@sente-labs/cli 0.10.0 → 0.13.0

package/dist/commands/secret.js

@@ -1,245 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerSecretCommands = registerSecretCommands;
-const readline = __importStar(require("readline"));
-const client_1 = require("../client");
-const output_1 = require("../output");
-/**
- * Read a secret value securely from the user. Two paths:
- *   - TTY interactive: prompt with input masking (no echo). User pastes value.
- *   - Non-TTY / --value-stdin: read entire stdin until EOF, strip trailing newline.
- *
- * We intentionally do NOT accept a `--value <plain>` flag because it leaks the
- * value to shell history. `--value-stdin` is the only programmatic path.
- */
-async function readSecretValue(useStdin) {
-    if (useStdin || !process.stdin.isTTY) {
-        return readAllStdin();
-    }
-    return promptHidden('Secret value (input hidden): ');
-}
-function readAllStdin() {
-    return new Promise((resolve, reject) => {
-        let data = '';
-        process.stdin.setEncoding('utf8');
-        process.stdin.on('data', (chunk) => (data += chunk));
-        process.stdin.on('end', () => resolve(data.replace(/\n+$/, '')));
-        process.stdin.on('error', reject);
-    });
-}
-/**
- * readline-based hidden prompt. Echoes nothing while the user types so the
- * secret never appears on-screen or in scrollback. Falls back to plain prompt
- * if stdin isn't a TTY (shouldn't happen since the caller already gates this).
- */
-function promptHidden(question) {
-    return new Promise((resolve) => {
-        const rl = readline.createInterface({
-            input: process.stdin,
-            output: process.stdout,
-            terminal: true,
-        });
-        // Mute the output stream during input so keystrokes don't echo.
-        const stdoutWrite = process.stdout.write.bind(process.stdout);
-        let muted = false;
-        rl._writeToOutput = (str) => {
-            if (muted) {
-                // After we mute, only let the newline at the end pass.
-                if (str.includes('\n'))
-                    stdoutWrite('\n');
-                return;
-            }
-            stdoutWrite(str);
-        };
-        rl.question(question, (answer) => {
-            rl.close();
-            resolve(answer);
-        });
-        muted = true;
-    });
-}
-function promptText(question, fallback) {
-    return new Promise((resolve) => {
-        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-        const suffix = fallback ? ` [${fallback}]` : '';
-        rl.question(`${question}${suffix}: `, (answer) => {
-            rl.close();
-            resolve(answer.trim() || fallback || '');
-        });
-    });
-}
-function registerSecretCommands(program, globalOpts) {
-    const secret = program.command('secret').description('Secret commands');
-    secret
-        .command('create')
-        .description('Create a new secret in the current organization')
-        .requiredOption('--name <key>', 'secret key (referenced in steps as {{secret.name}})')
-        .option('--description <text>', 'human-readable description')
-        .option('--target-url <url>', 'restrict secret to matching URLs')
-        .option('--project <id>', 'link the new secret to this project (repeatable)', collect, [])
-        .option('--value-stdin', 'read the secret value from stdin (use for piping)')
-        .action(async (cmdOpts) => {
-        const opts = globalOpts();
-        try {
-            const value = await readSecretValue(!!cmdOpts.valueStdin);
-            if (!value) {
-                throw new Error('Secret value is required.');
-            }
-            // Description is required by the gateway. Prompt for one if missing.
-            let description = cmdOpts.description;
-            if (!description) {
-                if (process.stdin.isTTY && !cmdOpts.valueStdin && !(0, output_1.isJson)(opts)) {
-                    description = await promptText('Description (visible to the agent)');
-                }
-                if (!description) {
-                    // Use the key as a fallback so the create still works in
-                    // non-interactive contexts without a separate flag.
-                    description = cmdOpts.name;
-                }
-            }
-            const client = new client_1.GatewayClient();
-            const res = await client.request('/api/secrets', {
-                method: 'POST',
-                body: {
-                    key: cmdOpts.name,
-                    description,
-                    type: 'simple',
-                    value,
-                    targetUrl: cmdOpts.targetUrl,
-                    projectIds: cmdOpts.project.length > 0 ? cmdOpts.project : undefined,
-                },
-            });
-            (0, output_1.printSuccess)({ secret: redact(res.secret) }, () => {
-                const s = res.secret;
-                process.stdout.write(`Created secret: ${s.key} (${s.id})\n`);
-                if (s.targetUrl)
-                    process.stdout.write(`Target URL: ${s.targetUrl}\n`);
-                if (cmdOpts.project.length > 0) {
-                    process.stdout.write(`Linked to ${cmdOpts.project.length} project(s).\n`);
-                }
-                process.stdout.write(`Reference in steps as: {{secret.${s.key}}}\n`);
-            }, opts);
-        }
-        catch (err) {
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-    secret
-        .command('list')
-        .description('List secrets visible to the current user')
-        .action(async () => {
-        const opts = globalOpts();
-        try {
-            const client = new client_1.GatewayClient();
-            const res = await client.request('/api/secrets');
-            (0, output_1.printSuccess)({ secrets: res.secrets.map(redact) }, () => {
-                if (res.secrets.length === 0) {
-                    process.stdout.write('No secrets found.\n');
-                    return;
-                }
-                for (const s of res.secrets) {
-                    const projects = s.linkedProjects?.length
-                        ? ` -> ${s.linkedProjects.map((p) => p.name).join(', ')}`
-                        : '';
-                    process.stdout.write(`${s.id}  ${s.key.padEnd(28)}  ${s.type}${projects}\n`);
-                }
-            }, opts);
-        }
-        catch (err) {
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-    secret
-        .command('link')
-        .description('Link a secret to a project')
-        .argument('<secretId>', 'secret id')
-        .argument('<projectId>', 'project id')
-        .action(async (secretId, projectId) => {
-        const opts = globalOpts();
-        try {
-            const client = new client_1.GatewayClient();
-            await client.request(`/api/secrets/${secretId}/link/${projectId}`, { method: 'POST' });
-            (0, output_1.printSuccess)({ ok: true, secretId, projectId }, `Linked secret ${secretId} to project ${projectId}`, opts);
-        }
-        catch (err) {
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-    secret
-        .command('unlink')
-        .description('Unlink a secret from a project')
-        .argument('<secretId>', 'secret id')
-        .argument('<projectId>', 'project id')
-        .action(async (secretId, projectId) => {
-        const opts = globalOpts();
-        try {
-            const client = new client_1.GatewayClient();
-            await client.request(`/api/secrets/${secretId}/link/${projectId}`, { method: 'DELETE' });
-            (0, output_1.printSuccess)({ ok: true, secretId, projectId }, `Unlinked secret ${secretId} from project ${projectId}`, opts);
-        }
-        catch (err) {
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-    secret
-        .command('delete')
-        .description('Delete a secret (removes it from all linked projects)')
-        .argument('<secretId>', 'secret id')
-        .action(async (secretId) => {
-        const opts = globalOpts();
-        try {
-            const client = new client_1.GatewayClient();
-            await client.request(`/api/secrets/${secretId}`, { method: 'DELETE' });
-            (0, output_1.printSuccess)({ ok: true, secretId }, `Deleted secret ${secretId}`, opts);
-        }
-        catch (err) {
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-}
-/**
- * Strip anything that could contain the raw value from server responses before
- * we print or return them. The gateway never sends values (only metadata), but
- * defending in depth costs nothing.
- */
-function redact(s) {
-    const { ...safe } = s;
-    return safe;
-}
-function collect(value, previous) {
-    return previous.concat([value]);
-}
-//# sourceMappingURL=secret.js.map

package/dist/commands/secret.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secret.js","sourceRoot":"","sources":["../../src/commands/secret.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8FA,wDAsJC;AApPD,mDAAqC;AAErC,sCAA0C;AAC1C,sCAAyE;AAwBzE;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAAC,QAAiB;IAC9C,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrC,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,YAAY,CAAC,+BAA+B,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,gEAAgE;QAChE,MAAM,WAAW,GAAI,OAAO,CAAC,MAAM,CAAC,KAAa,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,KAAK,GAAG,KAAK,CAAC;QACjB,EAAU,CAAC,cAAc,GAAG,CAAC,GAAW,EAAE,EAAE;YAC3C,IAAI,KAAK,EAAE,CAAC;gBACV,uDAAuD;gBACvD,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,WAAW,CAAC,IAAI,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC,CAAC;QACF,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,GAAG,IAAI,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,QAAiB;IACrD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,sBAAsB,CAAC,OAAgB,EAAE,UAA4B;IACnF,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAExE,MAAM;SACH,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,iDAAiD,CAAC;SAC9D,cAAc,CAAC,cAAc,EAAE,qDAAqD,CAAC;SACrF,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;SAC5D,MAAM,CAAC,oBAAoB,EAAE,kCAAkC,CAAC;SAChE,MAAM,CAAC,gBAAgB,EAAE,kDAAkD,EAAE,OAAO,EAAE,EAAc,CAAC;SACrG,MAAM,CAAC,eAAe,EAAE,mDAAmD,CAAC;SAC5E,MAAM,CAAC,KAAK,EAAE,OAMd,EAAE,EAAE;QACH,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YACD,qEAAqE;YACrE,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YACtC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,IAAA,eAAM,EAAC,IAAI,CAAC,EAAE,CAAC;oBAChE,WAAW,GAAG,MAAM,UAAU,CAAC,oCAAoC,CAAC,CAAC;gBACvE,CAAC;gBACD,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,yDAAyD;oBACzD,oDAAoD;oBACpD,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,sBAAa,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAiB,cAAc,EAAE;gBAC/D,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE;oBACJ,GAAG,EAAE,OAAO,CAAC,IAAI;oBACjB,WAAW;oBACX,IAAI,EAAE,QAAQ;oBACd,KAAK;oBACL,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;iBACrE;aACF,CAAC,CAAC;YACH,IAAA,qBAAY,EACV,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAC9B,GAAG,EAAE;gBACH,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;gBACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC7D,IAAI,CAAC,CAAC,SAAS;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;gBACtE,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;YACvE,CAAC,EACD,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0CAA0C,CAAC;SACvD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,sBAAa,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAe,cAAc,CAAC,CAAC;YAC/D,IAAA,qBAAY,EACV,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EACpC,GAAG,EAAE;gBACH,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM;wBACvC,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBACzD,CAAC,CAAC,EAAE,CAAC;oBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,QAAQ,IAAI,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC,EACD,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,4BAA4B,CAAC;SACzC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;SACnC,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;SACrC,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,SAAiB,EAAE,EAAE;QACpD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,sBAAa,EAAE,CAAC;YACnC,MAAM,MAAM,CAAC,OAAO,CAAC,gBAAgB,QAAQ,SAAS,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACvF,IAAA,qBAAY,EACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EACjC,iBAAiB,QAAQ,eAAe,SAAS,EAAE,EACnD,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,gCAAgC,CAAC;SAC7C,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;SACnC,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;SACrC,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,SAAiB,EAAE,EAAE;QACpD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,sBAAa,EAAE,CAAC;YACnC,MAAM,MAAM,CAAC,OAAO,CAAC,gBAAgB,QAAQ,SAAS,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzF,IAAA,qBAAY,EACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EACjC,mBAAmB,QAAQ,iBAAiB,SAAS,EAAE,EACvD,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uDAAuD,CAAC;SACpE,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;SACnC,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,sBAAa,EAAE,CAAC;YACnC,MAAM,MAAM,CAAC,OAAO,CAAC,gBAAgB,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvE,IAAA,qBAAY,EAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,kBAAkB,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,CAAgB;IAC9B,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,QAAkB;IAChD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAClC,CAAC"}

package/dist/commands/task.js

@@ -1,425 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerTaskCommands = registerTaskCommands;
-const fs = __importStar(require("fs"));
-const client_1 = require("../client");
-const output_1 = require("../output");
-/**
- * Translate raw gateway shape into the CLI-stable results envelope
- * documented in plans/sente-cc-skill.md. Insulates CC from DB drift.
- */
-function buildResultsPayload(task, opts) {
-    const steps = (task.steps ?? []).map((s) => {
-        const result = (s.result || {});
-        return {
-            index: s.stepOrder,
-            action: s.action,
-            assertion: s.assertion ?? '',
-            status: s.status,
-            actual: result.actual ?? null,
-            reasoning: result.reasoning ?? null,
-            failureCategory: result.failureCategory ?? null,
-            suggestedFix: result.suggestedFix ?? null,
-            adapted: result.adapted ?? false,
-            adaptationNote: result.adaptationNote ?? null,
-            screenshot: s.screenshot ?? null,
-        };
-    });
-    const failedStep = steps.find((s) => s.status === 'failed');
-    const overallStatus = task.status;
-    const base = {
-        taskId: task.id,
-        taskName: task.name,
-        status: overallStatus,
-        reportUrl: task.shortId ? `https://app.sente.run/report/${task.shortId}` : null,
-    };
-    if (opts.failedOnly) {
-        return { ...base, failedStep: failedStep ?? null };
-    }
-    return { ...base, steps };
-}
-function registerTaskCommands(program, globalOpts) {
-    const task = program.command('task').description('Task commands');
-    task
-        .command('list')
-        .description('List tasks in the current organization (optionally scoped to a project)')
-        .option('--project <projectId>', 'Filter by project id')
-        .action(async (cmdOpts) => {
-        const opts = globalOpts();
-        try {
-            const client = new client_1.GatewayClient();
-            const res = await client.request('/api/tasks/list', {
-                query: { projectId: cmdOpts.project },
-            });
-            (0, output_1.printSuccess)({ tasks: res.tasks }, () => {
-                if (res.tasks.length === 0) {
-                    process.stdout.write('No tasks found.\n');
-                    return;
-                }
-                for (const t of res.tasks) {
-                    process.stdout.write(`${t.id}  ${t.status.padEnd(12)}  ${t.workflow.project.name} / ${t.workflow.name} / ${t.name}\n`);
-                }
-            }, opts);
-        }
-        catch (err) {
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-    task
-        .command('show')
-        .description('Show a task by id (or shortId)')
-        .argument('<taskId>', 'task id or short id')
-        .action(async (taskId) => {
-        const opts = globalOpts();
-        try {
-            const client = new client_1.GatewayClient();
-            const res = await client.request(`/api/tasks/${taskId}`);
-            (0, output_1.printSuccess)({ task: res.task }, () => {
-                const t = res.task;
-                process.stdout.write(`${t.name} (${t.id})\n`);
-                process.stdout.write(`Status: ${t.status}\n`);
-                if (t.description)
-                    process.stdout.write(`Description: ${t.description}\n`);
-                if (t.instruction)
-                    process.stdout.write(`Instruction:\n  ${t.instruction}\n`);
-                if (t.qaInstruction)
-                    process.stdout.write(`QA Instruction:\n  ${t.qaInstruction}\n`);
-                if (t.steps && t.steps.length > 0) {
-                    process.stdout.write(`\nSteps:\n`);
-                    for (const s of t.steps) {
-                        process.stdout.write(`  ${s.stepOrder}. [${s.status}] ${s.action}\n` +
-                            (s.assertion ? `      assert: ${s.assertion}\n` : ''));
-                    }
-                }
-            }, opts);
-        }
-        catch (err) {
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-    task
-        .command('create')
-        .description('Create a new QA task with steps')
-        .requiredOption('--workflow <id>', 'workflow id this task belongs to')
-        .requiredOption('--name <name>', 'task name')
-        .option('--instruction <text>', 'top-level task instruction (preserves UI mechanism)')
-        .option('--description <text>', 'optional description')
-        .option('--type <type>', 'task type (qa)', 'qa')
-        .option('--steps-from <file>', 'JSON file containing the step array')
-        .action(async (cmdOpts) => {
-        const opts = globalOpts();
-        try {
-            const steps = cmdOpts.stepsFrom ? readStepsFile(cmdOpts.stepsFrom) : undefined;
-            const body = {
-                name: cmdOpts.name,
-                description: cmdOpts.description,
-                qaInstruction: cmdOpts.instruction,
-                steps,
-            };
-            const client = new client_1.GatewayClient();
-            const res = await client.request(`/api/workflows/${cmdOpts.workflow}/tasks`, { method: 'POST', body });
-            const taskId = res.task?.id;
-            const warnings = res.warnings ?? [];
-            (0, output_1.printSuccess)({ task: res.task, warnings }, () => {
-                process.stdout.write(`Created task: ${res.task.name} (${taskId})\n`);
-                renderWarnings(warnings);
-            }, opts);
-        }
-        catch (err) {
-            renderValidationErrors(err, opts);
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-    task
-        .command('update')
-        .description('Update an existing task')
-        .argument('<taskId>', 'task id')
-        .option('--name <name>', 'new name')
-        .option('--instruction <text>', 'new instruction')
-        .option('--description <text>', 'new description')
-        .option('--steps-from <file>', 'replace steps with the JSON file contents')
-        // Mark this task as a critical flow that fires on a deploy webhook. `--no-on-deploy` unsets it.
-        // Commander folds `--on-deploy` / `--no-on-deploy` into a single `onDeploy` boolean; it stays
-        // undefined when neither is passed, so existing callers are unaffected.
-        .option('--on-deploy', 'run this task automatically on a deploy webhook (critical flow)')
-        .option('--no-on-deploy', 'stop running this task on a deploy webhook')
-        .action(async (taskId, cmdOpts) => {
-        const opts = globalOpts();
-        try {
-            const body = {};
-            if (cmdOpts.name)
-                body.name = cmdOpts.name;
-            if (cmdOpts.instruction)
-                body.qaInstruction = cmdOpts.instruction;
-            if (cmdOpts.description !== undefined)
-                body.description = cmdOpts.description;
-            if (cmdOpts.stepsFrom)
-                body.steps = readStepsFile(cmdOpts.stepsFrom);
-            if (cmdOpts.onDeploy !== undefined)
-                body.runOnDeploy = cmdOpts.onDeploy;
-            if (Object.keys(body).length === 0) {
-                throw new Error('No fields to update. Pass --name, --instruction, --description, --steps-from, or --on-deploy.');
-            }
-            const client = new client_1.GatewayClient();
-            const res = await client.request(`/api/tasks/${taskId}`, { method: 'PUT', body });
-            (0, output_1.printSuccess)({ task: res.task, warnings: res.warnings ?? [] }, () => {
-                process.stdout.write(`Updated task: ${res.task.name} (${res.task.id})\n`);
-                renderWarnings(res.warnings ?? []);
-            }, opts);
-        }
-        catch (err) {
-            renderValidationErrors(err, opts);
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-    task
-        .command('delete')
-        .description('Delete a task')
-        .argument('<taskId>', 'task id')
-        .action(async (taskId) => {
-        const opts = globalOpts();
-        try {
-            const client = new client_1.GatewayClient();
-            await client.request(`/api/tasks/${taskId}`, { method: 'DELETE' });
-            (0, output_1.printSuccess)({ ok: true, taskId }, `Deleted task ${taskId}`, opts);
-        }
-        catch (err) {
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-    task
-        .command('run')
-        .description('Queue a task run against the configured staging URL')
-        .argument('<taskId>', 'task id')
-        .action(async (taskId) => {
-        const opts = globalOpts();
-        try {
-            // Surface the staging-deploy caveat before firing. Skipped in --json mode
-            // so machine consumers (CC) don't choke on free-form text.
-            if (!(0, output_1.isJson)(opts)) {
-                process.stderr.write('Note: this runs against the current staging URL. Ensure the deploy you want to test has landed.\n');
-            }
-            const client = new client_1.GatewayClient();
-            const res = await client.request(`/api/tasks/${taskId}/run`, {
-                method: 'POST',
-                body: {},
-            });
-            (0, output_1.printSuccess)(res, () => {
-                const status = res.session?.status ?? res.status ?? 'queued';
-                process.stdout.write(`Queued task ${taskId}: status=${status}\n`);
-                if (res.session?.id)
-                    process.stdout.write(`Session: ${res.session.id}\n`);
-            }, opts);
-        }
-        catch (err) {
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-    task
-        .command('results')
-        .description('Show step-by-step results for a task')
-        .argument('<taskId>', 'task id or short id')
-        .option('--latest', 'Latest run summary (default)')
-        .option('--failed-step', 'Return only the failed step + minimal context')
-        .action(async (taskId, cmdOpts) => {
-        const opts = globalOpts();
-        try {
-            const client = new client_1.GatewayClient();
-            const res = await client.request(`/api/tasks/${taskId}`);
-            const payload = buildResultsPayload(res.task, { failedOnly: !!cmdOpts.failedStep });
-            (0, output_1.printSuccess)(payload, () => {
-                const p = payload;
-                process.stdout.write(`Task:     ${p.taskName} (${p.taskId})\n`);
-                process.stdout.write(`Status:   ${p.status}\n`);
-                if (p.reportUrl)
-                    process.stdout.write(`Report:   ${p.reportUrl}\n`);
-                if (p.failedStep !== undefined) {
-                    if (p.failedStep) {
-                        process.stdout.write(`\nFailed step ${p.failedStep.index}:\n`);
-                        process.stdout.write(`  Action:    ${p.failedStep.action}\n`);
-                        process.stdout.write(`  Assertion: ${p.failedStep.assertion}\n`);
-                        if (p.failedStep.actual)
-                            process.stdout.write(`  Actual:    ${p.failedStep.actual}\n`);
-                        if (p.failedStep.reasoning)
-                            process.stdout.write(`  Reasoning: ${p.failedStep.reasoning}\n`);
-                        if (p.failedStep.failureCategory)
-                            process.stdout.write(`  Category:  ${p.failedStep.failureCategory}\n`);
-                        if (p.failedStep.suggestedFix)
-                            process.stdout.write(`  Suggested fix: ${p.failedStep.suggestedFix}\n`);
-                    }
-                    else {
-                        process.stdout.write('\nNo failed step.\n');
-                    }
-                }
-                else {
-                    for (const s of p.steps) {
-                        process.stdout.write(`  ${s.index}. [${s.status.padEnd(7)}] ${s.action}` +
-                            (s.failureCategory ? `  (${s.failureCategory})` : '') +
-                            '\n');
-                    }
-                }
-            }, opts);
-        }
-        catch (err) {
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-    task
-        .command('push-recording')
-        .description("Upload a hardened recording (selectors + assertions) for a task's steps")
-        .argument('<taskId>', 'task id or short id')
-        .requiredOption('--from <file>', 'JSON file: array of { stepOrder, recording } objects')
-        .option('--source <source>', 'recording source: skill | interactive | heal', 'skill')
-        .action(async (taskId, cmdOpts) => {
-        const opts = globalOpts();
-        try {
-            const steps = readRecordingFile(cmdOpts.from);
-            const client = new client_1.GatewayClient();
-            const res = await client.request(`/api/tasks/${taskId}/recording`, { method: 'PUT', body: { steps, source: cmdOpts.source } });
-            (0, output_1.printSuccess)({ updated: res.updated }, () => {
-                process.stdout.write(`Pushed recording for ${res.updated} step(s) of task ${taskId}.\n`);
-                process.stdout.write('It stays unverified until it passes verification before scheduling.\n');
-            }, opts);
-        }
-        catch (err) {
-            process.exit((0, output_1.printError)(err, opts));
-        }
-    });
-}
-/**
- * Read a JSON array of `{ stepOrder, recording }` from disk. The `recording`
- * payload is the hardened replay recipe (selectors, assertion predicate, wait,
- * stability grade) and is passed through to the gateway as-is.
- */
-function readRecordingFile(path) {
-    let raw;
-    try {
-        raw = fs.readFileSync(path, 'utf8');
-    }
-    catch (e) {
-        throw new Error(`Cannot read recording file ${path}: ${e.message}`);
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch (e) {
-        throw new Error(`Recording file ${path} is not valid JSON: ${e.message}`);
-    }
-    if (!Array.isArray(parsed)) {
-        throw new Error(`Recording file ${path} must be a JSON array of { stepOrder, recording } objects.`);
-    }
-    return parsed.map((s, i) => {
-        if (typeof s?.stepOrder !== 'number') {
-            throw new Error(`Entry ${i + 1} in ${path} is missing a numeric "stepOrder" field.`);
-        }
-        if (s.recording == null || typeof s.recording !== 'object') {
-            throw new Error(`Entry ${i + 1} in ${path} is missing an object "recording" field.`);
-        }
-        return { stepOrder: s.stepOrder, recording: s.recording };
-    });
-}
-/**
- * Read a JSON array of `{action, assertion}` from disk. Throws a clear error
- * if the file is missing, malformed, or has the wrong shape.
- */
-function readStepsFile(path) {
-    let raw;
-    try {
-        raw = fs.readFileSync(path, 'utf8');
-    }
-    catch (e) {
-        throw new Error(`Cannot read steps file ${path}: ${e.message}`);
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch (e) {
-        throw new Error(`Steps file ${path} is not valid JSON: ${e.message}`);
-    }
-    if (!Array.isArray(parsed)) {
-        throw new Error(`Steps file ${path} must be a JSON array of {action, assertion} objects.`);
-    }
-    return parsed.map((s, i) => {
-        if (typeof s?.action !== 'string') {
-            throw new Error(`Step ${i + 1} in ${path} is missing a string "action" field.`);
-        }
-        return {
-            action: s.action,
-            assertion: typeof s.assertion === 'string' ? s.assertion : undefined,
-        };
-    });
-}
-/**
- * Pretty-print validator warnings in human mode. No-op in --json mode --
- * warnings are already in the JSON payload.
- */
-function renderWarnings(warnings) {
-    if (!warnings || warnings.length === 0)
-        return;
-    process.stderr.write(`\n${warnings.length} warning(s):\n`);
-    for (const w of warnings) {
-        process.stderr.write(`  - [${w.code}] ${w.message}\n`);
-    }
-}
-/**
- * When the gateway returns 400 STEP_VALIDATION_FAILED, ApiError.body carries the
- * structured errors + warnings. Surface them clearly before the generic error
- * message so the user sees what to fix.
- */
-function renderValidationErrors(err, opts) {
-    if ((0, output_1.isJson)(opts))
-        return;
-    if (!(err instanceof client_1.ApiError))
-        return;
-    const body = err.body;
-    if (!body || err.code !== 'STEP_VALIDATION_FAILED')
-        return;
-    if (Array.isArray(body.errors)) {
-        process.stderr.write(`Validation errors (${body.errors.length}):\n`);
-        for (const e of body.errors) {
-            process.stderr.write(`  - [${e.code}] ${e.message}\n`);
-        }
-    }
-    if (Array.isArray(body.warnings) && body.warnings.length > 0) {
-        process.stderr.write(`\nWarnings (${body.warnings.length}):\n`);
-        for (const w of body.warnings) {
-            process.stderr.write(`  - [${w.code}] ${w.message}\n`);
-        }
-    }
-}
-//# sourceMappingURL=task.js.map