vgs-cli 1.34.0.dev2__py3-none-any.whl → 1.35.0.dev2__py3-none-any.whl

vgs_cli-1.35.0.dev2.data/data/vgscli/form-template.yaml

@@ -0,0 +1,32 @@
+version: 1
+data:
+  # Unique identifier for the Collect Form. Must match ^[A-Za-z0-9_-]+$.
+  # Applying this file creates a new form with this ID, or replaces the
+  # existing form with this ID after a confirmation prompt.
+  id: auto-generated
+
+  # Display name of the Collect Form.
+  name: Auto Generated
+
+  # Card attributes to collect alongside the card number. Set an attribute to
+  # true to enable it; leave it false to keep it disabled. Run
+  # `vgs get form -T <TENANT_ID> <FORM_ID>` to see an existing form in this
+  # same format.
+  card_attributes:
+    brands: true
+    card-type: true
+    product-name: false
+    issuer-bin: false
+    issuing-country: false
+    card-segment-type: false
+    virtual-card: false
+    prepaid-card: false
+    regulated: false
+    additional-card-brand: false
+    reloadable: false
+    hsa: false
+    ebt: false
+    fsa: false
+    bank-name: false
+    bank-phone: false
+    bank-website: false

vgs_cli-1.35.0.dev2.data/data/vgscli/http-route-template.yaml

@@ -0,0 +1,47 @@
+data:
+- type: rule_chain
+  attributes:
+    protocol: http
+    source_endpoint: '*'
+    destination_override_endpoint: https://example.com
+    host_endpoint: '*'
+    port: 80
+    ordinal: null
+    tags:
+      name: Display name of route here
+      source: RouteContainer
+    entries:
+    - phase: REQUEST
+      operation: REDACT
+      token_manager: PERSISTENT
+      public_token_generator: UUID
+      transformer: JSON_PATH
+      transformer_config:
+      - $.field
+      transformer_config_map: null
+      operations: null
+      targets:
+      - body
+      id_selector: null
+      classifiers: {}
+      config:
+        condition: AND
+        rules:
+        - condition: null
+          rules: null
+          expression:
+            field: PathInfo
+            type: string
+            operator: matches
+            values:
+            - /post
+        - condition: null
+          rules: null
+          expression:
+            field: ContentType
+            type: string
+            operator: equals
+            values:
+            - application/json
+        expression: null
+version: 1

vgs_cli-1.35.0.dev2.data/data/vgscli/notification-template.yaml

@@ -0,0 +1,34 @@
+apiVersion: 1.0.0
+kind: NotificationIntegration
+data:
+  # Notification provider to use. Run `vgs get notifications -O
+  # <ORGANIZATION_ID>` to see existing integrations and the provider
+  # parameter names they use.
+  provider: webhook
+
+  # Name of the notification integration to create.
+  name: Route alerts
+
+  # Optional description of the notification integration.
+  description: Route lifecycle notifications
+
+  # Provider-specific configuration. Include every parameter the provider
+  # requires. VGS generates and manages provider-controlled values, such as
+  # the webhook signing secret; do not add them here.
+  providerParameters:
+    - name: url
+      value: https://example.com/webhooks/vgs
+
+  # Events to notify on. Set enabled to false to keep an event configured but
+  # inactive. An organization-scoped event must omit resourceIds. A
+  # non-organization-scoped event requires one or more resource IDs, whose
+  # meaning depends on the event: tenant IDs for a tenant-scoped event,
+  # organization member IDs for a user-scoped event. Check with your VGS
+  # contact for the event's scope if it is not obvious from its name.
+  events:
+    - id: notifications.changes
+      enabled: true
+    - id: route.updated
+      enabled: true
+      resourceIds:
+        - <TENANT_ID>

{vgs_cli-1.34.0.dev2.data → vgs_cli-1.35.0.dev2.data}/data/vgscli/read-credentials-no-pci.yaml

@@ -15,7 +15,7 @@ data:
   {% endif %}
   scopes:
     - name: cards:read
-    - name: cards-attributes:read
+    - name: card-attributes:read
     - name: network-tokens:read
     - name: account-validations:write
     - name: account-validations:read

vgs_cli-1.35.0.dev2.data/data/vgscli/sftp-route-template.yaml

@@ -0,0 +1,38 @@
+data:
+- type: rule_chain
+  attributes:
+    protocol: sftp
+    source_endpoint: '*'
+    destination_override_endpoint: '*'
+    host_endpoint: '*'
+    port: 22
+    ordinal: null
+    tags:
+      name: Display name of route here
+      source: RouteContainer
+    entries:
+    - phase: REQUEST
+      operation: REDACT
+      token_manager: PERSISTENT
+      public_token_generator: UUID
+      transformer: JSON_PATH
+      transformer_config:
+      - $.field
+      transformer_config_map: null
+      operations: null
+      targets: []
+      id_selector: null
+      classifiers: {}
+      config:
+        condition: AND
+        rules:
+        - condition: null
+          rules: null
+          expression:
+            field: filePath
+            type: string
+            operator: matches
+            values:
+            - '*.*'
+        expression: null
+version: 1

vgs_cli-1.35.0.dev2.data/data/vgscli/tenant-schema.yaml

@@ -0,0 +1,69 @@
+---
+"$schema": http://json-schema.org/draft-07/schema#
+type: object
+properties:
+  apiVersion:
+    type: string
+    enum:
+      - 1.0.0
+  kind:
+    type: string
+    enum:
+      - Tenant
+  data:
+    type: object
+    properties:
+      name:
+        type: string
+        minLength: 3
+        maxLength: 50
+        pattern: "^[A-Za-z0-9]+([ ._-][A-Za-z0-9]+)*$"
+      environment:
+        type: string
+        enum:
+          - SANDBOX
+          - LIVE
+      region:
+        type: string
+        enum:
+          - US
+          - EU
+          - APAC
+      organizationId:
+        type: string
+        pattern: ^AC[A-Za-z0-9]{22}$
+      configurations:
+        type: object
+        properties:
+          accountUpdater:
+            "$ref": "#/definitions/enrollmentSettings"
+          networkTokens:
+            "$ref": "#/definitions/enrollmentSettings"
+        additionalProperties: false
+    required:
+      - name
+      - environment
+    additionalProperties: false
+required:
+  - apiVersion
+  - kind
+  - data
+additionalProperties: false
+definitions:
+  enrollmentSettings:
+    type: object
+    properties:
+      visa:
+        "$ref": "#/definitions/enrollmentType"
+      mastercard:
+        "$ref": "#/definitions/enrollmentType"
+      amex:
+        "$ref": "#/definitions/enrollmentType"
+      discover:
+        "$ref": "#/definitions/enrollmentType"
+    additionalProperties: false
+  enrollmentType:
+    type: string
+    enum:
+      - manual
+      - onCreate

vgs_cli-1.35.0.dev2.data/data/vgscli/tenant-template.yaml

@@ -0,0 +1,28 @@
+apiVersion: 1.0.0
+kind: Tenant
+data:
+  # Name of the tenant to create. (Must be between 3 and 50 characters long.)
+  name: Very Good Tenant
+
+  # Environment to create the tenant within.
+  # See https://www.verygoodsecurity.com/docs/terminology/vaults#environments
+  environment: SANDBOX
+
+  # Region to create the tenant in. SANDBOX supports US only.
+  region: US
+
+  # ID of the organization to associate the tenant with.
+  organizationId: <VGS Organization ID>
+
+  # Optional SANDBOX enrollment behavior for payment credential products.
+  configurations:
+    accountUpdater:
+      visa: manual
+      mastercard: manual
+      amex: manual
+      discover: manual
+    networkTokens:
+      visa: manual
+      mastercard: manual
+      amex: manual
+      discover: manual

vgs_cli-1.35.0.dev2.data/data/vgscli/vgs-cli.yaml

@@ -0,0 +1,17 @@
+apiVersion: 1.0.0
+kind: ServiceAccount
+data:
+  name: vgs-cli
+  {%- if vaults | length == 0 %}
+      {{- cli_warn("Service Account won't have access to any tenants inside the organization. If it needs tenant access, use --tenant <TENANT_ID>.") or "" }}
+  {%- else %}
+  vaults:
+    {%- for vault_id in vaults %}
+    - {{ vault_id }}
+    {%- endfor %}
+  {%- endif %}
+  scopes:
+    - name: access-logs:read
+    - name: organizations:read
+    - name: routes:write
+    - name: vaults:write

{vgs_cli-1.34.0.dev2.dist-info → vgs_cli-1.35.0.dev2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: vgs-cli
-Version: 1.34.0.dev2
+Version: 1.35.0.dev2
 Summary: VGS Client
 Home-page: https://github.com/verygoodsecurity/vgs-cli
 Author: Very Good Security
@@ -142,8 +142,9 @@ Use **tenant** and `--tenant/-T` in new commands. Legacy vault commands and
 | --- | --- |
 | `vgs get organizations` | List accessible organizations. |
 | `vgs get tenants` | List all tenants visible to the authenticated identity. |
+| `vgs get tenant -T <TENANT_ID>` | Get one tenant with provisioning, account, configuration, and merchant state. |
 | `vgs generate tenant > tenant.yaml` | Generate a tenant template. |
-| `vgs apply tenant -f tenant.yaml` | Create a tenant from a reviewed template. |
+| `vgs apply tenant -f tenant.yaml` | Create and configure a SANDBOX or LIVE tenant through a staged, resumable workflow. |
 | `vgs apply tenant -O <ORGANIZATION_ID> -f tenant.yaml` | Create a tenant when `organizationId` is omitted from the template. |
 | `vgs apply tenant-resources -T <TENANT_ID> -f resources.yaml --dry-run true` | Validate tenant resources without applying them. |
 | `vgs apply tenant-resources -T <TENANT_ID> -f resources.yaml` | Apply reviewed resources to a tenant. |
@@ -156,9 +157,9 @@ or through `-O/--organization`; if both are present, they must match.
 
 | Command | Purpose |
 | --- | --- |
-| `vgs get notification-providers` | List supported notification providers. |
 | `vgs get notifications -O <ORGANIZATION_ID>` | List notification integrations. |
 | `vgs get notification-events -O <ORGANIZATION_ID> <INTEGRATION_ID>` | List configured events for a notification integration. |
+| `vgs generate notification > notification.yaml` | Generate a notification integration template. |
 | `vgs apply notification -O <ORGANIZATION_ID> -f notification.yaml` | Create or update a notification integration from a file. |
 | `vgs apply notification -O <ORGANIZATION_ID> --enable <INTEGRATION_ID>` | Enable a notification integration. |
 | `vgs apply notification -O <ORGANIZATION_ID> --disable <INTEGRATION_ID>` | Disable a notification integration. |
@@ -171,6 +172,8 @@ access. The CLI masks generated webhook secrets in its output.
 
 | Command | Purpose |
 | --- | --- |
+| `vgs generate route --protocol http` | Generate an HTTP route template. |
+| `vgs generate route --protocol sftp` | Generate an SFTP route template. |
 | `vgs get routes -T <TENANT_ID>` | List tenant routes. |
 | `vgs apply routes -T <TENANT_ID> -f <FILE>` | Apply tenant routes. |
 | `vgs delete routes -T <TENANT_ID> <ROUTE_ID>` | Delete one tenant route. |
@@ -181,6 +184,7 @@ access. The CLI masks generated webhook secrets in its output.
 | --- | --- |
 | `vgs get forms -T <TENANT_ID>` | List Collect Forms. |
 | `vgs get form -T <TENANT_ID> <FORM_ID>` | Get one Collect Form. |
+| `vgs generate form > form.yaml` | Generate a Collect Form template. |
 | `vgs apply form -T <TENANT_ID> -f <FILE>` | Apply a Collect Form from a file. |
 | `vgs apply form -T <TENANT_ID> --json '<JSON>'` | Apply inline Collect Form JSON. |
 | `vgs delete form -T <TENANT_ID> <FORM_ID>` | Delete one Collect Form. |
@@ -196,9 +200,16 @@ access. The CLI masks generated webhook secrets in its output.
 
 ### Service accounts
 
-Generate a service-account resource for exactly one tenant. Names must contain
-1–20 characters. Save the generated YAML so you can review it before applying
-it.
+Generate a service-account resource and save the YAML so you can review it
+before applying it. The general `vgs-cli` template accepts zero or more tenants;
+when no tenant is supplied, the generated account has no tenant access.
+
+```bash
+vgs generate service-account --template vgs-cli -T <TENANT_ID> > service-account.yaml
+```
+
+Payment-credential templates require exactly one tenant and a name containing
+1–20 characters:
 
 ```bash
 vgs generate service-account --template <TEMPLATE> -T <TENANT_ID> --var name=<NAME> > service-account.yaml
@@ -206,6 +217,7 @@ vgs generate service-account --template <TEMPLATE> -T <TENANT_ID> --var name=<NA
 
 | Template | Purpose |
 | --- | --- |
+| `vgs-cli` | Automate common CLI organization, tenant, route, and access-log operations. |
 | `public-credential-collect` | Collect payment credentials without read access. |
 | `read-credentials-no-pci` | Read tokenized credentials without PCI data. |
 | `read-credentials-with-pci` | Read credentials including PCI data. |

{vgs_cli-1.34.0.dev2.dist-info → vgs_cli-1.35.0.dev2.dist-info}/RECORD

@@ -1,68 +1,82 @@
-vgs_cli-1.34.0.dev2.data/data/vgscli/collect-form-api-schema.yaml,sha256=THuJbLUo7LOr0c1JUo3FPJEc9Jvde59K4JjdlkVF3hw,1246
-vgs_cli-1.34.0.dev2.data/data/vgscli/collect-form-schema.yaml,sha256=vHAN6_Gsg14CeSL41sHEQgboYF-CHF2RaNw72aJ3W8o,1337
-vgs_cli-1.34.0.dev2.data/data/vgscli/credentials-admin.yaml,sha256=acyLd54Cp7l2fpugfjVfYh07-MIE0BX-JVq4lHraE1s,869
-vgs_cli-1.34.0.dev2.data/data/vgscli/http-route-template.yaml,sha256=HHKoTF4pSGWUTR1lsw6CIBNdTvTyqNjkeocco80_K38,1663
-vgs_cli-1.34.0.dev2.data/data/vgscli/mft-route-template.yaml,sha256=3TwiVS6yDir3uc0g0G_p5Hj4Gje2aq8Zi6vnnRa4j5Q,142
-vgs_cli-1.34.0.dev2.data/data/vgscli/notification-integration-schema.yaml,sha256=1qHzS5ZxlhTdrDab6-qJhszwu7cpith2HleX3uAO_4E,1837
-vgs_cli-1.34.0.dev2.data/data/vgscli/public-credential-collect.yaml,sha256=CiorC-6TMx7M0TI8DHmoRSfVKDpOom2wIr_ilwmHQNA,696
-vgs_cli-1.34.0.dev2.data/data/vgscli/read-credentials-no-pci.yaml,sha256=7-31MJewfRI8VVveobdLjeusYE1Edk1xRrWplU3VMow,770
-vgs_cli-1.34.0.dev2.data/data/vgscli/read-credentials-with-pci.yaml,sha256=jWXgFdcqZYisakAt9COM6cjf2-x_Q4eidDLaUh8CZOk,796
-vgs_cli-1.34.0.dev2.data/data/vgscli/service-account-schema.yaml,sha256=L1pjNXgnks15N1wNgf_1GmGcOvxn0nu49v7ersUjFno,1090
-vgs_cli-1.34.0.dev2.data/data/vgscli/tenant-template.yaml,sha256=Q0z5_ds5UWign6ndBodLtXVZHWWCV-VsUVMnvJAhqPM,388
-vgs_cli-1.34.0.dev2.data/data/vgscli/vault-resources.yaml,sha256=95CCxQher3MBQq96bvjZviNgo1rgv_NhCtI8X-oxIpA,26335
-vgs_cli-1.34.0.dev2.data/data/vgscli/vault-schema.yaml,sha256=a-wW7X8RyHr-669wtOZrlxlIfeQVtx8EUfA-3vpYytk,637
-vgs_cli-1.34.0.dev2.data/data/vgscli/vault-template.yaml,sha256=IlDisL3H5LXUDMkhUaouKMarRdu0-pJxpTz8ij_lp_M,383
-vgs_cli-1.34.0.dev2.dist-info/licenses/LICENSE,sha256=NwSyzgDYdzv6O2ns2C6UODGI8LN1VnVe_FPTnWS4eXY,1082
+vgs_cli-1.35.0.dev2.data/data/vgscli/collect-form-api-schema.yaml,sha256=THuJbLUo7LOr0c1JUo3FPJEc9Jvde59K4JjdlkVF3hw,1246
+vgs_cli-1.35.0.dev2.data/data/vgscli/collect-form-schema.yaml,sha256=vHAN6_Gsg14CeSL41sHEQgboYF-CHF2RaNw72aJ3W8o,1337
+vgs_cli-1.35.0.dev2.data/data/vgscli/credentials-admin.yaml,sha256=acyLd54Cp7l2fpugfjVfYh07-MIE0BX-JVq4lHraE1s,869
+vgs_cli-1.35.0.dev2.data/data/vgscli/form-template.yaml,sha256=VblOlsDLfwZP6wR6nIIX1WSrUAt4leqfMdbXr3xYvWg,934
+vgs_cli-1.35.0.dev2.data/data/vgscli/http-route-template.yaml,sha256=vGHvBXA_6pwFtH1vVRWKiwxb4sahzuLvpqGAlavrStc,1085
+vgs_cli-1.35.0.dev2.data/data/vgscli/notification-integration-schema.yaml,sha256=1qHzS5ZxlhTdrDab6-qJhszwu7cpith2HleX3uAO_4E,1837
+vgs_cli-1.35.0.dev2.data/data/vgscli/notification-template.yaml,sha256=hr36msbrgiTjWligLHVDHMmO49QDzjTwBSLYoBw3WQE,1288
+vgs_cli-1.35.0.dev2.data/data/vgscli/public-credential-collect.yaml,sha256=CiorC-6TMx7M0TI8DHmoRSfVKDpOom2wIr_ilwmHQNA,696
+vgs_cli-1.35.0.dev2.data/data/vgscli/read-credentials-no-pci.yaml,sha256=_kWRne_ARh8v7A_jHG08gwgPG6NqZhrDRyq6L-ULs2M,769
+vgs_cli-1.35.0.dev2.data/data/vgscli/read-credentials-with-pci.yaml,sha256=jWXgFdcqZYisakAt9COM6cjf2-x_Q4eidDLaUh8CZOk,796
+vgs_cli-1.35.0.dev2.data/data/vgscli/service-account-schema.yaml,sha256=L1pjNXgnks15N1wNgf_1GmGcOvxn0nu49v7ersUjFno,1090
+vgs_cli-1.35.0.dev2.data/data/vgscli/sftp-route-template.yaml,sha256=zkT6lIVDgVyzLKgZ8QnyJJooy2egZk1cQthdjan_JrM,853
+vgs_cli-1.35.0.dev2.data/data/vgscli/tenant-schema.yaml,sha256=gBO7xVe2qXSymG0B_45hC11X5nm_jCCAH4Yjs-sbC8g,1457
+vgs_cli-1.35.0.dev2.data/data/vgscli/tenant-template.yaml,sha256=F0wIBkC2dFJUNeJet-FzPX3qrLMHcGIaJvhsDzzAOCc,765
+vgs_cli-1.35.0.dev2.data/data/vgscli/vault-resources.yaml,sha256=95CCxQher3MBQq96bvjZviNgo1rgv_NhCtI8X-oxIpA,26335
+vgs_cli-1.35.0.dev2.data/data/vgscli/vault-schema.yaml,sha256=a-wW7X8RyHr-669wtOZrlxlIfeQVtx8EUfA-3vpYytk,637
+vgs_cli-1.35.0.dev2.data/data/vgscli/vault-template.yaml,sha256=IlDisL3H5LXUDMkhUaouKMarRdu0-pJxpTz8ij_lp_M,383
+vgs_cli-1.35.0.dev2.data/data/vgscli/vgs-cli.yaml,sha256=5gCjjloyepaKI6zZfDLeUEWxuRExI-dGJI9RO3omP2k,484
+vgs_cli-1.35.0.dev2.dist-info/licenses/LICENSE,sha256=NwSyzgDYdzv6O2ns2C6UODGI8LN1VnVe_FPTnWS4eXY,1082
 vgscli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-vgscli/_version.py,sha256=LLDTvaySlCanrTjEZQVXiEcbLIGJtg9ZoJOV79fURSM,1681
+vgscli/_version.py,sha256=0HHI66nZPGvwbIf40mXNC7yUBONlS3ZLuT9MVF9ALCM,1681
 vgscli/access_logs.py,sha256=G0GjlLjWiC-N6OzK6-RCvWddcVGQlLCLAcyO9pLWIOM,1928
 vgscli/audits_api.py,sha256=6FjpS1yTALio-DejgIS2eDw75ChjDp4GoAGXh4uZExU,3211
 vgscli/auth.py,sha256=vdUZ12nqtefIuSHNmwCFvxoqwS3m6ZP5TqLZFNwKnSU,2104
 vgscli/auth_server.py,sha256=e-xYoVebWM6cQNxuMr5rYzKuswNIrexnLSYo1ma48WY,4096
 vgscli/auth_utils.py,sha256=aC1VI0dFdFeupLS9Okz4uDz-wHhhFabqiLUg2R5vO2s,600
 vgscli/callback_server.py,sha256=oFFF5AGbbwhF7Hsc5fzS7jeGFzIMbebc9Qdq8uEl1PY,1055
+vgscli/calm_api.py,sha256=5ZZhJUCuA2E5X670L-EkB_mL2kqHPrYy-ca6WtwTacg,1384
 vgscli/cert_manager_api.py,sha256=ek25BcyGeUo0pBoqineMTYMgmQaYJfimFFHMljZh5yA,1646
+vgscli/cli_progress.py,sha256=Kpc7iZo0zO6YX3WynteBELuWSYGVvqEjKLq2E5x4lnE,2520
 vgscli/cli_utils.py,sha256=NzXK29_yIDrB-3T_XdLLB8NCWneQ-cpZFi9mazQL9tQ,3810
-vgscli/click_extensions.py,sha256=VoaBJpR_ZVNQYTX1x-TZrGAyLiuAGXQq_ZkLU7Y6sZ0,6678
+vgscli/click_extensions.py,sha256=m-RpaPaH69m4caYbuiu0j2blxeyy8c8hA0Tvygw1Mvc,7271
 vgscli/collect_forms.py,sha256=HAg-tvpXxmVq5Zns4v8G0cP-tgYKuWmVFwzuNjieu-A,4619
 vgscli/collect_forms_api.py,sha256=JHnnsOUyStD7yR92LfGqn8DOpnu0l0yqTUMQnWE_NGs,1246
 vgscli/config_file.py,sha256=HB8lANU0qoO09Wnkf-QDzPh2qtrnFcqcetnCaQgtQ3U,1543
-vgscli/errors.py,sha256=6ENjyWFV6kenwYqOfLMDCuLcHb8GL5Xo_K_uViRQUMc,10385
+vgscli/errors.py,sha256=9iWS8v6Zq9A3Iqt3G1-NJQEwT4d8DI_JoU7fdiqHg00,11946
 vgscli/file_token_util.py,sha256=537b54paMGw0u5PL5VJgQqQ7awKa9lQP88n3tUc_lyw,771
 vgscli/id_generator.py,sha256=3CbvSOUSyLON76p6M8wUhVQVig8j75_rnWdpxLhBifM,1510
 vgscli/keyring_token_util.py,sha256=cnR72-0AInzujUsIwHoXwPbgprbkllgAXN-AAI3qsPM,4632
 vgscli/notifications.py,sha256=6D8HFDEl3X4V0V9fYZT-9nWYe2KYVahfhRLMF0pbh4I,6252
 vgscli/notifications_api.py,sha256=1EXmRb2fOJrU1QOAZ6gmq8yMjBLhNZGSVs3kRtD2Dfw,2342
+vgscli/payment_accounts_api.py,sha256=wF6K3m7nlKtPmqO9RCpmGFSXYHWtwfhXqNfgI1IGqFI,1665
+vgscli/tenant_configuration.py,sha256=iC33f2lBHDEL4oHPvdlWp_w--u2x_nWOb86jTHumDLg,5881
+vgscli/tenant_creation.py,sha256=9O1i4JsHuEIQt_QkcWYEcenLi8kGJBivcln6LkoHl7U,22230
+vgscli/tenant_provisioning_api.py,sha256=-mQcSECgWG23LKczu1B9J1d7Bb6ZA6lkpr9RegJiiLg,1203
 vgscli/testing.py,sha256=MLrsvy3mEwvjtqyuG0UjwEX-rDkbWUo52aXvu2H2sTk,1437
 vgscli/text.py,sha256=c2d1As7awq8PlEF9NiI6JrjsYYousj9YT0o1xOQ2MQM,172
 vgscli/token_handler.py,sha256=MvtmlicqnGrcopNkTr8Q2RlKE7IDj_sJFxF_39Jd7W8,183
 vgscli/vgs.py,sha256=BiQuHeOuH25zbTdwNOsW_O69YuKsZFTYA2jr9JFRZng,6262
-vgscli/cli/__init__.py,sha256=VRKz8oZF1OhAzkZHZGFYJEQgu3oMHk2nSld3lCoJtuQ,1624
+vgscli/cli/__init__.py,sha256=112ej_l1olouWMRIM8H4-s5C4qiG8-u6RziWT102wNk,2765
 vgscli/cli/commands/__init__.py,sha256=8ptc9-Vzdx0HU3ZeMcKERYjmJyuB5IMjBSF3Igx5yQ4,206
-vgscli/cli/commands/apply.py,sha256=D3YwW9vNxyq25IuObfd_jPM0m-U_GmrNauN0wS1LL0U,20049
+vgscli/cli/commands/apply.py,sha256=jLSllU1Hz8WX3ARL-lU8BtDv72bMzP3fXs0vGDtyoWc,26312
 vgscli/cli/commands/certificate.py,sha256=xQV-G8ZWP9uPFqrczlCpCZkHUt2aJflBP2cc5hjobIw,22930
 vgscli/cli/commands/delete.py,sha256=2nuYKhp0FhoGTcmJUECjRnlYrKLdAgIoIp-y25ViwDg,3873
-vgscli/cli/commands/generate.py,sha256=k0bw3Cu8Y6qs0sHHnC-CBtlvnl7Rzx2rjlCwTCFaWes,4117
-vgscli/cli/commands/get.py,sha256=5X9CS8FdC33JUwGn-0qaZYDPeNakhfxSU8aX40LPW-M,8818
+vgscli/cli/commands/generate.py,sha256=cVrU54_o3szgyi7tbMQtMAemx-37xYcFKrAcLcyMglw,5448
+vgscli/cli/commands/get.py,sha256=Xm8bN11vOjnDA3o_uuAkBXM2wtJQZDrTdQY1ykug4LE,11315
 vgscli/cli/types/__init__.py,sha256=a-P-SoGHpLzMg7CL1hhg5x_nf6sHq0qAuGm_AtIITmw,107
 vgscli/cli/types/resource_id.py,sha256=7JILR-KjoVGQDHB40tXJfTcU53iR8wM9Zr24fY5le3o,1172
 vgscli/cli/types/variable.py,sha256=IVcszPoWmTjeo_evDsLN06LuUZGTLL-wcZCVfBNBP8I,414
-vgscli/resource-templates/http-route-template.yaml,sha256=HHKoTF4pSGWUTR1lsw6CIBNdTvTyqNjkeocco80_K38,1663
-vgscli/resource-templates/mft-route-template.yaml,sha256=3TwiVS6yDir3uc0g0G_p5Hj4Gje2aq8Zi6vnnRa4j5Q,142
-vgscli/resource-templates/tenant-template.yaml,sha256=Q0z5_ds5UWign6ndBodLtXVZHWWCV-VsUVMnvJAhqPM,388
+vgscli/resource-templates/form-template.yaml,sha256=VblOlsDLfwZP6wR6nIIX1WSrUAt4leqfMdbXr3xYvWg,934
+vgscli/resource-templates/http-route-template.yaml,sha256=vGHvBXA_6pwFtH1vVRWKiwxb4sahzuLvpqGAlavrStc,1085
+vgscli/resource-templates/notification-template.yaml,sha256=hr36msbrgiTjWligLHVDHMmO49QDzjTwBSLYoBw3WQE,1288
+vgscli/resource-templates/sftp-route-template.yaml,sha256=zkT6lIVDgVyzLKgZ8QnyJJooy2egZk1cQthdjan_JrM,853
+vgscli/resource-templates/tenant-template.yaml,sha256=F0wIBkC2dFJUNeJet-FzPX3qrLMHcGIaJvhsDzzAOCc,765
 vgscli/resource-templates/vault-template.yaml,sha256=IlDisL3H5LXUDMkhUaouKMarRdu0-pJxpTz8ij_lp_M,383
 vgscli/resource-templates/service-account/credentials-admin.yaml,sha256=acyLd54Cp7l2fpugfjVfYh07-MIE0BX-JVq4lHraE1s,869
 vgscli/resource-templates/service-account/public-credential-collect.yaml,sha256=CiorC-6TMx7M0TI8DHmoRSfVKDpOom2wIr_ilwmHQNA,696
-vgscli/resource-templates/service-account/read-credentials-no-pci.yaml,sha256=7-31MJewfRI8VVveobdLjeusYE1Edk1xRrWplU3VMow,770
+vgscli/resource-templates/service-account/read-credentials-no-pci.yaml,sha256=_kWRne_ARh8v7A_jHG08gwgPG6NqZhrDRyq6L-ULs2M,769
 vgscli/resource-templates/service-account/read-credentials-with-pci.yaml,sha256=jWXgFdcqZYisakAt9COM6cjf2-x_Q4eidDLaUh8CZOk,796
+vgscli/resource-templates/service-account/vgs-cli.yaml,sha256=5gCjjloyepaKI6zZfDLeUEWxuRExI-dGJI9RO3omP2k,484
 vgscli/validation-schemas/collect-form-api-schema.yaml,sha256=THuJbLUo7LOr0c1JUo3FPJEc9Jvde59K4JjdlkVF3hw,1246
 vgscli/validation-schemas/collect-form-schema.yaml,sha256=vHAN6_Gsg14CeSL41sHEQgboYF-CHF2RaNw72aJ3W8o,1337
 vgscli/validation-schemas/notification-integration-schema.yaml,sha256=1qHzS5ZxlhTdrDab6-qJhszwu7cpith2HleX3uAO_4E,1837
 vgscli/validation-schemas/service-account-schema.yaml,sha256=L1pjNXgnks15N1wNgf_1GmGcOvxn0nu49v7ersUjFno,1090
+vgscli/validation-schemas/tenant-schema.yaml,sha256=gBO7xVe2qXSymG0B_45hC11X5nm_jCCAH4Yjs-sbC8g,1457
 vgscli/validation-schemas/vault-resources.yaml,sha256=95CCxQher3MBQq96bvjZviNgo1rgv_NhCtI8X-oxIpA,26335
 vgscli/validation-schemas/vault-schema.yaml,sha256=a-wW7X8RyHr-669wtOZrlxlIfeQVtx8EUfA-3vpYytk,637
-vgs_cli-1.34.0.dev2.dist-info/METADATA,sha256=xUPQHj1GSm6f6bBcNqliRrHQEDwNBgnx_elm2S38jWg,8226
-vgs_cli-1.34.0.dev2.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-vgs_cli-1.34.0.dev2.dist-info/entry_points.txt,sha256=wCWhRQiMX4Ja6kkqJlYr8LbuiywpmXyyRAZPsau-_RY,39
-vgs_cli-1.34.0.dev2.dist-info/top_level.txt,sha256=gabTxCWMkl80q6ha_m-hs_1wQMfGntZcv5DEmkl8JEw,7
-vgs_cli-1.34.0.dev2.dist-info/RECORD,,
+vgs_cli-1.35.0.dev2.dist-info/METADATA,sha256=BgcCMIQRMIizLbofbdWzRQKrwq0V5iYsEfO_n22u24U,8984
+vgs_cli-1.35.0.dev2.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+vgs_cli-1.35.0.dev2.dist-info/entry_points.txt,sha256=wCWhRQiMX4Ja6kkqJlYr8LbuiywpmXyyRAZPsau-_RY,39
+vgs_cli-1.35.0.dev2.dist-info/top_level.txt,sha256=gabTxCWMkl80q6ha_m-hs_1wQMfGntZcv5DEmkl8JEw,7
+vgs_cli-1.35.0.dev2.dist-info/RECORD,,

vgscli/_version.py

@@ -6,7 +6,7 @@ from packaging.version import InvalidVersion, Version
 
 from vgscli.text import bold, green
 
-__version__ = "1.34.0.dev2"
+__version__ = "1.35.0.dev2"
 
 
 # noinspection PyBroadException

vgscli/calm_api.py

@@ -0,0 +1,45 @@
+from simple_rest_client.api import API
+from simple_rest_client.resource import Resource
+
+from vgscli._version import __version__
+
+CALM_URLS = {
+    "dev": {
+        "SANDBOX": "https://calm.dev.verygoodsecurity.app",
+        "LIVE": "https://calm.dev.verygoodsecurity.app",
+    },
+    "prod": {
+        "SANDBOX": "https://calm.sandbox.verygoodsecurity.app",
+        "LIVE": "https://calm.live.verygoodsecurity.app",
+    },
+}
+
+
+class MerchantsResource(Resource):
+    actions = {
+        "create": {"method": "POST", "url": "merchants"},
+        "list": {"method": "GET", "url": "merchants"},
+        "update_preferences": {
+            "method": "PATCH",
+            "url": "merchants/{}/preferences",
+        },
+        "create_account_updater": {"method": "POST", "url": "merchants/au"},
+    }
+
+
+def create_api(environment, tenant_environment, tenant_id, token):
+    api = API(
+        api_root_url=CALM_URLS[environment][tenant_environment],
+        headers={
+            "Accept": "application/json",
+            "Authorization": f"Bearer {token}",
+            "Calm-Tenant": tenant_id,
+            "Content-Type": "application/json",
+            "User-Agent": f"VGS CLI {__version__}",
+        },
+        timeout=30,
+        append_slash=False,
+        json_encode_body=True,
+    )
+    api.add_resource(resource_name="merchants", resource_class=MerchantsResource)
+    return api

vgscli/cli/__init__.py

@@ -3,9 +3,14 @@ from vgs.sdk.account_mgmt import AccountMgmtAPI
 from vgs.sdk.vault_mgmt import VaultMgmtAPI
 
 from vgscli.auth import handshake, token_util
+from vgscli.calm_api import create_api as create_calm_api_client
 from vgscli.collect_forms_api import create_api as create_collect_forms_api_client
 from vgscli.notifications import resolve_organization
 from vgscli.notifications_api import create_api as create_notifications_api_client
+from vgscli.payment_accounts_api import create_api as create_payment_accounts_api_client
+from vgscli.tenant_provisioning_api import (
+    create_api as create_tenant_provisioning_api_client,
+)
 
 
 def create_account_mgmt_api(ctx: click.Context) -> AccountMgmtAPI:
@@ -35,6 +40,39 @@ def create_collect_forms_api(ctx: click.Context, vault_id: str):
     return create_collect_forms_api_client(vault_id, environment, access_token)
 
 
+def create_tenant_provisioning_api(ctx: click.Context):
+    environment = ctx.obj.env
+
+    handshake(ctx, environment)
+    access_token = token_util.get_access_token()
+
+    return create_tenant_provisioning_api_client(environment, access_token)
+
+
+def create_payment_accounts_api(
+    ctx: click.Context, tenant_environment: str, tenant_id: str
+):
+    environment = ctx.obj.env
+
+    handshake(ctx, environment)
+    access_token = token_util.get_access_token()
+
+    return create_payment_accounts_api_client(
+        environment, tenant_environment, tenant_id, access_token
+    )
+
+
+def create_calm_api(ctx: click.Context, tenant_environment: str, tenant_id: str):
+    environment = ctx.obj.env
+
+    handshake(ctx, environment)
+    access_token = token_util.get_access_token()
+
+    return create_calm_api_client(
+        environment, tenant_environment, tenant_id, access_token
+    )
+
+
 def create_notifications_api(ctx: click.Context, organization_id: str = None):
     environment = ctx.obj.env