@kolatts/pncli 1.7.0 → 1.9.0

package/dist/cli.js

@@ -7,7 +7,7 @@ import {
   setRepoConfigValue,
   writeGlobalConfig,
   writeRepoConfig
-} from "./chunk-VEHCNGUP.js";
+} from "./chunk-YR6GFJMV.js";
 import {
   ExitCode,
   PncliError,
@@ -18,13 +18,13 @@ import {
   setGlobalUser,
   success,
   warn
-} from "./chunk-HWXXNMGE.js";
+} from "./chunk-QQZJQ5DP.js";
 import {
   AdoCoreClient
-} from "./chunk-KT3XINLJ.js";
+} from "./chunk-VDL32PSG.js";
 
 // src/cli.ts
-import { Command } from "commander";
+import { Command as Command2 } from "commander";
 import { createRequire } from "module";
 
 // src/services/git/client.ts
@@ -771,7 +771,7 @@ function registerJiraCommands(program2) {
       fail(err, "jira", "get-issue", start);
     }
   });
-  jira.command("create-issue").description("Create a Jira issue").option("--project <key>", "Project key").option("--type <type>", "Issue type (Bug, Story, Task, ...)").requiredOption("--summary <text>", "Issue summary").option("--description <text>", "Issue description").option("--priority <name>", "Priority name").option("--assignee <accountId>", "Assignee account ID").option("--labels <labels>", "Comma-separated labels").option("--field <Name=value>", "Custom field value (repeatable)", (val, acc) => [...acc, val], []).action(async (opts) => {
+  jira.command("create-issue").description("Create a Jira issue").option("--project <key>", "Project key").option("--type <type>", "Issue type (Bug, Story, Task, ...)").requiredOption("--summary <text>", "Issue summary").option("--description <text>", "Issue description").option("--priority <name>", "Priority name").option("--assignee <accountId>", "Assignee account ID").option("--labels <labels>", "Comma-separated labels").option("--parent <key>", 'Parent issue key \u2014 creates an "is child of" link after creation').option("--field <Name=value>", "Custom field value (repeatable)", (val, acc) => [...acc, val], []).action(async (opts) => {
     const start = Date.now();
     try {
       const { client, fieldMap } = getClientAndFields(program2);
@@ -784,6 +784,14 @@ function registerJiraCommands(program2) {
       const customFieldValues = parseFieldArgs(opts.field, fieldMap);
       const data = await client.createIssue({ project, issueType, summary: opts.summary, description: opts.description, priority, assignee: opts.assignee, labels, customFieldValues });
       success(data, "jira", "create-issue", start);
+      if (opts.parent) {
+        try {
+          await client.linkIssue({ key: data.key, linkType: "is child of", target: opts.parent });
+        } catch (linkErr) {
+          warn(`Created ${data.key} but failed to link to parent ${opts.parent}: ${linkErr instanceof Error ? linkErr.message : linkErr}`);
+        }
+      }
+      return;
     } catch (err) {
       fail(err, "jira", "create-issue", start);
     }
@@ -847,7 +855,7 @@ function registerJiraCommands(program2) {
       fail(err, "jira", "list-comments", start);
     }
   });
-  jira.command("search").description("Search Jira issues with JQL").requiredOption("--jql <query>", "JQL query string").option("--max-results <n>", "Maximum number of results").action(async (opts) => {
+  jira.command("search").description("Search Jira issues with JQL (consider --output-file for large results)").requiredOption("--jql <query>", "JQL query string").option("--max-results <n>", "Maximum number of results").action(async (opts) => {
     const start = Date.now();
     try {
       const { client, fieldMap, customFields } = getClientAndFields(program2);
@@ -883,7 +891,7 @@ function registerJiraCommands(program2) {
       fail(err, "jira", "link-issue", start);
     }
   });
-  jira.command("fields").description("List custom fields (configured or discovered from Jira API)").option("--discover", "Fetch field metadata from Jira API").option("--custom-only", "Show only custom fields (requires --discover)").action(async (opts) => {
+  jira.command("fields").description("List custom fields (configured or discovered from Jira API) (consider --output-file for large results)").option("--discover", "Fetch field metadata from Jira API").option("--custom-only", "Show only custom fields (requires --discover)").action(async (opts) => {
     const start = Date.now();
     try {
       if (opts.discover) {
@@ -936,7 +944,7 @@ function registerBitbucketCommands(program2) {
   bb.command("list-prs").description("List pull requests").option("--state <state>", "PR state: OPEN|MERGED|DECLINED|ALL", "OPEN").option("--author <username>", "Filter by author username").option("--reviewer <username>", "Filter by reviewer username").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const data = await client.listPRs({ project, repo, state: opts.state, author: opts.author, reviewer: opts.reviewer });
       success(data, "bitbucket", "list-prs", start);
     } catch (err) {
@@ -946,7 +954,7 @@ function registerBitbucketCommands(program2) {
   bb.command("get-pr").description("Get a pull request by ID").requiredOption("--id <pr-id>", "Pull request ID").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const data = await client.getPR(project, repo, parseInt(opts.id, 10));
       success(data, "bitbucket", "get-pr", start);
     } catch (err) {
@@ -956,8 +964,8 @@ function registerBitbucketCommands(program2) {
   bb.command("create-pr").description("Create a pull request").requiredOption("--title <title>", "PR title").requiredOption("--source <branch>", "Source branch").option("--target <branch>", "Target branch (defaults to config)").option("--description <desc>", "PR description").option("--reviewers <users>", "Comma-separated reviewer usernames").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
-      const config = loadConfig({ configPath: program2.optsWithGlobals().config });
+      const { client, project, repo } = getClient2(bb);
+      const config = loadConfig({ configPath: bb.optsWithGlobals().config });
       const target = opts.target ?? config.defaults.bitbucket?.targetBranch ?? "main";
       const reviewers = opts.reviewers ? opts.reviewers.split(",").map((s) => s.trim()) : [];
       const data = await client.createPR({ project, repo, title: opts.title, source: opts.source, target, description: opts.description, reviewers });
@@ -969,7 +977,7 @@ function registerBitbucketCommands(program2) {
   bb.command("update-pr").description("Update a pull request").requiredOption("--id <pr-id>", "Pull request ID").option("--title <title>", "New title").option("--description <desc>", "New description").option("--reviewers <users>", "Comma-separated reviewer usernames").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const prId = parseInt(opts.id, 10);
       const pr = await client.getPR(project, repo, prId);
       const reviewers = opts.reviewers ? opts.reviewers.split(",").map((s) => s.trim()) : void 0;
@@ -982,7 +990,7 @@ function registerBitbucketCommands(program2) {
   bb.command("merge-pr").description("Merge a pull request").requiredOption("--id <pr-id>", "Pull request ID").option("--strategy <strategy>", "Merge strategy: merge|squash|ff").option("--delete-branch", "Delete source branch after merge").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const prId = parseInt(opts.id, 10);
       const pr = await client.getPR(project, repo, prId);
       const data = await client.mergePR({ project, repo, id: prId, version: pr.version, strategy: opts.strategy, deleteBranch: opts.deleteBranch });
@@ -994,7 +1002,7 @@ function registerBitbucketCommands(program2) {
   bb.command("decline-pr").description("Decline a pull request").requiredOption("--id <pr-id>", "Pull request ID").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const prId = parseInt(opts.id, 10);
       const pr = await client.getPR(project, repo, prId);
       const data = await client.declinePR(project, repo, prId, pr.version);
@@ -1006,7 +1014,7 @@ function registerBitbucketCommands(program2) {
   bb.command("list-comments").description("List comments on a pull request (includes threaded replies by default)").requiredOption("--pr <pr-id>", "Pull request ID").option("--no-with-replies", "Exclude replies; return top-level comments only").option("--inline-only", "Return only inline file comments").option("--general-only", "Return only general (non-inline) PR comments").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const data = await client.listComments(project, repo, parseInt(opts.pr, 10), {
         withReplies: opts.withReplies,
         inlineOnly: opts.inlineOnly,
@@ -1020,7 +1028,7 @@ function registerBitbucketCommands(program2) {
   bb.command("add-comment").description("Add a comment to a pull request").requiredOption("--pr <pr-id>", "Pull request ID").requiredOption("--body <text>", "Comment text").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const data = await client.addComment(project, repo, parseInt(opts.pr, 10), opts.body);
       success(data, "bitbucket", "add-comment", start);
     } catch (err) {
@@ -1030,7 +1038,7 @@ function registerBitbucketCommands(program2) {
   bb.command("add-inline-comment").description("Add an inline comment to a file in a pull request").requiredOption("--pr <pr-id>", "Pull request ID").requiredOption("--file <path>", "File path").requiredOption("--line <n>", "Line number").requiredOption("--body <text>", "Comment text").option("--line-type <type>", "Line type: ADDED|REMOVED|CONTEXT", "ADDED").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const data = await client.addInlineComment({
         project,
         repo,
@@ -1048,7 +1056,7 @@ function registerBitbucketCommands(program2) {
   bb.command("reply-comment").description("Reply to a comment on a pull request").requiredOption("--pr <pr-id>", "Pull request ID").requiredOption("--comment-id <id>", "Comment ID to reply to").requiredOption("--body <text>", "Reply text").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const data = await client.replyComment(project, repo, parseInt(opts.pr, 10), parseInt(opts.commentId, 10), opts.body);
       success(data, "bitbucket", "reply-comment", start);
     } catch (err) {
@@ -1058,7 +1066,7 @@ function registerBitbucketCommands(program2) {
   bb.command("resolve-comment").description("Resolve a comment on a pull request").requiredOption("--pr <pr-id>", "Pull request ID").requiredOption("--comment-id <id>", "Comment ID").option("--version <n>", "Comment version", "0").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       await client.resolveComment(project, repo, parseInt(opts.pr, 10), parseInt(opts.commentId, 10), parseInt(opts.version ?? "0", 10));
       success({ resolved: true }, "bitbucket", "resolve-comment", start);
     } catch (err) {
@@ -1068,7 +1076,7 @@ function registerBitbucketCommands(program2) {
   bb.command("delete-comment").description("Delete a comment on a pull request").requiredOption("--pr <pr-id>", "Pull request ID").requiredOption("--comment-id <id>", "Comment ID").option("--version <n>", "Comment version", "0").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       await client.deleteComment(project, repo, parseInt(opts.pr, 10), parseInt(opts.commentId, 10), parseInt(opts.version ?? "0", 10));
       success({ deleted: true }, "bitbucket", "delete-comment", start);
     } catch (err) {
@@ -1078,7 +1086,7 @@ function registerBitbucketCommands(program2) {
   bb.command("diff").description("Get unified diff for a pull request").requiredOption("--pr <pr-id>", "Pull request ID").option("--file <path>", "Limit diff to a specific file").option("--context-lines <n>", "Lines of context around changes").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const contextLines = opts.contextLines ? parseInt(opts.contextLines, 10) : void 0;
       const diff = await client.getDiff(project, repo, parseInt(opts.pr, 10), opts.file, contextLines);
       success({ diff }, "bitbucket", "diff", start);
@@ -1089,7 +1097,7 @@ function registerBitbucketCommands(program2) {
   bb.command("list-files").description("List files changed in a pull request").requiredOption("--pr <pr-id>", "Pull request ID").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const data = await client.listFiles(project, repo, parseInt(opts.pr, 10));
       success(data, "bitbucket", "list-files", start);
     } catch (err) {
@@ -1099,7 +1107,7 @@ function registerBitbucketCommands(program2) {
   bb.command("approve").description("Approve a pull request").requiredOption("--pr <pr-id>", "Pull request ID").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const data = await client.approvePR(project, repo, parseInt(opts.pr, 10));
       success(data, "bitbucket", "approve", start);
     } catch (err) {
@@ -1109,7 +1117,7 @@ function registerBitbucketCommands(program2) {
   bb.command("unapprove").description("Remove approval from a pull request").requiredOption("--pr <pr-id>", "Pull request ID").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const data = await client.unapprovePR(project, repo, parseInt(opts.pr, 10));
       success(data, "bitbucket", "unapprove", start);
     } catch (err) {
@@ -1119,7 +1127,7 @@ function registerBitbucketCommands(program2) {
   bb.command("needs-work").description("Mark a pull request as needs-work").requiredOption("--pr <pr-id>", "Pull request ID").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const data = await client.needsWorkPR(project, repo, parseInt(opts.pr, 10));
       success(data, "bitbucket", "needs-work", start);
     } catch (err) {
@@ -1129,7 +1137,7 @@ function registerBitbucketCommands(program2) {
   bb.command("list-reviewers").description("List reviewers of a pull request").requiredOption("--pr <pr-id>", "Pull request ID").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const data = await client.listReviewers(project, repo, parseInt(opts.pr, 10));
       success(data, "bitbucket", "list-reviewers", start);
     } catch (err) {
@@ -1139,7 +1147,7 @@ function registerBitbucketCommands(program2) {
   bb.command("list-builds").description("List build statuses for a pull request").requiredOption("--pr <pr-id>", "Pull request ID").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, project, repo } = getClient2(program2);
+      const { client, project, repo } = getClient2(bb);
       const data = await client.listBuilds(project, repo, parseInt(opts.pr, 10));
       success(data, "bitbucket", "list-builds", start);
     } catch (err) {
@@ -1149,7 +1157,7 @@ function registerBitbucketCommands(program2) {
   bb.command("get-build-status").description("Get build status for a commit SHA").requiredOption("--commit <sha>", "Commit SHA").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client } = getClient2(program2);
+      const { client } = getClient2(bb);
       const data = await client.getBuildStatus(opts.commit);
       success(data, "bitbucket", "get-build-status", start);
     } catch (err) {
@@ -1336,7 +1344,7 @@ function registerConfluenceCommands(program2) {
       fail(err, "confluence", "get-page-by-title", start);
     }
   });
-  confluence.command("list-pages").description("List pages in a Confluence space").requiredOption("--space <key>", "Space key").option("--limit <n>", "Max results per page (default: all)").option("--start <n>", "Offset for first result").action(async (opts) => {
+  confluence.command("list-pages").description("List pages in a Confluence space (consider --output-file for large results)").requiredOption("--space <key>", "Space key").option("--limit <n>", "Max results per page (default: all)").option("--start <n>", "Offset for first result").action(async (opts) => {
     const start = Date.now();
     try {
       const client = getClient3(program2);
@@ -1631,7 +1639,7 @@ function registerSonarCommands(program2) {
       fail(err, "sonar", "quality-gate", start);
     }
   });
-  sonar.command("issues").description("Search/list issues for a project").option("--project <key>", "SonarQube project key (or set defaults.sonar.project in config)").option("--severities <list>", "Filter by severity: BLOCKER,CRITICAL,MAJOR,MINOR,INFO (comma-separated)").option("--types <list>", "Filter by type: BUG,VULNERABILITY,CODE_SMELL (comma-separated)").option("--statuses <list>", "Filter by status: OPEN,CONFIRMED,REOPENED,RESOLVED,CLOSED (comma-separated)").option("--branch <name>", "Branch name").option("--resolved <bool>", "Filter resolved issues: true or false").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page (max 500)", "100").option("--all", "Fetch all pages (ignores --page/--page-size)").action(async (opts) => {
+  sonar.command("issues").description("Search/list issues for a project").option("--project <key>", "SonarQube project key (or set defaults.sonar.project in config)").option("--severities <list>", "Filter by severity: BLOCKER,CRITICAL,MAJOR,MINOR,INFO (comma-separated)").option("--types <list>", "Filter by type: BUG,VULNERABILITY,CODE_SMELL (comma-separated)").option("--statuses <list>", "Filter by status: OPEN,CONFIRMED,REOPENED,RESOLVED,CLOSED (comma-separated)").option("--branch <name>", "Branch name").option("--resolved <bool>", "Filter resolved issues: true or false").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page (max 500)", "100").option("--all", "Fetch all pages (consider --output-file for large results; ignores --page/--page-size)").action(async (opts) => {
     const start = Date.now();
     try {
       const { client, config } = getClient4(program2);
@@ -1674,7 +1682,7 @@ function registerSonarCommands(program2) {
       fail(err, "sonar", "measures", start);
     }
   });
-  sonar.command("projects").description("Search/list projects").option("--query <text>", "Search query").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages").action(async (opts) => {
+  sonar.command("projects").description("Search/list projects").option("--query <text>", "Search query").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages (consider --output-file for large results)").action(async (opts) => {
     const start = Date.now();
     try {
       const { client } = getClient4(program2);
@@ -1693,7 +1701,7 @@ function registerSonarCommands(program2) {
       fail(err, "sonar", "projects", start);
     }
   });
-  sonar.command("hotspots").description("List security hotspots for a project").option("--project <key>", "SonarQube project key (or set defaults.sonar.project in config)").option("--status <status>", "Filter: TO_REVIEW or REVIEWED").option("--resolution <list>", "Filter: FIXED,SAFE,ACKNOWLEDGED (comma-separated)").option("--branch <name>", "Branch name").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages").action(async (opts) => {
+  sonar.command("hotspots").description("List security hotspots for a project").option("--project <key>", "SonarQube project key (or set defaults.sonar.project in config)").option("--status <status>", "Filter: TO_REVIEW or REVIEWED").option("--resolution <list>", "Filter: FIXED,SAFE,ACKNOWLEDGED (comma-separated)").option("--branch <name>", "Branch name").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages (consider --output-file for large results)").action(async (opts) => {
     const start = Date.now();
     try {
       const { client, config } = getClient4(program2);
@@ -1901,7 +1909,7 @@ function registerSdeCommands(program2) {
       fail(err, "sde", "whoami", start);
     }
   });
-  sde.command("users").description("List users").option("--email <email>", "Filter by email address").option("--first-name <name>", "Filter by first name").option("--last-name <name>", "Filter by last name").option("--active <bool>", "Filter by active status: true or false").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages").action(async (opts) => {
+  sde.command("users").description("List users").option("--email <email>", "Filter by email address").option("--first-name <name>", "Filter by first name").option("--last-name <name>", "Filter by last name").option("--active <bool>", "Filter by active status: true or false").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages (consider --output-file for large results)").action(async (opts) => {
     const start = Date.now();
     try {
       const { client } = getClient5(program2);
@@ -1926,7 +1934,7 @@ function registerSdeCommands(program2) {
       fail(err, "sde", "users", start);
     }
   });
-  sde.command("projects").description("List projects").option("--name <name>", "Filter by project name").option("--search <text>", "Text search on name and profile").option("--active <val>", "Filter by active status: true, false, or all").option("--ordering <field>", "Sort by: name, created, updated (prefix with - for descending)").option("--expand <fields>", "Expand nested fields (comma-separated): application,business_unit,creator").option("--include <fields>", "Include extra fields (comma-separated): task_counts,permissions").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages").action(async (opts) => {
+  sde.command("projects").description("List projects").option("--name <name>", "Filter by project name").option("--search <text>", "Text search on name and profile").option("--active <val>", "Filter by active status: true, false, or all").option("--ordering <field>", "Sort by: name, created, updated (prefix with - for descending)").option("--expand <fields>", "Expand nested fields (comma-separated): application,business_unit,creator").option("--include <fields>", "Include extra fields (comma-separated): task_counts,permissions").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages (consider --output-file for large results)").action(async (opts) => {
     const start = Date.now();
     try {
       const { client } = getClient5(program2);
@@ -1964,7 +1972,7 @@ function registerSdeCommands(program2) {
       fail(err, "sde", "project", start);
     }
   });
-  sde.command("tasks").description("List countermeasures for a project").option("--project <id>", "Project ID (or set defaults.sde.project in config)").option("--phase <slug>", "Filter by phase slug (e.g. development, architecture-design)").option("--priority <n>", "Filter by priority (1-10)").option("--status <id>", "Filter by status ID (e.g. TS1, TS2)").option("--assigned-to <email>", "Filter by assignee email").option("--source <val>", "Filter by source: default, custom, manual, project").option("--verification <val>", "Filter by verification: pass, fail, partial, none").option("--tag <name>", "Filter by tag name").option("--accepted <bool>", "Filter by accepted status: true or false").option("--relevant <bool>", "Filter by relevant status: true or false").option("--expand <fields>", "Expand nested fields (comma-separated): status,phase,problem,text").option("--include <fields>", "Include extra fields (comma-separated): how_tos,last_note,references,regulation_sections").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages").action(async (opts) => {
+  sde.command("tasks").description("List countermeasures for a project").option("--project <id>", "Project ID (or set defaults.sde.project in config)").option("--phase <slug>", "Filter by phase slug (e.g. development, architecture-design)").option("--priority <n>", "Filter by priority (1-10)").option("--status <id>", "Filter by status ID (e.g. TS1, TS2)").option("--assigned-to <email>", "Filter by assignee email").option("--source <val>", "Filter by source: default, custom, manual, project").option("--verification <val>", "Filter by verification: pass, fail, partial, none").option("--tag <name>", "Filter by tag name").option("--accepted <bool>", "Filter by accepted status: true or false").option("--relevant <bool>", "Filter by relevant status: true or false").option("--expand <fields>", "Expand nested fields (comma-separated): status,phase,problem,text").option("--include <fields>", "Include extra fields (comma-separated): how_tos,last_note,references,regulation_sections").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages (consider --output-file for large results)").action(async (opts) => {
     const start = Date.now();
     try {
       const { client, config } = getClient5(program2);
@@ -2009,7 +2017,7 @@ function registerSdeCommands(program2) {
       fail(err, "sde", "task", start);
     }
   });
-  sde.command("threats").description("List threats for a project").option("--project <id>", "Project ID (or set defaults.sde.project in config)").option("--severity <n>", "Filter by severity (1-10)").option("--search <text>", "Full-text search on title and threat ID").option("--ordering <field>", "Sort by: threat__severity, threat_id, status (prefix - for descending)").option("--capec-id <id>", "Filter by CAPEC attack pattern ID").option("--component-id <id>", "Filter by component ID").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages").action(async (opts) => {
+  sde.command("threats").description("List threats for a project").option("--project <id>", "Project ID (or set defaults.sde.project in config)").option("--severity <n>", "Filter by severity (1-10)").option("--search <text>", "Full-text search on title and threat ID").option("--ordering <field>", "Sort by: threat__severity, threat_id, status (prefix - for descending)").option("--capec-id <id>", "Filter by CAPEC attack pattern ID").option("--component-id <id>", "Filter by component ID").option("--page <n>", "Page number (1-based)", "1").option("--page-size <n>", "Results per page", "100").option("--all", "Fetch all pages (consider --output-file for large results)").action(async (opts) => {
     const start = Date.now();
     try {
       const { client, config } = getClient5(program2);
@@ -2039,6 +2047,9 @@ function registerSdeCommands(program2) {
   });
 }
 
+// src/services/deps/commands.ts
+import { Option } from "commander";
+
 // src/services/deps/parsers/index.ts
 import fs from "fs";
 import path4 from "path";
@@ -2893,11 +2904,128 @@ async function checkPackagesForVulns(packages) {
   return allVulnerable;
 }
 
-// src/services/deps/clients/artifactory.ts
-var TIMEOUT_MS2 = 15e3;
-async function fetchWithTimeout2(url, token) {
+// src/services/deps/clients/sonatype.ts
+var SONATYPE_URL = "https://ossindex.sonatype.org";
+var BATCH_SIZE2 = 128;
+var TIMEOUT_MS2 = 3e4;
+async function fetchWithTimeout2(url, init) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), TIMEOUT_MS2);
+  try {
+    return await fetch(url, { ...init, signal: controller.signal });
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function toPurl(pkg2) {
+  switch (pkg2.ecosystem) {
+    case "npm": {
+      const encodedName = pkg2.name.startsWith("@") ? pkg2.name.replace("@", "%40") : pkg2.name;
+      return `pkg:npm/${encodedName}@${pkg2.version}`;
+    }
+    case "nuget":
+      return `pkg:nuget/${pkg2.name}@${pkg2.version}`;
+    case "maven": {
+      const colonIdx = pkg2.name.indexOf(":");
+      if (colonIdx !== -1) {
+        const groupId = pkg2.name.slice(0, colonIdx);
+        const artifactId = pkg2.name.slice(colonIdx + 1);
+        return `pkg:maven/${encodeURIComponent(groupId)}/${encodeURIComponent(artifactId)}@${pkg2.version}`;
+      }
+      return `pkg:maven/${encodeURIComponent(pkg2.name)}@${pkg2.version}`;
+    }
+    default:
+      return `pkg:generic/${encodeURIComponent(pkg2.name)}@${pkg2.version}`;
+  }
+}
+function inferSeverityFromCvss2(score) {
+  if (score >= 9) return "CRITICAL";
+  if (score >= 7) return "HIGH";
+  if (score >= 4) return "MEDIUM";
+  if (score > 0) return "LOW";
+  return "UNKNOWN";
+}
+function mapSonatypeVuln(v, pkg2) {
+  const refs = [v.reference, ...v.externalReferences ?? []].filter(Boolean);
+  const advice = `See ${v.reference} for remediation details for ${pkg2.name}@${pkg2.version}.`;
+  const cvePattern = /CVE-\d{4}-\d+/gi;
+  const searchText = [v.displayName, v.title, v.description].filter(Boolean).join(" ");
+  const aliases = [...new Set([...searchText.matchAll(cvePattern)].map((m) => m[0].toUpperCase()))];
+  return {
+    id: v.displayName || v.id,
+    summary: v.title || v.description,
+    severity: inferSeverityFromCvss2(v.cvssScore),
+    cvss: v.cvssScore > 0 ? v.cvssScore : null,
+    aliases,
+    remediation: {
+      fixAvailable: false,
+      fixedVersions: [],
+      advice
+    },
+    references: refs
+  };
+}
+async function queryBatch2(purls, packages) {
+  const res = await fetchWithTimeout2(`${SONATYPE_URL}/api/v3/component-report`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json", Accept: "application/json" },
+    body: JSON.stringify({ coordinates: purls })
+  });
+  if (res.status === 429) {
+    throw new Error(
+      "Sonatype OSS Index is rate-limiting requests from this IP. Create a free account at ossindex.sonatype.org and add your credentials to your pncli config to raise the limit."
+    );
+  }
+  if (!res.ok) {
+    throw new Error(`Sonatype OSS Index returned HTTP ${res.status}`);
+  }
+  const reports = await res.json();
+  const vulnerable = [];
+  const purlToPackage = /* @__PURE__ */ new Map();
+  for (let i = 0; i < purls.length; i++) {
+    purlToPackage.set(purls[i], packages[i]);
+  }
+  for (const report of reports) {
+    if (!report?.coordinates) continue;
+    const pkg2 = purlToPackage.get(report.coordinates);
+    if (!pkg2) continue;
+    const vulns = report.vulnerabilities ?? [];
+    if (vulns.length === 0) continue;
+    vulnerable.push({ ...pkg2, vulnerabilities: vulns.map((v) => mapSonatypeVuln(v, pkg2)) });
+  }
+  return vulnerable;
+}
+async function checkSonatypeConnectivity() {
+  try {
+    const res = await fetchWithTimeout2(`${SONATYPE_URL}/api/v3/component-report`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", Accept: "application/json" },
+      body: JSON.stringify({ coordinates: [] })
+    });
+    return { reachable: res.ok || res.status === 400 };
+  } catch (err) {
+    return {
+      reachable: false,
+      error: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
+async function checkPackagesForVulnsViaSonatype(packages) {
+  const allVulnerable = [];
+  for (let i = 0; i < packages.length; i += BATCH_SIZE2) {
+    const chunk = packages.slice(i, i + BATCH_SIZE2);
+    const purls = chunk.map(toPurl);
+    const results = await queryBatch2(purls, chunk);
+    allVulnerable.push(...results);
+  }
+  return allVulnerable;
+}
+
+// src/services/deps/clients/artifactory.ts
+var TIMEOUT_MS3 = 15e3;
+async function fetchWithTimeout3(url, token) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), TIMEOUT_MS3);
   try {
     return await fetch(url, {
       headers: { Authorization: `Bearer ${token}` },
@@ -2933,7 +3061,7 @@ async function checkArtifactoryConnectivity(config) {
     };
   }
   try {
-    const res = await fetchWithTimeout2(`${config.baseUrl}/api/system/ping`, config.token);
+    const res = await fetchWithTimeout3(`${config.baseUrl}/api/system/ping`, config.token);
     if (res.status === 401 || res.status === 403) {
       return {
         reachable: true,
@@ -2983,7 +3111,7 @@ function repoForEcosystem(config, eco) {
 async function getLatestNpm(baseUrl, token, repoName, packageName) {
   try {
     const encoded = packageName.startsWith("@") ? packageName.replace("/", "%2F") : packageName;
-    const res = await fetchWithTimeout2(`${baseUrl}/api/npm/${repoName}/${encoded}`, token);
+    const res = await fetchWithTimeout3(`${baseUrl}/api/npm/${repoName}/${encoded}`, token);
     if (!res.ok) return null;
     const data = await res.json();
     return data["dist-tags"]?.latest ?? null;
@@ -2994,7 +3122,7 @@ async function getLatestNpm(baseUrl, token, repoName, packageName) {
 async function getLatestNuget(baseUrl, token, repoName, packageName) {
   try {
     const lower = packageName.toLowerCase();
-    const res = await fetchWithTimeout2(
+    const res = await fetchWithTimeout3(
       `${baseUrl}/api/nuget/v3/${repoName}/flatcontainer/${lower}/index.json`,
       token
     );
@@ -3010,7 +3138,7 @@ async function getLatestMaven(baseUrl, token, repoName, packageName) {
   const [groupId, artifactId] = packageName.split(":");
   if (!groupId || !artifactId) return null;
   try {
-    const res = await fetchWithTimeout2(
+    const res = await fetchWithTimeout3(
       `${baseUrl}/api/search/latestVersion?g=${encodeURIComponent(groupId)}&a=${encodeURIComponent(artifactId)}&repos=${repoName}`,
       token
     );
@@ -3060,7 +3188,7 @@ async function getOutdatedPackages(packages, config, filterType) {
 async function getLicenseNpm(baseUrl, token, repoName, packageName) {
   try {
     const encoded = packageName.startsWith("@") ? packageName.replace("/", "%2F") : packageName;
-    const res = await fetchWithTimeout2(`${baseUrl}/api/npm/${repoName}/${encoded}`, token);
+    const res = await fetchWithTimeout3(`${baseUrl}/api/npm/${repoName}/${encoded}`, token);
     if (!res.ok) return null;
     const data = await res.json();
     if (typeof data.license === "string") return data.license;
@@ -3073,7 +3201,7 @@ async function getLicenseNpm(baseUrl, token, repoName, packageName) {
 async function getLicenseNuget(baseUrl, token, repoName, packageName, version) {
   try {
     const lower = packageName.toLowerCase();
-    const res = await fetchWithTimeout2(
+    const res = await fetchWithTimeout3(
       `${baseUrl}/api/nuget/v3/${repoName}/registration/${lower}/${version}.json`,
       token
     );
@@ -3125,15 +3253,20 @@ async function detectTier(config) {
   cachedTier = { tier, osvReachable, artifactoryReachable };
   return cachedTier;
 }
+async function checkSonatypeReachable() {
+  const result = await checkSonatypeConnectivity();
+  return result.reachable;
+}
 async function buildConnectivityData(config) {
-  const [osvResult, artResult] = await Promise.all([
+  const [osvResult, artResult, sonatypeResult] = await Promise.all([
     checkOsvConnectivity(),
-    checkArtifactoryConnectivity(config.artifactory)
+    checkArtifactoryConnectivity(config.artifactory),
+    checkSonatypeConnectivity()
   ]);
   const artCfg = config.artifactory;
   let tier = "local";
   if (artResult.reachable && artResult.authenticated) tier = "artifactory";
-  if (osvResult.reachable) tier = "full";
+  if (osvResult.reachable || sonatypeResult.reachable) tier = "full";
   cachedTier = {
     tier,
     osvReachable: osvResult.reachable,
@@ -3156,46 +3289,134 @@ async function buildConnectivityData(config) {
       url: "https://api.osv.dev",
       ...osvResult.error ? { error: osvResult.error } : {}
     },
+    sonatype: {
+      reachable: sonatypeResult.reachable,
+      url: "https://ossindex.sonatype.org",
+      ...sonatypeResult.error ? { error: sonatypeResult.error } : {}
+    },
     tier,
     capabilities: {
       scan: true,
       diff: true,
       outdated: artResult.reachable && artResult.authenticated,
       licenseCheck: artResult.reachable && artResult.authenticated,
-      cveCheck: osvResult.reachable
+      cveCheck: osvResult.reachable || sonatypeResult.reachable
     }
   };
 }
 
 // src/services/deps/frisk.ts
-async function runFrisk(config, opts) {
+function toErrorMessage(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+async function runFrisk(config, opts, source = "osv") {
   const repoRoot = getRepoRoot();
   if (!repoRoot) {
     throw new PncliError("Not inside a git repository.", 1);
   }
-  const { tier, osvReachable } = await detectTier(config);
-  if (!osvReachable) {
+  const { tier: baseTier, osvReachable } = await detectTier(config);
+  const sonatypeReachable = source !== "osv" ? await checkSonatypeReachable() : false;
+  const tier = sonatypeReachable ? "full" : baseTier;
+  if (source === "osv" && !osvReachable) {
     throw new PncliError(
       "deps frisk requires OSV.dev access but api.osv.dev is not reachable from this machine. Run 'pncli deps connectivity' to diagnose.",
       503
     );
   }
+  if (source === "sonatype" && !sonatypeReachable) {
+    throw new PncliError(
+      "deps frisk --source sonatype requires Sonatype OSS Index access but ossindex.sonatype.org is not reachable from this machine. Run 'pncli deps connectivity' to diagnose.",
+      503
+    );
+  }
+  if (source === "all" && !osvReachable && !sonatypeReachable) {
+    throw new PncliError(
+      "deps frisk requires either OSV.dev or Sonatype OSS Index access, but neither is reachable from this machine. Run 'pncli deps connectivity' to diagnose.",
+      503
+    );
+  }
+  const sourceErrors = [];
+  let sourcesQueried;
+  if (source === "all") {
+    if (!osvReachable) sourceErrors.push({ source: "osv", error: "api.osv.dev is not reachable \u2014 run pncli deps connectivity to diagnose." });
+    if (!sonatypeReachable) sourceErrors.push({ source: "sonatype", error: "ossindex.sonatype.org is not reachable \u2014 run pncli deps connectivity to diagnose." });
+    sourcesQueried = [
+      ...osvReachable ? ["osv"] : [],
+      ...sonatypeReachable ? ["sonatype"] : []
+    ];
+  } else {
+    sourcesQueried = [source];
+  }
   const scanOpts = {
     ...opts,
     includeTransitive: opts.includeTransitive ?? true
   };
   const scan = scanRepo(repoRoot, scanOpts);
   if (scan.packages.length === 0) {
-    return { tier, scanned: 0, vulnerable: 0, packages: [] };
+    return { tier, source, sourcesQueried, sourceErrors, scanned: 0, vulnerable: 0, packages: [] };
+  }
+  let vulnerable;
+  if (source === "sonatype") {
+    vulnerable = await checkPackagesForVulnsViaSonatype(scan.packages);
+  } else if (source === "all") {
+    const [osvSettled, sonatypeSettled] = await Promise.allSettled([
+      osvReachable ? checkPackagesForVulns(scan.packages) : Promise.resolve([]),
+      sonatypeReachable ? checkPackagesForVulnsViaSonatype(scan.packages) : Promise.resolve([])
+    ]);
+    if (osvReachable) {
+      if (osvSettled.status === "rejected") {
+        sourceErrors.push({ source: "osv", error: toErrorMessage(osvSettled.reason) });
+        sourcesQueried = sourcesQueried.filter((s) => s !== "osv");
+      }
+    }
+    if (sonatypeReachable) {
+      if (sonatypeSettled.status === "rejected") {
+        sourceErrors.push({ source: "sonatype", error: toErrorMessage(sonatypeSettled.reason) });
+        sourcesQueried = sourcesQueried.filter((s) => s !== "sonatype");
+      }
+    }
+    if (sourcesQueried.length === 0) {
+      throw new PncliError(
+        "All vulnerability sources failed during scanning. Run 'pncli deps connectivity' to diagnose.",
+        503
+      );
+    }
+    vulnerable = mergeVulnerablePackages(
+      osvSettled.status === "fulfilled" ? osvSettled.value : [],
+      sonatypeSettled.status === "fulfilled" ? sonatypeSettled.value : []
+    );
+  } else {
+    vulnerable = await checkPackagesForVulns(scan.packages);
   }
-  const vulnerable = await checkPackagesForVulns(scan.packages);
   return {
     tier,
+    source,
+    sourcesQueried,
+    sourceErrors,
     scanned: scan.packages.length,
     vulnerable: vulnerable.length,
     packages: vulnerable
   };
 }
+function mergeVulnerablePackages(osvResults, sonatypeResults) {
+  const byKey = /* @__PURE__ */ new Map();
+  for (const pkg2 of osvResults) {
+    const key = `${pkg2.ecosystem}:${pkg2.name}@${pkg2.version}`;
+    byKey.set(key, { ...pkg2 });
+  }
+  for (const pkg2 of sonatypeResults) {
+    const key = `${pkg2.ecosystem}:${pkg2.name}@${pkg2.version}`;
+    const existing = byKey.get(key);
+    if (existing) {
+      const existingIds = new Set(existing.vulnerabilities.map((v) => v.id));
+      const newVulns = pkg2.vulnerabilities.filter((v) => !existingIds.has(v.id));
+      existing.vulnerabilities = [...existing.vulnerabilities, ...newVulns];
+    } else {
+      byKey.set(key, { ...pkg2 });
+    }
+  }
+  return [...byKey.values()];
+}
 
 // src/services/deps/outdated.ts
 async function runOutdated(config, opts, filterType) {
@@ -3270,7 +3491,7 @@ async function runLicenseCheck(config, opts) {
 // src/services/deps/commands.ts
 function registerDepsCommands(program2) {
   const deps = program2.command("deps").description("Dependency scanning, CVE detection, and license auditing");
-  deps.command("frisk").description("Scan all dependencies for CVEs and output remediation paths (requires OSV.dev)").option("--ecosystem <ecosystem>", "Filter to one ecosystem: npm, nuget, maven, all", "all").option("--direct-only", "Only scan direct dependencies (default: include transitive)", false).option("--include-dev", "Include dev/test dependencies", false).action(async (opts, cmd) => {
+  deps.command("frisk").description("Scan all dependencies for CVEs and output remediation paths (requires OSV.dev or Sonatype OSS Index)").option("--ecosystem <ecosystem>", "Filter to one ecosystem: npm, nuget, maven, all", "all").option("--direct-only", "Only scan direct dependencies (default: include transitive)", false).option("--include-dev", "Include dev/test dependencies", false).addOption(new Option("--source <source>", "Vulnerability source").choices(["osv", "sonatype", "all"]).default("osv")).action(async (opts, cmd) => {
     const startTime = Date.now();
     try {
       const globalOpts = cmd.optsWithGlobals();
@@ -3280,7 +3501,7 @@ function registerDepsCommands(program2) {
         includeTransitive: !opts.directOnly,
         includeDev: opts.includeDev
       };
-      const data = await runFrisk(config, scanOpts);
+      const data = await runFrisk(config, scanOpts, opts.source);
       success(data, "deps", "frisk", startTime);
     } catch (err) {
       fail(err, "deps", "frisk", startTime);
@@ -3346,7 +3567,7 @@ function registerDepsCommands(program2) {
       fail(err, "deps", "license-check", startTime);
     }
   });
-  deps.command("connectivity").description("Test network access to Artifactory and OSV.dev, report available tier").action(async (_opts, cmd) => {
+  deps.command("connectivity").description("Test network access to Artifactory, OSV.dev, and Sonatype OSS Index, report available tier").action(async (_opts, cmd) => {
     const startTime = Date.now();
     try {
       const globalOpts = cmd.optsWithGlobals();
@@ -3603,7 +3824,7 @@ function registerConfigCommands(program2) {
       if (cfg.ado.baseUrl) {
         try {
           const collection = cfg.defaults.ado?.collection;
-          const path6 = collection ? `/${encodeURIComponent(collection)}/_apis/connectionData?api-version=7.1` : "/_apis/projectCollections?api-version=7.1";
+          const path6 = collection ? `/${encodeURIComponent(collection)}/_apis/connectionData?api-version=7.1-preview.1` : "/_apis/projectCollections?api-version=7.1";
           await http.ado(path6);
           results.ado = { ok: true, message: "connected" };
         } catch (err) {
@@ -3612,6 +3833,67 @@ function registerConfigCommands(program2) {
       } else {
         results.ado = { ok: null, message: "not configured" };
       }
+      if (cfg.jenkins.baseUrl && cfg.jenkins.username && cfg.jenkins.apiToken) {
+        try {
+          await http.jenkins("/api/json", { params: { tree: "nodeName" } });
+          results.jenkins = { ok: true, message: "connected" };
+        } catch (err) {
+          results.jenkins = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.jenkins = { ok: null, message: "not configured" };
+      }
+      if (cfg.artifactory.baseUrl) {
+        try {
+          await http.artifactoryText("/api/system/ping");
+          results.artifactory = { ok: true, message: "connected" };
+        } catch (err) {
+          results.artifactory = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.artifactory = { ok: null, message: "not configured" };
+      }
+      if (cfg.udeploy.baseUrl && (cfg.udeploy.pat || cfg.udeploy.username && cfg.udeploy.password)) {
+        try {
+          await http.udeploy("/cli/application");
+          results.udeploy = { ok: true, message: "connected" };
+        } catch (err) {
+          results.udeploy = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.udeploy = { ok: null, message: "not configured" };
+      }
+      if (cfg.checkmarx.baseUrl && cfg.checkmarx.username && cfg.checkmarx.password) {
+        try {
+          await http.checkmarx("/cxrestapi/projects");
+          results.checkmarx = { ok: true, message: "connected" };
+        } catch (err) {
+          results.checkmarx = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.checkmarx = { ok: null, message: "not configured" };
+      }
+      const snConfigured = cfg.servicenow.baseUrl && cfg.servicenow.username && (cfg.servicenow.password || cfg.servicenow.apiToken);
+      if (snConfigured) {
+        try {
+          await http.servicenow("/api/now/table/change_request", { params: { sysparm_limit: 1 } });
+          results.servicenow = { ok: true, message: "connected" };
+        } catch (err) {
+          results.servicenow = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.servicenow = { ok: null, message: "not configured" };
+      }
+      if (cfg.contrast.apiKey && cfg.contrast.serviceKey && cfg.contrast.username && cfg.contrast.orgUuid) {
+        try {
+          await http.contrast(`/Contrast/api/ng/${cfg.contrast.orgUuid}/applications`, { params: { limit: 1 } });
+          results.contrast = { ok: true, message: "connected" };
+        } catch (err) {
+          results.contrast = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.contrast = { ok: null, message: "not configured" };
+      }
       success(results, "config", "test", start);
     } catch (err) {
       fail(err, "config", "test", start);
@@ -3705,13 +3987,37 @@ function registerConfigCommands(program2) {
       } else {
         try {
           const collection = cfg.defaults.ado?.collection;
-          const path6 = collection ? `/${encodeURIComponent(collection)}/_apis/connectionData?api-version=7.1` : "/_apis/projectCollections?api-version=7.1";
+          const path6 = collection ? `/${encodeURIComponent(collection)}/_apis/connectionData?api-version=7.1-preview.1` : "/_apis/projectCollections?api-version=7.1";
           await http.ado(path6, { timeoutMs: 1e4 });
           results.ado = { status: "valid", message: "ok" };
         } catch (err) {
           results.ado = categorize2(err);
         }
       }
+      if (!cfg.jenkins.apiToken || !cfg.jenkins.username) {
+        results.jenkins = { status: "blank", message: "not configured" };
+      } else if (!cfg.jenkins.baseUrl) {
+        results.jenkins = { status: "error", message: "baseUrl not configured" };
+      } else {
+        try {
+          await http.jenkins("/api/json", { params: { tree: "nodeName" }, timeoutMs: 1e4 });
+          results.jenkins = { status: "valid", message: "ok" };
+        } catch (err) {
+          results.jenkins = categorize2(err);
+        }
+      }
+      if (!cfg.udeploy.pat && !(cfg.udeploy.username && cfg.udeploy.password)) {
+        results.udeploy = { status: "blank", message: "not configured" };
+      } else if (!cfg.udeploy.baseUrl) {
+        results.udeploy = { status: "error", message: "baseUrl not configured" };
+      } else {
+        try {
+          await http.udeploy("/cli/application", { timeoutMs: 1e4 });
+          results.udeploy = { status: "valid", message: "ok" };
+        } catch (err) {
+          results.udeploy = categorize2(err);
+        }
+      }
       const artResult = await checkArtifactoryConnectivity(cfg.artifactory);
       if (!artResult.configured) {
         results.artifactory = { status: "blank", message: artResult.error ?? "not configured" };
@@ -3722,11 +4028,48 @@ function registerConfigCommands(program2) {
       } else {
         results.artifactory = { status: "valid", message: "ok" };
       }
+      if (!cfg.checkmarx.username || !cfg.checkmarx.password) {
+        results.checkmarx = { status: "blank", message: "not configured" };
+      } else if (!cfg.checkmarx.baseUrl) {
+        results.checkmarx = { status: "error", message: "baseUrl not configured" };
+      } else {
+        try {
+          await http.checkmarx("/cxrestapi/projects", { timeoutMs: 1e4 });
+          results.checkmarx = { status: "valid", message: "ok" };
+        } catch (err) {
+          results.checkmarx = categorize2(err);
+        }
+      }
+      const snCreds = cfg.servicenow.username && (cfg.servicenow.password || cfg.servicenow.apiToken);
+      if (!snCreds) {
+        results.servicenow = { status: "blank", message: "not configured" };
+      } else if (!cfg.servicenow.baseUrl) {
+        results.servicenow = { status: "error", message: "baseUrl not configured" };
+      } else {
+        try {
+          await http.servicenow("/api/now/table/change_request", { params: { sysparm_limit: 1 }, timeoutMs: 1e4 });
+          results.servicenow = { status: "valid", message: "ok" };
+        } catch (err) {
+          results.servicenow = categorize2(err);
+        }
+      }
+      if (!cfg.contrast.apiKey || !cfg.contrast.serviceKey || !cfg.contrast.username) {
+        results.contrast = { status: "blank", message: "not configured" };
+      } else if (!cfg.contrast.orgUuid) {
+        results.contrast = { status: "error", message: "orgUuid not configured" };
+      } else {
+        try {
+          await http.contrast(`/Contrast/api/ng/${cfg.contrast.orgUuid}/applications`, { params: { limit: 1 }, timeoutMs: 1e4 });
+          results.contrast = { status: "valid", message: "ok" };
+        } catch (err) {
+          results.contrast = categorize2(err);
+        }
+      }
       const statuses = Object.values(results).map((r) => r.status);
       if (statuses.includes("invalid")) process.exitCode = ExitCode.AUTH_ERROR;
       else if (statuses.includes("error")) process.exitCode = ExitCode.NETWORK_ERROR;
       if (cmdOpts.output === "table") {
-        const services = ["jira", "bitbucket", "confluence", "sonar", "sde", "ado", "artifactory"];
+        const services = ["jira", "bitbucket", "confluence", "sonar", "sde", "ado", "jenkins", "udeploy", "artifactory", "checkmarx", "servicenow", "contrast"];
         const labelWidth = 14;
         const statusWidth = 9;
         for (const svc of services) {
@@ -3740,7 +4083,7 @@ function registerConfigCommands(program2) {
         process.stdout.write("\n");
       } else {
         if (opts.pretty) {
-          const services = ["jira", "bitbucket", "confluence", "sonar", "sde", "ado", "artifactory"];
+          const services = ["jira", "bitbucket", "confluence", "sonar", "sde", "ado", "jenkins", "udeploy", "artifactory", "checkmarx", "servicenow", "contrast"];
           const labelWidth = 14;
           const statusWidth = 9;
           for (const svc of services) {
@@ -3951,6 +4294,236 @@ async function initGlobalConfig(start) {
       }
     }
   }
+  process.stderr.write("\n\u2500\u2500 Jenkins \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const useJenkins = await confirm({
+    message: "Configure Jenkins Data Center for pipeline operations?",
+    default: false
+  });
+  let jenkinsBaseUrl = "";
+  let jenkinsUsername = "";
+  let jenkinsApiToken = "";
+  if (useJenkins) {
+    jenkinsBaseUrl = await input({
+      message: "Jenkins base URL (e.g. https://jenkins.your-company.com):",
+      default: ""
+    });
+    jenkinsUsername = await input({
+      message: "Jenkins username:",
+      default: ""
+    });
+    jenkinsApiToken = await password({
+      message: "Jenkins API token:"
+    });
+  }
+  process.stderr.write("\n\u2500\u2500 IBM UrbanCode Deploy \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const useUdeploy = await confirm({
+    message: "Configure IBM UrbanCode Deploy for component imports and deployment processes?",
+    default: false
+  });
+  let udeployBaseUrl = "";
+  let udeployPat = "";
+  let udeployUsername = "";
+  let udeployPassword = "";
+  let udeployDefaultApp = "";
+  let udeployDefaultEnv = "";
+  if (useUdeploy) {
+    udeployBaseUrl = await input({
+      message: "UDeploy base URL (e.g. https://ucd.company.com:8443):",
+      default: ""
+    });
+    udeployUsername = await input({
+      message: "UDeploy username (leave blank to use a PAT instead):",
+      default: ""
+    });
+    if (udeployUsername) {
+      udeployPassword = await password({
+        message: "UDeploy password:",
+        validate: (v) => v.length > 0 || "Password cannot be blank"
+      });
+    } else {
+      udeployPat = await password({
+        message: "UDeploy personal access token:"
+      });
+    }
+    udeployDefaultApp = await input({
+      message: "Default application name (optional):",
+      default: ""
+    });
+    udeployDefaultEnv = await input({
+      message: "Default environment name (optional):",
+      default: ""
+    });
+    const hasCredentials = udeployBaseUrl && (udeployPat || udeployUsername && udeployPassword);
+    if (hasCredentials) {
+      process.stderr.write("\n  Verifying connection...\n");
+      try {
+        const tempConfig = {
+          ...loadConfig(),
+          udeploy: {
+            baseUrl: udeployBaseUrl,
+            pat: udeployPat || void 0,
+            username: udeployUsername || void 0,
+            password: udeployPassword || void 0
+          }
+        };
+        const tempHttp = createHttpClient(tempConfig);
+        await tempHttp.udeploy("/cli/application");
+        process.stderr.write("  Connected.\n");
+      } catch (err) {
+        warn(`Could not connect to UDeploy: ${err instanceof Error ? err.message : String(err)}`);
+        warn("Config will be saved anyway. Check your URL and credentials and re-run pncli config init or pncli config test.");
+      }
+    }
+  }
+  process.stderr.write("\n\u2500\u2500 Checkmarx \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const useCheckmarx = await confirm({
+    message: "Configure Checkmarx CxSAST for vulnerability scanning?",
+    default: false
+  });
+  let checkmarxBaseUrl = "";
+  let checkmarxUsername = "";
+  let checkmarxPassword = "";
+  if (useCheckmarx) {
+    checkmarxBaseUrl = await input({
+      message: "Checkmarx base URL (e.g. https://cx.company.com):",
+      default: ""
+    });
+    checkmarxUsername = await input({
+      message: "Checkmarx username:",
+      default: ""
+    });
+    checkmarxPassword = await password({
+      message: "Checkmarx password:",
+      validate: (v) => v.length > 0 || "Password cannot be blank"
+    });
+    if (checkmarxBaseUrl && checkmarxUsername && checkmarxPassword) {
+      process.stderr.write("\n  Verifying connection...\n");
+      try {
+        const tempConfig = {
+          ...loadConfig(),
+          checkmarx: {
+            baseUrl: checkmarxBaseUrl,
+            username: checkmarxUsername,
+            password: checkmarxPassword
+          }
+        };
+        const tempHttp = createHttpClient(tempConfig);
+        await tempHttp.checkmarx("/cxrestapi/projects");
+        process.stderr.write("  Connected.\n");
+      } catch (err) {
+        warn(`Could not connect to Checkmarx: ${err instanceof Error ? err.message : String(err)}`);
+        warn("Config will be saved anyway. Check your URL and credentials and re-run pncli config init or pncli config test.");
+      }
+    }
+  }
+  process.stderr.write("\n\u2500\u2500 ServiceNow \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const useServiceNow = await confirm({
+    message: "Configure ServiceNow for change management?",
+    default: false
+  });
+  let servicenowBaseUrl = "";
+  let servicenowUsername = "";
+  let servicenowPassword = "";
+  let servicenowApiToken = "";
+  if (useServiceNow) {
+    servicenowBaseUrl = await input({
+      message: "ServiceNow instance URL (e.g. https://mycompany.service-now.com):",
+      default: ""
+    });
+    servicenowUsername = await input({
+      message: "ServiceNow username:",
+      default: ""
+    });
+    const snUseToken = await confirm({
+      message: "Authenticate with an API token instead of a password?",
+      default: false
+    });
+    if (snUseToken) {
+      servicenowApiToken = await password({
+        message: "ServiceNow API token:",
+        validate: (v) => v.length > 0 || "Token cannot be blank"
+      });
+    } else {
+      servicenowPassword = await password({
+        message: "ServiceNow password:",
+        validate: (v) => v.length > 0 || "Password cannot be blank"
+      });
+    }
+    const snHasCreds = servicenowBaseUrl && servicenowUsername && (servicenowPassword || servicenowApiToken);
+    if (snHasCreds) {
+      process.stderr.write("\n  Verifying connection...\n");
+      try {
+        const tempConfig = {
+          ...loadConfig(),
+          servicenow: {
+            baseUrl: servicenowBaseUrl,
+            username: servicenowUsername,
+            password: servicenowPassword || void 0,
+            apiToken: servicenowApiToken || void 0
+          }
+        };
+        const tempHttp = createHttpClient(tempConfig);
+        await tempHttp.servicenow("/api/now/table/change_request", { params: { sysparm_limit: 1 } });
+        process.stderr.write("  Connected.\n");
+      } catch (err) {
+        warn(`Could not connect to ServiceNow: ${err instanceof Error ? err.message : String(err)}`);
+        warn("Config will be saved anyway. Check your URL and credentials and re-run pncli config init or pncli config test.");
+      }
+    }
+  }
+  process.stderr.write("\n\u2500\u2500 Contrast IAST \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const useContrast = await confirm({
+    message: "Configure Contrast Security IAST for vulnerability findings?",
+    default: false
+  });
+  let contrastBaseUrl = "";
+  let contrastOrgUuid = "";
+  let contrastUsername = "";
+  let contrastApiKey = "";
+  let contrastServiceKey = "";
+  if (useContrast) {
+    process.stderr.write("  Find your credentials in Contrast under User Settings \u2192 Your Keys.\n");
+    contrastBaseUrl = await input({
+      message: "Contrast base URL (leave blank for cloud: https://app.contrastsecurity.com):",
+      default: ""
+    });
+    contrastOrgUuid = await input({
+      message: "Organization UUID:",
+      default: ""
+    });
+    contrastUsername = await input({
+      message: "Username (email):",
+      default: ""
+    });
+    contrastApiKey = await password({
+      message: "API key:"
+    });
+    contrastServiceKey = await password({
+      message: "Service key:"
+    });
+    const contrastHasCreds = contrastOrgUuid && contrastUsername && contrastApiKey && contrastServiceKey;
+    if (contrastHasCreds) {
+      process.stderr.write("\n  Verifying connection...\n");
+      try {
+        const tempConfig = {
+          ...loadConfig(),
+          contrast: {
+            baseUrl: contrastBaseUrl || void 0,
+            orgUuid: contrastOrgUuid,
+            username: contrastUsername,
+            apiKey: contrastApiKey,
+            serviceKey: contrastServiceKey
+          }
+        };
+        const tempHttp = createHttpClient(tempConfig);
+        await tempHttp.contrast(`/Contrast/api/ng/${contrastOrgUuid}/applications`, { params: { limit: 1 } });
+        process.stderr.write("  Connected.\n");
+      } catch (err) {
+        warn(`Could not connect to Contrast: ${err instanceof Error ? err.message : String(err)}`);
+        warn("Config will be saved anyway. Check your credentials and re-run pncli config init or pncli config test.");
+      }
+    }
+  }
   process.stderr.write("\n\u2500\u2500 Defaults \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
   const jiraProject = await input({
     message: "Default Jira project key (optional):",
@@ -4022,6 +4595,45 @@ async function initGlobalConfig(start) {
         ...adoDiscoveredTypes.length ? { discoveredTypes: adoDiscoveredTypes } : {}
       }
     } : {},
+    ...useJenkins && jenkinsBaseUrl ? {
+      jenkins: {
+        baseUrl: jenkinsBaseUrl,
+        ...jenkinsUsername ? { username: jenkinsUsername } : {},
+        ...jenkinsApiToken ? { apiToken: jenkinsApiToken } : {}
+      }
+    } : {},
+    ...useUdeploy && udeployBaseUrl ? {
+      udeploy: {
+        baseUrl: udeployBaseUrl,
+        ...udeployPat ? { pat: udeployPat } : {},
+        ...udeployUsername ? { username: udeployUsername } : {},
+        ...udeployPassword ? { password: udeployPassword } : {}
+      }
+    } : {},
+    ...useCheckmarx && checkmarxBaseUrl ? {
+      checkmarx: {
+        baseUrl: checkmarxBaseUrl,
+        username: checkmarxUsername || void 0,
+        password: checkmarxPassword || void 0
+      }
+    } : {},
+    ...useServiceNow && servicenowBaseUrl ? {
+      servicenow: {
+        baseUrl: servicenowBaseUrl,
+        username: servicenowUsername || void 0,
+        ...servicenowApiToken ? { apiToken: servicenowApiToken } : {},
+        ...servicenowPassword ? { password: servicenowPassword } : {}
+      }
+    } : {},
+    ...useContrast && contrastOrgUuid ? {
+      contrast: {
+        ...contrastBaseUrl ? { baseUrl: contrastBaseUrl } : {},
+        orgUuid: contrastOrgUuid,
+        username: contrastUsername || void 0,
+        apiKey: contrastApiKey || void 0,
+        serviceKey: contrastServiceKey || void 0
+      }
+    } : {},
     defaults: {
       jira: {
         project: jiraProject || void 0
@@ -4041,6 +4653,12 @@ async function initGlobalConfig(start) {
           collection: adoCollection || void 0,
           project: adoProject || void 0
         }
+      } : {},
+      ...useUdeploy && (udeployDefaultApp || udeployDefaultEnv) ? {
+        udeploy: {
+          application: udeployDefaultApp || void 0,
+          environment: udeployDefaultEnv || void 0
+        }
       } : {}
     }
   });
@@ -4471,7 +5089,7 @@ function registerAdoWorkCommands(ado) {
       fail(err, "ado", "work-get", start);
     }
   });
-  work.command("create").description("Create a work item").requiredOption("--type <type>", "Work item type (e.g. Bug, Task, User Story)").requiredOption("--title <title>", "Work item title").option("--description <text>", "Description").option("--assignee <user>", "Assigned to (display name or email)").option("--priority <n>", "Priority (1-4)").option("--field <name=value>", "Additional field (repeatable)", (v, acc) => {
+  work.command("create").description("Create a work item").requiredOption("--type <type>", "Work item type (e.g. Bug, Task, User Story)").requiredOption("--title <title>", "Work item title").option("--description <text>", "Description").option("--assignee <user>", "Assigned to (display name or email)").option("--priority <n>", "Priority (1-4)").option("--parent <id>", "Parent work item ID \u2014 creates a parent link after creation").option("--field <name=value>", "Additional field (repeatable)", (v, acc) => {
     acc.push(v);
     return acc;
   }, []).action(async (opts) => {
@@ -4493,6 +5111,17 @@ function registerAdoWorkCommands(ado) {
       ];
       const data = await workClient.createWorkItem(collection, project, opts.type, patch);
       success(data, "ado", "work-create", start);
+      if (opts.parent) {
+        try {
+          const baseUrl = config.ado.baseUrl?.replace(/\/$/, "");
+          const targetUrl = `${baseUrl}/${encodeURIComponent(collection)}/_apis/wit/workitems/${opts.parent}`;
+          const linkPatch = [{ op: "add", path: "/relations/-", value: { rel: "System.LinkTypes.Hierarchy-Reverse", url: targetUrl } }];
+          await workClient.updateWorkItem(collection, data.id, linkPatch);
+        } catch (linkErr) {
+          warn(`Created #${data.id} but failed to link to parent ${opts.parent}: ${linkErr instanceof Error ? linkErr.message : linkErr}`);
+        }
+      }
+      return;
     } catch (err) {
       fail(err, "ado", "work-create", start);
     }
@@ -4558,7 +5187,7 @@ function registerAdoWorkCommands(ado) {
       fail(err, "ado", "work-link", start);
     }
   });
-  work.command("search").description("Run a WIQL query").requiredOption("--wiql <query>", "WIQL query string").action(async (opts) => {
+  work.command("search").description("Run a WIQL query (consider --output-file for large results)").requiredOption("--wiql <query>", "WIQL query string").action(async (opts) => {
     const start = Date.now();
     try {
       const { collection, project, workClient } = getAdoContext(ado);
@@ -4617,7 +5246,7 @@ function registerAdoWorkCommands(ado) {
       fail(err, "ado", "work-list-states", start);
     }
   });
-  work.command("fields").description("List work item fields available in the collection").option("--type <type>", "Scope to fields for a specific work item type (e.g. Bug)").option("--custom-only", "Exclude System.* and Microsoft.VSTS.* fields").option("--discover", "Fetch from server (always true for this command)").option("--save", "Save discovered fields and aliases to ~/.pncli/config.json").action(async (opts) => {
+  work.command("fields").description("List work item fields available in the collection (consider --output-file for large results)").option("--type <type>", "Scope to fields for a specific work item type (e.g. Bug)").option("--custom-only", "Exclude System.* and Microsoft.VSTS.* fields").option("--discover", "Fetch from server (always true for this command)").option("--save", "Save discovered fields and aliases to ~/.pncli/config.json").action(async (opts) => {
     const start = Date.now();
     try {
       const { collection, project, workClient } = getAdoContext(ado);
@@ -4868,11 +5497,17 @@ function registerAdoRepoCommands(ado) {
       fail(err, "ado", "repo-list-files", start);
     }
   });
-  repo.command("diff").description("Show files changed in a pull request with change types and commit metadata").requiredOption("--pr <n>", "Pull request ID").action(async (opts) => {
+  repo.command("diff").description("Show files changed in a pull request with change types and commit metadata").requiredOption("--pr <n>", "Pull request ID").option("--path <p>", "Filter diff to a specific file path").action(async (opts) => {
     const start = Date.now();
     try {
       const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
       const data = await gitClient.getPRDiff(collection, project, repo2, parseInt(opts.pr, 10));
+      if (opts.path) {
+        if (opts.path) {
+          const needle = opts.path.startsWith("/") ? opts.path : `/${opts.path}`;
+          data.changes = (data.changes ?? []).filter((c) => c.item.path === needle);
+        }
+      }
       success(data, "ado", "repo-diff", start);
     } catch (err) {
       fail(err, "ado", "repo-diff", start);
@@ -4903,11 +5538,11 @@ function registerAdoRepoCommands(ado) {
       const start = Date.now();
       try {
         const globalOpts = ado.optsWithGlobals();
-        const { loadConfig: lc } = await import("./config-IJ57IIQA.js");
+        const { loadConfig: lc } = await import("./config-3VKBM32K.js");
         const config = lc({ configPath: globalOpts.config });
         const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
-        const { AdoCoreClient: AdoCoreClient2 } = await import("./core-AJYPJ2Z7.js");
-        const { createHttpClient: createHttpClient2 } = await import("./http-FC24JSK7.js");
+        const { AdoCoreClient: AdoCoreClient2 } = await import("./core-SWYVXOQ4.js");
+        const { createHttpClient: createHttpClient2 } = await import("./http-GVHZQCEY.js");
         const http = createHttpClient2(config, Boolean(globalOpts.dryRun));
         const coreClient = new AdoCoreClient2(http);
         const me = await coreClient.getConnectionData(collection);
@@ -5035,7 +5670,7 @@ function registerAdoPipelineCommands(ado) {
       fail(err, "ado", "pipeline-cancel-run", start);
     }
   });
-  pipeline.command("logs").description("List or retrieve build logs").requiredOption("--id <n>", "Build ID").option("--log-id <n>", "Specific log ID (omit to list all logs)").action(async (opts) => {
+  pipeline.command("logs").description("List or retrieve build logs (consider --output-file for large logs)").requiredOption("--id <n>", "Build ID").option("--log-id <n>", "Specific log ID (omit to list all logs)").action(async (opts) => {
     const start = Date.now();
     try {
       const { collection, project, buildClient } = getAdoContext(ado);
@@ -5082,18 +5717,899 @@ function registerAdoCommands(program2) {
   registerAdoPipelineCommands(ado);
 }
 
+// src/services/jenkins/client.ts
+function jobPath(name) {
+  return name.split("/").map(encodeURIComponent).join("/job/");
+}
+var JenkinsClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  async listJobs() {
+    const data = await this.http.jenkins(
+      "/api/json",
+      { params: { tree: "jobs[name,url,color,description,buildable,lastBuild[number,url,result]]" } }
+    );
+    return data.jobs;
+  }
+  async getJob(name) {
+    return this.http.jenkins(
+      `/job/${jobPath(name)}/api/json`,
+      { params: { tree: "name,url,color,description,buildable,nextBuildNumber,inQueue,lastBuild[number,url,result],builds[number,url,result,duration,timestamp,building,displayName]{0,10}" } }
+    );
+  }
+  async triggerBuild(name, params) {
+    const hasParams = params && Object.keys(params).length > 0;
+    const endpoint = hasParams ? `/job/${jobPath(name)}/buildWithParameters` : `/job/${jobPath(name)}/build`;
+    const res = await this.http.jenkinsRaw(endpoint, {
+      method: "POST",
+      params: hasParams ? params : void 0
+    });
+    const location = res.headers.get("Location") ?? "";
+    const match = location.match(/\/queue\/item\/(\d+)\/?$/);
+    if (!match) throw new PncliError("Build queued but Jenkins did not return a Location header \u2014 cannot track queue item");
+    const queueItemId = parseInt(match[1], 10);
+    return { queueItemId };
+  }
+  async getQueueItem(queueItemId) {
+    return this.http.jenkins(`/queue/item/${queueItemId}/api/json`);
+  }
+  async listBuilds(name, top = 25) {
+    const data = await this.http.jenkins(
+      `/job/${jobPath(name)}/api/json`,
+      { params: { tree: `builds[number,url,result,duration,timestamp,building,displayName,fullDisplayName,description,id,queueId]{0,${top}}` } }
+    );
+    return data.builds ?? [];
+  }
+  async getBuild(name, buildNumber) {
+    return this.http.jenkins(
+      `/job/${jobPath(name)}/${buildNumber}/api/json`
+    );
+  }
+  async getConsoleLog(name, buildNumber) {
+    const res = await this.http.jenkinsRaw(
+      `/job/${jobPath(name)}/${buildNumber}/consoleText`,
+      { method: "GET" }
+    );
+    return res.text;
+  }
+};
+
+// src/services/jenkins/commands.ts
+function getClient6(program2) {
+  const opts = program2.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  if (!config.jenkins.baseUrl) throw new PncliError("Jenkins not configured. Run: pncli config init");
+  const http = createHttpClient(config, Boolean(opts.dryRun));
+  return new JenkinsClient(http);
+}
+async function pollQueueItem(client, queueItemId, pollMs, timeoutMs) {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    const item = await client.getQueueItem(queueItemId);
+    if (item.executable?.number !== void 0) return item.executable.number;
+    if (item.why === null && !item.blocked && !item.buildable) {
+      throw new PncliError("Build was cancelled while in queue", 1);
+    }
+    await new Promise((r) => setTimeout(r, pollMs));
+  }
+  throw new PncliError(`Timed out waiting for build to leave queue after ${timeoutMs / 1e3}s`, 1);
+}
+async function pollBuildComplete(client, jobName, buildNumber, pollMs, timeoutMs) {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    const build = await client.getBuild(jobName, buildNumber);
+    if (!build.building) return build;
+    await new Promise((r) => setTimeout(r, pollMs));
+  }
+  throw new PncliError(`Timed out waiting for build #${buildNumber} to complete after ${timeoutMs / 1e3}s`, 1);
+}
+function registerJenkinsCommands(program2) {
+  const jenkins = program2.command("jenkins").description("Jenkins Data Center operations");
+  const pipeline = jenkins.command("pipeline").description("Pipeline (job/build) operations");
+  pipeline.command("list").description("List all jobs on the Jenkins instance").action(async () => {
+    const start = Date.now();
+    try {
+      const client = getClient6(program2);
+      const data = await client.listJobs();
+      success(data, "jenkins", "pipeline-list", start);
+    } catch (err) {
+      fail(err, "jenkins", "pipeline-list", start);
+    }
+  });
+  pipeline.command("get").description("Get details for a specific job").requiredOption("--name <job>", "Job name").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient6(program2);
+      const data = await client.getJob(opts.name);
+      success(data, "jenkins", "pipeline-get", start);
+    } catch (err) {
+      fail(err, "jenkins", "pipeline-get", start);
+    }
+  });
+  pipeline.command("run").description("Trigger a build").requiredOption("--name <job>", "Job name").option("--parameter <k=v>", "Build parameter (repeatable)", (v, acc) => {
+    acc.push(v);
+    return acc;
+  }, []).option("--wait", "Wait for the build to complete before returning").option("--timeout <s>", "Max wait time in seconds per phase (queue-wait and build-wait each get this budget; default 600)", "600").option("--poll <s>", "Poll interval in seconds (default 10)", "10").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient6(program2);
+      for (const p of opts.parameter) {
+        if (!p.includes("=")) throw new PncliError(`Invalid --parameter "${p}". Expected format: key=value`, 1);
+      }
+      const params = opts.parameter.length > 0 ? Object.fromEntries(opts.parameter.map((p) => {
+        const eq = p.indexOf("=");
+        return [p.slice(0, eq), p.slice(eq + 1)];
+      })) : void 0;
+      const { queueItemId } = await client.triggerBuild(opts.name, params);
+      log(`Queued build (queue item #${queueItemId})`);
+      if (!opts.wait) {
+        success({ queueItemId }, "jenkins", "pipeline-run", start);
+        return;
+      }
+      const timeoutSec = parseInt(opts.timeout, 10);
+      const pollSec = parseInt(opts.poll, 10);
+      if (isNaN(timeoutSec) || timeoutSec <= 0) throw new PncliError(`Invalid --timeout "${opts.timeout}". Expected a positive number of seconds.`, 1);
+      if (isNaN(pollSec) || pollSec <= 0) throw new PncliError(`Invalid --poll "${opts.poll}". Expected a positive number of seconds.`, 1);
+      log(`Waiting for build to start (timeout ${timeoutSec}s)...`);
+      const buildNumber = await pollQueueItem(client, queueItemId, pollSec * 1e3, timeoutSec * 1e3);
+      log(`Build #${buildNumber} started \u2014 waiting for completion...`);
+      const build = await pollBuildComplete(client, opts.name, buildNumber, pollSec * 1e3, timeoutSec * 1e3);
+      if (build.result !== null && build.result !== "SUCCESS") {
+        process.exitCode = ExitCode.GENERAL_ERROR;
+      }
+      success(build, "jenkins", "pipeline-run", start);
+    } catch (err) {
+      fail(err, "jenkins", "pipeline-run", start);
+    }
+  });
+  pipeline.command("list-runs").description("List recent builds for a job").requiredOption("--name <job>", "Job name").option("--top <n>", "Maximum number of builds to return (default 25)", "25").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient6(program2);
+      const top = parseInt(opts.top, 10);
+      if (isNaN(top) || top <= 0) throw new PncliError(`Invalid --top "${opts.top}". Expected a positive integer.`, 1);
+      const data = await client.listBuilds(opts.name, top);
+      success(data, "jenkins", "pipeline-list-runs", start);
+    } catch (err) {
+      fail(err, "jenkins", "pipeline-list-runs", start);
+    }
+  });
+  pipeline.command("get-run").description("Get details for a specific build").requiredOption("--name <job>", "Job name").requiredOption("--number <n>", "Build number").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient6(program2);
+      const buildNumber = parseInt(opts.number, 10);
+      if (isNaN(buildNumber)) throw new PncliError(`Invalid --number "${opts.number}". Expected an integer.`, 1);
+      const data = await client.getBuild(opts.name, buildNumber);
+      success(data, "jenkins", "pipeline-get-run", start);
+    } catch (err) {
+      fail(err, "jenkins", "pipeline-get-run", start);
+    }
+  });
+  pipeline.command("logs").description("Fetch console log for a build (consider --output-file for large logs)").requiredOption("--name <job>", "Job name").requiredOption("--number <n>", "Build number").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient6(program2);
+      const buildNumber = parseInt(opts.number, 10);
+      if (isNaN(buildNumber)) throw new PncliError(`Invalid --number "${opts.number}". Expected an integer.`, 1);
+      const text = await client.getConsoleLog(opts.name, buildNumber);
+      success({ log: text }, "jenkins", "pipeline-logs", start);
+    } catch (err) {
+      fail(err, "jenkins", "pipeline-logs", start);
+    }
+  });
+}
+
+// src/services/artifactory/client.ts
+var API9 = "api";
+var ArtifactoryClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  async ping() {
+    return this.http.artifactoryText(`${API9}/system/ping`);
+  }
+  async listRepos(opts = {}) {
+    return this.http.artifactory(`${API9}/repositories`, {
+      params: {
+        type: opts.type,
+        packageType: opts.packageType
+      }
+    });
+  }
+  async getStorageInfo(repo, path6) {
+    const cleanPath = path6.startsWith("/") ? path6.slice(1) : path6;
+    return this.http.artifactory(`${API9}/storage/${repo}/${cleanPath}`);
+  }
+  async getProperties(repo, path6) {
+    const cleanPath = path6.startsWith("/") ? path6.slice(1) : path6;
+    return this.http.artifactory(`${API9}/storage/${repo}/${cleanPath}`, {
+      params: { properties: "" }
+    });
+  }
+  async setProperties(repo, path6, properties, opts = {}) {
+    const cleanPath = path6.startsWith("/") ? path6.slice(1) : path6;
+    const propString = Object.entries(properties).map(([k, v]) => `${k}=${v}`).join(";");
+    await this.http.artifactory(`${API9}/storage/${repo}/${cleanPath}`, {
+      method: "PUT",
+      params: {
+        properties: propString,
+        ...opts.recursive ? { recursive: 1 } : {}
+      }
+    });
+  }
+  async searchAql(opts = {}) {
+    const criteria = [];
+    if (opts.repo) criteria.push(`"repo": {"$eq": "${opts.repo}"}`);
+    if (opts.name) criteria.push(`"name": {"$match": "${opts.name}"}`);
+    if (opts.path) criteria.push(`"path": {"$match": "${opts.path}"}`);
+    if (opts.after) criteria.push(`"created": {"$gt": "${opts.after}"}`);
+    if (opts.before) criteria.push(`"created": {"$lt": "${opts.before}"}`);
+    const findClause = criteria.length > 0 ? `{${criteria.join(",")}}` : "{}";
+    const includeFields = opts.includeProperties ? '.include("repo","path","name","type","size","created","modified","sha256","properties")' : '.include("repo","path","name","type","size","created","modified","sha256")';
+    const sortClause = '.sort({"$desc": ["created"]})';
+    const limitClause = opts.limit ? `.limit(${opts.limit})` : ".limit(100)";
+    const aql = `items.find(${findClause})${includeFields}${sortClause}${limitClause}`;
+    return this.http.artifactory(`${API9}/search/aql`, {
+      method: "POST",
+      body: aql,
+      headers: { "Content-Type": "text/plain" }
+    });
+  }
+  async listBuilds() {
+    return this.http.artifactory(`${API9}/build`);
+  }
+  async listBuildRuns(buildName) {
+    return this.http.artifactory(`${API9}/build/${encodeURIComponent(buildName)}`);
+  }
+  async getBuildInfo(buildName, buildNumber) {
+    return this.http.artifactory(
+      `${API9}/build/${encodeURIComponent(buildName)}/${encodeURIComponent(buildNumber)}`
+    );
+  }
+};
+
+// src/services/artifactory/commands.ts
+function getClient7(program2) {
+  const opts = program2.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  if (!config.artifactory.baseUrl) throw new PncliError("Artifactory not configured. Run: pncli config init");
+  if (!config.artifactory.token) throw new PncliError("Artifactory token not configured. Run: pncli config init");
+  const http = createHttpClient(config, Boolean(opts.dryRun));
+  return new ArtifactoryClient(http);
+}
+function registerArtifactoryCommands(program2) {
+  const art = program2.command("artifactory").description("Artifactory operations");
+  art.command("ping").description("Check Artifactory connectivity and authentication").action(async () => {
+    const start = Date.now();
+    try {
+      const client = getClient7(program2);
+      const data = await client.ping();
+      success(data, "artifactory", "ping", start);
+    } catch (err) {
+      fail(err, "artifactory", "ping", start);
+    }
+  });
+  art.command("repos").description("List repositories").option("--type <type>", "Filter by type: local, virtual, remote, federated").option("--package-type <type>", "Filter by package type: npm, maven, nuget, docker, pypi, etc.").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const client = getClient7(program2);
+      const data = await client.listRepos({ type: opts.type, packageType: opts.packageType });
+      success(data, "artifactory", "repos", start);
+    } catch (err) {
+      fail(err, "artifactory", "repos", start);
+    }
+  });
+  art.command("artifact-info <repo> <path>").description("Get metadata for an artifact or folder (checksums, size, timestamps)").action(async (repo, path6) => {
+    const start = Date.now();
+    try {
+      const client = getClient7(program2);
+      const data = await client.getStorageInfo(repo, path6);
+      success(data, "artifactory", "artifact-info", start);
+    } catch (err) {
+      fail(err, "artifactory", "artifact-info", start);
+    }
+  });
+  art.command("properties-get <repo> <path>").description("Read custom properties on an artifact").action(async (repo, path6) => {
+    const start = Date.now();
+    try {
+      const client = getClient7(program2);
+      const data = await client.getProperties(repo, path6);
+      success(data, "artifactory", "properties-get", start);
+    } catch (err) {
+      fail(err, "artifactory", "properties-get", start);
+    }
+  });
+  art.command("properties-set <repo> <path> [keyvals...]").description("Set custom properties on an artifact (format: key=value key=value...)").option("--recursive", "Apply recursively to folder contents", false).action(async (repo, path6, keyvals, opts) => {
+    const start = Date.now();
+    try {
+      if (!keyvals.length) throw new PncliError("Provide at least one key=value pair");
+      const properties = {};
+      for (const kv of keyvals) {
+        const eq = kv.indexOf("=");
+        if (eq < 1) throw new PncliError(`Invalid property format: "${kv}" \u2014 expected key=value`);
+        properties[kv.slice(0, eq)] = kv.slice(eq + 1);
+      }
+      const client = getClient7(program2);
+      await client.setProperties(repo, path6, properties, { recursive: opts.recursive });
+      success({ repo, path: path6, properties }, "artifactory", "properties-set", start);
+    } catch (err) {
+      fail(err, "artifactory", "properties-set", start);
+    }
+  });
+  art.command("search").description("Search artifacts using AQL (Artifactory Query Language) (consider --output-file for large results)").option("--repo <name>", "Filter by repository key").option("--name <pattern>", "Filter by artifact name (supports * and ? wildcards)").option("--path <pattern>", "Filter by artifact path (supports * and ? wildcards)").option("--after <date>", "Created after this date (ISO 8601, e.g. 2024-01-01)").option("--before <date>", "Created before this date (ISO 8601)").option("--limit <n>", "Maximum results to return (default: 100)", "100").option("--properties", "Include artifact properties in results", false).action(async (opts) => {
+    const start = Date.now();
+    try {
+      if (!opts.repo && !opts.name && !opts.path) {
+        throw new PncliError("Provide at least one filter: --repo, --name, or --path");
+      }
+      const client = getClient7(program2);
+      const data = await client.searchAql({
+        repo: opts.repo,
+        name: opts.name,
+        path: opts.path,
+        after: opts.after,
+        before: opts.before,
+        limit: Number.isNaN(parseInt(opts.limit, 10)) ? 100 : parseInt(opts.limit, 10),
+        includeProperties: opts.properties
+      });
+      success(data, "artifactory", "search", start);
+    } catch (err) {
+      fail(err, "artifactory", "search", start);
+    }
+  });
+  art.command("builds").description("List all build names in Artifactory").action(async () => {
+    const start = Date.now();
+    try {
+      const client = getClient7(program2);
+      const data = await client.listBuilds();
+      success(data, "artifactory", "builds", start);
+    } catch (err) {
+      fail(err, "artifactory", "builds", start);
+    }
+  });
+  art.command("build-runs <name>").description("List all run numbers for a build").action(async (name) => {
+    const start = Date.now();
+    try {
+      const client = getClient7(program2);
+      const data = await client.listBuildRuns(name);
+      success(data, "artifactory", "build-runs", start);
+    } catch (err) {
+      fail(err, "artifactory", "build-runs", start);
+    }
+  });
+  art.command("build-info <name> <number>").description("Get build info (artifacts, dependencies, VCS revision) for a specific run").action(async (name, number) => {
+    const start = Date.now();
+    try {
+      const client = getClient7(program2);
+      const data = await client.getBuildInfo(name, number);
+      success(data, "artifactory", "build-info", start);
+    } catch (err) {
+      fail(err, "artifactory", "build-info", start);
+    }
+  });
+}
+
+// src/services/udeploy/client.ts
+var UdeployClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  listApplications() {
+    return this.http.udeploy("/cli/application");
+  }
+  listEnvironments(application) {
+    return this.http.udeploy("/cli/application/environmentsInApplication", {
+      params: { application }
+    });
+  }
+  listComponents() {
+    return this.http.udeploy("/cli/component");
+  }
+  listVersions(component) {
+    return this.http.udeploy("/cli/component/versions", {
+      params: { component }
+    });
+  }
+  createVersion(component, name) {
+    return this.http.udeploy("/cli/version/createVersion", {
+      method: "POST",
+      params: { component, name }
+    });
+  }
+  finishImporting(component, version) {
+    return this.http.udeploy("/cli/version/finishedImporting", {
+      method: "POST",
+      params: { component, version }
+    });
+  }
+  runProcess(opts) {
+    return this.http.udeploy("/cli/applicationProcessRequest/request", {
+      method: "PUT",
+      body: {
+        application: opts.application,
+        applicationProcess: opts.applicationProcess,
+        environment: opts.environment,
+        onlyChanged: opts.onlyChanged ?? false,
+        ...opts.versions ? { versions: opts.versions } : {},
+        ...opts.snapshot ? { snapshot: opts.snapshot } : {},
+        ...opts.properties ? { properties: opts.properties } : {}
+      }
+    });
+  }
+  getRequestStatus(requestId) {
+    return this.http.udeploy("/cli/applicationProcessRequest/requestStatus", {
+      params: { requestId }
+    });
+  }
+  getRequestInfo(requestId) {
+    return this.http.udeploy("/cli/applicationProcessRequest/requestInfo", {
+      params: { requestId }
+    });
+  }
+};
+
+// src/services/udeploy/commands.ts
+var POLL_INTERVAL_MS = 5e3;
+var DEFAULT_TIMEOUT_MS = 10 * 60 * 1e3;
+function getClient8(program2) {
+  const opts = program2.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  if (!config.udeploy.baseUrl) {
+    throw new PncliError("UDeploy baseUrl not configured. Run: pncli config init", 78);
+  }
+  const http = createHttpClient(config, opts.dryRun);
+  return { client: new UdeployClient(http), config };
+}
+function resolveApplication(config, cliValue) {
+  const app = cliValue ?? config.defaults.udeploy.application;
+  if (!app) throw new PncliError("--application is required (or set defaults.udeploy.application in config)", 2);
+  return app;
+}
+function resolveEnvironment(config, cliValue) {
+  const env = cliValue ?? config.defaults.udeploy.environment;
+  if (!env) throw new PncliError("--environment is required (or set defaults.udeploy.environment in config)", 2);
+  return env;
+}
+function registerUdeployCommands(program2) {
+  const udeploy = program2.command("udeploy").description("IBM UrbanCode Deploy \u2014 component versions and deployment processes").option("--application <name>", "Application name or ID").option("--environment <name>", "Environment name or ID");
+  udeploy.command("apps").description("List all applications").action(async () => {
+    const start = Date.now();
+    try {
+      const { client } = getClient8(program2);
+      const apps = await client.listApplications();
+      success(apps, "udeploy", "apps", start);
+    } catch (err) {
+      fail(err, "udeploy", "apps", start);
+    }
+  });
+  udeploy.command("environments").description("List environments for an application").action(async () => {
+    const start = Date.now();
+    try {
+      const { client, config } = getClient8(program2);
+      const parentOpts = udeploy.opts();
+      const application = resolveApplication(config, parentOpts.application);
+      const envs = await client.listEnvironments(application);
+      success(envs, "udeploy", "environments", start);
+    } catch (err) {
+      fail(err, "udeploy", "environments", start);
+    }
+  });
+  udeploy.command("components").description("List all components").action(async () => {
+    const start = Date.now();
+    try {
+      const { client } = getClient8(program2);
+      const components = await client.listComponents();
+      success(components, "udeploy", "components", start);
+    } catch (err) {
+      fail(err, "udeploy", "components", start);
+    }
+  });
+  udeploy.command("versions").description("List versions for a component").requiredOption("--component <name>", "Component name or ID").action(async (cmdOpts) => {
+    const start = Date.now();
+    try {
+      const { client } = getClient8(program2);
+      const versions = await client.listVersions(cmdOpts.component);
+      success(versions, "udeploy", "versions", start);
+    } catch (err) {
+      fail(err, "udeploy", "versions", start);
+    }
+  });
+  udeploy.command("import-version").description("Create a component version and mark it ready for deployment").requiredOption("--component <name>", "Component name or ID").requiredOption("--name <name>", "Version name").option("--no-finish", "Skip marking the version as finished importing").action(async (cmdOpts) => {
+    const start = Date.now();
+    try {
+      const { client } = getClient8(program2);
+      const created = await client.createVersion(cmdOpts.component, cmdOpts.name);
+      if (cmdOpts.finish) {
+        await client.finishImporting(cmdOpts.component, cmdOpts.name);
+      }
+      success({ ...created, finishedImporting: cmdOpts.finish }, "udeploy", "import-version", start);
+    } catch (err) {
+      fail(err, "udeploy", "import-version", start);
+    }
+  });
+  udeploy.command("run").description("Run an application deployment process").requiredOption("--process <name>", "Application process name or ID").option("--component <name>", "Component name (repeatable)", collect, []).option("--component-version <name>", "Component version (repeatable; positionally paired with --component)", collect, []).option("--snapshot <name>", "Snapshot name or ID (alternative to specifying versions)").option("--only-changed", "Deploy only changed components", false).option("--wait", "Poll until the process completes", false).option("--timeout <ms>", "Max wait time in milliseconds", String(DEFAULT_TIMEOUT_MS)).action(async (cmdOpts) => {
+    const start = Date.now();
+    try {
+      const { client, config } = getClient8(program2);
+      const parentOpts = udeploy.opts();
+      const application = resolveApplication(config, parentOpts.application);
+      const environment = resolveEnvironment(config, parentOpts.environment);
+      const components = cmdOpts.component;
+      const versions = cmdOpts.componentVersion;
+      const versionEntries = components.map((c, i) => ({
+        component: c,
+        version: versions[i] ?? "latest"
+      }));
+      const result = await client.runProcess({
+        application,
+        applicationProcess: cmdOpts.process,
+        environment,
+        onlyChanged: cmdOpts.onlyChanged,
+        ...versionEntries.length > 0 ? { versions: versionEntries } : {},
+        ...cmdOpts.snapshot ? { snapshot: cmdOpts.snapshot } : {}
+      });
+      if (!cmdOpts.wait) {
+        success(result, "udeploy", "run", start);
+        return;
+      }
+      const timeoutMs = parseInt(cmdOpts.timeout, 10);
+      const requestId = result.requestId;
+      log(`Process started. Request ID: ${requestId}. Polling for completion...`);
+      while (true) {
+        const elapsed = Date.now() - start;
+        if (elapsed >= timeoutMs) {
+          throw new PncliError(`Timed out after ${timeoutMs}ms waiting for request ${requestId}`, 1);
+        }
+        await sleep(POLL_INTERVAL_MS);
+        const status = await client.getRequestStatus(requestId);
+        if (status.status === "CLOSED") {
+          const outcome = { requestId, status: status.status, result: status.result, elapsed_ms: Date.now() - start };
+          if (status.result === "SUCCEEDED") {
+            success(outcome, "udeploy", "run", start);
+          } else {
+            throw new PncliError(
+              `Deployment ${status.result ?? "failed"} (requestId: ${requestId})`,
+              1
+            );
+          }
+          return;
+        }
+        log(`Status: ${status.status} (${Math.round((Date.now() - start) / 1e3)}s elapsed)`);
+      }
+    } catch (err) {
+      fail(err, "udeploy", "run", start);
+    }
+  });
+  udeploy.command("request-status").description("Get the current status of a deployment process request").requiredOption("--request-id <id>", "Request ID returned by udeploy run").action(async (cmdOpts) => {
+    const start = Date.now();
+    try {
+      const { client } = getClient8(program2);
+      const status = await client.getRequestStatus(cmdOpts.requestId);
+      success(status, "udeploy", "request-status", start);
+    } catch (err) {
+      fail(err, "udeploy", "request-status", start);
+    }
+  });
+  udeploy.command("request-info").description("Get full details of a deployment process request").requiredOption("--request-id <id>", "Request ID returned by udeploy run").action(async (cmdOpts) => {
+    const start = Date.now();
+    try {
+      const { client } = getClient8(program2);
+      const info = await client.getRequestInfo(cmdOpts.requestId);
+      success(info, "udeploy", "request-info", start);
+    } catch (err) {
+      fail(err, "udeploy", "request-info", start);
+    }
+  });
+}
+function collect(val, prev) {
+  return [...prev, val];
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+// src/services/checkmarx/client.ts
+var CheckmarxClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  async listProjects() {
+    return this.http.checkmarx("/cxrestapi/projects");
+  }
+  async getProject(id) {
+    return this.http.checkmarx(`/cxrestapi/projects/${id}`);
+  }
+  async listScans(opts = {}) {
+    return this.http.checkmarx("/cxrestapi/sast/scans", {
+      params: {
+        projectId: opts.projectId,
+        last: opts.last
+      }
+    });
+  }
+  async getScan(id) {
+    return this.http.checkmarx(`/cxrestapi/sast/scans/${id}`);
+  }
+  async getScanResultsStatistics(scanId) {
+    return this.http.checkmarx(`/cxrestapi/sast/scans/${scanId}/resultsStatistics`);
+  }
+};
+
+// src/services/checkmarx/commands.ts
+function getClient9(program2) {
+  const opts = program2.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  if (!config.checkmarx.baseUrl) throw new PncliError("Checkmarx not configured. Run: pncli config init");
+  const http = createHttpClient(config, Boolean(opts.dryRun));
+  return new CheckmarxClient(http);
+}
+function registerCheckmarxCommands(program2) {
+  const cx = program2.command("checkmarx").description("Checkmarx CxSAST operations");
+  const project = cx.command("project").description("Project operations");
+  const scan = cx.command("scan").description("Scan operations");
+  project.command("list").description("List all projects").action(async () => {
+    const start = Date.now();
+    try {
+      const data = await getClient9(program2).listProjects();
+      success(data, "checkmarx", "project-list", start);
+    } catch (err) {
+      fail(err, "checkmarx", "project-list", start);
+    }
+  });
+  project.command("get").description("Get a project by ID").requiredOption("--id <id>", "Project ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const id = parseInt(opts.id, 10);
+      if (isNaN(id)) throw new PncliError(`Invalid --id "${opts.id}". Expected an integer.`, 1);
+      const data = await getClient9(program2).getProject(id);
+      success(data, "checkmarx", "project-get", start);
+    } catch (err) {
+      fail(err, "checkmarx", "project-get", start);
+    }
+  });
+  scan.command("list").description("List scans").option("--project <id>", "Filter by project ID").option("--last <n>", "Return only the last N scans per project").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const projectId = opts.project ? parseInt(opts.project, 10) : void 0;
+      const last = opts.last ? parseInt(opts.last, 10) : void 0;
+      if (opts.project && isNaN(projectId)) throw new PncliError(`Invalid --project "${opts.project}". Expected an integer.`, 1);
+      if (opts.last && isNaN(last)) throw new PncliError(`Invalid --last "${opts.last}". Expected an integer.`, 1);
+      const data = await getClient9(program2).listScans({ projectId, last });
+      success(data, "checkmarx", "scan-list", start);
+    } catch (err) {
+      fail(err, "checkmarx", "scan-list", start);
+    }
+  });
+  scan.command("get").description("Get a scan by ID").requiredOption("--id <id>", "Scan ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const id = parseInt(opts.id, 10);
+      if (isNaN(id)) throw new PncliError(`Invalid --id "${opts.id}". Expected an integer.`, 1);
+      const data = await getClient9(program2).getScan(id);
+      success(data, "checkmarx", "scan-get", start);
+    } catch (err) {
+      fail(err, "checkmarx", "scan-get", start);
+    }
+  });
+  scan.command("stats").description("Get results statistics for a scan").requiredOption("--id <id>", "Scan ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const id = parseInt(opts.id, 10);
+      if (isNaN(id)) throw new PncliError(`Invalid --id "${opts.id}". Expected an integer.`, 1);
+      const data = await getClient9(program2).getScanResultsStatistics(id);
+      success(data, "checkmarx", "scan-stats", start);
+    } catch (err) {
+      fail(err, "checkmarx", "scan-stats", start);
+    }
+  });
+}
+
+// src/services/servicenow/commands.ts
+function getHttp(program2) {
+  const opts = program2.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  if (!config.servicenow.baseUrl) throw new PncliError("ServiceNow not configured. Run: pncli config init");
+  return createHttpClient(config, Boolean(opts.dryRun));
+}
+function registerServiceNowCommands(program2) {
+  const sn = program2.command("servicenow").description("ServiceNow operations");
+  const change = sn.command("change").description("Change request operations");
+  change.command("list").description("List change requests").option("--state <state>", "Filter by state (e.g. -1=Pending, 1=Open, 2=Work in Progress, 3=Closed Complete)").option("--assigned-to <user>", "Filter by assigned user sys_id or display name").option("--limit <n>", "Maximum number of results", "25").option("--fields <fields>", "Comma-separated field names to return").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp(program2);
+      const params = {
+        sysparm_limit: opts.limit ? parseInt(opts.limit, 10) : 25,
+        sysparm_display_value: "true"
+      };
+      const sanitize = (v) => v.replace(/\^/g, "");
+      const queries = [];
+      if (opts.state !== void 0) queries.push(`state=${sanitize(opts.state)}`);
+      if (opts.assignedTo) queries.push(`assigned_to=${sanitize(opts.assignedTo)}`);
+      if (queries.length) params["sysparm_query"] = queries.join("^");
+      if (opts.fields) params["sysparm_fields"] = opts.fields;
+      const data = await http.servicenow("/api/now/table/change_request", { params });
+      success(data.result, "servicenow", "change list", start);
+    } catch (err) {
+      fail(err, "servicenow", "change list", start);
+    }
+  });
+  change.command("get").description("Get a change request by sys_id or number").requiredOption("--id <id>", "Change request sys_id or number (e.g. CHG0001234)").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp(program2);
+      if (opts.id.toUpperCase().startsWith("CHG")) {
+        const list = await http.servicenow("/api/now/table/change_request", {
+          params: { sysparm_query: `number=${opts.id}`, sysparm_display_value: "true", sysparm_limit: 1 }
+        });
+        if (!list.result.length) throw new PncliError(`Change request not found: ${opts.id}`, 1);
+        success(list.result[0], "servicenow", "change get", start);
+        return;
+      }
+      const data = await http.servicenow(`/api/now/table/change_request/${opts.id}`, {
+        params: { sysparm_display_value: "true" }
+      });
+      success(data.result, "servicenow", "change get", start);
+    } catch (err) {
+      fail(err, "servicenow", "change get", start);
+    }
+  });
+  change.command("create").description("Create a change request").requiredOption("--short-description <text>", "Short description (title)").option("--description <text>", "Full description").option("--type <type>", "Change type: normal, standard, or emergency", "normal").option("--priority <n>", "Priority: 1=Critical, 2=High, 3=Moderate, 4=Low").option("--assigned-to <user>", "Assigned user sys_id").option("--assignment-group <group>", "Assignment group sys_id").option("--start-date <datetime>", "Planned start date (yyyy-MM-dd HH:mm:ss)").option("--end-date <datetime>", "Planned end date (yyyy-MM-dd HH:mm:ss)").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp(program2);
+      const body = {
+        short_description: opts.shortDescription,
+        type: opts.type ?? "normal"
+      };
+      if (opts.description) body["description"] = opts.description;
+      if (opts.priority) body["priority"] = opts.priority;
+      if (opts.assignedTo) body["assigned_to"] = opts.assignedTo;
+      if (opts.assignmentGroup) body["assignment_group"] = opts.assignmentGroup;
+      if (opts.startDate) body["start_date"] = opts.startDate;
+      if (opts.endDate) body["end_date"] = opts.endDate;
+      const data = await http.servicenow("/api/now/table/change_request", {
+        method: "POST",
+        body
+      });
+      success(data.result, "servicenow", "change create", start);
+    } catch (err) {
+      fail(err, "servicenow", "change create", start);
+    }
+  });
+  change.command("update").description("Update a change request").requiredOption("--id <sys_id>", "Change request sys_id").option("--short-description <text>", "New short description").option("--description <text>", "New description").option("--state <state>", "New state value").option("--priority <n>", "New priority").option("--assigned-to <user>", "New assigned user sys_id").option("--start-date <datetime>", "New planned start date").option("--end-date <datetime>", "New planned end date").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp(program2);
+      const body = {};
+      if (opts.shortDescription) body["short_description"] = opts.shortDescription;
+      if (opts.description) body["description"] = opts.description;
+      if (opts.state !== void 0) body["state"] = opts.state;
+      if (opts.priority) body["priority"] = opts.priority;
+      if (opts.assignedTo) body["assigned_to"] = opts.assignedTo;
+      if (opts.startDate) body["start_date"] = opts.startDate;
+      if (opts.endDate) body["end_date"] = opts.endDate;
+      if (Object.keys(body).length === 0) throw new PncliError("No fields to update. Provide at least one option besides --id.", 1);
+      const data = await http.servicenow(`/api/now/table/change_request/${opts.id}`, {
+        method: "PATCH",
+        body
+      });
+      success(data.result, "servicenow", "change update", start);
+    } catch (err) {
+      fail(err, "servicenow", "change update", start);
+    }
+  });
+  change.command("close").description("Close a change request (state=3)").requiredOption("--id <sys_id>", "Change request sys_id").option("--close-notes <text>", "Closure notes").option("--close-code <code>", "Close code (e.g. successful, unsuccessful)").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp(program2);
+      const body = { state: 3 };
+      if (opts.closeNotes) body["close_notes"] = opts.closeNotes;
+      if (opts.closeCode) body["close_code"] = opts.closeCode;
+      const data = await http.servicenow(`/api/now/table/change_request/${opts.id}`, {
+        method: "PATCH",
+        body
+      });
+      success(data.result, "servicenow", "change close", start);
+    } catch (err) {
+      fail(err, "servicenow", "change close", start);
+    }
+  });
+}
+
+// src/services/contrast/commands.ts
+function getHttpAndOrg(program2) {
+  const opts = program2.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  if (!config.contrast.apiKey || !config.contrast.serviceKey || !config.contrast.username) throw new PncliError("Contrast not configured. Run: pncli config init");
+  if (!config.contrast.orgUuid) throw new PncliError("Contrast org UUID not configured. Run: pncli config set contrast.orgUuid <uuid>");
+  const http = createHttpClient(config, Boolean(opts.dryRun));
+  return { http, orgUuid: config.contrast.orgUuid };
+}
+function registerContrastCommands(program2) {
+  const contrast = program2.command("contrast").description("Contrast IAST operations");
+  const apps = contrast.command("apps").description("Application operations");
+  apps.command("list").description("List applications in the organization").option("--limit <n>", "Maximum number of results", "25").option("--offset <n>", "Pagination offset", "0").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { http, orgUuid } = getHttpAndOrg(program2);
+      const data = await http.contrast(`/Contrast/api/ng/${orgUuid}/applications`, {
+        params: {
+          limit: opts.limit ? parseInt(opts.limit, 10) : 25,
+          offset: opts.offset ? parseInt(opts.offset, 10) : 0
+        }
+      });
+      success(data, "contrast", "apps list", start);
+    } catch (err) {
+      fail(err, "contrast", "apps list", start);
+    }
+  });
+  const findings = contrast.command("findings").description("Vulnerability findings operations");
+  findings.command("list").description("List vulnerability findings for an application").requiredOption("--app <app-id>", "Application ID (UUID)").option("--severity <level>", "Filter by severity: CRITICAL, HIGH, MEDIUM, LOW, NOTE").option("--status <status>", "Filter by status: REPORTED, CONFIRMED, SUSPICIOUS, NOT_A_PROBLEM, REMEDIATED, FIXED").option("--limit <n>", "Maximum number of results", "25").option("--offset <n>", "Pagination offset", "0").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { http, orgUuid } = getHttpAndOrg(program2);
+      const params = {
+        limit: opts.limit ? parseInt(opts.limit, 10) : 25,
+        offset: opts.offset ? parseInt(opts.offset, 10) : 0
+      };
+      if (opts.severity) params["severities"] = opts.severity;
+      if (opts.status) params["statuses"] = opts.status;
+      const data = await http.contrast(
+        `/Contrast/api/ng/${orgUuid}/traces/${opts.app}/filter`,
+        { params }
+      );
+      success(data, "contrast", "findings list", start);
+    } catch (err) {
+      fail(err, "contrast", "findings list", start);
+    }
+  });
+  findings.command("get").description("Get details for a specific vulnerability finding").requiredOption("--app <app-id>", "Application ID (UUID)").requiredOption("--trace <trace-id>", "Trace/finding UUID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { http, orgUuid } = getHttpAndOrg(program2);
+      const data = await http.contrast(
+        `/Contrast/api/ng/${orgUuid}/traces/${opts.app}/trace/${opts.trace}`
+      );
+      success(data, "contrast", "findings get", start);
+    } catch (err) {
+      fail(err, "contrast", "findings get", start);
+    }
+  });
+}
+
 // src/services/skills/commands.ts
 import fs3 from "fs";
 import path5 from "path";
-var GITHUB_API = "https://api.github.com/repos/kolatts/pncli/contents/.claude/skills";
-var RAW_BASE = "https://raw.githubusercontent.com/kolatts/pncli/main/.claude/skills";
-var RAW_COPILOT_INSTRUCTIONS = "https://raw.githubusercontent.com/kolatts/pncli/main/copilot-instructions.md";
+import os from "os";
+var GITHUB_API = "https://api.github.com/repos/kolatts/pncli/contents/skills";
+var RAW_BASE = "https://raw.githubusercontent.com/kolatts/pncli/main/skills";
+var AGENT_PATHS = {
+  "github-copilot": { project: ".agents/skills", user: path5.join(os.homedir(), ".copilot/skills") },
+  "claude-code": { project: ".claude/skills", user: path5.join(os.homedir(), ".claude/skills") }
+};
 function registerSkillsCommands(program2) {
   const skills = program2.command("skills").description("Manage pncli Claude Code skills");
-  skills.command("install").description("Download latest pncli skills and copilot-instructions.md into the current repo").option("--target <dir>", "Target directory for skills", ".claude/skills").option("--skip-instructions", "Skip downloading copilot-instructions.md (always written to repo root)").action(async (opts) => {
+  skills.command("install").description("Download latest pncli skills into the current repo").option("--agent <agent>", "Target agent host: github-copilot | claude-code", "github-copilot").option("--scope <scope>", "Installation scope: project | user", "project").option("--target <dir>", "Override install directory (ignores --agent and --scope)").action(async (opts) => {
     const start = Date.now();
     try {
-      const targetDir = path5.resolve(opts.target);
+      let targetDir;
+      if (opts.target) {
+        targetDir = path5.resolve(opts.target);
+      } else {
+        const agentConfig = AGENT_PATHS[opts.agent];
+        if (!agentConfig) {
+          throw new Error(`Unknown agent: "${opts.agent}". Use: ${Object.keys(AGENT_PATHS).join(" | ")}`);
+        }
+        const scopePath = opts.scope === "user" ? agentConfig.user : agentConfig.project;
+        targetDir = path5.resolve(scopePath);
+      }
       warn("Fetching skill list from GitHub...");
       const listRes = await fetch(GITHUB_API, {
         headers: { "Accept": "application/vnd.github.v3+json", "User-Agent": "pncli" }
@@ -5114,7 +6630,7 @@ function registerSkillsCommands(program2) {
           fs3.rmSync(existingDir, { recursive: true, force: true });
         }
       }
-      warn(`Found ${skillDirs.length} skills. Downloading...`);
+      warn(`Found ${skillDirs.length} skills. Downloading to ${targetDir}...`);
       const installed = [];
       const failed = [];
       for (const skillName of skillDirs) {
@@ -5144,54 +6660,60 @@ function registerSkillsCommands(program2) {
       if (failed.length > 0) {
         warn(`Failed to download: ${failed.join(", ")}`);
       }
-      let instructionsWritten = false;
-      if (!opts.skipInstructions) {
-        warn("Downloading copilot-instructions.md...");
-        try {
-          const res = await fetch(RAW_COPILOT_INSTRUCTIONS, {
-            headers: { "User-Agent": "pncli" }
-          });
-          if (res.ok) {
-            const content = await res.text();
-            fs3.writeFileSync("copilot-instructions.md", content, "utf8");
-            instructionsWritten = true;
-            warn("Wrote copilot-instructions.md");
-          } else {
-            warn(`Failed to download copilot-instructions.md (${res.status})`);
-          }
-        } catch {
-          warn("Failed to download copilot-instructions.md");
-        }
-      }
       success({
         installed,
         failed,
         target: targetDir,
         total: installed.length,
-        copilotInstructions: instructionsWritten
+        agent: opts.target ? "custom" : opts.agent,
+        scope: opts.target ? "custom" : opts.scope
       }, "skills", "install", start);
     } catch (err) {
       fail(err, "skills", "install", start);
     }
   });
-  skills.command("list").description("List locally installed skills").option("--target <dir>", "Skills directory to scan", ".claude/skills").action((opts) => {
+  skills.command("list").description("List locally installed skills").option("--agent <agent>", "Target agent host: github-copilot | claude-code", "github-copilot").option("--scope <scope>", "Installation scope: project | user", "project").option("--target <dir>", "Override skills directory to scan").action((opts) => {
     const start = Date.now();
     try {
-      const targetDir = path5.resolve(opts.target);
+      let targetDir;
+      if (opts.target) {
+        targetDir = path5.resolve(opts.target);
+      } else {
+        const agentConfig = AGENT_PATHS[opts.agent];
+        if (!agentConfig) {
+          throw new Error(`Unknown agent: "${opts.agent}". Use: ${Object.keys(AGENT_PATHS).join(" | ")}`);
+        }
+        const scopePath = opts.scope === "user" ? agentConfig.user : agentConfig.project;
+        targetDir = path5.resolve(scopePath);
+      }
       if (!fs3.existsSync(targetDir)) {
-        success({ skills: [], message: "No skills directory found. Run: pncli skills install" }, "skills", "list", start);
+        success({ skills: [], message: `No skills directory found at ${targetDir}. Run: pncli skills install` }, "skills", "list", start);
         return;
       }
       const skillDirs = fs3.readdirSync(targetDir).filter((name) => {
         const skillPath = path5.join(targetDir, name, "SKILL.md");
         return fs3.existsSync(skillPath);
       });
-      const skills2 = skillDirs.map((name) => {
+      const skillsList = skillDirs.map((name) => {
         const content = fs3.readFileSync(path5.join(targetDir, name, "SKILL.md"), "utf8");
         const frontmatter = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
         const data = {};
+        const metadata = {};
         if (frontmatter) {
+          let inMetadata = false;
           for (const line of frontmatter[1].split("\n")) {
+            if (line.trimEnd() === "metadata:") {
+              inMetadata = true;
+              continue;
+            }
+            if (inMetadata && line.startsWith("  ")) {
+              const colonIdx2 = line.indexOf(":");
+              if (colonIdx2 !== -1) {
+                metadata[line.slice(0, colonIdx2).trim()] = line.slice(colonIdx2 + 1).trim();
+              }
+              continue;
+            }
+            inMetadata = false;
             const colonIdx = line.indexOf(":");
             if (colonIdx === -1) continue;
             data[line.slice(0, colonIdx).trim()] = line.slice(colonIdx + 1).trim();
@@ -5200,12 +6722,13 @@ function registerSkillsCommands(program2) {
         return {
           name: data.name || name,
           slug: name,
-          category: data.category || "other",
-          services: data.services || "",
-          providers: data.providers || "none"
+          category: metadata.category || data.category || "other",
+          services: metadata.services || data.services || "",
+          providers: metadata.providers || data.providers || "none",
+          userInvocable: data["user-invocable"] === "true"
         };
       });
-      success({ skills: skills2, total: skills2.length }, "skills", "list", start);
+      success({ skills: skillsList, total: skillsList.length }, "skills", "list", start);
     } catch (err) {
       fail(err, "skills", "list", start);
     }
@@ -5219,13 +6742,14 @@ if (!process.env.PNCLI_VERIFY_TLS) {
 var require2 = createRequire(import.meta.url);
 var pkg = require2("../package.json");
 var TAGLINE = "One command does what three meetings couldn't.";
-var program = new Command();
-program.name("pncli").description(`The Paperwork Nightmare CLI \u2014 ${TAGLINE}`).version(`${pkg.version} \u2014 ${TAGLINE}`, "-v, --version").option("--pretty", "Human-readable formatted output", false).option("--verbose", "Include full response metadata", false).option("--dry-run", "Print API requests without executing", false).option("--config <path>", "Override global config file location");
+var program = new Command2();
+program.name("pncli").description(`The Paperwork Nightmare CLI \u2014 ${TAGLINE}`).version(`${pkg.version} \u2014 ${TAGLINE}`, "-v, --version").option("--pretty", "Human-readable formatted output", false).option("--verbose", "Include full response metadata", false).option("--dry-run", "Print API requests without executing", false).option("--config <path>", "Override global config file location").option("--output-file <path>", "Write JSON output to file instead of stdout");
 program.hook("preAction", (thisCommand) => {
   const opts = thisCommand.optsWithGlobals();
   setGlobalOptions({
     pretty: Boolean(opts.pretty),
-    verbose: Boolean(opts.verbose)
+    verbose: Boolean(opts.verbose),
+    outputFile: opts.outputFile
   });
   try {
     const config = loadConfig({ configPath: opts.config });
@@ -5242,6 +6766,12 @@ registerSdeCommands(program);
 registerDepsCommands(program);
 registerConfigCommands(program);
 registerAdoCommands(program);
+registerJenkinsCommands(program);
+registerArtifactoryCommands(program);
+registerUdeployCommands(program);
+registerCheckmarxCommands(program);
+registerServiceNowCommands(program);
+registerContrastCommands(program);
 registerSkillsCommands(program);
 program.addHelpText("after", `
 Services:
@@ -5253,6 +6783,12 @@ Services:
   sonar        SonarQube Server (quality gates, issues, metrics, hotspots)
   sde          SDElements (threat modeling, countermeasures, compliance)
   ado          Azure DevOps Server (work items, repos, PRs, pipelines)
+  jenkins      Jenkins Data Center (jobs, builds, logs)
+  artifactory  Artifactory (repos, artifact search, build info, properties)
+  udeploy      IBM UrbanCode Deploy (component versions, deployment processes)
+  checkmarx    Checkmarx CxSAST (projects, scans, scan statistics)
+  servicenow   ServiceNow (change requests)
+  contrast     Contrast IAST (applications, vulnerability findings)
   config       Manage pncli configuration
   skills       Download and manage Claude Code skills
 `);