deploro 0.3.3 → 0.3.4

package/dist/index.js

@@ -493,6 +493,128 @@ async function tokenRevokeCommand(id, opts) {
   await apiRequestNoProject(`/api/auth/tokens/${encodeURIComponent(id)}`, { method: "DELETE" });
   console.log(`\u2713 Token ${id} revoked`);
 }
+function isEmailProvider(provider) {
+  return provider === "email" || provider === "email_password";
+}
+async function authProvidersListCommand() {
+  const config = requireProject();
+  const data = await apiRequest(
+    `/api/projects/${config.projectId}/auth/providers`
+  );
+  const known = [
+    "email",
+    "email_password",
+    "google",
+    "github",
+    "facebook",
+    "twitter",
+    "discord",
+    "microsoft",
+    "linkedin",
+    "slack",
+    "gitlab",
+    "twitch",
+    "spotify",
+    "reddit",
+    "dropbox",
+    "notion",
+    "apple"
+  ];
+  const byProvider = new Map(data.providers.map((p) => [p.provider, p]));
+  const rows = known.map((provider) => {
+    const row = byProvider.get(provider);
+    const enabled = row?.enabled ?? false;
+    const configured = isEmailProvider(provider) || !!(row?.client_id && row?.client_secret);
+    return {
+      provider,
+      status: enabled && configured ? "active" : enabled ? "setup required" : "disabled"
+    };
+  });
+  table(rows);
+}
+async function authProviderEnableCommand(provider, enabled) {
+  const config = requireProject();
+  await apiRequest(
+    `/api/projects/${config.projectId}/auth/providers/${encodeURIComponent(provider)}`,
+    { method: "PUT", body: JSON.stringify({ enabled }) }
+  );
+  console.log(`\u2713 ${provider} ${enabled ? "enabled" : "disabled"}`);
+}
+async function authProviderConfigureCommand(provider, opts) {
+  const config = requireProject();
+  if (isEmailProvider(provider)) {
+    console.error(
+      `'${provider}' doesn't take OAuth credentials \u2014 it just needs enabling.
+Run: deploro auth providers enable ${provider}`
+    );
+    process.exit(1);
+  }
+  if (!opts.clientId || !opts.clientSecret) {
+    console.error("Both --client-id and --client-secret are required.");
+    process.exit(1);
+  }
+  if (provider === "apple" && (!opts.teamId || !opts.keyId)) {
+    console.error("Apple also requires --team-id and --key-id (--client-secret is the .p8 private key contents).");
+    process.exit(1);
+  }
+  await apiRequest(
+    `/api/projects/${config.projectId}/auth/providers/${encodeURIComponent(provider)}`,
+    {
+      method: "PUT",
+      body: JSON.stringify({
+        client_id: opts.clientId,
+        client_secret: opts.clientSecret,
+        ...provider === "apple" ? { extra_config: { team_id: opts.teamId, key_id: opts.keyId } } : {}
+      })
+    }
+  );
+  console.log(`\u2713 ${provider} credentials saved (still needs enabling \u2014 run: deploro auth providers enable ${provider})`);
+}
+async function authEndUsersListCommand(opts) {
+  const config = requireProject();
+  const page = Math.max(1, Number(opts.page ?? 1) || 1);
+  const data = await apiRequest(
+    `/api/projects/${config.projectId}/auth/users?page=${page}`
+  );
+  table(
+    data.users.map((u) => ({
+      id: u.id,
+      email: u.email ?? "",
+      name: u.name ?? "",
+      methods: u.providers.join(", "),
+      verified: u.email_verified,
+      lastLogin: u.last_login_at ? u.last_login_at.slice(0, 10) : "never"
+    }))
+  );
+  console.log(`
+${data.total} total end user(s), page ${data.page}`);
+}
+async function authEndUserAddCommand(email, opts) {
+  const config = requireProject();
+  const data = await apiRequest(
+    `/api/projects/${config.projectId}/auth/users`,
+    { method: "POST", body: JSON.stringify({ email, name: opts.name }) }
+  );
+  console.log(`\u2713 Added ${data.user.email}`);
+  console.log("  A confirmation email was sent \u2014 they can't sign in until they click the link (one time, first use only).");
+}
+async function authEndUserDeleteCommand(id, opts) {
+  const config = requireProject();
+  await confirmOrDie(`Delete end user ${id}? This removes every sign-in method and session linked to them.`, opts.yes);
+  await apiRequest(`/api/projects/${config.projectId}/auth/users/${encodeURIComponent(id)}`, { method: "DELETE" });
+  console.log(`\u2713 End user ${id} deleted`);
+}
+async function authStatsCommand() {
+  const config = requireProject();
+  const data = await apiRequest(`/api/projects/${config.projectId}/auth/stats`);
+  console.log(`Total end users   : ${data.total_users}`);
+  console.log(`Active sessions   : ${data.sessions_active}`);
+  console.log(`Providers enabled : ${data.providers_enabled}`);
+  if (data.users_by_provider.length > 0) {
+    console.log("\nBy sign-in method:");
+    table(data.users_by_provider.map((p) => ({ provider: p.provider, users: p.count })));
+  }
+}
 
 // src/commands/migrate.ts
 import { readFileSync as readFileSync2 } from "fs";
@@ -851,6 +973,16 @@ auth.command("whoami").description("Show the current identity, and \u2014 for a
 auth.command("users").description("List platform users").action(authUsersCommand);
 auth.command("invite <email>").description("Invite a user by email").option("--admin", "Grant admin role").action(authInviteCommand);
 auth.command("site-url [url]").description("Get or set the active project's Auth Site URL (where end-user confirmation-email links redirect back to)").option("--clear", "Clear the Site URL \u2014 confirmation links fall back to the project's own deployment URL").action(authSiteUrlCommand);
+auth.command("stats").description("Show Auth-as-a-Service stats for the active project's end users").action(authStatsCommand);
+var authProviders = auth.command("providers").description("Manage the active project's end-user sign-in providers");
+authProviders.command("list").description("List sign-in providers and their status").action(authProvidersListCommand);
+authProviders.command("enable <provider>").description("Enable a sign-in provider (e.g. email, email_password, google, github, apple, ...)").action((provider) => authProviderEnableCommand(provider, true));
+authProviders.command("disable <provider>").description("Disable a sign-in provider").action((provider) => authProviderEnableCommand(provider, false));
+authProviders.command("configure <provider>").description("Set OAuth client credentials for a provider (not applicable to email / email_password)").option("--client-id <id>", "OAuth client ID").option("--client-secret <secret>", "OAuth client secret (Apple: the .p8 private key contents)").option("--team-id <id>", "Apple only \u2014 Team ID").option("--key-id <id>", "Apple only \u2014 Key ID").action(authProviderConfigureCommand);
+var authEndUsers = auth.command("end-users").description("Manage the active project's end users (your app's sign-ups)");
+authEndUsers.command("list").description("List end users").option("--page <n>", "Page number", "1").action(authEndUsersListCommand);
+authEndUsers.command("add <email>").description("Manually add an end user \u2014 sends a confirmation email; they can't sign in until they click it").option("--name <name>", "Display name").action(authEndUserAddCommand);
+authEndUsers.command("delete <id>").description("Delete an end user and all their sign-in methods/sessions").option("--yes", "Skip confirmation prompt").action(authEndUserDeleteCommand);
 var token = program.command("token").description("Personal access token commands");
 token.command("list").description("List your personal access tokens").action(tokenListCommand);
 token.command("create <name>").description("Create a new project-scoped personal access token").option("--read", "Grant read scope").option("--write", "Grant write scope").option("--project <slugs>", "Comma-separated project slugs/ids/names (defaults to the active project)").option("--days <n>", "Expiry in days (1-365)", "90").action(tokenCreateCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploro",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "description": "Command-line interface for the Deploro developer platform — manage projects, databases, deployments, and hosting from your terminal.",
   "type": "module",
   "bin": {