@metabase/cli 0.1.18 → 0.2.1-alpha.bcm-ghy-4075-spawn-default-profile.eb120d1

package/dist/{login-C6ZAnGHz.mjs → login-CRlmR4op.mjs}

@@ -1,13 +1,11 @@
-import { ConfigError, errorMessage, warn } from "./notice-DyVl5aYB.mjs";
-import { connectionFlags, outputFlags, profileFlag } from "./error-BaBm-UrT.mjs";
-import "./command-augment-DdZIfx1V.mjs";
-import { DEFAULT_PROFILE, OAUTH_SCOPE, ParsedVersionSchema, ProbedUser, consumeKeychainResidualWarning, consumeKeyringDowngradeWarning, defineMetabaseCommand, discoverMetadata, exchangeCode, explicitProfileName, keyringFallbackWarning, normalizeUrl, oauthCredentialFromTokens, readEnvCredentials, registerClient, revokeOAuthCredential, tryDiscoverMetadata, writeOAuthProfile, writeProbeFailure, writeProbeResult, writeProfile } from "./runtime-oxjmrYoP.mjs";
-import { verifyAndProbe } from "./verify-Jsuc2dat.mjs";
-import { renderSummary } from "./capabilities-N0jo5U7S.mjs";
-import { EMPTY_CELL, renderUserName, renderUserRole, renderVersionTag } from "./render-BTKnWL0d.mjs";
-import { promptPassword, promptSelect, promptText } from "./prompt-C85xd9HR.mjs";
-import { openBrowser } from "./process-j8UHMHc2.mjs";
-import { readInput } from "./input-7Sj85_K7.mjs";
+import { ConfigError, connectionFlags, errorMessage, outputFlags, profileFlag, renderSummary, warn } from "./capabilities-CiaAfUgX.mjs";
+import "./command-augment-D9pI9Vbh.mjs";
+import { DEFAULT_PROFILE, OAUTH_SCOPE, ParsedVersionSchema, ProbedUser, WORKSPACE_MANAGER_SCOPE, consumeKeychainResidualWarning, consumeKeyringDowngradeWarning, defineMetabaseCommand, discoverMetadata, exchangeCode, explicitProfileName, keyringFallbackWarning, normalizeUrl, oauthCredentialFromTokens, readEnvCredentials, registerClient, revokeOAuthCredential, tryDiscoverMetadata, writeOAuthProfile, writeProbeFailure, writeProbeResult, writeProfile } from "./runtime-C6ASrgVA.mjs";
+import { verifyAndProbe } from "./verify-WvMbaT8W.mjs";
+import { EMPTY_CELL, renderUserName, renderUserRole, renderVersionTag } from "./render-CkuFkWlQ.mjs";
+import { promptPassword, promptSelect, promptText } from "./prompt-jQnNKtlx.mjs";
+import { openBrowser } from "./process-7c8BcQEi.mjs";
+import { readInput } from "./input-BGyHn0Kr.mjs";
 import { z } from "zod";
 import { createServer } from "node:http";
 import { createHash, randomBytes } from "node:crypto";
@@ -148,23 +146,25 @@ function buildAuthorizeUrl(authorizationEndpoint, params) {
 	const separator = authorizationEndpoint.includes("?") ? "&" : "?";
 	return `${authorizationEndpoint}${separator}${new URLSearchParams(params).toString()}`;
 }
-async function resolveClientId(registrationEndpoint, redirectUri, provided) {
+async function resolveClientId(registrationEndpoint, redirectUri, provided, scope) {
 	if (provided !== void 0) return provided;
 	if (registrationEndpoint === void 0) throw new ConfigError("this Metabase has dynamic client registration disabled; pass --client-id with a pre-registered native client");
 	const registered = await registerClient({
 		registrationEndpoint,
 		redirectUri,
-		clientName: CLIENT_NAME
+		clientName: CLIENT_NAME,
+		scope
 	});
 	return registered.client_id;
 }
 async function oauthLogin(input, deps) {
-	const metadata = input.metadata ?? await discoverMetadata(input.baseUrl);
+	const scope = input.scope ?? OAUTH_SCOPE;
+	const metadata = input.metadata ?? await discoverMetadata(input.baseUrl, scope);
 	const pkce = generatePkce();
 	const state = randomState();
 	const server = await startCallbackServer(state, input.timeoutMs);
 	try {
-		const clientId = await resolveClientId(metadata.registration_endpoint, server.redirectUri, input.clientId);
+		const clientId = await resolveClientId(metadata.registration_endpoint, server.redirectUri, input.clientId, scope);
 		const authorizeUrl = buildAuthorizeUrl(metadata.authorization_endpoint, {
 			response_type: "code",
 			client_id: clientId,
@@ -172,7 +172,7 @@ async function oauthLogin(input, deps) {
 			code_challenge: pkce.challenge,
 			code_challenge_method: "S256",
 			state,
-			scope: OAUTH_SCOPE
+			scope
 		});
 		const opened = await deps.openBrowser(authorizeUrl);
 		deps.onAuthorizeUrl(authorizeUrl, opened);
@@ -185,7 +185,7 @@ async function oauthLogin(input, deps) {
 			codeVerifier: pkce.verifier
 		});
 		if (tokens.refresh_token === void 0) throw new ConfigError("token endpoint did not return a refresh token");
-		return oauthCredentialFromTokens(tokens, tokens.refresh_token, clientId, deps.now());
+		return oauthCredentialFromTokens(tokens, tokens.refresh_token, clientId, scope, deps.now());
 	} finally {
 		server.close();
 	}
@@ -198,7 +198,8 @@ const LoginResult = z.object({
 	url: z.string(),
 	authenticated: z.boolean(),
 	user: ProbedUser.nullable(),
-	version: ParsedVersionSchema.nullable()
+	version: ParsedVersionSchema.nullable(),
+	scope: z.string().nullable()
 });
 const loginView = {
 	compactPick: LoginResult,
@@ -230,6 +231,11 @@ const loginView = {
 			key: "version",
 			label: "Version",
 			format: (value) => renderVersionTag(value)
+		},
+		{
+			key: "scope",
+			label: "Scope",
+			format: (value) => typeof value === "string" ? value : EMPTY_CELL
 		}
 	]
 };
@@ -253,19 +259,42 @@ var login_default = defineMetabaseCommand({
 			type: "boolean",
 			default: false,
 			description: "Save without contacting the server"
+		},
+		workspace: {
+			type: "boolean",
+			default: false,
+			description: "Request a workspace-manager-scoped login (workspace CRUD only, browser OAuth required)"
 		}
 	},
 	outputSchema: LoginResult,
 	examples: [
 		"mb auth login --url https://metabase.example.com",
 		"echo $MB_API_KEY | mb auth login --url https://metabase.example.com",
-		"mb auth login --profile staging --url https://staging.example.com"
+		"mb auth login --profile staging --url https://staging.example.com",
+		"mb auth login --workspace --profile parent --url https://metabase.example.com"
 	],
 	async run({ args, ctx }) {
 		const profileName = await resolveLoginProfile(args.profile);
 		const env = readEnvCredentials();
 		if (args.apiKey) warn("warning: --api-key is visible in shell history and process listings — pipe the key on stdin or set MB_API_KEY instead");
 		const url = await resolveUrl(args.url, env.url);
+		if (args.workspace) {
+			assertWorkspaceLoginPossible(args.apiKey, env.apiKey);
+			const metadata$1 = await probeOAuthSupport(url, WORKSPACE_MANAGER_SCOPE);
+			if (metadata$1 === null) throw new ConfigError(`this Metabase does not support workspace-scoped login (no ${WORKSPACE_MANAGER_SCOPE} scope advertised)`);
+			const credential$1 = await oauthLogin({
+				baseUrl: url,
+				metadata: metadata$1,
+				scope: WORKSPACE_MANAGER_SCOPE,
+				...args.clientId !== void 0 && { clientId: args.clientId }
+			}, {
+				openBrowser,
+				onAuthorizeUrl: announceAuthorizeUrl,
+				now: () => Date.now()
+			});
+			await completeLogin(profileName, url, credential$1, args["skip-verify"], ctx, () => writeOAuthProfile(url, credential$1, profileName));
+			return;
+		}
 		const apiKey = await nonInteractiveApiKey(args.apiKey, env.apiKey);
 		if (apiKey !== null) {
 			await completeLogin(profileName, url, {
@@ -303,9 +332,14 @@ var login_default = defineMetabaseCommand({
 		await completeLogin(profileName, url, credential, args["skip-verify"], ctx, () => writeOAuthProfile(url, credential, profileName));
 	}
 });
-async function probeOAuthSupport(url) {
+function assertWorkspaceLoginPossible(flagKey, envKey) {
+	if (flagKey !== void 0) throw new ConfigError("--workspace login is browser-OAuth only; an API key cannot carry a scope — omit --api-key");
+	if (envKey !== null) throw new ConfigError("--workspace login is browser-OAuth only; unset MB_API_KEY so it cannot shadow the scoped login");
+	if (!process.stdin.isTTY) throw new ConfigError("--workspace login opens a browser and requires a TTY");
+}
+async function probeOAuthSupport(url, requiredScope) {
 	try {
-		return await tryDiscoverMetadata(url);
+		return await tryDiscoverMetadata(url, requiredScope);
 	} catch (error) {
 		if (error instanceof ConfigError) throw error;
 		throw new ConfigError(`could not reach ${url}: ${errorMessage(error)}`);
@@ -340,6 +374,7 @@ async function promptForApiKey() {
 	});
 }
 async function completeLogin(profileName, url, credential, skipVerify, ctx, persist) {
+	const scope = credential.kind === "oauth" ? credential.scope : null;
 	if (skipVerify) {
 		await persistWithWarning(persist);
 		renderSummary({
@@ -347,7 +382,8 @@ async function completeLogin(profileName, url, credential, skipVerify, ctx, pers
 			url,
 			authenticated: false,
 			user: null,
-			version: null
+			version: null,
+			scope
 		}, loginView, `Saved credentials for profile "${profileName}" (${url}) without verifying.`, ctx);
 		return;
 	}
@@ -369,13 +405,15 @@ async function completeLogin(profileName, url, credential, skipVerify, ctx, pers
 	const role = renderUserRole(result.user);
 	const versionTag = renderVersionTag(result.server.version);
 	const serverClause = versionTag === EMPTY_CELL ? "" : ` Server ${versionTag}.`;
+	const scopeClause = scope === null || scope === OAUTH_SCOPE ? "" : ` Scope: ${scope}.`;
 	renderSummary({
 		profile: profileName,
 		url,
 		authenticated: true,
 		user: result.user,
-		version: result.server.version
-	}, loginView, `Logged in to ${url} as ${who} (${role}). Saved to profile "${profileName}".${serverClause}`, ctx);
+		version: result.server.version,
+		scope
+	}, loginView, `Logged in to ${url} as ${who} (${role}). Saved to profile "${profileName}".${serverClause}${scopeClause}`, ctx);
 }
 async function revokeUnsavedOAuthCredential(url, credential) {
 	if (credential.kind !== "oauth") return;

package/dist/{logout-CWjyY3Y8.mjs → logout-DSZEUxSQ.mjs}

@@ -1,9 +1,7 @@
-import { errorMessage, warn } from "./notice-DyVl5aYB.mjs";
-import { outputFlags, profileFlag } from "./error-BaBm-UrT.mjs";
-import "./command-augment-DdZIfx1V.mjs";
-import { clearProfile, consumeKeychainResidualWarning, defineMetabaseCommand, readProfileCredential, resolveProfileName, revokeOAuthCredential } from "./runtime-oxjmrYoP.mjs";
-import { renderSummary } from "./capabilities-N0jo5U7S.mjs";
-import { promptConfirm } from "./prompt-C85xd9HR.mjs";
+import { errorMessage, outputFlags, profileFlag, renderSummary, warn } from "./capabilities-CiaAfUgX.mjs";
+import "./command-augment-D9pI9Vbh.mjs";
+import { clearProfile, consumeKeychainResidualWarning, defineMetabaseCommand, readProfileCredential, resolveActiveProfileName, revokeOAuthCredential } from "./runtime-C6ASrgVA.mjs";
+import { promptConfirm } from "./prompt-jQnNKtlx.mjs";
 import { z } from "zod";
 
 //#region src/commands/auth/logout.ts
@@ -47,7 +45,7 @@ var logout_default = defineMetabaseCommand({
 	outputSchema: LogoutResult,
 	examples: ["mb auth logout --yes", "mb auth logout --profile staging --yes"],
 	async run({ args, ctx }) {
-		const profileName = resolveProfileName(args.profile);
+		const profileName = await resolveActiveProfileName(args.profile);
 		if (!args.yes && process.stdin.isTTY === true) {
 			const ok = await promptConfirm({
 				message: `Clear stored credentials for profile "${profileName}"?`,

package/dist/{measure-DoJvtCaA.mjs → measure-C3G1srWb.mjs}

@@ -49,17 +49,18 @@ const measureView = {
 		}
 	]
 };
+const MeasureDefinition = z.record(z.string(), z.unknown()).describe("MBQL query holding exactly one aggregation — full MBQL 5 schema: mb query --print-schema");
 const MeasureCreateInput = z.object({
 	name: z.string().min(1),
 	table_id: z.number().int().positive(),
-	definition: z.record(z.string(), z.unknown()),
+	definition: MeasureDefinition,
 	description: z.string().nullable().optional()
 }).loose();
 const MeasureUpdateInput = z.object({
-	name: z.string().min(1).optional(),
-	definition: z.record(z.string(), z.unknown()).optional(),
+	name: z.string().min(1).nullable().optional(),
+	definition: MeasureDefinition.nullable().optional(),
 	revision_message: z.string().min(1),
-	archived: z.boolean().optional(),
+	archived: z.boolean().nullable().optional(),
 	description: z.string().nullable().optional()
 }).loose();
 

package/dist/measure-Ka0n3426.mjs

@@ -0,0 +1,25 @@
+import "./command-augment-D9pI9Vbh.mjs";
+import { defineCommandGroup } from "./group-CILtQqCL.mjs";
+
+//#region src/commands/measure/index.ts
+var measure_default = defineCommandGroup({
+	name: "measure",
+	description: "Manage Metabase measures",
+	skills: [{
+		skill: "mbql",
+		purpose: "the definition aggregation"
+	}, {
+		skill: "data-workflow",
+		purpose: "define reusable measures"
+	}],
+	subCommands: {
+		list: () => import("./list-BCeZlfpQ.mjs").then((mod) => mod.default),
+		get: () => import("./get-CjZWjRa5.mjs").then((mod) => mod.default),
+		create: () => import("./create-DutkaD7P.mjs").then((mod) => mod.default),
+		update: () => import("./update-WLb9099y.mjs").then((mod) => mod.default),
+		archive: () => import("./archive-h-3H5b4K.mjs").then((mod) => mod.default)
+	}
+});
+
+//#endregion
+export { measure_default as default };

package/dist/{parameter-values-DmDOuE-j.mjs → parameter-values-CwW8Xes7.mjs}

@@ -1,10 +1,8 @@
-import { ConfigError } from "./notice-DyVl5aYB.mjs";
-import { connectionFlags, outputFlags, profileFlag } from "./error-BaBm-UrT.mjs";
-import "./command-augment-DdZIfx1V.mjs";
-import { defineMetabaseCommand } from "./runtime-oxjmrYoP.mjs";
-import { renderSummary } from "./capabilities-N0jo5U7S.mjs";
-import { ParameterValues, parameterValuesView } from "./parameter-CiJ4CwWE.mjs";
-import { parseId } from "./parse-id-DlXnOcmP.mjs";
+import { ConfigError, connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import "./command-augment-D9pI9Vbh.mjs";
+import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
+import { ParameterValues, parameterValuesView } from "./parameter-BZ6y-Gfs.mjs";
+import { parseId } from "./parse-id-xS1tWJAq.mjs";
 
 //#region src/commands/dashboard/parameter-values.ts
 var parameter_values_default = defineMetabaseCommand({

package/dist/{parse-enum-BL9i_brN.mjs → parse-enum-ooCsJWn6.mjs}

@@ -1,4 +1,4 @@
-import { ConfigError } from "./notice-DyVl5aYB.mjs";
+import { ConfigError } from "./capabilities-CiaAfUgX.mjs";
 
 //#region src/commands/parse-enum.ts
 function parseEnumFlag(value, schema, name) {

package/dist/parse-id-xS1tWJAq.mjs

@@ -0,0 +1,18 @@
+import { ConfigError } from "./capabilities-CiaAfUgX.mjs";
+import { parseCsv, parseInteger } from "./runtime-C6ASrgVA.mjs";
+
+//#region src/commands/parse-id.ts
+function parseId(value, name = "id") {
+	return parseInteger(value, {
+		name,
+		min: 1
+	});
+}
+function parseIdCsv(value, name) {
+	const ids = parseCsv(value).map((part) => parseId(part, name));
+	if (ids.length === 0) throw new ConfigError(`expected at least one ${name} (comma separated)`);
+	return ids;
+}
+
+//#endregion
+export { parseId, parseIdCsv };

package/dist/{parse-ref-CB_KvF9h.mjs → parse-ref-j4lxaQmd.mjs}

@@ -1,4 +1,4 @@
-import { ConfigError } from "./notice-DyVl5aYB.mjs";
+import { ConfigError } from "./capabilities-CiaAfUgX.mjs";
 
 //#region src/commands/collection/parse-ref.ts
 const SPECIAL_TOKENS = new Set(["root", "trash"]);

package/dist/{path-D8IJ4YrW.mjs → path-CVmg-bmf.mjs}

@@ -1,9 +1,7 @@
-import "./notice-DyVl5aYB.mjs";
-import { listEnvelopeSchema, outputFlags, wrapList } from "./error-BaBm-UrT.mjs";
-import "./command-augment-DdZIfx1V.mjs";
-import { defineMetabaseCommand } from "./runtime-oxjmrYoP.mjs";
-import { renderList } from "./capabilities-N0jo5U7S.mjs";
-import { findSkillByName, loadAllSkills, loadVisibleSkills } from "./skills-B6gfH0iR.mjs";
+import { listEnvelopeSchema, outputFlags, renderList, wrapList } from "./capabilities-CiaAfUgX.mjs";
+import "./command-augment-D9pI9Vbh.mjs";
+import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
+import { findSkillByName, loadAllSkills, loadVisibleSkills } from "./skills-y-KsUqT9.mjs";
 import { z } from "zod";
 
 //#region src/commands/skills/path.ts

package/dist/{poll-hgnrHBoh.mjs → poll-CuTlWBwI.mjs}

@@ -1,5 +1,5 @@
-import { TimeoutError } from "./notice-DyVl5aYB.mjs";
-import { combineAborts, throwIfAborted } from "./runtime-oxjmrYoP.mjs";
+import { TimeoutError } from "./capabilities-CiaAfUgX.mjs";
+import { combineAborts, throwIfAborted } from "./runtime-C6ASrgVA.mjs";
 import { setTimeout } from "node:timers/promises";
 
 //#region src/runtime/poll.ts

package/dist/{poll-task-NQNLT_aA.mjs → poll-task-DhsYs8Hx.mjs}

@@ -1,5 +1,5 @@
-import { parseJsonOrPlain } from "./runtime-oxjmrYoP.mjs";
-import { pollUntil } from "./poll-hgnrHBoh.mjs";
+import { parseJsonOrPlain } from "./runtime-C6ASrgVA.mjs";
+import { pollUntil } from "./poll-CuTlWBwI.mjs";
 import { z } from "zod";
 
 //#region src/domain/git-sync.ts

package/dist/{preflight-DvaPQHHf.mjs → preflight-D3VgjEg7.mjs}

@@ -1,13 +1,12 @@
-import { ChainedRequestError, ConfigError, MetabaseError } from "./notice-DyVl5aYB.mjs";
-import { HttpError } from "./runtime-oxjmrYoP.mjs";
-import { writeJson } from "./capabilities-N0jo5U7S.mjs";
-import { Card } from "./card-DEmcRlNO.mjs";
+import { ChainedRequestError, ConfigError, MetabaseError, writeJson } from "./capabilities-CiaAfUgX.mjs";
+import { HttpError } from "./runtime-C6ASrgVA.mjs";
+import { Card } from "./card-B8G5jQQT.mjs";
 import { z } from "zod";
 
 //#region src/commands/dashboard/preflight.ts
 const PreflightDashcard = z.looseObject({ card_id: z.number().int().nullable().optional() });
 function collectDashcardCardReferences(dashcards) {
-	if (dashcards === void 0) return [];
+	if (dashcards === void 0 || dashcards === null) return [];
 	const refs = [];
 	dashcards.forEach((dashcard, index) => {
 		const parsed = PreflightDashcard.safeParse(dashcard);

package/dist/{process-j8UHMHc2.mjs → process-7c8BcQEi.mjs}

@@ -1,4 +1,4 @@
-import { isNotFoundError } from "./notice-DyVl5aYB.mjs";
+import { isNotFoundError } from "./capabilities-CiaAfUgX.mjs";
 import { spawn } from "node:child_process";
 
 //#region src/runtime/process.ts

package/dist/profile-name-CZ1-Vtrh.mjs

@@ -0,0 +1,7 @@
+//#region src/commands/workspace/profile-name.ts
+function workspaceProfileName(workspaceId) {
+	return `ws-${workspaceId}`;
+}
+
+//#endregion
+export { workspaceProfileName };

package/dist/{prompt-C85xd9HR.mjs → prompt-jQnNKtlx.mjs}

@@ -1,4 +1,4 @@
-import { AbortError, ConfigError } from "./notice-DyVl5aYB.mjs";
+import { AbortError, ConfigError } from "./capabilities-CiaAfUgX.mjs";
 import { confirm, isCancel, password, select, text } from "@clack/prompts";
 
 //#region src/output/prompt.ts

package/dist/{publish-BntmFR6g.mjs → publish-DFTCsjHU.mjs}

@@ -1,12 +1,14 @@
-import "./notice-DyVl5aYB.mjs";
-import { connectionFlags, outputFlags, profileFlag } from "./error-BaBm-UrT.mjs";
-import "./command-augment-DdZIfx1V.mjs";
-import { defineMetabaseCommand } from "./runtime-oxjmrYoP.mjs";
-import { renderSummary } from "./capabilities-N0jo5U7S.mjs";
-import "./parse-id-DlXnOcmP.mjs";
-import { Collection, CollectionCompact } from "./collection-DrLpA1SO.mjs";
-import { ensureLibraryDataCollectionId } from "./resolve-Dj2MTBkn.mjs";
-import { parseTableSelectors, tableSelectorFlags } from "./selectors-DBnJsKlW.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import "./command-augment-D9pI9Vbh.mjs";
+import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
+import "./parse-id-xS1tWJAq.mjs";
+import { Collection, CollectionCompact } from "./collection-C52Ndi_O.mjs";
+import "./listing-wFZuS5li.mjs";
+import "./poll-CuTlWBwI.mjs";
+import "./poll-task-DhsYs8Hx.mjs";
+import { warnIfOutsideSyncScope } from "./sync-scope-DW2QpGwv.mjs";
+import { ensureLibraryDataCollectionId } from "./resolve-BTZuO3Yq.mjs";
+import { parseTableSelectors, tableSelectorFlags } from "./selectors-B2nDmrIV.mjs";
 import { z } from "zod";
 
 //#region src/commands/library/publish.ts
@@ -25,7 +27,7 @@ var publish_default = defineMetabaseCommand({
 		name: "publish",
 		description: "Publish tables (and their upstream dependencies) to the Library Data collection"
 	},
-	details: "Sets each selected table and every upstream table it depends on into the Library Data collection, so they appear first in data pickers and rank up in search. The Library Data collection is resolved automatically (and the Library is created if it doesn't exist yet). Select with --table-ids, --db-ids, or --schemas (each schema id is \"<db-id>:<schema>\", e.g. 1:public); the filters are combined.",
+	details: "Sets each selected table and every upstream table it depends on into the Library Data collection, so they appear first in data pickers and rank up in search. The Library Data collection is resolved automatically (and the Library is created if it doesn't exist yet). Select with --table-ids, --db-ids, or --schemas (each schema id is \"<db-id>:<schema>\", e.g. 1:public); the filters are combined. Publishing does not add the Library Data collection to the git-sync scope — on an instance with remote sync configured, run `mb git-sync add-collection <collection-id>` so exports carry the published tables' metadata.",
 	capabilities: {
 		minVersion: 59,
 		tokenFeature: "library"
@@ -55,6 +57,7 @@ var publish_default = defineMetabaseCommand({
 			body
 		});
 		renderSummary(result, libraryPublishResultView, summaryLine(result), ctx);
+		await warnIfOutsideSyncScope(client, result.target_collection);
 	}
 });
 function summaryLine(result) {

package/dist/{query-DSKQZu91.mjs → query-CPq-dhFV.mjs}

@@ -1,21 +1,20 @@
-import { ConfigError } from "./notice-DyVl5aYB.mjs";
-import { connectionFlags, outputFlags, profileFlag } from "./error-BaBm-UrT.mjs";
-import "./command-augment-DdZIfx1V.mjs";
-import { defineMetabaseCommand } from "./runtime-oxjmrYoP.mjs";
-import { renderSummary, writeJson } from "./capabilities-N0jo5U7S.mjs";
-import "./input-7Sj85_K7.mjs";
-import "./field-CMY_LWUe.mjs";
-import "./parameter-CiJ4CwWE.mjs";
-import { CardQueryResult, cardQueryView } from "./card-DEmcRlNO.mjs";
-import { readBody } from "./body-BS2s2zDl.mjs";
-import { bodyInputFlags } from "./body-flags-DWTTxJpP.mjs";
-import { assertNotLegacyEnvelopeWrappingMbql5, getQuerySchemaBundle, isMbql5Query, validateQuery } from "./validate-BqNW4Sk1.mjs";
-import { skipValidateFlag } from "./validate-query-CcZVKYPV.mjs";
-import { formatQueryResult } from "./query-result-D6mfoVfQ.mjs";
+import { ConfigError, connectionFlags, outputFlags, profileFlag, renderSummary, writeJson } from "./capabilities-CiaAfUgX.mjs";
+import "./command-augment-D9pI9Vbh.mjs";
+import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
+import "./input-BGyHn0Kr.mjs";
+import "./embedding-CKdw8q7p.mjs";
+import "./field-DsXTeqBy.mjs";
+import "./parameter-BZ6y-Gfs.mjs";
+import { CardQueryResult, cardQueryView } from "./card-B8G5jQQT.mjs";
+import { readBody } from "./body-5snfmiwR.mjs";
+import { bodyInputFlags } from "./body-flags-CgHgJBRC.mjs";
+import { assertNotLegacyEnvelopeWrappingMbql5, getQuerySchemaBundle, isMbql5Query, validateQuery } from "./validate-DqQ7DQnP.mjs";
+import { skipValidateFlag } from "./validate-query-BYG7lyaY.mjs";
+import { formatQueryResult } from "./query-result-Cg7odyR_.mjs";
 import { z } from "zod";
 
 //#region src/commands/query.ts
-const QueryBody = z.unknown();
+const QueryBody = z.unknown().describe("MBQL 5, legacy MBQL, or native query body — full MBQL 5 schema: mb query --print-schema");
 const QUERY_ENDPOINT = "/api/dataset";
 var query_default = defineMetabaseCommand({
 	meta: {
@@ -43,6 +42,7 @@ var query_default = defineMetabaseCommand({
 		},
 		...skipValidateFlag
 	},
+	inputSchema: QueryBody,
 	outputSchema: CardQueryResult,
 	examples: [
 		"mb query --print-schema",

package/dist/{query-BQfgKV68.mjs → query-Dfx69iJ4.mjs}

@@ -1,13 +1,12 @@
-import { ConfigError } from "./notice-DyVl5aYB.mjs";
-import { connectionFlags, outputFlags, profileFlag } from "./error-BaBm-UrT.mjs";
-import "./command-augment-DdZIfx1V.mjs";
-import { defineMetabaseCommand, parseJson } from "./runtime-oxjmrYoP.mjs";
-import { renderSummary } from "./capabilities-N0jo5U7S.mjs";
-import "./field-CMY_LWUe.mjs";
-import "./parameter-CiJ4CwWE.mjs";
-import { CardQueryResult, cardQueryView } from "./card-DEmcRlNO.mjs";
-import { parseId } from "./parse-id-DlXnOcmP.mjs";
-import { formatQueryResult } from "./query-result-D6mfoVfQ.mjs";
+import { ConfigError, connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import "./command-augment-D9pI9Vbh.mjs";
+import { defineMetabaseCommand, parseJson } from "./runtime-C6ASrgVA.mjs";
+import "./embedding-CKdw8q7p.mjs";
+import "./field-DsXTeqBy.mjs";
+import "./parameter-BZ6y-Gfs.mjs";
+import { CardQueryResult, cardQueryView } from "./card-B8G5jQQT.mjs";
+import { parseId } from "./parse-id-xS1tWJAq.mjs";
+import { formatQueryResult } from "./query-result-Cg7odyR_.mjs";
 import { z } from "zod";
 import { Writable } from "node:stream";
 

package/dist/{query-result-D6mfoVfQ.mjs → query-result-Cg7odyR_.mjs}

@@ -1,4 +1,4 @@
-import { formatScalar, renderRows } from "./capabilities-N0jo5U7S.mjs";
+import { formatScalar, renderRows } from "./capabilities-CiaAfUgX.mjs";
 
 //#region src/output/query-result.ts
 function formatQueryResult(result) {

package/dist/{remove-collection-BguaI3-6.mjs → remove-collection-DUAMhx5L.mjs}

@@ -1,12 +1,10 @@
-import "./notice-DyVl5aYB.mjs";
-import { connectionFlags, outputFlags, profileFlag } from "./error-BaBm-UrT.mjs";
-import "./command-augment-DdZIfx1V.mjs";
-import { defineMetabaseCommand } from "./runtime-oxjmrYoP.mjs";
-import { renderSummary } from "./capabilities-N0jo5U7S.mjs";
-import { parseId } from "./parse-id-DlXnOcmP.mjs";
-import "./poll-hgnrHBoh.mjs";
-import "./poll-task-NQNLT_aA.mjs";
-import { SyncSettingsUpdateResult, setCollectionRemoteSynced, syncSettingsUpdateView } from "./add-collection-CRZAFCZy.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import "./command-augment-D9pI9Vbh.mjs";
+import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
+import { parseId } from "./parse-id-xS1tWJAq.mjs";
+import "./poll-CuTlWBwI.mjs";
+import "./poll-task-DhsYs8Hx.mjs";
+import { SyncSettingsUpdateResult, setCollectionRemoteSynced, syncSettingsUpdateView } from "./add-collection-CLXfrgp4.mjs";
 
 //#region src/commands/git-sync/remove-collection.ts
 var remove_collection_default = defineMetabaseCommand({

package/dist/replace-DZWd6avZ.mjs

@@ -0,0 +1,42 @@
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import "./command-augment-D9pI9Vbh.mjs";
+import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
+import "./input-BGyHn0Kr.mjs";
+import { parseId } from "./parse-id-xS1tWJAq.mjs";
+import { UploadUpdateResult, readCsvFile, requireUploadFilePath, updateTableFromCsv, uploadUpdateResultView } from "./requests-DYrDe-D0.mjs";
+
+//#region src/commands/upload/replace.ts
+var replace_default = defineMetabaseCommand({
+	meta: {
+		name: "replace",
+		description: "Replace an existing uploaded table's rows with a CSV file"
+	},
+	details: "Replaces the contents of the table with the given id with the rows of the CSV. The table must have been created by a CSV upload and the CSV columns must match.",
+	capabilities: { minVersion: 58 },
+	args: {
+		...outputFlags,
+		...profileFlag,
+		...connectionFlags,
+		file: {
+			type: "string",
+			description: "Path to the CSV/TSV file to upload"
+		},
+		id: {
+			type: "positional",
+			description: "Target table id",
+			required: true
+		}
+	},
+	outputSchema: UploadUpdateResult,
+	examples: ["mb upload replace 42 --file rows.csv", "mb upload replace 42 --file rows.csv --json"],
+	async run({ args, ctx, getClient }) {
+		const id = parseId(args.id);
+		const file = await readCsvFile(requireUploadFilePath(args.file));
+		const client = await getClient();
+		const result = await updateTableFromCsv(client, id, "replace", file);
+		renderSummary(result, uploadUpdateResultView, `Replaced table ${id} with "${file.filename}".`, ctx);
+	}
+});
+
+//#endregion
+export { replace_default as default };