@kolatts/pncli 1.17.0 → 1.19.0

package/README.md

@@ -68,9 +68,11 @@ pncli uses a three-layer config system (highest priority wins):
 | `PNCLI_UDEPLOY_PAT` | IBM UrbanCode Deploy personal access token |
 | `PNCLI_UDEPLOY_USERNAME` | IBM UrbanCode Deploy username (alternative to PAT) |
 | `PNCLI_UDEPLOY_PASSWORD` | IBM UrbanCode Deploy password (used with `PNCLI_UDEPLOY_USERNAME`) |
-| `PNCLI_CHECKMARX_BASE_URL` | Checkmarx CxSAST base URL |
-| `PNCLI_CHECKMARX_USERNAME` | Checkmarx username |
-| `PNCLI_CHECKMARX_PASSWORD` | Checkmarx password |
+| `PNCLI_CHECKMARX_BASE_URL` | Checkmarx One API base URL |
+| `PNCLI_CHECKMARX_TENANT_NAME` | Checkmarx One tenant name |
+| `PNCLI_CHECKMARX_API_KEY` | Checkmarx One API key |
+| `PNCLI_CHECKMARX_CLIENT_ID` | Checkmarx One OAuth client ID (API key alternative) |
+| `PNCLI_CHECKMARX_CLIENT_SECRET` | Checkmarx One OAuth client secret (API key alternative) |
 | `PNCLI_CONFIG_PATH` | Override global config file path |
 
 ## For AI Agents

package/copilot-instructions.md

@@ -143,7 +143,8 @@ pncli jira get-issue
 pncli jira create-issue
   --project <key>         Project key
   --type <type>           Issue type (Bug, Story, Task, ...)
-  --summary <text>        Issue summary
+  --summary <text>        Issue summary (required, unless supplied via
+  --input-file)
   --description <text>    Issue description
   --priority <name>       Priority name
   --assignee <accountId>  Assignee account ID
@@ -154,6 +155,9 @@ pncli jira create-issue
   from file (repeatable) (default: [])
   --fields-file <path>    Path to a JSON file mapping field names/IDs to their
   Jira API values
+  --input-file <path>     JSON file describing the whole issue ({ project,
+  issueType, fields: {...} }); '-' = stdin. CLI flags
+  override matching keys. See: pncli jira schema
 
 pncli jira update-issue
   --key <issue-key>       Issue key
@@ -166,6 +170,13 @@ pncli jira update-issue
   from file (repeatable) (default: [])
   --fields-file <path>    Path to a JSON file mapping field names/IDs to their
   Jira API values
+  --input-file <path>     JSON file describing fields to update ({ fields: {...}
+  }); '-' = stdin. CLI flags override matching keys.
+  See: pncli jira schema
+
+pncli jira schema
+  --example-only  Print only the runnable example JSON (no envelope) — pipeable
+  straight into --input-file
 
 pncli jira transition-issue
   --key <issue-key>          Issue key
@@ -453,7 +464,12 @@ pncli confluence search
 pncli confluence create-page
   --space <key>              Space key
   --title <title>            Page title
-  --body <html>              Page body (storage format HTML)
+  --body <html>              Page body (storage format HTML or Markdown when
+  --markdown is set)
+  --body-file <path>         Path to a file containing the page body ('-' =
+  stdin)
+  --markdown                 Convert body from Markdown to storage format via
+  Confluence API
   --parent-id <id>           Parent page ID (to nest under a page)
   --representation <format>  Body format: storage (default) or wiki (default:
   "storage")
@@ -461,7 +477,12 @@ pncli confluence create-page
 pncli confluence update-page
   --id <page-id>             Page ID
   --title <title>            New page title
-  --body <html>              New page body (storage format HTML)
+  --body <html>              New page body (storage format HTML or Markdown when
+  --markdown is set)
+  --body-file <path>         Path to a file containing the new page body ('-' =
+  stdin)
+  --markdown                 Convert body from Markdown to storage format via
+  Confluence API
   --status <status>          Page status: current (default) or draft (default:
   "current")
   --representation <format>  Body format: storage (default) or wiki (default:
@@ -705,18 +726,26 @@ pncli ado work get
   --id <n>    Work item ID
 
 pncli ado work create
-  --type <type>         Work item type (e.g. Bug, Task, User Story)
-  --title <title>       Work item title
+  --type <type>         Work item type (e.g. Bug, Task, User Story) (required,
+  unless supplied via --input-file)
+  --title <title>       Work item title (required, unless supplied via
+  --input-file)
   --description <text>  Description
   --assignee <user>     Assigned to (display name or email)
   --priority <n>        Priority (1-4)
   --parent <id>         Parent work item ID — creates a parent link after
   creation
   --field <name=value>  Additional field (repeatable) (default: [])
+  --input-file <path>   JSON file describing the work item ({ type, fields:
+  {...} }); '-' = stdin. CLI flags override matching keys.
+  See: pncli ado work schema
 
 pncli ado work update
   --id <n>              Work item ID
   --field <name=value>  Field to update (repeatable) (default: [])
+  --input-file <path>   JSON file describing fields to update ({ fields: {...}
+  }); '-' = stdin. CLI flags override matching keys. See:
+  pncli ado work schema
 
 pncli ado work transition
   --id <n>         Work item ID
@@ -763,6 +792,12 @@ pncli ado work download-attachment
   --attachment-id <guid>  Attachment ID from work list-attachments output
   --dir <path>            Output directory (default: .pncli relative to cwd)
 
+pncli ado work list-areas
+  --depth <n>  Depth of the area tree to retrieve (default: "10")
+
+pncli ado work list-iterations
+  --depth <n>  Depth of the iteration tree to retrieve (default: "10")
+
 pncli ado work types
   --discover  Fetch from server (always true for this command)
   --save      Save discovered types to ~/.pncli/config.json
@@ -776,6 +811,10 @@ pncli ado work fields
   --discover     Fetch from server (always true for this command)
   --save         Save discovered fields and aliases to ~/.pncli/config.json
 
+pncli ado work schema
+  --example-only  Print only the runnable example JSON (no envelope) — pipeable
+  straight into --input-file
+
 pncli ado repo list
 
 pncli ado repo get

package/dist/{chunk-FFVQ4PA7.js → chunk-FXY262BR.js}

@@ -34,8 +34,10 @@ var ENV_KEYS = {
   UDEPLOY_USERNAME: "PNCLI_UDEPLOY_USERNAME",
   UDEPLOY_PASSWORD: "PNCLI_UDEPLOY_PASSWORD",
   CHECKMARX_BASE_URL: "PNCLI_CHECKMARX_BASE_URL",
-  CHECKMARX_USERNAME: "PNCLI_CHECKMARX_USERNAME",
-  CHECKMARX_PASSWORD: "PNCLI_CHECKMARX_PASSWORD",
+  CHECKMARX_TENANT_NAME: "PNCLI_CHECKMARX_TENANT_NAME",
+  CHECKMARX_API_KEY: "PNCLI_CHECKMARX_API_KEY",
+  CHECKMARX_CLIENT_ID: "PNCLI_CHECKMARX_CLIENT_ID",
+  CHECKMARX_CLIENT_SECRET: "PNCLI_CHECKMARX_CLIENT_SECRET",
   SERVICENOW_BASE_URL: "PNCLI_SERVICENOW_BASE_URL",
   SERVICENOW_USERNAME: "PNCLI_SERVICENOW_USERNAME",
   SERVICENOW_PASSWORD: "PNCLI_SERVICENOW_PASSWORD",
@@ -50,6 +52,10 @@ var ENV_KEYS = {
   SONATYPEIQ_PASSCODE: "PNCLI_SONATYPEIQ_PASSCODE",
   OPENSHIFT_BASE_URL: "PNCLI_OPENSHIFT_BASE_URL",
   OPENSHIFT_TOKEN: "PNCLI_OPENSHIFT_TOKEN",
+  DYNATRACE_BASE_URL: "PNCLI_DYNATRACE_BASE_URL",
+  DYNATRACE_API_TOKEN: "PNCLI_DYNATRACE_API_TOKEN",
+  DYNATRACE_PLATFORM_URL: "PNCLI_DYNATRACE_PLATFORM_URL",
+  DYNATRACE_PLATFORM_TOKEN: "PNCLI_DYNATRACE_PLATFORM_TOKEN",
   CONFIG_PATH: "PNCLI_CONFIG_PATH"
 };
 function getGlobalConfigPath(overridePath) {
@@ -167,8 +173,10 @@ function loadConfig(opts = {}) {
     },
     checkmarx: {
       baseUrl: process.env[ENV_KEYS.CHECKMARX_BASE_URL] ?? globalConfig.checkmarx?.baseUrl,
-      username: process.env[ENV_KEYS.CHECKMARX_USERNAME] ?? globalConfig.checkmarx?.username,
-      password: process.env[ENV_KEYS.CHECKMARX_PASSWORD] ?? globalConfig.checkmarx?.password
+      tenantName: process.env[ENV_KEYS.CHECKMARX_TENANT_NAME] ?? globalConfig.checkmarx?.tenantName,
+      apiKey: process.env[ENV_KEYS.CHECKMARX_API_KEY] ?? globalConfig.checkmarx?.apiKey,
+      clientId: process.env[ENV_KEYS.CHECKMARX_CLIENT_ID] ?? globalConfig.checkmarx?.clientId,
+      clientSecret: process.env[ENV_KEYS.CHECKMARX_CLIENT_SECRET] ?? globalConfig.checkmarx?.clientSecret
     },
     servicenow: {
       baseUrl: process.env[ENV_KEYS.SERVICENOW_BASE_URL] ?? globalConfig.servicenow?.baseUrl,
@@ -192,6 +200,12 @@ function loadConfig(opts = {}) {
       baseUrl: process.env[ENV_KEYS.OPENSHIFT_BASE_URL] ?? globalConfig.openshift?.baseUrl,
       token: process.env[ENV_KEYS.OPENSHIFT_TOKEN] ?? globalConfig.openshift?.token
     },
+    dynatrace: {
+      baseUrl: process.env[ENV_KEYS.DYNATRACE_BASE_URL] ?? globalConfig.dynatrace?.baseUrl,
+      apiToken: process.env[ENV_KEYS.DYNATRACE_API_TOKEN] ?? globalConfig.dynatrace?.apiToken,
+      platformUrl: process.env[ENV_KEYS.DYNATRACE_PLATFORM_URL] ?? globalConfig.dynatrace?.platformUrl,
+      platformToken: process.env[ENV_KEYS.DYNATRACE_PLATFORM_TOKEN] ?? globalConfig.dynatrace?.platformToken
+    },
     defaults: mergedDefaults
   };
 }
@@ -208,6 +222,16 @@ function writeRepoConfig(config) {
   const targetDir = repoRoot ?? process.cwd();
   fs.writeFileSync(path.join(targetDir, ".pncli.json"), JSON.stringify(config, null, 2) + "\n", "utf8");
 }
+function parseConfigValue(value) {
+  try {
+    const parsed = JSON.parse(value);
+    if (typeof parsed === "object" && parsed !== null) {
+      return parsed;
+    }
+  } catch {
+  }
+  return value;
+}
 function setConfigValue(key, value, configPath) {
   const filePath = getGlobalConfigPath(configPath);
   const existing = loadJsonFile(filePath) ?? {};
@@ -220,7 +244,7 @@ function setConfigValue(key, value, configPath) {
     }
     current = current[part];
   }
-  current[parts[parts.length - 1]] = value;
+  current[parts[parts.length - 1]] = parseConfigValue(value);
   writeGlobalConfig(existing, configPath);
 }
 function setRepoConfigValue(key, value) {
@@ -237,7 +261,7 @@ function setRepoConfigValue(key, value) {
     }
     current = current[part];
   }
-  current[parts[parts.length - 1]] = value;
+  current[parts[parts.length - 1]] = parseConfigValue(value);
   writeRepoConfig(existing);
 }
 function maskConfig(config) {
@@ -287,7 +311,8 @@ function maskConfig(config) {
     },
     checkmarx: {
       ...config.checkmarx,
-      password: config.checkmarx.password ? "***" : void 0
+      apiKey: config.checkmarx.apiKey ? "***" : void 0,
+      clientSecret: config.checkmarx.clientSecret ? "***" : void 0
     },
     servicenow: {
       ...config.servicenow,
@@ -306,6 +331,11 @@ function maskConfig(config) {
     openshift: {
       ...config.openshift,
       token: config.openshift.token ? "***" : void 0
+    },
+    dynatrace: {
+      ...config.dynatrace,
+      apiToken: config.dynatrace.apiToken ? "***" : void 0,
+      platformToken: config.dynatrace.platformToken ? "***" : void 0
     }
   };
 }
@@ -320,4 +350,4 @@ export {
   setRepoConfigValue,
   maskConfig
 };
-//# sourceMappingURL=chunk-FFVQ4PA7.js.map
+//# sourceMappingURL=chunk-FXY262BR.js.map

package/dist/chunk-FXY262BR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/config.ts"],"sourcesContent":["import fs from 'fs';\nimport os from 'os';\nimport path from 'path';\nimport { execSync } from 'child_process';\nimport type { GlobalConfig, RepoConfig, ResolvedConfig, JiraDefaults, BitbucketDefaults, GitHubDefaults, SonarDefaults, SdeDefaults, AdoDefaults, UdeployDefaults, JenkinsDefaults } from '../types/config.js';\nimport type { CustomFieldDefinition } from '../types/jira.js';\n\nconst ENV_KEYS = {\n  EMAIL: 'PNCLI_EMAIL',\n  USERID: 'PNCLI_USERID',\n  JIRA_BASE_URL: 'PNCLI_JIRA_BASE_URL',\n  JIRA_API_TOKEN: 'PNCLI_JIRA_API_TOKEN',\n  BITBUCKET_BASE_URL: 'PNCLI_BITBUCKET_BASE_URL',\n  BITBUCKET_PAT: 'PNCLI_BITBUCKET_PAT',\n  GITHUB_BASE_URL: 'PNCLI_GITHUB_BASE_URL',\n  GITHUB_TOKEN: 'PNCLI_GITHUB_TOKEN',\n  CONFLUENCE_BASE_URL: 'PNCLI_CONFLUENCE_BASE_URL',\n  CONFLUENCE_API_TOKEN: 'PNCLI_CONFLUENCE_API_TOKEN',\n  ARTIFACTORY_BASE_URL: 'PNCLI_ARTIFACTORY_BASE_URL',\n  ARTIFACTORY_TOKEN: 'PNCLI_ARTIFACTORY_TOKEN',\n  ARTIFACTORY_REPO_NPM: 'PNCLI_ARTIFACTORY_REPO_NPM',\n  ARTIFACTORY_REPO_NUGET: 'PNCLI_ARTIFACTORY_REPO_NUGET',\n  ARTIFACTORY_REPO_MAVEN: 'PNCLI_ARTIFACTORY_REPO_MAVEN',\n  SONAR_BASE_URL: 'PNCLI_SONAR_BASE_URL',\n  SONAR_TOKEN: 'PNCLI_SONAR_TOKEN',\n  SDE_CONNECTION: 'PNCLI_SDE_CONNECTION',\n  ADO_BASE_URL: 'PNCLI_ADO_BASE_URL',\n  ADO_PAT: 'PNCLI_ADO_PAT',\n  JENKINS_BASE_URL: 'PNCLI_JENKINS_BASE_URL',\n  JENKINS_USERNAME: 'PNCLI_JENKINS_USERNAME',\n  JENKINS_API_TOKEN: 'PNCLI_JENKINS_API_TOKEN',\n  UDEPLOY_BASE_URL: 'PNCLI_UDEPLOY_BASE_URL',\n  UDEPLOY_PAT: 'PNCLI_UDEPLOY_PAT',\n  UDEPLOY_USERNAME: 'PNCLI_UDEPLOY_USERNAME',\n  UDEPLOY_PASSWORD: 'PNCLI_UDEPLOY_PASSWORD',\n  CHECKMARX_BASE_URL: 'PNCLI_CHECKMARX_BASE_URL',\n  CHECKMARX_TENANT_NAME: 'PNCLI_CHECKMARX_TENANT_NAME',\n  CHECKMARX_API_KEY: 'PNCLI_CHECKMARX_API_KEY',\n  CHECKMARX_CLIENT_ID: 'PNCLI_CHECKMARX_CLIENT_ID',\n  CHECKMARX_CLIENT_SECRET: 'PNCLI_CHECKMARX_CLIENT_SECRET',\n  SERVICENOW_BASE_URL: 'PNCLI_SERVICENOW_BASE_URL',\n  SERVICENOW_USERNAME: 'PNCLI_SERVICENOW_USERNAME',\n  SERVICENOW_PASSWORD: 'PNCLI_SERVICENOW_PASSWORD',\n  SERVICENOW_API_TOKEN: 'PNCLI_SERVICENOW_API_TOKEN',\n  CONTRAST_BASE_URL: 'PNCLI_CONTRAST_BASE_URL',\n  CONTRAST_ORG_UUID: 'PNCLI_CONTRAST_ORG_UUID',\n  CONTRAST_API_KEY: 'PNCLI_CONTRAST_API_KEY',\n  CONTRAST_SERVICE_KEY: 'PNCLI_CONTRAST_SERVICE_KEY',\n  CONTRAST_USERNAME: 'PNCLI_CONTRAST_USERNAME',\n  SONATYPEIQ_BASE_URL: 'PNCLI_SONATYPEIQ_BASE_URL',\n  SONATYPEIQ_USER_CODE: 'PNCLI_SONATYPEIQ_USER_CODE',\n  SONATYPEIQ_PASSCODE: 'PNCLI_SONATYPEIQ_PASSCODE',\n  OPENSHIFT_BASE_URL: 'PNCLI_OPENSHIFT_BASE_URL',\n  OPENSHIFT_TOKEN: 'PNCLI_OPENSHIFT_TOKEN',\n  DYNATRACE_BASE_URL: 'PNCLI_DYNATRACE_BASE_URL',\n  DYNATRACE_API_TOKEN: 'PNCLI_DYNATRACE_API_TOKEN',\n  DYNATRACE_PLATFORM_URL: 'PNCLI_DYNATRACE_PLATFORM_URL',\n  DYNATRACE_PLATFORM_TOKEN: 'PNCLI_DYNATRACE_PLATFORM_TOKEN',\n  CONFIG_PATH: 'PNCLI_CONFIG_PATH'\n} as const;\n\nfunction getGlobalConfigPath(overridePath?: string): string {\n  if (overridePath) return overridePath;\n  const envPath = process.env[ENV_KEYS.CONFIG_PATH];\n  if (envPath) return envPath;\n  return path.join(os.homedir(), '.pncli', 'config.json');\n}\n\nfunction loadJsonFile<T>(filePath: string): T | null {\n  try {\n    const content = fs.readFileSync(filePath, 'utf8');\n    return JSON.parse(content) as T;\n  } catch {\n    return null;\n  }\n}\n\nfunction getRepoRoot(): string | null {\n  try {\n    return execSync('git rev-parse --show-toplevel', { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();\n  } catch {\n    return null;\n  }\n}\n\nfunction parseSdeConnection(connection: string): { token: string; baseUrl: string } | null {\n  const idx = connection.indexOf('@');\n  if (idx <= 0) return null;\n  const token = connection.slice(0, idx);\n  const host = connection.slice(idx + 1);\n  const baseUrl = /^https?:\\/\\//i.test(host) ? host : `https://${host}`;\n  return { token, baseUrl };\n}\n\nfunction mergeCustomFields(\n  global: CustomFieldDefinition[] | undefined,\n  repo: CustomFieldDefinition[] | undefined\n): CustomFieldDefinition[] {\n  const map = new Map<string, CustomFieldDefinition>();\n  for (const f of global ?? []) map.set(f.id, f);\n  for (const f of repo ?? []) map.set(f.id, f); // repo wins\n  return Array.from(map.values());\n}\n\nfunction mergeDefaults(\n  global: GlobalConfig['defaults'],\n  repo: RepoConfig['defaults']\n): { jira: JiraDefaults; bitbucket: BitbucketDefaults; github: GitHubDefaults; sonar: SonarDefaults; sde: SdeDefaults; ado: AdoDefaults; udeploy: UdeployDefaults; jenkins: JenkinsDefaults } {\n  return {\n    jira: { ...global?.jira, ...repo?.jira },\n    bitbucket: { ...global?.bitbucket, ...repo?.bitbucket },\n    github: { ...global?.github, ...repo?.github },\n    sonar: { ...global?.sonar, ...repo?.sonar },\n    sde: { ...global?.sde, ...repo?.sde },\n    ado: { ...global?.ado, ...repo?.ado },\n    udeploy: { ...global?.udeploy, ...repo?.udeploy },\n    jenkins: { ...global?.jenkins, ...repo?.jenkins }\n  };\n}\n\nexport interface LoadConfigOptions {\n  configPath?: string;\n}\n\nexport function loadConfig(opts: LoadConfigOptions = {}): ResolvedConfig {\n  const globalConfigPath = getGlobalConfigPath(opts.configPath);\n  const globalConfig = loadJsonFile<GlobalConfig>(globalConfigPath) ?? {};\n\n  const repoRoot = getRepoRoot();\n  let repoConfig: RepoConfig = {};\n  if (repoRoot) {\n    repoConfig = loadJsonFile<RepoConfig>(path.join(repoRoot, '.pncli.json')) ?? {};\n  }\n\n  const mergedDefaults = mergeDefaults(globalConfig.defaults, repoConfig.defaults);\n\n  return {\n    user: {\n      email: process.env[ENV_KEYS.EMAIL] ?? globalConfig.user?.email,\n      userId: process.env[ENV_KEYS.USERID] ?? globalConfig.user?.userId\n    },\n    jira: {\n      baseUrl: process.env[ENV_KEYS.JIRA_BASE_URL] ?? globalConfig.jira?.baseUrl,\n      apiToken: process.env[ENV_KEYS.JIRA_API_TOKEN] ?? globalConfig.jira?.apiToken,\n      customFields: mergeCustomFields(globalConfig.jira?.customFields, repoConfig.jira?.customFields)\n    },\n    bitbucket: {\n      baseUrl: process.env[ENV_KEYS.BITBUCKET_BASE_URL] ?? globalConfig.bitbucket?.baseUrl,\n      pat: process.env[ENV_KEYS.BITBUCKET_PAT] ?? globalConfig.bitbucket?.pat\n    },\n    github: {\n      baseUrl: process.env[ENV_KEYS.GITHUB_BASE_URL] ?? globalConfig.github?.baseUrl,\n      token: process.env[ENV_KEYS.GITHUB_TOKEN] ?? globalConfig.github?.token\n    },\n    confluence: {\n      baseUrl: process.env[ENV_KEYS.CONFLUENCE_BASE_URL] ?? globalConfig.confluence?.baseUrl,\n      apiToken: process.env[ENV_KEYS.CONFLUENCE_API_TOKEN] ?? globalConfig.confluence?.apiToken\n        ?? process.env[ENV_KEYS.JIRA_API_TOKEN] ?? globalConfig.jira?.apiToken,\n      apiTokenExplicit: !!(\n        process.env[ENV_KEYS.CONFLUENCE_API_TOKEN] ?? globalConfig.confluence?.apiToken\n      )\n    },\n    artifactory: {\n      baseUrl: process.env[ENV_KEYS.ARTIFACTORY_BASE_URL] ?? globalConfig.artifactory?.baseUrl,\n      token: process.env[ENV_KEYS.ARTIFACTORY_TOKEN] ?? globalConfig.artifactory?.token,\n      npmRepo: process.env[ENV_KEYS.ARTIFACTORY_REPO_NPM] ?? globalConfig.artifactory?.npmRepo,\n      nugetRepo: process.env[ENV_KEYS.ARTIFACTORY_REPO_NUGET] ?? globalConfig.artifactory?.nugetRepo,\n      mavenRepo: process.env[ENV_KEYS.ARTIFACTORY_REPO_MAVEN] ?? globalConfig.artifactory?.mavenRepo\n    },\n    sonar: {\n      baseUrl: process.env[ENV_KEYS.SONAR_BASE_URL] ?? globalConfig.sonar?.baseUrl,\n      token: process.env[ENV_KEYS.SONAR_TOKEN] ?? globalConfig.sonar?.token\n    },\n    sde: (() => {\n      const raw = process.env[ENV_KEYS.SDE_CONNECTION] ?? globalConfig.sde?.connection;\n      const parsed = raw ? parseSdeConnection(raw) : null;\n      return { baseUrl: parsed?.baseUrl, token: parsed?.token };\n    })(),\n    ado: {\n      baseUrl: process.env[ENV_KEYS.ADO_BASE_URL] ?? globalConfig.ado?.baseUrl,\n      pat: process.env[ENV_KEYS.ADO_PAT] ?? globalConfig.ado?.pat,\n      fieldAliases: globalConfig.ado?.fieldAliases ?? {},\n      discoveredFields: globalConfig.ado?.discoveredFields ?? [],\n      discoveredTypes: globalConfig.ado?.discoveredTypes ?? []\n    },\n    jenkins: {\n      baseUrl: repoConfig.defaults?.jenkins?.baseUrl ?? process.env[ENV_KEYS.JENKINS_BASE_URL] ?? globalConfig.jenkins?.baseUrl,\n      username: process.env[ENV_KEYS.JENKINS_USERNAME] ?? globalConfig.jenkins?.username,\n      apiToken: process.env[ENV_KEYS.JENKINS_API_TOKEN] ?? globalConfig.jenkins?.apiToken\n    },\n    udeploy: {\n      baseUrl: process.env[ENV_KEYS.UDEPLOY_BASE_URL] ?? globalConfig.udeploy?.baseUrl,\n      pat: process.env[ENV_KEYS.UDEPLOY_PAT] ?? globalConfig.udeploy?.pat,\n      username: process.env[ENV_KEYS.UDEPLOY_USERNAME] ?? globalConfig.udeploy?.username,\n      password: process.env[ENV_KEYS.UDEPLOY_PASSWORD] ?? globalConfig.udeploy?.password,\n    },\n    checkmarx: {\n      baseUrl: process.env[ENV_KEYS.CHECKMARX_BASE_URL] ?? globalConfig.checkmarx?.baseUrl,\n      tenantName: process.env[ENV_KEYS.CHECKMARX_TENANT_NAME] ?? globalConfig.checkmarx?.tenantName,\n      apiKey: process.env[ENV_KEYS.CHECKMARX_API_KEY] ?? globalConfig.checkmarx?.apiKey,\n      clientId: process.env[ENV_KEYS.CHECKMARX_CLIENT_ID] ?? globalConfig.checkmarx?.clientId,\n      clientSecret: process.env[ENV_KEYS.CHECKMARX_CLIENT_SECRET] ?? globalConfig.checkmarx?.clientSecret,\n    },\n    servicenow: {\n      baseUrl: process.env[ENV_KEYS.SERVICENOW_BASE_URL] ?? globalConfig.servicenow?.baseUrl,\n      username: process.env[ENV_KEYS.SERVICENOW_USERNAME] ?? globalConfig.servicenow?.username,\n      password: process.env[ENV_KEYS.SERVICENOW_PASSWORD] ?? globalConfig.servicenow?.password,\n      apiToken: process.env[ENV_KEYS.SERVICENOW_API_TOKEN] ?? globalConfig.servicenow?.apiToken,\n    },\n    contrast: {\n      baseUrl: process.env[ENV_KEYS.CONTRAST_BASE_URL] ?? globalConfig.contrast?.baseUrl,\n      orgUuid: process.env[ENV_KEYS.CONTRAST_ORG_UUID] ?? globalConfig.contrast?.orgUuid,\n      apiKey: process.env[ENV_KEYS.CONTRAST_API_KEY] ?? globalConfig.contrast?.apiKey,\n      serviceKey: process.env[ENV_KEYS.CONTRAST_SERVICE_KEY] ?? globalConfig.contrast?.serviceKey,\n      username: process.env[ENV_KEYS.CONTRAST_USERNAME] ?? globalConfig.contrast?.username,\n    },\n    sonatypeiq: {\n      baseUrl: process.env[ENV_KEYS.SONATYPEIQ_BASE_URL] ?? globalConfig.sonatypeiq?.baseUrl,\n      userCode: process.env[ENV_KEYS.SONATYPEIQ_USER_CODE] ?? globalConfig.sonatypeiq?.userCode,\n      passcode: process.env[ENV_KEYS.SONATYPEIQ_PASSCODE] ?? globalConfig.sonatypeiq?.passcode,\n    },\n    openshift: {\n      baseUrl: process.env[ENV_KEYS.OPENSHIFT_BASE_URL] ?? globalConfig.openshift?.baseUrl,\n      token: process.env[ENV_KEYS.OPENSHIFT_TOKEN] ?? globalConfig.openshift?.token,\n    },\n    dynatrace: {\n      baseUrl: process.env[ENV_KEYS.DYNATRACE_BASE_URL] ?? globalConfig.dynatrace?.baseUrl,\n      apiToken: process.env[ENV_KEYS.DYNATRACE_API_TOKEN] ?? globalConfig.dynatrace?.apiToken,\n      platformUrl: process.env[ENV_KEYS.DYNATRACE_PLATFORM_URL] ?? globalConfig.dynatrace?.platformUrl,\n      platformToken: process.env[ENV_KEYS.DYNATRACE_PLATFORM_TOKEN] ?? globalConfig.dynatrace?.platformToken,\n    },\n    defaults: mergedDefaults\n  };\n}\n\nexport function writeGlobalConfig(config: GlobalConfig, configPath?: string): void {\n  const filePath = getGlobalConfigPath(configPath);\n  const dir = path.dirname(filePath);\n  if (!fs.existsSync(dir)) {\n    fs.mkdirSync(dir, { recursive: true });\n  }\n  fs.writeFileSync(filePath, JSON.stringify(config, null, 2) + '\\n', 'utf8');\n}\n\nexport function writeRepoConfig(config: RepoConfig): void {\n  const repoRoot = getRepoRoot();\n  const targetDir = repoRoot ?? process.cwd();\n  fs.writeFileSync(path.join(targetDir, '.pncli.json'), JSON.stringify(config, null, 2) + '\\n', 'utf8');\n}\n\nfunction parseConfigValue(value: string): unknown {\n  try {\n    const parsed = JSON.parse(value);\n    if (typeof parsed === 'object' && parsed !== null) {\n      return parsed;\n    }\n  } catch {\n    // not valid JSON — fall through to raw string\n  }\n  return value;\n}\n\nexport function setConfigValue(key: string, value: string, configPath?: string): void {\n  const filePath = getGlobalConfigPath(configPath);\n  const existing = loadJsonFile<GlobalConfig>(filePath) ?? {};\n\n  const parts = key.split('.');\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  let current: any = existing;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i]!;\n    if (typeof current[part] !== 'object' || current[part] === null) {\n      current[part] = {};\n    }\n    current = current[part];\n  }\n  current[parts[parts.length - 1]!] = parseConfigValue(value);\n\n  writeGlobalConfig(existing, configPath);\n}\n\nexport function setRepoConfigValue(key: string, value: string): void {\n  const repoRoot = getRepoRoot();\n  const targetDir = repoRoot ?? process.cwd();\n  const filePath = path.join(targetDir, '.pncli.json');\n  const existing = loadJsonFile<RepoConfig>(filePath) ?? {};\n\n  const parts = key.split('.');\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  let current: any = existing;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i]!;\n    if (typeof current[part] !== 'object' || current[part] === null) {\n      current[part] = {};\n    }\n    current = current[part];\n  }\n  current[parts[parts.length - 1]!] = parseConfigValue(value);\n\n  writeRepoConfig(existing);\n}\n\nexport function maskConfig(config: ResolvedConfig): unknown {\n  return {\n    ...config,\n    jira: {\n      ...config.jira,\n      apiToken: config.jira.apiToken ? '***' : undefined,\n      customFields: config.jira.customFields\n    },\n    bitbucket: {\n      ...config.bitbucket,\n      pat: config.bitbucket.pat ? '***' : undefined\n    },\n    github: {\n      ...config.github,\n      token: config.github.token ? '***' : undefined\n    },\n    confluence: {\n      ...config.confluence,\n      apiToken: config.confluence.apiToken ? '***' : undefined\n    },\n    artifactory: {\n      ...config.artifactory,\n      token: config.artifactory.token ? '***' : undefined\n    },\n    sonar: {\n      ...config.sonar,\n      token: config.sonar.token ? '***' : undefined\n    },\n    sde: {\n      baseUrl: config.sde.baseUrl,\n      token: config.sde.token ? '***' : undefined\n    },\n    ado: {\n      ...config.ado,\n      pat: config.ado.pat ? '***' : undefined\n    },\n    jenkins: {\n      ...config.jenkins,\n      apiToken: config.jenkins.apiToken ? '***' : undefined\n    },\n    udeploy: {\n      ...config.udeploy,\n      pat: config.udeploy.pat ? '***' : undefined,\n      password: config.udeploy.password ? '***' : undefined\n    },\n    checkmarx: {\n      ...config.checkmarx,\n      apiKey: config.checkmarx.apiKey ? '***' : undefined,\n      clientSecret: config.checkmarx.clientSecret ? '***' : undefined\n    },\n    servicenow: {\n      ...config.servicenow,\n      password: config.servicenow.password ? '***' : undefined,\n      apiToken: config.servicenow.apiToken ? '***' : undefined\n    },\n    contrast: {\n      ...config.contrast,\n      apiKey: config.contrast.apiKey ? '***' : undefined,\n      serviceKey: config.contrast.serviceKey ? '***' : undefined\n    },\n    sonatypeiq: {\n      ...config.sonatypeiq,\n      passcode: config.sonatypeiq.passcode ? '***' : undefined\n    },\n    openshift: {\n      ...config.openshift,\n      token: config.openshift.token ? '***' : undefined\n    },\n    dynatrace: {\n      ...config.dynatrace,\n      apiToken: config.dynatrace.apiToken ? '***' : undefined,\n      platformToken: config.dynatrace.platformToken ? '***' : undefined\n    }\n  };\n}\n\nexport { getGlobalConfigPath, loadJsonFile };\n"],"mappings":";;;AAAA,OAAO,QAAQ;AACf,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,gBAAgB;AAIzB,IAAM,WAAW;AAAA,EACf,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,cAAc;AAAA,EACd,qBAAqB;AAAA,EACrB,sBAAsB;AAAA,EACtB,sBAAsB;AAAA,EACtB,mBAAmB;AAAA,EACnB,sBAAsB;AAAA,EACtB,wBAAwB;AAAA,EACxB,wBAAwB;AAAA,EACxB,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,SAAS;AAAA,EACT,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,mBAAmB;AAAA,EACnB,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,oBAAoB;AAAA,EACpB,uBAAuB;AAAA,EACvB,mBAAmB;AAAA,EACnB,qBAAqB;AAAA,EACrB,yBAAyB;AAAA,EACzB,qBAAqB;AAAA,EACrB,qBAAqB;AAAA,EACrB,qBAAqB;AAAA,EACrB,sBAAsB;AAAA,EACtB,mBAAmB;AAAA,EACnB,mBAAmB;AAAA,EACnB,kBAAkB;AAAA,EAClB,sBAAsB;AAAA,EACtB,mBAAmB;AAAA,EACnB,qBAAqB;AAAA,EACrB,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,wBAAwB;AAAA,EACxB,0BAA0B;AAAA,EAC1B,aAAa;AACf;AAEA,SAAS,oBAAoB,cAA+B;AAC1D,MAAI,aAAc,QAAO;AACzB,QAAM,UAAU,QAAQ,IAAI,SAAS,WAAW;AAChD,MAAI,QAAS,QAAO;AACpB,SAAO,KAAK,KAAK,GAAG,QAAQ,GAAG,UAAU,aAAa;AACxD;AAEA,SAAS,aAAgB,UAA4B;AACnD,MAAI;AACF,UAAM,UAAU,GAAG,aAAa,UAAU,MAAM;AAChD,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,cAA6B;AACpC,MAAI;AACF,WAAO,SAAS,iCAAiC,EAAE,UAAU,QAAQ,OAAO,CAAC,QAAQ,QAAQ,MAAM,EAAE,CAAC,EAAE,KAAK;AAAA,EAC/G,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBAAmB,YAA+D;AACzF,QAAM,MAAM,WAAW,QAAQ,GAAG;AAClC,MAAI,OAAO,EAAG,QAAO;AACrB,QAAM,QAAQ,WAAW,MAAM,GAAG,GAAG;AACrC,QAAM,OAAO,WAAW,MAAM,MAAM,CAAC;AACrC,QAAM,UAAU,gBAAgB,KAAK,IAAI,IAAI,OAAO,WAAW,IAAI;AACnE,SAAO,EAAE,OAAO,QAAQ;AAC1B;AAEA,SAAS,kBACP,QACA,MACyB;AACzB,QAAM,MAAM,oBAAI,IAAmC;AACnD,aAAW,KAAK,UAAU,CAAC,EAAG,KAAI,IAAI,EAAE,IAAI,CAAC;AAC7C,aAAW,KAAK,QAAQ,CAAC,EAAG,KAAI,IAAI,EAAE,IAAI,CAAC;AAC3C,SAAO,MAAM,KAAK,IAAI,OAAO,CAAC;AAChC;AAEA,SAAS,cACP,QACA,MAC4L;AAC5L,SAAO;AAAA,IACL,MAAM,EAAE,GAAG,QAAQ,MAAM,GAAG,MAAM,KAAK;AAAA,IACvC,WAAW,EAAE,GAAG,QAAQ,WAAW,GAAG,MAAM,UAAU;AAAA,IACtD,QAAQ,EAAE,GAAG,QAAQ,QAAQ,GAAG,MAAM,OAAO;AAAA,IAC7C,OAAO,EAAE,GAAG,QAAQ,OAAO,GAAG,MAAM,MAAM;AAAA,IAC1C,KAAK,EAAE,GAAG,QAAQ,KAAK,GAAG,MAAM,IAAI;AAAA,IACpC,KAAK,EAAE,GAAG,QAAQ,KAAK,GAAG,MAAM,IAAI;AAAA,IACpC,SAAS,EAAE,GAAG,QAAQ,SAAS,GAAG,MAAM,QAAQ;AAAA,IAChD,SAAS,EAAE,GAAG,QAAQ,SAAS,GAAG,MAAM,QAAQ;AAAA,EAClD;AACF;AAMO,SAAS,WAAW,OAA0B,CAAC,GAAmB;AACvE,QAAM,mBAAmB,oBAAoB,KAAK,UAAU;AAC5D,QAAM,eAAe,aAA2B,gBAAgB,KAAK,CAAC;AAEtE,QAAM,WAAW,YAAY;AAC7B,MAAI,aAAyB,CAAC;AAC9B,MAAI,UAAU;AACZ,iBAAa,aAAyB,KAAK,KAAK,UAAU,aAAa,CAAC,KAAK,CAAC;AAAA,EAChF;AAEA,QAAM,iBAAiB,cAAc,aAAa,UAAU,WAAW,QAAQ;AAE/E,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,OAAO,QAAQ,IAAI,SAAS,KAAK,KAAK,aAAa,MAAM;AAAA,MACzD,QAAQ,QAAQ,IAAI,SAAS,MAAM,KAAK,aAAa,MAAM;AAAA,IAC7D;AAAA,IACA,MAAM;AAAA,MACJ,SAAS,QAAQ,IAAI,SAAS,aAAa,KAAK,aAAa,MAAM;AAAA,MACnE,UAAU,QAAQ,IAAI,SAAS,cAAc,KAAK,aAAa,MAAM;AAAA,MACrE,cAAc,kBAAkB,aAAa,MAAM,cAAc,WAAW,MAAM,YAAY;AAAA,IAChG;AAAA,IACA,WAAW;AAAA,MACT,SAAS,QAAQ,IAAI,SAAS,kBAAkB,KAAK,aAAa,WAAW;AAAA,MAC7E,KAAK,QAAQ,IAAI,SAAS,aAAa,KAAK,aAAa,WAAW;AAAA,IACtE;AAAA,IACA,QAAQ;AAAA,MACN,SAAS,QAAQ,IAAI,SAAS,eAAe,KAAK,aAAa,QAAQ;AAAA,MACvE,OAAO,QAAQ,IAAI,SAAS,YAAY,KAAK,aAAa,QAAQ;AAAA,IACpE;AAAA,IACA,YAAY;AAAA,MACV,SAAS,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,YAAY;AAAA,MAC/E,UAAU,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,YAAY,YAC5E,QAAQ,IAAI,SAAS,cAAc,KAAK,aAAa,MAAM;AAAA,MAChE,kBAAkB,CAAC,EACjB,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,YAAY;AAAA,IAE3E;AAAA,IACA,aAAa;AAAA,MACX,SAAS,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,aAAa;AAAA,MACjF,OAAO,QAAQ,IAAI,SAAS,iBAAiB,KAAK,aAAa,aAAa;AAAA,MAC5E,SAAS,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,aAAa;AAAA,MACjF,WAAW,QAAQ,IAAI,SAAS,sBAAsB,KAAK,aAAa,aAAa;AAAA,MACrF,WAAW,QAAQ,IAAI,SAAS,sBAAsB,KAAK,aAAa,aAAa;AAAA,IACvF;AAAA,IACA,OAAO;AAAA,MACL,SAAS,QAAQ,IAAI,SAAS,cAAc,KAAK,aAAa,OAAO;AAAA,MACrE,OAAO,QAAQ,IAAI,SAAS,WAAW,KAAK,aAAa,OAAO;AAAA,IAClE;AAAA,IACA,MAAM,MAAM;AACV,YAAM,MAAM,QAAQ,IAAI,SAAS,cAAc,KAAK,aAAa,KAAK;AACtE,YAAM,SAAS,MAAM,mBAAmB,GAAG,IAAI;AAC/C,aAAO,EAAE,SAAS,QAAQ,SAAS,OAAO,QAAQ,MAAM;AAAA,IAC1D,GAAG;AAAA,IACH,KAAK;AAAA,MACH,SAAS,QAAQ,IAAI,SAAS,YAAY,KAAK,aAAa,KAAK;AAAA,MACjE,KAAK,QAAQ,IAAI,SAAS,OAAO,KAAK,aAAa,KAAK;AAAA,MACxD,cAAc,aAAa,KAAK,gBAAgB,CAAC;AAAA,MACjD,kBAAkB,aAAa,KAAK,oBAAoB,CAAC;AAAA,MACzD,iBAAiB,aAAa,KAAK,mBAAmB,CAAC;AAAA,IACzD;AAAA,IACA,SAAS;AAAA,MACP,SAAS,WAAW,UAAU,SAAS,WAAW,QAAQ,IAAI,SAAS,gBAAgB,KAAK,aAAa,SAAS;AAAA,MAClH,UAAU,QAAQ,IAAI,SAAS,gBAAgB,KAAK,aAAa,SAAS;AAAA,MAC1E,UAAU,QAAQ,IAAI,SAAS,iBAAiB,KAAK,aAAa,SAAS;AAAA,IAC7E;AAAA,IACA,SAAS;AAAA,MACP,SAAS,QAAQ,IAAI,SAAS,gBAAgB,KAAK,aAAa,SAAS;AAAA,MACzE,KAAK,QAAQ,IAAI,SAAS,WAAW,KAAK,aAAa,SAAS;AAAA,MAChE,UAAU,QAAQ,IAAI,SAAS,gBAAgB,KAAK,aAAa,SAAS;AAAA,MAC1E,UAAU,QAAQ,IAAI,SAAS,gBAAgB,KAAK,aAAa,SAAS;AAAA,IAC5E;AAAA,IACA,WAAW;AAAA,MACT,SAAS,QAAQ,IAAI,SAAS,kBAAkB,KAAK,aAAa,WAAW;AAAA,MAC7E,YAAY,QAAQ,IAAI,SAAS,qBAAqB,KAAK,aAAa,WAAW;AAAA,MACnF,QAAQ,QAAQ,IAAI,SAAS,iBAAiB,KAAK,aAAa,WAAW;AAAA,MAC3E,UAAU,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,WAAW;AAAA,MAC/E,cAAc,QAAQ,IAAI,SAAS,uBAAuB,KAAK,aAAa,WAAW;AAAA,IACzF;AAAA,IACA,YAAY;AAAA,MACV,SAAS,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,YAAY;AAAA,MAC/E,UAAU,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,YAAY;AAAA,MAChF,UAAU,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,YAAY;AAAA,MAChF,UAAU,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,YAAY;AAAA,IACnF;AAAA,IACA,UAAU;AAAA,MACR,SAAS,QAAQ,IAAI,SAAS,iBAAiB,KAAK,aAAa,UAAU;AAAA,MAC3E,SAAS,QAAQ,IAAI,SAAS,iBAAiB,KAAK,aAAa,UAAU;AAAA,MAC3E,QAAQ,QAAQ,IAAI,SAAS,gBAAgB,KAAK,aAAa,UAAU;AAAA,MACzE,YAAY,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,UAAU;AAAA,MACjF,UAAU,QAAQ,IAAI,SAAS,iBAAiB,KAAK,aAAa,UAAU;AAAA,IAC9E;AAAA,IACA,YAAY;AAAA,MACV,SAAS,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,YAAY;AAAA,MAC/E,UAAU,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,YAAY;AAAA,MACjF,UAAU,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,YAAY;AAAA,IAClF;AAAA,IACA,WAAW;AAAA,MACT,SAAS,QAAQ,IAAI,SAAS,kBAAkB,KAAK,aAAa,WAAW;AAAA,MAC7E,OAAO,QAAQ,IAAI,SAAS,eAAe,KAAK,aAAa,WAAW;AAAA,IAC1E;AAAA,IACA,WAAW;AAAA,MACT,SAAS,QAAQ,IAAI,SAAS,kBAAkB,KAAK,aAAa,WAAW;AAAA,MAC7E,UAAU,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,WAAW;AAAA,MAC/E,aAAa,QAAQ,IAAI,SAAS,sBAAsB,KAAK,aAAa,WAAW;AAAA,MACrF,eAAe,QAAQ,IAAI,SAAS,wBAAwB,KAAK,aAAa,WAAW;AAAA,IAC3F;AAAA,IACA,UAAU;AAAA,EACZ;AACF;AAEO,SAAS,kBAAkB,QAAsB,YAA2B;AACjF,QAAM,WAAW,oBAAoB,UAAU;AAC/C,QAAM,MAAM,KAAK,QAAQ,QAAQ;AACjC,MAAI,CAAC,GAAG,WAAW,GAAG,GAAG;AACvB,OAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EACvC;AACA,KAAG,cAAc,UAAU,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,MAAM,MAAM;AAC3E;AAEO,SAAS,gBAAgB,QAA0B;AACxD,QAAM,WAAW,YAAY;AAC7B,QAAM,YAAY,YAAY,QAAQ,IAAI;AAC1C,KAAG,cAAc,KAAK,KAAK,WAAW,aAAa,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,MAAM,MAAM;AACtG;AAEA,SAAS,iBAAiB,OAAwB;AAChD,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,KAAK;AAC/B,QAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AACjD,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEO,SAAS,eAAe,KAAa,OAAe,YAA2B;AACpF,QAAM,WAAW,oBAAoB,UAAU;AAC/C,QAAM,WAAW,aAA2B,QAAQ,KAAK,CAAC;AAE1D,QAAM,QAAQ,IAAI,MAAM,GAAG;AAE3B,MAAI,UAAe;AACnB,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,OAAO,QAAQ,IAAI,MAAM,YAAY,QAAQ,IAAI,MAAM,MAAM;AAC/D,cAAQ,IAAI,IAAI,CAAC;AAAA,IACnB;AACA,cAAU,QAAQ,IAAI;AAAA,EACxB;AACA,UAAQ,MAAM,MAAM,SAAS,CAAC,CAAE,IAAI,iBAAiB,KAAK;AAE1D,oBAAkB,UAAU,UAAU;AACxC;AAEO,SAAS,mBAAmB,KAAa,OAAqB;AACnE,QAAM,WAAW,YAAY;AAC7B,QAAM,YAAY,YAAY,QAAQ,IAAI;AAC1C,QAAM,WAAW,KAAK,KAAK,WAAW,aAAa;AACnD,QAAM,WAAW,aAAyB,QAAQ,KAAK,CAAC;AAExD,QAAM,QAAQ,IAAI,MAAM,GAAG;AAE3B,MAAI,UAAe;AACnB,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,OAAO,QAAQ,IAAI,MAAM,YAAY,QAAQ,IAAI,MAAM,MAAM;AAC/D,cAAQ,IAAI,IAAI,CAAC;AAAA,IACnB;AACA,cAAU,QAAQ,IAAI;AAAA,EACxB;AACA,UAAQ,MAAM,MAAM,SAAS,CAAC,CAAE,IAAI,iBAAiB,KAAK;AAE1D,kBAAgB,QAAQ;AAC1B;AAEO,SAAS,WAAW,QAAiC;AAC1D,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM;AAAA,MACJ,GAAG,OAAO;AAAA,MACV,UAAU,OAAO,KAAK,WAAW,QAAQ;AAAA,MACzC,cAAc,OAAO,KAAK;AAAA,IAC5B;AAAA,IACA,WAAW;AAAA,MACT,GAAG,OAAO;AAAA,MACV,KAAK,OAAO,UAAU,MAAM,QAAQ;AAAA,IACtC;AAAA,IACA,QAAQ;AAAA,MACN,GAAG,OAAO;AAAA,MACV,OAAO,OAAO,OAAO,QAAQ,QAAQ;AAAA,IACvC;AAAA,IACA,YAAY;AAAA,MACV,GAAG,OAAO;AAAA,MACV,UAAU,OAAO,WAAW,WAAW,QAAQ;AAAA,IACjD;AAAA,IACA,aAAa;AAAA,MACX,GAAG,OAAO;AAAA,MACV,OAAO,OAAO,YAAY,QAAQ,QAAQ;AAAA,IAC5C;AAAA,IACA,OAAO;AAAA,MACL,GAAG,OAAO;AAAA,MACV,OAAO,OAAO,MAAM,QAAQ,QAAQ;AAAA,IACtC;AAAA,IACA,KAAK;AAAA,MACH,SAAS,OAAO,IAAI;AAAA,MACpB,OAAO,OAAO,IAAI,QAAQ,QAAQ;AAAA,IACpC;AAAA,IACA,KAAK;AAAA,MACH,GAAG,OAAO;AAAA,MACV,KAAK,OAAO,IAAI,MAAM,QAAQ;AAAA,IAChC;AAAA,IACA,SAAS;AAAA,MACP,GAAG,OAAO;AAAA,MACV,UAAU,OAAO,QAAQ,WAAW,QAAQ;AAAA,IAC9C;AAAA,IACA,SAAS;AAAA,MACP,GAAG,OAAO;AAAA,MACV,KAAK,OAAO,QAAQ,MAAM,QAAQ;AAAA,MAClC,UAAU,OAAO,QAAQ,WAAW,QAAQ;AAAA,IAC9C;AAAA,IACA,WAAW;AAAA,MACT,GAAG,OAAO;AAAA,MACV,QAAQ,OAAO,UAAU,SAAS,QAAQ;AAAA,MAC1C,cAAc,OAAO,UAAU,eAAe,QAAQ;AAAA,IACxD;AAAA,IACA,YAAY;AAAA,MACV,GAAG,OAAO;AAAA,MACV,UAAU,OAAO,WAAW,WAAW,QAAQ;AAAA,MAC/C,UAAU,OAAO,WAAW,WAAW,QAAQ;AAAA,IACjD;AAAA,IACA,UAAU;AAAA,MACR,GAAG,OAAO;AAAA,MACV,QAAQ,OAAO,SAAS,SAAS,QAAQ;AAAA,MACzC,YAAY,OAAO,SAAS,aAAa,QAAQ;AAAA,IACnD;AAAA,IACA,YAAY;AAAA,MACV,GAAG,OAAO;AAAA,MACV,UAAU,OAAO,WAAW,WAAW,QAAQ;AAAA,IACjD;AAAA,IACA,WAAW;AAAA,MACT,GAAG,OAAO;AAAA,MACV,OAAO,OAAO,UAAU,QAAQ,QAAQ;AAAA,IAC1C;AAAA,IACA,WAAW;AAAA,MACT,GAAG,OAAO;AAAA,MACV,UAAU,OAAO,UAAU,WAAW,QAAQ;AAAA,MAC9C,eAAe,OAAO,UAAU,gBAAgB,QAAQ;AAAA,IAC1D;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-XPPEXJBP.js → chunk-WM5NYVEO.js}

@@ -49,13 +49,14 @@ function isDebugEnabled() {
 function setGlobalUser(user) {
   globalUser = user;
 }
-function buildMeta(service, action, startTime) {
+function buildMeta(service, action, startTime, overrides) {
   return {
     service,
     action,
     timestamp: (/* @__PURE__ */ new Date()).toISOString(),
     duration_ms: Date.now() - startTime,
-    user: globalUser.email ?? globalUser.userId ? globalUser : void 0
+    user: globalUser.email ?? globalUser.userId ? globalUser : void 0,
+    overrides: overrides && overrides.length > 0 ? overrides : void 0
   };
 }
 function writeToFile(filePath, content) {
@@ -69,11 +70,11 @@ function writeToFile(filePath, content) {
     process.exitCode = ExitCode.GENERAL_ERROR;
   }
 }
-function success(data, service, action, startTime) {
+function success(data, service, action, startTime, overrides) {
   const envelope = {
     ok: true,
     data,
-    meta: buildMeta(service, action, startTime)
+    meta: buildMeta(service, action, startTime, overrides)
   };
   const out = (globalOptions.pretty ? JSON.stringify(envelope, null, 2) : JSON.stringify(envelope)) + "\n";
   if (outputFile) {
@@ -162,30 +163,33 @@ async function buildAdoFetcher(config) {
 }
 
 // src/lib/checkmarxFetch.ts
-var CX_CLIENT_ID = "resource_owner_client";
-var CX_CLIENT_SECRET = "014DF517-39D1-4453-B7B3-9930C563627C";
-var CX_SCOPE = "sast_api offline_access";
 function buildCheckmarxFetcher(config) {
-  const { baseUrl, username, password } = config.checkmarx;
+  const { baseUrl, tenantName, apiKey, clientId, clientSecret } = config.checkmarx;
   if (!baseUrl) throw new PncliError("Checkmarx baseUrl not configured. Run: pncli config init", 1);
-  if (!username) throw new PncliError("Checkmarx username not configured. Run: pncli config init", 1);
-  if (!password) throw new PncliError("Checkmarx password not configured. Run: pncli config init", 1);
-  const resolvedUsername = username;
-  const resolvedPassword = password;
-  const tokenUrl = `${baseUrl.replace(/\/$/, "")}/cxrestapi/auth/identity/connect/token`;
+  if (!tenantName) throw new PncliError("Checkmarx tenantName not configured. Run: pncli config init", 1);
+  if (!apiKey && (!clientId || !clientSecret)) {
+    throw new PncliError(
+      "Checkmarx credentials not configured. Set apiKey or clientId and clientSecret. Run: pncli config init",
+      1
+    );
+  }
+  const apiHost = new URL(baseUrl).hostname;
+  const iamHost = apiHost.replace(/(^|\.)ast\./, "$1iam.");
+  const tokenUrl = `https://${iamHost}/auth/realms/${tenantName}/protocol/openid-connect/token`;
   let cache = null;
   async function getToken() {
     const now = Date.now();
     if (cache && cache.expiresAt - now > 6e4) {
       return cache.value;
     }
-    const body = new URLSearchParams({
-      grant_type: "password",
-      client_id: CX_CLIENT_ID,
-      client_secret: CX_CLIENT_SECRET,
-      scope: CX_SCOPE,
-      username: resolvedUsername,
-      password: resolvedPassword
+    const body = apiKey ? new URLSearchParams({
+      grant_type: "refresh_token",
+      client_id: getApiKeyClientId(apiKey),
+      refresh_token: apiKey
+    }) : new URLSearchParams({
+      grant_type: "client_credentials",
+      client_id: clientId,
+      client_secret: clientSecret
     });
     const response = await fetch(tokenUrl, {
       method: "POST",
@@ -220,6 +224,17 @@ function buildCheckmarxFetcher(config) {
     });
   };
 }
+function getApiKeyClientId(apiKey) {
+  try {
+    const payload = apiKey.split(".")[1];
+    if (!payload) return "ast-app";
+    const normalized = payload.replace(/-/g, "+").replace(/_/g, "/");
+    const claims = JSON.parse(Buffer.from(normalized, "base64").toString("utf8"));
+    return typeof claims.azp === "string" && claims.azp ? claims.azp : "ast-app";
+  } catch {
+    return "ast-app";
+  }
+}
 
 // src/lib/http.ts
 var SENSITIVE_HEADERS = /* @__PURE__ */ new Set(["authorization", "api-key"]);
@@ -238,7 +253,9 @@ function redactHeaders(headers) {
   );
 }
 function buildUrl(base, path, params) {
-  const url = new URL(path, base.endsWith("/") ? base : base + "/");
+  const normalizedBase = base.endsWith("/") ? base : base + "/";
+  const normalizedPath = path.startsWith("/") ? path.slice(1) : path;
+  const url = new URL(normalizedPath, normalizedBase);
   if (params) {
     for (const [key, val] of Object.entries(params)) {
       if (val !== void 0) {
@@ -555,11 +572,14 @@ Headers: ${JSON.stringify(safeHeaders, null, 2)}
     }
     return request(url, init, opts.timeoutMs ?? 3e4);
   }
-  confluenceHeaders() {
+  confluenceToken() {
     const { apiToken } = this.config.confluence;
     if (!apiToken) throw new PncliError("Confluence credentials not configured. Run: pncli config init");
+    return apiToken;
+  }
+  confluenceHeaders() {
     return {
-      "Authorization": `Bearer ${apiToken}`,
+      "Authorization": `Bearer ${this.confluenceToken()}`,
       "Content-Type": "application/json",
       "Accept": "application/json",
       "Connection": "close"
@@ -947,6 +967,28 @@ Headers: ${JSON.stringify(safeHeaders, null, 2)}
     }
     return results;
   }
+  async confluenceUpload(path, formData, opts = {}) {
+    const baseUrl = this.config.confluence.baseUrl;
+    if (!baseUrl) throw new PncliError("Confluence baseUrl not configured. Run: pncli config init");
+    const url = buildUrl(baseUrl, path);
+    const headers = {
+      "Authorization": `Bearer ${this.confluenceToken()}`,
+      "X-Atlassian-Token": "no-check",
+      "Accept": "application/json",
+      "Connection": "close"
+    };
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
+      const msg = `DRY RUN: POST ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+Body: <multipart/form-data>
+`;
+      fs2.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    return request(url, { method: "POST", headers, body: formData }, opts.timeoutMs ?? 6e4);
+  }
   async confluencePaginate(fetchPage, maxTotal) {
     const results = [];
     let start = 0;
@@ -1125,6 +1167,52 @@ Headers: ${JSON.stringify(safeHeaders, null, 2)}
       const msg = `DRY RUN: ${init.method} ${url}
 Headers: ${JSON.stringify(safeHeaders, null, 2)}
 ` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
+` : "");
+      fs2.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    return request(url, init, opts.timeoutMs ?? 3e4);
+  }
+  dynatraceHeaders(platform = false) {
+    const token = platform ? this.config.dynatrace.platformToken : this.config.dynatrace.apiToken;
+    if (!token) {
+      throw new PncliError(
+        `${platform ? "Dynatrace platform" : "Dynatrace"} credentials not configured. Run: pncli config init`
+      );
+    }
+    return {
+      "Authorization": `${platform ? "Bearer" : "Api-Token"} ${token}`,
+      "Content-Type": "application/json",
+      "Accept": "application/json",
+      "Connection": "close"
+    };
+  }
+  async dynatrace(path, opts = {}) {
+    return this.dynatraceRequest(false, path, opts);
+  }
+  async dynatracePlatform(path, opts = {}) {
+    return this.dynatraceRequest(true, path, opts);
+  }
+  async dynatraceRequest(platform, path, opts) {
+    const baseUrl = platform ? this.config.dynatrace.platformUrl : this.config.dynatrace.baseUrl;
+    if (!baseUrl) {
+      throw new PncliError(
+        `${platform ? "Dynatrace platformUrl" : "Dynatrace baseUrl"} not configured. Run: pncli config init`
+      );
+    }
+    const url = buildUrl(baseUrl, path, opts.params);
+    const headers = this.dynatraceHeaders(platform);
+    const init = {
+      method: opts.method ?? "GET",
+      headers,
+      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
+    };
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
+      const msg = `DRY RUN: ${init.method} ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
 ` : "");
       fs2.writeSync(process.stderr.fd, msg);
       process.exitCode = ExitCode.SUCCESS;
@@ -1201,4 +1289,4 @@ export {
   HttpClient,
   createHttpClient
 };
-//# sourceMappingURL=chunk-XPPEXJBP.js.map
+//# sourceMappingURL=chunk-WM5NYVEO.js.map