@mtndev/cli 0.0.0-dev-20260626045346 → 0.0.0-dev-20260914234436

package/cjs/__chunks/N5MXFOQZ.cjs

@@ -0,0 +1,167 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+var _S3LVCWPNcjs = require('./S3LVCWPN.cjs');
+
+
+
+
+var _T2A7TN4Fcjs = require('./T2A7TN4F.cjs');
+
+
+var _R3GUC7O7cjs = require('./R3GUC7O7.cjs');
+
+
+var _CMUD7LLNcjs = require('./CMUD7LLN.cjs');
+
+// src/commands/aws/iam/remove-admin/handler.js
+var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
+var _zod = require('zod');
+async function removeAdminCommand(options) {
+  try {
+    const { profile, all, user, yes, dryRun, verbose } = _S3LVCWPNcjs.removeAdminOptionsSchema.parse(options);
+    _R3GUC7O7cjs.requireCommands.call(void 0, ["aws"]);
+    const userFilter = new Set(user);
+    const needsVault = all || !(_nullishCoalesce(profile, () => ( process.env.AWS_PROFILE)));
+    if (needsVault) {
+      _R3GUC7O7cjs.requireCommands.call(void 0, ["aws-vault"]);
+    }
+    let profiles;
+    try {
+      profiles = _T2A7TN4Fcjs.resolveAdminScanProfiles.call(void 0, { profile, all });
+    } catch (resolveError) {
+      if (resolveError instanceof Error && resolveError.message === "No aws-vault profiles with credentials found.") {
+        console.error(_chalk2.default.red(resolveError.message));
+        process.exit(1);
+      }
+      throw resolveError;
+    }
+    console.log(
+      _chalk2.default.blue(
+        `
+==> Removing break-glass access (${_T2A7TN4Fcjs.ADMIN_GROUP_NAME}) across ${profiles.length} profile(s)
+`
+      )
+    );
+    if (dryRun) {
+      console.log(_chalk2.default.yellow("[dry-run] No changes will be made.\n"));
+    }
+    let removed = 0;
+    let cleaned = 0;
+    let skipped = 0;
+    for (const candidate of profiles) {
+      const scan = _T2A7TN4Fcjs.resolveProfileScan.call(void 0, { profile: candidate, verbose });
+      if (!scan) {
+        skipped += 1;
+        continue;
+      }
+      if (scan.users.length === 0) {
+        if (verbose) {
+          console.log(
+            _chalk2.default.green(`OK     ${candidate} (${scan.accountId}) \u2014 0 users`)
+          );
+        }
+        cleaned += 1;
+        continue;
+      }
+      const targets = userFilter.size > 0 ? scan.users.filter((name) => userFilter.has(name)) : scan.users;
+      if (targets.length === 0) {
+        console.log(
+          _chalk2.default.dim(
+            `--     ${candidate} (${scan.accountId}) \u2014 has users but none match --user`
+          )
+        );
+        skipped += 1;
+        continue;
+      }
+      console.log(
+        _chalk2.default.red(
+          `FOUND  ${candidate} (${scan.accountId}) \u2014 ${targets.length} user(s): ${targets.join(", ")}`
+        )
+      );
+      if (dryRun) {
+        for (const name of targets) {
+          console.log(
+            _chalk2.default.yellow(
+              `  [dry-run] would remove ${name} from ${_T2A7TN4Fcjs.ADMIN_GROUP_NAME}`
+            )
+          );
+        }
+        continue;
+      }
+      let confirmed = yes;
+      if (!confirmed) {
+        confirmed = await _CMUD7LLNcjs.promptYesNo.call(void 0, {
+          message: `  Remove ${targets.length} user(s) from ${_T2A7TN4Fcjs.ADMIN_GROUP_NAME} in ${candidate}?`,
+          defaultYes: false
+        });
+      }
+      if (!confirmed) {
+        console.log(_chalk2.default.dim("  skipped (not confirmed)"));
+        skipped += 1;
+        continue;
+      }
+      for (const name of targets) {
+        try {
+          scan.run(
+            [
+              "iam",
+              "remove-user-from-group",
+              "--group-name",
+              _T2A7TN4Fcjs.ADMIN_GROUP_NAME,
+              "--user-name",
+              name
+            ],
+            { expectJson: false }
+          );
+          console.log(_chalk2.default.green(`  removed ${name}`));
+          removed += 1;
+        } catch (removeError) {
+          const reason = removeError instanceof Error ? _nullishCoalesce(removeError.message.split("\n")[0], () => ( "")) : String(removeError);
+          console.log(_chalk2.default.red(`  failed to remove ${name}: ${reason}`));
+        }
+      }
+    }
+    console.log(_chalk2.default.blue("\n==> Summary"));
+    console.log(`  Profiles scanned:  ${profiles.length}`);
+    console.log(`  Users removed:     ${removed}`);
+    console.log(`  Already clean:     ${cleaned}`);
+    console.log(`  Skipped:           ${skipped}`);
+    if (dryRun) {
+      console.log(
+        _chalk2.default.yellow("\n[dry-run] Re-run without --dry-run to apply changes.")
+      );
+    }
+  } catch (error) {
+    if (error instanceof _zod.ZodError) {
+      console.error(_chalk2.default.red("\n\u274C Invalid command options:"));
+      error.errors.forEach((err) => {
+        console.error(_chalk2.default.red(`   ${err.path.join(".")}: ${err.message}`));
+      });
+      process.exit(1);
+    }
+    const verbose = (
+      /** @type {any} */
+      _optionalChain([options, 'optionalAccess', _ => _.verbose]) || false
+    );
+    console.error(_chalk2.default.red("\n\u274C remove-admin failed:"));
+    if (error instanceof Error) {
+      console.error(_chalk2.default.red(`   ${error.message}`));
+      if (verbose && error.stack) {
+        console.error(_chalk2.default.gray("\nStack trace:"));
+        console.error(_chalk2.default.gray(error.stack));
+      }
+    } else {
+      console.error(_chalk2.default.red(`   ${String(error)}`));
+    }
+    console.error(
+      _chalk2.default.yellow(
+        "\n\u{1F4A1} Requires the AWS CLI (and aws-vault when scanning multiple profiles) and iam:RemoveUserFromGroup.\n"
+      )
+    );
+    process.exit(1);
+  }
+}
+
+
+
+exports.removeAdminCommand = removeAdminCommand;

package/cjs/__chunks/N7D56LPP.cjs

@@ -0,0 +1,25 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+var _WOYF2L6Tcjs = require('./WOYF2L6T.cjs');
+
+// src/commands/aws/ses/send-email/schema.js
+var _zod = require('zod');
+var sendEmailOptionsSchema = _zod.z.object({
+  to: _zod.z.string({ required_error: "--to <address> is required" }).describe("Recipient email address"),
+  from: _zod.z.string({ required_error: "--from <address> is required" }).describe("Verified SES sender email address"),
+  subject: _zod.z.string().optional().default("MTN CLI test email").describe("Email subject line"),
+  body: _zod.z.string().optional().describe("Email body (defaults to a timestamp and random token)"),
+  transport: _zod.z.enum(["api", "smtp"]).optional().default("api").describe("Send via the SES API (default) or SES SMTP"),
+  region: _zod.z.string().optional().default("us-east-1").describe("AWS region for the SES endpoint"),
+  profile: _WOYF2L6Tcjs.profileField,
+  accessKeyId: _zod.z.string().optional().describe(
+    "IAM access key ID used as the SMTP username (smtp transport only)"
+  ),
+  dryRun: _zod.z.boolean().optional().default(false).describe("Print the email payload without sending"),
+  verbose: _WOYF2L6Tcjs.verboseField
+});
+
+
+
+exports.sendEmailOptionsSchema = sendEmailOptionsSchema;

package/cjs/__chunks/NFXQNOQH.cjs

@@ -0,0 +1,393 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+
+var _JB7T7PKQcjs = require('./JB7T7PKQ.cjs');
+
+
+
+
+var _CMUD7LLNcjs = require('./CMUD7LLN.cjs');
+
+// src/commands/doppler/set-secret.js
+var _child_process = require('child_process');
+var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
+function listProjects(params = {}) {
+  const { verbose = false, limit = 500 } = params;
+  const projects = [];
+  let page = 1;
+  while (projects.length < limit) {
+    const batch = _JB7T7PKQcjs.execDoppler.call(void 0, 
+      ["projects", "--json", "--page", String(page), "--number", "100"],
+      "json",
+      true,
+      verbose
+    );
+    if (!Array.isArray(batch) || batch.length === 0) {
+      break;
+    }
+    for (const raw of batch) {
+      projects.push({
+        id: String(_nullishCoalesce(_nullishCoalesce(raw.id, () => ( raw.name)), () => ( ""))),
+        name: String(_nullishCoalesce(_nullishCoalesce(raw.name, () => ( raw.id)), () => ( ""))),
+        description: raw.description ? String(raw.description) : ""
+      });
+    }
+    if (batch.length < 100) {
+      break;
+    }
+    page += 1;
+  }
+  return projects.filter((project) => project.name).sort((a, b) => a.name.localeCompare(b.name));
+}
+function listEnvironments(params) {
+  const { project, verbose = false } = params;
+  const data = _JB7T7PKQcjs.execDoppler.call(void 0, 
+    ["environments", "--json", "--project", project],
+    "json",
+    true,
+    verbose
+  );
+  if (!Array.isArray(data)) {
+    return [];
+  }
+  return data.map((raw) => ({
+    id: String(_nullishCoalesce(raw.id, () => ( ""))),
+    name: String(_nullishCoalesce(_nullishCoalesce(raw.name, () => ( raw.id)), () => ( "")))
+  })).filter((env) => env.id).sort((a, b) => a.id.localeCompare(b.id));
+}
+function listConfigs(params) {
+  const { project, environment, verbose = false } = params;
+  const args = ["configs", "--json", "--project", project];
+  if (environment) {
+    args.push("--environment", environment);
+  }
+  const data = _JB7T7PKQcjs.execDoppler.call(void 0, args, "json", true, verbose);
+  if (!Array.isArray(data)) {
+    return [];
+  }
+  return data.map((raw) => ({
+    name: String(_nullishCoalesce(raw.name, () => ( ""))),
+    environment: String(_nullishCoalesce(raw.environment, () => ( ""))),
+    root: Boolean(raw.root)
+  })).filter((config) => config.name).sort((a, b) => a.name.localeCompare(b.name));
+}
+function getSecret(params) {
+  const { project, config, name, verbose = false } = params;
+  try {
+    const data = _JB7T7PKQcjs.execDoppler.call(void 0, 
+      [
+        "secrets",
+        "get",
+        name,
+        "--project",
+        project,
+        "--config",
+        config,
+        "--plain",
+        "--raw"
+      ],
+      "string",
+      true,
+      verbose
+    );
+    if (typeof data !== "string") {
+      return null;
+    }
+    const value = data.replace(/\n$/, "");
+    return value.length > 0 ? value : "";
+  } catch (e) {
+    return null;
+  }
+}
+function setSecret(params) {
+  const { project, config, name, value, verbose = false } = params;
+  const args = [
+    "secrets",
+    "set",
+    name,
+    "--project",
+    project,
+    "--config",
+    config,
+    "--no-interactive"
+  ];
+  if (verbose) {
+    console.log(
+      _chalk2.default.gray(
+        `   Executing: doppler ${args.join(" ")}  <stdin value (${value.length} chars)>`
+      )
+    );
+  }
+  const result = _child_process.spawnSync.call(void 0, "doppler", args, {
+    encoding: "utf-8",
+    input: value
+  });
+  if (result.error) {
+    throw new Error(result.error.message);
+  }
+  if (result.status !== 0) {
+    const stderr = (result.stderr || result.stdout || "").trim();
+    throw new Error(stderr || `doppler secrets set failed for ${name}`);
+  }
+}
+async function resolveProject(params) {
+  const { projects, projectOption } = params;
+  if (projectOption) {
+    const match = projects.find(
+      (project) => project.name === projectOption || project.id === projectOption
+    );
+    if (!match) {
+      throw new Error(
+        `Project "${projectOption}" not found. Available examples: ${projects.slice(0, 8).map((project) => project.name).join(", ")}`
+      );
+    }
+    return match.name;
+  }
+  if (projects.length === 0) {
+    throw new Error("No Doppler projects found for this account.");
+  }
+  let candidates = projects;
+  if (projects.length > 30) {
+    const filter = await _CMUD7LLNcjs.prompt.call(void 0, 
+      `  Filter projects (${projects.length} total, Enter for all): `
+    );
+    if (filter) {
+      const lower = filter.toLowerCase();
+      candidates = projects.filter(
+        (project) => project.name.toLowerCase().includes(lower) || project.id.toLowerCase().includes(lower)
+      );
+      if (candidates.length === 0) {
+        throw new Error(`No projects matched "${filter}".`);
+      }
+    }
+  }
+  const maxShown = 50;
+  const shown = candidates.slice(0, maxShown);
+  if (candidates.length > maxShown) {
+    console.log(
+      _chalk2.default.yellow(
+        `  Showing first ${maxShown} of ${candidates.length} matches \u2014 refine with a filter next time.`
+      )
+    );
+  }
+  const index = await _CMUD7LLNcjs.promptChoice.call(void 0, {
+    message: "Choose a Doppler project:",
+    options: shown.map(
+      (project) => project.description ? `${project.name} \u2014 ${project.description}` : project.name
+    )
+  });
+  const chosen = shown[index];
+  if (!chosen) {
+    throw new Error("No project selected");
+  }
+  return chosen.name;
+}
+async function resolveEnvironment(params) {
+  const { environments, environmentOption } = params;
+  if (environmentOption) {
+    const normalized = environmentOption.trim().toLowerCase();
+    if (normalized === "all" || normalized === "*") {
+      return "all";
+    }
+    const match = environments.find(
+      (env) => env.id.toLowerCase() === normalized || env.name.toLowerCase() === normalized
+    );
+    if (!match) {
+      throw new Error(
+        `Environment "${environmentOption}" not found. Available: ${environments.map((env) => env.id).join(", ")}`
+      );
+    }
+    return match.id;
+  }
+  if (environments.length === 0) {
+    return "all";
+  }
+  const options = [
+    ...environments.map((env) => `${env.id} (${env.name})`),
+    "all environments"
+  ];
+  const index = await _CMUD7LLNcjs.promptChoice.call(void 0, {
+    message: "Choose an environment:",
+    options
+  });
+  if (index === options.length - 1) {
+    return "all";
+  }
+  const chosen = environments[index];
+  if (!chosen) {
+    throw new Error("No environment selected");
+  }
+  return chosen.id;
+}
+async function resolveConfigs(params) {
+  const { configs, configOption, environment } = params;
+  const scoped = environment === "all" ? configs : configs.filter((config) => config.environment === environment);
+  if (scoped.length === 0) {
+    throw new Error(
+      environment === "all" ? "No configs found in this project." : `No configs found for environment "${environment}".`
+    );
+  }
+  if (configOption) {
+    const normalized = configOption.trim().toLowerCase();
+    if (normalized === "all" || normalized === "*") {
+      return scoped.map((config) => config.name);
+    }
+    const requested = configOption.split(",").map((value) => value.trim());
+    const names = new Set(scoped.map((config) => config.name));
+    const missing = requested.filter((name) => !names.has(name));
+    if (missing.length > 0) {
+      throw new Error(
+        `Config(s) not found: ${missing.join(", ")}. Available: ${[
+          ...names
+        ].join(", ")}`
+      );
+    }
+    return requested;
+  }
+  if (scoped.length === 1) {
+    const only = scoped[0];
+    if (!only) {
+      throw new Error("No config selected");
+    }
+    console.log(`  Config: ${only.name}`);
+    return [only.name];
+  }
+  const options = [
+    ...scoped.map(
+      (config) => config.root ? `${config.name} (root, env: ${config.environment})` : `${config.name} (env: ${config.environment})`
+    ),
+    `all configs listed (${scoped.length})`
+  ];
+  const index = await _CMUD7LLNcjs.promptChoice.call(void 0, {
+    message: "Choose a config:",
+    options
+  });
+  if (index === options.length - 1) {
+    return scoped.map((config) => config.name);
+  }
+  const chosen = scoped[index];
+  if (!chosen) {
+    throw new Error("No config selected");
+  }
+  return [chosen.name];
+}
+async function resolveSecretName(nameOption) {
+  if (nameOption) {
+    return nameOption;
+  }
+  const raw = await _CMUD7LLNcjs.prompt.call(void 0, "  Secret name (e.g. DATABASE_URL): ");
+  if (!raw) {
+    throw new Error("Secret name is required");
+  }
+  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(raw)) {
+    throw new Error(
+      "Secret name must be a valid env var identifier (letters, numbers, underscore)"
+    );
+  }
+  return raw;
+}
+async function resolveSecretValue(valueOption) {
+  if (valueOption !== void 0) {
+    return valueOption;
+  }
+  const raw = await _CMUD7LLNcjs.prompt.call(void 0, "  Secret value: ");
+  if (raw === "") {
+    const confirmEmpty = await _CMUD7LLNcjs.promptYesNo.call(void 0, {
+      message: "  Set an empty value?",
+      defaultYes: false
+    });
+    if (!confirmEmpty) {
+      throw new Error("Secret value is required");
+    }
+  }
+  return raw;
+}
+async function setSecretInteractive(options) {
+  const {
+    project: projectOption,
+    environment: environmentOption,
+    config: configOption,
+    name: nameOption,
+    value: valueOption,
+    yes = false,
+    verbose = false
+  } = options;
+  console.log(_chalk2.default.blue("\nSet Doppler secret"));
+  console.log("");
+  const projects = listProjects({ verbose });
+  const project = await resolveProject({ projects, projectOption });
+  console.log(`Project: ${project}`);
+  console.log("");
+  const environments = listEnvironments({ project, verbose });
+  const environment = await resolveEnvironment({
+    environments,
+    environmentOption
+  });
+  console.log(
+    environment === "all" ? "Environment: all" : `Environment: ${environment}`
+  );
+  console.log("");
+  const configs = listConfigs({
+    project,
+    environment: environment === "all" ? void 0 : environment,
+    verbose
+  });
+  const targetConfigs = await resolveConfigs({
+    configs,
+    configOption,
+    environment
+  });
+  console.log(`Config(s): ${targetConfigs.join(", ")}`);
+  console.log("");
+  const name = await resolveSecretName(nameOption);
+  const value = await resolveSecretValue(valueOption);
+  const existingByConfig = [];
+  for (const config of targetConfigs) {
+    const existing = getSecret({ project, config, name, verbose });
+    existingByConfig.push({ config, existing });
+  }
+  const overwrites = existingByConfig.filter(
+    (entry) => entry.existing !== null
+  );
+  console.log("");
+  console.log("Plan:");
+  console.log(`  Project:  ${project}`);
+  console.log(`  Configs:  ${targetConfigs.join(", ")}`);
+  console.log(`  Name:     ${name}`);
+  console.log(
+    `  Value:    ${value.length === 0 ? "(empty)" : `(${value.length} chars)`}`
+  );
+  if (overwrites.length > 0) {
+    console.log(
+      _chalk2.default.yellow(
+        `  Overwrite: ${overwrites.length} config(s) already have this secret (${overwrites.map((entry) => entry.config).join(", ")})`
+      )
+    );
+  } else {
+    console.log(_chalk2.default.green("  Overwrite: none (new secret on all targets)"));
+  }
+  console.log("");
+  if (!yes) {
+    const confirmed = await _CMUD7LLNcjs.promptYesNo.call(void 0, {
+      message: overwrites.length > 0 ? "Overwrite / set this secret?" : "Set this secret?",
+      defaultYes: false
+    });
+    if (!confirmed) {
+      console.log("Aborted.");
+      return;
+    }
+    console.log("");
+  }
+  for (const config of targetConfigs) {
+    setSecret({ project, config, name, value, verbose });
+    console.log(_chalk2.default.green(`  \u2713 set ${name} on ${project}/${config}`));
+  }
+}
+
+
+
+
+
+
+
+
+exports.listProjects = listProjects; exports.listEnvironments = listEnvironments; exports.listConfigs = listConfigs; exports.getSecret = getSecret; exports.setSecret = setSecret; exports.setSecretInteractive = setSecretInteractive;