@peterhauge/apiops-cli 0.1.3-alpha.0

package/dist/lib/config-loader.js

@@ -0,0 +1,131 @@
+/**
+ * T015: YAML config loader with validation
+ * Parse filter YAML, override YAML, and OTel config files
+ */
+import * as fs from 'node:fs/promises';
+import * as yaml from 'js-yaml';
+import { logger } from './logger.js';
+/**
+ * Assert that a value is an array of strings. Throws on type mismatch.
+ */
+function assertStringArray(value, fieldName) {
+    if (!Array.isArray(value)) {
+        throw new Error(`${fieldName} must be an array, got ${typeof value}`);
+    }
+    for (let i = 0; i < value.length; i++) {
+        if (typeof value[i] !== 'string') {
+            throw new Error(`${fieldName}[${i}] must be a string, got ${typeof value[i]}`);
+        }
+    }
+    return value;
+}
+/**
+ * Load and parse a filter configuration YAML file.
+ * Returns undefined if file doesn't exist.
+ */
+export async function loadFilterConfig(filePath) {
+    try {
+        const content = await fs.readFile(filePath, 'utf-8');
+        const parsed = yaml.load(content);
+        // Validate structure — each field must be an array of strings
+        const config = {};
+        if (parsed.apiNames !== undefined) {
+            config.apiNames = assertStringArray(parsed.apiNames, 'apiNames');
+        }
+        if (parsed.backendNames !== undefined) {
+            config.backendNames = assertStringArray(parsed.backendNames, 'backendNames');
+        }
+        if (parsed.productNames !== undefined) {
+            config.productNames = assertStringArray(parsed.productNames, 'productNames');
+        }
+        if (parsed.namedValueNames !== undefined) {
+            config.namedValueNames = assertStringArray(parsed.namedValueNames, 'namedValueNames');
+        }
+        if (parsed.loggerNames !== undefined) {
+            config.loggerNames = assertStringArray(parsed.loggerNames, 'loggerNames');
+        }
+        if (parsed.diagnosticNames !== undefined) {
+            config.diagnosticNames = assertStringArray(parsed.diagnosticNames, 'diagnosticNames');
+        }
+        if (parsed.tagNames !== undefined) {
+            config.tagNames = assertStringArray(parsed.tagNames, 'tagNames');
+        }
+        if (parsed.policyFragmentNames !== undefined) {
+            config.policyFragmentNames = assertStringArray(parsed.policyFragmentNames, 'policyFragmentNames');
+        }
+        if (parsed.gatewayNames !== undefined) {
+            config.gatewayNames = assertStringArray(parsed.gatewayNames, 'gatewayNames');
+        }
+        if (parsed.versionSetNames !== undefined) {
+            config.versionSetNames = assertStringArray(parsed.versionSetNames, 'versionSetNames');
+        }
+        if (parsed.groupNames !== undefined) {
+            config.groupNames = assertStringArray(parsed.groupNames, 'groupNames');
+        }
+        if (parsed.subscriptionNames !== undefined) {
+            config.subscriptionNames = assertStringArray(parsed.subscriptionNames, 'subscriptionNames');
+        }
+        if (parsed.schemaNames !== undefined) {
+            config.schemaNames = assertStringArray(parsed.schemaNames, 'schemaNames');
+        }
+        if (parsed.policyRestrictionNames !== undefined) {
+            config.policyRestrictionNames = assertStringArray(parsed.policyRestrictionNames, 'policyRestrictionNames');
+        }
+        if (parsed.documentationNames !== undefined) {
+            config.documentationNames = assertStringArray(parsed.documentationNames, 'documentationNames');
+        }
+        if (parsed.workspaceNames !== undefined) {
+            config.workspaceNames = assertStringArray(parsed.workspaceNames, 'workspaceNames');
+        }
+        logger.debug(`Loaded filter config from ${filePath}`);
+        return config;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            logger.debug(`Filter config file not found: ${filePath}`);
+            return undefined;
+        }
+        throw new Error(`Failed to load filter config from ${filePath}: ${error.message}`, { cause: error });
+    }
+}
+/**
+ * Load and parse an override configuration YAML file.
+ * Returns undefined if file doesn't exist.
+ */
+export async function loadOverrideConfig(filePath) {
+    try {
+        const content = await fs.readFile(filePath, 'utf-8');
+        const parsed = yaml.load(content);
+        // Return as-is; validation will happen during publish when applied
+        const config = parsed;
+        logger.debug(`Loaded override config from ${filePath}`);
+        return config;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            logger.debug(`Override config file not found: ${filePath}`);
+            return undefined;
+        }
+        throw new Error(`Failed to load override config from ${filePath}: ${error.message}`, { cause: error });
+    }
+}
+/**
+ * Load and parse an OpenTelemetry configuration YAML file.
+ * Returns undefined if file doesn't exist.
+ */
+export async function loadOTelConfig(filePath) {
+    try {
+        const content = await fs.readFile(filePath, 'utf-8');
+        const parsed = yaml.load(content);
+        logger.debug(`Loaded OTel config from ${filePath}`);
+        return parsed;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            logger.debug(`OTel config file not found: ${filePath}`);
+            return undefined;
+        }
+        throw new Error(`Failed to load OTel config from ${filePath}: ${error.message}`, { cause: error });
+    }
+}
+//# sourceMappingURL=config-loader.js.map

package/dist/lib/config-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-loader.js","sourceRoot":"","sources":["../../src/lib/config-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,SAAS,CAAC;AAEhC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAc,EAAE,SAAiB;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,0BAA0B,OAAO,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,GAAG,SAAS,IAAI,CAAC,2BAA2B,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAiB,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAA4B,CAAC;QAE7D,8DAA8D;QAC9D,MAAM,MAAM,GAAiB,EAAE,CAAC;QAEhC,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,CAAC,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,CAAC,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,CAAC,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,CAAC,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,CAAC,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,CAAC,mBAAmB,GAAG,iBAAiB,CAAC,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,CAAC,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,CAAC,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,CAAC,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC3C,MAAM,CAAC,iBAAiB,GAAG,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,CAAC,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,CAAC,sBAAsB,GAAG,iBAAiB,CAAC,MAAM,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,CAAC,kBAAkB,GAAG,iBAAiB,CAAC,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,CAAC,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;YAC1D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,KAAM,KAAe,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAClH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IACvD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAA4B,CAAC;QAE7D,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAwB,CAAC;QAExC,MAAM,CAAC,KAAK,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;YAC5D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,KAAM,KAAe,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB;IACnD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAA4B,CAAC;QAE7D,MAAM,CAAC,KAAK,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;YACxD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,KAAM,KAAe,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAChH,CAAC;AACH,CAAC"}

package/dist/lib/dependency-graph.d.ts

@@ -0,0 +1,43 @@
+/**
+ * T011: Static dependency graph implementation
+ * 33 resource types, 4 tiers, topological sort, cycle-detection assertion
+ */
+import { ResourceType } from '../models/resource-types.js';
+import { DependencyEdge } from '../models/types.js';
+/**
+ * Static dependency edges between resource types.
+ *
+ * Note: This dependency graph is resource-type-based and does not account for
+ * workspace-specific dependency variations. All resource types have the same
+ * dependency rules regardless of workspace context. This is correct for the
+ * current APIM API (2024-05-01) where workspace scoping does not introduce
+ * different dependency relationships.
+ */
+export declare const DEPENDENCY_EDGES: DependencyEdge[];
+export declare const TIER_1_RESOURCES: ResourceType[];
+export declare const TIER_2_RESOURCES: ResourceType[];
+export declare const TIER_3_RESOURCES: ResourceType[];
+export declare const TIER_4_RESOURCES: ResourceType[];
+/**
+ * Returns all resource types in topological order (dependencies first).
+ * This is the order in which resources should be extracted and published.
+ */
+export declare function getTopologicalOrder(): ResourceType[];
+/**
+ * Returns the tier number (1-4) for a given resource type.
+ */
+export declare function getResourceTier(type: ResourceType): number;
+/**
+ * Returns all dependencies for a given resource type.
+ */
+export declare function getDependencies(type: ResourceType): DependencyEdge[];
+/**
+ * Returns all resource types that depend on a given resource type.
+ */
+export declare function getDependents(type: ResourceType): ResourceType[];
+/**
+ * Validates that the dependency graph is acyclic.
+ * Throws an error if a cycle is detected.
+ */
+export declare function assertAcyclic(): void;
+//# sourceMappingURL=dependency-graph.d.ts.map

package/dist/lib/dependency-graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-graph.d.ts","sourceRoot":"","sources":["../../src/lib/dependency-graph.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,EAAE,cAAc,EAuC5C,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,YAAY,EAY1C,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,YAAY,EAK1C,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,YAAY,EAiB1C,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,YAAY,EAG1C,CAAC;AAEF;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,YAAY,EAAE,CAOpD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAM1D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,cAAc,EAAE,CAEpE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,GAAG,YAAY,EAAE,CAIhE;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,IAAI,CA8BpC"}

package/dist/lib/dependency-graph.js

@@ -0,0 +1,163 @@
+/**
+ * T011: Static dependency graph implementation
+ * 33 resource types, 4 tiers, topological sort, cycle-detection assertion
+ */
+import { ResourceType } from '../models/resource-types.js';
+/**
+ * Static dependency edges between resource types.
+ *
+ * Note: This dependency graph is resource-type-based and does not account for
+ * workspace-specific dependency variations. All resource types have the same
+ * dependency rules regardless of workspace context. This is correct for the
+ * current APIM API (2024-05-01) where workspace scoping does not introduce
+ * different dependency relationships.
+ */
+export const DEPENDENCY_EDGES = [
+    // Tier 1 -> Tier 2 dependencies
+    { from: ResourceType.Diagnostic, to: ResourceType.Logger, required: false },
+    { from: ResourceType.ServicePolicy, to: ResourceType.NamedValue, required: false },
+    { from: ResourceType.ServicePolicy, to: ResourceType.PolicyFragment, required: false },
+    { from: ResourceType.Api, to: ResourceType.VersionSet, required: false },
+    // Tier 2 -> Tier 3 dependencies
+    { from: ResourceType.ProductPolicy, to: ResourceType.Product, required: true },
+    { from: ResourceType.ProductGroup, to: ResourceType.Product, required: true },
+    { from: ResourceType.ProductGroup, to: ResourceType.Group, required: true },
+    { from: ResourceType.ProductTag, to: ResourceType.Product, required: true },
+    { from: ResourceType.ProductTag, to: ResourceType.Tag, required: true },
+    { from: ResourceType.ProductApi, to: ResourceType.Product, required: true },
+    { from: ResourceType.ProductApi, to: ResourceType.Api, required: true },
+    { from: ResourceType.ProductWiki, to: ResourceType.Product, required: true },
+    { from: ResourceType.ApiPolicy, to: ResourceType.Api, required: true },
+    { from: ResourceType.ApiTag, to: ResourceType.Api, required: true },
+    { from: ResourceType.ApiTag, to: ResourceType.Tag, required: true },
+    { from: ResourceType.ApiDiagnostic, to: ResourceType.Api, required: true },
+    { from: ResourceType.ApiDiagnostic, to: ResourceType.Logger, required: false },
+    { from: ResourceType.ApiOperation, to: ResourceType.Api, required: true },
+    { from: ResourceType.ApiSchema, to: ResourceType.Api, required: true },
+    { from: ResourceType.ApiRelease, to: ResourceType.Api, required: true },
+    { from: ResourceType.ApiTagDescription, to: ResourceType.Api, required: true },
+    { from: ResourceType.ApiTagDescription, to: ResourceType.Tag, required: true },
+    { from: ResourceType.ApiWiki, to: ResourceType.Api, required: true },
+    { from: ResourceType.GraphQLResolver, to: ResourceType.Api, required: true },
+    { from: ResourceType.GatewayApi, to: ResourceType.Gateway, required: true },
+    { from: ResourceType.GatewayApi, to: ResourceType.Api, required: true },
+    { from: ResourceType.Subscription, to: ResourceType.Product, required: false },
+    { from: ResourceType.Subscription, to: ResourceType.Api, required: false },
+    // Tier 3 -> Tier 4 dependencies
+    { from: ResourceType.ApiOperationPolicy, to: ResourceType.ApiOperation, required: true },
+    { from: ResourceType.GraphQLResolverPolicy, to: ResourceType.GraphQLResolver, required: true },
+];
+export const TIER_1_RESOURCES = [
+    ResourceType.NamedValue,
+    ResourceType.Tag,
+    ResourceType.Gateway,
+    ResourceType.VersionSet,
+    ResourceType.Backend,
+    ResourceType.Logger,
+    ResourceType.Group,
+    ResourceType.PolicyFragment,
+    ResourceType.GlobalSchema,
+    ResourceType.PolicyRestriction,
+    ResourceType.Documentation,
+];
+export const TIER_2_RESOURCES = [
+    ResourceType.Diagnostic,
+    ResourceType.ServicePolicy,
+    ResourceType.Product,
+    ResourceType.Api,
+];
+export const TIER_3_RESOURCES = [
+    ResourceType.ProductPolicy,
+    ResourceType.ProductGroup,
+    ResourceType.ProductTag,
+    ResourceType.ProductApi,
+    ResourceType.ProductWiki,
+    ResourceType.ApiPolicy,
+    ResourceType.ApiTag,
+    ResourceType.ApiDiagnostic,
+    ResourceType.ApiOperation,
+    ResourceType.ApiSchema,
+    ResourceType.ApiRelease,
+    ResourceType.ApiTagDescription,
+    ResourceType.ApiWiki,
+    ResourceType.GraphQLResolver,
+    ResourceType.GatewayApi,
+    ResourceType.Subscription,
+];
+export const TIER_4_RESOURCES = [
+    ResourceType.ApiOperationPolicy,
+    ResourceType.GraphQLResolverPolicy,
+];
+/**
+ * Returns all resource types in topological order (dependencies first).
+ * This is the order in which resources should be extracted and published.
+ */
+export function getTopologicalOrder() {
+    return [
+        ...TIER_1_RESOURCES,
+        ...TIER_2_RESOURCES,
+        ...TIER_3_RESOURCES,
+        ...TIER_4_RESOURCES,
+    ];
+}
+/**
+ * Returns the tier number (1-4) for a given resource type.
+ */
+export function getResourceTier(type) {
+    if (TIER_1_RESOURCES.includes(type))
+        return 1;
+    if (TIER_2_RESOURCES.includes(type))
+        return 2;
+    if (TIER_3_RESOURCES.includes(type))
+        return 3;
+    if (TIER_4_RESOURCES.includes(type))
+        return 4;
+    throw new Error(`Unknown resource type: ${type}`);
+}
+/**
+ * Returns all dependencies for a given resource type.
+ */
+export function getDependencies(type) {
+    return DEPENDENCY_EDGES.filter((edge) => edge.from === type);
+}
+/**
+ * Returns all resource types that depend on a given resource type.
+ */
+export function getDependents(type) {
+    return DEPENDENCY_EDGES.filter((edge) => edge.to === type).map((edge) => edge.from);
+}
+/**
+ * Validates that the dependency graph is acyclic.
+ * Throws an error if a cycle is detected.
+ */
+export function assertAcyclic() {
+    const visited = new Set();
+    const recursionStack = new Set();
+    function hasCycle(current) {
+        visited.add(current);
+        recursionStack.add(current);
+        const deps = getDependencies(current);
+        for (const edge of deps) {
+            if (!visited.has(edge.to)) {
+                if (hasCycle(edge.to)) {
+                    return true;
+                }
+            }
+            else if (recursionStack.has(edge.to)) {
+                return true;
+            }
+        }
+        recursionStack.delete(current);
+        return false;
+    }
+    for (const type of getTopologicalOrder()) {
+        if (!visited.has(type)) {
+            if (hasCycle(type)) {
+                throw new Error('Dependency graph contains a cycle');
+            }
+        }
+    }
+}
+// Assert at module load time that the graph is acyclic
+assertAcyclic();
+//# sourceMappingURL=dependency-graph.js.map

package/dist/lib/dependency-graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-graph.js","sourceRoot":"","sources":["../../src/lib/dependency-graph.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAG3D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAqB;IAChD,gCAAgC;IAChC,EAAE,IAAI,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC3E,EAAE,IAAI,EAAE,YAAY,CAAC,aAAa,EAAE,EAAE,EAAE,YAAY,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;IAClF,EAAE,IAAI,EAAE,YAAY,CAAC,aAAa,EAAE,EAAE,EAAE,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtF,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,YAAY,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;IAExE,gCAAgC;IAChC,EAAE,IAAI,EAAE,YAAY,CAAC,aAAa,EAAE,EAAE,EAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC9E,EAAE,IAAI,EAAE,YAAY,CAAC,YAAY,EAAE,EAAE,EAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC7E,EAAE,IAAI,EAAE,YAAY,CAAC,YAAY,EAAE,EAAE,EAAE,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC3E,EAAE,IAAI,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC3E,EAAE,IAAI,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvE,EAAE,IAAI,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC3E,EAAE,IAAI,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvE,EAAE,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAE5E,EAAE,IAAI,EAAE,YAAY,CAAC,SAAS,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IACtE,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IACnE,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IACnE,EAAE,IAAI,EAAE,YAAY,CAAC,aAAa,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC1E,EAAE,IAAI,EAAE,YAAY,CAAC,aAAa,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9E,EAAE,IAAI,EAAE,YAAY,CAAC,YAAY,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IACzE,EAAE,IAAI,EAAE,YAAY,CAAC,SAAS,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IACtE,EAAE,IAAI,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvE,EAAE,IAAI,EAAE,YAAY,CAAC,iBAAiB,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC9E,EAAE,IAAI,EAAE,YAAY,CAAC,iBAAiB,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC9E,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IACpE,EAAE,IAAI,EAAE,YAAY,CAAC,eAAe,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IAE5E,EAAE,IAAI,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC3E,EAAE,IAAI,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IAEvE,EAAE,IAAI,EAAE,YAAY,CAAC,YAAY,EAAE,EAAE,EAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9E,EAAE,IAAI,EAAE,YAAY,CAAC,YAAY,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;IAE1E,gCAAgC;IAChC,EAAE,IAAI,EAAE,YAAY,CAAC,kBAAkB,EAAE,EAAE,EAAE,YAAY,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;IACxF,EAAE,IAAI,EAAE,YAAY,CAAC,qBAAqB,EAAE,EAAE,EAAE,YAAY,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE;CAC/F,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAmB;IAC9C,YAAY,CAAC,UAAU;IACvB,YAAY,CAAC,GAAG;IAChB,YAAY,CAAC,OAAO;IACpB,YAAY,CAAC,UAAU;IACvB,YAAY,CAAC,OAAO;IACpB,YAAY,CAAC,MAAM;IACnB,YAAY,CAAC,KAAK;IAClB,YAAY,CAAC,cAAc;IAC3B,YAAY,CAAC,YAAY;IACzB,YAAY,CAAC,iBAAiB;IAC9B,YAAY,CAAC,aAAa;CAC3B,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAmB;IAC9C,YAAY,CAAC,UAAU;IACvB,YAAY,CAAC,aAAa;IAC1B,YAAY,CAAC,OAAO;IACpB,YAAY,CAAC,GAAG;CACjB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAmB;IAC9C,YAAY,CAAC,aAAa;IAC1B,YAAY,CAAC,YAAY;IACzB,YAAY,CAAC,UAAU;IACvB,YAAY,CAAC,UAAU;IACvB,YAAY,CAAC,WAAW;IACxB,YAAY,CAAC,SAAS;IACtB,YAAY,CAAC,MAAM;IACnB,YAAY,CAAC,aAAa;IAC1B,YAAY,CAAC,YAAY;IACzB,YAAY,CAAC,SAAS;IACtB,YAAY,CAAC,UAAU;IACvB,YAAY,CAAC,iBAAiB;IAC9B,YAAY,CAAC,OAAO;IACpB,YAAY,CAAC,eAAe;IAC5B,YAAY,CAAC,UAAU;IACvB,YAAY,CAAC,YAAY;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAmB;IAC9C,YAAY,CAAC,kBAAkB;IAC/B,YAAY,CAAC,qBAAqB;CACnC,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,GAAG,gBAAgB;QACnB,GAAG,gBAAgB;QACnB,GAAG,gBAAgB;QACnB,GAAG,gBAAgB;KACpB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAkB;IAC9C,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAC5D,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CACpB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgB,CAAC;IACxC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAgB,CAAC;IAE/C,SAAS,QAAQ,CAAC,OAAqB;QACrC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE5B,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;oBACtB,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;iBAAM,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,aAAa,EAAE,CAAC"}

package/dist/lib/exit-codes.d.ts

@@ -0,0 +1,27 @@
+/**
+ * T041: Exit code constants and aggregation
+ * Provides standardised exit codes and a reusable aggregation function
+ * for combining per-resource results into a single process exit code.
+ */
+/** All operations completed successfully. */
+export declare const EXIT_SUCCESS = 0;
+/** Some resources failed but others succeeded (partial failure). */
+export declare const EXIT_PARTIAL = 1;
+/** Cannot proceed — auth failure, invalid config, network unreachable, or total failure. */
+export declare const EXIT_FATAL = 2;
+/**
+ * Outcome of a single resource operation (extract or publish).
+ */
+export interface ResourceResult {
+    status: 'success' | 'error';
+    error?: Error;
+}
+/**
+ * Aggregate an array of per-resource results into a single exit code.
+ *
+ * - Returns EXIT_SUCCESS (0) if all results succeeded.
+ * - Returns EXIT_PARTIAL (1) if some failed and some succeeded.
+ * - Returns EXIT_FATAL   (2) if all failed or there are zero results.
+ */
+export declare function aggregateExitCode(results: ResourceResult[]): number;
+//# sourceMappingURL=exit-codes.d.ts.map

package/dist/lib/exit-codes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.d.ts","sourceRoot":"","sources":["../../src/lib/exit-codes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,6CAA6C;AAC7C,eAAO,MAAM,YAAY,IAAI,CAAC;AAE9B,oEAAoE;AACpE,eAAO,MAAM,YAAY,IAAI,CAAC;AAE9B,4FAA4F;AAC5F,eAAO,MAAM,UAAU,IAAI,CAAC;AAE5B;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,MAAM,CAiBnE"}

package/dist/lib/exit-codes.js

@@ -0,0 +1,33 @@
+/**
+ * T041: Exit code constants and aggregation
+ * Provides standardised exit codes and a reusable aggregation function
+ * for combining per-resource results into a single process exit code.
+ */
+/** All operations completed successfully. */
+export const EXIT_SUCCESS = 0;
+/** Some resources failed but others succeeded (partial failure). */
+export const EXIT_PARTIAL = 1;
+/** Cannot proceed — auth failure, invalid config, network unreachable, or total failure. */
+export const EXIT_FATAL = 2;
+/**
+ * Aggregate an array of per-resource results into a single exit code.
+ *
+ * - Returns EXIT_SUCCESS (0) if all results succeeded.
+ * - Returns EXIT_PARTIAL (1) if some failed and some succeeded.
+ * - Returns EXIT_FATAL   (2) if all failed or there are zero results.
+ */
+export function aggregateExitCode(results) {
+    if (results.length === 0) {
+        return EXIT_SUCCESS;
+    }
+    const successCount = results.filter((r) => r.status === 'success').length;
+    const errorCount = results.filter((r) => r.status === 'error').length;
+    if (errorCount === 0) {
+        return EXIT_SUCCESS;
+    }
+    if (successCount > 0) {
+        return EXIT_PARTIAL;
+    }
+    return EXIT_FATAL;
+}
+//# sourceMappingURL=exit-codes.js.map

package/dist/lib/exit-codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.js","sourceRoot":"","sources":["../../src/lib/exit-codes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAE9B,oEAAoE;AACpE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAE9B,4FAA4F;AAC5F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAU5B;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAyB;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAC1E,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAEtE,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/lib/logger.d.ts

@@ -0,0 +1,39 @@
+/**
+ * T014: Structured logger with stderr output
+ * Supports log levels, timestamps, and --log-level option.
+ * Sanitizes sensitive data from log output per Constitution §VIII.
+ */
+export declare enum LogLevel {
+    DEBUG = "DEBUG",
+    INFO = "INFO",
+    WARN = "WARN",
+    ERROR = "ERROR"
+}
+export type LogFormat = 'structured' | 'pretty';
+export interface LoggerOptions {
+    level?: LogLevel;
+    format?: LogFormat;
+}
+export declare class Logger {
+    private level;
+    private format;
+    configure(options: LoggerOptions): void;
+    /**
+     * Switch between structured (timestamped) and pretty (clean) output.
+     * Pretty mode omits timestamps and level prefixes — ideal for
+     * human-facing commands like `apiops init`.
+     */
+    setFormat(format: LogFormat): void;
+    debug(message: string, ...args: unknown[]): void;
+    info(message: string, ...args: unknown[]): void;
+    warn(message: string, ...args: unknown[]): void;
+    error(message: string, ...args: unknown[]): void;
+    private log;
+}
+/**
+ * Parse a log-level string into a LogLevel enum value.
+ * Falls back to INFO for unrecognised values (Commander choices() prevents this in practice).
+ */
+export declare function parseLogLevel(value: string): LogLevel;
+export declare const logger: Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/lib/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/lib/logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,oBAAY,QAAQ;IAClB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,IAAI,SAAS;IACb,KAAK,UAAU;CAChB;AAED,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC;AAEhD,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB;AA0DD,qBAAa,MAAM;IACjB,OAAO,CAAC,KAAK,CAAiB;IAC9B,OAAO,CAAC,MAAM,CAA2B;IAEzC,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAOvC;;;;OAIG;IACH,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;IAIlC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAIhD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAI/C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAI/C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAIhD,OAAO,CAAC,GAAG;CAuBZ;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,CAMrD;AAGD,eAAO,MAAM,MAAM,QAAe,CAAC"}

package/dist/lib/logger.js

@@ -0,0 +1,128 @@
+/**
+ * T014: Structured logger with stderr output
+ * Supports log levels, timestamps, and --log-level option.
+ * Sanitizes sensitive data from log output per Constitution §VIII.
+ */
+import anyAscii from 'any-ascii';
+export var LogLevel;
+(function (LogLevel) {
+    LogLevel["DEBUG"] = "DEBUG";
+    LogLevel["INFO"] = "INFO";
+    LogLevel["WARN"] = "WARN";
+    LogLevel["ERROR"] = "ERROR";
+})(LogLevel || (LogLevel = {}));
+const LOG_LEVEL_PRIORITY = {
+    [LogLevel.DEBUG]: 0,
+    [LogLevel.INFO]: 1,
+    [LogLevel.WARN]: 2,
+    [LogLevel.ERROR]: 3,
+};
+/** Keys whose values are redacted before logging (case-insensitive match). */
+const SENSITIVE_KEY_PATTERNS = [
+    'token',
+    'secret',
+    'password',
+    'credential',
+    'authorization',
+    'apikey',
+    'api_key',
+    'client_secret',
+    'access_token',
+    'refresh_token',
+];
+/**
+ * Determines whether a key name looks sensitive.
+ * Matches if ANY sensitive pattern appears as a substring of the lower-cased key.
+ * Standalone "key" is treated as sensitive (e.g. subscription keys in ARM responses)
+ * but compound words like "keyName", "keyVault" are NOT matched since they are
+ * non-secret APIM metadata fields.
+ */
+function isSensitiveKey(key) {
+    const lower = key.toLowerCase();
+    if (lower === 'key')
+        return true;
+    return SENSITIVE_KEY_PATTERNS.some((pattern) => lower.includes(pattern));
+}
+/**
+ * Recursively sanitize a value, replacing sensitive fields with '***'.
+ * Handles objects, arrays, and inline bearer tokens in strings.
+ */
+function sanitize(value) {
+    if (typeof value === 'string') {
+        // Redact inline bearer tokens (e.g. "Bearer eyJ...")
+        return value.replace(/Bearer\s+[A-Za-z0-9\-._~+/]+=*/gi, 'Bearer ***');
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => sanitize(item));
+    }
+    if (typeof value === 'object' && value !== null) {
+        const sanitized = {};
+        for (const [k, v] of Object.entries(value)) {
+            sanitized[k] = isSensitiveKey(k) ? '***' : sanitize(v);
+        }
+        return sanitized;
+    }
+    return value;
+}
+export class Logger {
+    level = LogLevel.INFO;
+    format = 'structured';
+    configure(options) {
+        this.level = options.level ?? LogLevel.INFO;
+        if (options.format !== undefined) {
+            this.format = options.format;
+        }
+    }
+    /**
+     * Switch between structured (timestamped) and pretty (clean) output.
+     * Pretty mode omits timestamps and level prefixes — ideal for
+     * human-facing commands like `apiops init`.
+     */
+    setFormat(format) {
+        this.format = format;
+    }
+    debug(message, ...args) {
+        this.log(LogLevel.DEBUG, message, ...args);
+    }
+    info(message, ...args) {
+        this.log(LogLevel.INFO, message, ...args);
+    }
+    warn(message, ...args) {
+        this.log(LogLevel.WARN, message, ...args);
+    }
+    error(message, ...args) {
+        this.log(LogLevel.ERROR, message, ...args);
+    }
+    log(level, message, ...args) {
+        // Filter messages based on configured log level
+        if (LOG_LEVEL_PRIORITY[level] < LOG_LEVEL_PRIORITY[this.level]) {
+            return;
+        }
+        const sanitizedArgs = args.map((arg) => sanitize(arg));
+        const formattedArgs = sanitizedArgs.length > 0 ? ' ' + JSON.stringify(sanitizedArgs) : '';
+        let logLine;
+        if (this.format === 'pretty') {
+            logLine = anyAscii(`${message}${formattedArgs}`);
+        }
+        else {
+            const timestamp = new Date().toISOString();
+            logLine = anyAscii(`${timestamp} [${level}] ${message}${formattedArgs}`);
+        }
+        // Always write to stderr, never stdout (stdout is for --format json)
+        process.stderr.write(logLine + '\n');
+    }
+}
+/**
+ * Parse a log-level string into a LogLevel enum value.
+ * Falls back to INFO for unrecognised values (Commander choices() prevents this in practice).
+ */
+export function parseLogLevel(value) {
+    const upper = value.toUpperCase();
+    if (Object.values(LogLevel).includes(upper)) {
+        return upper;
+    }
+    return LogLevel.INFO;
+}
+// Export singleton instance and class (class export enables test mocking per §VI)
+export const logger = new Logger();
+//# sourceMappingURL=logger.js.map

package/dist/lib/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/lib/logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,QAAQ,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAN,IAAY,QAKX;AALD,WAAY,QAAQ;IAClB,2BAAe,CAAA;IACf,yBAAa,CAAA;IACb,yBAAa,CAAA;IACb,2BAAe,CAAA;AACjB,CAAC,EALW,QAAQ,KAAR,QAAQ,QAKnB;AASD,MAAM,kBAAkB,GAA6B;IACnD,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACnB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAClB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAClB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;CACpB,CAAC;AAEF,8EAA8E;AAC9E,MAAM,sBAAsB,GAAG;IAC7B,OAAO;IACP,QAAQ;IACR,UAAU;IACV,YAAY;IACZ,eAAe;IACf,QAAQ;IACR,SAAS;IACT,eAAe;IACf,cAAc;IACd,eAAe;CAChB,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,qDAAqD;QACrD,OAAO,KAAK,CAAC,OAAO,CAAC,kCAAkC,EAAE,YAAY,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,SAAS,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,MAAM;IACT,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC;IACtB,MAAM,GAAc,YAAY,CAAC;IAEzC,SAAS,CAAC,OAAsB;QAC9B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC;QAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/B,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,MAAiB;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,IAAe;QACtC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,IAAe;QACtC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC;IAEO,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,GAAG,IAAe;QAC9D,gDAAgD;QAChD,IAAI,kBAAkB,CAAC,KAAK,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,MAAM,aAAa,GACjB,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEtE,IAAI,OAAe,CAAC;QACpB,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,GAAG,QAAQ,CAAC,GAAG,OAAO,GAAG,aAAa,EAAE,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,OAAO,GAAG,QAAQ,CAChB,GAAG,SAAS,KAAK,KAAK,KAAK,OAAO,GAAG,aAAa,EAAE,CACrD,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACvC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAiB,CAAC,EAAE,CAAC;QACxD,OAAO,KAAiB,CAAC;IAC3B,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC"}

package/dist/lib/parallel-runner.d.ts

@@ -0,0 +1,38 @@
+/**
+ * T018: Parallel execution runner with concurrency control.
+ *
+ * Custom implementation (no external dependencies such as p-limit) to limit
+ * concurrent APIM REST API calls and avoid 429 rate limiting. Azure APIM has
+ * strict per-second request limits, so unbounded Promise.all() would fire all
+ * requests simultaneously, triggering throttling. Bounded concurrency is a
+ * requirement from research.md R8 and justified in tasks.md T018.
+ *
+ * Built-in implementation without external dependencies (no p-limit).
+ */
+export interface ParallelRunnerOptions {
+    concurrency: number;
+}
+export interface TaskResult<T> {
+    status: 'fulfilled' | 'rejected';
+    value?: T;
+    reason?: Error;
+}
+/**
+ * Executes tasks in parallel with bounded concurrency.
+ * Uses Promise.allSettled for fault tolerance.
+ */
+export declare class ParallelRunner {
+    private concurrency;
+    constructor(options: ParallelRunnerOptions);
+    /**
+     * Run tasks in parallel with bounded concurrency.
+     * Returns results for all tasks, including failures.
+     */
+    runAll<T>(tasks: (() => Promise<T>)[]): Promise<TaskResult<T>[]>;
+    private executeTask;
+}
+/**
+ * Helper function to run tasks with default concurrency.
+ */
+export declare function runParallel<T>(tasks: (() => Promise<T>)[], concurrency?: number): Promise<TaskResult<T>[]>;
+//# sourceMappingURL=parallel-runner.d.ts.map

package/dist/lib/parallel-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parallel-runner.d.ts","sourceRoot":"","sources":["../../src/lib/parallel-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,MAAM,EAAE,WAAW,GAAG,UAAU,CAAC;IACjC,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,MAAM,CAAC,EAAE,KAAK,CAAC;CAChB;AAED;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,EAAE,qBAAqB;IAI1C;;;OAGG;IACG,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YA+BxD,WAAW;CAe1B;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,CAAC,EACjC,KAAK,EAAE,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAC3B,WAAW,SAAI,GACd,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAG1B"}