@codiac.io/codiac-cli 1.3.267 → 1.3.273

package/dist/commands/ai/agent/csp/add.d.ts

@@ -0,0 +1,50 @@
+import { RootMap } from '../../../../apis/codiac-api/contracts';
+import { CommandBaseExec, IEnterpriseEntity } from '../../../../command-base-exec';
+export type IAgentCspAddRequest = IEnterpriseEntity & {
+    enterprise: string;
+    cabinet: string;
+    agent: string;
+    /** Cloud this login authenticates against. */
+    provider: string;
+    /** Name distinguishing this login from the agent's others; part of the setting keys. */
+    login: string;
+    /** Secret store the values are written to. */
+    secretStore?: string;
+};
+/**
+ * Adds one cloud login to an existing agent.
+ *
+ * The values are written to a secret store by the relay, and the asset config
+ * keeps only references — the same path `cod ai agent install` uses, driven by the
+ * same prompting, so a login added here is identical to one added at install time.
+ *
+ * Implemented over the provisioning endpoint rather than a bespoke one: applying
+ * a credential means re-rendering the agent's chart, which IS a redeploy, and the
+ * provisioning pipeline is idempotent (chart repo, operator and ingress all skip
+ * when already in place). A dedicated endpoint would have to do the same work.
+ */
+export default class AiAgentCspAdd extends CommandBaseExec<IAgentCspAddRequest> {
+    static description: string;
+    static examples: {
+        description: string;
+        command: string;
+    }[];
+    static flags: {
+        help: import("@oclif/core/lib/interfaces").BooleanFlag<void>;
+        enterprise: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        cabinet: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        agent: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        provider: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        login: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        store: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        silent: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    /** Collected at execute time and never placed on the candidate — the candidate is
+     *  echoed by --echo/--to-script, and a password must not land in a shell history. */
+    private _inputs;
+    captureArgs(): Promise<[Partial<IAgentCspAddRequest>, boolean, Partial<IAgentCspAddRequest>?]>;
+    buildCandidate_silently(partial: Partial<IAgentCspAddRequest>): Promise<IAgentCspAddRequest>;
+    buildCandidate_interactively(partial: Partial<IAgentCspAddRequest>, rootMap: RootMap, takeDefaults: boolean): Promise<IAgentCspAddRequest>;
+    buildCommandString(candidate: IAgentCspAddRequest, cmd: string[]): string[];
+    executeTask(candidate: IAgentCspAddRequest): Promise<void>;
+}

package/dist/commands/ai/agent/csp/add.js

@@ -0,0 +1,157 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+const core_1 = require("@oclif/core");
+const _ = require("lodash");
+const command_base_exec_1 = require("../../../../command-base-exec");
+const agent_csp_credentials_1 = require("../../../../uilogic/agent-csp-credentials");
+/**
+ * Adds one cloud login to an existing agent.
+ *
+ * The values are written to a secret store by the relay, and the asset config
+ * keeps only references — the same path `cod ai agent install` uses, driven by the
+ * same prompting, so a login added here is identical to one added at install time.
+ *
+ * Implemented over the provisioning endpoint rather than a bespoke one: applying
+ * a credential means re-rendering the agent's chart, which IS a redeploy, and the
+ * provisioning pipeline is idempotent (chart repo, operator and ingress all skip
+ * when already in place). A dedicated endpoint would have to do the same work.
+ */
+class AiAgentCspAdd extends command_base_exec_1.CommandBaseExec {
+    constructor() {
+        super(...arguments);
+        /** Collected at execute time and never placed on the candidate — the candidate is
+         *  echoed by --echo/--to-script, and a password must not land in a shell history. */
+        this._inputs = {};
+    }
+    captureArgs() {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const { flags } = yield this.parse(AiAgentCspAdd);
+            const partial = {};
+            const explicit = {};
+            if (flags.enterprise)
+                partial.enterprise = flags.enterprise;
+            if (flags.cabinet) {
+                partial.cabinet = flags.cabinet;
+                explicit.cabinet = flags.cabinet;
+            }
+            if (flags.agent) {
+                partial.agent = flags.agent;
+                explicit.agent = flags.agent;
+            }
+            if (flags.provider) {
+                partial.provider = flags.provider;
+                explicit.provider = flags.provider;
+            }
+            if (flags.login) {
+                partial.login = flags.login;
+                explicit.login = flags.login;
+            }
+            if (flags.store) {
+                partial.secretStore = flags.store;
+                explicit.secretStore = flags.store;
+            }
+            return [partial, false, explicit];
+        });
+    }
+    buildCandidate_silently(partial) {
+        var _a;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            if (!partial.agent || _.isEmpty(partial.agent))
+                throw new Error("Must specify agent.");
+            if (!partial.cabinet || _.isEmpty(partial.cabinet))
+                throw new Error("Must specify cabinet.");
+            if (!partial.provider || _.isEmpty(partial.provider))
+                throw new Error("Must specify provider.");
+            return {
+                enterprise: partial.enterprise,
+                cabinet: partial.cabinet,
+                agent: partial.agent,
+                provider: partial.provider,
+                login: (_a = partial.login) !== null && _a !== void 0 ? _a : partial.provider,
+                secretStore: partial.secretStore,
+            };
+        });
+    }
+    buildCandidate_interactively(partial, rootMap, takeDefaults) {
+        var _a, _b, _c;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            if (!partial.cabinet) {
+                const [cab] = yield this.rootMapUtils.promptForCabinet(partial.enterprise, rootMap, partial.cabinet, takeDefaults);
+                partial.cabinet = cab.name;
+            }
+            if (!partial.agent) {
+                const ent = rootMap.enterprises.find(e => e.name === partial.enterprise);
+                const [selected] = yield this.rootMapUtils.promptForAsset((_a = ent === null || ent === void 0 ? void 0 : ent.assets) !== null && _a !== void 0 ? _a : [], partial.agent, true);
+                partial.agent = selected;
+            }
+            if (!partial.provider) {
+                partial.provider = (_b = yield this._ui.promptSelect('provider', 'Cloud:', agent_csp_credentials_1.SUPPORTED_CSPS.map(p => ({ name: p, value: p })))) !== null && _b !== void 0 ? _b : undefined;
+            }
+            if (!partial.login) {
+                const suggested = (_c = partial.provider) !== null && _c !== void 0 ? _c : 'csp';
+                const raw = yield this._ui.prompt('login', `Name for this login [${suggested}]:`, false);
+                partial.login = (String(raw !== null && raw !== void 0 ? raw : '').trim() || suggested).replace(/[^A-Za-z0-9-]/g, '-');
+            }
+            return yield this.buildCandidate_silently(partial);
+        });
+    }
+    buildCommandString(candidate, cmd) {
+        cmd.push("-e", candidate.enterprise);
+        cmd.push("-c", candidate.cabinet);
+        cmd.push("-a", candidate.agent);
+        cmd.push("-p", candidate.provider);
+        cmd.push("-l", candidate.login);
+        if (candidate.secretStore)
+            cmd.push("-s", candidate.secretStore);
+        // Credentials are never echoed — they are prompted at execute time.
+        cmd.push("--silent");
+        return cmd;
+    }
+    executeTask(candidate) {
+        var _a, _b, _c;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            this._inputs = {};
+            if (candidate.secretStore)
+                this._inputs['secretStore'] = candidate.secretStore;
+            const captured = yield (0, agent_csp_credentials_1.promptForCspLogin)(this._ui, this._inputs, candidate.login, candidate.provider);
+            if (captured.length === 0) {
+                this._ui.userMessage(this._styler.colorWarning('No values entered — nothing stored.'));
+                return;
+            }
+            this._ui.userMessage(`Storing ${captured.length} field(s) for ${this._styler.hilite(candidate.login)} (${candidate.provider})...`);
+            const request = {
+                enterprise: candidate.enterprise,
+                cabinet: candidate.cabinet,
+                framework: 'hermes',
+                name: candidate.agent,
+                inputs: this._inputs,
+            };
+            const result = yield this.watcher.triggerAndWatch((correlationId, socketId) => this.genRelayClient.Call.aiAgentProvision(Object.assign(Object.assign({}, request), { correlationId, socketId })));
+            if (result.error || !result.success) {
+                const msg = `Error adding cloud login [${candidate.login}] to [${candidate.agent}]: ${(_a = result.message) !== null && _a !== void 0 ? _a : ''} ${(_c = (_b = result.error) === null || _b === void 0 ? void 0 : _b.message) !== null && _c !== void 0 ? _c : ''}`.trimEnd();
+                this.logger.error(msg, result.error);
+                this._ui.userMessage(`${this._styler.colorCritical("ERROR!")} ${msg}`);
+                return;
+            }
+            this._ui.userMessage(`${this._styler.colorGood("SUCCESS!")} Cloud login [${this._styler.hilite(candidate.login)}] added to ${candidate.agent}.`);
+        });
+    }
+}
+exports.default = AiAgentCspAdd;
+AiAgentCspAdd.description = "Adds a cloud (CSP) login to an agent, storing the credentials in a secret store and redeploying the agent to pick them up.";
+AiAgentCspAdd.examples = [
+    { description: 'Add a cloud login to an agent.', command: '<%= config.bin %> <%= command.id %> --agent hermes-agent --cabinet bens-agent' },
+    { description: 'Add a second, named login.', command: '<%= config.bin %> <%= command.id %> --agent hermes-agent --cabinet bens-agent --login data-aws --provider aws' },
+];
+AiAgentCspAdd.flags = {
+    help: core_1.Flags.help({ char: 'h' }),
+    enterprise: core_1.Flags.string({ char: 'e', description: 'Enterprise the agent belongs to.' }),
+    cabinet: core_1.Flags.string({ char: 'c', description: 'Cabinet the agent is deployed into.' }),
+    agent: core_1.Flags.string({ char: 'a', description: 'Name of the agent asset.' }),
+    provider: core_1.Flags.string({ char: 'p', options: agent_csp_credentials_1.SUPPORTED_CSPS, description: 'Cloud this login authenticates against.' }),
+    login: core_1.Flags.string({ char: 'l', description: 'Name for this login (defaults to the provider). Lets an agent hold several.' }),
+    store: core_1.Flags.string({ char: 's', description: 'Secret store to write the credentials to.' }),
+    silent: core_1.Flags.boolean({ description: 'Non-Interactive mode; executes without any user interaction and fails on any missing or invalid arguments.' }),
+};
+//# sourceMappingURL=add.js.map

package/dist/commands/ai/agent/csp/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../../../../src/commands/ai/agent/csp/add.ts"],"names":[],"mappings":";;;AAAA,sCAAoC;AACpC,4BAA6B;AAI7B,qEAAmF;AACnF,qFAA8F;AAc9F;;;;;;;;;;;GAWG;AACH,MAAqB,aAAc,SAAQ,mCAAoC;IAA/E;;QAoBE;6FACqF;QAC7E,YAAO,GAA2B,EAAE,CAAC;IAmG/C,CAAC;IAjGc,WAAW;;YACtB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAClD,MAAM,OAAO,GAAiC,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAiC,EAAE,CAAC;YAClD,IAAI,KAAK,CAAC,UAAU;gBAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;YAC5D,IAAI,KAAK,CAAC,OAAO,EAAE;gBAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBAAC,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;aAAE;YACzF,IAAI,KAAK,CAAC,KAAK,EAAE;gBAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;aAAE;YAC/E,IAAI,KAAK,CAAC,QAAQ,EAAE;gBAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;gBAAC,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;aAAE;YAC9F,IAAI,KAAK,CAAC,KAAK,EAAE;gBAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;aAAE;YAC/E,IAAI,KAAK,CAAC,KAAK,EAAE;gBAAE,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAC,QAAQ,CAAC,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC;aAAE;YAC3F,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;KAAA;IAEY,uBAAuB,CAAC,OAAqC;;;YACxE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACvF,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC7F,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAChG,OAAO;gBACL,UAAU,EAAE,OAAO,CAAC,UAAW;gBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,MAAA,OAAO,CAAC,KAAK,mCAAI,OAAO,CAAC,QAAQ;gBACxC,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAC;;KACH;IAEY,4BAA4B,CACvC,OAAqC,EAAE,OAAgB,EAAE,YAAqB;;;YAE9E,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;gBACpB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBACpH,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC;aAC5B;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;gBAClB,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;gBACzE,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,mCAAI,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAClG,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;aAC1B;YACD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACrB,OAAO,CAAC,QAAQ,GAAG,MAAA,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAS,UAAU,EAAE,QAAQ,EACzE,sCAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,mCAAI,SAAS,CAAC;aAClE;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;gBAClB,MAAM,SAAS,GAAG,MAAA,OAAO,CAAC,QAAQ,mCAAI,KAAK,CAAC;gBAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAS,OAAO,EAAE,wBAAwB,SAAS,IAAI,EAAE,KAAK,CAAC,CAAC;gBACjG,OAAO,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,aAAH,GAAG,cAAH,GAAG,GAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;aACxF;YACD,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;;KACpD;IAEM,kBAAkB,CAAC,SAA8B,EAAE,GAAa;QACrE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,SAAS,CAAC,WAAW;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;QACjE,oEAAoE;QACpE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,GAAG,CAAC;IACb,CAAC;IAEY,WAAW,CAAC,SAA8B;;;YACrD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;YAClB,IAAI,SAAS,CAAC,WAAW;gBAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC;YAE/E,MAAM,QAAQ,GAAG,MAAM,IAAA,yCAAiB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;gBACzB,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,qCAAqC,CAAC,CAAC,CAAC;gBACvF,OAAO;aACR;YAED,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,QAAQ,CAAC,MAAM,iBAAiB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,QAAQ,MAAM,CAAC,CAAC;YAEnI,MAAM,OAAO,GAA4B;gBACvC,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,SAAS,EAAE,QAAQ;gBACnB,IAAI,EAAE,SAAS,CAAC,KAAK;gBACrB,MAAM,EAAE,IAAI,CAAC,OAAO;aACd,CAAC;YAET,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAC/C,CAAC,aAAqB,EAAE,QAAgB,EAAE,EAAE,CAC1C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,iCAAM,OAAO,KAAE,aAAa,EAAE,QAAQ,IAAU,CAC5F,CAAC;YAEF,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;gBACnC,MAAM,GAAG,GAAG,6BAA6B,SAAS,CAAC,KAAK,SAAS,SAAS,CAAC,KAAK,MAAM,MAAA,MAAM,CAAC,OAAO,mCAAI,EAAE,IAAI,MAAA,MAAA,MAAM,CAAC,KAAK,0CAAE,OAAO,mCAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC;gBACtJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;gBACvE,OAAO;aACR;YAED,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC;;KAClJ;;AAxHH,gCAyHC;AAvHQ,yBAAW,GAAG,4HAA4H,CAAC;AAE3I,sBAAQ,GAAG;IAChB,EAAE,WAAW,EAAE,gCAAgC,EAAE,OAAO,EAAE,+EAA+E,EAAE;IAC3I,EAAE,WAAW,EAAE,4BAA4B,EAAE,OAAO,EAAE,+GAA+G,EAAE;CACxK,CAAC;AAEK,mBAAK,GAAG;IACb,IAAI,EAAE,YAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC/B,UAAU,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IACxF,OAAO,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;IACxF,KAAK,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IAC3E,QAAQ,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,sCAAc,EAAE,WAAW,EAAE,yCAAyC,EAAE,CAAC;IACtH,KAAK,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,6EAA6E,EAAE,CAAC;IAC9H,KAAK,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;IAC5F,MAAM,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,4GAA4G,EAAE,CAAC;CACrJ,CAAC"}

package/dist/commands/ai/agent/csp/delete.d.ts

@@ -0,0 +1,43 @@
+import { RootMap } from '../../../../apis/codiac-api/contracts';
+import { CommandBaseExec, IEnterpriseEntity } from '../../../../command-base-exec';
+export type IAgentCspDeleteRequest = IEnterpriseEntity & {
+    enterprise: string;
+    agent: string;
+    /** Name of the login to remove, as shown by `ai agent csp list`. */
+    login: string;
+};
+/**
+ * Removes one cloud login from an agent.
+ *
+ * Drops the asset's settings for that login — the references, and the plain
+ * `provider` marker. The secret itself is left in the store on purpose: the store
+ * is the customer's, other things may reference the same secret, and a CLI that
+ * silently reaches into a key vault to destroy material is a worse default than
+ * one that leaves an unreferenced entry behind. The removal is reported so it can
+ * be cleaned up deliberately.
+ *
+ * The agent keeps running with its current credentials until it is redeployed —
+ * this changes configuration, not the live pod.
+ */
+export default class AiAgentCspDelete extends CommandBaseExec<IAgentCspDeleteRequest> {
+    static description: string;
+    static aliases: string[];
+    static examples: {
+        description: string;
+        command: string;
+    }[];
+    static flags: {
+        help: import("@oclif/core/lib/interfaces").BooleanFlag<void>;
+        enterprise: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        agent: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        login: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        silent: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    captureArgs(): Promise<[Partial<IAgentCspDeleteRequest>, boolean, Partial<IAgentCspDeleteRequest>?]>;
+    buildCandidate_silently(partial: Partial<IAgentCspDeleteRequest>): Promise<IAgentCspDeleteRequest>;
+    buildCandidate_interactively(partial: Partial<IAgentCspDeleteRequest>, rootMap: RootMap): Promise<IAgentCspDeleteRequest>;
+    buildCommandString(candidate: IAgentCspDeleteRequest, cmd: string[]): string[];
+    executeTask(candidate: IAgentCspDeleteRequest): Promise<void>;
+    private settingsFor;
+    private loginNames;
+}

package/dist/commands/ai/agent/csp/delete.js

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+const core_1 = require("@oclif/core");
+const _ = require("lodash");
+const command_base_exec_1 = require("../../../../command-base-exec");
+/**
+ * Removes one cloud login from an agent.
+ *
+ * Drops the asset's settings for that login — the references, and the plain
+ * `provider` marker. The secret itself is left in the store on purpose: the store
+ * is the customer's, other things may reference the same secret, and a CLI that
+ * silently reaches into a key vault to destroy material is a worse default than
+ * one that leaves an unreferenced entry behind. The removal is reported so it can
+ * be cleaned up deliberately.
+ *
+ * The agent keeps running with its current credentials until it is redeployed —
+ * this changes configuration, not the live pod.
+ */
+class AiAgentCspDelete extends command_base_exec_1.CommandBaseExec {
+    captureArgs() {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const { flags } = yield this.parse(AiAgentCspDelete);
+            const partial = {};
+            const explicit = {};
+            if (flags.enterprise)
+                partial.enterprise = flags.enterprise;
+            if (flags.agent) {
+                partial.agent = flags.agent;
+                explicit.agent = flags.agent;
+            }
+            if (flags.login) {
+                partial.login = flags.login;
+                explicit.login = flags.login;
+            }
+            return [partial, false, explicit];
+        });
+    }
+    buildCandidate_silently(partial) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            if (!partial.agent || _.isEmpty(partial.agent))
+                throw new Error("Must specify agent.");
+            if (!partial.login || _.isEmpty(partial.login))
+                throw new Error("Must specify login.");
+            return { enterprise: partial.enterprise, agent: partial.agent, login: partial.login };
+        });
+    }
+    buildCandidate_interactively(partial, rootMap) {
+        var _a, _b;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            if (!partial.agent) {
+                const ent = rootMap.enterprises.find(e => e.name === partial.enterprise);
+                const [selected] = yield this.rootMapUtils.promptForAsset((_a = ent === null || ent === void 0 ? void 0 : ent.assets) !== null && _a !== void 0 ? _a : [], partial.agent, true);
+                partial.agent = selected;
+            }
+            if (!partial.login) {
+                // Offer the logins that actually exist rather than taking a free-typed name
+                // that would silently match nothing.
+                const names = yield this.loginNames(partial.enterprise, partial.agent);
+                if (names.length === 0)
+                    throw new Error(`Agent [${partial.agent}] has no cloud logins to remove.`);
+                partial.login = (_b = yield this._ui.promptSelect('login', 'Cloud login to remove:', names.map(n => ({ name: n, value: n })))) !== null && _b !== void 0 ? _b : undefined;
+            }
+            return yield this.buildCandidate_silently(partial);
+        });
+    }
+    buildCommandString(candidate, cmd) {
+        cmd.push("-e", candidate.enterprise);
+        cmd.push("-a", candidate.agent);
+        cmd.push("-l", candidate.login);
+        cmd.push("--silent");
+        return cmd;
+    }
+    executeTask(candidate) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const settings = yield this.settingsFor(candidate.enterprise, candidate.agent);
+            const prefix = candidate.login === 'csp' ? 'csp.' : `csp.${candidate.login}.`;
+            const mine = settings.filter(s => {
+                var _a;
+                const key = (_a = s.setting) !== null && _a !== void 0 ? _a : '';
+                if (!key.startsWith(prefix))
+                    return false;
+                // The bare form is 2 segments; a named login is 3. Without this, deleting
+                // "csp" would also take every named login with it.
+                return candidate.login === 'csp' ? key.split('.').length === 2 : true;
+            });
+            if (mine.length === 0) {
+                this._ui.userMessage(`No cloud login named [${this._styler.hilite(candidate.login)}] on agent [${candidate.agent}].`);
+                return;
+            }
+            const stores = new Set(mine.map(s => { var _a; return (_a = s.source) === null || _a === void 0 ? void 0 : _a.name; }).filter(Boolean));
+            for (const s of mine) {
+                yield this._codiacApi.ScopedSetting.delete({ id: s.id });
+            }
+            this._ui.userMessage(`${this._styler.colorGood("SUCCESS!")} Removed cloud login [${this._styler.hilite(candidate.login)}] from ${candidate.agent} (${mine.length} setting(s)).`);
+            if (stores.size > 0) {
+                this._ui.userMessage(this._styler.dim(`The secret values remain in ${[...stores].join(', ')}; remove them there if they are no longer needed.`));
+            }
+            this._ui.userMessage(this._styler.dim(`Redeploy the agent for this to take effect.`));
+        });
+    }
+    settingsFor(enterprise, agent) {
+        var _a;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return (_a = yield this._codiacApi.ScopedSetting.readMany({ asset: agent, enterprise }, { throwNotFound: false })) !== null && _a !== void 0 ? _a : [];
+        });
+    }
+    loginNames(enterprise, agent) {
+        var _a;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const settings = yield this.settingsFor(enterprise, agent);
+            const names = new Set();
+            for (const s of settings) {
+                const key = (_a = s.setting) !== null && _a !== void 0 ? _a : '';
+                if (!key.startsWith('csp.'))
+                    continue;
+                const parts = key.split('.');
+                names.add(parts.length === 3 ? parts[1] : 'csp');
+            }
+            return [...names];
+        });
+    }
+}
+exports.default = AiAgentCspDelete;
+AiAgentCspDelete.description = "Removes a cloud (CSP) login from an agent's configuration. The secret is left in its store.";
+AiAgentCspDelete.aliases = ["ai:agent:csp:remove", "ai:agent:csp:rm"];
+AiAgentCspDelete.examples = [
+    { description: 'Remove a named cloud login from an agent.', command: '<%= config.bin %> <%= command.id %> --agent hermes-agent --login prod-az' },
+];
+AiAgentCspDelete.flags = {
+    help: core_1.Flags.help({ char: 'h' }),
+    enterprise: core_1.Flags.string({ char: 'e', description: 'Enterprise the agent belongs to.' }),
+    agent: core_1.Flags.string({ char: 'a', description: 'Name of the agent asset.' }),
+    login: core_1.Flags.string({ char: 'l', description: 'Name of the cloud login to remove (see `cod ai agent csp list`).' }),
+    silent: core_1.Flags.boolean({ description: 'Non-Interactive mode; executes without any user interaction and fails on any missing or invalid arguments.' }),
+};
+//# sourceMappingURL=delete.js.map

package/dist/commands/ai/agent/csp/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/commands/ai/agent/csp/delete.ts"],"names":[],"mappings":";;;AAAA,sCAAoC;AACpC,4BAA6B;AAG7B,qEAAmF;AASnF;;;;;;;;;;;;GAYG;AACH,MAAqB,gBAAiB,SAAQ,mCAAuC;IAkBtE,WAAW;;YACtB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACrD,MAAM,OAAO,GAAoC,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAoC,EAAE,CAAC;YACrD,IAAI,KAAK,CAAC,UAAU;gBAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;YAC5D,IAAI,KAAK,CAAC,KAAK,EAAE;gBAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;aAAE;YAC/E,IAAI,KAAK,CAAC,KAAK,EAAE;gBAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;aAAE;YAC/E,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;KAAA;IAEY,uBAAuB,CAAC,OAAwC;;YAC3E,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACvF,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACvF,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACzF,CAAC;KAAA;IAEY,4BAA4B,CACvC,OAAwC,EAAE,OAAgB;;;YAE1D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;gBAClB,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;gBACzE,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,mCAAI,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAClG,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;aAC1B;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;gBAClB,4EAA4E;gBAC5E,qCAAqC;gBACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,UAAW,EAAE,OAAO,CAAC,KAAM,CAAC,CAAC;gBACzE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,OAAO,CAAC,KAAK,kCAAkC,CAAC,CAAC;gBACnG,OAAO,CAAC,KAAK,GAAG,MAAA,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAS,OAAO,EAAE,wBAAwB,EACnF,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,mCAAI,SAAS,CAAC;aACzD;YACD,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;;KACpD;IAEM,kBAAkB,CAAC,SAAiC,EAAE,GAAa;QACxE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,GAAG,CAAC;IACb,CAAC;IAEY,WAAW,CAAC,SAAiC;;YACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,KAAK,GAAG,CAAC;YAC9E,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;;gBAC/B,MAAM,GAAG,GAAW,MAAC,CAAS,CAAC,OAAO,mCAAI,EAAE,CAAC;gBAC7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC1C,0EAA0E;gBAC1E,mDAAmD;gBACnD,OAAO,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACxE,CAAC,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;gBACrB,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,yBAAyB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC;gBACtH,OAAO;aACR;YAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAC,OAAA,MAAC,CAAS,CAAC,MAAM,0CAAE,IAAI,CAAA,EAAA,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/E,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;gBACpB,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,EAAG,CAAS,CAAC,EAAE,EAAS,CAAC,CAAC;aAC1E;YAED,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,yBAAyB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,eAAe,CAAC,CAAC;YACjL,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE;gBACnB,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC,CAAC;aAClJ;YACD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC,CAAC;QACxF,CAAC;KAAA;IAEa,WAAW,CAAC,UAAkB,EAAE,KAAa;;;YACzD,OAAO,MAAA,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CACjD,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAS,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,mCAAI,EAAE,CAAC;;KACxE;IAEa,UAAU,CAAC,UAAkB,EAAE,KAAa;;;YACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;YAChC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE;gBACxB,MAAM,GAAG,GAAW,MAAC,CAAS,CAAC,OAAO,mCAAI,EAAE,CAAC;gBAC7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,SAAS;gBACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC7B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;aAClD;YACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;;KACnB;;AAxGH,mCAyGC;AAvGQ,4BAAW,GAAG,6FAA6F,CAAC;AAE5G,wBAAO,GAAG,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,CAAC;AAErD,yBAAQ,GAAG;IAChB,EAAE,WAAW,EAAE,2CAA2C,EAAE,OAAO,EAAE,0EAA0E,EAAE;CAClJ,CAAC;AAEK,sBAAK,GAAG;IACb,IAAI,EAAE,YAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC/B,UAAU,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IACxF,KAAK,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IAC3E,KAAK,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,kEAAkE,EAAE,CAAC;IACnH,MAAM,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,4GAA4G,EAAE,CAAC;CACrJ,CAAC"}

package/dist/commands/ai/agent/csp/list.d.ts

@@ -0,0 +1,36 @@
+import { AtLeast } from '@codiac.io/codiac-common/contracts';
+import { RootMap } from '../../../../apis/codiac-api/contracts';
+import { CommandBaseExec, IEnterpriseEntity } from '../../../../command-base-exec';
+export type IAgentCspListRequest = IEnterpriseEntity & {
+    enterprise: string;
+    /** Agent asset whose cloud logins to show. */
+    agent: string;
+};
+/**
+ * Shows which cloud logins an agent holds — WITHOUT reading any secret.
+ *
+ * The values live in a secret store; the asset config holds only references to
+ * them. This reads the config, so it can report which logins exist, which cloud
+ * each targets, which fields are set and where they are stored, while never
+ * touching the store itself. That is deliberate: listing credentials should not
+ * require permission to read them.
+ */
+export default class AiAgentCspList extends CommandBaseExec<IAgentCspListRequest> {
+    static description: string;
+    static aliases: string[];
+    static examples: {
+        description: string;
+        command: string;
+    }[];
+    static flags: {
+        help: import("@oclif/core/lib/interfaces").BooleanFlag<void>;
+        enterprise: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        agent: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        silent: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    captureArgs(): Promise<[Partial<IAgentCspListRequest>, boolean, Partial<IAgentCspListRequest>?]>;
+    buildCandidate_silently(partial: AtLeast<IAgentCspListRequest, "enterprise">): Promise<IAgentCspListRequest>;
+    buildCandidate_interactively(partial: AtLeast<IAgentCspListRequest, "enterprise">, rootMap: RootMap): Promise<IAgentCspListRequest>;
+    buildCommandString(candidate: IAgentCspListRequest, cmd: string[]): string[];
+    executeTask(candidate: IAgentCspListRequest): Promise<void>;
+}

package/dist/commands/ai/agent/csp/list.js

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+const core_1 = require("@oclif/core");
+const _ = require("lodash");
+const command_base_exec_1 = require("../../../../command-base-exec");
+/**
+ * Shows which cloud logins an agent holds — WITHOUT reading any secret.
+ *
+ * The values live in a secret store; the asset config holds only references to
+ * them. This reads the config, so it can report which logins exist, which cloud
+ * each targets, which fields are set and where they are stored, while never
+ * touching the store itself. That is deliberate: listing credentials should not
+ * require permission to read them.
+ */
+class AiAgentCspList extends command_base_exec_1.CommandBaseExec {
+    captureArgs() {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const { flags } = yield this.parse(AiAgentCspList);
+            const partial = {};
+            const explicit = {};
+            if (flags.enterprise)
+                partial.enterprise = flags.enterprise;
+            if (flags.agent) {
+                partial.agent = flags.agent;
+                explicit.agent = flags.agent;
+            }
+            return [partial, false, explicit];
+        });
+    }
+    buildCandidate_silently(partial) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            if (!partial.agent || _.isEmpty(partial.agent))
+                throw new Error("Must specify agent.");
+            return { enterprise: partial.enterprise, agent: partial.agent };
+        });
+    }
+    buildCandidate_interactively(partial, rootMap) {
+        var _a;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            if (!partial.agent) {
+                const ent = rootMap.enterprises.find(e => e.name === partial.enterprise);
+                const [selected] = yield this.rootMapUtils.promptForAsset((_a = ent === null || ent === void 0 ? void 0 : ent.assets) !== null && _a !== void 0 ? _a : [], partial.agent, true);
+                partial.agent = selected;
+            }
+            return yield this.buildCandidate_silently(partial);
+        });
+    }
+    buildCommandString(candidate, cmd) {
+        cmd.push("-e", candidate.enterprise);
+        cmd.push("-a", candidate.agent);
+        cmd.push("--silent");
+        return cmd;
+    }
+    executeTask(candidate) {
+        var _a, _b, _c, _d, _e, _f;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const settings = (_a = yield this._codiacApi.ScopedSetting.readMany({ asset: candidate.agent, enterprise: candidate.enterprise }, { throwNotFound: false })) !== null && _a !== void 0 ? _a : [];
+            // Group the flat `csp.<login>.<field>` settings back into logins. The bare
+            // `csp.<field>` form (a single unnamed login) groups under "csp".
+            const logins = new Map();
+            for (const s of settings) {
+                const key = (_b = s.setting) !== null && _b !== void 0 ? _b : '';
+                if (!key.startsWith('csp.'))
+                    continue;
+                const parts = key.split('.');
+                const [name, field] = parts.length === 3 ? [parts[1], parts[2]] : ['csp', parts[1]];
+                const entry = (_c = logins.get(name)) !== null && _c !== void 0 ? _c : { fields: [] };
+                if (field === 'provider')
+                    entry.provider = s.value;
+                else {
+                    entry.fields.push(field);
+                    entry.store = (_d = entry.store) !== null && _d !== void 0 ? _d : (_e = s.source) === null || _e === void 0 ? void 0 : _e.name;
+                }
+                logins.set(name, entry);
+            }
+            if (logins.size === 0) {
+                this._ui.userMessage(`No cloud logins configured for agent [${this._styler.hilite(candidate.agent)}].`);
+                return;
+            }
+            this._ui.userMessage(`Cloud logins for ${this._styler.hilite(candidate.agent)}:`);
+            for (const [name, e] of logins) {
+                const store = e.store ? this._styler.dim(` in ${e.store}`) : this._styler.colorWarning(' (no secret store — value stored inline?)');
+                const provider = (_f = e.provider) !== null && _f !== void 0 ? _f : this._styler.colorWarning('unknown cloud');
+                this._ui.userMessage(`  ${this._styler.hilite(name)}  ${provider}  ${e.fields.sort().join(', ')}${store}`);
+            }
+        });
+    }
+}
+exports.default = AiAgentCspList;
+AiAgentCspList.description = "Lists the cloud (CSP) logins configured for an agent, without revealing any secret values.";
+AiAgentCspList.aliases = ["ai:agent:csp:ls"];
+AiAgentCspList.examples = [
+    { description: 'List the cloud logins on an agent.', command: '<%= config.bin %> <%= command.id %> --agent hermes-agent' },
+];
+AiAgentCspList.flags = {
+    help: core_1.Flags.help({ char: 'h' }),
+    enterprise: core_1.Flags.string({ char: 'e', description: 'Enterprise the agent belongs to.' }),
+    agent: core_1.Flags.string({ char: 'a', description: 'Name of the agent asset.' }),
+    silent: core_1.Flags.boolean({ description: 'Non-Interactive mode; executes without any user interaction and fails on any missing or invalid arguments.' }),
+};
+//# sourceMappingURL=list.js.map

package/dist/commands/ai/agent/csp/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../../src/commands/ai/agent/csp/list.ts"],"names":[],"mappings":";;;AAAA,sCAAoC;AACpC,4BAA6B;AAG7B,qEAAmF;AAQnF;;;;;;;;GAQG;AACH,MAAqB,cAAe,SAAQ,mCAAqC;IAiBlE,WAAW;;YACtB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,OAAO,GAAkC,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAkC,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,UAAU;gBAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;YAC5D,IAAI,KAAK,CAAC,KAAK,EAAE;gBAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;aAAE;YAC/E,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;KAAA;IAEY,uBAAuB,CAAC,OAAoD;;YACvF,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACvF,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAClE,CAAC;KAAA;IAEY,4BAA4B,CACvC,OAAoD,EAAE,OAAgB;;;YAEtE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;gBAClB,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;gBACzE,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,mCAAI,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAClG,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;aAC1B;YACD,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;;KACpD;IAEM,kBAAkB,CAAC,SAA+B,EAAE,GAAa;QACtE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,GAAG,CAAC;IACb,CAAC;IAEY,WAAW,CAAC,SAA+B;;;YACtD,MAAM,QAAQ,GAAG,MAAA,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAC3D,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAS,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,mCAAI,EAAE,CAAC;YAEvG,2EAA2E;YAC3E,kEAAkE;YAClE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmE,CAAC;YAC1F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE;gBACxB,MAAM,GAAG,GAAW,MAAC,CAAS,CAAC,OAAO,mCAAI,EAAE,CAAC;gBAC7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,SAAS;gBACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC7B,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpF,MAAM,KAAK,GAAG,MAAA,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBACjD,IAAI,KAAK,KAAK,UAAU;oBAAE,KAAK,CAAC,QAAQ,GAAI,CAAS,CAAC,KAAK,CAAC;qBACvD;oBACH,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzB,KAAK,CAAC,KAAK,GAAG,MAAA,KAAK,CAAC,KAAK,mCAAI,MAAC,CAAS,CAAC,MAAM,0CAAE,IAAI,CAAC;iBACtD;gBACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;aACzB;YAED,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE;gBACrB,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,yCAAyC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxG,OAAO;aACR;YAED,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClF,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE;gBAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,2CAA2C,CAAC,CAAC;gBACpI,MAAM,QAAQ,GAAG,MAAA,CAAC,CAAC,QAAQ,mCAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;gBAC1E,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;aAC5G;;KACF;;AAjFH,iCAkFC;AAhFQ,0BAAW,GAAG,4FAA4F,CAAC;AAE3G,sBAAO,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAE9B,uBAAQ,GAAG;IAChB,EAAE,WAAW,EAAE,oCAAoC,EAAE,OAAO,EAAE,0DAA0D,EAAE;CAC3H,CAAC;AAEK,oBAAK,GAAG;IACb,IAAI,EAAE,YAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC/B,UAAU,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IACxF,KAAK,EAAE,YAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IAC3E,MAAM,EAAE,YAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,4GAA4G,EAAE,CAAC;CACrJ,CAAC"}