gtypee 1.0.0

package/dist/src/cmd/workspace/commands.js

@@ -0,0 +1,685 @@
+import { buildExecutionContext } from "../execution-context.js";
+const defaultUserDeps = {
+    listUsers: async (_orgUnitPath) => [],
+    createUser: async () => ({ userId: "", primaryEmail: "", password: "", applied: false }),
+    deleteUser: async () => ({ email: "", applied: false }),
+    suspendUser: async () => ({ email: "", suspended: false, applied: false }),
+    unsuspendUser: async () => ({ email: "", suspended: false, applied: false }),
+    setAdmin: async () => ({ email: "", isAdmin: false, applied: false }),
+    resetPassword: async () => ({ email: "", newPassword: "", applied: false }),
+    setOrgUnit: async () => ({ email: "", orgUnitPath: "", applied: false }),
+    listOrgUnits: async () => [],
+    addAlias: async () => ({ alias: "", applied: false }),
+    listAliases: async () => [],
+    deleteAlias: async () => ({ alias: "", applied: false }),
+    setPhoto: async () => ({ email: "", applied: false }),
+    deletePhoto: async () => ({ email: "", applied: false }),
+    getPhoto: async () => "",
+    generateBackupCodes: async () => ({ email: "", codes: [], applied: false }),
+};
+const defaultGroupDeps = {
+    createGroup: async () => ({ groupId: "", email: "", name: "", applied: false }),
+    deleteGroup: async () => ({ email: "", applied: false }),
+    updateGroup: async () => ({ email: "", name: "", applied: false }),
+    getGroup: async () => ({ id: "", email: "", name: "" }),
+    listGroups: async () => [],
+    addGroupMember: async () => ({ groupEmail: "", memberEmail: "", role: "", applied: false }),
+    removeGroupMember: async () => ({ groupEmail: "", memberEmail: "", applied: false }),
+    listGroupMembers: async () => [],
+};
+const defaultDeviceDeps = {
+    listDevices: async () => [],
+    getDevice: async () => ({ deviceId: "", email: "", modelName: "", osVersion: "", status: "", orgUnitPath: "", lastSync: "" }),
+    wipeDevice: async () => ({ deviceId: "", applied: false }),
+    disableDevice: async () => ({ deviceId: "", applied: false }),
+};
+const defaultReportDeps = {
+    getLoginAudit: async () => [],
+    getAdminAudit: async () => [],
+    getDeletedUsers: async () => [],
+};
+const defaultOrgUnitDeps = {
+    listOrgUnits: async () => [],
+    createOrgUnit: async () => ({ orgUnitId: "", name: "", orgUnitPath: "", applied: false }),
+    getOrgUnit: async () => ({ orgUnitId: "", name: "", orgUnitPath: "" }),
+    updateOrgUnit: async () => ({ orgUnitId: "", name: "", applied: false }),
+    deleteOrgUnit: async () => ({ orgUnitPath: "", applied: false }),
+};
+function fixOrgUnitPath(path) {
+    if (!path)
+        return path;
+    const normalized = path.replace(/\\/g, "/");
+    if (normalized.match(/^[A-Z]:\//i)) {
+        return "/" + normalized.split("/").pop();
+    }
+    return path;
+}
+function generatePassword(length = 8) {
+    const chars = "ABCDEFGHJKLMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789";
+    let password = "";
+    for (let i = 0; i < length; i++) {
+        password += chars.charAt(Math.floor(Math.random() * chars.length));
+    }
+    return password;
+}
+export function registerWorkspaceCommands(workspaceCommand, deps = {}) {
+    const userDeps = { ...defaultUserDeps, ...deps };
+    const groupDeps = { ...defaultGroupDeps, ...deps };
+    const deviceDeps = { ...defaultDeviceDeps, ...deps };
+    const reportDeps = { ...defaultReportDeps, ...deps };
+    const orgUnitDeps = { ...defaultOrgUnitDeps, ...deps };
+    const userCmd = workspaceCommand.command("user").description("User management");
+    const orgCmd = workspaceCommand.command("org").description("Organization unit management");
+    // typee workspace user list [--org-unit <path>]
+    userCmd
+        .command("list")
+        .description("List users in the domain, optionally filtered by org unit")
+        .option("--org-unit <path>", "Organization unit path to filter by")
+        .action(async function actionListUsers() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const users = await userDeps.listUsers(fixOrgUnitPath(opts.orgUnit));
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(users, null, 2)}\n`);
+            return;
+        }
+        for (const user of users) {
+            const adminTag = user.isAdmin ? " [ADMIN]" : "";
+            const susTag = user.suspended ? " [SUSPENDED]" : "";
+            process.stdout.write(`${user.primaryEmail}${adminTag}${susTag} - ${user.orgUnitPath}\n`);
+        }
+    });
+    // typee workspace user create --email <email> --first-name <name> --last-name <name> [--password <pwd>] [--org-unit <path>] [--groups <emails>] [--admin]
+    userCmd
+        .command("create")
+        .description("Create a new user")
+        .requiredOption("--email <email>", "User email address")
+        .requiredOption("--first-name <name>", "First name")
+        .requiredOption("--last-name <name>", "Last name")
+        .option("--password <password>", "Password (auto-generated if not provided)")
+        .option("--org-unit <path>", "Organization unit path, e.g., /Sales")
+        .option("--groups <emails>", "Comma-separated list of group emails to add user to")
+        .option("--admin", "Make user an admin", false)
+        .action(async function actionCreateUser() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const password = opts.password ?? generatePassword(8);
+        const groups = opts.groups ? opts.groups.split(",").map((g) => g.trim()) : [];
+        const result = await userDeps.createUser({
+            email: opts.email,
+            firstName: opts.firstName,
+            lastName: opts.lastName,
+            password,
+            orgUnitPath: fixOrgUnitPath(opts.orgUnit),
+            groups,
+            makeAdmin: opts.admin,
+        });
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        if (result.applied) {
+            process.stdout.write(`User created: ${result.primaryEmail}\n`);
+            process.stdout.write(`Password: ${result.password}\n`);
+            process.stdout.write("Save this password - it will not be shown again!\n");
+        }
+        else {
+            process.stdout.write("Failed to create user\n");
+        }
+    });
+    // typee workspace user delete --email <email>
+    userCmd
+        .command("delete")
+        .description("Delete a user")
+        .requiredOption("--email <email>", "User email address")
+        .option("-y, --force", "Skip confirmation", false)
+        .action(async function actionDeleteUser() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        if (!opts.force) {
+            process.stdout.write(`Delete user ${opts.email}? Use --force to confirm\n`);
+            return;
+        }
+        const result = await userDeps.deleteUser(opts.email);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `User deleted: ${result.email}\n` : "Failed to delete user\n");
+    });
+    // typee workspace user suspend --email <email>
+    userCmd
+        .command("suspend")
+        .description("Suspend a user")
+        .requiredOption("--email <email>", "User email address")
+        .action(async function actionSuspendUser() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const result = await userDeps.suspendUser(opts.email);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `User suspended: ${result.email}\n` : "Failed to suspend user\n");
+    });
+    // typee workspace user unsuspend --email <email>
+    userCmd
+        .command("unsuspend")
+        .description("Unsuspend a user")
+        .requiredOption("--email <email>", "User email address")
+        .action(async function actionUnsuspendUser() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const result = await userDeps.unsuspendUser(opts.email);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `User unsuspended: ${result.email}\n` : "Failed to unsuspend user\n");
+    });
+    // typee workspace user reset-password --email <email>
+    userCmd
+        .command("reset-password")
+        .description("Reset user password (generates new password)")
+        .requiredOption("--email <email>", "User email address")
+        .action(async function actionResetPassword() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const result = await userDeps.resetPassword(opts.email);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        if (result.applied) {
+            process.stdout.write(`Password reset for: ${result.email}\n`);
+            process.stdout.write(`New password: ${result.newPassword}\n`);
+            process.stdout.write("Save this password - it will not be shown again!\n");
+        }
+        else {
+            process.stdout.write("Failed to reset password\n");
+        }
+    });
+    // typee workspace user set-admin --email <email> [--yes]
+    userCmd
+        .command("set-admin")
+        .description("Make or remove admin privileges")
+        .requiredOption("--email <email>", "User email address")
+        .option("--yes", "Confirm admin promotion", false)
+        .action(async function actionSetAdmin() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        if (!opts.yes) {
+            process.stdout.write(`Make ${opts.email} an admin? Use --yes to confirm\n`);
+            return;
+        }
+        const result = await userDeps.setAdmin(opts.email, true);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `Admin privileges granted to: ${result.email}\n` : "Failed to set admin\n");
+    });
+    // typee workspace user set-org-unit --email <email> --org-unit <path>
+    userCmd
+        .command("set-org-unit")
+        .description("Set user's organization unit")
+        .requiredOption("--email <email>", "User email address")
+        .requiredOption("--org-unit <path>", "Organization unit path, e.g., /Sales")
+        .action(async function actionSetOrgUnit() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const result = await userDeps.setOrgUnit(opts.email, fixOrgUnitPath(opts.orgUnit) ?? opts.orgUnit);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `Org unit set for ${result.email}: ${result.orgUnitPath}\n` : "Failed to set org unit\n");
+    });
+    // Alias commands
+    // typee workspace user add-alias --email <email> --alias <alias@domain.com>
+    userCmd
+        .command("add-alias")
+        .description("Add an email alias to a user")
+        .requiredOption("--email <email>", "User email address")
+        .requiredOption("--alias <email>", "Alias email address")
+        .action(async function actionAddAlias() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const result = await userDeps.addAlias(opts.email, opts.alias);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `Alias added: ${result.alias}\n` : "Failed to add alias\n");
+    });
+    // typee workspace user list-aliases --email <email>
+    userCmd
+        .command("list-aliases")
+        .description("List all aliases for a user")
+        .requiredOption("--email <email>", "User email address")
+        .action(async function actionListAliases() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const aliases = await userDeps.listAliases(opts.email);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(aliases, null, 2)}\n`);
+            return;
+        }
+        if (aliases.length === 0) {
+            process.stdout.write(`No aliases found for ${opts.email}\n`);
+            return;
+        }
+        for (const alias of aliases) {
+            process.stdout.write(`${alias}\n`);
+        }
+    });
+    // typee workspace user delete-alias --email <email> --alias <alias@domain.com>
+    userCmd
+        .command("delete-alias")
+        .description("Delete an email alias from a user")
+        .requiredOption("--email <email>", "User email address")
+        .requiredOption("--alias <email>", "Alias email address")
+        .action(async function actionDeleteAlias() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const result = await userDeps.deleteAlias(opts.email, opts.alias);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `Alias deleted: ${result.alias}\n` : "Failed to delete alias\n");
+    });
+    // typee workspace user set-photo --email <email> --path <path>
+    userCmd
+        .command("set-photo")
+        .description("Set user profile photo")
+        .requiredOption("--email <email>", "User email address")
+        .requiredOption("--path <path>", "Path to photo file (base64 encoded)")
+        .action(async function actionSetPhoto() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const result = await userDeps.setPhoto(opts.email, opts.path);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `Photo set for ${result.email}\n` : "Failed to set photo\n");
+    });
+    // typee workspace user delete-photo --email <email>
+    userCmd
+        .command("delete-photo")
+        .description("Delete user profile photo")
+        .requiredOption("--email <email>", "User email address")
+        .action(async function actionDeletePhoto() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const result = await userDeps.deletePhoto(opts.email);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `Photo deleted for ${result.email}\n` : "Failed to delete photo\n");
+    });
+    // typee workspace user generate-backup-codes --email <email>
+    userCmd
+        .command("generate-backup-codes")
+        .description("Generate backup codes for user's 2-step verification")
+        .requiredOption("--email <email>", "User email address")
+        .action(async function actionGenerateBackupCodes() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const result = await userDeps.generateBackupCodes(opts.email);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        if (result.applied) {
+            process.stdout.write(`Backup codes generated for: ${result.email}\n\n`);
+            for (let i = 0; i < result.codes.length; i += 2) {
+                process.stdout.write(`${result.codes[i]}\t${result.codes[i + 1] || ""}\n`);
+            }
+            process.stdout.write("\nSave these codes - they will not be shown again!\n");
+        }
+        else {
+            process.stdout.write("Failed to generate backup codes\n");
+        }
+    });
+    // typee workspace org list
+    orgCmd
+        .command("list")
+        .description("List all organizational units")
+        .action(async function actionListOrgUnits() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const orgUnits = await orgUnitDeps.listOrgUnits();
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(orgUnits, null, 2)}\n`);
+            return;
+        }
+        for (const ou of orgUnits) {
+            process.stdout.write(`${ou.orgUnitPath}\n`);
+        }
+    });
+    // typee workspace org create --name <name> --parent <parent-org-unit-id-or-path> [--description <desc>]
+    orgCmd
+        .command("create")
+        .description("Create an organizational unit")
+        .requiredOption("--name <name>", "Name of the organizational unit")
+        .requiredOption("--parent <parent>", "Parent org unit ID or path (e.g., / or /Sales)")
+        .option("--description <desc>", "Description of the organizational unit")
+        .action(async function actionCreateOrgUnit() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const result = await orgUnitDeps.createOrgUnit({
+            name: opts.name,
+            parentOrgUnitPath: opts.parent,
+            description: opts.description,
+        });
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        if (result.applied) {
+            process.stdout.write(`Org unit created: ${result.orgUnitPath} (ID: ${result.orgUnitId})\n`);
+        }
+        else {
+            process.stdout.write("Failed to create org unit\n");
+        }
+    });
+    // typee workspace org get --path <org-unit-path> or --id <org-unit-id>
+    orgCmd
+        .command("get")
+        .description("Get organizational unit details")
+        .option("--path <org-unit-path>", "Org unit path (e.g., /Sales)")
+        .option("--id <org-unit-id>", "Org unit ID")
+        .action(async function actionGetOrgUnit() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        if (!opts.path && !opts.id) {
+            process.stdout.write("Error: Either --path or --id is required\n");
+            return;
+        }
+        const orgUnitPath = opts.path ?? opts.id ?? "";
+        const orgUnit = await orgUnitDeps.getOrgUnit(orgUnitPath);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(orgUnit, null, 2)}\n`);
+            return;
+        }
+        if (orgUnit.orgUnitId) {
+            process.stdout.write(`Name: ${orgUnit.name}\n`);
+            process.stdout.write(`Path: ${orgUnit.orgUnitPath}\n`);
+            process.stdout.write(`ID: ${orgUnit.orgUnitId}\n`);
+            if (orgUnit.parentOrgUnitId) {
+                process.stdout.write(`Parent ID: ${orgUnit.parentOrgUnitId}\n`);
+            }
+            if (orgUnit.description) {
+                process.stdout.write(`Description: ${orgUnit.description}\n`);
+            }
+        }
+        else {
+            process.stdout.write("Org unit not found\n");
+        }
+    });
+    // typee workspace org update --path <org-unit-path> or --id <org-unit-id> [--name <new-name>] [--description <desc>] [--parent <new-parent>]
+    orgCmd
+        .command("update")
+        .description("Update an organizational unit")
+        .option("--path <org-unit-path>", "Org unit path (e.g., /Sales)")
+        .option("--id <org-unit-id>", "Org unit ID")
+        .option("--name <new-name>", "New name for the org unit")
+        .option("--description <desc>", "New description for the org unit")
+        .option("--parent <new-parent>", "New parent org unit ID")
+        .action(async function actionUpdateOrgUnit() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        if (!opts.path && !opts.id) {
+            process.stdout.write("Error: Either --path or --id is required\n");
+            return;
+        }
+        if (!opts.name && !opts.description && !opts.parent) {
+            process.stdout.write("Error: At least one of --name, --description, or --parent is required\n");
+            return;
+        }
+        const orgUnitPath = opts.path ?? opts.id ?? "";
+        const result = await orgUnitDeps.updateOrgUnit(orgUnitPath, {
+            name: opts.name,
+            description: opts.description,
+            parentOrgUnitId: opts.parent,
+        });
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        if (result.applied) {
+            process.stdout.write(`Org unit updated: ${result.name} (ID: ${result.orgUnitId})\n`);
+        }
+        else {
+            process.stdout.write("Failed to update org unit\n");
+        }
+    });
+    // typee workspace org delete --path <org-unit-path> or --id <org-unit-id> [-y, --force]
+    orgCmd
+        .command("delete")
+        .description("Delete an organizational unit")
+        .option("--path <org-unit-path>", "Org unit path (e.g., /Sales)")
+        .option("--id <org-unit-id>", "Org unit ID")
+        .option("-y, --force", "Skip confirmation", false)
+        .action(async function actionDeleteOrgUnit() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        if (!opts.path && !opts.id) {
+            process.stdout.write("Error: Either --path or --id is required\n");
+            return;
+        }
+        const orgUnitPath = opts.path ?? opts.id ?? "";
+        if (!opts.force) {
+            process.stdout.write(`Delete org unit ${orgUnitPath}? Use --force to confirm\n`);
+            return;
+        }
+        const result = await orgUnitDeps.deleteOrgUnit(orgUnitPath);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `Org unit deleted: ${result.orgUnitPath}\n` : "Failed to delete org unit\n");
+    });
+    // Group commands
+    const groupCmd = workspaceCommand.command("group").description("Group management");
+    // typee workspace group create --email <email> --name <name>
+    groupCmd
+        .command("create")
+        .description("Create a new group")
+        .requiredOption("--email <email>", "Group email address")
+        .requiredOption("--name <name>", "Group name")
+        .action(async function actionCreateGroup() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const result = await groupDeps.createGroup({ email: opts.email, name: opts.name });
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `Group created: ${result.email}\n` : "Failed to create group\n");
+    });
+    // typee workspace group delete --email <email>
+    groupCmd
+        .command("delete")
+        .description("Delete a group")
+        .requiredOption("--email <email>", "Group email address")
+        .option("-y, --force", "Skip confirmation", false)
+        .action(async function actionDeleteGroup() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        if (!opts.force) {
+            process.stdout.write(`Delete group ${opts.email}? Use --force to confirm\n`);
+            return;
+        }
+        const result = await groupDeps.deleteGroup(opts.email);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `Group deleted: ${result.email}\n` : "Failed to delete group\n");
+    });
+    // typee workspace group list
+    groupCmd
+        .command("list")
+        .description("List all groups")
+        .action(async function actionListGroups() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const groups = await groupDeps.listGroups();
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(groups, null, 2)}\n`);
+            return;
+        }
+        for (const group of groups) {
+            process.stdout.write(`${group.email} - ${group.name}\n`);
+        }
+    });
+    // typee workspace group add-member --group <group-email> --email <member-email> [--role <MEMBER|MANAGER|OWNER>]
+    groupCmd
+        .command("add-member")
+        .description("Add member to group")
+        .requiredOption("--group <email>", "Group email address")
+        .requiredOption("--email <email>", "Member email address")
+        .option("--role <role>", "Member role: MEMBER, MANAGER, or OWNER", "MEMBER")
+        .action(async function actionAddGroupMember() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const validRoles = ["MEMBER", "MANAGER", "OWNER"];
+        const role = opts.role.toUpperCase();
+        if (!validRoles.includes(role)) {
+            process.stdout.write(`Invalid role: ${opts.role}. Must be MEMBER, MANAGER, or OWNER\n`);
+            return;
+        }
+        const result = await groupDeps.addGroupMember(opts.group, opts.email, role);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `Member added: ${result.memberEmail} to ${result.groupEmail} as ${result.role}\n` : "Failed to add member\n");
+    });
+    // typee workspace group remove-member --group <group-email> --email <member-email>
+    groupCmd
+        .command("remove-member")
+        .description("Remove member from group")
+        .requiredOption("--group <email>", "Group email address")
+        .requiredOption("--email <email>", "Member email address")
+        .action(async function actionRemoveGroupMember() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const result = await groupDeps.removeGroupMember(opts.group, opts.email);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+            return;
+        }
+        process.stdout.write(result.applied ? `Member removed: ${result.memberEmail} from ${result.groupEmail}\n` : "Failed to remove member\n");
+    });
+    // typee workspace group list-members --group <group-email>
+    groupCmd
+        .command("list-members")
+        .description("List all members of a group")
+        .requiredOption("--group <email>", "Group email address")
+        .action(async function actionListGroupMembers() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const members = await groupDeps.listGroupMembers(opts.group);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(members, null, 2)}\n`);
+            return;
+        }
+        if (members.length === 0) {
+            process.stdout.write(`No members found in ${opts.group}\n`);
+            return;
+        }
+        for (const member of members) {
+            process.stdout.write(`${member.email} - ${member.role} - ${member.status}\n`);
+        }
+    });
+    // Device commands
+    const deviceCmd = workspaceCommand.command("device").description("Device management");
+    // typee workspace device list
+    deviceCmd
+        .command("list")
+        .description("List devices")
+        .option("--type <type>", "Device type: chromebook, mobile")
+        .option("--org-unit <path>", "Organization unit path")
+        .action(async function actionListDevices() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const devices = await deviceDeps.listDevices({ type: opts.type, orgUnitPath: fixOrgUnitPath(opts.orgUnit) });
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(devices, null, 2)}\n`);
+            return;
+        }
+        for (const device of devices) {
+            process.stdout.write(`${device.deviceId} - ${device.email} - ${device.modelName} - ${device.status}\n`);
+        }
+    });
+    // Report commands
+    const reportCmd = workspaceCommand.command("report").description("Reports and audit logs");
+    // typee workspace report logins
+    reportCmd
+        .command("logins")
+        .description("List login activities")
+        .option("--days <number>", "Number of days to look back", "30")
+        .action(async function actionReportLogins() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const days = parseInt(opts.days, 10);
+        const logins = await reportDeps.getLoginAudit(days);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(logins, null, 2)}\n`);
+            return;
+        }
+        for (const login of logins) {
+            process.stdout.write(`${login.timestamp} - ${login.userEmail} - ${login.ipAddress}\n`);
+        }
+    });
+    // typee workspace report admin
+    reportCmd
+        .command("admin")
+        .description("List admin activities")
+        .option("--days <number>", "Number of days to look back", "30")
+        .action(async function actionReportAdmin() {
+        const rootOptions = this.optsWithGlobals();
+        const ctx = buildExecutionContext(rootOptions);
+        const opts = this.opts();
+        const days = parseInt(opts.days, 10);
+        const activities = await reportDeps.getAdminAudit(days);
+        if (ctx.output.mode === "json") {
+            process.stdout.write(`${JSON.stringify(activities, null, 2)}\n`);
+            return;
+        }
+        for (const activity of activities) {
+            process.stdout.write(`${activity.timestamp} - ${activity.userEmail} - ${activity.action} - ${activity.resource}\n`);
+        }
+    });
+}
+//# sourceMappingURL=commands.js.map