@mtndev/cli 0.0.0-dev-20260626045221 → 0.0.0-dev-20260914234436

package/esm/commands/aws/iam/setup-acl/utils.js

@@ -0,0 +1,20 @@
+import {
+  ACL_GROUPS,
+  CUSTOM_POLICIES,
+  attach,
+  detach,
+  ensureGroup,
+  printFinalState,
+  publishPolicy
+} from "../../../../__chunks/XOUWDB3T.js";
+import "../../../../__chunks/FNXUONAV.js";
+import "../../../../__chunks/ZO55YUSY.js";
+export {
+  ACL_GROUPS,
+  CUSTOM_POLICIES,
+  attach,
+  detach,
+  ensureGroup,
+  printFinalState,
+  publishPolicy
+};

package/esm/commands/aws/iam/users/handler.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `aws iam users` handler: interactively create IAM users and assign ACL groups.
+ * @param {unknown} options
+ */
+export function usersCommand(options: unknown): Promise<void>;

package/esm/commands/aws/iam/users/handler.js

@@ -0,0 +1,12 @@
+import {
+  usersCommand
+} from "../../../../__chunks/JZPBBBIG.js";
+import "../../../../__chunks/XXK32TIM.js";
+import "../../../../__chunks/3QLI5BDL.js";
+import "../../../../__chunks/FNXUONAV.js";
+import "../../../../__chunks/5GIUAFXL.js";
+import "../../../../__chunks/73BJG53F.js";
+import "../../../../__chunks/ZHKVJO2U.js";
+export {
+  usersCommand
+};

package/esm/commands/aws/iam/users/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./handler.js";
+export * from "./schema.js";
+export * from "./utils.js";

package/esm/commands/aws/iam/users/index.js

@@ -0,0 +1,41 @@
+import "../../../../__chunks/CVQVHLW5.js";
+import {
+  usersCommand
+} from "../../../../__chunks/JZPBBBIG.js";
+import {
+  usersOptionsSchema
+} from "../../../../__chunks/XXK32TIM.js";
+import {
+  buildUsername,
+  createCliAccessKey,
+  createUsersInteractive,
+  ensureAclGroupsExist,
+  ensureUser,
+  ensureUserInGroup,
+  inferAccountName,
+  isValidSlug,
+  normalizeIdentifier,
+  normalizeSlug,
+  parseMdUsername,
+  roleToGroup
+} from "../../../../__chunks/3QLI5BDL.js";
+import "../../../../__chunks/FNXUONAV.js";
+import "../../../../__chunks/5GIUAFXL.js";
+import "../../../../__chunks/73BJG53F.js";
+import "../../../../__chunks/ZHKVJO2U.js";
+export {
+  buildUsername,
+  createCliAccessKey,
+  createUsersInteractive,
+  ensureAclGroupsExist,
+  ensureUser,
+  ensureUserInGroup,
+  inferAccountName,
+  isValidSlug,
+  normalizeIdentifier,
+  normalizeSlug,
+  parseMdUsername,
+  roleToGroup,
+  usersCommand,
+  usersOptionsSchema
+};

package/esm/commands/aws/iam/users/schema.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Zod schema for `aws iam users` options.
+ */
+export const usersOptionsSchema: z.ZodObject<{
+    accountName: z.ZodOptional<z.ZodString>;
+    profile: z.ZodOptional<z.ZodString>;
+    verbose: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    verbose: boolean;
+    profile?: string | undefined;
+    accountName?: string | undefined;
+}, {
+    profile?: string | undefined;
+    verbose?: boolean | undefined;
+    accountName?: string | undefined;
+}>;
+export type UsersOptions = z.infer<typeof usersOptionsSchema>;
+import { z } from "zod";

package/esm/commands/aws/iam/users/schema.js

@@ -0,0 +1,7 @@
+import {
+  usersOptionsSchema
+} from "../../../../__chunks/XXK32TIM.js";
+import "../../../../__chunks/73BJG53F.js";
+export {
+  usersOptionsSchema
+};

package/esm/commands/aws/iam/users/utils.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Map a user role to its ACL group.
+ * @param {string} role
+ * @returns {string}
+ */
+export function roleToGroup(role: string): string;
+/**
+ * Lowercase and hyphenate a raw value into a slug.
+ * @param {string} value
+ * @returns {string}
+ */
+export function normalizeSlug(value: string): string;
+/**
+ * @param {string} value
+ * @returns {boolean}
+ */
+export function isValidSlug(value: string): boolean;
+/**
+ * Build the canonical IAM username.
+ * @param {{ identifier: string; accountName: string; role: string }} params
+ * @returns {string}
+ */
+export function buildUsername(params: {
+    identifier: string;
+    accountName: string;
+    role: string;
+}): string;
+/**
+ * Strip md- prefix, role suffix, and account suffix from a raw identifier.
+ * @param {{ raw: string; accountName: string; role: string }} params
+ * @returns {string}
+ */
+export function normalizeIdentifier(params: {
+    raw: string;
+    accountName: string;
+    role: string;
+}): string;
+/**
+ * Parse an md-{identifier}-{account}-{role} username into parts.
+ * Identifier is the first segment; account is everything between it and the role
+ * (so multi-segment account slugs still work).
+ * @param {string} name - Profile name or IAM user name
+ * @returns {{ identifier: string; accountName: string; role: string } | null}
+ */
+export function parseMdUsername(name: string): {
+    identifier: string;
+    accountName: string;
+    role: string;
+} | null;
+/**
+ * Infer the AWS account slug from the caller IAM user / profile name.
+ * Prefers the ARN username, then the profile string.
+ * @param {{
+ *   profile?: string;
+ *   identity?: { Arn?: string };
+ * }} params
+ * @returns {string | null}
+ */
+export function inferAccountName(params: {
+    profile?: string;
+    identity?: {
+        Arn?: string;
+    };
+}): string | null;
+/**
+ * Create the IAM user if it does not exist.
+ * @param {{ username: string; profile?: string; verbose?: boolean }} params
+ */
+export function ensureUser(params: {
+    username: string;
+    profile?: string;
+    verbose?: boolean;
+}): void;
+/**
+ * Add the user to the group if not already a member.
+ * @param {{ username: string; group: string; profile?: string; verbose?: boolean }} params
+ */
+export function ensureUserInGroup(params: {
+    username: string;
+    group: string;
+    profile?: string;
+    verbose?: boolean;
+}): void;
+/**
+ * Create a CLI access key for the user and print a one-line setup command.
+ * @param {{ username: string; profile?: string; verbose?: boolean }} params
+ * @returns {boolean} False when the user already has the maximum number of keys
+ */
+export function createCliAccessKey(params: {
+    username: string;
+    profile?: string;
+    verbose?: boolean;
+}): boolean;
+/**
+ * Verify the required ACL groups exist before creating users.
+ * @param {{ profile?: string; verbose?: boolean }} params
+ * @returns {boolean}
+ */
+export function ensureAclGroupsExist(params: {
+    profile?: string;
+    verbose?: boolean;
+}): boolean;
+/**
+ * Interactively create IAM users, assign ACL groups, and print CLI credentials.
+ * @param {{
+ *   accountName?: string;
+ *   profile?: string;
+ *   identity?: { Arn?: string };
+ *   verbose?: boolean;
+ * }} params
+ */
+export function createUsersInteractive(params: {
+    accountName?: string;
+    profile?: string;
+    identity?: {
+        Arn?: string;
+    };
+    verbose?: boolean;
+}): Promise<void>;

package/esm/commands/aws/iam/users/utils.js

@@ -0,0 +1,30 @@
+import {
+  buildUsername,
+  createCliAccessKey,
+  createUsersInteractive,
+  ensureAclGroupsExist,
+  ensureUser,
+  ensureUserInGroup,
+  inferAccountName,
+  isValidSlug,
+  normalizeIdentifier,
+  normalizeSlug,
+  parseMdUsername,
+  roleToGroup
+} from "../../../../__chunks/3QLI5BDL.js";
+import "../../../../__chunks/FNXUONAV.js";
+import "../../../../__chunks/ZHKVJO2U.js";
+export {
+  buildUsername,
+  createCliAccessKey,
+  createUsersInteractive,
+  ensureAclGroupsExist,
+  ensureUser,
+  ensureUserInGroup,
+  inferAccountName,
+  isValidSlug,
+  normalizeIdentifier,
+  normalizeSlug,
+  parseMdUsername,
+  roleToGroup
+};

package/esm/commands/aws/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Register the `aws` command group and its subcommands on the root program.
+ * @param {import('commander').Command} program
+ */
+export function registerAwsCommands(program: import("commander").Command): void;
+export * from "./ec2/allow-ip/index.js";
+export * from "./iam/break-glass/index.js";
+export * from "./iam/check-admin/index.js";
+export * from "./iam/remove-admin/index.js";
+export * from "./iam/setup-acl/index.js";
+export * from "./iam/users/index.js";
+export * from "./route53/add-record/index.js";
+export * from "./route53/remove-record/index.js";
+export * from "./ses/send-email/index.js";

package/esm/commands/aws/index.js

@@ -0,0 +1,229 @@
+import {
+  registerAwsCommands
+} from "../../__chunks/QSE66AKY.js";
+import "../../__chunks/AEDEAYF5.js";
+import {
+  allowIpCommand
+} from "../../__chunks/PNPPDYKC.js";
+import {
+  authorizeRule,
+  describeSecurityGroups,
+  extractRoamingFirstName,
+  getCurrentPublicIp,
+  getSecurityGroupDetails,
+  instanceLabel,
+  listEnabledRegions,
+  listInstances,
+  listSshIngressRules,
+  printSshRules,
+  resolveRoamingRule,
+  revokeRule,
+  roamingRuleDescription,
+  ruleAlreadyAllowsIp,
+  securityGroupLabel,
+  sshRuleLabel
+} from "../../__chunks/U7HAE2RF.js";
+import {
+  DEFAULT_REGION,
+  DEFAULT_ROAMING_NAME,
+  SSH_PORT,
+  allowIpOptionsSchema
+} from "../../__chunks/J34UVKLA.js";
+import "../../__chunks/5ZBVGSOK.js";
+import {
+  checkAdminCommand
+} from "../../__chunks/S7IJPJ4R.js";
+import {
+  checkAdminOptionsSchema
+} from "../../__chunks/QUF7PS4R.js";
+import "../../__chunks/TIOVE6HR.js";
+import {
+  breakGlassCommand
+} from "../../__chunks/VKAKISRG.js";
+import {
+  breakGlassOptionsSchema
+} from "../../__chunks/EMSH4P76.js";
+import "../../__chunks/D62SPZXC.js";
+import {
+  removeAdminCommand
+} from "../../__chunks/FFKFVMIE.js";
+import {
+  removeAdminOptionsSchema
+} from "../../__chunks/DNFTUMGD.js";
+import {
+  ADMIN_GROUP_NAME
+} from "../../__chunks/NF3M2L6C.js";
+import "../../__chunks/CVQVHLW5.js";
+import {
+  usersCommand
+} from "../../__chunks/JZPBBBIG.js";
+import {
+  usersOptionsSchema
+} from "../../__chunks/XXK32TIM.js";
+import "../../__chunks/WOZFZKFY.js";
+import {
+  setupAclCommand
+} from "../../__chunks/DMYFNF54.js";
+import {
+  ACL_GROUPS,
+  CUSTOM_POLICIES,
+  attach,
+  detach,
+  ensureGroup,
+  printFinalState,
+  publishPolicy
+} from "../../__chunks/XOUWDB3T.js";
+import {
+  buildUsername,
+  createCliAccessKey,
+  createUsersInteractive,
+  ensureAclGroupsExist,
+  ensureUser,
+  ensureUserInGroup,
+  inferAccountName,
+  isValidSlug,
+  normalizeIdentifier,
+  normalizeSlug,
+  parseMdUsername,
+  roleToGroup
+} from "../../__chunks/3QLI5BDL.js";
+import {
+  setupAclOptionsSchema
+} from "../../__chunks/XQN2TA4S.js";
+import "../../__chunks/7VF4Q43Q.js";
+import {
+  removeRecordCommand
+} from "../../__chunks/QKDDLIWD.js";
+import {
+  removeRecordOptionsSchema
+} from "../../__chunks/IZFGBYGE.js";
+import "../../__chunks/XI7GZDE2.js";
+import {
+  addRecordCommand,
+  resolveHostedZone,
+  resolveName,
+  resolveRecordType
+} from "../../__chunks/G4NJHFFU.js";
+import {
+  bareHostedZoneId,
+  deleteResourceRecordSet,
+  findCnameConflicts,
+  findHostedZone,
+  formatValues,
+  getRecordSetsAtName,
+  getResourceRecordSet,
+  hostedZoneLabel,
+  listHostedZones,
+  normalizeRecordValue,
+  planRecordChange,
+  resolveRecordName,
+  upsertResourceRecordSet,
+  withTrailingDot,
+  withoutTrailingDot
+} from "../../__chunks/33UYMUQD.js";
+import {
+  DEFAULT_TTL,
+  RECORD_TYPES,
+  addRecordOptionsSchema
+} from "../../__chunks/IEOGAQYI.js";
+import "../../__chunks/FNXUONAV.js";
+import "../../__chunks/ZO55YUSY.js";
+import "../../__chunks/TXKMEIDQ.js";
+import {
+  sendEmailCommand
+} from "../../__chunks/2FTTEFEK.js";
+import {
+  defaultBody,
+  sendViaApi,
+  sendViaSmtp
+} from "../../__chunks/UXWY7BYE.js";
+import "../../__chunks/B2DVQ2UL.js";
+import "../../__chunks/5GIUAFXL.js";
+import {
+  sendEmailOptionsSchema
+} from "../../__chunks/3BKWTHLJ.js";
+import "../../__chunks/73BJG53F.js";
+import "../../__chunks/ZHKVJO2U.js";
+export {
+  ACL_GROUPS,
+  ADMIN_GROUP_NAME,
+  CUSTOM_POLICIES,
+  DEFAULT_REGION,
+  DEFAULT_ROAMING_NAME,
+  DEFAULT_TTL,
+  RECORD_TYPES,
+  SSH_PORT,
+  addRecordCommand,
+  addRecordOptionsSchema,
+  allowIpCommand,
+  allowIpOptionsSchema,
+  attach,
+  authorizeRule,
+  bareHostedZoneId,
+  breakGlassCommand,
+  breakGlassOptionsSchema,
+  buildUsername,
+  checkAdminCommand,
+  checkAdminOptionsSchema,
+  createCliAccessKey,
+  createUsersInteractive,
+  defaultBody,
+  deleteResourceRecordSet,
+  describeSecurityGroups,
+  detach,
+  ensureAclGroupsExist,
+  ensureGroup,
+  ensureUser,
+  ensureUserInGroup,
+  extractRoamingFirstName,
+  findCnameConflicts,
+  findHostedZone,
+  formatValues,
+  getCurrentPublicIp,
+  getRecordSetsAtName,
+  getResourceRecordSet,
+  getSecurityGroupDetails,
+  hostedZoneLabel,
+  inferAccountName,
+  instanceLabel,
+  isValidSlug,
+  listEnabledRegions,
+  listHostedZones,
+  listInstances,
+  listSshIngressRules,
+  normalizeIdentifier,
+  normalizeRecordValue,
+  normalizeSlug,
+  parseMdUsername,
+  planRecordChange,
+  printFinalState,
+  printSshRules,
+  publishPolicy,
+  registerAwsCommands,
+  removeAdminCommand,
+  removeAdminOptionsSchema,
+  removeRecordCommand,
+  removeRecordOptionsSchema,
+  resolveHostedZone,
+  resolveName,
+  resolveRecordName,
+  resolveRecordType,
+  resolveRoamingRule,
+  revokeRule,
+  roamingRuleDescription,
+  roleToGroup,
+  ruleAlreadyAllowsIp,
+  securityGroupLabel,
+  sendEmailCommand,
+  sendEmailOptionsSchema,
+  sendViaApi,
+  sendViaSmtp,
+  setupAclCommand,
+  setupAclOptionsSchema,
+  sshRuleLabel,
+  upsertResourceRecordSet,
+  usersCommand,
+  usersOptionsSchema,
+  withTrailingDot,
+  withoutTrailingDot
+};

package/esm/commands/aws/route53/add-record/handler.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Resolve the hosted zone: from --zone, or interactive picker.
+ * @param {{
+ *   profile?: string;
+ *   zoneOption?: string;
+ *   verbose: boolean;
+ * }} params
+ * @returns {Promise<import("./utils.js").HostedZone>}
+ */
+export function resolveHostedZone(params: {
+    profile?: string;
+    zoneOption?: string;
+    verbose: boolean;
+}): Promise<import("./utils.js").HostedZone>;
+/**
+ * Resolve record type from --type or interactive picker.
+ * @param {string | undefined} typeOption
+ * @returns {Promise<string>}
+ */
+export function resolveRecordType(typeOption: string | undefined): Promise<string>;
+/**
+ * Resolve record name from --name or prompt.
+ * @param {{ nameOption?: string; zoneName: string }} params
+ * @returns {Promise<string>} FQDN with trailing dot
+ */
+export function resolveName(params: {
+    nameOption?: string;
+    zoneName: string;
+}): Promise<string>;
+/**
+ * `aws route53 add-record` handler: interactively (or via flags) create or
+ * update a Route53 resource record set, showing whether the change adds or
+ * overwrites.
+ * @param {unknown} options
+ */
+export function addRecordCommand(options: unknown): Promise<void>;

package/esm/commands/aws/route53/add-record/handler.js

@@ -0,0 +1,18 @@
+import {
+  addRecordCommand,
+  resolveHostedZone,
+  resolveName,
+  resolveRecordType
+} from "../../../../__chunks/G4NJHFFU.js";
+import "../../../../__chunks/33UYMUQD.js";
+import "../../../../__chunks/IEOGAQYI.js";
+import "../../../../__chunks/FNXUONAV.js";
+import "../../../../__chunks/5GIUAFXL.js";
+import "../../../../__chunks/73BJG53F.js";
+import "../../../../__chunks/ZHKVJO2U.js";
+export {
+  addRecordCommand,
+  resolveHostedZone,
+  resolveName,
+  resolveRecordType
+};

package/esm/commands/aws/route53/add-record/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./handler.js";
+export * from "./schema.js";
+export * from "./utils.js";

package/esm/commands/aws/route53/add-record/index.js

@@ -0,0 +1,57 @@
+import "../../../../__chunks/XI7GZDE2.js";
+import {
+  addRecordCommand,
+  resolveHostedZone,
+  resolveName,
+  resolveRecordType
+} from "../../../../__chunks/G4NJHFFU.js";
+import {
+  bareHostedZoneId,
+  deleteResourceRecordSet,
+  findCnameConflicts,
+  findHostedZone,
+  formatValues,
+  getRecordSetsAtName,
+  getResourceRecordSet,
+  hostedZoneLabel,
+  listHostedZones,
+  normalizeRecordValue,
+  planRecordChange,
+  resolveRecordName,
+  upsertResourceRecordSet,
+  withTrailingDot,
+  withoutTrailingDot
+} from "../../../../__chunks/33UYMUQD.js";
+import {
+  DEFAULT_TTL,
+  RECORD_TYPES,
+  addRecordOptionsSchema
+} from "../../../../__chunks/IEOGAQYI.js";
+import "../../../../__chunks/FNXUONAV.js";
+import "../../../../__chunks/5GIUAFXL.js";
+import "../../../../__chunks/73BJG53F.js";
+import "../../../../__chunks/ZHKVJO2U.js";
+export {
+  DEFAULT_TTL,
+  RECORD_TYPES,
+  addRecordCommand,
+  addRecordOptionsSchema,
+  bareHostedZoneId,
+  deleteResourceRecordSet,
+  findCnameConflicts,
+  findHostedZone,
+  formatValues,
+  getRecordSetsAtName,
+  getResourceRecordSet,
+  hostedZoneLabel,
+  listHostedZones,
+  normalizeRecordValue,
+  planRecordChange,
+  resolveHostedZone,
+  resolveName,
+  resolveRecordName,
+  resolveRecordType,
+  upsertResourceRecordSet,
+  withTrailingDot,
+  withoutTrailingDot
+};

package/esm/commands/aws/route53/add-record/schema.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Common Route53 record types offered in the interactive picker.
+ * Alias records are not supported by this command.
+ */
+export const RECORD_TYPES: string[];
+/**
+ * Default TTL (seconds) when creating or replacing a record set.
+ */
+export const DEFAULT_TTL: 300;
+/**
+ * Zod schema for `aws route53 add-record` options.
+ */
+export const addRecordOptionsSchema: z.ZodObject<{
+    profile: z.ZodOptional<z.ZodString>;
+    zone: z.ZodOptional<z.ZodString>;
+    type: z.ZodEffects<z.ZodEffects<z.ZodOptional<z.ZodString>, string | undefined, string | undefined>, string | undefined, string | undefined>;
+    name: z.ZodOptional<z.ZodString>;
+    value: z.ZodOptional<z.ZodString>;
+    ttl: z.ZodOptional<z.ZodNumber>;
+    yes: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    dryRun: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    verbose: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    verbose: boolean;
+    yes: boolean;
+    dryRun: boolean;
+    profile?: string | undefined;
+    value?: string | undefined;
+    type?: string | undefined;
+    name?: string | undefined;
+    zone?: string | undefined;
+    ttl?: number | undefined;
+}, {
+    profile?: string | undefined;
+    verbose?: boolean | undefined;
+    yes?: boolean | undefined;
+    value?: string | undefined;
+    type?: string | undefined;
+    dryRun?: boolean | undefined;
+    name?: string | undefined;
+    zone?: string | undefined;
+    ttl?: number | undefined;
+}>;
+export type AddRecordOptions = z.infer<typeof addRecordOptionsSchema>;
+import { z } from "zod";

package/esm/commands/aws/route53/add-record/schema.js

@@ -0,0 +1,11 @@
+import {
+  DEFAULT_TTL,
+  RECORD_TYPES,
+  addRecordOptionsSchema
+} from "../../../../__chunks/IEOGAQYI.js";
+import "../../../../__chunks/73BJG53F.js";
+export {
+  DEFAULT_TTL,
+  RECORD_TYPES,
+  addRecordOptionsSchema
+};