@bussolabs/closeyourit-cli 0.1.0 → 0.2.1

package/README.md

@@ -51,6 +51,7 @@ CLOSEYOURIT_TOKEN=cyi_u_… CLOSEYOURIT_API_URL=https://www.closeyour.it \
 | `projects settings show --project <id\|key>` | Show a project's settings (log/analytics retention + feature flags). |
 | `projects settings update --project <id\|key> [--logs-retention-days] [--analytics-retention-days] [--roadmap-enabled] [--quick-bug-report-enabled] [--analytics-enabled]` | Update a project's settings (only the passed fields change). |
 | `projects github --project <id\|key>` | Show a project's GitHub integration (repo link + tag→release binding rules). |
+| `projects github-connect --project <id\|key> --repository <owner/name>` | Connect a project to a repository visible to the organization's GitHub App. |
 | `projects github-map [--connected-only]` | List every visible CloseYourIt project and its connected GitHub repository; automatically fetches all pages. |
 | `projects github-update --project <id\|key> [--default-branch] [--production-environment-id] [--staging-environment-id] [--sync-enabled] [--tag-binding-enabled] [--autoclose-on-merge]` | Update a project's GitHub binding rules (only the passed fields change). |
 | `groups list [--page]` | List groups (macro-projects) in your org. |

package/dist/base.js

@@ -101,6 +101,13 @@ class BaseCommand extends core_1.Command {
             }
             return this.exit(1);
         }
+        // Oclif's default JSON formatter serializes the complete CommandError. That object references
+        // the command instance and therefore cfg/api.config, including the bearer token. Never pass an
+        // unknown error to that formatter in JSON mode: emit a deliberately small allow-listed envelope.
+        if (this.jsonEnabled()) {
+            this.logJson({ error: { code: error_codes_1.ErrorCodes.System.unexpected, message: 'Command failed' } });
+            return this.exit(1);
+        }
         return super.catch(error);
     }
 }

package/dist/commands/projects/github-connect.d.ts

@@ -0,0 +1,10 @@
+import { BaseCommand } from '../../base';
+export default class ProjectsGithubConnect extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        repository: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/projects/github-connect.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+const output_1 = require("../../lib/output");
+class ProjectsGithubConnect extends base_1.BaseCommand {
+    static description = 'Connect a project to a repository available to the organization GitHub App';
+    static examples = [
+        '<%= config.bin %> projects github-connect -p CYAG --repository bussolabs/closeyourit-agent',
+    ];
+    static flags = {
+        ...base_1.projectFlag,
+        repository: core_1.Flags.string({ description: 'GitHub repository as owner/name', required: true }),
+    };
+    async run() {
+        const { flags } = await this.parse(ProjectsGithubConnect);
+        const projectId = await this.resolveProjectId(flags.project);
+        const res = await this.api.post(`/cli/v1/projects/${encodeURIComponent(projectId)}/github`, { full_name: flags.repository });
+        if (!this.jsonEnabled()) {
+            const data = res.data ?? {};
+            const repository = (data.repository ?? {});
+            this.log('GitHub repository connected:');
+            this.log((0, output_1.renderRecord)({ project_id: data.project_id, full_name: repository.full_name, default_branch: repository.default_branch }));
+        }
+        return res;
+    }
+}
+exports.default = ProjectsGithubConnect;

package/dist/commands/whoami.js

@@ -2,11 +2,30 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const base_1 = require("../base");
 class Whoami extends base_1.BaseCommand {
-    static description = 'Show the authenticated account, organization, token and permissions';
+    static description = 'Show the authenticated account, organization, token prefix and permissions';
     static examples = ['<%= config.bin %> whoami', '<%= config.bin %> whoami --json'];
     async run() {
         const res = await this.api.get('/cli/v1/whoami');
-        const who = res.data;
+        // Rebuild from an allow-list. If a future backend accidentally includes a token secret or other
+        // authentication internals, `--json` must not proxy them to stdout.
+        const who = {
+            account: res.data.account && {
+                id: res.data.account.id,
+                name: res.data.account.name,
+                email: res.data.account.email,
+            },
+            organization: res.data.organization && {
+                id: res.data.organization.id,
+                name: res.data.organization.name,
+                slug: res.data.organization.slug,
+            },
+            token: res.data.token && {
+                id: res.data.token.id,
+                name: res.data.token.name,
+                prefix: res.data.token.prefix,
+            },
+            permissions: res.data.permissions,
+        };
         if (!this.jsonEnabled()) {
             this.log(`Account:     ${who.account?.name ?? '-'} <${who.account?.email ?? '-'}>`);
             this.log(`Organization: ${who.organization?.name ?? '-'} (${who.organization?.slug ?? '-'})`);