{
  "name": "makeToken",
  "display_name": "makeToken",
  "kind": "module",
  "description": "Create and impersonate a token from explicit credentials or a TeamServer vault credential reference.",
  "command_template": "makeToken [--vault {vault:q}] {username:q?} {password:q?}",
  "target": "beacon",
  "requires_session": true,
  "platforms": ["windows"],
  "archs": ["x86", "x64", "arm64"],
  "args": [
    {
      "name": "--vault",
      "type": "credential",
      "required": false,
      "description": "TeamServer vault credential reference. The TeamServer resolves it to DOMAIN\\user and password before dispatch.",
      "credential_filter": {
        "type": "password"
      }
    },
    {
      "name": "username",
      "type": "text",
      "required": true,
      "description": "Username in Username or DOMAIN\\Username form."
    },
    {
      "name": "password",
      "type": "text",
      "required": true,
      "description": "Password for the supplied username."
    }
  ],
  "examples": [
    "makeToken --vault cred:credentialId",
    "makeToken DOMAIN\\Username Password123!"
  ],
  "source": "manifest"
}