indraq_cli 1.5.8 → 1.9.1

package/dist/modules/aws/services/aws-clients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-clients.d.ts","sourceRoot":"","sources":["../../../../src/modules/aws/services/aws-clients.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,eAAO,MAAM,gBAAgB,QAAO;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAalG,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,OAAO,OAAO,KAAG,MAejD,CAAC"}

package/dist/modules/aws/services/aws-clients.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.describeAwsError = exports.createAwsClients = void 0;
+const client_iam_1 = require("@aws-sdk/client-iam");
+const client_route_53_1 = require("@aws-sdk/client-route-53");
+const aws_config_1 = require("../config/aws-config");
+const createAwsClients = () => {
+    const { project, local } = (0, aws_config_1.requireAwsConfig)();
+    const credentials = {
+        accessKeyId: local.accessKeyId,
+        secretAccessKey: local.secretAccessKey,
+        ...(local.sessionToken ? { sessionToken: local.sessionToken } : {})
+    };
+    const result = {
+        iam: new client_iam_1.IAMClient({ region: project.region, credentials }),
+        route53: new client_route_53_1.Route53Client({ region: project.region, credentials })
+    };
+    if (project.hostedZoneId)
+        result.hostedZoneId = project.hostedZoneId;
+    return result;
+};
+exports.createAwsClients = createAwsClients;
+const describeAwsError = (error) => {
+    if (!error || typeof error !== 'object')
+        return String(error);
+    const candidate = error;
+    const name = typeof candidate.name === 'string' ? candidate.name : 'AWS error';
+    const message = typeof candidate.message === 'string' ? candidate.message : 'Request failed';
+    const status = candidate.$metadata?.httpStatusCode;
+    if (name === 'AccessDenied' || name === 'AccessDeniedException' || status === 403) {
+        return `AWS permission denied: ${message}`;
+    }
+    if (name === 'InvalidClientTokenId' || name === 'SignatureDoesNotMatch' || name === 'UnrecognizedClientException') {
+        return `AWS authentication failed: ${message}`;
+    }
+    if (name === 'EntityAlreadyExists' || name === 'InvalidChangeBatch')
+        return `AWS rejected a duplicate or conflicting resource: ${message}`;
+    if (name === 'NoSuchEntity' || name === 'HostedZoneNotFound')
+        return `AWS resource not found: ${message}`;
+    return `${name}${status ? ` (HTTP ${status})` : ''}: ${message}`;
+};
+exports.describeAwsError = describeAwsError;
+//# sourceMappingURL=aws-clients.js.map

package/dist/modules/aws/services/aws-clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-clients.js","sourceRoot":"","sources":["../../../../src/modules/aws/services/aws-clients.ts"],"names":[],"mappings":";;;AAAA,oDAAgD;AAChD,8DAAyD;AACzD,qDAAwD;AAEjD,MAAM,gBAAgB,GAAG,GAAsE,EAAE;IACtG,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAA,6BAAgB,GAAE,CAAC;IAC9C,MAAM,WAAW,GAAG;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;IACF,MAAM,MAAM,GAAsE;QAChF,GAAG,EAAE,IAAI,sBAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;QAC3D,OAAO,EAAE,IAAI,+BAAa,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;KACpE,CAAC;IACF,IAAI,OAAO,CAAC,YAAY;QAAE,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAbW,QAAA,gBAAgB,oBAa3B;AAEK,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAU,EAAE;IACzD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,KAAuF,CAAC;IAC1G,MAAM,IAAI,GAAG,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IAC/E,MAAM,OAAO,GAAG,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAC7F,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC;IACnD,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,uBAAuB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAClF,OAAO,0BAA0B,OAAO,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,uBAAuB,IAAI,IAAI,KAAK,6BAA6B,EAAE,CAAC;QAClH,OAAO,8BAA8B,OAAO,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,IAAI,KAAK,qBAAqB,IAAI,IAAI,KAAK,oBAAoB;QAAE,OAAO,qDAAqD,OAAO,EAAE,CAAC;IAC3I,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,oBAAoB;QAAE,OAAO,2BAA2B,OAAO,EAAE,CAAC;IAC1G,OAAO,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;AACnE,CAAC,CAAC;AAfW,QAAA,gBAAgB,oBAe3B"}

package/dist/modules/aws/services/route53-lookup.service.d.ts

@@ -0,0 +1,9 @@
+import { type ResourceRecordSet } from '@aws-sdk/client-route-53';
+export interface Route53RecordMatch {
+    zoneId: string;
+    zoneName: string;
+    record: ResourceRecordSet;
+}
+export declare const findExactRoute53Record: (domain: string) => Promise<Route53RecordMatch | null>;
+export declare const requireRoute53Record: (domain: string) => Promise<Route53RecordMatch>;
+//# sourceMappingURL=route53-lookup.service.d.ts.map

package/dist/modules/aws/services/route53-lookup.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route53-lookup.service.d.ts","sourceRoot":"","sources":["../../../../src/modules/aws/services/route53-lookup.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyD,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAQzH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,eAAO,MAAM,sBAAsB,GAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAqC9F,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,kBAAkB,CAIrF,CAAC"}

package/dist/modules/aws/services/route53-lookup.service.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requireRoute53Record = exports.findExactRoute53Record = void 0;
+const client_route_53_1 = require("@aws-sdk/client-route-53");
+const cloud_aws_service_1 = require("../../cloud/services/cloud-aws.service");
+const project_metadata_1 = require("../../scaffold/config/project-metadata");
+const project_cloud_service_1 = require("../../cloud/services/project-cloud.service");
+const normalize = (value) => value.trim().toLowerCase().replace(/\.$/, '');
+const zoneId = (value) => value.replace(/^\/hostedzone\//, '');
+const findExactRoute53Record = async (domain) => {
+    const target = normalize(domain);
+    // Prefer the IndraQ project inventory. This lets normal users verify a DNS
+    // prerequisite without granting Route53 ListResourceRecordSets, which would
+    // expose all records in the hosted zone.
+    if ((0, project_metadata_1.getProjectReference)()?.projectId) {
+        try {
+            const resources = await (0, project_cloud_service_1.listProjectResources)();
+            const projectDns = resources.find((resource) => resource.provider === 'aws' && resource.resource_type.startsWith('route53-') && normalize(String(resource.config?.domain || '')) === target);
+            if (projectDns) {
+                const config = projectDns.config;
+                return {
+                    zoneId: String(config.zoneId || ''),
+                    zoneName: target.split('.').slice(1).join('.'),
+                    record: { Name: domain.endsWith('.') ? domain : `${domain}.`, Type: (config.recordType || 'A') }
+                };
+            }
+        }
+        catch { /* Fall back to live AWS lookup for operators/unlinked folders. */ }
+    }
+    const { route53 } = await (0, cloud_aws_service_1.createCloudAwsClients)('Verify Route53 DNS record before NPM proxy creation');
+    const zonesOutput = await route53.send(new client_route_53_1.ListHostedZonesCommand({}));
+    const zones = (zonesOutput.HostedZones || [])
+        .filter((z) => z.Id && z.Name)
+        .map((z) => ({ id: zoneId(z.Id), name: normalize(z.Name) }))
+        .filter((z) => target === z.name || target.endsWith(`.${z.name}`))
+        .sort((a, b) => b.name.length - a.name.length);
+    for (const zone of zones) {
+        const output = await route53.send(new client_route_53_1.ListResourceRecordSetsCommand({
+            HostedZoneId: zone.id,
+            StartRecordName: domain.endsWith('.') ? domain : `${domain}.`,
+            MaxItems: 20
+        }));
+        const record = (output.ResourceRecordSets || []).find((r) => normalize(r.Name || '') === target);
+        if (record)
+            return { zoneId: zone.id, zoneName: zone.name, record };
+    }
+    return null;
+};
+exports.findExactRoute53Record = findExactRoute53Record;
+const requireRoute53Record = async (domain) => {
+    const match = await (0, exports.findExactRoute53Record)(domain);
+    if (!match)
+        throw new Error(`No matching Route53 record exists for ${domain}. Create the AWS DNS record first with \`indraq dns create ${domain}\`; NPM proxy creation is blocked until DNS exists.`);
+    return match;
+};
+exports.requireRoute53Record = requireRoute53Record;
+//# sourceMappingURL=route53-lookup.service.js.map

package/dist/modules/aws/services/route53-lookup.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route53-lookup.service.js","sourceRoot":"","sources":["../../../../src/modules/aws/services/route53-lookup.service.ts"],"names":[],"mappings":";;;AAAA,8DAAyH;AACzH,8EAA+E;AAC/E,6EAA6E;AAC7E,sFAAkF;AAElF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3F,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAQxE,MAAM,sBAAsB,GAAG,KAAK,EAAE,MAAc,EAAsC,EAAE;IACjG,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,2EAA2E;IAC3E,4EAA4E;IAC5E,yCAAyC;IACzC,IAAI,IAAA,sCAAmB,GAAE,EAAE,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAA,4CAAoB,GAAE,CAAC;YAC/C,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,IAAI,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,MAAM,CAAE,QAAQ,CAAC,MAAc,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;YACtM,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,UAAU,CAAC,MAAmE,CAAC;gBAC9F,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;oBACnC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC9C,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,CAA2C,EAAE;iBAC3I,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,kEAAkE,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,yCAAqB,EAAC,qDAAqD,CAAC,CAAC;IACvG,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,wCAAsB,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE,CAAC;SAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;SAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAG,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAK,CAAC,EAAE,CAAC,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SACjE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,+CAA6B,CAAC;YAClE,YAAY,EAAE,IAAI,CAAC,EAAE;YACrB,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG;YAC7D,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC;QACjG,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AArCW,QAAA,sBAAsB,0BAqCjC;AAEK,MAAM,oBAAoB,GAAG,KAAK,EAAE,MAAc,EAA+B,EAAE;IACxF,MAAM,KAAK,GAAG,MAAM,IAAA,8BAAsB,EAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,8DAA8D,MAAM,qDAAqD,CAAC,CAAC;IACtM,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAJW,QAAA,oBAAoB,wBAI/B"}

package/dist/modules/cloud/commands/cloud.command.d.ts

@@ -0,0 +1,38 @@
+import { type ListCliOptions } from '../../../shared/listing';
+export declare const loginCloud: (options: {
+    email?: string;
+    password?: string;
+}) => Promise<void>;
+export interface PasswordResetOptions {
+    email?: string;
+    target?: string;
+    cloud?: boolean;
+    npm?: boolean;
+    jenkins?: boolean;
+    all?: boolean;
+}
+export declare const resetPasswordCloud: (options: PasswordResetOptions) => Promise<void>;
+export declare const logoutCloud: () => void;
+export declare const whoamiCloud: () => Promise<void>;
+export declare const listLogs: (options?: ListCliOptions) => Promise<void>;
+export declare const createServer: (defaultEnvironment?: string) => Promise<void>;
+export declare const listServers: () => Promise<void>;
+export declare const syncProject: () => Promise<void>;
+interface ProjectCreateOptions {
+    kind?: string;
+    framework?: string;
+    port?: string;
+    health?: string;
+    nodeVersion?: string;
+    image?: string;
+    reason?: string;
+    yes?: boolean;
+}
+export declare const createProject: (requestedName: string | undefined, options: ProjectCreateOptions) => Promise<void>;
+export declare const projectStatus: (environment?: string) => Promise<void>;
+export declare const listProjects: (options: ListCliOptions) => Promise<void>;
+export declare const linkProject: (options?: ListCliOptions) => Promise<void>;
+export declare const addProjectUser: () => Promise<void>;
+export declare const deleteProjectUser: () => Promise<void>;
+export {};
+//# sourceMappingURL=cloud.command.d.ts.map

package/dist/modules/cloud/commands/cloud.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.command.d.ts","sourceRoot":"","sources":["../../../../src/modules/cloud/commands/cloud.command.ts"],"names":[],"mappings":"AASA,OAAO,EAAe,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE3E,eAAO,MAAM,UAAU,GAAU,SAAS;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,KAAG,OAAO,CAAC,IAAI,CAoB7F,CAAC;AAEF,MAAM,WAAW,oBAAoB;IAAG,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CAAE;AAE5I,eAAO,MAAM,kBAAkB,GAAU,SAAS,oBAAoB,KAAG,OAAO,CAAC,IAAI,CAuCpF,CAAC;AAEF,eAAO,MAAM,WAAW,QAAO,IAI9B,CAAC;AAEF,eAAO,MAAM,WAAW,QAAa,OAAO,CAAC,IAAI,CAAiE,CAAC;AACnH,eAAO,MAAM,QAAQ,GAAU,UAAS,cAAmB,KAAG,OAAO,CAAC,IAAI,CAGzE,CAAC;AAEF,eAAO,MAAM,YAAY,GAAU,2BAAiC,KAAG,OAAO,CAAC,IAAI,CAelF,CAAC;AACF,eAAO,MAAM,WAAW,QAAa,OAAO,CAAC,IAAI,CAA0E,CAAC;AAE5H,eAAO,MAAM,WAAW,QAAa,OAAO,CAAC,IAAI,CA2BhD,CAAC;AAIF,UAAU,oBAAoB;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAwKD,eAAO,MAAM,aAAa,GAAU,eAAe,MAAM,GAAG,SAAS,EAAE,SAAS,oBAAoB,KAAG,OAAO,CAAC,IAAI,CAoDlH,CAAC;AAEF,eAAO,MAAM,aAAa,GAAU,cAAc,MAAM,KAAG,OAAO,CAAC,IAAI,CAWtE,CAAC;AAaF,eAAO,MAAM,YAAY,GAAU,SAAS,cAAc,KAAG,OAAO,CAAC,IAAI,CAGxE,CAAC;AAEF,eAAO,MAAM,WAAW,GAAU,UAAS,cAAmB,KAAG,OAAO,CAAC,IAAI,CAmB5E,CAAC;AAEF,eAAO,MAAM,cAAc,QAAa,OAAO,CAAC,IAAI,CAcnD,CAAC;AAEF,eAAO,MAAM,iBAAiB,QAAa,OAAO,CAAC,IAAI,CAUtD,CAAC"}

package/dist/modules/cloud/commands/cloud.command.js

@@ -0,0 +1,443 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deleteProjectUser = exports.addProjectUser = exports.linkProject = exports.listProjects = exports.projectStatus = exports.createProject = exports.syncProject = exports.listServers = exports.createServer = exports.listLogs = exports.whoamiCloud = exports.logoutCloud = exports.resetPasswordCloud = exports.loginCloud = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const inquirer_1 = __importDefault(require("inquirer"));
+const cloud_config_1 = require("../config/cloud-config");
+const cloud_api_service_1 = require("../services/cloud-api.service");
+const project_metadata_1 = require("../../scaffold/config/project-metadata");
+const node_path_1 = require("node:path");
+const node_fs_1 = require("node:fs");
+const project_cloud_service_1 = require("../services/project-cloud.service");
+const listing_1 = require("../../../shared/listing");
+const loginCloud = async (options) => {
+    let email = options.email, password = options.password;
+    const answer = await inquirer_1.default.prompt([
+        { type: 'input', name: 'email', message: 'Email:', when: !email, validate: (v) => /^\S+@\S+\.\S+$/.test(v) || 'Enter a valid email.' },
+        { type: 'password', name: 'password', message: 'Password:', mask: '*', when: !password }
+    ]);
+    email = email || answer.email;
+    password = password || answer.password;
+    const api = new cloud_api_service_1.CloudApiService();
+    const user = await api.login(email, password);
+    console.log(chalk_1.default.green('✓ Logged in to IndraQ Cloud.'));
+    if (user.mustChangePassword) {
+        console.log(chalk_1.default.yellow('Your current password is temporary and must be changed before you can use IndraQ.'));
+        const changed = await inquirer_1.default.prompt([
+            { type: 'password', name: 'password', message: 'Create your new password:', mask: '*', validate: (v) => v.length >= 10 || 'Use at least 10 characters.' },
+            { type: 'password', name: 'confirm', message: 'Confirm your new password:', mask: '*', validate: (v, answers) => v === answers.password || 'Passwords do not match.' }
+        ]);
+        const result = await api.request('/auth/first-login-password', { method: 'POST', body: JSON.stringify({ password: changed.password }) });
+        console.log(chalk_1.default.green('✓ Password changed. Your temporary password can no longer be used.'));
+        if (result.results?.length > 1)
+            console.table(result.results);
+    }
+};
+exports.loginCloud = loginCloud;
+const resetPasswordCloud = async (options) => {
+    let email = options.email?.trim();
+    if (!email)
+        email = (await inquirer_1.default.prompt([{ type: 'input', name: 'email', message: 'Email:', validate: (v) => /^\S+@\S+\.\S+$/.test(v) || 'Enter a valid email.' }])).email.trim();
+    let targets = [];
+    if (options.all || options.target === 'all')
+        targets = ['cloud', 'npm', 'jenkins'];
+    else {
+        if (options.target)
+            targets.push(options.target.toLowerCase());
+        if (options.cloud)
+            targets.push('cloud');
+        if (options.npm)
+            targets.push('npm');
+        if (options.jenkins)
+            targets.push('jenkins');
+        targets = [...new Set(targets)];
+    }
+    const invalid = targets.filter((v) => !['cloud', 'npm', 'jenkins'].includes(v));
+    if (invalid.length)
+        throw new Error(`Unsupported password target: ${invalid.join(', ')}. AWS uses access keys, not passwords.`);
+    if (!targets.length) {
+        const chosen = await inquirer_1.default.prompt([{ type: 'checkbox', name: 'targets', message: 'Reset password for:', choices: [
+                    { name: 'INDRAQ CLOUD', value: 'cloud', checked: true },
+                    { name: 'Nginx Proxy Manager', value: 'npm' },
+                    { name: 'Jenkins (managed accounts)', value: 'jenkins' },
+                    { name: 'ALL PASSWORD-BASED ACCOUNTS', value: 'all' }
+                ], validate: (v) => v.length > 0 || 'Select at least one target.' }]);
+        targets = chosen.targets.includes('all') ? ['cloud', 'npm', 'jenkins'] : chosen.targets;
+    }
+    const api = new cloud_api_service_1.CloudApiService();
+    await api.request('/auth/password-reset/request', { method: 'POST', body: JSON.stringify({ email }) });
+    console.log(chalk_1.default.green('✓ If that account exists, a 6-digit reset code was sent to its email.'));
+    const answers = await inquirer_1.default.prompt([
+        { type: 'input', name: 'otp', message: 'Email OTP:', validate: (v) => /^\d{6}$/.test(v.trim()) || 'Enter the 6-digit code.' },
+        { type: 'password', name: 'password', message: 'New password:', mask: '*', validate: (v) => v.length >= 10 || 'Use at least 10 characters.' },
+        { type: 'password', name: 'confirm', message: 'Confirm new password:', mask: '*', validate: (v, a) => v === a.password || 'Passwords do not match.' }
+    ]);
+    const result = await api.request('/auth/password-reset/verify', { method: 'POST', body: JSON.stringify({ email, otp: answers.otp.trim(), password: answers.password, targets }) });
+    console.table(result.results || []);
+    if (!result.ok)
+        throw new Error('One or more selected accounts could not be reset. Review the provider results.');
+    console.log(chalk_1.default.green('✓ Password reset completed.'));
+    if (targets.includes('cloud')) {
+        await api.login(email, answers.password);
+        console.log(chalk_1.default.gray('  Your CLI session was refreshed with the new IndraQ Cloud password.'));
+    }
+};
+exports.resetPasswordCloud = resetPasswordCloud;
+const logoutCloud = () => {
+    const config = (0, cloud_config_1.getCloudConfig)();
+    (0, cloud_config_1.saveCloudConfig)({ apiUrl: config.apiUrl });
+    console.log(chalk_1.default.green('✓ Logged out.'));
+};
+exports.logoutCloud = logoutCloud;
+const whoamiCloud = async () => console.log(await new cloud_api_service_1.CloudApiService().request('/auth/me'));
+exports.whoamiCloud = whoamiCloud;
+const listLogs = async (options = {}) => {
+    const rows = await new cloud_api_service_1.CloudApiService().request(`/logs${(0, listing_1.queryString)(options)}`);
+    console.table(rows.map((x) => ({ time: x.created_at, actor: x.actor_email, action: x.action, resource: x.resource_type, id: x.resource_id, reason: x.reason })));
+};
+exports.listLogs = listLogs;
+const createServer = async (defaultEnvironment = 'production') => {
+    const validIpv4 = (value) => {
+        const parts = value.trim().split('.');
+        return parts.length === 4 && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) >= 0 && Number(part) <= 255);
+    };
+    const answer = await inquirer_1.default.prompt([
+        { type: 'input', name: 'name', message: 'Server name:', validate: (v) => !!v.trim() || 'Required' },
+        { type: 'input', name: 'environment', message: 'Environment:', default: defaultEnvironment },
+        { type: 'input', name: 'ipv4', message: 'IPv4:', validate: (v) => validIpv4(v) || 'Enter a valid IPv4 address.' },
+        { type: 'input', name: 'healthPath', message: 'Health path:', default: '/health' },
+        { type: 'confirm', name: 'isBackup', message: 'Backup server?', default: false },
+        { type: 'input', name: 'reason', message: 'Reason:', default: 'Create predefined deployment server', validate: (v) => v.trim().length >= 3 || 'Reason required' }
+    ]);
+    await new cloud_api_service_1.CloudApiService().request('/servers', { method: 'POST', body: JSON.stringify(answer) });
+    console.log(chalk_1.default.green(`✓ Server ${answer.name} created.`));
+};
+exports.createServer = createServer;
+const listServers = async () => console.table(await new cloud_api_service_1.CloudApiService().request('/servers'));
+exports.listServers = listServers;
+const syncProject = async () => {
+    const local = (0, project_metadata_1.getLocalProjectFile)();
+    if (!local)
+        throw new Error('No IndraQ project metadata found. For an existing application run `indraq project create`; for a new scaffold run `indraq init`.');
+    const api = new cloud_api_service_1.CloudApiService();
+    const root = (0, project_metadata_1.findProjectRoot)();
+    if (!root)
+        throw new Error('Project root could not be resolved.');
+    if (local.schemaVersion === 3) {
+        await api.request(`/projects/${local.projectId}`);
+        console.log(chalk_1.default.green(`✓ Project ${local.projectId} is linked to IndraQ Cloud.`));
+        return;
+    }
+    const config = { ...local };
+    delete config.projectId;
+    const existingId = local.projectId;
+    if (existingId) {
+        await api.request(`/projects/${existingId}`, { method: 'PATCH', body: JSON.stringify({ name: local.name, config, reason: 'CLI project sync' }) });
+        (0, project_metadata_1.saveProjectReference)(root, existingId);
+        console.log(chalk_1.default.green(`✓ Project ${existingId} synced. Local project file now contains only the cloud project ID.`));
+        return;
+    }
+    const remote = await api.request('/projects', { method: 'POST', body: JSON.stringify({ name: local.name, kind: local.kind, config, reason: 'Initial CLI project sync' }) });
+    (0, project_metadata_1.saveProjectReference)(root, remote.id);
+    console.log(chalk_1.default.green(`✓ Project created in IndraQ Cloud: ${remote.id}`));
+    console.log(chalk_1.default.gray('  .indraq/project.json now stores only the cloud project ID.'));
+};
+exports.syncProject = syncProject;
+const readPackageJson = (root) => {
+    const path = (0, node_path_1.join)(root, 'package.json');
+    if (!(0, node_fs_1.existsSync)(path))
+        return null;
+    try {
+        return JSON.parse((0, node_fs_1.readFileSync)(path, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+};
+const hasPackage = (pkg, name) => !!pkg && (!!pkg.dependencies?.[name] || !!pkg.devDependencies?.[name]);
+const inferFramework = (pkg) => {
+    if (hasPackage(pkg, 'expo'))
+        return 'expo';
+    if (hasPackage(pkg, 'react-native'))
+        return 'react-native';
+    if (hasPackage(pkg, 'express'))
+        return 'express';
+    if (hasPackage(pkg, 'next'))
+        return 'next';
+    if (hasPackage(pkg, 'vite'))
+        return 'vite';
+    if (hasPackage(pkg, 'react'))
+        return 'react';
+    return null;
+};
+const inferProjectKind = (root, pkg) => {
+    if ((0, node_fs_1.existsSync)((0, node_path_1.join)(root, 'frontend', 'package.json')) && (0, node_fs_1.existsSync)((0, node_path_1.join)(root, 'backend', 'package.json')))
+        return 'fullstack';
+    const framework = inferFramework(pkg);
+    if (framework === 'expo' || framework === 'react-native')
+        return 'mobile';
+    if (framework === 'express')
+        return 'backend';
+    if (framework === 'vite' || framework === 'react' || framework === 'next')
+        return 'frontend';
+    return 'backend';
+};
+const inferNodeVersion = (pkg) => {
+    const engine = pkg?.engines?.node || '';
+    const match = engine.match(/(\d{2,})/);
+    return match?.[1] || process.versions.node.split('.')[0] || '22';
+};
+const projectSlug = (value) => {
+    const slug = value.trim().toLowerCase().replace(/[^a-z0-9_.-]+/g, '-').replace(/^-+|-+$/g, '');
+    return slug || 'app';
+};
+const positivePort = (value, fallback) => {
+    if (value === undefined || value === '')
+        return fallback;
+    const port = Number(value);
+    if (!Number.isInteger(port) || port < 1 || port > 65535)
+        throw new Error('Port must be an integer from 1 to 65535.');
+    return port;
+};
+const ensureProjectCreateLogin = async () => {
+    const config = (0, cloud_config_1.getCloudConfig)();
+    if (!config?.token)
+        throw new Error('You must be logged in to IndraQ Cloud. Run `indraq login` first.');
+    try {
+        await new cloud_api_service_1.CloudApiService().request('/auth/me');
+    }
+    catch {
+        throw new Error('Your IndraQ Cloud session is invalid or expired. Run `indraq login` again.');
+    }
+};
+const chooseProjectKind = async (requested, detected) => {
+    const allowed = ['frontend', 'backend', 'fullstack', 'mobile'];
+    if (requested) {
+        const normalized = requested.trim().toLowerCase();
+        if (!allowed.includes(normalized))
+            throw new Error(`Unsupported project kind: ${requested}. Use frontend, backend, fullstack, or mobile.`);
+        return normalized;
+    }
+    return (await inquirer_1.default.prompt([{
+            type: 'list', name: 'kind', message: 'Project type:', default: detected,
+            choices: [
+                { name: 'Frontend', value: 'frontend' },
+                { name: 'Backend', value: 'backend' },
+                { name: 'Frontend + Backend', value: 'fullstack' },
+                { name: 'Mobile App', value: 'mobile' }
+            ]
+        }])).kind;
+};
+const chooseFrontendFramework = async (requested, detected) => {
+    const allowed = ['vite', 'react', 'next', 'vanilla'];
+    if (requested) {
+        const normalized = requested.trim().toLowerCase();
+        if (!allowed.includes(normalized))
+            throw new Error(`Unsupported frontend framework: ${requested}. Use vite, react, next, or vanilla.`);
+        return normalized;
+    }
+    const fallback = detected && allowed.includes(detected)
+        ? detected : 'vite';
+    return (await inquirer_1.default.prompt([{
+            type: 'list', name: 'framework', message: 'Frontend framework:', default: fallback, choices: allowed
+        }])).framework;
+};
+const chooseMobileFramework = async (requested, detected) => {
+    const allowed = ['expo', 'react-native'];
+    if (requested) {
+        const normalized = requested.trim().toLowerCase();
+        if (!allowed.includes(normalized))
+            throw new Error(`Unsupported mobile framework: ${requested}. Use expo or react-native.`);
+        return normalized;
+    }
+    const fallback = detected === 'react-native' ? 'react-native' : 'expo';
+    return (await inquirer_1.default.prompt([{
+            type: 'list', name: 'framework', message: 'Mobile framework:', default: fallback, choices: allowed
+        }])).framework;
+};
+const safeRelativePath = (root, value) => {
+    const trimmed = value.trim();
+    if (!trimmed || trimmed.startsWith('/') || /^[A-Za-z]:[\\/]/.test(trimmed) || trimmed.split(/[\\/]+/).includes('..'))
+        return false;
+    const target = (0, node_path_1.resolve)(root, trimmed);
+    return (target === root || target.startsWith(`${root}${process.platform === 'win32' ? '\\' : '/'}`)) && (0, node_fs_1.existsSync)(target);
+};
+const buildExistingFolderMetadata = async (root, name, kind, options, rootPackage) => {
+    const nodeVersion = options.nodeVersion?.trim() || inferNodeVersion(rootPackage);
+    const slug = projectSlug(options.image?.trim() || name);
+    const detected = inferFramework(rootPackage);
+    if (kind === 'mobile') {
+        const framework = await chooseMobileFramework(options.framework, detected);
+        return { schemaVersion: 1, name, kind, framework, nodeVersion, appPort: 0, containerPort: 0, healthEndpoint: '', imageName: slug, createdAt: new Date().toISOString() };
+    }
+    if (kind === 'backend') {
+        if (options.framework && options.framework.trim().toLowerCase() !== 'express')
+            throw new Error('The current IndraQ backend metadata model supports framework=express.');
+        let port = positivePort(options.port, 3000);
+        if (!options.port)
+            port = (await inquirer_1.default.prompt([{ type: 'number', name: 'port', message: 'Application/container port:', default: port, validate: (v) => Number.isInteger(v) && v >= 1 && v <= 65535 || 'Use a port from 1-65535.' }])).port;
+        const healthEndpoint = options.health?.trim() || (await inquirer_1.default.prompt([{ type: 'input', name: 'health', message: 'Application health endpoint (metadata only):', default: '/health', validate: (v) => v.trim().startsWith('/') || 'Path must start with /.' }])).health.trim();
+        return { schemaVersion: 2, name, kind, framework: 'express', nodeVersion, appPort: port, containerPort: port, healthEndpoint, imageName: slug, createdAt: new Date().toISOString() };
+    }
+    if (kind === 'frontend') {
+        const framework = await chooseFrontendFramework(options.framework, detected);
+        const defaultPort = framework === 'next' ? 3000 : 80;
+        const port = positivePort(options.port, defaultPort);
+        const healthEndpoint = options.health?.trim() || '/';
+        const buildOutput = framework === 'vite' || framework === 'react' ? 'dist' : undefined;
+        return { schemaVersion: 2, name, kind, framework, nodeVersion, appPort: port, containerPort: port, healthEndpoint, imageName: slug, createdAt: new Date().toISOString(), ...(buildOutput ? { buildOutput } : {}) };
+    }
+    const defaultFrontendPath = (0, node_fs_1.existsSync)((0, node_path_1.join)(root, 'frontend')) ? 'frontend' : 'client';
+    const defaultBackendPath = (0, node_fs_1.existsSync)((0, node_path_1.join)(root, 'backend')) ? 'backend' : 'server';
+    const paths = await inquirer_1.default.prompt([
+        { type: 'input', name: 'frontendPath', message: 'Frontend path relative to this folder:', default: defaultFrontendPath, validate: (v) => safeRelativePath(root, v) || 'Enter an existing path inside the current project.' },
+        { type: 'input', name: 'backendPath', message: 'Backend path relative to this folder:', default: defaultBackendPath, validate: (v) => safeRelativePath(root, v) || 'Enter an existing path inside the current project.' }
+    ]);
+    const frontendPackage = readPackageJson((0, node_path_1.join)(root, paths.frontendPath));
+    const frontendFramework = await chooseFrontendFramework(options.framework, inferFramework(frontendPackage));
+    let backendPort = positivePort(options.port, 3000);
+    if (!options.port)
+        backendPort = (await inquirer_1.default.prompt([{ type: 'number', name: 'port', message: 'Backend application/container port:', default: backendPort, validate: (v) => Number.isInteger(v) && v >= 1 && v <= 65535 || 'Use a port from 1-65535.' }])).port;
+    const backendHealth = options.health?.trim() || (await inquirer_1.default.prompt([{ type: 'input', name: 'health', message: 'Backend health endpoint (metadata only):', default: '/health', validate: (v) => v.trim().startsWith('/') || 'Path must start with /.' }])).health.trim();
+    const frontendPort = frontendFramework === 'next' ? 3000 : 80;
+    const frontendBuildOutput = frontendFramework === 'vite' || frontendFramework === 'react' ? 'dist' : undefined;
+    const components = [
+        { name: `${name}-frontend`, kind: 'frontend', path: paths.frontendPath.trim(), framework: frontendFramework, appPort: frontendPort, containerPort: frontendPort, healthEndpoint: '/', imageName: `${slug}-frontend`, ...(frontendBuildOutput ? { buildOutput: frontendBuildOutput } : {}) },
+        { name: `${name}-backend`, kind: 'backend', path: paths.backendPath.trim(), framework: 'express', appPort: backendPort, containerPort: backendPort, healthEndpoint: backendHealth, imageName: `${slug}-backend` }
+    ];
+    return { schemaVersion: 2, name, kind, framework: frontendFramework, nodeVersion, appPort: frontendPort, containerPort: frontendPort, healthEndpoint: '/', imageName: slug, createdAt: new Date().toISOString(), components, ...(frontendBuildOutput ? { buildOutput: frontendBuildOutput } : {}) };
+};
+const createProject = async (requestedName, options) => {
+    await ensureProjectCreateLogin();
+    const root = (0, node_path_1.resolve)(process.cwd());
+    const exactLocalProjectFile = (0, node_path_1.join)(root, '.indraq', 'project.json');
+    const existingLocal = (0, node_fs_1.existsSync)(exactLocalProjectFile) ? (0, project_metadata_1.getLocalProjectFile)(root) : null;
+    if (existingLocal) {
+        if (existingLocal.schemaVersion === 3) {
+            const existingRemote = await new cloud_api_service_1.CloudApiService().request(`/projects/${existingLocal.projectId}`);
+            console.log(chalk_1.default.green(`✓ This folder is already linked to ${existingRemote.name} (${existingRemote.id}).`));
+            console.log(chalk_1.default.gray('  Use `indraq project status`, `indraq project sync`, or `indraq project link` instead of creating a duplicate project.'));
+            return;
+        }
+        throw new Error('This folder already contains IndraQ project metadata. Run `indraq project sync` to create/link its Cloud project.');
+    }
+    const rootPackage = readPackageJson(root);
+    const inferredName = rootPackage?.name?.trim() || (0, node_path_1.basename)(root);
+    const name = (requestedName?.trim() || (await inquirer_1.default.prompt([{
+            type: 'input', name: 'name', message: 'Cloud project name:', default: inferredName, validate: (v) => !!v.trim() || 'Project name is required.'
+        }])).name.trim());
+    if (!name)
+        throw new Error('Project name is required.');
+    const api = new cloud_api_service_1.CloudApiService();
+    const accessible = await api.request('/projects');
+    const sameName = accessible.find((project) => project.name.trim().toLowerCase() === name.toLowerCase());
+    if (sameName) {
+        const linkExisting = options.yes || (await inquirer_1.default.prompt([{
+                type: 'confirm', name: 'ok', message: `A Cloud project named "${sameName.name}" already exists and is accessible. Link this folder to it instead?`, default: true
+            }])).ok;
+        if (linkExisting) {
+            (0, project_metadata_1.saveProjectReference)(root, sameName.id);
+            console.log(chalk_1.default.green(`✓ Linked this folder to existing Cloud project ${sameName.name} (${sameName.id}).`));
+            console.log(chalk_1.default.gray('  Only .indraq/project.json was created. No application, package, Docker, AWS, NPM, Jenkins, or GHCR files/resources were changed.'));
+            return;
+        }
+    }
+    const kind = await chooseProjectKind(options.kind, inferProjectKind(root, rootPackage));
+    const metadata = await buildExistingFolderMetadata(root, name, kind, options, rootPackage);
+    const reason = options.reason?.trim() || (options.yes ? 'Register existing folder as IndraQ Cloud project' : (await inquirer_1.default.prompt([{
+            type: 'input', name: 'reason', message: 'Audit reason:', default: 'Register existing folder as IndraQ Cloud project', validate: (v) => v.trim().length >= 3 || 'Reason is required.'
+        }])).reason.trim());
+    const remote = await api.request('/projects', {
+        method: 'POST', body: JSON.stringify({ name, kind, config: metadata, reason })
+    });
+    (0, project_metadata_1.saveProjectReference)(root, remote.id);
+    console.log(chalk_1.default.green(`✓ Cloud project created: ${remote.name} (${remote.id}).`));
+    console.log(chalk_1.default.green('✓ Current folder linked to IndraQ Cloud.'));
+    console.log(chalk_1.default.gray('  Only .indraq/project.json was created. Your existing application files were not modified.'));
+    console.log(chalk_1.default.gray('  No npm install, Docker generation, AWS, NPM, Jenkins, GHCR, prebuild, or deployment action was run.'));
+    console.log(chalk_1.default.gray('  You can now run individual commands such as `indraq dockerfile create`, `indraq jenkins create-deployment`, `indraq dns create`, `indraq proxy create`, or `indraq prebuild`.'));
+};
+exports.createProject = createProject;
+const projectStatus = async (environment) => {
+    const project = await (0, project_cloud_service_1.getCloudProject)();
+    const resources = await (0, project_cloud_service_1.listProjectResources)(environment);
+    console.log(chalk_1.default.blue.bold(`\n${project.name} — IndraQ Cloud project`));
+    console.log(chalk_1.default.gray(`Project ID: ${project.id}`));
+    console.log(chalk_1.default.gray(`Access: ${project.effective_access === 'write' ? 'WRITE' : 'VIEW ONLY'}`));
+    if (!resources.length) {
+        console.log(chalk_1.default.yellow(`⚠ No${environment ? ` ${environment}` : ''} infrastructure resources are associated. Run \`indraq prebuild${environment ? ` --env ${environment}` : ''}\`.`));
+        return;
+    }
+    console.table(resources.map((item) => ({ environment: item.environment, resource: item.resource_type, provider: item.provider, externalId: item.external_id || '' })));
+};
+exports.projectStatus = projectStatus;
+const chooseCloudProject = async (message = 'Project:', options = {}) => {
+    const projects = await new cloud_api_service_1.CloudApiService().request(`/projects${(0, listing_1.queryString)(options)}`);
+    if (!projects.length)
+        throw new Error('No matching IndraQ Cloud projects were found.');
+    const id = (await inquirer_1.default.prompt([{ type: 'list', name: 'id', message, pageSize: 15, choices: projects.map((p) => ({ name: `${p.name} — ${p.kind} — ${(p.effective_access || 'view').toUpperCase()}${p.creator_email ? ` — ${p.creator_email}` : ''}`, value: p.id })) }])).id;
+    return projects.find((p) => p.id === id);
+};
+const listProjects = async (options) => {
+    const projects = await new cloud_api_service_1.CloudApiService().request(`/projects${(0, listing_1.queryString)(options)}`);
+    console.table(projects.map((p) => ({ name: p.name, kind: p.kind, access: (p.effective_access || 'view').toUpperCase(), creator: p.creator_email || '', id: p.id })));
+};
+exports.listProjects = listProjects;
+const linkProject = async (options = {}) => {
+    const project = await chooseCloudProject('Cloud project to link to this folder:', options);
+    const root = (0, node_path_1.resolve)(process.cwd());
+    let existing = null;
+    try {
+        existing = (0, project_metadata_1.getLocalProjectFile)(root);
+    }
+    catch (error) {
+        console.log(chalk_1.default.yellow(`⚠ Existing .indraq/project.json is invalid and can be repaired: ${error instanceof Error ? error.message : String(error)}`));
+    }
+    if (existing?.schemaVersion === 3 && existing.projectId === project.id) {
+        console.log(chalk_1.default.green(`✓ This folder is already linked to ${project.name} (${project.id}).`));
+        return;
+    }
+    if (existing) {
+        const ok = (await inquirer_1.default.prompt([{ type: 'confirm', name: 'ok', message: 'This folder already has an IndraQ project reference. Replace only the .indraq/project.json link?', default: false }])).ok;
+        if (!ok)
+            return;
+    }
+    (0, project_metadata_1.saveProjectReference)(root, project.id);
+    console.log(chalk_1.default.green(`✓ Linked ${root} to ${project.name} (${project.id}).`));
+    console.log(chalk_1.default.gray('  Only .indraq/project.json was created/replaced; your application files were not modified.'));
+};
+exports.linkProject = linkProject;
+const addProjectUser = async () => {
+    const api = new cloud_api_service_1.CloudApiService();
+    const project = await chooseCloudProject('Project to grant access:');
+    const users = (await api.request('/users?all=true')).filter((u) => u.is_active);
+    if (!users.length)
+        throw new Error('No active users are available to add.');
+    const userId = (await inquirer_1.default.prompt([{ type: 'list', name: 'userId', message: 'User to add:', choices: users.map((u) => ({ name: `${u.email} — ${u.name} (${u.role})`, value: u.id })) }])).userId;
+    const accessLevel = (await inquirer_1.default.prompt([{ type: 'list', name: 'accessLevel', message: 'Project permission:', choices: [
+                { name: 'VIEW — inspect/link project, no infrastructure changes', value: 'view' },
+                { name: 'WRITE — run prebuild/deployment and manage project resources', value: 'write' }
+            ], default: 'write' }])).accessLevel;
+    const reason = (await inquirer_1.default.prompt([{ type: 'input', name: 'reason', message: 'Reason:', default: 'Grant project access', validate: (v) => v.trim().length >= 3 || 'Reason is required.' }])).reason.trim();
+    await api.request(`/projects/${project.id}/members`, { method: 'POST', body: JSON.stringify({ userId, accessLevel, reason }) });
+    const user = users.find((u) => u.id === userId);
+    console.log(chalk_1.default.green(`✓ ${user.email} now has access to ${project.name}.`));
+};
+exports.addProjectUser = addProjectUser;
+const deleteProjectUser = async () => {
+    const api = new cloud_api_service_1.CloudApiService();
+    const project = await chooseCloudProject('Project to remove access from:');
+    const members = await api.request(`/projects/${project.id}/members`);
+    const removable = members.filter((m) => m.role !== 'owner');
+    if (!removable.length)
+        throw new Error('This project has no removable members. Project owners cannot be removed through this command.');
+    const userId = (await inquirer_1.default.prompt([{ type: 'list', name: 'userId', message: 'User to remove:', choices: removable.map((m) => ({ name: `${m.email} — ${m.name}`, value: m.user_id })) }])).userId;
+    const reason = (await inquirer_1.default.prompt([{ type: 'input', name: 'reason', message: 'Reason:', default: 'Revoke project access', validate: (v) => v.trim().length >= 3 || 'Reason is required.' }])).reason.trim();
+    await api.request(`/projects/${project.id}/members/${userId}`, { method: 'DELETE', body: JSON.stringify({ reason }) });
+    console.log(chalk_1.default.green('✓ Project access removed.'));
+};
+exports.deleteProjectUser = deleteProjectUser;
+//# sourceMappingURL=cloud.command.js.map