@kolatts/pncli 1.2.0 → 1.3.0

package/dist/cli.js

@@ -5,6 +5,7 @@ import { Command } from "commander";
 import { createRequire } from "module";
 
 // src/lib/output.ts
+import fs from "fs";
 import chalk from "chalk";
 
 // src/lib/errors.ts
@@ -80,7 +81,12 @@ function fail(err, service, action, startTime) {
   if (msg) process.stderr.write(msg + "\n");
   const output = (globalOptions.pretty ? JSON.stringify(envelope, null, 2) : JSON.stringify(envelope)) + "\n";
   const exitCode = err instanceof PncliError ? exitCodeFromStatus(err.status) : ExitCode.GENERAL_ERROR;
-  process.stdout.write(output, () => process.exit(exitCode));
+  try {
+    fs.writeSync(process.stdout.fd, output);
+  } catch (writeErr) {
+    if (writeErr.code !== "EPIPE") throw writeErr;
+  }
+  process.exitCode = exitCode;
   throw new PncliError(errorDetail.message, errorDetail.status);
 }
 function log(message) {
@@ -97,7 +103,7 @@ function warn(message) {
 }
 
 // src/lib/config.ts
-import fs from "fs";
+import fs2 from "fs";
 import os from "os";
 import path from "path";
 import { execSync } from "child_process";
@@ -108,11 +114,17 @@ var ENV_KEYS = {
   JIRA_API_TOKEN: "PNCLI_JIRA_API_TOKEN",
   BITBUCKET_BASE_URL: "PNCLI_BITBUCKET_BASE_URL",
   BITBUCKET_PAT: "PNCLI_BITBUCKET_PAT",
+  CONFLUENCE_BASE_URL: "PNCLI_CONFLUENCE_BASE_URL",
+  CONFLUENCE_API_TOKEN: "PNCLI_CONFLUENCE_API_TOKEN",
   ARTIFACTORY_BASE_URL: "PNCLI_ARTIFACTORY_BASE_URL",
   ARTIFACTORY_TOKEN: "PNCLI_ARTIFACTORY_TOKEN",
   ARTIFACTORY_REPO_NPM: "PNCLI_ARTIFACTORY_REPO_NPM",
   ARTIFACTORY_REPO_NUGET: "PNCLI_ARTIFACTORY_REPO_NUGET",
   ARTIFACTORY_REPO_MAVEN: "PNCLI_ARTIFACTORY_REPO_MAVEN",
+  SONAR_BASE_URL: "PNCLI_SONAR_BASE_URL",
+  SONAR_TOKEN: "PNCLI_SONAR_TOKEN",
+  SDE_BASE_URL: "PNCLI_SDE_BASE_URL",
+  SDE_TOKEN: "PNCLI_SDE_TOKEN",
   CONFIG_PATH: "PNCLI_CONFIG_PATH"
 };
 function getGlobalConfigPath(overridePath) {
@@ -123,7 +135,7 @@ function getGlobalConfigPath(overridePath) {
 }
 function loadJsonFile(filePath) {
   try {
-    const content = fs.readFileSync(filePath, "utf8");
+    const content = fs2.readFileSync(filePath, "utf8");
     return JSON.parse(content);
   } catch {
     return null;
@@ -145,7 +157,9 @@ function mergeCustomFields(global, repo) {
 function mergeDefaults(global, repo) {
   return {
     jira: { ...global?.jira, ...repo?.jira },
-    bitbucket: { ...global?.bitbucket, ...repo?.bitbucket }
+    bitbucket: { ...global?.bitbucket, ...repo?.bitbucket },
+    sonar: { ...global?.sonar, ...repo?.sonar },
+    sde: { ...global?.sde, ...repo?.sde }
   };
 }
 function loadConfig(opts = {}) {
@@ -171,6 +185,10 @@ function loadConfig(opts = {}) {
       baseUrl: process.env[ENV_KEYS.BITBUCKET_BASE_URL] ?? globalConfig.bitbucket?.baseUrl,
       pat: process.env[ENV_KEYS.BITBUCKET_PAT] ?? globalConfig.bitbucket?.pat
     },
+    confluence: {
+      baseUrl: process.env[ENV_KEYS.CONFLUENCE_BASE_URL] ?? globalConfig.confluence?.baseUrl,
+      apiToken: process.env[ENV_KEYS.CONFLUENCE_API_TOKEN] ?? globalConfig.confluence?.apiToken ?? process.env[ENV_KEYS.JIRA_API_TOKEN] ?? globalConfig.jira?.apiToken
+    },
     artifactory: {
       baseUrl: process.env[ENV_KEYS.ARTIFACTORY_BASE_URL] ?? globalConfig.artifactory?.baseUrl,
       token: process.env[ENV_KEYS.ARTIFACTORY_TOKEN] ?? globalConfig.artifactory?.token,
@@ -178,21 +196,29 @@ function loadConfig(opts = {}) {
       nugetRepo: process.env[ENV_KEYS.ARTIFACTORY_REPO_NUGET] ?? globalConfig.artifactory?.nugetRepo,
       mavenRepo: process.env[ENV_KEYS.ARTIFACTORY_REPO_MAVEN] ?? globalConfig.artifactory?.mavenRepo
     },
+    sonar: {
+      baseUrl: process.env[ENV_KEYS.SONAR_BASE_URL] ?? globalConfig.sonar?.baseUrl,
+      token: process.env[ENV_KEYS.SONAR_TOKEN] ?? globalConfig.sonar?.token
+    },
+    sde: {
+      baseUrl: process.env[ENV_KEYS.SDE_BASE_URL] ?? globalConfig.sde?.baseUrl,
+      token: process.env[ENV_KEYS.SDE_TOKEN] ?? globalConfig.sde?.token
+    },
     defaults: mergedDefaults
   };
 }
 function writeGlobalConfig(config, configPath) {
   const filePath = getGlobalConfigPath(configPath);
   const dir = path.dirname(filePath);
-  if (!fs.existsSync(dir)) {
-    fs.mkdirSync(dir, { recursive: true });
+  if (!fs2.existsSync(dir)) {
+    fs2.mkdirSync(dir, { recursive: true });
   }
-  fs.writeFileSync(filePath, JSON.stringify(config, null, 2) + "\n", "utf8");
+  fs2.writeFileSync(filePath, JSON.stringify(config, null, 2) + "\n", "utf8");
 }
 function writeRepoConfig(config) {
   const repoRoot = getRepoRoot();
   const targetDir = repoRoot ?? process.cwd();
-  fs.writeFileSync(path.join(targetDir, ".pncli.json"), JSON.stringify(config, null, 2) + "\n", "utf8");
+  fs2.writeFileSync(path.join(targetDir, ".pncli.json"), JSON.stringify(config, null, 2) + "\n", "utf8");
 }
 function setConfigValue(key, value, configPath) {
   const filePath = getGlobalConfigPath(configPath);
@@ -221,9 +247,21 @@ function maskConfig(config) {
       ...config.bitbucket,
       pat: config.bitbucket.pat ? "***" : void 0
     },
+    confluence: {
+      ...config.confluence,
+      apiToken: config.confluence.apiToken ? "***" : void 0
+    },
     artifactory: {
       ...config.artifactory,
       token: config.artifactory.token ? "***" : void 0
+    },
+    sonar: {
+      ...config.sonar,
+      token: config.sonar.token ? "***" : void 0
+    },
+    sde: {
+      ...config.sde,
+      token: config.sde.token ? "***" : void 0
     }
   };
 }
@@ -428,6 +466,7 @@ function getGitContext(config) {
 }
 
 // src/lib/http.ts
+import fs3 from "fs";
 function buildUrl(base, path6, params) {
   const url = new URL(path6, base.endsWith("/") ? base : base + "/");
   if (params) {
@@ -486,6 +525,7 @@ async function request(url, init, timeoutMs) {
         if (Array.isArray(parsed.errors)) {
           for (const e of parsed.errors) {
             if (e?.message) parts.push(e.message);
+            else if (e?.msg) parts.push(e.msg);
           }
         }
         if (parts.length === 0 && parsed.message) {
@@ -499,7 +539,9 @@ async function request(url, init, timeoutMs) {
     if (response.status === 204) {
       return void 0;
     }
-    return response.json();
+    const text = await response.text();
+    if (!text) return void 0;
+    return JSON.parse(text);
   }
   throw lastError ?? new PncliError("Request failed after retries", 1, url);
 }
@@ -546,9 +588,9 @@ var HttpClient = class {
 Headers: ${JSON.stringify(safeHeaders, null, 2)}
 ` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
 ` : "");
-      process.stderr.write(msg, () => process.exit(ExitCode.SUCCESS));
-      return new Promise(() => {
-      });
+      fs3.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
     }
     return request(url, init, opts.timeoutMs ?? 3e4);
   }
@@ -568,12 +610,144 @@ Headers: ${JSON.stringify(safeHeaders, null, 2)}
 Headers: ${JSON.stringify(safeHeaders, null, 2)}
 ` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
 ` : "");
-      process.stderr.write(msg, () => process.exit(ExitCode.SUCCESS));
-      return new Promise(() => {
-      });
+      fs3.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    return request(url, init, opts.timeoutMs ?? 3e4);
+  }
+  confluenceHeaders() {
+    const { apiToken } = this.config.confluence;
+    if (!apiToken) throw new PncliError("Confluence credentials not configured. Run: pncli config init");
+    return {
+      "Authorization": `Bearer ${apiToken}`,
+      "Content-Type": "application/json",
+      "Accept": "application/json",
+      "Connection": "close"
+    };
+  }
+  async confluence(path6, opts = {}) {
+    const baseUrl = this.config.confluence.baseUrl;
+    if (!baseUrl) throw new PncliError("Confluence baseUrl not configured. Run: pncli config init");
+    const url = buildUrl(baseUrl, path6, opts.params);
+    const headers = this.confluenceHeaders();
+    const init = {
+      method: opts.method ?? "GET",
+      headers,
+      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
+    };
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
+      const msg = `DRY RUN: ${init.method} ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
+` : "");
+      fs3.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    return request(url, init, opts.timeoutMs ?? 3e4);
+  }
+  sdeHeaders() {
+    const { token } = this.config.sde;
+    if (!token) throw new PncliError("SDElements credentials not configured. Run: pncli config init");
+    return {
+      "Authorization": `Token ${token}`,
+      "Content-Type": "application/json",
+      "Accept": "application/json",
+      "Connection": "close"
+    };
+  }
+  async sde(path6, opts = {}) {
+    const baseUrl = this.config.sde.baseUrl;
+    if (!baseUrl) throw new PncliError("SDElements baseUrl not configured. Run: pncli config init");
+    const url = buildUrl(baseUrl, path6, opts.params);
+    const headers = this.sdeHeaders();
+    const init = {
+      method: opts.method ?? "GET",
+      headers,
+      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
+    };
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
+      const msg = `DRY RUN: ${init.method} ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
+` : "");
+      fs3.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    return request(url, init, opts.timeoutMs ?? 3e4);
+  }
+  async sdePaginate(fetchPage) {
+    const results = [];
+    let page = 1;
+    const pageSize = 100;
+    while (true) {
+      const response = await fetchPage(page, pageSize);
+      results.push(...response.results);
+      if (results.length >= response.count || response.results.length === 0) break;
+      page++;
+    }
+    return results;
+  }
+  sonarHeaders() {
+    const { token } = this.config.sonar;
+    if (!token) throw new PncliError("SonarQube credentials not configured. Run: pncli config init");
+    return {
+      "Authorization": `Bearer ${token}`,
+      "Content-Type": "application/json",
+      "Accept": "application/json",
+      "Connection": "close"
+    };
+  }
+  async sonar(path6, opts = {}) {
+    const baseUrl = this.config.sonar.baseUrl;
+    if (!baseUrl) throw new PncliError("SonarQube baseUrl not configured. Run: pncli config init");
+    const url = buildUrl(baseUrl, path6, opts.params);
+    const headers = this.sonarHeaders();
+    const init = {
+      method: opts.method ?? "GET",
+      headers,
+      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
+    };
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
+      const msg = `DRY RUN: ${init.method} ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
+` : "");
+      fs3.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
     }
     return request(url, init, opts.timeoutMs ?? 3e4);
   }
+  async sonarPaginate(fetchPage) {
+    const results = [];
+    let page = 1;
+    const pageSize = 500;
+    while (true) {
+      const response = await fetchPage(page, pageSize);
+      results.push(...response.items);
+      if (results.length >= response.total || response.items.length === 0) break;
+      page++;
+    }
+    return results;
+  }
+  async confluencePaginate(fetchPage) {
+    const results = [];
+    let start = 0;
+    const limit = 25;
+    while (true) {
+      const page = await fetchPage(start, limit);
+      results.push(...page.results);
+      if (!page._links.next) break;
+      start += page.size;
+    }
+    return results;
+  }
   async paginate(fetchPage) {
     const results = [];
     let start = 0;
@@ -1466,32 +1640,889 @@ function registerBitbucketCommands(program2) {
   });
 }
 
+// src/services/confluence/client.ts
+var API3 = "/rest/api";
+var ConfluenceClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  async getPage(id, expand = "body.storage,version,space,ancestors") {
+    return this.http.confluence(`${API3}/content/${id}`, {
+      params: { expand }
+    });
+  }
+  async getPageByTitle(spaceKey, title) {
+    const result = await this.http.confluence(`${API3}/content`, {
+      params: { spaceKey, title, expand: "body.storage,version,space", type: "page" }
+    });
+    return result.results[0] ?? null;
+  }
+  async listPages(spaceKey, opts = {}) {
+    const initialStart = opts.start ?? 0;
+    return this.http.confluencePaginate(async (start, limit) => {
+      return this.http.confluence(`${API3}/content`, {
+        params: { spaceKey, type: "page", expand: "version", start: initialStart + start, limit: opts.limit ?? limit }
+      });
+    });
+  }
+  async getPageChildren(id) {
+    return this.http.confluencePaginate(async (start, limit) => {
+      return this.http.confluence(`${API3}/content/${id}/child/page`, {
+        params: { expand: "version", start, limit }
+      });
+    });
+  }
+  async getLabels(id) {
+    return this.http.confluencePaginate(async (start, limit) => {
+      return this.http.confluence(`${API3}/content/${id}/label`, {
+        params: { start, limit }
+      });
+    });
+  }
+  async search(cql, opts = {}) {
+    return this.http.confluence(`${API3}/content/search`, {
+      params: {
+        cql,
+        start: opts.start ?? 0,
+        limit: opts.limit ?? 25,
+        ...opts.expand ? { expand: opts.expand } : {}
+      }
+    });
+  }
+  async createPage(opts) {
+    const body = {
+      type: "page",
+      title: opts.title,
+      space: { key: opts.spaceKey },
+      ancestors: opts.parentId ? [{ id: opts.parentId }] : [],
+      body: {
+        storage: {
+          value: opts.body,
+          representation: opts.representation ?? "storage"
+        }
+      }
+    };
+    return this.http.confluence(`${API3}/content`, {
+      method: "POST",
+      body
+    });
+  }
+  async updatePage(id, opts) {
+    const body = {
+      version: { number: opts.version },
+      type: "page",
+      title: opts.title,
+      status: opts.status ?? "current"
+    };
+    if (opts.body !== void 0) {
+      body.body = {
+        storage: {
+          value: opts.body,
+          representation: opts.representation ?? "storage"
+        }
+      };
+    }
+    return this.http.confluence(`${API3}/content/${id}`, {
+      method: "PUT",
+      body
+    });
+  }
+  async deletePage(id) {
+    return this.http.confluence(`${API3}/content/${id}`, { method: "DELETE" });
+  }
+  async listComments(pageId) {
+    return this.http.confluencePaginate(async (start, limit) => {
+      return this.http.confluence(`${API3}/content/${pageId}/child/comment`, {
+        params: { expand: "body.storage,version", start, limit }
+      });
+    });
+  }
+  async addComment(pageId, body, representation = "storage") {
+    return this.http.confluence(`${API3}/content`, {
+      method: "POST",
+      body: {
+        type: "comment",
+        container: { id: pageId, type: "page" },
+        body: {
+          storage: { value: body, representation }
+        }
+      }
+    });
+  }
+  async addLabel(pageId, labels) {
+    const body = labels.map((name) => ({ prefix: "global", name }));
+    const result = await this.http.confluence(`${API3}/content/${pageId}/label`, {
+      method: "POST",
+      body
+    });
+    return result.results;
+  }
+  async removeLabel(pageId, label) {
+    return this.http.confluence(`${API3}/content/${pageId}/label/${label}`, { method: "DELETE" });
+  }
+  async listSpaces(opts = {}) {
+    const initialStart = opts.start ?? 0;
+    return this.http.confluencePaginate(async (start, limit) => {
+      return this.http.confluence(`${API3}/space`, {
+        params: {
+          start: initialStart + start,
+          limit: opts.limit ?? limit,
+          ...opts.type ? { type: opts.type } : {}
+        }
+      });
+    });
+  }
+  async getSpace(key) {
+    return this.http.confluence(`${API3}/space/${key}`, {
+      params: { expand: "description.plain" }
+    });
+  }
+  async listAttachments(pageId) {
+    return this.http.confluencePaginate(async (start, limit) => {
+      return this.http.confluence(`${API3}/content/${pageId}/child/attachment`, {
+        params: { start, limit }
+      });
+    });
+  }
+};
+
 // src/services/confluence/commands.ts
+function getClient3(program2) {
+  const opts = program2.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  if (!config.confluence.baseUrl) throw new PncliError("Confluence not configured. Run: pncli config init");
+  const http = createHttpClient(config, Boolean(opts.dryRun));
+  return new ConfluenceClient(http);
+}
 function registerConfluenceCommands(program2) {
-  program2.command("confluence").description("Confluence operations").action(() => {
-    success(
-      { message: "Coming soon \u2014 the nightmare never ends." },
-      "confluence",
-      "stub",
-      Date.now()
-    );
+  const confluence = program2.command("confluence").description("Confluence operations");
+  confluence.command("get-page").description("Get a Confluence page by ID").requiredOption("--id <page-id>", "Page ID").option("--expand <fields>", "Comma-separated fields to expand", "body.storage,version,space,ancestors").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const data = await client.getPage(opts.id, opts.expand);
+      success(data, "confluence", "get-page", start);
+    } catch (err) {
+      fail(err, "confluence", "get-page", start);
+    }
+  });
+  confluence.command("get-page-by-title").description("Find a Confluence page by space key and title").requiredOption("--space <key>", "Space key").requiredOption("--title <title>", "Page title").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const data = await client.getPageByTitle(opts.space, opts.title);
+      if (!data) throw new PncliError(`Page not found: "${opts.title}" in space ${opts.space}`, 1);
+      success(data, "confluence", "get-page-by-title", start);
+    } catch (err) {
+      fail(err, "confluence", "get-page-by-title", start);
+    }
+  });
+  confluence.command("list-pages").description("List pages in a Confluence space").requiredOption("--space <key>", "Space key").option("--limit <n>", "Max results per page (default: all)").option("--start <n>", "Offset for first result").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const data = await client.listPages(opts.space, {
+        limit: opts.limit ? parseInt(opts.limit, 10) : void 0,
+        start: opts.start ? parseInt(opts.start, 10) : void 0
+      });
+      success(data, "confluence", "list-pages", start);
+    } catch (err) {
+      fail(err, "confluence", "list-pages", start);
+    }
+  });
+  confluence.command("get-page-children").description("Get child pages of a Confluence page").requiredOption("--id <page-id>", "Parent page ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const data = await client.getPageChildren(opts.id);
+      success(data, "confluence", "get-page-children", start);
+    } catch (err) {
+      fail(err, "confluence", "get-page-children", start);
+    }
+  });
+  confluence.command("get-labels").description("Get labels on a Confluence page").requiredOption("--id <page-id>", "Page ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const data = await client.getLabels(opts.id);
+      success(data, "confluence", "get-labels", start);
+    } catch (err) {
+      fail(err, "confluence", "get-labels", start);
+    }
+  });
+  confluence.command("search").description("Search Confluence with CQL").requiredOption("--cql <query>", 'CQL query string (e.g. "space=PROJ AND type=page")').option("--limit <n>", "Maximum number of results", "25").option("--start <n>", "Offset for first result", "0").option("--expand <fields>", "Comma-separated fields to expand").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const data = await client.search(opts.cql, {
+        limit: parseInt(opts.limit, 10),
+        start: parseInt(opts.start, 10),
+        expand: opts.expand
+      });
+      success(data, "confluence", "search", start);
+    } catch (err) {
+      fail(err, "confluence", "search", start);
+    }
+  });
+  confluence.command("create-page").description("Create a new Confluence page").requiredOption("--space <key>", "Space key").requiredOption("--title <title>", "Page title").requiredOption("--body <html>", "Page body (storage format HTML)").option("--parent-id <id>", "Parent page ID (to nest under a page)").option("--representation <format>", "Body format: storage (default) or wiki", "storage").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const data = await client.createPage({
+        spaceKey: opts.space,
+        title: opts.title,
+        body: opts.body,
+        parentId: opts.parentId,
+        representation: opts.representation
+      });
+      success(data, "confluence", "create-page", start);
+    } catch (err) {
+      fail(err, "confluence", "create-page", start);
+    }
+  });
+  confluence.command("update-page").description("Update a Confluence page (fetches current version automatically)").requiredOption("--id <page-id>", "Page ID").option("--title <title>", "New page title").option("--body <html>", "New page body (storage format HTML)").option("--status <status>", "Page status: current (default) or draft", "current").option("--representation <format>", "Body format: storage (default) or wiki", "storage").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const current = await client.getPage(opts.id, "version");
+      const nextVersion = current.version.number + 1;
+      const data = await client.updatePage(opts.id, {
+        version: nextVersion,
+        title: opts.title ?? current.title,
+        body: opts.body,
+        status: opts.status,
+        representation: opts.representation
+      });
+      success(data, "confluence", "update-page", start);
+    } catch (err) {
+      fail(err, "confluence", "update-page", start);
+    }
+  });
+  confluence.command("delete-page").description("Delete a Confluence page").requiredOption("--id <page-id>", "Page ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      await client.deletePage(opts.id);
+      success({ deleted: opts.id }, "confluence", "delete-page", start);
+    } catch (err) {
+      fail(err, "confluence", "delete-page", start);
+    }
+  });
+  confluence.command("list-comments").description("List comments on a Confluence page").requiredOption("--id <page-id>", "Page ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const data = await client.listComments(opts.id);
+      success(data, "confluence", "list-comments", start);
+    } catch (err) {
+      fail(err, "confluence", "list-comments", start);
+    }
+  });
+  confluence.command("add-comment").description("Add a comment to a Confluence page").requiredOption("--id <page-id>", "Page ID").requiredOption("--body <text>", "Comment body (storage format HTML)").option("--representation <format>", "Body format: storage (default) or wiki", "storage").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const data = await client.addComment(opts.id, opts.body, opts.representation);
+      success(data, "confluence", "add-comment", start);
+    } catch (err) {
+      fail(err, "confluence", "add-comment", start);
+    }
+  });
+  confluence.command("add-label").description("Add labels to a Confluence page").requiredOption("--id <page-id>", "Page ID").requiredOption("--labels <names>", "Comma-separated label names").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const labels = opts.labels.split(",").map((s) => s.trim()).filter(Boolean);
+      const data = await client.addLabel(opts.id, labels);
+      success(data, "confluence", "add-label", start);
+    } catch (err) {
+      fail(err, "confluence", "add-label", start);
+    }
+  });
+  confluence.command("remove-label").description("Remove a label from a Confluence page").requiredOption("--id <page-id>", "Page ID").requiredOption("--label <name>", "Label name to remove").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      await client.removeLabel(opts.id, opts.label);
+      success({ removed: opts.label, from: opts.id }, "confluence", "remove-label", start);
+    } catch (err) {
+      fail(err, "confluence", "remove-label", start);
+    }
+  });
+  confluence.command("list-spaces").description("List Confluence spaces").option("--type <type>", "Space type: global or personal").option("--limit <n>", "Max results (default: all)").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const data = await client.listSpaces({
+        type: opts.type,
+        limit: opts.limit ? parseInt(opts.limit, 10) : void 0
+      });
+      success(data, "confluence", "list-spaces", start);
+    } catch (err) {
+      fail(err, "confluence", "list-spaces", start);
+    }
+  });
+  confluence.command("get-space").description("Get a Confluence space by key").requiredOption("--key <space-key>", "Space key").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const data = await client.getSpace(opts.key);
+      success(data, "confluence", "get-space", start);
+    } catch (err) {
+      fail(err, "confluence", "get-space", start);
+    }
+  });
+  confluence.command("list-attachments").description("List attachments on a Confluence page").requiredOption("--id <page-id>", "Page ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient3(program2);
+      const data = await client.listAttachments(opts.id);
+      success(data, "confluence", "list-attachments", start);
+    } catch (err) {
+      fail(err, "confluence", "list-attachments", start);
+    }
   });
 }
 
+// src/services/sonar/client.ts
+var API4 = "/api";
+var SonarClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  async getStatus() {
+    return this.http.sonar(`${API4}/system/status`);
+  }
+  async getQualityGate(projectKey, branch) {
+    return this.http.sonar(`${API4}/qualitygates/project_status`, {
+      params: { projectKey, ...branch ? { branch } : {} }
+    });
+  }
+  async searchIssues(opts) {
+    return this.http.sonar(`${API4}/issues/search`, {
+      params: {
+        componentKeys: opts.projectKey,
+        severities: opts.severities,
+        types: opts.types,
+        statuses: opts.statuses,
+        branch: opts.branch,
+        resolved: opts.resolved !== void 0 ? String(opts.resolved) : void 0,
+        p: opts.page ?? 1,
+        ps: opts.pageSize ?? 100
+      }
+    });
+  }
+  async searchAllIssues(opts) {
+    return this.http.sonarPaginate(async (page, pageSize) => {
+      const resp = await this.http.sonar(`${API4}/issues/search`, {
+        params: {
+          componentKeys: opts.projectKey,
+          severities: opts.severities,
+          types: opts.types,
+          statuses: opts.statuses,
+          branch: opts.branch,
+          resolved: opts.resolved !== void 0 ? String(opts.resolved) : void 0,
+          p: page,
+          ps: pageSize
+        }
+      });
+      return { total: resp.total, p: resp.p, ps: resp.ps, items: resp.issues };
+    });
+  }
+  async getMeasures(opts) {
+    return this.http.sonar(`${API4}/measures/component`, {
+      params: {
+        component: opts.projectKey,
+        metricKeys: opts.metricKeys,
+        ...opts.branch ? { branch: opts.branch } : {}
+      }
+    });
+  }
+  async searchProjects(opts = {}) {
+    return this.http.sonar(`${API4}/projects/search`, {
+      params: {
+        q: opts.query,
+        p: opts.page ?? 1,
+        ps: opts.pageSize ?? 100
+      }
+    });
+  }
+  async searchAllProjects(query) {
+    return this.http.sonarPaginate(async (page, pageSize) => {
+      const resp = await this.http.sonar(`${API4}/projects/search`, {
+        params: { q: query, p: page, ps: pageSize }
+      });
+      return { total: resp.paging.total, p: resp.paging.pageIndex, ps: resp.paging.pageSize, items: resp.components };
+    });
+  }
+  async searchHotspots(opts) {
+    return this.http.sonar(`${API4}/hotspots/search`, {
+      params: {
+        projectKey: opts.projectKey,
+        status: opts.status,
+        resolution: opts.resolution,
+        branch: opts.branch,
+        p: opts.page ?? 1,
+        ps: opts.pageSize ?? 100
+      }
+    });
+  }
+  async searchAllHotspots(opts) {
+    return this.http.sonarPaginate(async (page, pageSize) => {
+      const resp = await this.http.sonar(`${API4}/hotspots/search`, {
+        params: {
+          projectKey: opts.projectKey,
+          status: opts.status,
+          resolution: opts.resolution,
+          branch: opts.branch,
+          p: page,
+          ps: pageSize
+        }
+      });
+      return { total: resp.paging.total, p: resp.paging.pageIndex, ps: resp.paging.pageSize, items: resp.hotspots };
+    });
+  }
+};
+
 // src/services/sonar/commands.ts
+var DEFAULT_METRICS = "coverage,duplicated_lines_density,bugs,vulnerabilities,code_smells,sqale_rating,reliability_rating,security_rating,ncloc";
+function getClient4(program2) {
+  const opts = program2.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  if (!config.sonar.baseUrl) throw new PncliError("SonarQube not configured. Run: pncli config init");
+  const http = createHttpClient(config, Boolean(opts.dryRun));
+  return { client: new SonarClient(http), config };
+}
+function resolveProject(config, cliProject) {
+  const project = cliProject ?? config.defaults.sonar.project;
+  if (!project) throw new PncliError("No project specified. Use --project or set defaults.sonar.project in config.");
+  return project;
+}
 function registerSonarCommands(program2) {
-  program2.command("sonar").description("SonarQube operations").action(() => {
-    success(
-      { message: "Coming soon \u2014 the nightmare never ends." },
-      "sonar",
-      "stub",
-      Date.now()
-    );
+  const sonar = program2.command("sonar").description("SonarQube Server operations");
+  sonar.command("quality-gate").description("Get quality gate status for a project").option("--project <key>", "SonarQube project key (or set defaults.sonar.project in config)").option("--branch <name>", "Branch name").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { client, config } = getClient4(program2);
+      const projectKey = resolveProject(config, opts.project);
+      const data = await client.getQualityGate(projectKey, opts.branch);
+      success(data, "sonar", "quality-gate", start);
+    } catch (err) {
+      fail(err, "sonar", "quality-gate", start);
+    }
+  });
+  sonar.command("issues").description("Search/list issues for a project").option("--project <key>", "SonarQube project key (or set defaults.sonar.project in config)").option("--severities <list>", "Filter by severity: BLOCKER,CRITICAL,MAJOR,MINOR,INFO (comma-separated)").option("--types <list>", "Filter by type: BUG,VULNERABILITY,CODE_SMELL (comma-separated)").option("--statuses <list>", "Filter by status: OPEN,CONFIRMED,REOPENED,RESOLVED,CLOSED (comma-separated)").option("--branch <name>", "Branch name").option("--resolved <bool>", "Filter resolved issues: true or false").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page (max 500)", "100").option("--all", "Fetch all pages (ignores --page/--page-size)").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { client, config } = getClient4(program2);
+      const projectKey = resolveProject(config, opts.project);
+      const baseOpts = {
+        projectKey,
+        severities: opts.severities,
+        types: opts.types,
+        statuses: opts.statuses,
+        branch: opts.branch,
+        resolved: opts.resolved !== void 0 ? opts.resolved === "true" : void 0
+      };
+      if (opts.all) {
+        const data = await client.searchAllIssues(baseOpts);
+        success(data, "sonar", "issues", start);
+      } else {
+        const data = await client.searchIssues({
+          ...baseOpts,
+          page: parseInt(opts.page, 10),
+          pageSize: parseInt(opts.pageSize, 10)
+        });
+        success(data, "sonar", "issues", start);
+      }
+    } catch (err) {
+      fail(err, "sonar", "issues", start);
+    }
+  });
+  sonar.command("measures").description("Get key metrics for a project").option("--project <key>", "SonarQube project key (or set defaults.sonar.project in config)").option("--metrics <list>", "Comma-separated metric keys", DEFAULT_METRICS).option("--branch <name>", "Branch name").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { client, config } = getClient4(program2);
+      const projectKey = resolveProject(config, opts.project);
+      const data = await client.getMeasures({
+        projectKey,
+        metricKeys: opts.metrics,
+        branch: opts.branch
+      });
+      success(data, "sonar", "measures", start);
+    } catch (err) {
+      fail(err, "sonar", "measures", start);
+    }
+  });
+  sonar.command("projects").description("Search/list projects").option("--query <text>", "Search query").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { client } = getClient4(program2);
+      if (opts.all) {
+        const data = await client.searchAllProjects(opts.query);
+        success(data, "sonar", "projects", start);
+      } else {
+        const data = await client.searchProjects({
+          query: opts.query,
+          page: parseInt(opts.page, 10),
+          pageSize: parseInt(opts.pageSize, 10)
+        });
+        success(data, "sonar", "projects", start);
+      }
+    } catch (err) {
+      fail(err, "sonar", "projects", start);
+    }
+  });
+  sonar.command("hotspots").description("List security hotspots for a project").option("--project <key>", "SonarQube project key (or set defaults.sonar.project in config)").option("--status <status>", "Filter: TO_REVIEW or REVIEWED").option("--resolution <list>", "Filter: FIXED,SAFE,ACKNOWLEDGED (comma-separated)").option("--branch <name>", "Branch name").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { client, config } = getClient4(program2);
+      const projectKey = resolveProject(config, opts.project);
+      const baseOpts = {
+        projectKey,
+        status: opts.status,
+        resolution: opts.resolution,
+        branch: opts.branch
+      };
+      if (opts.all) {
+        const data = await client.searchAllHotspots(baseOpts);
+        success(data, "sonar", "hotspots", start);
+      } else {
+        const data = await client.searchHotspots({
+          ...baseOpts,
+          page: parseInt(opts.page, 10),
+          pageSize: parseInt(opts.pageSize, 10)
+        });
+        success(data, "sonar", "hotspots", start);
+      }
+    } catch (err) {
+      fail(err, "sonar", "hotspots", start);
+    }
+  });
+}
+
+// src/services/sde/client.ts
+var API5 = "/api/v2";
+function projectParams(opts, page, pageSize) {
+  return {
+    name: opts.name,
+    slug: opts.slug,
+    search: opts.search,
+    active: opts.active,
+    ordering: opts.ordering,
+    expand: opts.expand,
+    include: opts.include,
+    page,
+    page_size: pageSize
+  };
+}
+function taskParams(opts, page, pageSize) {
+  return {
+    phase: opts.phase,
+    priority: opts.priority,
+    status: opts.status,
+    assigned_to: opts.assignedTo,
+    source: opts.source,
+    verification: opts.verification,
+    tag: opts.tag,
+    accepted: opts.accepted,
+    relevant: opts.relevant,
+    expand: opts.expand,
+    include: opts.include,
+    page,
+    page_size: pageSize
+  };
+}
+function threatParams(opts, page, pageSize) {
+  return {
+    severity: opts.severity,
+    title: opts.title,
+    threat_id: opts.threatId,
+    capec_id: opts.capecId,
+    component_id: opts.componentId,
+    search: opts.search,
+    ordering: opts.ordering,
+    page,
+    page_size: pageSize
+  };
+}
+function userParams(opts, page, pageSize) {
+  return {
+    email: opts.email,
+    first_name: opts.firstName,
+    last_name: opts.lastName,
+    is_active: opts.isActive,
+    page,
+    page_size: pageSize
+  };
+}
+var SdeClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  async getServerInfo() {
+    return this.http.sde(`${API5}/server-info/`);
+  }
+  async getMe() {
+    return this.http.sde(`${API5}/users/me/`);
+  }
+  async getProject(projectId, expand, include) {
+    return this.http.sde(`${API5}/projects/${projectId}/`, {
+      params: { expand, include }
+    });
+  }
+  async getTask(projectId, taskId, expand, include) {
+    return this.http.sde(`${API5}/projects/${projectId}/tasks/${taskId}/`, {
+      params: { expand, include }
+    });
+  }
+  async listProjects(opts = {}) {
+    return this.http.sde(`${API5}/projects/`, {
+      params: projectParams(opts, opts.page ?? 1, opts.pageSize ?? 100)
+    });
+  }
+  async listAllProjects(opts = {}) {
+    return this.http.sdePaginate(async (page, pageSize) => {
+      const resp = await this.http.sde(`${API5}/projects/`, {
+        params: projectParams(opts, page, pageSize)
+      });
+      return { count: resp.count, results: resp.results };
+    });
+  }
+  async listTasks(opts) {
+    return this.http.sde(`${API5}/projects/${opts.projectId}/tasks/`, {
+      params: taskParams(opts, opts.page ?? 1, opts.pageSize ?? 100)
+    });
+  }
+  async listAllTasks(opts) {
+    return this.http.sdePaginate(async (page, pageSize) => {
+      const resp = await this.http.sde(`${API5}/projects/${opts.projectId}/tasks/`, {
+        params: taskParams(opts, page, pageSize)
+      });
+      return { count: resp.count, results: resp.results };
+    });
+  }
+  async listThreats(opts) {
+    return this.http.sde(`${API5}/projects/${opts.projectId}/threats/`, {
+      params: threatParams(opts, opts.page ?? 1, opts.pageSize ?? 100)
+    });
+  }
+  async listAllThreats(opts) {
+    return this.http.sdePaginate(async (page, pageSize) => {
+      const resp = await this.http.sde(`${API5}/projects/${opts.projectId}/threats/`, {
+        params: threatParams(opts, page, pageSize)
+      });
+      return { count: resp.count, results: resp.results };
+    });
+  }
+  async listUsers(opts = {}) {
+    return this.http.sde(`${API5}/users/`, {
+      params: userParams(opts, opts.page ?? 1, opts.pageSize ?? 100)
+    });
+  }
+  async listAllUsers(opts = {}) {
+    return this.http.sdePaginate(async (page, pageSize) => {
+      const resp = await this.http.sde(`${API5}/users/`, {
+        params: userParams(opts, page, pageSize)
+      });
+      return { count: resp.count, results: resp.results };
+    });
+  }
+};
+
+// src/services/sde/commands.ts
+function getClient5(program2) {
+  const opts = program2.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  if (!config.sde.baseUrl) throw new PncliError("SDElements not configured. Run: pncli config init");
+  const http = createHttpClient(config, Boolean(opts.dryRun));
+  return { client: new SdeClient(http), config };
+}
+function resolveProject2(config, cliProject) {
+  const project = cliProject ?? config.defaults.sde.project;
+  if (!project) throw new PncliError("No project specified. Use --project or set defaults.sde.project in config.");
+  if (!/^\d+$/.test(project)) throw new PncliError(`Invalid project ID: "${project}". SDElements project IDs must be positive integers.`);
+  const id = parseInt(project, 10);
+  if (id <= 0) throw new PncliError(`Invalid project ID: "${project}". SDElements project IDs must be positive integers.`);
+  return id;
+}
+function parsePage(val, flag) {
+  const n = parseInt(val, 10);
+  if (isNaN(n) || n < 1) throw new PncliError(`Invalid ${flag}: "${val}". Must be a positive integer.`);
+  return n;
+}
+function validateActive(val, allowed) {
+  if (val === void 0) return void 0;
+  if (!allowed.includes(val)) {
+    throw new PncliError(`Invalid --active value: "${val}". Allowed: ${allowed.join(", ")}.`);
+  }
+  return val;
+}
+function registerSdeCommands(program2) {
+  const sde = program2.command("sde").description("SDElements operations (threat modeling, countermeasures, compliance)");
+  sde.command("server-info").description("Get server version and platform info (requires super-user)").action(async () => {
+    const start = Date.now();
+    try {
+      const { client } = getClient5(program2);
+      const data = await client.getServerInfo();
+      success(data, "sde", "server-info", start);
+    } catch (err) {
+      fail(err, "sde", "server-info", start);
+    }
+  });
+  sde.command("whoami").description("Get current authenticated user").action(async () => {
+    const start = Date.now();
+    try {
+      const { client } = getClient5(program2);
+      const data = await client.getMe();
+      success(data, "sde", "whoami", start);
+    } catch (err) {
+      fail(err, "sde", "whoami", start);
+    }
+  });
+  sde.command("users").description("List users").option("--email <email>", "Filter by email address").option("--first-name <name>", "Filter by first name").option("--last-name <name>", "Filter by last name").option("--active <bool>", "Filter by active status: true or false").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { client } = getClient5(program2);
+      const baseOpts = {
+        email: opts.email,
+        firstName: opts.firstName,
+        lastName: opts.lastName,
+        isActive: validateActive(opts.active, ["true", "false"])
+      };
+      if (opts.all) {
+        const data = await client.listAllUsers(baseOpts);
+        success(data, "sde", "users", start);
+      } else {
+        const data = await client.listUsers({
+          ...baseOpts,
+          page: parsePage(opts.page, "--page"),
+          pageSize: parsePage(opts.pageSize, "--page-size")
+        });
+        success(data, "sde", "users", start);
+      }
+    } catch (err) {
+      fail(err, "sde", "users", start);
+    }
+  });
+  sde.command("projects").description("List projects").option("--name <name>", "Filter by project name").option("--search <text>", "Text search on name and profile").option("--active <val>", "Filter by active status: true, false, or all").option("--ordering <field>", "Sort by: name, created, updated (prefix with - for descending)").option("--expand <fields>", "Expand nested fields (comma-separated): application,business_unit,creator").option("--include <fields>", "Include extra fields (comma-separated): task_counts,permissions").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { client } = getClient5(program2);
+      const baseOpts = {
+        name: opts.name,
+        search: opts.search,
+        active: validateActive(opts.active, ["true", "false", "all"]),
+        ordering: opts.ordering,
+        expand: opts.expand,
+        include: opts.include
+      };
+      if (opts.all) {
+        const data = await client.listAllProjects(baseOpts);
+        success(data, "sde", "projects", start);
+      } else {
+        const data = await client.listProjects({
+          ...baseOpts,
+          page: parsePage(opts.page, "--page"),
+          pageSize: parsePage(opts.pageSize, "--page-size")
+        });
+        success(data, "sde", "projects", start);
+      }
+    } catch (err) {
+      fail(err, "sde", "projects", start);
+    }
+  });
+  sde.command("project").description("Get a single project by ID").option("--id <id>", "Project ID (or set defaults.sde.project in config)").option("--expand <fields>", "Expand nested fields (comma-separated): application,business_unit,creator").option("--include <fields>", "Include extra fields (comma-separated): task_counts,permissions").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { client, config } = getClient5(program2);
+      const projectId = resolveProject2(config, opts.id);
+      const data = await client.getProject(projectId, opts.expand, opts.include);
+      success(data, "sde", "project", start);
+    } catch (err) {
+      fail(err, "sde", "project", start);
+    }
+  });
+  sde.command("tasks").description("List countermeasures for a project").option("--project <id>", "Project ID (or set defaults.sde.project in config)").option("--phase <slug>", "Filter by phase slug (e.g. development, architecture-design)").option("--priority <n>", "Filter by priority (1-10)").option("--status <id>", "Filter by status ID (e.g. TS1, TS2)").option("--assigned-to <email>", "Filter by assignee email").option("--source <val>", "Filter by source: default, custom, manual, project").option("--verification <val>", "Filter by verification: pass, fail, partial, none").option("--tag <name>", "Filter by tag name").option("--accepted <bool>", "Filter by accepted status: true or false").option("--relevant <bool>", "Filter by relevant status: true or false").option("--expand <fields>", "Expand nested fields (comma-separated): status,phase,problem,text").option("--include <fields>", "Include extra fields (comma-separated): how_tos,last_note,references,regulation_sections").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { client, config } = getClient5(program2);
+      const projectId = resolveProject2(config, opts.project);
+      const baseOpts = {
+        projectId,
+        phase: opts.phase,
+        priority: opts.priority,
+        status: opts.status,
+        assignedTo: opts.assignedTo,
+        source: opts.source,
+        verification: opts.verification,
+        tag: opts.tag,
+        accepted: opts.accepted,
+        relevant: opts.relevant,
+        expand: opts.expand,
+        include: opts.include
+      };
+      if (opts.all) {
+        const data = await client.listAllTasks(baseOpts);
+        success(data, "sde", "tasks", start);
+      } else {
+        const data = await client.listTasks({
+          ...baseOpts,
+          page: parsePage(opts.page, "--page"),
+          pageSize: parsePage(opts.pageSize, "--page-size")
+        });
+        success(data, "sde", "tasks", start);
+      }
+    } catch (err) {
+      fail(err, "sde", "tasks", start);
+    }
+  });
+  sde.command("task").description("Get a single countermeasure").option("--project <id>", "Project ID (or set defaults.sde.project in config)").requiredOption("--task <id>", "Task ID (e.g. T21)").option("--expand <fields>", "Expand nested fields (comma-separated): status,phase,problem,text").option("--include <fields>", "Include extra fields (comma-separated): how_tos,last_note,references").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { client, config } = getClient5(program2);
+      const projectId = resolveProject2(config, opts.project);
+      const data = await client.getTask(projectId, opts.task, opts.expand, opts.include);
+      success(data, "sde", "task", start);
+    } catch (err) {
+      fail(err, "sde", "task", start);
+    }
+  });
+  sde.command("threats").description("List threats for a project").option("--project <id>", "Project ID (or set defaults.sde.project in config)").option("--severity <n>", "Filter by severity (1-10)").option("--search <text>", "Full-text search on title and threat ID").option("--ordering <field>", "Sort by: threat__severity, threat_id, status (prefix - for descending)").option("--capec-id <id>", "Filter by CAPEC attack pattern ID").option("--component-id <id>", "Filter by component ID").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { client, config } = getClient5(program2);
+      const projectId = resolveProject2(config, opts.project);
+      const baseOpts = {
+        projectId,
+        severity: opts.severity,
+        search: opts.search,
+        ordering: opts.ordering,
+        capecId: opts.capecId,
+        componentId: opts.componentId
+      };
+      if (opts.all) {
+        const data = await client.listAllThreats(baseOpts);
+        success(data, "sde", "threats", start);
+      } else {
+        const data = await client.listThreats({
+          ...baseOpts,
+          page: parsePage(opts.page, "--page"),
+          pageSize: parsePage(opts.pageSize, "--page-size")
+        });
+        success(data, "sde", "threats", start);
+      }
+    } catch (err) {
+      fail(err, "sde", "threats", start);
+    }
   });
 }
 
 // src/services/deps/parsers/index.ts
-import fs2 from "fs";
+import fs4 from "fs";
 import path5 from "path";
 import { execSync as execSync4, execFileSync as execFileSync2 } from "child_process";
 
@@ -1997,7 +3028,8 @@ function getRepoFiles(repoRoot) {
   try {
     const out = execSync4("git ls-files --cached --others --exclude-standard", {
       encoding: "utf8",
-      cwd: repoRoot
+      cwd: repoRoot,
+      maxBuffer: 10 * 1024 * 1024
     });
     return out.trim().split("\n").filter(Boolean);
   } catch {
@@ -2006,7 +3038,7 @@ function getRepoFiles(repoRoot) {
 }
 function readFile(repoRoot, relPath) {
   try {
-    return fs2.readFileSync(path5.join(repoRoot, relPath), "utf8");
+    return fs4.readFileSync(path5.join(repoRoot, relPath), "utf8");
   } catch {
     return null;
   }
@@ -2016,7 +3048,8 @@ function readFileAtRef(repoRoot, ref, relPath) {
     return execFileSync2("git", ["show", `${ref}:${relPath}`], {
       encoding: "utf8",
       cwd: repoRoot,
-      stdio: ["pipe", "pipe", "pipe"]
+      stdio: ["pipe", "pipe", "pipe"],
+      maxBuffer: 10 * 1024 * 1024
     });
   } catch {
     return null;
@@ -2076,7 +3109,8 @@ function scanRepoAtRef(repoRoot, ref, opts = {}) {
     const out = execFileSync2("git", ["ls-tree", "-r", "--name-only", ref], {
       encoding: "utf8",
       cwd: repoRoot,
-      stdio: ["pipe", "pipe", "pipe"]
+      stdio: ["pipe", "pipe", "pipe"],
+      maxBuffer: 10 * 1024 * 1024
     });
     files = out.trim().split("\n").filter(Boolean);
   } catch {
@@ -2809,7 +3843,7 @@ function registerDepsCommands(program2) {
 
 // src/services/config/commands.ts
 import { input, password, confirm } from "@inquirer/prompts";
-import fs3 from "fs";
+import fs5 from "fs";
 function registerConfigCommands(program2) {
   const config = program2.command("config").description("Manage pncli configuration");
   config.command("init").description("Interactive setup wizard").option("--repo", "Write repo config (.pncli.json) instead of global config").action(async (opts) => {
@@ -2823,7 +3857,8 @@ function registerConfigCommands(program2) {
     } catch (err) {
       if (err instanceof Error && err.message.includes("User force closed")) {
         process.stderr.write("\nSetup cancelled.\n");
-        process.exit(ExitCode.GENERAL_ERROR);
+        process.exitCode = ExitCode.GENERAL_ERROR;
+        return;
       }
       fail(err, "config", "init", start);
     }
@@ -2847,14 +3882,67 @@ function registerConfigCommands(program2) {
       fail(err, "config", "set", start);
     }
   });
-  config.command("test").description("Test connectivity to configured services").action(() => {
+  config.command("test").description("Test connectivity to configured services").action(async () => {
     const start = Date.now();
-    success(
-      { message: "Service connectivity test available after Phase 2." },
-      "config",
-      "test",
-      start
-    );
+    try {
+      const opts = program2.optsWithGlobals();
+      const cfg = loadConfig({ configPath: opts.config });
+      const http = createHttpClient(cfg);
+      const results = {};
+      if (cfg.jira.baseUrl) {
+        try {
+          await http.jira("/rest/api/2/myself");
+          results.jira = { ok: true, message: "connected" };
+        } catch (err) {
+          results.jira = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.jira = { ok: null, message: "not configured" };
+      }
+      if (cfg.bitbucket.baseUrl) {
+        try {
+          await http.bitbucket("/rest/api/1.0/application-properties");
+          results.bitbucket = { ok: true, message: "connected" };
+        } catch (err) {
+          results.bitbucket = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.bitbucket = { ok: null, message: "not configured" };
+      }
+      if (cfg.confluence.baseUrl) {
+        try {
+          await http.confluence("/rest/api/space", { params: { limit: 1 } });
+          results.confluence = { ok: true, message: "connected" };
+        } catch (err) {
+          results.confluence = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.confluence = { ok: null, message: "not configured" };
+      }
+      if (cfg.sonar.baseUrl) {
+        try {
+          await http.sonar("/api/system/status");
+          results.sonar = { ok: true, message: "connected" };
+        } catch (err) {
+          results.sonar = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.sonar = { ok: null, message: "not configured" };
+      }
+      if (cfg.sde.baseUrl) {
+        try {
+          await http.sde("/api/v2/users/me/");
+          results.sde = { ok: true, message: "connected" };
+        } catch (err) {
+          results.sde = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.sde = { ok: null, message: "not configured" };
+      }
+      success(results, "config", "test", start);
+    } catch (err) {
+      fail(err, "config", "test", start);
+    }
   });
 }
 async function initGlobalConfig(start) {
@@ -2884,6 +3972,14 @@ async function initGlobalConfig(start) {
   const bitbucketPat = await password({
     message: "Bitbucket personal access token:"
   });
+  process.stderr.write("\n\u2500\u2500 Confluence \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const confluenceBaseUrl = await input({
+    message: "Confluence base URL (e.g. https://confluence.your-company.com):",
+    default: ""
+  });
+  const confluenceApiToken = await password({
+    message: "Confluence personal access token:"
+  });
   process.stderr.write("\n\u2500\u2500 Artifactory \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
   const useArtifactory = await confirm({
     message: "Configure Artifactory for dependency commands (deps outdated, deps license-check)?",
@@ -2916,11 +4012,51 @@ async function initGlobalConfig(start) {
       mavenRepo = await input({ message: "  Maven repository name:", default: "libs-release" });
     }
   }
+  process.stderr.write("\n\u2500\u2500 SonarQube \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const useSonar = await confirm({
+    message: "Configure SonarQube Server for code quality checks?",
+    default: false
+  });
+  let sonarBaseUrl = "";
+  let sonarToken = "";
+  if (useSonar) {
+    sonarBaseUrl = await input({
+      message: "SonarQube Server base URL (e.g. https://sonar.your-company.com):",
+      default: ""
+    });
+    sonarToken = await password({
+      message: "SonarQube personal access token:"
+    });
+  }
+  process.stderr.write("\n\u2500\u2500 SDElements \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const useSde = await confirm({
+    message: "Configure SDElements for threat modeling and countermeasure queries?",
+    default: false
+  });
+  let sdeBaseUrl = "";
+  let sdeToken = "";
+  if (useSde) {
+    sdeBaseUrl = await input({
+      message: "SDElements base URL\n  Cloud-hosted: https://your-org.sdelements.com\n  On-premise:   https://sde.your-company.com\n  URL: ",
+      default: ""
+    });
+    sdeToken = await password({
+      message: "SDElements API token:"
+    });
+  }
   process.stderr.write("\n\u2500\u2500 Defaults \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
   const jiraProject = await input({
     message: "Default Jira project key (optional):",
     default: ""
   });
+  const sonarProject = useSonar ? await input({
+    message: "Default SonarQube project key (optional):",
+    default: ""
+  }) : "";
+  const sdeProject = useSde ? await input({
+    message: "Default SDElements project ID (optional, numeric):",
+    default: ""
+  }) : "";
   process.stderr.write("\n");
   const confirmed = await confirm({
     message: "Write config to ~/.pncli/config.json?",
@@ -2928,7 +4064,8 @@ async function initGlobalConfig(start) {
   });
   if (!confirmed) {
     process.stderr.write("Aborted.\n");
-    process.exit(ExitCode.SUCCESS);
+    process.exitCode = ExitCode.SUCCESS;
+    return;
   }
   writeGlobalConfig({
     user: {
@@ -2943,6 +4080,12 @@ async function initGlobalConfig(start) {
       baseUrl: bitbucketBaseUrl || void 0,
       pat: bitbucketPat || void 0
     },
+    ...confluenceBaseUrl || confluenceApiToken ? {
+      confluence: {
+        baseUrl: confluenceBaseUrl || void 0,
+        apiToken: confluenceApiToken || void 0
+      }
+    } : {},
     ...useArtifactory ? {
       artifactory: {
         baseUrl: artifactoryBaseUrl || void 0,
@@ -2952,10 +4095,32 @@ async function initGlobalConfig(start) {
         mavenRepo: mavenRepo || void 0
       }
     } : {},
+    ...useSonar ? {
+      sonar: {
+        baseUrl: sonarBaseUrl || void 0,
+        token: sonarToken || void 0
+      }
+    } : {},
+    ...useSde ? {
+      sde: {
+        baseUrl: sdeBaseUrl || void 0,
+        token: sdeToken || void 0
+      }
+    } : {},
     defaults: {
       jira: {
         project: jiraProject || void 0
-      }
+      },
+      ...useSonar && sonarProject ? {
+        sonar: {
+          project: sonarProject || void 0
+        }
+      } : {},
+      ...useSde && sdeProject ? {
+        sde: {
+          project: sdeProject || void 0
+        }
+      } : {}
     }
   });
   const configPath = getGlobalConfigPath();
@@ -2986,16 +4151,18 @@ async function initRepoConfig(start) {
   });
   if (!confirmed) {
     process.stderr.write("Aborted.\n");
-    process.exit(ExitCode.SUCCESS);
+    process.exitCode = ExitCode.SUCCESS;
+    return;
   }
-  if (fs3.existsSync(".pncli.json")) {
+  if (fs5.existsSync(".pncli.json")) {
     const overwrite = await confirm({
       message: ".pncli.json already exists. Overwrite?",
       default: false
     });
     if (!overwrite) {
       process.stderr.write("Aborted.\n");
-      process.exit(ExitCode.SUCCESS);
+      process.exitCode = ExitCode.SUCCESS;
+      return;
     }
   }
   writeRepoConfig({
@@ -3014,6 +4181,9 @@ async function initRepoConfig(start) {
 }
 
 // src/cli.ts
+if (!process.env.PNCLI_VERIFY_TLS) {
+  process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
+}
 var require2 = createRequire(import.meta.url);
 var pkg = require2("../package.json");
 var TAGLINE = "One command does what three meetings couldn't.";
@@ -3036,21 +4206,24 @@ registerJiraCommands(program);
 registerBitbucketCommands(program);
 registerConfluenceCommands(program);
 registerSonarCommands(program);
+registerSdeCommands(program);
 registerDepsCommands(program);
 registerConfigCommands(program);
 program.addHelpText("after", `
 Services:
   git          Local git operations (status, diff, log, branch)
   deps         Dependency scanning, CVE detection, license auditing
-  jira         Jira Data Cloud (coming soon)
-  bitbucket    Bitbucket Server (coming soon)
-  confluence   Confluence (coming soon)
-  sonar        SonarQube (coming soon)
+  jira         Jira Data Cloud
+  bitbucket    Bitbucket Server
+  confluence   Confluence
+  sonar        SonarQube Server (quality gates, issues, metrics, hotspots)
+  sde          SDElements (threat modeling, countermeasures, compliance)
   config       Manage pncli configuration
 `);
 program.parseAsync(process.argv).catch((err) => {
+  if (process.exitCode !== void 0) return;
   process.stderr.write(`Fatal: ${err instanceof Error ? err.message : String(err)}
 `);
-  process.exit(ExitCode.GENERAL_ERROR);
+  process.exitCode = ExitCode.GENERAL_ERROR;
 });
 //# sourceMappingURL=cli.js.map