@hyperdrive.bot/cli 1.0.5 → 1.0.7

package/dist/commands/stage/access.js

@@ -0,0 +1,130 @@
+import { Args, Command, Flags } from '@oclif/core';
+import chalk from 'chalk';
+import inquirer from 'inquirer';
+import { HyperdriveSigV4Service } from '../../services/hyperdrive-sigv4.js';
+import { printTable } from '../../utils/table.js';
+export default class StageAccess extends Command {
+    static args = {
+        stage: Args.string({
+            description: 'Stage name to view access for',
+            required: false,
+        }),
+    };
+    static description = 'View who has access to a stage';
+    static examples = [
+        '<%= config.bin %> <%= command.id %>',
+        '<%= config.bin %> <%= command.id %> develop',
+        '<%= config.bin %> <%= command.id %> develop --format json',
+    ];
+    static flags = {
+        domain: Flags.string({
+            char: 'd',
+            description: 'Tenant domain (for multi-domain setups)',
+        }),
+        format: Flags.string({
+            char: 'f',
+            default: 'table',
+            description: 'Output format',
+            options: ['table', 'json'],
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(StageAccess);
+        const service = new HyperdriveSigV4Service(flags.domain);
+        // Resolve stage
+        let stageName;
+        if (args.stage) {
+            stageName = args.stage;
+        }
+        else {
+            stageName = await this.promptForStage(service);
+        }
+        try {
+            this.log(chalk.blue(`\n🔍 Fetching access for stage '${stageName}'...\n`));
+            const result = await service.stageAccessGet(stageName);
+            if (flags.format === 'json') {
+                this.log(JSON.stringify(result, null, 2));
+                return;
+            }
+            // Display header
+            this.log(chalk.cyan('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+            this.log(chalk.cyan(`📋 Access for stage: ${result.stageName}`));
+            this.log(chalk.cyan('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+            this.log('');
+            if (!result.access || result.access.length === 0) {
+                this.log(chalk.yellow('⚠️  No access entries found (only the owner has access)'));
+                return;
+            }
+            // Group by type
+            const users = result.access.filter((a) => a.targetType === 'user');
+            const groups = result.access.filter((a) => a.targetType === 'group');
+            if (users.length > 0) {
+                this.log(chalk.white(`Users (${users.length}):`));
+                printTable(users, {
+                    targetId: {
+                        header: 'User ID / Email',
+                        minWidth: 30,
+                    },
+                    role: {
+                        header: 'Role',
+                        get: (row) => this.formatRole(row.role),
+                    },
+                }, (msg) => this.log(msg));
+                this.log('');
+            }
+            if (groups.length > 0) {
+                this.log(chalk.white(`Groups (${groups.length}):`));
+                printTable(groups, {
+                    targetId: {
+                        header: 'Group ID',
+                        minWidth: 30,
+                    },
+                    role: {
+                        header: 'Role',
+                        get: (row) => this.formatRole(row.role),
+                    },
+                }, (msg) => this.log(msg));
+                this.log('');
+            }
+            // Summary
+            this.log(chalk.gray(`Total: ${result.access.length} access entries`));
+        }
+        catch (error) {
+            const err = error;
+            const message = err.response?.data?.message || err.message;
+            this.error(`Failed to get stage access: ${message}`);
+        }
+    }
+    formatRole(role) {
+        switch (role) {
+            case 'manager':
+                return chalk.red('Manager');
+            case 'deployer':
+                return chalk.yellow('Deployer');
+            case 'viewer':
+                return chalk.blue('Viewer');
+            default:
+                return role;
+        }
+    }
+    async promptForStage(service) {
+        this.log(chalk.gray('   Fetching stages...'));
+        const stages = await service.stageList();
+        if (!stages || stages.length === 0) {
+            this.error('No stages found');
+        }
+        const stageChoices = stages.map(s => ({
+            name: s.production
+                ? `${s.name} ${chalk.red('(PROD)')}`
+                : `${s.name} ${chalk.blue('(dev)')}`,
+            value: s.slug || s.name,
+        }));
+        const { stage } = await inquirer.prompt([{
+                choices: stageChoices,
+                message: chalk.yellow('Select a stage:'),
+                name: 'stage',
+                type: 'list',
+            }]);
+        return stage;
+    }
+}

package/dist/commands/stage/create.d.ts

@@ -2,17 +2,17 @@ import { Command } from '@oclif/core';
 export default class StageCreate extends Command {
     static description: string;
     static flags: {
-        accountId: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
-        autoLaunch: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
-        branchName: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
-        defaultStage: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
-        deletionProtection: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
-        domain: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
-        name: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
-        production: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
-        project: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
-        provider: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
-        region: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        accountId: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        autoLaunch: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        branchName: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        defaultStage: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        deletionProtection: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        domain: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        name: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        production: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        project: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        provider: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        region: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
     /**

package/dist/commands/stage/list.d.ts

@@ -3,7 +3,7 @@ export default class StageList extends Command {
     static description: string;
     static examples: string[];
     static flags: {
-        domain: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        domain: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/stage/list.js

@@ -1,6 +1,7 @@
-import { Command, Flags, ux } from '@oclif/core';
+import { Command, Flags } from '@oclif/core';
 import chalk from 'chalk';
 import { HyperdriveSigV4Service } from '../../services/hyperdrive-sigv4.js';
+import { printTable } from '../../utils/table.js';
 export default class StageList extends Command {
     static description = 'List all stages';
     static examples = [
@@ -24,36 +25,36 @@ export default class StageList extends Command {
             }
             this.log(chalk.green(`✅ Found ${stages.length} stage(s)\n`));
             // Display stages in a table
-            ux.table(stages, {
-                branchName: {
-                    header: 'Branch',
-                },
-                createdAt: {
-                    get: (row) => new Date(row.createdAt).toLocaleDateString(),
-                    header: 'Created',
-                },
-                defaultStage: {
-                    get: (row) => row.defaultStage ? chalk.green('✓') : '',
-                    header: 'Default',
-                },
+            printTable(stages, {
                 name: {
                     header: 'Name',
                     minWidth: 15,
                 },
+                slug: {
+                    header: 'Slug',
+                    minWidth: 15,
+                    get: (row) => chalk.cyan(row.slug),
+                },
                 production: {
-                    get: (row) => row.production ? chalk.red('PROD') : chalk.blue('DEV'),
                     header: 'Type',
+                    get: (row) => row.production ? chalk.red('PROD') : chalk.blue('DEV'),
+                },
+                branchName: {
+                    header: 'Branch',
                 },
                 regions: {
-                    get: (row) => (row.regions || []).join(', '),
                     header: 'Regions',
+                    get: (row) => (row.regions || []).join(', '),
                 },
-                slug: {
-                    get: (row) => chalk.cyan(row.slug),
-                    header: 'Slug',
-                    minWidth: 15,
+                defaultStage: {
+                    header: 'Default',
+                    get: (row) => row.defaultStage ? chalk.green('✓') : '',
+                },
+                createdAt: {
+                    header: 'Created',
+                    get: (row) => new Date(row.createdAt).toLocaleDateString(),
                 },
-            });
+            }, (msg) => this.log(msg));
         }
         catch (error) {
             console.error('Error:', error);

package/dist/commands/stage/revoke.d.ts

@@ -0,0 +1,18 @@
+import { Command } from '@oclif/core';
+export default class StageRevoke extends Command {
+    static args: {
+        stage: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        ci: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        domain: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        user: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+    private findCIAccount;
+    private promptForStage;
+    private promptForTarget;
+}

package/dist/commands/stage/revoke.js

@@ -0,0 +1,171 @@
+import { Args, Command, Flags } from '@oclif/core';
+import chalk from 'chalk';
+import inquirer from 'inquirer';
+import { HyperdriveSigV4Service } from '../../services/hyperdrive-sigv4.js';
+export default class StageRevoke extends Command {
+    static args = {
+        stage: Args.string({
+            description: 'Stage name to revoke access from',
+            required: false,
+        }),
+    };
+    static description = 'Revoke access from a stage for a user or CI account';
+    static examples = [
+        // Interactive
+        '<%= config.bin %> <%= command.id %>',
+        '<%= config.bin %> <%= command.id %> develop',
+        // Non-interactive
+        '<%= config.bin %> <%= command.id %> develop --user maria@company.com',
+        '<%= config.bin %> <%= command.id %> develop --ci github-actions',
+    ];
+    static flags = {
+        ci: Flags.string({
+            char: 'c',
+            description: 'CI account name or ID to revoke access from',
+            exclusive: ['user'],
+        }),
+        domain: Flags.string({
+            char: 'd',
+            description: 'Tenant domain (for multi-domain setups)',
+        }),
+        user: Flags.string({
+            char: 'u',
+            description: 'User email to revoke access from',
+            exclusive: ['ci'],
+        }),
+        yes: Flags.boolean({
+            char: 'y',
+            default: false,
+            description: 'Skip confirmation',
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(StageRevoke);
+        this.log(chalk.cyan('\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        this.log(chalk.cyan('🔓 Revoke Stage Access'));
+        this.log(chalk.cyan('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        this.log('');
+        const service = new HyperdriveSigV4Service(flags.domain);
+        // Step 1: Resolve stage
+        let stageName;
+        if (args.stage) {
+            stageName = args.stage;
+        }
+        else {
+            stageName = await this.promptForStage(service);
+        }
+        // Step 2: Resolve target
+        let targetType;
+        let targetId;
+        let displayName;
+        if (flags.user) {
+            targetType = 'user';
+            targetId = flags.user;
+            displayName = flags.user;
+        }
+        else if (flags.ci) {
+            const ciAccount = await this.findCIAccount(service, flags.ci);
+            if (!ciAccount) {
+                this.error(`CI account '${flags.ci}' not found`);
+            }
+            targetType = 'user';
+            targetId = ciAccount.cognitoUsername;
+            displayName = `CI: ${ciAccount.name}`;
+        }
+        else {
+            // Interactive: show current access and let user select
+            const target = await this.promptForTarget(service, stageName);
+            if (!target) {
+                this.log(chalk.yellow('No access entries to revoke.'));
+                return;
+            }
+            targetType = target.type;
+            targetId = target.id;
+            displayName = target.displayName;
+        }
+        // Step 3: Confirm
+        if (!flags.yes) {
+            const { confirmed } = await inquirer.prompt([{
+                    default: false,
+                    message: chalk.yellow(`Revoke all access from ${displayName} on stage '${stageName}'?`),
+                    name: 'confirmed',
+                    type: 'confirm',
+                }]);
+            if (!confirmed) {
+                this.log(chalk.gray('Cancelled.'));
+                return;
+            }
+        }
+        // Step 4: Revoke
+        try {
+            this.log(chalk.blue(`\n🔄 Revoking access from '${stageName}' for ${displayName}...`));
+            await service.stageAccessRevoke(stageName, targetType, targetId);
+            this.log(chalk.green(`✅ Access revoked for ${displayName} from '${stageName}'`));
+        }
+        catch (error) {
+            const err = error;
+            const message = err.response?.data?.message || err.message;
+            this.error(`Failed to revoke access: ${message}`);
+        }
+        this.log('');
+    }
+    async findCIAccount(service, nameOrId) {
+        try {
+            const accounts = await service.ciAccountList();
+            return accounts.find(a => a.name.toLowerCase() === nameOrId.toLowerCase() ||
+                a.accountId === nameOrId ||
+                a.cognitoUsername.includes(nameOrId)) || null;
+        }
+        catch {
+            return null;
+        }
+    }
+    async promptForStage(service) {
+        this.log(chalk.gray('   Fetching stages...'));
+        const stages = await service.stageList();
+        if (!stages || stages.length === 0) {
+            this.error('No stages found');
+        }
+        const stageChoices = stages.map(s => ({
+            name: s.production
+                ? `${s.name} ${chalk.red('(PROD)')}`
+                : `${s.name} ${chalk.blue('(dev)')}`,
+            value: s.slug || s.name,
+        }));
+        const { stage } = await inquirer.prompt([{
+                choices: stageChoices,
+                message: chalk.yellow('Select a stage:'),
+                name: 'stage',
+                type: 'list',
+            }]);
+        return stage;
+    }
+    async promptForTarget(service, stageName) {
+        this.log(chalk.gray('   Fetching current access...'));
+        try {
+            const accessData = await service.stageAccessGet(stageName);
+            if (!accessData.access || accessData.access.length === 0) {
+                return null;
+            }
+            // Build choices from current access
+            const choices = accessData.access.map(entry => ({
+                name: `${entry.targetId} (${entry.role})`,
+                value: {
+                    displayName: entry.targetId,
+                    id: entry.targetId,
+                    type: entry.targetType,
+                },
+            }));
+            const { target } = await inquirer.prompt([{
+                    choices,
+                    message: chalk.yellow('Select who to revoke access from:'),
+                    name: 'target',
+                    type: 'list',
+                }]);
+            return target;
+        }
+        catch {
+            return null;
+        }
+    }
+}

package/dist/commands/stage/share.d.ts

@@ -0,0 +1,23 @@
+import { Command } from '@oclif/core';
+export default class StageShare extends Command {
+    static args: {
+        stage: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        ci: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        domain: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        group: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        role: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        user: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    static strict: boolean;
+    run(): Promise<void>;
+    private findCIAccount;
+    private findGroup;
+    private promptForRole;
+    private promptForStages;
+    private promptForTarget;
+}