@kolatts/pncli 1.13.0 → 1.14.0

package/dist/cli.js

@@ -8,7 +8,7 @@ import {
   setRepoConfigValue,
   writeGlobalConfig,
   writeRepoConfig
-} from "./chunk-AWSXVWRN.js";
+} from "./chunk-CFUUOW7B.js";
 import {
   ExitCode,
   PncliError,
@@ -20,7 +20,7 @@ import {
   success,
   warn,
   writeRawOutput
-} from "./chunk-BNT4SEZD.js";
+} from "./chunk-BNMFIGXF.js";
 import {
   AdoCoreClient
 } from "./chunk-VDL32PSG.js";
@@ -798,7 +798,39 @@ import path from "path";
 
 // src/services/jira/client.ts
 import { readFileSync } from "fs";
-import { basename, extname } from "path";
+import { basename } from "path";
+
+// src/lib/mime.ts
+import { extname } from "path";
+function guessMimeType(filePath) {
+  const ext = extname(filePath).toLowerCase();
+  const map = {
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".png": "image/png",
+    ".gif": "image/gif",
+    ".svg": "image/svg+xml",
+    ".pdf": "application/pdf",
+    ".txt": "text/plain",
+    ".log": "text/plain",
+    ".csv": "text/csv",
+    ".json": "application/json",
+    ".xml": "application/xml",
+    ".zip": "application/zip",
+    ".tar": "application/x-tar",
+    ".gz": "application/gzip",
+    ".md": "text/markdown",
+    ".html": "text/html",
+    ".htm": "text/html",
+    ".doc": "application/msword",
+    ".docx": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+    ".xls": "application/vnd.ms-excel",
+    ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
+  };
+  return map[ext] ?? "application/octet-stream";
+}
+
+// src/services/jira/client.ts
 var API2 = "/rest/api/2";
 var JiraClient = class {
   constructor(http) {
@@ -996,33 +1028,6 @@ var JiraClient = class {
     });
   }
 };
-function guessMimeType(filePath) {
-  const ext = extname(filePath).toLowerCase();
-  const map = {
-    ".jpg": "image/jpeg",
-    ".jpeg": "image/jpeg",
-    ".png": "image/png",
-    ".gif": "image/gif",
-    ".svg": "image/svg+xml",
-    ".pdf": "application/pdf",
-    ".txt": "text/plain",
-    ".log": "text/plain",
-    ".csv": "text/csv",
-    ".json": "application/json",
-    ".xml": "application/xml",
-    ".zip": "application/zip",
-    ".tar": "application/x-tar",
-    ".gz": "application/gzip",
-    ".md": "text/markdown",
-    ".html": "text/html",
-    ".htm": "text/html",
-    ".doc": "application/msword",
-    ".docx": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-    ".xls": "application/vnd.ms-excel",
-    ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
-  };
-  return map[ext] ?? "application/octet-stream";
-}
 function schemaToPncliType(schema) {
   if (!schema) return void 0;
   const custom = schema.custom ?? "";
@@ -4331,6 +4336,8 @@ import password from "@inquirer/password";
 import confirm from "@inquirer/confirm";
 
 // src/services/ado/client/work.ts
+import { readFileSync as readFileSync3 } from "fs";
+import { basename as basename2 } from "path";
 var API6 = "7.1";
 var API_PREVIEW = "7.1-preview.4";
 var AdoWorkClient = class {
@@ -4434,6 +4441,26 @@ var AdoWorkClient = class {
   async downloadAttachment(absoluteUrl) {
     return this.http.adoBuffer(absoluteUrl);
   }
+  async uploadAttachment(collection, workItemId, filePath, comment) {
+    const fileContent = readFileSync3(filePath);
+    const fileName = basename2(filePath);
+    const mimeType = guessMimeType(filePath);
+    const attachment = await this.http.adoUpload(
+      `/${encodeURIComponent(collection)}/_apis/wit/attachments?fileName=${encodeURIComponent(fileName)}&api-version=${API6}`,
+      fileContent,
+      mimeType
+    );
+    const relationValue = {
+      rel: "AttachedFile",
+      url: attachment.url,
+      ...comment ? { attributes: { comment } } : {}
+    };
+    await this.http.ado(
+      `/${encodeURIComponent(collection)}/_apis/wit/workitems/${workItemId}?api-version=${API6}`,
+      { method: "PATCH", body: [{ op: "add", path: "/relations/-", value: relationValue }], headers: { "Content-Type": "application/json-patch+json" } }
+    );
+    return attachment;
+  }
 };
 
 // src/services/ado/discovery.ts
@@ -4687,6 +4714,16 @@ function registerConfigCommands(program2) {
       } else {
         results.sonatypeiq = { ok: null, message: "not configured" };
       }
+      if (cfg.openshift.baseUrl && cfg.openshift.token) {
+        try {
+          await http.openshift("/api/v1");
+          results.openshift = { ok: true, message: "connected" };
+        } catch (err) {
+          results.openshift = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.openshift = { ok: null, message: "not configured" };
+      }
       success(results, "config", "test", start);
     } catch (err) {
       fail(err, "config", "test", start);
@@ -4870,11 +4907,23 @@ function registerConfigCommands(program2) {
           results.sonatypeiq = categorize2(err);
         }
       }
+      if (!cfg.openshift.token) {
+        results.openshift = { status: "blank", message: "not configured" };
+      } else if (!cfg.openshift.baseUrl) {
+        results.openshift = { status: "error", message: "baseUrl not configured" };
+      } else {
+        try {
+          await http.openshift("/api/v1", { timeoutMs: 1e4 });
+          results.openshift = { status: "valid", message: "ok" };
+        } catch (err) {
+          results.openshift = categorize2(err);
+        }
+      }
       const statuses = Object.values(results).map((r) => r.status);
       if (statuses.includes("invalid")) process.exitCode = ExitCode.AUTH_ERROR;
       else if (statuses.includes("error")) process.exitCode = ExitCode.NETWORK_ERROR;
       if (cmdOpts.output === "table") {
-        const services = ["jira", "bitbucket", "confluence", "sonar", "sde", "ado", "jenkins", "udeploy", "artifactory", "checkmarx", "servicenow", "contrast", "sonatypeiq"];
+        const services = ["jira", "bitbucket", "confluence", "sonar", "sde", "ado", "jenkins", "udeploy", "artifactory", "checkmarx", "servicenow", "contrast", "sonatypeiq", "openshift"];
         const labelWidth = 14;
         const statusWidth = 9;
         for (const svc of services) {
@@ -4888,7 +4937,7 @@ function registerConfigCommands(program2) {
         process.stdout.write("\n");
       } else {
         if (opts.pretty) {
-          const services = ["jira", "bitbucket", "confluence", "sonar", "sde", "ado", "jenkins", "udeploy", "artifactory", "checkmarx", "servicenow", "contrast", "sonatypeiq"];
+          const services = ["jira", "bitbucket", "confluence", "sonar", "sde", "ado", "jenkins", "udeploy", "artifactory", "checkmarx", "servicenow", "contrast", "sonatypeiq", "openshift"];
           const labelWidth = 14;
           const statusWidth = 9;
           for (const svc of services) {
@@ -5376,6 +5425,41 @@ async function initGlobalConfig(start) {
       }
     }
   }
+  process.stderr.write("\n\u2500\u2500 OpenShift / Kubernetes \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const useOpenShift = await confirm({
+    message: "Configure OpenShift / Kubernetes for pod health monitoring?",
+    default: false
+  });
+  let openShiftBaseUrl = "";
+  let openShiftToken = "";
+  if (useOpenShift) {
+    process.stderr.write("  Service account token: cat /var/run/secrets/kubernetes.io/serviceaccount/token\n");
+    openShiftBaseUrl = await input({
+      message: "OpenShift API server URL (e.g. https://api.cluster.example.com:6443):",
+      default: ""
+    });
+    openShiftToken = await password({
+      message: "Service account token:"
+    });
+    if (openShiftBaseUrl && openShiftToken) {
+      process.stderr.write("\n  Verifying connection...\n");
+      try {
+        const tempConfig = {
+          ...loadConfig(),
+          openshift: {
+            baseUrl: normalizeBaseUrl(openShiftBaseUrl),
+            token: openShiftToken
+          }
+        };
+        const tempHttp = createHttpClient(tempConfig);
+        await tempHttp.openshift("/api/v1");
+        process.stderr.write("  Connected.\n");
+      } catch (err) {
+        warn(`Could not connect to OpenShift: ${err instanceof Error ? err.message : String(err)}`);
+        warn("Config will be saved anyway. Check your URL and token and re-run pncli config init or pncli config test.");
+      }
+    }
+  }
   process.stderr.write("\n\u2500\u2500 Defaults \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
   const jiraProject = await input({
     message: "Default Jira project key (optional):",
@@ -5493,6 +5577,12 @@ async function initGlobalConfig(start) {
         passcode: sonatypeIqPasscode || void 0
       }
     } : {},
+    ...useOpenShift && openShiftBaseUrl ? {
+      openshift: {
+        baseUrl: normalizeBaseUrl(openShiftBaseUrl),
+        token: openShiftToken || void 0
+      }
+    } : {},
     defaults: {
       jira: {
         project: jiraProject || void 0
@@ -6117,6 +6207,16 @@ function registerAdoWorkCommands(ado) {
       fail(err, "ado", "work-list-attachments", start);
     }
   });
+  work.command("add-attachment").description("Upload a local file and attach it to a work item").requiredOption("--id <n>", "Work item ID").requiredOption("--file <path>", "Path to the file to upload").option("--comment <text>", "Optional comment for the attachment").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, workClient } = getAdoContext(ado);
+      const data = await workClient.uploadAttachment(collection, parseInt(opts.id, 10), opts.file, opts.comment);
+      success(data, "ado", "work-add-attachment", start);
+    } catch (err) {
+      fail(err, "ado", "work-add-attachment", start);
+    }
+  });
   work.command("download-attachment").description("Download a work item attachment to .pncli/ (or --dir)").requiredOption("--id <n>", "Work item ID").requiredOption("--attachment-id <guid>", "Attachment ID from work list-attachments output").option("--dir <path>", "Output directory (default: .pncli relative to cwd)").action(async (opts) => {
     const start = Date.now();
     try {
@@ -6455,11 +6555,11 @@ function registerAdoRepoCommands(ado) {
       const start = Date.now();
       try {
         const globalOpts = ado.optsWithGlobals();
-        const { loadConfig: lc } = await import("./config-OFLPO5DN.js");
+        const { loadConfig: lc } = await import("./config-TL5X47RY.js");
         const config = lc({ configPath: globalOpts.config });
         const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
         const { AdoCoreClient: AdoCoreClient2 } = await import("./core-SWYVXOQ4.js");
-        const { createHttpClient: createHttpClient2 } = await import("./http-BNCZJQTD.js");
+        const { createHttpClient: createHttpClient2 } = await import("./http-UN6N4WIB.js");
         const http = createHttpClient2(config, Boolean(globalOpts.dryRun));
         const coreClient = new AdoCoreClient2(http);
         const me = await coreClient.getConnectionData(collection);
@@ -7967,6 +8067,262 @@ function copyPluginSkills(skillsSrc, targetDir) {
   return { installed, failed };
 }
 
+// src/services/jwt/commands.ts
+function base64urlDecode(input2) {
+  const base64 = input2.replace(/-/g, "+").replace(/_/g, "/");
+  const padded = base64 + "=".repeat((4 - base64.length % 4) % 4);
+  return Buffer.from(padded, "base64").toString("utf8");
+}
+function decodeJwt(token) {
+  const parts = token.split(".");
+  if (parts.length !== 3) {
+    throw new PncliError("Invalid JWT: expected 3 dot-separated parts", 1);
+  }
+  const [rawHeader, rawPayload, signature] = parts;
+  let header;
+  let payload;
+  try {
+    header = JSON.parse(base64urlDecode(rawHeader));
+  } catch {
+    throw new PncliError("Invalid JWT: header is not valid JSON", 1);
+  }
+  try {
+    payload = JSON.parse(base64urlDecode(rawPayload));
+  } catch {
+    throw new PncliError("Invalid JWT: payload is not valid JSON", 1);
+  }
+  return { header, payload, signature };
+}
+function registerJwtCommands(program2) {
+  const jwt = program2.command("jwt").description("JWT token utilities");
+  jwt.command("decode <token>").description("Decode a JWT token and output header, payload, and signature as JSON").action((token) => {
+    const start = Date.now();
+    try {
+      const data = decodeJwt(token);
+      success(data, "jwt", "decode", start);
+    } catch (err) {
+      fail(err, "jwt", "decode", start);
+    }
+  });
+}
+
+// src/services/openshift/commands.ts
+function containerState(s) {
+  if (!s) return "unknown";
+  if (s.waiting) return s.waiting.reason ?? "Waiting";
+  if (s.terminated) return s.terminated.reason ?? "Terminated";
+  if (s.running) return "Running";
+  return "unknown";
+}
+function getHttp2(program2) {
+  const opts = program2.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  if (!config.openshift.baseUrl) {
+    throw new PncliError("OpenShift not configured. Run: pncli config init");
+  }
+  return createHttpClient(config, Boolean(opts.dryRun));
+}
+function podAge(creationTimestamp) {
+  if (!creationTimestamp) return "unknown";
+  const ageMs = Date.now() - new Date(creationTimestamp).getTime();
+  const ageSeconds = Math.floor(ageMs / 1e3);
+  if (ageSeconds < 60) return `${ageSeconds}s`;
+  const ageMinutes = Math.floor(ageSeconds / 60);
+  if (ageMinutes < 60) return `${ageMinutes}m`;
+  const ageHours = Math.floor(ageMinutes / 60);
+  if (ageHours < 24) return `${ageHours}h`;
+  return `${Math.floor(ageHours / 24)}d`;
+}
+function registerOpenShiftCommands(program2) {
+  const oc = program2.command("openshift").description("OpenShift / Kubernetes operations");
+  oc.command("pods").description("List pod health summary for a namespace \u2014 pre-processed for LLM analysis").requiredOption("--namespace <ns>", "Kubernetes namespace").option("--label-selector <selector>", "Label selector (e.g. app=my-app)").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp2(program2);
+      const params = {};
+      if (opts.labelSelector) params["labelSelector"] = opts.labelSelector;
+      const podList = await http.openshift(
+        `/api/v1/namespaces/${encodeURIComponent(opts.namespace)}/pods`,
+        { params }
+      );
+      const summaryCounters = {
+        total: podList.items.length,
+        running: 0,
+        pending: 0,
+        failed: 0,
+        succeeded: 0,
+        unknown: 0,
+        crashLoopBackOff: 0,
+        oomKilled: 0,
+        imagePullBackOff: 0,
+        totalRestarts: 0
+      };
+      const pods = podList.items.map((pod) => {
+        const phase = pod.status.phase ?? "Unknown";
+        switch (phase.toLowerCase()) {
+          case "running":
+            summaryCounters.running++;
+            break;
+          case "pending":
+            summaryCounters.pending++;
+            break;
+          case "failed":
+            summaryCounters.failed++;
+            break;
+          case "succeeded":
+            summaryCounters.succeeded++;
+            break;
+          default:
+            summaryCounters.unknown++;
+            break;
+        }
+        const allStatuses = [
+          ...pod.status.containerStatuses ?? [],
+          ...pod.status.initContainerStatuses ?? []
+        ];
+        let podRestarts = 0;
+        const containers = allStatuses.map((cs) => {
+          podRestarts += cs.restartCount;
+          summaryCounters.totalRestarts += cs.restartCount;
+          const currentState = containerState(cs.state);
+          const lastState = containerState(cs.lastState);
+          if (currentState === "CrashLoopBackOff") summaryCounters.crashLoopBackOff++;
+          if (currentState === "ImagePullBackOff" || currentState === "ErrImagePull") summaryCounters.imagePullBackOff++;
+          if (lastState === "OOMKilled" || cs.lastState?.terminated?.reason === "OOMKilled") summaryCounters.oomKilled++;
+          const entry2 = {
+            name: cs.name,
+            ready: cs.ready,
+            restartCount: cs.restartCount,
+            state: currentState
+          };
+          if (cs.lastState?.terminated) {
+            entry2["lastExitCode"] = cs.lastState.terminated.exitCode;
+            entry2["lastReason"] = cs.lastState.terminated.reason;
+          }
+          return entry2;
+        });
+        const readyCount = allStatuses.filter((cs) => cs.ready).length;
+        const totalCount = pod.spec.containers?.length ?? allStatuses.length;
+        const entry = {
+          name: pod.metadata.name,
+          phase,
+          ready: `${readyCount}/${totalCount}`,
+          restartCount: podRestarts,
+          age: podAge(pod.metadata.creationTimestamp)
+        };
+        const podReason = pod.status.reason ?? pod.status.conditions?.find((c) => c.status === "False")?.reason;
+        if (podReason) entry["reason"] = podReason;
+        if (pod.status.message) entry["message"] = pod.status.message;
+        if (containers.length > 0) entry["containers"] = containers;
+        if (pod.metadata.labels && Object.keys(pod.metadata.labels).length > 0) {
+          entry["labels"] = pod.metadata.labels;
+        }
+        return entry;
+      });
+      pods.sort((a, b) => {
+        const phasePriority = (p) => {
+          if (p === "Failed") return 0;
+          if (p === "Pending") return 1;
+          if (p === "Unknown") return 2;
+          return 3;
+        };
+        const pDiff = phasePriority(a["phase"]) - phasePriority(b["phase"]);
+        if (pDiff !== 0) return pDiff;
+        return (b["restartCount"] ?? 0) - (a["restartCount"] ?? 0);
+      });
+      success({ namespace: opts.namespace, summary: summaryCounters, pods }, "openshift", "pods", start);
+    } catch (err) {
+      fail(err, "openshift", "pods", start);
+    }
+  });
+  oc.command("events").description("List Warning events for a namespace \u2014 pre-filtered for LLM analysis").requiredOption("--namespace <ns>", "Kubernetes namespace").option("--field-selector <selector>", "Additional field selector (e.g. involvedObject.name=my-pod)").option("--all", "Include Normal events in addition to Warning events", false).action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp2(program2);
+      const params = {};
+      const selectors = [];
+      if (!opts.all) selectors.push("type=Warning");
+      if (opts.fieldSelector) selectors.push(opts.fieldSelector);
+      if (selectors.length > 0) params["fieldSelector"] = selectors.join(",");
+      const eventList = await http.openshift(
+        `/api/v1/namespaces/${encodeURIComponent(opts.namespace)}/events`,
+        { params }
+      );
+      const events = eventList.items.map((ev) => {
+        const obj = ev.involvedObject ?? ev.regarding;
+        const entry = {
+          type: ev.type ?? "Normal",
+          reason: ev.reason,
+          object: obj ? `${obj.kind ?? "Object"}/${obj.name ?? "?"}` : void 0,
+          message: ev.message,
+          count: ev.count ?? 1,
+          firstTime: ev.firstTimestamp ?? ev.eventTime,
+          lastTime: ev.lastTimestamp ?? ev.eventTime
+        };
+        const source = ev.source?.component ?? ev.reportingComponent;
+        if (source) entry["source"] = source;
+        return entry;
+      });
+      events.sort((a, b) => (b["count"] ?? 0) - (a["count"] ?? 0));
+      success({ namespace: opts.namespace, count: events.length, events }, "openshift", "events", start);
+    } catch (err) {
+      fail(err, "openshift", "events", start);
+    }
+  });
+  oc.command("logs").description("Get recent log lines from a pod container").requiredOption("--namespace <ns>", "Kubernetes namespace").requiredOption("--pod <name>", "Pod name").option("--container <name>", "Container name (defaults to first container)").option("--lines <n>", "Number of most-recent lines to return", "100").option("--previous", "Return logs from the previous container instance", false).action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp2(program2);
+      const lines = opts.lines ? parseInt(opts.lines, 10) : 100;
+      const logText = await http.openshiftText(
+        `/api/v1/namespaces/${encodeURIComponent(opts.namespace)}/pods/${encodeURIComponent(opts.pod)}/log`,
+        {
+          lines,
+          params: {
+            ...opts.container ? { container: opts.container } : {},
+            ...opts.previous ? { previous: "true" } : {}
+          }
+        }
+      );
+      success(
+        {
+          pod: opts.pod,
+          namespace: opts.namespace,
+          container: opts.container ?? "(default)",
+          previous: opts.previous ?? false,
+          lines,
+          log: logText
+        },
+        "openshift",
+        "logs",
+        start
+      );
+    } catch (err) {
+      fail(err, "openshift", "logs", start);
+    }
+  });
+  oc.command("pod-metrics").description("Get CPU and memory usage for pods in a namespace (requires metrics-server)").requiredOption("--namespace <ns>", "Kubernetes namespace").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp2(program2);
+      const metricsList = await http.openshift(
+        `/apis/metrics.k8s.io/v1beta1/namespaces/${encodeURIComponent(opts.namespace)}/pods`
+      );
+      const pods = metricsList.items.map((pm) => ({
+        name: pm.metadata.name,
+        containers: pm.containers.map((c) => ({
+          name: c.name,
+          cpu: c.usage.cpu,
+          memory: c.usage.memory
+        }))
+      }));
+      success({ namespace: opts.namespace, pods }, "openshift", "pod-metrics", start);
+    } catch (err) {
+      fail(err, "openshift", "pod-metrics", start);
+    }
+  });
+}
+
 // src/cli.ts
 if (!process.env.PNCLI_VERIFY_TLS) {
   process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
@@ -8006,6 +8362,8 @@ registerServiceNowCommands(program);
 registerContrastCommands(program);
 registerSonatypeIqCommands(program);
 registerSkillsCommands(program);
+registerJwtCommands(program);
+registerOpenShiftCommands(program);
 program.addHelpText("after", `
 Services:
   git          Local git operations (status, diff, log, branch)
@@ -8023,8 +8381,10 @@ Services:
   servicenow   ServiceNow (change requests)
   contrast     Contrast IAST (applications, vulnerability findings)
   sonatypeiq   Sonatype IQ Server (applications, organizations, policies)
+  openshift    OpenShift / Kubernetes (pods, events, logs, metrics)
   config       Manage pncli configuration
   skills       Download and manage Claude Code skills
+  jwt          JWT token utilities (decode header and payload)
 `);
 program.parseAsync(process.argv).catch((err) => {
   if (process.exitCode !== void 0) return;