@sitecoreai-labs/sitecoreai-cli 0.0.4 → 0.1.0

package/dist/serialization/filesystem-store/index.js

@@ -1,15 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.removeUserFromFilesystem = exports.writeUserToFilesystem = exports.readUsersFromFilesystem = exports.removeRoleFromFilesystem = exports.writeRoleToFilesystem = exports.readRolesFromFilesystem = exports.removeItemFromFilesystem = exports.writeItemToFilesystem = exports.loadFilesystemItems = void 0;
-var items_1 = require("./items");
-Object.defineProperty(exports, "loadFilesystemItems", { enumerable: true, get: function () { return items_1.loadFilesystemItems; } });
-Object.defineProperty(exports, "writeItemToFilesystem", { enumerable: true, get: function () { return items_1.writeItemToFilesystem; } });
-Object.defineProperty(exports, "removeItemFromFilesystem", { enumerable: true, get: function () { return items_1.removeItemFromFilesystem; } });
-var roles_1 = require("./roles");
-Object.defineProperty(exports, "readRolesFromFilesystem", { enumerable: true, get: function () { return roles_1.readRolesFromFilesystem; } });
-Object.defineProperty(exports, "writeRoleToFilesystem", { enumerable: true, get: function () { return roles_1.writeRoleToFilesystem; } });
-Object.defineProperty(exports, "removeRoleFromFilesystem", { enumerable: true, get: function () { return roles_1.removeRoleFromFilesystem; } });
-var users_1 = require("./users");
-Object.defineProperty(exports, "readUsersFromFilesystem", { enumerable: true, get: function () { return users_1.readUsersFromFilesystem; } });
-Object.defineProperty(exports, "writeUserToFilesystem", { enumerable: true, get: function () { return users_1.writeUserToFilesystem; } });
-Object.defineProperty(exports, "removeUserFromFilesystem", { enumerable: true, get: function () { return users_1.removeUserFromFilesystem; } });

package/dist/serialization/filesystem-store/items.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"items.d.ts","sourceRoot":"","sources":["../../../src/serialization/filesystem-store/items.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAElD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,eAAO,MAAM,mBAAmB,GAC9B,UAAU,kBAAkB,EAAE,KAC7B,OAAO,CAAC;IAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAAC,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAmCzD,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,cAAc,sBAAsB,EACpC,MAAM,QAAQ,KACb,OAAO,CAAC,MAAM,CAUhB,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,cAAc,sBAAsB,EACpC,MAAM,YAAY,KACjB,OAAO,CAAC,IAAI,CAMd,CAAC"}

package/dist/serialization/filesystem-store/roles.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../../src/serialization/filesystem-store/roles.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,gCAAgC,EAAE,MAAM,UAAU,CAAC;AAI/E,eAAO,MAAM,uBAAuB,GAClC,YAAY,iBAAiB,EAC7B,cAAc,gCAAgC,KAC7C,OAAO,CAAC,QAAQ,EAAE,CAmBpB,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,YAAY,iBAAiB,EAC7B,cAAc,gCAAgC,EAC9C,MAAM,QAAQ,KACb,OAAO,CAAC,MAAM,CAehB,CAAC;AAEF,eAAO,MAAM,wBAAwB,GAAU,WAAW,MAAM,KAAG,OAAO,CAAC,IAAI,CAK9E,CAAC"}

package/dist/serialization/filesystem-store/users.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../../src/serialization/filesystem-store/users.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,gCAAgC,EAAE,MAAM,UAAU,CAAC;AAI/E,eAAO,MAAM,uBAAuB,GAClC,YAAY,iBAAiB,EAC7B,cAAc,gCAAgC,KAC7C,OAAO,CAAC,QAAQ,EAAE,CAmBpB,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,YAAY,iBAAiB,EAC7B,cAAc,gCAAgC,EAC9C,MAAM,QAAQ,KACb,OAAO,CAAC,MAAM,CAehB,CAAC;AAEF,eAAO,MAAM,wBAAwB,GAAU,WAAW,MAAM,KAAG,OAAO,CAAC,IAAI,CAK9E,CAAC"}

package/dist/serialization/filesystem-store/utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/serialization/filesystem-store/utils.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,MAAM,GAAU,OAAO,MAAM,KAAG,OAAO,CAAC,OAAO,CAO3D,CAAC"}

package/dist/serialization/filesystem-store.d.ts

@@ -1,2 +0,0 @@
-export * from "./filesystem-store/index";
-//# sourceMappingURL=filesystem-store.d.ts.map

package/dist/serialization/filesystem-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"filesystem-store.d.ts","sourceRoot":"","sources":["../../src/serialization/filesystem-store.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC"}

package/dist/serialization/filesystem-store.js

@@ -1,17 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./filesystem-store/index"), exports);

package/dist/serialization/item-path.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"item-path.d.ts","sourceRoot":"","sources":["../../src/serialization/item-path.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC;IACrC,YAAY,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,qBAAa,QAAS,YAAW,iBAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,UAAU,CAAgB;IAElC,OAAO;IAKP,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ;IASnD,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,QAAQ;IAIjD,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,IAAI,QAAQ,IAAI,MAAM,GAAG,IAAI,CAE5B;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,YAAY,IAAI,MAAM;IAQtB,QAAQ,IAAI,MAAM;IAIlB,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,OAAO;IAcvC,gBAAgB,IAAI,QAAQ,GAAG,IAAI;IAQnC,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ;IAQlC,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ;IAYjD,sBAAsB,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,IAAI;IAoBvD,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,GAAG,iBAAiB,GAAG,OAAO;IAkBrE,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO;CAGjC;AAED,qBAAa,aAAc,YAAW,iBAAiB;IACrD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAEnC,OAAO;IAIP,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa;IAIzD,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO;IAIhC,YAAY,IAAI,MAAM;IAItB,QAAQ,IAAI,MAAM;CAGnB"}

package/dist/serialization/path-provider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"path-provider.d.ts","sourceRoot":"","sources":["../../src/serialization/path-provider.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAA0B,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAuSvC,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsD;IAC/E,OAAO,CAAC,WAAW,CAAM;gBAEb,YAAY,EAAE,kBAAkB,EAAE;IAQ9C,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAMhF,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,EAAE,GAAG,IAAI;IAIhE,QAAQ,IAAI,MAAM;IAIlB,OAAO,CAAC,YAAY;CAuBrB"}

package/dist/serialization/signature.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../src/serialization/signature.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAanC,eAAO,MAAM,uBAAuB,GAAI,MAAM,QAAQ,EAAE,0BAAwB,KAAG,MA0DlF,CAAC;AAEF,eAAO,MAAM,eAAe,GAAI,eAAe,MAAM,GAAG,IAAI,KAAG,MAAM,GAAG,IAOvE,CAAC"}

package/dist/serialization/sitecore-api/auth.d.ts

@@ -1,31 +0,0 @@
-import { EnvironmentConfiguration } from "../../config";
-export type AccessTokenResult = {
-    accessToken: string;
-    refreshToken?: string;
-    expiresIn?: number;
-    tokenType?: string;
-};
-export type DeviceAuthorizationResult = {
-    deviceCode: string;
-    userCode?: string;
-    verificationUri: string;
-    verificationUriComplete?: string;
-    expiresIn: number;
-    interval: number;
-    message?: string;
-};
-export declare const requestDeviceAuthorization: (environment: EnvironmentConfiguration, scope?: string) => Promise<DeviceAuthorizationResult>;
-export declare const pollDeviceToken: (environment: EnvironmentConfiguration, device: DeviceAuthorizationResult) => Promise<AccessTokenResult>;
-/**
- * Default OAuth audience for Sitecore Cloud APIs (Deploy + Authoring +
- * Sites). When the env profile doesn't pin an explicit `audience`,
- * Auth0 falls back to whatever default is configured for the M2M
- * client. Some org-scoped clients are configured with internal-only
- * audiences they aren't authorized to mint tokens for, so we always
- * send this audience explicitly on the request.
- */
-export declare const DEFAULT_SITECORE_API_AUDIENCE = "https://api.sitecorecloud.io";
-export declare const requestClientCredentialsToken: (environment: EnvironmentConfiguration, scope?: string) => Promise<AccessTokenResult>;
-export declare const requestPasswordToken: (environment: EnvironmentConfiguration, username: string, password: string, scope?: string) => Promise<AccessTokenResult>;
-export declare const getAccessToken: (environment: EnvironmentConfiguration) => Promise<string | undefined>;
-//# sourceMappingURL=auth.d.ts.map

package/dist/serialization/sitecore-api/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/serialization/sitecore-api/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AA6EpD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AA0CF,eAAO,MAAM,0BAA0B,GACrC,aAAa,wBAAwB,EACrC,QAAQ,MAAM,KACb,OAAO,CAAC,yBAAyB,CAqDnC,CAAC;AAOF,eAAO,MAAM,eAAe,GAC1B,aAAa,wBAAwB,EACrC,QAAQ,yBAAyB,KAChC,OAAO,CAAC,iBAAiB,CAuE3B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B,iCAAiC,CAAC;AAE5E,eAAO,MAAM,6BAA6B,GACxC,aAAa,wBAAwB,EACrC,QAAQ,MAAM,KACb,OAAO,CAAC,iBAAiB,CAmB3B,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,aAAa,wBAAwB,EACrC,UAAU,MAAM,EAChB,UAAU,MAAM,EAChB,QAAQ,MAAM,KACb,OAAO,CAAC,iBAAiB,CAyB3B,CAAC;AAiCF,eAAO,MAAM,cAAc,GACzB,aAAa,wBAAwB,KACpC,OAAO,CAAC,MAAM,GAAG,SAAS,CA6D5B,CAAC"}

package/dist/serialization/sitecore-api/auth.js

@@ -1,319 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getAccessToken = exports.requestPasswordToken = exports.requestClientCredentialsToken = exports.DEFAULT_SITECORE_API_AUDIENCE = exports.pollDeviceToken = exports.requestDeviceAuthorization = void 0;
-const keychain_1 = require("../../shared/keychain");
-const errors_1 = require("../../shared/errors");
-const DISCOVERY_TIMEOUT_MS = Math.max(0, Number(process.env.SITECOREAI_AUTH_DISCOVERY_TIMEOUT_MS ?? 5000));
-const fetchDiscovery = async (authority) => {
-    const url = `${authority.replace(/\/$/, "")}/.well-known/openid-configuration`;
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), DISCOVERY_TIMEOUT_MS);
-    try {
-        return await fetch(url, { signal: controller.signal });
-    }
-    catch (error) {
-        if (error instanceof Error && error.name === "AbortError") {
-            throw (0, errors_1.createCliError)("Identity discovery timed out.", "NETWORK", {
-                hint: "Check network connectivity or set SITECOREAI_AUTH_DISCOVERY_TIMEOUT_MS.",
-            });
-        }
-        throw (0, errors_1.createCliError)(`Identity discovery failed: ${error instanceof Error ? error.message : String(error)}`, "NETWORK");
-    }
-    finally {
-        clearTimeout(timeout);
-    }
-};
-const getTokenEndpoint = async (authority) => {
-    const response = await fetchDiscovery(authority);
-    if (!response.ok) {
-        throw (0, errors_1.createCliError)(`Failed to discover token endpoint from ${authority}.`, "NETWORK");
-    }
-    const json = (await response.json());
-    if (!json.token_endpoint) {
-        throw (0, errors_1.createCliError)("Token endpoint not found in discovery document.", "NETWORK");
-    }
-    return json.token_endpoint;
-};
-const getDeviceAuthorizationEndpoint = async (authority) => {
-    const response = await fetchDiscovery(authority);
-    if (!response.ok) {
-        throw (0, errors_1.createCliError)(`Failed to discover device authorization endpoint from ${authority}.`, "NETWORK");
-    }
-    const json = (await response.json());
-    if (json.device_authorization_endpoint) {
-        return json.device_authorization_endpoint;
-    }
-    return `${authority.replace(/\/$/, "")}/oauth/device/code`;
-};
-const requestToken = async (authority, params) => {
-    const tokenEndpoint = await getTokenEndpoint(authority);
-    const response = await fetch(tokenEndpoint, {
-        method: "POST",
-        headers: { "Content-Type": "application/x-www-form-urlencoded" },
-        body: params.toString(),
-    });
-    if (!response.ok) {
-        const bodyText = await response.text();
-        let detail = bodyText;
-        try {
-            const parsed = JSON.parse(bodyText);
-            detail = parsed.error_description ?? parsed.error ?? parsed.message ?? bodyText;
-        }
-        catch {
-            // keep raw body text
-        }
-        throw (0, errors_1.createCliError)(`Failed to obtain access token (${response.status}): ${detail || "Unknown error"}`, "AUTH_REQUIRED");
-    }
-    const json = (await response.json());
-    if (!json.access_token) {
-        throw (0, errors_1.createCliError)("Access token was not returned by the identity server.", "AUTH_REQUIRED");
-    }
-    return {
-        accessToken: json.access_token,
-        refreshToken: json.refresh_token,
-        expiresIn: json.expires_in,
-        tokenType: json.token_type,
-    };
-};
-const requestDeviceAuthorization = async (environment, scope) => {
-    if (!environment.authority || !environment.clientId) {
-        throw (0, errors_1.createCliError)("Authority and clientId are required for device login.", "AUTH_REQUIRED");
-    }
-    const endpoint = await getDeviceAuthorizationEndpoint(environment.authority);
-    const params = new URLSearchParams({
-        client_id: environment.clientId,
-    });
-    if (environment.audience) {
-        params.set("audience", environment.audience);
-    }
-    if (scope) {
-        params.set("scope", scope);
-    }
-    const response = await fetch(endpoint, {
-        method: "POST",
-        headers: { "Content-Type": "application/x-www-form-urlencoded" },
-        body: params.toString(),
-    });
-    if (!response.ok) {
-        const bodyText = await response.text();
-        let detail = bodyText;
-        try {
-            const parsed = JSON.parse(bodyText);
-            detail = parsed.error_description ?? parsed.error ?? parsed.message ?? bodyText;
-        }
-        catch {
-            // keep raw body text
-        }
-        throw (0, errors_1.createCliError)(`Failed to start device login (${response.status}): ${detail || "Unknown error"}`, "AUTH_REQUIRED");
-    }
-    const json = (await response.json());
-    if (!json.device_code || !json.verification_uri) {
-        throw (0, errors_1.createCliError)("Device authorization response was missing required fields.", "AUTH_REQUIRED");
-    }
-    return {
-        deviceCode: json.device_code,
-        userCode: json.user_code,
-        verificationUri: json.verification_uri,
-        verificationUriComplete: json.verification_uri_complete,
-        expiresIn: json.expires_in ?? 900,
-        interval: json.interval ?? 5,
-        message: json.message,
-    };
-};
-exports.requestDeviceAuthorization = requestDeviceAuthorization;
-const delay = (ms) => new Promise((resolve) => {
-    setTimeout(resolve, ms);
-});
-const pollDeviceToken = async (environment, device) => {
-    if (!environment.authority || !environment.clientId) {
-        throw (0, errors_1.createCliError)("Authority and clientId are required for device login.", "AUTH_REQUIRED");
-    }
-    const tokenEndpoint = await getTokenEndpoint(environment.authority);
-    const deadline = Date.now() + device.expiresIn * 1000;
-    let intervalMs = Math.max(1, device.interval) * 1000;
-    while (Date.now() < deadline) {
-        const params = new URLSearchParams({
-            grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-            device_code: device.deviceCode,
-            client_id: environment.clientId,
-        });
-        if (environment.clientSecret) {
-            params.set("client_secret", environment.clientSecret);
-        }
-        const response = await fetch(tokenEndpoint, {
-            method: "POST",
-            headers: { "Content-Type": "application/x-www-form-urlencoded" },
-            body: params.toString(),
-        });
-        const bodyText = await response.text();
-        if (response.ok) {
-            const json = JSON.parse(bodyText);
-            if (!json.access_token) {
-                throw (0, errors_1.createCliError)("Access token was not returned by the identity server.", "AUTH_REQUIRED");
-            }
-            return {
-                accessToken: json.access_token,
-                refreshToken: json.refresh_token,
-                expiresIn: json.expires_in,
-                tokenType: json.token_type,
-            };
-        }
-        let errorCode;
-        let detail = bodyText;
-        try {
-            const parsed = JSON.parse(bodyText);
-            errorCode = parsed.error;
-            detail = parsed.error_description ?? parsed.error ?? parsed.message ?? bodyText;
-        }
-        catch {
-            // keep raw body text
-        }
-        if (errorCode === "authorization_pending") {
-            await delay(intervalMs);
-            continue;
-        }
-        if (errorCode === "slow_down") {
-            intervalMs += 5000;
-            await delay(intervalMs);
-            continue;
-        }
-        if (errorCode === "access_denied") {
-            throw (0, errors_1.createCliError)("Device login was cancelled.", "AUTH_REQUIRED");
-        }
-        if (errorCode === "expired_token") {
-            throw (0, errors_1.createCliError)("Device login expired. Try again.", "AUTH_REQUIRED");
-        }
-        throw (0, errors_1.createCliError)(`Failed to obtain access token (${response.status}): ${detail || "Unknown error"}`, "AUTH_REQUIRED");
-    }
-    throw (0, errors_1.createCliError)("Device login expired. Try again.", "AUTH_REQUIRED");
-};
-exports.pollDeviceToken = pollDeviceToken;
-/**
- * Default OAuth audience for Sitecore Cloud APIs (Deploy + Authoring +
- * Sites). When the env profile doesn't pin an explicit `audience`,
- * Auth0 falls back to whatever default is configured for the M2M
- * client. Some org-scoped clients are configured with internal-only
- * audiences they aren't authorized to mint tokens for, so we always
- * send this audience explicitly on the request.
- */
-exports.DEFAULT_SITECORE_API_AUDIENCE = "https://api.sitecorecloud.io";
-const requestClientCredentialsToken = async (environment, scope) => {
-    if (!environment.authority || !environment.clientId || !environment.clientSecret) {
-        throw (0, errors_1.createCliError)("Authority, clientId, and clientSecret are required for client credentials.", "AUTH_REQUIRED");
-    }
-    const params = new URLSearchParams({
-        grant_type: "client_credentials",
-        client_id: environment.clientId,
-        client_secret: environment.clientSecret,
-        audience: environment.audience ?? exports.DEFAULT_SITECORE_API_AUDIENCE,
-    });
-    if (scope) {
-        params.set("scope", scope);
-    }
-    return requestToken(environment.authority, params);
-};
-exports.requestClientCredentialsToken = requestClientCredentialsToken;
-const requestPasswordToken = async (environment, username, password, scope) => {
-    if (!environment.authority || !environment.clientId) {
-        throw (0, errors_1.createCliError)("Authority and clientId are required for username/password login.", "AUTH_REQUIRED");
-    }
-    const params = new URLSearchParams({
-        grant_type: "password",
-        client_id: environment.clientId,
-        username,
-        password,
-    });
-    if (environment.clientSecret) {
-        params.set("client_secret", environment.clientSecret);
-    }
-    if (environment.audience) {
-        params.set("audience", environment.audience);
-    }
-    if (scope) {
-        params.set("scope", scope);
-    }
-    return requestToken(environment.authority, params);
-};
-exports.requestPasswordToken = requestPasswordToken;
-const requestRefreshToken = async (environment) => {
-    if (!environment.authority || !environment.refreshToken) {
-        return undefined;
-    }
-    const params = new URLSearchParams({
-        grant_type: "refresh_token",
-        refresh_token: environment.refreshToken,
-    });
-    if (environment.refreshTokenParameters) {
-        for (const [key, value] of Object.entries(environment.refreshTokenParameters)) {
-            params.set(key, String(value));
-        }
-    }
-    if (!params.has("client_id") && environment.clientId) {
-        params.set("client_id", environment.clientId);
-    }
-    if (environment.clientSecret) {
-        params.set("client_secret", environment.clientSecret);
-    }
-    if (environment.audience && !params.has("audience")) {
-        params.set("audience", environment.audience);
-    }
-    return requestToken(environment.authority, params);
-};
-const getAccessToken = async (environment) => {
-    const envName = environment.name;
-    const shouldCache = environment.cacheAuthenticationToken !== false && Boolean(envName);
-    const cached = shouldCache && envName ? await (0, keychain_1.getCmTokens)(envName) : undefined;
-    if (cached?.accessToken) {
-        return cached.accessToken;
-    }
-    if (cached?.refreshToken) {
-        const refreshed = await requestRefreshToken({
-            ...environment,
-            refreshToken: cached.refreshToken,
-            refreshTokenParameters: cached.refreshTokenParameters,
-        });
-        if (refreshed?.accessToken) {
-            if (shouldCache && envName) {
-                await (0, keychain_1.setCmTokens)(envName, {
-                    accessToken: refreshed.accessToken,
-                    refreshToken: refreshed.refreshToken ?? cached.refreshToken,
-                    refreshTokenParameters: cached.refreshTokenParameters,
-                    expiresIn: refreshed.expiresIn,
-                    lastUpdated: new Date().toISOString(),
-                });
-            }
-            return refreshed.accessToken;
-        }
-    }
-    if (environment.accessToken) {
-        return environment.accessToken;
-    }
-    const refreshed = await requestRefreshToken(environment);
-    if (refreshed?.accessToken) {
-        if (shouldCache && envName) {
-            await (0, keychain_1.setCmTokens)(envName, {
-                accessToken: refreshed.accessToken,
-                refreshToken: refreshed.refreshToken ?? environment.refreshToken,
-                refreshTokenParameters: environment.refreshTokenParameters,
-                expiresIn: refreshed.expiresIn,
-                lastUpdated: new Date().toISOString(),
-            });
-        }
-        return refreshed.accessToken;
-    }
-    if (environment.useClientCredentials) {
-        const token = await (0, exports.requestClientCredentialsToken)(environment);
-        if (shouldCache && envName) {
-            await (0, keychain_1.setCmTokens)(envName, {
-                accessToken: token.accessToken,
-                refreshToken: token.refreshToken,
-                refreshTokenParameters: environment.refreshTokenParameters,
-                expiresIn: token.expiresIn,
-                lastUpdated: new Date().toISOString(),
-            });
-        }
-        return token.accessToken;
-    }
-    return undefined;
-};
-exports.getAccessToken = getAccessToken;

package/dist/serialization/sitecore-api/graphql.d.ts

@@ -1,12 +0,0 @@
-/**
- * Management GraphQL transport for serialization commands.
- *
- * Thin wrapper over `src/shared/graphql.ts` — supplies the Management
- * service path and label. Parallels `src/recipe/api/graphql.ts` which
- * targets the Authoring endpoint.
- */
-import type { EnvironmentConfiguration } from "../../config";
-import { type GraphQLRequestOptions } from "../../shared/graphql";
-export type { GraphQLRequestOptions };
-export declare const runGraphQL: <T>(environment: EnvironmentConfiguration, query: string, variables?: Record<string, unknown>, options?: GraphQLRequestOptions) => Promise<T>;
-//# sourceMappingURL=graphql.d.ts.map

package/dist/serialization/sitecore-api/graphql.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"graphql.d.ts","sourceRoot":"","sources":["../../../src/serialization/sitecore-api/graphql.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,EAAsB,KAAK,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAKlF,YAAY,EAAE,qBAAqB,EAAE,CAAC;AAEtC,eAAO,MAAM,UAAU,GAAI,CAAC,EAC1B,aAAa,wBAAwB,EACrC,OAAO,MAAM,EACb,YAAY,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,UAAU,qBAAqB,KAC9B,OAAO,CAAC,CAAC,CAYT,CAAC"}

package/dist/serialization/sitecore-api/history.d.ts

@@ -1,9 +0,0 @@
-import { EnvironmentConfiguration } from "../../config";
-import { HistoryEntry } from "../types";
-import { GraphQLRequestOptions } from "./graphql";
-export declare const fetchHistoryTimestamp: (environment: EnvironmentConfiguration, options?: GraphQLRequestOptions) => Promise<string>;
-export declare const fetchHistoryEntries: (environment: EnvironmentConfiguration, timestamp: string, options?: GraphQLRequestOptions) => Promise<{
-    timestamp: string;
-    entries: HistoryEntry[];
-}>;
-//# sourceMappingURL=history.d.ts.map

package/dist/serialization/sitecore-api/history.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../../src/serialization/sitecore-api/history.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAc,MAAM,WAAW,CAAC;AAuB9D,eAAO,MAAM,qBAAqB,GAChC,aAAa,wBAAwB,EACrC,UAAU,qBAAqB,KAC9B,OAAO,CAAC,MAAM,CAQhB,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,aAAa,wBAAwB,EACrC,WAAW,MAAM,EACjB,UAAU,qBAAqB,KAC9B,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,EAAE,CAAA;CAAE,CAYxD,CAAC"}

package/dist/serialization/sitecore-api/index.d.ts

@@ -1,7 +0,0 @@
-export * from "./auth";
-export * from "./items";
-export * from "./history";
-export * from "./roles";
-export * from "./users";
-export * from "./publish";
-//# sourceMappingURL=index.d.ts.map

package/dist/serialization/sitecore-api/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/serialization/sitecore-api/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC"}

package/dist/serialization/sitecore-api/index.js

@@ -1,22 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./auth"), exports);
-__exportStar(require("./items"), exports);
-__exportStar(require("./history"), exports);
-__exportStar(require("./roles"), exports);
-__exportStar(require("./users"), exports);
-__exportStar(require("./publish"), exports);

package/dist/serialization/sitecore-api/items.d.ts

@@ -1,8 +0,0 @@
-import { ItemData, ItemMetadata } from "../types";
-import { EnvironmentConfiguration } from "../../config";
-import { FieldFilterSet } from "../field-filter";
-import { GraphQLRequestOptions } from "./graphql";
-export declare const fetchItemMetadata: (environment: EnvironmentConfiguration, database: string, pathOrId: string, scope: string, fieldFilter: FieldFilterSet, useDebugSignatures: boolean, options?: GraphQLRequestOptions) => Promise<ItemMetadata[]>;
-export declare const fetchItemData: (environment: EnvironmentConfiguration, database: string, pathOrId: string, scope: string, fieldFilter: FieldFilterSet, options?: GraphQLRequestOptions) => Promise<ItemData[]>;
-export declare const executeSerializationCommands: (environment: EnvironmentConfiguration, commands: unknown[], minimumLogLevel: string, options?: GraphQLRequestOptions) => Promise<unknown[]>;
-//# sourceMappingURL=items.d.ts.map

package/dist/serialization/sitecore-api/items.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"items.d.ts","sourceRoot":"","sources":["../../../src/serialization/sitecore-api/items.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAGlD,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAc,MAAM,WAAW,CAAC;AAqG9D,eAAO,MAAM,iBAAiB,GAC5B,aAAa,wBAAwB,EACrC,UAAU,MAAM,EAChB,UAAU,MAAM,EAChB,OAAO,MAAM,EACb,aAAa,cAAc,EAC3B,oBAAoB,OAAO,EAC3B,UAAU,qBAAqB,KAC9B,OAAO,CAAC,YAAY,EAAE,CAmCxB,CAAC;AAEF,eAAO,MAAM,aAAa,GACxB,aAAa,wBAAwB,EACrC,UAAU,MAAM,EAChB,UAAU,MAAM,EAChB,OAAO,MAAM,EACb,aAAa,cAAc,EAC3B,UAAU,qBAAqB,KAC9B,OAAO,CAAC,QAAQ,EAAE,CAgBpB,CAAC;AAEF,eAAO,MAAM,4BAA4B,GACvC,aAAa,wBAAwB,EACrC,UAAU,OAAO,EAAE,EACnB,iBAAiB,MAAM,EACvB,UAAU,qBAAqB,KAC9B,OAAO,CAAC,OAAO,EAAE,CAWnB,CAAC"}

package/dist/serialization/sitecore-api/items.js

@@ -1,132 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.executeSerializationCommands = exports.fetchItemData = exports.fetchItemMetadata = void 0;
-const item_path_1 = require("../item-path");
-const signature_1 = require("../signature");
-const errors_1 = require("../../shared/errors");
-const graphql_1 = require("./graphql");
-const serializeMetadataFragment = `
-  serialize(path: $path, database: $database, scope: $scope, excludedFieldIds: $excludedFieldIds) {
-    id
-    parentId
-    templateId
-    path
-    hasChildren
-    dataSignature
-  }
-`;
-const serializeMetadataDebugFragment = serializeMetadataFragment.replace("dataSignature", "dataSignature(debug: true)");
-const serializeDataFragment = `
-  serialize(path: $path, database: $database, scope: $scope, excludedFieldIds: $excludedFieldIds) {
-    data
-  }
-`;
-const executeSerializationCommandsMutation = `
-mutation($commands: [ItemCommand], $minimumLogLevel: LogLevel) {
-  executeSerializationCommands(commands: $commands, minimumLogLevel: $minimumLogLevel) {
-    success
-    name
-    messages {
-      logLevel
-      eventID { id name }
-      message
-    }
-  }
-}`;
-const mapScope = (scope) => {
-    if (scope.toLowerCase() === "singleitem") {
-        return "SingleItem";
-    }
-    if (scope.toLowerCase() === "itemandchildren") {
-        return "ItemAndChildren";
-    }
-    if (scope.toLowerCase() === "descendantsonly") {
-        return "DescendantsOnly";
-    }
-    return "ItemAndDescendants";
-};
-const parseItemData = (data, database) => {
-    if (!data || typeof data !== "string") {
-        throw (0, errors_1.createCliError)("GraphQL response did not contain serialized item data.", "UNKNOWN");
-    }
-    const parsed = JSON.parse(data);
-    const versions = parsed.versions?.map((version) => ({
-        language: version.language,
-        version: version.version,
-        fields: version.fields.map((field) => ({
-            fieldId: field.fieldId,
-            nameHint: field.nameHint,
-            value: field.value ?? "",
-            blobId: field.blobId ?? null,
-        })),
-    })) ?? [];
-    const item = {
-        id: parsed.id,
-        parentId: parsed.parentId,
-        templateId: parsed.templateId,
-        path: item_path_1.ItemPath.fromPathString(parsed.path.toString()),
-        name: parsed.name,
-        branchId: parsed.branchId,
-        database,
-        sharedFields: parsed.sharedFields.map((field) => ({
-            fieldId: field.fieldId,
-            nameHint: field.nameHint,
-            value: field.value ?? "",
-            blobId: field.blobId ?? null,
-        })),
-        unversionedFields: parsed.unversionedFields.map((language) => ({
-            language: language.language,
-            fields: language.fields.map((field) => ({
-                fieldId: field.fieldId,
-                nameHint: field.nameHint,
-                value: field.value ?? "",
-                blobId: field.blobId ?? null,
-            })),
-        })),
-        versions,
-        dataSignature: parsed.dataSignature,
-    };
-    if (!item.dataSignature) {
-        const base = (0, signature_1.createDataSignatureBase)(item);
-        item.dataSignature = (0, signature_1.createSignature)(base) ?? "";
-    }
-    return item;
-};
-const fetchItemMetadata = async (environment, database, pathOrId, scope, fieldFilter, useDebugSignatures, options) => {
-    const query = `query($path: String!, $database: String!, $scope: TreeScope!, $excludedFieldIds: [String]) { ${useDebugSignatures ? serializeMetadataDebugFragment : serializeMetadataFragment} }`;
-    const data = await (0, graphql_1.runGraphQL)(environment, query, {
-        path: pathOrId,
-        database,
-        scope: mapScope(scope),
-        excludedFieldIds: Array.from(fieldFilter.excludes),
-    }, options);
-    return data.serialize.map((item) => ({
-        id: item.id,
-        parentId: item.parentId,
-        templateId: item.templateId,
-        path: item_path_1.ItemPath.fromPathString(item.path),
-        hasChildren: item.hasChildren,
-        dataSignature: item.dataSignature,
-        database,
-    }));
-};
-exports.fetchItemMetadata = fetchItemMetadata;
-const fetchItemData = async (environment, database, pathOrId, scope, fieldFilter, options) => {
-    const query = `query($path: String!, $database: String!, $scope: TreeScope!, $excludedFieldIds: [String]) { ${serializeDataFragment} }`;
-    const data = await (0, graphql_1.runGraphQL)(environment, query, {
-        path: pathOrId,
-        database,
-        scope: mapScope(scope),
-        excludedFieldIds: Array.from(fieldFilter.excludes),
-    }, options);
-    return data.serialize.map((entry) => parseItemData(entry.data, database));
-};
-exports.fetchItemData = fetchItemData;
-const executeSerializationCommands = async (environment, commands, minimumLogLevel, options) => {
-    const data = await (0, graphql_1.runGraphQL)(environment, executeSerializationCommandsMutation, {
-        commands,
-        minimumLogLevel,
-    }, options);
-    return data.executeSerializationCommands;
-};
-exports.executeSerializationCommands = executeSerializationCommands;