sentron-cli 1.0.23 → 1.0.24

package/dist/commands/app.js

@@ -0,0 +1,874 @@
+/**
+ * App Commands
+ */
+import * as readline from 'readline';
+import { api } from '../api.js';
+import { getStoredToken } from '../utils/storage.js';
+import { printSection, printSuccess, printError, printInfo, printBox, printLoading, printLoadingComplete, printLoadingError, printPrompt, brand, } from '../utils/styling.js';
+/**
+ * Prompt for input
+ */
+function prompt(question) {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    return new Promise((resolve) => {
+        rl.question(question, (answer) => {
+            rl.close();
+            resolve(answer.trim());
+        });
+    });
+}
+export function setupAppCommands(program) {
+    const appCmd = program
+        .command('app')
+        .description('Manage apps');
+    // List apps in an organization
+    appCmd
+        .command('list <orgId>')
+        .alias('ls')
+        .description('List apps in an organization')
+        .option('--json', 'Output as JSON')
+        .action(async (orgId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            printLoading('Fetching apps');
+            const apps = await api.apps.list(orgId);
+            printLoadingComplete();
+            if (options.json) {
+                console.log(JSON.stringify(apps, null, 2));
+            }
+            else {
+                console.log();
+                printSection('Apps');
+                if (apps.length === 0) {
+                    printInfo('No apps found. Create one with "sentron app create <orgId>"');
+                }
+                else {
+                    apps.forEach((app) => {
+                        printBox([
+                            `Name:      ${brand.accent(app.name)}`,
+                            `Slug:      ${app.slug}`,
+                            `Members:   ${app.memberCount}`,
+                            app.description ? `Desc:      ${app.description}` : '',
+                            `Created:   ${new Date(app.createdAt).toLocaleDateString()}`,
+                            `ID:        ${brand.muted(app.id)}`,
+                        ].filter(Boolean));
+                        console.log();
+                    });
+                }
+            }
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to list apps');
+            process.exit(1);
+        }
+    });
+    // Create app
+    appCmd
+        .command('create <orgId>')
+        .description('Create a new app (slug is auto-generated from name based on app type)')
+        .option('-n, --name <name>', 'App name')
+        .option('-d, --description <description>', 'App description')
+        .action(async (orgId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            const name = options.name || await prompt(printPrompt('App Name'));
+            if (!name) {
+                printError('Name is required');
+                process.exit(1);
+            }
+            printLoading('Creating app');
+            const app = await api.apps.create(orgId, {
+                name,
+                description: options.description,
+            });
+            printLoadingComplete();
+            console.log();
+            printSection('App Created');
+            printBox([
+                `Name:  ${brand.accent(app.name)}`,
+                `Slug:  ${app.slug}`,
+                `Type:  ${app.appType}`,
+                `ID:    ${brand.muted(app.id)}`,
+            ]);
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to create app');
+            process.exit(1);
+        }
+    });
+    // Get app details
+    appCmd
+        .command('get <appId>')
+        .alias('show')
+        .description('Get app details')
+        .option('--json', 'Output as JSON')
+        .action(async (appId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            printLoading('Fetching app');
+            const app = await api.apps.get(appId);
+            printLoadingComplete();
+            if (options.json) {
+                console.log(JSON.stringify(app, null, 2));
+            }
+            else {
+                console.log();
+                printSection('App Details');
+                printBox([
+                    `Name:      ${brand.accent(app.name)}`,
+                    `Slug:      ${app.slug}`,
+                    app.description ? `Desc:      ${app.description}` : '',
+                    `Members:   ${app.memberCount}`,
+                    `Created:   ${new Date(app.createdAt).toLocaleDateString()}`,
+                    `Org ID:    ${brand.muted(app.organizationId)}`,
+                    `ID:        ${brand.muted(app.id)}`,
+                ].filter(Boolean));
+            }
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to get app');
+            process.exit(1);
+        }
+    });
+    // Update app
+    appCmd
+        .command('update <appId>')
+        .description('Update app details')
+        .option('-n, --name <name>', 'New name')
+        .option('-d, --description <description>', 'New description')
+        .action(async (appId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            if (!options.name && !options.description) {
+                printError('At least one field to update is required');
+                process.exit(1);
+            }
+            printLoading('Updating app');
+            const app = await api.apps.update(appId, {
+                name: options.name,
+                description: options.description,
+            });
+            printLoadingComplete();
+            console.log();
+            printSection('App Updated');
+            printSuccess(`Updated: ${app.name}`);
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to update app');
+            process.exit(1);
+        }
+    });
+    // Delete app
+    appCmd
+        .command('delete <appId>')
+        .description('Delete an app')
+        .option('-f, --force', 'Skip confirmation')
+        .action(async (appId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            if (!options.force) {
+                const confirm = await prompt(printPrompt('Type "DELETE" to confirm'));
+                if (confirm !== 'DELETE') {
+                    printInfo('Cancelled');
+                    return;
+                }
+            }
+            printLoading('Deleting app');
+            await api.apps.delete(appId);
+            printLoadingComplete();
+            console.log();
+            printSuccess('App deleted successfully');
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to delete app');
+            process.exit(1);
+        }
+    });
+    // Members subcommand
+    const membersCmd = appCmd
+        .command('members')
+        .description('Manage app members');
+    // List members
+    membersCmd
+        .command('list <appId>')
+        .alias('ls')
+        .description('List app members')
+        .option('--json', 'Output as JSON')
+        .action(async (appId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            printLoading('Fetching members');
+            const members = await api.apps.listMembers(appId);
+            printLoadingComplete();
+            if (options.json) {
+                console.log(JSON.stringify(members, null, 2));
+            }
+            else {
+                console.log();
+                printSection('App Members');
+                if (members.length === 0) {
+                    printInfo('No members found');
+                }
+                else {
+                    members.forEach((member) => {
+                        const name = [member.firstName, member.lastName].filter(Boolean).join(' ') || 'N/A';
+                        printBox([
+                            `Email:   ${member.email}`,
+                            `Name:    ${name}`,
+                            `Role:    ${brand.accent(member.role)}`,
+                            `Joined:  ${new Date(member.joinedAt).toLocaleDateString()}`,
+                            `ID:      ${brand.muted(member.userId)}`,
+                        ]);
+                        console.log();
+                    });
+                }
+            }
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to list members');
+            process.exit(1);
+        }
+    });
+    // Add member
+    membersCmd
+        .command('add <appId> <userId>')
+        .description('Add a member to the app')
+        .option('-r, --role <role>', 'Role to assign (default: app_member)')
+        .action(async (appId, userId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            printLoading('Adding member');
+            await api.apps.addMember(appId, userId, options.role);
+            printLoadingComplete();
+            console.log();
+            printSuccess('Member added to app');
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to add member');
+            process.exit(1);
+        }
+    });
+    // Update member role
+    membersCmd
+        .command('update-role <appId> <userId> <role>')
+        .description('Update member role (app_admin, app_member, app_viewer)')
+        .action(async (appId, userId, role) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            const validRoles = ['app_admin', 'app_member', 'app_viewer'];
+            if (!validRoles.includes(role)) {
+                printError(`Invalid role. Must be one of: ${validRoles.join(', ')}`);
+                process.exit(1);
+            }
+            printLoading('Updating member role');
+            await api.apps.updateMemberRole(appId, userId, role);
+            printLoadingComplete();
+            console.log();
+            printSuccess(`Member role updated to: ${role}`);
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to update member role');
+            process.exit(1);
+        }
+    });
+    // Remove member
+    membersCmd
+        .command('remove <appId> <userId>')
+        .description('Remove a member from the app')
+        .action(async (appId, userId) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            printLoading('Removing member');
+            await api.apps.removeMember(appId, userId);
+            printLoadingComplete();
+            console.log();
+            printSuccess('Member removed from app');
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to remove member');
+            process.exit(1);
+        }
+    });
+    // ============================================================================
+    // INVITATIONS SUBCOMMAND
+    // ============================================================================
+    const invitesCmd = appCmd
+        .command('invites')
+        .description('Manage app invitations');
+    // List invitations
+    invitesCmd
+        .command('list <appId>')
+        .alias('ls')
+        .description('List app invitations')
+        .option('--json', 'Output as JSON')
+        .action(async (appId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            printLoading('Fetching invitations');
+            const invitations = await api.apps.listInvitations(appId);
+            printLoadingComplete();
+            if (options.json) {
+                console.log(JSON.stringify(invitations, null, 2));
+            }
+            else {
+                console.log();
+                printSection('App Invitations');
+                if (invitations.length === 0) {
+                    printInfo('No invitations found. Create one with "sentron app invites create <appId>"');
+                }
+                else {
+                    invitations.forEach((inv) => {
+                        printBox([
+                            `Email:    ${inv.email || 'N/A'}`,
+                            `Role:     ${brand.accent(inv.role)}`,
+                            `Status:   ${inv.status}`,
+                            `Expires:  ${new Date(inv.expiresAt).toLocaleDateString()}`,
+                            `ID:       ${brand.muted(inv.id)}`,
+                        ]);
+                        console.log();
+                    });
+                }
+            }
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to list invitations');
+            process.exit(1);
+        }
+    });
+    // Create invitation
+    invitesCmd
+        .command('create <appId>')
+        .description('Invite a user to the app (will also invite to org if not a member)')
+        .option('-e, --email <email>', 'Email to invite')
+        .option('-r, --role <role>', 'App role (app_admin, app_member, app_viewer)', 'app_member')
+        .option('-o, --org-role <orgRole>', 'Organization role if not a member (admin, manager, member)', 'member')
+        .action(async (appId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            const email = options.email || await prompt(printPrompt('Email to invite'));
+            if (!email) {
+                printError('Email is required');
+                process.exit(1);
+            }
+            const validRoles = ['app_admin', 'app_member', 'app_viewer'];
+            if (!validRoles.includes(options.role)) {
+                printError(`Invalid role. Must be one of: ${validRoles.join(', ')}`);
+                process.exit(1);
+            }
+            const validOrgRoles = ['admin', 'manager', 'member'];
+            if (!validOrgRoles.includes(options.orgRole)) {
+                printError(`Invalid org role. Must be one of: ${validOrgRoles.join(', ')}`);
+                process.exit(1);
+            }
+            printLoading('Creating invitation');
+            const invitation = await api.apps.createInvitation(appId, email, options.role, options.orgRole);
+            printLoadingComplete();
+            console.log();
+            printSection('Invitation Sent');
+            printBox([
+                `Email:    ${email}`,
+                `Role:     ${brand.accent(options.role)}`,
+                `Status:   ${invitation.status}`,
+                invitation.status === 'pending_org'
+                    ? 'Note:     User will need to accept organization invitation first'
+                    : '',
+            ].filter(Boolean));
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to create invitation');
+            process.exit(1);
+        }
+    });
+    // Batch invite
+    invitesCmd
+        .command('batch <appId>')
+        .description('Invite multiple people to the app (max 50)')
+        .option('-e, --emails <emails>', 'Comma-separated list of emails')
+        .option('-f, --file <path>', 'CSV file with columns: email,role,organizationRole')
+        .option('-r, --role <role>', 'Default app role for all (app_admin, app_member, app_viewer)', 'app_member')
+        .option('-o, --org-role <orgRole>', 'Default org role if not a member (admin, manager, member)', 'member')
+        .option('--json', 'Output as JSON')
+        .action(async (appId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            // Validate roles
+            const validAppRoles = ['app_admin', 'app_member', 'app_viewer'];
+            const validOrgRoles = ['admin', 'manager', 'member'];
+            if (!validAppRoles.includes(options.role)) {
+                printError(`Invalid app role. Must be one of: ${validAppRoles.join(', ')}`);
+                process.exit(1);
+            }
+            if (!validOrgRoles.includes(options.orgRole)) {
+                printError(`Invalid org role. Must be one of: ${validOrgRoles.join(', ')}`);
+                process.exit(1);
+            }
+            // Get invitations from either --emails or --file
+            let invitations = [];
+            if (options.file) {
+                // Read from CSV file
+                const fs = await import('fs');
+                const path = await import('path');
+                const filePath = path.resolve(options.file);
+                if (!fs.existsSync(filePath)) {
+                    printError(`File not found: ${options.file}`);
+                    process.exit(1);
+                }
+                const content = fs.readFileSync(filePath, 'utf-8');
+                const lines = content.trim().split('\n');
+                // Check if first line is header
+                const firstLine = lines[0].toLowerCase();
+                const hasHeader = firstLine.includes('email') || firstLine.includes('role');
+                const dataLines = hasHeader ? lines.slice(1) : lines;
+                for (const line of dataLines) {
+                    const trimmed = line.trim();
+                    if (!trimmed)
+                        continue;
+                    const parts = trimmed.split(',').map(s => s.trim());
+                    const email = parts[0];
+                    const role = parts[1] || options.role;
+                    const organizationRole = parts[2] || options.orgRole;
+                    if (!email)
+                        continue;
+                    if (!validAppRoles.includes(role)) {
+                        printError(`Invalid app role "${role}" for email ${email}. Must be one of: ${validAppRoles.join(', ')}`);
+                        process.exit(1);
+                    }
+                    invitations.push({ email, role, organizationRole });
+                }
+            }
+            else if (options.emails) {
+                // Parse from comma-separated string
+                const emails = options.emails.split(',').map((e) => e.trim()).filter(Boolean);
+                invitations = emails.map((email) => ({
+                    email,
+                    role: options.role,
+                    organizationRole: options.orgRole
+                }));
+            }
+            else {
+                // Interactive mode - prompt for emails
+                const input = await prompt(printPrompt('Enter emails (comma-separated)'));
+                if (!input) {
+                    printError('No emails provided');
+                    process.exit(1);
+                }
+                const emails = input.split(',').map(e => e.trim()).filter(Boolean);
+                invitations = emails.map(email => ({
+                    email,
+                    role: options.role,
+                    organizationRole: options.orgRole
+                }));
+            }
+            if (invitations.length === 0) {
+                printError('No invitations to send');
+                process.exit(1);
+            }
+            if (invitations.length > 50) {
+                printError('Maximum 50 invitations per batch. Split into multiple batches.');
+                process.exit(1);
+            }
+            printLoading(`Creating ${invitations.length} invitation(s)`);
+            const result = await api.apps.batchInvite(appId, invitations);
+            printLoadingComplete();
+            if (options.json) {
+                console.log(JSON.stringify(result, null, 2));
+            }
+            else {
+                console.log();
+                printSection('Batch App Invite Results');
+                // Summary
+                printBox([
+                    `Total:      ${result.summary.total}`,
+                    `Successful: ${brand.success(result.summary.successful.toString())}`,
+                    `Failed:     ${result.summary.failed > 0 ? brand.error(result.summary.failed.toString()) : result.summary.failed}`,
+                ]);
+                // Show chained invites info
+                const chainedCount = result.created.filter(c => c.orgInviteCreated).length;
+                if (chainedCount > 0) {
+                    console.log();
+                    printInfo(`${chainedCount} user(s) will also be invited to the organization`);
+                }
+                // Show failures if any
+                if (result.failed.length > 0) {
+                    console.log();
+                    printSection('Failed Invitations');
+                    for (const failed of result.failed) {
+                        console.log(`  ${brand.error('✗')} ${failed.email}`);
+                        console.log(`    ${brand.muted(failed.error?.message || 'Unknown error')}`);
+                    }
+                }
+                // Show successes
+                if (result.created.length > 0) {
+                    console.log();
+                    printSection('Invitations Sent');
+                    for (const created of result.created) {
+                        const note = created.orgInviteCreated ? ' (+ org invite)' : '';
+                        console.log(`  ${brand.success('✓')} ${created.email}${brand.muted(note)}`);
+                    }
+                }
+                console.log();
+                printInfo(`Run "sentron app invites list ${appId}" to see all pending invitations`);
+            }
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to create batch invitations');
+            process.exit(1);
+        }
+    });
+    // Cancel invitation
+    invitesCmd
+        .command('cancel <appId> <invitationId>')
+        .alias('revoke')
+        .description('Cancel/revoke an app invitation')
+        .action(async (appId, invitationId) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            printLoading('Cancelling invitation');
+            await api.apps.revokeInvitation(appId, invitationId);
+            printLoadingComplete();
+            console.log();
+            printSuccess('Invitation cancelled');
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to cancel invitation');
+            process.exit(1);
+        }
+    });
+    // Resend invitation
+    invitesCmd
+        .command('resend <appId> <invitationId>')
+        .description('Resend an app invitation (resets expiration)')
+        .action(async (appId, invitationId) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            printLoading('Resending invitation');
+            await api.apps.resendInvitation(appId, invitationId);
+            printLoadingComplete();
+            console.log();
+            printSuccess('Invitation resent');
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to resend invitation');
+            process.exit(1);
+        }
+    });
+    // ============================================================================
+    // JOIN REQUESTS SUBCOMMAND
+    // ============================================================================
+    const requestsCmd = appCmd
+        .command('requests')
+        .description('Manage app join requests');
+    // List join requests
+    requestsCmd
+        .command('list <appId>')
+        .alias('ls')
+        .description('List join requests for an app')
+        .option('--json', 'Output as JSON')
+        .action(async (appId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            printLoading('Fetching join requests');
+            const requests = await api.apps.listJoinRequests(appId);
+            printLoadingComplete();
+            if (options.json) {
+                console.log(JSON.stringify(requests, null, 2));
+            }
+            else {
+                console.log();
+                printSection('App Join Requests');
+                if (requests.length === 0) {
+                    printInfo('No join requests found');
+                }
+                else {
+                    requests.forEach((req) => {
+                        printBox([
+                            `Email:     ${req.email || 'N/A'}`,
+                            `Status:    ${req.status}`,
+                            req.message ? `Message:   ${req.message}` : '',
+                            `Requested: ${new Date(req.createdAt).toLocaleDateString()}`,
+                            `ID:        ${brand.muted(req.id)}`,
+                            `User ID:   ${brand.muted(req.userId)}`,
+                        ].filter(Boolean));
+                        console.log();
+                    });
+                }
+            }
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to list join requests');
+            process.exit(1);
+        }
+    });
+    // Create join request
+    requestsCmd
+        .command('create <appId>')
+        .description('Request to join an app')
+        .option('-m, --message <message>', 'Optional message with the request')
+        .action(async (appId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            printLoading('Submitting join request');
+            const request = await api.apps.createJoinRequest(appId, options.message);
+            printLoadingComplete();
+            console.log();
+            printSection('Join Request Submitted');
+            printSuccess(`Status: ${request.status}`);
+            printInfo('An admin will review your request');
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to create join request');
+            process.exit(1);
+        }
+    });
+    // Approve join request
+    requestsCmd
+        .command('approve <appId> <requestId>')
+        .description('Approve a join request')
+        .option('-r, --role <role>', 'Role to assign (app_admin, app_member, app_viewer)', 'app_member')
+        .action(async (appId, requestId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            const validRoles = ['app_admin', 'app_member', 'app_viewer'];
+            if (!validRoles.includes(options.role)) {
+                printError(`Invalid role. Must be one of: ${validRoles.join(', ')}`);
+                process.exit(1);
+            }
+            printLoading('Approving join request');
+            await api.apps.handleJoinRequest(appId, requestId, 'approve', options.role);
+            printLoadingComplete();
+            console.log();
+            printSuccess(`Join request approved with role: ${options.role}`);
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to approve join request');
+            process.exit(1);
+        }
+    });
+    // Reject join request
+    requestsCmd
+        .command('reject <appId> <requestId>')
+        .alias('decline')
+        .description('Reject a join request')
+        .action(async (appId, requestId) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            printLoading('Rejecting join request');
+            await api.apps.handleJoinRequest(appId, requestId, 'decline');
+            printLoadingComplete();
+            console.log();
+            printSuccess('Join request rejected');
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error instanceof Error ? error.message : 'Failed to reject join request');
+            process.exit(1);
+        }
+    });
+    // ============================================================================
+    // AUDIT LOGS
+    // ============================================================================
+    const auditCmd = appCmd
+        .command('audit-logs')
+        .alias('activity')
+        .description('View app activity logs');
+    auditCmd
+        .command('list <appId>')
+        .alias('ls')
+        .description('List audit logs for an app')
+        .option('--limit <number>', 'Number of logs to return (default 50, max 100)', '50')
+        .option('--offset <number>', 'Offset for pagination', '0')
+        .option('--action <action>', 'Filter by action type (e.g., app.member.added)')
+        .option('--user <userId>', 'Filter by actor user ID')
+        .option('--from <date>', 'Filter from date (ISO 8601 format)')
+        .option('--to <date>', 'Filter to date (ISO 8601 format)')
+        .option('--json', 'Output as JSON')
+        .action(async (appId, options) => {
+        try {
+            const token = await getStoredToken();
+            if (!token) {
+                printError('Not signed in. Run "sentron auth signin" first.');
+                process.exit(1);
+            }
+            printLoading('Fetching audit logs');
+            const logs = await api.apps.listAuditLogs(appId, {
+                limit: parseInt(options.limit, 10),
+                offset: parseInt(options.offset, 10),
+                action: options.action,
+                userId: options.user,
+                startDate: options.from,
+                endDate: options.to,
+            });
+            printLoadingComplete();
+            if (options.json) {
+                console.log(JSON.stringify(logs, null, 2));
+                return;
+            }
+            console.log();
+            printSection('App Audit Logs');
+            if (logs.length === 0) {
+                printInfo('No audit logs found matching your criteria.');
+            }
+            else {
+                logs.forEach((log) => {
+                    const date = new Date(log.createdAt).toLocaleString();
+                    const action = formatAuditAction(log.action);
+                    const resource = log.resourceType + (log.resourceId ? ` (${log.resourceId.substring(0, 8)}...)` : '');
+                    printBox([
+                        `Action:    ${brand.accent(action)}`,
+                        `Resource:  ${resource}`,
+                        `Actor:     ${log.userId.substring(0, 12)}...`,
+                        `Date:      ${date}`,
+                        log.metadata ? `Details:   ${JSON.stringify(log.metadata)}` : null,
+                    ].filter(Boolean));
+                    console.log();
+                });
+            }
+        }
+        catch (error) {
+            printLoadingError();
+            console.log();
+            printError(error.message || 'Failed to fetch audit logs');
+            process.exit(1);
+        }
+    });
+    // Default action - show help
+    appCmd
+        .action(() => {
+        console.log();
+        printSection('App Commands');
+        printInfo('Use "sentron app list <orgId>" to list apps');
+        printInfo('Use "sentron app create <orgId>" to create an app');
+        printInfo('Use "sentron app members list <appId>" to list members');
+        printInfo('Use "sentron app invites list <appId>" to list invitations');
+        printInfo('Use "sentron app requests list <appId>" to list join requests');
+        printInfo('Use "sentron app audit-logs list <appId>" to view activity');
+        printInfo('Use "sentron app --help" for all options');
+    });
+}
+/**
+ * Format audit action for display
+ */
+function formatAuditAction(action) {
+    // Convert action like "app.member.added" to "Member Added"
+    const parts = action.split('.');
+    if (parts.length >= 2) {
+        const subject = parts[parts.length - 2];
+        const verb = parts[parts.length - 1];
+        return `${capitalize(subject)} ${capitalize(verb)}`;
+    }
+    return action;
+}
+function capitalize(str) {
+    return str.charAt(0).toUpperCase() + str.slice(1);
+}
+//# sourceMappingURL=app.js.map