@hypequery/cli 1.26.0 → 1.28.0

package/dist/utils/telemetry/domains.d.ts

@@ -15,14 +15,14 @@ export declare const COMMAND_FLAGS: {
     readonly 'generate:types': readonly ["--output", "--path", "--tables", "--database", "--chdb-path"];
     readonly 'generate:datasets': readonly ["--output", "--path", "--tables", "--exclude-tables", "--tenant-column", "--force", "--check", "--diff"];
     readonly 'generate:manifest': readonly ["--output"];
-    readonly 'generate:client': readonly ["--output", "--check", "--force"];
+    readonly 'generate:client': readonly ["--output", "--check", "--force", "--cloud", "--project", "--environment", "--endpoint"];
     readonly login: readonly ["--cloud-url", "--environment"];
     readonly logout: readonly [];
-    readonly deploy: readonly ["--bundle-output", "--release-output", "--project", "--environment", "--no-source", "--endpoint", "--replace-restored", "--mcp-config"];
+    readonly deploy: readonly ["--bundle-output", "--release-output", "--project", "--environment", "--no-source", "--endpoint", "--replace-restored", "--mcp-config", "--draft", "--client"];
     readonly 'deployment:build': readonly ["--bundle-output", "--no-source"];
     readonly 'deployment:validate': readonly [];
     readonly 'deployment:release': readonly ["--project", "--environment", "--output"];
-    readonly 'deployment:submit': readonly ["--release", "--endpoint", "--replace-restored"];
+    readonly 'deployment:submit': readonly ["--release", "--endpoint", "--replace-restored", "--draft"];
     readonly 'deployment:status': readonly ["--project", "--environment", "--endpoint", "--mcp-config"];
     readonly pull: readonly ["--output", "--project", "--environment", "--endpoint"];
     readonly diff: readonly ["--project", "--environment", "--endpoint"];
@@ -41,14 +41,14 @@ export declare const VALUE_FLAGS: {
     readonly 'generate:types': readonly ["--output", "--path", "--tables", "--database", "--chdb-path"];
     readonly 'generate:datasets': readonly ["--output", "--path", "--tables", "--exclude-tables", "--tenant-column"];
     readonly 'generate:manifest': readonly ["--output"];
-    readonly 'generate:client': readonly ["--output"];
+    readonly 'generate:client': readonly ["--output", "--project", "--environment", "--endpoint"];
     readonly login: readonly ["--cloud-url", "--environment"];
     readonly logout: readonly [];
-    readonly deploy: readonly ["--bundle-output", "--release-output", "--project", "--environment", "--endpoint"];
+    readonly deploy: readonly ["--bundle-output", "--release-output", "--project", "--environment", "--endpoint", "--draft", "--client"];
     readonly 'deployment:build': readonly ["--bundle-output"];
     readonly 'deployment:validate': readonly [];
     readonly 'deployment:release': readonly ["--project", "--environment", "--output"];
-    readonly 'deployment:submit': readonly ["--release", "--endpoint"];
+    readonly 'deployment:submit': readonly ["--release", "--endpoint", "--draft"];
     readonly 'deployment:status': readonly ["--project", "--environment", "--endpoint"];
     readonly pull: readonly ["--output", "--project", "--environment", "--endpoint"];
     readonly diff: readonly ["--project", "--environment", "--endpoint"];

package/dist/utils/telemetry/domains.js

@@ -24,14 +24,14 @@ export const COMMAND_FLAGS = {
     'generate:types': ['--output', '--path', '--tables', '--database', '--chdb-path'],
     'generate:datasets': ['--output', '--path', '--tables', '--exclude-tables', '--tenant-column', '--force', '--check', '--diff'],
     'generate:manifest': ['--output'],
-    'generate:client': ['--output', '--check', '--force'],
+    'generate:client': ['--output', '--check', '--force', '--cloud', '--project', '--environment', '--endpoint'],
     login: ['--cloud-url', '--environment'],
     logout: [],
-    deploy: ['--bundle-output', '--release-output', '--project', '--environment', '--no-source', '--endpoint', '--replace-restored', '--mcp-config'],
+    deploy: ['--bundle-output', '--release-output', '--project', '--environment', '--no-source', '--endpoint', '--replace-restored', '--mcp-config', '--draft', '--client'],
     'deployment:build': ['--bundle-output', '--no-source'],
     'deployment:validate': [],
     'deployment:release': ['--project', '--environment', '--output'],
-    'deployment:submit': ['--release', '--endpoint', '--replace-restored'],
+    'deployment:submit': ['--release', '--endpoint', '--replace-restored', '--draft'],
     'deployment:status': ['--project', '--environment', '--endpoint', '--mcp-config'],
     pull: ['--output', '--project', '--environment', '--endpoint'],
     diff: ['--project', '--environment', '--endpoint'],
@@ -47,14 +47,14 @@ export const VALUE_FLAGS = {
     'generate:types': ['--output', '--path', '--tables', '--database', '--chdb-path'],
     'generate:datasets': ['--output', '--path', '--tables', '--exclude-tables', '--tenant-column'],
     'generate:manifest': ['--output'],
-    'generate:client': ['--output'],
+    'generate:client': ['--output', '--project', '--environment', '--endpoint'],
     login: ['--cloud-url', '--environment'],
     logout: [],
-    deploy: ['--bundle-output', '--release-output', '--project', '--environment', '--endpoint'],
+    deploy: ['--bundle-output', '--release-output', '--project', '--environment', '--endpoint', '--draft', '--client'],
     'deployment:build': ['--bundle-output'],
     'deployment:validate': [],
     'deployment:release': ['--project', '--environment', '--output'],
-    'deployment:submit': ['--release', '--endpoint'],
+    'deployment:submit': ['--release', '--endpoint', '--draft'],
     'deployment:status': ['--project', '--environment', '--endpoint'],
     pull: ['--output', '--project', '--environment', '--endpoint'],
     diff: ['--project', '--environment', '--endpoint'],

package/dist/utils/tenant-key-candidates.d.ts

@@ -0,0 +1,19 @@
+import type { ProtocolDeploymentContract } from '@hypequery/protocol';
+/**
+ * Whether a column name is worth presenting as a possible tenant key.
+ *
+ * A naming match is never enough to activate tenant enforcement. `tenantKey`
+ * is a security boundary that must be chosen explicitly by the application.
+ */
+export declare function isTenantKeyCandidateName(name: string): boolean;
+export interface UnscopedTenantCandidate {
+    readonly dataset: string;
+    readonly columns: readonly string[];
+}
+/**
+ * Served datasets about to be published with a customer-like column that
+ * neither the dataset nor its endpoint scopes by tenant. Datasets without an
+ * endpoint are not callable, so they are skipped.
+ */
+export declare function unscopedTenantCandidates(contract: ProtocolDeploymentContract): UnscopedTenantCandidate[];
+//# sourceMappingURL=tenant-key-candidates.d.ts.map

package/dist/utils/tenant-key-candidates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-key-candidates.d.ts","sourceRoot":"","sources":["../../src/utils/tenant-key-candidates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AActE;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAoCD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,0BAA0B,GAAG,uBAAuB,EAAE,CAMxG"}

package/dist/utils/tenant-key-candidates.js

@@ -0,0 +1,63 @@
+// Kept in step with Cloud's customer-scope review, so the CLI and onboarding flag the same columns.
+const CANDIDATE_NAMES = new Set([
+    'tenant_id',
+    'org_id',
+    'organization_id',
+    'organisation_id',
+    'account_id',
+    'customer_id',
+    'workspace_id',
+    'company_id',
+]);
+/**
+ * Whether a column name is worth presenting as a possible tenant key.
+ *
+ * A naming match is never enough to activate tenant enforcement. `tenantKey`
+ * is a security boundary that must be chosen explicitly by the application.
+ */
+export function isTenantKeyCandidateName(name) {
+    return CANDIDATE_NAMES.has(name.toLowerCase());
+}
+const lastSegment = (name) => name.slice(name.lastIndexOf('.') + 1);
+/**
+ * The physical columns a dataset reads from its own table, which are the only
+ * values `tenantKey` accepts. Dimension sources may be table-qualified or SQL
+ * with declared dependencies; measure and filter fields may name a dimension,
+ * which resolves to its source. Fields reached through a relationship belong
+ * to another table and are skipped.
+ */
+function ownColumns(dataset) {
+    const related = new Set((dataset.relationships ?? []).map((relationship) => String(relationship.name)));
+    const own = (reference) => {
+        const dot = reference.lastIndexOf('.');
+        return dot < 0 || !related.has(reference.slice(0, dot));
+    };
+    const sourceColumns = (dimension) => (dimension.source.kind === 'column' ? [dimension.source.column] : dimension.source.dependencies.map(String))
+        .filter(own)
+        .map(lastSegment);
+    const dimensions = new Map(dataset.dimensions.map((dimension) => [String(dimension.name), dimension]));
+    const resolve = (field) => {
+        if (!own(field))
+            return [];
+        const dimension = dimensions.get(lastSegment(field));
+        return dimension ? sourceColumns(dimension) : [lastSegment(field)];
+    };
+    return [
+        ...dataset.dimensions.flatMap(sourceColumns),
+        ...dataset.measures.flatMap((measure) => 'field' in measure ? resolve(String(measure.field)) : []),
+        ...dataset.filters.flatMap((filter) => resolve(String(filter.field))),
+    ];
+}
+/**
+ * Served datasets about to be published with a customer-like column that
+ * neither the dataset nor its endpoint scopes by tenant. Datasets without an
+ * endpoint are not callable, so they are skipped.
+ */
+export function unscopedTenantCandidates(contract) {
+    return contract.datasets.flatMap((dataset) => {
+        if (!dataset.endpoint || dataset.tenant.kind === 'required' || dataset.endpoint.tenant.kind === 'required')
+            return [];
+        const columns = [...new Set(ownColumns(dataset).filter(isTenantKeyCandidateName))];
+        return columns.length ? [{ dataset: dataset.name, columns }] : [];
+    });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypequery/cli",
-  "version": "1.26.0",
+  "version": "1.28.0",
   "description": "CLI for scaffolding type-safe ClickHouse analytics, semantic datasets, React manifests, and deployments",
   "keywords": [
     "clickhouse",
@@ -23,15 +23,15 @@
   ],
   "dependencies": {
     "@clickhouse/client": "^1.24.1",
-    "chalk": "^5.3.0",
+    "chalk": "^6.0.1",
     "commander": "^15.0.0",
     "dotenv": "^18.0.8",
     "esbuild": "^0.28.2",
     "open": "^11.0.4",
-    "ora": "^8.0.1",
+    "ora": "^9.4.1",
     "prompts": "^2.4.2",
-    "@hypequery/deployment": "0.11.0",
-    "@hypequery/protocol": "0.24.0"
+    "@hypequery/deployment": "0.11.2",
+    "@hypequery/protocol": "0.24.2"
   },
   "optionalDependencies": {
     "@napi-rs/keyring": "2.1.2"
@@ -54,8 +54,8 @@
     "@vitest/coverage-v8": "^5.0.5",
     "typescript": "^6.0.3",
     "vitest": "^5.0.5",
-    "@hypequery/mcp": "0.11.0",
-    "@hypequery/serve": "0.24.0"
+    "@hypequery/mcp": "0.11.2",
+    "@hypequery/serve": "0.24.2"
   },
   "repository": {
     "type": "git",