@peterhauge/apiops-cli 0.1.3-alpha.0

package/LICENSE.md

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Microsoft Corporation
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,135 @@
+# apiops
+
+`apiops` is a CLI tool for Azure API Management (APIM) configuration-as-code. Extract your APIM service configuration to local artifact files, publish those artifacts back to Azure, and scaffold CI/CD pipelines — all from the command line.
+
+| | |
+|---|---|
+| **Source code** | [github.com/Azure/apiops-cli](https://github.com/Azure/apiops-cli) |
+| **Issues** | [GitHub Issues](https://github.com/Azure/apiops-cli/issues) |
+
+## Getting started
+
+**Prerequisites:** An Azure subscription with an existing APIM resource, and Node.js ≥ 22.
+
+```bash
+npm install -g @peterhauge/apiops-cli
+```
+
+## Authentication
+
+`apiops` uses [`@azure/identity`](https://github.com/Azure/azure-sdk-for-js/tree/main/sdk/identity/identity) `DefaultAzureCredential` for authentication:
+
+- To use environment variables, set the following variables: `AZURE_CLIENT_ID`, `AZURE_CLIENT_SECRET`, `AZURE_TENANT_ID`, and `AZURE_SUBSCRIPTION_ID`
+- To specify authentication in command, use the following flags: `--client-id`, `--client-secret`, `--tenant-id`, and `--subscription-id`
+- **CI/CD:** A service principal with the **API Management Service Contributor** role is recommended.
+- **Azure-hosted environments:** Managed Identity and Workload Identity are also supported.
+
+## Commands
+
+### `apiops extract`
+
+Extract APIM service configuration to local artifact files.
+
+| Flag | Default | Description |
+|------|---------|-------------|
+| `--resource-group <rg>` | *(required)* | Azure resource group |
+| `--service-name <name>` | *(required)* | APIM service name |
+| `--output <dir>` | `./apim-artifacts` | Output directory |
+| `--filter <path>` | | Extract only matching resources |
+| `--no-transitive` | | Skip transitive dependencies |
+| `--spec-format <format>` | | Override API spec format |
+
+```bash
+apiops extract --help
+
+# Basic extraction to the default output directory
+apiops extract \
+  --resource-group <rg> \
+  --service-name <name> \
+  --output ./apim-artifacts
+
+# Extract a filtered subset of resources and override the API spec format
+apiops extract \
+  --resource-group <rg> \
+  --service-name <name> \
+  --filter ./filter.yaml \
+  --spec-format openapi-v3-yaml
+
+# Authenticate explicitly with a service principal
+apiops extract \
+  --resource-group <rg> \
+  --service-name <name> \
+  --client-id $AZURE_CLIENT_ID \
+  --client-secret $AZURE_CLIENT_SECRET \
+  --tenant-id $AZURE_TENANT_ID \
+  --subscription-id $AZURE_SUBSCRIPTION_ID
+```
+
+### `apiops publish`
+
+Publish local artifact files to an Azure APIM service.
+
+| Flag | Default | Description |
+|------|---------|-------------|
+| `--resource-group <rg>` | *(required)* | Azure resource group |
+| `--service-name <name>` | *(required)* | APIM service name |
+| `--source <dir>` | `./apim-artifacts` | Source artifacts directory |
+| `--overrides <path>` | | Path to overrides file |
+| `--dry-run` | | Preview changes without applying |
+| `--delete-unmatched` | | Delete resources not in artifacts |
+
+```bash
+apiops publish --help
+
+# Preview changes without applying them
+apiops publish \
+  --resource-group <rg> \
+  --service-name <name> \
+  --dry-run
+
+# Publish and remove resources not present in the local artifacts
+apiops publish \
+  --resource-group <rg> \
+  --service-name <name> \
+  --delete-unmatched
+```
+
+### `apiops init`
+
+Scaffold a new APIM artifacts repository with CI/CD pipelines.
+
+| Flag | Description |
+|------|-------------|
+| `--cli-package <path>` | Path to a local `.tgz` tarball |
+| `--ci <platform>` | `github-actions` or `azure-devops` |
+| `--environments <list>` | Comma-separated environments (e.g. `dev,prod`) |
+| `--non-interactive` | Skip all prompts |
+| `--force` | Overwrite existing files |
+
+```bash
+apiops init --help
+
+apiops init \
+  --ci github-actions \
+  --environments dev,prod
+```
+
+## Global options
+
+| Option | Default | Description |
+|--------|---------|-------------|
+| `--subscription-id <id>` | `AZURE_SUBSCRIPTION_ID` env var | Azure subscription ID |
+| `--cloud <name>` | `public` | `public`, `china`, `usgov`, `germany` |
+| `--log-level <level>` | `info` | `debug`, `info`, `warn`, `error` |
+| `--format <type>` | `text` | `text` or `json` |
+| `--client-id <id>` | `AZURE_CLIENT_ID` env var | Service principal client ID |
+| `--client-secret <secret>` | `AZURE_CLIENT_SECRET` env var | Service principal secret |
+| `--tenant-id <id>` | `AZURE_TENANT_ID` env var | Azure AD tenant ID |
+
+## Contributing
+
+See [CONTRIBUTING.md](./CONTRIBUTING.md) for how to build, test, debug, and submit changes.
+
+## License
+
+[MIT](./LICENSE)

package/dist/cli/extract-command.d.ts

@@ -0,0 +1,12 @@
+/**
+ * T028 & T029: Extract command CLI registration
+ * Commander subcommand with --resource-group, --service-name, --output,
+ * --filter, --no-transitive, --spec-format flags.
+ * Includes --format json: machine-readable JSON output mode.
+ */
+import { Command } from 'commander';
+/**
+ * Create and return the extract command for Commander.
+ */
+export declare function createExtractCommand(): Command;
+//# sourceMappingURL=extract-command.d.ts.map

package/dist/cli/extract-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract-command.d.ts","sourceRoot":"","sources":["../../src/cli/extract-command.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsBpC;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAsB9C"}

package/dist/cli/extract-command.js

@@ -0,0 +1,157 @@
+/**
+ * T028 & T029: Extract command CLI registration
+ * Commander subcommand with --resource-group, --service-name, --output,
+ * --filter, --no-transitive, --spec-format flags.
+ * Includes --format json: machine-readable JSON output mode.
+ */
+import { Command } from 'commander';
+import { runExtraction } from '../services/extract-service.js';
+import { loadFilterConfig } from '../lib/config-loader.js';
+import { logger, parseLogLevel } from '../lib/logger.js';
+import { ApimClient } from '../clients/apim-client.js';
+import { ArtifactStore } from '../clients/artifact-store.js';
+import { getCloudConfig, buildArmBaseUrl } from '../lib/cloud-config.js';
+/**
+ * Create and return the extract command for Commander.
+ */
+export function createExtractCommand() {
+    const extract = new Command('extract')
+        .description('Extract APIM configuration to local artifact files')
+        .requiredOption('--resource-group <rg>', 'Azure resource group name')
+        .requiredOption('--service-name <name>', 'APIM service instance name')
+        .option('--output <dir>', 'Output directory path', './apim-artifacts')
+        .option('--filter <path>', 'Filter configuration YAML file')
+        .option('--no-transitive', 'Disable transitive dependency inclusion')
+        .option('--spec-format <format>', 'API specification format (openapi-v2-json, openapi-v3-json, openapi-v3-yaml)')
+        .action(async (options, command) => {
+        const globalOpts = command.optsWithGlobals();
+        await executeExtract(options, globalOpts);
+    });
+    return extract;
+}
+/**
+ * Execute the extract command.
+ */
+async function executeExtract(options, globalOpts) {
+    const subscriptionId = globalOpts.subscriptionId ?? process.env.AZURE_SUBSCRIPTION_ID;
+    if (!subscriptionId) {
+        logger.error('Subscription ID required: use --subscription-id or set AZURE_SUBSCRIPTION_ID');
+        process.exit(2);
+    }
+    // Build service context
+    const apiVersion = globalOpts.apiVersion ?? process.env.AZURE_API_VERSION ?? '2024-05-01';
+    const cloudName = globalOpts.cloud ?? 'public';
+    const cloudConfig = getCloudConfig(cloudName);
+    const baseUrl = buildArmBaseUrl(cloudName, subscriptionId, options.resourceGroup, options.serviceName);
+    const context = {
+        subscriptionId,
+        resourceGroup: options.resourceGroup,
+        serviceName: options.serviceName,
+        apiVersion,
+        baseUrl,
+    };
+    // Load filter config if specified
+    let filterConfig;
+    if (options.filter) {
+        filterConfig = await loadFilterConfig(options.filter);
+        if (!filterConfig) {
+            logger.error(`Filter file not found: ${options.filter}`);
+            process.exit(2);
+        }
+    }
+    // Build extract config
+    const extractConfig = {
+        service: context,
+        outputDir: options.output,
+        filter: filterConfig,
+        includeTransitive: options.transitive,
+        specFormat: options.specFormat,
+        logLevel: parseLogLevel(globalOpts.logLevel ?? 'info'),
+    };
+    // Create client and store
+    const client = new ApimClient(cloudConfig.authScope);
+    const store = new ArtifactStore();
+    // Run extraction
+    const result = await runExtraction(client, store, extractConfig);
+    // Output results
+    if (globalOpts.format === 'json') {
+        outputJson(result);
+    }
+    else {
+        outputText(result);
+    }
+    process.exit(result.exitCode);
+}
+/**
+ * T029: JSON output mode for extract.
+ * Machine-readable JSON to stdout with resource counts and file paths.
+ */
+function outputJson(result) {
+    const output = {
+        status: result.exitCode === 0 ? 'success' : result.exitCode === 1 ? 'partial' : 'error',
+        exitCode: result.exitCode,
+        summary: {
+            totalExtracted: result.totalExtracted,
+            totalErrors: result.totalErrors,
+            typeBreakdown: result.typeResults.map((tr) => ({
+                type: tr.type,
+                extracted: tr.extracted.filter((r) => r.status === 'success').length,
+                errors: tr.errorCount,
+            })),
+        },
+        resources: result.extractedDescriptors.map((d) => ({
+            type: d.type,
+            nameParts: d.nameParts,
+            workspace: d.workspace,
+        })),
+        apis: result.apiResults.map((ar) => ({
+            name: ar.apiName,
+            revisions: ar.revisions.filter((r) => r.status === 'success').length,
+            specification: ar.specification,
+            operations: ar.operations.filter((r) => r.status === 'success').length,
+            tags: ar.tags.filter((r) => r.status === 'success').length,
+        })),
+        workspaces: result.workspaceResults.map((wr) => ({
+            name: wr.workspaceName,
+            resources: wr.resourceCount,
+            errors: wr.errorCount,
+        })),
+    };
+    // JSON output goes to stdout (not stderr)
+    process.stdout.write(JSON.stringify(output, null, 2) + '\n');
+}
+/**
+ * Text output mode (default) — per-resource status lines.
+ */
+function outputText(result) {
+    // Per-type summary
+    for (const tr of result.typeResults) {
+        const successCount = tr.extracted.filter((r) => r.status === 'success').length;
+        if (successCount > 0) {
+            process.stdout.write(`Extracted ${successCount} ${tr.type}(s)\n`);
+        }
+        if (tr.errorCount > 0) {
+            process.stdout.write(`Failed ${tr.errorCount} ${tr.type}(s)\n`);
+        }
+    }
+    // API details
+    for (const ar of result.apiResults) {
+        const details = [];
+        if (ar.specification)
+            details.push('spec');
+        if (ar.operations.length > 0)
+            details.push(`${ar.operations.length} ops`);
+        if (ar.revisions.length > 0)
+            details.push(`${ar.revisions.length} revisions`);
+        if (details.length > 0) {
+            process.stdout.write(`  API "${ar.apiName}": ${details.join(', ')}\n`);
+        }
+    }
+    // Workspace details
+    for (const wr of result.workspaceResults) {
+        process.stdout.write(`Workspace "${wr.workspaceName}": ${wr.resourceCount} resources\n`);
+    }
+    // Summary
+    process.stdout.write(`\nTotal: ${result.totalExtracted} resources extracted, ${result.totalErrors} errors\n`);
+}
+//# sourceMappingURL=extract-command.js.map

package/dist/cli/extract-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract-command.js","sourceRoot":"","sources":["../../src/cli/extract-command.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,aAAa,EAAoB,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAczE;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC;SACnC,WAAW,CAAC,oDAAoD,CAAC;SACjE,cAAc,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;SACpE,cAAc,CAAC,uBAAuB,EAAE,4BAA4B,CAAC;SACrE,MAAM,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,kBAAkB,CAAC;SACrE,MAAM,CAAC,iBAAiB,EAAE,gCAAgC,CAAC;SAC3D,MAAM,CAAC,iBAAiB,EAAE,yCAAyC,CAAC;SACpE,MAAM,CAAC,wBAAwB,EAAE,8EAA8E,CAAC;SAChH,MAAM,CAAC,KAAK,EAAE,OAAuB,EAAE,OAAgB,EAAE,EAAE;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,EAMtC,CAAC;QAEL,MAAM,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEL,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,OAAuB,EACvB,UAMC;IAED,MAAM,cAAc,GAAG,UAAU,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAEtF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAC7F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,wBAAwB;IACxB,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,YAAY,CAAC;IAC1F,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,IAAI,QAAQ,CAAC;IAC/C,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAEvG,MAAM,OAAO,GAAuB;QAClC,cAAc;QACd,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU;QACV,OAAO;KACR,CAAC;IAEF,kCAAkC;IAClC,IAAI,YAAY,CAAC;IACjB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,YAAY,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,0BAA0B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,MAAM,aAAa,GAAkB;QACnC,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,OAAO,CAAC,MAAM;QACzB,MAAM,EAAE,YAAY;QACpB,iBAAiB,EAAE,OAAO,CAAC,UAAU;QACrC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,QAAQ,IAAI,MAAM,CAAC;KACvD,CAAC;IAEF,0BAA0B;IAC1B,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;IAElC,iBAAiB;IACjB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAEjE,iBAAiB;IACjB,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACjC,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,MAAwB;IAC1C,MAAM,MAAM,GAAG;QACb,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;QACvF,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE;YACP,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC7C,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;gBACpE,MAAM,EAAE,EAAE,CAAC,UAAU;aACtB,CAAC,CAAC;SACJ;QACD,SAAS,EAAE,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC;QACH,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,EAAE,CAAC,OAAO;YAChB,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;YACpE,aAAa,EAAE,EAAE,CAAC,aAAa;YAC/B,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;YACtE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;SAC3D,CAAC,CAAC;QACH,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,EAAE,CAAC,aAAa;YACtB,SAAS,EAAE,EAAE,CAAC,aAAa;YAC3B,MAAM,EAAE,EAAE,CAAC,UAAU;SACtB,CAAC,CAAC;KACJ,CAAC;IAEF,0CAA0C;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAAwB;IAC1C,mBAAmB;IACnB,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,YAAY,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QAC/E,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,YAAY,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,EAAE,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,cAAc;IACd,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,EAAE,CAAC,aAAa;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,CAAC;QAC1E,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,YAAY,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,aAAa,MAAM,EAAE,CAAC,aAAa,cAAc,CAAC,CAAC;IAC3F,CAAC;IAED,UAAU;IACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,YAAY,MAAM,CAAC,cAAc,yBAAyB,MAAM,CAAC,WAAW,WAAW,CACxF,CAAC;AACJ,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+/**
+ * T019: Commander program entry point
+ * Sets up global options and subcommand registration pattern
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;GAGG"}

package/dist/cli/index.js

@@ -0,0 +1,74 @@
+#!/usr/bin/env node
+/**
+ * T019: Commander program entry point
+ * Sets up global options and subcommand registration pattern
+ */
+import { Command, Option } from 'commander';
+import { logger, parseLogLevel } from '../lib/logger.js';
+import { createExtractCommand } from './extract-command.js';
+import { createPublishCommand } from './publish-command.js';
+import { createInitCommand } from './init-command.js';
+const program = new Command();
+// Configure program metadata
+program
+    .name('apiops')
+    .version('0.1.0')
+    .description('CLI tool for Azure API Management configuration-as-code');
+// Show global options in subcommand help (e.g. apiops extract --help)
+program.configureHelp({ showGlobalOptions: true });
+// Global options inherited by all subcommands
+program
+    .addOption(new Option('--log-level <level>', 'Log level: debug, info, warn, or error')
+    .choices(['debug', 'info', 'warn', 'error'])
+    .default('info'))
+    .option('--otel <path>', 'Path to OpenTelemetry config YAML')
+    .option('--format <type>', 'Output format: text or json', 'text')
+    .option('--subscription-id <id>', 'Azure subscription ID')
+    .option('--cloud <name>', 'Sovereign cloud: public, china, usgov, germany', 'public')
+    .option('--client-id <id>', 'Service principal client ID')
+    .option('--client-secret <secret>', 'Service principal client secret')
+    .option('--tenant-id <id>', 'Azure AD tenant ID');
+// Configure logger and set auth environment variables before each command
+program.hook('preAction', (thisCommand) => {
+    const opts = thisCommand.optsWithGlobals();
+    logger.configure({ level: parseLogLevel(opts.logLevel ?? 'info') });
+    // T040: Set DefaultAzureCredential env vars from explicit auth flags.
+    // This ensures the ServicePrincipal credential is tried first,
+    // avoiding interactive browser prompts in CI/CD pipelines.
+    if (opts.clientId) {
+        process.env.AZURE_CLIENT_ID = opts.clientId;
+    }
+    if (opts.clientSecret) {
+        process.env.AZURE_CLIENT_SECRET = opts.clientSecret;
+    }
+    if (opts.tenantId) {
+        process.env.AZURE_TENANT_ID = opts.tenantId;
+    }
+});
+// Subcommand registration section
+program.addCommand(createExtractCommand());
+program.addCommand(createPublishCommand());
+program.addCommand(createInitCommand());
+// Apply help configuration to all subcommands so global options are visible
+program.commands.forEach((cmd) => cmd.configureHelp({ showGlobalOptions: true }));
+// Handle unknown commands gracefully
+program.on('command:*', (operands) => {
+    const unknownCommand = operands[0] ?? 'unknown';
+    logger.error(`Unknown command: ${unknownCommand}`);
+    logger.info('Run "apiops --help" to see available commands');
+    process.exit(1);
+});
+// Parse arguments and handle errors
+try {
+    await program.parseAsync(process.argv);
+}
+catch (error) {
+    if (error instanceof Error) {
+        logger.error('Command failed:', error.message);
+    }
+    else {
+        logger.error('Command failed with unknown error');
+    }
+    process.exit(1);
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,6BAA6B;AAC7B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,yDAAyD,CAAC,CAAC;AAE1E,sEAAsE;AACtE,OAAO,CAAC,aAAa,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;AAEnD,8CAA8C;AAC9C,OAAO;KACJ,SAAS,CACR,IAAI,MAAM,CAAC,qBAAqB,EAAE,wCAAwC,CAAC;KACxE,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;KAC3C,OAAO,CAAC,MAAM,CAAC,CACnB;KACA,MAAM,CAAC,eAAe,EAAE,mCAAmC,CAAC;KAC5D,MAAM,CAAC,iBAAiB,EAAE,6BAA6B,EAAE,MAAM,CAAC;KAChE,MAAM,CAAC,wBAAwB,EAAE,uBAAuB,CAAC;KACzD,MAAM,CAAC,gBAAgB,EAAE,gDAAgD,EAAE,QAAQ,CAAC;KACpF,MAAM,CAAC,kBAAkB,EAAE,6BAA6B,CAAC;KACzD,MAAM,CAAC,0BAA0B,EAAE,iCAAiC,CAAC;KACrE,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;AAEpD,0EAA0E;AAC1E,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,eAAe,EAKpC,CAAC;IAEL,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC;IAEpE,sEAAsE;IACtE,+DAA+D;IAC/D,2DAA2D;IAC3D,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC9C,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,IAAI,CAAC,YAAY,CAAC;IACtD,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC9C,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,kCAAkC;AAClC,OAAO,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,CAAC;AAC3C,OAAO,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,CAAC;AAC3C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AAExC,4EAA4E;AAC5E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAElF,qCAAqC;AACrC,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAkB,EAAE,EAAE;IAC7C,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,oBAAoB,cAAc,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,oCAAoC;AACpC,IAAI,CAAC;IACH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/cli/init-command.d.ts

@@ -0,0 +1,11 @@
+/**
+ * T050: Register init command
+ * Commander subcommand with --ci, --non-interactive, --artifact-dir, --environments flags
+ * Wire to init-service
+ */
+import { Command } from 'commander';
+/**
+ * Create and return the init command for Commander
+ */
+export declare function createInitCommand(): Command;
+//# sourceMappingURL=init-command.d.ts.map

package/dist/cli/init-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-command.d.ts","sourceRoot":"","sources":["../../src/cli/init-command.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBpC;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAiF3C"}

package/dist/cli/init-command.js

@@ -0,0 +1,87 @@
+/**
+ * T050: Register init command
+ * Commander subcommand with --ci, --non-interactive, --artifact-dir, --environments flags
+ * Wire to init-service
+ */
+import { Command } from 'commander';
+import { initService } from '../services/init-service.js';
+import { logger } from '../lib/logger.js';
+/**
+ * Create and return the init command for Commander
+ */
+export function createInitCommand() {
+    const init = new Command('init')
+        .description('Initialize APIM repository with CI/CD pipelines and configuration templates')
+        .option('--ci <provider>', 'CI/CD provider: github-actions or azure-devops')
+        .option('--non-interactive', 'Skip interactive prompts (requires --ci)', false)
+        .option('--artifact-dir <dir>', 'Artifact directory path', './apim-artifacts')
+        .option('--environments <list>', 'Comma-separated environment names', 'dev,prod')
+        .requiredOption('--cli-package <path>', 'Path to apiops npm tarball (from npm pack)')
+        .option('--force', 'Overwrite existing files without prompting', false)
+        .action(async (options) => {
+        try {
+            // Use pretty log format for init (human-facing command)
+            logger.setFormat('pretty');
+            // Validate CI provider if specified
+            if (options.ci && options.ci !== 'github-actions' && options.ci !== 'azure-devops') {
+                logger.error('Invalid CI provider. Must be "github-actions" or "azure-devops"');
+                process.exit(1);
+            }
+            // Parse environments
+            const environments = options.environments
+                .split(',')
+                .map((env) => env.trim())
+                .filter((env) => env.length > 0);
+            if (environments.length === 0) {
+                logger.error('At least one environment must be specified');
+                process.exit(1);
+            }
+            // Build config
+            const config = {
+                ciProvider: options.ci,
+                nonInteractive: options.nonInteractive,
+                artifactDir: options.artifactDir,
+                environments,
+                outputDir: process.cwd(),
+                cliPackage: options.cliPackage,
+                force: options.force,
+            };
+            // Run init service
+            const generatedFiles = await initService.run(config);
+            // Output file listing
+            const allFiles = [
+                ...generatedFiles.pipelines,
+                ...generatedFiles.configs,
+            ];
+            logger.info(`\nGenerated ${allFiles.length} file(s):`);
+            allFiles.forEach((file) => logger.info(`  - ${file.startsWith('./') ? file : './' + file}`));
+            logger.info(`\nCreated ${generatedFiles.directories.length} directory/directories:`);
+            generatedFiles.directories.forEach((dir) => logger.info(`  - ${dir.startsWith('./') ? dir : './' + dir}`));
+            // Determine which CI provider was actually used by checking generated files
+            const isGitHub = allFiles.some((f) => f.includes('IDENTITY-SETUP-GITHUB.md'));
+            logger.info('\nNext steps:');
+            logger.info('  1. Review and customize the generated configuration files');
+            logger.info('  2. Commit the generated files to your repository');
+            logger.info('  3. Set up CI/CD identity authentication:');
+            if (isGitHub) {
+                logger.info('     - Follow ./IDENTITY-SETUP-GITHUB.md for manual setup, OR');
+                logger.info('     - Open ./.github/prompts/apiops-setup-identity.prompt.md with GitHub Copilot for guided setup');
+            }
+            else {
+                logger.info('     - Follow ./IDENTITY-SETUP-AZDO.md for manual setup');
+            }
+            logger.info('');
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                logger.error('Init failed:', error.message);
+            }
+            else {
+                logger.error('Init failed with unknown error');
+            }
+            process.exit(1);
+        }
+    });
+    return init;
+}
+//# sourceMappingURL=init-command.js.map

package/dist/cli/init-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-command.js","sourceRoot":"","sources":["../../src/cli/init-command.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAc1C;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;SAC7B,WAAW,CAAC,6EAA6E,CAAC;SAC1F,MAAM,CAAC,iBAAiB,EAAE,gDAAgD,CAAC;SAC3E,MAAM,CAAC,mBAAmB,EAAE,0CAA0C,EAAE,KAAK,CAAC;SAC9E,MAAM,CAAC,sBAAsB,EAAE,yBAAyB,EAAE,kBAAkB,CAAC;SAC7E,MAAM,CAAC,uBAAuB,EAAE,mCAAmC,EAAE,UAAU,CAAC;SAChF,cAAc,CAAC,sBAAsB,EAAE,4CAA4C,CAAC;SACpF,MAAM,CAAC,SAAS,EAAE,4CAA4C,EAAE,KAAK,CAAC;SACtE,MAAM,CAAC,KAAK,EAAE,OAAoB,EAAE,EAAE;QACrC,IAAI,CAAC;YACH,wDAAwD;YACxD,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAE3B,oCAAoC;YACpC,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,EAAE,KAAK,gBAAgB,IAAI,OAAO,CAAC,EAAE,KAAK,cAAc,EAAE,CAAC;gBACnF,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;gBAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,qBAAqB;YACrB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY;iBACtC,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;iBACxB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAEnC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,eAAe;YACf,MAAM,MAAM,GAAe;gBACzB,UAAU,EAAE,OAAO,CAAC,EAAmD;gBACvE,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,YAAY;gBACZ,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE;gBACxB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;YAEF,mBAAmB;YACnB,MAAM,cAAc,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAErD,sBAAsB;YACtB,MAAM,QAAQ,GAAG;gBACf,GAAG,cAAc,CAAC,SAAS;gBAC3B,GAAG,cAAc,CAAC,OAAO;aAC1B,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,eAAe,QAAQ,CAAC,MAAM,WAAW,CAAC,CAAC;YACvD,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;YAE7F,MAAM,CAAC,IAAI,CAAC,aAAa,cAAc,CAAC,WAAW,CAAC,MAAM,yBAAyB,CAAC,CAAC;YACrF,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;YAE3G,4EAA4E;YAC5E,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAE9E,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;YAC3E,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC1D,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;gBAC7E,MAAM,CAAC,IAAI,CAAC,oGAAoG,CAAC,CAAC;YACpH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/publish-command.d.ts

@@ -0,0 +1,12 @@
+/**
+ * T037 & T038: Publish command CLI registration
+ * Commander subcommand with --resource-group, --service-name, --source,
+ * --overrides, --dry-run, --delete-unmatched flags.
+ * Includes --format json: machine-readable JSON output mode (T038).
+ */
+import { Command } from 'commander';
+/**
+ * Create and return the publish command for Commander.
+ */
+export declare function createPublishCommand(): Command;
+//# sourceMappingURL=publish-command.d.ts.map

package/dist/cli/publish-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-command.d.ts","sourceRoot":"","sources":["../../src/cli/publish-command.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsBpC;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CA0B9C"}