@tolinax/ayoune-cli 2026.3.0 → 2026.4.0

package/data/contextSlots.js

@@ -0,0 +1,189 @@
+export const contextSlots = [
+    // Tier 1 — Core
+    {
+        slot: "project",
+        collection: "projects",
+        module: "pm",
+        nameField: "subject",
+        injectAsCreateField: {
+            tasks: "project",
+            sprints: "_project",
+            milestones: "_project",
+            epics: "_project",
+        },
+        injectAsFilterField: {
+            tasks: "project",
+            sprints: "_project",
+            milestones: "_project",
+            epics: "_project",
+        },
+        tier: 1,
+    },
+    {
+        slot: "consumer",
+        collection: "consumers",
+        module: "crm",
+        nameField: "name",
+        injectAsCreateField: {
+            tasks: "_consumerID",
+            opportunities: "_consumerID",
+            offers: "_consumerID",
+            invoices: "_consumerID",
+            orders: "_consumerID",
+        },
+        injectAsFilterField: {
+            tasks: "_consumerID",
+            opportunities: "_consumerID",
+            offers: "_consumerID",
+            invoices: "_consumerID",
+            orders: "_consumerID",
+        },
+        tier: 1,
+    },
+    {
+        slot: "sprint",
+        collection: "sprints",
+        module: "pm",
+        nameField: "subject",
+        injectAsCreateField: {
+            tasks: "sprint",
+        },
+        injectAsFilterField: {
+            tasks: "sprint",
+        },
+        parent: "project",
+        tier: 1,
+    },
+    {
+        slot: "milestone",
+        collection: "milestones",
+        module: "pm",
+        nameField: "subject",
+        injectAsCreateField: {
+            tasks: "milestone",
+            sprints: "_milestone",
+            epics: "_milestone",
+        },
+        injectAsFilterField: {
+            tasks: "milestone",
+            sprints: "_milestone",
+            epics: "_milestone",
+        },
+        parent: "project",
+        tier: 1,
+    },
+    {
+        slot: "epic",
+        collection: "epics",
+        module: "pm",
+        nameField: "subject",
+        injectAsCreateField: {
+            tasks: "epic",
+            sprints: "_epic",
+        },
+        injectAsFilterField: {
+            tasks: "epic",
+            sprints: "_epic",
+        },
+        parent: "project",
+        tier: 1,
+    },
+    // Tier 2 — Domain
+    {
+        slot: "campaign",
+        collection: "campaigns",
+        module: "marketing",
+        nameField: "name",
+        injectAsCreateField: {
+            mailinglists: "_campaign",
+        },
+        injectAsFilterField: {
+            mailinglists: "_campaign",
+        },
+        tier: 2,
+    },
+    {
+        slot: "opportunity",
+        collection: "opportunities",
+        module: "crm",
+        nameField: "name",
+        injectAsCreateField: {},
+        injectAsFilterField: {},
+        tier: 2,
+    },
+    {
+        slot: "team",
+        collection: "teams",
+        module: "hr",
+        nameField: "name",
+        injectAsCreateField: {},
+        injectAsFilterField: {},
+        tier: 2,
+    },
+    {
+        slot: "department",
+        collection: "departments",
+        module: "hr",
+        nameField: "name",
+        injectAsCreateField: {
+            teams: "_department",
+        },
+        injectAsFilterField: {
+            teams: "_department",
+        },
+        tier: 2,
+    },
+    {
+        slot: "kanbanboard",
+        collection: "kanbanboards",
+        module: "pm",
+        nameField: "name",
+        injectAsCreateField: {},
+        injectAsFilterField: {},
+        tier: 2,
+    },
+    // Tier 3 — AI/Auto
+    {
+        slot: "agent",
+        collection: "aiagents",
+        module: "ai",
+        nameField: "name",
+        injectAsCreateField: {
+            aiconversations: "_agent",
+        },
+        injectAsFilterField: {
+            aiconversations: "_agent",
+        },
+        tier: 3,
+    },
+    {
+        slot: "workflow",
+        collection: "automationworkflows",
+        module: "automation",
+        nameField: "name",
+        injectAsCreateField: {},
+        injectAsFilterField: {},
+        tier: 3,
+    },
+    {
+        slot: "repository",
+        collection: "repositories",
+        module: "devops",
+        nameField: "name",
+        injectAsCreateField: {},
+        injectAsFilterField: {},
+        tier: 3,
+    },
+];
+export function getSlot(slotName) {
+    return contextSlots.find((s) => s.slot === slotName);
+}
+export function getSlotByCollection(collection) {
+    return contextSlots.find((s) => s.collection === collection.toLowerCase());
+}
+export function getChildSlots(parentSlot) {
+    return contextSlots.filter((s) => s.parent === parentSlot);
+}
+export function getSlotsByTier(tier) {
+    return contextSlots.filter((s) => s.tier === tier);
+}

package/data/modelsAndRights.js

@@ -3184,6 +3184,62 @@ const modelsAndRights = [
         module: "crm",
         right: "crm.xingcontacts",
     },
+    // Config module additions
+    {
+        plural: "Credentials",
+        singular: "Credential",
+        module: "config",
+        right: "config.credentials",
+    },
+    {
+        plural: "NotificationPolicies",
+        singular: "NotificationPolicy",
+        module: "config",
+        right: "config.notificationpolicies",
+    },
+    {
+        plural: "MessageTemplates",
+        singular: "MessageTemplate",
+        module: "config",
+        right: "config.messagetemplates",
+    },
+    // DevOps module
+    {
+        plural: "K8Pods",
+        singular: "K8Pod",
+        module: "devops",
+        right: "devops.k8pods",
+    },
+    {
+        plural: "BitbucketPipelines",
+        singular: "BitbucketPipeline",
+        module: "devops",
+        right: "devops.bitbucketpipelines",
+    },
+    {
+        plural: "DevOpsAlerts",
+        singular: "DevOpsAlert",
+        module: "devops",
+        right: "devops.devopsalerts",
+    },
+    {
+        plural: "DeploymentActions",
+        singular: "DeploymentAction",
+        module: "devops",
+        right: "devops.deploymentactions",
+    },
+    {
+        plural: "Repositories",
+        singular: "Repository",
+        module: "devops",
+        right: "devops.repositories",
+    },
+    {
+        plural: "DeploymentPlans",
+        singular: "DeploymentPlan",
+        module: "devops",
+        right: "devops.deploymentplans",
+    },
 ];
 export default modelsAndRights;
 export { modelsAndRights };

package/data/modules.js

@@ -106,6 +106,22 @@ const aYOUneModules = [
         module: "audit",
         host: "audit.ayoune.app",
     },
+    {
+        label: "DevOps",
+        module: "devops",
+        host: "devops.ayoune.app",
+    },
+    {
+        label: "Sync",
+        module: "sync",
+        host: "sync.ayoune.app",
+    },
+    {
+        label: "System (Superuser)",
+        module: "su",
+        host: "api-v1.ayoune.app",
+        superuserOnly: true,
+    },
 ];
 export default aYOUneModules;
 export { aYOUneModules };

package/lib/api/apiCallHandler.js

@@ -1,7 +1,7 @@
 import { api, getModuleBaseUrl } from "./apiClient.js";
 import chalk from "chalk";
 import * as process from "process";
-import { localStorage } from "../helpers/localStorage.js";
+import { secureStorage } from "../helpers/secureStorage.js";
 import { handleAPIError } from "./handleAPIError.js";
 import { login } from "./login.js";
 import { spinner } from "../../index.js";
@@ -16,6 +16,10 @@ function cleanParams(params) {
             continue;
         cleaned[key] = value;
     }
+    // The API only supports json, yaml, csv — table is formatted client-side from JSON
+    if (cleaned.responseFormat === "table") {
+        cleaned.responseFormat = "json";
+    }
     const version = process.env.AYOUNE_VERSION;
     if (version) {
         cleaned.ref = `ayoune-cli@${version}`;
@@ -23,7 +27,7 @@ function cleanParams(params) {
     return cleaned;
 }
 function getToken() {
-    return localStorage.getItem("token") || process.env.AYOUNE_TOKEN || "";
+    return secureStorage.getItem("token") || process.env.AYOUNE_TOKEN || "";
 }
 const makeRequest = (module, url, method, data, params) => api({
     baseURL: getModuleBaseUrl(module),

package/lib/api/apiClient.js

@@ -21,8 +21,16 @@ const audit = axios.create({
     baseURL: config.auditUrl,
     httpsAgent,
 });
+// Modules that don't follow the standard {module}-api.ayoune.app pattern
+const MODULE_HOST_OVERRIDES = {
+    su: "https://api-v1.ayoune.app/api/su",
+    logs: "https://monitoring-api.ayoune.app",
+    general: "https://api-v1.ayoune.app/api/general",
+    usersettings: "https://api-v1.ayoune.app/api/usersettings",
+    auth: "https://auth.ayoune.app",
+};
 export function getModuleBaseUrl(module) {
-    return `https://${module}-api.ayoune.app`;
+    return MODULE_HOST_OVERRIDES[module] || `https://${module}-api.ayoune.app`;
 }
 function addDebugInterceptors(instance) {
     instance.interceptors.request.use((req) => {

package/lib/api/auditCallHandler.js

@@ -1,6 +1,6 @@
 import { audit } from "./apiClient.js";
 import * as process from "process";
-import { localStorage } from "../helpers/localStorage.js";
+import { secureStorage } from "../helpers/secureStorage.js";
 import { handleAPIError } from "./handleAPIError.js";
 export const auditCallHandler = async (url, method = "get", data = null, params = {}) => {
     try {
@@ -10,7 +10,7 @@ export const auditCallHandler = async (url, method = "get", data = null, params
             data,
             params: { ...params, ref: `ayoune-cli@${process.env.AYOUNE_VERSION}` },
             headers: {
-                Authorization: `Bearer ${localStorage.getItem("token")}`,
+                Authorization: `Bearer ${secureStorage.getItem("token")}`,
             },
         });
         return response.data;

package/lib/api/handleAPIError.js

@@ -1,11 +1,8 @@
 import { spinner } from "../../index.js";
 import { EXIT_GENERAL_ERROR, EXIT_AUTH_REQUIRED, EXIT_PERMISSION_DENIED, } from "../exitCodes.js";
-let jsonErrorsEnabled = false;
-export function enableJsonErrors() {
-    jsonErrorsEnabled = true;
-}
+import { isJsonErrorsEnabled } from "../helpers/cliError.js";
 function emitJsonError(code, type, message, details) {
-    if (jsonErrorsEnabled) {
+    if (isJsonErrorsEnabled()) {
         const err = { error: type, code, message, ...(details ? { details } : {}) };
         console.error(JSON.stringify(err));
     }
@@ -13,6 +10,7 @@ function emitJsonError(code, type, message, details) {
 }
 export function handleAPIError(error) {
     var _a, _b, _c, _d;
+    const jsonErrors = isJsonErrorsEnabled();
     const apiError = error.response;
     const requestConfig = error.config;
     const method = ((requestConfig === null || requestConfig === void 0 ? void 0 : requestConfig.method) || "GET").toUpperCase();
@@ -20,35 +18,39 @@ export function handleAPIError(error) {
         ? `${requestConfig.baseURL || ""}/${requestConfig.url || ""}`.replace(/\/+/g, "/").replace(":/", "://")
         : "unknown";
     if (!apiError) {
-        spinner.error({ text: `Network error: ${error.message}` });
-        if (!jsonErrorsEnabled)
+        if (!jsonErrors) {
+            spinner.error({ text: `Network error: ${error.message}` });
             console.error(`  Request: ${method} ${fullUrl}`);
+        }
         emitJsonError(EXIT_GENERAL_ERROR, "network_error", error.message, { method, url: fullUrl });
     }
     const serverMessage = ((_b = (_a = apiError.data) === null || _a === void 0 ? void 0 : _a.meta) === null || _b === void 0 ? void 0 : _b.message) || apiError.statusText;
     if (apiError.status === 400) {
-        spinner.error({ text: `Bad Request: ${serverMessage}` });
-        if (!jsonErrorsEnabled)
+        if (!jsonErrors) {
+            spinner.error({ text: `Bad Request: ${serverMessage}` });
             console.error(`  Request: ${method} ${fullUrl}`);
+        }
         emitJsonError(EXIT_GENERAL_ERROR, "bad_request", serverMessage, { method, url: fullUrl, status: 400 });
     }
     if (apiError.status === 401) {
-        spinner.error({ text: "Session expired. Please run: ay login" });
+        if (!jsonErrors)
+            spinner.error({ text: "Session expired. Please run: ay login" });
         emitJsonError(EXIT_AUTH_REQUIRED, "auth_required", "Session expired", { status: 401 });
     }
     if (apiError.status === 403) {
         const rights = ((_d = (_c = apiError.data) === null || _c === void 0 ? void 0 : _c.meta) === null || _d === void 0 ? void 0 : _d.requiredRights) || [];
-        spinner.error({
-            text: `Forbidden. Required rights: [${rights.join(", ")}]`,
-        });
-        if (!jsonErrorsEnabled)
+        if (!jsonErrors) {
+            spinner.error({
+                text: `Forbidden. Required rights: [${rights.join(", ")}]`,
+            });
             console.error(`  Request: ${method} ${fullUrl}`);
+        }
         emitJsonError(EXIT_PERMISSION_DENIED, "permission_denied", "Forbidden", { method, url: fullUrl, status: 403, requiredRights: rights });
     }
-    spinner.error({
-        text: `Error ${apiError.status}: ${serverMessage}`,
-    });
-    if (!jsonErrorsEnabled) {
+    if (!jsonErrors) {
+        spinner.error({
+            text: `Error ${apiError.status}: ${serverMessage}`,
+        });
         console.error(`  Request: ${method} ${fullUrl}`);
         if (apiError.data && typeof apiError.data === "object") {
             const debugInfo = apiError.data.meta || apiError.data;

package/lib/api/login.js

@@ -1,7 +1,7 @@
 import { socket } from "../socket/socketClient.js";
 import { randomAsciiString } from "../helpers/makeRandomToken.js";
 import { spinner } from "../../index.js";
-import { localStorage } from "../helpers/localStorage.js";
+import { secureStorage } from "../helpers/secureStorage.js";
 import { config } from "../helpers/config.js";
 import chalk from "chalk";
 function terminalLink(text, url) {
@@ -28,8 +28,8 @@ const waitForCredentials = async (token) => {
         });
         _socket.on("cli-token", async (data) => {
             spinner.success({ text: `Received auth credentials` });
-            localStorage.setItem("token", data.token);
-            localStorage.setItem("refreshToken", data.refreshToken);
+            secureStorage.setItem("token", data.token);
+            secureStorage.setItem("refreshToken", data.refreshToken);
             _socket.disconnect();
             resolve(data);
         });

package/lib/api/searchClient.js

@@ -0,0 +1,119 @@
+import { api } from "./apiClient.js";
+import { config } from "../helpers/config.js";
+import { secureStorage } from "../helpers/secureStorage.js";
+function getToken() {
+    return secureStorage.getItem("token") || process.env.AYOUNE_TOKEN || "";
+}
+function getSearchBaseURL() {
+    return config.searchUrl;
+}
+export async function searchModel(collection, params) {
+    const response = await api({
+        baseURL: getSearchBaseURL(),
+        method: "get",
+        url: `/${collection}`,
+        params,
+        headers: {
+            Authorization: `Bearer ${getToken()}`,
+        },
+    });
+    return response.data;
+}
+export async function searchOne(collection, params) {
+    const response = await api({
+        baseURL: getSearchBaseURL(),
+        method: "get",
+        url: `/${collection}/one`,
+        params,
+        headers: {
+            Authorization: `Bearer ${getToken()}`,
+        },
+    });
+    return response.data;
+}
+export async function searchGlobal(query, limit = 25, callbacks = {}) {
+    const results = [];
+    const response = await api({
+        baseURL: getSearchBaseURL(),
+        method: "get",
+        url: "/",
+        params: { q: query, limit },
+        headers: {
+            Authorization: `Bearer ${getToken()}`,
+            Accept: "text/event-stream",
+        },
+        responseType: "stream",
+    });
+    return new Promise((resolve, reject) => {
+        let buffer = "";
+        let currentCollection = "";
+        let currentEntries = [];
+        const stream = response.data;
+        stream.on("data", (chunk) => {
+            var _a, _b, _c;
+            buffer += chunk.toString();
+            const lines = buffer.split("\n");
+            buffer = lines.pop() || "";
+            for (const line of lines) {
+                if (line.startsWith("event: ")) {
+                    const event = line.slice(7).trim();
+                    if (event === "model_done" && currentCollection) {
+                        const result = {
+                            collection: currentCollection,
+                            entries: currentEntries,
+                            total: currentEntries.length,
+                        };
+                        results.push(result);
+                        (_a = callbacks.onResult) === null || _a === void 0 ? void 0 : _a.call(callbacks, result);
+                        currentCollection = "";
+                        currentEntries = [];
+                    }
+                    else if (event === "error") {
+                        // Error data comes in the next data: line
+                    }
+                    else if (event === "done") {
+                        (_b = callbacks.onDone) === null || _b === void 0 ? void 0 : _b.call(callbacks);
+                    }
+                }
+                else if (line.startsWith("data: ")) {
+                    const dataStr = line.slice(6).trim();
+                    try {
+                        const data = JSON.parse(dataStr);
+                        if (data.model) {
+                            currentCollection = data.model;
+                        }
+                        else if (data.entry) {
+                            currentEntries.push(data.entry);
+                        }
+                        else if (data.error) {
+                            (_c = callbacks.onError) === null || _c === void 0 ? void 0 : _c.call(callbacks, data.error);
+                        }
+                    }
+                    catch (_d) {
+                        // Non-JSON data line, skip
+                    }
+                }
+            }
+        });
+        stream.on("end", () => {
+            var _a, _b;
+            // Flush remaining buffer
+            if (currentCollection && currentEntries.length > 0) {
+                const result = {
+                    collection: currentCollection,
+                    entries: currentEntries,
+                    total: currentEntries.length,
+                };
+                results.push(result);
+                (_a = callbacks.onResult) === null || _a === void 0 ? void 0 : _a.call(callbacks, result);
+            }
+            (_b = callbacks.onDone) === null || _b === void 0 ? void 0 : _b.call(callbacks);
+            resolve(results);
+        });
+        stream.on("error", (err) => {
+            var _a;
+            (_a = callbacks.onError) === null || _a === void 0 ? void 0 : _a.call(callbacks, err.message);
+            reject(err);
+        });
+    });
+}

package/lib/commands/createAccessCommand.js

@@ -0,0 +1,126 @@
+import chalk from "chalk";
+import { modelsAndRights } from "../../data/modelsAndRights.js";
+import { aYOUneModules } from "../../data/modules.js";
+import { isSuperUser, getTokenPayload } from "../helpers/tokenPayload.js";
+import { handleResponseFormatOptions } from "../helpers/handleResponseFormatOptions.js";
+import { EXIT_GENERAL_ERROR } from "../exitCodes.js";
+import { cliError } from "../helpers/cliError.js";
+function getAccessibleModules(su) {
+    var _a;
+    const moduleSummaries = [];
+    for (const mod of aYOUneModules) {
+        if (mod.superuserOnly && !su)
+            continue;
+        const collections = modelsAndRights.filter((m) => m.module === mod.module);
+        moduleSummaries.push({
+            module: mod.module,
+            label: mod.label,
+            collections: collections.length,
+            superuserOnly: (_a = mod.superuserOnly) !== null && _a !== void 0 ? _a : false,
+        });
+    }
+    return moduleSummaries;
+}
+function displayAccess(modules, su) {
+    const payload = getTokenPayload();
+    const name = (payload === null || payload === void 0 ? void 0 : payload.name) || (payload === null || payload === void 0 ? void 0 : payload.username) || (payload === null || payload === void 0 ? void 0 : payload.email) || "Unknown";
+    const type = (payload === null || payload === void 0 ? void 0 : payload.type) || "user";
+    console.log();
+    console.log(chalk.bold(`  Access Summary for ${chalk.cyan(name)}`));
+    console.log(chalk.dim(`  Type: ${su ? chalk.yellow("superuser") : type}`));
+    console.log(chalk.dim(`  ${"─".repeat(50)}`));
+    console.log();
+    const totalCollections = modules.reduce((sum, m) => sum + m.collections, 0);
+    // Column widths
+    const maxMod = Math.max(...modules.map((m) => m.module.length), 6);
+    const maxLabel = Math.max(...modules.map((m) => m.label.length), 5);
+    console.log(`  ${chalk.dim("MODULE".padEnd(maxMod + 2))} ${chalk.dim("LABEL".padEnd(maxLabel + 2))} ${chalk.dim("COLLECTIONS")}`);
+    console.log(chalk.dim(`  ${"─".repeat(maxMod + maxLabel + 18)}`));
+    for (const mod of modules) {
+        const modName = mod.superuserOnly
+            ? chalk.yellow(mod.module.padEnd(maxMod + 2))
+            : mod.module.padEnd(maxMod + 2);
+        const label = mod.label.padEnd(maxLabel + 2);
+        const count = String(mod.collections).padStart(4);
+        console.log(`  ${modName} ${label} ${count}`);
+    }
+    console.log();
+    console.log(chalk.dim(`  ${modules.length} modules, ${totalCollections} collections accessible`));
+    if (su) {
+        console.log(chalk.yellow(`  Superuser access: all modules including system collections`));
+    }
+    console.log();
+}
+export function createAccessCommand(program) {
+    program
+        .command("access")
+        .description("Show accessible modules and collections for the current user")
+        .addHelpText("after", `
+Examples:
+  ay access                   Show accessible modules and collection counts
+  ay access -r json            Output as JSON
+  ay access --module crm       Show collections in a specific module`)
+        .option("--module <name>", "Show collections for a specific module")
+        .action(async (options) => {
+        try {
+            const opts = { ...program.opts(), ...options };
+            const su = isSuperUser();
+            const modules = getAccessibleModules(su);
+            // Detail mode: list collections in a specific module
+            if (opts.module) {
+                const modName = opts.module.toLowerCase();
+                const mod = aYOUneModules.find((m) => m.module === modName);
+                if (!mod) {
+                    cliError(`Unknown module: "${opts.module}". Use "ay access" to see available modules.`, EXIT_GENERAL_ERROR);
+                }
+                if (mod.superuserOnly && !su) {
+                    cliError(`Module "${opts.module}" requires superuser access.`, EXIT_GENERAL_ERROR);
+                }
+                const collections = modelsAndRights
+                    .filter((m) => m.module === modName)
+                    .map((m) => ({
+                    collection: m.plural,
+                    singular: m.singular,
+                    right: m.right,
+                }));
+                if (opts.responseFormat !== "json" || opts.save) {
+                    handleResponseFormatOptions(opts, collections);
+                }
+                else {
+                    console.log();
+                    console.log(chalk.bold(`  Collections in ${chalk.cyan(mod.label)} (${modName})`));
+                    console.log(chalk.dim(`  ${"─".repeat(50)}`));
+                    console.log();
+                    const maxCol = Math.max(...collections.map((c) => c.collection.length), 10);
+                    const maxRight = Math.max(...collections.map((c) => c.right.length), 5);
+                    console.log(`  ${chalk.dim("COLLECTION".padEnd(maxCol + 2))} ${chalk.dim("RIGHT")}`);
+                    console.log(chalk.dim(`  ${"─".repeat(maxCol + maxRight + 6)}`));
+                    for (const col of collections) {
+                        console.log(`  ${col.collection.padEnd(maxCol + 2)} ${chalk.dim(col.right)}`);
+                    }
+                    console.log();
+                    console.log(chalk.dim(`  ${collections.length} collections`));
+                    console.log();
+                }
+                return;
+            }
+            // Summary mode: show all accessible modules
+            if (opts.responseFormat !== "json" || opts.save) {
+                // For non-default formats or save, use standard formatting
+                const data = modules.map((m) => ({
+                    module: m.module,
+                    label: m.label,
+                    collections: m.collections,
+                    ...(m.superuserOnly ? { superuserOnly: true } : {}),
+                }));
+                handleResponseFormatOptions(opts, data);
+            }
+            else {
+                displayAccess(modules, su);
+            }
+        }
+        catch (e) {
+            cliError(e.message || "An unexpected error occurred", EXIT_GENERAL_ERROR);
+        }
+    });
+}