@bonnard/cli 0.2.10 → 0.2.11

package/dist/bin/api-B7cdKn9j.mjs

@@ -0,0 +1,3 @@
+import { n as get, r as post, t as del } from "./api-DqgY-30K.mjs";
+
+export { del, get };

package/dist/bin/api-DqgY-30K.mjs

@@ -0,0 +1,75 @@
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import pc from "picocolors";
+
+//#region src/lib/credentials.ts
+const CREDENTIALS_DIR = path.join(os.homedir(), ".config", "bon");
+const CREDENTIALS_FILE = path.join(CREDENTIALS_DIR, "credentials.json");
+function saveCredentials(credentials) {
+	fs.mkdirSync(CREDENTIALS_DIR, {
+		recursive: true,
+		mode: 448
+	});
+	fs.writeFileSync(CREDENTIALS_FILE, JSON.stringify(credentials, null, 2), { mode: 384 });
+}
+function loadCredentials() {
+	try {
+		const raw = fs.readFileSync(CREDENTIALS_FILE, "utf-8");
+		const parsed = JSON.parse(raw);
+		if (parsed.token && parsed.email) return parsed;
+		return null;
+	} catch {
+		return null;
+	}
+}
+function clearCredentials() {
+	try {
+		fs.unlinkSync(CREDENTIALS_FILE);
+	} catch {}
+}
+
+//#endregion
+//#region src/lib/api.ts
+const APP_URL = process.env.BON_APP_URL || "https://app.bonnard.dev";
+const VERCEL_BYPASS = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
+function getToken() {
+	const creds = loadCredentials();
+	if (!creds) {
+		console.error(pc.red("Not logged in. Run `bon login` first."));
+		process.exit(1);
+	}
+	return creds.token;
+}
+async function request(method, path, body) {
+	const token = getToken();
+	const url = `${APP_URL}${path}`;
+	const headers = {
+		Authorization: `Bearer ${token}`,
+		"Content-Type": "application/json"
+	};
+	if (VERCEL_BYPASS) headers["x-vercel-protection-bypass"] = VERCEL_BYPASS;
+	const res = await fetch(url, {
+		method,
+		headers,
+		body: body ? JSON.stringify(body) : void 0
+	});
+	const data = await res.json();
+	if (!res.ok) {
+		const message = data.error || res.statusText;
+		throw new Error(message);
+	}
+	return data;
+}
+function get(path) {
+	return request("GET", path);
+}
+function post(path, body) {
+	return request("POST", path, body);
+}
+function del(path) {
+	return request("DELETE", path);
+}
+
+//#endregion
+export { loadCredentials as a, clearCredentials as i, get as n, saveCredentials as o, post as r, del as t };

package/dist/bin/bon.mjs

@@ -1,56 +1,90 @@
 #!/usr/bin/env node
+import { n as getProjectPaths, t as BONNARD_DIR } from "./project-Dj085D_B.mjs";
+import { a as loadCredentials, i as clearCredentials, n as get, o as saveCredentials, r as post } from "./api-DqgY-30K.mjs";
+import { i as ensureBonDir, n as addLocalDatasource, o as loadLocalDatasources, r as datasourceExists, s as removeLocalDatasource, t as isDatasourcesTrackedByGit } from "./local-ByvuW3eV.mjs";
 import { createRequire } from "node:module";
 import { program } from "commander";
 import fs from "node:fs";
 import path from "node:path";
-import { fileURLToPath } from "node:url";
+import os from "node:os";
 import pc from "picocolors";
+import { fileURLToPath } from "node:url";
 import YAML from "yaml";
-import os from "node:os";
 import http from "node:http";
 import crypto from "node:crypto";
-import { execFileSync } from "node:child_process";
 import { encode } from "@toon-format/toon";
 
 //#region \0rolldown/runtime.js
-var __defProp = Object.defineProperty;
-var __exportAll = (all, no_symbols) => {
-	let target = {};
-	for (var name in all) {
-		__defProp(target, name, {
-			get: all[name],
-			enumerable: true
-		});
-	}
-	if (!no_symbols) {
-		__defProp(target, Symbol.toStringTag, { value: "Module" });
-	}
-	return target;
-};
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 //#endregion
-//#region src/lib/project.ts
-/**
-* The subdirectory name used for Bonnard cube/view files.
-* Keeps Bonnard files namespaced to avoid conflicts with existing
-* project directories (e.g. dbt's models/).
-*/
-const BONNARD_DIR = "bonnard";
+//#region src/lib/update-check.ts
+const CACHE_DIR = path.join(os.homedir(), ".config", "bon");
+const CACHE_FILE = path.join(CACHE_DIR, "update-check.json");
+const CHECK_INTERVAL_MS = 1440 * 60 * 1e3;
+const REGISTRY_URL = "https://registry.npmjs.org/@bonnard/cli/latest";
+const FETCH_TIMEOUT_MS = 3e3;
+function readCache() {
+	try {
+		const raw = fs.readFileSync(CACHE_FILE, "utf-8");
+		return JSON.parse(raw);
+	} catch {
+		return null;
+	}
+}
+function writeCache(data) {
+	try {
+		fs.mkdirSync(CACHE_DIR, { recursive: true });
+		fs.writeFileSync(CACHE_FILE, JSON.stringify(data));
+	} catch {}
+}
+function isNewer(latest, current) {
+	const l = latest.split(".").map(Number);
+	const c = current.split(".").map(Number);
+	for (let i = 0; i < 3; i++) {
+		if ((l[i] ?? 0) > (c[i] ?? 0)) return true;
+		if ((l[i] ?? 0) < (c[i] ?? 0)) return false;
+	}
+	return false;
+}
+async function fetchLatestVersion() {
+	try {
+		const controller = new AbortController();
+		const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+		const res = await fetch(REGISTRY_URL, { signal: controller.signal });
+		clearTimeout(timeout);
+		if (!res.ok) return null;
+		return (await res.json()).version ?? null;
+	} catch {
+		return null;
+	}
+}
 /**
-* Resolve Bonnard project paths relative to the working directory.
-* All cube/view operations should use these paths.
+* Start a background version check. Returns a function that,
+* when called, prints an update notice if a newer version exists.
+* The check is cached for 24 hours and never blocks the CLI.
 */
-function getProjectPaths(cwd) {
-	const bonnardRoot = path.join(cwd, BONNARD_DIR);
-	return {
-		root: bonnardRoot,
-		cubes: path.join(bonnardRoot, "cubes"),
-		views: path.join(bonnardRoot, "views"),
-		config: path.join(cwd, "bon.yaml"),
-		localState: path.join(cwd, ".bon")
+function startUpdateCheck(currentVersion) {
+	const cached = readCache();
+	const now = Date.now();
+	if (cached && now - cached.lastCheck < CHECK_INTERVAL_MS) return async () => {
+		if (isNewer(cached.latestVersion, currentVersion)) printUpdateNotice(cached.latestVersion, currentVersion);
+	};
+	const fetchPromise = fetchLatestVersion();
+	return async () => {
+		const latest = await fetchPromise;
+		if (latest) {
+			writeCache({
+				lastCheck: now,
+				latestVersion: latest
+			});
+			if (isNewer(latest, currentVersion)) printUpdateNotice(latest, currentVersion);
+		}
 	};
 }
+function printUpdateNotice(latest, current) {
+	console.error(`\nUpdate available: ${pc.yellow(latest)} (currently installed ${current})\nRun ${pc.cyan("npm install -g @bonnard/cli")} to update\n`);
+}
 
 //#endregion
 //#region src/lib/dbt/profiles.ts
@@ -625,41 +659,14 @@ async function initCommand() {
 	}
 }
 
-//#endregion
-//#region src/lib/credentials.ts
-const CREDENTIALS_DIR = path.join(os.homedir(), ".config", "bon");
-const CREDENTIALS_FILE = path.join(CREDENTIALS_DIR, "credentials.json");
-function saveCredentials(credentials) {
-	fs.mkdirSync(CREDENTIALS_DIR, {
-		recursive: true,
-		mode: 448
-	});
-	fs.writeFileSync(CREDENTIALS_FILE, JSON.stringify(credentials, null, 2), { mode: 384 });
-}
-function loadCredentials() {
-	try {
-		const raw = fs.readFileSync(CREDENTIALS_FILE, "utf-8");
-		const parsed = JSON.parse(raw);
-		if (parsed.token && parsed.email) return parsed;
-		return null;
-	} catch {
-		return null;
-	}
-}
-function clearCredentials() {
-	try {
-		fs.unlinkSync(CREDENTIALS_FILE);
-	} catch {}
-}
-
 //#endregion
 //#region src/commands/login.ts
-const APP_URL$1 = process.env.BON_APP_URL || "https://app.bonnard.dev";
+const APP_URL = process.env.BON_APP_URL || "https://app.bonnard.dev";
 const TIMEOUT_MS = 120 * 1e3;
 async function loginCommand() {
 	const state = crypto.randomUUID();
 	const { port, close } = await startCallbackServer(state);
-	const url = `${APP_URL$1}/auth/device?state=${state}&port=${port}`;
+	const url = `${APP_URL}/auth/device?state=${state}&port=${port}`;
 	console.log(pc.dim(`Opening browser to ${url}`));
 	const open = (await import("open")).default;
 	await open(url);
@@ -788,53 +795,6 @@ async function logoutCommand() {
 	console.log(pc.green("Logged out"));
 }
 
-//#endregion
-//#region src/lib/api.ts
-var api_exports = /* @__PURE__ */ __exportAll({
-	del: () => del,
-	get: () => get,
-	post: () => post
-});
-const APP_URL = process.env.BON_APP_URL || "https://app.bonnard.dev";
-const VERCEL_BYPASS = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
-function getToken() {
-	const creds = loadCredentials();
-	if (!creds) {
-		console.error(pc.red("Not logged in. Run `bon login` first."));
-		process.exit(1);
-	}
-	return creds.token;
-}
-async function request(method, path, body) {
-	const token = getToken();
-	const url = `${APP_URL}${path}`;
-	const headers = {
-		Authorization: `Bearer ${token}`,
-		"Content-Type": "application/json"
-	};
-	if (VERCEL_BYPASS) headers["x-vercel-protection-bypass"] = VERCEL_BYPASS;
-	const res = await fetch(url, {
-		method,
-		headers,
-		body: body ? JSON.stringify(body) : void 0
-	});
-	const data = await res.json();
-	if (!res.ok) {
-		const message = data.error || res.statusText;
-		throw new Error(message);
-	}
-	return data;
-}
-function get(path) {
-	return request("GET", path);
-}
-function post(path, body) {
-	return request("POST", path, body);
-}
-function del(path) {
-	return request("DELETE", path);
-}
-
 //#endregion
 //#region src/commands/whoami.ts
 async function whoamiCommand(options = {}) {
@@ -859,163 +819,6 @@ async function whoamiCommand(options = {}) {
 	}
 }
 
-//#endregion
-//#region src/lib/local/datasources.ts
-/**
-* Local datasource storage (.bon/datasources.yaml)
-*
-* Single file containing both config and credentials.
-* Credentials may contain:
-* - Plain values: "my_password"
-* - dbt env var syntax: "{{ env_var('MY_PASSWORD') }}"
-*
-* Env vars are resolved at deploy time, not import time.
-*/
-const BON_DIR$2 = ".bon";
-const DATASOURCES_FILE$1 = "datasources.yaml";
-function getBonDir(cwd = process.cwd()) {
-	return path.join(cwd, BON_DIR$2);
-}
-function getDatasourcesPath$1(cwd = process.cwd()) {
-	return path.join(getBonDir(cwd), DATASOURCES_FILE$1);
-}
-/**
-* Ensure .bon directory exists
-*/
-function ensureBonDir(cwd = process.cwd()) {
-	const bonDir = getBonDir(cwd);
-	if (!fs.existsSync(bonDir)) fs.mkdirSync(bonDir, { recursive: true });
-}
-/**
-* Load all local datasources
-*/
-function loadLocalDatasources(cwd = process.cwd()) {
-	const filePath = getDatasourcesPath$1(cwd);
-	if (!fs.existsSync(filePath)) return [];
-	try {
-		const content = fs.readFileSync(filePath, "utf-8");
-		return YAML.parse(content)?.datasources ?? [];
-	} catch {
-		return [];
-	}
-}
-/**
-* Save all local datasources (with secure permissions since it contains credentials)
-*/
-function saveLocalDatasources(datasources, cwd = process.cwd()) {
-	ensureBonDir(cwd);
-	const filePath = getDatasourcesPath$1(cwd);
-	const file = { datasources };
-	const content = `# Bonnard datasources configuration
-# This file contains credentials - add to .gitignore
-# Env vars like {{ env_var('PASSWORD') }} are resolved at deploy time
-
-` + YAML.stringify(file, { indent: 2 });
-	fs.writeFileSync(filePath, content, { mode: 384 });
-}
-/**
-* Add a single datasource (updates existing or appends new)
-*/
-function addLocalDatasource(datasource, cwd = process.cwd()) {
-	const existing = loadLocalDatasources(cwd);
-	const index = existing.findIndex((ds) => ds.name === datasource.name);
-	if (index >= 0) existing[index] = datasource;
-	else existing.push(datasource);
-	saveLocalDatasources(existing, cwd);
-}
-/**
-* Remove a datasource by name
-*/
-function removeLocalDatasource(name, cwd = process.cwd()) {
-	const existing = loadLocalDatasources(cwd);
-	const filtered = existing.filter((ds) => ds.name !== name);
-	if (filtered.length === existing.length) return false;
-	saveLocalDatasources(filtered, cwd);
-	return true;
-}
-/**
-* Get a single datasource by name
-*/
-function getLocalDatasource(name, cwd = process.cwd()) {
-	return loadLocalDatasources(cwd).find((ds) => ds.name === name) ?? null;
-}
-/**
-* Check if a datasource name already exists locally
-*/
-function datasourceExists(name, cwd = process.cwd()) {
-	return getLocalDatasource(name, cwd) !== null;
-}
-/**
-* Resolve {{ env_var('VAR_NAME') }} patterns in credentials
-* Used at deploy time to resolve env vars before uploading
-*/
-function resolveEnvVarsInCredentials(credentials) {
-	const resolved = {};
-	const missing = [];
-	const envVarPattern = /\{\{\s*env_var\(['"]([\w_]+)['"]\)\s*\}\}/;
-	for (const [key, value] of Object.entries(credentials)) {
-		const match = value.match(envVarPattern);
-		if (match) {
-			const varName = match[1];
-			const envValue = process.env[varName];
-			if (envValue !== void 0) resolved[key] = envValue;
-			else {
-				missing.push(varName);
-				resolved[key] = value;
-			}
-		} else resolved[key] = value;
-	}
-	return {
-		resolved,
-		missing
-	};
-}
-
-//#endregion
-//#region src/lib/local/credentials.ts
-/**
-* Credential utilities (git tracking check)
-*/
-const BON_DIR$1 = ".bon";
-const DATASOURCES_FILE = "datasources.yaml";
-function getDatasourcesPath(cwd = process.cwd()) {
-	return path.join(cwd, BON_DIR$1, DATASOURCES_FILE);
-}
-/**
-* Check if datasources file is tracked by git (it shouldn't be - contains credentials)
-*/
-function isDatasourcesTrackedByGit(cwd = process.cwd()) {
-	const filePath = getDatasourcesPath(cwd);
-	if (!fs.existsSync(filePath)) return false;
-	try {
-		execFileSync("git", [
-			"ls-files",
-			"--error-unmatch",
-			filePath
-		], {
-			cwd,
-			stdio: "pipe"
-		});
-		return true;
-	} catch {
-		return false;
-	}
-}
-
-//#endregion
-//#region src/lib/local/index.ts
-var local_exports = /* @__PURE__ */ __exportAll({
-	addLocalDatasource: () => addLocalDatasource,
-	datasourceExists: () => datasourceExists,
-	ensureBonDir: () => ensureBonDir,
-	getLocalDatasource: () => getLocalDatasource,
-	isDatasourcesTrackedByGit: () => isDatasourcesTrackedByGit,
-	loadLocalDatasources: () => loadLocalDatasources,
-	removeLocalDatasource: () => removeLocalDatasource,
-	resolveEnvVarsInCredentials: () => resolveEnvVarsInCredentials,
-	saveLocalDatasources: () => saveLocalDatasources
-});
-
 //#endregion
 //#region src/lib/dbt/mapping.ts
 /**
@@ -1630,7 +1433,7 @@ async function listRemoteDatasources() {
 		return;
 	}
 	try {
-		const { get } = await Promise.resolve().then(() => api_exports);
+		const { get } = await import("./api-B7cdKn9j.mjs");
 		const result = await get("/api/datasources");
 		if (result.dataSources.length === 0) {
 			console.log(pc.dim("No remote data sources found."));
@@ -1691,7 +1494,7 @@ async function removeRemote(name) {
 		process.exit(1);
 	}
 	try {
-		const { del } = await Promise.resolve().then(() => api_exports);
+		const { del } = await import("./api-B7cdKn9j.mjs");
 		await del(`/api/datasources/${encodeURIComponent(name)}`);
 		console.log(pc.green(`✓ Removed "${name}" from remote server`));
 	} catch (err) {
@@ -1709,7 +1512,7 @@ async function validateCommand() {
 		console.log(pc.red("No bon.yaml found. Are you in a Bonnard project?"));
 		process.exit(1);
 	}
-	const { validate } = await import("./validate-Bc8zGNw7.mjs");
+	const { validate } = await import("./validate-C4W_Vto2.mjs");
 	const result = await validate(cwd);
 	if (result.cubes.length === 0 && result.views.length === 0 && result.valid) {
 		console.log(pc.yellow(`No cube or view files found in ${BONNARD_DIR}/cubes/ or ${BONNARD_DIR}/views/.`));
@@ -1783,7 +1586,7 @@ async function deployCommand(options = {}) {
 		process.exit(1);
 	}
 	console.log(pc.dim("Validating cubes and views..."));
-	const { validate } = await import("./validate-Bc8zGNw7.mjs");
+	const { validate } = await import("./validate-C4W_Vto2.mjs");
 	const result = await validate(cwd);
 	if (!result.valid) {
 		console.log(pc.red("Validation failed:\n"));
@@ -1852,9 +1655,9 @@ async function deployCommand(options = {}) {
 * Returns true if any connection failed (strict mode)
 */
 async function testAndSyncDatasources(cwd, options = {}) {
-	const { extractDatasourcesFromCubes } = await import("./cubes-9rklhdAJ.mjs");
-	const { loadLocalDatasources } = await Promise.resolve().then(() => local_exports);
-	const { pushDatasource } = await import("./push-Bv9AFGc2.mjs");
+	const { extractDatasourcesFromCubes } = await import("./cubes-BvtwNBUG.mjs");
+	const { loadLocalDatasources } = await import("./local-BkK5XL7T.mjs");
+	const { pushDatasource } = await import("./push-BOkUmRL8.mjs");
 	const references = extractDatasourcesFromCubes(cwd);
 	if (references.length === 0) return false;
 	console.log();
@@ -3915,7 +3718,9 @@ const metabase = program.command("metabase").description("Connect to and explore
 metabase.command("connect").description("Configure Metabase API connection").option("--url <url>", "Metabase instance URL").option("--api-key <key>", "Metabase API key").option("--force", "Overwrite existing configuration").action(metabaseConnectCommand);
 metabase.command("explore").description("Browse Metabase databases, collections, cards, and dashboards").argument("[resource]", "databases, collections, cards, dashboards, card, dashboard, database, table, collection").argument("[id]", "Resource ID (e.g. card <id>, dashboard <id>, database <id>, table <id>, collection <id>)").action(metabaseExploreCommand);
 metabase.command("analyze").description("Analyze Metabase instance and generate a structured report for semantic layer planning").option("--output <path>", "Output file path", ".bon/metabase-analysis.md").option("--top-cards <n>", "Number of top cards to include in report", "50").action(metabaseAnalyzeCommand);
-program.parse();
+const showUpdateNotice = startUpdateCheck(version);
+await program.parseAsync();
+await showUpdateNotice();
 
 //#endregion
-export { getProjectPaths as i, resolveEnvVarsInCredentials as n, post as r, getLocalDatasource as t };
+export {  };

package/dist/bin/{cubes-9rklhdAJ.mjs → cubes-BvtwNBUG.mjs}

@@ -1,4 +1,4 @@
-import { i as getProjectPaths } from "./bon.mjs";
+import { n as getProjectPaths } from "./project-Dj085D_B.mjs";
 import fs from "node:fs";
 import path from "node:path";
 import YAML from "yaml";

package/dist/bin/local-BkK5XL7T.mjs

@@ -0,0 +1,3 @@
+import { a as getLocalDatasource, c as resolveEnvVarsInCredentials, i as ensureBonDir, l as saveLocalDatasources, n as addLocalDatasource, o as loadLocalDatasources, r as datasourceExists, s as removeLocalDatasource, t as isDatasourcesTrackedByGit } from "./local-ByvuW3eV.mjs";
+
+export { loadLocalDatasources };

package/dist/bin/local-ByvuW3eV.mjs

@@ -0,0 +1,149 @@
+import fs from "node:fs";
+import path from "node:path";
+import YAML from "yaml";
+import { execFileSync } from "node:child_process";
+
+//#region src/lib/local/datasources.ts
+/**
+* Local datasource storage (.bon/datasources.yaml)
+*
+* Single file containing both config and credentials.
+* Credentials may contain:
+* - Plain values: "my_password"
+* - dbt env var syntax: "{{ env_var('MY_PASSWORD') }}"
+*
+* Env vars are resolved at deploy time, not import time.
+*/
+const BON_DIR$1 = ".bon";
+const DATASOURCES_FILE$1 = "datasources.yaml";
+function getBonDir(cwd = process.cwd()) {
+	return path.join(cwd, BON_DIR$1);
+}
+function getDatasourcesPath$1(cwd = process.cwd()) {
+	return path.join(getBonDir(cwd), DATASOURCES_FILE$1);
+}
+/**
+* Ensure .bon directory exists
+*/
+function ensureBonDir(cwd = process.cwd()) {
+	const bonDir = getBonDir(cwd);
+	if (!fs.existsSync(bonDir)) fs.mkdirSync(bonDir, { recursive: true });
+}
+/**
+* Load all local datasources
+*/
+function loadLocalDatasources(cwd = process.cwd()) {
+	const filePath = getDatasourcesPath$1(cwd);
+	if (!fs.existsSync(filePath)) return [];
+	try {
+		const content = fs.readFileSync(filePath, "utf-8");
+		return YAML.parse(content)?.datasources ?? [];
+	} catch {
+		return [];
+	}
+}
+/**
+* Save all local datasources (with secure permissions since it contains credentials)
+*/
+function saveLocalDatasources(datasources, cwd = process.cwd()) {
+	ensureBonDir(cwd);
+	const filePath = getDatasourcesPath$1(cwd);
+	const file = { datasources };
+	const content = `# Bonnard datasources configuration
+# This file contains credentials - add to .gitignore
+# Env vars like {{ env_var('PASSWORD') }} are resolved at deploy time
+
+` + YAML.stringify(file, { indent: 2 });
+	fs.writeFileSync(filePath, content, { mode: 384 });
+}
+/**
+* Add a single datasource (updates existing or appends new)
+*/
+function addLocalDatasource(datasource, cwd = process.cwd()) {
+	const existing = loadLocalDatasources(cwd);
+	const index = existing.findIndex((ds) => ds.name === datasource.name);
+	if (index >= 0) existing[index] = datasource;
+	else existing.push(datasource);
+	saveLocalDatasources(existing, cwd);
+}
+/**
+* Remove a datasource by name
+*/
+function removeLocalDatasource(name, cwd = process.cwd()) {
+	const existing = loadLocalDatasources(cwd);
+	const filtered = existing.filter((ds) => ds.name !== name);
+	if (filtered.length === existing.length) return false;
+	saveLocalDatasources(filtered, cwd);
+	return true;
+}
+/**
+* Get a single datasource by name
+*/
+function getLocalDatasource(name, cwd = process.cwd()) {
+	return loadLocalDatasources(cwd).find((ds) => ds.name === name) ?? null;
+}
+/**
+* Check if a datasource name already exists locally
+*/
+function datasourceExists(name, cwd = process.cwd()) {
+	return getLocalDatasource(name, cwd) !== null;
+}
+/**
+* Resolve {{ env_var('VAR_NAME') }} patterns in credentials
+* Used at deploy time to resolve env vars before uploading
+*/
+function resolveEnvVarsInCredentials(credentials) {
+	const resolved = {};
+	const missing = [];
+	const envVarPattern = /\{\{\s*env_var\(['"]([\w_]+)['"]\)\s*\}\}/;
+	for (const [key, value] of Object.entries(credentials)) {
+		const match = value.match(envVarPattern);
+		if (match) {
+			const varName = match[1];
+			const envValue = process.env[varName];
+			if (envValue !== void 0) resolved[key] = envValue;
+			else {
+				missing.push(varName);
+				resolved[key] = value;
+			}
+		} else resolved[key] = value;
+	}
+	return {
+		resolved,
+		missing
+	};
+}
+
+//#endregion
+//#region src/lib/local/credentials.ts
+/**
+* Credential utilities (git tracking check)
+*/
+const BON_DIR = ".bon";
+const DATASOURCES_FILE = "datasources.yaml";
+function getDatasourcesPath(cwd = process.cwd()) {
+	return path.join(cwd, BON_DIR, DATASOURCES_FILE);
+}
+/**
+* Check if datasources file is tracked by git (it shouldn't be - contains credentials)
+*/
+function isDatasourcesTrackedByGit(cwd = process.cwd()) {
+	const filePath = getDatasourcesPath(cwd);
+	if (!fs.existsSync(filePath)) return false;
+	try {
+		execFileSync("git", [
+			"ls-files",
+			"--error-unmatch",
+			filePath
+		], {
+			cwd,
+			stdio: "pipe"
+		});
+		return true;
+	} catch {
+		return false;
+	}
+}
+
+//#endregion
+export { getLocalDatasource as a, resolveEnvVarsInCredentials as c, ensureBonDir as i, saveLocalDatasources as l, addLocalDatasource as n, loadLocalDatasources as o, datasourceExists as r, removeLocalDatasource as s, isDatasourcesTrackedByGit as t };

package/dist/bin/project-Dj085D_B.mjs

@@ -0,0 +1,27 @@
+import fs from "node:fs";
+import path from "node:path";
+
+//#region src/lib/project.ts
+/**
+* The subdirectory name used for Bonnard cube/view files.
+* Keeps Bonnard files namespaced to avoid conflicts with existing
+* project directories (e.g. dbt's models/).
+*/
+const BONNARD_DIR = "bonnard";
+/**
+* Resolve Bonnard project paths relative to the working directory.
+* All cube/view operations should use these paths.
+*/
+function getProjectPaths(cwd) {
+	const bonnardRoot = path.join(cwd, BONNARD_DIR);
+	return {
+		root: bonnardRoot,
+		cubes: path.join(bonnardRoot, "cubes"),
+		views: path.join(bonnardRoot, "views"),
+		config: path.join(cwd, "bon.yaml"),
+		localState: path.join(cwd, ".bon")
+	};
+}
+
+//#endregion
+export { getProjectPaths as n, BONNARD_DIR as t };

package/dist/bin/{push-Bv9AFGc2.mjs → push-BOkUmRL8.mjs}

@@ -1,4 +1,5 @@
-import { n as resolveEnvVarsInCredentials, r as post, t as getLocalDatasource } from "./bon.mjs";
+import { r as post } from "./api-DqgY-30K.mjs";
+import { a as getLocalDatasource, c as resolveEnvVarsInCredentials } from "./local-ByvuW3eV.mjs";
 import pc from "picocolors";
 import "@inquirer/prompts";
 

package/dist/bin/{validate-Bc8zGNw7.mjs → validate-C4W_Vto2.mjs}

@@ -1,4 +1,4 @@
-import { i as getProjectPaths } from "./bon.mjs";
+import { n as getProjectPaths } from "./project-Dj085D_B.mjs";
 import fs from "node:fs";
 import path from "node:path";
 import YAML from "yaml";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bonnard/cli",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "type": "module",
   "bin": {
     "bon": "./dist/bin/bon.mjs"