@axinom/mosaic-cli 0.62.0-rc.1 → 0.62.0-rc.11

package/dist/esm/commands/hosting/database/database-commands.d.ts

@@ -0,0 +1,2 @@
+import type { CommandModule } from 'yargs';
+export declare const databaseCommands: CommandModule<unknown, unknown>;

package/dist/esm/commands/hosting/database/database-commands.js

@@ -0,0 +1,13 @@
+import { databaseProxy } from './proxy/database-proxy-command.js';
+export const databaseCommands = {
+    command: 'database',
+    aliases: ['db'],
+    describe: 'Database access related actions',
+    builder: (yargs) => yargs
+        .command('proxy', 'Open a database access session and start a local database proxy.', databaseProxy)
+        .demandCommand(),
+    handler: () => {
+        console.log('Please pick an action related to the hosting database command.');
+    },
+};
+//# sourceMappingURL=database-commands.js.map

package/dist/esm/commands/hosting/database/database-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-commands.js","sourceRoot":"","sources":["../../../../../src/commands/hosting/database/database-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAElE,MAAM,CAAC,MAAM,gBAAgB,GAAoC;IAC/D,OAAO,EAAE,UAAU;IACnB,OAAO,EAAE,CAAC,IAAI,CAAC;IACf,QAAQ,EAAE,iCAAiC;IAC3C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,OAAO,CACN,OAAO,EACP,kEAAkE,EAClE,aAAa,CACd;SACA,aAAa,EAAE;IACpB,OAAO,EAAE,GAAG,EAAE;QACZ,OAAO,CAAC,GAAG,CACT,gEAAgE,CACjE,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/esm/commands/hosting/database/proxy/database-proxy-command.d.ts

@@ -0,0 +1,3 @@
+import type { CommandModule } from 'yargs';
+import type { DatabaseProxyOptions } from './database-proxy-options.js';
+export declare const databaseProxy: CommandModule<unknown, DatabaseProxyOptions>;

package/dist/esm/commands/hosting/database/proxy/database-proxy-command.js

@@ -0,0 +1,60 @@
+import chalk from 'chalk';
+import { DEFAULT_LOCAL_PROXY_PORT, proxyDatabase, validateDatabaseProxyArgs, } from './database-proxy.js';
+const { red, yellow } = chalk;
+export const databaseProxy = {
+    builder: (yargs) => {
+        return yargs
+            .option('serviceId', {
+            describe: 'Service ID to open a database access session for',
+            alias: 'i',
+            string: true,
+        })
+            .option('ttlMinutes', {
+            describe: 'How long the session should last. A request, not a guarantee: a shorter lifetime is granted when the service allows less. Defaults to whatever the service allows.',
+            number: true,
+        })
+            .option('localProxyPort', {
+            describe: 'Local loopback port the database client connects to. Not 5432, which a local PostgreSQL usually holds. Deliberately not named `port`: a solution sets PORT for its own service, and that would override this.',
+            number: true,
+            default: DEFAULT_LOCAL_PROXY_PORT,
+        })
+            .option('json', {
+            describe: 'Emit the connection details as one JSON object on stdout, status messages on stderr. Contains the password, so it is as sensitive as the normal output.',
+            boolean: true,
+        })
+            .option('mosaicHostingClientId', {
+            describe: "The service account client id.\nRequired permissions:\nHOSTING SERVICE -> 'Database Access: Write', 'Database Access Sessions: View', 'Service Definitions: View'",
+            alias: 'c',
+            string: true,
+        })
+            .option('mosaicHostingClientSecret', {
+            describe: 'Service Account Client Secret to authenticate',
+            alias: 's',
+            string: true,
+        })
+            .option('idServiceAuthBaseURL', {
+            describe: 'ID Service Authentication Endpoint Base URL',
+            alias: 'a',
+            string: true,
+        })
+            .option('hostingServiceBaseURL', {
+            describe: 'Hosting Service Base URL',
+            alias: 'h',
+            string: true,
+        })
+            .example('$0 hosting database proxy -i channel-service', 'Open a session and listen on 127.0.0.1:5433')
+            .example('$0 hosting database proxy -i channel-service --ttl-minutes 30', 'Open a session for half an hour');
+    },
+    handler: async (args) => {
+        const [validatedArgs, errorMessages] = validateDatabaseProxyArgs(args);
+        if (errorMessages.length > 0) {
+            process.stderr.write(red('Some required arguments are missing.\n'));
+            process.stderr.write(yellow(errorMessages.join('\n') + '\n'));
+            process.exit(1);
+        }
+        else {
+            await proxyDatabase(validatedArgs);
+        }
+    },
+};
+//# sourceMappingURL=database-proxy-command.js.map

package/dist/esm/commands/hosting/database/proxy/database-proxy-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-proxy-command.js","sourceRoot":"","sources":["../../../../../../src/commands/hosting/database/proxy/database-proxy-command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,OAAO,EACL,wBAAwB,EACxB,aAAa,EACb,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;AAE9B,MAAM,CAAC,MAAM,aAAa,GAAiD;IACzE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACjB,OAAO,KAAK;aACT,MAAM,CAAC,WAAW,EAAE;YACnB,QAAQ,EAAE,kDAAkD;YAC5D,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,YAAY,EAAE;YACpB,QAAQ,EACN,oKAAoK;YACtK,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,gBAAgB,EAAE;YACxB,QAAQ,EACN,+MAA+M;YACjN,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,wBAAwB;SAClC,CAAC;aACD,MAAM,CAAC,MAAM,EAAE;YACd,QAAQ,EACN,yJAAyJ;YAC3J,OAAO,EAAE,IAAI;SACd,CAAC;aACD,MAAM,CAAC,uBAAuB,EAAE;YAC/B,QAAQ,EACN,mKAAmK;YACrK,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,2BAA2B,EAAE;YACnC,QAAQ,EAAE,+CAA+C;YACzD,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,sBAAsB,EAAE;YAC9B,QAAQ,EAAE,6CAA6C;YACvD,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,uBAAuB,EAAE;YAC/B,QAAQ,EAAE,0BAA0B;YACpC,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,OAAO,CACN,8CAA8C,EAC9C,6CAA6C,CAC9C;aACA,OAAO,CACN,+DAA+D,EAC/D,iCAAiC,CAClC,CAAC;IACN,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC;YACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,MAAM,aAAa,CACjB,aAA6D,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/esm/commands/hosting/database/proxy/database-proxy-options.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Options for proxying a direct database connection to a customizable service.
+ */
+export interface DatabaseProxyOptions {
+    serviceId?: string;
+    ttlMinutes?: number;
+    localProxyPort?: number;
+    json?: boolean;
+    mosaicHostingClientId?: string;
+    mosaicHostingClientSecret?: string;
+    idServiceAuthBaseURL?: string;
+    hostingServiceBaseURL?: string;
+}

package/dist/esm/commands/hosting/database/proxy/database-proxy-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=database-proxy-options.js.map

package/dist/esm/commands/hosting/database/proxy/database-proxy-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-proxy-options.js","sourceRoot":"","sources":["../../../../../../src/commands/hosting/database/proxy/database-proxy-options.ts"],"names":[],"mappings":""}

package/dist/esm/commands/hosting/database/proxy/database-proxy.d.ts

@@ -0,0 +1,27 @@
+import type { DatabaseProxyOptions } from './database-proxy-options.js';
+export declare const DEFAULT_LOCAL_PROXY_PORT = 5433;
+/** Declared here rather than imported: the Hosting schema types are private. */
+export interface DatabaseAccessSession {
+    databaseAccessSessionId: string;
+    username: string;
+    password: string;
+    databaseName: string;
+    expiresAt: string;
+    databaseProxyUrl: string;
+}
+export declare const minutesUntil: (expiresAt: string, now?: number) => number;
+/**
+ * Hosting may grant less than was asked for. The minute of tolerance absorbs
+ * the round trip.
+ */
+export declare const formatClampedTtlWarning: (requestedMinutes: number | undefined, expiresAt: string, now?: number) => string | undefined;
+export declare const WARN_BEFORE_EXPIRY_MS: number;
+/** Undefined when the session is too short for the warning to precede it. */
+export declare const toExpiryWarningDelay: (expiresAt: string, now?: number) => number | undefined;
+export declare const toConnectionJson: (session: DatabaseAccessSession, port: number) => Record<string, string | number>;
+export declare const formatConnectionDetails: (session: DatabaseAccessSession, port: number, now?: number) => string;
+export declare const proxyDatabase: (args: Required<Pick<DatabaseProxyOptions, "serviceId">> & DatabaseProxyOptions) => Promise<void>;
+/**
+ * Validate arguments for proxying a direct database connection.
+ */
+export declare const validateDatabaseProxyArgs: (args: DatabaseProxyOptions) => [DatabaseProxyOptions, string[]];

package/dist/esm/commands/hosting/database/proxy/database-proxy.js

@@ -0,0 +1,382 @@
+import { getServiceAccountToken } from '@axinom/mosaic-id-link-be';
+import { isNullOrWhitespace } from '@axinom/mosaic-service-common';
+import axios, { AxiosError } from 'axios';
+import chalk from 'chalk';
+import net from 'net';
+import ora from 'ora';
+import WebSocket, { createWebSocketStream } from 'ws';
+import { exitCode } from '../../../../common/index.js';
+const { red, yellow, green, dim, bold } = chalk;
+export const DEFAULT_LOCAL_PROXY_PORT = 5433;
+/** Only loopback is ever bound: the credential is not meant to leave the machine. */
+const LOOPBACK = '127.0.0.1';
+const OPEN_SESSION = `mutation OpenDatabaseAccessSession($input: OpenDatabaseAccessSessionInput!) {
+  openDatabaseAccessSession(input: $input) {
+    databaseAccessSessionId
+    username
+    password
+    databaseName
+    expiresAt
+    databaseProxyUrl
+  }
+}`;
+const CLOSE_SESSION = `mutation CloseDatabaseAccessSession($input: CloseDatabaseAccessSessionInput!) {
+  closeDatabaseAccessSession(input: $input) {
+    status
+    terminatedBackends
+  }
+}`;
+/** Connection details go to stdout and nothing else does, so `--json` pipes. */
+const writeOut = (text) => {
+    process.stdout.write(text + '\n');
+};
+const writeStatus = (text) => {
+    process.stderr.write(text + '\n');
+};
+export const minutesUntil = (expiresAt, now = Date.now()) => Math.max(0, Math.floor((new Date(expiresAt).getTime() - now) / 60_000));
+/**
+ * Hosting may grant less than was asked for. The minute of tolerance absorbs
+ * the round trip.
+ */
+export const formatClampedTtlWarning = (requestedMinutes, expiresAt, now = Date.now()) => {
+    if (requestedMinutes === undefined) {
+        return undefined;
+    }
+    const granted = minutesUntil(expiresAt, now);
+    if (granted >= requestedMinutes - 1) {
+        return undefined;
+    }
+    return `Requested ${requestedMinutes} minutes, granted ${granted} - database access for this service expires then.`;
+};
+export const WARN_BEFORE_EXPIRY_MS = 5 * 60_000;
+/** The byte a terminal delivers for Ctrl+C once it stops raising SIGINT. */
+const ETX = 0x03;
+/** Undefined when the session is too short for the warning to precede it. */
+export const toExpiryWarningDelay = (expiresAt, now = Date.now()) => {
+    const remaining = new Date(expiresAt).getTime() - now;
+    return remaining > WARN_BEFORE_EXPIRY_MS
+        ? remaining - WARN_BEFORE_EXPIRY_MS
+        : undefined;
+};
+export const toConnectionJson = (session, port) => ({
+    databaseAccessSessionId: session.databaseAccessSessionId,
+    host: LOOPBACK,
+    port,
+    database: session.databaseName,
+    user: session.username,
+    password: session.password,
+    expiresAt: session.expiresAt,
+});
+export const formatConnectionDetails = (session, port, now = Date.now()) => {
+    const rows = [
+        ['Host', LOOPBACK],
+        ['Port', String(port)],
+        ['Database', session.databaseName],
+        ['User', session.username],
+        ['Password', session.password],
+        [
+            'Expires',
+            `${session.expiresAt} (${minutesUntil(session.expiresAt, now)} minutes)`,
+        ],
+    ];
+    return rows
+        .map(([label, value]) => `  ${label.padEnd(9)} ${value}`)
+        .join('\n');
+};
+const getAxiosInstance = (hostingServiceBaseUrl, serviceAccountToken) => {
+    return axios.create({
+        baseURL: new URL(hostingServiceBaseUrl).toString(),
+        headers: {
+            Authorization: `Bearer ${serviceAccountToken}`,
+            'content-type': 'application/json',
+        },
+    });
+};
+/** Built per call rather than once: a long session outlives its startup token. */
+const callHosting = async (hostingServiceBaseUrl, serviceAccountToken, query, variables) => {
+    const axiosInstance = getAxiosInstance(hostingServiceBaseUrl, serviceAccountToken);
+    const payload = JSON.stringify({ query, variables });
+    const response = await axiosInstance.post('graphql', payload);
+    const errors = response.data.errors ?? [];
+    if (errors.length > 0) {
+        const { message, code } = errors[0];
+        throw new Error(code ? `${code}: ${message}` : message);
+    }
+    return response.data.data;
+};
+/** Caches the token and renews it a minute before it lapses. */
+const createTokenProvider = (authEndpoint, clientId, clientSecret) => {
+    let token = '';
+    let renewAt = 0;
+    return async () => {
+        if (token === '' || Date.now() >= renewAt) {
+            const result = await getServiceAccountToken(authEndpoint, clientId, clientSecret);
+            token = result.accessToken;
+            renewAt = Date.now() + (result.expiresInSeconds - 60) * 1_000;
+        }
+        return token;
+    };
+};
+const describeError = (error) => {
+    const axiosError = error;
+    if (axiosError.response) {
+        return `${axiosError.message} (HTTP ${axiosError.response.status}: ${JSON.stringify(axiosError.response.data)})`;
+    }
+    return error instanceof Error ? error.message : String(error);
+};
+/**
+ * Pipes one accepted TCP connection through one WebSocket, never multiplexed.
+ * The bytes are the TLS session the client negotiated with Postgres directly.
+ */
+const databaseProxyConnection = (client, session, getToken) => {
+    // Paused until the carrier is open, so nothing the client sends is dropped.
+    client.pause();
+    void (async () => {
+        // Everything up to the carrier existing is guarded: an escape here is an
+        // unhandled rejection, which kills the process before the session is
+        // closed and strands the database role until it expires.
+        let ws;
+        try {
+            const token = await getToken();
+            ws = new WebSocket(session.databaseProxyUrl, {
+                headers: {
+                    authorization: `Bearer ${token}`,
+                    'x-mosaic-database-access-session': session.databaseAccessSessionId,
+                },
+            });
+        }
+        catch (error) {
+            writeStatus(red(`Could not reach the database proxy: ${describeError(error)}`));
+            client.destroy();
+            return;
+        }
+        // end(), not destroy(): destroy drops bytes still buffered for the client.
+        const stop = () => {
+            client.end();
+            if (ws.readyState === WebSocket.CONNECTING ||
+                ws.readyState === WebSocket.OPEN) {
+                ws.close();
+            }
+        };
+        // Piped rather than forwarded by hand: a slow reader on either end pauses
+        // the other instead of queueing without limit.
+        ws.on('open', () => {
+            const carrier = createWebSocketStream(ws);
+            carrier.on('error', stop);
+            client.pipe(carrier);
+            carrier.pipe(client);
+            client.resume();
+        });
+        ws.on('unexpected-response', (_request, response) => {
+            writeStatus(red(`The database proxy refused the connection (HTTP ${response.statusCode}).`));
+            client.destroy();
+        });
+        ws.on('error', (error) => {
+            writeStatus(red(`Database proxy error: ${error.message}`));
+            stop();
+        });
+        ws.on('close', stop);
+        client.on('error', stop);
+        client.on('close', () => {
+            if (ws.readyState === WebSocket.CONNECTING ||
+                ws.readyState === WebSocket.OPEN) {
+                ws.close();
+            }
+        });
+    })();
+};
+const listen = (server, port) => new Promise((resolve, reject) => {
+    server.once('error', reject);
+    server.listen(port, LOOPBACK, () => {
+        server.removeListener('error', reject);
+        resolve();
+    });
+});
+/** Hands the terminal back; the mode belongs to it, not to this process. */
+const restoreStdinMode = () => {
+    if (process.stdin.isTTY && process.stdin.isRaw) {
+        process.stdin.setRawMode(false);
+        process.stdin.pause();
+    }
+};
+/**
+ * Calls `onShutdown` once, on Ctrl+C or a termination signal.
+ *
+ * Ctrl+C is read from stdin rather than taken as a signal: in raw mode the
+ * terminal stops raising one, which keeps it from also killing the `yarn` and
+ * `env-cmd` wrappers a solution runs this through. They would exit at once and
+ * hand the shell prompt back while the session was still closing.
+ */
+const onShutdownRequested = (onShutdown) => {
+    let requested = false;
+    const request = () => {
+        if (requested) {
+            return;
+        }
+        requested = true;
+        onShutdown();
+    };
+    process.on('exit', restoreStdinMode);
+    // The baseline everywhere: `kill`, a shutting-down machine, Ctrl+Break, and
+    // any stdin that is not a terminal. SIGKILL cannot be caught; that falls to
+    // the session's expiry.
+    for (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP', 'SIGBREAK']) {
+        process.on(signal, request);
+    }
+    // On a terminal, take the key before it becomes a SIGINT that would kill the
+    // wrappers too. Raw mode suppresses that signal on every platform.
+    if (process.stdin.isTTY) {
+        process.stdin.setRawMode(true);
+        process.stdin.resume();
+        process.stdin.on('data', (chunk) => {
+            if (chunk.includes(ETX)) {
+                request();
+            }
+        });
+    }
+};
+const openSession = async (args, hostingServiceBaseUrl, getToken) => {
+    // Creating the role is a remote call that regularly takes half a minute.
+    const spinner = ora({
+        text: `Opening a database access session for [${args.serviceId}]...`,
+        // Off: it would put stdin in raw mode, which is this command's to manage.
+        discardStdin: false,
+    }).start();
+    try {
+        const data = await callHosting(hostingServiceBaseUrl, await getToken(), OPEN_SESSION, {
+            input: {
+                serviceId: args.serviceId,
+                // Left undefined when not asked for, so the service applies its own
+                // default rather than this one.
+                ttlMinutes: args.ttlMinutes,
+            },
+        });
+        spinner.stop();
+        return data.openDatabaseAccessSession;
+    }
+    catch (error) {
+        spinner.fail(`Could not open a session for service [${args.serviceId}].`);
+        writeStatus(red(describeError(error)));
+        process.exit(exitCode);
+    }
+};
+/** Closes the session and reports the outcome. Resolves to the exit code. */
+const closeSession = async (hostingServiceBaseUrl, getToken, session) => {
+    try {
+        // Fresh token: the startup one may have lapsed, and a 401 strands the role.
+        const data = await callHosting(hostingServiceBaseUrl, await getToken(), CLOSE_SESSION, {
+            input: { databaseAccessSessionId: session.databaseAccessSessionId },
+        });
+        if (data.closeDatabaseAccessSession.status === 'CLOSED') {
+            writeStatus(green('Session closed and the database role dropped.'));
+        }
+        else {
+            // CLOSING: the role outlives the command by at most one reconciliation
+            // pass, so there is nothing useful to wait here for.
+            writeStatus(yellow('Local proxy closed. Dropping the database role is still pending and will be completed by the service.'));
+        }
+        return 0;
+    }
+    catch (error) {
+        writeStatus(yellow(`The session could not be closed and will expire at ${session.expiresAt}: ${describeError(error)}`));
+        return exitCode;
+    }
+};
+const printSession = (args, session, port) => {
+    const clampWarning = formatClampedTtlWarning(args.ttlMinutes, session.expiresAt);
+    if (clampWarning) {
+        writeStatus(yellow(clampWarning));
+    }
+    if (args.json === true) {
+        writeOut(JSON.stringify(toConnectionJson(session, port)));
+        return;
+    }
+    writeStatus(bold(`\nDatabase access to [${args.serviceId}] is open.\n`));
+    writeOut(formatConnectionDetails(session, port));
+    writeStatus(dim('\nThe password is shown once and cannot be retrieved again.'));
+    writeStatus(dim('Press Ctrl+C to close the session.'));
+};
+const warnBeforeExpiry = (session) => {
+    const delay = toExpiryWarningDelay(session.expiresAt);
+    if (delay === undefined) {
+        return;
+    }
+    setTimeout(() => {
+        writeStatus(yellow(`\nThis session ends at ${session.expiresAt}. Open connections will be dropped.`));
+    }, delay).unref();
+};
+export const proxyDatabase = async (args) => {
+    const port = args.localProxyPort ?? DEFAULT_LOCAL_PROXY_PORT;
+    const hostingServiceBaseUrl = args.hostingServiceBaseURL;
+    const getToken = createTokenProvider(args.idServiceAuthBaseURL, args.mosaicHostingClientId, args.mosaicHostingClientSecret);
+    const session = await openSession(args, hostingServiceBaseUrl, getToken);
+    const server = net.createServer((client) => databaseProxyConnection(client, session, getToken));
+    // Bound before printing: a bind error gives the session back.
+    try {
+        await listen(server, port);
+    }
+    catch (error) {
+        writeStatus(red(`Could not listen on ${LOOPBACK}:${port}.`));
+        writeStatus(red(describeError(error)));
+        await closeSession(hostingServiceBaseUrl, getToken, session);
+        process.exit(exitCode);
+    }
+    onShutdownRequested(() => {
+        writeStatus(dim('\nClosing the session...'));
+        server.close();
+        void closeSession(hostingServiceBaseUrl, getToken, session).then((code) => process.exit(code));
+    });
+    printSession(args, session, port);
+    warnBeforeExpiry(session);
+};
+/**
+ * Validate arguments for proxying a direct database connection.
+ */
+export const validateDatabaseProxyArgs = (args) => {
+    const errorMessages = [];
+    const idServiceAuthBaseURL = args.idServiceAuthBaseURL ?? process.env.ID_SERVICE_AUTH_BASE_URL ?? '';
+    const mosaicHostingClientId = args.mosaicHostingClientId ?? process.env.MOSAIC_HOSTING_CLIENT_ID ?? '';
+    const mosaicHostingClientSecret = args.mosaicHostingClientSecret ??
+        process.env.MOSAIC_HOSTING_CLIENT_SECRET ??
+        '';
+    const hostingServiceBaseURL = args.hostingServiceBaseURL ?? process.env.HOSTING_SERVICE_BASE_URL ?? '';
+    // Run from a solution, the service's own .env names it.
+    const serviceId = args.serviceId ?? process.env.SERVICE_ID ?? '';
+    if (isNullOrWhitespace(idServiceAuthBaseURL)) {
+        errorMessages.push('[idServiceAuthBaseURL] is required.');
+    }
+    if (isNullOrWhitespace(mosaicHostingClientId)) {
+        errorMessages.push('[mosaicHostingClientId] is required.');
+    }
+    if (isNullOrWhitespace(mosaicHostingClientSecret)) {
+        errorMessages.push('[mosaicHostingClientSecret] is required.');
+    }
+    if (isNullOrWhitespace(hostingServiceBaseURL)) {
+        errorMessages.push('[hostingServiceBaseURL] is required.');
+    }
+    if (isNullOrWhitespace(serviceId)) {
+        errorMessages.push('[serviceId] is required.');
+    }
+    if (args.ttlMinutes !== undefined &&
+        (!Number.isInteger(args.ttlMinutes) || args.ttlMinutes < 1)) {
+        errorMessages.push('[ttlMinutes] must be a whole number of 1 or more.');
+    }
+    if (args.localProxyPort !== undefined &&
+        (!Number.isInteger(args.localProxyPort) ||
+            args.localProxyPort < 1 ||
+            args.localProxyPort > 65535)) {
+        errorMessages.push('[localProxyPort] must be a whole number between 1 and 65535.');
+    }
+    return [
+        {
+            ...args,
+            serviceId,
+            idServiceAuthBaseURL,
+            mosaicHostingClientId,
+            mosaicHostingClientSecret,
+            hostingServiceBaseURL,
+        },
+        errorMessages,
+    ];
+};
+//# sourceMappingURL=database-proxy.js.map

package/dist/esm/commands/hosting/database/proxy/database-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-proxy.js","sourceRoot":"","sources":["../../../../../../src/commands/hosting/database/proxy/database-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,EAAE,UAAU,EAAsB,MAAM,OAAO,CAAC;AAC9D,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,SAAS,EAAE,EAAE,qBAAqB,EAAE,MAAM,IAAI,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAGvD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;AAEhD,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAE7C,qFAAqF;AACrF,MAAM,QAAQ,GAAG,WAAW,CAAC;AAY7B,MAAM,YAAY,GAAG;;;;;;;;;EASnB,CAAC;AAEH,MAAM,aAAa,GAAG;;;;;EAKpB,CAAC;AAEH,gFAAgF;AAChF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAQ,EAAE;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACpC,CAAC,CAAC;AACF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAQ,EAAE;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAU,EAAE,CAC1E,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;AAE1E;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,gBAAoC,EACpC,SAAiB,EACjB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EACI,EAAE;IACtB,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,OAAO,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,aAAa,gBAAgB,qBAAqB,OAAO,mDAAmD,CAAC;AACtH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,MAAM,CAAC;AAEhD,4EAA4E;AAC5E,MAAM,GAAG,GAAG,IAAI,CAAC;AAEjB,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,SAAiB,EACjB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EACI,EAAE;IACtB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC;IACtD,OAAO,SAAS,GAAG,qBAAqB;QACtC,CAAC,CAAC,SAAS,GAAG,qBAAqB;QACnC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,OAA8B,EAC9B,IAAY,EACqB,EAAE,CAAC,CAAC;IACrC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;IACxD,IAAI,EAAE,QAAQ;IACd,IAAI;IACJ,QAAQ,EAAE,OAAO,CAAC,YAAY;IAC9B,IAAI,EAAE,OAAO,CAAC,QAAQ;IACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,OAA8B,EAC9B,IAAY,EACZ,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EACR,EAAE;IACV,MAAM,IAAI,GAAuB;QAC/B,CAAC,MAAM,EAAE,QAAQ,CAAC;QAClB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC;QAClC,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;QAC1B,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC;QAC9B;YACE,SAAS;YACT,GAAG,OAAO,CAAC,SAAS,KAAK,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,WAAW;SACzE;KACF,CAAC;IACF,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC,CAAC;AAOF,MAAM,gBAAgB,GAAG,CACvB,qBAA6B,EAC7B,mBAA2B,EACZ,EAAE;IACjB,OAAO,KAAK,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;QAClD,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,mBAAmB,EAAE;YAC9C,cAAc,EAAE,kBAAkB;SACnC;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,kFAAkF;AAClF,MAAM,WAAW,GAAG,KAAK,EACvB,qBAA6B,EAC7B,mBAA2B,EAC3B,KAAa,EACb,SAAkB,EACN,EAAE;IACd,MAAM,aAAa,GAAG,gBAAgB,CACpC,qBAAqB,EACrB,mBAAmB,CACpB,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAmB,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IAC1D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAS,CAAC;AACjC,CAAC,CAAC;AAEF,gEAAgE;AAChE,MAAM,mBAAmB,GAAG,CAC1B,YAAoB,EACpB,QAAgB,EAChB,YAAoB,EACK,EAAE;IAC3B,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,KAAK,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC,YAAY,EACZ,QAAQ,EACR,YAAY,CACb,CAAC;YACF,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;YAC3B,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,gBAAgB,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;QAChE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAc,EAAU,EAAE;IAC/C,MAAM,UAAU,GAAG,KAAmB,CAAC;IACvC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,GAAG,UAAU,CAAC,OAAO,UAC1B,UAAU,CAAC,QAAQ,CAAC,MACtB,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,uBAAuB,GAAG,CAC9B,MAAkB,EAClB,OAA8B,EAC9B,QAA+B,EACzB,EAAE;IACR,4EAA4E;IAC5E,MAAM,CAAC,KAAK,EAAE,CAAC;IAEf,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,yEAAyE;QACzE,qEAAqE;QACrE,yDAAyD;QACzD,IAAI,EAAa,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC/B,EAAE,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE;gBAC3C,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,kCAAkC,EAAE,OAAO,CAAC,uBAAuB;iBACpE;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CACT,GAAG,CAAC,uCAAuC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CACnE,CAAC;YACF,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,2EAA2E;QAC3E,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,IACE,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;gBACtC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAChC,CAAC;gBACD,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CAAC;QAEF,0EAA0E;QAC1E,+CAA+C;QAC/C,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACjB,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YAClD,WAAW,CACT,GAAG,CACD,mDAAmD,QAAQ,CAAC,UAAU,IAAI,CAC3E,CACF,CAAC;YACF,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,WAAW,CAAC,GAAG,CAAC,yBAAyB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3D,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IACE,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;gBACtC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAChC,CAAC;gBACD,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,EAAE,CAAC;AACP,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,MAAkB,EAAE,IAAY,EAAiB,EAAE,CACjE,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,GAAS,EAAE;IAClC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,mBAAmB,GAAG,CAAC,UAAsB,EAAQ,EAAE;IAC3D,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,SAAS,GAAG,IAAI,CAAC;QACjB,UAAU,EAAE,CAAC;IACf,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAErC,4EAA4E;IAC5E,4EAA4E;IAC5E,wBAAwB;IACxB,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAU,EAAE,CAAC;QAC1E,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,6EAA6E;IAC7E,mEAAmE;IACnE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,KAAK,EACvB,IAA0B,EAC1B,qBAA6B,EAC7B,QAA+B,EACC,EAAE;IAClC,yEAAyE;IACzE,MAAM,OAAO,GAAG,GAAG,CAAC;QAClB,IAAI,EAAE,0CAA0C,IAAI,CAAC,SAAS,MAAM;QACpE,0EAA0E;QAC1E,YAAY,EAAE,KAAK;KACpB,CAAC,CAAC,KAAK,EAAE,CAAC;IAEX,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAE3B,qBAAqB,EAAE,MAAM,QAAQ,EAAE,EAAE,YAAY,EAAE;YACxD,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,oEAAoE;gBACpE,gCAAgC;gBAChC,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B;SACF,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,yBAAyB,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QAC1E,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;AACH,CAAC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,YAAY,GAAG,KAAK,EACxB,qBAA6B,EAC7B,QAA+B,EAC/B,OAA8B,EACb,EAAE;IACnB,IAAI,CAAC;QACH,4EAA4E;QAC5E,MAAM,IAAI,GAAG,MAAM,WAAW,CAE3B,qBAAqB,EAAE,MAAM,QAAQ,EAAE,EAAE,aAAa,EAAE;YACzD,KAAK,EAAE,EAAE,uBAAuB,EAAE,OAAO,CAAC,uBAAuB,EAAE;SACpE,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,0BAA0B,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxD,WAAW,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,uEAAuE;YACvE,qDAAqD;YACrD,WAAW,CACT,MAAM,CACJ,uGAAuG,CACxG,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CACT,MAAM,CACJ,sDACE,OAAO,CAAC,SACV,KAAK,aAAa,CAAC,KAAK,CAAC,EAAE,CAC5B,CACF,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,IAA0B,EAC1B,OAA8B,EAC9B,IAAY,EACN,EAAE;IACR,MAAM,YAAY,GAAG,uBAAuB,CAC1C,IAAI,CAAC,UAAU,EACf,OAAO,CAAC,SAAS,CAClB,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,WAAW,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,SAAS,cAAc,CAAC,CAAC,CAAC;IACzE,QAAQ,CAAC,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,WAAW,CACT,GAAG,CAAC,6DAA6D,CAAC,CACnE,CAAC;IACF,WAAW,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,OAA8B,EAAQ,EAAE;IAChE,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IACD,UAAU,CAAC,GAAG,EAAE;QACd,WAAW,CACT,MAAM,CACJ,0BAA0B,OAAO,CAAC,SAAS,qCAAqC,CACjF,CACF,CAAC;IACJ,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,IACsB,EACP,EAAE;IACjB,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC7D,MAAM,qBAAqB,GAAG,IAAI,CAAC,qBAA+B,CAAC;IAEnE,MAAM,QAAQ,GAAG,mBAAmB,CAClC,IAAI,CAAC,oBAA8B,EACnC,IAAI,CAAC,qBAA+B,EACpC,IAAI,CAAC,yBAAmC,CACzC,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,qBAAqB,EAAE,QAAQ,CAAC,CAAC;IAEzE,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CACzC,uBAAuB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CACnD,CAAC;IAEF,8DAA8D;IAC9D,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,GAAG,CAAC,uBAAuB,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;QAC7D,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,YAAY,CAAC,qBAAqB,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED,mBAAmB,CAAC,GAAG,EAAE;QACvB,WAAW,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,KAAK,YAAY,CAAC,qBAAqB,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACxE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,IAA0B,EACQ,EAAE;IACpC,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,MAAM,oBAAoB,GACxB,IAAI,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;IAC1E,MAAM,qBAAqB,GACzB,IAAI,CAAC,qBAAqB,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;IAC3E,MAAM,yBAAyB,GAC7B,IAAI,CAAC,yBAAyB;QAC9B,OAAO,CAAC,GAAG,CAAC,4BAA4B;QACxC,EAAE,CAAC;IACL,MAAM,qBAAqB,GACzB,IAAI,CAAC,qBAAqB,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;IAC3E,wDAAwD;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IAEjE,IAAI,kBAAkB,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC7C,aAAa,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,kBAAkB,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC9C,aAAa,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,kBAAkB,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAClD,aAAa,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,kBAAkB,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC9C,aAAa,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACjD,CAAC;IACD,IACE,IAAI,CAAC,UAAU,KAAK,SAAS;QAC7B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,EAC3D,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAC1E,CAAC;IACD,IACE,IAAI,CAAC,cAAc,KAAK,SAAS;QACjC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC;YACrC,IAAI,CAAC,cAAc,GAAG,CAAC;YACvB,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,EAC9B,CAAC;QACD,aAAa,CAAC,IAAI,CAChB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,OAAO;QACL;YACE,GAAG,IAAI;YACP,SAAS;YACT,oBAAoB;YACpB,qBAAqB;YACrB,yBAAyB;YACzB,qBAAqB;SACtB;QACD,aAAa;KACd,CAAC;AACJ,CAAC,CAAC"}

package/dist/esm/commands/hosting/index.js

@@ -1,3 +1,4 @@
+import { databaseCommands } from './database/database-commands.js';
 import { manifestCommands } from './manifest/manifest-commands.js';
 import { piletCommands } from './pilet/pilet-commands.js';
 import { serviceCommands } from './service/service-commands.js';
@@ -8,6 +9,7 @@ export const hosting = {
         .command('pilet', 'Pilet related actions', piletCommands)
         .command('manifest', 'Deployment Manifest related actions', manifestCommands)
         .command('service', 'Service Deployment related actions', serviceCommands)
+        .command(databaseCommands)
         .demandCommand(),
     handler: (_args) => {
         console.log('Please pick a sub command related to hosting.');

package/dist/esm/commands/hosting/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/hosting/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,MAAM,CAAC,MAAM,OAAO,GAAoC;IACtD,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,qCAAqC;IAC/C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,OAAO,CAAC,OAAO,EAAE,uBAAuB,EAAE,aAAa,CAAC;SACxD,OAAO,CACN,UAAU,EACV,qCAAqC,EACrC,gBAAgB,CACjB;SACA,OAAO,CAAC,SAAS,EAAE,oCAAoC,EAAE,eAAe,CAAC;SACzE,aAAa,EAAE;IACpB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACjB,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;CACF,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/hosting/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,MAAM,CAAC,MAAM,OAAO,GAAoC;IACtD,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,qCAAqC;IAC/C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,OAAO,CAAC,OAAO,EAAE,uBAAuB,EAAE,aAAa,CAAC;SACxD,OAAO,CACN,UAAU,EACV,qCAAqC,EACrC,gBAAgB,CACjB;SACA,OAAO,CAAC,SAAS,EAAE,oCAAoC,EAAE,eAAe,CAAC;SACzE,OAAO,CAAC,gBAAgB,CAAC;SACzB,aAAa,EAAE;IACpB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACjB,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axinom/mosaic-cli",
-  "version": "0.62.0-rc.1",
+  "version": "0.62.0-rc.11",
   "engines": {
     "node": ">=20.19.0"
   },
@@ -55,8 +55,8 @@
     "@asyncapi/diff": "^0.5.0",
     "@asyncapi/modelina": "^5.10.1",
     "@asyncapi/parser": "^3.6.0",
-    "@axinom/mosaic-id-link-be": "^0.45.0-rc.1",
-    "@axinom/mosaic-service-common": "^0.75.0-rc.1",
+    "@axinom/mosaic-id-link-be": "^0.45.0-rc.11",
+    "@axinom/mosaic-service-common": "^0.75.0-rc.11",
     "@graphql-inspector/core": "3.1.2",
     "@inquirer/confirm": "^6.1.1",
     "@inquirer/core": "^11.2.1",
@@ -73,7 +73,7 @@
     "envfile": "^6.17.0",
     "find-nearest-file": "^1.1.0",
     "form-data": "^4.0.0",
-    "glob": "^13.0.6",
+    "glob": "^14.0.2",
     "graphile-utils": "^4.13.0",
     "graphql": "^15.4.0",
     "inquirer-autocomplete-standalone": "^0.8.1",
@@ -85,11 +85,13 @@
     "simple-git": "^4.0.1",
     "sql-formatter": "^4.0.2",
     "tar": "^7.5.20",
+    "ws": "^8.22.0",
     "yargs": "^18.1.0"
   },
   "devDependencies": {
     "@types/diff": "^5.0.0",
     "@types/node": "^22.0.0",
+    "@types/ws": "^8.18.2",
     "@types/yargs": "^17.0.0",
     "@vitest/ui": "^4.1.10",
     "jest-extended": "^7.0.0",
@@ -100,5 +102,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "1a74c2ab649dd0de07f736fee743dcfbf8659f45"
+  "gitHead": "0e97183c880cf509c5d48bca25268bdc2de7500b"
 }

package/src/commands/hosting/database/database-commands.ts

@@ -0,0 +1,21 @@
+import type { CommandModule } from 'yargs';
+import { databaseProxy } from './proxy/database-proxy-command.js';
+
+export const databaseCommands: CommandModule<unknown, unknown> = {
+  command: 'database',
+  aliases: ['db'],
+  describe: 'Database access related actions',
+  builder: (yargs) =>
+    yargs
+      .command(
+        'proxy',
+        'Open a database access session and start a local database proxy.',
+        databaseProxy,
+      )
+      .demandCommand(),
+  handler: () => {
+    console.log(
+      'Please pick an action related to the hosting database command.',
+    );
+  },
+};