@metabase/cli 0.2.1-alpha.bcm-ghy-4075-spawn-default-profile.eb120d1 → 0.2.1-alpha.trust-system-ca.541e4e0

package/dist/{update-bFNKpay8.mjs → update-DmQJqGvX.mjs}

@@ -1,11 +1,11 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./input-BGyHn0Kr.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { readBody } from "./body-5snfmiwR.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./input-D2-H-QKX.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { readBody } from "./body-BW_CiL1d.mjs";
 import { bodyInputFlags } from "./body-flags-CgHgJBRC.mjs";
-import { TransformTag, TransformTagUpdateInput, transformTagView } from "./transform-tag-BRwfWeHf.mjs";
+import { TransformTag, TransformTagUpdateInput, transformTagView } from "./transform-tag-xdxjlDcD.mjs";
 
 //#region src/commands/transform-tag/update.ts
 var update_default = defineMetabaseCommand({

package/dist/{update-WLb9099y.mjs → update-DshCe-bl.mjs}

@@ -1,13 +1,13 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./input-BGyHn0Kr.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { readBody } from "./body-5snfmiwR.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./input-D2-H-QKX.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { readBody } from "./body-BW_CiL1d.mjs";
 import { bodyInputFlags } from "./body-flags-CgHgJBRC.mjs";
-import "./validate-DqQ7DQnP.mjs";
-import { MEASURE_DEFINITION_LABELS, preflightMbql5Query, skipValidateFlag } from "./validate-query-BYG7lyaY.mjs";
-import { Measure, MeasureUpdateInput, measureView } from "./measure-C3G1srWb.mjs";
+import "./validate-Bpqt3ntH.mjs";
+import { MEASURE_DEFINITION_LABELS, preflightMbql5Query, skipValidateFlag } from "./validate-query-tECK019A.mjs";
+import { Measure, MeasureUpdateInput, measureView } from "./measure-ByY4U3ZK.mjs";
 
 //#region src/commands/measure/update.ts
 var update_default = defineMetabaseCommand({

package/dist/{update-BfIGjAVA.mjs → update-Dt9-3Tqf.mjs}

@@ -1,10 +1,10 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./input-BGyHn0Kr.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./input-D2-H-QKX.mjs";
 import { Field, FieldUpdateInput, fieldView } from "./field-DsXTeqBy.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { readBody } from "./body-5snfmiwR.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { readBody } from "./body-BW_CiL1d.mjs";
 import { bodyInputFlags } from "./body-flags-CgHgJBRC.mjs";
 
 //#region src/commands/field/update.ts

package/dist/{update-DKQjMsuE.mjs → update-QNuvGuS3.mjs}

@@ -1,9 +1,9 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./input-BGyHn0Kr.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { readBody } from "./body-5snfmiwR.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./input-D2-H-QKX.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { readBody } from "./body-BW_CiL1d.mjs";
 import { bodyInputFlags } from "./body-flags-CgHgJBRC.mjs";
 import { Document, DocumentUpdateInput, documentView } from "./document-D4zB-5a0.mjs";
 

package/dist/{update-C1_aIL6X.mjs → update-bz-FKwuR.mjs}

@@ -1,16 +1,16 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./input-BGyHn0Kr.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./input-D2-H-QKX.mjs";
 import "./embedding-CKdw8q7p.mjs";
 import "./field-DsXTeqBy.mjs";
 import "./parameter-BZ6y-Gfs.mjs";
 import { Card, CardUpdateInput, cardView } from "./card-B8G5jQQT.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { readBody } from "./body-5snfmiwR.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { readBody } from "./body-BW_CiL1d.mjs";
 import { bodyInputFlags } from "./body-flags-CgHgJBRC.mjs";
-import "./validate-DqQ7DQnP.mjs";
-import { CARD_DATASET_QUERY_LABELS, preflightMbql5Query, skipValidateFlag } from "./validate-query-BYG7lyaY.mjs";
+import "./validate-Bpqt3ntH.mjs";
+import { CARD_DATASET_QUERY_LABELS, preflightMbql5Query, skipValidateFlag } from "./validate-query-tECK019A.mjs";
 
 //#region src/commands/card/update.ts
 var update_default = defineMetabaseCommand({

package/dist/{update-QaBVvlz9.mjs → update-dJ2mlCXm.mjs}

@@ -1,11 +1,11 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./input-BGyHn0Kr.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { readBody } from "./body-5snfmiwR.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./input-D2-H-QKX.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { readBody } from "./body-BW_CiL1d.mjs";
 import { bodyInputFlags } from "./body-flags-CgHgJBRC.mjs";
-import { TransformJob, TransformJobUpdateInput, transformJobView } from "./transform-job-B5x8aYfV.mjs";
+import { TransformJob, TransformJobUpdateInput, transformJobView } from "./transform-job-CvE0MBBo.mjs";
 
 //#region src/commands/transform-job/update.ts
 var update_default = defineMetabaseCommand({

package/dist/{update-dashcard-CKZC7scy.mjs → update-dashcard-CQP-qd6a.mjs}

@@ -1,11 +1,11 @@
-import { ConfigError, connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { ConfigError, connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import "./input-BGyHn0Kr.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import "./input-D2-H-QKX.mjs";
 import "./embedding-CKdw8q7p.mjs";
 import "./parameter-BZ6y-Gfs.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { readBody } from "./body-5snfmiwR.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { readBody } from "./body-BW_CiL1d.mjs";
 import { bodyInputFlags } from "./body-flags-CgHgJBRC.mjs";
 import { DashboardDetail, Dashcard, DashcardPatchInput, dashcardView } from "./dashboard-BLihjDXg.mjs";
 

package/dist/{upgrade-DkK1ZbEY.mjs → upgrade--_g3bacj.mjs}

@@ -1,8 +1,8 @@
-import { AbortError, NetworkError, TimeoutError, UnknownError, errorMessage, outputFlags, package_default, renderItem, writeText } from "./capabilities-CiaAfUgX.mjs";
+import { AbortError, NetworkError, TimeoutError, UnknownError, errorMessage, outputFlags, package_default, renderItem, writeText } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { HttpError, USER_AGENT, combineAborts, defineMetabaseCommand, parseJson, throwIfAborted } from "./runtime-C6ASrgVA.mjs";
-import { promptConfirm } from "./prompt-jQnNKtlx.mjs";
-import { streamProcess } from "./process-7c8BcQEi.mjs";
+import { HttpError, USER_AGENT, combineAborts, defineMetabaseCommand, parseJson, throwIfAborted } from "./runtime-MGH96fhp.mjs";
+import { promptConfirm } from "./prompt-BSqji7Fo.mjs";
+import { streamProcess } from "./process-jjR_DX5G.mjs";
 import { z } from "zod";
 import { realpathSync } from "node:fs";
 import { compare, valid } from "semver";

package/dist/{upload-DOMoaR9f.mjs → upload-BOFc_eZD.mjs}

@@ -6,9 +6,9 @@ var upload_default = defineCommandGroup({
 	name: "upload",
 	description: "Upload CSV files into Metabase",
 	subCommands: {
-		csv: () => import("./csv-CZyYi0vi.mjs").then((m) => m.default),
-		append: () => import("./append-DMcxP1LM.mjs").then((m) => m.default),
-		replace: () => import("./replace-DZWd6avZ.mjs").then((m) => m.default)
+		csv: () => import("./csv-C3O1wTQ8.mjs").then((m) => m.default),
+		append: () => import("./append-Cak5jykn.mjs").then((m) => m.default),
+		replace: () => import("./replace-xlQv9yl_.mjs").then((m) => m.default)
 	}
 });
 

package/dist/{uuid-DDbLKnbe.mjs → uuid-DBKkosBq.mjs}

@@ -1,6 +1,6 @@
-import { ConfigError, outputFlags, writeJson, writeText } from "./capabilities-CiaAfUgX.mjs";
+import { ConfigError, outputFlags, writeJson, writeText } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand, parseInteger } from "./runtime-C6ASrgVA.mjs";
+import { defineMetabaseCommand, parseInteger } from "./runtime-MGH96fhp.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 

package/dist/{validate-DqQ7DQnP.mjs → validate-Bpqt3ntH.mjs}

@@ -1,4 +1,4 @@
-import { ConfigError, escapeJsonPointerSegment, isPlainObject } from "./capabilities-CiaAfUgX.mjs";
+import { ConfigError, escapeJsonPointerSegment, isPlainObject } from "./capabilities-CSjeWyLV.mjs";
 import { z } from "zod";
 import Ajv2020 from "ajv/dist/2020.js";
 import addFormats from "ajv-formats";

package/dist/{validate-query-BYG7lyaY.mjs → validate-query-tECK019A.mjs}

@@ -1,5 +1,5 @@
-import { ConfigError, writeJson } from "./capabilities-CiaAfUgX.mjs";
-import { assertNotLegacyEnvelopeWrappingMbql5, isMbql5Query, validateQuery } from "./validate-DqQ7DQnP.mjs";
+import { ConfigError, writeJson } from "./capabilities-CSjeWyLV.mjs";
+import { assertNotLegacyEnvelopeWrappingMbql5, isMbql5Query, validateQuery } from "./validate-Bpqt3ntH.mjs";
 
 //#region src/commands/validate-query.ts
 const skipValidateFlag = { "skip-validate": {

package/dist/{values-Bc99Kkuv.mjs → values-BAhMnVh6.mjs}

@@ -1,8 +1,8 @@
-import { connectionFlags, formatScalar, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, formatScalar, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
 import { FieldValues, fieldValuesView } from "./field-DsXTeqBy.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
 
 //#region src/commands/field/values.ts
 var values_default = defineMetabaseCommand({

package/dist/{verify-WvMbaT8W.mjs → verify-RLb2DoOX.mjs}

@@ -1,5 +1,5 @@
-import { MetabaseError, NetworkError, TimeoutError, errorMessage } from "./capabilities-CiaAfUgX.mjs";
-import { HttpError, createClient, probeServer } from "./runtime-C6ASrgVA.mjs";
+import { MetabaseError, NetworkError, TimeoutError, errorMessage } from "./capabilities-CSjeWyLV.mjs";
+import { HttpError, createClient, probeServer } from "./runtime-MGH96fhp.mjs";
 import { z } from "zod";
 
 //#region src/domain/user.ts

package/dist/{wait-DmgEPnHW.mjs → wait-BJ_87Yz0.mjs}

@@ -1,9 +1,9 @@
-import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CiaAfUgX.mjs";
+import { connectionFlags, outputFlags, profileFlag, renderSummary } from "./capabilities-CSjeWyLV.mjs";
 import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { DEFAULT_INTERVAL_MS, DEFAULT_TIMEOUT_MS } from "./poll-CuTlWBwI.mjs";
-import { SyncTaskOrIdle, formatSyncTask, pollSyncTask, syncTaskIdleView, syncTaskView, throwIfFailedTask } from "./poll-task-DhsYs8Hx.mjs";
+import { defineMetabaseCommand } from "./runtime-MGH96fhp.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { DEFAULT_INTERVAL_MS, DEFAULT_TIMEOUT_MS } from "./poll-CgzD9_RH.mjs";
+import { SyncTaskOrIdle, formatSyncTask, pollSyncTask, syncTaskIdleView, syncTaskView, throwIfFailedTask } from "./poll-task-DF9xJl13.mjs";
 
 //#region src/commands/git-sync/wait.ts
 const WaitResult = SyncTaskOrIdle;

package/dist/{wait-flags-BpzyrpAL.mjs → wait-flags-DEn-3mjb.mjs}

@@ -1,5 +1,5 @@
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { DEFAULT_INTERVAL_MS, DEFAULT_TIMEOUT_MS } from "./poll-CuTlWBwI.mjs";
+import { parseId } from "./parse-id-ySsF4nA3.mjs";
+import { DEFAULT_INTERVAL_MS, DEFAULT_TIMEOUT_MS } from "./poll-CgzD9_RH.mjs";
 
 //#region src/commands/wait-flags.ts
 const waitScheduleFlags = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metabase/cli",
-  "version": "0.2.1-alpha.bcm-ghy-4075-spawn-default-profile.eb120d1",
+  "version": "0.2.1-alpha.trust-system-ca.541e4e0",
   "description": "Metabase CLI",
   "license": "AGPL-3.0",
   "repository": {

package/dist/add-collection-CCpC-GUz.mjs

@@ -1,9 +0,0 @@
-import "./capabilities-CiaAfUgX.mjs";
-import "./command-augment-D9pI9Vbh.mjs";
-import "./runtime-C6ASrgVA.mjs";
-import "./parse-id-xS1tWJAq.mjs";
-import "./poll-CuTlWBwI.mjs";
-import "./poll-task-DhsYs8Hx.mjs";
-import { SyncSettingsUpdateResult, add_collection_default, setCollectionRemoteSynced, syncSettingsUpdateView } from "./add-collection-CLXfrgp4.mjs";
-
-export { add_collection_default as default };

package/dist/create-BP8EIWrP.mjs

@@ -1,161 +0,0 @@
-import { ConfigError, ENV_API_KEY, connectionFlags, errorMessage, outputFlags, profileFlag, renderSummary, warn } from "./capabilities-CiaAfUgX.mjs";
-import "./command-augment-D9pI9Vbh.mjs";
-import { WORKSPACE_MANAGER_SCOPE, clearProfile, defineMetabaseCommand, keyringFallbackWarning, listProfileRecords, normalizeUrl, readEnvCredentials, readProfileCredential, resolveRecordCredential, revokeOAuthCredential, setDefaultProfile, writeProfile } from "./runtime-C6ASrgVA.mjs";
-import { promptConfirm } from "./prompt-jQnNKtlx.mjs";
-import { parseIdCsv } from "./parse-id-xS1tWJAq.mjs";
-import { Workspace, workspaceView } from "./workspace-BgH_4xFO.mjs";
-import { workspaceProfileName } from "./profile-name-CZ1-Vtrh.mjs";
-import { z } from "zod";
-
-//#region src/core/auth/stale-credentials.ts
-function findStaleParentCredentials(records, targetUrl, currentProfile) {
-	const target = normalizeUrl(targetUrl);
-	const stale = [];
-	for (const record of records) {
-		if (record.name === currentProfile || normalizeUrl(record.url) !== target) continue;
-		const resolved = resolveRecordCredential(record);
-		if (resolved === null) continue;
-		if (resolved.credential.kind === "apiKey") stale.push({
-			profile: record.name,
-			kind: "apiKey"
-		});
-		else if (resolved.credential.scope !== WORKSPACE_MANAGER_SCOPE) stale.push({
-			profile: record.name,
-			kind: "oauth",
-			scope: resolved.credential.scope
-		});
-	}
-	return stale;
-}
-function describeStaleCredential(credential) {
-	const detail = credential.kind === "apiKey" ? "api key" : credential.scope;
-	return `${credential.profile} (${detail})`;
-}
-
-//#endregion
-//#region src/commands/workspace/credential-sweep.ts
-const keepExistingAuthFlag = { keepExistingAuth: {
-	type: "boolean",
-	description: "Proceed despite broader same-server credentials in the profile store (interactive only)",
-	alias: "keep-existing-auth",
-	default: false
-} };
-async function enforceCredentialSweep(input) {
-	const records = await listProfileRecords();
-	const stale = findStaleParentCredentials(records, input.url, input.profile);
-	if (stale.length === 0) return;
-	const listing = stale.map(describeStaleCredential).join(", ");
-	const interactive = process.stdin.isTTY === true;
-	if (input.keepExistingAuth) {
-		if (!interactive) throw new ConfigError("--keep-existing-auth requires an interactive terminal; refusing to proceed with broader credentials in a non-interactive context");
-		warn(`proceeding with broader credentials left in the profile store: ${listing}`);
-		return;
-	}
-	if (!interactive) throw new ConfigError(`refusing to ${input.action}: broader credentials for this server exist in the profile store (${listing}) — revoke them with \`mb auth logout --profile <name>\` first; a human can override with --keep-existing-auth`);
-	const ok = await promptConfirm({
-		message: `Broader credentials for this server exist (${listing}). Revoke them before continuing?`,
-		initialValue: true
-	});
-	if (!ok) throw new ConfigError(`aborted: revoke the broader credentials (${listing}) with \`mb auth logout --profile <name>\` or pass --keep-existing-auth`);
-	for (const credential of stale) await revokeStaleCredential(credential);
-}
-async function revokeStaleCredential(stale) {
-	const resolved = await readProfileCredential(stale.profile);
-	await clearProfile(stale.profile);
-	if (resolved === null || resolved.credential.kind !== "oauth") {
-		warn(`cleared profile "${stale.profile}"; its API key is still active server-side — delete it in Admin settings → Authentication → API keys`);
-		return;
-	}
-	try {
-		const revoked = await revokeOAuthCredential(resolved.url, resolved.credential);
-		if (!revoked) warn(`cleared profile "${stale.profile}", but the server advertises no revocation endpoint; its tokens remain valid until they expire`);
-	} catch (error) {
-		warn(`cleared profile "${stale.profile}", but revoking server-side failed: ${errorMessage(error)}`);
-	}
-}
-
-//#endregion
-//#region src/commands/workspace/create.ts
-const SpawnedWorkspace = Workspace.extend({
-	url: z.string().optional(),
-	api_key: z.string().optional()
-});
-var create_default = defineMetabaseCommand({
-	meta: {
-		name: "create",
-		description: "Create and provision a workspace"
-	},
-	details: "Attaches the given databases and provisions warehouse isolation (a temporary schema + user per database) before returning. Each database must be eligible for workspaces; provisioning is blocking, so the response carries the final per-database status. Before creating, the profile store is swept for broader same-server credentials (any API key, any OAuth grant wider than mb:workspace-manager): interactive runs offer to revoke them, non-interactive runs refuse — --keep-existing-auth is the human-only override. With --spawn the parent also asks its instance manager to spawn a workspace Metabase; the returned credential is saved to the ws-<id> profile (never printed) and made the default, so bare `mb` targets the new workspace.",
-	capabilities: {
-		minVersion: 62,
-		tokenFeature: "workspaces"
-	},
-	args: {
-		...outputFlags,
-		...profileFlag,
-		...connectionFlags,
-		...keepExistingAuthFlag,
-		name: {
-			type: "string",
-			description: "Workspace name",
-			required: true
-		},
-		"database-ids": {
-			type: "string",
-			description: "Database ids to attach, comma separated",
-			required: true
-		},
-		spawn: {
-			type: "boolean",
-			description: "Spawn a workspace instance and save its credential as the default profile (key is never printed)",
-			default: false
-		}
-	},
-	outputSchema: Workspace,
-	examples: [
-		"mb workspace create --name ws-reports --database-ids 1",
-		"mb workspace create --name ws-etl --database-ids 1,2 --json",
-		"mb workspace create --name transform-work --database-ids 1 --spawn"
-	],
-	async run({ args, ctx, getClient, getResolvedConfig }) {
-		const databaseIds = parseIdCsv(args["database-ids"], "database id");
-		if (args.spawn) assertNoApiKeyEnvShadow();
-		const resolved = await getResolvedConfig();
-		await enforceCredentialSweep({
-			url: resolved.url,
-			profile: resolved.profile,
-			keepExistingAuth: args.keepExistingAuth === true,
-			action: "create a workspace"
-		});
-		const client = await getClient();
-		const created = await client.requestParsed(SpawnedWorkspace, "/api/ee/workspace-manager/", {
-			method: "POST",
-			body: {
-				name: args.name,
-				database_ids: databaseIds,
-				spawn_instance: args.spawn ? true : void 0
-			}
-		});
-		if (args.spawn) await saveSpawnedCredential(created);
-		const workspace = { ...created };
-		delete workspace.api_key;
-		renderSummary(workspace, workspaceView, `Created workspace ${created.id} "${created.name}".`, ctx);
-	}
-});
-function assertNoApiKeyEnvShadow() {
-	if (readEnvCredentials().apiKey !== null) throw new ConfigError(`--spawn saves the workspace credential as the default profile, but ${ENV_API_KEY} is set and would shadow it — unset ${ENV_API_KEY} first`);
-}
-async function saveSpawnedCredential(created) {
-	if (created.url === void 0 || created.api_key === void 0) throw new Error("the server did not return a spawned instance (no url/api_key in the create response) — this Metabase may not support spawn_instance");
-	const profileName = workspaceProfileName(created.id);
-	const location = await writeProfile({
-		url: normalizeUrl(created.url),
-		apiKey: created.api_key
-	}, profileName);
-	if (location.backend === "file") warn(keyringFallbackWarning(location));
-	await setDefaultProfile(profileName);
-	warn(`saved workspace credential to profile "${profileName}" and made it the default — bare \`mb\` now targets ${created.url}`);
-}
-
-//#endregion
-export { create_default as default };

package/dist/destroy-B51EPvOJ.mjs

@@ -1,168 +0,0 @@
-import { ConfigError, connectionFlags, errorMessage, outputFlags, profileFlag, renderSummary, warn } from "./capabilities-CiaAfUgX.mjs";
-import "./command-augment-D9pI9Vbh.mjs";
-import { clearProfile, createClient, defineMetabaseCommand, readProfileCredential } from "./runtime-C6ASrgVA.mjs";
-import { promptConfirm } from "./prompt-jQnNKtlx.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { DEFAULT_INTERVAL_MS, DEFAULT_TIMEOUT_MS } from "./poll-CuTlWBwI.mjs";
-import "./wait-flags-BpzyrpAL.mjs";
-import { REMOTE_SYNC_PATHS, pollSyncTask, throwIfFailedTask } from "./poll-task-DhsYs8Hx.mjs";
-import { SyncExportKickoff } from "./export-CippuWZJ.mjs";
-import { IsDirtyResult } from "./is-dirty-BPluqPPP.mjs";
-import { workspaceProfileName } from "./profile-name-CZ1-Vtrh.mjs";
-import { z } from "zod";
-
-//#region src/commands/workspace/destroy.ts
-const WorkspaceOrphanedResource = z.object({
-	workspace_database_id: z.number().int(),
-	database_id: z.number().int(),
-	driver: z.string(),
-	schema: z.string(),
-	user: z.string(),
-	reason: z.string().nullable().optional()
-}).loose();
-const WorkspaceDeleteResponse = z.object({
-	id: z.number().int(),
-	deleted: z.boolean(),
-	message: z.string().optional(),
-	orphaned_resources: z.array(WorkspaceOrphanedResource).optional()
-}).loose();
-const WorkspaceDestroyResult = WorkspaceDeleteResponse.extend({ aborted: z.boolean() });
-const workspaceDestroyView = {
-	compactPick: WorkspaceDestroyResult,
-	tableColumns: [
-		{
-			key: "id",
-			label: "ID"
-		},
-		{
-			key: "deleted",
-			label: "Destroyed"
-		},
-		{
-			key: "aborted",
-			label: "Aborted"
-		},
-		{
-			key: "message",
-			label: "Message"
-		}
-	]
-};
-var destroy_default = defineMetabaseCommand({
-	meta: {
-		name: "destroy",
-		description: "Destroy a workspace and its warehouse isolation"
-	},
-	details: "Destroy is the only irreversible moment, so it closes the work-loss window first: when a local profile named ws-<id> exists, the child is checked for unsynced work and a dirty workspace is auto-exported to its target branch before anything is torn down (--discard skips the check and the export). Then each provisioned database's warehouse isolation (temporary schema + user) is dropped and the workspace removed; the matching local profile is dropped on success. Refuses with a 409 while any database is still provisioning/deprovisioning unless --ignore-pending is passed, which removes the workspace records and leaves those warehouse objects behind. If the warehouse was unreachable, the result lists the leftover schema/user objects under orphaned_resources.",
-	capabilities: {
-		minVersion: 62,
-		tokenFeature: "workspaces"
-	},
-	args: {
-		...outputFlags,
-		...profileFlag,
-		...connectionFlags,
-		yes: {
-			type: "boolean",
-			description: "Skip confirmation",
-			default: false
-		},
-		discard: {
-			type: "boolean",
-			description: "Destroy without exporting unsynced work (skips the is-dirty check)",
-			default: false
-		},
-		"ignore-pending": {
-			type: "boolean",
-			description: "Remove workspace records even while databases are provisioning/deprovisioning",
-			default: false
-		},
-		id: {
-			type: "positional",
-			description: "Workspace id",
-			required: true
-		}
-	},
-	outputSchema: WorkspaceDestroyResult,
-	examples: [
-		"mb workspace destroy 1 --yes",
-		"mb workspace destroy 1 --yes --discard",
-		"mb workspace destroy 1 --yes --ignore-pending"
-	],
-	async run({ args, ctx, getClient }) {
-		const id = parseId(args.id);
-		if (!args.yes) {
-			if (process.stdin.isTTY !== true) throw new ConfigError(`refusing to destroy workspace ${id} without confirmation — pass --yes to proceed non-interactively`);
-			const ok = await promptConfirm({
-				message: `Destroy workspace ${id}? Its warehouse isolation (schema + user) is dropped.`,
-				initialValue: false
-			});
-			if (!ok) {
-				renderSummary({
-					id,
-					deleted: false,
-					aborted: true
-				}, workspaceDestroyView, `Aborted; workspace ${id} was not destroyed.`, ctx);
-				return;
-			}
-		}
-		const client = await getClient();
-		const profileName = workspaceProfileName(id);
-		const hasProfile = await guardUnsyncedWork(profileName, args.discard);
-		const response = await client.requestParsed(WorkspaceDeleteResponse, `/api/ee/workspace-manager/${id}`, {
-			method: "DELETE",
-			query: { "ignore-pending": args["ignore-pending"] ? true : void 0 }
-		});
-		if (response.deleted && hasProfile) {
-			await clearProfile(profileName);
-			warn(`dropped profile "${profileName}"`);
-		}
-		renderSummary({
-			...response,
-			aborted: false
-		}, workspaceDestroyView, response.message ?? `Destroyed workspace ${id}.`, ctx);
-	}
-});
-async function guardUnsyncedWork(profileName, discard) {
-	const resolved = await readProfileCredential(profileName);
-	if (resolved === null) {
-		warn(`no local profile "${profileName}" for this workspace — skipping the unsynced-work check`);
-		return false;
-	}
-	if (discard) {
-		warn("--discard given — skipping the unsynced-work check");
-		return true;
-	}
-	const child = createClient({
-		url: resolved.url,
-		credential: resolved.credential
-	});
-	const dirty = await checkIsDirty(child, profileName);
-	if (!dirty) return true;
-	warn("workspace has unsynced work — exporting to the target branch before destroy");
-	await exportUnsyncedWork(child);
-	return true;
-}
-async function checkIsDirty(child, profileName) {
-	try {
-		const result = await child.requestParsed(IsDirtyResult, REMOTE_SYNC_PATHS.isDirty);
-		return result.is_dirty;
-	} catch (error) {
-		throw new ConfigError(`could not check workspace profile "${profileName}" for unsynced work: ${errorMessage(error)} — pass --discard to destroy anyway`);
-	}
-}
-async function exportUnsyncedWork(child) {
-	const kickoff = await child.requestParsed(SyncExportKickoff, REMOTE_SYNC_PATHS.export, {
-		method: "POST",
-		body: {}
-	});
-	const final = await pollSyncTask(child, {
-		intervalMs: DEFAULT_INTERVAL_MS,
-		timeoutMs: DEFAULT_TIMEOUT_MS
-	});
-	throwIfFailedTask(final, "export");
-	warn(`export task #${kickoff.task_id} completed; unsynced work is saved`);
-}
-
-//#endregion
-export { destroy_default as default };

package/dist/export-Cy2DFtR2.mjs

@@ -1,10 +0,0 @@
-import "./capabilities-CiaAfUgX.mjs";
-import "./command-augment-D9pI9Vbh.mjs";
-import "./runtime-C6ASrgVA.mjs";
-import "./parse-id-xS1tWJAq.mjs";
-import "./poll-CuTlWBwI.mjs";
-import "./wait-flags-BpzyrpAL.mjs";
-import "./poll-task-DhsYs8Hx.mjs";
-import { SyncExportKickoff, SyncExportResult, export_default } from "./export-CippuWZJ.mjs";
-
-export { export_default as default };

package/dist/get-BdNC8WM8.mjs

@@ -1,38 +0,0 @@
-import { connectionFlags, outputFlags, profileFlag, renderItem } from "./capabilities-CiaAfUgX.mjs";
-import "./command-augment-D9pI9Vbh.mjs";
-import { defineMetabaseCommand } from "./runtime-C6ASrgVA.mjs";
-import { parseId } from "./parse-id-xS1tWJAq.mjs";
-import { Workspace, workspaceView } from "./workspace-BgH_4xFO.mjs";
-
-//#region src/commands/workspace/get.ts
-var get_default = defineMetabaseCommand({
-	meta: {
-		name: "get",
-		description: "Get a workspace by id"
-	},
-	capabilities: {
-		minVersion: 62,
-		tokenFeature: "workspaces"
-	},
-	args: {
-		...outputFlags,
-		...profileFlag,
-		...connectionFlags,
-		id: {
-			type: "positional",
-			description: "Workspace id",
-			required: true
-		}
-	},
-	outputSchema: Workspace,
-	examples: ["mb workspace get 1", "mb workspace get 1 --json"],
-	async run({ args, ctx, getClient }) {
-		const id = parseId(args.id);
-		const client = await getClient();
-		const workspace = await client.requestParsed(Workspace, `/api/ee/workspace-manager/${id}`);
-		renderItem(workspace, workspaceView, ctx);
-	}
-});
-
-//#endregion
-export { get_default as default };