@sitecoreai-labs/sitecoreai-cli 0.0.4

package/dist/serialization/sitecore-api/roles.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pushRoleCommands = exports.fetchRoles = void 0;
+const graphql_1 = require("./graphql");
+const rolesQuery = `
+query($predicates:[PredicateGraphType]){
+  roles(predicates:$predicates)
+  {
+    roleName,
+    memberOfRoles,
+    serializedItemId
+  }
+}`;
+const roleMutation = `
+mutation($commands: [RoleCommandGraphType]) {
+  pushCommands(commands: $commands) {
+    success,
+    name,
+    messages{
+      logLevel,
+      eventID{
+        id,
+        name
+      },
+      message
+    }
+  }
+}`;
+const fetchRoles = async (environment, predicates, options) => {
+    const data = await (0, graphql_1.runGraphQL)(environment, rolesQuery, {
+        predicates,
+    }, options);
+    return data.roles ?? [];
+};
+exports.fetchRoles = fetchRoles;
+const pushRoleCommands = async (environment, commands, options) => {
+    const data = await (0, graphql_1.runGraphQL)(environment, roleMutation, {
+        commands,
+    }, options);
+    return data.pushCommands;
+};
+exports.pushRoleCommands = pushRoleCommands;

package/dist/serialization/sitecore-api/users.d.ts

@@ -0,0 +1,9 @@
+import { EnvironmentConfiguration } from "../../config";
+import { UserData } from "../types";
+import { GraphQLRequestOptions } from "./graphql";
+export declare const fetchUsers: (environment: EnvironmentConfiguration, predicates: Array<{
+    domain: string;
+    pattern: string;
+}>, options?: GraphQLRequestOptions) => Promise<UserData[]>;
+export declare const pushUserCommands: (environment: EnvironmentConfiguration, commands: unknown[], options?: GraphQLRequestOptions) => Promise<unknown[]>;
+//# sourceMappingURL=users.d.ts.map

package/dist/serialization/sitecore-api/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../../src/serialization/sitecore-api/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAc,MAAM,WAAW,CAAC;AAqC9D,eAAO,MAAM,UAAU,GACrB,aAAa,wBAAwB,EACrC,YAAY,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,EACtD,UAAU,qBAAqB,KAC9B,OAAO,CAAC,QAAQ,EAAE,CAgCpB,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,aAAa,wBAAwB,EACrC,UAAU,OAAO,EAAE,EACnB,UAAU,qBAAqB,KAC9B,OAAO,CAAC,OAAO,EAAE,CAUnB,CAAC"}

package/dist/serialization/sitecore-api/users.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pushUserCommands = exports.fetchUsers = void 0;
+const graphql_1 = require("./graphql");
+const usersQuery = `
+query($predicates:[Predicate]){
+  users(predicates:$predicates)
+  {
+    userName,
+    email,
+    comment,
+    created,
+    isApproved,
+    roles,
+    properties{
+      key
+      value
+      valueType
+      isCustomProperty
+    }
+  }
+}`;
+const usersMutation = `
+mutation($commands: [UserCommand]) {
+  pushUsers(commands: $commands) {
+    success,
+    name,
+    messages{
+      logLevel,
+      eventID{
+        id,
+        name
+      },
+      message
+    }
+  }
+}`;
+const fetchUsers = async (environment, predicates, options) => {
+    const data = await (0, graphql_1.runGraphQL)(environment, usersQuery, { predicates }, options);
+    return (data.users ?? []).map((user) => ({
+        userName: user.userName,
+        email: user.email,
+        comment: user.comment,
+        creationDate: user.created,
+        isApproved: user.isApproved,
+        roles: user.roles ?? [],
+        profileProperties: (user.properties ?? []).map((property) => ({
+            name: property.key,
+            content: property.value,
+            contentType: property.valueType,
+            isCustomProperty: property.isCustomProperty,
+        })),
+    }));
+};
+exports.fetchUsers = fetchUsers;
+const pushUserCommands = async (environment, commands, options) => {
+    const data = await (0, graphql_1.runGraphQL)(environment, usersMutation, {
+        commands,
+    }, options);
+    return data.pushUsers;
+};
+exports.pushUserCommands = pushUserCommands;

package/dist/serialization/sitecore-api.d.ts

@@ -0,0 +1,2 @@
+export * from "./sitecore-api/index";
+//# sourceMappingURL=sitecore-api.d.ts.map

package/dist/serialization/sitecore-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sitecore-api.d.ts","sourceRoot":"","sources":["../../src/serialization/sitecore-api.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC"}

package/dist/serialization/sitecore-api.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./sitecore-api/index"), exports);

package/dist/serialization/tasks/diff.d.ts

@@ -0,0 +1,3 @@
+import type { DiffOptions } from "./types";
+export declare const runDiff: (options: DiffOptions) => Promise<void>;
+//# sourceMappingURL=diff.d.ts.map

package/dist/serialization/tasks/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../../src/serialization/tasks/diff.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAQ3C,eAAO,MAAM,OAAO,GAAU,SAAS,WAAW,KAAG,OAAO,CAAC,IAAI,CAsIhE,CAAC"}

package/dist/serialization/tasks/diff.js

@@ -0,0 +1,109 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDiff = void 0;
+const node_path_1 = __importDefault(require("node:path"));
+const item_path_1 = require("../item-path");
+const tree_spec_1 = require("../tree-spec");
+const field_filter_1 = require("../field-filter");
+const sitecore_api_1 = require("../sitecore-api");
+const commands_1 = require("../commands");
+const shared_1 = require("./shared");
+const helpers_1 = require("./helpers");
+const runDiff = async (options) => {
+    const logger = (0, shared_1.toLogger)(options);
+    const { root, modules } = await (0, shared_1.loadConfigAndModules)(options);
+    const sourceName = options.source ?? root.defaultEnvironment;
+    const destName = options.destination ?? root.defaultEnvironment;
+    const apiTimeoutMs = (0, shared_1.resolveApiTimeoutMs)(root);
+    const summary = {
+        command: "serialization.diff",
+        source: sourceName,
+        destination: destName,
+        path: options.path ?? null,
+        push: Boolean(options.push),
+        totalDifferences: 0,
+        databases: [],
+    };
+    if (options.path) {
+        const sourceDatabase = options.sourceDatabase ?? "master";
+        const destinationDatabase = options.destinationDatabase ?? sourceDatabase;
+        const subtree = new tree_spec_1.FilesystemTreeSpec();
+        subtree.name = "diff";
+        subtree.database = destinationDatabase;
+        subtree.path = item_path_1.ItemPath.fromPathString(options.path);
+        subtree.scope = tree_spec_1.TreeScope.ItemAndChildren;
+        subtree.allowedPushOperations = tree_spec_1.AllowedPushOperations.CreateUpdateAndDelete;
+        subtree.physicalPath = node_path_1.default.join(process.cwd(), "diff");
+        const filter = (0, field_filter_1.createFieldFilterSet)(root.serialization.excludedFields, []);
+        const sourceMetadata = await (0, sitecore_api_1.fetchItemMetadata)(root.environments[sourceName], sourceDatabase, subtree.path.toPathString(), subtree.scope, filter, false, { timeoutMs: apiTimeoutMs });
+        const destMetadata = await (0, sitecore_api_1.fetchItemMetadata)(root.environments[destName], destinationDatabase, subtree.path.toPathString(), subtree.scope, filter, false, { timeoutMs: apiTimeoutMs });
+        const sourceFiltered = sourceMetadata.filter((item) => subtree.includesPath(item.path));
+        const destFiltered = destMetadata.filter((item) => subtree.includesPath(item.path));
+        const commands = (0, helpers_1.buildCommandsForDatabase)([subtree], sourceFiltered, destFiltered, true);
+        const differences = commands.length;
+        summary.totalDifferences += differences;
+        summary.databases.push({
+            database: destinationDatabase,
+            differences,
+            applied: Boolean(options.push),
+        });
+        if (!logger.isJson()) {
+            logger.info(`Discovered ${differences} differences for ${destinationDatabase}.`, "green");
+        }
+        if (options.push) {
+            (0, shared_1.ensureAllowWrite)(root, destName);
+            const sourceData = await (0, helpers_1.collectItemData)(sourceName, root, [subtree], false);
+            const destData = await (0, helpers_1.collectItemData)(destName, root, [subtree], false);
+            const sourceDataMap = (0, helpers_1.buildItemDataMap)(sourceData.items);
+            const destDataMap = (0, helpers_1.buildItemDataMap)(destData.items);
+            (0, commands_1.enrichCreateCommands)(commands, sourceDataMap);
+            (0, commands_1.enrichUpdateCommands)(commands, sourceDataMap, destDataMap, true);
+            await (0, helpers_1.applySitecoreCommands)(root, destName, destinationDatabase, commands, logger, false);
+        }
+        if (logger.isJson()) {
+            logger.json(summary);
+        }
+        return;
+    }
+    const subtreesByDb = (0, shared_1.groupSubtreesByDatabase)(modules);
+    for (const [database, subtrees] of subtreesByDb) {
+        const sourceMetadata = [];
+        const destinationMetadata = [];
+        for (const subtree of subtrees) {
+            const filter = (0, field_filter_1.createFieldFilterSet)(root.serialization.excludedFields, []);
+            const source = await (0, sitecore_api_1.fetchItemMetadata)(root.environments[sourceName], database, subtree.path.toPathString(), subtree.scope, filter, false, { timeoutMs: apiTimeoutMs });
+            const dest = await (0, sitecore_api_1.fetchItemMetadata)(root.environments[destName], database, subtree.path.toPathString(), subtree.scope, filter, false, { timeoutMs: apiTimeoutMs });
+            sourceMetadata.push(...source.filter((item) => subtree.includesPath(item.path)));
+            destinationMetadata.push(...dest.filter((item) => subtree.includesPath(item.path)));
+        }
+        const commands = (0, helpers_1.buildCommandsForDatabase)(subtrees, sourceMetadata, destinationMetadata, true);
+        const differences = commands.length;
+        summary.totalDifferences += differences;
+        summary.databases.push({
+            database,
+            differences,
+            applied: Boolean(options.push),
+        });
+        if (!logger.isJson()) {
+            logger.info(`Discovered ${differences} differences for ${database}.`, "green");
+        }
+        if (!options.push) {
+            continue;
+        }
+        (0, shared_1.ensureAllowWrite)(root, destName);
+        const sourceData = await (0, helpers_1.collectItemData)(sourceName, root, subtrees, false);
+        const destData = await (0, helpers_1.collectItemData)(destName, root, subtrees, false);
+        const sourceDataMap = (0, helpers_1.buildItemDataMap)(sourceData.items);
+        const destDataMap = (0, helpers_1.buildItemDataMap)(destData.items);
+        (0, commands_1.enrichCreateCommands)(commands, sourceDataMap);
+        (0, commands_1.enrichUpdateCommands)(commands, sourceDataMap, destDataMap, true);
+        await (0, helpers_1.applySitecoreCommands)(root, destName, database, commands, logger, false);
+    }
+    if (logger.isJson()) {
+        logger.json(summary);
+    }
+};
+exports.runDiff = runDiff;

package/dist/serialization/tasks/env/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const DEFAULT_PUBLIC_CLIENT_ID = "Chi8EwfFnEejksk3Sed9hlalGiM9B2v7";
+//# sourceMappingURL=constants.d.ts.map

package/dist/serialization/tasks/env/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/serialization/tasks/env/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,wBAAwB,qCAAqC,CAAC"}

package/dist/serialization/tasks/env/constants.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_PUBLIC_CLIENT_ID = void 0;
+exports.DEFAULT_PUBLIC_CLIENT_ID = "Chi8EwfFnEejksk3Sed9hlalGiM9B2v7";

package/dist/serialization/tasks/env/deploy-token.d.ts

@@ -0,0 +1,3 @@
+import type { DeployTokenOptions } from "../../../deploy/tasks/types";
+export declare const runDeployToken: (options: DeployTokenOptions) => Promise<void>;
+//# sourceMappingURL=deploy-token.d.ts.map

package/dist/serialization/tasks/env/deploy-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-token.d.ts","sourceRoot":"","sources":["../../../../src/serialization/tasks/env/deploy-token.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG/D,eAAO,MAAM,cAAc,GAAU,SAAS,kBAAkB,KAAG,OAAO,CAAC,IAAI,CAyJ9E,CAAC"}

package/dist/serialization/tasks/env/deploy-token.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDeployToken = void 0;
+const config_1 = require("../../../config");
+const browser_1 = require("../../../shared/browser");
+const validate_1 = require("../../../shared/validate");
+const errors_1 = require("../../../shared/errors");
+const keychain_1 = require("../../../shared/keychain");
+const prompt_1 = require("../../../shared/prompt");
+const sitecore_api_1 = require("../../../serialization/sitecore-api");
+const cli_tasks_1 = require("../../../shared/cli-tasks");
+const constants_1 = require("./constants");
+const runDeployToken = async (options) => {
+    const logger = (0, cli_tasks_1.toLogger)(options);
+    const envName = options.environmentName;
+    if (!envName) {
+        throw (0, cli_tasks_1.inputError)("Environment name is required. Use --environment-name.");
+    }
+    const configPath = options.config ?? process.cwd();
+    const rootConfigFile = (0, config_1.readRootConfigurationFile)(configPath);
+    const root = (0, config_1.readRootConfiguration)(configPath, envName);
+    const envProfiles = rootConfigFile.config.envProfiles ?? {};
+    const existing = envProfiles[envName] ?? {};
+    const baseEnv = root.environments[envName] ?? {};
+    const isInteractive = process.stdin.isTTY && process.stdout.isTTY && process.env.SITECOREAI_NON_INTERACTIVE !== "1";
+    const baseAuthority = baseEnv.authority ?? process.env.SITECOREAI_AUTHORITY ?? "https://auth.sitecorecloud.io";
+    if (baseAuthority) {
+        (0, validate_1.assertValidUrl)(baseAuthority, "Authority");
+    }
+    const deviceDefaultClientId = options.clientId ?? process.env.SITECOREAI_CLIENT_ID ?? constants_1.DEFAULT_PUBLIC_CLIENT_ID;
+    const clientCredentialsDefaultClientId = options.clientId ?? baseEnv.clientId ?? process.env.SITECOREAI_CLIENT_ID;
+    let wantsClientCredentials = Boolean(options.useClientCredentials || baseEnv.useClientCredentials);
+    if (options.useClientCredentials === undefined &&
+        baseEnv.useClientCredentials === undefined &&
+        isInteractive) {
+        const useDeviceLogin = await (0, prompt_1.promptConfirm)("Log in with Deploy (browser)?", true);
+        wantsClientCredentials = !useDeviceLogin;
+    }
+    const authority = baseAuthority;
+    let clientId = wantsClientCredentials ? clientCredentialsDefaultClientId : deviceDefaultClientId;
+    let clientSecret = options.clientSecret ?? baseEnv.clientSecret;
+    if (wantsClientCredentials) {
+        if (!clientId && isInteractive) {
+            clientId = await (0, prompt_1.promptText)("Client ID");
+        }
+        if (!clientSecret) {
+            if (!isInteractive) {
+                throw (0, errors_1.createCliError)("Client ID and client secret are required for client credentials.", "INPUT_INVALID", {
+                    hint: "Provide --client-id/--client-secret with --use-client-credentials, or set SITECOREAI_CLIENT_ID and SITECOREAI_CLIENT_SECRET.",
+                });
+            }
+            const entered = await (0, prompt_1.promptSecret)("Client secret: ");
+            clientSecret = entered;
+        }
+    }
+    const audience = baseEnv.audience ?? "https://api.sitecorecloud.io";
+    let token;
+    if (wantsClientCredentials) {
+        if (!authority || !clientId || !clientSecret) {
+            throw (0, errors_1.createCliError)("Client ID and client secret are required for client credentials.", "AUTH_REQUIRED", {
+                hint: "Provide --client-id/--client-secret with --use-client-credentials, or set SITECOREAI_CLIENT_ID and SITECOREAI_CLIENT_SECRET.",
+            });
+        }
+        token = await (0, sitecore_api_1.requestClientCredentialsToken)({
+            authority: authority ?? "",
+            clientId,
+            clientSecret: clientSecret ?? "",
+            audience,
+        }, undefined);
+    }
+    else {
+        if (!authority || !clientId) {
+            throw (0, errors_1.createCliError)("Client ID is required for interactive login.", "AUTH_REQUIRED", {
+                hint: "Provide --client-id or set SITECOREAI_CLIENT_ID.",
+            });
+        }
+        if (!isInteractive) {
+            (0, prompt_1.assertInteractive)("Interactive login requires a TTY. Use --use-client-credentials instead.", "Use --use-client-credentials for non-interactive authentication.");
+        }
+        const device = await (0, sitecore_api_1.requestDeviceAuthorization)({
+            authority,
+            clientId,
+            clientSecret,
+            audience,
+        }, undefined);
+        const verifyUrl = device.verificationUriComplete ?? device.verificationUri;
+        if (device.message) {
+            logger.info(device.message);
+        }
+        if (!(0, browser_1.openBrowser)(verifyUrl)) {
+            logger.info(`Complete login at: ${verifyUrl}`);
+        }
+        else {
+            logger.info(`Opened browser for: ${verifyUrl}`);
+        }
+        if (!device.verificationUriComplete && device.userCode) {
+            logger.info(`Enter code: ${device.userCode}`);
+        }
+        token = await (0, sitecore_api_1.pollDeviceToken)({
+            authority,
+            clientId,
+            clientSecret,
+            audience,
+        }, device);
+    }
+    const stored = await (0, keychain_1.setDeployToken)(envName, token.accessToken);
+    if (!stored) {
+        logger.warn("Unable to store the Deploy token in the OS keychain. Use SITECOREAI_DEPLOY_TOKEN if needed.", "yellow");
+    }
+    const updated = {
+        ...existing,
+        deployToken: undefined,
+        deployTokenExpiresIn: token.expiresIn ?? null,
+        deployTokenLastUpdated: new Date().toISOString(),
+    };
+    if (wantsClientCredentials && clientId) {
+        updated.clientId = clientId;
+    }
+    envProfiles[envName] = updated;
+    rootConfigFile.config.envProfiles = envProfiles;
+    (0, config_1.writeRootConfigurationFile)(configPath, rootConfigFile.config);
+    logger.info(`SitecoreAI access token saved to the OS keychain for environment '${envName}' (Deploy + CM/admin scopes).`, "green");
+    if (options.print) {
+        // Intentional: allows piping token in automated environments.
+        console.log(token.accessToken);
+    }
+};
+exports.runDeployToken = runDeployToken;

package/dist/serialization/tasks/env/index.d.ts

@@ -0,0 +1,5 @@
+export { runStatus } from "./status";
+export { runLogout } from "./logout";
+export { runInit } from "./init";
+export { runDeployToken } from "./deploy-token";
+//# sourceMappingURL=index.d.ts.map

package/dist/serialization/tasks/env/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/serialization/tasks/env/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/serialization/tasks/env/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDeployToken = exports.runInit = exports.runLogout = exports.runStatus = void 0;
+var status_1 = require("./status");
+Object.defineProperty(exports, "runStatus", { enumerable: true, get: function () { return status_1.runStatus; } });
+var logout_1 = require("./logout");
+Object.defineProperty(exports, "runLogout", { enumerable: true, get: function () { return logout_1.runLogout; } });
+var init_1 = require("./init");
+Object.defineProperty(exports, "runInit", { enumerable: true, get: function () { return init_1.runInit; } });
+var deploy_token_1 = require("./deploy-token");
+Object.defineProperty(exports, "runDeployToken", { enumerable: true, get: function () { return deploy_token_1.runDeployToken; } });

package/dist/serialization/tasks/env/init/auth.d.ts

@@ -0,0 +1,24 @@
+import type { EnvironmentConfiguration } from "../../../../config";
+import type { ConnectOptions } from "../../types";
+import type { Logger } from "../../../../shared/logger";
+type ResolveDeployAuthInput = {
+    options: ConnectOptions;
+    envName: string;
+    existing: EnvironmentConfiguration;
+    baseEnv: EnvironmentConfiguration;
+    runWizard: boolean;
+    isInteractive: boolean;
+    needsDeployToken: boolean;
+    updated: EnvironmentConfiguration;
+    logger: Logger;
+};
+type ResolveDeployAuthResult = {
+    deployToken?: string;
+    loginAuthority: string;
+    loginClientId?: string;
+    wantsClientCredentials: boolean;
+    shouldPersistClientId: boolean;
+};
+export declare const resolveDeployAuth: (input: ResolveDeployAuthInput) => Promise<ResolveDeployAuthResult>;
+export {};
+//# sourceMappingURL=auth.d.ts.map

package/dist/serialization/tasks/env/init/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../../src/serialization/tasks/env/init/auth.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,KAAK,sBAAsB,GAAG;IAC5B,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,wBAAwB,CAAC;IACnC,OAAO,EAAE,wBAAwB,CAAC;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,wBAAwB,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,KAAK,uBAAuB,GAAG;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,OAAO,CAAC;IAChC,qBAAqB,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAC5B,OAAO,sBAAsB,KAC5B,OAAO,CAAC,uBAAuB,CAiJjC,CAAC"}

package/dist/serialization/tasks/env/init/auth.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveDeployAuth = void 0;
+const browser_1 = require("../../../../shared/browser");
+const validate_1 = require("../../../../shared/validate");
+const errors_1 = require("../../../../shared/errors");
+const keychain_1 = require("../../../../shared/keychain");
+const prompt_1 = require("../../../../shared/prompt");
+const sitecore_api_1 = require("../../../../serialization/sitecore-api");
+const constants_1 = require("../constants");
+const resolveDeployAuth = async (input) => {
+    const { options, envName, existing, baseEnv, runWizard, isInteractive, needsDeployToken, updated, logger, } = input;
+    let deployToken = options.deployToken ?? existing.deployToken ?? (await (0, keychain_1.getDeployToken)(envName));
+    let loginAuthority = baseEnv.authority ??
+        existing.authority ??
+        process.env.SITECOREAI_AUTHORITY ??
+        "https://auth.sitecorecloud.io";
+    if (loginAuthority) {
+        (0, validate_1.assertValidUrl)(loginAuthority, "Authority");
+    }
+    let loginClientSecret = options.clientSecret ??
+        baseEnv.clientSecret ??
+        existing.clientSecret ??
+        process.env.SITECOREAI_CLIENT_SECRET;
+    let wantsClientCredentials = Boolean(options.useClientCredentials || baseEnv.useClientCredentials || existing.useClientCredentials);
+    const deviceClientId = options.clientId ?? process.env.SITECOREAI_CLIENT_ID ?? constants_1.DEFAULT_PUBLIC_CLIENT_ID;
+    const clientCredentialsClientId = options.clientId ?? baseEnv.clientId ?? existing.clientId ?? process.env.SITECOREAI_CLIENT_ID;
+    if (needsDeployToken && runWizard && options.useClientCredentials === undefined) {
+        const useDeviceLogin = await (0, prompt_1.promptConfirm)("Log in with Deploy (browser)?", true);
+        wantsClientCredentials = !useDeviceLogin;
+    }
+    let loginClientId = wantsClientCredentials ? (clientCredentialsClientId ?? "") : deviceClientId;
+    if (!wantsClientCredentials) {
+        loginClientId = deviceClientId;
+    }
+    else if (!loginClientId) {
+        loginClientId = clientCredentialsClientId ?? "";
+    }
+    const shouldPersistClientId = wantsClientCredentials
+        ? Boolean(loginClientId)
+        : Boolean(options.clientId);
+    if (needsDeployToken && wantsClientCredentials && !loginClientId) {
+        if (!isInteractive) {
+            throw (0, errors_1.createCliError)("Client ID is required for client credentials.", "INPUT_INVALID", {
+                hint: "Provide --client-id with --use-client-credentials, or set SITECOREAI_CLIENT_ID and SITECOREAI_CLIENT_SECRET.",
+            });
+        }
+        loginClientId = await (0, prompt_1.promptText)("Client ID");
+    }
+    if (needsDeployToken && wantsClientCredentials && !loginClientSecret) {
+        if (!isInteractive) {
+            throw (0, errors_1.createCliError)("Client ID and client secret are required for client credentials.", "INPUT_INVALID", {
+                hint: "Provide --client-id/--client-secret with --use-client-credentials, or set SITECOREAI_CLIENT_ID and SITECOREAI_CLIENT_SECRET.",
+            });
+        }
+        const entered = await (0, prompt_1.promptSecret)("Client secret: ");
+        loginClientSecret = entered;
+    }
+    const deployAudience = "https://api.sitecorecloud.io";
+    if (needsDeployToken && !deployToken && wantsClientCredentials) {
+        if (!loginAuthority || !loginClientId || !loginClientSecret) {
+            throw (0, errors_1.createCliError)("Client ID and client secret are required for client credentials.", "AUTH_REQUIRED", {
+                hint: "Provide --client-id/--client-secret with --use-client-credentials, or set SITECOREAI_CLIENT_ID and SITECOREAI_CLIENT_SECRET.",
+            });
+        }
+        const token = await (0, sitecore_api_1.requestClientCredentialsToken)({
+            authority: loginAuthority,
+            clientId: loginClientId,
+            clientSecret: loginClientSecret,
+            audience: deployAudience,
+        }, undefined);
+        deployToken = token.accessToken;
+        updated.deployTokenExpiresIn = token.expiresIn ?? null;
+        updated.deployTokenLastUpdated = new Date().toISOString();
+    }
+    else if (needsDeployToken && !deployToken) {
+        if (!loginAuthority || !loginClientId) {
+            throw (0, errors_1.createCliError)("Client ID is required for interactive login.", "AUTH_REQUIRED", {
+                hint: "Provide --client-id or set SITECOREAI_CLIENT_ID.",
+            });
+        }
+        if (!isInteractive) {
+            (0, prompt_1.assertInteractive)("Interactive login requires a TTY. Use --use-client-credentials instead.", "Use --use-client-credentials for non-interactive authentication.");
+        }
+        const device = await (0, sitecore_api_1.requestDeviceAuthorization)({
+            authority: loginAuthority,
+            clientId: loginClientId,
+            clientSecret: loginClientSecret,
+            audience: deployAudience,
+        }, undefined);
+        const verifyUrl = device.verificationUriComplete ?? device.verificationUri;
+        if (device.message) {
+            logger.info(device.message);
+        }
+        if (!(0, browser_1.openBrowser)(verifyUrl)) {
+            logger.info(`Complete login at: ${verifyUrl}`);
+        }
+        else {
+            logger.info(`Opened browser for: ${verifyUrl}`);
+        }
+        if (!device.verificationUriComplete && device.userCode) {
+            logger.info(`Enter code: ${device.userCode}`);
+        }
+        const token = await (0, sitecore_api_1.pollDeviceToken)({
+            authority: loginAuthority,
+            clientId: loginClientId,
+            clientSecret: loginClientSecret,
+            audience: deployAudience,
+        }, device);
+        deployToken = token.accessToken;
+        updated.deployTokenExpiresIn = token.expiresIn ?? null;
+        updated.deployTokenLastUpdated = new Date().toISOString();
+    }
+    return {
+        deployToken,
+        loginAuthority,
+        loginClientId,
+        wantsClientCredentials,
+        shouldPersistClientId,
+    };
+};
+exports.resolveDeployAuth = resolveDeployAuth;

package/dist/serialization/tasks/env/init/deploy-lookup.d.ts

@@ -0,0 +1,22 @@
+import type { EnvironmentConfiguration } from "../../../../config";
+import type { ConnectOptions } from "../../types";
+import type { Logger } from "../../../../shared/logger";
+type ResolveDeployLookupInput = {
+    options: ConnectOptions;
+    runWizard: boolean;
+    deployToken?: string;
+    updated: EnvironmentConfiguration;
+    existing: EnvironmentConfiguration;
+    baseEnv: EnvironmentConfiguration;
+    host?: string;
+    projectSelection?: string;
+    environmentSelection?: string;
+    logger: Logger;
+};
+type ResolveDeployLookupResult = {
+    host?: string;
+    updated: EnvironmentConfiguration;
+};
+export declare const resolveDeployLookup: (input: ResolveDeployLookupInput) => Promise<ResolveDeployLookupResult>;
+export {};
+//# sourceMappingURL=deploy-lookup.d.ts.map

package/dist/serialization/tasks/env/init/deploy-lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-lookup.d.ts","sourceRoot":"","sources":["../../../../../src/serialization/tasks/env/init/deploy-lookup.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAOlD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAI9C,KAAK,wBAAwB,GAAG;IAC9B,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,wBAAwB,CAAC;IAClC,QAAQ,EAAE,wBAAwB,CAAC;IACnC,OAAO,EAAE,wBAAwB,CAAC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,KAAK,yBAAyB,GAAG;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,wBAAwB,CAAC;CACnC,CAAC;AAsCF,eAAO,MAAM,mBAAmB,GAC9B,OAAO,wBAAwB,KAC9B,OAAO,CAAC,yBAAyB,CA8OnC,CAAC"}