netbox-super-cli 1.0.0__py3-none-any.whl

netbox_super_cli-1.0.0.dist-info/METADATA

@@ -0,0 +1,182 @@
+Metadata-Version: 2.4
+Name: netbox-super-cli
+Version: 1.0.0
+Summary: Dynamic NetBox CLI generated from the live OpenAPI schema.
+Project-URL: Homepage, https://github.com/thomaschristory/netbox-super-cli
+Project-URL: Issues, https://github.com/thomaschristory/netbox-super-cli/issues
+Author-email: Thomas <mick27@gmail.com>
+License-Expression: Apache-2.0
+License-File: LICENSE
+Keywords: automation,cli,netbox,openapi
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: System :: Networking
+Requires-Python: >=3.12
+Requires-Dist: httpx>=0.27
+Requires-Dist: platformdirs>=4.2
+Requires-Dist: pydantic>=2.7
+Requires-Dist: rich>=13.7
+Requires-Dist: ruamel-yaml>=0.18
+Requires-Dist: structlog>=24.1
+Requires-Dist: typer>=0.12
+Description-Content-Type: text/markdown
+
+# netbox-super-cli (`nsc`)
+
+A Python CLI for [NetBox](https://netbox.dev/) that builds its command tree dynamically from your install's live OpenAPI schema. The same binary works against any NetBox version and exposes plugin-provided endpoints automatically — the schema, not hand-written code, defines the surface.
+
+> **Docs:** [thomaschristory.github.io/netbox-super-cli](https://thomaschristory.github.io/netbox-super-cli/) — the full guide, including install, first-run, guides, and the auto-generated CLI/config/exit-code reference.
+
+> **Status:** Phase 3 complete (`v0.3.0-phase3`). The full read + safe-write surface is shipped: dynamic command tree, dry-run-by-default writes with `--apply` to commit, `--explain` for resolved-request introspection, bulk-endpoint detection with loop fallback, stable error envelopes with locked exit codes, append-only audit log, and a live-NetBox e2e suite running in CI against `netboxcommunity/netbox:v4.5.9`. Not yet on PyPI.
+
+## Why
+
+- **Plugins just work.** If your install has plugins, their endpoints appear as commands automatically.
+- **Multi-instance.** Named profiles per NetBox instance, plus env-var overrides.
+- **Safe by default.** POST/PATCH/PUT/DELETE preview as dry-runs unless you pass `--apply`.
+- **Agent-friendly.** Deterministic command shape, machine-readable JSON output, stable error envelope with documented exit codes.
+
+## Install (preview)
+
+```
+uv tool install netbox-super-cli
+```
+
+Not on PyPI yet; install from source:
+```
+git clone https://github.com/thomaschristory/netbox-super-cli
+cd netbox-super-cli
+uv sync
+uv run nsc --version
+```
+
+## Reading
+
+```sh
+export NSC_URL=https://netbox.example.com
+export NSC_TOKEN=$(cat ~/.netbox-token)
+
+uv run nsc dcim devices list
+uv run nsc dcim devices list --site-id 42 --status active --all --output json
+uv run nsc dcim devices get 7
+uv run nsc circuits providers list --output csv
+uv run nsc ipam prefixes list --filter created__gte=2026-01-01 --output yaml
+```
+
+## Writing
+
+```sh
+# Dry-run by default — shows the resolved request without sending it.
+uv run nsc dcim devices create -f device.yaml --explain
+
+# Commit with --apply.
+uv run nsc dcim devices create -f device.yaml --apply
+
+# Bulk create: one HTTP call when the schema supports it, sequential loop otherwise.
+uv run nsc dcim devices create -f devices.yaml --apply
+uv run nsc dcim devices create -f devices.yaml --no-bulk --on-error continue --apply
+
+# NDJSON / JSONL — one record per line; parse failures abort the whole batch
+# before any wire request fires (`type: input_error`, exit 4, `details.bad_lines`).
+uv run nsc dcim devices create -f devices.ndjson --apply
+cat devices.ndjson | uv run nsc dcim devices create -f - --apply
+
+# Per-field overrides (CLI wins over file on overlap).
+uv run nsc dcim devices update 42 --field status=active --apply
+
+# Delete; default is exit-0 if already gone, --strict turns missing-id into exit 9.
+uv run nsc dcim devices delete 42 --apply
+uv run nsc dcim devices delete 42 --apply --strict
+```
+
+Every write attempt — dry-run included — appends one line to `~/.nsc/logs/audit.jsonl`; the most recent exchange is also mirrored to `~/.nsc/logs/last-request.json`.
+
+### Bulk input formats
+
+| Form | File extension or stdin shape | Routing |
+|------|-------------------------------|---------|
+| YAML mapping | `.yaml` / `.yml` | Single record. |
+| YAML list | `.yaml` / `.yml` | Bulk: one record per list item. |
+| JSON object | `.json` or `{...}EOF` on stdin | Single record. |
+| JSON array | `.json` or `[...]` on stdin | Bulk: one record per array item. |
+| **NDJSON** | **`.ndjson` / `.jsonl` or `{...}\n{...}` on stdin** | **Bulk: one record per line.** |
+
+Stdin is sniffed from the first 512 bytes (first non-whitespace byte plus a one-object lookahead for newline-then-`{`). NDJSON parse failures collect up to 20 `bad_lines` and abort before any wire request; `--no-bulk` still forces a loop fallback for any bulk shape.
+
+### Audit log sensitivity
+
+`audit.jsonl` is **confidential** (not secret). It records what was sent — record-level data your account had write access to. The CLI redacts:
+
+- HTTP headers in the `SENSITIVE_HEADERS` set (e.g. `Authorization`, `X-API-Key`) — replaced with `"<redacted>"`.
+- Request-body fields whose OpenAPI definition has `format: password` OR whose name (case-insensitive) is one of: `password`, `secret`, `token`, `api_key`, `apikey`, `private_key`, `passphrase`, `client_secret`. Nested fields and arrays of objects are walked recursively.
+
+The wire body sent to NetBox is **not** redacted — only the audit log. A failed write still records the redacted body; redaction is irreversible. Treat `audit.jsonl` like a verbose application log: gate it behind your home-directory permissions and rotate / archive accordingly. A "redact everything" mode is deferred to Phase 5+.
+
+## Output and errors
+
+- `--output {table,json,yaml,csv,jsonl}`. Table is the default on a TTY; JSON is the default when stdout is piped.
+- On `--output json`, the records array is emitted directly (no NetBox-style `count`/`results` wrapper); single-record writes emit the resulting record dict.
+- Failures emit a stable `ErrorEnvelope` (JSON to stdout on `--output json`, Rich panel to stderr otherwise) with `type ∈ {auth, not_found, validation, conflict, rate_limited, server, transport, schema, config, client, internal, ambiguous_alias, unknown_alias, input_error}` and a documented exit code per type. See `CHANGELOG.md` and the spec for the full table.
+
+## Schema introspection
+
+```sh
+# Dump every endpoint in the bundled NetBox schema as JSON.
+uv run nsc commands --schema nsc/schemas/bundled/netbox-4.6.0-beta2.json.gz --output json | head
+
+# Or against a live install.
+uv run nsc commands --schema https://netbox.example.com/api/schema/?format=json --output json
+```
+
+## Cache management
+
+The on-disk command-model cache lives at `~/.nsc/cache/<profile>/<schema-hash>.json` and is regenerated automatically when the live NetBox schema changes. Over time, removed profiles or upgraded NetBox versions can leave orphan entries behind.
+
+```sh
+nsc cache prune                          # show what would be deleted (dry-run)
+nsc cache prune --apply                  # actually delete
+nsc cache prune --max-age 30 --apply     # also delete cache files older than 30 days
+nsc cache prune --output json            # structured envelope for scripts
+```
+
+What gets pruned:
+
+1. Cache directories for profiles that are no longer in your config.
+2. Cache files whose schema-hash differs from the live NetBox schema (skipped per-profile when offline).
+3. With `--max-age <days>`: cache files older than the threshold (excludes files already covered by rule 1).
+
+The `adhoc` cache directory (used by env-var-only invocations like `NSC_URL=… nsc dcim devices list`) is never pruned automatically.
+
+## Shell completion
+
+`nsc` ships static completion stubs that complete subcommands and option names.
+
+```sh
+nsc --install-completion         # auto-detects $SHELL
+nsc --show-completion            # prints the script instead of installing
+```
+
+Typer supports `bash`, `zsh`, `fish`, and `pwsh`. Completion of dynamic values (resource names, profile names, filter keys) is on the post-1.0 roadmap.
+
+## Bundled Skill for AI agents
+
+`nsc` ships a portable Skill bundle at `skills/netbox-super-cli/SKILL.md`
+that briefs an AI agent on how to drive `nsc` correctly (dry-run discipline,
+JSON output, error envelope, audit log).
+
+```sh
+nsc skill install --target claude-code            # dry-run; prints the destination
+nsc skill install --target claude-code --apply    # actually copies
+```
+
+Targets: `claude-code`, `codex`, `gemini`, `copilot`. Where a target has no
+documented programmatic install path, the helper prints actionable manual
+instructions instead of guessing.
+
+## License
+
+Apache 2.0.

netbox_super_cli-1.0.0.dist-info/RECORD

@@ -0,0 +1,71 @@
+nsc/__init__.py,sha256=m3dxzeerYWKx1uanN0eXxsI-1vF0cA2UqQ6QPhxlfrU,151
+nsc/__main__.py,sha256=o6bw5_SYx7G6OUgdvA5o1IgFLOth3IjPa741_feV8dg,115
+nsc/_version.py,sha256=ZFf1U38OicuxDHWVw0hGLGemnX6dwinKiaDIIDLeT6Y,77
+nsc/aliases/__init__.py,sha256=_dgnKhUQqU3JQTp23ciehgFPrYSHo3NlI8vtTg4cSlE,521
+nsc/aliases/resolver.py,sha256=d_7zkqNqKDs3xpdC-RrMNjYVVqJ1uXe5wZwjKsG_t2k,3376
+nsc/auth/__init__.py,sha256=OHVmmfh8diZdW-gf1cKLtHZAqS-i60k4QmI5YXwqLuc,161
+nsc/auth/verify.py,sha256=Vmu1Xva0KdOsNQ8-E-pOjRwwsUNTXx3jacEENhHYy3E,5235
+nsc/builder/__init__.py,sha256=aa-ZXHJwGXDVrwHdSS8yyGphpZ2xYQy0qYJd-sNK6mo,147
+nsc/builder/build.py,sha256=32z7kRO2BENJHxlwCUlQfPsr2-b1v_SojxJv61YwkGU,17185
+nsc/cache/__init__.py,sha256=G0tQrEuIxVyv0Lf2Hxn7afUFP0-XJBTGPIqx4wpNK0g,115
+nsc/cache/store.py,sha256=dsE_--LW0ewtHg7qGlJyIiVv4WpXGBgR6X6vdOjqefw,9874
+nsc/cli/__init__.py,sha256=7je0t2iYb1FoeXL5DZ-ohzuXRNd8pGv5vOGsSNVpgdk,42
+nsc/cli/aliases_commands.py,sha256=A8NmzyhG1-dgv7__mHuPenq57-XTfzbxMH8pKmavSls,10854
+nsc/cli/app.py,sha256=ygbCQHLbq4VWzE7YgVuXZxFUcgWjIGrU1_3XsBR6Em8,10067
+nsc/cli/cache_commands.py,sha256=zDWdbuG8aLf7aA2I9uUH-RGywkH2LKLj7C5sCgEmWd4,5199
+nsc/cli/commands_dump.py,sha256=RrUC4oAJO9SB61eriC6hZX3LiyGfhgn8zxWTvDYJqrE,1715
+nsc/cli/config_commands.py,sha256=rTKcOdsV5OyARV4IlRzhq8xsTfkzJctmSFzVs_SxGcI,4519
+nsc/cli/globals.py,sha256=dPuQ1hyPSBfnhzeYtA2lOl3EwG66y4RSQQhxc9KuD9o,1732
+nsc/cli/handlers.py,sha256=9BeiEGScAqbYOJOFZ4QU50v5Aa5vyTL8NbkSKgXOdpc,20483
+nsc/cli/init_commands.py,sha256=iVU3ECuz0xP-ilHlqutPioDMuk44tSXr6TnqEWqXmS4,3047
+nsc/cli/login_commands.py,sha256=r0rblP9FoHXm349WKC2rAHDSQ3NkllOaAlpPTa8yYH8,9058
+nsc/cli/profiles_commands.py,sha256=TreEzstU8QBNwZRnoagnQe9dAj5A60FVJzGTCaftctg,8045
+nsc/cli/registration.py,sha256=O4XPjOv72DNyt_U9UCQ_pNR-lonzi_tyENoR2KnYlPY,15701
+nsc/cli/runtime.py,sha256=JFeaTk4eADdJdIGgZLqNaShnZcURB-Fgf78c3xBYB8M,9178
+nsc/cli/skill_commands.py,sha256=8QBg5QwjsZOB5y0az5smioGiHtwsFqfI6YFvYY0WK7Q,5745
+nsc/cli/writes/__init__.py,sha256=xlFMyVSTsr17Uu3W7hRhQh3pvZ_hC6A1q-kh-R_4tCk,265
+nsc/cli/writes/apply.py,sha256=12Nz3w2K4AnY1TYj3TMGfenuMUr_KlazC_KuVaXPoXw,5419
+nsc/cli/writes/bulk.py,sha256=h6acUykZBo2a0LV5ZrjAVesLESXY8CumLFFgvS6UU4U,7248
+nsc/cli/writes/coercion.py,sha256=YM9u1tYmFZB1zHe-cEVS1gtNDdFpsziO3_uK_7q_U1E,317
+nsc/cli/writes/confirmation.py,sha256=OjGWw-iIiv71JXjM41eDJ4YVy5OGenBzKpZ1SVx2skQ,2513
+nsc/cli/writes/input.py,sha256=IE1yZcy62uYaaDnfikYVPSTUdeEqByLNZtDnYPia9-M,11898
+nsc/cli/writes/preflight.py,sha256=kakx66XeRB_kqGnUkldJA5T7eIjbTbrBmmj5mOwV4eg,5175
+nsc/config/__init__.py,sha256=I01yJXHUcrsAO2AzHxQnvNacqebrhPdoXI1HRqeqqmA,441
+nsc/config/loader.py,sha256=yejt2c318pawEOv_74dYQHJSxUzqav8jXM_EayXUTow,2323
+nsc/config/models.py,sha256=Uc1gd87mfw4W-eBhNVtL_Kx9aG72yTq8rVtEPD0mfH4,1352
+nsc/config/settings.py,sha256=vKE6DxVAw699oF10B_E1BlgPfaD92_nz76GyJ3L5-1k,850
+nsc/config/writer.py,sha256=3sfyYCYmSEimK35H6bJzadpHUdBemkhVmhUBO9gDTUo,7375
+nsc/http/__init__.py,sha256=Az35N8Zc0N2OiDR_0SVKuBmbIVJNvaJx_pyfbm7SI90,206
+nsc/http/audit.py,sha256=p01On-w_JdrPwLH1ZRQzKAZ9LLIlisHlFkkLNcNyDAo,6126
+nsc/http/client.py,sha256=MHcIh8aObY0j10u6uoMJ_kQJOKFPMqOWtecfsZEkmMc,12470
+nsc/http/errors.py,sha256=BSn3-kVziMdieP0QXRjoc3MJhg56l58GFvx6Vh8Qpc4,1038
+nsc/http/retry.py,sha256=g15O-SC4jo6PSXYOwRyd7hQ5ejo8MxYb53qCflJ1KvE,2784
+nsc/model/__init__.py,sha256=qCU--gwzpFqWcpAYdmswrCSAwW8CthN-m9rDfoo2yTo,395
+nsc/model/command_model.py,sha256=9yh1LQIUe07xy-gLjdtpe629n_3b0qkYwpHp-9Hh2Zc,3507
+nsc/output/__init__.py,sha256=vhKPzYhOrDV8QSeZ783TbKidjRcL6fGtxePi0hnDPZM,89
+nsc/output/csv_.py,sha256=VTwFBkf9ITAMfmgEXxtml15VEx9WMKibvd8hyr-KniM,1015
+nsc/output/errors.py,sha256=AmDepQohfA-Fot1TlNZ5Ht5dq9CTodswxPUIdsPIk3s,10639
+nsc/output/explain.py,sha256=vtgHyU5nf5vHqB-87uElNhSSrVmclyOAfYFnZRMTK1M,6732
+nsc/output/flatten.py,sha256=vXV043zhm2h7GVsuSIECbiaQyLjJJbFoQzy4kIQ4pNM,724
+nsc/output/headers.py,sha256=fHjkLMdzgaLtXvptEPUAD9yxeqnGNQXAIGPOwc1FldM,249
+nsc/output/json_.py,sha256=vKmIfvBRNEatYcc8rPjMXRU6hoPp8Ul-uUJe5XoKj3Y,459
+nsc/output/jsonl.py,sha256=yjorxD1arHuU_oU4u__przFZUvlU1Y4gwxPS0eFyKEc,444
+nsc/output/render.py,sha256=592idcoXWSDqa_tmvrXJ259u4Cq3506BR5kblkAytC4,1371
+nsc/output/table.py,sha256=cWXWdaxS3JIhe9pau1cEXjj1fwl8gR5NYhliRSnGjHs,1359
+nsc/output/yaml_.py,sha256=owyxkCstnFMQ25saejiOUa9TeQ3tLexgnl0pC4Bxzms,698
+nsc/schema/__init__.py,sha256=72rlI7t-jVa_QVAyc0YEYPVSEqkOK8hLf5X-wLTV-JI,29
+nsc/schema/hashing.py,sha256=W247Xz1cQfSInCEUSt3Bj71cbiDOtWecmRqnaGknvbU,730
+nsc/schema/loader.py,sha256=5kp9i3LErWu3IzdC869ejc_6dj_vBwBRZ2LsJQ22Io8,2277
+nsc/schema/models.py,sha256=OmiKbbKP5lMGw44Wo7731CyjHcBphlBrvIktBV7GNUA,3038
+nsc/schema/source.py,sha256=IaB51cUAYFlPw29lWaiIvVP1v0oT3z6JfVUcy_vv6e4,3925
+nsc/schemas/__init__.py,sha256=NRzj9L5FF8hzEXG7MTE-VK787WdVonSOFYTDs7dfbJU,52
+nsc/schemas/bundled/__init__.py,sha256=GJJm8w7xSPGwIrh-t515jtzK_6UT7v2eL33FeG3_P4Q,68
+nsc/schemas/bundled/manifest.yaml,sha256=KMe60X9drH-aDPGI3f6Y9-nV_mPd1Sh1eh34KFBZg_I,168
+nsc/schemas/bundled/netbox-4.6.0-beta2.json.gz,sha256=33ghJddbndw9jDM9RbaNuEx1H5U7XtEXcz8qHaHoNEA,380458
+nsc/skill/__init__.py,sha256=_DimBHGVFM1ziZPF6agmjNlohl3NvbmA6y99te1K2Bk,1243
+skills/netbox-super-cli/SKILL.md,sha256=DA7wsnnXKt2IOaYk9jGBAV9-WdgCD2cJeMZXEdspArc,5172
+netbox_super_cli-1.0.0.dist-info/METADATA,sha256=b2HtPvaRIndMGftp1mt2tQO6i4txVnCT48ueGaoywEo,8871
+netbox_super_cli-1.0.0.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+netbox_super_cli-1.0.0.dist-info/entry_points.txt,sha256=jjMFpDejc7zQO8bUngITxM5Y7Z-K-AJD7x6r21CFXPc,77
+netbox_super_cli-1.0.0.dist-info/licenses/LICENSE,sha256=1znkGGTbsCa1OQme6fa9deEpek_dzM0st2jROF-ghDo,11353
+netbox_super_cli-1.0.0.dist-info/RECORD,,

netbox_super_cli-1.0.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.29.0
+Root-Is-Purelib: true
+Tag: py3-none-any

netbox_super_cli-1.0.0.dist-info/entry_points.txt

@@ -0,0 +1,3 @@
+[console_scripts]
+netbox-super-cli = nsc.cli.app:main
+nsc = nsc.cli.app:main

netbox_super_cli-1.0.0.dist-info/licenses/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or Object
+      form, made available under the License, as indicated by a copyright
+      notice that is included in or attached to the work (an example is
+      provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or exemplary damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, you may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, you may act only
+      on your own behalf and on your sole responsibility, not on behalf
+      of any other Contributor, and only if you agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

nsc/__init__.py

@@ -0,0 +1,5 @@
+"""netbox-super-cli — dynamic NetBox CLI generated from the live OpenAPI schema."""
+
+from nsc._version import __version__
+
+__all__ = ["__version__"]

nsc/__main__.py

@@ -0,0 +1,6 @@
+"""Module entry point for `python -m nsc`."""
+
+from nsc.cli.app import main
+
+if __name__ == "__main__":
+    main()

nsc/_version.py

@@ -0,0 +1,3 @@
+"""Single source of truth for the package version."""
+
+__version__ = "1.0.0"

nsc/aliases/__init__.py

@@ -0,0 +1,24 @@
+"""Public alias resolver surface.
+
+Imports nothing from `nsc.cli`, `nsc.http`, or any framework — same hard
+rule as `nsc.model`. Consumers (`nsc/cli/aliases_commands.py`) call
+`resolve(verb, term, command_model)` and pattern-match on the result.
+"""
+
+from __future__ import annotations
+
+from nsc.aliases.resolver import (
+    AliasVerb,
+    AmbiguousAlias,
+    ResolvedAlias,
+    UnknownAlias,
+    resolve,
+)
+
+__all__ = [
+    "AliasVerb",
+    "AmbiguousAlias",
+    "ResolvedAlias",
+    "UnknownAlias",
+    "resolve",
+]

nsc/aliases/resolver.py

@@ -0,0 +1,112 @@
+"""Pure resolver for `nsc ls / get / rm / search`.
+
+Exposes `resolve(verb, term, command_model)` returning one of
+`ResolvedAlias / AmbiguousAlias / UnknownAlias`. No I/O, no Typer, no
+HTTP — caller wires the result into the dynamic-tree handlers.
+"""
+
+from __future__ import annotations
+
+from enum import StrEnum
+
+from pydantic import BaseModel, ConfigDict
+
+from nsc.model.command_model import CommandModel, HttpMethod, Operation, Resource
+
+
+class AliasVerb(StrEnum):
+    LS = "ls"
+    GET = "get"
+    RM = "rm"
+    SEARCH = "search"
+
+
+class _Frozen(BaseModel):
+    model_config = ConfigDict(frozen=True, extra="forbid")
+
+
+class ResolvedAlias(_Frozen):
+    """Exactly one (tag, resource, operation) triple matched the term."""
+
+    tag: str
+    resource_name: str
+    operation: Operation
+
+
+class AmbiguousAlias(_Frozen):
+    """>=2 (tag, resource) pairs matched. Sorted lexicographically by tag, then resource."""
+
+    verb: AliasVerb
+    term: str
+    candidates: list[tuple[str, str]]
+
+
+class UnknownAlias(_Frozen):
+    """0 matches for ls/get/rm; or `/api/search/` missing for search."""
+
+    verb: AliasVerb
+    term: str
+    reason: str = "no_such_resource"
+
+
+def resolve(
+    verb: AliasVerb, term: str, model: CommandModel
+) -> ResolvedAlias | AmbiguousAlias | UnknownAlias:
+    if verb is AliasVerb.SEARCH:
+        return _resolve_search(term, model)
+    return _resolve_term(verb, term, model)
+
+
+def _resolve_term(
+    verb: AliasVerb, term: str, model: CommandModel
+) -> ResolvedAlias | AmbiguousAlias | UnknownAlias:
+    needle = term.lower()
+    candidates: list[tuple[str, str, Operation]] = []
+    for tag_name in sorted(model.tags):
+        tag = model.tags[tag_name]
+        for resource_name in sorted(tag.resources):
+            if resource_name.lower() != needle:
+                continue
+            resource = tag.resources[resource_name]
+            op = _required_op_for(verb, resource)
+            if op is None:
+                continue
+            candidates.append((tag_name, resource_name, op))
+    if len(candidates) == 1:
+        resolved_tag, resolved_resource, resolved_op = candidates[0]
+        return ResolvedAlias(
+            tag=resolved_tag, resource_name=resolved_resource, operation=resolved_op
+        )
+    if len(candidates) > 1:
+        return AmbiguousAlias(
+            verb=verb,
+            term=term,
+            candidates=[(t, r) for t, r, _ in candidates],
+        )
+    return UnknownAlias(verb=verb, term=term)
+
+
+def _required_op_for(verb: AliasVerb, resource: Resource) -> Operation | None:
+    """Return the `Operation` the verb requires on `resource`, or None."""
+    if verb is AliasVerb.LS:
+        return resource.list_op
+    if verb is AliasVerb.GET:
+        return resource.get_op
+    if verb is AliasVerb.RM:
+        return resource.delete_op
+    return None  # SEARCH does not flow through this branch
+
+
+def _resolve_search(term: str, model: CommandModel) -> ResolvedAlias | UnknownAlias:
+    for tag_name, resource_name, op in model.iter_operations():
+        if op.path == "/api/search/" and op.http_method is HttpMethod.GET:
+            return ResolvedAlias(
+                tag=tag_name,
+                resource_name=resource_name,
+                operation=op,
+            )
+    return UnknownAlias(
+        verb=AliasVerb.SEARCH,
+        term=term,
+        reason="search_endpoint_unavailable",
+    )

nsc/auth/__init__.py

@@ -0,0 +1,5 @@
+"""Authentication primitives (Phase 4b+)."""
+
+from nsc.auth.verify import VerifyError, VerifyResult, verify
+
+__all__ = ["VerifyError", "VerifyResult", "verify"]