akadmin 0.1.0

package/dist/commands/audit.d.ts

@@ -0,0 +1,7 @@
+/**
+ * CLI audit commands reading from persistent append-only audit log.
+ */
+import { Command } from "commander";
+import { CliKeychain } from "../keychain/index.js";
+export declare function registerAuditCommands(program: Command, keychain: CliKeychain): void;
+//# sourceMappingURL=audit.d.ts.map

package/dist/commands/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,GAAG,IAAI,CAiCnF"}

package/dist/commands/audit.js

@@ -0,0 +1,35 @@
+/**
+ * CLI audit commands reading from persistent append-only audit log.
+ */
+import { FileAuditStore } from "../storage/file-store.js";
+export function registerAuditCommands(program, keychain) {
+    const auditStore = new FileAuditStore(keychain.getConfigDir());
+    program
+        .command("audit [tail]")
+        .description("View recent audit events and mutation records")
+        .option("--limit <number>", "Number of records to show", "20")
+        .option("--json", "Output JSON format")
+        .action(async (_tail, options) => {
+        const limit = Number(options.limit) || 20;
+        const records = await auditStore.list(limit);
+        if (options.json) {
+            console.log(JSON.stringify(records, null, 2));
+            return;
+        }
+        if (records.length === 0) {
+            console.log("\n📜 No audit entries recorded yet. (Audit entries are created when operations are executed or previewed).\n");
+            return;
+        }
+        console.log(`\n📜 Recent Audit Events (${records.length} records):\n`);
+        for (const r of records) {
+            const flag = r.isDestructive ? "⚠️ DESTRUCTIVE" : "";
+            const statusBadge = r.phase === "executed" ? `✅ ${r.statusCode ?? 200}` : r.phase === "preview" ? "🔒 PREVIEW" : `❌ ${r.error ?? "REJECTED"}`;
+            console.log(`  [${r.timestamp}] ${statusBadge.padEnd(16)} ${r.method.padEnd(6)} ${r.path.padEnd(36)} ${r.operationId} ${flag}`);
+            if (r.idempotencyKey) {
+                console.log(`    Idempotency: ${r.idempotencyKey} | AuditID: ${r.id}`);
+            }
+        }
+        console.log("");
+    });
+}
+//# sourceMappingURL=audit.js.map

package/dist/commands/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,UAAU,qBAAqB,CAAC,OAAgB,EAAE,QAAqB;IAC3E,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IAE/D,OAAO;SACJ,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,+CAA+C,CAAC;SAC5D,MAAM,CAAC,kBAAkB,EAAE,2BAA2B,EAAE,IAAI,CAAC;SAC7D,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC;SACtC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE7C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,8GAA8G,CAAC,CAAC;YAC5H,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,6BAA6B,OAAO,CAAC,MAAM,cAAc,CAAC,CAAC;QACvE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,UAAU,EAAE,CAAC;YAC9I,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC;YAChI,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,cAAc,eAAe,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/auth.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CLI auth & profile management commands with encrypted credential storage,
+ * hidden interactive input support, and remote Worker vault enrollment.
+ */
+import { Command } from "commander";
+import { CliKeychain } from "../keychain/index.js";
+export declare function registerAuthCommands(program: Command, keychain: CliKeychain): void;
+//# sourceMappingURL=auth.d.ts.map

package/dist/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AA2CnD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,GAAG,IAAI,CA2HlF"}

package/dist/commands/auth.js

@@ -0,0 +1,156 @@
+/**
+ * CLI auth & profile management commands with encrypted credential storage,
+ * hidden interactive input support, and remote Worker vault enrollment.
+ */
+import readline from "node:readline";
+async function promptHidden(questionText) {
+    const { promise, resolve } = Promise.withResolvers();
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    process.stdout.write(questionText);
+    const stdin = process.stdin;
+    const isTTY = stdin.isTTY;
+    if (isTTY) {
+        stdin.setRawMode(true);
+        let input = "";
+        stdin.on("data", function onData(char) {
+            const str = char.toString("utf-8");
+            if (str === "\n" || str === "\r" || str === "\u0004") {
+                stdin.setRawMode(false);
+                stdin.removeListener("data", onData);
+                process.stdout.write("\n");
+                rl.close();
+                resolve(input.trim());
+            }
+            else if (str === "\u0003") {
+                process.exit(1);
+            }
+            else if (str === "\u007f" || str === "\b") {
+                input = input.slice(0, -1);
+            }
+            else {
+                input += str;
+            }
+        });
+    }
+    else {
+        rl.question("", (answer) => {
+            rl.close();
+            resolve(answer.trim());
+        });
+    }
+    return promise;
+}
+export function registerAuthCommands(program, keychain) {
+    const auth = program.command("auth").description("Manage credentials and target environments");
+    auth
+        .command("login")
+        .description("Securely store an admin API key into local encrypted vault")
+        .option("-k, --key <apiKey>", "Admin API key (warning: passing in argv may be stored in shell history)")
+        .option("-p, --profile <profile>", "Target profile (default: active profile)")
+        .action(async (options) => {
+        let key = options.key;
+        if (!key) {
+            key = await promptHidden("Enter Admin API Key (hidden): ");
+        }
+        if (!key || key.length === 0) {
+            console.error("Error: Admin API key cannot be empty.");
+            process.exitCode = 1;
+            return;
+        }
+        const target = options.profile || keychain.getActiveProfile();
+        await keychain.setApiKey(key, options.profile);
+        console.log(`✅ Securely stored and encrypted API key for profile '${target}'.`);
+    });
+    auth
+        .command("session")
+        .description("Securely store a session cookie for session-only operations (Payouts, Grants)")
+        .option("-c, --cookie <cookie>", "Session cookie value")
+        .option("-p, --profile <profile>", "Target profile (default: active profile)")
+        .action(async (options) => {
+        let cookie = options.cookie;
+        if (!cookie) {
+            cookie = await promptHidden("Enter Session Cookie (hidden): ");
+        }
+        if (!cookie || cookie.length === 0) {
+            console.error("Error: Session cookie cannot be empty.");
+            process.exitCode = 1;
+            return;
+        }
+        const target = options.profile || keychain.getActiveProfile();
+        await keychain.setSessionCookie(cookie, options.profile);
+        console.log(`✅ Securely stored and encrypted session cookie for profile '${target}'.`);
+    });
+    auth
+        .command("enroll-remote")
+        .description("Enroll admin credentials securely into remote Cloudflare Worker vault via authenticated POST /vault/enroll")
+        .option("-u, --url <workerUrl>", "Cloudflare Worker URL", "https://akadmin-mcp-worker.hi-7ac.workers.dev")
+        .option("-t, --token <jwtToken>", "Operator Bearer / Access token")
+        .action(async (options) => {
+        let token = options.token;
+        if (!token) {
+            token = await promptHidden("Enter Operator Bearer / Access Token (hidden): ");
+        }
+        const apiKey = await promptHidden("Enter Admin API Key to enroll (leave blank to skip): ");
+        const sessionCookie = await promptHidden("Enter Session Cookie to enroll (leave blank to skip): ");
+        if (!apiKey && !sessionCookie) {
+            console.error("Error: Must provide an API key or session cookie to enroll.");
+            process.exitCode = 1;
+            return;
+        }
+        try {
+            const enrollUrl = new URL("/vault/enroll", options.url);
+            const res = await fetch(enrollUrl.toString(), {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    "Authorization": `Bearer ${token}`,
+                },
+                body: JSON.stringify({
+                    apiKey: apiKey || undefined,
+                    sessionCookie: sessionCookie || undefined,
+                    label: "default",
+                }),
+            });
+            const data = await res.json();
+            if (!res.ok) {
+                console.error(`❌ Enrollment failed (${res.status}):`, JSON.stringify(data, null, 2));
+                process.exitCode = 1;
+                return;
+            }
+            console.log("✅ Credentials successfully enrolled into remote Worker encrypted vault:");
+            console.log(JSON.stringify(data, null, 2));
+        }
+        catch (err) {
+            console.error("❌ Network error connecting to worker:", String(err));
+            process.exitCode = 1;
+        }
+    });
+    auth
+        .command("use <profile>")
+        .description("Set the active environment profile (production or staging)")
+        .action((profile) => {
+        keychain.setActiveProfile(profile);
+        console.log(`✅ Active profile switched to '${profile}'.`);
+    });
+    auth
+        .command("status")
+        .description("Display active profile and masked credential status")
+        .option("--json", "Output JSON format")
+        .action(async (options) => {
+        const status = await keychain.getStatus();
+        if (options.json) {
+            console.log(JSON.stringify(status, null, 2));
+            return;
+        }
+        console.log("\n🔐 akadmin Auth Status:\n");
+        console.log(`  Active Profile:   ${status.activeProfile.toUpperCase()}`);
+        console.log(`  Base URL:         ${status.baseUrl}`);
+        console.log(`  API Key:          ${status.hasApiKey ? `Configured (${status.maskedKey})` : "❌ Not Set"}`);
+        console.log(`  Session Cookie:   ${status.hasSessionCookie ? "Configured" : "❌ Not Set"}`);
+        console.log("\nTo set credentials, use `akadmin auth login` or `akadmin auth enroll-remote`.\n");
+    });
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,QAAQ,MAAM,eAAe,CAAC;AAIrC,KAAK,UAAU,YAAY,CAAC,YAAoB;IAC9C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,aAAa,EAAU,CAAC;IAC7D,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAEnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAE1B,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,MAAM,CAAC,IAAI;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrD,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBACxB,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACxB,CAAC;iBAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAC5C,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,KAAK,IAAI,GAAG,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE;YACzB,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB,EAAE,QAAqB;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,4CAA4C,CAAC,CAAC;IAE/F,IAAI;SACD,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,4DAA4D,CAAC;SACzE,MAAM,CAAC,oBAAoB,EAAE,yEAAyE,CAAC;SACvG,MAAM,CAAC,yBAAyB,EAAE,0CAA0C,CAAC;SAC7E,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACtB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,MAAM,YAAY,CAAC,gCAAgC,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACvD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAC9D,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,wDAAwD,MAAM,IAAI,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,+EAA+E,CAAC;SAC5F,MAAM,CAAC,uBAAuB,EAAE,sBAAsB,CAAC;SACvD,MAAM,CAAC,yBAAyB,EAAE,0CAA0C,CAAC;SAC7E,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,YAAY,CAAC,iCAAiC,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAC9D,MAAM,QAAQ,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,+DAA+D,MAAM,IAAI,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,4GAA4G,CAAC;SACzH,MAAM,CAAC,uBAAuB,EAAE,uBAAuB,EAAE,+CAA+C,CAAC;SACzG,MAAM,CAAC,wBAAwB,EAAE,gCAAgC,CAAC;SAClE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,MAAM,YAAY,CAAC,iDAAiD,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,uDAAuD,CAAC,CAAC;QAC3F,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,wDAAwD,CAAC,CAAC;QAEnG,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;YAC7E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,KAAK,EAAE;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,MAAM,EAAE,MAAM,IAAI,SAAS;oBAC3B,aAAa,EAAE,aAAa,IAAI,SAAS;oBACzC,KAAK,EAAE,SAAS;iBACjB,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,wBAAwB,GAAG,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACrF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACpE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,4DAA4D,CAAC;SACzE,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QAClB,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,iCAAiC,OAAO,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,qDAAqD,CAAC;SAClE,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC;SACtC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1G,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,mFAAmF,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/discover.d.ts

@@ -0,0 +1,6 @@
+/**
+ * CLI discover & describe commands.
+ */
+import { Command } from "commander";
+export declare function registerDiscoverCommands(program: Command): void;
+//# sourceMappingURL=discover.d.ts.map

package/dist/commands/discover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../src/commands/discover.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmG/D"}

package/dist/commands/discover.js

@@ -0,0 +1,94 @@
+/**
+ * CLI discover & describe commands.
+ */
+import { getAllDomains, getOperation, getOperationsByDomain } from "@akadmin/manifest";
+export function registerDiscoverCommands(program) {
+    program
+        .command("discover [domain]")
+        .description("Explore available administrative domains and operations")
+        .option("--json", "Output JSON format")
+        .option("--destructive", "Filter only destructive operations")
+        .action((domain, options) => {
+        if (!domain) {
+            const domains = getAllDomains();
+            const summary = domains.map((d) => {
+                const ops = getOperationsByDomain(d);
+                const destructive = ops.filter((o) => o.isDestructive).length;
+                const sessionOnly = ops.filter((o) => o.authRequirement === "session_only").length;
+                return {
+                    domain: d,
+                    totalOperations: ops.length,
+                    destructiveOperations: destructive,
+                    sessionOnlyOperations: sessionOnly,
+                };
+            });
+            if (options.json) {
+                console.log(JSON.stringify(summary, null, 2));
+                return;
+            }
+            console.log("\n📦 AgentKit Admin Surface (17 Domains, 124 Operations):\n");
+            for (const s of summary) {
+                const destBadge = s.destructiveOperations > 0 ? ` [⚠️ ${s.destructiveOperations} destructive]` : "";
+                const sessBadge = s.sessionOnlyOperations > 0 ? ` [🍪 ${s.sessionOnlyOperations} session-only]` : "";
+                console.log(`  • ${s.domain.padEnd(30)} ${s.totalOperations} ops${destBadge}${sessBadge}`);
+            }
+            console.log("\nRun `akadmin discover <domain>` to inspect operations within a domain.");
+            return;
+        }
+        let ops = getOperationsByDomain(domain);
+        if (ops.length === 0) {
+            console.error(`Error: Domain '${domain}' not found. Run 'akadmin discover' to list valid domains.`);
+            process.exitCode = 1;
+            return;
+        }
+        if (options.destructive) {
+            ops = ops.filter((o) => o.isDestructive);
+        }
+        if (options.json) {
+            console.log(JSON.stringify(ops, null, 2));
+            return;
+        }
+        console.log(`\n📂 Operations in '${domain}' (${ops.length} operations):\n`);
+        for (const op of ops) {
+            const flag = op.isDestructive ? "⚠️ DESTRUCTIVE" : op.isMutation ? "✏️ MUTATION" : "🔍 READ";
+            const authBadge = op.authRequirement === "session_only" ? "[🍪 Session Only]" : op.authRequirement === "public" ? "[🌐 Public]" : "";
+            console.log(`  • ${op.operationId.padEnd(36)} [${op.method} ${op.path}] ${flag} ${authBadge}`);
+            if (op.summary) {
+                console.log(`    ${op.summary}`);
+            }
+        }
+    });
+    program
+        .command("describe <operationId>")
+        .description("Show detailed schema, parameters, and scopes for an operation")
+        .option("--json", "Output JSON format")
+        .action((operationId, options) => {
+        const op = getOperation(operationId);
+        if (!op) {
+            console.error(`Error: Operation '${operationId}' not found.`);
+            process.exitCode = 1;
+            return;
+        }
+        if (options.json) {
+            console.log(JSON.stringify(op, null, 2));
+            return;
+        }
+        console.log(`\n📋 Operation: ${op.operationId}`);
+        console.log(`Domain:      ${op.domain}`);
+        console.log(`Endpoint:    ${op.method} ${op.path}`);
+        console.log(`Auth Mode:   ${op.authRequirement}`);
+        console.log(`Destructive: ${op.isDestructive ? "YES (gated by preview->confirm)" : "No"}`);
+        console.log(`Scopes:      ${op.requiredScopes.length > 0 ? op.requiredScopes.join(", ") : "None declared (admin session/super-scope)"}`);
+        console.log(`Summary:     ${op.summary || "None"}`);
+        if (op.parameters.length > 0) {
+            console.log("\nParameters:");
+            for (const p of op.parameters) {
+                console.log(`  - ${p.name} (${p.in}, ${p.required ? "required" : "optional"}): ${p.description || ""}`);
+            }
+        }
+        if (op.hasRequestBody) {
+            console.log("\nRequest Body: Accepts JSON payload");
+        }
+    });
+}
+//# sourceMappingURL=discover.js.map

package/dist/commands/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../src/commands/discover.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAGvF,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,OAAO;SACJ,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,yDAAyD,CAAC;SACtE,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC;SACtC,MAAM,CAAC,eAAe,EAAE,oCAAoC,CAAC;SAC7D,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAChC,MAAM,GAAG,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;gBACrC,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;gBAC9D,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,cAAc,CAAC,CAAC,MAAM,CAAC;gBACnF,OAAO;oBACL,MAAM,EAAE,CAAC;oBACT,eAAe,EAAE,GAAG,CAAC,MAAM;oBAC3B,qBAAqB,EAAE,WAAW;oBAClC,qBAAqB,EAAE,WAAW;iBACnC,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;YAC3E,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,SAAS,GAAG,CAAC,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,qBAAqB,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpG,MAAM,SAAS,GAAG,CAAC,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,qBAAqB,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,eAAe,OAAO,SAAS,GAAG,SAAS,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QAED,IAAI,GAAG,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,kBAAkB,MAAM,4DAA4D,CAAC,CAAC;YACpG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,MAAM,GAAG,CAAC,MAAM,iBAAiB,CAAC,CAAC;QAC5E,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7F,MAAM,SAAS,GAAG,EAAE,CAAC,eAAe,KAAK,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACrI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;YAC/F,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,wBAAwB,CAAC;SACjC,WAAW,CAAC,+DAA+D,CAAC;SAC5E,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC;SACtC,MAAM,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,EAAE,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,CAAC,KAAK,CAAC,qBAAqB,WAAW,cAAc,CAAC,CAAC;YAC9D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,2CAA2C,EAAE,CAAC,CAAC;QACzI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC,CAAC;QAEpD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/domain.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Curated domain subcommands for akadmin CLI with persistent storage.
+ */
+import { Command } from "commander";
+import { CliKeychain } from "../keychain/index.js";
+export declare function registerDomainCommands(program: Command, keychain: CliKeychain): void;
+//# sourceMappingURL=domain.d.ts.map

package/dist/commands/domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.d.ts","sourceRoot":"","sources":["../../src/commands/domain.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AA0BnD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,GAAG,IAAI,CAoGpF"}

package/dist/commands/domain.js

@@ -0,0 +1,104 @@
+/**
+ * Curated domain subcommands for akadmin CLI with persistent storage.
+ */
+import { executeOperation } from "@akadmin/core";
+import { FileAuditStore, FileNonceStore } from "../storage/file-store.js";
+async function buildContext(keychain, profileOverride, confirmToken) {
+    const activeProfile = profileOverride || keychain.getActiveProfile();
+    const creds = await keychain.getCredentials(activeProfile);
+    const nonceStore = new FileNonceStore(keychain.getConfigDir());
+    const auditStore = new FileAuditStore(keychain.getConfigDir());
+    return {
+        operatorId: "cli_operator",
+        profile: activeProfile,
+        apiKey: creds.apiKey,
+        sessionCookie: creds.sessionCookie,
+        baseUrl: creds.baseUrl || "https://agentkit.best",
+        signingSecret: keychain.getSigningSecret(),
+        nonceStore,
+        auditStore,
+        confirmToken,
+    };
+}
+export function registerDomainCommands(program, keychain) {
+    // Orders Domain
+    const orders = program.command("orders").description("Orders management workflows");
+    orders
+        .command("list")
+        .description("List orders")
+        .option("-q, --query <search>", "Search keyword")
+        .option("-s, --status <status>", "Filter by status")
+        .option("--json", "Output JSON format")
+        .action(async (options) => {
+        const ctx = await buildContext(keychain);
+        const res = await executeOperation("getOrders", { query: options.query, status: options.status }, undefined, ctx);
+        console.log(JSON.stringify(res, null, 2));
+    });
+    orders
+        .command("get <orderId>")
+        .description("Get order details by ID")
+        .option("--json", "Output JSON format")
+        .action(async (orderId) => {
+        const ctx = await buildContext(keychain);
+        const res = await executeOperation("getOrdersOrderId", { orderId }, undefined, ctx);
+        console.log(JSON.stringify(res, null, 2));
+    });
+    orders
+        .command("refund <orderId>")
+        .description("Refund an order (Destructive — two-phase gate)")
+        .requiredOption("-a, --amount <number>", "Refund amount in cents")
+        .requiredOption("-r, --reason <string>", "Reason for refund")
+        .option("--confirm <token>", "Confirm token required in production")
+        .action(async (orderId, options) => {
+        const ctx = await buildContext(keychain, undefined, options.confirm);
+        const res = await executeOperation("postOrdersOrderIdRefund", { orderId }, { amount: Number(options.amount), reason: options.reason }, ctx);
+        console.log(JSON.stringify(res, null, 2));
+    });
+    // Discounts Domain
+    const discounts = program.command("discounts").description("Discounts management workflows");
+    discounts
+        .command("list")
+        .description("List discount codes")
+        .action(async () => {
+        const ctx = await buildContext(keychain);
+        const res = await executeOperation("getDiscounts", {}, undefined, ctx);
+        console.log(JSON.stringify(res, null, 2));
+    });
+    discounts
+        .command("create")
+        .description("Create a discount code (Destructive — two-phase gate)")
+        .requiredOption("-c, --code <string>", "Discount code")
+        .option("-p, --percent <number>", "Percent off")
+        .option("-m, --max-uses <number>", "Maximum uses")
+        .option("--confirm <token>", "Confirm token")
+        .action(async (options) => {
+        const ctx = await buildContext(keychain, undefined, options.confirm);
+        const res = await executeOperation("postDiscounts", {}, {
+            code: options.code,
+            percentOff: options.percent ? Number(options.percent) : undefined,
+            maxUses: options.maxUses ? Number(options.maxUses) : undefined,
+        }, ctx);
+        console.log(JSON.stringify(res, null, 2));
+    });
+    // Payouts Domain
+    const payouts = program.command("payouts").description("Payouts workflows (Session Cookie required)");
+    payouts
+        .command("list")
+        .description("List payouts")
+        .action(async () => {
+        const ctx = await buildContext(keychain);
+        const res = await executeOperation("getPayouts", {}, undefined, ctx);
+        console.log(JSON.stringify(res, null, 2));
+    });
+    // Revenue Domain
+    const revenue = program.command("revenue").description("Revenue reports");
+    revenue
+        .command("summary")
+        .description("Get platform revenue summary")
+        .action(async () => {
+        const ctx = await buildContext(keychain);
+        const res = await executeOperation("getRevenue", {}, undefined, ctx);
+        console.log(JSON.stringify(res, null, 2));
+    });
+}
+//# sourceMappingURL=domain.js.map

package/dist/commands/domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.js","sourceRoot":"","sources":["../../src/commands/domain.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAyB,MAAM,eAAe,CAAC;AAGxE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1E,KAAK,UAAU,YAAY,CACzB,QAAqB,EACrB,eAAwB,EACxB,YAAqB;IAErB,MAAM,aAAa,GAAG,eAAe,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IAE/D,OAAO;QACL,UAAU,EAAE,cAAc;QAC1B,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,uBAAuB;QACjD,aAAa,EAAE,QAAQ,CAAC,gBAAgB,EAAE;QAC1C,UAAU;QACV,UAAU;QACV,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgB,EAAE,QAAqB;IAC5E,gBAAgB;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,6BAA6B,CAAC,CAAC;IAEpF,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,aAAa,CAAC;SAC1B,MAAM,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;SAChD,MAAM,CAAC,uBAAuB,EAAE,kBAAkB,CAAC;SACnD,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC;SACtC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAClH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,yBAAyB,CAAC;SACtC,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC;SACtC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,gDAAgD,CAAC;SAC7D,cAAc,CAAC,uBAAuB,EAAE,wBAAwB,CAAC;SACjE,cAAc,CAAC,uBAAuB,EAAE,mBAAmB,CAAC;SAC5D,MAAM,CAAC,mBAAmB,EAAE,sCAAsC,CAAC;SACnE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAChC,yBAAyB,EACzB,EAAE,OAAO,EAAE,EACX,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAC1D,GAAG,CACJ,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEL,mBAAmB;IACnB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,gCAAgC,CAAC,CAAC;IAE7F,SAAS;SACN,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,qBAAqB,CAAC;SAClC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEL,SAAS;SACN,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uDAAuD,CAAC;SACpE,cAAc,CAAC,qBAAqB,EAAE,eAAe,CAAC;SACtD,MAAM,CAAC,wBAAwB,EAAE,aAAa,CAAC;SAC/C,MAAM,CAAC,yBAAyB,EAAE,cAAc,CAAC;SACjD,MAAM,CAAC,mBAAmB,EAAE,eAAe,CAAC;SAC5C,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAChC,eAAe,EACf,EAAE,EACF;YACE,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SAC/D,EACD,GAAG,CACJ,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEL,iBAAiB;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,6CAA6C,CAAC,CAAC;IAEtG,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,cAAc,CAAC;SAC3B,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEL,iBAAiB;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAE1E,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/raw.d.ts

@@ -0,0 +1,7 @@
+/**
+ * CLI universal raw escape hatch command with persistent nonces and audit logging.
+ */
+import { Command } from "commander";
+import { CliKeychain } from "../keychain/index.js";
+export declare function registerRawCommand(program: Command, keychain: CliKeychain): void;
+//# sourceMappingURL=raw.d.ts.map

package/dist/commands/raw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../../src/commands/raw.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,GAAG,IAAI,CA0FhF"}

package/dist/commands/raw.js

@@ -0,0 +1,90 @@
+/**
+ * CLI universal raw escape hatch command with persistent nonces and audit logging.
+ */
+import { executeOperation } from "@akadmin/core";
+import { FileAuditStore, FileNonceStore } from "../storage/file-store.js";
+export function registerRawCommand(program, keychain) {
+    const nonceStore = new FileNonceStore(keychain.getConfigDir());
+    const auditStore = new FileAuditStore(keychain.getConfigDir());
+    program
+        .command("raw <operationId>")
+        .description("Invoke any of the 124 OpenAPI operations by operationId")
+        .option("-p, --param <key=value...>", "Path/query parameters (e.g. -p orderId=ord_100)")
+        .option("-b, --body <json>", "Request body JSON string")
+        .option("--confirm <token>", "Confirm token required to execute mutations")
+        .option("--profile <profile>", "Target environment profile (default: production)")
+        .option("--json", "Output JSON format")
+        .action(async (operationId, options) => {
+        const activeProfile = options.profile || keychain.getActiveProfile();
+        const creds = await keychain.getCredentials(activeProfile);
+        const params = {};
+        if (options.param) {
+            const paramList = Array.isArray(options.param) ? options.param : [options.param];
+            for (const item of paramList) {
+                const eqIdx = item.indexOf("=");
+                if (eqIdx !== -1) {
+                    const k = item.slice(0, eqIdx).trim();
+                    const v = item.slice(eqIdx + 1).trim();
+                    params[k] = v;
+                }
+            }
+        }
+        let parsedBody = undefined;
+        if (options.body) {
+            try {
+                parsedBody = JSON.parse(options.body);
+            }
+            catch {
+                console.error("Error: --body must be valid JSON.");
+                process.exitCode = 1;
+                return;
+            }
+        }
+        const context = {
+            operatorId: "cli_operator",
+            profile: activeProfile,
+            apiKey: creds.apiKey,
+            sessionCookie: creds.sessionCookie,
+            baseUrl: creds.baseUrl || "https://agentkit.best",
+            signingSecret: keychain.getSigningSecret(),
+            nonceStore,
+            auditStore,
+            confirmToken: options.confirm,
+        };
+        const result = await executeOperation(operationId, params, parsedBody, context);
+        if (options.json) {
+            console.log(JSON.stringify(result, null, 2));
+            if (result.status === "error")
+                process.exitCode = 1;
+            return;
+        }
+        if (result.status === "confirmation_required") {
+            const p = result.preview;
+            console.log(`\n🔒 [PREVIEW — ${activeProfile.toUpperCase()}] ${p.summary || p.operationId}`);
+            console.log(`Endpoint:    ${p.method} ${p.path}`);
+            console.log(`Impact:      ${p.impactDescription}`);
+            console.log(`Hash:        ${p.canonicalHash.slice(0, 16)}...`);
+            console.log(`Expires:     ${p.expiresAt}`);
+            for (const w of p.warnings)
+                console.log(`  ${w}`);
+            console.log("\n▶ TO EXECUTE, re-run with confirmation token:");
+            console.log(`  akadmin raw ${operationId} ${options.param ? `--param ${options.param}` : ""} --confirm ${p.confirmToken}\n`);
+            return;
+        }
+        if (result.status === "executed") {
+            console.log(`\n✅ [${activeProfile.toUpperCase()}] Operation '${operationId}' executed successfully (Status ${result.statusCode}):`);
+            console.log(JSON.stringify(result.data, null, 2));
+            console.log(`\nAudit ID: ${result.auditId}${result.idempotencyKey ? ` | Idempotency Key: ${result.idempotencyKey}` : ""}`);
+            return;
+        }
+        if (result.status === "error") {
+            console.error(`\n❌ [${activeProfile.toUpperCase()}] Execution Error (Status ${result.statusCode}):`);
+            console.error(`  ${result.error}`);
+            if (result.requiredScopes && result.requiredScopes.length > 0) {
+                console.error(`  Required scope(s): ${result.requiredScopes.join(", ")}`);
+            }
+            process.exitCode = 1;
+        }
+    });
+}
+//# sourceMappingURL=raw.js.map

package/dist/commands/raw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw.js","sourceRoot":"","sources":["../../src/commands/raw.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAyB,MAAM,eAAe,CAAC;AAGxE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1E,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,QAAqB;IACxE,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IAE/D,OAAO;SACJ,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,yDAAyD,CAAC;SACtE,MAAM,CAAC,4BAA4B,EAAE,iDAAiD,CAAC;SACvF,MAAM,CAAC,mBAAmB,EAAE,0BAA0B,CAAC;SACvD,MAAM,CAAC,mBAAmB,EAAE,6CAA6C,CAAC;SAC1E,MAAM,CAAC,qBAAqB,EAAE,kDAAkD,CAAC;SACjF,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC;SACtC,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE;QACrC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAE3D,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACjF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;oBACtC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBACvC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,UAAU,GAAY,SAAS,CAAC;QACpC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACnD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAqB;YAChC,UAAU,EAAE,cAAc;YAC1B,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,uBAAuB;YACjD,aAAa,EAAE,QAAQ,CAAC,gBAAgB,EAAE;YAC1C,UAAU;YACV,UAAU;YACV,YAAY,EAAE,OAAO,CAAC,OAAO;SAC9B,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAEhF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;YAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,mBAAmB,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7F,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAElD,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;YAC7H,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,QAAQ,aAAa,CAAC,WAAW,EAAE,gBAAgB,WAAW,mCAAmC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;YACpI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,uBAAuB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3H,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,QAAQ,aAAa,CAAC,WAAW,EAAE,6BAA6B,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;YACrG,OAAO,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACnC,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9D,OAAO,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+/**
+ * akadmin — Unified Operator CLI for AgentKit.best admin platform.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;GAEG"}