aranea-sdk-cli 0.5.2 → 0.5.5

package/dist/commands/permission.d.ts

@@ -0,0 +1,18 @@
+/**
+ * AraneaSDK CLI - Permission Command
+ *
+ * TypeDefaultPermissions management for AraneaDevice types
+ *
+ * Usage:
+ *   aranea-sdk permission list              # List all typeDefaultPermissions
+ *   aranea-sdk permission get <type>        # Get permission for specific type
+ *   aranea-sdk permission set <type> <level>  # Set default permission level
+ *   aranea-sdk permission delete <type>     # Delete typeDefaultPermission
+ *
+ * Note: Requires System Authority Layer permission (71+)
+ */
+import { Command } from 'commander';
+/**
+ * Permission command
+ */
+export declare const permissionCommand: Command;

package/dist/commands/permission.js

@@ -0,0 +1,412 @@
+"use strict";
+/**
+ * AraneaSDK CLI - Permission Command
+ *
+ * TypeDefaultPermissions management for AraneaDevice types
+ *
+ * Usage:
+ *   aranea-sdk permission list              # List all typeDefaultPermissions
+ *   aranea-sdk permission get <type>        # Get permission for specific type
+ *   aranea-sdk permission set <type> <level>  # Set default permission level
+ *   aranea-sdk permission delete <type>     # Delete typeDefaultPermission
+ *
+ * Note: Requires System Authority Layer permission (71+)
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.permissionCommand = void 0;
+const commander_1 = require("commander");
+const chalk_1 = __importDefault(require("chalk"));
+const auth_1 = require("./auth");
+const config_1 = require("../config");
+// Firebase project configuration
+const FIREBASE_PROJECTS = {
+    production: 'mobesorder',
+    staging: 'mobesorder-staging',
+};
+const FIREBASE_REGION = 'asia-northeast1';
+/**
+ * Call Firebase Callable Function
+ */
+async function callFunction(functionName, data, token, env) {
+    const projectId = FIREBASE_PROJECTS[env];
+    const url = `https://${FIREBASE_REGION}-${projectId}.cloudfunctions.net/${functionName}`;
+    const response = await fetch(url, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${token}`,
+        },
+        body: JSON.stringify({ data }),
+    });
+    if (!response.ok) {
+        const errorBody = await response.json().catch(() => ({}));
+        const errorMessage = errorBody.error?.message || `HTTP ${response.status}`;
+        throw new Error(errorMessage);
+    }
+    const result = await response.json();
+    return result.result;
+}
+/**
+ * Firestore REST API for direct reads
+ */
+async function firestoreGet(path, token, env) {
+    const projectId = FIREBASE_PROJECTS[env];
+    const url = `https://firestore.googleapis.com/v1/projects/${projectId}/databases/(default)/documents/${path}`;
+    const response = await fetch(url, {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${token}`,
+        },
+    });
+    if (!response.ok) {
+        if (response.status === 404) {
+            return null;
+        }
+        const errorBody = await response.json().catch(() => ({}));
+        throw new Error(errorBody.error?.message || `HTTP ${response.status}`);
+    }
+    return response.json();
+}
+/**
+ * List all typeDefaultPermissions
+ */
+async function firestoreListTypeDefaultPermissions(token, env) {
+    const projectId = FIREBASE_PROJECTS[env];
+    const collectionPath = 'LacisOathConfig/permissionConfig/typeDefaultPermissions';
+    const url = `https://firestore.googleapis.com/v1/projects/${projectId}/databases/(default)/documents/${collectionPath}`;
+    const response = await fetch(url, {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${token}`,
+        },
+    });
+    if (!response.ok) {
+        if (response.status === 404) {
+            return [];
+        }
+        const errorBody = await response.json().catch(() => ({}));
+        throw new Error(errorBody.error?.message || `HTTP ${response.status}`);
+    }
+    const result = await response.json();
+    return result.documents || [];
+}
+/**
+ * Parse Firestore document fields to plain object
+ */
+function parseFirestoreFields(fields) {
+    const result = {};
+    for (const [key, value] of Object.entries(fields)) {
+        if ('stringValue' in value) {
+            result[key] = value.stringValue;
+        }
+        else if ('integerValue' in value) {
+            result[key] = parseInt(value.integerValue, 10);
+        }
+        else if ('doubleValue' in value) {
+            result[key] = value.doubleValue;
+        }
+        else if ('booleanValue' in value) {
+            result[key] = value.booleanValue;
+        }
+        else if ('timestampValue' in value) {
+            result[key] = new Date(value.timestampValue);
+        }
+        else if ('mapValue' in value) {
+            result[key] = parseFirestoreFields(value.mapValue.fields || {});
+        }
+        else if ('arrayValue' in value) {
+            result[key] = (value.arrayValue.values || []).map((v) => parseFirestoreFields({ _: v })._);
+        }
+    }
+    return result;
+}
+/**
+ * Format permission level with description
+ */
+function formatPermissionLevel(level) {
+    if (level >= 100)
+        return chalk_1.default.magenta(`${level} (Lacis/SU)`);
+    if (level >= 71)
+        return chalk_1.default.red(`${level} (System Authority)`);
+    if (level >= 61)
+        return chalk_1.default.yellow(`${level} (Tenant Primary)`);
+    if (level >= 41)
+        return chalk_1.default.blue(`${level} (Management Authority)`);
+    if (level >= 21)
+        return chalk_1.default.cyan(`${level} (Standard User)`);
+    if (level >= 11)
+        return chalk_1.default.green(`${level} (Guest+)`);
+    if (level >= 3)
+        return chalk_1.default.gray(`${level} (Guest)`);
+    return chalk_1.default.red(`${level} (Reserved/BAN)`);
+}
+/**
+ * Permission command
+ */
+exports.permissionCommand = new commander_1.Command('permission')
+    .description('TypeDefaultPermissions management for AraneaDevice types')
+    .addHelpText('after', `
+Permission Levels (Cathedral Orders):
+  100    : Lacis (System Super User)
+  71-99  : System Authority Layer (cross-tenant)
+  61-70  : Tenant Primary Layer
+  41-60  : Management Authority Layer
+  21-40  : Standard User Layer
+  11-20  : Guest+ Layer
+  3-10   : Guest Layer
+  0-2    : Reserved/BAN
+
+Examples:
+  aranea-sdk permission list
+  aranea-sdk permission get aranea_ar-is22
+  aranea-sdk permission set aranea_ar-is22 21
+  aranea-sdk permission set aranea_ar-is22 21 --display-name "AR-IS22センサー"
+  aranea-sdk permission delete aranea_ar-is22
+
+Note: Requires System Authority Layer permission (71+) for modifications.
+`);
+// permission list
+exports.permissionCommand
+    .command('list')
+    .description('List all typeDefaultPermissions')
+    .option('--endpoint <env>', 'Target environment (production|staging)')
+    .option('--json', 'Output as JSON')
+    .action(async (options) => {
+    try {
+        const env = (0, config_1.resolveEnvironment)(options.endpoint);
+        (0, config_1.checkStagingAvailability)(env, 'permission list');
+        const token = await (0, auth_1.getValidToken)();
+        if (!token) {
+            console.error(chalk_1.default.red('\n✖ Not authenticated. Run "aranea-sdk auth login" first.'));
+            process.exit(1);
+        }
+        if (!options.json) {
+            console.log(chalk_1.default.cyan('\n=== TypeDefaultPermissions List ===\n'));
+            console.log(`Environment: ${env === 'production' ? chalk_1.default.red('PRODUCTION') : chalk_1.default.yellow('staging')}`);
+            console.log('');
+        }
+        const documents = await firestoreListTypeDefaultPermissions(token, env);
+        if (documents.length === 0) {
+            if (options.json) {
+                console.log(JSON.stringify([], null, 2));
+            }
+            else {
+                console.log(chalk_1.default.yellow('No typeDefaultPermissions configured.'));
+                console.log('\nTo add a permission, use:');
+                console.log('  aranea-sdk permission set <typeId> <level>');
+            }
+            return;
+        }
+        const permissions = documents.map((doc) => {
+            const name = doc.name.split('/').pop();
+            const fields = parseFirestoreFields(doc.fields || {});
+            return {
+                id: name,
+                typeDomainId: fields.typeDomainId,
+                typeId: fields.typeId,
+                defaultPermission: fields.defaultPermission,
+                displayName: fields.displayName,
+                ...fields,
+            };
+        });
+        if (options.json) {
+            console.log(JSON.stringify(permissions, null, 2));
+        }
+        else {
+            console.log(chalk_1.default.gray('─'.repeat(80)));
+            console.log(chalk_1.default.bold(`${'TypeDomain'.padEnd(20)} ${'TypeId'.padEnd(25)} ${'Permission'.padEnd(20)} DisplayName`));
+            console.log(chalk_1.default.gray('─'.repeat(80)));
+            for (const perm of permissions) {
+                const typeDomain = (perm.typeDomainId || '').padEnd(20);
+                const typeId = (perm.typeId || '').padEnd(25);
+                const level = formatPermissionLevel(perm.defaultPermission || 0).padEnd(30);
+                const displayName = perm.displayName || '-';
+                console.log(`${typeDomain} ${typeId} ${level} ${displayName}`);
+            }
+            console.log(chalk_1.default.gray('─'.repeat(80)));
+            console.log(`\nTotal: ${permissions.length} type(s)`);
+        }
+    }
+    catch (error) {
+        console.error(chalk_1.default.red(`\n✖ Error: ${error.message}`));
+        process.exit(1);
+    }
+});
+// permission get
+exports.permissionCommand
+    .command('get <typeId>')
+    .description('Get typeDefaultPermission for specific type')
+    .option('--endpoint <env>', 'Target environment (production|staging)')
+    .option('--type-domain <domain>', 'TypeDomain ID (default: araneaDevice)')
+    .option('--json', 'Output as JSON')
+    .action(async (typeId, options) => {
+    try {
+        const env = (0, config_1.resolveEnvironment)(options.endpoint);
+        (0, config_1.checkStagingAvailability)(env, 'permission get');
+        const token = await (0, auth_1.getValidToken)();
+        if (!token) {
+            console.error(chalk_1.default.red('\n✖ Not authenticated. Run "aranea-sdk auth login" first.'));
+            process.exit(1);
+        }
+        const typeDomainId = options.typeDomain || 'araneaDevice';
+        const docId = `${typeDomainId}_${typeId}`;
+        const path = `LacisOathConfig/permissionConfig/typeDefaultPermissions/${docId}`;
+        const doc = await firestoreGet(path, token, env);
+        if (!doc) {
+            if (options.json) {
+                console.log(JSON.stringify({ found: false, id: docId }, null, 2));
+            }
+            else {
+                console.log(chalk_1.default.yellow(`\nNo typeDefaultPermission found for: ${docId}`));
+                console.log('\nThis type will use the fallback default permission (Guest: 3).');
+                console.log('\nTo set a permission, use:');
+                console.log(`  aranea-sdk permission set ${typeId} <level>`);
+            }
+            return;
+        }
+        const fields = parseFirestoreFields(doc.fields || {});
+        if (options.json) {
+            console.log(JSON.stringify({ found: true, id: docId, ...fields }, null, 2));
+        }
+        else {
+            console.log(chalk_1.default.cyan(`\n=== TypeDefaultPermission: ${docId} ===\n`));
+            console.log(`  TypeDomain:  ${fields.typeDomainId || '-'}`);
+            console.log(`  TypeId:      ${fields.typeId || '-'}`);
+            console.log(`  Permission:  ${formatPermissionLevel(fields.defaultPermission || 0)}`);
+            console.log(`  DisplayName: ${fields.displayName || '-'}`);
+            if (fields.created_at) {
+                console.log(`  Created:     ${new Date(fields.created_at).toLocaleString('ja-JP')}`);
+            }
+            if (fields.updated_at) {
+                console.log(`  Updated:     ${new Date(fields.updated_at).toLocaleString('ja-JP')}`);
+            }
+        }
+    }
+    catch (error) {
+        console.error(chalk_1.default.red(`\n✖ Error: ${error.message}`));
+        process.exit(1);
+    }
+});
+// permission set
+exports.permissionCommand
+    .command('set <typeId> <level>')
+    .description('Set typeDefaultPermission for a type')
+    .option('--endpoint <env>', 'Target environment (production|staging)')
+    .option('--type-domain <domain>', 'TypeDomain ID (default: araneaDevice)')
+    .option('--display-name <name>', 'Display name for the type')
+    .action(async (typeId, level, options) => {
+    try {
+        const env = (0, config_1.resolveEnvironment)(options.endpoint);
+        (0, config_1.checkStagingAvailability)(env, 'permission set');
+        (0, config_1.warnIfProduction)(env, 'permission set');
+        const token = await (0, auth_1.getValidToken)();
+        if (!token) {
+            console.error(chalk_1.default.red('\n✖ Not authenticated. Run "aranea-sdk auth login" first.'));
+            process.exit(1);
+        }
+        const permissionLevel = parseInt(level, 10);
+        if (isNaN(permissionLevel) || permissionLevel < 3 || permissionLevel > 100) {
+            console.error(chalk_1.default.red('\n✖ Permission level must be between 3 and 100.'));
+            console.error('  0 = BAN, 1-2 = Reserved, 3-10 = Guest, 11-20 = Guest+, ...');
+            process.exit(1);
+        }
+        const typeDomainId = options.typeDomain || 'araneaDevice';
+        console.log(chalk_1.default.cyan('\n=== Setting TypeDefaultPermission ===\n'));
+        console.log(`  Environment: ${env === 'production' ? chalk_1.default.red('PRODUCTION') : chalk_1.default.yellow('staging')}`);
+        console.log(`  TypeDomain:  ${typeDomainId}`);
+        console.log(`  TypeId:      ${typeId}`);
+        console.log(`  Permission:  ${formatPermissionLevel(permissionLevel)}`);
+        if (options.displayName) {
+            console.log(`  DisplayName: ${options.displayName}`);
+        }
+        console.log('');
+        const requestData = {
+            typeDomainId,
+            typeId,
+            defaultPermission: permissionLevel,
+        };
+        if (options.displayName) {
+            requestData.displayName = options.displayName;
+        }
+        const result = await callFunction('upsertTypeDefaultPermission', requestData, token, env);
+        if (result.ok) {
+            console.log(chalk_1.default.green('✓ TypeDefaultPermission set successfully!'));
+            console.log(`  Document ID: ${result.id}`);
+        }
+        else {
+            console.error(chalk_1.default.red('✖ Failed to set permission.'));
+            process.exit(1);
+        }
+    }
+    catch (error) {
+        const message = error.message;
+        // Translate common error messages
+        if (message.includes('permission-denied') || message.includes('71')) {
+            console.error(chalk_1.default.red('\n✖ Permission denied.'));
+            console.error('  System Authority Layer permission (71+) is required.');
+            console.error('  Your account does not have sufficient privileges.');
+        }
+        else if (message.includes('not-found')) {
+            console.error(chalk_1.default.red(`\n✖ ${message}`));
+            console.error('  Make sure the typeDomain and type definitions exist.');
+        }
+        else {
+            console.error(chalk_1.default.red(`\n✖ Error: ${message}`));
+        }
+        process.exit(1);
+    }
+});
+// permission delete
+exports.permissionCommand
+    .command('delete <typeId>')
+    .description('Delete typeDefaultPermission for a type')
+    .option('--endpoint <env>', 'Target environment (production|staging)')
+    .option('--type-domain <domain>', 'TypeDomain ID (default: araneaDevice)')
+    .option('--force', 'Skip confirmation')
+    .action(async (typeId, options) => {
+    try {
+        const env = (0, config_1.resolveEnvironment)(options.endpoint);
+        (0, config_1.checkStagingAvailability)(env, 'permission delete');
+        (0, config_1.warnIfProduction)(env, 'permission delete');
+        const token = await (0, auth_1.getValidToken)();
+        if (!token) {
+            console.error(chalk_1.default.red('\n✖ Not authenticated. Run "aranea-sdk auth login" first.'));
+            process.exit(1);
+        }
+        const typeDomainId = options.typeDomain || 'araneaDevice';
+        const docId = `${typeDomainId}_${typeId}`;
+        console.log(chalk_1.default.cyan('\n=== Delete TypeDefaultPermission ===\n'));
+        console.log(`  Environment: ${env === 'production' ? chalk_1.default.red('PRODUCTION') : chalk_1.default.yellow('staging')}`);
+        console.log(`  Document ID: ${docId}`);
+        if (!options.force) {
+            console.log(chalk_1.default.yellow('\n⚠ This will delete the typeDefaultPermission.'));
+            console.log('  The type will fall back to default permission (Guest: 3).');
+            console.log('\nUse --force to confirm deletion.');
+            process.exit(1);
+        }
+        // Use Firestore REST API to delete
+        const projectId = FIREBASE_PROJECTS[env];
+        const path = `LacisOathConfig/permissionConfig/typeDefaultPermissions/${docId}`;
+        const url = `https://firestore.googleapis.com/v1/projects/${projectId}/databases/(default)/documents/${path}`;
+        const response = await fetch(url, {
+            method: 'DELETE',
+            headers: {
+                Authorization: `Bearer ${token}`,
+            },
+        });
+        if (response.ok || response.status === 404) {
+            console.log(chalk_1.default.green('\n✓ TypeDefaultPermission deleted.'));
+        }
+        else {
+            const errorBody = await response.json().catch(() => ({}));
+            throw new Error(errorBody.error?.message || `HTTP ${response.status}`);
+        }
+    }
+    catch (error) {
+        console.error(chalk_1.default.red(`\n✖ Error: ${error.message}`));
+        process.exit(1);
+    }
+});

package/dist/commands/type.d.ts

@@ -0,0 +1,21 @@
+/**
+ * AraneaSDK CLI - Type Command
+ *
+ * UserTypeDefinitions management for AraneaDevice types
+ *
+ * Usage:
+ *   aranea-sdk type list                    # List all types
+ *   aranea-sdk type get <typeId>            # Get specific type
+ *   aranea-sdk type create <typeId>         # Create new type
+ *   aranea-sdk type update <typeId>         # Update type
+ *   aranea-sdk type delete <typeId>         # Delete type
+ *
+ * Note:
+ *   - Read operations require System Authority Layer (71+)
+ *   - Write operations require Super User (91+)
+ */
+import { Command } from 'commander';
+/**
+ * Type command
+ */
+export declare const typeCommand: Command;

package/dist/commands/type.js

@@ -0,0 +1,469 @@
+"use strict";
+/**
+ * AraneaSDK CLI - Type Command
+ *
+ * UserTypeDefinitions management for AraneaDevice types
+ *
+ * Usage:
+ *   aranea-sdk type list                    # List all types
+ *   aranea-sdk type get <typeId>            # Get specific type
+ *   aranea-sdk type create <typeId>         # Create new type
+ *   aranea-sdk type update <typeId>         # Update type
+ *   aranea-sdk type delete <typeId>         # Delete type
+ *
+ * Note:
+ *   - Read operations require System Authority Layer (71+)
+ *   - Write operations require Super User (91+)
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.typeCommand = void 0;
+const commander_1 = require("commander");
+const chalk_1 = __importDefault(require("chalk"));
+const auth_1 = require("./auth");
+const config_1 = require("../config");
+// Firebase project configuration
+const FIREBASE_PROJECTS = {
+    production: 'mobesorder',
+    staging: 'mobesorder-staging',
+};
+const FIREBASE_REGION = 'asia-northeast1';
+/**
+ * Call araneaTypeDefinitionHTTP API
+ */
+async function callTypeDefinitionAPI(request, token, env) {
+    const projectId = FIREBASE_PROJECTS[env];
+    const url = `https://${FIREBASE_REGION}-${projectId}.cloudfunctions.net/araneaTypeDefinitionHTTP`;
+    const response = await fetch(url, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${token}`,
+        },
+        body: JSON.stringify(request),
+    });
+    const result = await response.json();
+    if (!response.ok || !result.ok) {
+        throw new Error(result.error || `HTTP ${response.status}`);
+    }
+    return result;
+}
+/**
+ * Format permission level with Cathedral Order name
+ */
+function formatPermissionLevel(level) {
+    if (level >= 100)
+        return chalk_1.default.magenta(`${level} (Lacis)`);
+    if (level >= 91)
+        return chalk_1.default.red(`${level} (SU)`);
+    if (level >= 71)
+        return chalk_1.default.yellow(`${level} (System)`);
+    if (level >= 61)
+        return chalk_1.default.blue(`${level} (Tenant Primary)`);
+    if (level >= 41)
+        return chalk_1.default.cyan(`${level} (Management)`);
+    if (level >= 21)
+        return chalk_1.default.green(`${level} (Standard)`);
+    if (level >= 11)
+        return chalk_1.default.gray(`${level} (Guest+)`);
+    return chalk_1.default.gray(`${level} (Guest)`);
+}
+/**
+ * Load credentials for LacisOath
+ */
+async function loadLacisCredentials() {
+    // For now, we'll prompt for these or read from config
+    // In production, these should come from stored credentials
+    const fs = await Promise.resolve().then(() => __importStar(require('fs')));
+    const path = await Promise.resolve().then(() => __importStar(require('path')));
+    const os = await Promise.resolve().then(() => __importStar(require('os')));
+    const credFile = path.join(os.homedir(), '.aranea-sdk', 'lacis-credentials.json');
+    if (fs.existsSync(credFile)) {
+        try {
+            const data = JSON.parse(fs.readFileSync(credFile, 'utf8'));
+            if (data.lacisId && data.cic && data.tid) {
+                return data;
+            }
+        }
+        catch {
+            // Ignore parse errors
+        }
+    }
+    return null;
+}
+/**
+ * Prompt for LacisOath credentials
+ */
+async function promptLacisCredentials() {
+    const readline = await Promise.resolve().then(() => __importStar(require('readline')));
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    const question = (prompt) => new Promise((resolve) => rl.question(prompt, resolve));
+    console.log(chalk_1.default.cyan('\n=== LacisOath Authentication ===\n'));
+    console.log('Type definition management requires LacisOath credentials.');
+    console.log('(Save to ~/.aranea-sdk/lacis-credentials.json for future use)\n');
+    const lacisId = await question('LacisID (20 digits): ');
+    const cic = await question('CIC (6 digits): ');
+    const tid = await question('TID (20 chars): ');
+    rl.close();
+    return { lacisId: lacisId.trim(), cic: cic.trim(), tid: tid.trim() };
+}
+/**
+ * Type command
+ */
+exports.typeCommand = new commander_1.Command('type')
+    .description('UserTypeDefinitions management for AraneaDevice types')
+    .addHelpText('after', `
+Permission Requirements:
+  - list, get: System Authority Layer (71+)
+  - create, update, delete: Super User (91+)
+
+LacisOath Authentication:
+  This command uses LacisOath (lacisId + cic + tid) for authentication.
+  Store credentials in ~/.aranea-sdk/lacis-credentials.json:
+  {
+    "lacisId": "17347487748391988274",
+    "cic": "123456",
+    "tid": "T9999999999999999999"
+  }
+
+Examples:
+  aranea-sdk type list
+  aranea-sdk type list --type-domain araneaDevice
+  aranea-sdk type get aranea_ar-is22
+  aranea-sdk type create aranea_ar-is22 --display-name "AR-IS22 Sensor" --permission 21
+  aranea-sdk type update aranea_ar-is22 --permission 31
+  aranea-sdk type delete aranea_ar-is22 --force
+`);
+// type list
+exports.typeCommand
+    .command('list')
+    .description('List all type definitions')
+    .option('--endpoint <env>', 'Target environment (production|staging)')
+    .option('--type-domain <domain>', 'Filter by TypeDomain (default: araneaDevice)')
+    .option('--json', 'Output as JSON')
+    .action(async (options) => {
+    try {
+        const env = (0, config_1.resolveEnvironment)(options.endpoint);
+        (0, config_1.checkStagingAvailability)(env, 'type list');
+        const token = await (0, auth_1.getValidToken)();
+        if (!token) {
+            console.error(chalk_1.default.red('\n✖ Not authenticated. Run "aranea-sdk auth login" first.'));
+            process.exit(1);
+        }
+        let credentials = await loadLacisCredentials();
+        if (!credentials) {
+            credentials = await promptLacisCredentials();
+        }
+        if (!options.json) {
+            console.log(chalk_1.default.cyan('\n=== UserTypeDefinitions List ===\n'));
+            console.log(`Environment: ${env === 'production' ? chalk_1.default.red('PRODUCTION') : chalk_1.default.yellow('staging')}`);
+            console.log('');
+        }
+        const typeDomainId = options.typeDomain || 'araneaDevice';
+        const result = await callTypeDefinitionAPI({
+            auth: credentials,
+            method: 'list',
+            params: { typeDomainId },
+        }, token, env);
+        if (options.json) {
+            console.log(JSON.stringify(result.definitions, null, 2));
+        }
+        else {
+            if (result.definitions.length === 0) {
+                console.log(chalk_1.default.yellow(`No types found for TypeDomain: ${typeDomainId}`));
+                return;
+            }
+            console.log(chalk_1.default.gray('─'.repeat(90)));
+            console.log(chalk_1.default.bold(`${'TypeId'.padEnd(25)} ${'DisplayName'.padEnd(25)} ${'Permission'.padEnd(20)} Status`));
+            console.log(chalk_1.default.gray('─'.repeat(90)));
+            for (const def of result.definitions) {
+                const typeId = def.typeId.padEnd(25);
+                const displayName = (def.displayName || '-').substring(0, 24).padEnd(25);
+                const permission = formatPermissionLevel(def.defaultCathedralOrder).padEnd(30);
+                const status = def.status === 'deprecated' ? chalk_1.default.red('deprecated') : chalk_1.default.green('active');
+                console.log(`${typeId} ${displayName} ${permission} ${status}`);
+            }
+            console.log(chalk_1.default.gray('─'.repeat(90)));
+            console.log(`\nTotal: ${result.count} type(s) in ${typeDomainId}`);
+        }
+    }
+    catch (error) {
+        console.error(chalk_1.default.red(`\n✖ Error: ${error.message}`));
+        process.exit(1);
+    }
+});
+// type get
+exports.typeCommand
+    .command('get <typeId>')
+    .description('Get specific type definition')
+    .option('--endpoint <env>', 'Target environment (production|staging)')
+    .option('--type-domain <domain>', 'TypeDomain ID (default: araneaDevice)')
+    .option('--json', 'Output as JSON')
+    .action(async (typeId, options) => {
+    try {
+        const env = (0, config_1.resolveEnvironment)(options.endpoint);
+        (0, config_1.checkStagingAvailability)(env, 'type get');
+        const token = await (0, auth_1.getValidToken)();
+        if (!token) {
+            console.error(chalk_1.default.red('\n✖ Not authenticated. Run "aranea-sdk auth login" first.'));
+            process.exit(1);
+        }
+        let credentials = await loadLacisCredentials();
+        if (!credentials) {
+            credentials = await promptLacisCredentials();
+        }
+        const typeDomainId = options.typeDomain || 'araneaDevice';
+        const result = await callTypeDefinitionAPI({
+            auth: credentials,
+            method: 'get',
+            params: { typeDomainId, typeId },
+        }, token, env);
+        if (options.json) {
+            console.log(JSON.stringify(result.definition, null, 2));
+        }
+        else {
+            const def = result.definition;
+            console.log(chalk_1.default.cyan(`\n=== TypeDefinition: ${def.id} ===\n`));
+            console.log(`  TypeDomain:   ${def.typeDomainId}`);
+            console.log(`  TypeId:       ${def.typeId}`);
+            console.log(`  DisplayName:  ${def.displayName}`);
+            console.log(`  Description:  ${def.description || '-'}`);
+            console.log(`  Permission:   ${formatPermissionLevel(def.defaultCathedralOrder)}`);
+            console.log(`  Status:       ${def.status === 'deprecated' ? chalk_1.default.red('deprecated') : chalk_1.default.green('active')}`);
+            console.log(`  Created:      ${def.metadata.createdAt}`);
+            console.log(`  Updated:      ${def.metadata.updatedAt}`);
+        }
+    }
+    catch (error) {
+        console.error(chalk_1.default.red(`\n✖ Error: ${error.message}`));
+        process.exit(1);
+    }
+});
+// type create
+exports.typeCommand
+    .command('create <typeId>')
+    .description('Create new type definition')
+    .option('--endpoint <env>', 'Target environment (production|staging)')
+    .option('--type-domain <domain>', 'TypeDomain ID (default: araneaDevice)')
+    .option('--display-name <name>', 'Display name for the type (required)')
+    .option('--description <desc>', 'Description of the type')
+    .option('--permission <level>', 'Default permission level (required)', parseInt)
+    .action(async (typeId, options) => {
+    try {
+        const env = (0, config_1.resolveEnvironment)(options.endpoint);
+        (0, config_1.checkStagingAvailability)(env, 'type create');
+        (0, config_1.warnIfProduction)(env, 'type create');
+        if (!options.displayName) {
+            console.error(chalk_1.default.red('\n✖ --display-name is required'));
+            process.exit(1);
+        }
+        if (options.permission === undefined || isNaN(options.permission)) {
+            console.error(chalk_1.default.red('\n✖ --permission is required (e.g., --permission 21)'));
+            process.exit(1);
+        }
+        const token = await (0, auth_1.getValidToken)();
+        if (!token) {
+            console.error(chalk_1.default.red('\n✖ Not authenticated. Run "aranea-sdk auth login" first.'));
+            process.exit(1);
+        }
+        let credentials = await loadLacisCredentials();
+        if (!credentials) {
+            credentials = await promptLacisCredentials();
+        }
+        const typeDomainId = options.typeDomain || 'araneaDevice';
+        console.log(chalk_1.default.cyan('\n=== Creating TypeDefinition ===\n'));
+        console.log(`  Environment:  ${env === 'production' ? chalk_1.default.red('PRODUCTION') : chalk_1.default.yellow('staging')}`);
+        console.log(`  TypeDomain:   ${typeDomainId}`);
+        console.log(`  TypeId:       ${typeId}`);
+        console.log(`  DisplayName:  ${options.displayName}`);
+        console.log(`  Description:  ${options.description || '-'}`);
+        console.log(`  Permission:   ${formatPermissionLevel(options.permission)}`);
+        console.log('');
+        const result = await callTypeDefinitionAPI({
+            auth: credentials,
+            method: 'create',
+            params: {
+                typeDomainId,
+                typeId,
+                displayName: options.displayName,
+                description: options.description,
+                defaultCathedralOrder: options.permission,
+            },
+        }, token, env);
+        console.log(chalk_1.default.green('✓ TypeDefinition created successfully!'));
+        console.log(`  Document ID: ${result.id}`);
+        console.log('');
+        console.log(chalk_1.default.yellow('Note: To set typeDefaultPermissions separately, use:'));
+        console.log(`  aranea-sdk permission set ${typeId} ${options.permission} --endpoint ${env}`);
+    }
+    catch (error) {
+        const message = error.message;
+        if (message.includes('91')) {
+            console.error(chalk_1.default.red('\n✖ Permission denied. Super User (91+) is required for create operations.'));
+        }
+        else {
+            console.error(chalk_1.default.red(`\n✖ Error: ${message}`));
+        }
+        process.exit(1);
+    }
+});
+// type update
+exports.typeCommand
+    .command('update <typeId>')
+    .description('Update existing type definition')
+    .option('--endpoint <env>', 'Target environment (production|staging)')
+    .option('--type-domain <domain>', 'TypeDomain ID (default: araneaDevice)')
+    .option('--display-name <name>', 'New display name')
+    .option('--description <desc>', 'New description')
+    .option('--permission <level>', 'New default permission level', parseInt)
+    .option('--status <status>', 'Status (active|deprecated)')
+    .action(async (typeId, options) => {
+    try {
+        const env = (0, config_1.resolveEnvironment)(options.endpoint);
+        (0, config_1.checkStagingAvailability)(env, 'type update');
+        (0, config_1.warnIfProduction)(env, 'type update');
+        const token = await (0, auth_1.getValidToken)();
+        if (!token) {
+            console.error(chalk_1.default.red('\n✖ Not authenticated. Run "aranea-sdk auth login" first.'));
+            process.exit(1);
+        }
+        let credentials = await loadLacisCredentials();
+        if (!credentials) {
+            credentials = await promptLacisCredentials();
+        }
+        const typeDomainId = options.typeDomain || 'araneaDevice';
+        const params = {
+            typeDomainId,
+            typeId,
+        };
+        if (options.displayName)
+            params.displayName = options.displayName;
+        if (options.description)
+            params.description = options.description;
+        if (options.permission !== undefined)
+            params.defaultCathedralOrder = options.permission;
+        if (options.status === 'active' || options.status === 'deprecated') {
+            params.status = options.status;
+        }
+        console.log(chalk_1.default.cyan('\n=== Updating TypeDefinition ===\n'));
+        console.log(`  Environment:  ${env === 'production' ? chalk_1.default.red('PRODUCTION') : chalk_1.default.yellow('staging')}`);
+        console.log(`  TypeDomain:   ${typeDomainId}`);
+        console.log(`  TypeId:       ${typeId}`);
+        if (options.displayName)
+            console.log(`  DisplayName:  ${options.displayName}`);
+        if (options.permission !== undefined)
+            console.log(`  Permission:   ${formatPermissionLevel(options.permission)}`);
+        if (options.status)
+            console.log(`  Status:       ${options.status}`);
+        console.log('');
+        const result = await callTypeDefinitionAPI({
+            auth: credentials,
+            method: 'update',
+            params,
+        }, token, env);
+        console.log(chalk_1.default.green('✓ TypeDefinition updated successfully!'));
+        console.log(`  Document ID: ${result.id}`);
+    }
+    catch (error) {
+        const message = error.message;
+        if (message.includes('91')) {
+            console.error(chalk_1.default.red('\n✖ Permission denied. Super User (91+) is required for update operations.'));
+        }
+        else {
+            console.error(chalk_1.default.red(`\n✖ Error: ${message}`));
+        }
+        process.exit(1);
+    }
+});
+// type delete
+exports.typeCommand
+    .command('delete <typeId>')
+    .description('Delete type definition')
+    .option('--endpoint <env>', 'Target environment (production|staging)')
+    .option('--type-domain <domain>', 'TypeDomain ID (default: araneaDevice)')
+    .option('--force', 'Skip confirmation')
+    .action(async (typeId, options) => {
+    try {
+        const env = (0, config_1.resolveEnvironment)(options.endpoint);
+        (0, config_1.checkStagingAvailability)(env, 'type delete');
+        (0, config_1.warnIfProduction)(env, 'type delete');
+        const token = await (0, auth_1.getValidToken)();
+        if (!token) {
+            console.error(chalk_1.default.red('\n✖ Not authenticated. Run "aranea-sdk auth login" first.'));
+            process.exit(1);
+        }
+        let credentials = await loadLacisCredentials();
+        if (!credentials) {
+            credentials = await promptLacisCredentials();
+        }
+        const typeDomainId = options.typeDomain || 'araneaDevice';
+        console.log(chalk_1.default.cyan('\n=== Delete TypeDefinition ===\n'));
+        console.log(`  Environment:  ${env === 'production' ? chalk_1.default.red('PRODUCTION') : chalk_1.default.yellow('staging')}`);
+        console.log(`  TypeDomain:   ${typeDomainId}`);
+        console.log(`  TypeId:       ${typeId}`);
+        if (!options.force) {
+            console.log(chalk_1.default.yellow('\n⚠ This will permanently delete the type definition.'));
+            console.log('  Existing devices of this type will remain but may have issues.');
+            console.log('\nUse --force to confirm deletion.');
+            process.exit(1);
+        }
+        const result = await callTypeDefinitionAPI({
+            auth: credentials,
+            method: 'delete',
+            params: { typeDomainId, typeId },
+        }, token, env);
+        console.log(chalk_1.default.green('\n✓ TypeDefinition deleted.'));
+        console.log(`  Document ID: ${result.id}`);
+    }
+    catch (error) {
+        const message = error.message;
+        if (message.includes('reserved')) {
+            console.error(chalk_1.default.red(`\n✖ Cannot delete: ${message}`));
+        }
+        else if (message.includes('91')) {
+            console.error(chalk_1.default.red('\n✖ Permission denied. Super User (91+) is required for delete operations.'));
+        }
+        else {
+            console.error(chalk_1.default.red(`\n✖ Error: ${message}`));
+        }
+        process.exit(1);
+    }
+});

package/dist/index.js

@@ -63,6 +63,8 @@ const auth_1 = require("./commands/auth");
 const backlog_1 = require("./commands/backlog");
 const registry_1 = require("./commands/registry");
 const control_1 = require("./commands/control");
+const permission_1 = require("./commands/permission");
+const type_1 = require("./commands/type");
 // package.json からバージョンを動的に取得
 const packageJsonPath = path.resolve(__dirname, '../package.json');
 const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));
@@ -99,4 +101,8 @@ program.addCommand(registry_1.registryCommand);
 // control コマンド (v0.4.1) - Control型管理（安全機構付き）
 // @see doc/APPS/araneaSDK/headDesign/59_METATRON_CONTROL_SUGGESTION.md Section 8
 program.addCommand(control_1.controlCommand);
+// permission コマンド (v0.5.4) - TypeDefaultPermissions管理
+program.addCommand(permission_1.permissionCommand);
+// type コマンド (v0.5.5) - UserTypeDefinitions管理
+program.addCommand(type_1.typeCommand);
 program.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aranea-sdk-cli",
-  "version": "0.5.2",
+  "version": "0.5.5",
   "description": "AraneaSDK CLI - ESP32 IoTデバイス開発支援ツール",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",