@salesforce/plugin-devops-center 1.2.28 → 1.4.0

package/lib/utils/addStageEnvironment.d.ts

@@ -0,0 +1,92 @@
+import { Connection } from '@salesforce/core';
+export type OrgType = 'Production' | 'Sandbox';
+export declare const POLL_INTERVAL_MS = 3000;
+export declare const POLL_TIMEOUT_MS: number;
+export type AddStageEnvironmentParams = {
+    connection: Connection;
+    pipelineId: string;
+    stageId: string;
+    environmentName: string;
+    orgType: OrgType;
+};
+export type AddStageEnvironmentResult = {
+    success: boolean;
+    stageId: string;
+    environmentId?: string;
+    environmentName?: string;
+    orgType?: OrgType;
+    pipelineId?: string;
+    redirectUrl?: string;
+    namedCredential?: string;
+    organizationId?: string;
+    error?: string;
+};
+type EnvironmentCreateResponse = {
+    id: string;
+    name: string;
+    redirectUrl: string;
+    namedCredential: string;
+    externalCredential: string;
+    pipelineId?: string;
+};
+export type EnvironmentGetResponse = {
+    id: string;
+    name: string;
+    organizationId?: string;
+    orgType?: string;
+    namedCredential?: string;
+    redirectUrl?: string;
+};
+type EnvironmentValidateResponse = {
+    id: string;
+    name: string;
+    organizationId?: string;
+    orgType?: string;
+    namedCredential?: string;
+};
+/**
+ * Creates an environment and associates it with a pipeline stage via the Connect API.
+ * POST /services/data/v{version}/connect/devops/environment
+ */
+export declare function createEnvironment(connection: Connection, params: {
+    pipelineId: string;
+    stageId: string;
+    environmentName: string;
+    orgType: OrgType;
+}): Promise<EnvironmentCreateResponse>;
+/**
+ * Fetches the current state of an environment.
+ * GET /services/data/v{version}/connect/devops/environment/{environmentId}
+ */
+export declare function getEnvironment(connection: Connection, environmentId: string): Promise<EnvironmentGetResponse>;
+/**
+ * Validates an authenticated environment by triggering server-side org extraction.
+ * PATCH /services/data/v{version}/connect/devops/environment/{environmentId}
+ */
+export declare function validateEnvironment(connection: Connection, environmentId: string): Promise<EnvironmentValidateResponse>;
+/**
+ * Polls until authentication is complete by attempting PATCH validation.
+ * The PATCH call triggers server-side org extraction; if the user has
+ * completed OAuth, it returns a response with organizationId populated.
+ * If auth isn't done yet, the PATCH throws — we catch and retry.
+ * Falls back to GET polling as a secondary check.
+ * Throws on timeout.
+ */
+export declare function pollForAuthentication(connection: Connection, environmentId: string, timeoutMs?: number, intervalMs?: number): Promise<EnvironmentValidateResponse>;
+/**
+ * Full orchestration: create environment -> poll for auth -> validate.
+ * Returns the final result including organizationId.
+ *
+ * The caller is responsible for opening the browser at the returned redirectUrl
+ * and displaying progress to the user. Use `onCreated` to receive the redirect URL
+ * before polling begins.
+ */
+export declare function addStageEnvironment(params: AddStageEnvironmentParams & {
+    onCreated?: (data: {
+        environmentId: string;
+        redirectUrl: string;
+    }) => void;
+    pollTimeoutMs?: number;
+    pollIntervalMs?: number;
+}): Promise<AddStageEnvironmentResult>;
+export {};

package/lib/utils/addStageEnvironment.js

@@ -0,0 +1,120 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+const ORG_TYPE_API_MAP = {
+    Production: 'PRODUCTION',
+    Sandbox: 'SANDBOX',
+};
+export const POLL_INTERVAL_MS = 3000;
+export const POLL_TIMEOUT_MS = 5 * 60 * 1000;
+/**
+ * Creates an environment and associates it with a pipeline stage via the Connect API.
+ * POST /services/data/v{version}/connect/devops/environment
+ */
+export async function createEnvironment(connection, params) {
+    const path = `/services/data/v${connection.getApiVersion()}/connect/devops/environment`;
+    return connection.request({
+        method: 'POST',
+        url: path,
+        body: JSON.stringify({
+            envName: params.environmentName,
+            orgType: ORG_TYPE_API_MAP[params.orgType],
+            pipelineStageId: params.stageId,
+            pipelineId: params.pipelineId,
+        }),
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+/**
+ * Fetches the current state of an environment.
+ * GET /services/data/v{version}/connect/devops/environment/{environmentId}
+ */
+export async function getEnvironment(connection, environmentId) {
+    const path = `/services/data/v${connection.getApiVersion()}/connect/devops/environment/${environmentId}`;
+    return connection.request({ method: 'GET', url: path });
+}
+/**
+ * Validates an authenticated environment by triggering server-side org extraction.
+ * PATCH /services/data/v{version}/connect/devops/environment/{environmentId}
+ */
+export async function validateEnvironment(connection, environmentId) {
+    const path = `/services/data/v${connection.getApiVersion()}/connect/devops/environment/${environmentId}`;
+    return connection.request({
+        method: 'PATCH',
+        url: path,
+        body: JSON.stringify({}),
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+function sleep(ms) {
+    return new Promise((resolve) => {
+        setTimeout(resolve, ms);
+    });
+}
+/**
+ * Polls until authentication is complete by attempting PATCH validation.
+ * The PATCH call triggers server-side org extraction; if the user has
+ * completed OAuth, it returns a response with organizationId populated.
+ * If auth isn't done yet, the PATCH throws — we catch and retry.
+ * Falls back to GET polling as a secondary check.
+ * Throws on timeout.
+ */
+// eslint-disable-next-line no-await-in-loop -- polling requires sequential awaits by design
+export async function pollForAuthentication(connection, environmentId, timeoutMs = POLL_TIMEOUT_MS, intervalMs = POLL_INTERVAL_MS) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        try {
+            // eslint-disable-next-line no-await-in-loop
+            const validated = await validateEnvironment(connection, environmentId);
+            if (validated.organizationId) {
+                return validated;
+            }
+        }
+        catch {
+            // PATCH failed — auth likely not yet complete, continue polling
+        }
+        // eslint-disable-next-line no-await-in-loop
+        await sleep(intervalMs);
+    }
+    throw new Error(`Authentication timed out after ${timeoutMs / 1000} seconds. Re-run the command or authenticate manually.`);
+}
+/**
+ * Full orchestration: create environment -> poll for auth -> validate.
+ * Returns the final result including organizationId.
+ *
+ * The caller is responsible for opening the browser at the returned redirectUrl
+ * and displaying progress to the user. Use `onCreated` to receive the redirect URL
+ * before polling begins.
+ */
+export async function addStageEnvironment(params) {
+    const { connection, pipelineId, stageId, environmentName, orgType, onCreated, pollTimeoutMs, pollIntervalMs } = params;
+    const createData = await createEnvironment(connection, { pipelineId, stageId, environmentName, orgType });
+    if (onCreated) {
+        onCreated({ environmentId: createData.id, redirectUrl: createData.redirectUrl });
+    }
+    const validated = await pollForAuthentication(connection, createData.id, pollTimeoutMs, pollIntervalMs);
+    return {
+        success: true,
+        stageId,
+        environmentId: createData.id,
+        environmentName: createData.name,
+        orgType,
+        pipelineId,
+        redirectUrl: createData.redirectUrl,
+        namedCredential: createData.namedCredential ?? validated.namedCredential,
+        organizationId: validated.organizationId,
+    };
+}
+//# sourceMappingURL=addStageEnvironment.js.map

package/lib/utils/addStageEnvironment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"addStageEnvironment.js","sourceRoot":"","sources":["../../src/utils/addStageEnvironment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,MAAM,gBAAgB,GAA4B;IAChD,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;CACnB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAiD7C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAsB,EACtB,MAA0F;IAE1F,MAAM,IAAI,GAAG,mBAAmB,UAAU,CAAC,aAAa,EAAE,6BAA6B,CAAC;IAExF,OAAO,UAAU,CAAC,OAAO,CAA4B;QACnD,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,IAAI;QACT,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,MAAM,CAAC,eAAe;YAC/B,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC;YACzC,eAAe,EAAE,MAAM,CAAC,OAAO;YAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;QACF,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAsB,EAAE,aAAqB;IAChF,MAAM,IAAI,GAAG,mBAAmB,UAAU,CAAC,aAAa,EAAE,+BAA+B,aAAa,EAAE,CAAC;IACzG,OAAO,UAAU,CAAC,OAAO,CAAyB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAsB,EACtB,aAAqB;IAErB,MAAM,IAAI,GAAG,mBAAmB,UAAU,CAAC,aAAa,EAAE,+BAA+B,aAAa,EAAE,CAAC;IACzG,OAAO,UAAU,CAAC,OAAO,CAA8B;QACrD,MAAM,EAAE,OAAO;QACf,GAAG,EAAE,IAAI;QACT,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAsB,EACtB,aAAqB,EACrB,YAAoB,eAAe,EACnC,aAAqB,gBAAgB;IAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,4CAA4C;YAC5C,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YACvE,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;gBAC7B,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;QACD,4CAA4C;QAC5C,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,IAAI,KAAK,CACb,kCAAkC,SAAS,GAAG,IAAI,wDAAwD,CAC3G,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAIC;IAED,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,GAC3G,MAAM,CAAC;IAET,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC;IAE1G,IAAI,SAAS,EAAE,CAAC;QACd,SAAS,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IAExG,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO;QACP,aAAa,EAAE,UAAU,CAAC,EAAE;QAC5B,eAAe,EAAE,UAAU,CAAC,IAAI;QAChC,OAAO;QACP,UAAU;QACV,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,eAAe,EAAE,UAAU,CAAC,eAAe,IAAI,SAAS,CAAC,eAAe;QACxE,cAAc,EAAE,SAAS,CAAC,cAAc;KACzC,CAAC;AACJ,CAAC"}

package/lib/utils/createPipeline.d.ts

@@ -12,7 +12,8 @@ export type CreatePipelineParams = {
     repoType: string;
     createRepo?: boolean;
     repoOwner?: string;
-    bitbucketProject?: string;
+    bitbucketWorkspace?: string;
+    bitbucketProjectKey?: string;
 };
 export type CreatePipelineResult = {
     success: boolean;
@@ -27,6 +28,18 @@ export type CreatePipelineResult = {
  * Detects repo type from a URL. Returns 'github' or 'bitbucket', or undefined.
  */
 export declare function detectRepoType(repoUrl: string): string | undefined;
+/**
+ * Validates that a GitHub owner (org or user) exists.
+ * Primary: uses `gh api` which handles keyring-based auth automatically.
+ * Fallback: direct GitHub API call with token (for environments without gh CLI).
+ * Skips validation silently when neither mechanism can authenticate, so we
+ * don't block the command when the check itself is unavailable.
+ */
+export declare function validateGitHubOwner(owner: string, token?: string, fetchFn?: typeof fetch): Promise<void>;
+export declare class GitHubOwnerNotFoundError extends Error {
+    readonly owner: string;
+    constructor(owner: string);
+}
 /**
  * Creates a new DevOps Center pipeline via the Connect API.
  * POST /services/data/v{version}/connect/devops/pipelines

package/lib/utils/createPipeline.js

@@ -13,6 +13,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { execSync } from 'node:child_process';
 const DEFAULT_STAGES = [{ name: 'Integration' }, { name: 'UAT' }, { name: 'Staging' }, { name: 'Production' }];
 /**
  * Detects repo type from a URL. Returns 'github' or 'bitbucket', or undefined.
@@ -25,12 +26,55 @@ export function detectRepoType(repoUrl) {
         return 'bitbucket';
     return undefined;
 }
+/**
+ * Validates that a GitHub owner (org or user) exists.
+ * Primary: uses `gh api` which handles keyring-based auth automatically.
+ * Fallback: direct GitHub API call with token (for environments without gh CLI).
+ * Skips validation silently when neither mechanism can authenticate, so we
+ * don't block the command when the check itself is unavailable.
+ */
+export async function validateGitHubOwner(owner, token, fetchFn = fetch) {
+    try {
+        execSync(`gh api users/${encodeURIComponent(owner)}`, {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        return;
+    }
+    catch (e) {
+        const stderr = String(e.stderr ?? '');
+        const stdout = String(e.stdout ?? '');
+        if (stderr.includes('404') || stdout.includes('"Not Found"')) {
+            throw new GitHubOwnerNotFoundError(owner);
+        }
+        // gh not available or not authenticated — fall through to token-based check
+    }
+    if (!token)
+        return;
+    const response = await fetchFn(`https://api.github.com/users/${encodeURIComponent(owner)}`, {
+        headers: {
+            Accept: 'application/vnd.github+json',
+            'X-GitHub-Api-Version': '2022-11-28',
+            Authorization: `Bearer ${token}`,
+        },
+    });
+    if (response.status === 404)
+        throw new GitHubOwnerNotFoundError(owner);
+    // 403 or other non-404: skip validation
+}
+export class GitHubOwnerNotFoundError extends Error {
+    owner;
+    constructor(owner) {
+        super(`GitHub owner "${owner}" does not exist`);
+        this.owner = owner;
+    }
+}
 /**
  * Creates a new DevOps Center pipeline via the Connect API.
  * POST /services/data/v{version}/connect/devops/pipelines
  */
 export async function createPipeline(params) {
-    const { connection, name, description, repo, repoType, createRepo, repoOwner, bitbucketProject } = params;
+    const { connection, name, description, repo, repoType, createRepo, repoOwner, bitbucketWorkspace, bitbucketProjectKey, } = params;
     const path = `/services/data/v${connection.getApiVersion()}/connect/devops/pipelines`;
     const payload = {
         name,
@@ -40,14 +84,16 @@ export async function createPipeline(params) {
     if (createRepo) {
         payload.createVcsRepo = true;
         payload.vcsRepoName = repo;
-        payload.vcsRepoOwner = repoOwner;
-        if (repoType === 'bitbucket' && repoOwner) {
-            const providerInfo = { bitbucketWorkspace: repoOwner };
-            if (bitbucketProject) {
-                providerInfo.bitbucketProject = bitbucketProject;
+        if (repoType === 'bitbucket') {
+            const providerInfo = { bitbucketWorkspace: bitbucketWorkspace };
+            if (bitbucketProjectKey) {
+                providerInfo.bitbucketProjectKey = bitbucketProjectKey;
             }
             payload.repoProviderInfo = JSON.stringify(providerInfo);
         }
+        else {
+            payload.vcsRepoOwner = repoOwner;
+        }
     }
     else {
         payload.vcsRepoUrl = repo;

package/lib/utils/createPipeline.js.map

@@ -1 +1 @@
-{"version":3,"file":"createPipeline.js","sourceRoot":"","sources":["../../src/utils/createPipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAqCH,MAAM,cAAc,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;AAE/G;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,WAAW,CAAC;IACxD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAA4B;IAC/D,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;IAE1G,MAAM,IAAI,GAAG,mBAAmB,UAAU,CAAC,aAAa,EAAE,2BAA2B,CAAC;IAEtF,MAAM,OAAO,GAA4B;QACvC,IAAI;QACJ,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,cAAc;KACvB,CAAC;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;QAC7B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;QAC3B,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;QAEjC,IAAI,QAAQ,KAAK,WAAW,IAAI,SAAS,EAAE,CAAC;YAC1C,MAAM,YAAY,GAA2B,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC;YAC/E,IAAI,gBAAgB,EAAE,CAAC;gBACrB,YAAY,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;YACnD,CAAC;YACD,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAA0B;QAC7D,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,IAAI;QACT,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,IAAI,CAAC,EAAE;QACnB,IAAI;QACJ,WAAW;QACX,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,UAAU;QACjC,UAAU,EAAE;YACV,OAAO,EAAE,IAAI;YACb,QAAQ;YACR,OAAO,EAAE,UAAU,IAAI,KAAK;SAC7B;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"createPipeline.js","sourceRoot":"","sources":["../../src/utils/createPipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAqC9C,MAAM,cAAc,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;AAE/G;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,WAAW,CAAC;IACxD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAa,EAAE,KAAc,EAAE,UAAwB,KAAK;IACpG,IAAI,CAAC;QACH,QAAQ,CAAC,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;YACpD,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAE,CAAyB,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,CAAE,CAAyB,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,4EAA4E;IAC9E,CAAC;IAED,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,gCAAgC,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;QAC1F,OAAO,EAAE;YACP,MAAM,EAAE,6BAA6B;YACrC,sBAAsB,EAAE,YAAY;YACpC,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;KACF,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACvE,wCAAwC;AAC1C,CAAC;AAED,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjC,KAAK,CAAS;IAC9B,YAAmB,KAAa;QAC9B,KAAK,CAAC,iBAAiB,KAAK,kBAAkB,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAA4B;IAC/D,MAAM,EACJ,UAAU,EACV,IAAI,EACJ,WAAW,EACX,IAAI,EACJ,QAAQ,EACR,UAAU,EACV,SAAS,EACT,kBAAkB,EAClB,mBAAmB,GACpB,GAAG,MAAM,CAAC;IAEX,MAAM,IAAI,GAAG,mBAAmB,UAAU,CAAC,aAAa,EAAE,2BAA2B,CAAC;IAEtF,MAAM,OAAO,GAA4B;QACvC,IAAI;QACJ,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,cAAc;KACvB,CAAC;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;QAC7B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;QAE3B,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,YAAY,GAA2B,EAAE,kBAAkB,EAAE,kBAAmB,EAAE,CAAC;YACzF,IAAI,mBAAmB,EAAE,CAAC;gBACxB,YAAY,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;YACzD,CAAC;YACD,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;QACnC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAA0B;QAC7D,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,IAAI;QACT,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,IAAI,CAAC,EAAE;QACnB,IAAI;QACJ,WAAW;QACX,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,UAAU;QACjC,UAAU,EAAE;YACV,OAAO,EAAE,IAAI;YACb,QAAQ;YACR,OAAO,EAAE,UAAU,IAAI,KAAK;SAC7B;KACF,CAAC;AACJ,CAAC"}

package/lib/utils/createProject.js

@@ -21,6 +21,7 @@ export async function createProject(params) {
     const result = await connection.sobject('DevopsProject').create({
         Name: name,
         Description: description || null,
+        IsActive: true,
     });
     if (result.success) {
         return {

package/lib/utils/createProject.js.map

@@ -1 +1 @@
-{"version":3,"file":"createProject.js","sourceRoot":"","sources":["../../src/utils/createProject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAkBH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAA2B;IAC7D,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAEjD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;QAC9D,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,WAAW,IAAI,IAAI;KACjC,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,IAAI;YACJ,WAAW,EAAE,WAAW,IAAI,SAAS;SACtC,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5G,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,aAAa,IAAI,eAAe;KACxC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"createProject.js","sourceRoot":"","sources":["../../src/utils/createProject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAkBH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAA2B;IAC7D,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAEjD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;QAC9D,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,WAAW,IAAI,IAAI;QAChC,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,IAAI;YACJ,WAAW,EAAE,WAAW,IAAI,SAAS;SACtC,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5G,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,aAAa,IAAI,eAAe;KACxC,CAAC;AACJ,CAAC"}

package/lib/utils/createPullRequest.d.ts

@@ -6,32 +6,18 @@ export type WorkItemDetail = {
     branchName?: string;
     targetBranch?: string;
     projectId: string;
-    repoOwner?: string;
-    repoName?: string;
     provider?: string;
 };
-export type CreatePullRequestParams = {
-    owner: string;
-    repo: string;
-    head: string;
-    base: string;
-    title: string;
-    body?: string;
-    provider: string;
-    token: string;
-};
 export type CreatePullRequestResult = {
     success: boolean;
     workItemName?: string;
-    title?: string;
     url?: string;
     sourceBranch?: string;
     targetBranch?: string;
     error?: string;
 };
 /**
- * Queries a work item (by Name or Id) and resolves all info needed
- * to create a pull request: branch, repo, owner, provider, and target branch.
+ * Queries a work item (by Name or Id) and resolves info needed to create a pull request.
  */
 export declare function fetchWorkItemDetail(connection: Connection, filter: {
     name: string;
@@ -39,11 +25,13 @@ export declare function fetchWorkItemDetail(connection: Connection, filter: {
     id: string;
 }): Promise<WorkItemDetail>;
 /**
- * Creates a pull request on GitHub or Bitbucket using their REST APIs.
+ * Creates a pull request via the Salesforce Connect API.
+ * POST /connect/devops/workItems/{workItemId}/review
+ * Salesforce handles VCS authentication and workspace resolution.
  */
-export declare function createPullRequest(params: CreatePullRequestParams): Promise<CreatePullRequestResult>;
+export declare function createPullRequest(connection: Connection, workItemId: string): Promise<CreatePullRequestResult>;
 /**
- * Attempts to resolve a VCS authentication token from the environment
- * or the `gh` CLI (for GitHub).
+ * Attempts to resolve a GitHub authentication token from the environment or the gh CLI.
+ * Used by pipeline create for pre-flight owner validation.
  */
 export declare function resolveGitHubToken(): Promise<string | undefined>;

package/lib/utils/createPullRequest.js

@@ -13,6 +13,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { execSync } from 'node:child_process';
 import { getPipelineIdForProject, fetchPipelineStages, computeFirstStageId, findStageById, getBranchNameFromStage, resolveTargetStageId, } from './pipelineUtils.js';
 function normalizeProvider(provider) {
     if (!provider)
@@ -22,52 +23,14 @@ function normalizeProvider(provider) {
         return 'bitbucket';
     return normalized;
 }
-function providerToVcsType(provider) {
-    const normalized = normalizeProvider(provider);
-    if (normalized === 'github')
-        return 'GITHUB';
-    if (normalized === 'bitbucket')
-        return 'BITBUCKET';
-    return undefined;
-}
-function extractOwnerFromVcsPayload(payload) {
-    if (!payload)
-        return undefined;
-    if (typeof payload === 'string')
-        return payload.trim() || undefined;
-    const obj = payload;
-    if (typeof obj.owner === 'string' && obj.owner.trim())
-        return obj.owner.trim();
-    const list = (obj.owners ?? obj.items ?? obj.records);
-    if (Array.isArray(list)) {
-        for (const candidate of list) {
-            if (typeof candidate === 'string' && candidate.trim())
-                return candidate.trim();
-            if (candidate && typeof candidate === 'object') {
-                const ownerVal = candidate.owner;
-                if (typeof ownerVal === 'string' && ownerVal.trim())
-                    return ownerVal.trim();
-            }
-        }
-    }
-    return undefined;
-}
-async function fetchOwnerByVcsType(connection, vcsType) {
-    const path = `/services/data/v${connection.getApiVersion()}/connect/devops/vcs/${vcsType}`;
-    const response = await connection.request({ method: 'GET', url: path });
-    return extractOwnerFromVcsPayload(response);
-}
 /**
- * Queries a work item (by Name or Id) and resolves all info needed
- * to create a pull request: branch, repo, owner, provider, and target branch.
+ * Queries a work item (by Name or Id) and resolves info needed to create a pull request.
  */
 export async function fetchWorkItemDetail(connection, filter) {
     const whereClause = 'name' in filter ? `Name = '${filter.name}'` : `Id = '${filter.id}'`;
     const identifier = 'name' in filter ? filter.name : filter.id;
     const result = await connection.query(`SELECT Id, Name, Subject, DevopsProjectId, DevopsPipelineStageId,
             SourceCodeRepositoryBranch.Name,
-            SourceCodeRepositoryBranch.SourceCodeRepository.Name,
-            SourceCodeRepositoryBranch.SourceCodeRepository.RepositoryOwner,
             SourceCodeRepositoryBranch.SourceCodeRepository.Provider
      FROM WorkItem
      WHERE ${whereClause}
@@ -77,24 +40,12 @@ export async function fetchWorkItemDetail(connection, filter) {
         throw new Error(`Work item '${identifier}' not found.`);
     }
     const provider = normalizeProvider(record.SourceCodeRepositoryBranch?.SourceCodeRepository?.Provider);
-    let repoOwner = record.SourceCodeRepositoryBranch?.SourceCodeRepository?.RepositoryOwner ?? undefined;
-    const vcsType = providerToVcsType(provider);
-    if (vcsType && !repoOwner) {
-        try {
-            repoOwner = (await fetchOwnerByVcsType(connection, vcsType)) ?? undefined;
-        }
-        catch {
-            // owner lookup is best-effort
-        }
-    }
     const detail = {
         workItemId: record.Id,
         workItemName: record.Name,
         subject: record.Subject ?? '',
         branchName: record.SourceCodeRepositoryBranch?.Name ?? undefined,
         projectId: record.DevopsProjectId,
-        repoOwner,
-        repoName: record.SourceCodeRepositoryBranch?.SourceCodeRepository?.Name ?? undefined,
         provider,
     };
     const pipelineId = await getPipelineIdForProject(connection, record.DevopsProjectId);
@@ -110,95 +61,72 @@ export async function fetchWorkItemDetail(connection, filter) {
     }
     return detail;
 }
-/**
- * Creates a pull request on GitHub or Bitbucket using their REST APIs.
- */
-export async function createPullRequest(params) {
-    const { owner, repo, head, base, title, body, provider, token } = params;
-    if (provider === 'github') {
-        return createGitHubPullRequest({ owner, repo, head, base, title, body, token });
+function extractPrError(response) {
+    const raw = String(response.errorMessage ?? response.error ?? response.message ?? 'Pull request creation failed');
+    // Try to extract inner VCS error from "REVIEW_CREATION_FAILED:Failed to create pull request: ..."
+    const innerMatch = raw.match(/Failed to create pull request:\s*(.+)/s);
+    const inner = innerMatch ? innerMatch[1].trim() : raw;
+    // Try to parse JSON error body from named credential callout responses
+    try {
+        const parsed = JSON.parse(inner);
+        const msg = parsed?.error?.message ?? parsed?.message;
+        if (msg)
+            return String(msg);
     }
-    else if (provider === 'bitbucket') {
-        return createBitbucketPullRequest({ owner, repo, head, base, title, body, token });
+    catch {
+        // not JSON, use as-is
     }
-    throw new Error(`Unsupported VCS provider: ${provider ?? 'unknown'}. Supported providers are GitHub and Bitbucket.`);
-}
-async function createGitHubPullRequest(params) {
-    const { owner, repo, head, base, title, body, token } = params;
-    const url = `https://api.github.com/repos/${owner}/${repo}/pulls`;
-    const response = await fetch(url, {
-        method: 'POST',
-        headers: {
-            Authorization: `Bearer ${token}`,
-            Accept: 'application/vnd.github+json',
-            'Content-Type': 'application/json',
-            'X-GitHub-Api-Version': '2022-11-28',
-        },
-        body: JSON.stringify({ title, body: body ?? '', head, base }),
-    });
-    const data = (await response.json());
-    if (!response.ok) {
-        const errors = Array.isArray(data.errors)
-            ? data.errors.map((e) => e.message ?? JSON.stringify(e)).join('; ')
-            : undefined;
-        const msg = data.message ?? `HTTP ${response.status}`;
-        throw new Error(errors ? `${msg}: ${errors}` : msg);
+    if (inner.includes('no changes')) {
+        return 'The branch has no commits ahead of the target branch. Push your changes and try again.';
     }
-    return {
-        success: true,
-        title: data.title,
-        url: data.html_url,
-        sourceBranch: head,
-        targetBranch: base,
-    };
+    return inner;
 }
-async function createBitbucketPullRequest(params) {
-    const { owner, repo, head, base, title, body, token } = params;
-    const url = `https://api.bitbucket.org/2.0/repositories/${owner}/${repo}/pullrequests`;
-    const response = await fetch(url, {
-        method: 'POST',
-        headers: {
-            Authorization: `Bearer ${token}`,
-            'Content-Type': 'application/json',
-        },
-        body: JSON.stringify({
-            title,
-            description: body ?? '',
-            source: { branch: { name: head } },
-            destination: { branch: { name: base } },
-        }),
-    });
-    const data = (await response.json());
-    if (!response.ok) {
-        const errorMsg = data.error?.message ?? data.message ?? `HTTP ${response.status}`;
-        throw new Error(String(errorMsg));
+/**
+ * Creates a pull request via the Salesforce Connect API.
+ * POST /connect/devops/workItems/{workItemId}/review
+ * Salesforce handles VCS authentication and workspace resolution.
+ */
+export async function createPullRequest(connection, workItemId) {
+    const path = `/services/data/v${connection.getApiVersion()}/connect/devops/workItems/${workItemId}/review`;
+    let response;
+    try {
+        response = await connection.request({
+            method: 'POST',
+            url: path,
+            body: JSON.stringify({}),
+            headers: { 'Content-Type': 'application/json' },
+        });
+    }
+    catch (e) {
+        const raw = e instanceof Error ? e.message : String(e);
+        throw new Error(extractPrError({ errorMessage: raw }));
+    }
+    const isError = response.status === 'Error' || response.success === false || !!response.errorMessage;
+    if (isError) {
+        throw new Error(extractPrError(response));
     }
-    const links = data.links;
     return {
         success: true,
-        title: data.title,
-        url: links?.html?.href ?? data.url ?? '',
-        sourceBranch: head,
-        targetBranch: base,
+        url: response.reviewUrl,
     };
 }
 /**
- * Attempts to resolve a VCS authentication token from the environment
- * or the `gh` CLI (for GitHub).
+ * Attempts to resolve a GitHub authentication token from the environment or the gh CLI.
+ * Used by pipeline create for pre-flight owner validation.
  */
-export async function resolveGitHubToken() {
+export function resolveGitHubToken() {
     const envToken = process.env.GITHUB_TOKEN ?? process.env.GH_TOKEN;
     if (envToken)
-        return envToken;
+        return Promise.resolve(envToken);
     try {
-        const { execSync } = await import('node:child_process');
+        // execSync with a fixed string — no user input, no injection risk
         const token = execSync('gh auth token', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
         if (token)
-            return token;
+            return Promise.resolve(token);
     }
     catch {
         // gh CLI not installed or not authenticated
     }
-    return undefined;
+    return Promise.resolve(undefined);
 }
 //# sourceMappingURL=createPullRequest.js.map