@lightdash/cli 0.3396.0 → 0.3398.0

package/dist/handlers/connectSnowflake.js

@@ -228,7 +228,7 @@ const createDurableCredential = async (authorizationCodeCredentials, warehouseCl
         }
     }
     try {
-        const { tokenSecret } = await warehouseClient.createProgrammaticAccessToken('LIGHTDASH_ONBOARDING', PAT_EXPIRY_DAYS, PAT_NETWORK_POLICY_BYPASS_MINUTES);
+        const { tokenSecret } = await warehouseClient.createProgrammaticAccessToken(`LIGHTDASH_ONBOARDING_${Date.now()}`, PAT_EXPIRY_DAYS, PAT_NETWORK_POLICY_BYPASS_MINUTES);
         const expiresAt = new Date(dependencies.now().getTime() +
             PAT_EXPIRY_DAYS * 24 * 60 * 60 * 1000);
         return {

package/dist/handlers/connectSnowflake.test.js

@@ -144,7 +144,7 @@ describe('connectSnowflakeHandler', () => {
         vi.mocked(setUserPublicKey).mockResolvedValue(undefined);
         vi.mocked(unsetUserPublicKey).mockResolvedValue(undefined);
         vi.mocked(createProgrammaticAccessToken).mockResolvedValue({
-            tokenName: 'LIGHTDASH_ONBOARDING',
+            tokenName: 'LIGHTDASH_ONBOARDING_1234567890',
             tokenSecret: 'pat-secret',
         });
         vi.mocked(openDiagnosticConnection).mockResolvedValue({
@@ -280,14 +280,14 @@ describe('connectSnowflakeHandler', () => {
         expect(setUserPublicKey).toHaveBeenCalledWith(discovery.user, 'RSA_PUBLIC_KEY_2', publicKey);
         expect(createProgrammaticAccessToken).not.toHaveBeenCalled();
     });
-    it('uses the stable PAT name for collision replacement when both key slots are occupied', async () => {
+    it('uses a unique PAT name when both key slots are occupied', async () => {
         vi.mocked(getUserPublicKeySlots).mockResolvedValue({
             RSA_PUBLIC_KEY: 'SHA256:existing-key-1',
             RSA_PUBLIC_KEY_2: 'SHA256:existing-key-2',
         });
         await expect((0, connectSnowflake_1.connectSnowflakeHandler)(options, getDependencies())).resolves.toBeUndefined();
         expect(setUserPublicKey).not.toHaveBeenCalled();
-        expect(createProgrammaticAccessToken).toHaveBeenCalledWith('LIGHTDASH_ONBOARDING', 365, 1440);
+        expect(createProgrammaticAccessToken).toHaveBeenCalledWith(expect.stringMatching(/^LIGHTDASH_ONBOARDING_\d+$/), 365, 1440);
         const request = {
             code: options.code,
             credentials: {
@@ -317,7 +317,7 @@ describe('connectSnowflakeHandler', () => {
     it('falls back to a PAT when key registration lacks privileges', async () => {
         vi.mocked(setUserPublicKey).mockRejectedValue(new Error('Insufficient privileges to operate on user'));
         await expect((0, connectSnowflake_1.connectSnowflakeHandler)(options, getDependencies())).resolves.toBeUndefined();
-        expect(createProgrammaticAccessToken).toHaveBeenCalledWith('LIGHTDASH_ONBOARDING', 365, 1440);
+        expect(createProgrammaticAccessToken).toHaveBeenCalledWith(expect.stringMatching(/^LIGHTDASH_ONBOARDING_\d+$/), 365, 1440);
         expect(write).toHaveBeenCalledWith('Secured with a programmatic access token (expires 2027-07-14)');
     });
     it('prints administrator remediation when both durable paths fail', async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lightdash/cli",
-  "version": "0.3396.0",
+  "version": "0.3398.0",
   "description": "Lightdash CLI tool",
   "license": "MIT",
   "repository": {
@@ -41,8 +41,8 @@
     "unique-names-generator": "4.7.1",
     "uuid": "11.1.1",
     "yaml": "2.8.3",
-    "@lightdash/warehouses": "0.3396.0",
-    "@lightdash/common": "0.3396.0"
+    "@lightdash/common": "0.3398.0",
+    "@lightdash/warehouses": "0.3398.0"
   },
   "devDependencies": {
     "@types/inquirer": "8.2.4",