CLI commands

The merged development client implements the following command surface. Session-bearing commands remain unavailable in ordinary source builds until an approved production-signed native session broker is distributed.

thalix login [--json]
thalix logout [--json]
thalix account status [--json]
thalix license status [--json]
thalix billing portal

Login and logout

• thalix login starts an interactive system-browser Authorization Code flow with PKCE S256 and a fixed 127.0.0.1 loopback callback.
• Login requires an interactive terminal. No client secret is embedded in the CLI.
• thalix logout requests remote session revocation. If revocation cannot be confirmed, secured recovery state is retained and the command fails closed.

Account and license status

• thalix account status reports the authenticated account/session view and service availability through the native broker.
• thalix license status requests a fresh server-authoritative entitlement decision and validates the returned billing, entitlement, allocation, installation, policy, contract, and expiry fields.
• A missing, unreachable, stale, malformed, or expired entitlement fails closed. A fresh valid deny or indeterminate decision is reported successfully for inspection but does not authorize product use. The CLI provides no offline authorization.

Billing portal

thalix billing portal requests a short-lived portal URL and opens it in the system browser. It is browser-based and unavailable in JSON mode: the CLI never prints or serializes the portal URL.

Output behavior

Commands that accept --json emit exactly one versioned JSON object to standard output: login, logout, account status, and license status. Human-readable diagnostics use standard error, and failures use stable exit-code categories. Run thalix --help to display the supported command syntax.