@codiac.io/codiac-cli 1.3.237 → 1.3.239

package/dist/commands/imageRegistry/capture.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 const core_1 = require("@oclif/core");
+const _ = require("lodash");
 const contracts_1 = require("../../apis/codiac-api/contracts");
 const command_base_exec_tenant_1 = require("../../command-base-exec-tenant");
 const cloud_resource_configurator_factory_1 = require("../../uilogic/cloud-resource-configurator-factory");
@@ -35,12 +36,63 @@ class ImageRegistryCapture extends command_base_exec_tenant_1.CommandBaseExecTen
                 partial.provider = type_safety_utils_1.TypeSafetyUtils.toEnum(contracts_1.CloudProviderEnum, flags.provider);
             if (flags.name)
                 partial.code = flags.name;
+            partial.pullRequiresAuth = flags.private;
             return [partial, false];
         });
     }
-    buildCandidate_silently(partial, rootMap) {
+    /** Silent capture currently supports Helm chart repositories (provider `artifactHub` or
+     *  `other`) -- the interactive flow's complexity is cloud-provider discovery/auth, which a
+     *  Helm/OCI repo does not need: it is a direct (url, name) reference. Other providers
+     *  (Azure/AWS/DockerHub image registries) still require interactive capture. Note `--name`
+     *  here is the short name; the stored registry code is `helm|<provider>|<name>`. */
+    buildCandidate_silently(partial, _rootMap) {
+        var _a;
         return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            throw new Error(`Silent capture not yet implemented`);
+            if (partial.provider == undefined)
+                throw new Error("Must specify --provider.");
+            if (partial.code == undefined || _.isEmpty(partial.code))
+                throw new Error("Must specify --name.");
+            const pullRequiresAuth = type_safety_utils_1.TypeSafetyUtils.toBoolean((_a = partial.pullRequiresAuth) !== null && _a !== void 0 ? _a : true);
+            const dupCheck = (code) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                const found = (yield this._codiacApi.ImageRegistry.readMany({ all: true }, { throwNotFound: false })).find(r => r.code === code);
+                if (found)
+                    throw new Error(`Image registry [${code}] already exists as [${found.type}, url: ${found.url}].`);
+            });
+            // Docker Hub OCI registry (serves both images and OCI Helm charts under an org namespace).
+            // This is the working pattern for codiacimages helm charts -- the DockerHub client
+            // implements helm creds, unlike the artifactHub client.
+            if (partial.provider === contracts_1.CloudProviderEnum.dockerHub) {
+                const code = `${contracts_1.ImageRegistryTypes.dockerHub}|${partial.code}`; // e.g. DockerHub|codiacimages -- name is the org namespace
+                yield dupCheck(code);
+                return {
+                    code,
+                    url: "index.docker.io",
+                    provider: contracts_1.CloudProviderEnum.dockerHub,
+                    type: contracts_1.ImageRegistryTypes.dockerHub,
+                    organizationCode: partial.code,
+                    helmSupport: "oci",
+                    pullRequiresAuth,
+                    useRemoteFiltering: false,
+                };
+            }
+            // Helm chart repository (artifactHub / other) referenced by a direct (url, name).
+            const isHelm = partial.provider === contracts_1.CloudProviderEnum.artifactHub || partial.provider === contracts_1.CloudProviderEnum.other;
+            if (!isHelm)
+                throw new Error(`Silent capture supports --provider dockerHub, artifactHub, or other. For [${partial.provider}], use interactive capture.`);
+            if (partial.url == undefined || _.isEmpty(partial.url))
+                throw new Error("Must specify --url.");
+            const code = `${contracts_1.ImageRegistryTypes.helm}|${partial.provider}|${partial.code}`;
+            yield dupCheck(code);
+            const helmSupport = partial.url.startsWith("oci://") ? "oci" : "classic";
+            return {
+                code,
+                url: partial.url,
+                provider: partial.provider,
+                type: contracts_1.ImageRegistryTypes.helm,
+                pullRequiresAuth,
+                useRemoteFiltering: false,
+                helmSupport,
+            };
         });
     }
     buildCandidate_interactively(partial, takeDefaults, rootMap) {
@@ -60,10 +112,16 @@ class ImageRegistryCapture extends command_base_exec_tenant_1.CommandBaseExecTen
         });
     }
     buildCommandString(candidate, cmd) {
-        if (candidate.code)
-            cmd.push("--name", candidate.code);
+        var _a;
         if (candidate.provider)
             cmd.push("--provider", candidate.provider);
+        if (candidate.url)
+            cmd.push("--url", candidate.url);
+        // The stored code is `helm|<provider>|<name>`; --name takes the short name.
+        if (candidate.code)
+            cmd.push("--name", (_a = candidate.code.split("|").pop()) !== null && _a !== void 0 ? _a : candidate.code);
+        if (candidate.pullRequiresAuth === false)
+            cmd.push("--no-private");
         cmd.push("--silent");
         return cmd;
     }
@@ -93,6 +151,7 @@ ImageRegistryCapture.flags = {
     name: core_1.Flags.string({ char: 'n', required: false, description: "The resource name of the container registry within the cloud provider subscription." }),
     subscriptionId: core_1.Flags.string({ char: 's', required: false, description: "The id of the cloud provider account in which the registry resides." }),
     location: core_1.Flags.string({ char: 'l', required: false, description: "The data center in which the registry resides (use the code name, eg: in Aws use 'us-east-1', NOT 'Virginia, US')." }),
+    private: core_1.Flags.boolean({ default: true, allowNo: true, description: 'Whether pulling from this registry requires authentication (default true; pass --no-private for a public registry).' }),
     silent: core_1.Flags.boolean({ exclusive: ["echo", "to-script"], description: 'Executes without any user interaction; fails on missing or invalid arguments.' }),
     echo: core_1.Flags.boolean({ exclusive: ["to-script", "silent"], description: 'Renders the equivalent non-interactive command for future use before executing.' }),
     "to-script": core_1.Flags.boolean({ exclusive: ["echo", "silent"], description: 'Renders the equivalent non-interactive command without executing it.' }),

package/dist/commands/imageRegistry/capture.js.map

@@ -1 +1 @@
-{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../../src/commands/imageRegistry/capture.ts"],"names":[],"mappings":";;;AAAA,sCAAoC;AAEpC,+DAA4H;AAE5H,6EAAuE;AACvE,2GAAgG;AAChG,+FAA0F;AAC1F,+FAA0F;AAC1F,6EAAyE;AACzE,uEAAkE;AAIlE,MAAqB,oBAAqB,SAAQ,gDAAoC;IAoB1E,SAAS;QACjB,KAAK,CAAC,SAAS,EAAE,CAAC;QAClB,2DAA2B,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,2DAA2B,CAAC,CAAC,MAAM,EAAE,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,0CAAmB,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9C,CAAC;IAGD,uEAAuE;IACvE,yBAAyB;IAEzB,IAAc,UAAU;QACtB,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE;YACzC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,2DAA2B,CAAC,CAAC;SACrE;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAGD,uEAAuE;IAG1D,WAAW;;YACtB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAEzD,IAAI,OAAO,GAA2B,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,GAAG;gBAAE,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;YACvC,IAAI,KAAK,CAAC,QAAQ;gBAAE,OAAO,CAAC,QAAQ,GAAG,mCAAe,CAAC,MAAM,CAAoB,6BAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpH,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YAC1C,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;KAAA;IAGY,uBAAuB,CAAC,OAA+B,EAAE,OAAgB;;YACpF,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;KAAA;IAGY,4BAA4B,CAAC,OAA+B,EAAE,YAAqB,EAAE,OAAgB;;;YAChH,IAAI,OAAO,CAAC,IAAI,EAAE;gBAChB,IAAI,eAAe,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5G,IAAI,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC/D,IAAI,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,IAAI,wBAAwB,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;aACrH;YAED,iEAA2B,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,uBAAe,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAE,CAAC;YAE9G,QAAQ,CAAC,gBAAgB,GAAG,mCAAe,CAAC,SAAS,CAAC,MAAA,QAAQ,CAAC,gBAAgB,mCAAI,IAAI,CAAC,CAAC;YACzF,QAAQ,CAAC,gBAAgB,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,EAAE,yDAAyD,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAE1J,OAAO,QAAQ,CAAC;;KACjB;IAGM,kBAAkB,CAAC,SAAwB,EAAE,GAAa;QAC/D,IAAI,SAAS,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,SAAS,CAAC,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,GAAG,CAAC;IACb,CAAC;IAGY,WAAW,CAAC,SAAwB;;;YAC/C,IAAI;gBACF,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,SAAS,CAAC,IAAI,oBAAoB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC7H,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,yBAAyB,SAAS,CAAC,IAAI,oBAAoB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aACzH;YAAC,OAAO,GAAG,EAAE;gBACZ,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,SAAS,CAAC,IAAI,oBAAoB,SAAS,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,IAAI,MAAA,GAAG,CAAC,OAAO,mCAAI,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBACvK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAClC,MAAM,GAAG,CAAC;aACX;;KACF;;AA7FH,uCA+FC;AA9FQ,gCAAW,GAAG,sDAAsD,CAAC;AACrE,4BAAO,GAAG,EAAE,CAAC;AAEb,0BAAK,GAAG;IACb,IAAI,EAAE,YAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC/B,GAAG,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAC7F,QAAQ,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,6BAAiB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,oDAAoD,EAAE,CAAC;IACpK,IAAI,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,qFAAqF,EAAE,CAAC;IACtJ,cAAc,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,qEAAqE,EAAE,CAAC;IAChJ,QAAQ,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,oHAAoH,EAAE,CAAC;IAEzL,MAAM,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,+EAA+E,EAAE,CAAC;IACzJ,IAAI,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,iFAAiF,EAAE,CAAC;IAC3J,WAAW,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,sEAAsE,EAAE,CAAC;CACnJ,CAAC;AAEK,yBAAI,GAAG,EAAE,CAAC"}
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../../src/commands/imageRegistry/capture.ts"],"names":[],"mappings":";;;AAAA,sCAAoC;AACpC,4BAA6B;AAE7B,+DAAgJ;AAEhJ,6EAAuE;AACvE,2GAAgG;AAChG,+FAA0F;AAC1F,+FAA0F;AAC1F,6EAAyE;AACzE,uEAAkE;AAIlE,MAAqB,oBAAqB,SAAQ,gDAAoC;IAqB1E,SAAS;QACjB,KAAK,CAAC,SAAS,EAAE,CAAC;QAClB,2DAA2B,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,2DAA2B,CAAC,CAAC,MAAM,EAAE,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,0CAAmB,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9C,CAAC;IAGD,uEAAuE;IACvE,yBAAyB;IAEzB,IAAc,UAAU;QACtB,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE;YACzC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,2DAA2B,CAAC,CAAC;SACrE;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAGD,uEAAuE;IAG1D,WAAW;;YACtB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAEzD,IAAI,OAAO,GAA2B,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,GAAG;gBAAE,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;YACvC,IAAI,KAAK,CAAC,QAAQ;gBAAE,OAAO,CAAC,QAAQ,GAAG,mCAAe,CAAC,MAAM,CAAoB,6BAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpH,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YAC1C,OAAO,CAAC,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC;YACzC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;KAAA;IAGD;;;;wFAIoF;IACvE,uBAAuB,CAAC,OAA+B,EAAE,QAAiB;;;YACrF,IAAI,OAAO,CAAC,QAAQ,IAAI,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/E,IAAI,OAAO,CAAC,IAAI,IAAI,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAElG,MAAM,gBAAgB,GAAG,mCAAe,CAAC,SAAS,CAAC,MAAA,OAAO,CAAC,gBAAgB,mCAAI,IAAI,CAAC,CAAC;YACrF,MAAM,QAAQ,GAAG,CAAO,IAAY,EAAE,EAAE;gBACtC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBACjI,IAAI,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,wBAAwB,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;YAC/G,CAAC,CAAA,CAAC;YAEF,2FAA2F;YAC3F,mFAAmF;YACnF,wDAAwD;YACxD,IAAI,OAAO,CAAC,QAAQ,KAAK,6BAAiB,CAAC,SAAS,EAAE;gBACpD,MAAM,IAAI,GAAG,GAAG,8BAAkB,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,2DAA2D;gBAC3H,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACrB,OAAO;oBACL,IAAI;oBACJ,GAAG,EAAE,iBAAiB;oBACtB,QAAQ,EAAE,6BAAiB,CAAC,SAAS;oBACrC,IAAI,EAAE,8BAAkB,CAAC,SAAS;oBAClC,gBAAgB,EAAE,OAAO,CAAC,IAAI;oBAC9B,WAAW,EAAE,KAAK;oBAClB,gBAAgB;oBAChB,kBAAkB,EAAE,KAAK;iBACE,CAAC;aAC/B;YAED,kFAAkF;YAClF,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,6BAAiB,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,KAAK,6BAAiB,CAAC,KAAK,CAAC;YAClH,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,OAAO,CAAC,QAAQ,6BAA6B,CAAC,CAAC;YACzJ,IAAI,OAAO,CAAC,GAAG,IAAI,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAE/F,MAAM,IAAI,GAAG,GAAG,8BAAkB,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAC9E,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrB,MAAM,WAAW,GAAsB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAE5F,OAAO;gBACL,IAAI;gBACJ,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,8BAAkB,CAAC,IAAI;gBAC7B,gBAAgB;gBAChB,kBAAkB,EAAE,KAAK;gBACzB,WAAW;aACK,CAAC;;KACpB;IAGY,4BAA4B,CAAC,OAA+B,EAAE,YAAqB,EAAE,OAAgB;;;YAChH,IAAI,OAAO,CAAC,IAAI,EAAE;gBAChB,IAAI,eAAe,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5G,IAAI,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC/D,IAAI,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,IAAI,wBAAwB,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;aACrH;YAED,iEAA2B,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,uBAAe,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAE,CAAC;YAE9G,QAAQ,CAAC,gBAAgB,GAAG,mCAAe,CAAC,SAAS,CAAC,MAAA,QAAQ,CAAC,gBAAgB,mCAAI,IAAI,CAAC,CAAC;YACzF,QAAQ,CAAC,gBAAgB,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,EAAE,yDAAyD,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAE1J,OAAO,QAAQ,CAAC;;KACjB;IAGM,kBAAkB,CAAC,SAAwB,EAAE,GAAa;;QAC/D,IAAI,SAAS,CAAC,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,SAAS,CAAC,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACpD,4EAA4E;QAC5E,IAAI,SAAS,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAA,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,mCAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1F,IAAI,SAAS,CAAC,gBAAgB,KAAK,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,GAAG,CAAC;IACb,CAAC;IAGY,WAAW,CAAC,SAAwB;;;YAC/C,IAAI;gBACF,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,SAAS,CAAC,IAAI,oBAAoB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC7H,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,yBAAyB,SAAS,CAAC,IAAI,oBAAoB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aACzH;YAAC,OAAO,GAAG,EAAE;gBACZ,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,SAAS,CAAC,IAAI,oBAAoB,SAAS,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,IAAI,MAAA,GAAG,CAAC,OAAO,mCAAI,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBACvK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAClC,MAAM,GAAG,CAAC;aACX;;KACF;;AAnJH,uCAqJC;AApJQ,gCAAW,GAAG,sDAAsD,CAAC;AACrE,4BAAO,GAAG,EAAE,CAAC;AAEb,0BAAK,GAAG;IACb,IAAI,EAAE,YAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC/B,GAAG,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAC7F,QAAQ,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,6BAAiB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,oDAAoD,EAAE,CAAC;IACpK,IAAI,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,qFAAqF,EAAE,CAAC;IACtJ,cAAc,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,qEAAqE,EAAE,CAAC;IAChJ,QAAQ,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,oHAAoH,EAAE,CAAC;IACzL,OAAO,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,qHAAqH,EAAE,CAAC;IAE5L,MAAM,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,+EAA+E,EAAE,CAAC;IACzJ,IAAI,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,iFAAiF,EAAE,CAAC;IAC3J,WAAW,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,sEAAsE,EAAE,CAAC;CACnJ,CAAC;AAEK,yBAAI,GAAG,EAAE,CAAC"}

package/dist/message-contracts/workunit-contracts.d.ts

@@ -46,6 +46,11 @@ export interface OperationStatus {
     /** optional, for use as interim processing output or completion failure reason.
      * eg: "Waiting for Azure completion". */
     message?: string;
+    /** Optional rich domain result carried on a terminal (Completed) status, for operations
+     *  whose caller needs more than success/fail/message — e.g. a structured `needs_action`
+     *  remediation from ai-agent-provision. A serialized `SingleResult<T>`. Ignored by callers
+     *  that only track success/fail. */
+    resultPayload?: any;
 }
 /** Hierarchy of opCodes by which status messages
  *  will be marked within the overall correlation.

package/dist/uilogic/framework-spec.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Centralizes each agent framework's default asset name and supported/coming-soon
+ * status. Pure function — no `this`, no I/O, no `_ui`. Callers (silent and
+ * interactive install flows alike) use this as the single source of truth so the
+ * two flows cannot drift on framework defaults or availability.
+ */
+export interface FrameworkSpec {
+    framework: string;
+    defaultName: string;
+    supported: boolean;
+    comingSoon?: string;
+}
+export declare function resolveFrameworkSpec(type: string): FrameworkSpec;

package/dist/uilogic/framework-spec.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveFrameworkSpec = void 0;
+function resolveFrameworkSpec(type) {
+    switch (type) {
+        case 'hermes':
+            return { framework: 'hermes', defaultName: 'hermes-agent', supported: true };
+        case 'openclaw':
+            return { framework: 'openclaw', defaultName: 'openclaw-agent', supported: true };
+        case 'byoa':
+            return { framework: 'byoa', defaultName: 'my-agent', supported: false, comingSoon: 'BYOA (helm/image validation) ships after Hermes.' };
+        default:
+            throw new Error(`Unknown agent type: ${type}`);
+    }
+}
+exports.resolveFrameworkSpec = resolveFrameworkSpec;
+//# sourceMappingURL=framework-spec.js.map

package/dist/uilogic/framework-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-spec.js","sourceRoot":"","sources":["../../src/uilogic/framework-spec.ts"],"names":[],"mappings":";;;AAaA,SAAgB,oBAAoB,CAAC,IAAY;IAC/C,QAAQ,IAAI,EAAE;QACZ,KAAK,QAAQ;YACX,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC/E,KAAK,UAAU;YACb,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACnF,KAAK,MAAM;YACT,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,kDAAkD,EAAE,CAAC;QAC1I;YACE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;KAClD;AACH,CAAC;AAXD,oDAWC"}

package/dist/uilogic/lrp-watcher-utils.js

@@ -6,13 +6,26 @@ const message_contracts_1 = require("../message-contracts");
 /** Shared logic between LrpWatchers. */
 class LrpWatcherUtils {
     static resultFromStatusMessage(status) {
-        var _a, _b;
+        var _a, _b, _c;
+        // Rich async ops (e.g. ai-agent-provision) attach their full domain result to the terminal
+        // status as `resultPayload` (a serialized SingleResult). Prefer it so structured data — e.g.
+        // a `needs_action` status + remediation — survives; the generic status only carries success/msg.
+        const rich = status.resultPayload;
+        if (rich !== undefined && rich !== null) {
+            const sr = new contracts_1.SingleResult(Boolean(rich.success));
+            sr.output = rich.output;
+            sr.message = rich.message;
+            if (rich.error) {
+                sr.error = rich.error instanceof Error ? rich.error : new Error((_a = rich.error.message) !== null && _a !== void 0 ? _a : String(rich.error));
+            }
+            return sr;
+        }
         let result = new contracts_1.Result(false);
         // success
         result.success = Boolean(status.completionCode == message_contracts_1.OperationCompletionCodeEnum.Success);
         // message
         if (status.completionCode != message_contracts_1.OperationCompletionCodeEnum.Success) {
-            result.message = status.opCode.concat(" ", (_a = status.completionCode) !== null && _a !== void 0 ? _a : "", ": ", (_b = status.message) !== null && _b !== void 0 ? _b : "").trimEnd();
+            result.message = status.opCode.concat(" ", (_b = status.completionCode) !== null && _b !== void 0 ? _b : "", ": ", (_c = status.message) !== null && _c !== void 0 ? _c : "").trimEnd();
         }
         else if (status.message) {
             result.message = status.message;

package/dist/uilogic/lrp-watcher-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"lrp-watcher-utils.js","sourceRoot":"","sources":["../../src/uilogic/lrp-watcher-utils.ts"],"names":[],"mappings":";;;AAAA,kEAA0E;AAC1E,4DAA8F;AAW9F,wCAAwC;AACxC,MAAsB,eAAe;IAS5B,MAAM,CAAC,uBAAuB,CAAC,MAAuB;;QAC3D,IAAI,MAAM,GAAG,IAAI,kBAAM,CAAC,KAAK,CAAC,CAAC;QAE/B,UAAU;QACV,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,+CAA2B,CAAC,OAAO,CAAC,CAAC;QACvF,UAAU;QACV,IAAI,MAAM,CAAC,cAAc,IAAI,+CAA2B,CAAC,OAAO,EAAE;YAChE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAA,MAAM,CAAC,cAAc,mCAAI,EAAE,EAAE,IAAI,EAAE,MAAA,MAAM,CAAC,OAAO,mCAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/G;aAAM,IAAI,MAAM,CAAC,OAAO,EAAE;YACzB,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;SACjC;QACD,QAAQ;QACR,IAAI,MAAM,CAAC,cAAc,IAAI,+CAA2B,CAAC,MAAM,EAAE;YAC/D,MAAM,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;SAC1C;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;;AA1BH,0CA6BC;AA3BC,6EAA6E;AACtD,+BAAe,GAAG,iBAAiB,CAAC;AAE3D,4FAA4F;AACrE,wCAAwB,GAAG,kBAAkB,CAAC"}
+{"version":3,"file":"lrp-watcher-utils.js","sourceRoot":"","sources":["../../src/uilogic/lrp-watcher-utils.ts"],"names":[],"mappings":";;;AAAA,kEAA0E;AAC1E,4DAA8F;AAW9F,wCAAwC;AACxC,MAAsB,eAAe;IAS5B,MAAM,CAAC,uBAAuB,CAAC,MAAuB;;QAC3D,2FAA2F;QAC3F,6FAA6F;QAC7F,iGAAiG;QACjG,MAAM,IAAI,GAAI,MAAc,CAAC,aAAa,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE;YACvC,MAAM,EAAE,GAAG,IAAI,wBAAY,CAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACxD,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACxB,EAAE,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC1B,IAAI,IAAI,CAAC,KAAK,EAAE;gBACd,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAA,IAAI,CAAC,KAAK,CAAC,OAAO,mCAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;aAC3G;YACD,OAAO,EAAE,CAAC;SACX;QAED,IAAI,MAAM,GAAG,IAAI,kBAAM,CAAC,KAAK,CAAC,CAAC;QAE/B,UAAU;QACV,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,+CAA2B,CAAC,OAAO,CAAC,CAAC;QACvF,UAAU;QACV,IAAI,MAAM,CAAC,cAAc,IAAI,+CAA2B,CAAC,OAAO,EAAE;YAChE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAA,MAAM,CAAC,cAAc,mCAAI,EAAE,EAAE,IAAI,EAAE,MAAA,MAAM,CAAC,OAAO,mCAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/G;aAAM,IAAI,MAAM,CAAC,OAAO,EAAE;YACzB,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;SACjC;QACD,QAAQ;QACR,IAAI,MAAM,CAAC,cAAc,IAAI,+CAA2B,CAAC,MAAM,EAAE;YAC/D,MAAM,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;SAC1C;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;;AAxCH,0CA2CC;AAzCC,6EAA6E;AACtD,+BAAe,GAAG,iBAAiB,CAAC;AAE3D,4FAA4F;AACrE,wCAAwB,GAAG,kBAAkB,CAAC"}

package/oclif.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.3.237",
+  "version": "1.3.239",
   "commands": {
     "branch": {
       "id": "branch",
@@ -7391,6 +7391,12 @@
           "required": false,
           "multiple": false
         },
+        "private": {
+          "name": "private",
+          "type": "boolean",
+          "description": "Whether pulling from this registry requires authentication (default true; pass --no-private for a public registry).",
+          "allowNo": true
+        },
         "silent": {
           "name": "silent",
           "type": "boolean",
@@ -9646,6 +9652,142 @@
         }
       }
     },
+    "ai:agent:install": {
+      "id": "ai:agent:install",
+      "description": "Provisions a stateful Codiac agent workload (openclaw, hermes, or byoa) into an enterprise cabinet.",
+      "strict": true,
+      "pluginName": "@codiac.io/codiac-cli",
+      "pluginAlias": "@codiac.io/codiac-cli",
+      "pluginType": "core",
+      "aliases": [],
+      "hiddenAliases": [],
+      "examples": [
+        {
+          "description": "Install a Hermes agent into the dev cabinet of the ben enterprise.",
+          "command": "<%= config.bin %> <%= command.id %> -e ben -t hermes -c dev"
+        },
+        {
+          "description": "Non-interactive (scripted) invocation. Ingress defaults on, so a host-naming strategy must be given explicitly; shared_ingress_ip needs no --domain.",
+          "command": "<%= config.bin %> <%= command.id %> -e ben -t hermes -c dev --silent --naming shared_ingress_ip"
+        },
+        {
+          "description": "Renders the equivalent silent command and then executes.",
+          "command": "<%= config.bin %> <%= command.id %> -e ben -t hermes -c dev --echo"
+        },
+        {
+          "description": "Renders the equivalent silent command without executing.",
+          "command": "<%= config.bin %> <%= command.id %> -e ben -t hermes -c dev --to-script"
+        }
+      ],
+      "flags": {
+        "help": {
+          "name": "help",
+          "type": "boolean",
+          "char": "h",
+          "description": "Show CLI help.",
+          "allowNo": false
+        },
+        "enterpriseCode": {
+          "name": "enterpriseCode",
+          "type": "option",
+          "char": "e",
+          "description": "Code name identifying the target enterprise.",
+          "required": false,
+          "multiple": false
+        },
+        "type": {
+          "name": "type",
+          "type": "option",
+          "char": "t",
+          "description": "Agent framework to install: openclaw, hermes, or byoa (bring-your-own-agent).",
+          "multiple": false,
+          "options": [
+            "openclaw",
+            "hermes",
+            "byoa"
+          ]
+        },
+        "cabinet": {
+          "name": "cabinet",
+          "type": "option",
+          "char": "c",
+          "description": "Cabinet (environment) into which the agent workload is deployed.",
+          "multiple": false
+        },
+        "name": {
+          "name": "name",
+          "type": "option",
+          "char": "n",
+          "description": "Asset name for the agent workload (defaults to <type>-agent).",
+          "multiple": false
+        },
+        "ingress": {
+          "name": "ingress",
+          "type": "boolean",
+          "char": "g",
+          "description": "Expose the agent web terminal through an ingress host (use --no-ingress to keep it cluster-internal).",
+          "allowNo": true
+        },
+        "naming": {
+          "name": "naming",
+          "type": "option",
+          "description": "Host-naming strategy to use for the ingress host (prompted during install when omitted).",
+          "multiple": false
+        },
+        "domain": {
+          "name": "domain",
+          "type": "option",
+          "description": "Domain to use with the host-naming strategy for the ingress host.",
+          "multiple": false
+        },
+        "input": {
+          "name": "input",
+          "type": "option",
+          "description": "Pre-supply a needs_action input as key=value (repeatable), e.g. --input openRouterKey=sk-... . Lets --silent/headless runs resolve secret/decision prompts without interaction.",
+          "multiple": true
+        },
+        "take-defaults": {
+          "name": "take-defaults",
+          "type": "boolean",
+          "description": "Prevents prompting for confirmation on parameters that were passed in or were automatically set to default values (Irrelevant in --silent mode).  This behavior does NOT apply to scenarios where the command needs to override invalid user input; such cases will always prompt for confirmation.",
+          "allowNo": false,
+          "exclusive": [
+            "silent"
+          ]
+        },
+        "silent": {
+          "name": "silent",
+          "type": "boolean",
+          "description": "Executes without any user interaction; fails on missing or invalid arguments.",
+          "allowNo": false,
+          "exclusive": [
+            "echo",
+            "to-script"
+          ]
+        },
+        "echo": {
+          "name": "echo",
+          "type": "boolean",
+          "description": "Renders the equivalent non-interactive command for future use before executing.",
+          "allowNo": false,
+          "exclusive": [
+            "to-script",
+            "silent"
+          ]
+        },
+        "to-script": {
+          "name": "to-script",
+          "type": "boolean",
+          "description": "Renders the equivalent non-interactive command without executing it.",
+          "allowNo": false,
+          "exclusive": [
+            "echo",
+            "silent"
+          ]
+        }
+      },
+      "args": {}
+    },
     "asset:entrypoint:delete": {
       "id": "asset:entrypoint:delete",
       "description": "Removes an existing override of the image startup command for this asset (restores the original ENTRYPOINT set in the image itself, as well as any image elements specified using CMD)).",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@codiac.io/codiac-cli",
   "description": "Local command line interface for managing enterprise assets and environments.",
-  "version": "1.3.237",
+  "version": "1.3.239",
   "author": "Codiac",
   "bin": {
     "codiac": "./bin/run",
@@ -12,6 +12,7 @@
     "prepack": "oclif readme",
     "lint": "eslint . --ext .ts --config .eslintrc",
     "test": "nyc --extension .ts mocha --forbid-only \"test/**/*.test.ts\"",
+    "typecheck": "tsc --noEmit -p tsconfig.typecheck.json",
     "version": "oclif readme && git add README.md",
     "upgrade-toyhauler": "npm uninstall toyhauler-api-client  &&  npm install toyhauler-auth-client@latest  &&  npm uninstall toyhauler-auth-client  &&  npm install toyhauler-auth-client@latest  &&  npm uninstall @codiac.io/codiac-common  &&  npm install @codiac.io/codiac-common@latest  &&  npm uninstall toyhauler-domain  &&  npm install toyhauler-domain@latest",
     "auto-commit": "git add -A  &&  git commit -m 'publish [skip ci]'  &&  git push origin HEAD:master",