@kolatts/pncli 1.7.0 → 1.8.0

package/copilot-instructions.md

@@ -4,7 +4,7 @@
 
 ## What is pncli?
 
-pncli is a CLI tool that provides structured JSON access to Jira, Bitbucket, Confluence, SonarQube, SDElements, and local git state. Use it for all interactions with these services. It exists because MCP servers aren't available in this environment — pncli is your agent-friendly shim layer.
+pncli is a CLI tool that provides structured JSON access to Jira, Bitbucket, Confluence, SonarQube, SDElements, Azure DevOps Server, Jenkins, JFrog Artifactory, IBM UrbanCode Deploy, Checkmarx, and local git state. Use it for all interactions with these services. It exists because MCP servers aren't available in this environment — pncli is your agent-friendly shim layer.
 
 ## Important
 
@@ -30,9 +30,7 @@ pncli ships with Claude Code skills — step-by-step workflow guides that agents
 pncli skills install
 ```
 
-This downloads the latest pncli skills from GitHub into `.claude/skills/` and also fetches `copilot-instructions.md` into the repo root. Only pncli-managed skills are replaced — any custom skills you've created in `.claude/skills/` are left untouched.
-
-Use `--skip-instructions` to skip downloading `copilot-instructions.md`.
+This downloads the latest pncli skills from GitHub. Default installs to `.agents/skills/` (GitHub Copilot). For Claude Code, add `--agent claude-code`. For user-scope, add `--scope user`. Only pncli-managed skills are replaced — any custom skills you've added are left untouched.
 
 To see what's installed locally:
 
@@ -42,7 +40,7 @@ pncli skills list
 
 ## Common Workflows
 
-> These workflows are also available as Claude Code skills — run `pncli skills install` to download them into your repo, or copy `.claude/skills/` into `~/.claude/skills/` for global access.
+> These workflows are also available as skills — run `pncli skills install` (Copilot default) or `pncli skills install --agent claude-code` (Claude Code) to download them into your repo. Add `--scope user` for global access.
 
 ### Review a Pull Request
 
@@ -374,7 +372,8 @@ pncli sonar issues
   --resolved <bool>    Filter resolved issues: true or false
   --page <n>           Page number (1-based) (default: "1")
   --page-size <n>      Results per page (max 500) (default: "100")
-  --all                Fetch all pages (ignores --page/--page-size)
+  --all                Fetch all pages (consider --output-file for large
+  results; ignores --page/--page-size)
 
 pncli sonar measures
   --project <key>   SonarQube project key (or set defaults.sonar.project in
@@ -387,7 +386,7 @@ pncli sonar projects
   --query <text>   Search query
   --page <n>       Page number (1-based) (default: "1")
   --page-size <n>  Results per page (default: "100")
-  --all            Fetch all pages
+  --all            Fetch all pages (consider --output-file for large results)
 
 pncli sonar hotspots
   --project <key>      SonarQube project key (or set defaults.sonar.project in
@@ -397,7 +396,8 @@ pncli sonar hotspots
   --branch <name>      Branch name
   --page <n>           Page number (1-based) (default: "1")
   --page-size <n>      Results per page (default: "100")
-  --all                Fetch all pages
+  --all                Fetch all pages (consider --output-file for large
+  results)
 ```
 
 ### Sde
@@ -414,7 +414,8 @@ pncli sde users
   --active <bool>      Filter by active status: true or false
   --page <n>           Page number (1-based) (default: "1")
   --page-size <n>      Results per page (default: "100")
-  --all                Fetch all pages
+  --all                Fetch all pages (consider --output-file for large
+  results)
 
 pncli sde projects
   --name <name>       Filter by project name
@@ -428,7 +429,7 @@ pncli sde projects
   task_counts,permissions
   --page <n>          Page number (1-based) (default: "1")
   --page-size <n>     Results per page (default: "100")
-  --all               Fetch all pages
+  --all               Fetch all pages (consider --output-file for large results)
 
 pncli sde project
   --id <id>           Project ID (or set defaults.sde.project in config)
@@ -455,7 +456,8 @@ pncli sde tasks
   how_tos,last_note,references,regulation_sections
   --page <n>             Page number (1-based) (default: "1")
   --page-size <n>        Results per page (default: "100")
-  --all                  Fetch all pages
+  --all                  Fetch all pages (consider --output-file for large
+  results)
 
 pncli sde task
   --project <id>      Project ID (or set defaults.sde.project in config)
@@ -475,7 +477,8 @@ pncli sde threats
   --component-id <id>  Filter by component ID
   --page <n>           Page number (1-based) (default: "1")
   --page-size <n>      Results per page (default: "100")
-  --all                Fetch all pages
+  --all                Fetch all pages (consider --output-file for large
+  results)
 ```
 
 ### Deps
@@ -530,6 +533,7 @@ pncli config set
 pncli config test
 
 pncli config check
+  --output <format>  Output format: json or table (default: "json")
 ```
 
 ### Ado
@@ -548,16 +552,113 @@ pncli ado repo
 pncli ado pipeline
 ```
 
+### Jenkins
+
+```
+pncli jenkins pipeline
+```
+
+### Artifactory
+
+```
+pncli artifactory ping
+
+pncli artifactory repos
+  --type <type>          Filter by type: local, virtual, remote, federated
+  --package-type <type>  Filter by package type: npm, maven, nuget, docker,
+  pypi, etc.
+
+pncli artifactory artifact-info
+
+pncli artifactory properties-get
+
+pncli artifactory properties-set
+  --recursive  Apply recursively to folder contents (default: false)
+
+pncli artifactory search
+  --repo <name>     Filter by repository key
+  --name <pattern>  Filter by artifact name (supports * and ? wildcards)
+  --path <pattern>  Filter by artifact path (supports * and ? wildcards)
+  --after <date>    Created after this date (ISO 8601, e.g. 2024-01-01)
+  --before <date>   Created before this date (ISO 8601)
+  --limit <n>       Maximum results to return (default: 100) (default: "100")
+  --properties      Include artifact properties in results (default: false)
+
+pncli artifactory builds
+
+pncli artifactory build-runs
+
+pncli artifactory build-info
+```
+
+### Udeploy
+
+```
+pncli udeploy apps
+
+pncli udeploy environments
+
+pncli udeploy components
+
+pncli udeploy versions
+  --component <name>  Component name or ID
+
+pncli udeploy import-version
+  --component <name>  Component name or ID
+  --name <name>       Version name
+  --no-finish         Skip marking the version as finished importing
+
+pncli udeploy run
+  --process <name>            Application process name or ID
+  --component <name>          Component name (repeatable) (default: [])
+  --component-version <name>  Component version (repeatable; positionally paired
+  with --component) (default: [])
+  --snapshot <name>           Snapshot name or ID (alternative to specifying
+  versions)
+  --only-changed              Deploy only changed components (default: false)
+  --wait                      Poll until the process completes (default: false)
+  --timeout <ms>              Max wait time in milliseconds (default: "600000")
+
+pncli udeploy request-status
+  --request-id <id>  Request ID returned by udeploy run
+
+pncli udeploy request-info
+  --request-id <id>  Request ID returned by udeploy run
+```
+
+### Checkmarx
+
+```
+pncli checkmarx project list
+
+pncli checkmarx project get
+  --id <id>  Project ID (required)
+
+pncli checkmarx scan list
+  --project <id>  Filter by project ID
+  --last <n>      Return only the last N scans per project
+
+pncli checkmarx scan get
+  --id <id>  Scan ID (required)
+
+pncli checkmarx scan stats
+  --id <id>  Scan ID (required)
+```
+
 ### Skills
 
 ```
 pncli skills install
-  --target <dir>       Target directory for skills (default: ".claude/skills")
-  --skip-instructions  Skip downloading copilot-instructions.md (always written
-  to repo root)
+  --agent <agent>  Target agent host: github-copilot | claude-code (default:
+  "github-copilot")
+  --scope <scope>  Installation scope: project | user (default: "project")
+  --target <dir>   Override install directory (ignores --agent and --scope)
 
 pncli skills list
-  --target <dir>  Skills directory to scan (default: ".claude/skills")
+  --agent <agent>  Target agent host: github-copilot | claude-code (default:
+  "github-copilot")
+  --scope <scope>  Installation scope: project | user (default: "project")
+  --target <dir>   Override skills directory to scan
 ```
 
 <!-- COMMAND-REFERENCE:END -->
@@ -575,5 +676,6 @@ Always check `ok` before accessing `data`.
 - Use `--dry-run` to preview API calls without executing
 - Use `--verbose` to see full response metadata for debugging
 - Use `--pretty` when running manually for readable output
+- Use `--output-file <path>` to write JSON output to a file instead of stdout — recommended for commands that produce large payloads (search, logs, `--all` pagination) to avoid flooding agent context
 - Pipe output through `jq` for ad-hoc filtering (if available)
 - Defaults from `.pncli.json` are applied automatically — you rarely need to pass `--project`, `--type`, or `--priority` flags for Jira

package/dist/{chunk-HWXXNMGE.js → chunk-QQ7UKWTU.js}

@@ -38,8 +38,10 @@ import fs from "fs";
 import chalk from "chalk";
 var globalOptions = { pretty: false, verbose: false };
 var globalUser = { email: void 0, userId: void 0 };
+var outputFile;
 function setGlobalOptions(opts) {
-  globalOptions = opts;
+  globalOptions = { pretty: opts.pretty, verbose: opts.verbose };
+  outputFile = opts.outputFile;
 }
 function setGlobalUser(user) {
   globalUser = user;
@@ -53,15 +55,29 @@ function buildMeta(service, action, startTime) {
     user: globalUser.email ?? globalUser.userId ? globalUser : void 0
   };
 }
+function writeToFile(filePath, content) {
+  try {
+    fs.writeFileSync(filePath, content, "utf8");
+  } catch (writeErr) {
+    process.stderr.write(
+      `Warning: could not write to output file "${filePath}": ${writeErr.message}
+`
+    );
+    process.exitCode = ExitCode.GENERAL_ERROR;
+  }
+}
 function success(data, service, action, startTime) {
   const envelope = {
     ok: true,
     data,
     meta: buildMeta(service, action, startTime)
   };
-  process.stdout.write(
-    (globalOptions.pretty ? JSON.stringify(envelope, null, 2) : JSON.stringify(envelope)) + "\n"
-  );
+  const out = (globalOptions.pretty ? JSON.stringify(envelope, null, 2) : JSON.stringify(envelope)) + "\n";
+  if (outputFile) {
+    writeToFile(outputFile, out);
+  } else {
+    process.stdout.write(out);
+  }
 }
 function fail(err, service, action, startTime) {
   const errorDetail = {
@@ -78,10 +94,14 @@ function fail(err, service, action, startTime) {
   if (msg) process.stderr.write(msg + "\n");
   const output = (globalOptions.pretty ? JSON.stringify(envelope, null, 2) : JSON.stringify(envelope)) + "\n";
   const exitCode = err instanceof PncliError ? exitCodeFromStatus(err.status) : ExitCode.GENERAL_ERROR;
-  try {
-    fs.writeSync(process.stdout.fd, output);
-  } catch (writeErr) {
-    if (writeErr.code !== "EPIPE") throw writeErr;
+  if (outputFile) {
+    writeToFile(outputFile, output);
+  } else {
+    try {
+      fs.writeSync(process.stdout.fd, output);
+    } catch (writeErr) {
+      if (writeErr.code !== "EPIPE") throw writeErr;
+    }
   }
   process.exitCode = exitCode;
   throw new PncliError(errorDetail.message, errorDetail.status);
@@ -124,6 +144,66 @@ async function buildAdoFetcher(config) {
   });
 }
 
+// src/lib/checkmarxFetch.ts
+var CX_CLIENT_ID = "resource_owner_client";
+var CX_CLIENT_SECRET = "014DF517-39D1-4453-B7B3-9930C563627C";
+var CX_SCOPE = "sast_api offline_access";
+function buildCheckmarxFetcher(config) {
+  const { baseUrl, username, password } = config.checkmarx;
+  if (!baseUrl) throw new PncliError("Checkmarx baseUrl not configured. Run: pncli config init", 1);
+  if (!username) throw new PncliError("Checkmarx username not configured. Run: pncli config init", 1);
+  if (!password) throw new PncliError("Checkmarx password not configured. Run: pncli config init", 1);
+  const resolvedUsername = username;
+  const resolvedPassword = password;
+  const tokenUrl = `${baseUrl.replace(/\/$/, "")}/cxrestapi/auth/identity/connect/token`;
+  let cache = null;
+  async function getToken() {
+    const now = Date.now();
+    if (cache && cache.expiresAt - now > 6e4) {
+      return cache.value;
+    }
+    const body = new URLSearchParams({
+      grant_type: "password",
+      client_id: CX_CLIENT_ID,
+      client_secret: CX_CLIENT_SECRET,
+      scope: CX_SCOPE,
+      username: resolvedUsername,
+      password: resolvedPassword
+    });
+    const response = await fetch(tokenUrl, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: body.toString()
+    });
+    if (!response.ok) {
+      const text = await response.text().catch(() => "");
+      throw new PncliError(
+        `Checkmarx token exchange failed (${response.status}): ${text || response.statusText}`,
+        response.status
+      );
+    }
+    const data = await response.json();
+    if (!data.access_token) {
+      throw new PncliError("Checkmarx token endpoint returned no access_token", response.status);
+    }
+    cache = {
+      value: data.access_token,
+      expiresAt: now + data.expires_in * 1e3
+    };
+    return cache.value;
+  }
+  return async (url, init) => {
+    const token = await getToken();
+    return fetch(url, {
+      ...init,
+      headers: {
+        ...init?.headers,
+        "Authorization": `Bearer ${token}`
+      }
+    });
+  };
+}
+
 // src/lib/http.ts
 function buildUrl(base, path, params) {
   const url = new URL(path, base.endsWith("/") ? base : base + "/");
@@ -207,6 +287,7 @@ var HttpClient = class {
   config;
   dryRun;
   adoFetcher = null;
+  checkmarxFetcher = null;
   constructor(config, dryRun = false) {
     this.config = config;
     this.dryRun = dryRun;
@@ -457,6 +538,172 @@ Headers: ${JSON.stringify(safeHeaders, null, 2)}
     }
     return results;
   }
+  jenkinsHeaders() {
+    const { username, apiToken } = this.config.jenkins;
+    if (!username || !apiToken) throw new PncliError("Jenkins credentials not configured. Run: pncli config init");
+    const creds = Buffer.from(`${username}:${apiToken}`).toString("base64");
+    return {
+      "Authorization": `Basic ${creds}`,
+      "Content-Type": "application/json",
+      "Accept": "application/json",
+      "Connection": "close"
+    };
+  }
+  artifactoryHeaders() {
+    const { token } = this.config.artifactory;
+    if (!token) throw new PncliError("Artifactory credentials not configured. Run: pncli config init");
+    return {
+      "Authorization": `Bearer ${token}`,
+      "Content-Type": "application/json",
+      "Accept": "application/json",
+      "Connection": "close"
+    };
+  }
+  udeployHeaders() {
+    const { pat, username, password } = this.config.udeploy;
+    let encoded;
+    if (username && password) {
+      encoded = Buffer.from(`${username}:${password}`).toString("base64");
+    } else if (username && pat) {
+      encoded = Buffer.from(`${username}:${pat}`).toString("base64");
+    } else if (pat) {
+      encoded = Buffer.from(`PasswordIsAuthToken:${JSON.stringify({ token: pat })}`).toString("base64");
+    } else {
+      throw new PncliError("UDeploy credentials not configured. Run: pncli config init");
+    }
+    return {
+      "Authorization": `Basic ${encoded}`,
+      "Content-Type": "application/json",
+      "Accept": "application/json",
+      "Connection": "close"
+    };
+  }
+  async jenkins(path, opts = {}) {
+    const baseUrl = this.config.jenkins.baseUrl;
+    if (!baseUrl) throw new PncliError("Jenkins baseUrl not configured. Run: pncli config init");
+    const url = buildUrl(baseUrl, path, opts.params);
+    const headers = this.jenkinsHeaders();
+    const init = {
+      method: opts.method ?? "GET",
+      headers,
+      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
+    };
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
+      const msg = `DRY RUN: ${init.method} ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
+` : "");
+      fs2.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    return request(url, init, opts.timeoutMs ?? 3e4);
+  }
+  async jenkinsRaw(path, opts = {}) {
+    const baseUrl = this.config.jenkins.baseUrl;
+    if (!baseUrl) throw new PncliError("Jenkins baseUrl not configured. Run: pncli config init");
+    const url = buildUrl(baseUrl, path, opts.params);
+    const headers = this.jenkinsHeaders();
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
+      const msg = `DRY RUN: ${opts.method ?? "GET"} ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
+` : "");
+      fs2.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    const response = await fetchWithTimeout(url, {
+      method: opts.method ?? "GET",
+      headers,
+      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
+    }, opts.timeoutMs ?? 3e4);
+    if (!response.ok) {
+      let message = `HTTP ${response.status} ${response.statusText}`;
+      try {
+        const parsed = JSON.parse(await response.text());
+        if (parsed.message) message = String(parsed.message);
+      } catch {
+      }
+      throw new PncliError(message, response.status, url);
+    }
+    return { status: response.status, headers: response.headers, text: await response.text() };
+  }
+  async artifactory(path, opts = {}) {
+    const baseUrl = this.config.artifactory.baseUrl;
+    if (!baseUrl) throw new PncliError("Artifactory baseUrl not configured. Run: pncli config init");
+    const url = buildUrl(baseUrl, path, opts.params);
+    const headers = { ...this.artifactoryHeaders(), ...opts.headers };
+    const body = opts.body !== void 0 ? typeof opts.body === "string" ? opts.body : JSON.stringify(opts.body) : void 0;
+    const init = {
+      method: opts.method ?? "GET",
+      headers,
+      body
+    };
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
+      const msg = `DRY RUN: ${init.method} ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+` + (opts.body ? `Body: ${typeof opts.body === "string" ? opts.body : JSON.stringify(opts.body, null, 2)}
+` : "");
+      fs2.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    return request(url, init, opts.timeoutMs ?? 3e4);
+  }
+  async udeploy(path, opts = {}) {
+    const baseUrl = this.config.udeploy.baseUrl;
+    if (!baseUrl) throw new PncliError("UDeploy baseUrl not configured. Run: pncli config init");
+    const url = buildUrl(baseUrl, path, opts.params);
+    const headers = this.udeployHeaders();
+    const init = {
+      method: opts.method ?? "GET",
+      headers,
+      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
+    };
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
+      const msg = `DRY RUN: ${init.method} ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
+` : "");
+      fs2.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    return request(url, init, opts.timeoutMs ?? 3e4);
+  }
+  async artifactoryText(path, opts = {}) {
+    const baseUrl = this.config.artifactory.baseUrl;
+    if (!baseUrl) throw new PncliError("Artifactory baseUrl not configured. Run: pncli config init");
+    const url = buildUrl(baseUrl, path, opts.params);
+    const headers = { ...this.artifactoryHeaders(), Accept: "text/plain", ...opts.headers };
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
+      fs2.writeSync(process.stderr.fd, `DRY RUN: ${opts.method ?? "GET"} ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+`);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    const response = await fetchWithTimeout(url, {
+      method: opts.method ?? "GET",
+      headers
+    }, opts.timeoutMs ?? 3e4);
+    if (!response.ok) {
+      let message = `HTTP ${response.status} ${response.statusText}`;
+      try {
+        const parsed = JSON.parse(await response.text());
+        if (parsed.message) message = String(parsed.message);
+      } catch {
+      }
+      throw new PncliError(message, response.status, url);
+    }
+    return response.text();
+  }
   sonarHeaders() {
     const { token } = this.config.sonar;
     if (!token) throw new PncliError("SonarQube credentials not configured. Run: pncli config init");
@@ -538,6 +785,32 @@ Headers: ${JSON.stringify(safeHeaders, null, 2)}
     }
     return results;
   }
+  getCheckmarxFetcher() {
+    if (!this.checkmarxFetcher) {
+      this.checkmarxFetcher = buildCheckmarxFetcher(this.config);
+    }
+    return this.checkmarxFetcher;
+  }
+  async checkmarx(path, opts = {}) {
+    const baseUrl = this.config.checkmarx.baseUrl;
+    if (!baseUrl) throw new PncliError("Checkmarx baseUrl not configured. Run: pncli config init");
+    const url = buildUrl(baseUrl, path, opts.params);
+    if (this.dryRun) {
+      const msg = `DRY RUN: ${opts.method ?? "GET"} ${url}
+` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
+` : "");
+      fs2.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    const fetcher = this.getCheckmarxFetcher();
+    const init = {
+      method: opts.method ?? "GET",
+      headers: { "Accept": "application/json", "Content-Type": "application/json", ...opts.headers },
+      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
+    };
+    return request(url, init, opts.timeoutMs ?? 3e4, fetcher);
+  }
 };
 function createHttpClient(config, dryRun = false) {
   return new HttpClient(config, dryRun);
@@ -555,4 +828,4 @@ export {
   HttpClient,
   createHttpClient
 };
-//# sourceMappingURL=chunk-HWXXNMGE.js.map
+//# sourceMappingURL=chunk-QQ7UKWTU.js.map