@copado/agentia-cli 0.113.0-alpha.0 → 0.114.0-alpha.0

package/dist/lib/credential-sync.js

@@ -0,0 +1,249 @@
+import { createHash } from 'node:crypto';
+import { resolveAiCredentials } from './ai-config.js';
+import { AiGateway } from './ai-gateway.js';
+import { agentUsesCicdIntegration } from './ai-types.js';
+import { CicdGateway, tryResolveCicdCredentials, } from './cicd-gateway.js';
+import { readCredentialSyncReceipt, readDefaults, resolveDefaults, writeCredentialSyncReceipt, } from './defaults-store.js';
+import { salesforceIdsEqual } from './salesforce-id.js';
+import { workEndpoint } from './work-types.js';
+const CREDENTIAL_SYNC_SCHEMA_VERSION = 2;
+const AI_INTEGRATION_NAME = 'Agentia CLI Copado CICD';
+const activeSyncs = new Map();
+function fingerprint(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function trimOptional(value) {
+    const trimmed = value?.trim();
+    return trimmed === undefined || trimmed.length === 0 ? undefined : trimmed;
+}
+export function missingProjectDefaultCredentialWarning() {
+    return [
+        'No CICD project default credential is configured.',
+        'Run `agentia cicd project default set --credential <credential-id>` to set one.',
+    ].join(' ');
+}
+export function missingProjectDefaultWorkSetWarning() {
+    return [
+        missingProjectDefaultCredentialWarning(),
+        'Then run `agentia cicd work update --source-credential <credential-id>` if the User Story should use it.',
+    ].join(' ');
+}
+export function missingStoryCredentialWarning(credentialId, workItemId) {
+    const updateTarget = workItemId === undefined ? '' : ` ${workItemId}`;
+    return [
+        'The User Story has no source credential in Copado CICD.',
+        `Run \`agentia cicd work update${updateTarget} --source-credential ${credentialId}\` to bind the project default credential.`,
+    ].join(' ');
+}
+export function differingStoryCredentialWarning(storyCredentialId, projectDefaultCredentialId) {
+    return [
+        `The User Story source credential (${storyCredentialId}) differs from the project default credential (${projectDefaultCredentialId}).`,
+        'Updating the User Story to use the project default credential.',
+    ].join(' ');
+}
+export async function readProjectDefaultCredentialContext() {
+    const [localDefaults, globalDefaults] = await Promise.all([readDefaults('local'), readDefaults('global')]);
+    const resolved = resolveDefaults(localDefaults, globalDefaults, ['credential', 'environment']);
+    const credential = resolved.find((entry) => entry.key === 'credential')?.value;
+    const environment = resolved.find((entry) => entry.key === 'environment')?.value;
+    return {
+        ...(typeof credential === 'string' && credential.trim().length > 0
+            ? { credentialId: credential.trim() }
+            : {}),
+        ...(typeof environment === 'string' && environment.trim().length > 0
+            ? { environmentId: environment.trim() }
+            : {}),
+    };
+}
+export function sanitizeWorkSetUserStory(userStory) {
+    const safeUserStory = { ...userStory };
+    delete safeUserStory.oauthSignature;
+    return safeUserStory;
+}
+export async function reconcileWorkSetCredential(workItem) {
+    const projectDefault = await readProjectDefaultCredentialContext();
+    const storyCredential = trimOptional(workItem.sourceCredential);
+    const sanitized = sanitizeWorkSetUserStory(workItem);
+    if (projectDefault.credentialId === undefined) {
+        return {
+            updated: false,
+            warnings: [missingProjectDefaultWorkSetWarning()],
+            workItem: sanitized,
+        };
+    }
+    if (storyCredential === undefined) {
+        return {
+            updated: false,
+            warnings: [missingStoryCredentialWarning(projectDefault.credentialId, workItem.id)],
+            workItem: sanitized,
+        };
+    }
+    if (salesforceIdsEqual(storyCredential, projectDefault.credentialId)) {
+        return {
+            updated: false,
+            warnings: [],
+            workItem: sanitized,
+        };
+    }
+    const warning = differingStoryCredentialWarning(storyCredential, projectDefault.credentialId);
+    const updated = await CicdGateway.call({
+        body: {
+            sourceCredential: projectDefault.credentialId,
+        },
+        endpoint: workEndpoint(workItem.id),
+        headers: { 'Content-Type': 'application/json' },
+        method: 'PATCH',
+    });
+    return {
+        updated: true,
+        warnings: [warning],
+        workItem: sanitizeWorkSetUserStory(updated),
+    };
+}
+function localReceiptMatches(receipt, context) {
+    return (receipt?.schemaVersion === context.schemaVersion &&
+        receipt.cicdBaseUrl === context.cicdBaseUrl &&
+        receipt.cicdKeyFingerprint === context.cicdKeyFingerprint &&
+        salesforceIdsEqual(receipt.credentialId, context.credentialId) &&
+        (receipt.environmentId ?? '') === (context.environmentId ?? '') &&
+        (receipt.orgId ?? '') === (context.orgId ?? ''));
+}
+function integrationWorkspace(integration) {
+    return integration.workspaceId ?? integration.workspace_id ?? undefined;
+}
+function matchingWorkspaceIntegrations(integrations, workspaceId) {
+    return integrations.filter((integration) => integration.type === 'copado_cicd' &&
+        integration.level === 'MEMBER' &&
+        integrationWorkspace(integration) === workspaceId);
+}
+function aiReceiptMatches(receipt, baseUrl, organizationId, workspaceId) {
+    return (receipt.ai?.baseUrl === baseUrl &&
+        receipt.ai.organizationId === organizationId &&
+        receipt.ai.workspaceId === workspaceId);
+}
+async function replaceAiIntegration(context, cicdCredentials, workspaceId, options) {
+    const integrations = await AiGateway.listIntegrations(options);
+    const matches = matchingWorkspaceIntegrations(integrations, workspaceId);
+    for (const integration of matches) {
+        // Replacement follows the established UI sequence because CICD credentials cannot be updated.
+        // eslint-disable-next-line no-await-in-loop
+        await AiGateway.deleteIntegration(integration.id, options);
+    }
+    const created = await AiGateway.createIntegration({
+        category: 'GENERAL',
+        config: { credentialId: context.credentialId },
+        credential: { apiKey: cicdCredentials.apiKey },
+        level: 'MEMBER',
+        name: AI_INTEGRATION_NAME,
+        type: 'copado_cicd',
+        workspaceId,
+    }, options);
+    const createdWorkspace = integrationWorkspace(created);
+    const createdCredentialId = created.config?.credentialId;
+    if ((created.type !== undefined && created.type !== 'copado_cicd') ||
+        (created.level !== undefined && created.level !== 'MEMBER') ||
+        (createdWorkspace !== undefined && createdWorkspace !== workspaceId) ||
+        (typeof createdCredentialId === 'string' &&
+            !salesforceIdsEqual(createdCredentialId, context.credentialId))) {
+        throw new Error('AI Gateway returned a Copado CICD integration that does not match the requested workspace context.');
+    }
+    return created.id;
+}
+function buildLocalContext(cicdCredentials, credentialId, environmentId, orgId) {
+    return {
+        cicdBaseUrl: cicdCredentials.baseUrl,
+        cicdKeyFingerprint: fingerprint(cicdCredentials.apiKey),
+        credentialId,
+        schemaVersion: CREDENTIAL_SYNC_SCHEMA_VERSION,
+        ...(environmentId === undefined ? {} : { environmentId }),
+        ...(orgId === undefined ? {} : { orgId }),
+    };
+}
+async function ensureAiIntegrationWithContext(input) {
+    const { aiOptions, cicdCredentials, context, force, workspaceId } = input;
+    const aiCredentials = resolveAiCredentials({ ...aiOptions, workspace: workspaceId });
+    const cached = await readCredentialSyncReceipt();
+    if (!force &&
+        localReceiptMatches(cached, context) &&
+        aiReceiptMatches(cached, aiCredentials.baseUrl, aiCredentials.orgId, workspaceId)) {
+        return {
+            credentialId: context.credentialId,
+            ...(context.environmentId === undefined ? {} : { environmentId: context.environmentId }),
+            integrationId: cached.ai?.integrationId,
+            ...(context.orgId === undefined ? {} : { orgId: context.orgId }),
+            workspaceId,
+        };
+    }
+    const integrationId = await replaceAiIntegration(context, cicdCredentials, workspaceId, aiOptions);
+    await writeCredentialSyncReceipt({
+        ...context,
+        ai: {
+            baseUrl: aiCredentials.baseUrl,
+            integrationId,
+            ...(aiCredentials.orgId === undefined ? {} : { organizationId: aiCredentials.orgId }),
+            workspaceId,
+        },
+    });
+    return {
+        credentialId: context.credentialId,
+        ...(context.environmentId === undefined ? {} : { environmentId: context.environmentId }),
+        integrationId,
+        ...(context.orgId === undefined ? {} : { orgId: context.orgId }),
+        workspaceId,
+    };
+}
+export async function ensureAgentCicdIntegration(agent, workspaceId, options = {}) {
+    if (!agentUsesCicdIntegration(agent) || options.noCredentialSync === true)
+        return undefined;
+    const cicdCredentials = tryResolveCicdCredentials({ forceRemote: true });
+    if (cicdCredentials === undefined)
+        return undefined;
+    if (workspaceId === undefined) {
+        throw new Error('AI dialogue did not identify its workspace. Pass --workspace or start a new dialogue before credential synchronization.');
+    }
+    const projectDefault = await readProjectDefaultCredentialContext();
+    const credentialId = trimOptional(options.credentialId) ?? projectDefault.credentialId;
+    if (credentialId === undefined) {
+        throw new Error(missingProjectDefaultCredentialWarning());
+    }
+    const aiCredentials = resolveAiCredentials({ ...options, workspace: workspaceId });
+    const orgId = aiCredentials.orgId === undefined ? undefined : String(aiCredentials.orgId);
+    const context = buildLocalContext(cicdCredentials, credentialId, projectDefault.environmentId, orgId);
+    const cached = await readCredentialSyncReceipt();
+    const cacheKey = [
+        aiCredentials.baseUrl,
+        orgId ?? '',
+        workspaceId,
+        cicdCredentials.baseUrl,
+        fingerprint(cicdCredentials.apiKey),
+        credentialId,
+        projectDefault.environmentId ?? '',
+    ].join('|');
+    if (options.forceCredentialSync !== true &&
+        localReceiptMatches(cached, context) &&
+        aiReceiptMatches(cached, aiCredentials.baseUrl, aiCredentials.orgId, workspaceId)) {
+        return {
+            credentialId: cached.credentialId,
+            ...(cached.environmentId === undefined ? {} : { environmentId: cached.environmentId }),
+            integrationId: cached.ai?.integrationId,
+            ...(cached.orgId === undefined ? {} : { orgId: cached.orgId }),
+            workspaceId,
+        };
+    }
+    const active = activeSyncs.get(cacheKey);
+    if (active !== undefined)
+        return active;
+    const sync = ensureAiIntegrationWithContext({
+        aiOptions: options,
+        cicdCredentials,
+        context,
+        force: options.forceCredentialSync === true,
+        workspaceId,
+    }).finally(() => activeSyncs.delete(cacheKey));
+    activeSyncs.set(cacheKey, sync);
+    return sync;
+}
+export function clearCredentialSyncsForTests() {
+    activeSyncs.clear();
+}
+//# sourceMappingURL=credential-sync.js.map

package/dist/lib/credential-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-sync.js","sourceRoot":"","sources":["../../src/lib/credential-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAA;AAEtC,OAAO,EAA6B,oBAAoB,EAAC,MAAM,gBAAgB,CAAA;AAC/E,OAAO,EAAC,SAAS,EAA4B,MAAM,iBAAiB,CAAA;AACpE,OAAO,EAAC,wBAAwB,EAAmC,MAAM,eAAe,CAAA;AACxF,OAAO,EAEL,WAAW,EACX,yBAAyB,GAC1B,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAEL,yBAAyB,EACzB,YAAY,EACZ,eAAe,EACf,0BAA0B,GAC3B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAiB,YAAY,EAAC,MAAM,iBAAiB,CAAA;AAE5D,MAAM,8BAA8B,GAAG,CAAU,CAAA;AACjD,MAAM,mBAAmB,GAAG,yBAAyB,CAAA;AA6BrD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAyC,CAAA;AAEpE,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAA;IAC7B,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAA;AAC5E,CAAC;AAED,MAAM,UAAU,sCAAsC;IACpD,OAAO;QACL,mDAAmD;QACnD,iFAAiF;KAClF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACb,CAAC;AAED,MAAM,UAAU,mCAAmC;IACjD,OAAO;QACL,sCAAsC,EAAE;QACxC,0GAA0G;KAC3G,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACb,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,YAAoB,EAAE,UAAmB;IACrF,MAAM,YAAY,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAA;IACrE,OAAO;QACL,yDAAyD;QACzD,iCAAiC,YAAY,wBAAwB,YAAY,4CAA4C;KAC9H,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACb,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,iBAAyB,EACzB,0BAAkC;IAElC,OAAO;QACL,qCAAqC,iBAAiB,kDAAkD,0BAA0B,IAAI;QACtI,gEAAgE;KACjE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC;IACvD,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC1G,MAAM,QAAQ,GAAG,eAAe,CAAC,aAAa,EAAE,cAAc,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAA;IAC9F,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,CAAC,EAAE,KAAK,CAAA;IAC9E,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,EAAE,KAAK,CAAA;IAEhF,OAAO;QACL,GAAG,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAChE,CAAC,CAAC,EAAC,YAAY,EAAE,UAAU,CAAC,IAAI,EAAE,EAAC;YACnC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAClE,CAAC,CAAC,EAAC,aAAa,EAAE,WAAW,CAAC,IAAI,EAAE,EAAC;YACrC,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,SAAoB;IAC3D,MAAM,aAAa,GAAG,EAAC,GAAG,SAAS,EAAC,CAAA;IACpC,OAAO,aAAa,CAAC,cAAc,CAAA;IACnC,OAAO,aAAa,CAAA;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAmB;IAEnB,MAAM,cAAc,GAAG,MAAM,mCAAmC,EAAE,CAAA;IAClE,MAAM,eAAe,GAAG,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAA;IAEpD,IAAI,cAAc,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,CAAC,mCAAmC,EAAE,CAAC;YACjD,QAAQ,EAAE,SAAS;SACpB,CAAA;IACH,CAAC;IAED,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,CAAC,6BAA6B,CAAC,cAAc,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnF,QAAQ,EAAE,SAAS;SACpB,CAAA;IACH,CAAC;IAED,IAAI,kBAAkB,CAAC,eAAe,EAAE,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;QACrE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,SAAS;SACpB,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,+BAA+B,CAAC,eAAe,EAAE,cAAc,CAAC,YAAY,CAAC,CAAA;IAC7F,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAY;QAChD,IAAI,EAAE;YACJ,gBAAgB,EAAE,cAAc,CAAC,YAAY;SAC9C;QACD,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,EAAC,cAAc,EAAE,kBAAkB,EAAC;QAC7C,MAAM,EAAE,OAAO;KAChB,CAAC,CAAA;IAEF,OAAO;QACL,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,CAAC,OAAO,CAAC;QACnB,QAAQ,EAAE,wBAAwB,CAAC,OAAO,CAAC;KAC5C,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAA0C,EAC1C,OAA+B;IAE/B,OAAO,CACL,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,aAAa;QAChD,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;QAC3C,OAAO,CAAC,kBAAkB,KAAK,OAAO,CAAC,kBAAkB;QACzD,kBAAkB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC;QAC9D,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;QAC/D,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAChD,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,WAA0B;IACtD,OAAO,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC,YAAY,IAAI,SAAS,CAAA;AACzE,CAAC;AAED,SAAS,6BAA6B,CACpC,YAA6B,EAC7B,WAAmB;IAEnB,OAAO,YAAY,CAAC,MAAM,CACxB,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,IAAI,KAAK,aAAa;QAClC,WAAW,CAAC,KAAK,KAAK,QAAQ;QAC9B,oBAAoB,CAAC,WAAW,CAAC,KAAK,WAAW,CACpD,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA8B,EAC9B,OAAe,EACf,cAAkC,EAClC,WAAmB;IAEnB,OAAO,CACL,OAAO,CAAC,EAAE,EAAE,OAAO,KAAK,OAAO;QAC/B,OAAO,CAAC,EAAE,CAAC,cAAc,KAAK,cAAc;QAC5C,OAAO,CAAC,EAAE,CAAC,WAAW,KAAK,WAAW,CACvC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAA+B,EAC/B,eAAgC,EAChC,WAAmB,EACnB,OAA6B;IAE7B,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAC9D,MAAM,OAAO,GAAG,6BAA6B,CAAC,YAAY,EAAE,WAAW,CAAC,CAAA;IAExE,KAAK,MAAM,WAAW,IAAI,OAAO,EAAE,CAAC;QAClC,8FAA8F;QAC9F,4CAA4C;QAC5C,MAAM,SAAS,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAC/C;QACE,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,EAAC,YAAY,EAAE,OAAO,CAAC,YAAY,EAAC;QAC5C,UAAU,EAAE,EAAC,MAAM,EAAE,eAAe,CAAC,MAAM,EAAC;QAC5C,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,aAAa;QACnB,WAAW;KACZ,EACD,OAAO,CACR,CAAA;IACD,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;IACtD,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAA;IACxD,IACE,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC;QAC9D,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC;QAC3D,CAAC,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,WAAW,CAAC;QACpE,CAAC,OAAO,mBAAmB,KAAK,QAAQ;YACtC,CAAC,kBAAkB,CAAC,mBAAmB,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,EACjE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAA;IACvH,CAAC;IAED,OAAO,OAAO,CAAC,EAAE,CAAA;AACnB,CAAC;AAED,SAAS,iBAAiB,CACxB,eAAgC,EAChC,YAAoB,EACpB,aAAiC,EACjC,KAAyB;IAEzB,OAAO;QACL,WAAW,EAAE,eAAe,CAAC,OAAO;QACpC,kBAAkB,EAAE,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC;QACvD,YAAY;QACZ,aAAa,EAAE,8BAA8B;QAC7C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,aAAa,EAAC,CAAC;QACvD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,KAAK,EAAC,CAAC;KACxC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,KAMC;IAED,MAAM,EAAC,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAC,GAAG,KAAK,CAAA;IACvE,MAAM,aAAa,GAAG,oBAAoB,CAAC,EAAC,GAAG,SAAS,EAAE,SAAS,EAAE,WAAW,EAAC,CAAC,CAAA;IAClF,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAA;IAEhD,IACE,CAAC,KAAK;QACN,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC;QACpC,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,EACjF,CAAC;QACD,OAAO;YACL,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,aAAa,EAAE,OAAO,CAAC,aAAa,EAAC,CAAC;YACtF,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa;YACvC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAC,CAAC;YAC9D,WAAW;SACZ,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;IAClG,MAAM,0BAA0B,CAAC;QAC/B,GAAG,OAAO;QACV,EAAE,EAAE;YACF,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,aAAa;YACb,GAAG,CAAC,aAAa,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,cAAc,EAAE,aAAa,CAAC,KAAK,EAAC,CAAC;YACnF,WAAW;SACZ;KACF,CAAC,CAAA;IAEF,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,aAAa,EAAE,OAAO,CAAC,aAAa,EAAC,CAAC;QACtF,aAAa;QACb,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAC,CAAC;QAC9D,WAAW;KACZ,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAc,EACd,WAA+B,EAC/B,UAAgF,EAAE;IAElF,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IAE3F,MAAM,eAAe,GAAG,yBAAyB,CAAC,EAAC,WAAW,EAAE,IAAI,EAAC,CAAC,CAAA;IACtE,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACnD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,yHAAyH,CAC1H,CAAA;IACH,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,mCAAmC,EAAE,CAAA;IAClE,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,cAAc,CAAC,YAAY,CAAA;IACtF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,sCAAsC,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,EAAC,GAAG,OAAO,EAAE,SAAS,EAAE,WAAW,EAAC,CAAC,CAAA;IAChF,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IACzF,MAAM,OAAO,GAAG,iBAAiB,CAC/B,eAAe,EACf,YAAY,EACZ,cAAc,CAAC,aAAa,EAC5B,KAAK,CACN,CAAA;IACD,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAA;IAChD,MAAM,QAAQ,GAAG;QACf,aAAa,CAAC,OAAO;QACrB,KAAK,IAAI,EAAE;QACX,WAAW;QACX,eAAe,CAAC,OAAO;QACvB,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC;QACnC,YAAY;QACZ,cAAc,CAAC,aAAa,IAAI,EAAE;KACnC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAEX,IACE,OAAO,CAAC,mBAAmB,KAAK,IAAI;QACpC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC;QACpC,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,EACjF,CAAC;QACD,OAAO;YACL,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,aAAa,EAAE,MAAM,CAAC,aAAa,EAAC,CAAC;YACpF,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa;YACvC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAC,CAAC;YAC5D,WAAW;SACZ,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACxC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IAEvC,MAAM,IAAI,GAAG,8BAA8B,CAAC;QAC1C,SAAS,EAAE,OAAO;QAClB,eAAe;QACf,OAAO;QACP,KAAK,EAAE,OAAO,CAAC,mBAAmB,KAAK,IAAI;QAC3C,WAAW;KACZ,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC9C,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC/B,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,WAAW,CAAC,KAAK,EAAE,CAAA;AACrB,CAAC"}

package/dist/lib/debug.js

@@ -1,3 +1,4 @@
+import { redactSecrets } from './secret-redaction.js';
 export function isVerboseDebug(env = process.env) {
     return env.DEBUG?.trim().toLowerCase() === 'verbose';
 }
@@ -17,7 +18,8 @@ export function logVerboseDebug(section, payload) {
     if (!isVerboseDebug()) {
         return;
     }
-    const serialized = typeof payload === 'string' ? payload : JSON.stringify(payload, null, 2);
+    const redacted = redactSecrets(payload);
+    const serialized = typeof redacted === 'string' ? redacted : JSON.stringify(redacted, null, 2);
     process.stderr.write(`[DEBUG] ${section}\n${serialized}\n`);
 }
 //# sourceMappingURL=debug.js.map

package/dist/lib/debug.js.map

@@ -1 +1 @@
-{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../src/lib/debug.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,OAAgB;IAC/D,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,OAAM;IACR,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC3F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,OAAO,KAAK,UAAU,IAAI,CAAC,CAAA;AAC7D,CAAC"}
+{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../src/lib/debug.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAA;AAEnD,MAAM,UAAU,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,OAAgB;IAC/D,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,OAAM;IACR,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,UAAU,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC9F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,OAAO,KAAK,UAAU,IAAI,CAAC,CAAA;AAC7D,CAAC"}

package/dist/lib/defaults-store.d.ts

@@ -1,6 +1,21 @@
 import { type ProjectDefaultKey, type ProjectDefaults, type ProjectDefaultScope, type ResolvedProjectDefault } from './project-defaults.js';
 import { type CachedUserContext, type StoredUserContext } from './user-context-types.js';
 export declare const DEFAULT_WORK_PUSH_RETRY_TIMEOUT_SECONDS = 300;
+export type CredentialSyncAiReceipt = {
+    baseUrl: string;
+    integrationId: string;
+    organizationId?: number;
+    workspaceId: string;
+};
+export type CredentialSyncReceipt = {
+    ai?: CredentialSyncAiReceipt;
+    cicdBaseUrl: string;
+    cicdKeyFingerprint: string;
+    credentialId: string;
+    environmentId?: string;
+    orgId?: string;
+    schemaVersion: 2;
+};
 export type DefaultsStorePaths = {
     /** Home-directory config (`~/.config/agentia-cli/config.json`). */
     globalPath: string;
@@ -23,6 +38,9 @@ export declare function readDefaults(scope: ProjectDefaultScope): Promise<Projec
 export declare function readUserContext(): Promise<CachedUserContext | undefined>;
 export declare function writeUserContext(cached: CachedUserContext): Promise<CachedUserContext>;
 export declare function clearUserContext(): Promise<void>;
+export declare function readCredentialSyncReceipt(): Promise<CredentialSyncReceipt | undefined>;
+export declare function writeCredentialSyncReceipt(receipt: CredentialSyncReceipt): Promise<CredentialSyncReceipt>;
+export declare function clearCredentialSyncReceipt(): Promise<void>;
 export declare function readLastWorkItem(): Promise<string | undefined>;
 export declare function readLastWorkItemId(): Promise<string | undefined>;
 export declare function readLastWorkItemTitle(): Promise<string | undefined>;