@credibledata/cred-cli 0.0.103 → 0.0.105

package/dist/constants.js

@@ -1,153 +1,47 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ASCII_TITLE = exports.LOGIN_TIMEOUT_MS = exports.DAY = exports.HOUR = exports.MINUTE = exports.SECOND = exports.AUTH_CLI_LOOPBACK_REDIRECT_URI = exports.DEFAULT_ENVIRONMENT_BY_CLUSTER = exports.CLUSTER_BY_ENVIRONMENT = exports.auth0ConfigsByEnv = exports.ALL_ENVIRONMENTS = exports.controlPlanesByEnv = void 0;
-exports.getCliOrgConfig = getCliOrgConfig;
-exports.getAuth0OrganizationIdForCliLogin = getAuth0OrganizationIdForCliLogin;
-exports.controlPlanesByEnv = {
-    production: "https://admin.credibledata.com/api/v0",
-    dev: "https://dev-admin.credibledata.com/api/v0",
-    staging: "https://staging-admin.credibledata.com/api/v0",
-    localhost: "http://admin.ms2.localhost/api/v0",
-    "e2e-test": "http://admin.ms2.localhost/api/v0",
-    videoamp: "https://admin.videoamp-aws-us-east-1.credibledata.com/api/v0",
-    // The AWS development cell (credible/dev on EKS). Its public hostnames compose onto the shared
-    // apex as aws-dev-<service>.credibledata.com, unlike videoamp's, which live under its own zone.
-    "aws-dev": "https://aws-dev-admin.credibledata.com/api/v0",
-};
-/** Environments that must have an object in `~/.cred` `configPerEnvironment` (avoids undefined on write). */
-exports.ALL_ENVIRONMENTS = Object.keys(exports.controlPlanesByEnv);
-exports.auth0ConfigsByEnv = {
-    production: {
-        domain: "https://auth.credibledata.com",
-        clientId: "ge8JL5TJNwqy7bygAaJkD92KdluqEZgO",
-        audience: "https://ms2data.us.auth0.com/api/v2/",
-    },
-    dev: {
-        domain: "https://dev-auth.credibledata.com",
-        clientId: "rr6mzJNj9b104MjCc9xWKPPehq1MJx0L",
-        audience: "https://dev-ohaafogw5p8uyx1m.us.auth0.com/api/v2/",
-    },
-    staging: {
-        domain: "https://dev-auth.credibledata.com",
-        clientId: "rr6mzJNj9b104MjCc9xWKPPehq1MJx0L",
-        audience: "https://dev-ohaafogw5p8uyx1m.us.auth0.com/api/v2/",
-    },
-    localhost: {
-        domain: "https://dev-auth.credibledata.com",
-        clientId: "rr6mzJNj9b104MjCc9xWKPPehq1MJx0L",
-        audience: "https://dev-ohaafogw5p8uyx1m.us.auth0.com/api/v2/",
-    },
-    "e2e-test": {
-        domain: "https://dev-auth.credibledata.com",
-        clientId: "atd8n8dEiGUiNRM7Geuvg41fi5s8ZKqY",
-        clientSecret: "ZrEvs86WLqKO9EPp4y_cOvUn3NQT1qc3XC8111f6DBt9oyaclV5sWHz6Nkyo_bEF",
-        audience: "https://dev-ohaafogw5p8uyx1m.us.auth0.com/api/v2/",
-    },
-    videoamp: {
-        domain: "https://auth.credibledata.com",
-        clientId: "ge8JL5TJNwqy7bygAaJkD92KdluqEZgO",
-        audience: "https://ms2data.us.auth0.com/api/v2/",
-    },
-    // The DEV Auth0 tenant, not production: this cell takes its per-tier secrets from gcp/credible/dev,
-    // so it authenticates against the same tenant that dev, staging and localhost do. videoamp is the
-    // exception here, being a production cell.
-    "aws-dev": {
-        domain: "https://dev-auth.credibledata.com",
-        clientId: "rr6mzJNj9b104MjCc9xWKPPehq1MJx0L",
-        audience: "https://dev-ohaafogw5p8uyx1m.us.auth0.com/api/v2/",
-    },
-};
-/** Which cluster each {@link Environment} lives on. */
-exports.CLUSTER_BY_ENVIRONMENT = {
-    production: "gcp",
-    staging: "gcp",
-    dev: "gcp",
-    localhost: "gcp",
-    "e2e-test": "gcp",
-    videoamp: "aws",
-    "aws-dev": "aws",
-};
 /**
- * Default {@link Environment} to switch to when logging into a cluster and the
- * current active env is on a different cluster. Picked per cluster so that
- * `cred login <org> -c aws` flips to videoamp and `-c gcp` flips to production.
+ * CLI-side constants.
+ *
+ * The deployment-environment tables (control planes, Auth0 tenants, clusters,
+ * per-org login config) now live in `setup-core/environments.ts`, because both
+ * front doors need them. They are re-exported here so existing imports across
+ * the CLI keep working; when setup-core becomes its own package this file's
+ * re-export line is the only thing that changes.
  */
-exports.DEFAULT_ENVIRONMENT_BY_CLUSTER = {
-    gcp: "production",
-    aws: "videoamp",
-};
-const CLI_ORG_CONFIGS = [
-    {
-        cliOrgName: "videoamp",
-        supportedClusters: ["gcp", "aws"],
-        defaultCluster: "gcp",
-        auth0OrganizationIds: {
-            aws: "org_nMRKafeSuxOiuJeG",
-        },
-    },
-    {
-        // Exists on both clouds -- gcp dev and the aws development cell both have a `demo` org -- so
-        // both are listed. Registered at all only because an UNREGISTERED org is assumed gcp-only
-        // (`supportedClusters ?? ["gcp"]`), which is why `cred login demo` on an aws cell reports the
-        // org as unavailable rather than anything about the cell.
-        //
-        // defaultCluster stays gcp so a bare `cred login demo` behaves exactly as it did before this
-        // entry existed; reach the aws cell with `-c aws`.
-        //
-        // No auth0OrganizationIds: their presence selects the PKCE + loopback flow, whose redirect
-        // (127.0.0.1:18240/callback) is registered on the production Auth0 tenant only. Omitting them
-        // selects the Device Authorization Flow, which needs no callback URL and therefore works on a
-        // cell authenticating against the dev tenant.
-        cliOrgName: "demo",
-        supportedClusters: ["gcp", "aws"],
-        defaultCluster: "gcp",
-    },
-    {
-        // The tenant the PROBES measure, on every cell in both clouds -- probe_organization in
-        // stacks/{aws,gcp}/services. Distinct from `demo` above, which is a cell's own first
-        // organization; a cell has both, and they were seeded by different bootstrap steps.
-        //
-        // Needed for the same reason the `demo` entry is, and missed for a reason worth naming: the
-        // gcp-only fallback (`supportedClusters ?? ["gcp"]`) makes an unregistered org work perfectly
-        // on gcp, so nothing surfaced until an operator tried to reach the fixture on an AWS cell and
-        // got "Organization 'k6-experiments' is not available on the aws cluster" -- a message about
-        // the org, for a fact about this list. Asserted against the recipe by
-        // test_probe_organization_is_reachable_on_its_cells_clusters.
-        //
-        // defaultCluster gcp and no auth0OrganizationIds, both for the reasons given on `demo`: a bare
-        // `cred login k6-experiments` keeps behaving exactly as it did before this entry existed, and
-        // the Device Authorization Flow is the one that works against a cell on the dev Auth0 tenant.
-        cliOrgName: "k6-experiments",
-        supportedClusters: ["gcp", "aws"],
-        defaultCluster: "gcp",
-    },
-];
-const CLI_ORG_CONFIGS_BY_NAME = Object.fromEntries(CLI_ORG_CONFIGS.map((c) => [c.cliOrgName.toLowerCase(), c]));
-/** Returns the registry entry for an org, or `undefined` if it uses defaults (gcp + device flow). */
-function getCliOrgConfig(organizationName) {
-    return CLI_ORG_CONFIGS_BY_NAME[organizationName.toLowerCase()];
-}
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ASCII_TITLE = exports.LOGIN_TIMEOUT_MS = exports.DAY = exports.HOUR = exports.MINUTE = exports.SECOND = exports.AUTH_CLI_LOOPBACK_REDIRECT_URI = exports.E2E_M2M_CLIENT_SECRET = exports.packageVersionUrl = exports.codeAssistByEnv = exports.isEnvironment = exports.getCliOrgConfig = exports.getAuth0OrganizationIdForCliLogin = exports.DEFAULT_ENVIRONMENT_BY_CLUSTER = exports.controlPlanesByEnv = exports.CLUSTER_BY_ENVIRONMENT = exports.auth0ConfigsByEnv = exports.appHostsByEnv = exports.ALL_ENVIRONMENTS = void 0;
+var environments_1 = require("./setup-core/environments");
+Object.defineProperty(exports, "ALL_ENVIRONMENTS", { enumerable: true, get: function () { return environments_1.ALL_ENVIRONMENTS; } });
+Object.defineProperty(exports, "appHostsByEnv", { enumerable: true, get: function () { return environments_1.appHostsByEnv; } });
+Object.defineProperty(exports, "auth0ConfigsByEnv", { enumerable: true, get: function () { return environments_1.auth0ConfigsByEnv; } });
+Object.defineProperty(exports, "CLUSTER_BY_ENVIRONMENT", { enumerable: true, get: function () { return environments_1.CLUSTER_BY_ENVIRONMENT; } });
+Object.defineProperty(exports, "controlPlanesByEnv", { enumerable: true, get: function () { return environments_1.controlPlanesByEnv; } });
+Object.defineProperty(exports, "DEFAULT_ENVIRONMENT_BY_CLUSTER", { enumerable: true, get: function () { return environments_1.DEFAULT_ENVIRONMENT_BY_CLUSTER; } });
+Object.defineProperty(exports, "getAuth0OrganizationIdForCliLogin", { enumerable: true, get: function () { return environments_1.getAuth0OrganizationIdForCliLogin; } });
+Object.defineProperty(exports, "getCliOrgConfig", { enumerable: true, get: function () { return environments_1.getCliOrgConfig; } });
+Object.defineProperty(exports, "isEnvironment", { enumerable: true, get: function () { return environments_1.isEnvironment; } });
+Object.defineProperty(exports, "codeAssistByEnv", { enumerable: true, get: function () { return environments_1.codeAssistByEnv; } });
+Object.defineProperty(exports, "packageVersionUrl", { enumerable: true, get: function () { return environments_1.packageVersionUrl; } });
 /**
- * Allowlisted on the Auth0 Native application (CLI) as an Allowed Callback URL for PKCE logins
- * that pass `organization` on `/authorize` (see Auth0 Organizations + Authentication API docs above).
+ * Machine-to-machine client secret for the `e2e-test` deployment env, used only
+ * by `loginM2M` so the e2e suite can authenticate without a browser.
+ *
+ * Kept here rather than in setup-core's `auth0ConfigsByEnv` because setup-core
+ * is destined to be a published library and must not carry credentials.
+ *
+ * NOTE: this value is compiled into `dist/` and published to public npm as part
+ * of `@credibledata/cred-cli`, so it is already effectively public. It is
+ * scoped to the non-production e2e Auth0 tenant. Moving it to an env var is
+ * tracked separately — doing it here would change how CI authenticates, which
+ * does not belong in this change.
  */
-exports.AUTH_CLI_LOOPBACK_REDIRECT_URI = "http://127.0.0.1:18240/callback";
+exports.E2E_M2M_CLIENT_SECRET = (_a = process.env.CRED_E2E_CLIENT_SECRET) !== null && _a !== void 0 ? _a : "ZrEvs86WLqKO9EPp4y_cOvUn3NQT1qc3XC8111f6DBt9oyaclV5sWHz6Nkyo_bEF";
 /**
- * Auth0 Organization ID for the given CLI org on the cluster it is logging into.
- * Returning a value selects the Auth Code + PKCE branch in `login()`; `undefined`
- * falls back to Device Authorization Flow.
- *
- * `cluster` defaults to the org's `defaultCluster` (or `gcp` for unregistered orgs)
- * so callers that don't yet know the active cluster keep working.
+ * Allowlisted on the Auth0 Native application (CLI) as an Allowed Callback URL
+ * for PKCE logins that pass `organization` on `/authorize`.
  */
-function getAuth0OrganizationIdForCliLogin(organizationName, cluster) {
-    var _a;
-    const cfg = getCliOrgConfig(organizationName);
-    if (!cfg)
-        return undefined;
-    const targetCluster = cluster !== null && cluster !== void 0 ? cluster : cfg.defaultCluster;
-    return (_a = cfg.auth0OrganizationIds) === null || _a === void 0 ? void 0 : _a[targetCluster];
-}
+exports.AUTH_CLI_LOOPBACK_REDIRECT_URI = "http://127.0.0.1:18240/callback";
 // Time constants in ms
 exports.SECOND = 1000;
 exports.MINUTE = exports.SECOND * 60;

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";;;AAqLA,0CAIC;AAgBD,8EAQC;AAxMY,QAAA,kBAAkB,GAAgC;IAC5D,UAAU,EAAE,uCAAuC;IACnD,GAAG,EAAE,2CAA2C;IAChD,OAAO,EAAE,+CAA+C;IACxD,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,mCAAmC;IAC/C,QAAQ,EAAE,8DAA8D;IACxE,+FAA+F;IAC/F,gGAAgG;IAChG,SAAS,EAAE,+CAA+C;CAC5D,CAAC;AAEF,6GAA6G;AAChG,QAAA,gBAAgB,GAAG,MAAM,CAAC,IAAI,CACxC,0BAAkB,CACH,CAAC;AAEN,QAAA,iBAAiB,GAQ1B;IACD,UAAU,EAAE;QACT,MAAM,EAAE,+BAA+B;QACvC,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,sCAAsC;KAClD;IACD,GAAG,EAAE;QACF,MAAM,EAAE,mCAAmC;QAC3C,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,mDAAmD;KAC/D;IACD,OAAO,EAAE;QACN,MAAM,EAAE,mCAAmC;QAC3C,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,mDAAmD;KAC/D;IACD,SAAS,EAAE;QACR,MAAM,EAAE,mCAAmC;QAC3C,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,mDAAmD;KAC/D;IACD,UAAU,EAAE;QACT,MAAM,EAAE,mCAAmC;QAC3C,QAAQ,EAAE,kCAAkC;QAC5C,YAAY,EACT,kEAAkE;QACrE,QAAQ,EAAE,mDAAmD;KAC/D;IACD,QAAQ,EAAE;QACP,MAAM,EAAE,+BAA+B;QACvC,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,sCAAsC;KAClD;IACD,oGAAoG;IACpG,kGAAkG;IAClG,2CAA2C;IAC3C,SAAS,EAAE;QACR,MAAM,EAAE,mCAAmC;QAC3C,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,mDAAmD;KAC/D;CACH,CAAC;AAKF,uDAAuD;AAC1C,QAAA,sBAAsB,GAAiC;IACjE,UAAU,EAAE,KAAK;IACjB,OAAO,EAAE,KAAK;IACd,GAAG,EAAE,KAAK;IACV,SAAS,EAAE,KAAK;IAChB,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;CAClB,CAAC;AAEF;;;;GAIG;AACU,QAAA,8BAA8B,GAAiC;IACzE,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,UAAU;CACjB,CAAC;AA6BF,MAAM,eAAe,GAAmB;IACrC;QACG,UAAU,EAAE,UAAU;QACtB,iBAAiB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QACjC,cAAc,EAAE,KAAK;QACrB,oBAAoB,EAAE;YACnB,GAAG,EAAE,sBAAsB;SAC7B;KACH;IACD;QACG,6FAA6F;QAC7F,0FAA0F;QAC1F,8FAA8F;QAC9F,0DAA0D;QAC1D,EAAE;QACF,6FAA6F;QAC7F,mDAAmD;QACnD,EAAE;QACF,2FAA2F;QAC3F,8FAA8F;QAC9F,8FAA8F;QAC9F,8CAA8C;QAC9C,UAAU,EAAE,MAAM;QAClB,iBAAiB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QACjC,cAAc,EAAE,KAAK;KACvB;IACD;QACG,uFAAuF;QACvF,qFAAqF;QACrF,oFAAoF;QACpF,EAAE;QACF,4FAA4F;QAC5F,8FAA8F;QAC9F,8FAA8F;QAC9F,6FAA6F;QAC7F,sEAAsE;QACtE,8DAA8D;QAC9D,EAAE;QACF,+FAA+F;QAC/F,8FAA8F;QAC9F,8FAA8F;QAC9F,UAAU,EAAE,gBAAgB;QAC5B,iBAAiB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QACjC,cAAc,EAAE,KAAK;KACvB;CACH,CAAC;AAEF,MAAM,uBAAuB,GAC1B,MAAM,CAAC,WAAW,CACf,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAC7D,CAAC;AAEL,qGAAqG;AACrG,SAAgB,eAAe,CAC5B,gBAAwB;IAExB,OAAO,uBAAuB,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACU,QAAA,8BAA8B,GAAG,iCAAiC,CAAC;AAEhF;;;;;;;GAOG;AACH,SAAgB,iCAAiC,CAC9C,gBAAwB,EACxB,OAAiB;;IAEjB,MAAM,GAAG,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,aAAa,GAAG,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,GAAG,CAAC,cAAc,CAAC;IACpD,OAAO,MAAA,GAAG,CAAC,oBAAoB,0CAAG,aAAa,CAAC,CAAC;AACpD,CAAC;AAED,uBAAuB;AACV,QAAA,MAAM,GAAG,IAAI,CAAC;AACd,QAAA,MAAM,GAAG,cAAM,GAAG,EAAE,CAAC;AACrB,QAAA,IAAI,GAAG,cAAM,GAAG,EAAE,CAAC;AACnB,QAAA,GAAG,GAAG,YAAI,GAAG,EAAE,CAAC;AAE7B,gBAAgB;AACH,QAAA,gBAAgB,GAAG,cAAM,GAAG,CAAC,CAAC;AAE9B,QAAA,WAAW,GAAG;;;;;;;CAO1B,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;AAEH,0DAYmC;AAXhC,gHAAA,gBAAgB,OAAA;AAChB,6GAAA,aAAa,OAAA;AACb,iHAAA,iBAAiB,OAAA;AACjB,sHAAA,sBAAsB,OAAA;AACtB,kHAAA,kBAAkB,OAAA;AAClB,8HAAA,8BAA8B,OAAA;AAC9B,iIAAA,iCAAiC,OAAA;AACjC,+GAAA,eAAe,OAAA;AACf,6GAAA,aAAa,OAAA;AACb,+GAAA,eAAe,OAAA;AACf,iHAAA,iBAAiB,OAAA;AASpB;;;;;;;;;;;;GAYG;AACU,QAAA,qBAAqB,GAC/B,MAAA,OAAO,CAAC,GAAG,CAAC,sBAAsB,mCAClC,kEAAkE,CAAC;AAEtE;;;GAGG;AACU,QAAA,8BAA8B,GAAG,iCAAiC,CAAC;AAEhF,uBAAuB;AACV,QAAA,MAAM,GAAG,IAAI,CAAC;AACd,QAAA,MAAM,GAAG,cAAM,GAAG,EAAE,CAAC;AACrB,QAAA,IAAI,GAAG,cAAM,GAAG,EAAE,CAAC;AACnB,QAAA,GAAG,GAAG,YAAI,GAAG,EAAE,CAAC;AAE7B,gBAAgB;AACH,QAAA,gBAAgB,GAAG,cAAM,GAAG,CAAC,CAAC;AAE9B,QAAA,WAAW,GAAG;;;;;;;CAO1B,CAAC"}