@sitecoreai-labs/sitecoreai-cli 0.0.4 → 0.1.0

package/dist/deploy/tasks/deployments.js

@@ -8,14 +8,15 @@ const node_path_1 = __importDefault(require("node:path"));
 const promises_1 = __importDefault(require("node:fs/promises"));
 const adm_zip_1 = __importDefault(require("adm-zip"));
 const fast_glob_1 = __importDefault(require("fast-glob"));
-const api_1 = require("../../deploy/api");
+const deployments_1 = require("../../deploy/api/deployments");
+const deployment_logs_1 = require("../../deploy/api/deployment-logs");
 const errors_1 = require("../../shared/errors");
 const shared_1 = require("./shared");
 const deployment_result_1 = require("./deployment-result");
 const runDeployDeploymentsList = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
     const context = await (0, shared_1.getDeployContext)(options);
-    const result = await (0, api_1.fetchDeployments)({ accessToken: context.token, baseUrl: context.baseUrl }, {
+    const result = await (0, deployments_1.fetchDeployments)({ accessToken: context.token, baseUrl: context.baseUrl }, {
         status: options.status,
     });
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.deployments.list", result);
@@ -27,7 +28,7 @@ const runDeployDeploymentsGet = async (options) => {
     if (!options.id) {
         throw (0, shared_1.inputError)("Deployment ID is required. Use --id.");
     }
-    const result = await (0, api_1.fetchDeployment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id);
+    const result = await (0, deployments_1.fetchDeployment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.deployments.get", result);
 };
 exports.runDeployDeploymentsGet = runDeployDeploymentsGet;
@@ -35,7 +36,7 @@ const runDeployDeploymentsStatus = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
     const context = await (0, shared_1.getDeployContext)(options);
     const organizationId = await (0, shared_1.resolveDeployOrganizationId)(context);
-    const result = await (0, api_1.fetchDeploymentStatus)({ accessToken: context.token, baseUrl: context.baseUrl }, organizationId);
+    const result = await (0, deployments_1.fetchDeploymentStatus)({ accessToken: context.token, baseUrl: context.baseUrl }, organizationId);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.deployments.status", result);
 };
 exports.runDeployDeploymentsStatus = runDeployDeploymentsStatus;
@@ -54,7 +55,7 @@ const runDeployDeploymentsDeploy = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.deployDeployment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id, organizationId);
+    const result = await (0, deployments_1.deployDeployment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id, organizationId);
     (0, deployment_result_1.printDeploymentResult)(logger, context, "deploy.deployments.deploy", result);
 };
 exports.runDeployDeploymentsDeploy = runDeployDeploymentsDeploy;
@@ -73,7 +74,7 @@ const runDeployDeploymentsCancel = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.cancelDeployment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id, organizationId);
+    const result = await (0, deployments_1.cancelDeployment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id, organizationId);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.deployments.cancel", result);
 };
 exports.runDeployDeploymentsCancel = runDeployDeploymentsCancel;
@@ -93,14 +94,14 @@ const runDeployDeploymentsWatch = async (options) => {
     let lastStatus;
     const isTerminal = (value) => value !== undefined && value >= 2;
     if (options.whatIf) {
-        const deployment = await (0, api_1.fetchDeploymentV3)({ accessToken: context.token, baseUrl: context.baseUrl }, deploymentId, organizationId);
+        const deployment = await (0, deployments_1.fetchDeploymentV3)({ accessToken: context.token, baseUrl: context.baseUrl }, deploymentId, organizationId);
         (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.deployments.watch", deployment, {
             whatIf: true,
         });
         return;
     }
     while (true) {
-        const deployment = (await (0, api_1.fetchDeploymentV3)({ accessToken: context.token, baseUrl: context.baseUrl }, deploymentId, organizationId));
+        const deployment = (await (0, deployments_1.fetchDeploymentV3)({ accessToken: context.token, baseUrl: context.baseUrl }, deploymentId, organizationId));
         const calculatedStatus = typeof deployment.calculatedStatus === "number" ? deployment.calculatedStatus : undefined;
         const deploymentStatus = typeof deployment.deploymentStatus === "number" ? deployment.deploymentStatus : undefined;
         const postActionStatus = typeof deployment.postActionStatus === "number" ? deployment.postActionStatus : undefined;
@@ -119,7 +120,7 @@ const runDeployDeploymentsWatch = async (options) => {
             return;
         }
         if (timeoutMs !== undefined && Date.now() - start > timeoutMs) {
-            throw (0, errors_1.createCliError)(`Deployment watch timed out after ${timeoutSeconds} seconds.`, "DEPLOY_FAILED", { hint: "Use --timeout to increase the watch duration." });
+            throw (0, errors_1.createScaiError)(`Deployment watch timed out after ${timeoutSeconds} seconds.`, "DEPLOY_FAILED", { hint: "Use --timeout to increase the watch duration." });
         }
         await new Promise((resolve) => setTimeout(resolve, 5000));
     }
@@ -131,7 +132,7 @@ const runDeployDeploymentLogs = async (options) => {
     if (!options.id) {
         throw (0, shared_1.inputError)("Deployment ID is required. Use --id.");
     }
-    const result = await (0, api_1.fetchDeploymentLogs)(options.id, context.token);
+    const result = await (0, deployment_logs_1.fetchDeploymentLogs)(options.id, context.token);
     if (options.output) {
         const outputPath = node_path_1.default.resolve(options.output);
         await promises_1.default.writeFile(outputPath, JSON.stringify(result, null, 2), "utf8");
@@ -195,7 +196,7 @@ const runDeployDeploymentsSource = async (options) => {
         }
         content = await promises_1.default.readFile(sourcePath);
     }
-    const result = await (0, api_1.uploadDeploymentSource)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id, content, "application/zip", organizationId);
+    const result = await (0, deployments_1.uploadDeploymentSource)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id, content, "application/zip", organizationId);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.deployments.source", result);
 };
 exports.runDeployDeploymentsSource = runDeployDeploymentsSource;

package/dist/deploy/tasks/editing-host.d.ts

@@ -25,4 +25,3 @@ export declare const runDeployEditingHostList: (options: DeployEditingHostListOp
 export declare const runDeployEditingHostDelete: (options: DeployEditingHostDeleteOptions) => Promise<void>;
 export declare const runDeployEditingHostUpdate: (options: DeployEditingHostUpdateOptions) => Promise<void>;
 export declare const runDeployEditingHostDeploy: (options: DeployEditingHostDeployOptions) => Promise<void>;
-//# sourceMappingURL=editing-host.d.ts.map

package/dist/deploy/tasks/editing-host.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runDeployEditingHostDeploy = exports.runDeployEditingHostUpdate = exports.runDeployEditingHostDelete = exports.runDeployEditingHostList = exports.runDeployEditingHostCreate = void 0;
-const api_1 = require("../../deploy/api");
+const environments_1 = require("../../deploy/api/environments");
+const projects_1 = require("../../deploy/api/projects");
 const shared_1 = require("./shared");
 const deployment_result_1 = require("./deployment-result");
 const deployments_1 = require("./deployments");
@@ -35,16 +36,18 @@ const runDeployEditingHostCreate = async (options) => {
     if (!options.name) {
         throw (0, shared_1.inputError)("Editing host name is required. Use --name.");
     }
-    const cmEnvironment = (await (0, api_1.fetchEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.cmEnvironmentId));
+    const cmEnvironment = (await (0, environments_1.fetchEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.cmEnvironmentId));
     const projectId = (0, shared_1.resolveProjectIdValue)(cmEnvironment.projectId);
     if (!projectId) {
         throw (0, shared_1.inputError)("Project ID was not available on the CM environment.");
     }
     const tenantType = (0, shared_1.resolveTenantTypeValue)(cmEnvironment.tenantType) ?? 0;
     // Look up an existing editing host in this project with the same
-    // name + cmEnvironmentId before creating a new one.
-    const projectEnvironments = await (0, api_1.fetchProjectEnvironments)({ accessToken: context.token, baseUrl: context.baseUrl }, projectId);
-    const existing = matchExistingEditingHosts(projectEnvironments, options.name, options.cmEnvironmentId);
+    // name + cmEnvironmentId before creating a new one. Walk every page
+    // — the API paginates at 10 by default, so a project with >10
+    // environments would otherwise duplicate-create on every rerun.
+    const projectEnvironments = await (0, projects_1.fetchAllProjectEnvironments)({ accessToken: context.token, baseUrl: context.baseUrl }, projectId);
+    const existing = matchExistingEditingHosts(projectEnvironments.items, options.name, options.cmEnvironmentId);
     if (existing.length > 1) {
         throw (0, shared_1.inputError)(`Found ${existing.length} editing hosts named '${options.name}' in project ${projectId}. Resolve the duplicate before re-running, or pass --id to target a specific one.`);
     }
@@ -69,7 +72,7 @@ const runDeployEditingHostCreate = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.createProjectEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, projectId, body);
+    const result = await (0, projects_1.createProjectEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, projectId, body);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.editing-host.create", result);
 };
 exports.runDeployEditingHostCreate = runDeployEditingHostCreate;
@@ -96,6 +99,7 @@ const matchExistingEditingHosts = (listing, name, cmEnvironmentId) => {
 const runDeployEditingHostList = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
     const context = await (0, shared_1.getDeployContext)(options);
+    const apiOptions = { accessToken: context.token, baseUrl: context.baseUrl };
     let projectId;
     if (options.project) {
         projectId = await (0, shared_1.resolveDeployProjectId)(context, { project: options.project });
@@ -105,18 +109,44 @@ const runDeployEditingHostList = async (options) => {
     }
     else if (context.environmentId) {
         try {
-            const env = await (0, api_1.fetchEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, context.environmentId);
+            const env = await (0, environments_1.fetchEnvironment)(apiOptions, context.environmentId);
             projectId = (0, shared_1.resolveProjectIdValue)(env.projectId);
         }
         catch {
             projectId = undefined;
         }
     }
-    const result = projectId
-        ? await (0, api_1.fetchProjectEnvironments)({ accessToken: context.token, baseUrl: context.baseUrl }, projectId)
-        : await (0, api_1.fetchEnvironments)({ accessToken: context.token, baseUrl: context.baseUrl }, {});
-    const list = (0, shared_1.extractDeployEnvironmentList)(result);
-    const editingHosts = list.filter((environment) => {
+    // Default behaviour: walk every page. Editing-host lookups are
+    // almost always "show me all of them" — single-page semantics
+    // here are the same footgun as on `deploy environments list`,
+    // and worse because there's no useful name-by-name follow-up
+    // command to fall back on. Page through unless the operator
+    // explicitly opts into one-page mode via --page.
+    const walkAll = options.all !== false && options.page === undefined;
+    let listing;
+    if (projectId) {
+        listing = walkAll
+            ? await (0, projects_1.fetchAllProjectEnvironments)(apiOptions, projectId, options.pageSize ?? 50)
+            : await (async () => {
+                const page = await (0, projects_1.fetchProjectEnvironments)(apiOptions, projectId, {
+                    PageNumber: options.page,
+                    PageSize: options.pageSize,
+                });
+                return { items: (0, shared_1.extractDeployEnvironmentList)(page) };
+            })();
+    }
+    else {
+        listing = walkAll
+            ? await (0, environments_1.fetchAllEnvironments)(apiOptions, {}, options.pageSize ?? 50)
+            : await (async () => {
+                const page = await (0, environments_1.fetchEnvironments)(apiOptions, {
+                    PageNumber: options.page,
+                    PageSize: options.pageSize,
+                });
+                return { items: (0, shared_1.extractDeployEnvironmentList)(page) };
+            })();
+    }
+    const editingHosts = listing.items.filter((environment) => {
         const type = (0, shared_1.getEnvironmentType)(environment);
         return type ? type.toLowerCase().includes("eh") : false;
     });
@@ -132,7 +162,7 @@ const runDeployEditingHostDelete = async (options) => {
     const knownEditingHosts = new Set(context.editingHostEnvironmentIds ?? []);
     const isEditingHostProfile = context.environmentType === "eh" && context.environmentId === options.id;
     if (!knownEditingHosts.has(options.id) && !isEditingHostProfile) {
-        const env = (await (0, api_1.fetchEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id));
+        const env = (await (0, environments_1.fetchEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id));
         const type = (0, shared_1.resolveEnvironmentType)(env);
         if (type && type !== "eh") {
             throw (0, shared_1.inputError)(`Environment ${options.id} is not an editing host.`);
@@ -146,7 +176,7 @@ const runDeployEditingHostDelete = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.deleteEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id, options.force);
+    const result = await (0, environments_1.deleteEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id, options.force);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.editing-host.delete", result);
 };
 exports.runDeployEditingHostDelete = runDeployEditingHostDelete;
@@ -162,7 +192,7 @@ const runDeployEditingHostUpdate = async (options) => {
     const knownEditingHosts = new Set(context.editingHostEnvironmentIds ?? []);
     const isEditingHostProfile = context.environmentType === "eh" && context.environmentId === options.id;
     if (!knownEditingHosts.has(options.id) && !isEditingHostProfile) {
-        const env = (await (0, api_1.fetchEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id));
+        const env = (await (0, environments_1.fetchEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id));
         const type = (0, shared_1.resolveEnvironmentType)(env);
         if (type && type !== "eh") {
             throw (0, shared_1.inputError)(`Environment ${options.id} is not an editing host.`);
@@ -176,7 +206,7 @@ const runDeployEditingHostUpdate = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.updateEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id, { name: options.name });
+    const result = await (0, environments_1.updateEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id, { name: options.name });
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.editing-host.update", result);
 };
 exports.runDeployEditingHostUpdate = runDeployEditingHostUpdate;
@@ -197,13 +227,13 @@ const runDeployEditingHostDeploy = async (options) => {
     const knownEditingHosts = new Set(context.editingHostEnvironmentIds ?? []);
     const isEditingHostProfile = context.environmentType === "eh" && context.environmentId === options.id;
     if (!knownEditingHosts.has(options.id) && !isEditingHostProfile) {
-        const env = (await (0, api_1.fetchEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id));
+        const env = (await (0, environments_1.fetchEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id));
         const type = (0, shared_1.resolveEnvironmentType)(env);
         if (type && type !== "eh") {
             throw (0, shared_1.inputError)(`Environment ${options.id} is not an editing host.`);
         }
     }
-    const result = await (0, api_1.createEnvironmentDeployment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id, options.redeploy);
+    const result = await (0, environments_1.createEnvironmentDeployment)({ accessToken: context.token, baseUrl: context.baseUrl }, options.id, options.redeploy);
     const deploymentId = (0, deployment_result_1.printDeploymentResult)(logger, context, "deploy.editing-host.deploy", result);
     if (deploymentId && !options.noWatch) {
         await (0, deployments_1.runDeployDeploymentsWatch)({

package/dist/deploy/tasks/environments.d.ts

@@ -1,5 +1,5 @@
-import type { DeployBaseOptions, DeployEnvironmentCreateOptions, DeployEnvironmentDeleteOptions, DeployEnvironmentDeploymentsOptions, DeployEnvironmentOptions, DeployEnvironmentPromoteOptions, DeployEnvironmentRepositoryLinkOptions, DeployEnvironmentVariableOptions } from "./types";
-export declare const runDeployEnvironmentsList: (options: DeployEnvironmentOptions) => Promise<void>;
+import type { DeployBaseOptions, DeployEnvironmentCreateOptions, DeployEnvironmentDeleteOptions, DeployEnvironmentDeploymentsOptions, DeployEnvironmentOptions, DeployEnvironmentPromoteOptions, DeployEnvironmentRepositoryLinkOptions, DeployEnvironmentVariableOptions, DeployEnvironmentsListOptions } from "./types";
+export declare const runDeployEnvironmentsList: (options: DeployEnvironmentsListOptions) => Promise<void>;
 export declare const runDeployEnvironmentsLimitation: (options: DeployBaseOptions) => Promise<void>;
 export declare const runDeployEnvironmentsGet: (options: DeployEnvironmentOptions) => Promise<void>;
 export declare const runDeployEnvironmentsCreate: (options: DeployEnvironmentCreateOptions) => Promise<void>;
@@ -15,6 +15,6 @@ export declare const runDeployEnvironmentsPromote: (options: DeployEnvironmentPr
 export declare const runDeployEnvironmentsDelete: (options: DeployEnvironmentDeleteOptions) => Promise<void>;
 export declare const runDeployEnvironmentsLinkRepository: (options: DeployEnvironmentRepositoryLinkOptions) => Promise<void>;
 export declare const runDeployEnvironmentsUnlinkRepository: (options: DeployEnvironmentOptions) => Promise<void>;
+export declare const runDeployEnvironmentsHealth: (options: DeployEnvironmentOptions) => Promise<void>;
 export declare const runDeployEnvironmentsRestartStatus: (options: DeployEnvironmentOptions) => Promise<void>;
 export declare const runDeployEnvironmentsRestart: (options: DeployEnvironmentOptions) => Promise<void>;
-//# sourceMappingURL=environments.d.ts.map

package/dist/deploy/tasks/environments.js

@@ -1,7 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runDeployEnvironmentsRestart = exports.runDeployEnvironmentsRestartStatus = exports.runDeployEnvironmentsUnlinkRepository = exports.runDeployEnvironmentsLinkRepository = exports.runDeployEnvironmentsDelete = exports.runDeployEnvironmentsPromote = exports.runDeployEnvironmentsRegenerateContext = exports.runDeployEnvironmentsGetEditingSecret = exports.runDeployEnvironmentsGetEdgeToken = exports.runDeployEnvironmentsDeploymentsCreate = exports.runDeployEnvironmentsDeploymentsList = exports.runDeployEnvironmentsVariablesDelete = exports.runDeployEnvironmentsVariablesCreate = exports.runDeployEnvironmentsVariablesList = exports.runDeployEnvironmentsCreate = exports.runDeployEnvironmentsGet = exports.runDeployEnvironmentsLimitation = exports.runDeployEnvironmentsList = void 0;
-const api_1 = require("../../deploy/api");
+exports.runDeployEnvironmentsRestart = exports.runDeployEnvironmentsRestartStatus = exports.runDeployEnvironmentsHealth = exports.runDeployEnvironmentsUnlinkRepository = exports.runDeployEnvironmentsLinkRepository = exports.runDeployEnvironmentsDelete = exports.runDeployEnvironmentsPromote = exports.runDeployEnvironmentsRegenerateContext = exports.runDeployEnvironmentsGetEditingSecret = exports.runDeployEnvironmentsGetEdgeToken = exports.runDeployEnvironmentsDeploymentsCreate = exports.runDeployEnvironmentsDeploymentsList = exports.runDeployEnvironmentsVariablesDelete = exports.runDeployEnvironmentsVariablesCreate = exports.runDeployEnvironmentsVariablesList = exports.runDeployEnvironmentsCreate = exports.runDeployEnvironmentsGet = exports.runDeployEnvironmentsLimitation = exports.runDeployEnvironmentsList = void 0;
+const environments_1 = require("../../deploy/api/environments");
+const projects_1 = require("../../deploy/api/projects");
+const environment_1 = require("../../policy/environment");
+const allow_write_1 = require("../../policy/allow-write");
+const errors_1 = require("../../shared/errors");
 const shared_1 = require("./shared");
 const deployment_result_1 = require("./deployment-result");
 const deployments_1 = require("./deployments");
@@ -9,8 +13,34 @@ const runDeployEnvironmentsList = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
     const context = await (0, shared_1.getDeployContext)(options);
     const projectId = await (0, shared_1.resolveDeployProjectId)(context, options);
+    const apiOptions = { accessToken: context.token, baseUrl: context.baseUrl };
+    const normalizedType = options.type ? options.type.toLowerCase() : undefined;
+    const baseQuery = {
+        Types: normalizedType ? [normalizedType] : undefined,
+    };
+    // Default: walk every page. The Deploy API caps single-page responses at
+    // 10 by default, so "list" without --page returning only the first page
+    // surfaced as spurious "couldn't find" errors when an org or project grew
+    // past that boundary. Operators who explicitly want page-at-a-time pass
+    // --page; --no-all is the inverse opt-out.
+    const walkAll = options.all !== false && options.page === undefined;
     if (projectId) {
-        const result = await (0, api_1.fetchProjectEnvironments)({ accessToken: context.token, baseUrl: context.baseUrl }, projectId);
+        if (walkAll) {
+            const aggregated = await (0, projects_1.fetchAllProjectEnvironments)(apiOptions, projectId, options.pageSize ?? 50);
+            const aggregatedResult = {
+                totalCount: aggregated.totalCount,
+                pageSize: aggregated.pageSize,
+                data: options.type
+                    ? (0, shared_1.filterEnvironmentsByType)(aggregated.items, options.type)
+                    : aggregated.items,
+            };
+            (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.list", aggregatedResult);
+            return;
+        }
+        const result = await (0, projects_1.fetchProjectEnvironments)(apiOptions, projectId, {
+            PageNumber: options.page,
+            PageSize: options.pageSize,
+        });
         if (options.type) {
             const list = (0, shared_1.extractDeployEnvironmentList)(result);
             const filtered = (0, shared_1.filterEnvironmentsByType)(list, options.type);
@@ -20,11 +50,35 @@ const runDeployEnvironmentsList = async (options) => {
         (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.list", result);
         return;
     }
-    const normalizedType = options.type ? options.type.toLowerCase() : undefined;
+    if (walkAll) {
+        const aggregated = await (0, environments_1.fetchAllEnvironments)(apiOptions, baseQuery, options.pageSize ?? 50);
+        const filteredData = options.type
+            ? (0, shared_1.filterEnvironmentsByType)(aggregated.items, options.type)
+            : aggregated.items;
+        // Mirror the single-page fallback: if the server's Types filter
+        // returned an empty list under a type filter, re-walk without it
+        // and filter client-side. Defensive against server-side filter
+        // semantics that occasionally surface as "no envs" when there are.
+        if (options.type && filteredData.length === 0 && (aggregated.totalCount ?? 0) === 0) {
+            const fallback = await (0, environments_1.fetchAllEnvironments)(apiOptions, {}, options.pageSize ?? 50);
+            const fallbackFiltered = (0, shared_1.filterEnvironmentsByType)(fallback.items, options.type);
+            (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.list", fallbackFiltered);
+            return;
+        }
+        const aggregatedResult = {
+            totalCount: aggregated.totalCount,
+            pageSize: aggregated.pageSize,
+            data: filteredData,
+        };
+        (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.list", aggregatedResult);
+        return;
+    }
     const query = {
-        Types: normalizedType ? [normalizedType] : undefined,
+        ...baseQuery,
+        PageNumber: options.page,
+        PageSize: options.pageSize,
     };
-    const result = await (0, api_1.fetchEnvironments)({ accessToken: context.token, baseUrl: context.baseUrl }, query);
+    const result = await (0, environments_1.fetchEnvironments)(apiOptions, query);
     if (!options.type) {
         (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.list", result);
         return;
@@ -34,7 +88,7 @@ const runDeployEnvironmentsList = async (options) => {
         (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.list", result);
         return;
     }
-    const fallback = await (0, api_1.fetchEnvironments)({ accessToken: context.token, baseUrl: context.baseUrl }, {});
+    const fallback = await (0, environments_1.fetchEnvironments)(apiOptions, {});
     const fallbackList = (0, shared_1.extractDeployEnvironmentList)(fallback);
     const filtered = (0, shared_1.filterEnvironmentsByType)(fallbackList, options.type);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.list", filtered);
@@ -43,7 +97,7 @@ exports.runDeployEnvironmentsList = runDeployEnvironmentsList;
 const runDeployEnvironmentsLimitation = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
     const context = await (0, shared_1.getDeployContext)(options);
-    const result = await (0, api_1.fetchEnvironmentsLimitation)({
+    const result = await (0, environments_1.fetchEnvironmentsLimitation)({
         accessToken: context.token,
         baseUrl: context.baseUrl,
     });
@@ -54,7 +108,7 @@ const runDeployEnvironmentsGet = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
     const context = await (0, shared_1.getDeployContext)(options);
     const environmentId = await (0, shared_1.resolveDeployEnvironmentId)(context, options);
-    const result = await (0, api_1.fetchEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
+    const result = await (0, environments_1.fetchEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
     if (options.project && options.name && !options.id) {
         const output = {
             environmentId: result.id ??
@@ -99,7 +153,7 @@ const runDeployEnvironmentsCreate = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.createProjectEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, projectId, body);
+    const result = await (0, projects_1.createProjectEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, projectId, body);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.create", result);
 };
 exports.runDeployEnvironmentsCreate = runDeployEnvironmentsCreate;
@@ -107,7 +161,7 @@ const runDeployEnvironmentsVariablesList = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
     const context = await (0, shared_1.getDeployContext)(options);
     const environmentId = await (0, shared_1.resolveDeployEnvironmentId)(context, options);
-    const result = await (0, api_1.fetchEnvironmentVariables)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
+    const result = await (0, environments_1.fetchEnvironmentVariables)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.variables.list", result);
 };
 exports.runDeployEnvironmentsVariablesList = runDeployEnvironmentsVariablesList;
@@ -133,7 +187,7 @@ const runDeployEnvironmentsVariablesCreate = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.upsertEnvironmentVariable)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId, options.variable, {
+    const result = await (0, environments_1.upsertEnvironmentVariable)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId, options.variable, {
         value: options.value,
         target: options.target,
         secret: options.secret,
@@ -155,7 +209,7 @@ const runDeployEnvironmentsVariablesDelete = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.deleteEnvironmentVariable)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId, options.variable);
+    const result = await (0, environments_1.deleteEnvironmentVariable)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId, options.variable);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.variables.delete", result);
 };
 exports.runDeployEnvironmentsVariablesDelete = runDeployEnvironmentsVariablesDelete;
@@ -163,7 +217,7 @@ const runDeployEnvironmentsDeploymentsList = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
     const context = await (0, shared_1.getDeployContext)(options);
     const environmentId = await (0, shared_1.resolveDeployEnvironmentId)(context, options);
-    const result = await (0, api_1.fetchEnvironmentDeployments)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
+    const result = await (0, environments_1.fetchEnvironmentDeployments)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.deployments.list", result);
 };
 exports.runDeployEnvironmentsDeploymentsList = runDeployEnvironmentsDeploymentsList;
@@ -179,7 +233,7 @@ const runDeployEnvironmentsDeploymentsCreate = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.createEnvironmentDeployment)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId, options.redeploy ?? false);
+    const result = await (0, environments_1.createEnvironmentDeployment)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId, options.redeploy ?? false);
     (0, deployment_result_1.printDeploymentResult)(logger, context, "deploy.environments.deployments.create", result);
 };
 exports.runDeployEnvironmentsDeploymentsCreate = runDeployEnvironmentsDeploymentsCreate;
@@ -187,7 +241,7 @@ const runDeployEnvironmentsGetEdgeToken = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
     const context = await (0, shared_1.getDeployContext)(options);
     const environmentId = await (0, shared_1.resolveDeployEnvironmentId)(context, options);
-    const result = await (0, api_1.fetchEnvironmentEdgeToken)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
+    const result = await (0, environments_1.fetchEnvironmentEdgeToken)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.edge-token", result);
 };
 exports.runDeployEnvironmentsGetEdgeToken = runDeployEnvironmentsGetEdgeToken;
@@ -195,7 +249,7 @@ const runDeployEnvironmentsGetEditingSecret = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
     const context = await (0, shared_1.getDeployContext)(options);
     const environmentId = await (0, shared_1.resolveDeployEnvironmentId)(context, options);
-    const result = await (0, api_1.fetchEnvironmentEditingSecret)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
+    const result = await (0, environments_1.fetchEnvironmentEditingSecret)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.editing-secret", result);
 };
 exports.runDeployEnvironmentsGetEditingSecret = runDeployEnvironmentsGetEditingSecret;
@@ -210,7 +264,7 @@ const runDeployEnvironmentsRegenerateContext = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.regenerateEnvironmentContext)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
+    const result = await (0, environments_1.regenerateEnvironmentContext)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.regenerate-context", result);
 };
 exports.runDeployEnvironmentsRegenerateContext = runDeployEnvironmentsRegenerateContext;
@@ -229,7 +283,7 @@ const runDeployEnvironmentsPromote = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.promoteEnvironmentDeployment)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId, options.sourceId);
+    const result = await (0, environments_1.promoteEnvironmentDeployment)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId, options.sourceId);
     const deploymentId = (0, deployment_result_1.printDeploymentResult)(logger, context, "deploy.environments.promote", result);
     if (!deploymentId) {
         return;
@@ -259,12 +313,29 @@ const runDeployEnvironmentsDelete = async (options) => {
         });
         return;
     }
+    // Destructive-tier policy gate — environment deletion is irreversible.
+    // Refused for m2m / mcp callers and for CI without ciWrites; a no-op in
+    // unmanaged mode. See docs/policy-and-guardrails.md. getDeployContext
+    // above already resolved (and proved) the environment; if config cannot
+    // be resolved here we are in a test with a mocked context, so skip.
+    try {
+        const resolved = (0, environment_1.resolveEnvironment)({
+            config: options.config,
+            environmentName: options.environmentName,
+        });
+        (0, allow_write_1.ensureAllowWrite)(resolved.root, resolved.envName, true, "deploy-environment-delete");
+    }
+    catch (error) {
+        if (!(error instanceof errors_1.ScaiError) || error.code !== "CONFIG_NOT_FOUND") {
+            throw error;
+        }
+    }
     const confirmed = await (0, shared_1.confirmDestructive)(`Delete environment '${environmentId}'? This cannot be undone.`, options.force);
     if (!confirmed) {
         logger.info("Delete cancelled.", "yellow");
         return;
     }
-    const result = await (0, api_1.deleteEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId, options.force);
+    const result = await (0, environments_1.deleteEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId, options.force);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.delete", result);
 };
 exports.runDeployEnvironmentsDelete = runDeployEnvironmentsDelete;
@@ -315,7 +386,7 @@ const runDeployEnvironmentsLinkRepository = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.linkEnvironmentRepository)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId, body);
+    const result = await (0, environments_1.linkEnvironmentRepository)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId, body);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.repository.link", result);
 };
 exports.runDeployEnvironmentsLinkRepository = runDeployEnvironmentsLinkRepository;
@@ -330,15 +401,28 @@ const runDeployEnvironmentsUnlinkRepository = async (options) => {
         });
         return;
     }
-    const result = await (0, api_1.unlinkEnvironmentRepository)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
+    const result = await (0, environments_1.unlinkEnvironmentRepository)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.repository.unlink", result);
 };
 exports.runDeployEnvironmentsUnlinkRepository = runDeployEnvironmentsUnlinkRepository;
+const runDeployEnvironmentsHealth = async (options) => {
+    const logger = (0, shared_1.toLogger)(options);
+    const context = await (0, shared_1.getDeployContext)(options);
+    const environmentId = await (0, shared_1.resolveDeployEnvironmentId)(context, options);
+    const environment = await (0, environments_1.fetchEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
+    const host = (0, environments_1.resolveHostFromEnvironment)(environment);
+    if (!host) {
+        throw (0, shared_1.inputError)(`Environment '${environmentId}' has no resolvable host. The Deploy API returned no cmUrl/cmHost/host/url. Cannot probe /healthz/ready.`);
+    }
+    const result = await (0, environments_1.probeEnvironmentHealth)(host);
+    (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.health", result);
+};
+exports.runDeployEnvironmentsHealth = runDeployEnvironmentsHealth;
 const runDeployEnvironmentsRestartStatus = async (options) => {
     const logger = (0, shared_1.toLogger)(options);
     const context = await (0, shared_1.getDeployContext)(options);
     const environmentId = await (0, shared_1.resolveDeployEnvironmentId)(context, options);
-    const result = await (0, api_1.fetchEnvironmentRestartStatus)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
+    const result = await (0, environments_1.fetchEnvironmentRestartStatus)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.restart-status", result);
 };
 exports.runDeployEnvironmentsRestartStatus = runDeployEnvironmentsRestartStatus;
@@ -358,7 +442,7 @@ const runDeployEnvironmentsRestart = async (options) => {
         logger.info("Restart cancelled.", "yellow");
         return;
     }
-    const result = await (0, api_1.restartEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
+    const result = await (0, environments_1.restartEnvironment)({ accessToken: context.token, baseUrl: context.baseUrl }, environmentId);
     (0, shared_1.printDeployResultWithContext)(logger, context, "deploy.environments.restart", result);
 };
 exports.runDeployEnvironmentsRestart = runDeployEnvironmentsRestart;

package/dist/deploy/tasks/health.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `scai cli health` — fan-out probe across every environment in the active
+ * tenant. Picks the right probe per type:
+ *   - CM:  GET <host>/healthz/ready
+ *   - EH:  most-recent deployment status (the editing-host's deploy-API
+ *          hostname is internal and doesn't resolve over the public
+ *          internet, so /healthz/ready isn't reachable from a laptop)
+ *   - unprovisioned: skipped — never had a deployment to probe
+ *
+ * Designed to answer "what's the health of all my environments?" in
+ * one shot. The narrower `scai provision deploy environments health` command
+ * stays around for single-env probes by ID/name.
+ */
+import type { DeployBaseOptions } from "./types";
+export type DeployHealthOptions = DeployBaseOptions & {
+    project?: string;
+    type?: string;
+    /** Skip per-environment probes — list status only. */
+    noProbe?: boolean;
+    /** Per-env probe concurrency. Default 8. */
+    concurrency?: number;
+};
+export declare const runDeployHealth: (options: DeployHealthOptions) => Promise<void>;