eai-cli 0.0.0-bootstrap.0

package/dist/lib/runtime-contract.js

@@ -0,0 +1,318 @@
+import { execFile } from 'node:child_process';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { promisify } from 'node:util';
+import { findProjectRoot } from './config.js';
+const exec = promisify(execFile);
+export const RUNTIME_CONTRACT_FILE = 'eai.runtime.json';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function stringArray(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.filter((entry) => typeof entry === 'string' && entry.trim() !== '');
+}
+function readPath(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
+function startsWithSlash(pathValue) {
+    return typeof pathValue === 'string' && pathValue.startsWith('/');
+}
+function normalizeSmokeTest(value) {
+    if (!isRecord(value))
+        return null;
+    const name = typeof value.name === 'string' && value.name.trim() ? value.name.trim() : '';
+    const method = typeof value.method === 'string' && value.method.trim() ? value.method.trim().toUpperCase() : 'GET';
+    const path = readPath(value.path);
+    const expectedStatus = typeof value.expectedStatus === 'number' ||
+        (Array.isArray(value.expectedStatus) && value.expectedStatus.every((status) => typeof status === 'number'))
+        ? value.expectedStatus
+        : 200;
+    if (!name || !path)
+        return null;
+    return {
+        name,
+        method,
+        path,
+        expectedStatus,
+        category: typeof value.category === 'string' ? value.category : undefined,
+        optional: value.optional === true,
+    };
+}
+function normalizePublicEndpoint(value) {
+    if (!isRecord(value))
+        return null;
+    const path = readPath(value.path);
+    if (!path)
+        return null;
+    return {
+        method: typeof value.method === 'string' ? value.method.toUpperCase() : 'GET',
+        path,
+        serverSidePlatformAccess: value.serverSidePlatformAccess === true,
+    };
+}
+export function normalizeRuntimeContract(raw) {
+    const environment = isRecord(raw.environment) ? raw.environment : {};
+    const tenantKeyPattern = isRecord(environment.tenantKeyPattern)
+        ? {
+            keysEnv: readPath(environment.tenantKeyPattern.keysEnv),
+            tenantIdEnv: readPath(environment.tenantKeyPattern.tenantIdEnv),
+            workflowIdEnv: readPath(environment.tenantKeyPattern.workflowIdEnv),
+        }
+        : undefined;
+    const secrets = isRecord(raw.secrets) ? raw.secrets : {};
+    const auth = isRecord(raw.auth) ? raw.auth : {};
+    const endpoints = isRecord(raw.endpoints) ? raw.endpoints : {};
+    return {
+        raw,
+        environment: {
+            required: stringArray(environment.required),
+            tenantKeyPattern,
+        },
+        secrets: {
+            required: stringArray(secrets.required),
+            optional: stringArray(secrets.optional),
+        },
+        auth: {
+            callbackPath: readPath(auth.callbackPath),
+        },
+        endpoints: {
+            health: readPath(endpoints.health),
+            authProviders: readPath(endpoints.authProviders),
+            runtimeConfig: readPath(endpoints.runtimeConfig),
+            bffBasePath: readPath(endpoints.bffBasePath),
+            public: Array.isArray(endpoints.public)
+                ? endpoints.public
+                    .map((endpoint) => normalizePublicEndpoint(endpoint))
+                    .filter((endpoint) => endpoint !== null)
+                : [],
+            smokeTests: Array.isArray(endpoints.smokeTests)
+                ? endpoints.smokeTests
+                    .map((test) => normalizeSmokeTest(test))
+                    .filter((test) => test !== null)
+                : [],
+        },
+        serviceIdentityExplicit: isRecord(raw.serviceIdentity),
+    };
+}
+async function readJsonFile(path) {
+    const content = await readFile(path, 'utf8');
+    return JSON.parse(content);
+}
+async function readEnvFile(projectRoot, fileName) {
+    try {
+        const content = await readFile(join(projectRoot, fileName), 'utf8');
+        const env = {};
+        for (const line of content.split(/\r?\n/)) {
+            const trimmed = line.trim();
+            if (!trimmed || trimmed.startsWith('#'))
+                continue;
+            const separator = trimmed.indexOf('=');
+            if (separator < 1)
+                continue;
+            const key = trimmed.slice(0, separator).trim();
+            let value = trimmed.slice(separator + 1).trim();
+            if ((value.startsWith('"') && value.endsWith('"')) ||
+                (value.startsWith("'") && value.endsWith("'"))) {
+                value = value.slice(1, -1);
+            }
+            env[key] = value;
+        }
+        return env;
+    }
+    catch {
+        return {};
+    }
+}
+function normalizeTenantEnvKey(key) {
+    return key.trim().toUpperCase().replace(/-/g, '_');
+}
+function interpolatePattern(pattern, key) {
+    if (!pattern || !pattern.includes('{KEY}'))
+        return null;
+    return pattern.replace('{KEY}', normalizeTenantEnvKey(key));
+}
+async function findTrackedSecretFiles(projectRoot) {
+    const candidateFiles = ['.env', '.env.local', '.env.production', '.env.test'];
+    try {
+        const { stdout } = await exec('git', ['ls-files', ...candidateFiles], { cwd: projectRoot });
+        return stdout
+            .split(/\r?\n/)
+            .map((line) => line.trim())
+            .filter(Boolean);
+    }
+    catch {
+        return [];
+    }
+}
+export async function loadRuntimeContract(projectRoot) {
+    const root = projectRoot ?? (await findProjectRoot());
+    if (!root) {
+        throw new Error(`Could not find an EAI project root containing ${RUNTIME_CONTRACT_FILE}`);
+    }
+    const contractPath = join(root, RUNTIME_CONTRACT_FILE);
+    const raw = await readJsonFile(contractPath);
+    if (!isRecord(raw)) {
+        throw new Error(`${RUNTIME_CONTRACT_FILE} must contain a JSON object`);
+    }
+    return {
+        projectRoot: root,
+        contractPath,
+        contract: normalizeRuntimeContract(raw),
+    };
+}
+export async function validateRuntimeContract(projectRoot) {
+    const findings = [];
+    let loaded;
+    try {
+        loaded = await loadRuntimeContract(projectRoot);
+    }
+    catch (error) {
+        const root = projectRoot ?? process.cwd();
+        const message = error instanceof Error ? error.message : String(error);
+        return {
+            projectRoot: root,
+            contractPath: join(root, RUNTIME_CONTRACT_FILE),
+            status: 'fail',
+            findings: [
+                {
+                    code: 'runtime_contract_missing_or_invalid',
+                    severity: 'error',
+                    message,
+                    fix: `Create ${RUNTIME_CONTRACT_FILE} or run eai init with the latest template.`,
+                },
+            ],
+            summary: {
+                requiredEnv: [],
+                requiredSecrets: [],
+                optionalSecrets: [],
+                smokeTests: [],
+            },
+        };
+    }
+    const { projectRoot: root, contractPath, contract } = loaded;
+    const raw = contract.raw;
+    if (raw.schemaVersion !== 1) {
+        findings.push({
+            code: 'runtime_schema_version',
+            severity: 'error',
+            message: `${RUNTIME_CONTRACT_FILE} must declare schemaVersion: 1.`,
+            fix: 'Update the runtime contract to the current schema before deploying.',
+        });
+    }
+    if (contract.environment.required.length === 0) {
+        findings.push({
+            code: 'runtime_env_required_empty',
+            severity: 'error',
+            message: 'The runtime contract does not declare any required environment variables.',
+            fix: 'Add environment.required entries for Auth.js, PublicAPI, tenant, and workflow settings.',
+        });
+    }
+    if (contract.secrets.required.length === 0) {
+        findings.push({
+            code: 'runtime_secrets_required_empty',
+            severity: 'error',
+            message: 'The runtime contract does not declare any required secrets.',
+            fix: 'Add secrets.required entries such as AUTH_SECRET and ENTRA_CLIENT_SECRET.',
+        });
+    }
+    if (!startsWithSlash(contract.auth.callbackPath) || !contract.auth.callbackPath?.includes('/api/auth/callback/')) {
+        findings.push({
+            code: 'runtime_auth_callback_invalid',
+            severity: 'error',
+            message: 'The Auth.js callback path must be a relative /api/auth/callback/... path.',
+            fix: 'Set auth.callbackPath to a route such as /api/auth/callback/microsoft-entra-id.',
+        });
+    }
+    const endpointChecks = [
+        ['health', contract.endpoints.health],
+        ['authProviders', contract.endpoints.authProviders],
+        ['runtimeConfig', contract.endpoints.runtimeConfig],
+        ['bffBasePath', contract.endpoints.bffBasePath],
+    ];
+    for (const [name, pathValue] of endpointChecks) {
+        if (!startsWithSlash(pathValue)) {
+            findings.push({
+                code: `runtime_endpoint_${name}_invalid`,
+                severity: 'error',
+                message: `endpoints.${name} must be declared as a relative path starting with /.`,
+                fix: `Add endpoints.${name} to ${RUNTIME_CONTRACT_FILE}.`,
+            });
+        }
+    }
+    const serverSidePublicEndpoints = contract.endpoints.public.filter((endpoint) => endpoint.serverSidePlatformAccess === true);
+    if (serverSidePublicEndpoints.length > 0 && !contract.serviceIdentityExplicit) {
+        findings.push({
+            code: 'runtime_service_identity_missing',
+            severity: 'error',
+            message: 'Public anonymous endpoints declare server-side platform access, but serviceIdentity is not explicit.',
+            fix: 'Add serviceIdentity preferred env names and legacy aliases to the runtime contract.',
+        });
+    }
+    const env = {
+        ...(await readEnvFile(root, '.env.example')),
+        ...(await readEnvFile(root, '.env.local')),
+    };
+    const tenantKeysEnvName = contract.environment.tenantKeyPattern?.keysEnv || 'TENANT_KEYS';
+    const tenantKeys = env[tenantKeysEnvName]
+        ?.split(',')
+        .map((key) => key.trim())
+        .filter(Boolean);
+    if (tenantKeys && tenantKeys.length > 0) {
+        for (const key of tenantKeys) {
+            const tenantEnv = interpolatePattern(contract.environment.tenantKeyPattern?.tenantIdEnv, key);
+            const workflowEnv = interpolatePattern(contract.environment.tenantKeyPattern?.workflowIdEnv, key);
+            if (tenantEnv && !(tenantEnv in env)) {
+                findings.push({
+                    code: 'runtime_tenant_key_missing_tenant_id',
+                    severity: 'error',
+                    message: `${tenantKeysEnvName} includes ${key}, but ${tenantEnv} is not present in .env.example or .env.local.`,
+                    fix: `Declare ${tenantEnv} for tenant key ${key}.`,
+                });
+            }
+            if (workflowEnv && !(workflowEnv in env)) {
+                findings.push({
+                    code: 'runtime_tenant_key_missing_workflow_id',
+                    severity: 'error',
+                    message: `${tenantKeysEnvName} includes ${key}, but ${workflowEnv} is not present in .env.example or .env.local.`,
+                    fix: `Declare ${workflowEnv} for tenant key ${key}.`,
+                });
+            }
+        }
+    }
+    const trackedSecretFiles = await findTrackedSecretFiles(root);
+    if (trackedSecretFiles.length > 0) {
+        findings.push({
+            code: 'runtime_secret_file_tracked',
+            severity: 'error',
+            message: `Secret-bearing env files are tracked by git: ${trackedSecretFiles.join(', ')}.`,
+            fix: 'Remove runtime secret files from git and keep only safe examples committed.',
+        });
+    }
+    if (contract.endpoints.smokeTests.length === 0) {
+        findings.push({
+            code: 'runtime_smoke_tests_missing',
+            severity: 'error',
+            message: 'The runtime contract does not declare post-deploy smoke tests.',
+            fix: 'Add endpoints.smokeTests for /health, /api/auth/providers, /api/eai/config, and any public endpoints.',
+        });
+    }
+    const status = findings.some((finding) => finding.severity === 'error') ? 'fail' : 'pass';
+    return {
+        projectRoot: root,
+        contractPath,
+        status,
+        findings,
+        summary: {
+            requiredEnv: contract.environment.required,
+            requiredSecrets: contract.secrets.required,
+            optionalSecrets: contract.secrets.optional,
+            smokeTests: contract.endpoints.smokeTests,
+        },
+    };
+}
+export function expectedStatuses(test) {
+    return Array.isArray(test.expectedStatus) ? test.expectedStatus : [test.expectedStatus];
+}
+//# sourceMappingURL=runtime-contract.js.map

package/dist/lib/runtime-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-contract.js","sourceRoot":"","sources":["../../src/lib/runtime-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEjC,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAuFxD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CAAC,SAA6B;IACpD,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACnH,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,cAAc,GAClB,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;QACxC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC;QACzG,CAAC,CAAC,KAAK,CAAC,cAAc;QACtB,CAAC,CAAC,GAAG,CAAC;IAEV,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEhC,OAAO;QACL,IAAI;QACJ,MAAM;QACN,IAAI;QACJ,cAAc;QACd,QAAQ,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACzE,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO;QACL,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK;QAC7E,IAAI;QACJ,wBAAwB,EAAE,KAAK,CAAC,wBAAwB,KAAK,IAAI;KAClE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAoB;IAC3D,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,gBAAgB,GAAG,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC;QAC7D,CAAC,CAAC;YACE,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACvD,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,WAAW,CAAC;YAC/D,aAAa,EAAE,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,aAAa,CAAC;SACpE;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAE/D,OAAO;QACL,GAAG;QACH,WAAW,EAAE;YACX,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC;YAC3C,gBAAgB;SACjB;QACD,OAAO,EAAE;YACP,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC;SACxC;QACD,IAAI,EAAE;YACJ,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;SAC1C;QACD,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;YAClC,aAAa,EAAE,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC;YAChD,aAAa,EAAE,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC;YAChD,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC;YAC5C,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;gBACrC,CAAC,CAAC,SAAS,CAAC,MAAM;qBACb,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;qBACpD,MAAM,CAAC,CAAC,QAAQ,EAAqC,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC;gBAC/E,CAAC,CAAC,EAAE;YACN,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;gBAC7C,CAAC,CAAC,SAAS,CAAC,UAAU;qBACjB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;qBACvC,MAAM,CAAC,CAAC,IAAI,EAA4B,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;gBAC9D,CAAC,CAAC,EAAE;SACP;QACD,uBAAuB,EAAE,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,WAAmB,EAAE,QAAgB;IAC9D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,SAAS,GAAG,CAAC;gBAAE,SAAS;YAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;gBACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B,EAAE,GAAW;IAClE,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IACvD,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,GAAG,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5F,OAAO,MAAM;aACV,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAoB;IAK5D,MAAM,IAAI,GAAG,WAAW,IAAI,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,iDAAiD,qBAAqB,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,GAAG,qBAAqB,6BAA6B,CAAC,CAAC;IACzE,CAAC;IAED,OAAO;QACL,WAAW,EAAE,IAAI;QACjB,YAAY;QACZ,QAAQ,EAAE,wBAAwB,CAAC,GAAG,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,WAAoB;IAChE,MAAM,QAAQ,GAA+B,EAAE,CAAC;IAChD,IAAI,MAAuD,CAAC;IAE5D,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC;YAC/C,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,qCAAqC;oBAC3C,QAAQ,EAAE,OAAO;oBACjB,OAAO;oBACP,GAAG,EAAE,UAAU,qBAAqB,4CAA4C;iBACjF;aACF;YACD,OAAO,EAAE;gBACP,WAAW,EAAE,EAAE;gBACf,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,EAAE;gBACnB,UAAU,EAAE,EAAE;aACf;SACF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;IAEzB,IAAI,GAAG,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,wBAAwB;YAC9B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,qBAAqB,iCAAiC;YAClE,GAAG,EAAE,qEAAqE;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,4BAA4B;YAClC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,2EAA2E;YACpF,GAAG,EAAE,yFAAyF;SAC/F,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,gCAAgC;YACtC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,6DAA6D;YACtE,GAAG,EAAE,2EAA2E;SACjF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACjH,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,+BAA+B;YACrC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,2EAA2E;YACpF,GAAG,EAAE,iFAAiF;SACvF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAwC;QAC1D,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;QACrC,CAAC,eAAe,EAAE,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC;QACnD,CAAC,eAAe,EAAE,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC;QACnD,CAAC,aAAa,EAAE,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC;KAChD,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/C,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,oBAAoB,IAAI,UAAU;gBACxC,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,aAAa,IAAI,uDAAuD;gBACjF,GAAG,EAAE,iBAAiB,IAAI,OAAO,qBAAqB,GAAG;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,yBAAyB,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAChE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,wBAAwB,KAAK,IAAI,CACzD,CAAC;IACF,IAAI,yBAAyB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,EAAE,CAAC;QAC9E,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kCAAkC;YACxC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sGAAsG;YAC/G,GAAG,EAAE,qFAAqF;SAC3F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG;QACV,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC5C,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;KAC3C,CAAC;IACF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,WAAW,CAAC,gBAAgB,EAAE,OAAO,IAAI,aAAa,CAAC;IAC1F,MAAM,UAAU,GAAG,GAAG,CAAC,iBAAiB,CAAC;QACvC,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;YAC9F,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;YAClG,IAAI,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,sCAAsC;oBAC5C,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,GAAG,iBAAiB,aAAa,GAAG,SAAS,SAAS,gDAAgD;oBAC/G,GAAG,EAAE,WAAW,SAAS,mBAAmB,GAAG,GAAG;iBACnD,CAAC,CAAC;YACL,CAAC;YACD,IAAI,WAAW,IAAI,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,CAAC;gBACzC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,wCAAwC;oBAC9C,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,GAAG,iBAAiB,aAAa,GAAG,SAAS,WAAW,gDAAgD;oBACjH,GAAG,EAAE,WAAW,WAAW,mBAAmB,GAAG,GAAG;iBACrD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,gDAAgD,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACzF,GAAG,EAAE,6EAA6E;SACnF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,gEAAgE;YACzE,GAAG,EAAE,uGAAuG;SAC7G,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1F,OAAO;QACL,WAAW,EAAE,IAAI;QACjB,YAAY;QACZ,MAAM;QACN,QAAQ;QACR,OAAO,EAAE;YACP,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,QAAQ;YAC1C,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ;YAC1C,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ;YAC1C,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU;SAC1C;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAsB;IACrD,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1F,CAAC"}

package/dist/lib/schema-builder.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Schema builder for --describe flag
+ * Introspects Commander.js commands to generate JSON schema
+ */
+import type { Command } from 'commander';
+export interface CommandSchema {
+    command: string;
+    description: string;
+    aliases: string[];
+    options: OptionSchema[];
+    subcommands?: CommandSchema[];
+}
+export interface OptionSchema {
+    name: string;
+    type: string;
+    default?: unknown;
+    description: string;
+    values?: string[];
+}
+/**
+ * Build schema for a single command
+ */
+export declare function buildCommandSchema(command: Command): CommandSchema;
+/**
+ * Build schema for entire CLI program
+ */
+export declare function describeProgram(program: Command): object;
+//# sourceMappingURL=schema-builder.d.ts.map

package/dist/lib/schema-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-builder.d.ts","sourceRoot":"","sources":["../../src/lib/schema-builder.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAGjD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAsBD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAyClE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAKxD"}

package/dist/lib/schema-builder.js

@@ -0,0 +1,69 @@
+/**
+ * Schema builder for --describe flag
+ * Introspects Commander.js commands to generate JSON schema
+ */
+import { getAgentGuide } from './agent-guide.js';
+/**
+ * Infer option type from Commander.js Option object
+ */
+function inferOptionType(option) {
+    const flags = option.flags;
+    // Check if it's a boolean flag (no argument)
+    if (!flags.includes('<') && !flags.includes('[')) {
+        return 'boolean';
+    }
+    // Check if it has choices (enum type)
+    if (option.argChoices && option.argChoices.length > 0) {
+        return 'enum';
+    }
+    // Default to string for arguments
+    return 'string';
+}
+/**
+ * Build schema for a single command
+ */
+export function buildCommandSchema(command) {
+    const name = command.name();
+    const description = command.description();
+    const options = command.options.filter((opt) => !opt.hidden).map((opt) => {
+        const type = inferOptionType(opt);
+        const schema = {
+            name: opt.flags.split(' ')[0],
+            type,
+            description: opt.description,
+        };
+        // Add default value if present
+        if (opt.defaultValue !== undefined) {
+            schema.default = opt.defaultValue;
+        }
+        // Add enum values if present
+        if (type === 'enum' && opt.argChoices) {
+            schema.values = opt.argChoices;
+        }
+        return schema;
+    });
+    const schema = {
+        command: name,
+        description,
+        aliases: command.aliases(),
+        options,
+    };
+    // Recursively process subcommands
+    const subcommands = command.commands;
+    if (subcommands && subcommands.length > 0) {
+        schema.subcommands = subcommands
+            .filter(cmd => !cmd.name().includes('help')) // Exclude help commands
+            .map(cmd => buildCommandSchema(cmd));
+    }
+    return schema;
+}
+/**
+ * Build schema for entire CLI program
+ */
+export function describeProgram(program) {
+    return {
+        ...buildCommandSchema(program),
+        agentGuide: getAgentGuide(),
+    };
+}
+//# sourceMappingURL=schema-builder.js.map

package/dist/lib/schema-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-builder.js","sourceRoot":"","sources":["../../src/lib/schema-builder.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAkBjD;;GAEG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAE3B,6CAA6C;IAC7C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,sCAAsC;IACtC,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kCAAkC;IAClC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAE1C,MAAM,OAAO,GAAmB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACvF,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,MAAM,GAAiB;YAC3B,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI;YACJ,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B,CAAC;QAEF,+BAA+B;QAC/B,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC;QACpC,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACtC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAkB;QAC5B,OAAO,EAAE,IAAI;QACb,WAAW;QACX,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;QAC1B,OAAO;KACR,CAAC;IAEF,kCAAkC;IAClC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrC,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,WAAW,GAAG,WAAW;aAC7B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,wBAAwB;aACrE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,OAAO;QACL,GAAG,kBAAkB,CAAC,OAAO,CAAC;QAC9B,UAAU,EAAE,aAAa,EAAE;KAC5B,CAAC;AACJ,CAAC"}

package/dist/lib/tenant-context.d.ts

@@ -0,0 +1,127 @@
+import { type StoredTokens } from "./auth.js";
+export declare const DEFAULT_PUBLIC_API_URL = "https://api.au.myenterprise.ai/public";
+declare const REGION_PUBLIC_API_URLS: {
+    readonly au: "https://api.au.myenterprise.ai/public";
+    readonly ca: "https://api.ca.myenterprise.ai/public";
+    readonly eu: "https://api.eu.myenterprise.ai/public";
+};
+export type HomeRegion = keyof typeof REGION_PUBLIC_API_URLS;
+export declare class TenantMembershipAuthError extends Error {
+    readonly status?: number;
+    constructor(status?: number);
+}
+export interface TenantRoleAssignment {
+    baseRole?: string;
+    displayName?: string;
+}
+export interface TenantEntry {
+    tenant: {
+        id: string;
+        displayName: string;
+        slug: string;
+        domain?: string;
+        isActive: boolean;
+        parent?: {
+            id?: string;
+        } | string | null;
+        parentId?: string | null;
+        homeRegion?: string | null;
+        hqCountryCode?: string | null;
+    };
+    roleAssignments?: TenantRoleAssignment[];
+    isTenantAdmin?: boolean;
+    role?: string;
+    roles?: string[];
+}
+export interface TenantMembership {
+    id: string;
+    displayName: string;
+    slug: string;
+    domain?: string;
+    isActive: boolean;
+    roles: string[];
+    homeRegion?: string | null;
+    hqCountryCode?: string | null;
+}
+export interface ActiveTenantContext {
+    publicApiUrl: string;
+    tokens: StoredTokens;
+    activeTenant: TenantMembership;
+    memberships: TenantMembership[];
+    publicApiEnvSync?: PublicApiEnvSyncResult;
+}
+export type PublicApiEnvSyncResult = {
+    status: "updated";
+    projectRoot: string;
+    publicApiUrl: string;
+    previousPublicApiUrl?: string;
+    homeRegion: HomeRegion;
+} | {
+    status: "already-current";
+    projectRoot: string;
+    publicApiUrl: string;
+    homeRegion: HomeRegion;
+} | {
+    status: "skipped";
+    reason: "no-project-root" | "unresolved-home-region";
+    homeRegion?: string | null;
+};
+export interface PublicApiEnvSyncNotice {
+    level: "success" | "warn";
+    message: string;
+}
+export interface TenantUsabilityStatus {
+    tenantId: string;
+    created: boolean;
+    bootstrapped: boolean;
+    membershipConfirmed: boolean;
+    adminConfirmed: boolean;
+    usable: boolean;
+    autoSelected: boolean;
+}
+export declare function normalizeHomeRegion(value: string | null | undefined): HomeRegion | null;
+export declare function publicApiUrlForHomeRegion(value: string | null | undefined): string | null;
+export declare function syncProjectPublicApiUrlForTenant(tenant: Pick<TenantMembership, "homeRegion">, projectRoot?: string | null): Promise<PublicApiEnvSyncResult>;
+export declare function buildPublicApiEnvSyncNotice(result: PublicApiEnvSyncResult | undefined): PublicApiEnvSyncNotice | null;
+export declare function resolveMainCompanyTenantId(publicApiUrl: string, tenantId: string): Promise<string>;
+export declare function getTenantRoles(entry: TenantEntry): string[];
+export declare function tenantEntryHasTenantAdminRole(entry: TenantEntry): boolean;
+export declare function filterTenantAdminEntries(entries: TenantEntry[]): TenantEntry[];
+export declare function normalizeTenantEntries(payload: unknown): TenantEntry[];
+export declare function toTenantMembership(entry: TenantEntry): TenantMembership;
+export declare function findTenantMembership(memberships: TenantMembership[], tenantId: string): TenantMembership | undefined;
+export declare function evaluateTenantUsability(tenantId: string, memberships: TenantMembership[], options?: {
+    created?: boolean;
+    bootstrapped?: boolean;
+    autoSelected?: boolean;
+}): TenantUsabilityStatus;
+export declare function resolvePublicApiUrl(projectRoot?: string): Promise<string>;
+export declare function getStoredActiveTenant(tokens: StoredTokens): TenantMembership | null;
+export declare function fetchTenantAdminMemberships(publicApiUrl?: string): Promise<{
+    publicApiUrl: string;
+    tokens: StoredTokens;
+    memberships: TenantMembership[];
+}>;
+export declare function saveActiveTenantSelection(tenant: TenantMembership, publicApiUrl?: string, existingTokens?: StoredTokens): Promise<StoredTokens>;
+export declare function refreshTenantUsabilityStatus(tenantId: string, options?: {
+    publicApiUrl?: string;
+    created?: boolean;
+    bootstrapped?: boolean;
+    autoSelect?: boolean;
+}): Promise<{
+    publicApiUrl: string;
+    tokens: StoredTokens;
+    memberships: TenantMembership[];
+    membership?: TenantMembership;
+    status: TenantUsabilityStatus;
+}>;
+export declare function resolveActiveTenantContext(options?: {
+    projectRoot?: string;
+    publicApiUrl?: string;
+    interactive?: boolean;
+    forcePrompt?: boolean;
+    forceRefresh?: boolean;
+    tenantId?: string;
+}): Promise<ActiveTenantContext>;
+export {};
+//# sourceMappingURL=tenant-context.d.ts.map

package/dist/lib/tenant-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-context.d.ts","sourceRoot":"","sources":["../../src/lib/tenant-context.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,YAAY,EAClB,MAAM,WAAW,CAAC;AAKnB,eAAO,MAAM,sBAAsB,0CAA0C,CAAC;AAE9E,QAAA,MAAM,sBAAsB;;;;CAIlB,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,sBAAsB,CAAC;AAa7D,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAEb,MAAM,CAAC,EAAE,MAAM;CAK5B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,MAAM,GAAG,IAAI,CAAC;QACzC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,CAAC;IACF,eAAe,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAiBD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,YAAY,EAAE,gBAAgB,CAAC;IAC/B,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAED,MAAM,MAAM,sBAAsB,GAC9B;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;CACxB,GACD;IACE,MAAM,EAAE,iBAAiB,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;CACxB,GACD;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,iBAAiB,GAAG,wBAAwB,CAAC;IACrD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEN,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;CACvB;AAaD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,UAAU,GAAG,IAAI,CAKnB;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAGf;AAED,wBAAsB,gCAAgC,CACpD,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,EAC5C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAC1B,OAAO,CAAC,sBAAsB,CAAC,CAmCjC;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,sBAAsB,GAAG,SAAS,GACzC,sBAAsB,GAAG,IAAI,CA+B/B;AAmJD,wBAAsB,0BAA0B,CAC9C,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,EAAE,CAO3D;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAEzE;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,WAAW,EAAE,GACrB,WAAW,EAAE,CAKf;AAsCD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,EAAE,CAoBtE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,gBAAgB,CAWvE;AAwDD,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,gBAAgB,EAAE,EAC/B,QAAQ,EAAE,MAAM,GACf,gBAAgB,GAAG,SAAS,CAI9B;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,gBAAgB,EAAE,EAC/B,OAAO,CAAC,EAAE;IACR,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GACA,qBAAqB,CAavB;AAqBD,wBAAsB,mBAAmB,CACvC,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,YAAY,GACnB,gBAAgB,GAAG,IAAI,CAezB;AAED,wBAAsB,2BAA2B,CAC/C,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC;IACT,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,EAAE,gBAAgB,EAAE,CAAC;CACjC,CAAC,CA0CD;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,gBAAgB,EACxB,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,YAAY,GAC5B,OAAO,CAAC,YAAY,CAAC,CAoBvB;AAED,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;IACR,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GACA,OAAO,CAAC;IACT,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAAC,CA0BD;AA2BD,wBAAsB,0BAA0B,CAAC,OAAO,CAAC,EAAE;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAoG/B"}