@apex-actions/cli 0.72.0 → 0.73.0

package/dist/cli/tenant/main.js

@@ -1,6 +1,8 @@
 import { Command } from 'commander';
 import chalk from 'chalk';
 import { listDepartures, purgeDeparture } from '../../src/application/manage-departures.js';
+import { backfillAccounts } from '../../src/application/manage-accounts.js';
+import { backfillLines } from '../../src/domain/accounts.js';
 import { HttpControlPlane, NotConfiguredError } from '../../src/infrastructure/control-plane-http.js';
 import { countsLine, departureLine } from '../../src/domain/departures.js';
 /** Build the API client, or explain what is missing and stop. */
@@ -75,7 +77,34 @@ const purgeCommand = new Command('purge')
     }
     console.log(chalk.yellow(`${report.repositories.length} repositor${report.repositories.length === 1 ? 'y' : 'ies'} and everything under ${report.repositories.length === 1 ? 'it' : 'them'} would be deleted, with the installation's deliveries and organisation secrets. Re-run with --apply.`));
 });
+const backfillCommand = new Command('backfill')
+    .description('Move every installation into one Account owned by --owner, its only member — a dry run unless --apply (TASK-0195)')
+    .requiredOption('--owner <login>', 'the GitHub login the Owner signs in with; they must have signed in since 0.72.0')
+    .option('--name <name>', 'the Account’s name, when it does not exist yet')
+    .option('--keep-paused-trials', 'leave paused trials in the provider (default: cancel them — decisions-log O19)')
+    .option('--apply', 'do it (default: report what would be done)')
+    .option('--json', 'machine-readable output')
+    .action(async (opts) => {
+    const client = api();
+    if (!client)
+        return;
+    const outcome = await backfillAccounts(client, { ownerLogin: opts.owner, name: opts.name, cancelPausedTrials: opts.keepPausedTrials !== true }, opts.apply === true);
+    if (outcome.kind === 'refused') {
+        console.error(chalk.red(outcome.message));
+        process.exitCode = 1;
+        return;
+    }
+    if (opts.json === true) {
+        console.log(JSON.stringify(outcome.value, null, 2));
+        return;
+    }
+    for (const line of backfillLines(outcome.value))
+        console.log(line);
+    if (!outcome.value.applied)
+        console.log(chalk.yellow('\nNothing was changed. Review the above, then re-run with --apply.'));
+});
 export default new Command('tenant')
-    .description("Departed tenants: who left, when their data is deleted, and deleting it now on request")
+    .description('Tenants: who left and deleting their data on request, and the one-time move into Accounts')
     .addCommand(departuresCommand)
-    .addCommand(purgeCommand);
+    .addCommand(purgeCommand)
+    .addCommand(backfillCommand);

package/dist/src/application/manage-accounts.js

@@ -0,0 +1,12 @@
+/**
+ * The one-time move into Accounts — a dry run unless `apply`. The control plane
+ * decides everything; the machine token is the only caller it accepts.
+ */
+export const backfillAccounts = async (api, input, apply) => {
+    try {
+        return { kind: 'ok', value: await api.accountsBackfill(input, apply) };
+    }
+    catch (err) {
+        return { kind: 'refused', message: err instanceof Error ? err.message : String(err) };
+    }
+};

package/dist/src/domain/accounts.js

@@ -0,0 +1,33 @@
+/**
+ * The Accounts backfill as the control plane reports it (control-plane
+ * `POST /api/v1/admin/accounts/backfill`, TASK-0195), and how a person reads it.
+ */
+const ORG_VERB = {
+    connect: ['would join', 'joined'],
+    connected: ['already in', 'already in'],
+    elsewhere: ['stays in another Account', 'stays in another Account'],
+    unreachable: ['left out: GitHub cannot name it', 'left out: GitHub cannot name it'],
+};
+const SUB_VERB = {
+    cancel: ['would be cancelled now', 'cancelled'],
+    keep: ['kept — live, yours to decide', 'kept — live, yours to decide'],
+    leave: ['left as it is', 'left as it is'],
+};
+/** The report as lines, in the tense of what happened: "would" for a dry run. */
+export const backfillLines = (r) => {
+    const t = r.applied ? 1 : 0;
+    const lines = [
+        `Account: ${r.account.name}${r.account.exists ? ` (exists, ${r.account.id ?? '?'})` : r.applied ? ` (created, ${r.account.id ?? '?'})` : ' (would be created)'}`,
+        `Owner and only member: ${r.owner.login}`,
+        'Organizations:',
+        ...r.organizations.map((o) => `  ${o.login} — installation ${o.installationId}: ${ORG_VERB[o.action][t]}`),
+    ];
+    if (r.subscriptions.length > 0)
+        lines.push('Subscriptions:', ...r.subscriptions.map((s) => `  ${s.owner} (${s.status}): ${SUB_VERB[s.action][t]}`));
+    if (r.grants.length > 0) {
+        lines.push('Open grants — unchanged here; choose the one to keep when the claim pools per Account:', ...r.grants.map((g) => `  ${g.owner}: ${g.minutesPerMonth} minutes a month, ${g.concurrency} concurrent${g.expiresAt === undefined ? '' : `, until ${g.expiresAt.slice(0, 10)}`}`));
+    }
+    if (r.notes.length > 0)
+        lines.push('Notes:', ...r.notes.map((n) => `  ${n}`));
+    return lines;
+};

package/dist/src/infrastructure/control-plane-http.js

@@ -220,6 +220,9 @@ export class HttpControlPlane {
     async purgeDeparture(installationId, apply) {
         return await this.#json('POST', `/api/v1/departures/${installationId}/purge${apply ? '?apply=true' : ''}`);
     }
+    async accountsBackfill(input, apply) {
+        return await this.#json('POST', `/api/v1/admin/accounts/backfill${apply ? '?apply=true' : ''}`, input);
+    }
     async actionPolicy(owner) {
         return await this.#json('GET', `/api/v1/orgs/${encodeURIComponent(owner)}/action-policy`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apex-actions/cli",
-  "version": "0.72.0",
+  "version": "0.73.0",
   "license": "SEE LICENSE IN LICENSE",
   "//files": "Without this npm ships src, test and the CI config alongside the binary a user installs.",
   "files": [