@sitecoreai-labs/sitecoreai-cli 0.0.4 → 0.1.0

package/dist/commands/webhook/create.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookCreateCommand = void 0;
+const commander_1 = require("commander");
+const create_1 = require("../../webhooks/tasks/create");
+const shared_1 = require("../shared");
+const shared_2 = require("./shared");
+const parseEventCategory = (value) => {
+    if (!["item", "publish", "workflow"].includes(value)) {
+        throw new Error(`Invalid --event '${value}'. Use item | publish | workflow.`);
+    }
+    return value;
+};
+const parseActionKind = (value) => {
+    if (!["submit", "validation"].includes(value)) {
+        throw new Error(`Invalid --action '${value}'. Use submit | validation.`);
+    }
+    return value;
+};
+const parseSerializationType = (value) => {
+    if (!["JSON", "XML"].includes(value)) {
+        throw new Error(`Invalid --serialization-type '${value}'. Use JSON | XML.`);
+    }
+    return value;
+};
+const createWebhookCreateCommand = () => {
+    const command = new commander_1.Command("create")
+        .description("Create a webhook handler — pick an event category and supply the URL + event names (or workflow state for workflow webhooks)")
+        .requiredOption("--name <name>", "Sitecore item name for the new handler")
+        .requiredOption("--url <url>", "Webhook target URL")
+        .requiredOption("--event <category>", "Event category: item | publish | workflow", parseEventCategory)
+        .option("--events <names>", "Event-type names for item/publish flavors (comma-separated or repeated). Examples: item:saved, item:deleted, publish:end", shared_1.collectList, [])
+        .option("--on-state <path>", "Workflow state or command path (workflow flavor only). The action item is created at <on-state>/Actions/<name>.")
+        .option("--action <kind>", "Workflow action kind: submit (default, runs after transition) | validation (synchronous gate)", parseActionKind)
+        .option("--description <text>", "Optional description recorded on the handler")
+        .option("--authorization <path>", "Absolute path to an Authorization item under /sitecore/system/Settings/Webhooks/Authorizations")
+        .option("--serialization-type <type>", "Payload serialization: JSON (default) | XML", parseSerializationType)
+        .option("--parent-path <path>", "Override parent path for item/publish handlers (default: /sitecore/system/Webhooks)")
+        .option("--disabled", "Create the handler disabled (default: enabled)")
+        .action(async (options) => {
+        const enabled = options.disabled === true ? false : undefined;
+        await (0, create_1.runWebhookCreate)({
+            ...options,
+            ...(enabled !== undefined && { enabled }),
+        });
+    });
+    (0, shared_2.addWebhookReadOptions)(command);
+    (0, shared_1.addWhatIfOption)(command);
+    (0, shared_1.addAllowWriteOption)(command);
+    return command;
+};
+exports.createWebhookCreateCommand = createWebhookCreateCommand;

package/dist/commands/webhook/delete.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWebhookDeleteCommand: () => Command;

package/dist/commands/webhook/delete.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookDeleteCommand = void 0;
+const commander_1 = require("commander");
+const delete_1 = require("../../webhooks/tasks/delete");
+const shared_1 = require("../shared");
+const shared_2 = require("./shared");
+const createWebhookDeleteCommand = () => {
+    const command = new commander_1.Command("delete")
+        .description("Delete a webhook handler by item ID or path")
+        .argument("<webhook>", "Item GUID or content-tree path of the handler")
+        .action(async (webhook, options) => {
+        await (0, delete_1.runWebhookDelete)({ ...options, webhook });
+    });
+    (0, shared_2.addWebhookReadOptions)(command);
+    (0, shared_1.addWhatIfOption)(command);
+    (0, shared_1.addAllowWriteOption)(command);
+    return command;
+};
+exports.createWebhookDeleteCommand = createWebhookDeleteCommand;

package/dist/commands/webhook/event-types.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWebhookEventTypesCommand: () => Command;

package/dist/commands/webhook/event-types.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookEventTypesCommand = void 0;
+const commander_1 = require("commander");
+const event_types_1 = require("../../webhooks/tasks/event-types");
+const shared_1 = require("./shared");
+const createWebhookEventTypesCommand = () => {
+    const command = new commander_1.Command("event-types")
+        .description("List the event-type catalog the tenant accepts (the strings you pass to `--events` on `webhook create`)")
+        .option("--category <name>", "Limit to a single branch: item | publish", (value) => {
+        if (!["item", "publish"].includes(value)) {
+            throw new Error(`Invalid --category '${value}'. Use item | publish.`);
+        }
+        return value;
+    })
+        .action(async (options) => {
+        await (0, event_types_1.runWebhookEventTypes)(options);
+    });
+    (0, shared_1.addWebhookReadOptions)(command);
+    return command;
+};
+exports.createWebhookEventTypesCommand = createWebhookEventTypesCommand;

package/dist/commands/webhook/index.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWebhookCommand: () => Command;

package/dist/commands/webhook/index.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookCommand = void 0;
+const commander_1 = require("commander");
+const create_1 = require("./create");
+const delete_1 = require("./delete");
+const event_types_1 = require("./event-types");
+const inspect_1 = require("./inspect");
+const list_1 = require("./list");
+const createWebhookCommand = () => {
+    const command = new commander_1.Command("webhook").description("Manage Sitecore webhook handlers — item/publish event handlers and workflow submit/validation actions");
+    command.addCommand((0, list_1.createWebhookListCommand)());
+    command.addCommand((0, inspect_1.createWebhookInspectCommand)());
+    command.addCommand((0, event_types_1.createWebhookEventTypesCommand)());
+    command.addCommand((0, create_1.createWebhookCreateCommand)());
+    command.addCommand((0, delete_1.createWebhookDeleteCommand)());
+    command.addHelpText("after", "\nExamples:\n" +
+        "  $ scai content workflow webhook list\n" +
+        "  $ scai content workflow webhook list --event-type publish --enabled-only --json\n" +
+        "  $ scai content workflow webhook event-types\n" +
+        "  $ scai content workflow webhook event-types --category publish --json\n" +
+        "  $ scai content workflow webhook inspect /sitecore/system/Webhooks/CI-Notify\n" +
+        "  $ scai content workflow webhook create --name CI-Notify --url https://ci.example.com/hook \\\n" +
+        "        --event item --events item:saved,item:deleted\n" +
+        "  $ scai content workflow webhook create --name PublishHook --url https://ci.example.com/publish \\\n" +
+        "        --event publish --events publish:end\n" +
+        "  $ scai content workflow webhook create --name NotifyReviewer --url https://ci.example.com/wf \\\n" +
+        "        --event workflow --on-state '/sitecore/system/Workflows/Editorial/In Review' \\\n" +
+        "        --action submit --what-if\n" +
+        "  $ scai content workflow webhook delete /sitecore/system/Webhooks/CI-Notify\n");
+    return command;
+};
+exports.createWebhookCommand = createWebhookCommand;

package/dist/commands/webhook/inspect.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWebhookInspectCommand: () => Command;

package/dist/commands/webhook/inspect.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookInspectCommand = void 0;
+const commander_1 = require("commander");
+const inspect_1 = require("../../webhooks/tasks/inspect");
+const shared_1 = require("./shared");
+const createWebhookInspectCommand = () => {
+    const command = new commander_1.Command("inspect")
+        .description("Show a webhook handler's URL, events, authorization, and other fields")
+        .argument("<webhook>", "Item GUID or content-tree path of the handler")
+        .action(async (webhook, options) => {
+        await (0, inspect_1.runWebhookInspect)({ ...options, webhook });
+    });
+    (0, shared_1.addWebhookReadOptions)(command);
+    return command;
+};
+exports.createWebhookInspectCommand = createWebhookInspectCommand;

package/dist/commands/webhook/list.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWebhookListCommand: () => Command;

package/dist/commands/webhook/list.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookListCommand = void 0;
+const commander_1 = require("commander");
+const list_1 = require("../../webhooks/tasks/list");
+const shared_1 = require("./shared");
+const createWebhookListCommand = () => {
+    const command = new commander_1.Command("list")
+        .description("List webhook handler items under the webhook tree")
+        .option("--root <path>", "Override the content-tree root (default: /sitecore/system/Webhooks; for workflow webhooks pass a workflow state path)")
+        .option("--event-type <category>", "Filter by category: item | publish | workflow", (value) => {
+        if (!["item", "publish", "workflow"].includes(value)) {
+            throw new Error(`Invalid --event-type '${value}'. Use item | publish | workflow.`);
+        }
+        return value;
+    })
+        .option("--enabled-only", "Return only enabled handlers")
+        .action(async (options) => {
+        await (0, list_1.runWebhookList)(options);
+    });
+    (0, shared_1.addWebhookReadOptions)(command);
+    return command;
+};
+exports.createWebhookListCommand = createWebhookListCommand;

package/dist/commands/webhook/shared.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const addWebhookReadOptions: (command: Command) => Command;

package/dist/commands/webhook/shared.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.addWebhookReadOptions = void 0;
+const shared_1 = require("../shared");
+const addWebhookReadOptions = (command) => {
+    (0, shared_1.addEnvironmentOption)(command);
+    (0, shared_1.addConfigOption)(command);
+    (0, shared_1.addVerbosityOptions)(command);
+    return command;
+};
+exports.addWebhookReadOptions = addWebhookReadOptions;

package/dist/commands/workflow/advance.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWorkflowAdvanceCommand: () => Command;

package/dist/commands/workflow/advance.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWorkflowAdvanceCommand = void 0;
+const commander_1 = require("commander");
+const advance_1 = require("../../workflow/tasks/advance");
+const shared_1 = require("../shared");
+const shared_2 = require("./shared");
+const createWorkflowAdvanceCommand = () => {
+    const command = new commander_1.Command("advance")
+        .description("Advance a single item through one workflow transition (counterpart to the cleanup batch sweep)")
+        .argument("<item>", "Item GUID or content-tree path")
+        .requiredOption("--command <name>", "Workflow command display name (e.g. 'Submit', 'Approve'); matched case-insensitively against commands available at the item's current state")
+        .option("--comments <text>", "Comment recorded with the transition (audit trail)")
+        .action(async (item, options) => {
+        await (0, advance_1.runWorkflowAdvance)({ ...options, item });
+    });
+    (0, shared_2.addWorkflowReadOptions)(command);
+    (0, shared_1.addWhatIfOption)(command);
+    (0, shared_1.addAllowWriteOption)(command);
+    return command;
+};
+exports.createWorkflowAdvanceCommand = createWorkflowAdvanceCommand;

package/dist/commands/workflow/apply.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWorkflowApplyCommand: () => Command;

package/dist/commands/workflow/apply.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWorkflowApplyCommand = void 0;
+const commander_1 = require("commander");
+const apply_1 = require("../../workflow/tasks/apply");
+const shared_1 = require("../shared");
+const shared_2 = require("./shared");
+const createWorkflowApplyCommand = () => {
+    const command = new commander_1.Command("apply")
+        .description("Attach a workflow to an item (sets __Workflow + __Workflow state directly). Bypasses the workflow engine — use for content authored before the workflow existed or to recover orphaned items.")
+        .argument("<item>", "Item GUID or content-tree path")
+        .requiredOption("--workflow <ref>", "Workflow GUID, content-tree path, or display/item name (case-insensitive)")
+        .option("--state <ref>", "Override the target state (GUID or name). Defaults to the workflow's __Initial state.")
+        .action(async (item, options) => {
+        await (0, apply_1.runWorkflowApply)({ ...options, item });
+    });
+    (0, shared_2.addWorkflowReadOptions)(command);
+    (0, shared_1.addWhatIfOption)(command);
+    (0, shared_1.addAllowWriteOption)(command);
+    return command;
+};
+exports.createWorkflowApplyCommand = createWorkflowApplyCommand;

package/dist/commands/workflow/assigned.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWorkflowAssignedCommand: () => Command;

package/dist/commands/workflow/assigned.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWorkflowAssignedCommand = void 0;
+const commander_1 = require("commander");
+const assigned_1 = require("../../workflow/tasks/assigned");
+const shared_1 = require("./shared");
+const createWorkflowAssignedCommand = () => {
+    const command = new commander_1.Command("assigned")
+        .description("Find items currently in a given workflow state (workbox-style query)")
+        .requiredOption("--state <stateId>", "Workflow state GUID")
+        .option("--field <name>", "Override the search field (default: '__workflow state'; some tenants use '__workflow_state')")
+        .option("--index <name>", "Override the search index (default: sitecore_master_index)")
+        .option("--limit <count>", "Cap on items returned (default: 500)", (v) => parseInt(v, 10))
+        .option("--page-size <count>", "Search backend page size (default: 100)", (v) => parseInt(v, 10))
+        .action(async (options) => {
+        await (0, assigned_1.runWorkflowAssigned)(options);
+    });
+    (0, shared_1.addWorkflowReadOptions)(command);
+    return command;
+};
+exports.createWorkflowAssignedCommand = createWorkflowAssignedCommand;

package/dist/commands/workflow/index.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWorkflowCommand: () => Command;

package/dist/commands/workflow/index.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWorkflowCommand = void 0;
+const commander_1 = require("commander");
+const advance_1 = require("./advance");
+const apply_1 = require("./apply");
+const assigned_1 = require("./assigned");
+const inspect_1 = require("./inspect");
+const list_commands_1 = require("./list-commands");
+const list_defs_1 = require("./list-defs");
+const reset_1 = require("./reset");
+const status_1 = require("./status");
+const createWorkflowCommand = () => {
+    const command = new commander_1.Command("workflow").description("Inspect and operate on Sitecore workflows — current state, available commands, transitions");
+    command.addCommand((0, inspect_1.createWorkflowInspectCommand)());
+    command.addCommand((0, list_commands_1.createWorkflowListCommandsCommand)());
+    command.addCommand((0, list_defs_1.createWorkflowListDefsCommand)());
+    command.addCommand((0, status_1.createWorkflowStatusCommand)());
+    command.addCommand((0, assigned_1.createWorkflowAssignedCommand)());
+    command.addCommand((0, advance_1.createWorkflowAdvanceCommand)());
+    command.addCommand((0, reset_1.createWorkflowResetCommand)());
+    command.addCommand((0, apply_1.createWorkflowApplyCommand)());
+    command.addHelpText("after", "\nExamples:\n" +
+        "  $ scai content workflow inspect 'Blog Article Approval'   # by display name\n" +
+        "  $ scai content workflow inspect /sitecore/content/MySite/Home\n" +
+        "  $ scai content workflow list-commands /sitecore/content/MySite/Home\n" +
+        "  $ scai content workflow list-defs\n" +
+        "  $ scai content workflow status --site <siteId>\n" +
+        "  $ scai content workflow assigned --state <stateId> --limit 100\n" +
+        "  $ scai content workflow advance /sitecore/content/MySite/Home --command Approve\n" +
+        "  $ scai content workflow reset /sitecore/content/MySite/Home --what-if\n" +
+        "  $ scai content workflow apply /sitecore/content/MySite/Home --workflow 'Blog Article Approval'\n");
+    return command;
+};
+exports.createWorkflowCommand = createWorkflowCommand;

package/dist/commands/workflow/inspect.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWorkflowInspectCommand: () => Command;

package/dist/commands/workflow/inspect.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWorkflowInspectCommand = void 0;
+const commander_1 = require("commander");
+const inspect_1 = require("../../workflow/tasks/inspect");
+const shared_1 = require("./shared");
+const createWorkflowInspectCommand = () => {
+    const command = new commander_1.Command("inspect")
+        .description("Show an item's workflow assignment — current workflow, state, and the commands available from here")
+        .argument("<item>", "Workflow item GUID, content-tree path (e.g. /sitecore/system/Workflows/Sample Workflow), workflow display name (e.g. 'Sample Workflow'), or an item under workflow")
+        .action(async (item, options) => {
+        await (0, inspect_1.runWorkflowInspect)({ ...options, item });
+    });
+    (0, shared_1.addWorkflowReadOptions)(command);
+    return command;
+};
+exports.createWorkflowInspectCommand = createWorkflowInspectCommand;

package/dist/commands/workflow/list-commands.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWorkflowListCommandsCommand: () => Command;

package/dist/commands/workflow/list-commands.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWorkflowListCommandsCommand = void 0;
+const commander_1 = require("commander");
+const list_commands_1 = require("../../workflow/tasks/list-commands");
+const shared_1 = require("./shared");
+const createWorkflowListCommandsCommand = () => {
+    const command = new commander_1.Command("list-commands")
+        .description("List the workflow commands available on an item at its current state")
+        .argument("<item>", "Item GUID or content-tree path (e.g. /sitecore/content/MySite/Home)")
+        .action(async (item, options) => {
+        await (0, list_commands_1.runWorkflowListCommands)({ ...options, item });
+    });
+    (0, shared_1.addWorkflowReadOptions)(command);
+    return command;
+};
+exports.createWorkflowListCommandsCommand = createWorkflowListCommandsCommand;

package/dist/commands/workflow/list-defs.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWorkflowListDefsCommand: () => Command;

package/dist/commands/workflow/list-defs.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWorkflowListDefsCommand = void 0;
+const commander_1 = require("commander");
+const list_defs_1 = require("../../workflow/tasks/list-defs");
+const shared_1 = require("./shared");
+const createWorkflowListDefsCommand = () => {
+    const command = new commander_1.Command("list-defs")
+        .description("List workflow definitions on the tenant (walks /sitecore/system/Workflows by default)")
+        .option("--root <path>", "Override the workflows root path (default: /sitecore/system/Workflows)")
+        .action(async (options) => {
+        await (0, list_defs_1.runWorkflowListDefs)(options);
+    });
+    (0, shared_1.addWorkflowReadOptions)(command);
+    return command;
+};
+exports.createWorkflowListDefsCommand = createWorkflowListDefsCommand;

package/dist/commands/workflow/reset.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWorkflowResetCommand: () => Command;

package/dist/commands/workflow/reset.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWorkflowResetCommand = void 0;
+const commander_1 = require("commander");
+const reset_1 = require("../../workflow/tasks/reset");
+const shared_1 = require("../shared");
+const shared_2 = require("./shared");
+const createWorkflowResetCommand = () => {
+    const command = new commander_1.Command("reset")
+        .description("Force an item back to its workflow's initial state via direct __Workflow state field write. Bypasses validation + submit actions — use as an admin escape hatch, not a routine transition.")
+        .argument("<item>", "Item GUID or content-tree path")
+        .action(async (item, options) => {
+        await (0, reset_1.runWorkflowReset)({ ...options, item });
+    });
+    (0, shared_2.addWorkflowReadOptions)(command);
+    (0, shared_1.addWhatIfOption)(command);
+    (0, shared_1.addAllowWriteOption)(command);
+    return command;
+};
+exports.createWorkflowResetCommand = createWorkflowResetCommand;

package/dist/commands/workflow/shared.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+/** Common option set for read-side `scai content workflow *` commands. */
+export declare const addWorkflowReadOptions: (command: Command) => Command;

package/dist/commands/workflow/shared.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.addWorkflowReadOptions = void 0;
+const shared_1 = require("../shared");
+/** Common option set for read-side `scai content workflow *` commands. */
+const addWorkflowReadOptions = (command) => {
+    (0, shared_1.addEnvironmentOption)(command);
+    (0, shared_1.addConfigOption)(command);
+    (0, shared_1.addVerbosityOptions)(command);
+    return command;
+};
+exports.addWorkflowReadOptions = addWorkflowReadOptions;

package/dist/commands/workflow/status.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const createWorkflowStatusCommand: () => Command;

package/dist/commands/workflow/status.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWorkflowStatusCommand = void 0;
+const commander_1 = require("commander");
+const status_1 = require("../../workflow/tasks/status");
+const shared_1 = require("./shared");
+const createWorkflowStatusCommand = () => {
+    const command = new commander_1.Command("status")
+        .description("Show per-site workflow rollup — workflows on the site, their states, and page counts per state")
+        .requiredOption("--site <siteId>", "Site identifier (GUID)")
+        .option("--content-environment-id <id>", "Optional Content Services environment ID (e.g. 'main')")
+        .action(async (options) => {
+        await (0, status_1.runWorkflowStatus)(options);
+    });
+    (0, shared_1.addWorkflowReadOptions)(command);
+    return command;
+};
+exports.createWorkflowStatusCommand = createWorkflowStatusCommand;

package/dist/config/env-overrides.d.ts

@@ -1,4 +1,3 @@
 import type { EnvironmentConfiguration, RootConfigurationFile } from "./types";
 export declare const applyEnvOverrides: (envName: string, env: EnvironmentConfiguration, includeGlobal: boolean) => EnvironmentConfiguration;
 export declare const stripAuthenticationTokensFromConfig: (config: RootConfigurationFile) => RootConfigurationFile;
-//# sourceMappingURL=env-overrides.d.ts.map

package/dist/config/env-overrides.js

@@ -61,17 +61,17 @@ const applyEnvOverrides = (envName, env, includeGlobal) => {
     if (clientId !== undefined) {
         overrides.clientId = clientId;
     }
-    const clientSecret = getEnvOverride(envName, "CLIENT_SECRET", includeGlobal);
-    if (clientSecret !== undefined) {
-        overrides.clientSecret = clientSecret;
-    }
+    // SITECOREAI_ENV_<ENV>_CLIENT_SECRET is NOT merged into a config field:
+    // secrets never live on the env profile. The auth layer reads that env
+    // var directly as tier 1 of secret resolution — see
+    // `resolveEnvClientSecret` in `shared/client-credential.ts`.
     const deployToken = getEnvOverride(envName, "DEPLOY_TOKEN", includeGlobal);
     if (deployToken !== undefined) {
         overrides.deployToken = deployToken;
     }
     // CM/admin access token override — useful when keychain storage is
     // unreliable (e.g. headless CI, sandboxed shells) or for one-off
-    // debugging. Read by `getAccessToken` in serialization/sitecore-api/auth.ts
+    // debugging. Read by `getAccessToken` in serialization/api/auth.ts
     // before falling through to client-credentials.
     const accessToken = getEnvOverride(envName, "ACCESS_TOKEN", includeGlobal);
     if (accessToken !== undefined) {
@@ -148,6 +148,22 @@ const applyEnvOverrides = (envName, env, includeGlobal) => {
             .map((s) => s.trim())
             .filter((s) => s.length > 0);
     }
+    // Page-template create root → `CompileContext.pageTemplatesRoot`.
+    const pageTemplatesRoot = getEnvOverride(envName, "PAGE_TEMPLATES_ROOT", includeGlobal);
+    if (pageTemplatesRoot !== undefined) {
+        overrides.pageTemplatesRoot = pageTemplatesRoot;
+    }
+    // Pages content-tree root → `CompileContext.pagesRoot`.
+    const pagesRoot = getEnvOverride(envName, "PAGES_ROOT", includeGlobal);
+    if (pagesRoot !== undefined) {
+        overrides.pagesRoot = pagesRoot;
+    }
+    // Placeholder Settings CREATE root → `CompileContext.placeholderSettingsRoot`.
+    // Distinct from PLACEHOLDER_SETTINGS_ROOTS (the plural walk list).
+    const placeholderSettingsRoot = getEnvOverride(envName, "PLACEHOLDER_SETTINGS_ROOT", includeGlobal);
+    if (placeholderSettingsRoot !== undefined) {
+        overrides.placeholderSettingsRoot = placeholderSettingsRoot;
+    }
     const organizationId = getEnvOverride(envName, "ORGANIZATION_ID", includeGlobal);
     if (organizationId !== undefined) {
         overrides.organizationId = organizationId;
@@ -171,6 +187,23 @@ const applyEnvOverrides = (envName, env, includeGlobal) => {
             overrides.environmentType = normalized;
         }
     }
+    // Publishing safety flags — read by `scai content publish` to decide
+    // production-tier gating and CI eligibility.
+    const production = toBoolean(getEnvOverride(envName, "PRODUCTION", includeGlobal));
+    if (production !== undefined) {
+        overrides.production = production;
+    }
+    const allowFullRepublish = toBoolean(getEnvOverride(envName, "ALLOW_FULL_REPUBLISH", includeGlobal));
+    if (allowFullRepublish !== undefined) {
+        overrides.allowFullRepublish = allowFullRepublish;
+    }
+    const allowedCiPipelines = getEnvOverride(envName, "ALLOWED_CI_PIPELINES", includeGlobal);
+    if (allowedCiPipelines !== undefined) {
+        overrides.allowedCiPipelines = allowedCiPipelines
+            .split(",")
+            .map((s) => s.trim())
+            .filter((s) => s.length > 0);
+    }
     return { ...env, ...overrides };
 };
 exports.applyEnvOverrides = applyEnvOverrides;
@@ -182,6 +215,9 @@ const stripAuthenticationTokens = (env) => {
     delete sanitized.expiresIn;
     delete sanitized.lastUpdated;
     delete sanitized.deployToken;
+    // `clientSecret` is intentionally not handled — it is no longer a
+    // field on `EnvironmentConfiguration`. Legacy configs that still carry
+    // it are scrubbed below.
     delete sanitized.clientSecret;
     return sanitized;
 };

package/dist/config/index.d.ts

@@ -1,5 +1,17 @@
-export type { EnvironmentConfiguration, RootConfiguration, RootConfigurationFile, SerializationModuleConfiguration, SerializationModuleConfigurationItems, SerializationRootConfiguration, Settings, UserConfiguration, } from "./types";
-export { resolveRootConfigurationPath } from "./paths";
+/**
+ * Public entry for `@sitecoreai-labs/sitecoreai-cli/config`.
+ *
+ * The scai root configuration model — reading, writing, validating, and
+ * environment-resolving `sitecoreai.cli.json`. SDK consumers that embed
+ * scai need this to resolve the same configuration the CLI does (which
+ * environment, which credentials, which recipe roots) instead of
+ * re-deriving it.
+ *
+ * Pure: no CLI dependencies, no stdout writes, no `process.exit`.
+ */
+export * from "./types";
 export { readRootConfigurationFile, writeRootConfigurationFile, mergeEnvironmentConfigurations, readRootConfiguration, } from "./root-config";
+export { resolveRootConfigurationPath } from "./paths";
+export { validateRootConfig, validateModuleConfig, formatValidationErrors, readJsonFile, } from "./validation";
 export { normalizeModuleConfiguration, readSerializationModules } from "./modules";
-//# sourceMappingURL=index.d.ts.map
+export { applyEnvOverrides, stripAuthenticationTokensFromConfig } from "./env-overrides";