@kolatts/pncli 1.8.0 → 1.10.0

package/copilot-instructions.md

@@ -140,6 +140,8 @@ pncli jira create-issue
   --priority <name>       Priority name
   --assignee <accountId>  Assignee account ID
   --labels <labels>       Comma-separated labels
+  --parent <key>          Parent issue key — creates an "is child of" link after
+  creation
   --field <Name=value>    Custom field value (repeatable) (default: [])
 
 pncli jira update-issue
@@ -490,6 +492,8 @@ pncli deps frisk
   --direct-only            Only scan direct dependencies (default: include
   transitive) (default: false)
   --include-dev            Include dev/test dependencies (default: false)
+  --source <source>        Vulnerability source (choices: "osv", "sonatype",
+  "all", default: "osv")
 
 pncli deps scan
   --ecosystem <ecosystem>  Filter to one ecosystem: npm, nuget, maven, all
@@ -543,19 +547,215 @@ pncli ado whoami
 
 pncli ado connection-data
 
-pncli ado project
+pncli ado project list-collections
 
-pncli ado work
+pncli ado project list
 
-pncli ado repo
+pncli ado project get
+  --name <project>  Project name
 
-pncli ado pipeline
+pncli ado work get
+  --id <n>    Work item ID
+
+pncli ado work create
+  --type <type>         Work item type (e.g. Bug, Task, User Story)
+  --title <title>       Work item title
+  --description <text>  Description
+  --assignee <user>     Assigned to (display name or email)
+  --priority <n>        Priority (1-4)
+  --parent <id>         Parent work item ID — creates a parent link after
+  creation
+  --field <name=value>  Additional field (repeatable) (default: [])
+
+pncli ado work update
+  --id <n>              Work item ID
+  --field <name=value>  Field to update (repeatable) (default: [])
+
+pncli ado work transition
+  --id <n>         Work item ID
+  --state <state>  New state (e.g. Active, Resolved, Closed)
+
+pncli ado work assign
+  --id <n>     Work item ID
+  --to <user>  User display name or email
+
+pncli ado work link
+  --id <a>      Source work item ID
+  --to <b>      Target work item ID
+  --type <rel>  Link type (related|parent|child|duplicate|duplicate-of)
+  (default: "related")
+
+pncli ado work search
+  --wiql <query>  WIQL query string
+
+pncli ado work list-comments
+  --id <n>    Work item ID
+
+pncli ado work add-comment
+  --id <n>       Work item ID
+  --body <text>  Comment text
+
+pncli ado work types
+  --discover  Fetch from server (always true for this command)
+  --save      Save discovered types to ~/.pncli/config.json
+
+pncli ado work list-states
+  --type <type>  Work item type name (e.g. Bug)
+
+pncli ado work fields
+  --type <type>  Scope to fields for a specific work item type (e.g. Bug)
+  --custom-only  Exclude System.* and Microsoft.VSTS.* fields
+  --discover     Fetch from server (always true for this command)
+  --save         Save discovered fields and aliases to ~/.pncli/config.json
+
+pncli ado repo list
+
+pncli ado repo get
+
+pncli ado repo list-prs
+  --state <state>     PR state: active|abandoned|completed|all (default:
+  "active")
+  --creator <alias>   Filter by creator
+  --reviewer <alias>  Filter by reviewer
+
+pncli ado repo get-pr
+  --id <n>    Pull request ID
+
+pncli ado repo create-pr
+  --title <title>       PR title
+  --source <branch>     Source branch
+  --target <branch>     Target branch (default: main) (default: "main")
+  --description <text>  PR description
+  --reviewers <ids>     Comma-separated reviewer IDs or display names
+
+pncli ado repo update-pr
+  --id <n>              Pull request ID
+  --title <title>       New title
+  --description <text>  New description
+  --reviewers <ids>     Comma-separated reviewer IDs
+
+pncli ado repo merge-pr
+  --id <n>         Pull request ID
+  --strategy <s>   Merge strategy: noFastForward|squash|rebase|rebaseMerge
+  (default: "noFastForward")
+  --delete-source  Delete source branch after merge
+
+pncli ado repo abandon-pr
+  --id <n>    Pull request ID
+
+pncli ado repo list-comments
+  --pr <n>        Pull request ID
+  --inline-only   Return only inline file comments
+  --general-only  Return only general PR comments
+
+pncli ado repo add-comment
+  --pr <n>       Pull request ID
+  --body <text>  Comment text
+
+pncli ado repo add-inline-comment
+  --pr <n>            Pull request ID
+  --file <path>       File path
+  --line <n>          Line number
+  --body <text>       Comment text
+  --line-type <side>  Line side: left|right (default: right) (default: "right")
+
+pncli ado repo reply-comment
+  --pr <n>          Pull request ID
+  --thread-id <id>  Thread ID
+  --body <text>     Reply text
+
+pncli ado repo resolve-comment
+  --pr <n>          Pull request ID
+  --thread-id <id>  Thread ID
+
+pncli ado repo delete-comment
+  --pr <n>           Pull request ID
+  --thread-id <id>   Thread ID
+  --comment-id <id>  Comment ID
+
+pncli ado repo list-files
+  --pr <n>    Pull request ID
+
+pncli ado repo diff
+  --pr <n>    Pull request ID
+  --path <p>  Filter diff to a specific file path
+
+pncli ado repo get-build-status
+  --commit <sha>  Commit SHA
+
+pncli ado repo list-reviewers
+  --pr <n>    Pull request ID
+
+pncli ado repo approve
+  --pr <n>    Pull request ID
+
+pncli ado repo unapprove
+  --pr <n>    Pull request ID
+
+pncli ado repo wait-for-author
+  --pr <n>    Pull request ID
+
+pncli ado repo list-builds
+  --pr <n>    Pull request ID
+
+pncli ado pipeline list
+
+pncli ado pipeline get
+  --id <n>    Pipeline definition ID
+
+pncli ado pipeline run
+  --id <n>           Pipeline definition ID
+  --branch <ref>     Source branch (e.g. refs/heads/main or main)
+  --parameter <k=v>  Build parameter (repeatable) (default: [])
+  --wait             Wait for the run to complete before returning
+  --timeout <s>      Max wait time in seconds (default 600) (default: "600")
+  --poll <s>         Poll interval in seconds (default 10) (default: "10")
+
+pncli ado pipeline list-runs
+  --definition <id>  Filter by definition ID
+  --branch <ref>     Filter by branch name
+  --status <filter>  Filter by status (inProgress|completed|cancelling|...)
+  --top <n>          Maximum results (default: "50")
+
+pncli ado pipeline get-run
+  --id <n>    Build ID
+
+pncli ado pipeline cancel-run
+  --id <n>    Build ID
+
+pncli ado pipeline logs
+  --id <n>      Build ID
+  --log-id <n>  Specific log ID (omit to list all logs)
 ```
 
 ### Jenkins
 
 ```
-pncli jenkins pipeline
+pncli jenkins pipeline list
+
+pncli jenkins pipeline get
+  --name <job>  Job name
+
+pncli jenkins pipeline run
+  --name <job>       Job name
+  --parameter <k=v>  Build parameter (repeatable) (default: [])
+  --wait             Wait for the build to complete before returning
+  --timeout <s>      Max wait time in seconds per phase (queue-wait and
+  build-wait each get this budget; default 600) (default:
+  "600")
+  --poll <s>         Poll interval in seconds (default 10) (default: "10")
+
+pncli jenkins pipeline list-runs
+  --name <job>  Job name
+  --top <n>     Maximum number of builds to return (default 25) (default: "25")
+
+pncli jenkins pipeline get-run
+  --name <job>  Job name
+  --number <n>  Build number
+
+pncli jenkins pipeline logs
+  --name <job>  Job name
+  --number <n>  Build number
 ```
 
 ### Artifactory
@@ -632,17 +832,77 @@ pncli udeploy request-info
 pncli checkmarx project list
 
 pncli checkmarx project get
-  --id <id>  Project ID (required)
+  --id <id>   Project ID
 
 pncli checkmarx scan list
   --project <id>  Filter by project ID
   --last <n>      Return only the last N scans per project
 
 pncli checkmarx scan get
-  --id <id>  Scan ID (required)
+  --id <id>   Scan ID
 
 pncli checkmarx scan stats
-  --id <id>  Scan ID (required)
+  --id <id>   Scan ID
+```
+
+### Servicenow
+
+```
+pncli servicenow change list
+  --state <state>       Filter by state (e.g. -1=Pending, 1=Open, 2=Work in
+  Progress, 3=Closed Complete)
+  --assigned-to <user>  Filter by assigned user sys_id or display name
+  --limit <n>           Maximum number of results (default: "25")
+  --fields <fields>     Comma-separated field names to return
+
+pncli servicenow change get
+  --id <id>   Change request sys_id or number (e.g. CHG0001234)
+
+pncli servicenow change create
+  --short-description <text>  Short description (title)
+  --description <text>        Full description
+  --type <type>               Change type: normal, standard, or emergency
+  (default: "normal")
+  --priority <n>              Priority: 1=Critical, 2=High, 3=Moderate, 4=Low
+  --assigned-to <user>        Assigned user sys_id
+  --assignment-group <group>  Assignment group sys_id
+  --start-date <datetime>     Planned start date (yyyy-MM-dd HH:mm:ss)
+  --end-date <datetime>       Planned end date (yyyy-MM-dd HH:mm:ss)
+
+pncli servicenow change update
+  --id <sys_id>               Change request sys_id
+  --short-description <text>  New short description
+  --description <text>        New description
+  --state <state>             New state value
+  --priority <n>              New priority
+  --assigned-to <user>        New assigned user sys_id
+  --start-date <datetime>     New planned start date
+  --end-date <datetime>       New planned end date
+
+pncli servicenow change close
+  --id <sys_id>         Change request sys_id
+  --close-notes <text>  Closure notes
+  --close-code <code>   Close code (e.g. successful, unsuccessful)
+```
+
+### Contrast
+
+```
+pncli contrast apps list
+  --limit <n>   Maximum number of results (default: "25")
+  --offset <n>  Pagination offset (default: "0")
+
+pncli contrast findings list
+  --app <app-id>      Application ID (UUID)
+  --severity <level>  Filter by severity: CRITICAL, HIGH, MEDIUM, LOW, NOTE
+  --status <status>   Filter by status: REPORTED, CONFIRMED, SUSPICIOUS,
+  NOT_A_PROBLEM, REMEDIATED, FIXED
+  --limit <n>         Maximum number of results (default: "25")
+  --offset <n>        Pagination offset (default: "0")
+
+pncli contrast findings get
+  --app <app-id>      Application ID (UUID)
+  --trace <trace-id>  Trace/finding UUID
 ```
 
 ### Skills

package/dist/{chunk-QQ7UKWTU.js → chunk-3XHTRFRX.js}

@@ -791,6 +791,113 @@ Headers: ${JSON.stringify(safeHeaders, null, 2)}
     }
     return this.checkmarxFetcher;
   }
+  servicenowHeaders() {
+    const { username, password, apiToken } = this.config.servicenow;
+    let encoded;
+    if (username && apiToken) {
+      encoded = Buffer.from(`${username}:${apiToken}`).toString("base64");
+    } else if (username && password) {
+      encoded = Buffer.from(`${username}:${password}`).toString("base64");
+    } else {
+      throw new PncliError("ServiceNow credentials not configured. Run: pncli config init");
+    }
+    return {
+      "Authorization": `Basic ${encoded}`,
+      "Content-Type": "application/json",
+      "Accept": "application/json",
+      "Connection": "close"
+    };
+  }
+  async servicenow(path, opts = {}) {
+    const baseUrl = this.config.servicenow.baseUrl;
+    if (!baseUrl) throw new PncliError("ServiceNow baseUrl not configured. Run: pncli config init");
+    const url = buildUrl(baseUrl, path, opts.params);
+    const headers = this.servicenowHeaders();
+    const init = {
+      method: opts.method ?? "GET",
+      headers,
+      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
+    };
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
+      const msg = `DRY RUN: ${init.method} ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
+` : "");
+      fs2.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    return request(url, init, opts.timeoutMs ?? 3e4);
+  }
+  contrastHeaders() {
+    const { apiKey, serviceKey, username } = this.config.contrast;
+    if (!apiKey || !serviceKey || !username) {
+      throw new PncliError("Contrast credentials not configured. Run: pncli config init");
+    }
+    const authorization = Buffer.from(`${username}:${serviceKey}`).toString("base64");
+    return {
+      "Authorization": authorization,
+      "API-Key": apiKey,
+      "Content-Type": "application/json",
+      "Accept": "application/json",
+      "Connection": "close"
+    };
+  }
+  async contrast(path, opts = {}) {
+    const baseUrl = this.config.contrast.baseUrl ?? "https://app.contrastsecurity.com";
+    const url = buildUrl(baseUrl, path, opts.params);
+    const headers = this.contrastHeaders();
+    const init = {
+      method: opts.method ?? "GET",
+      headers,
+      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
+    };
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]", "API-Key": "[REDACTED]" };
+      const msg = `DRY RUN: ${init.method} ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
+` : "");
+      fs2.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    return request(url, init, opts.timeoutMs ?? 3e4);
+  }
+  sonatypeiqHeaders() {
+    const { userCode, passcode } = this.config.sonatypeiq;
+    if (!userCode || !passcode) throw new PncliError("Sonatype IQ credentials not configured. Run: pncli config init");
+    const encoded = Buffer.from(`${userCode}:${passcode}`).toString("base64");
+    return {
+      "Authorization": `Basic ${encoded}`,
+      "Content-Type": "application/json",
+      "Accept": "application/json",
+      "Connection": "close"
+    };
+  }
+  async sonatypeiq(path, opts = {}) {
+    const baseUrl = this.config.sonatypeiq.baseUrl;
+    if (!baseUrl) throw new PncliError("Sonatype IQ Server baseUrl not configured. Run: pncli config init");
+    const url = buildUrl(baseUrl, path, opts.params);
+    const headers = this.sonatypeiqHeaders();
+    const init = {
+      method: opts.method ?? "GET",
+      headers,
+      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
+    };
+    if (this.dryRun) {
+      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
+      const msg = `DRY RUN: ${init.method} ${url}
+Headers: ${JSON.stringify(safeHeaders, null, 2)}
+` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
+` : "");
+      fs2.writeSync(process.stderr.fd, msg);
+      process.exitCode = ExitCode.SUCCESS;
+      throw new PncliError("dry-run", 0);
+    }
+    return request(url, init, opts.timeoutMs ?? 3e4);
+  }
   async checkmarx(path, opts = {}) {
     const baseUrl = this.config.checkmarx.baseUrl;
     if (!baseUrl) throw new PncliError("Checkmarx baseUrl not configured. Run: pncli config init");
@@ -828,4 +935,4 @@ export {
   HttpClient,
   createHttpClient
 };
-//# sourceMappingURL=chunk-QQ7UKWTU.js.map
+//# sourceMappingURL=chunk-3XHTRFRX.js.map

package/dist/chunk-3XHTRFRX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/http.ts","../src/lib/errors.ts","../src/lib/exitCodes.ts","../src/lib/output.ts","../src/lib/adoFetch.ts","../src/lib/checkmarxFetch.ts"],"sourcesContent":["import fs from 'fs';\nimport type { ResolvedConfig } from '../types/config.js';\nimport { PncliError } from './errors.js';\nimport { ExitCode } from './exitCodes.js';\nimport { log } from './output.js';\nimport { buildAdoFetcher } from './adoFetch.js';\nimport { buildCheckmarxFetcher } from './checkmarxFetch.js';\n\nexport type HttpMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH';\n\nexport interface HttpRequestOptions {\n  method?: HttpMethod;\n  body?: unknown;\n  params?: Record<string, string | number | boolean | undefined>;\n  timeoutMs?: number;\n  headers?: Record<string, string>;\n}\n\nexport interface HttpError {\n  error: true;\n  status: number;\n  message: string;\n  url: string;\n}\n\nfunction buildUrl(base: string, path: string, params?: Record<string, string | number | boolean | undefined>): string {\n  const url = new URL(path, base.endsWith('/') ? base : base + '/');\n  if (params) {\n    for (const [key, val] of Object.entries(params)) {\n      if (val !== undefined) {\n        url.searchParams.set(key, String(val));\n      }\n    }\n  }\n  return url.toString();\n}\n\nasync function fetchWithTimeout(url: string, init: RequestInit, timeoutMs: number, fetcher: typeof fetch = fetch): Promise<Response> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n  try {\n    return await fetcher(url, { ...init, signal: controller.signal });\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nasync function request<T>(\n  url: string,\n  init: RequestInit,\n  timeoutMs: number,\n  fetcher: typeof fetch = fetch\n): Promise<T> {\n  let lastError: unknown;\n\n  for (let attempt = 0; attempt < 3; attempt++) {\n    let response: Response;\n    try {\n      response = await fetchWithTimeout(url, init, timeoutMs, fetcher);\n    } catch (err) {\n      throw new PncliError(\n        `Request failed: ${err instanceof Error ? err.message : String(err)}`,\n        0,\n        url\n      );\n    }\n\n    if (response.status === 429) {\n      const retryAfter = response.headers.get('Retry-After');\n      const waitMs = retryAfter ? parseInt(retryAfter, 10) * 1000 : (attempt + 1) * 1000;\n      log(`Rate limited. Retrying after ${waitMs}ms...`);\n      await new Promise(resolve => setTimeout(resolve, waitMs));\n      lastError = new PncliError('Rate limited', 429, url);\n      continue;\n    }\n\n    if (!response.ok) {\n      let message = `HTTP ${response.status} ${response.statusText}`;\n      try {\n        const body = await response.text();\n        const parsed = JSON.parse(body);\n        const parts: string[] = [];\n        // Jira: errorMessages is string[]\n        if (Array.isArray(parsed.errorMessages)) {\n          parts.push(...(parsed.errorMessages as string[]).filter(Boolean));\n        }\n        // errors as object map (Jira: Record<string, string>)\n        if (parsed.errors && typeof parsed.errors === 'object' && !Array.isArray(parsed.errors)) {\n          for (const [field, msg] of Object.entries(parsed.errors as Record<string, string>)) {\n            parts.push(`${field}: ${msg}`);\n          }\n        }\n        // errors as array of objects with message or msg field (SonarQube uses msg)\n        if (Array.isArray(parsed.errors)) {\n          for (const e of parsed.errors as Array<{ message?: string; msg?: string }>) {\n            if (e?.message) parts.push(e.message);\n            else if (e?.msg) parts.push(e.msg);\n          }\n        }\n        // Generic APIs: { message: \"...\" }\n        if (parts.length === 0 && parsed.message) {\n          parts.push(String(parsed.message));\n        }\n        if (parts.length > 0) message = parts.join('; ');\n      } catch {\n        // ignore parse errors\n      }\n      throw new PncliError(message, response.status, url);\n    }\n\n    if (response.status === 204) {\n      return undefined as T;\n    }\n\n    const text = await response.text();\n    if (!text) return undefined as T;\n    return JSON.parse(text) as T;\n  }\n\n  throw lastError ?? new PncliError('Request failed after retries', 1, url);\n}\n\nexport class HttpClient {\n  private config: ResolvedConfig;\n  private dryRun: boolean;\n  private adoFetcher: typeof fetch | null = null;\n  private checkmarxFetcher: typeof fetch | null = null;\n\n  constructor(config: ResolvedConfig, dryRun = false) {\n    this.config = config;\n    this.dryRun = dryRun;\n  }\n\n  private jiraHeaders(): Record<string, string> {\n    const { apiToken } = this.config.jira;\n    if (!apiToken) throw new PncliError('Jira credentials not configured. Run: pncli config init');\n    return {\n      'Authorization': `Bearer ${apiToken}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  private bitbucketHeaders(): Record<string, string> {\n    const { pat } = this.config.bitbucket;\n    if (!pat) throw new PncliError('Bitbucket credentials not configured. Run: pncli config init');\n    return {\n      'Authorization': `Bearer ${pat}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async jira<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.jira.baseUrl;\n    if (!baseUrl) throw new PncliError('Jira baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.jiraHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  async bitbucket<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.bitbucket.baseUrl;\n    if (!baseUrl) throw new PncliError('Bitbucket baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.bitbucketHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  private confluenceHeaders(): Record<string, string> {\n    const { apiToken } = this.config.confluence;\n    if (!apiToken) throw new PncliError('Confluence credentials not configured. Run: pncli config init');\n    return {\n      'Authorization': `Bearer ${apiToken}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async confluence<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.confluence.baseUrl;\n    if (!baseUrl) throw new PncliError('Confluence baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.confluenceHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  private sdeHeaders(): Record<string, string> {\n    const { token } = this.config.sde;\n    if (!token) throw new PncliError('SDElements credentials not configured. Run: pncli config init');\n    return {\n      'Authorization': `Token ${token}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async sde<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.sde.baseUrl;\n    if (!baseUrl) throw new PncliError('SDElements baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.sdeHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  async sdePaginate<T>(\n    fetchPage: (page: number, pageSize: number) => Promise<{ count: number; results: T[] }>\n  ): Promise<T[]> {\n    const results: T[] = [];\n    let page = 1;\n    const pageSize = 100;\n\n    while (true) {\n      const response = await fetchPage(page, pageSize);\n      results.push(...response.results);\n      if (results.length >= response.count || response.results.length === 0) break;\n      page++;\n    }\n\n    return results;\n  }\n\n  private async getAdoFetcher(): Promise<typeof fetch> {\n    if (!this.adoFetcher) {\n      this.adoFetcher = await buildAdoFetcher(this.config);\n    }\n    return this.adoFetcher;\n  }\n\n  async ado<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.ado.baseUrl;\n    if (!baseUrl) throw new PncliError('Azure DevOps baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n\n    if (this.dryRun) {\n      const msg = `DRY RUN: ${opts.method ?? 'GET'} ${url}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const fetcher = await this.getAdoFetcher();\n    const defaultHeaders: Record<string, string> = {\n      'Accept': 'application/json',\n      'Content-Type': 'application/json',\n      ...opts.headers\n    };\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers: defaultHeaders,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000, fetcher);\n  }\n\n  async adoText(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<string> {\n    const baseUrl = this.config.ado.baseUrl;\n    if (!baseUrl) throw new PncliError('Azure DevOps baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n\n    if (this.dryRun) {\n      fs.writeSync(process.stderr.fd, `DRY RUN: ${opts.method ?? 'GET'} ${url}\\n`);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const fetcher = await this.getAdoFetcher();\n    const response = await fetchWithTimeout(url, {\n      method: opts.method ?? 'GET',\n      headers: { 'Accept': 'text/plain', ...opts.headers }\n    }, opts.timeoutMs ?? 30000, fetcher);\n\n    if (!response.ok) {\n      let message = `HTTP ${response.status} ${response.statusText}`;\n      try {\n        const parsed = JSON.parse(await response.text());\n        if (parsed.message) message = String(parsed.message);\n      } catch { /* ignore */ }\n      throw new PncliError(message, response.status, url);\n    }\n\n    return response.text();\n  }\n\n  async adoRaw(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<{ data: unknown; headers: Headers }> {\n    const baseUrl = this.config.ado.baseUrl;\n    if (!baseUrl) throw new PncliError('Azure DevOps baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n\n    if (this.dryRun) {\n      fs.writeSync(process.stderr.fd, `DRY RUN: ${opts.method ?? 'GET'} ${url}\\n`);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const fetcher = await this.getAdoFetcher();\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? 30000);\n    let response: Response;\n    try {\n      response = await fetcher(url, {\n        method: opts.method ?? 'GET',\n        headers: { 'Accept': 'application/json', 'Content-Type': 'application/json', ...opts.headers },\n        body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,\n        signal: controller.signal\n      });\n    } finally {\n      clearTimeout(timer);\n    }\n\n    if (!response.ok) {\n      let message = `HTTP ${response.status} ${response.statusText}`;\n      try {\n        const parsed = JSON.parse(await response.text());\n        if (parsed.message) message = String(parsed.message);\n      } catch { /* ignore */ }\n      throw new PncliError(message, response.status, url);\n    }\n\n    const text = await response.text();\n    const data = text ? JSON.parse(text) : undefined;\n    return { data, headers: response.headers };\n  }\n\n  async adoPaginate<T>(\n    fetchPage: (continuationToken?: string) => Promise<{ data: { value: T[] }; headers: Headers }>\n  ): Promise<T[]> {\n    const results: T[] = [];\n    let token: string | undefined;\n\n    while (true) {\n      const { data, headers } = await fetchPage(token);\n      results.push(...(data.value ?? []));\n      const next = headers.get('x-ms-continuationtoken');\n      if (!next) break;\n      token = next;\n    }\n\n    return results;\n  }\n\n  private jenkinsHeaders(): Record<string, string> {\n    const { username, apiToken } = this.config.jenkins;\n    if (!username || !apiToken) throw new PncliError('Jenkins credentials not configured. Run: pncli config init');\n    const creds = Buffer.from(`${username}:${apiToken}`).toString('base64');\n    return {\n      'Authorization': `Basic ${creds}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  private artifactoryHeaders(): Record<string, string> {\n    const { token } = this.config.artifactory;\n    if (!token) throw new PncliError('Artifactory credentials not configured. Run: pncli config init');\n    return {\n      'Authorization': `Bearer ${token}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  private udeployHeaders(): Record<string, string> {\n    const { pat, username, password } = this.config.udeploy;\n    let encoded: string;\n    if (username && password) {\n      encoded = Buffer.from(`${username}:${password}`).toString('base64');\n    } else if (username && pat) {\n      encoded = Buffer.from(`${username}:${pat}`).toString('base64');\n    } else if (pat) {\n      encoded = Buffer.from(`PasswordIsAuthToken:${JSON.stringify({ token: pat })}`).toString('base64');\n    } else {\n      throw new PncliError('UDeploy credentials not configured. Run: pncli config init');\n    }\n    return {\n      'Authorization': `Basic ${encoded}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async jenkins<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.jenkins.baseUrl;\n    if (!baseUrl) throw new PncliError('Jenkins baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.jenkinsHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  async jenkinsRaw(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<{ status: number; headers: Headers; text: string }> {\n    const baseUrl = this.config.jenkins.baseUrl;\n    if (!baseUrl) throw new PncliError('Jenkins baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.jenkinsHeaders();\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${opts.method ?? 'GET'} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const response = await fetchWithTimeout(url, {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    }, opts.timeoutMs ?? 30000);\n\n    if (!response.ok) {\n      let message = `HTTP ${response.status} ${response.statusText}`;\n      try {\n        const parsed = JSON.parse(await response.text());\n        if (parsed.message) message = String(parsed.message);\n      } catch { /* ignore */ }\n      throw new PncliError(message, response.status, url);\n    }\n\n    return { status: response.status, headers: response.headers, text: await response.text() };\n  }\n\n  async artifactory<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.artifactory.baseUrl;\n    if (!baseUrl) throw new PncliError('Artifactory baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = { ...this.artifactoryHeaders(), ...opts.headers };\n\n    // AQL search uses text/plain body — don't JSON-serialize it\n    const body = opts.body !== undefined\n      ? (typeof opts.body === 'string' ? opts.body : JSON.stringify(opts.body))\n      : undefined;\n\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${typeof opts.body === 'string' ? opts.body : JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n\n  async udeploy<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.udeploy.baseUrl;\n    if (!baseUrl) throw new PncliError('UDeploy baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.udeployHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  async artifactoryText(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<string> {\n    const baseUrl = this.config.artifactory.baseUrl;\n    if (!baseUrl) throw new PncliError('Artifactory baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = { ...this.artifactoryHeaders(), Accept: 'text/plain', ...opts.headers };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      fs.writeSync(process.stderr.fd, `DRY RUN: ${opts.method ?? 'GET'} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const response = await fetchWithTimeout(url, {\n      method: opts.method ?? 'GET',\n      headers\n    }, opts.timeoutMs ?? 30000);\n\n    if (!response.ok) {\n      let message = `HTTP ${response.status} ${response.statusText}`;\n      try {\n        const parsed = JSON.parse(await response.text());\n        if (parsed.message) message = String(parsed.message);\n      } catch { /* ignore */ }\n      throw new PncliError(message, response.status, url);\n    }\n\n    return response.text();\n  }\n\n\n\n  private sonarHeaders(): Record<string, string> {\n    const { token } = this.config.sonar;\n    if (!token) throw new PncliError('SonarQube credentials not configured. Run: pncli config init');\n    return {\n      'Authorization': `Bearer ${token}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async sonar<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.sonar.baseUrl;\n    if (!baseUrl) throw new PncliError('SonarQube baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.sonarHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  async sonarPaginate<T>(\n    fetchPage: (page: number, pageSize: number) => Promise<{ total: number; p: number; ps: number; items: T[] }>\n  ): Promise<T[]> {\n    const results: T[] = [];\n    let page = 1;\n    const pageSize = 500;\n\n    while (true) {\n      const response = await fetchPage(page, pageSize);\n      results.push(...response.items);\n      if (results.length >= response.total || response.items.length === 0) break;\n      page++;\n    }\n\n    return results;\n  }\n\n  async confluencePaginate<T>(\n    fetchPage: (start: number, limit: number) => Promise<{ results: T[]; start: number; limit: number; size: number; _links: { next?: string } }>\n  ): Promise<T[]> {\n    const results: T[] = [];\n    let start = 0;\n    const limit = 25;\n\n    while (true) {\n      const page = await fetchPage(start, limit);\n      results.push(...page.results);\n      if (!page._links.next) break;\n      start += page.size;\n    }\n\n    return results;\n  }\n\n  async paginate<T>(\n    fetchPage: (start: number, limit: number) => Promise<{ values: T[]; isLastPage: boolean; nextPageStart?: number }>\n  ): Promise<T[]> {\n    const results: T[] = [];\n    let start = 0;\n    const limit = 100;\n\n    while (true) {\n      const page = await fetchPage(start, limit);\n      results.push(...page.values);\n      if (page.isLastPage) break;\n      start = page.nextPageStart ?? start + limit;\n    }\n\n    return results;\n  }\n\n  async jiraPaginate<T>(\n    fetchPage: (startAt: number, maxResults: number) => Promise<{ issues?: T[]; values?: T[]; total: number; startAt: number; maxResults: number }>\n  ): Promise<T[]> {\n    const results: T[] = [];\n    let startAt = 0;\n    const maxResults = 100;\n\n    while (true) {\n      const page = await fetchPage(startAt, maxResults);\n      const items = (page.issues ?? page.values ?? []) as T[];\n      results.push(...items);\n      startAt += items.length;\n      if (startAt >= page.total || items.length === 0) break;\n    }\n\n    return results;\n  }\n\n  private getCheckmarxFetcher(): typeof fetch {\n    if (!this.checkmarxFetcher) {\n      this.checkmarxFetcher = buildCheckmarxFetcher(this.config);\n    }\n    return this.checkmarxFetcher;\n  }\n\n  private servicenowHeaders(): Record<string, string> {\n    const { username, password, apiToken } = this.config.servicenow;\n    let encoded: string;\n    if (username && apiToken) {\n      encoded = Buffer.from(`${username}:${apiToken}`).toString('base64');\n    } else if (username && password) {\n      encoded = Buffer.from(`${username}:${password}`).toString('base64');\n    } else {\n      throw new PncliError('ServiceNow credentials not configured. Run: pncli config init');\n    }\n    return {\n      'Authorization': `Basic ${encoded}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async servicenow<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.servicenow.baseUrl;\n    if (!baseUrl) throw new PncliError('ServiceNow baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.servicenowHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  private contrastHeaders(): Record<string, string> {\n    const { apiKey, serviceKey, username } = this.config.contrast;\n    if (!apiKey || !serviceKey || !username) {\n      throw new PncliError('Contrast credentials not configured. Run: pncli config init');\n    }\n    const authorization = Buffer.from(`${username}:${serviceKey}`).toString('base64');\n    return {\n      'Authorization': authorization,\n      'API-Key': apiKey,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async contrast<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.contrast.baseUrl ?? 'https://app.contrastsecurity.com';\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.contrastHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]', 'API-Key': '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  private sonatypeiqHeaders(): Record<string, string> {\n    const { userCode, passcode } = this.config.sonatypeiq;\n    if (!userCode || !passcode) throw new PncliError('Sonatype IQ credentials not configured. Run: pncli config init');\n    const encoded = Buffer.from(`${userCode}:${passcode}`).toString('base64');\n    return {\n      'Authorization': `Basic ${encoded}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async sonatypeiq<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.sonatypeiq.baseUrl;\n    if (!baseUrl) throw new PncliError('Sonatype IQ Server baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.sonatypeiqHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  async checkmarx<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.checkmarx.baseUrl;\n    if (!baseUrl) throw new PncliError('Checkmarx baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n\n    if (this.dryRun) {\n      const msg = `DRY RUN: ${opts.method ?? 'GET'} ${url}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const fetcher = this.getCheckmarxFetcher();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers: { 'Accept': 'application/json', 'Content-Type': 'application/json', ...opts.headers },\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000, fetcher);\n  }\n}\n\nexport function createHttpClient(config: ResolvedConfig, dryRun = false): HttpClient {\n  return new HttpClient(config, dryRun);\n}\n","export class PncliError extends Error {\n  status: number;\n  url?: string;\n\n  constructor(message: string, status: number = 1, url?: string) {\n    super(message);\n    this.name = 'PncliError';\n    this.status = status;\n    this.url = url;\n  }\n}\n","export const ExitCode = {\n  SUCCESS: 0,\n  GENERAL_ERROR: 1,\n  USAGE_ERROR: 2,\n  NETWORK_ERROR: 69,    // EX_UNAVAILABLE from sysexits.h\n  AUTH_ERROR: 77,       // EX_NOPERM from sysexits.h\n  CONFIG_ERROR: 78,     // EX_CONFIG from sysexits.h\n} as const;\n\nexport type ExitCode = (typeof ExitCode)[keyof typeof ExitCode];\n\nexport function exitCodeFromStatus(httpStatus: number): ExitCode {\n  if (httpStatus === 401 || httpStatus === 403) return ExitCode.AUTH_ERROR;\n  if (httpStatus === 0) return ExitCode.NETWORK_ERROR;\n  return ExitCode.GENERAL_ERROR;\n}\n","import fs from 'fs';\nimport chalk from 'chalk';\nimport type { Meta, SuccessEnvelope, ErrorEnvelope, ErrorDetail } from '../types/common.js';\nimport { PncliError } from './errors.js';\nimport { ExitCode, exitCodeFromStatus } from './exitCodes.js';\n\nlet globalOptions = { pretty: false, verbose: false };\nlet globalUser: { email: string | undefined; userId: string | undefined } = { email: undefined, userId: undefined };\nlet outputFile: string | undefined;\n\nexport function setGlobalOptions(opts: { pretty: boolean; verbose: boolean; outputFile?: string }): void {\n  globalOptions = { pretty: opts.pretty, verbose: opts.verbose };\n  outputFile = opts.outputFile;\n}\n\nexport function setGlobalUser(user: { email: string | undefined; userId: string | undefined }): void {\n  globalUser = user;\n}\n\nfunction buildMeta(service: string, action: string, startTime: number): Meta {\n  return {\n    service,\n    action,\n    timestamp: new Date().toISOString(),\n    duration_ms: Date.now() - startTime,\n    user: (globalUser.email ?? globalUser.userId) ? globalUser : undefined\n  };\n}\n\nfunction writeToFile(filePath: string, content: string): void {\n  try {\n    fs.writeFileSync(filePath, content, 'utf8');\n  } catch (writeErr) {\n    process.stderr.write(\n      `Warning: could not write to output file \"${filePath}\": ${(writeErr as NodeJS.ErrnoException).message}\\n`\n    );\n    process.exitCode = ExitCode.GENERAL_ERROR;\n  }\n}\n\nexport function success<T>(data: T, service: string, action: string, startTime: number): void {\n  const envelope: SuccessEnvelope<T> = {\n    ok: true,\n    data,\n    meta: buildMeta(service, action, startTime)\n  };\n  const out = (globalOptions.pretty ? JSON.stringify(envelope, null, 2) : JSON.stringify(envelope)) + '\\n';\n  if (outputFile) {\n    writeToFile(outputFile, out);\n  } else {\n    process.stdout.write(out);\n  }\n}\n\nexport function fail(\n  err: unknown,\n  service: string,\n  action: string,\n  startTime: number\n): never {\n  const errorDetail: ErrorDetail = {\n    status: err instanceof PncliError ? err.status : 1,\n    message: err instanceof Error ? err.message : String(err),\n    url: err instanceof PncliError ? (err.url ?? null) : null\n  };\n\n  const envelope: ErrorEnvelope = {\n    ok: false,\n    error: errorDetail,\n    meta: buildMeta(service, action, startTime)\n  };\n\n  const msg = globalOptions.pretty\n    ? chalk.red('✗ Error: ') + errorDetail.message\n    : null;\n\n  if (msg) process.stderr.write(msg + '\\n');\n\n  const output = (globalOptions.pretty ? JSON.stringify(envelope, null, 2) : JSON.stringify(envelope)) + '\\n';\n  const exitCode = err instanceof PncliError ? exitCodeFromStatus(err.status) : ExitCode.GENERAL_ERROR;\n  if (outputFile) {\n    writeToFile(outputFile, output);\n  } else {\n    try {\n      fs.writeSync(process.stdout.fd, output);\n    } catch (writeErr) {\n      if ((writeErr as NodeJS.ErrnoException).code !== 'EPIPE') throw writeErr;\n    }\n  }\n  process.exitCode = exitCode;\n  throw new PncliError(errorDetail.message, errorDetail.status);\n}\n\nexport function log(message: string): void {\n  if (globalOptions.verbose) {\n    process.stderr.write(\n      (globalOptions.pretty ? chalk.gray('▸ ') : '') + message + '\\n'\n    );\n  }\n}\n\nexport function warn(message: string): void {\n  process.stderr.write(\n    (globalOptions.pretty ? chalk.yellow('⚠ ') : '') + message + '\\n'\n  );\n}\n","import type { ResolvedConfig } from '../types/config.js';\nimport { PncliError } from './errors.js';\n\n/**\n * Returns a fetch-compatible function for Azure DevOps Server requests,\n * with Basic auth (PAT) injected into every call.\n */\nexport async function buildAdoFetcher(\n  config: ResolvedConfig\n): Promise<typeof fetch> {\n  const { pat, baseUrl } = config.ado;\n\n  if (!baseUrl) {\n    throw new PncliError('Azure DevOps baseUrl not configured. Run: pncli config init', 1);\n  }\n\n  if (!pat) {\n    throw new PncliError(\n      'Azure DevOps PAT not configured. Set a PAT via pncli config init or PNCLI_ADO_PAT env var.',\n      1\n    );\n  }\n\n  const encoded = Buffer.from(':' + pat).toString('base64');\n  const authHeader = `Basic ${encoded}`;\n  return (url: Parameters<typeof fetch>[0], init?: Parameters<typeof fetch>[1]) =>\n    fetch(url, {\n      ...init,\n      headers: {\n        ...(init?.headers as Record<string, string> | undefined),\n        'Authorization': authHeader,\n        'Content-Type': 'application/json',\n        'Accept': 'application/json'\n      }\n    });\n}\n","import type { ResolvedConfig } from '../types/config.js';\nimport type { CheckmarxTokenResponse } from '../types/checkmarx.js';\nimport { PncliError } from './errors.js';\n\nconst CX_CLIENT_ID = 'resource_owner_client';\nconst CX_CLIENT_SECRET = '014DF517-39D1-4453-B7B3-9930C563627C';\nconst CX_SCOPE = 'sast_api offline_access';\n\ninterface TokenCache {\n  value: string;\n  expiresAt: number;\n}\n\n/**\n * Returns a fetch-compatible function for Checkmarx CxSAST 9.x requests,\n * with OAuth2 password-grant token exchange and bearer auth injected into every call.\n * The token is cached for the lifetime of the returned fetcher and refreshed\n * when within 60s of expiry.\n */\nexport function buildCheckmarxFetcher(config: ResolvedConfig): typeof fetch {\n  const { baseUrl, username, password } = config.checkmarx;\n\n  if (!baseUrl) throw new PncliError('Checkmarx baseUrl not configured. Run: pncli config init', 1);\n  if (!username) throw new PncliError('Checkmarx username not configured. Run: pncli config init', 1);\n  if (!password) throw new PncliError('Checkmarx password not configured. Run: pncli config init', 1);\n\n  // Capture as definite strings for use inside the closure (TypeScript can't narrow across closures)\n  const resolvedUsername: string = username;\n  const resolvedPassword: string = password;\n  const tokenUrl = `${baseUrl.replace(/\\/$/, '')}/cxrestapi/auth/identity/connect/token`;\n  let cache: TokenCache | null = null;\n\n  async function getToken(): Promise<string> {\n    const now = Date.now();\n    if (cache && cache.expiresAt - now > 60_000) {\n      return cache.value;\n    }\n\n    const body = new URLSearchParams({\n      grant_type: 'password',\n      client_id: CX_CLIENT_ID,\n      client_secret: CX_CLIENT_SECRET,\n      scope: CX_SCOPE,\n      username: resolvedUsername,\n      password: resolvedPassword\n    });\n\n    const response = await fetch(tokenUrl, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n      body: body.toString()\n    });\n\n    if (!response.ok) {\n      const text = await response.text().catch(() => '');\n      throw new PncliError(\n        `Checkmarx token exchange failed (${response.status}): ${text || response.statusText}`,\n        response.status\n      );\n    }\n\n    const data = await response.json() as CheckmarxTokenResponse;\n    if (!data.access_token) {\n      throw new PncliError('Checkmarx token endpoint returned no access_token', response.status);\n    }\n    cache = {\n      value: data.access_token,\n      expiresAt: now + data.expires_in * 1000\n    };\n    return cache.value;\n  }\n\n  // Intentionally synchronous (unlike buildAdoFetcher which is async): the token exchange\n  // happens lazily inside getToken() on the first actual API call, not during construction.\n  return async (url: Parameters<typeof fetch>[0], init?: Parameters<typeof fetch>[1]): Promise<Response> => {\n    const token = await getToken();\n    return fetch(url, {\n      ...init,\n      headers: {\n        ...(init?.headers as Record<string, string> | undefined),\n        'Authorization': `Bearer ${token}`\n      }\n    });\n  };\n}\n"],"mappings":";;;AAAA,OAAOA,SAAQ;;;ACAR,IAAM,aAAN,cAAyB,MAAM;AAAA,EACpC;AAAA,EACA;AAAA,EAEA,YAAY,SAAiB,SAAiB,GAAG,KAAc;AAC7D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,MAAM;AAAA,EACb;AACF;;;ACVO,IAAM,WAAW;AAAA,EACtB,SAAS;AAAA,EACT,eAAe;AAAA,EACf,aAAa;AAAA,EACb,eAAe;AAAA;AAAA,EACf,YAAY;AAAA;AAAA,EACZ,cAAc;AAAA;AAChB;AAIO,SAAS,mBAAmB,YAA8B;AAC/D,MAAI,eAAe,OAAO,eAAe,IAAK,QAAO,SAAS;AAC9D,MAAI,eAAe,EAAG,QAAO,SAAS;AACtC,SAAO,SAAS;AAClB;;;ACfA,OAAO,QAAQ;AACf,OAAO,WAAW;AAKlB,IAAI,gBAAgB,EAAE,QAAQ,OAAO,SAAS,MAAM;AACpD,IAAI,aAAwE,EAAE,OAAO,QAAW,QAAQ,OAAU;AAClH,IAAI;AAEG,SAAS,iBAAiB,MAAwE;AACvG,kBAAgB,EAAE,QAAQ,KAAK,QAAQ,SAAS,KAAK,QAAQ;AAC7D,eAAa,KAAK;AACpB;AAEO,SAAS,cAAc,MAAuE;AACnG,eAAa;AACf;AAEA,SAAS,UAAU,SAAiB,QAAgB,WAAyB;AAC3E,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,aAAa,KAAK,IAAI,IAAI;AAAA,IAC1B,MAAO,WAAW,SAAS,WAAW,SAAU,aAAa;AAAA,EAC/D;AACF;AAEA,SAAS,YAAY,UAAkB,SAAuB;AAC5D,MAAI;AACF,OAAG,cAAc,UAAU,SAAS,MAAM;AAAA,EAC5C,SAAS,UAAU;AACjB,YAAQ,OAAO;AAAA,MACb,4CAA4C,QAAQ,MAAO,SAAmC,OAAO;AAAA;AAAA,IACvG;AACA,YAAQ,WAAW,SAAS;AAAA,EAC9B;AACF;AAEO,SAAS,QAAW,MAAS,SAAiB,QAAgB,WAAyB;AAC5F,QAAM,WAA+B;AAAA,IACnC,IAAI;AAAA,IACJ;AAAA,IACA,MAAM,UAAU,SAAS,QAAQ,SAAS;AAAA,EAC5C;AACA,QAAM,OAAO,cAAc,SAAS,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,KAAK,UAAU,QAAQ,KAAK;AACpG,MAAI,YAAY;AACd,gBAAY,YAAY,GAAG;AAAA,EAC7B,OAAO;AACL,YAAQ,OAAO,MAAM,GAAG;AAAA,EAC1B;AACF;AAEO,SAAS,KACd,KACA,SACA,QACA,WACO;AACP,QAAM,cAA2B;AAAA,IAC/B,QAAQ,eAAe,aAAa,IAAI,SAAS;AAAA,IACjD,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACxD,KAAK,eAAe,aAAc,IAAI,OAAO,OAAQ;AAAA,EACvD;AAEA,QAAM,WAA0B;AAAA,IAC9B,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM,UAAU,SAAS,QAAQ,SAAS;AAAA,EAC5C;AAEA,QAAM,MAAM,cAAc,SACtB,MAAM,IAAI,gBAAW,IAAI,YAAY,UACrC;AAEJ,MAAI,IAAK,SAAQ,OAAO,MAAM,MAAM,IAAI;AAExC,QAAM,UAAU,cAAc,SAAS,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,KAAK,UAAU,QAAQ,KAAK;AACvG,QAAM,WAAW,eAAe,aAAa,mBAAmB,IAAI,MAAM,IAAI,SAAS;AACvF,MAAI,YAAY;AACd,gBAAY,YAAY,MAAM;AAAA,EAChC,OAAO;AACL,QAAI;AACF,SAAG,UAAU,QAAQ,OAAO,IAAI,MAAM;AAAA,IACxC,SAAS,UAAU;AACjB,UAAK,SAAmC,SAAS,QAAS,OAAM;AAAA,IAClE;AAAA,EACF;AACA,UAAQ,WAAW;AACnB,QAAM,IAAI,WAAW,YAAY,SAAS,YAAY,MAAM;AAC9D;AAEO,SAAS,IAAI,SAAuB;AACzC,MAAI,cAAc,SAAS;AACzB,YAAQ,OAAO;AAAA,OACZ,cAAc,SAAS,MAAM,KAAK,SAAI,IAAI,MAAM,UAAU;AAAA,IAC7D;AAAA,EACF;AACF;AAEO,SAAS,KAAK,SAAuB;AAC1C,UAAQ,OAAO;AAAA,KACZ,cAAc,SAAS,MAAM,OAAO,SAAI,IAAI,MAAM,UAAU;AAAA,EAC/D;AACF;;;AClGA,eAAsB,gBACpB,QACuB;AACvB,QAAM,EAAE,KAAK,QAAQ,IAAI,OAAO;AAEhC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,WAAW,+DAA+D,CAAC;AAAA,EACvF;AAEA,MAAI,CAAC,KAAK;AACR,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,OAAO,KAAK,MAAM,GAAG,EAAE,SAAS,QAAQ;AACxD,QAAM,aAAa,SAAS,OAAO;AACnC,SAAO,CAAC,KAAkC,SACxC,MAAM,KAAK;AAAA,IACT,GAAG;AAAA,IACH,SAAS;AAAA,MACP,GAAI,MAAM;AAAA,MACV,iBAAiB;AAAA,MACjB,gBAAgB;AAAA,MAChB,UAAU;AAAA,IACZ;AAAA,EACF,CAAC;AACL;;;AC/BA,IAAM,eAAe;AACrB,IAAM,mBAAmB;AACzB,IAAM,WAAW;AAaV,SAAS,sBAAsB,QAAsC;AAC1E,QAAM,EAAE,SAAS,UAAU,SAAS,IAAI,OAAO;AAE/C,MAAI,CAAC,QAAS,OAAM,IAAI,WAAW,4DAA4D,CAAC;AAChG,MAAI,CAAC,SAAU,OAAM,IAAI,WAAW,6DAA6D,CAAC;AAClG,MAAI,CAAC,SAAU,OAAM,IAAI,WAAW,6DAA6D,CAAC;AAGlG,QAAM,mBAA2B;AACjC,QAAM,mBAA2B;AACjC,QAAM,WAAW,GAAG,QAAQ,QAAQ,OAAO,EAAE,CAAC;AAC9C,MAAI,QAA2B;AAE/B,iBAAe,WAA4B;AACzC,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,SAAS,MAAM,YAAY,MAAM,KAAQ;AAC3C,aAAO,MAAM;AAAA,IACf;AAEA,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe;AAAA,MACf,OAAO;AAAA,MACP,UAAU;AAAA,MACV,UAAU;AAAA,IACZ,CAAC;AAED,UAAM,WAAW,MAAM,MAAM,UAAU;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,oCAAoC;AAAA,MAC/D,MAAM,KAAK,SAAS;AAAA,IACtB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,OAAO,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AACjD,YAAM,IAAI;AAAA,QACR,oCAAoC,SAAS,MAAM,MAAM,QAAQ,SAAS,UAAU;AAAA,QACpF,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI,CAAC,KAAK,cAAc;AACtB,YAAM,IAAI,WAAW,qDAAqD,SAAS,MAAM;AAAA,IAC3F;AACA,YAAQ;AAAA,MACN,OAAO,KAAK;AAAA,MACZ,WAAW,MAAM,KAAK,aAAa;AAAA,IACrC;AACA,WAAO,MAAM;AAAA,EACf;AAIA,SAAO,OAAO,KAAkC,SAA0D;AACxG,UAAM,QAAQ,MAAM,SAAS;AAC7B,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG;AAAA,MACH,SAAS;AAAA,QACP,GAAI,MAAM;AAAA,QACV,iBAAiB,UAAU,KAAK;AAAA,MAClC;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AL3DA,SAAS,SAAS,MAAc,MAAc,QAAwE;AACpH,QAAM,MAAM,IAAI,IAAI,MAAM,KAAK,SAAS,GAAG,IAAI,OAAO,OAAO,GAAG;AAChE,MAAI,QAAQ;AACV,eAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,UAAI,QAAQ,QAAW;AACrB,YAAI,aAAa,IAAI,KAAK,OAAO,GAAG,CAAC;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AACA,SAAO,IAAI,SAAS;AACtB;AAEA,eAAe,iBAAiB,KAAa,MAAmB,WAAmB,UAAwB,OAA0B;AACnI,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,SAAS;AAC5D,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,EAAE,GAAG,MAAM,QAAQ,WAAW,OAAO,CAAC;AAAA,EAClE,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;AAEA,eAAe,QACb,KACA,MACA,WACA,UAAwB,OACZ;AACZ,MAAI;AAEJ,WAAS,UAAU,GAAG,UAAU,GAAG,WAAW;AAC5C,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,iBAAiB,KAAK,MAAM,WAAW,OAAO;AAAA,IACjE,SAAS,KAAK;AACZ,YAAM,IAAI;AAAA,QACR,mBAAmB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACnE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,aAAa,SAAS,QAAQ,IAAI,aAAa;AACrD,YAAM,SAAS,aAAa,SAAS,YAAY,EAAE,IAAI,OAAQ,UAAU,KAAK;AAC9E,UAAI,gCAAgC,MAAM,OAAO;AACjD,YAAM,IAAI,QAAQ,aAAW,WAAW,SAAS,MAAM,CAAC;AACxD,kBAAY,IAAI,WAAW,gBAAgB,KAAK,GAAG;AACnD;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,UAAU,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU;AAC5D,UAAI;AACF,cAAM,OAAO,MAAM,SAAS,KAAK;AACjC,cAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,cAAM,QAAkB,CAAC;AAEzB,YAAI,MAAM,QAAQ,OAAO,aAAa,GAAG;AACvC,gBAAM,KAAK,GAAI,OAAO,cAA2B,OAAO,OAAO,CAAC;AAAA,QAClE;AAEA,YAAI,OAAO,UAAU,OAAO,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,OAAO,MAAM,GAAG;AACvF,qBAAW,CAAC,OAAO,GAAG,KAAK,OAAO,QAAQ,OAAO,MAAgC,GAAG;AAClF,kBAAM,KAAK,GAAG,KAAK,KAAK,GAAG,EAAE;AAAA,UAC/B;AAAA,QACF;AAEA,YAAI,MAAM,QAAQ,OAAO,MAAM,GAAG;AAChC,qBAAW,KAAK,OAAO,QAAqD;AAC1E,gBAAI,GAAG,QAAS,OAAM,KAAK,EAAE,OAAO;AAAA,qBAC3B,GAAG,IAAK,OAAM,KAAK,EAAE,GAAG;AAAA,UACnC;AAAA,QACF;AAEA,YAAI,MAAM,WAAW,KAAK,OAAO,SAAS;AACxC,gBAAM,KAAK,OAAO,OAAO,OAAO,CAAC;AAAA,QACnC;AACA,YAAI,MAAM,SAAS,EAAG,WAAU,MAAM,KAAK,IAAI;AAAA,MACjD,QAAQ;AAAA,MAER;AACA,YAAM,IAAI,WAAW,SAAS,SAAS,QAAQ,GAAG;AAAA,IACpD;AAEA,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,IACT;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB;AAEA,QAAM,aAAa,IAAI,WAAW,gCAAgC,GAAG,GAAG;AAC1E;AAEO,IAAM,aAAN,MAAiB;AAAA,EACd;AAAA,EACA;AAAA,EACA,aAAkC;AAAA,EAClC,mBAAwC;AAAA,EAEhD,YAAY,QAAwB,SAAS,OAAO;AAClD,SAAK,SAAS;AACd,SAAK,SAAS;AAAA,EAChB;AAAA,EAEQ,cAAsC;AAC5C,UAAM,EAAE,SAAS,IAAI,KAAK,OAAO;AACjC,QAAI,CAAC,SAAU,OAAM,IAAI,WAAW,yDAAyD;AAC7F,WAAO;AAAA,MACL,iBAAiB,UAAU,QAAQ;AAAA,MACnC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,mBAA2C;AACjD,UAAM,EAAE,IAAI,IAAI,KAAK,OAAO;AAC5B,QAAI,CAAC,IAAK,OAAM,IAAI,WAAW,8DAA8D;AAC7F,WAAO;AAAA,MACL,iBAAiB,UAAU,GAAG;AAAA,MAC9B,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,KACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,KAAK;AACjC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,qDAAqD;AAExF,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,YAAY;AACjC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAC,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEA,MAAM,UACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,UAAU;AACtC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,0DAA0D;AAE7F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,iBAAiB;AACtC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEQ,oBAA4C;AAClD,UAAM,EAAE,SAAS,IAAI,KAAK,OAAO;AACjC,QAAI,CAAC,SAAU,OAAM,IAAI,WAAW,+DAA+D;AACnG,WAAO;AAAA,MACL,iBAAiB,UAAU,QAAQ;AAAA,MACnC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,WACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,WAAW;AACvC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,2DAA2D;AAE9F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,kBAAkB;AACvC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEQ,aAAqC;AAC3C,UAAM,EAAE,MAAM,IAAI,KAAK,OAAO;AAC9B,QAAI,CAAC,MAAO,OAAM,IAAI,WAAW,+DAA+D;AAChG,WAAO;AAAA,MACL,iBAAiB,SAAS,KAAK;AAAA,MAC/B,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,IACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,IAAI;AAChC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,2DAA2D;AAE9F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,WAAW;AAChC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEA,MAAM,YACJ,WACc;AACd,UAAM,UAAe,CAAC;AACtB,QAAI,OAAO;AACX,UAAM,WAAW;AAEjB,WAAO,MAAM;AACX,YAAM,WAAW,MAAM,UAAU,MAAM,QAAQ;AAC/C,cAAQ,KAAK,GAAG,SAAS,OAAO;AAChC,UAAI,QAAQ,UAAU,SAAS,SAAS,SAAS,QAAQ,WAAW,EAAG;AACvE;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,gBAAuC;AACnD,QAAI,CAAC,KAAK,YAAY;AACpB,WAAK,aAAa,MAAM,gBAAgB,KAAK,MAAM;AAAA,IACrD;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,IACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,IAAI;AAChC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,6DAA6D;AAEhG,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAE/C,QAAI,KAAK,QAAQ;AACf,YAAM,MAAM,YAAY,KAAK,UAAU,KAAK,IAAI,GAAG;AAAA,KAC9C,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,UAAU,MAAM,KAAK,cAAc;AACzC,UAAM,iBAAyC;AAAA,MAC7C,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,GAAG,KAAK;AAAA,IACV;AACA,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB,SAAS;AAAA,MACT,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,KAAO,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,QACJ,MACA,OAA2B,CAAC,GACX;AACjB,UAAM,UAAU,KAAK,OAAO,IAAI;AAChC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,6DAA6D;AAEhG,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAE/C,QAAI,KAAK,QAAQ;AACf,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,YAAY,KAAK,UAAU,KAAK,IAAI,GAAG;AAAA,CAAI;AAC3E,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,UAAU,MAAM,KAAK,cAAc;AACzC,UAAM,WAAW,MAAM,iBAAiB,KAAK;AAAA,MAC3C,QAAQ,KAAK,UAAU;AAAA,MACvB,SAAS,EAAE,UAAU,cAAc,GAAG,KAAK,QAAQ;AAAA,IACrD,GAAG,KAAK,aAAa,KAAO,OAAO;AAEnC,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,UAAU,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU;AAC5D,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,MAAM,SAAS,KAAK,CAAC;AAC/C,YAAI,OAAO,QAAS,WAAU,OAAO,OAAO,OAAO;AAAA,MACrD,QAAQ;AAAA,MAAe;AACvB,YAAM,IAAI,WAAW,SAAS,SAAS,QAAQ,GAAG;AAAA,IACpD;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEA,MAAM,OACJ,MACA,OAA2B,CAAC,GACkB;AAC9C,UAAM,UAAU,KAAK,OAAO,IAAI;AAChC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,6DAA6D;AAEhG,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAE/C,QAAI,KAAK,QAAQ;AACf,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,YAAY,KAAK,UAAU,KAAK,IAAI,GAAG;AAAA,CAAI;AAC3E,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,UAAU,MAAM,KAAK,cAAc;AACzC,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,aAAa,GAAK;AAC1E,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,QAAQ,KAAK;AAAA,QAC5B,QAAQ,KAAK,UAAU;AAAA,QACvB,SAAS,EAAE,UAAU,oBAAoB,gBAAgB,oBAAoB,GAAG,KAAK,QAAQ;AAAA,QAC7F,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,QAC5D,QAAQ,WAAW;AAAA,MACrB,CAAC;AAAA,IACH,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,UAAU,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU;AAC5D,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,MAAM,SAAS,KAAK,CAAC;AAC/C,YAAI,OAAO,QAAS,WAAU,OAAO,OAAO,OAAO;AAAA,MACrD,QAAQ;AAAA,MAAe;AACvB,YAAM,IAAI,WAAW,SAAS,SAAS,QAAQ,GAAG;AAAA,IACpD;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAM,OAAO,OAAO,KAAK,MAAM,IAAI,IAAI;AACvC,WAAO,EAAE,MAAM,SAAS,SAAS,QAAQ;AAAA,EAC3C;AAAA,EAEA,MAAM,YACJ,WACc;AACd,UAAM,UAAe,CAAC;AACtB,QAAI;AAEJ,WAAO,MAAM;AACX,YAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,UAAU,KAAK;AAC/C,cAAQ,KAAK,GAAI,KAAK,SAAS,CAAC,CAAE;AAClC,YAAM,OAAO,QAAQ,IAAI,wBAAwB;AACjD,UAAI,CAAC,KAAM;AACX,cAAQ;AAAA,IACV;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,iBAAyC;AAC/C,UAAM,EAAE,UAAU,SAAS,IAAI,KAAK,OAAO;AAC3C,QAAI,CAAC,YAAY,CAAC,SAAU,OAAM,IAAI,WAAW,4DAA4D;AAC7G,UAAM,QAAQ,OAAO,KAAK,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,SAAS,QAAQ;AACtE,WAAO;AAAA,MACL,iBAAiB,SAAS,KAAK;AAAA,MAC/B,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,qBAA6C;AACnD,UAAM,EAAE,MAAM,IAAI,KAAK,OAAO;AAC9B,QAAI,CAAC,MAAO,OAAM,IAAI,WAAW,gEAAgE;AACjG,WAAO;AAAA,MACL,iBAAiB,UAAU,KAAK;AAAA,MAChC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,iBAAyC;AAC/C,UAAM,EAAE,KAAK,UAAU,SAAS,IAAI,KAAK,OAAO;AAChD,QAAI;AACJ,QAAI,YAAY,UAAU;AACxB,gBAAU,OAAO,KAAK,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,SAAS,QAAQ;AAAA,IACpE,WAAW,YAAY,KAAK;AAC1B,gBAAU,OAAO,KAAK,GAAG,QAAQ,IAAI,GAAG,EAAE,EAAE,SAAS,QAAQ;AAAA,IAC/D,WAAW,KAAK;AACd,gBAAU,OAAO,KAAK,uBAAuB,KAAK,UAAU,EAAE,OAAO,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,QAAQ;AAAA,IAClG,OAAO;AACL,YAAM,IAAI,WAAW,4DAA4D;AAAA,IACnF;AACA,WAAO;AAAA,MACL,iBAAiB,SAAS,OAAO;AAAA,MACjC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,QACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,QAAQ;AACpC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,wDAAwD;AAE3F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,eAAe;AACpC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEA,MAAM,WACJ,MACA,OAA2B,CAAC,GACiC;AAC7D,UAAM,UAAU,KAAK,OAAO,QAAQ;AACpC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,wDAAwD;AAE3F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,eAAe;AAEpC,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,UAAU,KAAK,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KAChG,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,WAAW,MAAM,iBAAiB,KAAK;AAAA,MAC3C,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D,GAAG,KAAK,aAAa,GAAK;AAE1B,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,UAAU,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU;AAC5D,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,MAAM,SAAS,KAAK,CAAC;AAC/C,YAAI,OAAO,QAAS,WAAU,OAAO,OAAO,OAAO;AAAA,MACrD,QAAQ;AAAA,MAAe;AACvB,YAAM,IAAI,WAAW,SAAS,SAAS,QAAQ,GAAG;AAAA,IACpD;AAEA,WAAO,EAAE,QAAQ,SAAS,QAAQ,SAAS,SAAS,SAAS,MAAM,MAAM,SAAS,KAAK,EAAE;AAAA,EAC3F;AAAA,EAEA,MAAM,YACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,YAAY;AACxC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,4DAA4D;AAE/F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,EAAE,GAAG,KAAK,mBAAmB,GAAG,GAAG,KAAK,QAAQ;AAGhE,UAAM,OAAO,KAAK,SAAS,SACtB,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAK,UAAU,KAAK,IAAI,IACrE;AAEJ,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA;AAAA,IACF;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AAC/G,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAGA,MAAM,QACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,QAAQ;AACpC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,wDAAwD;AAE3F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,eAAe;AACpC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEA,MAAM,gBACJ,MACA,OAA2B,CAAC,GACX;AACjB,UAAM,UAAU,KAAK,OAAO,YAAY;AACxC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,4DAA4D;AAE/F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,EAAE,GAAG,KAAK,mBAAmB,GAAG,QAAQ,cAAc,GAAG,KAAK,QAAQ;AAEtF,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,YAAY,KAAK,UAAU,KAAK,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,CAAI;AAC7H,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,WAAW,MAAM,iBAAiB,KAAK;AAAA,MAC3C,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,IACF,GAAG,KAAK,aAAa,GAAK;AAE1B,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,UAAU,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU;AAC5D,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,MAAM,SAAS,KAAK,CAAC;AAC/C,YAAI,OAAO,QAAS,WAAU,OAAO,OAAO,OAAO;AAAA,MACrD,QAAQ;AAAA,MAAe;AACvB,YAAM,IAAI,WAAW,SAAS,SAAS,QAAQ,GAAG;AAAA,IACpD;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAIQ,eAAuC;AAC7C,UAAM,EAAE,MAAM,IAAI,KAAK,OAAO;AAC9B,QAAI,CAAC,MAAO,OAAM,IAAI,WAAW,8DAA8D;AAC/F,WAAO;AAAA,MACL,iBAAiB,UAAU,KAAK;AAAA,MAChC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,MACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,MAAM;AAClC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,0DAA0D;AAE7F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,aAAa;AAClC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEA,MAAM,cACJ,WACc;AACd,UAAM,UAAe,CAAC;AACtB,QAAI,OAAO;AACX,UAAM,WAAW;AAEjB,WAAO,MAAM;AACX,YAAM,WAAW,MAAM,UAAU,MAAM,QAAQ;AAC/C,cAAQ,KAAK,GAAG,SAAS,KAAK;AAC9B,UAAI,QAAQ,UAAU,SAAS,SAAS,SAAS,MAAM,WAAW,EAAG;AACrE;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,mBACJ,WACc;AACd,UAAM,UAAe,CAAC;AACtB,QAAI,QAAQ;AACZ,UAAM,QAAQ;AAEd,WAAO,MAAM;AACX,YAAM,OAAO,MAAM,UAAU,OAAO,KAAK;AACzC,cAAQ,KAAK,GAAG,KAAK,OAAO;AAC5B,UAAI,CAAC,KAAK,OAAO,KAAM;AACvB,eAAS,KAAK;AAAA,IAChB;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SACJ,WACc;AACd,UAAM,UAAe,CAAC;AACtB,QAAI,QAAQ;AACZ,UAAM,QAAQ;AAEd,WAAO,MAAM;AACX,YAAM,OAAO,MAAM,UAAU,OAAO,KAAK;AACzC,cAAQ,KAAK,GAAG,KAAK,MAAM;AAC3B,UAAI,KAAK,WAAY;AACrB,cAAQ,KAAK,iBAAiB,QAAQ;AAAA,IACxC;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,aACJ,WACc;AACd,UAAM,UAAe,CAAC;AACtB,QAAI,UAAU;AACd,UAAM,aAAa;AAEnB,WAAO,MAAM;AACX,YAAM,OAAO,MAAM,UAAU,SAAS,UAAU;AAChD,YAAM,QAAS,KAAK,UAAU,KAAK,UAAU,CAAC;AAC9C,cAAQ,KAAK,GAAG,KAAK;AACrB,iBAAW,MAAM;AACjB,UAAI,WAAW,KAAK,SAAS,MAAM,WAAW,EAAG;AAAA,IACnD;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,sBAAoC;AAC1C,QAAI,CAAC,KAAK,kBAAkB;AAC1B,WAAK,mBAAmB,sBAAsB,KAAK,MAAM;AAAA,IAC3D;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEQ,oBAA4C;AAClD,UAAM,EAAE,UAAU,UAAU,SAAS,IAAI,KAAK,OAAO;AACrD,QAAI;AACJ,QAAI,YAAY,UAAU;AACxB,gBAAU,OAAO,KAAK,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,SAAS,QAAQ;AAAA,IACpE,WAAW,YAAY,UAAU;AAC/B,gBAAU,OAAO,KAAK,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,SAAS,QAAQ;AAAA,IACpE,OAAO;AACL,YAAM,IAAI,WAAW,+DAA+D;AAAA,IACtF;AACA,WAAO;AAAA,MACL,iBAAiB,SAAS,OAAO;AAAA,MACjC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,WACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,WAAW;AACvC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,2DAA2D;AAE9F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,kBAAkB;AACvC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEQ,kBAA0C;AAChD,UAAM,EAAE,QAAQ,YAAY,SAAS,IAAI,KAAK,OAAO;AACrD,QAAI,CAAC,UAAU,CAAC,cAAc,CAAC,UAAU;AACvC,YAAM,IAAI,WAAW,6DAA6D;AAAA,IACpF;AACA,UAAM,gBAAgB,OAAO,KAAK,GAAG,QAAQ,IAAI,UAAU,EAAE,EAAE,SAAS,QAAQ;AAChF,WAAO;AAAA,MACL,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,SACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,SAAS,WAAW;AAEhD,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,gBAAgB;AACrC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,cAAc,WAAW,aAAa;AACvF,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEQ,oBAA4C;AAClD,UAAM,EAAE,UAAU,SAAS,IAAI,KAAK,OAAO;AAC3C,QAAI,CAAC,YAAY,CAAC,SAAU,OAAM,IAAI,WAAW,gEAAgE;AACjH,UAAM,UAAU,OAAO,KAAK,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,SAAS,QAAQ;AACxE,WAAO;AAAA,MACL,iBAAiB,SAAS,OAAO;AAAA,MACjC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,WACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,WAAW;AACvC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,mEAAmE;AAEtG,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,kBAAkB;AACvC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEA,MAAM,UACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,UAAU;AACtC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,0DAA0D;AAE7F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAE/C,QAAI,KAAK,QAAQ;AACf,YAAM,MAAM,YAAY,KAAK,UAAU,KAAK,IAAI,GAAG;AAAA,KAC9C,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,UAAU,KAAK,oBAAoB;AACzC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB,SAAS,EAAE,UAAU,oBAAoB,gBAAgB,oBAAoB,GAAG,KAAK,QAAQ;AAAA,MAC7F,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,KAAO,OAAO;AAAA,EAC/D;AACF;AAEO,SAAS,iBAAiB,QAAwB,SAAS,OAAmB;AACnF,SAAO,IAAI,WAAW,QAAQ,MAAM;AACtC;","names":["fs","fs"]}

package/dist/{chunk-S4SJLY4M.js → chunk-O3LWAWSN.js}

@@ -34,6 +34,18 @@ var ENV_KEYS = {
   CHECKMARX_BASE_URL: "PNCLI_CHECKMARX_BASE_URL",
   CHECKMARX_USERNAME: "PNCLI_CHECKMARX_USERNAME",
   CHECKMARX_PASSWORD: "PNCLI_CHECKMARX_PASSWORD",
+  SERVICENOW_BASE_URL: "PNCLI_SERVICENOW_BASE_URL",
+  SERVICENOW_USERNAME: "PNCLI_SERVICENOW_USERNAME",
+  SERVICENOW_PASSWORD: "PNCLI_SERVICENOW_PASSWORD",
+  SERVICENOW_API_TOKEN: "PNCLI_SERVICENOW_API_TOKEN",
+  CONTRAST_BASE_URL: "PNCLI_CONTRAST_BASE_URL",
+  CONTRAST_ORG_UUID: "PNCLI_CONTRAST_ORG_UUID",
+  CONTRAST_API_KEY: "PNCLI_CONTRAST_API_KEY",
+  CONTRAST_SERVICE_KEY: "PNCLI_CONTRAST_SERVICE_KEY",
+  CONTRAST_USERNAME: "PNCLI_CONTRAST_USERNAME",
+  SONATYPEIQ_BASE_URL: "PNCLI_SONATYPEIQ_BASE_URL",
+  SONATYPEIQ_USER_CODE: "PNCLI_SONATYPEIQ_USER_CODE",
+  SONATYPEIQ_PASSCODE: "PNCLI_SONATYPEIQ_PASSCODE",
   CONFIG_PATH: "PNCLI_CONFIG_PATH"
 };
 function getGlobalConfigPath(overridePath) {
@@ -148,6 +160,24 @@ function loadConfig(opts = {}) {
       username: process.env[ENV_KEYS.CHECKMARX_USERNAME] ?? globalConfig.checkmarx?.username,
       password: process.env[ENV_KEYS.CHECKMARX_PASSWORD] ?? globalConfig.checkmarx?.password
     },
+    servicenow: {
+      baseUrl: process.env[ENV_KEYS.SERVICENOW_BASE_URL] ?? globalConfig.servicenow?.baseUrl,
+      username: process.env[ENV_KEYS.SERVICENOW_USERNAME] ?? globalConfig.servicenow?.username,
+      password: process.env[ENV_KEYS.SERVICENOW_PASSWORD] ?? globalConfig.servicenow?.password,
+      apiToken: process.env[ENV_KEYS.SERVICENOW_API_TOKEN] ?? globalConfig.servicenow?.apiToken
+    },
+    contrast: {
+      baseUrl: process.env[ENV_KEYS.CONTRAST_BASE_URL] ?? globalConfig.contrast?.baseUrl,
+      orgUuid: process.env[ENV_KEYS.CONTRAST_ORG_UUID] ?? globalConfig.contrast?.orgUuid,
+      apiKey: process.env[ENV_KEYS.CONTRAST_API_KEY] ?? globalConfig.contrast?.apiKey,
+      serviceKey: process.env[ENV_KEYS.CONTRAST_SERVICE_KEY] ?? globalConfig.contrast?.serviceKey,
+      username: process.env[ENV_KEYS.CONTRAST_USERNAME] ?? globalConfig.contrast?.username
+    },
+    sonatypeiq: {
+      baseUrl: process.env[ENV_KEYS.SONATYPEIQ_BASE_URL] ?? globalConfig.sonatypeiq?.baseUrl,
+      userCode: process.env[ENV_KEYS.SONATYPEIQ_USER_CODE] ?? globalConfig.sonatypeiq?.userCode,
+      passcode: process.env[ENV_KEYS.SONATYPEIQ_PASSCODE] ?? globalConfig.sonatypeiq?.passcode
+    },
     defaults: mergedDefaults
   };
 }
@@ -240,6 +270,20 @@ function maskConfig(config) {
     checkmarx: {
       ...config.checkmarx,
       password: config.checkmarx.password ? "***" : void 0
+    },
+    servicenow: {
+      ...config.servicenow,
+      password: config.servicenow.password ? "***" : void 0,
+      apiToken: config.servicenow.apiToken ? "***" : void 0
+    },
+    contrast: {
+      ...config.contrast,
+      apiKey: config.contrast.apiKey ? "***" : void 0,
+      serviceKey: config.contrast.serviceKey ? "***" : void 0
+    },
+    sonatypeiq: {
+      ...config.sonatypeiq,
+      passcode: config.sonatypeiq.passcode ? "***" : void 0
     }
   };
 }
@@ -253,4 +297,4 @@ export {
   setRepoConfigValue,
   maskConfig
 };
-//# sourceMappingURL=chunk-S4SJLY4M.js.map
+//# sourceMappingURL=chunk-O3LWAWSN.js.map