@ouro.bot/cli 0.1.0-alpha.62 → 0.1.0-alpha.636

package/dist/nerves/runtime.js

@@ -6,7 +6,11 @@ const index_1 = require("./index");
 let runtimeLogger = null;
 function getRuntimeLogger() {
     if (!runtimeLogger) {
-        runtimeLogger = (0, index_1.createLogger)({ level: "info" });
+        // Default logger has no sinks — events emitted before the real logger is
+        // configured (e.g. identity resolution during startup) are silently dropped.
+        // This prevents INFO lines from leaking to stderr and interleaving with
+        // the CLI spinner when the ouro subprocess hasn't configured its logger yet.
+        runtimeLogger = (0, index_1.createLogger)({ level: "info", sinks: [] });
     }
     return runtimeLogger;
 }

package/dist/repertoire/ado-client.js

@@ -9,6 +9,7 @@ exports.discoverOrganizations = discoverOrganizations;
 exports.discoverProjects = discoverProjects;
 const api_error_1 = require("../heart/api-error");
 const runtime_1 = require("../nerves/runtime");
+const api_client_1 = require("./api-client");
 const ADO_BASE = "https://dev.azure.com";
 const VSSPS_BASE = "https://app.vssps.visualstudio.com";
 const DEFAULT_API_VERSION = "api-version=7.1";
@@ -30,62 +31,20 @@ function resolveContentType(method, path) {
 // Generic ADO API request. Returns response body as pretty-printed JSON string.
 // `host` overrides the base URL for non-standard APIs (e.g. "vsapm.dev.azure.com", "vssps.dev.azure.com").
 async function adoRequest(token, method, org, path, body, host) {
-    try {
-        const base = host ? `https://${host}/${org}` : `${ADO_BASE}/${org}`;
-        (0, runtime_1.emitNervesEvent)({
-            event: "client.request_start",
-            component: "clients",
-            message: "starting ADO request",
-            meta: { client: "ado", method, org, path },
-        });
-        const fullPath = ensureApiVersion(path);
-        const url = `${base}${fullPath}`;
-        const contentType = resolveContentType(method, path);
-        const opts = {
-            method,
-            headers: {
-                Authorization: `Bearer ${token}`,
-                "Content-Type": contentType,
-            },
-        };
-        if (body)
-            opts.body = body;
-        const res = await fetch(url, opts);
-        if (!res.ok) {
-            (0, runtime_1.emitNervesEvent)({
-                level: "error",
-                event: "client.error",
-                component: "clients",
-                message: "ADO request failed",
-                meta: { client: "ado", method, org, path, status: res.status },
-            });
-            return (0, api_error_1.handleApiError)(res, "ADO", "ado");
-        }
-        const data = await res.json();
-        (0, runtime_1.emitNervesEvent)({
-            event: "client.request_end",
-            component: "clients",
-            message: "ADO request completed",
-            meta: { client: "ado", method, org, path, success: true },
-        });
-        return JSON.stringify(data, null, 2);
-    }
-    catch (err) {
-        (0, runtime_1.emitNervesEvent)({
-            level: "error",
-            event: "client.error",
-            component: "clients",
-            message: "ADO request threw exception",
-            meta: {
-                client: "ado",
-                method,
-                org,
-                path,
-                reason: err instanceof Error ? err.message : String(err),
-            },
-        });
-        return (0, api_error_1.handleApiError)(err, "ADO", "ado");
-    }
+    const base = host ? `https://${host}/${org}` : `${ADO_BASE}/${org}`;
+    const fullPath = ensureApiVersion(path);
+    return (0, api_client_1.apiRequest)({
+        baseUrl: base,
+        method,
+        path: fullPath,
+        token,
+        clientName: "ado",
+        serviceLabel: "ADO",
+        connectionName: "ado",
+        body,
+        contentType: resolveContentType(method, path),
+        eventMeta: { org },
+    });
 }
 // Backward-compatible thin wrapper: runs WIQL query and returns formatted work items.
 async function queryWorkItems(token, org, query) {

package/dist/repertoire/ado-semantic.js

@@ -221,7 +221,7 @@ exports.adoSemanticToolDefinitions = [
             type: "function",
             function: {
                 name: "ado_backlog_list",
-                description: "Query the backlog and return enriched work items with hierarchy, type, parent, assignee, area path, and iteration. Supports filtering. Use this instead of raw WIQL queries.",
+                description: "Query the backlog and return enriched work items with hierarchy, type, parent, assignee, area path, and iteration. Supports filtering. Use this instead of raw WIQL queries. Provides enriched results with hierarchy.",
                 parameters: {
                     type: "object",
                     properties: {
@@ -279,6 +279,7 @@ exports.adoSemanticToolDefinitions = [
             return formatForChannel(items, ctx, organization, project);
         },
         integration: "ado",
+        summaryKeys: ["organization", "project"],
     },
     // -- ado_create_epic --
     {
@@ -286,7 +287,7 @@ exports.adoSemanticToolDefinitions = [
             type: "function",
             function: {
                 name: "ado_create_epic",
-                description: "Create an epic in Azure DevOps with title, description, area path, and optional parent.",
+                description: "Create an epic in Azure DevOps with title, description, area path, and optional parent. Use ado_preview_changes first to dry-run the operation.",
                 parameters: {
                     type: "object",
                     properties: {
@@ -317,7 +318,8 @@ exports.adoSemanticToolDefinitions = [
             return result;
         },
         integration: "ado",
-        confirmationRequired: true,
+        summaryKeys: ["organization", "project", "title"],
+        riskProfile: { mutates: "external_side_effect", risk: "high", reason: "creates an Azure DevOps epic" },
     },
     // -- ado_create_issue --
     {
@@ -325,7 +327,7 @@ exports.adoSemanticToolDefinitions = [
             type: "function",
             function: {
                 name: "ado_create_issue",
-                description: "Create an issue or user story in Azure DevOps with title, description, area path, and parent epic.",
+                description: "Create an issue or user story in Azure DevOps with title, description, area path, and parent epic. Use ado_preview_changes first to dry-run the operation.",
                 parameters: {
                     type: "object",
                     properties: {
@@ -358,7 +360,8 @@ exports.adoSemanticToolDefinitions = [
             return result;
         },
         integration: "ado",
-        confirmationRequired: true,
+        summaryKeys: ["organization", "project", "title"],
+        riskProfile: { mutates: "external_side_effect", risk: "high", reason: "creates an Azure DevOps work item" },
     },
     // -- ado_move_items --
     {
@@ -366,7 +369,7 @@ exports.adoSemanticToolDefinitions = [
             type: "function",
             function: {
                 name: "ado_move_items",
-                description: "Reparent work items -- move them to a new parent epic or feature.",
+                description: "Reparent work items -- move them to a new parent epic or feature. Use ado_preview_changes first. These mutations affect real work items.",
                 parameters: {
                     type: "object",
                     properties: {
@@ -412,7 +415,8 @@ exports.adoSemanticToolDefinitions = [
             return JSON.stringify({ moved, errors, organization: adoCtx.organization, project: adoCtx.project });
         },
         integration: "ado",
-        confirmationRequired: true,
+        summaryKeys: ["organization", "project", "workItemIds"],
+        riskProfile: { mutates: "external_side_effect", risk: "high", reason: "reparents Azure DevOps work items" },
     },
     // -- ado_restructure_backlog --
     {
@@ -420,7 +424,7 @@ exports.adoSemanticToolDefinitions = [
             type: "function",
             function: {
                 name: "ado_restructure_backlog",
-                description: "Bulk restructure: reparent multiple work items in a single logical operation.",
+                description: "Bulk restructure: reparent multiple work items in a single logical operation. Use ado_preview_changes first. These mutations affect real work items.",
                 parameters: {
                     type: "object",
                     properties: {
@@ -470,7 +474,8 @@ exports.adoSemanticToolDefinitions = [
             return JSON.stringify({ results, organization: adoCtx.organization, project: adoCtx.project });
         },
         integration: "ado",
-        confirmationRequired: true,
+        summaryKeys: ["organization", "project"],
+        riskProfile: { mutates: "external_side_effect", risk: "high", reason: "bulk-reparents Azure DevOps work items" },
     },
     // -- ado_validate_structure --
     {
@@ -671,7 +676,8 @@ exports.adoSemanticToolDefinitions = [
             return JSON.stringify({ results, organization: adoCtx.organization, project: adoCtx.project });
         },
         integration: "ado",
-        confirmationRequired: true,
+        summaryKeys: ["organization", "project"],
+        riskProfile: { mutates: "external_side_effect", risk: "high", reason: "executes Azure DevOps batch mutations" },
     },
     // -- ado_detect_orphans --
     {

package/dist/repertoire/api-client.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * Shared HTTP API client for Graph, ADO, and GitHub clients.
+ *
+ * All three API clients follow the same pattern: emit request_start event,
+ * build request with auth header, fetch, handle errors, emit request_end,
+ * and return pretty-printed JSON. This module extracts that shared logic.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apiRequest = apiRequest;
+const api_error_1 = require("../heart/api-error");
+const runtime_1 = require("../nerves/runtime");
+const credential_access_1 = require("./credential-access");
+/**
+ * Execute an authenticated API request with standard logging and error handling.
+ * Returns the response body as a pretty-printed JSON string.
+ */
+async function apiRequest(options) {
+    const { baseUrl, method, path, token, clientName, serviceLabel, connectionName, body, extraHeaders, contentType, eventMeta, credentialDomain, credentialField, } = options;
+    // Resolve token from credential store if credentialDomain is provided
+    let resolvedToken = token;
+    if (credentialDomain) {
+        try {
+            const store = (0, credential_access_1.getCredentialStore)();
+            resolvedToken = await store.getRawSecret(credentialDomain, credentialField ?? "password");
+            (0, runtime_1.emitNervesEvent)({
+                event: "client.credential_fetch",
+                component: "clients",
+                message: `fetched credential from store for ${serviceLabel}`,
+                meta: { client: clientName, credentialDomain },
+            });
+        }
+        catch (err) {
+            (0, runtime_1.emitNervesEvent)({
+                level: "error",
+                event: "client.credential_error",
+                component: "clients",
+                message: `failed to fetch credential for ${serviceLabel}`,
+                /* v8 ignore next -- defensive: getRawSecret throws Error instances @preserve */
+                meta: { client: clientName, credentialDomain, reason: err instanceof Error ? err.message : String(err) },
+            });
+            return (0, api_error_1.handleApiError)(err, serviceLabel, connectionName);
+        }
+    }
+    try {
+        (0, runtime_1.emitNervesEvent)({
+            event: "client.request_start",
+            component: "clients",
+            message: `starting ${serviceLabel} request`,
+            meta: { client: clientName, method, path, ...eventMeta },
+        });
+        const url = `${baseUrl}${path}`;
+        const headers = {
+            Authorization: `Bearer ${resolvedToken}`,
+            "Content-Type": contentType ?? "application/json",
+            ...extraHeaders,
+        };
+        const opts = { method, headers };
+        if (body)
+            opts.body = body;
+        const res = await fetch(url, opts);
+        if (!res.ok) {
+            (0, runtime_1.emitNervesEvent)({
+                level: "error",
+                event: "client.error",
+                component: "clients",
+                message: `${serviceLabel} request failed`,
+                meta: { client: clientName, method, path, status: res.status, ...eventMeta },
+            });
+            return (0, api_error_1.handleApiError)(res, serviceLabel, connectionName);
+        }
+        const data = await res.json();
+        (0, runtime_1.emitNervesEvent)({
+            event: "client.request_end",
+            component: "clients",
+            message: `${serviceLabel} request completed`,
+            meta: { client: clientName, method, path, success: true, ...eventMeta },
+        });
+        return JSON.stringify(data, null, 2);
+    }
+    catch (err) {
+        (0, runtime_1.emitNervesEvent)({
+            level: "error",
+            event: "client.error",
+            component: "clients",
+            message: `${serviceLabel} request threw exception`,
+            meta: {
+                client: clientName,
+                method,
+                path,
+                reason: err instanceof Error ? err.message : String(err),
+                ...eventMeta,
+            },
+        });
+        return (0, api_error_1.handleApiError)(err, serviceLabel, connectionName);
+    }
+}