wordpress-plugin waf set:
  help: |
    Bulk enable or disable WAF for hosting users.

    Examples:
      imunify360-agent wordpress-plugin waf set --status enabled --all-users
      imunify360-agent wordpress-plugin waf set --status disabled --users alice bob carol
  type: dict
  cli:
    users:
      - root
  schema:
    status:
      type: string
      required: true
      allowed: [enabled, disabled]
      help: Target WAF state for the selected users.
    all_users:
      type: boolean
      default: false
      help: Apply to every hosting user on the server.
    users:
      type: list
      nullable: true
      schema: {type: string}
      help: Apply to a space-separated list of hosting users (e.g. --users alice bob carol).

wordpress-plugin waf status:
  help: |
    Report effective WAF status and its source for every hosting account.

    Examples:
      imunify360-agent wordpress-plugin waf status
      imunify360-agent wordpress-plugin waf status --status disabled --json
      imunify360-agent wordpress-plugin waf status --user alice
  type: dict
  cli:
    users:
      - root
  schema:
    user:
      type: string
      nullable: true
      help: Show only this hosting account.
    status:
      type: string
      nullable: true
      allowed: [enabled, disabled]
      help: Filter by effective WAF status.
    source:
      type: string
      nullable: true
      allowed: [default, override]
      help: Filter by status source (default or per-account override).
    limit:
      type: integer
      coerce: int
      nullable: true
      help: Maximum number of accounts to return (capped at 500).
    offset:
      type: integer
      coerce: int
      default: 0
      help: Number of accounts to skip.