@sitecoreai-labs/sitecoreai-cli 0.0.4 → 0.1.0

package/dist/recipe/schema/source-fields.d.ts

@@ -45,4 +45,3 @@ export declare const renderSourceFields: (fields: SourceFields, resolveHandle: (
  * `ref-source-fields`.
  */
 export declare const sourceFieldsNeedHandleResolution: (fields: SourceFields) => boolean;
-//# sourceMappingURL=source-fields.d.ts.map

package/dist/recipe/tasks/compile.d.ts

@@ -1,6 +1,6 @@
 import { type RecipeCompileOptions } from "./shared";
 /**
- * `scai recipe compile` — pure-logic: recipe (.ts or .json) → Operation IR JSON.
+ * `scai provision recipe compile` — pure-logic: recipe (.ts or .json) → Operation IR JSON.
  *
  * Resolves inputs from `--input` (single file) or the config `recipes`
  * glob (zero-to-many files). Writes one IR per recipe at
@@ -11,4 +11,3 @@ import { type RecipeCompileOptions } from "./shared";
  * lands in a different tenant tree.
  */
 export declare const runRecipeCompile: (options: RecipeCompileOptions) => Promise<void>;
-//# sourceMappingURL=compile.d.ts.map

package/dist/recipe/tasks/compile.js

@@ -5,13 +5,13 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runRecipeCompile = void 0;
 const node_path_1 = __importDefault(require("node:path"));
-const config_1 = require("../../config");
+const root_config_1 = require("../../config/root-config");
 const errors_1 = require("../../shared/errors");
 const compile_1 = require("../compile");
 const io_1 = require("../io");
 const shared_1 = require("./shared");
 /**
- * `scai recipe compile` — pure-logic: recipe (.ts or .json) → Operation IR JSON.
+ * `scai provision recipe compile` — pure-logic: recipe (.ts or .json) → Operation IR JSON.
  *
  * Resolves inputs from `--input` (single file) or the config `recipes`
  * glob (zero-to-many files). Writes one IR per recipe at
@@ -23,7 +23,7 @@ const shared_1 = require("./shared");
  */
 const runRecipeCompile = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
-    const root = (0, config_1.readRootConfiguration)(options.config ?? process.cwd(), options.environmentName);
+    const root = (0, root_config_1.readRootConfiguration)(options.config ?? process.cwd(), options.environmentName);
     // Resolve parent paths from CLI flags or active env profile (when given).
     const envName = options.environmentName ?? root.defaultEnvironment;
     const environment = envName ? root.environments[envName] : undefined;
@@ -44,9 +44,16 @@ const runRecipeCompile = async (options) => {
     const headlessVariantsRoot = options.headlessVariantsRoot ?? environment?.headlessVariantsRoot;
     const availableRenderingsRoot = options.availableRenderingsRoot ?? environment?.availableRenderingsRoot;
     const enumerationsRoot = options.enumerationsRoot ?? environment?.enumerationsRoot;
+    // Page-level roots. `pageTemplatesRoot` falls back to `templatesRoot`
+    // inside the compiler; `placeholderSettingsRoot` has no fallback —
+    // `buildPlaceholderSettingsAggregate` errors when a set declares
+    // placeholders but the root is unset.
+    const pageTemplatesRoot = environment?.pageTemplatesRoot;
+    const placeholderSettingsRoot = environment?.placeholderSettingsRoot;
+    const pagesRoot = environment?.pagesRoot;
     const { files, source } = await (0, shared_1.resolveRecipeInputs)(options, root);
     if (options.output && files.length > 1) {
-        throw (0, errors_1.createCliError)("--output cannot be combined with multi-file compile.", "INPUT_INVALID", {
+        throw (0, errors_1.createScaiError)("--output cannot be combined with multi-file compile.", "INPUT_INVALID", {
             hint: "Compile a single recipe with --input <file> --output <ir>, or omit --output to write per-recipe IRs to <dir>/<handle>.ir.json.",
         });
     }
@@ -64,6 +71,9 @@ const runRecipeCompile = async (options) => {
             headlessVariantsRoot,
             availableRenderingsRoot,
             enumerationsRoot,
+            pageTemplatesRoot,
+            placeholderSettingsRoot,
+            pagesRoot,
         });
         const outputPath = options.output ?? (0, io_1.defaultIrPath)(recipe.handle, node_path_1.default.dirname(node_path_1.default.resolve(file)));
         await (0, io_1.writeIr)(outputPath, ir);

package/dist/recipe/tasks/diff.d.ts

@@ -1,7 +1,7 @@
 import type { ExecutionResult } from "../execute";
 import type { RecipePushOptions } from "./shared";
 /**
- * `scai recipe diff` — read-only "what would change" against a tenant.
+ * `scai provision recipe diff` — read-only "what would change" against a tenant.
  *
  * Drives the same input resolution, in-memory compile, and planner
  * as `recipe push`, but read-only by construction: `whatIf` is forced
@@ -14,4 +14,3 @@ import type { RecipePushOptions } from "./shared";
  */
 export type RecipeDiffOptions = Omit<RecipePushOptions, "whatIf" | "allowWrite">;
 export declare const runRecipeDiff: (options: RecipeDiffOptions) => Promise<ExecutionResult[]>;
-//# sourceMappingURL=diff.d.ts.map

package/dist/recipe/tasks/placeholder-allow.d.ts

@@ -50,4 +50,3 @@ export interface PlaceholderAllowOptions {
  *     other matches still apply.
  */
 export declare const applyPlaceholderAllowControls: (options: PlaceholderAllowOptions) => Promise<PlaceholderAllowResult>;
-//# sourceMappingURL=placeholder-allow.d.ts.map

package/dist/recipe/tasks/placeholder-allow.js

@@ -55,8 +55,7 @@ const collectPlaceholders = async (client, roots) => {
         if (!item)
             return;
         if (isPlaceholder(item)) {
-            const keyField = item.fields.find((f) => normaliseGuid(f.fieldId) ===
-                normaliseGuid(sitecore_templates_1.PLACEHOLDER_FIELDS.PLACEHOLDER_KEY));
+            const keyField = item.fields.find((f) => normaliseGuid(f.fieldId) === normaliseGuid(sitecore_templates_1.PLACEHOLDER_FIELDS.PLACEHOLDER_KEY));
             const placeholderKey = keyField?.value?.trim();
             if (placeholderKey) {
                 found.push({ item, placeholderKey });
@@ -76,8 +75,7 @@ const collectPlaceholders = async (client, roots) => {
     return found;
 };
 const findAllowedControlsValue = (item) => {
-    const field = item.fields.find((f) => normaliseGuid(f.fieldId) ===
-        normaliseGuid(sitecore_templates_1.PLACEHOLDER_FIELDS.ALLOWED_CONTROLS));
+    const field = item.fields.find((f) => normaliseGuid(f.fieldId) === normaliseGuid(sitecore_templates_1.PLACEHOLDER_FIELDS.ALLOWED_CONTROLS));
     return field?.value ?? "";
 };
 const splitMultilist = (value) => value
@@ -143,9 +141,7 @@ const applyPlaceholderAllowControls = async (options) => {
         const keys = recipe.placedIn ?? [];
         if (keys.length === 0)
             continue;
-        const sectionName = recipe.section
-            ? sectionsByHandle.get(recipe.section.handle)
-            : undefined;
+        const sectionName = recipe.section ? sectionsByHandle.get(recipe.section.handle) : undefined;
         const renderingItemId = await resolveRenderingItemId(client, renderingsRoot, recipe, sectionName);
         if (!renderingItemId) {
             unresolvedRecipeHandles.push(recipe.handle);

package/dist/recipe/tasks/plan.d.ts

@@ -1,11 +1,10 @@
 import { type Plan } from "../plan";
 import { type RecipePlanOptions } from "./shared";
 /**
- * `scai recipe plan` — read-then-diff against a tenant, no mutations.
+ * `scai provision recipe plan` — read-then-diff against a tenant, no mutations.
  *
- * Operates on a pre-compiled IR file (the artifact from `scai recipe
- * compile`). For the recipe-source workflow, use `scai recipe push
+ * Operates on a pre-compiled IR file (the artifact from `scai provision recipe
+ * compile`). For the recipe-source workflow, use `scai provision recipe push
  * --what-if` instead — it compiles in-memory and runs the planner.
  */
 export declare const runRecipePlan: (options: RecipePlanOptions) => Promise<Plan>;
-//# sourceMappingURL=plan.d.ts.map

package/dist/recipe/tasks/plan.js

@@ -10,18 +10,18 @@ const io_1 = require("../io");
 const plan_1 = require("../plan");
 const shared_1 = require("./shared");
 /**
- * `scai recipe plan` — read-then-diff against a tenant, no mutations.
+ * `scai provision recipe plan` — read-then-diff against a tenant, no mutations.
  *
- * Operates on a pre-compiled IR file (the artifact from `scai recipe
- * compile`). For the recipe-source workflow, use `scai recipe push
+ * Operates on a pre-compiled IR file (the artifact from `scai provision recipe
+ * compile`). For the recipe-source workflow, use `scai provision recipe push
  * --what-if` instead — it compiles in-memory and runs the planner.
  */
 const runRecipePlan = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
     const tenant = (0, shared_1.resolveTenant)(options);
     if (!options.input) {
-        throw (0, errors_1.createCliError)("--input <ir.json> is required for `recipe plan`.", "INPUT_INVALID", {
-            hint: "Run `scai recipe compile` first, or use `scai recipe push --what-if` to plan from a recipe source.",
+        throw (0, errors_1.createScaiError)("--input <ir.json> is required for `recipe plan`.", "INPUT_INVALID", {
+            hint: "Run `scai provision recipe compile` first, or use `scai provision recipe push --what-if` to plan from a recipe source.",
         });
     }
     const ir = await (0, io_1.loadIr)(options.input);

package/dist/recipe/tasks/prune-defaults.d.ts

@@ -2,7 +2,7 @@ import { Logger } from "../../shared/logger";
 import type { AuthoringApiClient } from "../api/client";
 import { type RecipeTenantOptions } from "./shared";
 /**
- * `scai recipe prune-defaults` — remove the SXA Headless OOTB content
+ * `scai provision recipe prune-defaults` — remove the SXA Headless OOTB content
  * that ships with every fresh site under `Available Renderings`,
  * `Headless Variants`, and the per-site `Data` bucket. Registry installs
  * ship their own renderings, variants, and datasources; the OOTB folders
@@ -87,4 +87,3 @@ interface PruneCoreOptions {
 export declare const pruneDefaultsAgainstClient: (options: PruneCoreOptions) => Promise<PruneAction[]>;
 export declare const runRecipePruneDefaults: (options: RecipePruneDefaultsOptions) => Promise<RecipePruneDefaultsResult>;
 export {};
-//# sourceMappingURL=prune-defaults.d.ts.map

package/dist/recipe/tasks/prune-defaults.js

@@ -4,7 +4,7 @@ exports.runRecipePruneDefaults = exports.pruneDefaultsAgainstClient = void 0;
 const errors_1 = require("../../shared/errors");
 const shared_1 = require("./shared");
 /**
- * `scai recipe prune-defaults` — remove the SXA Headless OOTB content
+ * `scai provision recipe prune-defaults` — remove the SXA Headless OOTB content
  * that ships with every fresh site under `Available Renderings`,
  * `Headless Variants`, and the per-site `Data` bucket. Registry installs
  * ship their own renderings, variants, and datasources; the OOTB folders
@@ -73,7 +73,7 @@ const buildTargets = (availableRenderingsRoot, headlessVariantsRoot, contentItem
 /**
  * Detect the Authoring GraphQL "item is gone" response. The shared
  * graphql.ts wrapper joins all error.message strings into a single
- * `Authoring GraphQL errors: <messages>` payload on a NETWORK CliError;
+ * `Authoring GraphQL errors: <messages>` payload on a NETWORK ScaiError;
  * we match the canonical Sitecore phrasing that fires when an itemId
  * doesn't resolve at delete time.
  */
@@ -81,8 +81,7 @@ const isItemNotFoundError = (error) => {
     if (!(error instanceof Error))
         return false;
     const message = error.message;
-    return (message.includes("was not found") ||
-        message.includes("may have been deleted by another user"));
+    return (message.includes("was not found") || message.includes("may have been deleted by another user"));
 };
 /**
  * Pure(ish) deletion loop — exposed for unit tests so they can drive
@@ -90,7 +89,7 @@ const isItemNotFoundError = (error) => {
  * threading a full sitecoreai.cli.json through `resolveTenant`.
  */
 const pruneDefaultsAgainstClient = async (options) => {
-    const { client, availableRenderingsRoot, headlessVariantsRoot, contentItemsRoot, whatIf, logger } = options;
+    const { client, availableRenderingsRoot, headlessVariantsRoot, contentItemsRoot, whatIf, logger, } = options;
     const targets = buildTargets(availableRenderingsRoot, headlessVariantsRoot, contentItemsRoot);
     const actions = [];
     for (const target of targets) {
@@ -116,7 +115,7 @@ const pruneDefaultsAgainstClient = async (options) => {
         catch (error) {
             // Authoring GraphQL surfaces concurrent-delete as a "was not found"
             // / "may have been deleted by another user" message wrapped in a
-            // NETWORK CliError. Treat as a clean skip — the post-condition
+            // NETWORK ScaiError. Treat as a clean skip — the post-condition
             // (item gone) is satisfied either way.
             if (isItemNotFoundError(error)) {
                 actions.push({ ...target, status: "missing", itemId: existing.itemId });
@@ -147,7 +146,7 @@ const runRecipePruneDefaults = async (options) => {
         ]
             .filter(Boolean)
             .join(", ");
-        throw (0, errors_1.createCliError)(`Recipe prune-defaults missing root path(s): ${missing} not configured for environment '${tenant.envName}'.`, "INPUT_INVALID", {
+        throw (0, errors_1.createScaiError)(`Recipe prune-defaults missing root path(s): ${missing} not configured for environment '${tenant.envName}'.`, "INPUT_INVALID", {
             hint: `Add 'headlessVariantsRoot', 'availableRenderingsRoot', and 'contentItemsRoot' to envProfiles.${tenant.envName} in sitecoreai.cli.json (or pass --headless-variants-root / --available-renderings-root / --content-items-root).`,
         });
     }

package/dist/recipe/tasks/push.d.ts

@@ -1,7 +1,7 @@
 import { type ExecutionResult } from "../execute";
 import { type RecipePushOptions } from "./shared";
 /**
- * `scai recipe push` — apply recipes to a tenant.
+ * `scai provision recipe push` — apply recipes to a tenant.
  *
  * Input resolution:
  *   - `--input <file>` — single recipe (`.recipe.ts/.recipe.json`) or IR
@@ -15,4 +15,3 @@ import { type RecipePushOptions } from "./shared";
  * events in JSON mode; renders a per-op summary in human mode.
  */
 export declare const runRecipePush: (options: RecipePushOptions) => Promise<ExecutionResult[]>;
-//# sourceMappingURL=push.d.ts.map

package/dist/recipe/tasks/push.js

@@ -4,6 +4,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runRecipePush = void 0;
+const node_crypto_1 = require("node:crypto");
 const node_path_1 = __importDefault(require("node:path"));
 const cli_tasks_1 = require("../../shared/cli-tasks");
 const errors_1 = require("../../shared/errors");
@@ -15,6 +16,7 @@ const guids_1 = require("../guids");
 const io_1 = require("../io");
 const execute_1 = require("../execute");
 const placeholder_allow_1 = require("./placeholder-allow");
+const rollback_log_1 = require("../rollback-log");
 const shared_1 = require("./shared");
 const DEFAULT_PLAN_CONCURRENCY = 4;
 /**
@@ -62,7 +64,7 @@ const collectPrefetchPaths = (irs, crossRecipeRefs) => {
     return out;
 };
 /**
- * `scai recipe push` — apply recipes to a tenant.
+ * `scai provision recipe push` — apply recipes to a tenant.
  *
  * Input resolution:
  *   - `--input <file>` — single recipe (`.recipe.ts/.recipe.json`) or IR
@@ -88,8 +90,13 @@ const runRecipePush = async (options) => {
     const tenant = (0, shared_1.resolveTenant)(options, { pathItemIdCache });
     const isDryRun = Boolean(options.whatIf);
     if (!isDryRun) {
-        (0, shared_1.ensureAllowWrite)(tenant.root, tenant.envName, options.allowWrite);
+        (0, shared_1.ensureAllowWrite)(tenant.root, tenant.envName, options.allowWrite, "recipe-push");
     }
+    // One rollback-log scope per `recipe push` invocation. The file at
+    // `~/.sitecoreai/rollback/<runId>.jsonl` is created lazily by the
+    // logger on first write — successful pushes leave no file behind.
+    const rollbackRunId = (0, node_crypto_1.randomUUID)();
+    const rollbackLog = (0, rollback_log_1.createRollbackLogger)(rollbackRunId);
     const { templatesRoot, renderingsRoot } = (0, shared_1.resolveRecipeRoots)(options, tenant.environment, tenant.envName);
     // Phase 2 per-site folder layout roots — optional at the envProfile
     // level. When unset the compiler falls back to `templatesRoot` for
@@ -119,6 +126,12 @@ const runRecipePush = async (options) => {
     // Per-site enumerations bucket — required for EnumerationRecipe
     // compilation and for any field carrying `sitecore.enumHandle`.
     const enumerationsRoot = options.enumerationsRoot ?? tenant.environment.enumerationsRoot;
+    // Page-level roots. `pageTemplatesRoot` falls back to `templatesRoot`
+    // in the compiler; `placeholderSettingsRoot` is required when the set
+    // declares any placeholder (standalone or inline).
+    const pageTemplatesRoot = tenant.environment.pageTemplatesRoot;
+    const placeholderSettingsRoot = tenant.environment.placeholderSettingsRoot;
+    const pagesRoot = tenant.environment.pagesRoot;
     const { files, source } = await (0, shared_1.resolveRecipeInputs)(options, tenant.root);
     const results = [];
     const allEvents = [];
@@ -158,6 +171,9 @@ const runRecipePush = async (options) => {
         headlessVariantsRoot,
         availableRenderingsRoot,
         enumerationsRoot,
+        pageTemplatesRoot,
+        placeholderSettingsRoot,
+        pagesRoot,
     });
     const loadedIrs = await (0, cli_tasks_1.mapWithConcurrency)(irFiles, (f) => (0, io_1.loadIr)(f));
     const irs = [
@@ -167,8 +183,16 @@ const runRecipePush = async (options) => {
     const crossRecipeRefs = new Map();
     for (const { ir } of irs) {
         for (const op of ir.operations) {
-            if (op.op === "CreateItem")
+            if (op.op === "CreateItem") {
                 crossRecipeRefs.set(op.id, op.path);
+                // templateOf: ref-path needs the same lookup-before-plan seed
+                // path-parent resolution uses. Compute the deterministic
+                // refKey + the target path; the executor's
+                // `getItemsByPaths` batch picks it up alongside parent paths.
+                if (typeof op.templateOf !== "string" && op.templateOf.kind === "ref-path") {
+                    crossRecipeRefs.set((0, guids_1.templatePathRefKey)(op.templateOf.value), op.templateOf.value);
+                }
+            }
         }
     }
     // Seed the synthetic Page Designs root refKey so the cross-recipe
@@ -191,14 +215,14 @@ const runRecipePush = async (options) => {
     if (hasSiteOp) {
         const accessToken = await (0, auth_1.getAccessToken)(tenant.environment);
         if (!accessToken) {
-            throw (0, errors_1.createCliError)(`Failed to mint a Sites API access token for environment '${tenant.envName}'. Run 'scai login' or set client credentials, then retry.`, "AUTH_REQUIRED");
+            throw (0, errors_1.createScaiError)(`Failed to mint a Sites API access token for environment '${tenant.envName}'. Run 'scai setup login' or set client credentials, then retry.`, "AUTH_REQUIRED");
         }
         sitesClient = (0, sites_client_1.createSitesApiClient)({ accessToken });
     }
     // Recipe-source files (vs pre-compiled `.ir.json`) are kept in scope
     // for the post-IR placeholder-allow phase. Pre-compiled IRs lose
     // their source-recipe handle/section/name → can't drive placeholder
-    // resolution; for those, callers should run `scai deploy placeholders`
+    // resolution; for those, callers should run `scai provision deploy placeholders`
     // separately if needed.
     const sourceRecipes = recipes;
     // ─── Optional recipe-hash skip ────────────────────────────────────────
@@ -219,6 +243,9 @@ const runRecipePush = async (options) => {
         headlessVariantsRoot,
         availableRenderingsRoot,
         enumerationsRoot,
+        pageTemplatesRoot,
+        placeholderSettingsRoot,
+        pagesRoot,
     });
     const irsToExecute = [];
     const cachedSkips = [];
@@ -276,11 +303,18 @@ const runRecipePush = async (options) => {
     const planConcurrency = options.planConcurrency ?? DEFAULT_PLAN_CONCURRENCY;
     const runOne = async (ir) => (0, execute_1.executeIr)(ir, tenant.client, {
         mode: isDryRun ? "plan" : "apply",
-        emit: (event) => allEvents.push({ recipe: ir.recipeHandle, event }),
+        emit: (event) => {
+            allEvents.push({ recipe: ir.recipeHandle, event });
+            options.emit?.({ recipe: ir.recipeHandle, event });
+        },
+        signal: options.signal,
         crossRecipeRefs,
         sitesClient,
         pathItemIdCache,
         pathSnapshotCache,
+        // Dry-run never rolls back, so the logger is a no-op there. Pass
+        // it through anyway — the conditional lives inside the executor.
+        rollbackLog,
     });
     const renderResult = (ir, result) => {
         if (logger.isJson())
@@ -370,6 +404,9 @@ const runRecipePush = async (options) => {
             }
         }
     }
+    if (rollbackLog.wasUsed && !logger.isJson()) {
+        logger.warn(`Rollback audit log written to ${rollbackLog.logPath}`);
+    }
     if (logger.isJson()) {
         logger.json({
             command: "recipe.push",
@@ -377,6 +414,9 @@ const runRecipePush = async (options) => {
             source,
             whatIf: isDryRun,
             placeholderAllowControls: placeholderAllowSummary ?? undefined,
+            rollbackLog: rollbackLog.wasUsed
+                ? { runId: rollbackLog.runId, path: rollbackLog.logPath }
+                : undefined,
             results: results.map((r) => ({
                 recipeHandle: r.plan.recipeHandle,
                 summary: r.summary,

package/dist/recipe/tasks/shared.d.ts

@@ -1,8 +1,8 @@
 import { Logger } from "../../shared/logger";
-import { type EnvironmentConfiguration, type RootConfiguration } from "../../config";
+import type { EnvironmentConfiguration, RootConfiguration } from "../../config/types";
 import type { AuthoringApiClient } from "../api/client";
 /**
- * Shared option shapes for the three `scai recipe` tasks.
+ * Shared option shapes for the three `scai provision recipe` tasks.
  *
  * All three honor the standard verbosity options (`--quiet`, `--json`,
  * `--log-file`). Plan and push additionally need an environment to talk
@@ -97,6 +97,24 @@ export interface RecipePushOptions extends RecipeTenantOptions {
      * sequentially — within a push, mutations land in topological order.
      */
     planConcurrency?: number;
+    /**
+     * Optional progress callback. Receives per-recipe execution events
+     * as they happen (op-start / op-result / apply-start / apply-success
+     * / apply-error / site-job-poll / rollback events). Used by external
+     * orchestrators (e.g. `scai mcp serve`) to forward live progress to
+     * a client. The CLI logger does not need this — it observes the same
+     * events via its own internal collator.
+     */
+    emit?: (event: {
+        recipe: string;
+        event: import("../execute").ExecutionEvent;
+    }) => void;
+    /**
+     * Cooperative cancellation. When the signal fires, the executor
+     * stops between operations, rolls back applied mutations, and the
+     * per-recipe `ExecutionResult.aborted` is set to true.
+     */
+    signal?: AbortSignal;
 }
 export declare const toLogger: (options: RecipeCommonOptions) => Logger;
 export interface ResolvedTenant {
@@ -148,5 +166,4 @@ export declare const resolveRecipeInputs: (options: {
     input?: string;
     config?: string;
 }, root: RootConfiguration) => Promise<RecipeInputResolution>;
-export declare const ensureAllowWrite: (root: RootConfiguration, envName: string, override?: boolean) => void;
-//# sourceMappingURL=shared.d.ts.map
+export { ensureAllowWrite } from "../../policy/allow-write";

package/dist/recipe/tasks/shared.js

@@ -8,14 +8,20 @@ const node_path_1 = __importDefault(require("node:path"));
 const fast_glob_1 = __importDefault(require("fast-glob"));
 const logger_1 = require("../../shared/logger");
 const errors_1 = require("../../shared/errors");
-const env_1 = require("../../shared/env");
+const environment_1 = require("../../policy/environment");
 const authoring_client_1 = require("../api/authoring-client");
 const toLogger = (options) => new logger_1.Logger(Boolean(options.verbose), Boolean(options.trace), Boolean(options.json), Boolean(options.quiet), options.logFile ?? process.env.SITECOREAI_LOG_FILE);
 exports.toLogger = toLogger;
 const resolveTenant = (options, clientOptions) => {
-    const { envName, environment, root, timeoutMs } = (0, env_1.resolveEnvironment)(options);
+    const { envName, environment, root, timeoutMs } = (0, environment_1.resolveEnvironment)(options);
+    // Carry the org-scoped automation client's non-secret `clientId` from
+    // the root config so the auth layer can pair it with the org-client
+    // secret in the keychain (the tier-3 fallback for org-level profiles).
+    const orgClientId = environment.organizationId
+        ? root.orgClients[environment.organizationId]?.clientId
+        : undefined;
     const client = (0, authoring_client_1.createAuthoringClient)({
-        environment,
+        environment: { ...environment, orgClientId },
         request: { timeoutMs },
         ...(clientOptions?.pathItemIdCache && { pathItemIdCache: clientOptions.pathItemIdCache }),
     });
@@ -48,7 +54,7 @@ const resolveRecipeRoots = (options, environment, envName) => {
             : !templatesRoot
                 ? "templatesRoot"
                 : "renderingsRoot";
-        throw (0, errors_1.createCliError)(`Recipe parent path missing: ${missing} not configured for environment '${envName}'.`, "INPUT_INVALID", {
+        throw (0, errors_1.createScaiError)(`Recipe parent path missing: ${missing} not configured for environment '${envName}'.`, "INPUT_INVALID", {
             hint: `Add 'templatesRoot' and 'renderingsRoot' to envProfiles.${envName} in sitecoreai.cli.json (or pass --templates-root / --renderings-root).`,
         });
     }
@@ -68,27 +74,34 @@ const resolveRecipeInputs = async (options, root) => {
         return { files: [node_path_1.default.resolve(options.input)], source: "input-flag" };
     }
     const configDir = node_path_1.default.dirname(root.physicalPath);
-    const matched = await (0, fast_glob_1.default)(root.recipes, { cwd: configDir, absolute: true });
+    // followSymbolicLinks: false defends against an attacker-planted symlink
+    // in recipes/ pointing at /etc/, ~/.aws/, or any other sensitive TS file
+    // — those files would otherwise be executed by tsx when the recipe gets
+    // loaded (.recipe.ts is code, not data).
+    const matched = await (0, fast_glob_1.default)(root.recipes, {
+        cwd: configDir,
+        absolute: true,
+        followSymbolicLinks: false,
+    });
+    // Defense in depth: reject any resolved path that escapes the config
+    // directory (e.g. via `..` segments in the glob input).
+    const escaped = matched.filter((p) => node_path_1.default.relative(configDir, p).startsWith(".."));
+    if (escaped.length > 0) {
+        throw (0, errors_1.createScaiError)(`Recipe glob resolved to ${escaped.length} path(s) outside the config directory: ${escaped.slice(0, 3).join(", ")}${escaped.length > 3 ? `, +${escaped.length - 3} more` : ""}.`, "INPUT_INVALID", {
+            hint: "Recipe paths must live under the directory containing sitecoreai.cli.json.",
+        });
+    }
     if (matched.length === 0) {
-        throw (0, errors_1.createCliError)(`No recipe files matched the config glob: ${root.recipes.join(", ")}.`, "INPUT_INVALID", {
+        throw (0, errors_1.createScaiError)(`No recipe files matched the config glob: ${root.recipes.join(", ")}.`, "INPUT_INVALID", {
             hint: "Pass --input <recipe-file>, or update the `recipes` glob in sitecoreai.cli.json.",
         });
     }
     return { files: matched.sort(), source: "config-glob" };
 };
 exports.resolveRecipeInputs = resolveRecipeInputs;
-const ensureAllowWrite = (root, envName, override) => {
-    const environment = root.environments[envName];
-    if (override || environment?.allowWrite) {
-        return;
-    }
-    const envKey = envName
-        .trim()
-        .toUpperCase()
-        .replace(/[^A-Z0-9]+/g, "_")
-        .replace(/^_+|_+$/g, "");
-    throw (0, errors_1.createCliError)(`Environment ${envName} is not configured to allow writing data.`, "INPUT_INVALID", {
-        hint: `Set allowWrite in sitecoreai.cli.json, set SITECOREAI_ENV_${envKey}_ALLOW_WRITE=true, or pass --allow-write.`,
-    });
-};
-exports.ensureAllowWrite = ensureAllowWrite;
+// Re-exported from the shared gate so `recipe push` goes through the
+// same workspace-policy enforcement (ceiling, caller context, the
+// `recipe-push` destructive tier) as every other write path. The
+// recipe-local copy that used to live here predated the policy layer.
+var allow_write_1 = require("../../policy/allow-write");
+Object.defineProperty(exports, "ensureAllowWrite", { enumerable: true, get: function () { return allow_write_1.ensureAllowWrite; } });

package/dist/recipe/unstable.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Unstable recipe API — `import { ... } from "@sitecoreai-labs/sitecoreai-cli/recipe/unstable"`.
+ *
+ * The recipe **composition kinds** — `ContentItem`, `PageDesign`,
+ * `PartialDesign`, `SiteRecipe`, `SiteTemplate` — are present in the source
+ * and usable, but they are NOT part of the 0.1.0 stability promise. Their
+ * schemas, types, and compilers may change shape between minor releases
+ * without a major bump. They graduate to the stable `./recipe` entry in a
+ * follow-up release (see `.changeset/recipes-graduation.md`).
+ *
+ * The five stable recipe kinds — `ComponentTemplate`, `ContentTemplate`,
+ * `ComponentSection`, `DesignParametersTemplate`, `Enumeration` — and all
+ * shared recipe infrastructure (the `RecipeSchema` umbrella, `compileRecipe`,
+ * the planner/executor, GUID derivation, IR) stay on the stable `./recipe`
+ * entry.
+ */
+export { ContentItemRecipeSchema, PageDesignRecipeSchema, PartialDesignRecipeSchema, SiteGroupingSchema, SiteRecipeSchema, SiteTemplateDictionaryEntrySchema, SiteTemplateRecipeSchema, SiteTemplateTaxonomyEntrySchema, type ContentItemRecipe, type PageDesignRecipe, type PartialDesignRecipe, type SiteGrouping, type SiteRecipe, type SiteTemplateDictionaryEntry, type SiteTemplateRecipe, type SiteTemplateTaxonomyEntry, } from "./schema/recipe";
+export { compileContentItemRecipe, compilePageDesignRecipe, compilePartialDesignRecipe, compileSiteRecipe, compileSiteTemplateRecipe, } from "./compile";

package/dist/recipe/unstable.js

@@ -0,0 +1,36 @@
+"use strict";
+/**
+ * Unstable recipe API — `import { ... } from "@sitecoreai-labs/sitecoreai-cli/recipe/unstable"`.
+ *
+ * The recipe **composition kinds** — `ContentItem`, `PageDesign`,
+ * `PartialDesign`, `SiteRecipe`, `SiteTemplate` — are present in the source
+ * and usable, but they are NOT part of the 0.1.0 stability promise. Their
+ * schemas, types, and compilers may change shape between minor releases
+ * without a major bump. They graduate to the stable `./recipe` entry in a
+ * follow-up release (see `.changeset/recipes-graduation.md`).
+ *
+ * The five stable recipe kinds — `ComponentTemplate`, `ContentTemplate`,
+ * `ComponentSection`, `DesignParametersTemplate`, `Enumeration` — and all
+ * shared recipe infrastructure (the `RecipeSchema` umbrella, `compileRecipe`,
+ * the planner/executor, GUID derivation, IR) stay on the stable `./recipe`
+ * entry.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileSiteTemplateRecipe = exports.compileSiteRecipe = exports.compilePartialDesignRecipe = exports.compilePageDesignRecipe = exports.compileContentItemRecipe = exports.SiteTemplateTaxonomyEntrySchema = exports.SiteTemplateRecipeSchema = exports.SiteTemplateDictionaryEntrySchema = exports.SiteRecipeSchema = exports.SiteGroupingSchema = exports.PartialDesignRecipeSchema = exports.PageDesignRecipeSchema = exports.ContentItemRecipeSchema = void 0;
+// Composition-kind schemas + types ----------------------------------------
+var recipe_1 = require("./schema/recipe");
+Object.defineProperty(exports, "ContentItemRecipeSchema", { enumerable: true, get: function () { return recipe_1.ContentItemRecipeSchema; } });
+Object.defineProperty(exports, "PageDesignRecipeSchema", { enumerable: true, get: function () { return recipe_1.PageDesignRecipeSchema; } });
+Object.defineProperty(exports, "PartialDesignRecipeSchema", { enumerable: true, get: function () { return recipe_1.PartialDesignRecipeSchema; } });
+Object.defineProperty(exports, "SiteGroupingSchema", { enumerable: true, get: function () { return recipe_1.SiteGroupingSchema; } });
+Object.defineProperty(exports, "SiteRecipeSchema", { enumerable: true, get: function () { return recipe_1.SiteRecipeSchema; } });
+Object.defineProperty(exports, "SiteTemplateDictionaryEntrySchema", { enumerable: true, get: function () { return recipe_1.SiteTemplateDictionaryEntrySchema; } });
+Object.defineProperty(exports, "SiteTemplateRecipeSchema", { enumerable: true, get: function () { return recipe_1.SiteTemplateRecipeSchema; } });
+Object.defineProperty(exports, "SiteTemplateTaxonomyEntrySchema", { enumerable: true, get: function () { return recipe_1.SiteTemplateTaxonomyEntrySchema; } });
+// Composition-kind compilers ----------------------------------------------
+var compile_1 = require("./compile");
+Object.defineProperty(exports, "compileContentItemRecipe", { enumerable: true, get: function () { return compile_1.compileContentItemRecipe; } });
+Object.defineProperty(exports, "compilePageDesignRecipe", { enumerable: true, get: function () { return compile_1.compilePageDesignRecipe; } });
+Object.defineProperty(exports, "compilePartialDesignRecipe", { enumerable: true, get: function () { return compile_1.compilePartialDesignRecipe; } });
+Object.defineProperty(exports, "compileSiteRecipe", { enumerable: true, get: function () { return compile_1.compileSiteRecipe; } });
+Object.defineProperty(exports, "compileSiteTemplateRecipe", { enumerable: true, get: function () { return compile_1.compileSiteTemplateRecipe; } });