format-helpers.js';
+/**
+ * Build tenant query string
+ */
+export function buildTenantQuery(tenant) {
+    return tenant ? `?tenantId=${encodeURIComponent(tenant)}` : '';
+}
+//# sourceMappingURL=helpers.js.map

package/dist/commands/sso/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/commands/sso/helpers.ts"],"names":[],"mappings":"AAAA,oCAAoC;AAEpC;;GAEG;AAEH,wDAAwD;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAExD;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC9C,OAAO,MAAM,CAAC,CAAC,CAAC,aAAa,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC"}

package/dist/commands/sso/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * SSO/OAuth2 application management commands
+ *
+ * This module provides comprehensive SSO app management including:
+ * - App CRUD operations (list, get, create, update, delete)
+ * - Client secret rotation
+ * - User access management (grant, revoke, set-role)
+ */
+import type { Command } from 'commander';
+export declare function registerSSOCommands(program: Command): void;
+export * from './types.js';
+export { formatTtl, buildTenantQuery } from './helpers.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/sso/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/sso/index.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAQ1D;AAGD,cAAc,YAAY,CAAC;AAG3B,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}

package/dist/commands/sso/index.js

@@ -0,0 +1,16 @@
+// Path: src/commands/sso/index.ts
+import { registerCrudCommands } from './crud.js';
+import { registerUserCommands } from './users.js';
+export function registerSSOCommands(program) {
+    const sso = program
+        .command('sso')
+        .description('SSO/OAuth2 application management');
+    // Register all sub-command groups
+    registerCrudCommands(sso);
+    registerUserCommands(sso);
+}
+// Re-export types for external use
+export * from './types.js';
+// Re-export helpers for potential reuse
+export { formatTtl, buildTenantQuery } from './helpers.js';
+//# sourceMappingURL=index.js.map

package/dist/commands/sso/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/sso/index.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAYlC,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,OAAO;SAChB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,mCAAmC,CAAC,CAAC;IAEpD,kCAAkC;IAClC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1B,oBAAoB,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,mCAAmC;AACnC,cAAc,YAAY,CAAC;AAE3B,wCAAwC;AACxC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}