@bussolabs/closeyourit-cli 0.6.0 → 0.7.1

package/dist/commands/projects/github-update.d.ts

@@ -10,6 +10,7 @@ export default class ProjectsGithubUpdate extends BaseCommand {
         'sync-enabled': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         'tag-binding-enabled': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         'autoclose-on-merge': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        'sync-secrets': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<unknown>;

package/dist/commands/projects/github-update.js

@@ -9,6 +9,7 @@ class ProjectsGithubUpdate extends base_1.BaseCommand {
         '<%= config.bin %> projects github-update -p LBRA --production-environment-id <env-uuid>',
         '<%= config.bin %> projects github-update -p LBRA --no-tag-binding-enabled',
         '<%= config.bin %> projects github-update -p LBRA --default-branch main --autoclose-on-merge',
+        '<%= config.bin %> projects github-update -p LBRA --sync-secrets',
     ];
     static flags = {
         ...base_1.projectFlag,
@@ -28,6 +29,10 @@ class ProjectsGithubUpdate extends base_1.BaseCommand {
             allowNo: true,
             description: 'Enable/disable moving the ticket to done on PR merge',
         }),
+        'sync-secrets': core_1.Flags.boolean({
+            allowNo: true,
+            description: 'Enable/disable pushing vault secrets to the GitHub Environment secrets (SECRETS_JSON)',
+        }),
     };
     async run() {
         const { flags } = await this.parse(ProjectsGithubUpdate);
@@ -47,6 +52,8 @@ class ProjectsGithubUpdate extends base_1.BaseCommand {
             body.tag_binding_enabled = flags['tag-binding-enabled'];
         if (flags['autoclose-on-merge'] !== undefined)
             body.autoclose_on_merge = flags['autoclose-on-merge'];
+        if (flags['sync-secrets'] !== undefined)
+            body.sync_secrets = flags['sync-secrets'];
         // The GitHub action responds to both PATCH and PUT (Rails singleton `resource` update); the CLI
         // transport speaks PUT — the backend applies only the keys present in the body either way.
         const res = await this.api.put(`/cli/v1/projects/${encodeURIComponent(projectId)}/github`, body);

package/dist/commands/secrets/assets/list.d.ts

@@ -2,8 +2,6 @@ import { BaseCommand } from '../../../base';
 export default class SecretsAssetsList extends BaseCommand {
     static description: string;
     static flags: {
-        page: import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
-        per: import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
         project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<unknown>;

package/dist/commands/secrets/assets/list.js

@@ -1,18 +1,18 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const core_1 = require("@oclif/core");
 const base_1 = require("../../../base");
 const output_1 = require("../../../lib/output");
+const paginate_1 = require("../../../lib/paginate");
 class SecretsAssetsList extends base_1.BaseCommand {
     static description = 'List encrypted secret files visible to a project (metadata only)';
-    static flags = { ...base_1.projectFlag, page: core_1.Flags.integer({ default: 1 }), per: core_1.Flags.integer({ default: 50 }) };
+    static flags = { ...base_1.projectFlag };
     async run() {
         const { flags } = await this.parse(SecretsAssetsList);
         const projectId = await this.resolveProjectId(flags.project);
-        const res = await this.api.get(`/cli/v1/projects/${encodeURIComponent(projectId)}/secret_assets?page=${flags.page}&per=${flags.per}`);
+        const data = await (0, paginate_1.fetchAllPages)(this.api, `/cli/v1/projects/${encodeURIComponent(projectId)}/secret_assets`);
         if (!this.jsonEnabled())
-            this.log((0, output_1.renderTable)(['ID', 'NAME', 'TYPE', 'ENV', 'VERSION', 'BYTES'], (res.data ?? []).map((a) => [a.id, a.name, a.asset_type, a.environment?.code ?? 'all', a.current_version?.number ?? '', a.current_version?.byte_size ?? ''])));
-        return res;
+            this.log((0, output_1.renderTable)(['ID', 'NAME', 'TYPE', 'ENV', 'VERSION', 'BYTES'], data.map((a) => [a.id, a.name, a.asset_type, a.environment?.code ?? 'all', a.current_version?.number ?? '', a.current_version?.byte_size ?? ''])));
+        return { data };
     }
 }
 exports.default = SecretsAssetsList;

package/dist/commands/secrets/assets/shared-list.js

@@ -2,14 +2,15 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const base_1 = require("../../../base");
 const output_1 = require("../../../lib/output");
+const paginate_1 = require("../../../lib/paginate");
 class SecretsAssetsSharedList extends base_1.BaseCommand {
     static description = 'List organization-level encrypted secret files and delegated projects';
     async run() {
         await this.parse(SecretsAssetsSharedList);
-        const res = await this.api.get('/cli/v1/shared_secret_assets?per=100');
+        const data = await (0, paginate_1.fetchAllPages)(this.api, '/cli/v1/shared_secret_assets');
         if (!this.jsonEnabled())
-            this.log((0, output_1.renderTable)(['ID', 'NAME', 'TYPE', 'ENV'], (res.data ?? []).map((a) => [a.id, a.name, a.asset_type, a.environment?.code ?? 'all'])));
-        return res;
+            this.log((0, output_1.renderTable)(['ID', 'NAME', 'TYPE', 'ENV'], data.map((a) => [a.id, a.name, a.asset_type, a.environment?.code ?? 'all'])));
+        return { data };
     }
 }
 exports.default = SecretsAssetsSharedList;

package/dist/commands/secrets/list.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const base_1 = require("../../base");
 const output_1 = require("../../lib/output");
+const paginate_1 = require("../../lib/paginate");
 class SecretsList extends base_1.BaseCommand {
     static description = 'List secret names for a project (optionally filtered by environment). Never prints values.';
     static examples = [
@@ -16,17 +17,17 @@ class SecretsList extends base_1.BaseCommand {
     async run() {
         const { flags } = await this.parse(SecretsList);
         const projectId = await this.resolveProjectId(flags.project);
-        const query = flags.environment ? `?environment=${encodeURIComponent(flags.environment)}` : '';
-        const res = await this.api.get(`/cli/v1/projects/${encodeURIComponent(projectId)}/secrets${query}`);
+        const params = flags.environment ? { environment: flags.environment } : {};
+        const data = await (0, paginate_1.fetchAllPages)(this.api, `/cli/v1/projects/${encodeURIComponent(projectId)}/secrets`, params);
         if (!this.jsonEnabled()) {
-            const rows = (res.data ?? []).map((secret) => [
+            const rows = data.map((secret) => [
                 String(secret.name ?? ''),
                 String(secret.environment?.code ?? ''),
                 String(secret.description ?? ''),
             ]);
             this.log((0, output_1.renderTable)(['NAME', 'ENVIRONMENT', 'DESCRIPTION'], rows));
         }
-        return res;
+        return { data };
     }
 }
 exports.default = SecretsList;

package/dist/lib/paginate.d.ts

@@ -0,0 +1,9 @@
+import type { CliApi } from './api';
+/**
+ * Read every page of a paginated collection endpoint and return the aggregated rows.
+ *
+ * Bounded collections (secrets, secret assets) must be listed in full, not just page 1 — reading
+ * only `res.data` silently truncated to the backend page size (CYCL: `cyi secrets list` showed 10).
+ * A backend that does not paginate returns everything on page 1 (`meta` absent) → single fetch.
+ */
+export declare function fetchAllPages<T = Record<string, unknown>>(api: CliApi, basePath: string, params?: Record<string, string>): Promise<T[]>;

package/dist/lib/paginate.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchAllPages = fetchAllPages;
+/**
+ * Read every page of a paginated collection endpoint and return the aggregated rows.
+ *
+ * Bounded collections (secrets, secret assets) must be listed in full, not just page 1 — reading
+ * only `res.data` silently truncated to the backend page size (CYCL: `cyi secrets list` showed 10).
+ * A backend that does not paginate returns everything on page 1 (`meta` absent) → single fetch.
+ */
+async function fetchAllPages(api, basePath, params = {}) {
+    const all = [];
+    let page = 1;
+    let totalPages = 1;
+    do {
+        const qs = new URLSearchParams({ ...params, page: String(page), per: '100' }).toString();
+        // eslint-disable-next-line no-await-in-loop
+        const res = await api.get(`${basePath}?${qs}`);
+        all.push(...(Array.isArray(res.data) ? res.data : []));
+        totalPages = Number(res.meta?.total_pages ?? 1);
+        page += 1;
+    } while (page <= totalPages);
+    return all;
+}