hookstride-cli 0.2.0__py3-none-any.whl → 0.3.0__py3-none-any.whl

hookstride_cli/__init__.py

@@ -1,3 +1,3 @@
 """Hookstride developer CLI."""
 
-__version__ = "0.2.0"
+__version__ = "0.3.0"

hookstride_cli/console.py

@@ -1,8 +1,7 @@
-"""Interactive, read-only Hookstride console.
+"""Interactive Hookstride console with allowlisted project and destination writes.
 
-The console intentionally does not execute shell commands. It uses the same
-project-scoped Control API commands as the CLI, keeps tokens only in memory,
-and stores no history on disk.
+The console never executes shell commands, retains tokens only in memory,
+and stores no command history on disk.
 """
 
 from __future__ import annotations
@@ -25,11 +24,11 @@ from typer.main import get_command
 from . import main as cli
 
 # Only these typed commands may execute through the console.
-# Future write actions must be explicitly reviewed, not implicitly unlocked.
-READ_COMMANDS: dict[str, set[str]] = {
+# Write actions are intentionally allowlisted, never automatically unlocked.
+ALLOWED_COMMANDS: dict[str, set[str]] = {
     "auth": {"status"},
-    "projects": {"list", "use"},
-    "destinations": {"list"},
+    "projects": {"list", "use", "create", "update"},
+    "destinations": {"list", "create", "update"},
     "keys": {"list"},
     "events": {"list", "show"},
     "billing": {"status", "history"},
@@ -38,7 +37,7 @@ READ_COMMANDS: dict[str, set[str]] = {
 }
 ROOT_COMMANDS = {"status", "stats"}
 
-# Aliases that feel like a familiar operator console, but remain read-only.
+# Aliases that feel like a familiar operator console.
 SHOW_TARGETS: dict[str, tuple[str, ...] | None] = {
     "options": None,
     "projects": ("projects", "list"),
@@ -72,6 +71,8 @@ COMMAND_COMPLETIONS = sorted(
         *SAFE_HISTORY_COMMANDS,
         "use ", "projects use ", "events show ", "events list --status ",
         "events list --origin ", "events list --page ", "set project ",
+        "projects create --name ", "projects update ",
+        "destinations create --name ", "destinations update ",
         "set env ", "json ", "show ", "auth ",
     }
 )
@@ -194,6 +195,8 @@ class HookstrideConsole:
             "[bold]help[/bold]                  Show console help\n"
             "[bold]show options[/bold]          Display environment, project and authentication\n"
             "[bold]show projects[/bold]         List accessible projects\n"
+            "[bold]projects create --name N --account UUID[/bold]   Create a project\n"
+            "[bold]projects update UUID --name N[/bold]     Rename a project\n"
             "[bold]use UUID[/bold]              Select a project (also saves preference)\n"
             "[bold]back[/bold]                  Leave the active project context\n"
             "[bold]set env dev[/bold]           Switch to development API\n"
@@ -202,6 +205,8 @@ class HookstrideConsole:
             "[bold]auth logout[/bold]           Clear the current environment's session token\n"
             "[bold]auth status[/bold]           Validate current token\n"
             "[bold]show destinations[/bold]     Inspect outgoing webhooks\n"
+            "[bold]destinations create --name N --url HTTPS_URL[/bold]   Add receiver\n"
+            "[bold]destinations update UUID --pause[/bold]   Pause a receiver\n"
             "[bold]show events[/bold]           View recent events\n"
             "[bold]events list --status failed[/bold]   Filter delivery history\n"
             "[bold]events show UUID[/bold]      Inspect a delivery and attempts\n"
@@ -223,7 +228,6 @@ class HookstrideConsole:
             ["API", self.session.origin],
             ["Project", project],
             ["Authenticated token", "configured" if self._current_token() else "missing"],
-            ["Mode", "read-only"],
         ]
         cli._table(_FakeContext(self.session), "Session options", ["Setting", "Value"], rows)
 
@@ -294,7 +298,7 @@ class HookstrideConsole:
         self._write("[green]✓[/green] Signed out for this console environment.")
 
     def _execute_cli(self, args: list[str], *, json_output: bool = False) -> None:
-        """Invoke existing read-only Click/Typer commands, never a shell."""
+        """Invoke explicitly allowed Click/Typer commands, never a shell."""
         if not _allowed_cli(args):
             raise cli.CLIError("Unknown or unavailable command. Type 'help'.")
         group = args[0]
@@ -382,7 +386,7 @@ class HookstrideConsole:
 
     def run(self) -> None:
         self._write(
-            "\n[bold cyan]HOOKSTRIDE[/bold cyan] [dim]CONSOLE v0.2[/dim]\n"
+            f"\n[bold cyan]HOOKSTRIDE[/bold cyan] [dim]CONSOLE v{cli.VERSION}[/dim]\n"
             "[dim]Type 'help' for commands, 'auth login' for a token, "
             "or 'exit' to quit.[/dim]\n"
         )
@@ -431,8 +435,8 @@ def _allowed_cli(parts: list[str]) -> bool:
         return len(parts) == 1
     return (
         len(parts) >= 2
-        and parts[0] in READ_COMMANDS
-        and parts[1] in READ_COMMANDS[parts[0]]
+        and parts[0] in ALLOWED_COMMANDS
+        and parts[1] in ALLOWED_COMMANDS[parts[0]]
     )
 
 

hookstride_cli/main.py

@@ -1,6 +1,6 @@
-"""Hookstride CLI: developer-friendly, project-scoped Control API inspection.
+"""Hookstride CLI: project-scoped Control API management.
 
-Read-only commands use control tokens. This module never persists a token.
+Commands use Control API tokens. This module never persists a token.
 """
 
 from __future__ import annotations
@@ -24,20 +24,22 @@ from rich.markup import escape
 from rich.panel import Panel
 from rich.text import Text
 
-VERSION = "0.2.0"
+from . import __version__
+
+VERSION = __version__
 ORIGINS = {
-    "dev": "https://api-dev.hookstride.voteeasy.net",
-    "production": "https://api.hookstride.voteeasy.net",
+    "dev": "https://api-dev.hookstride.com",
+    "production": "https://api.hookstride.com",
 }
 app = typer.Typer(
-    help="Hookstride · inspect your projects and webhook deliveries.",
+    help="Hookstride · manage projects and webhook destinations.",
     add_completion=False,
     no_args_is_help=False,
     pretty_exceptions_show_locals=False,
 )
 auth_app = typer.Typer(help="Check Control API authentication.")
-projects_app = typer.Typer(help="List and select a workspace project.")
-destinations_app = typer.Typer(help="Inspect configured webhook destinations.")
+projects_app = typer.Typer(help="List, create, update and select workspace projects.")
+destinations_app = typer.Typer(help="List, create and update webhook destinations.")
 events_app = typer.Typer(help="Inspect delivery history and attempts.")
 billing_app = typer.Typer(help="Inspect project-isolated billing.")
 incoming_app = typer.Typer(help="Inspect incoming webhook sources.")
@@ -59,8 +61,12 @@ class CLIError(Exception):
 
 class Session:
     def __init__(
-        self, environment: str, api_url: str | None, project: str | None,
-        json_output: bool, no_color: bool,
+        self,
+        environment: str,
+        api_url: str | None,
+        project: str | None,
+        json_output: bool,
+        no_color: bool,
     ) -> None:
         if environment not in ORIGINS:
             raise CLIError("Choose --env dev or --env production.")
@@ -69,7 +75,8 @@ class Session:
         self.project = _uuid(project) if project else None
         self.json_output = json_output
         self.console = Console(
-            stderr=False, no_color=no_color or json_output,
+            stderr=False,
+            no_color=no_color or json_output,
             force_terminal=False if json_output else None,
         )
 
@@ -81,10 +88,17 @@ def _origin(value: str) -> str:
         port = parts.port
         hostname = parts.hostname
     except ValueError:
-        raise CLIError("Invalid API origin. Specify a hostname and valid port.") from None
+        raise CLIError(
+            "Invalid API origin. Specify a hostname and valid port."
+        ) from None
     if (
-        not hostname or port == 0 or parts.username or parts.password
-        or parts.query or parts.fragment or parts.path not in ("", "/")
+        not hostname
+        or port == 0
+        or parts.username
+        or parts.password
+        or parts.query
+        or parts.fragment
+        or parts.path not in ("", "/")
     ):
         raise CLIError("API URL must be an origin, without path, credentials or query.")
     if parts.scheme != "https" and not (
@@ -98,13 +112,15 @@ def _uuid(value: str) -> str:
     try:
         return str(uuid.UUID(value))
     except (ValueError, AttributeError) as exc:
-        raise CLIError("Expected a valid project or event UUID.") from exc
+        raise CLIError("Expected a valid UUID.") from exc
 
 
 def _config_file() -> Path:
     configured = os.environ.get("HOOKSTRIDE_CONFIG_FILE")
-    return Path(configured).expanduser() if configured else (
-        Path.home() / ".config" / "hookstride" / "settings.json"
+    return (
+        Path(configured).expanduser()
+        if configured
+        else (Path.home() / ".config" / "hookstride" / "settings.json")
     )
 
 
@@ -156,7 +172,9 @@ def _project(ctx: typer.Context) -> str:
     saved = _read_config().get("projects", {})
     selected = saved.get(session.environment) if isinstance(saved, dict) else None
     if not selected:
-        raise CLIError("Select a project with 'hookstride projects use UUID' or --project UUID.")
+        raise CLIError(
+            "Select a project with 'hookstride projects use UUID' or --project UUID."
+        )
     return _uuid(selected)
 
 
@@ -171,23 +189,39 @@ def _token() -> str:
 
 
 def _request(
-    session: Session, path: str, *,
-    authenticate: bool = True, params: dict[str, Any] | None = None,
+    session: Session,
+    path: str,
+    *,
+    authenticate: bool = True,
+    params: dict[str, Any] | None = None,
+    method: str = "GET",
+    json_body: dict[str, Any] | None = None,
 ) -> Any:
+    if method not in {"GET", "POST", "PATCH"}:
+        raise CLIError("Unsupported API request method.")
     headers = {"Accept": "application/json"}
     if authenticate:
         headers["Authorization"] = "Bearer " + _token()
     try:
         with httpx.Client(
-            base_url=session.origin, headers=headers, timeout=15,
+            base_url=session.origin,
+            headers=headers,
+            timeout=15,
             follow_redirects=False,
         ) as client:
-            response = client.get(path, params=params)
+            if method == "GET":
+                response = client.get(path, params=params)
+            else:
+                response = client.request(method, path, json=json_body)
     except (httpx.HTTPError, httpx.InvalidURL, ValueError):
         # Never print provider errors: transport exceptions may include headers.
-        raise CLIError("Unable to reach the Hookstride API. Check the URL and connection.") from None
+        raise CLIError(
+            "Unable to reach the Hookstride API. Check the URL and connection."
+        ) from None
     if response.status_code == 401:
-        raise CLIError("Authentication rejected. Check that your control token is valid.")
+        raise CLIError(
+            "Authentication rejected. Check that your control token is valid."
+        )
     if response.status_code == 403:
         raise CLIError("Access denied for this account or project (HTTP 403).")
     if response.status_code == 404:
@@ -244,16 +278,26 @@ def _escaped(value: Any) -> str:
 def _colored_status(value: Any) -> Text:
     label = _safe_terminal_text(value or "unknown")
     style = {
-        "active": "green", "delivered": "green", "succeeded": "green",
-        "success": "green", "failed": "red", "revoked": "red",
-        "abandoned": "yellow", "pending": "yellow", "delivering": "cyan",
+        "active": "green",
+        "delivered": "green",
+        "succeeded": "green",
+        "success": "green",
+        "failed": "red",
+        "revoked": "red",
+        "abandoned": "yellow",
+        "pending": "yellow",
+        "delivering": "cyan",
     }.get(label.lower(), "white")
     return Text(label.upper(), style=style)
 
 
 def _table(
-    ctx: typer.Context, title: str, columns: list[str],
-    rows: list[list[Any]], *, status_column: int | None = None,
+    ctx: typer.Context,
+    title: str,
+    columns: list[str],
+    rows: list[list[Any]],
+    *,
+    status_column: int | None = None,
 ) -> None:
     """Render Metasploit-style columns without borders or wrapped identifiers."""
     session = _session(ctx)
@@ -278,19 +322,18 @@ def _table(
     # Keep names, dates, plans and statuses readable. On narrow terminals,
     # trim identifiers/references first instead of wrapping them across lines.
     priority = [
-        100 if ("id" in header.lower() or "reference" in header.lower())
-        else 50 if header.lower() in {"url", "error"}
-        else 0
+        (
+            100
+            if ("id" in header.lower() or "reference" in header.lower())
+            else 50 if header.lower() in {"url", "error"} else 0
+        )
         for header in columns
     ]
     minimums = [
-        min(width, 8 if priority[i] == 100 else 4)
-        for i, width in enumerate(widths)
+        min(width, 8 if priority[i] == 100 else 4) for i, width in enumerate(widths)
     ]
     while sum(widths) + gap * (len(widths) - 1) > available:
-        candidates = [
-            i for i in range(len(widths)) if widths[i] > minimums[i]
-        ]
+        candidates = [i for i in range(len(widths)) if widths[i] > minimums[i]]
         if not candidates:
             break
         index = max(candidates, key=lambda i: (priority[i], widths[i] - minimums[i]))
@@ -312,7 +355,9 @@ def _table(
         return result
 
     session.console.print(row_text([Text(col) for col in columns]), highlight=False)
-    session.console.print(row_text([Text("-" * size) for size in widths]), highlight=False)
+    session.console.print(
+        row_text([Text("-" * size) for size in widths]), highlight=False
+    )
     for values in styled_rows:
         session.console.print(row_text(values), highlight=False)
 
@@ -329,8 +374,13 @@ def _entries(data: Any, label: str) -> list[dict[str, Any]]:
 
 
 def _print_or_table(
-    ctx: typer.Context, data: Any, title: str, columns: list[str],
-    rows: list[list[Any]], *, status_column: int | None = None,
+    ctx: typer.Context,
+    data: Any,
+    title: str,
+    columns: list[str],
+    rows: list[list[Any]],
+    *,
+    status_column: int | None = None,
 ) -> None:
     if _session(ctx).json_output:
         _print(ctx, data)
@@ -340,7 +390,7 @@ def _print_or_table(
 
 @app.command("console")
 def console_entry(ctx: typer.Context) -> None:
-    """Start the interactive read-only Hookstride operator console."""
+    """Start the interactive Hookstride operator console."""
     from .console import run_console
 
     run_console(_session(ctx))
@@ -349,12 +399,20 @@ def console_entry(ctx: typer.Context) -> None:
 @app.callback(invoke_without_command=True)
 def root(
     ctx: typer.Context,
-    env: str = typer.Option("dev", "--env", help="dev or production."),
-    api_url: str | None = typer.Option(None, "--api-url", help="Override the API origin."),
-    project: str | None = typer.Option(None, "--project", help="Project UUID override."),
-    json_output: bool = typer.Option(False, "--json", help="Machine-readable JSON, no styling."),
+    env: str = typer.Option("production", "--env", help="production (default) or dev."),
+    api_url: str | None = typer.Option(
+        None, "--api-url", help="Override the API origin."
+    ),
+    project: str | None = typer.Option(
+        None, "--project", help="Project UUID override."
+    ),
+    json_output: bool = typer.Option(
+        False, "--json", help="Machine-readable JSON, no styling."
+    ),
     no_color: bool = typer.Option(False, "--no-color", help="Disable ANSI colors."),
-    version: bool = typer.Option(False, "--version", is_eager=True, help="Show CLI version."),
+    version: bool = typer.Option(
+        False, "--version", is_eager=True, help="Show CLI version."
+    ),
 ) -> None:
     if version:
         typer.echo(f"hookstride {VERSION}")
@@ -410,7 +468,9 @@ def status(ctx: typer.Context) -> None:
     color = "green" if online else "red"
     label = "Online" if online else "Offline"
     session.console.print(
-        Panel.fit(f"[{color}]● {label}[/{color}]", title="Hookstride", border_style=color)
+        Panel.fit(
+            f"[{color}]● {label}[/{color}]", title="Hookstride", border_style=color
+        )
     )
     if not online:
         raise typer.Exit(code=1)
@@ -425,12 +485,15 @@ def auth_status(ctx: typer.Context) -> None:
         _print(ctx, {"authenticated": True, "email": data.get("user", {}).get("email")})
         return
     user = data.get("user", {})
-    _session(ctx).console.print(Panel.fit(
-        f"[green]✓ Authenticated[/green]\n"
-        f"Account: {_escaped(user.get('email'))}\n"
-        f"Workspace memberships: {len(data.get('memberships', []))}",
-        title="Control API", border_style="green",
-    ))
+    _session(ctx).console.print(
+        Panel.fit(
+            f"[green]✓ Authenticated[/green]\n"
+            f"Account: {_escaped(user.get('email'))}\n"
+            f"Workspace memberships: {len(data.get('memberships', []))}",
+            title="Control API",
+            border_style="green",
+        )
+    )
 
 
 @projects_app.command("list")
@@ -439,15 +502,27 @@ def projects_list(ctx: typer.Context) -> None:
     data = _request(_session(ctx), "/control/v1/projects/")
     items = _entries(data, "projects")
     _print_or_table(
-        ctx, data, "Projects", ["Name", "Workspace", "Role", "Plan", "Project ID"],
-        [[p.get("name"), p.get("account_name"), p.get("role"),
-          (p.get("subscription") or {}).get("plan_code"), p.get("id")]
-         for p in items],
+        ctx,
+        data,
+        "Projects",
+        ["Name", "Workspace", "Role", "Plan", "Project ID"],
+        [
+            [
+                p.get("name"),
+                p.get("account_name"),
+                p.get("role"),
+                (p.get("subscription") or {}).get("plan_code"),
+                p.get("id"),
+            ]
+            for p in items
+        ],
     )
 
 
 @projects_app.command("use")
-def projects_use(ctx: typer.Context, project_id: str = typer.Argument(..., help="Project UUID.")) -> None:
+def projects_use(
+    ctx: typer.Context, project_id: str = typer.Argument(..., help="Project UUID.")
+) -> None:
     """Choose a default project for this environment (only saves its UUID)."""
     session = _session(ctx)
     project_id = _uuid(project_id)
@@ -466,13 +541,170 @@ def projects_use(ctx: typer.Context, project_id: str = typer.Argument(..., help=
 def destinations_list(ctx: typer.Context, page: int = typer.Option(1, min=1)) -> None:
     """List the selected project's outgoing destinations."""
     project = _project(ctx)
-    data = _request(_session(ctx), f"/control/v1/projects/{project}/destinations/", params={"page": page})
+    data = _request(
+        _session(ctx),
+        f"/control/v1/projects/{project}/destinations/",
+        params={"page": page},
+    )
     items = _entries(data, "destinations")
     _print_or_table(
-        ctx, data, "Destinations", ["Name", "URL", "Active", "Destination ID"],
-        [[x.get("name"), x.get("url"), "yes" if x.get("is_active") else "no", x.get("id")]
-         for x in items],
+        ctx,
+        data,
+        "Destinations",
+        ["Name", "URL", "Active", "Destination ID"],
+        [
+            [
+                x.get("name"),
+                x.get("url"),
+                "yes" if x.get("is_active") else "no",
+                x.get("id"),
+            ]
+            for x in items
+        ],
+    )
+
+
+def _name(value: str, label: str) -> str:
+    value = value.strip()
+    if not value or len(value) > 120:
+        raise CLIError(f"{label} must be between 1 and 120 characters.")
+    return value
+
+
+def _webhook_url(value: str) -> str:
+    """Basic local validation; the server also enforces public-URL SSRF policy."""
+    if len(value) > 500:
+        raise CLIError("Destination URL must not exceed 500 characters.")
+    try:
+        url = urlsplit(value)
+        port = url.port
+        hostname = url.hostname
+    except ValueError:
+        raise CLIError("Invalid destination HTTPS URL.") from None
+    if (
+        url.scheme != "https"
+        or not hostname
+        or port == 0
+        or url.username
+        or url.password
+        or url.fragment
+        or any(ch.isspace() for ch in value)
+    ):
+        raise CLIError("Destination must have a valid public HTTPS URL without credentials or fragment.")
+    return value
+
+
+def _result(ctx: typer.Context, title: str, data: Any, *, secret: str | None = None) -> None:
+    if not isinstance(data, dict):
+        raise CLIError("Unexpected API response.")
+    if _session(ctx).json_output:
+        _print(ctx, data)
+        return
+    session = _session(ctx)
+    session.console.print(f"[green]✓[/green] {title}")
+    for key in ("id", "name", "slug", "url", "is_active", "account_name"):
+        if key in data:
+            session.console.print(f"  {key.replace('_', ' ').title()}: {_escaped(data[key])}")
+    if secret is not None:
+        # Shown once and never saved to the CLI config or command history.
+        session.console.print("[yellow]Signing secret (save this now; it cannot be retrieved later):[/yellow]")
+        session.console.print(_plain(secret), highlight=False)
+
+
+@projects_app.command("create")
+def projects_create(
+    ctx: typer.Context,
+    name: str = typer.Option(..., "--name", help="New project name."),
+    account: str = typer.Option(..., "--account", help="Workspace account UUID from projects list."),
+    slug: str | None = typer.Option(None, "--slug", help="Optional project slug."),
+) -> None:
+    """Create a project in a workspace where you are an admin or owner."""
+    payload = {"account_id": _uuid(account), "name": _name(name, "Project name")}
+    if slug is not None:
+        if not slug.strip():
+            raise CLIError("Project slug cannot be blank.")
+        payload["slug"] = slug.strip()
+    data = _request(_session(ctx), "/control/v1/projects/", method="POST", json_body=payload)
+    _result(ctx, "Project created", data)
+
+
+@projects_app.command("update")
+def projects_update(
+    ctx: typer.Context,
+    project_id: str = typer.Argument(..., help="Project UUID."),
+    name: str | None = typer.Option(None, "--name", help="New project name."),
+    slug: str | None = typer.Option(None, "--slug", help="New project slug."),
+) -> None:
+    """Rename a project or update its slug (admin/owner only)."""
+    changes: dict[str, Any] = {}
+    if name is not None:
+        changes["name"] = _name(name, "Project name")
+    if slug is not None:
+        if not slug.strip():
+            raise CLIError("Project slug cannot be blank.")
+        changes["slug"] = slug.strip()
+    if not changes:
+        raise CLIError("Specify --name and/or --slug.")
+    project_id = _uuid(project_id)
+    data = _request(
+        _session(ctx), f"/control/v1/projects/{project_id}/",
+        method="PATCH", json_body=changes,
+    )
+    _result(ctx, "Project updated", data)
+
+
+@destinations_app.command("create")
+def destinations_create(
+    ctx: typer.Context,
+    name: str = typer.Option(..., "--name", help="Destination name."),
+    url: str = typer.Option(..., "--url", help="Public HTTPS webhook receiver."),
+) -> None:
+    """Create a destination and display its signing secret exactly once."""
+    project = _project(ctx)
+    data = _request(
+        _session(ctx), f"/control/v1/projects/{project}/destinations/",
+        method="POST", json_body={"name": _name(name, "Destination name"), "url": _webhook_url(url)},
+    )
+    if not isinstance(data, dict) or not isinstance(data.get("destination"), dict):
+        raise CLIError("Unexpected destination creation response.")
+    secret = data.get("signing_secret")
+    if not isinstance(secret, str) or not secret:
+        raise CLIError("Destination created but the signing secret was not returned. Rotate it in the dashboard.")
+    if _session(ctx).json_output:
+        _print(ctx, data)
+    else:
+        _result(ctx, "Destination created", data["destination"], secret=secret)
+
+
+@destinations_app.command("update")
+def destinations_update(
+    ctx: typer.Context,
+    destination_id: str = typer.Argument(..., help="Destination UUID."),
+    name: str | None = typer.Option(None, "--name", help="New destination name."),
+    url: str | None = typer.Option(None, "--url", help="New public HTTPS receiver."),
+    pause: bool = typer.Option(False, "--pause", help="Pause delivery to this destination."),
+    resume: bool = typer.Option(False, "--resume", help="Resume delivery to this destination."),
+) -> None:
+    """Update a destination in the selected project (developer role or above)."""
+    if pause and resume:
+        raise CLIError("Choose --pause or --resume, not both.")
+    changes: dict[str, Any] = {}
+    if name is not None:
+        changes["name"] = _name(name, "Destination name")
+    if url is not None:
+        changes["url"] = _webhook_url(url)
+    if pause or resume:
+        changes["is_active"] = bool(resume)
+    if not changes:
+        raise CLIError("Specify --name, --url, --pause, or --resume.")
+    destination_id = _uuid(destination_id)
+    project = _project(ctx)
+    data = _request(
+        _session(ctx),
+        f"/control/v1/projects/{project}/destinations/{destination_id}/",
+        method="PATCH", json_body=changes,
     )
+    _result(ctx, "Destination updated", data)
 
 
 @keys_app.command("list")
@@ -482,12 +714,20 @@ def keys_list(ctx: typer.Context) -> None:
     data = _request(_session(ctx), f"/control/v1/projects/{project}/api-keys/")
     items = _entries(data, "API keys")
     _print_or_table(
-        ctx, data, "API keys",
+        ctx,
+        data,
+        "API keys",
         ["Name", "Masked key", "Enabled", "Expires", "Key ID"],
-        [[key.get("name"), key.get("masked_key"),
-          "yes" if key.get("is_active") else "no",
-          _date(key.get("expires_at")), key.get("id")]
-         for key in items],
+        [
+            [
+                key.get("name"),
+                key.get("masked_key"),
+                "yes" if key.get("is_active") else "no",
+                _date(key.get("expires_at")),
+                key.get("id"),
+            ]
+            for key in items
+        ],
     )
 
 
@@ -495,9 +735,15 @@ def keys_list(ctx: typer.Context) -> None:
 def events_list(
     ctx: typer.Context,
     page: int = typer.Option(1, min=1),
-    status_filter: str | None = typer.Option(None, "--status", help="delivered, failed, pending..."),
-    origin: str | None = typer.Option(None, "--origin", help="api, incoming or replay."),
-    search: str | None = typer.Option(None, "--search", help="Event ID, type or destination."),
+    status_filter: str | None = typer.Option(
+        None, "--status", help="delivered, failed, pending..."
+    ),
+    origin: str | None = typer.Option(
+        None, "--origin", help="api, incoming or replay."
+    ),
+    search: str | None = typer.Option(
+        None, "--search", help="Event ID, type or destination."
+    ),
 ) -> None:
     """List recent delivery activity with optional filters."""
     project = _project(ctx)
@@ -508,12 +754,26 @@ def events_list(
         params["origin"] = origin
     if search:
         params["q"] = search
-    data = _request(_session(ctx), f"/control/v1/projects/{project}/events/", params=params)
+    data = _request(
+        _session(ctx), f"/control/v1/projects/{project}/events/", params=params
+    )
     items = _entries(data, "events")
     _print_or_table(
-        ctx, data, "Activity", ["Created", "Event", "Destination", "Status", "Attempts", "Event ID"],
-        [[_date(x.get("created_at")), x.get("event_type"), x.get("destination_name"),
-          x.get("status"), x.get("attempt_count"), x.get("id")] for x in items],
+        ctx,
+        data,
+        "Activity",
+        ["Created", "Event", "Destination", "Status", "Attempts", "Event ID"],
+        [
+            [
+                _date(x.get("created_at")),
+                x.get("event_type"),
+                x.get("destination_name"),
+                x.get("status"),
+                x.get("attempt_count"),
+                x.get("id"),
+            ]
+            for x in items
+        ],
         status_column=3,
     )
 
@@ -522,22 +782,37 @@ def events_list(
 def events_show(ctx: typer.Context, event_id: str = typer.Argument(...)) -> None:
     """Inspect an event and its delivery attempts (redacted by the API)."""
     project = _project(ctx)
-    data = _request(_session(ctx), f"/control/v1/projects/{project}/events/{_uuid(event_id)}/")
+    data = _request(
+        _session(ctx), f"/control/v1/projects/{project}/events/{_uuid(event_id)}/"
+    )
     if _session(ctx).json_output:
         _print(ctx, data)
         return
     session = _session(ctx)
-    session.console.print(Panel.fit(
-        f"[bold]{_escaped(data.get('event_type'))}[/bold]\n"
-        f"Status: {_escaped(str(_colored_status(data.get('status'))))}\n"
-        f"Destination: {_escaped(data.get('destination_name'))}\n"
-        f"Event ID: {_escaped(data.get('id'))}",
-        title="Delivery", border_style="cyan",
-    ))
+    session.console.print(
+        Panel.fit(
+            f"[bold]{_escaped(data.get('event_type'))}[/bold]\n"
+            f"Status: {_escaped(str(_colored_status(data.get('status'))))}\n"
+            f"Destination: {_escaped(data.get('destination_name'))}\n"
+            f"Event ID: {_escaped(data.get('id'))}",
+            title="Delivery",
+            border_style="cyan",
+        )
+    )
     _table(
-        ctx, "Delivery attempts", ["Attempt", "HTTP", "Duration (ms)", "Time", "Error"],
-        [[x.get("attempt_number"), x.get("status_code"), x.get("duration_ms"),
-          _date(x.get("created_at")), x.get("error")] for x in data.get("attempts", [])],
+        ctx,
+        "Delivery attempts",
+        ["Attempt", "HTTP", "Duration (ms)", "Time", "Error"],
+        [
+            [
+                x.get("attempt_number"),
+                x.get("status_code"),
+                x.get("duration_ms"),
+                _date(x.get("created_at")),
+                x.get("error"),
+            ]
+            for x in data.get("attempts", [])
+        ],
     )
 
 
@@ -550,14 +825,17 @@ def billing_status(ctx: typer.Context) -> None:
         _print(ctx, data)
         return
     plan = data.get("subscription") or {}
-    _session(ctx).console.print(Panel.fit(
-        f"Plan: [bold]{_escaped(plan.get('plan_code'))}[/bold]\n"
-        f"Status: {_escaped(str(_colored_status(plan.get('status'))))}\n"
-        f"Flex credits: {_escaped(plan.get('flex_credits'))}\n"
-        f"Current period ends: {_escaped(_date(plan.get('current_period_end')))}\n"
-        f"Payment attempts: {len(data.get('records', []))}",
-        title="Project Billing", border_style="cyan",
-    ))
+    _session(ctx).console.print(
+        Panel.fit(
+            f"Plan: [bold]{_escaped(plan.get('plan_code'))}[/bold]\n"
+            f"Status: {_escaped(str(_colored_status(plan.get('status'))))}\n"
+            f"Flex credits: {_escaped(plan.get('flex_credits'))}\n"
+            f"Current period ends: {_escaped(_date(plan.get('current_period_end')))}\n"
+            f"Payment attempts: {len(data.get('records', []))}",
+            title="Project Billing",
+            border_style="cyan",
+        )
+    )
 
 
 @billing_app.command("history")
@@ -567,11 +845,20 @@ def billing_history(ctx: typer.Context) -> None:
     data = _request(_session(ctx), f"/control/v1/projects/{project}/billing/")
     records = data.get("records", [])
     _print_or_table(
-        ctx, records, "Payment history",
+        ctx,
+        records,
+        "Payment history",
         ["Date", "Plan", "Amount", "Status", "Reference"],
-        [[_date(r.get("created_at")), r.get("plan_code"),
-          f"{r.get('currency', '')} {int(r.get('amount_minor', 0)) / 100:.2f}",
-          r.get("status"), r.get("reference")] for r in records],
+        [
+            [
+                _date(r.get("created_at")),
+                r.get("plan_code"),
+                f"{r.get('currency', '')} {int(r.get('amount_minor', 0)) / 100:.2f}",
+                r.get("status"),
+                r.get("reference"),
+            ]
+            for r in records
+        ],
         status_column=3,
     )
 
@@ -583,9 +870,20 @@ def incoming_sources(ctx: typer.Context) -> None:
     data = _request(_session(ctx), f"/control/v1/projects/{project}/incoming/sources/")
     items = data.get("sources", [])
     _print_or_table(
-        ctx, data, "Incoming sources", ["Name", "Provider", "Routing", "Active", "Source ID"],
-        [[s.get("name"), s.get("provider"), s.get("routing"),
-          "yes" if s.get("is_active") else "no", s.get("id")] for s in items],
+        ctx,
+        data,
+        "Incoming sources",
+        ["Name", "Provider", "Routing", "Active", "Source ID"],
+        [
+            [
+                s.get("name"),
+                s.get("provider"),
+                s.get("routing"),
+                "yes" if s.get("is_active") else "no",
+                s.get("id"),
+            ]
+            for s in items
+        ],
     )
 
 
@@ -596,11 +894,20 @@ def incoming_routes(ctx: typer.Context) -> None:
     data = _request(_session(ctx), f"/control/v1/projects/{project}/incoming/routes/")
     routes = data.get("routes", [])
     _print_or_table(
-        ctx, data, "Incoming routes",
+        ctx,
+        data,
+        "Incoming routes",
         ["Source", "Destination", "Pattern", "Active", "Route ID"],
-        [[route.get("source"), route.get("endpoint"),
-          route.get("event_pattern"), "yes" if route.get("is_active") else "no",
-          route.get("id")] for route in routes],
+        [
+            [
+                route.get("source"),
+                route.get("endpoint"),
+                route.get("event_pattern"),
+                "yes" if route.get("is_active") else "no",
+                route.get("id"),
+            ]
+            for route in routes
+        ],
     )
 
 
@@ -611,10 +918,19 @@ def incoming_bindings(ctx: typer.Context) -> None:
     data = _request(_session(ctx), f"/control/v1/projects/{project}/incoming/bindings/")
     bindings = data.get("bindings", [])
     _print_or_table(
-        ctx, data, "Incoming bindings",
+        ctx,
+        data,
+        "Incoming bindings",
         ["Reference", "Source", "Destination", "Binding ID"],
-        [[item.get("reference"), item.get("source"),
-          item.get("endpoint"), item.get("id")] for item in bindings],
+        [
+            [
+                item.get("reference"),
+                item.get("source"),
+                item.get("endpoint"),
+                item.get("id"),
+            ]
+            for item in bindings
+        ],
     )
 
 
@@ -627,11 +943,20 @@ def incoming_registration_keys(ctx: typer.Context) -> None:
     )
     keys = data.get("keys", [])
     _print_or_table(
-        ctx, data, "Registration keys",
+        ctx,
+        data,
+        "Registration keys",
         ["Name", "Masked key", "Active", "Expiry", "Key ID"],
-        [[item.get("name"), item.get("masked_key"),
-          "yes" if item.get("is_active") else "no",
-          _date(item.get("expires_at")), item.get("id")] for item in keys],
+        [
+            [
+                item.get("name"),
+                item.get("masked_key"),
+                "yes" if item.get("is_active") else "no",
+                _date(item.get("expires_at")),
+                item.get("id"),
+            ]
+            for item in keys
+        ],
     )
 
 
@@ -645,9 +970,18 @@ def delivery_stats(ctx: typer.Context) -> None:
         return
     counts = data.get("events", {})
     _table(
-        ctx, "Delivery overview", ["Total", "Delivered", "Failed", "Pending", "Success"],
-        [[counts.get("total"), counts.get("delivered"), counts.get("failed"),
-          counts.get("pending"), f"{counts.get('success_rate', 0)}%"]],
+        ctx,
+        "Delivery overview",
+        ["Total", "Delivered", "Failed", "Pending", "Success"],
+        [
+            [
+                counts.get("total"),
+                counts.get("delivered"),
+                counts.get("failed"),
+                counts.get("pending"),
+                f"{counts.get('success_rate', 0)}%",
+            ]
+        ],
     )
 
 
@@ -656,18 +990,31 @@ def config_show(ctx: typer.Context) -> None:
     """Print the active API/profile settings, never the token value."""
     session = _session(ctx)
     saved = _read_config().get("projects", {})
-    selected = session.project or (saved.get(session.environment) if isinstance(saved, dict) else None)
+    selected = session.project or (
+        saved.get(session.environment) if isinstance(saved, dict) else None
+    )
     data = {
         "environment": session.environment,
         "api_url": session.origin,
         "project": selected,
-        "token_configured": bool(os.environ.get("HOOKSTRIDE_CONTROL_TOKEN", "").startswith("whrctl_")),
-        "token_source": "environment" if os.environ.get("HOOKSTRIDE_CONTROL_TOKEN", "").startswith("whrctl_") else None,
+        "token_configured": bool(
+            os.environ.get("HOOKSTRIDE_CONTROL_TOKEN", "").startswith("whrctl_")
+        ),
+        "token_source": (
+            "environment"
+            if os.environ.get("HOOKSTRIDE_CONTROL_TOKEN", "").startswith("whrctl_")
+            else None
+        ),
     }
     if session.json_output:
         _print(ctx, data)
     else:
-        _table(ctx, "Configuration", ["Setting", "Value"], [[k, v] for k, v in data.items()])
+        _table(
+            ctx,
+            "Configuration",
+            ["Setting", "Value"],
+            [[k, v] for k, v in data.items()],
+        )
 
 
 def main() -> None:

hookstride_cli-0.3.0.dist-info/METADATA

@@ -0,0 +1,136 @@
+Metadata-Version: 2.5
+Name: hookstride-cli
+Version: 0.3.0
+Summary: Manage Hookstride projects and destinations, inspect webhook activity and billing.
+License: Proprietary
+Requires-Python: >=3.11
+Requires-Dist: click<9,>=8.1
+Requires-Dist: httpx<1,>=0.28
+Requires-Dist: prompt-toolkit<4,>=3.0.52
+Requires-Dist: rich<15,>=14
+Requires-Dist: typer<1,>=0.20
+Description-Content-Type: text/markdown
+
+# Hookstride CLI
+
+Hookstride CLI lets you manage projects and webhook destinations, inspect delivery activity, and view billing records. It includes an interactive console with the same selected-project commands.
+
+Version 0.3.0 adds project creation and updates, plus destination creation, updates, and pausing/resuming. Billing and credential changes, delivery replay, and destructive operations remain unavailable.
+
+## Installation
+
+Requires Python 3.11 or later.
+
+```bash
+uv tool install hookstride-cli
+```
+
+Alternatively, use `pipx install hookstride-cli`.
+
+```bash
+hookstride --version
+hookstride status
+hookstride console
+```
+
+Upgrade an existing installation with `uv tool upgrade hookstride-cli`.
+
+## Authentication
+
+Authenticated commands require a **Control API token** (`whrctl_`), available from your Hookstride dashboard. Project delivery API keys (`whrk_`) do not grant CLI access.
+
+In an interactive console, run `auth login` and enter the token at the hidden prompt:
+
+```bash
+hookstride console
+```
+
+For one-off commands, set `HOOKSTRIDE_CONTROL_TOKEN` in your shell without entering it on the command line:
+
+```bash
+read -rs "HOOKSTRIDE_CONTROL_TOKEN?Control token: "
+echo
+export HOOKSTRIDE_CONTROL_TOKEN
+hookstride auth status
+```
+
+The `read` example above works in **zsh**. In Bash, use `read -rs -p "Control token: " HOOKSTRIDE_CONTROL_TOKEN` followed by `echo` and `export HOOKSTRIDE_CONTROL_TOKEN`.
+
+Tokens entered through `auth login` are retained only for the interactive console session. The CLI does not write tokens to its settings file.
+
+## Commands
+
+```bash
+hookstride status
+hookstride auth status
+hookstride projects list
+hookstride projects use PROJECT_UUID
+hookstride projects create --account ACCOUNT_UUID --name "Staging" --slug staging
+hookstride projects update PROJECT_UUID --name "Production EU"
+
+hookstride destinations list
+hookstride destinations create --name "Webhook receiver" --url "https://app.example.com/webhooks/hookstride"
+hookstride destinations update DESTINATION_UUID --url "https://api.example.com/webhooks/hookstride"
+hookstride destinations update DESTINATION_UUID --pause
+hookstride destinations update DESTINATION_UUID --resume
+hookstride keys list
+hookstride events list --status failed
+hookstride events show EVENT_UUID
+hookstride stats
+
+hookstride incoming sources
+hookstride incoming routes
+hookstride incoming bindings
+hookstride incoming registration-keys
+
+hookstride billing status
+hookstride billing history
+hookstride config show
+```
+
+Replace the example UUIDs with identifiers from your account. Find your workspace's `account_id` with `hookstride --json projects list`; that ID is required for project creation. Project creation and renaming require an admin/owner role. Destination changes require developer access or higher.
+
+Commands that operate on a project use the selected project. You can override the selection for an individual command:
+
+```bash
+hookstride --project PROJECT_UUID events list
+```
+
+### Interactive console
+
+```bash
+hookstride console
+```
+
+Use `help` to view commands, Tab for completion, and `exit` or Ctrl+D to leave. The console also supports `show projects`, `show events`, `show destinations`, `use PROJECT_UUID`, `back`, and `set env dev|production`. The same `projects create/update` and `destinations create/update` commands work inside the console. Commands with customer-provided names and URLs are not saved to console history.
+
+### JSON output
+
+Use `--json` before a command to retrieve structured data for scripts:
+
+```bash
+hookstride --json projects list
+hookstride --project PROJECT_UUID --json events list --status failed
+hookstride --env production --json billing history
+```
+
+Errors go to standard error; unsuccessful requests return a nonzero exit code. When creating a destination, the server returns a signing secret **once**. Save it securely immediately. Both terminal output and `--json` deliberately include that one-time secret, so avoid piping creation output into logs or public CI artifacts.
+
+## Environments and local settings
+
+The CLI connects to the production API by default: `https://api.hookstride.com`.
+A new release must be published to PyPI before existing installations receive this change.
+
+To inspect the development API explicitly, select it:
+
+```bash
+hookstride --env dev console
+```
+
+Development requests use `https://api-dev.hookstride.com`. Use a Control API token issued for the selected environment. A custom HTTPS API origin can be supplied with `--api-url`.
+
+Project selections are stored separately by environment in `~/.config/hookstride/settings.json`. This file contains project identifiers, **not authentication tokens**. Console tokens and command history remain in memory and are discarded at exit.
+
+## Documentation
+
+Documentation: https://hookstride.com

hookstride_cli-0.3.0.dist-info/RECORD

@@ -0,0 +1,7 @@
+hookstride_cli/__init__.py,sha256=nu4rJBpNjzDjU4Gx5MN1BdUiMVx6HbsoDoYnSfWzkok,55
+hookstride_cli/console.py,sha256=kUARFRd5XkuXsJWOJ-enAfw_dY4j6ANelZX5B1vQSpM,19126
+hookstride_cli/main.py,sha256=q_L6e_GBD78vLx_JURuMkV9V2Ao07_OW9rKH016zA0E,34582
+hookstride_cli-0.3.0.dist-info/METADATA,sha256=iPHreSMhrsMKt27zUgU9kjFipo2wQdXcHTFQ7TZ7Vu4,5201
+hookstride_cli-0.3.0.dist-info/WHEEL,sha256=2iZrJkDIkeDh0k9SikKMqFuRP-ua6mb4Ir1AsER4BEw,87
+hookstride_cli-0.3.0.dist-info/entry_points.txt,sha256=E9bqvnCFVO-lYULID8x-HTp0gYnfrYprB2R8n-DKy6Q,56
+hookstride_cli-0.3.0.dist-info/RECORD,,

hookstride_cli-0.2.0.dist-info/METADATA

@@ -1,179 +0,0 @@
-Metadata-Version: 2.5
-Name: hookstride-cli
-Version: 0.2.0
-Summary: Readable, project-scoped Hookstride Control API terminal client.
-License: Proprietary
-Requires-Python: >=3.11
-Requires-Dist: click<9,>=8.1
-Requires-Dist: httpx<1,>=0.28
-Requires-Dist: prompt-toolkit<4,>=3.0.52
-Requires-Dist: rich<15,>=14
-Requires-Dist: typer<1,>=0.20
-Description-Content-Type: text/markdown
-
-# Hookstride CLI
-
-A fast, colorful, read-only terminal for the Hookstride Control API. Inspired by the clarity of tools like Nmap, it keeps ordinary REST responses unchanged for apps and integrations.
-
-## Install
-
-Once the first package release is available on PyPI, install with:
-
-```bash
-uv tool install hookstride-cli
-hookstride --version
-hookstride console
-```
-
-Alternative: `pipx install hookstride-cli`. Update with `uv tool upgrade hookstride-cli`.
-Requires Python 3.11 or newer. No checkout or Django backend installation is needed.
-
-## Authentication
-
-In the Hookstride dashboard, generate an MFA-verified **Control API / Management token**, beginning with `whrctl_`. Do **not** use a `whrk_` delivery API key, and never paste a token directly into commands or issue comments.
-
-The CLI reads `HOOKSTRIDE_CONTROL_TOKEN` from your current shell; it **does not persist tokens** on disk. For a Bash/Zsh terminal, paste interactively without writing the token in your command history:
-
-```bash
-printf "Control token: "
-read -rs HOOKSTRIDE_CONTROL_TOKEN
-printf "\\n"
-export HOOKSTRIDE_CONTROL_TOKEN
-
-hookstride auth status
-```
-
-The token may remain in your shell environment until you run `unset HOOKSTRIDE_CONTROL_TOKEN`. Environment values may be inspectable by processes with the appropriate local privileges; use an ephemeral, limited-life management token. Avoid recording terminal sessions while entering secrets.
-
-## Explore development
-
-```bash
-hookstride status
-hookstride auth status
-hookstride projects list
-hookstride projects use 00000000-0000-0000-0000-000000000000
-
-hookstride destinations list
-hookstride keys list
-hookstride incoming sources
-hookstride incoming routes
-hookstride incoming bindings
-hookstride incoming registration-keys
-hookstride events list --status failed
-hookstride events show 00000000-0000-0000-0000-000000000000
-hookstride stats
-hookstride billing status
-hookstride billing history
-hookstride config show
-```
-
-Replace the sample UUIDs with your own project/event IDs.
-
-The CLI starts on `https://api-dev.hookstride.voteeasy.net`. Use `--env production` (before the command) to target `https://api.hookstride.voteeasy.net`; configure each environment with its own corresponding Control token. The apex `https://hookstride.voteeasy.net` serves the frontend. You can also use `--api-url https://your-api-host` for a custom origin, or HTTP on loopback for local testing.
-
-**Project selection is environment-specific.** The only persisted data is a project UUID in `~/.config/hookstride/settings.json`, owner-readable; not your credentials. Override temporarily with `--project PROJECT_UUID`.
-
-## Development checks
-
-When the GitHub Actions runner is unavailable, run the **same** CLI tests locally
-without sending anything to the live Hookstride API:
-
-```bash
-bash cli/scripts/check.sh
-```
-
-This checks Python syntax, Ruff, isolated unit tests using mocked HTTP responses,
-and basic commands. A successful local run is not a substitute for a live
-read-only smoke test against the deployed development API.
-
-Tables use compact, borderless columns. Identifiers and long URLs are shortened
-only when necessary to fit the terminal; the actual API response is not changed.
-Use `--json` to copy complete project IDs, payment references and destination URLs.
-
-## Interactive operator console (v0.2)
-
-Start a lightweight, Metasploit-inspired, **read-only** interactive console:
-
-```bash
-hookstride console
-```
-
-The shell starts on the **development API** by default. Enter `help` for
-available commands, use Tab for completion, Ctrl+C to cancel the current line,
-and Ctrl+D or `exit` to close the console.
-
-```text
-HOOKSTRIDE CONSOLE v0.2
-hookstride [dev] > auth login
-Control token (hidden):
-✓ Authenticated as developer@example.com
-hookstride [dev] > show projects
-Projects
-========
-Name        Workspace     Role   Plan    Project ID
-----------  ------------  -----  ------  ------------------------------------
-Production  Beta Testing  owner  flex    ddc21845-d0f1-49af-8d35-2719dc641f69
-
-hookstride [dev] > use ddc21845-d0f1-49af-8d35-2719dc641f69
-hookstride [dev:ddc21845] > show payments
-hookstride [dev:ddc21845] > events list --status failed
-hookstride [dev:ddc21845] > show destinations
-hookstride [dev:ddc21845] > json events list
-hookstride [dev:ddc21845] > back
-hookstride [dev] > exit
-```
-
-This console accepts the existing read-only CLI commands, plus convenient
-`show` aliases, `set env dev|production`, `use UUID`,
-`back`, `clear`, `history`, and `auth login|logout`.
-`projects use UUID` and `use UUID` persist only the active project's UUID
-in local settings. The console does not support a shell escape, external
-processes, POST/DELETE operations, or purchases.
-
-### Token handling
-
-`auth login` securely prompts for a Control API token via hidden input. Tokens
-are kept **in memory for this console process only**, are discarded at exit,
-are never written to a config or history file, and are never echoed. The
-console stores only a **safe subset** of commands in volatile arrow-key history;
-it never records tokens or arbitrary query/search strings.
-
-You may also provide an existing token through environment variables:
-
-```bash
-# Use a development token with the default development console
-export HOOKSTRIDE_DEV_CONTROL_TOKEN="…"  # do not put real secrets in shell history
-hookstride console
-
-# To start directly against production, explicitly select it
-hookstride --env production console
-```
-
-For safest handling, prefer `auth login` over typing tokens in shell commands.
-For interactive environment changes, the generic legacy
-`HOOKSTRIDE_CONTROL_TOKEN` is **never forwarded to another environment**.
-Use `auth login` separately after `set env production`, or provide a
-matching `HOOKSTRIDE_PRODUCTION_CONTROL_TOKEN` token. This prevents a dev
-token from accidentally being sent to the production API.
-
-The console requires a real interactive terminal and refuses `--json console`.
-For CI and scripting, use ordinary commands such as
-`hookstride --json events list` instead.
-
-## Output for scripts
-
-Pass `--json` **before** the command:
-
-```bash
-hookstride --json projects list | jq .
-hookstride --json events list --status failed | jq '.results'
-hookstride --env production --json billing history
-```
-
-The raw structured response is printed to stdout without terminal formatting. Network and HTTP errors go to stderr and cause a nonzero exit status.
-
-## Scope
-
-Version 0.2 includes interactive access to project, destination, incoming-source, delivery-stat, activity and billing **reads**. It does not yet create destinations, emit events, replay events, rotate credentials, or trigger payments. Those workflows require additional confirmation and integration tests before exposing them in a CLI. Server-side authorization, project scoping, and response redaction remain enforced by the Control API.
-
-Do not store passwords, signing secrets, private keys, or Paystack keys in Hookstride CLI configuration.

hookstride_cli-0.2.0.dist-info/RECORD

@@ -1,7 +0,0 @@
-hookstride_cli/__init__.py,sha256=QF0aMDPMekvBntMFgFH6tE4BkHN7vXuw45c6RMu4BOw,55
-hookstride_cli/console.py,sha256=uB4gqFlIwUaajYJ0Q_Mt4KOLImGEVbDFKBaDKJ2zgYU,18701
-hookstride_cli/main.py,sha256=ZS07efEzUQrfTBtvfKjct6YqHiUTRSDmhPhIccQU7_s,26191
-hookstride_cli-0.2.0.dist-info/METADATA,sha256=vC6z5xwcSjhr0loFni9yYJvvGo_rLqwurOssCG9h8Mg,7347
-hookstride_cli-0.2.0.dist-info/WHEEL,sha256=2iZrJkDIkeDh0k9SikKMqFuRP-ua6mb4Ir1AsER4BEw,87
-hookstride_cli-0.2.0.dist-info/entry_points.txt,sha256=E9bqvnCFVO-lYULID8x-HTp0gYnfrYprB2R8n-DKy6Q,56
-hookstride_cli-0.2.0.dist-info/RECORD,,