@herodevs/cli 2.0.0-beta.15 → 2.0.0-beta.16

package/README.md

@@ -43,11 +43,11 @@ npm install -g @herodevs/cli@beta
 HeroDevs CLI is available as a binary installation, without requiring `npm`. To do that, you may either download and run the script manually, or use the following cURL or Wget command:
 
 ```sh
-curl -o- https://raw.githubusercontent.com/herodevs/cli/v2.0.0-beta.15/scripts/install.sh | bash
+curl -o- https://raw.githubusercontent.com/herodevs/cli/v2.0.0-beta.16/scripts/install.sh | bash
 ```
 
 ```sh
-wget -qO- https://raw.githubusercontent.com/herodevs/cli/v2.0.0-beta.15/scripts/install.sh | bash
+wget -qO- https://raw.githubusercontent.com/herodevs/cli/v2.0.0-beta.16/scripts/install.sh | bash
 ```
 
 ## Scanning Behavior
@@ -72,7 +72,7 @@ $ npm install -g @herodevs/cli@beta
 $ hd COMMAND
 running command...
 $ hd (--version)
-@herodevs/cli/2.0.0-beta.15 darwin-arm64 node-v24.10.0
+@herodevs/cli/2.0.0-beta.16 darwin-arm64 node-v24.10.0
 $ hd --help [COMMAND]
 USAGE
   $ hd COMMAND
@@ -104,7 +104,7 @@ DESCRIPTION
   OAuth CLI login
 ```
 
-_See code: [src/commands/auth/login.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.15/src/commands/auth/login.ts)_
+_See code: [src/commands/auth/login.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.16/src/commands/auth/login.ts)_
 
 ## `hd auth logout`
 
@@ -118,7 +118,7 @@ DESCRIPTION
   Logs out of HeroDevs OAuth and clears stored tokens
 ```
 
-_See code: [src/commands/auth/logout.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.15/src/commands/auth/logout.ts)_
+_See code: [src/commands/auth/logout.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.16/src/commands/auth/logout.ts)_
 
 ## `hd auth provision-ci-token`
 
@@ -132,7 +132,7 @@ DESCRIPTION
   Provision a CI/CD long-lived refresh token for headless auth
 ```
 
-_See code: [src/commands/auth/provision-ci-token.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.15/src/commands/auth/provision-ci-token.ts)_
+_See code: [src/commands/auth/provision-ci-token.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.16/src/commands/auth/provision-ci-token.ts)_
 
 ## `hd help [COMMAND]`
 
@@ -188,7 +188,7 @@ EXAMPLES
   $ hd report committers --csv
 ```
 
-_See code: [src/commands/report/committers.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.15/src/commands/report/committers.ts)_
+_See code: [src/commands/report/committers.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.16/src/commands/report/committers.ts)_
 
 ## `hd scan eol`
 
@@ -240,7 +240,7 @@ EXAMPLES
     $ hd scan eol --json
 ```
 
-_See code: [src/commands/scan/eol.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.15/src/commands/scan/eol.ts)_
+_See code: [src/commands/scan/eol.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.16/src/commands/scan/eol.ts)_
 
 ## `hd tracker init`
 
@@ -274,7 +274,7 @@ EXAMPLES
   $ hd tracker init -o
 ```
 
-_See code: [src/commands/tracker/init.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.15/src/commands/tracker/init.ts)_
+_See code: [src/commands/tracker/init.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.16/src/commands/tracker/init.ts)_
 
 ## `hd tracker run`
 
@@ -299,7 +299,7 @@ EXAMPLES
   $ hd tracker run -d tracker -f settings.json
 ```
 
-_See code: [src/commands/tracker/run.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.15/src/commands/tracker/run.ts)_
+_See code: [src/commands/tracker/run.ts](https://github.com/herodevs/cli/blob/v2.0.0-beta.16/src/commands/tracker/run.ts)_
 
 ## `hd update [CHANNEL]`
 

package/dist/api/ci-token.client.d.ts

@@ -7,6 +7,7 @@ export type IamAccessOrgTokensInput = {
 };
 export interface ProvisionCITokenResponse {
     refresh_token: string;
+    access_token: string;
 }
 export interface ProvisionCITokenOptions {
     orgId?: number;

package/dist/api/ci-token.client.js

@@ -91,5 +91,5 @@ export async function provisionCIToken(options = {}) {
         throw new Error('Either orgId or previousToken is required to provision a CI token');
     }
     const result = await getOrgAccessTokens(input);
-    return { refresh_token: result.refreshToken };
+    return { access_token: result.accessToken, refresh_token: result.refreshToken };
 }

package/dist/api/user-setup.client.d.ts

@@ -1,15 +1,18 @@
 export declare function getUserSetupStatus(options?: {
     preferOAuth?: boolean;
+    orgAccessToken?: string;
 }): Promise<{
     isComplete: boolean;
     orgId?: number | null;
 }>;
 export declare function completeUserSetup(options?: {
     preferOAuth?: boolean;
+    orgAccessToken?: string;
 }): Promise<{
     isComplete: boolean;
     orgId?: number | null;
 }>;
 export declare function ensureUserSetup(options?: {
     preferOAuth?: boolean;
+    orgAccessToken?: string;
 }): Promise<number>;

package/dist/api/user-setup.client.js

@@ -18,7 +18,7 @@ function extractErrorCode(errors) {
     return code;
 }
 export async function getUserSetupStatus(options) {
-    const tokenProvider = getTokenProvider(options?.preferOAuth);
+    const tokenProvider = getTokenProvider(options?.preferOAuth, options?.orgAccessToken);
     const client = createApollo(getGraphqlUrl(), tokenProvider);
     const res = await client.query({ query: userSetupStatusQuery });
     const errors = getGraphQLErrors(res);
@@ -46,7 +46,7 @@ export async function getUserSetupStatus(options) {
     return { isComplete: status.isComplete, orgId: status.orgId ?? undefined };
 }
 export async function completeUserSetup(options) {
-    const tokenProvider = getTokenProvider(options?.preferOAuth);
+    const tokenProvider = getTokenProvider(options?.preferOAuth, options?.orgAccessToken);
     const client = createApollo(getGraphqlUrl(), tokenProvider);
     const res = await client.mutate({ mutation: completeUserSetupMutation });
     const errors = getGraphQLErrors(res);

package/dist/commands/auth/provision-ci-token.js

@@ -41,6 +41,16 @@ export default class AuthProvisionCiToken extends Command {
         }
         try {
             const result = await provisionCIToken({ orgId });
+            try {
+                await ensureUserSetup({ orgAccessToken: result.access_token });
+            }
+            catch (error) {
+                track('CLI CI Token Provision Failed', () => ({
+                    command: 'auth provision-ci-token',
+                    error: `user_setup_failed:${getErrorMessage(error)}`,
+                }));
+                this.error(`User Org setup failed. ${getErrorMessage(error)}`);
+            }
             const refreshToken = result.refresh_token;
             saveCIToken(refreshToken);
             this.log('CI token provisioned and saved locally.');

package/dist/service/auth.svc.d.ts

@@ -11,7 +11,7 @@ export declare const AUTH_ERROR_MESSAGES: {
     readonly FORBIDDEN: "You do not have permission to perform this action.";
     readonly NOT_LOGGED_IN_GENERIC: "You are not logged in. Please run an \"auth login\" command to authenticate.";
 };
-export declare function getTokenForScanWithSource(preferOAuth?: boolean): Promise<{
+export declare function getTokenForScanWithSource(preferOAuth?: boolean, orgAccessToken?: string): Promise<{
     token: string;
     source: TokenSource;
 }>;
@@ -21,7 +21,7 @@ export declare class AuthError extends Error {
 }
 export declare function persistTokenResponse(token: TokenResponse): Promise<void>;
 export declare function getAccessToken(): Promise<string | undefined>;
-export declare function getTokenProvider(preferOAuth?: boolean): TokenProvider;
+export declare function getTokenProvider(preferOAuth?: boolean, orgAccessToken?: string): TokenProvider;
 export declare function requireAccessToken(): Promise<string>;
 export declare function logoutLocally(): Promise<void>;
 export declare const requireAccessTokenForScan: TokenProvider;

package/dist/service/auth.svc.js

@@ -11,7 +11,10 @@ export const AUTH_ERROR_MESSAGES = {
     FORBIDDEN: 'You do not have permission to perform this action.',
     NOT_LOGGED_IN_GENERIC: 'You are not logged in. Please run an "auth login" command to authenticate.',
 };
-export async function getTokenForScanWithSource(preferOAuth) {
+export async function getTokenForScanWithSource(preferOAuth, orgAccessToken) {
+    if (orgAccessToken) {
+        return { token: orgAccessToken, source: 'ci' };
+    }
     if (preferOAuth) {
         const token = await requireAccessToken();
         return { token, source: 'oauth' };
@@ -69,9 +72,9 @@ export async function getAccessToken() {
     await persistTokenResponse(refreshed);
     return refreshed.access_token;
 }
-export function getTokenProvider(preferOAuth) {
+export function getTokenProvider(preferOAuth, orgAccessToken) {
     return async (_forceRefresh) => {
-        const { token } = await getTokenForScanWithSource(preferOAuth);
+        const { token } = await getTokenForScanWithSource(preferOAuth, orgAccessToken);
         return token;
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@herodevs/cli",
-  "version": "2.0.0-beta.15",
+  "version": "2.0.0-beta.16",
   "author": "HeroDevs, Inc",
   "bin": {
     "hd": "./bin/run.js"