@hyperdrive.bot/cli 1.0.13 → 1.0.17

package/dist/commands/hook/remove.js

@@ -0,0 +1,115 @@
+import { Command, Flags } from '@oclif/core';
+import chalk from 'chalk';
+import ora from 'ora';
+import { HyperdriveSigV4Service } from '../../services/hyperdrive-sigv4.js';
+import { promptConfirmDelete, promptSelectHook } from '../../utils/hook-flow.js';
+export default class HookRemove extends Command {
+    static description = 'Delete a tenant lifecycle hook';
+    static examples = [
+        '<%= config.bin %> hook remove',
+        '<%= config.bin %> hook remove --hook-id 01JQXYZ',
+        '<%= config.bin %> hook remove --hook-id 01JQXYZ --json',
+    ];
+    static flags = {
+        domain: Flags.string({
+            char: 'd',
+            description: 'Hyperdrive tenant domain',
+        }),
+        'hook-id': Flags.string({
+            description: 'Hook ID to remove (skips interactive selection)',
+        }),
+        json: Flags.boolean({
+            description: 'Output raw JSON',
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(HookRemove);
+        const isJson = flags.json;
+        const hookIdFlag = flags['hook-id'];
+        // Authenticate
+        let apiService;
+        const spinner = isJson ? null : ora('Checking authentication...').start();
+        try {
+            apiService = new HyperdriveSigV4Service(flags.domain);
+            spinner?.succeed('Authenticated');
+        }
+        catch (error) {
+            spinner?.fail('Not authenticated');
+            this.error(`${error.message}\n\n` +
+                `Please authenticate first with: ${chalk.cyan('hd auth login')}`);
+        }
+        if (isJson && !hookIdFlag) {
+            this.error('Cannot use --json without --hook-id (interactive mode requires a terminal)');
+        }
+        let hookId;
+        if (hookIdFlag) {
+            hookId = hookIdFlag;
+        }
+        else {
+            // Fetch hooks for interactive selection
+            const fetchSpinner = ora('Fetching hooks...').start();
+            try {
+                const hooks = await apiService.tenantHookList();
+                fetchSpinner.succeed(`Found ${hooks.length} hook${hooks.length === 1 ? '' : 's'}`);
+                if (hooks.length === 0) {
+                    this.log('');
+                    this.log(chalk.yellow('No hooks to remove'));
+                    this.log('');
+                    return;
+                }
+                this.log('');
+                const selectedHook = await promptSelectHook(hooks);
+                hookId = selectedHook.hookId;
+                const confirmed = await promptConfirmDelete(selectedHook);
+                if (!confirmed) {
+                    this.log(chalk.dim('Cancelled'));
+                    return;
+                }
+            }
+            catch (error) {
+                fetchSpinner.fail('Failed to fetch hooks');
+                this.handleApiError(error);
+            }
+        }
+        // Delete hook
+        const deleteSpinner = isJson ? null : ora('Deleting hook...').start();
+        try {
+            await apiService.tenantHookDelete(hookId);
+            deleteSpinner?.succeed('Hook deleted');
+            if (isJson) {
+                this.log(JSON.stringify({ message: 'Hook deleted', hookId: hookId }, null, 2));
+                return;
+            }
+            this.log('');
+            this.log(chalk.green('Hook deleted: ') + chalk.cyan(hookId));
+            this.log('');
+        }
+        catch (error) {
+            deleteSpinner?.fail('Failed to delete hook');
+            this.handleApiError(error);
+        }
+    }
+    handleApiError(error) {
+        let errorMessage = error.message;
+        if (error.response) {
+            const status = error.response.status;
+            const data = error.response.data;
+            if (status === 401) {
+                errorMessage = 'Authentication failed — please run "hd auth login"';
+            }
+            else if (status === 403) {
+                errorMessage = 'Access denied — check your permissions';
+            }
+            else if (status === 404) {
+                errorMessage = 'Hook not found';
+            }
+            else if (data?.error) {
+                errorMessage = data.error;
+            }
+            else if (data?.message) {
+                errorMessage = data.message;
+            }
+        }
+        this.error(errorMessage);
+    }
+}

package/dist/commands/hook/toggle.d.ts

@@ -0,0 +1,12 @@
+import { Command } from '@oclif/core';
+export default class HookToggle extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        domain: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'hook-id': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+    private handleApiError;
+}

package/dist/commands/hook/toggle.js

@@ -0,0 +1,125 @@
+import { Command, Flags } from '@oclif/core';
+import chalk from 'chalk';
+import ora from 'ora';
+import { HyperdriveSigV4Service } from '../../services/hyperdrive-sigv4.js';
+import { promptSelectHook } from '../../utils/hook-flow.js';
+export default class HookToggle extends Command {
+    static description = 'Enable or disable a tenant lifecycle hook';
+    static examples = [
+        '<%= config.bin %> hook toggle',
+        '<%= config.bin %> hook toggle --hook-id 01JQXYZ',
+        '<%= config.bin %> hook toggle --hook-id 01JQXYZ --json',
+    ];
+    static flags = {
+        domain: Flags.string({
+            char: 'd',
+            description: 'Hyperdrive tenant domain',
+        }),
+        'hook-id': Flags.string({
+            description: 'Hook ID to toggle (skips interactive selection)',
+        }),
+        json: Flags.boolean({
+            description: 'Output raw JSON',
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(HookToggle);
+        const isJson = flags.json;
+        const hookIdFlag = flags['hook-id'];
+        // Authenticate
+        let apiService;
+        const spinner = isJson ? null : ora('Checking authentication...').start();
+        try {
+            apiService = new HyperdriveSigV4Service(flags.domain);
+            spinner?.succeed('Authenticated');
+        }
+        catch (error) {
+            spinner?.fail('Not authenticated');
+            this.error(`${error.message}\n\n` +
+                `Please authenticate first with: ${chalk.cyan('hd auth login')}`);
+        }
+        if (isJson && !hookIdFlag) {
+            this.error('Cannot use --json without --hook-id (interactive mode requires a terminal)');
+        }
+        let hookId;
+        let currentEnabled;
+        if (hookIdFlag) {
+            hookId = hookIdFlag;
+        }
+        else {
+            // Fetch hooks for interactive selection
+            const fetchSpinner = ora('Fetching hooks...').start();
+            try {
+                const hooks = await apiService.tenantHookList();
+                fetchSpinner.succeed(`Found ${hooks.length} hook${hooks.length === 1 ? '' : 's'}`);
+                if (hooks.length === 0) {
+                    this.log('');
+                    this.log(chalk.yellow('No hooks to toggle'));
+                    this.log('');
+                    return;
+                }
+                this.log('');
+                const selectedHook = await promptSelectHook(hooks);
+                hookId = selectedHook.hookId;
+                currentEnabled = selectedHook.enabled;
+            }
+            catch (error) {
+                fetchSpinner.fail('Failed to fetch hooks');
+                this.handleApiError(error);
+            }
+        }
+        // Toggle hook
+        const toggleSpinner = isJson ? null : ora('Toggling hook...').start();
+        try {
+            // If we don't know the current state (--hook-id path), fetch it first
+            let enabled;
+            if (currentEnabled !== undefined) {
+                enabled = !currentEnabled;
+            }
+            else {
+                const hook = await apiService.tenantHookGet(hookId);
+                enabled = !hook.enabled;
+            }
+            const updatedHook = await apiService.tenantHookUpdate(hookId, { enabled });
+            toggleSpinner?.succeed('Hook toggled');
+            if (isJson) {
+                this.log(JSON.stringify(updatedHook, null, 2));
+                return;
+            }
+            this.log('');
+            this.log(`Hook ${chalk.cyan(hookId)} is now ${updatedHook.enabled ? chalk.green('enabled') : chalk.red('disabled')}`);
+            this.log(`  Hook ID:        ${chalk.cyan(updatedHook.hookId)}`);
+            this.log(`  Trigger Event:  ${chalk.cyan(updatedHook.trigger?.event ?? '')}`);
+            this.log(`  Action Type:    ${chalk.cyan(updatedHook.action?.type ?? '')}`);
+            this.log(`  Enabled:        ${updatedHook.enabled ? chalk.green('enabled') : chalk.red('disabled')}`);
+            this.log('');
+        }
+        catch (error) {
+            toggleSpinner?.fail('Failed to toggle hook');
+            this.handleApiError(error);
+        }
+    }
+    handleApiError(error) {
+        let errorMessage = error.message;
+        if (error.response) {
+            const status = error.response.status;
+            const data = error.response.data;
+            if (status === 401) {
+                errorMessage = 'Authentication failed — please run "hd auth login"';
+            }
+            else if (status === 403) {
+                errorMessage = 'Access denied — check your permissions';
+            }
+            else if (status === 404) {
+                errorMessage = 'Hook not found';
+            }
+            else if (data?.error) {
+                errorMessage = data.error;
+            }
+            else if (data?.message) {
+                errorMessage = data.message;
+            }
+        }
+        this.error(errorMessage);
+    }
+}

package/dist/commands/init.d.ts

@@ -1,6 +1,6 @@
 import { Command, Config } from '@oclif/core';
+import type { AuthResult } from '@hyperdrive.bot/cli-auth';
 import { AccountResult } from '../utils/account-flow.js';
-import { AuthResult } from '../utils/auth-flow.js';
 import { GitConnectResult } from '../utils/git-flow.js';
 import { JiraConnectResult } from '../utils/jira-flow.js';
 export type AuthFlowFunction = (options: {

package/dist/commands/init.js

@@ -1,14 +1,54 @@
 import { Command } from '@oclif/core';
+import { TenantService, buildAuthUrl, buildStoredCredentials, exchangeCodeForTokens, generateCodeChallenge, generateCodeVerifier, getAWSCredentialsFromIdentityPool, saveCredentials, startCallbackServer, } from '@hyperdrive.bot/cli-auth';
 import chalk from 'chalk';
 import inquirer from 'inquirer';
+import open from 'open';
 import ora from 'ora';
-import { TenantService } from '../services/tenant-service.js';
 import { executeAccountAdd as executeAccountAddOriginal, openCloudFormationUrl, promptAccountDetails, registerAccount, waitForRoleVerification, } from '../utils/account-flow.js';
-import { executeAuthFlow as executeAuthFlowOriginal } from '../utils/auth-flow.js';
 import { executeGitConnect as executeGitConnectOriginal, promptGitProvider, } from '../utils/git-flow.js';
 import { executeJiraConnect as executeJiraConnectOriginal, promptJiraConnect, promptJiraDomain, registerJiraDomain, } from '../utils/jira-flow.js';
 import { displaySetupSummary } from '../utils/summary-display.js';
 import { validateTenantDomain } from '../utils/validation.js';
+const HYPERDRIVE_TENANT_CONFIG = {
+    appName: 'hyperdrive',
+    defaultBootstrapUrl: 'https://api.hyperdrive.bot/tenant/bootstrap',
+    bootstrapUrlEnvVar: 'HYPERDRIVE_BOOTSTRAP_URL',
+    tenantDomainEnvVar: 'HYPERDRIVE_TENANT_DOMAIN',
+    apiUrlEnvVar: 'HYPERDRIVE_API_URL',
+    primaryApiName: 'hyperdrive',
+};
+/**
+ * Execute the complete OAuth PKCE authentication flow using cli-auth primitives.
+ */
+async function executeAuthFlowOriginal(options) {
+    const { logger, tenantDomain } = options;
+    const port = 8765;
+    const tenantService = new TenantService(HYPERDRIVE_TENANT_CONFIG, tenantDomain);
+    try {
+        const tenantConfig = await tenantService.fetchTenantConfig(tenantDomain);
+        const codeVerifier = generateCodeVerifier();
+        const codeChallenge = generateCodeChallenge(codeVerifier);
+        const authCodePromise = startCallbackServer(port, 300_000, 'hyperdrive');
+        const authUrl = buildAuthUrl(tenantConfig, codeChallenge, port);
+        if (logger) {
+            logger('Opening browser for authentication...');
+            logger("If browser doesn't open or opens in wrong profile, copy this URL:");
+            logger(`  ${authUrl}`);
+            logger('');
+        }
+        await open(authUrl);
+        const code = await authCodePromise;
+        const tokens = await exchangeCodeForTokens(tenantConfig, code, codeVerifier, port);
+        const awsCredentials = await getAWSCredentialsFromIdentityPool(tenantConfig, tokens.id_token);
+        const stored = buildStoredCredentials(tokens, awsCredentials, tenantConfig);
+        saveCredentials(stored, tenantConfig.tenantDomain, 'hyperdrive');
+        return { success: true };
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        return { error: errorMessage, success: false };
+    }
+}
 // Module-level auth flow function - can be replaced for testing
 let authFlowImpl = executeAuthFlowOriginal;
 // Module-level account add flow function - can be replaced for testing
@@ -104,7 +144,7 @@ export default class Init extends Command {
     tenantService;
     constructor(argv, config) {
         super(argv, config);
-        this.tenantService = new TenantService();
+        this.tenantService = new TenantService(HYPERDRIVE_TENANT_CONFIG);
     }
     async run() {
         this.displayWelcome();
@@ -492,7 +532,7 @@ export default class Init extends Command {
                 }]);
             if (!tryAnyway) {
                 this.jiraSkipped = true;
-                this.log(chalk.yellow('⚠') + " Skipped Jira integration. Run 'hd jira connect' later.");
+                this.log(chalk.yellow('⚠') + " Skipped Jira integration. Run 'hd tracker connect' later.");
                 return;
             }
         }
@@ -500,7 +540,7 @@ export default class Init extends Command {
         const action = await promptJiraConnect(true);
         if (action === 'skip') {
             this.jiraSkipped = true;
-            this.log(chalk.yellow('⚠') + " Skipped Jira integration. Run 'hd jira connect' later.");
+            this.log(chalk.yellow('⚠') + " Skipped Jira integration. Run 'hd tracker connect' later.");
             return;
         }
         // Execute Jira connection flow with retry limit
@@ -642,7 +682,7 @@ export default class Init extends Command {
             this.log(chalk.bold('Marketplace URL:'));
             this.log(`  ${chalk.cyan(result.marketplaceUrl || 'https://marketplace.atlassian.com')}`);
             this.log('');
-            this.log(chalk.dim('💡 Tip: Run') + chalk.cyan(' hd jira status ') + chalk.dim('to verify the connection'));
+            this.log(chalk.dim('💡 Tip: Run') + chalk.cyan(' hd tracker status ') + chalk.dim('to verify the connection'));
             this.log('');
         }
         catch (error) {
@@ -721,12 +761,12 @@ export default class Init extends Command {
                 }]);
             if (skip) {
                 this.jiraSkipped = true;
-                this.log(chalk.yellow('⚠') + " Skipped Jira integration. Run 'hd jira connect' later.");
+                this.log(chalk.yellow('⚠') + " Skipped Jira integration. Run 'hd tracker connect' later.");
             }
             else {
                 this.log('');
                 this.log(chalk.yellow('⚠') + ' Setup cannot continue without Jira connection.');
-                this.log(chalk.gray("Run 'hd jira connect' to connect Jira separately."));
+                this.log(chalk.gray("Run 'hd tracker connect' to connect Jira separately."));
             }
             return;
         }
@@ -744,7 +784,7 @@ export default class Init extends Command {
         else {
             // User chose not to retry - mark as skipped
             this.jiraSkipped = true;
-            this.log(chalk.yellow('⚠') + " Skipped Jira integration. Run 'hd jira connect' later.");
+            this.log(chalk.yellow('⚠') + " Skipped Jira integration. Run 'hd tracker connect' later.");
         }
     }
     /**

package/dist/commands/module/bindings.d.ts

@@ -0,0 +1,14 @@
+import { Command } from '@oclif/core';
+export default class ModuleBindings extends Command {
+    static description: string;
+    static examples: string[];
+    static args: {
+        module: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        domain: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        stage: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/module/bindings.js

@@ -0,0 +1,125 @@
+import { Args, Command, Flags } from '@oclif/core';
+import chalk from 'chalk';
+import ora from 'ora';
+import { HyperdriveSigV4Service } from '../../services/hyperdrive-sigv4.js';
+import { printHeader, printTable } from '../../utils/table.js';
+export default class ModuleBindings extends Command {
+    static description = 'List all service bindings for a module';
+    static examples = [
+        '<%= config.bin %> module bindings my-api',
+        '<%= config.bin %> module bindings my-api --stage live',
+        '<%= config.bin %> module bindings my-api --json',
+    ];
+    static args = {
+        module: Args.string({
+            description: 'Module slug',
+            required: true,
+        }),
+    };
+    static flags = {
+        domain: Flags.string({
+            char: 'd',
+            description: 'Tenant domain (for multi-domain setups)',
+        }),
+        json: Flags.boolean({
+            description: 'Output raw JSON response',
+            default: false,
+        }),
+        stage: Flags.string({
+            description: 'Filter by stage',
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(ModuleBindings);
+        const isJson = flags.json;
+        const service = new HyperdriveSigV4Service(flags.domain);
+        const spinner = isJson ? null : ora(`Fetching bindings for module "${args.module}"...`).start();
+        try {
+            const bindings = await service.moduleBindings(args.module, {
+                stage: flags.stage,
+            });
+            spinner?.stop();
+            if (isJson) {
+                this.log(JSON.stringify(bindings, null, 2));
+                return;
+            }
+            if (!bindings || bindings.length === 0) {
+                this.log(chalk.yellow(`\nNo service bindings found for module "${args.module}".`));
+                return;
+            }
+            this.log(chalk.green(`\n${bindings.length} binding(s) for module "${args.module}":\n`));
+            // Group by stage when no --stage filter
+            if (!flags.stage) {
+                const byStage = new Map();
+                for (const b of bindings) {
+                    if (!byStage.has(b.stage))
+                        byStage.set(b.stage, []);
+                    byStage.get(b.stage).push(b);
+                }
+                for (const [stage, stageBindings] of byStage) {
+                    printHeader(`Stage: ${stage}`, (msg) => this.log(msg));
+                    printTable(stageBindings, {
+                        serviceSlug: {
+                            header: 'Service',
+                            minWidth: 25,
+                            get: (row) => chalk.cyan(row.serviceSlug),
+                        },
+                        serviceType: {
+                            header: 'Type',
+                            minWidth: 18,
+                            get: (row) => row.serviceType || chalk.gray('-'),
+                        },
+                        serviceAccess: {
+                            header: 'Access',
+                            get: (row) => {
+                                if (!row.serviceAccess)
+                                    return chalk.gray('-');
+                                return row.serviceAccess === 'private' ? chalk.yellow(row.serviceAccess) : chalk.green(row.serviceAccess);
+                            },
+                        },
+                        networkSlug: {
+                            header: 'Network',
+                            get: (row) => row.networkSlug || chalk.gray('-'),
+                        },
+                    }, (msg) => this.log(msg));
+                }
+            }
+            else {
+                printTable(bindings, {
+                    serviceSlug: {
+                        header: 'Service',
+                        minWidth: 25,
+                        get: (row) => chalk.cyan(row.serviceSlug),
+                    },
+                    serviceType: {
+                        header: 'Type',
+                        minWidth: 18,
+                        get: (row) => row.serviceType || chalk.gray('-'),
+                    },
+                    serviceAccess: {
+                        header: 'Access',
+                        get: (row) => {
+                            if (!row.serviceAccess)
+                                return chalk.gray('-');
+                            return row.serviceAccess === 'private' ? chalk.yellow(row.serviceAccess) : chalk.green(row.serviceAccess);
+                        },
+                    },
+                    networkSlug: {
+                        header: 'Network',
+                        get: (row) => row.networkSlug || chalk.gray('-'),
+                    },
+                    createdAt: {
+                        header: 'Created',
+                        get: (row) => new Date(row.createdAt).toLocaleDateString(),
+                    },
+                }, (msg) => this.log(msg));
+            }
+        }
+        catch (error) {
+            spinner?.fail('Failed');
+            const axiosError = error;
+            this.log(chalk.red(`\n❌ ${axiosError.response?.data?.message ?? axiosError.message}`));
+            this.exit(1);
+        }
+    }
+}

package/dist/commands/module/create.d.ts

@@ -13,11 +13,14 @@ export default class ModuleCreate extends Command {
         domain: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         framework: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         installCommand: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'module-type': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         name: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         runCommand: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         runtime: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         runtimeVersion: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         slug: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        subdomain: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         sourceDirectory: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         sourceLocation: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };