@metabase/cli 0.2.1-alpha.bcm-ghy-4075-spawn-default-profile.eb120d1 → 0.2.1-alpha.trust-system-ca.541e4e0

package/README.md

@@ -52,19 +52,16 @@ Against a server older than v62 the CLI detects the missing OAuth support and fa
 
 On success the server is probed once — the rendered output shows the user, role (`Admin`/`User`), and Metabase version, and the same values are cached in `<configDir>/profiles.json` so later commands skip re-probing. Failure of either the auth probe (`/api/user/current`) or the server probe (`/api/session/properties`) rejects the login; an existing profile keeps its last-known-good credential and gains a `lastFailure` entry.
 
-| Flag                     | Description                                                                                                                                                                                                                                                                                                     |
-| ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `--url <url>`            | Metabase URL, including any subpath if the instance is hosted under one (`https://my.org.com/metabase`). Falls back to `MB_URL`, then prompts.                                                                                                                                                                  |
-| `--api-key <value>`      | API key. Skips the browser flow. Visible in shell history — pipe on stdin instead.                                                                                                                                                                                                                              |
-| `--client-id <id>`       | Pre-registered OAuth client id (only needed when dynamic client registration is disabled on the server).                                                                                                                                                                                                        |
-| `--profile <name>`, `-p` | Profile to write to (default: `default`).                                                                                                                                                                                                                                                                       |
-| `--skip-verify`          | Save without contacting the server (no probe, no cache).                                                                                                                                                                                                                                                        |
-| `--workspace`            | Request a workspace-manager-scoped login: the stored token can only manage workspaces — every other endpoint 403s server-side. Browser OAuth only (an API key cannot carry a scope), so it requires a TTY and refuses `--api-key`/`MB_API_KEY`. Requires a server advertising the `mb:workspace-manager` scope. |
+| Flag                     | Description                                                                                                                                    |
+| ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------- |
+| `--url <url>`            | Metabase URL, including any subpath if the instance is hosted under one (`https://my.org.com/metabase`). Falls back to `MB_URL`, then prompts. |
+| `--api-key <value>`      | API key. Skips the browser flow. Visible in shell history — pipe on stdin instead.                                                             |
+| `--client-id <id>`       | Pre-registered OAuth client id (only needed when dynamic client registration is disabled on the server).                                       |
+| `--profile <name>`, `-p` | Profile to write to (default: `default`).                                                                                                      |
+| `--skip-verify`          | Save without contacting the server (no probe, no cache).                                                                                       |
 
 Non-interactive (non-TTY) login requires an API key; resolution order: `--api-key` → piped stdin → `MB_API_KEY` (first non-empty wins). Without one, non-interactive login fails rather than prompting.
 
-A workspace-scoped profile that hits a 403 on a content command gets an error naming the scope and the fix (re-login without `--workspace`, or use a workspace profile) instead of a bare "Forbidden."
-
 ```sh
 mb auth login                                            # interactive: browser or API key
 echo "$MB_KEY" | mb auth login --url https://m.example.com
@@ -1490,64 +1487,6 @@ mb git-sync remove-collection 12
 mb git-sync remove-collection 12 --json --profile prod
 ```
 
-## Workspaces
-
-Lifecycle for EE workspaces via `/api/ee/workspace-manager` (Metabase v62+, `workspaces` premium feature). A workspace attaches databases and provisions warehouse isolation — a temporary schema + user per database — so work runs against real data without touching prod schemas. Alias: `mb ws`.
-
-### `mb workspace list`
-
-```sh
-mb workspace list
-mb workspace list --json
-```
-
-### `mb workspace get <id>`
-
-Includes per-database provisioning status (`unprovisioned` | `provisioning` | `provisioned` | `deprovisioning`), input schemas, and the isolated output namespace.
-
-```sh
-mb workspace get 1 --json
-```
-
-### `mb workspace create`
-
-Creates the workspace and provisions isolation for each database (blocking). Each database must be eligible for workspaces (driver support + the `database-enable-workspaces` database setting).
-
-```sh
-mb workspace create --name ws-reports --database-ids 1
-mb workspace create --name ws-etl --database-ids 1,2 --json
-mb workspace create --name transform-work --database-ids 1 --spawn
-```
-
-| Flag                   | Description                                                                                                                      |
-| ---------------------- | -------------------------------------------------------------------------------------------------------------------------------- |
-| `--name <name>`        | Workspace name.                                                                                                                  |
-| `--database-ids <ids>` | Database ids to attach, comma separated.                                                                                         |
-| `--spawn`              | Also spawn a workspace Metabase; the returned credential is saved to the `ws-<id>` profile (never printed) and made the default. |
-| `--keep-existing-auth` | Proceed despite broader same-server credentials in the profile store. Interactive only — refused in non-interactive contexts.    |
-
-Before creating, the profile store is swept for broader credentials against the same server: any API key profile, or any OAuth profile wider than `mb:workspace-manager`. Interactive runs offer to revoke the offenders (local clear + best-effort server-side token revocation; API keys must additionally be deleted in Admin settings); non-interactive runs hard-refuse so an agent can't proceed while a full-power credential is in reach.
-
-With `--spawn` the parent asks its instance manager for a workspace Metabase (`spawn_instance: true`) and the CLI consumes the returned `url` + `api_key`: the credential is written straight to the profile store as `ws-<id>` — never to stdout, `--json`, or an agent transcript — and that profile becomes the default, so bare `mb` targets the new workspace from then on (explicit `--profile`/`MB_PROFILE` still win). Destroying the workspace (or `mb auth logout` on the profile) unhooks the default again. Because an exported `MB_API_KEY` outranks stored profiles, `--spawn` refuses to run while it is set — it would silently shadow the profile it is about to install.
-
-### `mb workspace destroy <id>`
-
-Destroy is the only irreversible moment, so it closes the work-loss window first: when a local profile named `ws-<id>` exists, the child is checked for unsynced work (`remote-sync is-dirty`) and a dirty workspace is auto-exported to its target branch before teardown. `--discard` skips the check and the export; a machine without the workspace's profile warns and proceeds (destroy is the billing-stop lever — ops cleanup must work from anywhere), while a profile whose child can't be reached refuses without `--discard`.
-
-Then each provisioned database's warehouse isolation is torn down and the workspace removed; the matching local profile is dropped on success. Prompts unless `--yes`. Refuses (409) while any database is still provisioning/deprovisioning unless `--ignore-pending`, which removes the records and leaves those warehouse objects behind; unreachable-warehouse leftovers are reported as `orphaned_resources`.
-
-```sh
-mb workspace destroy 1 --yes
-mb workspace destroy 1 --yes --discard
-mb workspace destroy 1 --yes --ignore-pending
-```
-
-| Flag               | Description                                                             |
-| ------------------ | ----------------------------------------------------------------------- |
-| `--yes`            | Skip confirmation.                                                      |
-| `--discard`        | Destroy without exporting unsynced work (skips the is-dirty check).     |
-| `--ignore-pending` | Remove workspace records even while databases are mid-(de)provisioning. |
-
 ## Instance setup
 
 Bootstrapping a fresh, not-yet-configured Metabase instance.
@@ -1748,7 +1687,7 @@ Exit codes: `0` success, `2` `ConfigError` (missing name, unknown name, `MB_SKIL
 | ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `MB_URL`                 | Default URL for `auth login` and config resolution.                                                                                                                       |
 | `MB_API_KEY`             | Default API key (makes `auth login` non-interactive, skipping the browser flow; not stored).                                                                              |
-| `MB_PROFILE`             | Default profile when `--profile` is omitted. Falls back to the stored default pointer (set by `workspace create --spawn`), then `default`.                                |
+| `MB_PROFILE`             | Default profile when `--profile` is omitted. Falls back to `default`.                                                                                                     |
 | `MB_VERBOSE`             | When set to `1`, prints structured developer-detail JSON to stderr on failure.                                                                                            |
 | `MB_CLI_SKIP_PREFLIGHT`  | When set to `1`, bypasses the per-command server version / token-feature preflight check. Escape hatch for patched Metabase builds; can mask real compatibility problems. |
 | `MB_CLI_DISABLE_KEYRING` | When set to `1`, skips the OS keychain and stores credentials as plaintext in the profiles file.                                                                          |

package/dist/{add-collection-CLXfrgp4.mjs → add-collection-BZAVH5Wk.mjs}

@@ -1,7 +1,7 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { REMOTE_SYNC_PATHS } from "./poll-task-DhsYs8Hx.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { REMOTE_SYNC_PATHS } from "./poll-task-DF9xJl13.mjs";
 import { z } from "zod";
 
 //#region src/commands/git-sync/add-collection.ts

package/dist/add-collection-DByJYvGO.mjs

@@ -0,0 +1,9 @@
+import "./capabilities-CSjeWyLV.mjs";
+import "./command-augment-D9pI9Vbh.mjs";
+import "./runtime-MGH96fhp.mjs";
+import "./parse-id-ySsF4nA3.mjs";
+import "./poll-CgzD9_RH.mjs";
+import "./poll-task-DF9xJl13.mjs";
+import { SyncSettingsUpdateResult, add_collection_default, setCollectionRemoteSynced, syncSettingsUpdateView } from "./add-collection-BZAVH5Wk.mjs";
+
+export { add_collection_default as default };

package/dist/{append-DMcxP1LM.mjs → append-Cak5jykn.mjs}

@@ -1,9 +1,9 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./input-BGyHn0Kr.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { UploadUpdateResult, readCsvFile, requireUploadFilePath, updateTableFromCsv, uploadUpdateResultView } from "./requests-DYrDe-D0.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./input-D2-H-QKX.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { UploadUpdateResult, readCsvFile, requireUploadFilePath, updateTableFromCsv, uploadUpdateResultView } from "./requests-COuEPJxE.mjs";
 
 //#region src/commands/upload/append.ts
 var append_default = defineMetabaseCommand({

package/dist/{archive-DErhQn8A.mjs → archive-BIEnBoE8.mjs}

@@ -1,8 +1,8 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { Snippet, snippetView } from "./snippet-C8PVaPY9.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { Snippet, snippetView } from "./snippet-CdjEhVCT.mjs";
 
 //#region src/commands/snippet/archive.ts
 var archive_default = defineMetabaseCommand({

package/dist/{archive-BwIZzWGe.mjs → archive-BMbx6lt8.mjs}

@@ -1,7 +1,7 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
 import { Document, documentView } from "./document-D4zB-5a0.mjs";
 
 //#region src/commands/document/archive.ts

package/dist/{archive-h-3H5b4K.mjs → archive-BVY_jD_g.mjs}

@@ -1,9 +1,9 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { Measure, measureView } from "./measure-C3G1srWb.mjs";
-import { revisionMessageFlag } from "./revision-message-flag-CHrJgFFx.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { Measure, measureView } from "./measure-ByY4U3ZK.mjs";
+import { revisionMessageFlag } from "./revision-message-flag-vt_V8ACy.mjs";
 
 //#region src/commands/measure/archive.ts
 var archive_default = defineMetabaseCommand({

package/dist/{archive-4WqMsPWB.mjs → archive-CPgWNCG3.mjs}

@@ -1,8 +1,8 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { Timeline, timelineView } from "./timeline-DEaiuB5V.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { Timeline, timelineView } from "./timeline-2ShuGr4f.mjs";
 
 //#region src/commands/timeline/archive.ts
 var archive_default = defineMetabaseCommand({

package/dist/{archive-Q1387APe.mjs → archive-CaKhG58H.mjs}

@@ -1,9 +1,9 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
 import "./embedding-CKdw8q7p.mjs";
 import "./parameter-BZ6y-Gfs.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
 import { Dashboard, dashboardView } from "./dashboard-BLihjDXg.mjs";
 
 //#region src/commands/dashboard/archive.ts

package/dist/{archive-BggM_AuL.mjs → archive-CjnCAM61.mjs}

@@ -1,9 +1,9 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { revisionMessageFlag } from "./revision-message-flag-CHrJgFFx.mjs";
-import { Segment, segmentView } from "./segment-CxRYEXeO.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { revisionMessageFlag } from "./revision-message-flag-vt_V8ACy.mjs";
+import { Segment, segmentView } from "./segment-eeGhLo7_.mjs";
 
 //#region src/commands/segment/archive.ts
 var archive_default = defineMetabaseCommand({

package/dist/{archive-DTnz1suV.mjs → archive-CytCvQpn.mjs}

@@ -1,8 +1,8 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { TimelineEvent, timelineEventView } from "./timeline-DEaiuB5V.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { TimelineEvent, timelineEventView } from "./timeline-2ShuGr4f.mjs";
 
 //#region src/commands/timeline-event/archive.ts
 var archive_default = defineMetabaseCommand({

package/dist/{archive-BmhehbS0.mjs → archive-DfbI8DRB.mjs}

@@ -1,11 +1,11 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
 import "./embedding-CKdw8q7p.mjs";
 import "./field-DsXTeqBy.mjs";
 import "./parameter-BZ6y-Gfs.mjs";
 import { Card, cardView } from "./card-B8G5jQQT.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
 
 //#region src/commands/card/archive.ts
 var archive_default = defineMetabaseCommand({

package/dist/{archive-5inmbMDL.mjs → archive-op9pJRpg.mjs}

@@ -1,7 +1,7 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
 import { Collection, collectionView } from "./collection-C52Ndi_O.mjs";
 
 //#region src/commands/collection/archive.ts

package/dist/{auth-DzCAiArV.mjs → auth-XfuGXI2K.mjs}

@@ -11,10 +11,10 @@ var auth_default = defineCommandGroup({
 		purpose: "authentication and named profiles"
 	}],
 	subCommands: {
-		login: () => import("./login-CRlmR4op.mjs").then((m) => m.default),
-		status: () => import("./status--Dm2Jv6k.mjs").then((m) => m.default),
-		list: () => import("./list-wxIVl45_.mjs").then((m) => m.default),
-		logout: () => import("./logout-DSZEUxSQ.mjs").then((m) => m.default)
+		login: () => import("./login-C5Ug3BVC.mjs").then((m) => m.default),
+		status: () => import("./status-D1vtL5eW.mjs").then((m) => m.default),
+		list: () => import("./list-F_hMRbsa.mjs").then((m) => m.default),
+		logout: () => import("./logout-B_N1N2DV.mjs").then((m) => m.default)
 	}
 });
 

package/dist/{body-5snfmiwR.mjs → body-BW_CiL1d.mjs}

@@ -1,6 +1,6 @@
-import { ConfigError } from "./capabilities-CiaAfUgX.mjs";
-import { parseJson } from "./runtime-C6ASrgVA.mjs";
-import { DEFAULT_FLAG_NAME, readInput } from "./input-BGyHn0Kr.mjs";
+import { ConfigError } from "./capabilities-CSjeWyLV.mjs";
+import { parseJson } from "./runtime-MGH96fhp.mjs";
+import { DEFAULT_FLAG_NAME, readInput } from "./input-D2-H-QKX.mjs";
 
 //#region src/runtime/body.ts
 async function readBody(sources, schema) {

package/dist/{branches-PL170CYS.mjs → branches-gVRwKne4.mjs}

@@ -1,8 +1,8 @@
-import { connectionFlags, listEnvelopeSchema, outputFlags, profileFlag, renderList, wrapList } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, listEnvelopeSchema, outputFlags, profileFlag, renderList, wrapList } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./poll-CuTlWBwI.mjs";
-import { REMOTE_SYNC_PATHS } from "./poll-task-DhsYs8Hx.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./poll-CgzD9_RH.mjs";
+import { REMOTE_SYNC_PATHS } from "./poll-task-DF9xJl13.mjs";
 import { z } from "zod";
 
 //#region src/commands/git-sync/branches.ts

package/dist/{cancel-EFKcF5J_.mjs → cancel-CBOJSslz.mjs}

@@ -1,7 +1,7 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
 import { z } from "zod";
 
 //#region src/commands/transform/cancel.ts

package/dist/{cancel-task-mFFx0d5m.mjs → cancel-task-Djancczz.mjs}

@@ -1,8 +1,8 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./poll-CuTlWBwI.mjs";
-import { REMOTE_SYNC_PATHS, SyncTask, syncTaskView } from "./poll-task-DhsYs8Hx.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./poll-CgzD9_RH.mjs";
+import { REMOTE_SYNC_PATHS, SyncTask, syncTaskView } from "./poll-task-DF9xJl13.mjs";
 
 //#region src/commands/git-sync/cancel-task.ts
 var cancel_task_default = defineMetabaseCommand({

package/dist/{capabilities-CiaAfUgX.mjs → capabilities-CSjeWyLV.mjs}

@@ -266,7 +266,7 @@ function errorMessage(value) {
 //#endregion
 //#region package.json
 var name = "@metabase/cli";
-var version = "0.2.1-alpha.bcm-ghy-4075-spawn-default-profile.eb120d1";
+var version = "0.2.1-alpha.trust-system-ca.541e4e0";
 var description = "Metabase CLI";
 var license = "AGPL-3.0";
 var repository = {

package/dist/{card-BsfdXK0O.mjs → card-B_kiDDil.mjs}

@@ -13,12 +13,12 @@ var card_default = defineCommandGroup({
 		purpose: "choose display and visualization_settings"
 	}],
 	subCommands: {
-		list: () => import("./list-Be8xMtS3.mjs").then((mod) => mod.default),
-		get: () => import("./get-DTkvGu_J.mjs").then((mod) => mod.default),
-		query: () => import("./query-Dfx69iJ4.mjs").then((mod) => mod.default),
-		create: () => import("./create-VrSowEbj.mjs").then((mod) => mod.default),
-		update: () => import("./update-C1_aIL6X.mjs").then((mod) => mod.default),
-		archive: () => import("./archive-BmhehbS0.mjs").then((mod) => mod.default)
+		list: () => import("./list-B8zgT05M.mjs").then((mod) => mod.default),
+		get: () => import("./get-B22wjDxr.mjs").then((mod) => mod.default),
+		query: () => import("./query-DX4r0-uz.mjs").then((mod) => mod.default),
+		create: () => import("./create-CvptjYVb.mjs").then((mod) => mod.default),
+		update: () => import("./update-bz-FKwuR.mjs").then((mod) => mod.default),
+		archive: () => import("./archive-DfbI8DRB.mjs").then((mod) => mod.default)
 	}
 });
 

package/dist/{cards-BI7zKb9M.mjs → cards-23FtfL4S.mjs}

@@ -1,9 +1,9 @@
-import { connectionFlags, listEnvelopeSchema, outputFlags, profileFlag, renderList, wrapList } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, listEnvelopeSchema, outputFlags, profileFlag, renderList, wrapList } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
 import "./embedding-CKdw8q7p.mjs";
 import "./parameter-BZ6y-Gfs.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
 import { DashboardDetail, DashcardCompact, dashcardView } from "./dashboard-BLihjDXg.mjs";
 
 //#region src/commands/dashboard/cards.ts

package/dist/cli.mjs

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
-import { Capabilities, ConfigError, connectionFlags, flagConsumesValue, jsonLine, normalizeFlag, outputFlags, package_default, profileFlag, reportError, resolveCitty, toAliasArray } from "./capabilities-CiaAfUgX.mjs";
+import { Capabilities, ConfigError, connectionFlags, flagConsumesValue, jsonLine, normalizeFlag, outputFlags, package_default, profileFlag, reportError, resolveCitty, toAliasArray } from "./capabilities-CSjeWyLV.mjs";
 import { getMetabaseAugment, setMetabaseAugment } from "./command-augment-D9pI9Vbh.mjs";
 import { defineCommand, renderUsage, runMain } from "citty";
 import { z } from "zod";
+import tls from "node:tls";
 
 //#region src/commands/global-flags.ts
 const ARGUMENT_SEPARATOR = "--";
@@ -50,6 +51,17 @@ function hoistGlobalFlags(rawArgs) {
 	return [...rawArgs.slice(index), ...leading];
 }
 
+//#endregion
+//#region src/core/http/system-ca.ts
+function trustSystemCa() {
+	const canReadSystemStore = typeof tls.getCACertificates === "function";
+	const canReplaceDefaults = typeof tls.setDefaultCACertificates === "function";
+	if (!canReadSystemStore || !canReplaceDefaults) return;
+	const systemCerts = tls.getCACertificates("system");
+	if (systemCerts.length === 0) return;
+	tls.setDefaultCACertificates([...tls.getCACertificates("default"), ...systemCerts]);
+}
+
 //#endregion
 //#region src/main.ts
 const main = defineCommand({
@@ -59,34 +71,33 @@ const main = defineCommand({
 		description: package_default.description
 	},
 	subCommands: {
-		auth: () => import("./auth-DzCAiArV.mjs").then((mod) => mod.default),
-		db: () => import("./db-dbnxMPSR.mjs").then((mod) => mod.default),
-		table: () => import("./table-BKehBm_E.mjs").then((mod) => mod.default),
-		field: () => import("./field-CXDndCbB.mjs").then((mod) => mod.default),
-		upload: () => import("./upload-DOMoaR9f.mjs").then((mod) => mod.default),
-		card: () => import("./card-BsfdXK0O.mjs").then((mod) => mod.default),
-		dashboard: () => import("./dashboard-ARgJfamb.mjs").then((mod) => mod.default),
-		collection: () => import("./collection-2h_by9Ue.mjs").then((mod) => mod.default),
-		library: () => import("./library-BGWDIfEM.mjs").then((mod) => mod.default),
-		document: () => import("./document-DR1FLOn9.mjs").then((mod) => mod.default),
-		transform: () => import("./transform-CrOOqKen.mjs").then((mod) => mod.default),
-		"transform-job": () => import("./transform-job-J-E0Mec7.mjs").then((mod) => mod.default),
-		"transform-tag": () => import("./transform-tag-Bkyasy_s.mjs").then((mod) => mod.default),
-		setting: () => import("./setting-zrJwy48C.mjs").then((mod) => mod.default),
-		search: () => import("./search-9GSZHgJQ.mjs").then((mod) => mod.default),
-		"git-sync": () => import("./git-sync-CmB4YBmS.mjs").then((mod) => mod.default),
-		workspace: () => import("./workspace-LFtHxcw9.mjs").then((mod) => mod.default),
-		setup: () => import("./setup-Doq8atTG.mjs").then((mod) => mod.default),
-		snippet: () => import("./snippet-ScFM8re8.mjs").then((mod) => mod.default),
-		segment: () => import("./segment-C40bORNZ.mjs").then((mod) => mod.default),
-		measure: () => import("./measure-Ka0n3426.mjs").then((mod) => mod.default),
-		timeline: () => import("./timeline-n3Nw9Egt.mjs").then((mod) => mod.default),
-		"timeline-event": () => import("./timeline-event-CLWMxvE0.mjs").then((mod) => mod.default),
-		eid: () => import("./eid-CtKGjAkz.mjs").then((mod) => mod.default),
-		query: () => import("./query-CPq-dhFV.mjs").then((mod) => mod.default),
-		uuid: () => import("./uuid-DDbLKnbe.mjs").then((mod) => mod.default),
-		upgrade: () => import("./upgrade-DkK1ZbEY.mjs").then((mod) => mod.default),
-		skills: () => import("./skills-yuzH_o8s.mjs").then((mod) => mod.default)
+		auth: () => import("./auth-XfuGXI2K.mjs").then((mod) => mod.default),
+		db: () => import("./db-CHnqeJCo.mjs").then((mod) => mod.default),
+		table: () => import("./table-CmKFWPvJ.mjs").then((mod) => mod.default),
+		field: () => import("./field-DAB2gImv.mjs").then((mod) => mod.default),
+		upload: () => import("./upload-BOFc_eZD.mjs").then((mod) => mod.default),
+		card: () => import("./card-B_kiDDil.mjs").then((mod) => mod.default),
+		dashboard: () => import("./dashboard-kb1oz7Z3.mjs").then((mod) => mod.default),
+		collection: () => import("./collection-DNzM3u7n.mjs").then((mod) => mod.default),
+		library: () => import("./library-bUBWlweP.mjs").then((mod) => mod.default),
+		document: () => import("./document-Y_DZNi4D.mjs").then((mod) => mod.default),
+		transform: () => import("./transform-CvsBOTqB.mjs").then((mod) => mod.default),
+		"transform-job": () => import("./transform-job-D_8Kp772.mjs").then((mod) => mod.default),
+		"transform-tag": () => import("./transform-tag-DhDnvbmq.mjs").then((mod) => mod.default),
+		setting: () => import("./setting-D5Y9sJha.mjs").then((mod) => mod.default),
+		search: () => import("./search-Csbb-u-_.mjs").then((mod) => mod.default),
+		"git-sync": () => import("./git-sync-BhhdNjq5.mjs").then((mod) => mod.default),
+		setup: () => import("./setup-D9HNfS7W.mjs").then((mod) => mod.default),
+		snippet: () => import("./snippet-CwRiMCfE.mjs").then((mod) => mod.default),
+		segment: () => import("./segment-DCeafJwX.mjs").then((mod) => mod.default),
+		measure: () => import("./measure-D9rKeA6Z.mjs").then((mod) => mod.default),
+		timeline: () => import("./timeline-1ZphX3zj.mjs").then((mod) => mod.default),
+		"timeline-event": () => import("./timeline-event-C6aKZ4EO.mjs").then((mod) => mod.default),
+		eid: () => import("./eid-60sCZhQV.mjs").then((mod) => mod.default),
+		query: () => import("./query-DGBzATpV.mjs").then((mod) => mod.default),
+		uuid: () => import("./uuid-DBKkosBq.mjs").then((mod) => mod.default),
+		upgrade: () => import("./upgrade--_g3bacj.mjs").then((mod) => mod.default),
+		skills: () => import("./skills-DvSQOPWg.mjs").then((mod) => mod.default)
 	}
 });
 setMetabaseAugment(main, {
@@ -435,6 +446,7 @@ async function findSubCommand(subCommands, token) {
 const HELP_FLAGS = new Set(["--help", "-h"]);
 const JSON_HELP_FLAG = "--json";
 async function run() {
+	trustSystemCa();
 	const rawArgs = hoistGlobalFlags(process.argv.slice(2));
 	const wantsJsonHelp = rawArgs.includes(JSON_HELP_FLAG);
 	const showUsageWithBreadcrumb = async (cmd, parent) => {

package/dist/{collection-2h_by9Ue.mjs → collection-DNzM3u7n.mjs}

@@ -10,12 +10,12 @@ var collection_default = defineCommandGroup({
 		purpose: "collection ref forms and the transforms namespace"
 	}],
 	subCommands: {
-		list: () => import("./list-Ov6bYzT9.mjs").then((mod) => mod.default),
-		get: () => import("./get-BQBu2c94.mjs").then((mod) => mod.default),
-		items: () => import("./items-BZpYkImP.mjs").then((mod) => mod.default),
-		tree: () => import("./tree-JZC6vD9q.mjs").then((mod) => mod.default),
-		create: () => import("./create-CQ32FwVe.mjs").then((mod) => mod.default),
-		archive: () => import("./archive-5inmbMDL.mjs").then((mod) => mod.default)
+		list: () => import("./list-B-_PTqKw.mjs").then((mod) => mod.default),
+		get: () => import("./get-Ct5TnofS.mjs").then((mod) => mod.default),
+		items: () => import("./items-DrP1b4Qj.mjs").then((mod) => mod.default),
+		tree: () => import("./tree-CtufTBZY.mjs").then((mod) => mod.default),
+		create: () => import("./create-C_fyIHZU.mjs").then((mod) => mod.default),
+		archive: () => import("./archive-op9pJRpg.mjs").then((mod) => mod.default)
 	}
 });
 

package/dist/{collection-namespace-uNA5WhLB.mjs → collection-namespace-w1y5D0Uh.mjs}

@@ -1,5 +1,5 @@
-import { ConfigError } from "./capabilities-CiaAfUgX.mjs";
-import { HttpError } from "./runtime-C6ASrgVA.mjs";
+import { ConfigError } from "./capabilities-CSjeWyLV.mjs";
+import { HttpError } from "./runtime-MGH96fhp.mjs";
 
 //#region src/commands/transform/collection-namespace.ts
 const TRANSFORMS_NAMESPACE_HINT = "transforms can only be filed in a :transforms-namespace collection. Create one with `mb collection create --body '{\"name\":\"…\"}' --namespace transforms` and pass its id as collection_id, or omit collection_id to leave the transform uncollected.";

package/dist/{create-BLD0YniB.mjs → create-BRK8TBzp.mjs}

@@ -1,9 +1,9 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
 import "./collection-C52Ndi_O.mjs";
 import "./listing-wFZuS5li.mjs";
-import { Library, createLibrary, libraryView } from "./resolve-BTZuO3Yq.mjs";
+import { Library, createLibrary, libraryView } from "./resolve-8iT-dXgX.mjs";
 
 //#region src/commands/library/create.ts
 var create_default = defineMetabaseCommand({

package/dist/{create-CU3bYpsT.mjs → create-BkvdOecg.mjs}

@@ -1,10 +1,10 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./input-BGyHn0Kr.mjs";
-import { readBody } from "./body-5snfmiwR.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./input-D2-H-QKX.mjs";
+import { readBody } from "./body-BW_CiL1d.mjs";
 import { bodyInputFlags } from "./body-flags-CgHgJBRC.mjs";
-import { TransformJob, TransformJobCreateInput, transformJobView } from "./transform-job-B5x8aYfV.mjs";
+import { TransformJob, TransformJobCreateInput, transformJobView } from "./transform-job-CvE0MBBo.mjs";
 
 //#region src/commands/transform-job/create.ts
 var create_default = defineMetabaseCommand({

package/dist/{create-FuZa4j1N.mjs → create-CGsTL5aE.mjs}

@@ -1,10 +1,10 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./input-BGyHn0Kr.mjs";
-import { readBody } from "./body-5snfmiwR.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./input-D2-H-QKX.mjs";
+import { readBody } from "./body-BW_CiL1d.mjs";
 import { bodyInputFlags } from "./body-flags-CgHgJBRC.mjs";
-import { TransformTag, TransformTagCreateInput, transformTagView } from "./transform-tag-BRwfWeHf.mjs";
+import { TransformTag, TransformTagCreateInput, transformTagView } from "./transform-tag-xdxjlDcD.mjs";
 
 //#region src/commands/transform-tag/create.ts
 var create_default = defineMetabaseCommand({

package/dist/{create-CQ32FwVe.mjs → create-C_fyIHZU.mjs}

@@ -1,10 +1,10 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./input-BGyHn0Kr.mjs";
-import { readBody } from "./body-5snfmiwR.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./input-D2-H-QKX.mjs";
+import { readBody } from "./body-BW_CiL1d.mjs";
 import { bodyInputFlags } from "./body-flags-CgHgJBRC.mjs";
-import { parseEnumFlag } from "./parse-enum-ooCsJWn6.mjs";
+import { parseEnumFlag } from "./parse-enum-D5h-JePs.mjs";
 import { Collection, CollectionCreateInput, CollectionNamespace, collectionView } from "./collection-C52Ndi_O.mjs";
 import { COLLECTIONS_PATH } from "./listing-wFZuS5li.mjs";