sfdx-hardis 8.11.0 → 8.11.1

package/defaults/templates/monitoring/AGENTS.md

@@ -10,7 +10,7 @@ Read this file before answering questions about the org, and answer from the fil
 
 ## How it works
 
-- **One git branch per monitored org.** Branch names usually look like `monitoring_<client>` for production and `monitoring_<client>__<sandbox>` for sandboxes. The branch you are on is the org you are looking at. Run `git branch -a` to list the other monitored orgs.
+- **One git branch per monitored org.** Branch names usually look like `monitoring_<client>` for production and `monitoring_<client>__<sandbox>` for sandboxes. The branch you are on is the org you are looking at. Run `git fetch --all` then `git branch -r` to list the other monitored orgs.
 - **The org and user of the branch** are in `.sfdx-hardis.yml` (`instanceUrl`, `targetUsername`). Authentication secrets are CI variables, never files of the repository.
 - **Every night, the backup job** runs `sf hardis:org:monitor:backup`: it lists all the metadata of the org, retrieves it in source format, then commits the result on the branch with a message like `chore(monitoring): org state on 2026-01-31 00:12 for monitoring_myclient`. A day without changes in the org makes no commit.
 - **Then other jobs run** on the same branch, and they do not commit anything:
@@ -28,7 +28,7 @@ The git history of a branch is the change history of the org, one commit per day
 - What changed between two dates: see [Report of the changes between two dates](#report-of-the-changes-between-two-dates)
 - Compare two orgs: `git diff origin/monitoring_myclient origin/monitoring_myclient__uat_sandbox -- force-app/main/default/objects/Account`
 
-A commit shows the state of the org at the time of the backup, not who made the change or when during the day. The author of the commit is the CI user or bot. To know which user changed something in Setup, the org's Setup Audit Trail is the source (the `AUDIT_TRAIL` check reports suspect entries).
+A commit shows the state of the org at the time of the backup, not who made the change or when during the day. The author of the commit is the CI user or bot. To know which user changed something in Setup, the org's Setup Audit Trail is the source (the `AUDIT_TRAIL` check reports suspect entries, see [Grafana](#monitoring-results-in-grafana); reading the org itself needs the user's consent, see [Salesforce org access](#salesforce-org-access-read-only-with-consent)).
 
 ## Report of the changes between two dates
 
@@ -213,6 +213,142 @@ Read-only calls for the pipelines and the Pull Requests. `<branch>` is the deplo
 
 In the logs of this repository, the job that runs `sf hardis:org:monitor:backup` explains a missing or failed backup, and the job that runs `sf hardis:org:monitor:all` explains a missing check. In the deployment repository, the deployment jobs run `sf hardis:project:deploy:smart`.
 
+## Monitoring results in Grafana
+
+{{grafanaStatus}}
+
+The results of the monitoring checks are not stored in this repository. When the pipeline sets `NOTIF_API_URL` and `NOTIF_API_METRICS_URL`, every notification of the backup and of `sf hardis:org:monitor:all` is also sent to Grafana: one JSON log line to Loki with the whole report, and its numbers to Prometheus. The CI/CD pipeline of the deployment repository sends each deployment there too. That is the day by day history of the org, and what the [Org Monitoring by sfdx-hardis dashboards](https://sfdx-hardis.cloudity.com/salesforce-monitoring-grafana-v2/) display. Use it for questions like:
+
+- How did the API requests usage evolve over the last three months? Which limit is closest to its maximum?
+- On which days did Apex errors spike, and which classes caused them? Which Flows fail the most this week?
+- When will the data storage be full at the current pace?
+- Which users have not logged in for six months? Which licenses are unused?
+- What did the last Security Health Check report, and how did the score evolve?
+- Which deployments reached this org this month, and did they succeed?
+- Did the backup run every night this month?
+- Which other monitored orgs have this package installed, or more Apex errors than this one?
+
+### Connect
+
+1. **Grafana instance**: the `GRAFANA_API_URL` environment variable, else `grafanaUrl` in `.sfdx-hardis.yml` (see above). Below, `$GRAFANA_API_URL` stands for that URL, without a trailing `/`.
+2. **Token**: a Grafana tool you already have (a Grafana MCP server) needs nothing more. Otherwise use the `GRAFANA_API_TOKEN` environment variable, or the same name in the `.env` file at the root of this repository, loaded as described for the git providers. A service account token with the **Viewer** role is enough. When the instance restricts data source permissions, the service account also needs the **Query** permission on the Loki and Prometheus data sources (**Connections** > **Data sources** > the data source > **Permissions**): without it, calls answer `Access denied to datasource`. The token never goes in `.sfdx-hardis.yml`.
+3. **No token**: tell the user they can create a service account token with the Viewer role (Grafana: **Administration** > **Users and access** > **Service accounts**) and put it as `GRAFANA_API_TOKEN` in `.env`, then answer without Grafana. Do not reuse the `NOTIF_API_*` credentials of the pipeline: they are CI secrets, usually allowed to write only.
+
+Only send `GET` requests. Queries hold `{`, `"` and `|`, so let curl encode them:
+
+```sh
+curl -sG -H "Authorization: Bearer $GRAFANA_API_TOKEN" "$LOKI/query_range" \
+  --data-urlencode 'query={source="sfdx-hardis", orgIdentifier="acme", type="ORG_LIMITS"} | json t="_title" | line_format "{{.t}}" | keep type' \
+  --data-urlencode 'start=2026-09-01T00:00:00Z' --data-urlencode 'limit=10'
+```
+
+### Find the datasources
+
+Use `grafanaLokiDatasourceUid` and `grafanaPrometheusDatasourceUid` from `.sfdx-hardis.yml` when they are set. Otherwise call `GET $GRAFANA_API_URL/api/datasources`: it lists only the datasources the token can query. Keep the ones of type `loki` and `prometheus`, leaving out the Grafana Cloud internal ones (`alert-state-history`, `usage-insights`, `ml-metrics` or `usage` in the uid). On Grafana Cloud they are usually `grafanacloud-logs` and `grafanacloud-prom`: try them first. When several remain, keep the one where `count(last_over_time({source="sfdx-hardis"}[2d]))` (Prometheus, `/query`) or `sum(count_over_time({source="sfdx-hardis"}[1d]))` (Loki, `/query`) returns data. A datasource that answers an error, like `Invalid data source URL`, is not the one. When none has sfdx-hardis data, the token probably lacks the Query permission: tell the user (see above). Offer to write the two uids in `.sfdx-hardis.yml`, so the next agent skips this step.
+
+Below, `$LOKI` stands for `$GRAFANA_API_URL/api/datasources/proxy/uid/<loki uid>/loki/api/v1` and `$PROM` for `$GRAFANA_API_URL/api/datasources/proxy/uid/<prometheus uid>/api/v1`.
+
+### Find this org
+
+Every log line and metric has a `gitIdentifier` label: `<repository name>/<branch>` of the job that sent it. For this branch, it is the last part of `git remote get-url origin` without `.git`, a `/`, then `git branch --show-current`. Get the `orgIdentifier` from it:
+
+```sh
+curl -sG -H "Authorization: Bearer $GRAFANA_API_TOKEN" "$PROM/label/orgIdentifier/values" \
+  --data-urlencode 'match[]={source="sfdx-hardis", gitIdentifier="acme-monitoring/monitoring_acme__uat_sandbox"}'
+```
+
+If that returns nothing, the `orgIdentifier` is usually `instanceUrl` of `.sfdx-hardis.yml` without `https://` and `.my.salesforce.com`, dots replaced by `__`: `https://acme--uat.sandbox.my.salesforce.com` gives `acme--uat__sandbox`. The pipeline can override it with `SFDX_HARDIS_MONITORING_KEY`, so check it exists in `GET $PROM/label/orgIdentifier/values`. Query all the orgs of this repository the same way, with the other branches of `git branch -r`.
+
+Which checks send data for this org, and how many lines in 30 days: `GET $LOKI/query` with `query=sum by (type) (count_over_time({source="sfdx-hardis", orgIdentifier="acme"}[30d]))`. An org monitored by the backup only sends `BACKUP`.
+
+### What is sent
+
+Labels, on logs and metrics:
+
+- `source`: always `sfdx-hardis`
+- `orgIdentifier`: the monitored org (see above)
+- `type`: the notification type. The `notificationTypes` of the checks listed below, plus `BACKUP` (each backup, with severity `error` and an `error` field when it failed), `MONITORING_SUMMARY` (each run of the checks) and `DEPLOYMENT` (each deployment by the CI/CD pipeline, its `gitIdentifier` is then the deployment repository and branch)
+- `severity` (logs only): `critical`, `error`, `warning`, `info`, `success` or `log`
+- `gitIdentifier`: `<repository name>/<branch>` of the job that sent it
+
+Grafana Cloud adds `service_name` and `detected_level`: ignore them.
+
+**Log lines** are JSON documents: `_title` (one line summary), `_logBodyText` (the notification text), `_logElements` (the rows of the report, cut at 500 rows or fewer when the line is too big, then `_logElementsTruncated` is true and `_logElementsTotal` gives the number of rows before the cut), `metric` (the main value), `_metrics`, `_jobUrl` (the CI job that sent it) and `_dateTime`. Some types add their own fields: `topFailingApex` (`APEX_ERROR`), `topFailingFlows` and `topFailingSteps` (`FLOW_ERROR`), `installedPackages` (`BACKUP`), `licenses` (`LICENSES`), `limits` (`ORG_LIMITS`), `entitlements` (`USAGE_ENTITLEMENTS`), `healthScoreDetails` (weekly `MONITORING_SUMMARY` only). To know the fields of a type, read one line of it with `limit=1`.
+
+**Metrics**: each key of `_metrics` gives `<Key>_metric`, plus `<Key>_percent`, `<Key>_max` and `<Key>_min` when the key has these values (`ORG_LIMITS` gives `DailyApiRequests_metric`, `DailyApiRequests_max` and `DailyApiRequests_percent`). With a Prometheus Pushgateway instead of Grafana Cloud, the main value is `<Key>` without `_metric`. Key names mix cases (`ApexErrors`, `unusedApexClasses`, `UNUSED_USERS`): list them instead of guessing, with `GET $PROM/label/__name__/values` and `match[]={source="sfdx-hardis", type="ORG_LIMITS", orgIdentifier="acme"}`.
+
+**Personal data**: when the checks run in CI, the user fields of their reports (username, email, first and last name, user Id) are pseudonymized, like `user_ee329d2dc7` or `id_219ea85aee`. Never try to find who is behind an alias. Other text is sent as is, like the commit authors in a `DEPLOYMENT` line, and by default the users who made the Setup Audit Trail actions: auditing needs their names.
+
+### Query rules
+
+- **Metrics arrive once a day.** A plain selector looks back 5 minutes only and returns nothing: wrap it in a range function. `last_over_time(...[2d])` for the current value (`[8d]` for the weekly health score, longer for checks that run weekly or monthly, see the frequency in the checks table), `max_over_time(...[30d])` for a peak, and `last_over_time(...[1d])` with `query_range` and `step=1d` for a daily history.
+- **A daily point is dated the day after.** With `last_over_time(...[1d])` and `step=1d`, the point at `2026-09-23T00:00:00Z` holds the value sent during 2026-09-22. And the checks run at night on the day before: `ApexErrors` sent on 2026-09-22 counts the errors of 2026-09-21 (the `_title` of the log line says "over the last 1 day(s)"). Say which day you mean.
+- **Windows and ranges are capped.** On Grafana Cloud, a range function window (`[30d]`) cannot exceed 32 days (`err-mimir-max-query-length`). For a longer period, use `query_range` with `step=1d` over the whole period, and compute the peak or average from the points.
+- **Retention depends on the Grafana plan.** The Grafana Cloud free tier keeps logs and metrics about 14 days; paid plans usually keep logs about 30 days and metrics about 13 months. Before answering about an older period, check the date of the first point you got, and say so when the history is shorter than the question.
+- **A log query covers 30 days at most.** Loki refuses a query longer than 30 days (`the query time range exceeds the limit`) or older than its retention. A calendar month from midnight to midnight is already too long: for "the last month" or "the last 30 days", pass a `start` 29 days ago at `00:00:00Z` and no `end` (it defaults to now). For an older period, use the metrics.
+- **Always pass `start` to Loki**: without it, a query only reads the last hour, and label values the last 6 hours. `start` and `end` take RFC 3339 dates in UTC, like `2026-09-01T00:00:00Z`, on both APIs. A log query that does not select an org can hit the 500 streams limit: add `orgIdentifier`, or count with `sum(count_over_time(...))`.
+- **Keep only `.data.result`** of the answers (with `jq` or `node`): Loki adds a `stats` object that is often bigger than the result.
+- **A log line can weigh hundreds of KB** (a day with thousands of Apex errors). Never pull raw lines over a range. Extract the fields you need with `| json a="field" | line_format "{{.a}}" | keep type`, and use `limit=1` for the latest report. `keep type` stops Loki from copying the extracted fields into the labels of each result. The rows of one report can still be large (hundreds of users or errors): save the answer to a file under `hardis-report/` and filter it there, rather than reading it whole.
+- **A metric can exist without its log line.** Loki refuses a line bigger than its size limit (256 KB on Grafana Cloud). Recent sfdx-hardis versions cut the rows until the line fits, older ones lost the whole line on days with thousands of errors: the numbers are in Prometheus, the rows and the `topFailing*` fields are not. Say so, and give the numbers.
+- **No data is not zero.** When a query returns nothing, check the org, the metric name and the time range before answering, and say that there is no data.
+
+### Grafana recipes
+
+Replace `acme` with the `orgIdentifier`. `$PROM/query` returns one value, `$PROM/query_range` with `start`, `end` and `step=1d` a daily history. `$LOKI/query_range` with `start` and `limit` returns lines, `$LOKI/query` counts lines.
+
+Limits and capacity:
+
+- The 10 most used limits: `topk(10, max by (__name__) (last_over_time({__name__=~".+_percent", source="sfdx-hardis", type="ORG_LIMITS", orgIdentifier="acme"}[2d])))`
+- History of one limit, with `query_range`: `max(last_over_time(DailyApiRequests_percent{source="sfdx-hardis", orgIdentifier="acme"}[1d]))`. Its peak over 30 days: `max(max_over_time(DailyApiRequests_percent{source="sfdx-hardis", orgIdentifier="acme"}[30d]))`. Over three months, take the highest point of the daily history instead.
+- Days until the data storage is full, at the pace of the last 30 days: `(100 - last_over_time(DataStorageMB_percent{source="sfdx-hardis", orgIdentifier="acme"}[2d])) / clamp_min(deriv(DataStorageMB_percent{source="sfdx-hardis", orgIdentifier="acme"}[30d]) * 86400, 0.000001)`. A huge result means it does not grow. Same with `FileStorageMB_percent`.
+
+Errors:
+
+- Apex errors per day, with `query_range`: `max(last_over_time(ApexErrors_metric{source="sfdx-hardis", orgIdentifier="acme"}[1d]))`, and `FlowErrors_metric` for Flows. This week against the previous one: `sum(sum_over_time(ApexErrors_metric{source="sfdx-hardis", orgIdentifier="acme"}[7d])) - sum(sum_over_time(ApexErrors_metric{source="sfdx-hardis", orgIdentifier="acme"}[7d] offset 7d))`
+- The classes behind the errors, day by day: `{source="sfdx-hardis", orgIdentifier="acme", type="APEX_ERROR"} | json n="metric", top="topFailingApex" | line_format "{{.n}} errors, top: {{.top}}" | keep type`. For Flows, `topFailingFlows` and `topFailingSteps` of `FLOW_ERROR`.
+- The days a class or a message appears in the error reports: `{source="sfdx-hardis", orgIdentifier="acme", type="APEX_ERROR"} |= "InvoiceService" | json t="_title" | line_format "{{.t}}" | keep type`, then read the `_logElements` of one of these days for the stack traces.
+- Everything that went wrong recently: `{source="sfdx-hardis", orgIdentifier="acme", severity=~"error|critical"} | json t="_title" | line_format "{{.t}}" | keep type`
+
+Latest report of a check, with its rows: `{source="sfdx-hardis", orgIdentifier="acme", type="UNUSED_USERS"} | json t="_title", e="_logElements" | line_format "{{.t}} {{.e}}" | keep type` with `limit=1`. It works for every type: `LICENSES`, `ORG_HEALTH_CHECK`, `AUDIT_TRAIL`, `UNSECURED_CONNECTED_APPS`, `RELEASE_UPDATES`... For inactive users, `UNUSED_USERS` covers every license, `UNUSED_USERS_CRM_6_MONTHS` and `UNUSED_USERS_EXPERIENCE_6_MONTHS` split internal and Experience Cloud users. A report cut at 500 rows cannot be compared row by row with another one: compare their counts.
+
+Scores and trends (other names: list them, see above):
+
+- Health score and its sub-scores, computed weekly: `max by (__name__) (last_over_time({__name__=~"HealthScore.*_metric", source="sfdx-hardis", orgIdentifier="acme"}[8d]))`. The reasons are only on the weekly `MONITORING_SUMMARY` line, with a `start` 8 days ago: `{source="sfdx-hardis", orgIdentifier="acme", type="MONITORING_SUMMARY"} |= "healthScoreDetails" | json d="healthScoreDetails" | line_format "{{.d}}" | keep type` with `limit=1`.
+- Metrics the dashboards use: `ApexTestsCodeCoverage_metric`, `Score_metric` and `HighRisk_metric` (Security Health Check), `SuspectMetadataUpdates_metric` (audit trail), `ACTIVE_USERS_CRM_WEEKLY_metric`, `UNUSED_USERS_CRM_6_MONTHS_metric`, `unusedApexClasses_metric`, `MetadatasWithoutDescription_metric`, `AiUsageCreditsTotal_metric`, `deploymentsTotal_metric`, `deploymentSuccessRate_metric`, `DoraLeadTimeDays_metric`.
+
+Backups, checks and deployments:
+
+- Did the backup succeed every night, with `$LOKI/query_range` and `step=1d`: `sum by (severity) (count_over_time({source="sfdx-hardis", orgIdentifier="acme", type="BACKUP"}[1d]))`. An `error` point is a failed backup. A day with no point at all had no backup: the job did not run, or it ran with an sfdx-hardis version that sent nothing on failure, and the pipeline logs of this repository say why.
+- Why a backup failed: `{source="sfdx-hardis", orgIdentifier="acme", type="BACKUP", severity="error"} | json e="error" | line_format "{{.e}}" | keep type` gives the error message of each failure.
+- Checks that failed in the last week: `max(max_over_time(CommandsFailed_metric{source="sfdx-hardis", orgIdentifier="acme"}[7d]))`. Which ones is only in the pipeline logs.
+- Deployments to this org: `{source="sfdx-hardis", orgIdentifier="acme", type="DEPLOYMENT"} | json t="_title", j="_jobUrl" | line_format "{{.t}} {{.j}}" | keep severity`. The `_logBodyText` of a deployment lists its deployment actions, its commits and the link of its Pull Request.
+
+All the monitored orgs (leave out `orgIdentifier`):
+
+- The orgs with the most Apex errors in 7 days: `topk(10, sum by (orgIdentifier) (sum_over_time(ApexErrors_metric{source="sfdx-hardis"}[7d])))`
+- The orgs where a package is installed, with `$LOKI/query`: `sum by (orgIdentifier) (count_over_time({source="sfdx-hardis", type="BACKUP"} |= "\"SubscriberPackageNamespace\":\"FSL\"" [7d]))`. Match the namespace exactly, or the name with `|~ "\"SubscriberPackageName\":\"[^\"]*(?i:field service)"`: a bare word also matches the rest of the line. Each entry of `installedPackages` has `SubscriberPackageName`, `SubscriberPackageNamespace` and `SubscriberPackageVersionNumber`.
+- The orgs without a successful backup for 36 hours, with `$LOKI/query`: `(sum by (orgIdentifier) (count_over_time({source="sfdx-hardis", type="BACKUP"}[30d])) > 0) unless (sum by (orgIdentifier) (count_over_time({source="sfdx-hardis", type="BACKUP", severity!~"error|critical"}[36h])) > 0)`
+- The orgs that stopped sending data, with `$LOKI/query`: `(sum by (orgIdentifier) (count_over_time({source="sfdx-hardis"}[7d])) > 0) unless (sum by (orgIdentifier) (count_over_time({source="sfdx-hardis"}[36h])) > 0)`. The last day each org sent data, in one call, with `$LOKI/query_range`, `step=1d` and a `start` 7 days ago: `sum by (orgIdentifier) (count_over_time({source="sfdx-hardis"}[1d]))`, then take the last point of each series.
+
+### Answer
+
+- Give the values with their dates in UTC, and say which check they come from.
+- Add the link of the dashboard that shows the answer, when the instance has them (`GET $GRAFANA_API_URL/api/search?folderUIDs=sfdx-hardis-v2`): `$GRAFANA_API_URL/d/<uid>?var-org=acme&from=now-30d&to=now`. The uids: `sfdx-hardis-v2-org-home` (overview of one org), `sfdx-hardis-v2-org-reliability` (Apex and Flow errors), `sfdx-hardis-v2-org-limits`, `sfdx-hardis-v2-org-devops` (deployments), `sfdx-hardis-v2-org-security`, `sfdx-hardis-v2-org-debt` (technical debt, test coverage), `sfdx-hardis-v2-org-adoption` (users, licenses), `sfdx-hardis-v2-org-usage` (AI credits, consumption), `sfdx-hardis-v2-dtl-indicator` (any metric, with `var-type` and `var-metric`), `sfdx-hardis-v2-fleet` (all the orgs).
+
+## Salesforce org access: read-only, with consent
+
+Answer from this repository, its git history, the deployment repository and Grafana first: most questions need no connection to the org. Connect to the org only when a question needs live data none of them hold, like a record count, a setting that is not backed up, or the Setup Audit Trail entries of a given day.
+
+1. **Ask first, every time.** Tell the user which org, what you want to read and why, and wait for an explicit yes. Never connect to an org without it, and ask again for another org.
+2. **Use an org the user authenticated.** `sf org list` shows them: pick the one whose instance URL is `instanceUrl` of `.sfdx-hardis.yml`, and always pass it explicitly with `--target-org <alias or username>`, never rely on the default org. If it is not there, ask the user to log in with the **Org Manager** of the VS Code extension sfdx-hardis, or to run `sf org login web --instance-url <instanceUrl> --alias <alias>` themselves. Never use the credentials of the monitoring pipeline (CI variables, certificates): they are not meant for you.
+3. **Read, never write.** The only commands you may run against the org are:
+   - `sf data query --query "<SOQL>" --target-org <org>`, with `--use-tooling-api` for Tooling API objects. Add a `LIMIT`, and prefer `COUNT()` or aggregate queries to pulling thousands of records.
+   - `sf org list metadata --metadata-type <type> --target-org <org>` and `sf org list limits --target-org <org>`
+   - `sf apex list log --target-org <org>` and `sf apex get log --log-id <id> --target-org <org>`
+   - `sf org display --target-org <org>`, never with `--verbose`, and never show its access token.
+
+Any other command against an org counts as a write: do not run it, even when the user asks. That includes `sf project deploy`, `sf project retrieve` (it rewrites this repository), every `sf data` command other than `query`, `sf apex run` (anonymous Apex can change data), `sf apex run test`, `sf org assign`, `sf org create`, `sf org delete`, `sf org generate password`, every `sf hardis` command, and any REST, SOAP, Metadata or Tooling API call other than a read. When the user wants something changed in the org, explain that this repository only watches the org: the change goes through the deployment repository and its CI/CD pipeline, or the user makes it themselves.
+
 ## Files and folders
 
 | Path | Content |
@@ -227,7 +363,7 @@ In the logs of this repository, the job that runs `sf hardis:org:monitor:backup`
 | `manifest/chunks/` | Only in full mode (`--full`): the list of items split in several retrieves. |
 | `docs/` | Project documentation generated from the metadata after each backup, unless disabled: objects, Apex, Flows with their visual history (`docs/flows/*-history.md`), Lightning pages, profiles, permission sets, packages, and an object model diagram. |
 | `mkdocs.yml` | Menu and settings of the documentation site built from `docs/`. |
-| `.sfdx-hardis.yml` | sfdx-hardis configuration of the branch: monitored org, notification settings, custom `monitoringCommands` and `monitoringDisable`, and the `deploymentRepository` (and optional `deploymentBranch`) that deploys to the org. |
+| `.sfdx-hardis.yml` | sfdx-hardis configuration of the branch: monitored org, notification settings, custom `monitoringCommands` and `monitoringDisable`, the `deploymentRepository` (and optional `deploymentBranch`) that deploys to the org, and the `grafanaUrl` (and optional datasource uids) that receives the monitoring results. Never a secret. |
 | `sfdx-project.json` | Salesforce DX project definition, including the API version used for the retrieve. |
 | `.gitlab-ci.yml`, `.github/workflows/`, `azure-pipelines.yml`, `bitbucket-pipelines.yml`, `Jenkinsfile` | The monitoring pipeline for each CI/CD platform. Only one of them is used. On GitHub, the workflow lives on the default branch and runs all monitoring branches. |
 | `.mega-linter.yml`, `.jscpd.json` | MegaLinter and copy-paste detection settings. |
@@ -253,11 +389,12 @@ The other way around, a component in `force-app/` but not in `manifest/package-a
 
 ## Rules for coding agents
 
-- Never deploy anything from this repository to an org.
+- Never write to a Salesforce org: no deployment, no data change, no anonymous Apex, no test run, no permission or user change, whatever the org and whoever asks. Only read it, only after the user said yes, as described in [Salesforce org access](#salesforce-org-access-read-only-with-consent).
 - Do not edit the files under `force-app/`, `manifest/package-all-org-items.xml`, `manifest/package-backup-items.xml`, `installedPackages/` or `docs/`: the next backup overwrites them.
 - Changes worth making here are configuration: `manifest/package-skip-items.xml`, `.sfdx-hardis.yml`, the pipeline file. They apply to the branch they are committed on, so to one org.
 - To answer "what does this org do", read the sources in `force-app/main/default/` first, then the generated `docs/` when present. Before describing a component, check that it is still in `manifest/package-all-org-items.xml`.
 - Only read the deployment repository and the git servers. Never commit, push, check out a branch in the local clone of the deployment repository, create a branch, comment, approve or merge a Pull Request, start, retry or cancel a pipeline, or change a variable or a setting of either repository.
+- Only read Grafana: never create, change or delete a dashboard, an alert rule, a silence, a datasource or a service account.
 - Never print a token, and never write one in a file or in an answer.
 
 ## Documentation

package/lib/commands/hardis/org/configure/grafana-dashboards.js

@@ -6,7 +6,7 @@ import { open } from '../../../../common/utils/openUtils.js';
 import { isCI, uxLog, uxLogTable } from '../../../../common/utils/index.js';
 import { prompts } from '../../../../common/utils/prompts.js';
 import { t } from '../../../../common/utils/i18n.js';
-import { CONSTANTS, getEnvVar } from '../../../../config/index.js';
+import { CONSTANTS, getConfig, getEnvVar } from '../../../../config/index.js';
 import { buildAlertRuleGroups, createGrafanaClient, ensureGrafanaFolder, fetchGitHubRawFile, fetchRawUrl, getGrafanaDashboard, getGrafanaDatasources, grafanaApiErrorMessage, GRAFANA_V2_ALERTS_PATH, GRAFANA_V2_FLEET_UID, GRAFANA_V2_FOLDER_TITLE, GRAFANA_V2_FOLDER_UID, importGrafanaAlertRuleGroup, importGrafanaDashboard, isGrafanaAuthError, listDashboardFiles, normalizeGrafanaUrl, pickDatasource, } from '../../../../common/grafana/grafanaDashboardsInstaller.js';
 Messages.importMessagesDirectoryFromMetaUrl(import.meta.url);
 const messages = Messages.loadMessages('sfdx-hardis', 'org');
@@ -23,10 +23,10 @@ Key functionalities:
 - **Guided start:** in interactive mode, the command first asks whether a Grafana instance is already available. If not, it opens the [Grafana free-tier setup guide](${CONSTANTS.DOC_URL_ROOT}/salesforce-devops-setup-integration-api/#grafana-setup) (Grafana Cloud free tier: free forever, no credit card required) instead of asking for a URL.
 - **Folder creation:** creates the \`Org Monitoring by sfdx-hardis\` folder (uid \`sfdx-hardis-v2\`) if missing.
 - **Dashboard import:** downloads the dashboard definitions from the sfdx-hardis GitHub repository (\`--ref\` selects the branch or tag, default \`main\`) and imports them with \`overwrite: true\`. Re-running the command upgrades the dashboards in place: uids are stable, bookmarks and links keep working. The dashboards resolve their Prometheus and Loki datasources by themselves (hidden variables), so no datasource configuration is needed for this part.
-- **Optional alert pack:** with \`--with-alerts\`, imports the 6 alert rules (org limit above 90%, storage exhaustion forecast, error spike, backup failure, silent org, health score degradation). All rules are imported **paused**, so they trigger no evaluation and no cost until you enable them from **Alerting -> Alert rules** and configure your contact points. Alert rules need explicit datasource uids: the command auto-detects the Prometheus/Mimir and Loki datasources receiving sfdx-hardis data (Grafana Cloud internal datasources are filtered out), and \`--prom-uid\` / \`--loki-uid\` pin the choice when several candidates exist.
+- **Optional alert pack:** with \`--with-alerts\`, imports the 6 alert rules (org limit above 90%, storage exhaustion forecast, error spike, missing backup, silent org, health score degradation). All rules are imported **paused**, so they trigger no evaluation and no cost until you enable them from **Alerting -> Alert rules** and configure your contact points. Alert rules need explicit datasource uids: the command auto-detects the Prometheus/Mimir and Loki datasources receiving sfdx-hardis data (Grafana Cloud internal datasources are filtered out), and \`--prom-uid\` / \`--loki-uid\` pin the choice when several candidates exist.
 - **Verification:** each imported dashboard is read back through the API, and the command prints the direct URL to the Fleet Overview.
 
-Authentication uses a Grafana service account token provided via \`--grafana-token\` or the \`GRAFANA_API_TOKEN\` environment variable (prefer the environment variable: flag values can end up in shell history and local log files). The instance URL comes from \`--grafana-url\` or \`GRAFANA_API_URL\`. An Editor role is enough for the dashboards; \`--with-alerts\` additionally needs datasource read and alert provisioning permissions.
+Authentication uses a Grafana service account token provided via \`--grafana-token\` or the \`GRAFANA_API_TOKEN\` environment variable (prefer the environment variable: flag values can end up in shell history and local log files). The instance URL comes from \`--grafana-url\`, \`GRAFANA_API_URL\` or the \`grafanaUrl\` property of \`.sfdx-hardis.yml\`, in that order, and the alert pack datasources can be pinned with the \`grafanaPrometheusDatasourceUid\` and \`grafanaLokiDatasourceUid\` properties, used only when the instance is that \`grafanaUrl\`. The token never goes in the configuration file. An Editor role is enough for the dashboards; \`--with-alerts\` additionally needs datasource read and alert provisioning permissions.
 
 This command requires no Salesforce org: it only talks to Grafana and GitHub. Configure the [API integration](${CONSTANTS.DOC_URL_ROOT}/salesforce-devops-setup-integration-api/) first so the dashboards have data to display.
 
@@ -63,7 +63,7 @@ In agent mode:
     ];
     static flags = {
         'grafana-url': Flags.string({
-            description: 'Grafana instance URL (defaults to GRAFANA_API_URL environment variable)',
+            description: 'Grafana instance URL (defaults to GRAFANA_API_URL environment variable, then to grafanaUrl in .sfdx-hardis.yml)',
         }),
         'grafana-token': Flags.string({
             description: 'Grafana service account token with Editor role (defaults to GRAFANA_API_TOKEN environment variable)',
@@ -123,7 +123,9 @@ In agent mode:
                 return { success: false, grafanaInstanceMissing: true, docUrl: docUrl };
             }
         }
-        const rawUrl = await this.resolveInput(flags['grafana-url'], 'GRAFANA_API_URL', t('promptGrafanaUrl'), t('promptGrafanaUrlDescription'), t('errorGrafanaUrlMissing'));
+        // Non-secret Grafana settings can live in .sfdx-hardis.yml; the token never does
+        const config = await getConfig('user');
+        const rawUrl = await this.resolveInput(flags['grafana-url'], 'GRAFANA_API_URL', t('promptGrafanaUrl'), t('promptGrafanaUrlDescription'), t('errorGrafanaUrlMissing'), false, config.grafanaUrl);
         let grafanaUrl;
         try {
             grafanaUrl = normalizeGrafanaUrl(rawUrl);
@@ -187,8 +189,22 @@ In agent mode:
             catch (e) {
                 throw this.grafanaApiError('GET /api/datasources', e);
             }
-            promUid = await this.resolveDatasourceUid(datasources, 'prometheus', flags['prom-uid']);
-            lokiUid = await this.resolveDatasourceUid(datasources, 'loki', flags['loki-uid']);
+            // The datasource uids of .sfdx-hardis.yml belong to its grafanaUrl: never apply them to
+            // another instance given by --grafana-url or GRAFANA_API_URL
+            let configUidsApply = false;
+            try {
+                // Compare parsed URLs: the host is case-insensitive, and URL() lowercases it
+                const instanceKey = (url) => {
+                    const parsed = new URL(normalizeGrafanaUrl(url));
+                    return parsed.origin + parsed.pathname.replace(/\/+$/, '');
+                };
+                configUidsApply = typeof config.grafanaUrl === 'string' && instanceKey(config.grafanaUrl) === instanceKey(grafanaUrl);
+            }
+            catch {
+                configUidsApply = false;
+            }
+            promUid = await this.resolveDatasourceUid(datasources, 'prometheus', flags['prom-uid'] || (configUidsApply ? config.grafanaPrometheusDatasourceUid : undefined));
+            lokiUid = await this.resolveDatasourceUid(datasources, 'loki', flags['loki-uid'] || (configUidsApply ? config.grafanaLokiDatasourceUid : undefined));
             let groups;
             try {
                 const alertsYaml = await fetchGitHubRawFile(ref, GRAFANA_V2_ALERTS_PATH);
@@ -232,7 +248,7 @@ In agent mode:
         return new SfError(isGrafanaAuthError(e) ? `${message}\n${t('errorGrafanaAuthHint')}` : message);
     }
     // flag > env var > interactive prompt (skipped in CI / agent mode) > error
-    async resolveInput(flagValue, envVarName, promptMessage, promptDescription, errorMessage, sensitive = false) {
+    async resolveInput(flagValue, envVarName, promptMessage, promptDescription, errorMessage, sensitive = false, configValue) {
         if (flagValue) {
             return flagValue;
         }
@@ -240,6 +256,9 @@ In agent mode:
         if (envValue) {
             return envValue;
         }
+        if (typeof configValue === 'string' && configValue.trim() !== '') {
+            return configValue.trim();
+        }
         if (!isCI && !this.agentMode) {
             const response = await prompts({
                 type: 'text',

package/lib/commands/hardis/org/configure/grafana-dashboards.js.map

@@ -1 +1 @@
-{"version":3,"file":"grafana-dashboards.js","sourceRoot":"","sources":["../../../../../src/commands/hardis/org/configure/grafana-dashboards.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,CAAC,MAAM,OAAO,CAAC;AACtB,OAAO,EAAE,IAAI,EAAE,MAAM,uCAAuC,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,qCAAqC,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,kCAAkC,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EAErB,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,GACf,MAAM,0DAA0D,CAAC;AAElE,QAAQ,CAAC,kCAAkC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AAC7D,sBAAsB;AAEtB,MAAM,CAAC,OAAO,OAAO,0BAA2B,SAAQ,SAAc;IAC7D,MAAM,CAAC,KAAK,GAAG,4BAA4B,CAAC;IAE5C,MAAM,CAAC,WAAW,GAAG;;;uEAGyC,SAAS,CAAC,YAAY;;;;wKAI2E,SAAS,CAAC,YAAY;;;;;;;;gHAQ9E,SAAS,CAAC,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;CAyBrI,CAAC;IAEO,MAAM,CAAC,QAAQ,GAAG;QACvB,8CAA8C;QAC9C,wHAAwH;QACxH,4DAA4D;QAC5D,0GAA0G;QAC1G,8IAA8I;KAC/I,CAAC;IAEK,MAAM,CAAC,KAAK,GAAQ;QACzB,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC;YAC1B,WAAW,EAAE,yEAAyE;SACvF,CAAC;QACF,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC;YAC5B,WAAW,EAAE,qGAAqG;SACnH,CAAC;QACF,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC;YACvB,WAAW,EAAE,gHAAgH;SAC9H,CAAC;QACF,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC;YACvB,WAAW,EAAE,oGAAoG;SAClH,CAAC;QACF,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC;YAC3B,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,0EAA0E;SACxF,CAAC;QACF,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC;YAChB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,8EAA8E;SAC5F,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,uDAAuD;SACrE,CAAC;QACF,wBAAwB;QACxB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;SAC9C,CAAC;QACF,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;SAC9C,CAAC;QACF,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC;YACtB,WAAW,EAAE,+DAA+D;SAC7E,CAAC;QACF,sBAAsB;KACvB,CAAC;IAEK,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC;IAE9B,SAAS,GAAG,KAAK,CAAC;IAEnB,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC;QAEhC,6EAA6E;QAC7E,oDAAoD;QACpD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC;gBAC/B,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,CAAC,CAAC,0BAA0B,CAAC;gBACtC,WAAW,EAAE,CAAC,CAAC,qCAAqC,CAAC;gBACrD,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,IAAI,UAAU,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,yDAAyD,CAAC;gBAClG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7E,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CACpC,KAAK,CAAC,aAAa,CAAC,EACpB,iBAAiB,EACjB,CAAC,CAAC,kBAAkB,CAAC,EACrB,CAAC,CAAC,6BAA6B,CAAC,EAChC,CAAC,CAAC,wBAAwB,CAAC,CAC5B,CAAC;QACF,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAC1C,KAAK,CAAC,eAAe,CAAC,EACtB,mBAAmB,EACnB,CAAC,CAAC,oBAAoB,CAAC,EACvB,CAAC,CAAC,+BAA+B,CAAC,EAClC,CAAC,CAAC,0BAA0B,CAAC,EAC7B,IAAI,CACL,CAAC;QACF,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC9E,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAE7D,SAAS;QACT,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,uBAAuB,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC;QAErI,aAAa;QACb,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,2BAA2B,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5E,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,kBAAkB,GAAuD,EAAE,CAAC;QAClF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,SAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACpD,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/G,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;gBACvE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;gBAClE,MAAM,YAAY,GAAG,GAAG,UAAU,GAAG,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC;gBACpF,kBAAkB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC3F,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YACxF,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,iFAAiF;QACjF,mFAAmF;QACnF,IAAI,kBAAkB,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;YAClC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;YAC3D,IAAI,WAAW,GAAwB,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,WAAW,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,eAAe,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YACxF,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAClF,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;gBACzE,MAAM,GAAG,oBAAoB,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;YACrF,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1F,CAAC;YACD,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YACzF,IAAI,CAAC;gBACH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,2BAA2B,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,CAAC,CAAC;oBACxE,kBAAkB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC3C,CAAC;YACH,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;YACtD,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC;QAED,UAAU;QACV,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,oBAAoB,CAAC,EAAE,GAAG,IAAI,GAAG,UAAU,MAAM,oBAAoB,EAAE,CAAC;QAClI,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QACjH,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,qBAAqB;YAChC,iBAAiB,EAAE,OAAO;YAC1B,iBAAiB,EAAE,OAAO;YAC1B,UAAU,EAAE,kBAAkB;YAC9B,kBAAkB,EAAE,kBAAkB;YACtC,gBAAgB,EAAE,QAAQ;SAC3B,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,SAAiB,EAAE,CAAM;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnG,OAAO,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnG,CAAC;IAED,2EAA2E;IACnE,KAAK,CAAC,YAAY,CACxB,SAA6B,EAC7B,UAAkB,EAClB,aAAqB,EACrB,iBAAyB,EACzB,YAAoB,EACpB,SAAS,GAAG,KAAK;QAEjB,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;gBAC7B,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,aAAa;gBACtB,WAAW,EAAE,iBAAiB;gBAC9B,SAAS,EAAE,SAAS;aACrB,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,QAAQ,CAAC,KAAK,CAAC;YACxB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,WAAgC,EAChC,IAA2B,EAC3B,WAA+B;QAE/B,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC,EAAE,CAAC;gBACtD,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,mCAAmC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7G,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACnH,OAAO,QAAQ,CAAC,GAAG,CAAC;QACtB,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,gCAAgC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;gBAC7B,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,CAAC,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACrD,WAAW,EAAE,CAAC,CAAC,oCAAoC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACpE,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;aACtF,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,KAAK,CAAC;QACxB,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;QACrE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1I,OAAO,QAAQ,CAAC,GAAG,CAAC;IACtB,CAAC"}
+{"version":3,"file":"grafana-dashboards.js","sourceRoot":"","sources":["../../../../../src/commands/hardis/org/configure/grafana-dashboards.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,CAAC,MAAM,OAAO,CAAC;AACtB,OAAO,EAAE,IAAI,EAAE,MAAM,uCAAuC,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,qCAAqC,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,kCAAkC,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EAErB,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,GACf,MAAM,0DAA0D,CAAC;AAElE,QAAQ,CAAC,kCAAkC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AAC7D,sBAAsB;AAEtB,MAAM,CAAC,OAAO,OAAO,0BAA2B,SAAQ,SAAc;IAC7D,MAAM,CAAC,KAAK,GAAG,4BAA4B,CAAC;IAE5C,MAAM,CAAC,WAAW,GAAG;;;uEAGyC,SAAS,CAAC,YAAY;;;;wKAI2E,SAAS,CAAC,YAAY;;;;;;;;gHAQ9E,SAAS,CAAC,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;CAyBrI,CAAC;IAEO,MAAM,CAAC,QAAQ,GAAG;QACvB,8CAA8C;QAC9C,wHAAwH;QACxH,4DAA4D;QAC5D,0GAA0G;QAC1G,8IAA8I;KAC/I,CAAC;IAEK,MAAM,CAAC,KAAK,GAAQ;QACzB,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC;YAC1B,WAAW,EAAE,iHAAiH;SAC/H,CAAC;QACF,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC;YAC5B,WAAW,EAAE,qGAAqG;SACnH,CAAC;QACF,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC;YACvB,WAAW,EAAE,gHAAgH;SAC9H,CAAC;QACF,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC;YACvB,WAAW,EAAE,oGAAoG;SAClH,CAAC;QACF,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC;YAC3B,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,0EAA0E;SACxF,CAAC;QACF,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC;YAChB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,8EAA8E;SAC5F,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,uDAAuD;SACrE,CAAC;QACF,wBAAwB;QACxB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;SAC9C,CAAC;QACF,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;SAC9C,CAAC;QACF,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC;YACtB,WAAW,EAAE,+DAA+D;SAC7E,CAAC;QACF,sBAAsB;KACvB,CAAC;IAEK,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC;IAE9B,SAAS,GAAG,KAAK,CAAC;IAEnB,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC;QAEhC,6EAA6E;QAC7E,oDAAoD;QACpD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC;gBAC/B,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,CAAC,CAAC,0BAA0B,CAAC;gBACtC,WAAW,EAAE,CAAC,CAAC,qCAAqC,CAAC;gBACrD,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,IAAI,UAAU,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,yDAAyD,CAAC;gBAClG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7E,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,iFAAiF;QACjF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CACpC,KAAK,CAAC,aAAa,CAAC,EACpB,iBAAiB,EACjB,CAAC,CAAC,kBAAkB,CAAC,EACrB,CAAC,CAAC,6BAA6B,CAAC,EAChC,CAAC,CAAC,wBAAwB,CAAC,EAC3B,KAAK,EACL,MAAM,CAAC,UAAU,CAClB,CAAC;QACF,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAC1C,KAAK,CAAC,eAAe,CAAC,EACtB,mBAAmB,EACnB,CAAC,CAAC,oBAAoB,CAAC,EACvB,CAAC,CAAC,+BAA+B,CAAC,EAClC,CAAC,CAAC,0BAA0B,CAAC,EAC7B,IAAI,CACL,CAAC;QACF,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC9E,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAE7D,SAAS;QACT,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,uBAAuB,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC;QAErI,aAAa;QACb,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,2BAA2B,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5E,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,kBAAkB,GAAuD,EAAE,CAAC;QAClF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,SAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACpD,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/G,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;gBACvE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;gBAClE,MAAM,YAAY,GAAG,GAAG,UAAU,GAAG,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC;gBACpF,kBAAkB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC3F,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YACxF,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,iFAAiF;QACjF,mFAAmF;QACnF,IAAI,kBAAkB,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;YAClC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;YAC3D,IAAI,WAAW,GAAwB,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,WAAW,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,eAAe,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC;YACxD,CAAC;YACD,wFAAwF;YACxF,6DAA6D;YAC7D,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,IAAI,CAAC;gBACH,6EAA6E;gBAC7E,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE;oBAClC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;oBACjD,OAAO,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC7D,CAAC,CAAC;gBACF,eAAe,GAAG,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,WAAW,CAAC,UAAU,CAAC,CAAC;YACxH,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe,GAAG,KAAK,CAAC;YAC1B,CAAC;YACD,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACvC,WAAW,EACX,YAAY,EACZ,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC,CAC3F,CAAC;YACF,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACvC,WAAW,EACX,MAAM,EACN,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC,CACrF,CAAC;YACF,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;gBACzE,MAAM,GAAG,oBAAoB,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;YACrF,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1F,CAAC;YACD,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YACzF,IAAI,CAAC;gBACH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,2BAA2B,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,CAAC,CAAC;oBACxE,kBAAkB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC3C,CAAC;YACH,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;YACtD,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC;QAED,UAAU;QACV,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,oBAAoB,CAAC,EAAE,GAAG,IAAI,GAAG,UAAU,MAAM,oBAAoB,EAAE,CAAC;QAClI,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QACjH,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,qBAAqB;YAChC,iBAAiB,EAAE,OAAO;YAC1B,iBAAiB,EAAE,OAAO;YAC1B,UAAU,EAAE,kBAAkB;YAC9B,kBAAkB,EAAE,kBAAkB;YACtC,gBAAgB,EAAE,QAAQ;SAC3B,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,SAAiB,EAAE,CAAM;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnG,OAAO,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnG,CAAC;IAED,2EAA2E;IACnE,KAAK,CAAC,YAAY,CACxB,SAA6B,EAC7B,UAAkB,EAClB,aAAqB,EACrB,iBAAyB,EACzB,YAAoB,EACpB,SAAS,GAAG,KAAK,EACjB,WAAoB;QAEpB,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACjE,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;gBAC7B,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,aAAa;gBACtB,WAAW,EAAE,iBAAiB;gBAC9B,SAAS,EAAE,SAAS;aACrB,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,QAAQ,CAAC,KAAK,CAAC;YACxB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,WAAgC,EAChC,IAA2B,EAC3B,WAA+B;QAE/B,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC,EAAE,CAAC;gBACtD,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,mCAAmC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7G,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACnH,OAAO,QAAQ,CAAC,GAAG,CAAC;QACtB,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,gCAAgC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;gBAC7B,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,CAAC,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACrD,WAAW,EAAE,CAAC,CAAC,oCAAoC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACpE,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;aACtF,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,KAAK,CAAC;QACxB,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;QACrE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1I,OAAO,QAAQ,CAAC,GAAG,CAAC;IACtB,CAAC"}

package/lib/commands/hardis/org/monitor/backup.d.ts

@@ -1,5 +1,6 @@
 import { SfCommand } from '@salesforce/sf-plugins-core';
 import { AnyJson } from '@salesforce/ts-types';
+export declare function backupErrorMessage(error: any, maxLength?: number): string;
 export default class MonitorBackup extends SfCommand<any> {
     static title: string;
     static description: string;
@@ -31,6 +32,7 @@ export default class MonitorBackup extends SfCommand<any> {
     protected static getObjectNameFromFieldMember(member: string): string;
     private filterManagedPackageNamespacedDataCloudMetadata;
     run(): Promise<AnyJson>;
+    private postBackupFailureNotification;
     private writeAgentsMd;
     private extractMetadatasFull;
     private manageAddCurrentPackageInChunks;