@ductape/cli 0.3.15 → 0.3.16

package/dist/commands/cloud.d.ts

@@ -1,4 +1,9 @@
 type CloudTarget = 'connections' | 'resources' | 'tiers';
+export declare function runCloudPreflight(opts: {
+    product?: string;
+    file?: string;
+    json?: boolean;
+}): Promise<void>;
 export declare function runCloud(target: CloudTarget, verb: string, opts: {
     id?: string;
     file?: string;

package/dist/commands/cloud.js

@@ -3,6 +3,80 @@ import { getSdkProxy, requireSession } from '../lib/proxy/context.js';
 import { printJson } from '../lib/output.js';
 import { listCloudTiers } from '../lib/platform-api.js';
 import { requireWorkspaceContext } from '../lib/workspace-context.js';
+const CLOUD_SERVICE_CAPABILITIES = [
+    { service: 's3', provider: 'aws', types: ['storage'], actions: ['list', 'import', 'provision'] },
+    { service: 'gcs', provider: 'gcp', types: ['storage'], actions: ['list', 'import', 'provision'] },
+    { service: 'azure_blob', provider: 'azure', types: ['storage'], actions: ['list', 'import', 'provision'] },
+    { service: 'rds', provider: 'aws', types: ['database'], actions: ['list', 'import', 'provision'] },
+    { service: 'cloud_sql', provider: 'gcp', types: ['database'], actions: ['list', 'import', 'provision'] },
+    { service: 'azure_database', provider: 'azure', types: ['database'], actions: ['list', 'import', 'provision'] },
+    { service: 'mongodb_atlas', provider: 'mongodb_atlas', types: ['database'], actions: ['list', 'import', 'provision'] },
+    { service: 'neo4j_aura', provider: 'neo4j_aura', types: ['graph'], actions: ['list', 'import', 'provision'] },
+    { service: 'vertex_ai_vector_search', provider: 'gcp', types: ['vector'], actions: ['list', 'import', 'provision'] },
+    { service: 'opensearch', provider: 'aws', types: ['vector'], actions: ['list', 'import', 'provision'] },
+    { service: 'pubsub', provider: 'gcp', types: ['messageBroker'], actions: ['list', 'import', 'provision'] },
+    { service: 'sns_sqs', provider: 'aws', types: ['messageBroker'], actions: ['list', 'import', 'provision'] },
+];
+export async function runCloudPreflight(opts) {
+    const session = requireSession();
+    const proxy = getSdkProxy(session);
+    const product = opts.product ?? session.project.product_tag;
+    const input = readJsonBody(opts.file);
+    const [connectionsResult, environmentsResult] = await Promise.allSettled([
+        proxy.execute('cloud', 'connections.list', []),
+        proxy.execute('product', 'environments.list', [product]),
+    ]);
+    const ctx = requireWorkspaceContext();
+    const tiersResult = await Promise.allSettled([listCloudTiers(ctx, {})]);
+    const discoveries = Array.isArray(input?.discoveries) ? input.discoveries : [];
+    const discoveryResults = await Promise.all(discoveries.map(async (request) => {
+        try {
+            return { request, ok: true, resources: await proxy.execute('cloud', 'resources.list', [request]) };
+        }
+        catch (error) {
+            return { request, ok: false, error: error instanceof Error ? error.message : String(error) };
+        }
+    }));
+    const environments = environmentsResult.status === 'fulfilled' ? environmentsResult.value : null;
+    const envList = Array.isArray(environments)
+        ? environments
+        : environments && typeof environments === 'object' && Array.isArray(environments.data)
+            ? environments.data
+            : [];
+    const inactive = envList.filter((env) => env && typeof env === 'object' && env.active === false);
+    const unresolved = [];
+    if (connectionsResult.status === 'rejected')
+        unresolved.push(`Cloud connections could not be listed: ${String(connectionsResult.reason)}`);
+    if (environmentsResult.status === 'rejected')
+        unresolved.push(`Product environments could not be listed: ${String(environmentsResult.reason)}`);
+    if (tiersResult[0].status === 'rejected')
+        unresolved.push(`Cloud tiers could not be listed: ${String(tiersResult[0].reason)}`);
+    if (discoveries.length === 0)
+        unresolved.push('No instance discovery requests supplied; pass --file with {"discoveries":[{cloud,service,type,...}]}.');
+    if (inactive.length > 0)
+        unresolved.push('Inactive environments still require an explicit configuration decision; preflight does not assume shared or provisioned infrastructure.');
+    for (const result of discoveryResults)
+        if (!result.ok)
+            unresolved.push(`Instance discovery failed for ${String(result.request.service ?? 'unknown service')}: ${result.error}`);
+    printJson({
+        product,
+        read_only: true,
+        supported_services: CLOUD_SERVICE_CAPABILITIES,
+        required_discovery_fields: ['cloud', 'service', 'type'],
+        connections: connectionsResult.status === 'fulfilled' ? connectionsResult.value : null,
+        environments: envList,
+        inactive_environment_policy: 'explicit_configuration_required_no_automatic_provisioning',
+        tiers: tiersResult[0].status === 'fulfilled' ? tiersResult[0].value : null,
+        instances: discoveryResults,
+        mutation_actions: {
+            import_existing: ['import-persist', 'import-persist-all'],
+            provision_new: ['provision-persist', 'provision-persist-all'],
+            destructive_deprovision: false,
+        },
+        unresolved_decisions: unresolved,
+        ready: unresolved.length === 0,
+    }, Boolean(opts.json));
+}
 export async function runCloud(target, verb, opts, extraArgs) {
     if (target === 'tiers') {
         const ctx = requireWorkspaceContext();

package/dist/commands/doctor.d.ts

@@ -0,0 +1,4 @@
+export declare function runDoctor(opts: {
+    json?: boolean;
+    cliVersion: string;
+}): Promise<void>;

package/dist/commands/doctor.js

@@ -0,0 +1,123 @@
+import { createHash } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { findProjectConfig, getActiveProfileName, getApiUrl, loadCredentials, loadGlobalConfig, } from '../lib/config.js';
+function findUp(name, start = process.cwd()) {
+    let dir = path.resolve(start);
+    const root = path.parse(dir).root;
+    while (true) {
+        const candidate = path.join(dir, name);
+        if (fs.existsSync(candidate))
+            return candidate;
+        if (dir === root)
+            return null;
+        dir = path.dirname(dir);
+    }
+}
+function readJson(file) {
+    if (!file)
+        return null;
+    try {
+        return JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+function dependencyVersion(pkg, name) {
+    for (const key of ['dependencies', 'devDependencies', 'peerDependencies']) {
+        const values = pkg?.[key];
+        if (values && typeof values === 'object' && typeof values[name] === 'string') {
+            return values[name];
+        }
+    }
+    return null;
+}
+function configuredMcpVersion(config) {
+    const servers = config?.mcpServers;
+    if (!servers || typeof servers !== 'object')
+        return null;
+    for (const value of Object.values(servers)) {
+        if (!value || typeof value !== 'object')
+            continue;
+        const args = value.args;
+        if (!Array.isArray(args))
+            continue;
+        const spec = args.find((arg) => typeof arg === 'string' && arg.startsWith('@ductape/mcp'));
+        if (typeof spec === 'string')
+            return spec.replace(/^@ductape\/mcp@?/, '') || 'unversioned';
+    }
+    return null;
+}
+export async function runDoctor(opts) {
+    const project = findProjectConfig();
+    const profile = project?.config
+        ? getActiveProfileName(project.config)
+        : loadGlobalConfig().default_profile;
+    const apiUrl = getApiUrl(profile);
+    const credentials = loadCredentials();
+    const packageFile = findUp('package.json');
+    const pkg = readJson(packageFile);
+    const mcpFile = findUp('.mcp.json');
+    const warnings = [];
+    let schema;
+    try {
+        const response = await fetch(`${apiUrl}/proxy/v1/schema`, {
+            headers: { Accept: 'application/json' },
+            signal: AbortSignal.timeout(15_000),
+        });
+        const contentType = response.headers.get('content-type') ?? '';
+        const body = await response.text();
+        const isJson = contentType.toLowerCase().includes('json');
+        schema = {
+            reachable: response.ok && isJson,
+            status: response.status,
+            content_type: contentType,
+            revision: response.ok && isJson
+                ? `sha256:${createHash('sha256').update(body).digest('hex')}`
+                : null,
+            api_version: response.headers.get('x-api-version'),
+            request_id: response.headers.get('x-request-id') ?? response.headers.get('x-correlation-id'),
+        };
+        if (!response.ok || !isJson)
+            warnings.push(`Schema endpoint returned HTTP ${response.status} (${contentType || 'unknown content type'}).`);
+    }
+    catch (error) {
+        schema = { reachable: false, error: error instanceof Error ? error.message : String(error) };
+        warnings.push('The configured API/schema endpoint is not reachable.');
+    }
+    const versions = {
+        cli: opts.cliVersion,
+        sdk: dependencyVersion(pkg, '@ductape/sdk'),
+        nestjs: dependencyVersion(pkg, '@ductape/nestjs'),
+        mcp: configuredMcpVersion(readJson(mcpFile)),
+    };
+    if (!credentials)
+        warnings.push('Not logged in; administrative CLI operations will fail.');
+    if (!project)
+        warnings.push('No linked Ductape project was found from the current directory.');
+    if (!versions.sdk)
+        warnings.push('@ductape/sdk is not declared in the nearest package.json.');
+    if (!versions.mcp)
+        warnings.push('No @ductape/mcp package was found in the nearest .mcp.json.');
+    const result = {
+        ok: warnings.length === 0,
+        versions,
+        api: { profile, url: apiUrl, schema },
+        authentication: {
+            logged_in: Boolean(credentials),
+            user_id: credentials?.user_id ?? null,
+            email: credentials?.email ?? null,
+            active_workspace_id: loadGlobalConfig().active_workspace_id ?? null,
+        },
+        linkage: project ? { root: project.dir, ...project.config } : null,
+        sources: { package_json: packageFile, mcp_json: mcpFile },
+        warnings,
+    };
+    if (opts.json)
+        console.log(JSON.stringify(result, null, 2));
+    else {
+        console.log(`Ductape doctor: ${result.ok ? 'ready' : `${warnings.length} warning(s)`}`);
+        console.log(JSON.stringify(result, null, 2));
+    }
+}

package/dist/commands/resources.js

@@ -19,6 +19,26 @@ function unwrapArray(value) {
     }
     return undefined;
 }
+async function reconcileCreatedComponent(proxy, module, productTag, tag, timeoutMs = 20_000) {
+    const started = Date.now();
+    let attempts = 0;
+    do {
+        attempts += 1;
+        try {
+            const product = await proxy.execute('product', 'fetch', [productTag]);
+            const catalogue = listComponentsFromProduct(module, product);
+            const resource = catalogue?.find((item) => item && typeof item === 'object' && item.tag === tag);
+            if (resource)
+                return { resource, attempts, elapsed_ms: Date.now() - started };
+        }
+        catch {
+            // Preserve the original mutation error. Reconciliation is a bounded best-effort read.
+        }
+        if (Date.now() - started < timeoutMs)
+            await new Promise((resolve) => setTimeout(resolve, 2_000));
+    } while (Date.now() - started < timeoutMs);
+    return { resource: null, attempts, elapsed_ms: Date.now() - started };
+}
 /**
  * Session inventories on older platform versions can fail when the component does not exist.
  * Confirm the state through the product catalogue before treating that failure as an empty list,
@@ -324,15 +344,25 @@ export async function runResourceCrud(typeName, verb, opts, extraArgs) {
             throw error;
         }
         try {
-            const reconciled = await proxy.execute(module, 'fetch', buildCrudParams(module, 'fetch', productTag, { tag: createdTag }));
-            if (!reconciled)
-                throw error;
-            printJson({ created: true, reconciled: true, outcome: 'succeeded_after_reconciliation', resource: reconciled }, Boolean(opts.json));
+            const reconciliation = await reconcileCreatedComponent(proxy, module, productTag, createdTag);
+            if (!reconciliation.resource) {
+                throw new DuctapeOperationError(`${error.message} Reconciliation polled the administrative product catalogue ${reconciliation.attempts} time(s) for ${reconciliation.elapsed_ms}ms and did not find "${createdTag}".`, { ...error.details, code: 'MUTATION_OUTCOME_UNKNOWN', mutationState: 'unknown' });
+            }
+            printJson({
+                created: true,
+                reconciled: true,
+                outcome: 'succeeded_after_reconciliation',
+                reconciliation: { attempts: reconciliation.attempts, elapsed_ms: reconciliation.elapsed_ms },
+                resource: reconciliation.resource,
+            }, Boolean(opts.json));
             return;
         }
         catch (reconcileError) {
             if (reconcileError === error)
                 throw error;
+            if (reconcileError instanceof DuctapeOperationError && reconcileError.details.code === 'MUTATION_OUTCOME_UNKNOWN') {
+                throw reconcileError;
+            }
             throw new DuctapeOperationError(`${error.message} Reconciliation could not confirm whether "${createdTag}" exists.`, { ...error.details, code: 'MUTATION_OUTCOME_UNKNOWN', mutationState: 'unknown' }, { cause: reconcileError });
         }
     }

package/dist/index.js

@@ -6,6 +6,7 @@ import path from 'node:path';
 import { runLogin } from './commands/login.js';
 import { runLogout } from './commands/logout.js';
 import { runWhoami } from './commands/whoami.js';
+import { runDoctor } from './commands/doctor.js';
 import { runProfilesList, runProfilesUse } from './commands/profiles.js';
 import { runLink } from './commands/link.js';
 import { runUnlink } from './commands/unlink.js';
@@ -13,7 +14,7 @@ import { runInit } from './commands/init.js';
 import { runInstall } from './commands/install.js';
 import { runStart, runStop, runStatus } from './commands/platform.js';
 import { runResourceCrud, runResourcesList, runEventTopicCrud, runNotificationMessageCrud } from './commands/resources.js';
-import { runCloud } from './commands/cloud.js';
+import { runCloud, runCloudPreflight } from './commands/cloud.js';
 import { runDb, runDbContext } from './commands/db.js';
 import { runDbMigrate, runDbMigrateStatus, runDbMigrateRollback } from './commands/db-migrate.js';
 import { runDbSchemaGenerate, runDbSchemaPush } from './commands/db-schema.js';
@@ -84,6 +85,11 @@ program
     skipWorkspaceSelect: Boolean(opts.skipWorkspaceSelect),
 })));
 program.command('logout').description('Clear local credentials').action(wrap(runLogout));
+program
+    .command('doctor')
+    .description('Report CLI, SDK, MCP, API/schema, authentication, and project compatibility facts')
+    .option('--json', 'JSON output')
+    .action(wrap((opts) => runDoctor({ json: Boolean(opts.json), cliVersion: pkg.version })));
 program
     .command('whoami')
     .description('Show login and linked project')
@@ -704,6 +710,13 @@ resources
     .option('--json', 'JSON output')
     .action(wrap((type, verb, opts) => runResourceCrud(type, verb, opts, [])));
 const cloud = program.command('cloud').description('Cloud connections & resources');
+cloud
+    .command('preflight')
+    .description('Read-only provider capability, connection, tier, instance, and environment preflight')
+    .option('--product <tag>', 'Product tag (defaults to linked project)')
+    .option('-f, --file <path>', 'Optional JSON with discovery requests')
+    .option('--json', 'JSON output')
+    .action(wrap((opts) => runCloudPreflight({ product: opts.product, file: opts.file, json: opts.json })));
 cloud
     .command('connections <verb> [id]')
     .option('-f, --file <path>')

package/dist/lib/templates.js

@@ -90,7 +90,14 @@ Docs: https://docs.ductape.app/docs/cli/
                 name: 'User session',
                 description: 'Standard authenticated user session',
                 expiry: 604800,
+                period: 'seconds',
                 refresh_expiry: 2592000,
+                refresh_period: 'seconds',
+                refresh_rotation: 'rotate_on_use',
+                selector: 'userId',
+                schema: {
+                    userId: { type: 'string', required: true },
+                },
             },
         ];
         fs.writeFileSync(sessionsPath, JSON.stringify(sessionsTemplate, null, 2) + '\n');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ductape/cli",
-  "version": "0.3.15",
+  "version": "0.3.16",
   "description": "Ductape CLI — local platform, login, link projects, and manage resources via the proxy (Workbench-compatible)",
   "type": "module",
   "main": "dist/index.js",