@cat-indev/catops-cli 0.0.1-alpha.10 → 0.0.1-alpha.12

package/dist/services/azdo-api.js

@@ -242,6 +242,658 @@ class AzureDevOpsApi {
             body: { query: wiql }
         });
     }
+    // =========================================================================
+    // Git Repositories — existence checks + creation
+    // =========================================================================
+    /** Verifica si un repositorio existe. Devuelve el repo o `undefined`. */
+    async repoExists(project, repoName, opts) {
+        try {
+            const res = await this.request("GET", `/git/repositories/${encodeURIComponent(repoName)}`, { ...opts, project: project ?? opts?.project });
+            return res.body;
+        }
+        catch (err) {
+            if (err && typeof err === "object" && "status" in err && err.status === 404) {
+                return undefined;
+            }
+            throw err;
+        }
+    }
+    /** Crea un repositorio en un proyecto. */
+    createRepository(projectName, projectId, repoName, opts) {
+        return this.request("POST", "/git/repositories", {
+            ...opts,
+            body: {
+                name: repoName,
+                project: { id: projectId, name: projectName }
+            }
+        });
+    }
+    // =========================================================================
+    // Branches — creation
+    // =========================================================================
+    /** Crea una branch nueva a partir de un commit ID. */
+    createBranch(project, repoName, branchName, fromObjectId, opts) {
+        return this.request("POST", `/git/repositories/${encodeURIComponent(repoName)}/refs`, {
+            ...opts,
+            project: project ?? opts?.project,
+            body: [
+                {
+                    name: `refs/heads/${branchName}`,
+                    newObjectId: fromObjectId,
+                    oldObjectId: "0000000000000000000000000000000000000000"
+                }
+            ]
+        });
+    }
+    // =========================================================================
+    // Commits — latest
+    // =========================================================================
+    /** Obtiene el último commit de un repo. Devuelve `null` si no hay commits. */
+    async getLatestCommit(project, repoNameOrId, opts) {
+        const res = await this.request("GET", `/git/repositories/${encodeURIComponent(repoNameOrId)}/commits`, { ...opts, project: project ?? opts?.project, query: { $top: 1, ...opts?.query } });
+        if (!res.body.value.length)
+            return null;
+        const commit = res.body.value[0];
+        return {
+            commitId: commit.commitId,
+            message: commit.comment,
+            date: commit.author.date,
+            author: { name: commit.author.name, date: commit.author.date }
+        };
+    }
+    // =========================================================================
+    // Files — existence check
+    // =========================================================================
+    /** Verifica si un archivo existe en una branch. Devuelve el item o `undefined`. */
+    async fileExists(project, repoName, branchName, filePath, opts) {
+        try {
+            const res = await this.request("GET", `/git/repositories/${encodeURIComponent(repoName)}/items`, {
+                ...opts,
+                project: project ?? opts?.project,
+                query: { path: filePath, "versionDescriptor.version": branchName, ...opts?.query }
+            });
+            return res.body;
+        }
+        catch (err) {
+            if (err && typeof err === "object" && "status" in err && err.status === 404) {
+                return undefined;
+            }
+            throw err;
+        }
+    }
+    // =========================================================================
+    // Files — create / update
+    // =========================================================================
+    /** Crea o actualiza un archivo en una branch (push de un solo archivo). */
+    async createOrUpdateFile(options, opts) {
+        let ref;
+        try {
+            const refName = options.branch.startsWith("refs/heads/") ? options.branch : `refs/heads/${options.branch}`;
+            const branchRes = await this.request("GET", `/git/repositories/${encodeURIComponent(options.repo)}/refs/${refName}`, { ...opts, project: options.project });
+            ref = branchRes.body?.value?.[0]?.objectId;
+        }
+        catch (err) {
+            if (err && typeof err === "object" && "status" in err && err.status === 404) {
+                ref = undefined;
+            }
+            else {
+                throw err;
+            }
+        }
+        const exists = await this.fileExists(options.project, options.repo, options.branch, options.filePath, opts);
+        const isBuffer = Buffer.isBuffer(options.fileContent);
+        return this.request("POST", `/git/repositories/${encodeURIComponent(options.repo)}/pushes`, {
+            ...opts,
+            project: options.project,
+            body: {
+                refUpdates: [
+                    {
+                        name: `refs/heads/${options.branch}`,
+                        oldObjectId: !ref ? "0000000000000000000000000000000000000000" : ref
+                    }
+                ],
+                commits: [
+                    {
+                        comment: options.comment ?? "Automatic update",
+                        changes: [
+                            {
+                                changeType: exists ? "edit" : "add",
+                                item: { path: options.filePath },
+                                newContent: {
+                                    content: isBuffer ? options.fileContent.toString("base64") : options.fileContent,
+                                    contentType: isBuffer ? "base64Encoded" : "rawtext"
+                                }
+                            }
+                        ]
+                    }
+                ]
+            }
+        });
+    }
+    /**
+     * Crea un archivo en un repo. Si el contenido es una de las plantillas
+     * conocidas (ej. `$README:TEMPLATE`), genera un README.md con el contenido
+     * por defecto.
+     */
+    async createFileInRepo(project, repo, branch, fileName, filePath, fileContent, opts) {
+        const contentTemplates = {
+            "$README:TEMPLATE": { name: "README.md", type: "readme" }
+        };
+        if (contentTemplates[fileContent]) {
+            return this.createOrUpdateFile({
+                project,
+                repo,
+                branch,
+                filePath: `${filePath}/${contentTemplates[fileContent].name}`,
+                fileContent: `# ${repo}\n\nProject repository.`
+            }, opts);
+        }
+        return this.createOrUpdateFile({
+            project,
+            repo,
+            branch,
+            filePath: `${filePath}/${fileName}`.replace(/\/+/g, "/"),
+            fileContent,
+            comment: "Automated by prepare ci/cd process"
+        }, opts);
+    }
+    /** Crea un repositorio y lo inicializa con un README. */
+    async createAndInitRepository(projectName, projectId, repository, opts) {
+        const existing = await this.repoExists(projectId, repository, opts);
+        let repoData = existing;
+        if (!existing) {
+            const res = await this.createRepository(projectName, projectId, repository, opts);
+            repoData = res.body;
+        }
+        const repoId = repoData.id;
+        await this.createFileInRepo(projectId, repoId, "main", "README.md", "/", "$README:TEMPLATE", opts);
+        return repoData;
+    }
+    // =========================================================================
+    // Pushes — bulk push (multiple changes)
+    // =========================================================================
+    /** Hace un push con múltiples cambios (add/edit/delete) en un solo commit. */
+    async pushChanges(options, opts) {
+        let ref;
+        try {
+            const refName = options.branch.startsWith("refs/heads/") ? options.branch : `refs/heads/${options.branch}`;
+            const branchRes = await this.request("GET", `/git/repositories/${encodeURIComponent(options.repository)}/refs/${refName}`, {
+                ...opts,
+                project: options.project
+            });
+            ref = branchRes.body?.value?.[0]?.objectId;
+        }
+        catch (err) {
+            if (err && typeof err === "object" && "status" in err && err.status === 404) {
+                ref = undefined;
+            }
+            else {
+                throw err;
+            }
+        }
+        return this.request("POST", `/git/repositories/${encodeURIComponent(options.repository)}/pushes`, {
+            ...opts,
+            project: options.project,
+            body: {
+                refUpdates: [
+                    {
+                        name: `refs/heads/${options.branch}`,
+                        oldObjectId: ref
+                    }
+                ],
+                commits: [
+                    {
+                        comment: options.comment,
+                        changes: options.changes
+                    }
+                ]
+            }
+        });
+    }
+    // =========================================================================
+    // Templates — download + merge
+    // =========================================================================
+    /** Descarga un repositorio completo como buffer ZIP. */
+    async downloadRepositoryZip(options, opts) {
+        const path = options.scopePath ?? "/";
+        return this.request("GET", `/git/repositories/${encodeURIComponent(options.repository)}/items`, {
+            ...opts,
+            project: options.project,
+            query: {
+                path,
+                "versionDescriptor[versionOptions]": 0,
+                "versionDescriptor[versionType]": 0,
+                "versionDescriptor[version]": options.branch,
+                resolveLfs: true,
+                "$format": "zip",
+                download: true,
+                ...opts?.query
+            }
+        });
+    }
+    // =========================================================================
+    // Webhooks
+    // =========================================================================
+    /** Verifica si existe un webhook de push para un repo/branch/URL dados. */
+    async webhookExists(projectId, repositoryId, branchName, webhookUrl, opts) {
+        try {
+            const res = await this.request("POST", "/hooks/subscriptionsQuery", {
+                ...opts,
+                organizationLevel: true,
+                apiVersion: "7.2-preview.1",
+                body: {
+                    publisherId: "tfs",
+                    publisherInputFilters: [
+                        {
+                            conditions: [
+                                { inputId: "projectId", operator: 0, inputValue: projectId }
+                            ]
+                        }
+                    ]
+                }
+            });
+            return res.body.results.find(e => e.publisherInputs.projectId === projectId
+                && e.publisherInputs.repository === repositoryId
+                && e.publisherInputs.branch === branchName
+                && e.consumerInputs.url === webhookUrl);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    /** Crea un webhook de push para un repositorio. */
+    createWebhook(projectId, repoId, sourceBranch, webhookUrl, opts) {
+        return this.request("POST", "/hooks/subscriptions", {
+            ...opts,
+            organizationLevel: true,
+            apiVersion: "7.2-preview.1",
+            body: {
+                consumerActionId: "httpRequest",
+                consumerId: "webHooks",
+                consumerInputs: { url: webhookUrl },
+                eventType: "git.push",
+                publisherId: "tfs",
+                publisherInputs: {
+                    repository: repoId,
+                    branch: sourceBranch,
+                    pushedBy: "",
+                    projectId
+                },
+                resourceVersion: "1.0",
+                scope: 1
+            }
+        });
+    }
+    // =========================================================================
+    // Environments
+    // =========================================================================
+    /** Crea un environment en un proyecto. */
+    createEnvironment(project, name, description = "", opts) {
+        return this.request("POST", "/distributedtask/environments", {
+            ...opts,
+            project: project ?? opts?.project,
+            apiVersion: "5.2-preview.1",
+            body: { name, description }
+        });
+    }
+    /** Busca un grupo de identidades por nombre (SAM account name). */
+    async findIdentityGroup(groupName, opts) {
+        const res = await this.request("POST", "/IdentityPicker/Identities", {
+            ...opts,
+            organizationLevel: true,
+            apiVersion: "5.0-preview.1",
+            body: {
+                query: groupName,
+                identityTypes: ["group"],
+                operationScopes: ["ims", "source"],
+                options: { MinResults: 1, MaxResults: 20 },
+                properties: ["DisplayName", "SamAccountName", "SubjectDescriptor"]
+            }
+        });
+        const group = res.body.results[0].identities.find(g => g.samAccountName === groupName);
+        if (!group) {
+            throw new Error(`Group '${groupName}' not found.`);
+        }
+        return group;
+    }
+    /** Crea una approval check para un environment. */
+    createEnvironmentApproval(project, environmentId, environmentName, approver, opts) {
+        return this.request("POST", "/pipelines/checks/configurations", {
+            ...opts,
+            project: project ?? opts?.project,
+            apiVersion: "5.2-preview.1",
+            body: {
+                type: { id: "8C6F20A7-A545-4486-9777-F762FAFE0D4D", name: "Approval" },
+                settings: {
+                    approvers: [
+                        {
+                            displayName: approver.displayName,
+                            id: approver.localId,
+                            descriptor: approver.subjectDescriptor,
+                            imageUrl: approver.imageUrl ?? "",
+                            uniqueName: approver.uniqueName ?? ""
+                        }
+                    ],
+                    executionOrder: 1,
+                    instructions: "",
+                    blockedApprovers: [],
+                    minRequiredApprovers: 0,
+                    requesterCannotBeApprover: false,
+                    definitionRef: {
+                        id: "26014962-64a0-49f4-885b-4b874119a5cc"
+                    }
+                },
+                resource: { type: "environment", id: environmentId, name: environmentName },
+                timeout: 43200
+            }
+        });
+    }
+    /**
+     * Crea un environment con approvals.
+     * Si `approverGroup` es `"none"`, no agrega approvals.
+     */
+    async createEnvironmentWithApprovals(options, opts) {
+        const envRes = await this.createEnvironment(options.project, options.environmentName, options.description ?? "", opts);
+        const environment = envRes.body;
+        if (options.approverGroup === "none")
+            return environment;
+        const group = await this.findIdentityGroup(options.approverGroup, opts);
+        await this.createEnvironmentApproval(options.project, environment.id, options.environmentName, group, opts);
+        return environment;
+    }
+    // =========================================================================
+    // Permissions — committer regex + deny
+    // =========================================================================
+    /** Crea una política de validación de email del committer. */
+    applyCommitterRegexPermissions(projectId, opts) {
+        return this.request("POST", "/policy/Configurations", {
+            ...opts,
+            apiVersion: "5.0-preview.1",
+            body: {
+                type: { id: "77ed4bd3-b063-4689-934a-175e4d0a78d7" },
+                revision: 1,
+                isDeleted: false,
+                isBlocking: true,
+                isEnabled: true,
+                settings: {
+                    authorEmailPatterns: null,
+                    scope: [{ repositoryId: null }]
+                }
+            }
+        });
+    }
+    /** Actualiza una política de validación de email del committer. */
+    updateCommitterRegexPermissions(projectId, policyId, allowedEmailPatterns, opts) {
+        return this.request("POST", `/policy/Configurations/${policyId}`, {
+            ...opts,
+            apiVersion: "5.0-preview.1",
+            body: {
+                isEnabled: true,
+                isBlocking: true,
+                isDeleted: false,
+                settings: {
+                    authorEmailPatterns: allowedEmailPatterns,
+                    scope: [{ repositoryId: null }]
+                },
+                revision: 3,
+                id: policyId,
+                type: {
+                    id: "77ed4bd3-b063-4689-934a-175e4d0a78d7",
+                    displayName: "Commit author email validation"
+                }
+            }
+        });
+    }
+    /** Obtiene los grupos con permisos de contribuidor del proyecto. */
+    async getContributorGroups(projectId, projectName, opts) {
+        const res = await this.request("POST", "/Contribution/HierarchyQuery", {
+            ...opts,
+            organizationLevel: true,
+            apiVersion: "5.0-preview.1",
+            body: {
+                contributionIds: ["ms.vss-admin-web.security-view-members-data-provider"],
+                dataProviderContext: {
+                    properties: {
+                        permissionSetId: "2e9eb7ed-3c0a-47d4-87c1-0ffdd275fd87",
+                        permissionSetToken: `repoV2/${projectId}/`,
+                        sourcePage: {
+                            url: `https://dev.azure.com/${this.baseUrl.split("/").pop()}/${encodeURIComponent(projectName)}/_settings/repositories?_a=permissions`,
+                            routeId: "ms.vss-admin-web.project-admin-hub-route",
+                            routeValues: {
+                                project: projectName,
+                                adminPivot: "repositories",
+                                controller: "ContributedPage",
+                                action: "Execute"
+                            }
+                        }
+                    }
+                }
+            }
+        });
+        return res.body.dataProviders["ms.vss-admin-web.security-view-members-data-provider"].identities;
+    }
+    /** Deniega permisos a una entidad por SID. */
+    denyPermission(projectId, entityId, permissionCode, opts) {
+        return this.request("POST", "/AccessControlEntries/2e9eb7ed-3c0a-47d4-87c1-0ffdd275fd87", {
+            ...opts,
+            organizationLevel: true,
+            apiVersion: "5.0-preview.1",
+            body: {
+                token: `repoV2/${projectId}/`,
+                merge: true,
+                accessControlEntries: [
+                    {
+                        descriptor: `Microsoft.TeamFoundation.Identity;${entityId}`,
+                        allow: 0,
+                        deny: permissionCode,
+                        extendedInfo: {
+                            effectiveAllow: 0,
+                            effectiveDeny: permissionCode,
+                            inheritedAllow: 0,
+                            inheritedDeny: permissionCode
+                        }
+                    }
+                ]
+            }
+        });
+    }
+    /** Deniega permisos a un usuario por email. */
+    denyPermissionByEmail(projectId, userEmail, permissionCode, opts) {
+        return this.request("POST", "/AccessControlEntries/2e9eb7ed-3c0a-47d4-87c1-0ffdd275fd87", {
+            ...opts,
+            organizationLevel: true,
+            apiVersion: "5.0-preview.1",
+            body: {
+                token: `repoV2/${projectId}/`,
+                merge: true,
+                accessControlEntries: [
+                    {
+                        descriptor: `Microsoft.IdentityModel.Claims.ClaimsIdentity;e95d19cb-8725-4b0b-8ce2-ff42be9ae6e9\\\\${userEmail}`,
+                        allow: 0,
+                        deny: permissionCode,
+                        extendedInfo: {
+                            effectiveAllow: 0,
+                            effectiveDeny: permissionCode,
+                            inheritedAllow: 0,
+                            inheritedDeny: permissionCode
+                        }
+                    }
+                ]
+            }
+        });
+    }
+    /**
+     * Aplica permisos a todos los proyectos: crea la política de regex,
+     * obtiene los grupos, y deniega los permisos de Force Push y Create Branch.
+     */
+    async applyPermissions(opts) {
+        const projectsRes = await this.listProjects(opts);
+        const projects = projectsRes.body.value;
+        const summary = [];
+        for (const project of projects) {
+            const policyRes = await this.applyCommitterRegexPermissions(project.id, opts);
+            const policyId = policyRes.body;
+            await this.updateCommitterRegexPermissions(project.id, policyId, [], opts);
+            const groups = await this.getContributorGroups(project.id, project.name, opts);
+            for (const group of groups) {
+                if (group.sid) {
+                    await this.denyPermission(project.id, group.sid, 32768, opts);
+                    await this.denyPermission(project.id, group.sid, 128, opts);
+                }
+                else if (group.metaType === "member") {
+                    if (group.sid) {
+                        await this.denyPermission(project.id, group.sid, 32768, opts);
+                    }
+                    if (group.mailAddress) {
+                        await this.denyPermissionByEmail(project.id, group.mailAddress, 128, opts);
+                    }
+                }
+            }
+            summary.push({ project: project.name, groupsProcessed: groups.length });
+        }
+        return summary;
+    }
+    // =========================================================================
+    // Agent Pools
+    // =========================================================================
+    /** Asocia un agent pool existente a un proyecto (crea una queue). */
+    async addAgentPoolToProject(project, agentPoolName, opts) {
+        const poolsRes = await this.request("GET", "/distributedtask/pools", {
+            ...opts,
+            organizationLevel: true,
+            apiVersion: "7.1-preview.1"
+        });
+        const pool = poolsRes.body.value.find(p => p.name === agentPoolName);
+        if (!pool) {
+            throw new Error(`Agent Pool '${agentPoolName}' not found.`);
+        }
+        return this.request("POST", "/distributedtask/queues", {
+            ...opts,
+            project: project ?? opts?.project,
+            apiVersion: "7.1-preview.1",
+            query: { authorizePipelines: true, ...opts?.query },
+            body: { name: agentPoolName, pool: { id: pool.id } }
+        });
+    }
+    /** Autoriza todos los pipelines para usar una queue. */
+    authorizeAgentPool(project, queueId, opts) {
+        return this.request("PATCH", `/pipelines/pipelinePermissions/queue/${queueId}`, {
+            ...opts,
+            project: project ?? opts?.project,
+            apiVersion: "7.1-preview.1",
+            body: {
+                resource: { type: "queue", id: String(queueId) },
+                allPipelines: { authorized: true, authorizedBy: null, authorizedOn: null },
+                pipelines: []
+            }
+        });
+    }
+    // =========================================================================
+    // Variable Groups
+    // =========================================================================
+    /** Crea un variable group. Si ya existe con el mismo nombre, lo devuelve sin crear. */
+    async createVariableGroup(project, name, variables = {}, opts) {
+        const existingRes = await this.request("GET", "/distributedtask/variablegroups", { ...opts, project: project ?? opts?.project, apiVersion: "7.1-preview.1" });
+        const existing = existingRes.body.value.find(vg => vg.name === name);
+        if (existing)
+            return existing;
+        const res = await this.request("POST", "/distributedtask/variablegroups", {
+            ...opts,
+            project: project ?? opts?.project,
+            apiVersion: "7.1-preview.1",
+            body: { name, variables }
+        });
+        return res.body;
+    }
+    // =========================================================================
+    // Build Folders
+    // =========================================================================
+    /** Crea una carpeta de build. Si ya existe, la devuelve. */
+    async createBuildFolder(project, folderPath, opts) {
+        const normalizedPath = folderPath.startsWith("\\") ? folderPath : `\\${folderPath}`;
+        const foldersRes = await this.request("GET", "/build/folders", { ...opts, project: project ?? opts?.project, apiVersion: "7.2-preview.2" });
+        const existing = foldersRes.body.value.find(f => f.path === normalizedPath);
+        if (existing)
+            return existing;
+        const encodedPath = encodeURIComponent(normalizedPath);
+        const res = await this.request("PUT", `/build/folders?path=${encodedPath}`, {
+            ...opts,
+            project: project ?? opts?.project,
+            apiVersion: "6.0-preview.2",
+            body: { path: normalizedPath }
+        });
+        return res.body;
+    }
+    // =========================================================================
+    // Pipelines — creation
+    // =========================================================================
+    /** Crea un pipeline YAML asociado a un repositorio. */
+    async createPipeline(options, opts) {
+        const reposRes = await this.listRepos({ ...opts, project: options.project });
+        const repo = reposRes.body.value.find(r => r.name === options.repository);
+        if (!repo) {
+            throw new Error(`Repository '${options.repository}' not found.`);
+        }
+        return this.request("POST", "/pipelines", {
+            ...opts,
+            project: options.project,
+            apiVersion: "7.1-preview.1",
+            body: {
+                name: options.name,
+                folder: options.folder ?? "\\",
+                configuration: {
+                    type: "yaml",
+                    path: options.yamlPath,
+                    repository: {
+                        id: repo.id,
+                        type: "azureReposGit",
+                        name: repo.name,
+                        defaultBranch: options.defaultBranch ?? "refs/heads/main"
+                    }
+                }
+            }
+        });
+    }
+    // =========================================================================
+    // Service Connections
+    // =========================================================================
+    /** Comparte un service endpoint con un proyecto. */
+    async shareServiceConnection(project, resourceId, resourceName, opts) {
+        const projectRes = await this.getProject(project, { ...opts, organizationLevel: true });
+        if (!projectRes.body) {
+            throw new Error(`Project '${project}' not found.`);
+        }
+        return this.request("PATCH", `/serviceendpoint/endpoints/${resourceId}`, {
+            ...opts,
+            organizationLevel: true,
+            apiVersion: "6.0-preview.4",
+            body: [
+                {
+                    description: "",
+                    name: `${resourceName}-${projectRes.body.name}`,
+                    projectReference: { id: projectRes.body.id, name: projectRes.body.name }
+                }
+            ]
+        });
+    }
+    // =========================================================================
+    // Tags
+    // =========================================================================
+    /** Lista todas las tags de un repositorio. */
+    async getTags(project, repository, opts) {
+        const res = await this.request("GET", `/git/repositories/${encodeURIComponent(repository)}/refs`, {
+            ...opts,
+            project: project ?? opts?.project,
+            query: { filter: "tags/", ...opts?.query }
+        });
+        return res.body.value.map(tag => ({
+            name: tag.name.replace("refs/tags/", ""),
+            ref: tag.name,
+            objectId: tag.objectId,
+            creator: tag.creator,
+            peeledObjectId: tag.peeledObjectId
+        }));
+    }
 }
 exports.AzureDevOpsApi = AzureDevOpsApi;
 //# sourceMappingURL=azdo-api.js.map