@pipeline-builder/pipeline-manager 0.0.1

package/dist/commands/login.d.ts

@@ -0,0 +1,21 @@
+import { Command } from 'commander';
+/**
+ * Registers the `login` command with the CLI program.
+ *
+ * Authenticates against the platform API and prints an export statement
+ * for `PLATFORM_TOKEN` on success.  Does NOT require `PLATFORM_TOKEN`
+ * to be set beforehand (unlike other commands).
+ *
+ * @param program - The root Commander program instance to attach the command to.
+ *
+ * @example
+ * ```bash
+ * pipeline-manager auth login --identifier admin@example.com --password secret
+ * pipeline-manager auth login -u admin@example.com -p secret
+ * pipeline-manager auth login -u admin@example.com -p secret --url https://myhost:8443
+ * eval $(pipeline-manager auth login -u admin@example.com -p secret --quiet)
+ * pipeline-manager auth login --refresh <refresh-token>
+ * ```
+ */
+export declare function login(program: Command): void;
+//# sourceMappingURL=login.d.ts.map

package/dist/commands/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWpC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAoK5C"}

package/dist/commands/login.js

@@ -0,0 +1,174 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+import axios from 'axios';
+import { Command } from 'commander';
+import pico from 'picocolors';
+import { TIMEOUTS } from '../config/cli.constants.js';
+import { assertCredentialTlsAllowed, credentialHttpsAgent, postLogin, resolveCredentials, switchOrganization } from '../utils/auth-utils.js';
+import { printCommandHeader, withSslOptions } from '../utils/command-utils.js';
+import { ERROR_CODES, handleError } from '../utils/error-handler.js';
+import { printDebug, printError, printInfo, printSuccess, printWarning } from '../utils/output-utils.js';
+import { checkAuthRateLimit, recordAuthFailure, recordAuthSuccess } from '../utils/rate-limiter.js';
+const { green } = pico;
+/**
+ * Registers the `login` command with the CLI program.
+ *
+ * Authenticates against the platform API and prints an export statement
+ * for `PLATFORM_TOKEN` on success.  Does NOT require `PLATFORM_TOKEN`
+ * to be set beforehand (unlike other commands).
+ *
+ * @param program - The root Commander program instance to attach the command to.
+ *
+ * @example
+ * ```bash
+ * pipeline-manager auth login --identifier admin@example.com --password secret
+ * pipeline-manager auth login -u admin@example.com -p secret
+ * pipeline-manager auth login -u admin@example.com -p secret --url https://myhost:8443
+ * eval $(pipeline-manager auth login -u admin@example.com -p secret --quiet)
+ * pipeline-manager auth login --refresh <refresh-token>
+ * ```
+ */
+export function login(program) {
+    withSslOptions(program
+        .command('login')
+        .description('Authenticate with the platform and obtain a PLATFORM_TOKEN')
+        .option('-u, --identifier <identifier>', 'Username or email')
+        .option('-p, --password <password>', 'Password')
+        .option('--refresh <refreshToken>', 'Use a refresh token instead of login credentials')
+        .option('--org <orgId>', 'Switch to a specific organization after login')
+        .option('--url <url>', 'Platform base URL', process.env.PLATFORM_BASE_URL || 'https://localhost:8443'))
+        .option('--quiet', 'Only print the export statement (useful for eval)')
+        .action(async (options) => {
+        const isRefresh = !!options.refresh;
+        const quiet = options.quiet ?? false;
+        const executionId = printCommandHeader(isRefresh ? 'Token Refresh' : 'Login', isRefresh ? 'Token Refresh' : 'Platform Authentication', { quiet });
+        // SECURITY: login/refresh POST plaintext passwords and JWTs. Never send them
+        // over an unverified TLS connection in production — a MITM would harvest them.
+        // In non-production, --no-verify-ssl is still honored (self-signed dev platforms).
+        assertCredentialTlsAllowed(options.verifySsl);
+        // Credentials may come from flags OR the PLATFORM_IDENTIFIER/PLATFORM_PASSWORD
+        // env vars (so the password need not appear in shell history / `ps`).
+        const { identifier, password } = resolveCredentials(options);
+        let loginSucceeded = false;
+        try {
+            // Validate required options
+            if (!isRefresh && (!identifier || !password)) {
+                printError('Login requires --identifier and --password (or PLATFORM_IDENTIFIER/PLATFORM_PASSWORD env), or --refresh <token>');
+                process.exit(ERROR_CODES.AUTHENTICATION);
+            }
+            if (!isRefresh && options.password) {
+                printWarning('Passing --password on the command line can expose it via shell history; prefer the PLATFORM_PASSWORD env var.');
+            }
+            // Rate limiting — prevent brute force (login only)
+            if (!isRefresh) {
+                const rateLimitMsg = checkAuthRateLimit(identifier, options.url);
+                if (rateLimitMsg) {
+                    printError(rateLimitMsg);
+                    process.exit(ERROR_CODES.AUTHENTICATION);
+                }
+            }
+            if (!quiet) {
+                printInfo(isRefresh ? 'Refreshing access token' : 'Authenticating', {
+                    ...(identifier ? { identifier } : {}),
+                    url: options.url,
+                    verifySsl: options.verifySsl,
+                });
+            }
+            const httpsAgent = credentialHttpsAgent(options.verifySsl);
+            let token;
+            if (isRefresh) {
+                const refreshUrl = `${options.url}/api/auth/refresh`;
+                printDebug('POST', { url: refreshUrl });
+                const response = await axios.post(refreshUrl, { refreshToken: options.refresh }, {
+                    headers: { 'Content-Type': 'application/json' },
+                    httpsAgent,
+                    timeout: TIMEOUTS.HTTP_REQUEST,
+                });
+                token = response.data?.data?.accessToken;
+            }
+            else {
+                // identifier/password validated non-null above (the `!isRefresh` guard).
+                token = await postLogin({
+                    url: options.url,
+                    identifier: identifier,
+                    password: password,
+                    httpsAgent,
+                    timeout: TIMEOUTS.HTTP_REQUEST,
+                });
+            }
+            if (!token) {
+                if (!isRefresh)
+                    recordAuthFailure(identifier, options.url);
+                printError(`${isRefresh ? 'Token refresh' : 'Login'} failed: no access token in response`);
+                process.exit(ERROR_CODES.AUTHENTICATION);
+            }
+            if (!isRefresh)
+                recordAuthSuccess(identifier, options.url);
+            // Past this point authentication has already succeeded — a later failure
+            // (e.g. the --org switch below) must NOT be recorded as an auth failure,
+            // or a valid-credential user would accrue toward brute-force lockout.
+            loginSucceeded = true;
+            // Switch to a specific organization if --org is provided
+            if (options.org) {
+                if (!quiet) {
+                    printInfo('Switching to organization', { orgId: options.org });
+                }
+                token = await switchOrganization({
+                    url: options.url,
+                    orgId: options.org,
+                    accessToken: token,
+                    httpsAgent,
+                    timeout: TIMEOUTS.HTTP_REQUEST,
+                    quiet,
+                });
+            }
+            if (!quiet) {
+                console.log('');
+                printSuccess(isRefresh ? 'Token refreshed successfully' : 'Login successful');
+                console.log('');
+            }
+            console.log(`export PLATFORM_TOKEN=${token}`);
+            if (!quiet) {
+                console.log('');
+                printInfo('Tip: Run the following to set the token in your shell:');
+                const orgFlag = options.org ? ` --org ${options.org}` : '';
+                if (isRefresh) {
+                    console.log(green(`  eval $(pipeline-manager auth login --refresh '<refresh-token>'${orgFlag} --quiet)`));
+                }
+                else {
+                    console.log(green(`  eval $(pipeline-manager auth login -u ${identifier} -p '***'${orgFlag} --quiet)`));
+                }
+            }
+        }
+        catch (error) {
+            // Key the failure to (identifier, url) like the check/success/no-token
+            // paths — a bad-password 401 throws to here, so keying it to the shared
+            // default bucket meant brute-force attempts never accrued toward lockout.
+            // Skip when login already succeeded (a failed post-login --org switch is
+            // not an authentication failure).
+            if (!isRefresh && !loginSucceeded)
+                recordAuthFailure(identifier, options.url);
+            // Provide a clear failure message for auth errors
+            if (axios.isAxiosError(error)) {
+                const status = error.response?.status;
+                const message = error.response?.data?.message;
+                printError(`${isRefresh ? 'Token refresh' : 'Login'} failed`, {
+                    status: status ?? 'no response',
+                    ...(message ? { message } : {}),
+                });
+                process.exit(ERROR_CODES.AUTHENTICATION);
+            }
+            handleError(error, ERROR_CODES.AUTHENTICATION, {
+                debug: program.opts().debug,
+                exit: true,
+                context: {
+                    command: 'login',
+                    executionId,
+                    identifier: options.identifier,
+                    url: options.url,
+                },
+            });
+        }
+    });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/commands/new-plugin.d.ts

@@ -0,0 +1,12 @@
+import { Command } from 'commander';
+/**
+ * Register the `new-plugin` command — scaffold a local plugin directory
+ * (`config.yaml`, `plugin-spec.yaml`, and a starter `Dockerfile`) that
+ * `validate-plugin` accepts and `upload-plugin` can package.
+ *
+ * Usage:
+ *   pipeline-manager plugin new --name my-linter --category quality
+ *   pipeline-manager plugin new --name approve --type ManualApprovalStep
+ */
+export declare function newPlugin(program: Command): void;
+//# sourceMappingURL=new-plugin.d.ts.map

package/dist/commands/new-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"new-plugin.d.ts","sourceRoot":"","sources":["../../src/commands/new-plugin.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoBpC;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA2GhD"}

package/dist/commands/new-plugin.js

@@ -0,0 +1,129 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+import fs from 'fs';
+import path from 'path';
+import { Command } from 'commander';
+import YAML from 'yaml';
+import { printCommandHeader } from '../utils/command-utils.js';
+import { ERROR_CODES, handleError, ValidationError } from '../utils/error-handler.js';
+import { printInfo, printSection, printSuccess, fileExists, ensureOutputDirectory } from '../utils/output-utils.js';
+const PLUGIN_TYPES = ['CodeBuildStep', 'ShellStep', 'ManualApprovalStep'];
+const COMPUTE_TYPES = ['SMALL', 'MEDIUM', 'LARGE', 'X2_LARGE'];
+const BUILD_TYPES = ['build_image', 'prebuilt', 'metadata_only'];
+/**
+ * Register the `new-plugin` command — scaffold a local plugin directory
+ * (`config.yaml`, `plugin-spec.yaml`, and a starter `Dockerfile`) that
+ * `validate-plugin` accepts and `upload-plugin` can package.
+ *
+ * Usage:
+ *   pipeline-manager plugin new --name my-linter --category quality
+ *   pipeline-manager plugin new --name approve --type ManualApprovalStep
+ */
+export function newPlugin(program) {
+    program
+        .command('new')
+        .description('Scaffold a local plugin directory (config.yaml, plugin-spec.yaml, Dockerfile)')
+        .requiredOption('--name <name>', 'Plugin name (lowercase letters, digits, hyphens)')
+        .option('--category <category>', 'Plugin category (e.g. quality, security, language)', 'general')
+        .option('--type <type>', `Plugin type: ${PLUGIN_TYPES.join(' | ')}`, 'CodeBuildStep')
+        .option('--compute <compute>', `Compute type: ${COMPUTE_TYPES.join(' | ')}`, 'SMALL')
+        .option('--build-type <buildType>', `Build type: ${BUILD_TYPES.join(' | ')}`, 'build_image')
+        .option('--dir <path>', 'Target directory (default ./<name>)')
+        .option('--force', 'Overwrite an existing directory', false)
+        .action((options) => {
+        const executionId = printCommandHeader('New Plugin');
+        try {
+            const name = options.name ?? '';
+            // Canonical plugin-name pattern (matches validate-plugin, upload-plugin,
+            // and the server's NAME_PATTERN).
+            if (!/^[a-z0-9-]+$/.test(name)) {
+                throw new ValidationError('Plugin name must contain only lowercase letters, digits, and hyphens (/^[a-z0-9-]+$/)');
+            }
+            const pluginType = options.type ?? 'CodeBuildStep';
+            if (!PLUGIN_TYPES.includes(pluginType))
+                throw new ValidationError(`--type must be one of: ${PLUGIN_TYPES.join(', ')}`);
+            const computeType = options.compute ?? 'SMALL';
+            if (!COMPUTE_TYPES.includes(computeType))
+                throw new ValidationError(`--compute must be one of: ${COMPUTE_TYPES.join(', ')}`);
+            const buildType = options.buildType ?? 'build_image';
+            if (!BUILD_TYPES.includes(buildType))
+                throw new ValidationError(`--build-type must be one of: ${BUILD_TYPES.join(', ')}`);
+            const targetDir = path.resolve(options.dir ?? `./${name}`);
+            if (fileExists(targetDir) && !options.force) {
+                throw new ValidationError(`Directory already exists: ${targetDir} (use --force to overwrite)`);
+            }
+            ensureOutputDirectory(targetDir);
+            const isApproval = pluginType === 'ManualApprovalStep';
+            // Dockerfile only for image builds of a real build step.
+            const needsDockerfile = buildType === 'build_image' && !isApproval;
+            // config.yaml — build manifest.
+            const config = { pluginSpec: 'plugin-spec.yaml', buildType };
+            if (needsDockerfile)
+                config.dockerfile = 'Dockerfile';
+            fs.writeFileSync(path.join(targetDir, 'config.yaml'), YAML.stringify(config), 'utf-8');
+            // plugin-spec.yaml — the PluginSpec.
+            const spec = {
+                name,
+                version: '1.0.0',
+                description: `${name} plugin`,
+                keywords: [],
+                category: options.category ?? 'general',
+                pluginType,
+                computeType,
+                timeout: isApproval ? 0 : 10,
+                failureBehavior: 'fail',
+                secrets: [],
+            };
+            if (!isApproval) {
+                spec.installCommands = ['echo "install step — add your setup commands"'];
+                spec.commands = [`echo "run step for ${name} — replace with real commands"`];
+                if (needsDockerfile)
+                    spec.dockerfile = 'Dockerfile';
+            }
+            fs.writeFileSync(path.join(targetDir, 'plugin-spec.yaml'), YAML.stringify(spec), 'utf-8');
+            // Starter Dockerfile.
+            if (needsDockerfile) {
+                const dockerfile = [
+                    `# Dockerfile for the ${name} plugin.`,
+                    '# The base image provides the toolchain your commands need — keep it minimal and pinned.',
+                    'FROM alpine:3.20',
+                    '',
+                    '# TODO: install the tools your plugin-spec commands invoke, e.g.:',
+                    '# RUN apk add --no-cache python3',
+                    '',
+                    'WORKDIR /workspace',
+                    '',
+                ].join('\n');
+                fs.writeFileSync(path.join(targetDir, 'Dockerfile'), dockerfile, 'utf-8');
+            }
+            // README.
+            const relDir = options.dir ?? `./${name}`;
+            fs.writeFileSync(path.join(targetDir, 'README.md'), [
+                `# ${name}`,
+                '',
+                `${name} plugin.`,
+                '',
+                'Validate before upload:',
+                '',
+                `    pipeline-manager plugin validate --dir ${relDir}`,
+                '',
+                'Package and upload:',
+                '',
+                `    (cd ${relDir} && zip -r ../${name}.zip .)`,
+                `    pipeline-manager plugin upload --file ${name}.zip --organization <org>`,
+                '',
+            ].join('\n'), 'utf-8');
+            printSection('Scaffolded plugin', targetDir);
+            printInfo('Created files', { files: ['config.yaml', 'plugin-spec.yaml', ...(needsDockerfile ? ['Dockerfile'] : []), 'README.md'] });
+            printSuccess('Plugin scaffold created — edit plugin-spec.yaml then run validate-plugin', { executionId, dir: targetDir });
+        }
+        catch (err) {
+            handleError(err, err instanceof ValidationError ? ERROR_CODES.VALIDATION : ERROR_CODES.GENERAL, {
+                debug: program.opts().debug,
+                exit: true,
+                context: { command: 'new-plugin', executionId },
+            });
+        }
+    });
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibmV3LXBsdWdpbi5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9jb21tYW5kcy9uZXctcGx1Z2luLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLCtDQUErQztBQUMvQyxzQ0FBc0M7QUFFdEMsT0FBTyxFQUFFLE1BQU0sSUFBSSxDQUFDO0FBQ3BCLE9BQU8sSUFBSSxNQUFNLE1BQU0sQ0FBQztBQUN4QixPQUFPLEVBQUUsT0FBTyxFQUFFLE1BQU0sV0FBVyxDQUFDO0FBQ3BDLE9BQU8sSUFBSSxNQUFNLE1BQU0sQ0FBQztBQUN4QixPQUFPLEVBQUUsa0JBQWtCLEVBQUUsTUFBTSwyQkFBMkIsQ0FBQztBQUMvRCxPQUFPLEVBQUUsV0FBVyxFQUFFLFdBQVcsRUFBRSxlQUFlLEVBQUUsTUFBTSwyQkFBMkIsQ0FBQztBQUN0RixPQUFPLEVBQUUsU0FBUyxFQUFFLFlBQVksRUFBRSxZQUFZLEVBQUUsVUFBVSxFQUFFLHFCQUFxQixFQUFFLE1BQU0sMEJBQTBCLENBQUM7QUFZcEgsTUFBTSxZQUFZLEdBQUcsQ0FBQyxlQUFlLEVBQUUsV0FBVyxFQUFFLG9CQUFvQixDQUFDLENBQUM7QUFDMUUsTUFBTSxhQUFhLEdBQUcsQ0FBQyxPQUFPLEVBQUUsUUFBUSxFQUFFLE9BQU8sRUFBRSxVQUFVLENBQUMsQ0FBQztBQUMvRCxNQUFNLFdBQVcsR0FBRyxDQUFDLGFBQWEsRUFBRSxVQUFVLEVBQUUsZUFBZSxDQUFDLENBQUM7QUFFakU7Ozs7Ozs7O0dBUUc7QUFDSCxNQUFNLFVBQVUsU0FBUyxDQUFDLE9BQWdCO0lBQ3hDLE9BQU87U0FDSixPQUFPLENBQUMsS0FBSyxDQUFDO1NBQ2QsV0FBVyxDQUFDLCtFQUErRSxDQUFDO1NBQzVGLGNBQWMsQ0FBQyxlQUFlLEVBQUUsa0RBQWtELENBQUM7U0FDbkYsTUFBTSxDQUFDLHVCQUF1QixFQUFFLG9EQUFvRCxFQUFFLFNBQVMsQ0FBQztTQUNoRyxNQUFNLENBQUMsZUFBZSxFQUFFLGdCQUFnQixZQUFZLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxFQUFFLEVBQUUsZUFBZSxDQUFDO1NBQ3BGLE1BQU0sQ0FBQyxxQkFBcUIsRUFBRSxpQkFBaUIsYUFBYSxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsRUFBRSxFQUFFLE9BQU8sQ0FBQztTQUNwRixNQUFNLENBQUMsMEJBQTBCLEVBQUUsZUFBZSxXQUFXLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxFQUFFLEVBQUUsYUFBYSxDQUFDO1NBQzNGLE1BQU0sQ0FBQyxjQUFjLEVBQUUscUNBQXFDLENBQUM7U0FDN0QsTUFBTSxDQUFDLFNBQVMsRUFBRSxpQ0FBaUMsRUFBRSxLQUFLLENBQUM7U0FDM0QsTUFBTSxDQUFDLENBQUMsT0FBeUIsRUFBRSxFQUFFO1FBQ3BDLE1BQU0sV0FBVyxHQUFHLGtCQUFrQixDQUFDLFlBQVksQ0FBQyxDQUFDO1FBQ3JELElBQUksQ0FBQztZQUNILE1BQU0sSUFBSSxHQUFHLE9BQU8sQ0FBQyxJQUFJLElBQUksRUFBRSxDQUFDO1lBQ2hDLHlFQUF5RTtZQUN6RSxrQ0FBa0M7WUFDbEMsSUFBSSxDQUFDLGNBQWMsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FBQztnQkFDL0IsTUFBTSxJQUFJLGVBQWUsQ0FBQyx1RkFBdUYsQ0FBQyxDQUFDO1lBQ3JILENBQUM7WUFDRCxNQUFNLFVBQVUsR0FBRyxPQUFPLENBQUMsSUFBSSxJQUFJLGVBQWUsQ0FBQztZQUNuRCxJQUFJLENBQUMsWUFBWSxDQUFDLFFBQVEsQ0FBQyxVQUFVLENBQUM7Z0JBQUUsTUFBTSxJQUFJLGVBQWUsQ0FBQywwQkFBMEIsWUFBWSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsRUFBRSxDQUFDLENBQUM7WUFDdkgsTUFBTSxXQUFXLEdBQUcsT0FBTyxDQUFDLE9BQU8sSUFBSSxPQUFPLENBQUM7WUFDL0MsSUFBSSxDQUFDLGFBQWEsQ0FBQyxRQUFRLENBQUMsV0FBVyxDQUFDO2dCQUFFLE1BQU0sSUFBSSxlQUFlLENBQUMsNkJBQTZCLGFBQWEsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FBQyxDQUFDO1lBQzdILE1BQU0sU0FBUyxHQUFHLE9BQU8sQ0FBQyxTQUFTLElBQUksYUFBYSxDQUFDO1lBQ3JELElBQUksQ0FBQyxXQUFXLENBQUMsUUFBUSxDQUFDLFNBQVMsQ0FBQztnQkFBRSxNQUFNLElBQUksZUFBZSxDQUFDLGdDQUFnQyxXQUFXLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxFQUFFLENBQUMsQ0FBQztZQUUxSCxNQUFNLFNBQVMsR0FBRyxJQUFJLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxHQUFHLElBQUksS0FBSyxJQUFJLEVBQUUsQ0FBQyxDQUFDO1lBQzNELElBQUksVUFBVSxDQUFDLFNBQVMsQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLEtBQUssRUFBRSxDQUFDO2dCQUM1QyxNQUFNLElBQUksZUFBZSxDQUFDLDZCQUE2QixTQUFTLDZCQUE2QixDQUFDLENBQUM7WUFDakcsQ0FBQztZQUNELHFCQUFxQixDQUFDLFNBQVMsQ0FBQyxDQUFDO1lBRWpDLE1BQU0sVUFBVSxHQUFHLFVBQVUsS0FBSyxvQkFBb0IsQ0FBQztZQUN2RCx5REFBeUQ7WUFDekQsTUFBTSxlQUFlLEdBQUcsU0FBUyxLQUFLLGFBQWEsSUFBSSxDQUFDLFVBQVUsQ0FBQztZQUVuRSxnQ0FBZ0M7WUFDaEMsTUFBTSxNQUFNLEdBQTRCLEVBQUUsVUFBVSxFQUFFLGtCQUFrQixFQUFFLFNBQVMsRUFBRSxDQUFDO1lBQ3RGLElBQUksZUFBZTtnQkFBRSxNQUFNLENBQUMsVUFBVSxHQUFHLFlBQVksQ0FBQztZQUN0RCxFQUFFLENBQUMsYUFBYSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsU0FBUyxFQUFFLGFBQWEsQ0FBQyxFQUFFLElBQUksQ0FBQyxTQUFTLENBQUMsTUFBTSxDQUFDLEVBQUUsT0FBTyxDQUFDLENBQUM7WUFFdkYscUNBQXFDO1lBQ3JDLE1BQU0sSUFBSSxHQUE0QjtnQkFDcEMsSUFBSTtnQkFDSixPQUFPLEVBQUUsT0FBTztnQkFDaEIsV0FBVyxFQUFFLEdBQUcsSUFBSSxTQUFTO2dCQUM3QixRQUFRLEVBQUUsRUFBYztnQkFDeEIsUUFBUSxFQUFFLE9BQU8sQ0FBQyxRQUFRLElBQUksU0FBUztnQkFDdkMsVUFBVTtnQkFDVixXQUFXO2dCQUNYLE9BQU8sRUFBRSxVQUFVLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRTtnQkFDNUIsZUFBZSxFQUFFLE1BQU07Z0JBQ3ZCLE9BQU8sRUFBRSxFQUFlO2FBQ3pCLENBQUM7WUFDRixJQUFJLENBQUMsVUFBVSxFQUFFLENBQUM7Z0JBQ2hCLElBQUksQ0FBQyxlQUFlLEdBQUcsQ0FBQywrQ0FBK0MsQ0FBQyxDQUFDO2dCQUN6RSxJQUFJLENBQUMsUUFBUSxHQUFHLENBQUMsc0JBQXNCLElBQUksZ0NBQWdDLENBQUMsQ0FBQztnQkFDN0UsSUFBSSxlQUFlO29CQUFFLElBQUksQ0FBQyxVQUFVLEdBQUcsWUFBWSxDQUFDO1lBQ3RELENBQUM7WUFDRCxFQUFFLENBQUMsYUFBYSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsU0FBUyxFQUFFLGtCQUFrQixDQUFDLEVBQUUsSUFBSSxDQUFDLFNBQVMsQ0FBQyxJQUFJLENBQUMsRUFBRSxPQUFPLENBQUMsQ0FBQztZQUUxRixzQkFBc0I7WUFDdEIsSUFBSSxlQUFlLEVBQUUsQ0FBQztnQkFDcEIsTUFBTSxVQUFVLEdBQUc7b0JBQ2pCLHdCQUF3QixJQUFJLFVBQVU7b0JBQ3RDLDBGQUEwRjtvQkFDMUYsa0JBQWtCO29CQUNsQixFQUFFO29CQUNGLG1FQUFtRTtvQkFDbkUsa0NBQWtDO29CQUNsQyxFQUFFO29CQUNGLG9CQUFvQjtvQkFDcEIsRUFBRTtpQkFDSCxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsQ0FBQztnQkFDYixFQUFFLENBQUMsYUFBYSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsU0FBUyxFQUFFLFlBQVksQ0FBQyxFQUFFLFVBQVUsRUFBRSxPQUFPLENBQUMsQ0FBQztZQUM1RSxDQUFDO1lBRUQsVUFBVTtZQUNWLE1BQU0sTUFBTSxHQUFHLE9BQU8sQ0FBQyxHQUFHLElBQUksS0FBSyxJQUFJLEVBQUUsQ0FBQztZQUMxQyxFQUFFLENBQUMsYUFBYSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsU0FBUyxFQUFFLFdBQVcsQ0FBQyxFQUFFO2dCQUNsRCxLQUFLLElBQUksRUFBRTtnQkFDWCxFQUFFO2dCQUNGLEdBQUcsSUFBSSxVQUFVO2dCQUNqQixFQUFFO2dCQUNGLHlCQUF5QjtnQkFDekIsRUFBRTtnQkFDRiw4Q0FBOEMsTUFBTSxFQUFFO2dCQUN0RCxFQUFFO2dCQUNGLHFCQUFxQjtnQkFDckIsRUFBRTtnQkFDRixXQUFXLE1BQU0saUJBQWlCLElBQUksU0FBUztnQkFDL0MsNkNBQTZDLElBQUksMkJBQTJCO2dCQUM1RSxFQUFFO2FBQ0gsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLEVBQUUsT0FBTyxDQUFDLENBQUM7WUFFdkIsWUFBWSxDQUFDLG1CQUFtQixFQUFFLFNBQVMsQ0FBQyxDQUFDO1lBQzdDLFNBQVMsQ0FBQyxlQUFlLEVBQUUsRUFBRSxLQUFLLEVBQUUsQ0FBQyxhQUFhLEVBQUUsa0JBQWtCLEVBQUUsR0FBRyxDQUFDLGVBQWUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxZQUFZLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLEVBQUUsV0FBVyxDQUFDLEVBQUUsQ0FBQyxDQUFDO1lBQ3BJLFlBQVksQ0FBQywwRUFBMEUsRUFBRSxFQUFFLFdBQVcsRUFBRSxHQUFHLEVBQUUsU0FBUyxFQUFFLENBQUMsQ0FBQztRQUM1SCxDQUFDO1FBQUMsT0FBTyxHQUFHLEVBQUUsQ0FBQztZQUNiLFdBQVcsQ0FBQyxHQUFHLEVBQUUsR0FBRyxZQUFZLGVBQWUsQ0FBQyxDQUFDLENBQUMsV0FBVyxDQUFDLFVBQVUsQ0FBQyxDQUFDLENBQUMsV0FBVyxDQUFDLE9BQU8sRUFBRTtnQkFDOUYsS0FBSyxFQUFFLE9BQU8sQ0FBQyxJQUFJLEVBQUUsQ0FBQyxLQUFLO2dCQUMzQixJQUFJLEVBQUUsSUFBSTtnQkFDVixPQUFPLEVBQUUsRUFBRSxPQUFPLEVBQUUsWUFBWSxFQUFFLFdBQVcsRUFBRTthQUNoRCxDQUFDLENBQUM7UUFDTCxDQUFDO0lBQ0gsQ0FBQyxDQUFDLENBQUM7QUFDUCxDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiLy8gQ29weXJpZ2h0IDIwMjYgUGlwZWxpbmUgQnVpbGRlciBDb250cmlidXRvcnNcbi8vIFNQRFgtTGljZW5zZS1JZGVudGlmaWVyOiBBcGFjaGUtMi4wXG5cbmltcG9ydCBmcyBmcm9tICdmcyc7XG5pbXBvcnQgcGF0aCBmcm9tICdwYXRoJztcbmltcG9ydCB7IENvbW1hbmQgfSBmcm9tICdjb21tYW5kZXInO1xuaW1wb3J0IFlBTUwgZnJvbSAneWFtbCc7XG5pbXBvcnQgeyBwcmludENvbW1hbmRIZWFkZXIgfSBmcm9tICcuLi91dGlscy9jb21tYW5kLXV0aWxzLmpzJztcbmltcG9ydCB7IEVSUk9SX0NPREVTLCBoYW5kbGVFcnJvciwgVmFsaWRhdGlvbkVycm9yIH0gZnJvbSAnLi4vdXRpbHMvZXJyb3ItaGFuZGxlci5qcyc7XG5pbXBvcnQgeyBwcmludEluZm8sIHByaW50U2VjdGlvbiwgcHJpbnRTdWNjZXNzLCBmaWxlRXhpc3RzLCBlbnN1cmVPdXRwdXREaXJlY3RvcnkgfSBmcm9tICcuLi91dGlscy9vdXRwdXQtdXRpbHMuanMnO1xuXG5pbnRlcmZhY2UgTmV3UGx1Z2luT3B0aW9ucyB7XG4gIG5hbWU/OiBzdHJpbmc7XG4gIGNhdGVnb3J5Pzogc3RyaW5nO1xuICB0eXBlPzogc3RyaW5nO1xuICBjb21wdXRlPzogc3RyaW5nO1xuICBidWlsZFR5cGU/OiBzdHJpbmc7XG4gIGRpcj86IHN0cmluZztcbiAgZm9yY2U/OiBib29sZWFuO1xufVxuXG5jb25zdCBQTFVHSU5fVFlQRVMgPSBbJ0NvZGVCdWlsZFN0ZXAnLCAnU2hlbGxTdGVwJywgJ01hbnVhbEFwcHJvdmFsU3RlcCddO1xuY29uc3QgQ09NUFVURV9UWVBFUyA9IFsnU01BTEwnLCAnTUVESVVNJywgJ0xBUkdFJywgJ1gyX0xBUkdFJ107XG5jb25zdCBCVUlMRF9UWVBFUyA9IFsnYnVpbGRfaW1hZ2UnLCAncHJlYnVpbHQnLCAnbWV0YWRhdGFfb25seSddO1xuXG4vKipcbiAqIFJlZ2lzdGVyIHRoZSBgbmV3LXBsdWdpbmAgY29tbWFuZCDigJQgc2NhZmZvbGQgYSBsb2NhbCBwbHVnaW4gZGlyZWN0b3J5XG4gKiAoYGNvbmZpZy55YW1sYCwgYHBsdWdpbi1zcGVjLnlhbWxgLCBhbmQgYSBzdGFydGVyIGBEb2NrZXJmaWxlYCkgdGhhdFxuICogYHZhbGlkYXRlLXBsdWdpbmAgYWNjZXB0cyBhbmQgYHVwbG9hZC1wbHVnaW5gIGNhbiBwYWNrYWdlLlxuICpcbiAqIFVzYWdlOlxuICogICBwaXBlbGluZS1tYW5hZ2VyIHBsdWdpbiBuZXcgLS1uYW1lIG15LWxpbnRlciAtLWNhdGVnb3J5IHF1YWxpdHlcbiAqICAgcGlwZWxpbmUtbWFuYWdlciBwbHVnaW4gbmV3IC0tbmFtZSBhcHByb3ZlIC0tdHlwZSBNYW51YWxBcHByb3ZhbFN0ZXBcbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIG5ld1BsdWdpbihwcm9ncmFtOiBDb21tYW5kKTogdm9pZCB7XG4gIHByb2dyYW1cbiAgICAuY29tbWFuZCgnbmV3JylcbiAgICAuZGVzY3JpcHRpb24oJ1NjYWZmb2xkIGEgbG9jYWwgcGx1Z2luIGRpcmVjdG9yeSAoY29uZmlnLnlhbWwsIHBsdWdpbi1zcGVjLnlhbWwsIERvY2tlcmZpbGUpJylcbiAgICAucmVxdWlyZWRPcHRpb24oJy0tbmFtZSA8bmFtZT4nLCAnUGx1Z2luIG5hbWUgKGxvd2VyY2FzZSBsZXR0ZXJzLCBkaWdpdHMsIGh5cGhlbnMpJylcbiAgICAub3B0aW9uKCctLWNhdGVnb3J5IDxjYXRlZ29yeT4nLCAnUGx1Z2luIGNhdGVnb3J5IChlLmcuIHF1YWxpdHksIHNlY3VyaXR5LCBsYW5ndWFnZSknLCAnZ2VuZXJhbCcpXG4gICAgLm9wdGlvbignLS10eXBlIDx0eXBlPicsIGBQbHVnaW4gdHlwZTogJHtQTFVHSU5fVFlQRVMuam9pbignIHwgJyl9YCwgJ0NvZGVCdWlsZFN0ZXAnKVxuICAgIC5vcHRpb24oJy0tY29tcHV0ZSA8Y29tcHV0ZT4nLCBgQ29tcHV0ZSB0eXBlOiAke0NPTVBVVEVfVFlQRVMuam9pbignIHwgJyl9YCwgJ1NNQUxMJylcbiAgICAub3B0aW9uKCctLWJ1aWxkLXR5cGUgPGJ1aWxkVHlwZT4nLCBgQnVpbGQgdHlwZTogJHtCVUlMRF9UWVBFUy5qb2luKCcgfCAnKX1gLCAnYnVpbGRfaW1hZ2UnKVxuICAgIC5vcHRpb24oJy0tZGlyIDxwYXRoPicsICdUYXJnZXQgZGlyZWN0b3J5IChkZWZhdWx0IC4vPG5hbWU+KScpXG4gICAgLm9wdGlvbignLS1mb3JjZScsICdPdmVyd3JpdGUgYW4gZXhpc3RpbmcgZGlyZWN0b3J5JywgZmFsc2UpXG4gICAgLmFjdGlvbigob3B0aW9uczogTmV3UGx1Z2luT3B0aW9ucykgPT4ge1xuICAgICAgY29uc3QgZXhlY3V0aW9uSWQgPSBwcmludENvbW1hbmRIZWFkZXIoJ05ldyBQbHVnaW4nKTtcbiAgICAgIHRyeSB7XG4gICAgICAgIGNvbnN0IG5hbWUgPSBvcHRpb25zLm5hbWUgPz8gJyc7XG4gICAgICAgIC8vIENhbm9uaWNhbCBwbHVnaW4tbmFtZSBwYXR0ZXJuIChtYXRjaGVzIHZhbGlkYXRlLXBsdWdpbiwgdXBsb2FkLXBsdWdpbixcbiAgICAgICAgLy8gYW5kIHRoZSBzZXJ2ZXIncyBOQU1FX1BBVFRFUk4pLlxuICAgICAgICBpZiAoIS9eW2EtejAtOS1dKyQvLnRlc3QobmFtZSkpIHtcbiAgICAgICAgICB0aHJvdyBuZXcgVmFsaWRhdGlvbkVycm9yKCdQbHVnaW4gbmFtZSBtdXN0IGNvbnRhaW4gb25seSBsb3dlcmNhc2UgbGV0dGVycywgZGlnaXRzLCBhbmQgaHlwaGVucyAoL15bYS16MC05LV0rJC8pJyk7XG4gICAgICAgIH1cbiAgICAgICAgY29uc3QgcGx1Z2luVHlwZSA9IG9wdGlvbnMudHlwZSA/PyAnQ29kZUJ1aWxkU3RlcCc7XG4gICAgICAgIGlmICghUExVR0lOX1RZUEVTLmluY2x1ZGVzKHBsdWdpblR5cGUpKSB0aHJvdyBuZXcgVmFsaWRhdGlvbkVycm9yKGAtLXR5cGUgbXVzdCBiZSBvbmUgb2Y6ICR7UExVR0lOX1RZUEVTLmpvaW4oJywgJyl9YCk7XG4gICAgICAgIGNvbnN0IGNvbXB1dGVUeXBlID0gb3B0aW9ucy5jb21wdXRlID8/ICdTTUFMTCc7XG4gICAgICAgIGlmICghQ09NUFVURV9UWVBFUy5pbmNsdWRlcyhjb21wdXRlVHlwZSkpIHRocm93IG5ldyBWYWxpZGF0aW9uRXJyb3IoYC0tY29tcHV0ZSBtdXN0IGJlIG9uZSBvZjogJHtDT01QVVRFX1RZUEVTLmpvaW4oJywgJyl9YCk7XG4gICAgICAgIGNvbnN0IGJ1aWxkVHlwZSA9IG9wdGlvbnMuYnVpbGRUeXBlID8/ICdidWlsZF9pbWFnZSc7XG4gICAgICAgIGlmICghQlVJTERfVFlQRVMuaW5jbHVkZXMoYnVpbGRUeXBlKSkgdGhyb3cgbmV3IFZhbGlkYXRpb25FcnJvcihgLS1idWlsZC10eXBlIG11c3QgYmUgb25lIG9mOiAke0JVSUxEX1RZUEVTLmpvaW4oJywgJyl9YCk7XG5cbiAgICAgICAgY29uc3QgdGFyZ2V0RGlyID0gcGF0aC5yZXNvbHZlKG9wdGlvbnMuZGlyID8/IGAuLyR7bmFtZX1gKTtcbiAgICAgICAgaWYgKGZpbGVFeGlzdHModGFyZ2V0RGlyKSAmJiAhb3B0aW9ucy5mb3JjZSkge1xuICAgICAgICAgIHRocm93IG5ldyBWYWxpZGF0aW9uRXJyb3IoYERpcmVjdG9yeSBhbHJlYWR5IGV4aXN0czogJHt0YXJnZXREaXJ9ICh1c2UgLS1mb3JjZSB0byBvdmVyd3JpdGUpYCk7XG4gICAgICAgIH1cbiAgICAgICAgZW5zdXJlT3V0cHV0RGlyZWN0b3J5KHRhcmdldERpcik7XG5cbiAgICAgICAgY29uc3QgaXNBcHByb3ZhbCA9IHBsdWdpblR5cGUgPT09ICdNYW51YWxBcHByb3ZhbFN0ZXAnO1xuICAgICAgICAvLyBEb2NrZXJmaWxlIG9ubHkgZm9yIGltYWdlIGJ1aWxkcyBvZiBhIHJlYWwgYnVpbGQgc3RlcC5cbiAgICAgICAgY29uc3QgbmVlZHNEb2NrZXJmaWxlID0gYnVpbGRUeXBlID09PSAnYnVpbGRfaW1hZ2UnICYmICFpc0FwcHJvdmFsO1xuXG4gICAgICAgIC8vIGNvbmZpZy55YW1sIOKAlCBidWlsZCBtYW5pZmVzdC5cbiAgICAgICAgY29uc3QgY29uZmlnOiBSZWNvcmQ8c3RyaW5nLCB1bmtub3duPiA9IHsgcGx1Z2luU3BlYzogJ3BsdWdpbi1zcGVjLnlhbWwnLCBidWlsZFR5cGUgfTtcbiAgICAgICAgaWYgKG5lZWRzRG9ja2VyZmlsZSkgY29uZmlnLmRvY2tlcmZpbGUgPSAnRG9ja2VyZmlsZSc7XG4gICAgICAgIGZzLndyaXRlRmlsZVN5bmMocGF0aC5qb2luKHRhcmdldERpciwgJ2NvbmZpZy55YW1sJyksIFlBTUwuc3RyaW5naWZ5KGNvbmZpZyksICd1dGYtOCcpO1xuXG4gICAgICAgIC8vIHBsdWdpbi1zcGVjLnlhbWwg4oCUIHRoZSBQbHVnaW5TcGVjLlxuICAgICAgICBjb25zdCBzcGVjOiBSZWNvcmQ8c3RyaW5nLCB1bmtub3duPiA9IHtcbiAgICAgICAgICBuYW1lLFxuICAgICAgICAgIHZlcnNpb246ICcxLjAuMCcsXG4gICAgICAgICAgZGVzY3JpcHRpb246IGAke25hbWV9IHBsdWdpbmAsXG4gICAgICAgICAga2V5d29yZHM6IFtdIGFzIHN0cmluZ1tdLFxuICAgICAgICAgIGNhdGVnb3J5OiBvcHRpb25zLmNhdGVnb3J5ID8/ICdnZW5lcmFsJyxcbiAgICAgICAgICBwbHVnaW5UeXBlLFxuICAgICAgICAgIGNvbXB1dGVUeXBlLFxuICAgICAgICAgIHRpbWVvdXQ6IGlzQXBwcm92YWwgPyAwIDogMTAsXG4gICAgICAgICAgZmFpbHVyZUJlaGF2aW9yOiAnZmFpbCcsXG4gICAgICAgICAgc2VjcmV0czogW10gYXMgdW5rbm93bltdLFxuICAgICAgICB9O1xuICAgICAgICBpZiAoIWlzQXBwcm92YWwpIHtcbiAgICAgICAgICBzcGVjLmluc3RhbGxDb21tYW5kcyA9IFsnZWNobyBcImluc3RhbGwgc3RlcCDigJQgYWRkIHlvdXIgc2V0dXAgY29tbWFuZHNcIiddO1xuICAgICAgICAgIHNwZWMuY29tbWFuZHMgPSBbYGVjaG8gXCJydW4gc3RlcCBmb3IgJHtuYW1lfSDigJQgcmVwbGFjZSB3aXRoIHJlYWwgY29tbWFuZHNcImBdO1xuICAgICAgICAgIGlmIChuZWVkc0RvY2tlcmZpbGUpIHNwZWMuZG9ja2VyZmlsZSA9ICdEb2NrZXJmaWxlJztcbiAgICAgICAgfVxuICAgICAgICBmcy53cml0ZUZpbGVTeW5jKHBhdGguam9pbih0YXJnZXREaXIsICdwbHVnaW4tc3BlYy55YW1sJyksIFlBTUwuc3RyaW5naWZ5KHNwZWMpLCAndXRmLTgnKTtcblxuICAgICAgICAvLyBTdGFydGVyIERvY2tlcmZpbGUuXG4gICAgICAgIGlmIChuZWVkc0RvY2tlcmZpbGUpIHtcbiAgICAgICAgICBjb25zdCBkb2NrZXJmaWxlID0gW1xuICAgICAgICAgICAgYCMgRG9ja2VyZmlsZSBmb3IgdGhlICR7bmFtZX0gcGx1Z2luLmAsXG4gICAgICAgICAgICAnIyBUaGUgYmFzZSBpbWFnZSBwcm92aWRlcyB0aGUgdG9vbGNoYWluIHlvdXIgY29tbWFuZHMgbmVlZCDigJQga2VlcCBpdCBtaW5pbWFsIGFuZCBwaW5uZWQuJyxcbiAgICAgICAgICAgICdGUk9NIGFscGluZTozLjIwJyxcbiAgICAgICAgICAgICcnLFxuICAgICAgICAgICAgJyMgVE9ETzogaW5zdGFsbCB0aGUgdG9vbHMgeW91ciBwbHVnaW4tc3BlYyBjb21tYW5kcyBpbnZva2UsIGUuZy46JyxcbiAgICAgICAgICAgICcjIFJVTiBhcGsgYWRkIC0tbm8tY2FjaGUgcHl0aG9uMycsXG4gICAgICAgICAgICAnJyxcbiAgICAgICAgICAgICdXT1JLRElSIC93b3Jrc3BhY2UnLFxuICAgICAgICAgICAgJycsXG4gICAgICAgICAgXS5qb2luKCdcXG4nKTtcbiAgICAgICAgICBmcy53cml0ZUZpbGVTeW5jKHBhdGguam9pbih0YXJnZXREaXIsICdEb2NrZXJmaWxlJyksIGRvY2tlcmZpbGUsICd1dGYtOCcpO1xuICAgICAgICB9XG5cbiAgICAgICAgLy8gUkVBRE1FLlxuICAgICAgICBjb25zdCByZWxEaXIgPSBvcHRpb25zLmRpciA/PyBgLi8ke25hbWV9YDtcbiAgICAgICAgZnMud3JpdGVGaWxlU3luYyhwYXRoLmpvaW4odGFyZ2V0RGlyLCAnUkVBRE1FLm1kJyksIFtcbiAgICAgICAgICBgIyAke25hbWV9YCxcbiAgICAgICAgICAnJyxcbiAgICAgICAgICBgJHtuYW1lfSBwbHVnaW4uYCxcbiAgICAgICAgICAnJyxcbiAgICAgICAgICAnVmFsaWRhdGUgYmVmb3JlIHVwbG9hZDonLFxuICAgICAgICAgICcnLFxuICAgICAgICAgIGAgICAgcGlwZWxpbmUtbWFuYWdlciBwbHVnaW4gdmFsaWRhdGUgLS1kaXIgJHtyZWxEaXJ9YCxcbiAgICAgICAgICAnJyxcbiAgICAgICAgICAnUGFja2FnZSBhbmQgdXBsb2FkOicsXG4gICAgICAgICAgJycsXG4gICAgICAgICAgYCAgICAoY2QgJHtyZWxEaXJ9ICYmIHppcCAtciAuLi8ke25hbWV9LnppcCAuKWAsXG4gICAgICAgICAgYCAgICBwaXBlbGluZS1tYW5hZ2VyIHBsdWdpbiB1cGxvYWQgLS1maWxlICR7bmFtZX0uemlwIC0tb3JnYW5pemF0aW9uIDxvcmc+YCxcbiAgICAgICAgICAnJyxcbiAgICAgICAgXS5qb2luKCdcXG4nKSwgJ3V0Zi04Jyk7XG5cbiAgICAgICAgcHJpbnRTZWN0aW9uKCdTY2FmZm9sZGVkIHBsdWdpbicsIHRhcmdldERpcik7XG4gICAgICAgIHByaW50SW5mbygnQ3JlYXRlZCBmaWxlcycsIHsgZmlsZXM6IFsnY29uZmlnLnlhbWwnLCAncGx1Z2luLXNwZWMueWFtbCcsIC4uLihuZWVkc0RvY2tlcmZpbGUgPyBbJ0RvY2tlcmZpbGUnXSA6IFtdKSwgJ1JFQURNRS5tZCddIH0pO1xuICAgICAgICBwcmludFN1Y2Nlc3MoJ1BsdWdpbiBzY2FmZm9sZCBjcmVhdGVkIOKAlCBlZGl0IHBsdWdpbi1zcGVjLnlhbWwgdGhlbiBydW4gdmFsaWRhdGUtcGx1Z2luJywgeyBleGVjdXRpb25JZCwgZGlyOiB0YXJnZXREaXIgfSk7XG4gICAgICB9IGNhdGNoIChlcnIpIHtcbiAgICAgICAgaGFuZGxlRXJyb3IoZXJyLCBlcnIgaW5zdGFuY2VvZiBWYWxpZGF0aW9uRXJyb3IgPyBFUlJPUl9DT0RFUy5WQUxJREFUSU9OIDogRVJST1JfQ09ERVMuR0VORVJBTCwge1xuICAgICAgICAgIGRlYnVnOiBwcm9ncmFtLm9wdHMoKS5kZWJ1ZyxcbiAgICAgICAgICBleGl0OiB0cnVlLFxuICAgICAgICAgIGNvbnRleHQ6IHsgY29tbWFuZDogJ25ldy1wbHVnaW4nLCBleGVjdXRpb25JZCB9LFxuICAgICAgICB9KTtcbiAgICAgIH1cbiAgICB9KTtcbn1cbiJdfQ==

package/dist/commands/org-export.d.ts

@@ -0,0 +1,25 @@
+import { Command } from 'commander';
+/**
+ * CLI  `pipeline-manager org export --id <orgId> --output <file>`.
+ *
+ * Fetches the GDPR portability dump from `GET /api/organization/:id/export`
+ * on the platform service and writes it to disk (or stdout). The endpoint
+ * is gated server-side * • System admins (admin/owner in the `system` org) may export any org.
+ * • Org admins / owners may export ONLY their own org.
+ * • Everything else gets 403.
+ *
+ * The CLI itself does no role checking  the caller's PLATFORM_TOKEN drives
+ * what the server accepts. Run `pipeline-manager status` first to confirm
+ * the token's role + org.
+ *
+ * @example
+ * ```bash
+ * # Sysadmin: any org
+ * pipeline-manager org export --id org-acme --output acme.json
+ *
+ * # Org admin: own org only (server rejects other ids with 403)
+ * pipeline-manager org export --id org-acme --output acme.json
+ * ```
+ */
+export declare function orgExport(program: Command): void;
+//# sourceMappingURL=org-export.d.ts.map

package/dist/commands/org-export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-export.d.ts","sourceRoot":"","sources":["../../src/commands/org-export.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6EhD"}

package/dist/commands/org-export.js

@@ -0,0 +1,100 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+import * as fs from 'fs';
+import * as path from 'path';
+import { Command } from 'commander';
+import pico from 'picocolors';
+import { createAuthenticatedClient, printCommandHeader, printExecutionSummary, printSslWarning, validateEntityId, withSslOptions } from '../utils/command-utils.js';
+import { ERROR_CODES, handleError } from '../utils/error-handler.js';
+import { printError, printInfo, printKeyValue, printSection, printSuccess } from '../utils/output-utils.js';
+const { bold, green } = pico;
+/**
+ * CLI  `pipeline-manager org export --id <orgId> --output <file>`.
+ *
+ * Fetches the GDPR portability dump from `GET /api/organization/:id/export`
+ * on the platform service and writes it to disk (or stdout). The endpoint
+ * is gated server-side * • System admins (admin/owner in the `system` org) may export any org.
+ * • Org admins / owners may export ONLY their own org.
+ * • Everything else gets 403.
+ *
+ * The CLI itself does no role checking  the caller's PLATFORM_TOKEN drives
+ * what the server accepts. Run `pipeline-manager status` first to confirm
+ * the token's role + org.
+ *
+ * @example
+ * ```bash
+ * # Sysadmin: any org
+ * pipeline-manager org export --id org-acme --output acme.json
+ *
+ * # Org admin: own org only (server rejects other ids with 403)
+ * pipeline-manager org export --id org-acme --output acme.json
+ * ```
+ */
+export function orgExport(program) {
+    withSslOptions(program
+        .command('export')
+        .description('Export an organization\'s data as JSON (GDPR portability, ).')
+        .requiredOption('-i, --id <id>', 'Organization ID to export')
+        .option('-o, --output <file>', 'Output file path (default: org-<id>-export.json in CWD)'))
+        .action(async (options) => {
+        const executionId = printCommandHeader('Org Export');
+        try {
+            printSslWarning(options.verifySsl);
+            const orgId = validateEntityId(options.id, 'Organization');
+            const outputPath = options.output
+                ? path.resolve(options.output)
+                : path.resolve(process.cwd(), `org-${orgId}-export.json`);
+            printInfo('Request parameters', {
+                orgId,
+                output: outputPath,
+            });
+            const client = createAuthenticatedClient(options);
+            console.log('');
+            printSection('Fetching Export');
+            const startTime = Date.now();
+            // The endpoint streams a large JSON attachment for orgs with long
+            // histories. The ApiClient returns the parsed body directly, which
+            // for `application/json` is a JS object we re-serialize to disk.
+            const response = await client.get(`${client.getConfig().api.baseUrl}/api/organization/${encodeURIComponent(orgId)}/export`);
+            const duration = Date.now() - startTime;
+            if (!response || typeof response !== 'object') {
+                printError('Empty / unparseable export payload');
+                throw new Error(`Export returned no data for org ${orgId}`);
+            }
+            // Re-serialize so we keep the same pretty-printed shape the server
+            // produced (2-space indent matches the platform's handler) and so
+            // we don't lose Date precision on a round-trip through JSON.parse.
+            //
+            // GUARD: this writes the raw server payload straight to disk. The export
+            // payload must NEVER contain an AWS account id — orgId is the marketplace
+            // customerIdentifier, never an AWS account id. It is account-id-free today;
+            // if a future server change ever adds one, it must be stripped/redacted
+            // here BEFORE this write, not persisted through the CLI.
+            const json = JSON.stringify(response, null, 2);
+            fs.writeFileSync(outputPath, json, 'utf8');
+            const sizeKb = (json.length / 1024).toFixed(1);
+            const postgresTables = response.postgres && typeof response.postgres === 'object'
+                ? Object.keys(response.postgres).length
+                : 0;
+            console.log('');
+            printSection('Export Saved');
+            printKeyValue({
+                'Org ID': green(bold(orgId)),
+                'Output': outputPath,
+                'Size': `${sizeKb} KB`,
+                'Postgres tables': String(postgresTables),
+                'Exported at': typeof response.exportedAt === 'string' ? response.exportedAt : '(not set)',
+            });
+            printExecutionSummary(executionId, duration);
+            printSuccess('Organization export complete', { path: outputPath });
+        }
+        catch (error) {
+            handleError(error, ERROR_CODES.API_REQUEST, {
+                debug: program.opts().debug,
+                exit: true,
+                context: { command: 'org-export', executionId, orgId: options.id },
+            });
+        }
+    });
+}
+//# sourceMappingURL=data:application/json;base64,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