@mtndev/cli 0.0.0-dev-20260626045346 → 0.0.0-pr-20-20261020022402

package/esm/commands/aws/utils/resolve-profile.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Read profile names from ~/.aws/config (honoring AWS_CONFIG_FILE).
+ * Handles both `[profile NAME]` entries and a bare `[default]` section.
+ * @returns {string[]}
+ */
+export function listConfigProfiles(): string[];
+/**
+ * Interactively narrow a profile list by substring, then pick one.
+ * A single match auto-selects; too many matches asks the user to narrow.
+ * @param {string[]} profiles
+ * @returns {Promise<string>}
+ */
+export function pickProfileInteractive(profiles: string[]): Promise<string>;
+/**
+ * Resolve the AWS profile for a single-profile command.
+ *
+ * Precedence: explicit `--profile`, then `AWS_PROFILE`, then — only when stdin
+ * is a TTY — an interactive filter-and-pick over `~/.aws/config` profiles.
+ * Returns `undefined` when nothing is set and we cannot prompt (non-interactive
+ * shell, or no config profiles), leaving each command's existing "no profile"
+ * handling in place.
+ * @param {{ profile?: string; interactive?: boolean }} params
+ * @returns {Promise<string | undefined>}
+ */
+export function resolveProfile(params: {
+    profile?: string;
+    interactive?: boolean;
+}): Promise<string | undefined>;

package/esm/commands/aws/utils/resolve-profile.js

@@ -0,0 +1,11 @@
+import {
+  listConfigProfiles,
+  pickProfileInteractive,
+  resolveProfile
+} from "../../../__chunks/5GIUAFXL.js";
+import "../../../__chunks/ZHKVJO2U.js";
+export {
+  listConfigProfiles,
+  pickProfileInteractive,
+  resolveProfile
+};

package/esm/commands/aws/utils/tty.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Prompt for a single line of input.
+ * @param {string} message - Prompt text shown to the user
+ * @returns {Promise<string>}
+ */
+export function prompt(message: string): Promise<string>;
+/**
+ * Prompt the user to pick one option from a numbered list.
+ * @param {{ message: string; options: string[] }} params
+ * @returns {Promise<number>} Zero-based index of the chosen option
+ */
+export function promptChoice(params: {
+    message: string;
+    options: string[];
+}): Promise<number>;
+/**
+ * Prompt a yes/no question.
+ * @param {{ message: string; defaultYes?: boolean }} params
+ * @returns {Promise<boolean>}
+ */
+export function promptYesNo(params: {
+    message: string;
+    defaultYes?: boolean;
+}): Promise<boolean>;

package/esm/commands/aws/utils/tty.js

@@ -0,0 +1,10 @@
+import {
+  prompt,
+  promptChoice,
+  promptYesNo
+} from "../../../__chunks/ZHKVJO2U.js";
+export {
+  prompt,
+  promptChoice,
+  promptYesNo
+};

package/esm/commands/db/create-readonly-user/handler.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `db create-readonly-user` handler.
+ * @param {unknown} options
+ */
+export function createReadonlyUserCommand(options: unknown): Promise<void>;

package/esm/commands/db/create-readonly-user/handler.js

@@ -0,0 +1,11 @@
+import {
+  createReadonlyUserCommand
+} from "../../../__chunks/M35URMT4.js";
+import "../../../__chunks/3HE4BEJX.js";
+import "../../../__chunks/SD3E3EPH.js";
+import "../../../__chunks/T3TTUHTW.js";
+import "../../../__chunks/DLEJ25GZ.js";
+import "../../../__chunks/ZHKVJO2U.js";
+export {
+  createReadonlyUserCommand
+};

package/esm/commands/db/create-readonly-user/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./handler.js";
+export * from "./schema.js";
+export * from "./utils.js";

package/esm/commands/db/create-readonly-user/index.js

@@ -0,0 +1,40 @@
+import "../../../__chunks/WD2YR6I7.js";
+import {
+  createReadonlyUserCommand
+} from "../../../__chunks/M35URMT4.js";
+import "../../../__chunks/3HE4BEJX.js";
+import "../../../__chunks/SD3E3EPH.js";
+import {
+  DEFAULT_MYSQL_HOST_PATTERN,
+  DEFAULT_READONLY_USERNAME,
+  ENGINES,
+  createReadonlyUserOptionsSchema
+} from "../../../__chunks/T3TTUHTW.js";
+import {
+  buildReadonlyUrl,
+  detectEngineFromUrl,
+  generatePassword,
+  isSystemDatabase,
+  parseConnectionUrl,
+  quoteIdent,
+  quoteLiteral,
+  resolveAdminUrl,
+  resolveSsl
+} from "../../../__chunks/DLEJ25GZ.js";
+import "../../../__chunks/ZHKVJO2U.js";
+export {
+  DEFAULT_MYSQL_HOST_PATTERN,
+  DEFAULT_READONLY_USERNAME,
+  ENGINES,
+  buildReadonlyUrl,
+  createReadonlyUserCommand,
+  createReadonlyUserOptionsSchema,
+  detectEngineFromUrl,
+  generatePassword,
+  isSystemDatabase,
+  parseConnectionUrl,
+  quoteIdent,
+  quoteLiteral,
+  resolveAdminUrl,
+  resolveSsl
+};

package/esm/commands/db/create-readonly-user/mysql.d.ts

@@ -0,0 +1,33 @@
+/**
+ * List schemas/databases visible to the admin user (excluding system schemas).
+ * @param {ConnectionConfig} config
+ * @returns {Promise<string[]>}
+ */
+export function listMysqlDatabases(config: ConnectionConfig): Promise<string[]>;
+/**
+ * Create/update a MySQL user and grant SELECT on one database or *.* .
+ * @param {{
+ *   config: ConnectionConfig;
+ *   username: string;
+ *   password: string;
+ *   databases: string[] | "all";
+ *   hostPattern: string;
+ *   dryRun?: boolean;
+ *   verbose?: boolean;
+ * }} params
+ * @returns {Promise<{ created: boolean; statements: string[]; databases: string[] | "all" }>}
+ */
+export function applyMysqlReadonly(params: {
+    config: ConnectionConfig;
+    username: string;
+    password: string;
+    databases: string[] | "all";
+    hostPattern: string;
+    dryRun?: boolean;
+    verbose?: boolean;
+}): Promise<{
+    created: boolean;
+    statements: string[];
+    databases: string[] | "all";
+}>;
+export type ConnectionConfig = import("./utils.js").ConnectionConfig;

package/esm/commands/db/create-readonly-user/mysql.js

@@ -0,0 +1,9 @@
+import {
+  applyMysqlReadonly,
+  listMysqlDatabases
+} from "../../../__chunks/3HE4BEJX.js";
+import "../../../__chunks/DLEJ25GZ.js";
+export {
+  applyMysqlReadonly,
+  listMysqlDatabases
+};

package/esm/commands/db/create-readonly-user/postgres.d.ts

@@ -0,0 +1,31 @@
+/**
+ * List non-template databases visible to the admin user.
+ * @param {ConnectionConfig} config
+ * @returns {Promise<string[]>}
+ */
+export function listPostgresDatabases(config: ConnectionConfig): Promise<string[]>;
+/**
+ * Create/update a Postgres role and grant read-only on one or all databases.
+ * @param {{
+ *   config: ConnectionConfig;
+ *   username: string;
+ *   password: string;
+ *   databases: string[];
+ *   dryRun?: boolean;
+ *   verbose?: boolean;
+ * }} params
+ * @returns {Promise<{ created: boolean; statements: string[]; databases: string[] }>}
+ */
+export function applyPostgresReadonly(params: {
+    config: ConnectionConfig;
+    username: string;
+    password: string;
+    databases: string[];
+    dryRun?: boolean;
+    verbose?: boolean;
+}): Promise<{
+    created: boolean;
+    statements: string[];
+    databases: string[];
+}>;
+export type ConnectionConfig = import("./utils.js").ConnectionConfig;

package/esm/commands/db/create-readonly-user/postgres.js

@@ -0,0 +1,9 @@
+import {
+  applyPostgresReadonly,
+  listPostgresDatabases
+} from "../../../__chunks/SD3E3EPH.js";
+import "../../../__chunks/DLEJ25GZ.js";
+export {
+  applyPostgresReadonly,
+  listPostgresDatabases
+};

package/esm/commands/db/create-readonly-user/schema.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Supported database engines.
+ * @type {readonly ["postgres", "mysql"]}
+ */
+export const ENGINES: readonly ["postgres", "mysql"];
+/**
+ * Zod schema for `db create-readonly-user` options.
+ */
+export const createReadonlyUserOptionsSchema: z.ZodObject<{
+    engine: z.ZodOptional<z.ZodEnum<["postgres", "mysql"]>>;
+    url: z.ZodOptional<z.ZodString>;
+    database: z.ZodOptional<z.ZodString>;
+    username: z.ZodOptional<z.ZodString>;
+    password: z.ZodOptional<z.ZodString>;
+    hostPattern: z.ZodOptional<z.ZodString>;
+    ssl: z.ZodOptional<z.ZodBoolean>;
+    yes: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    dryRun: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    verbose: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    verbose: boolean;
+    yes: boolean;
+    dryRun: boolean;
+    username?: string | undefined;
+    url?: string | undefined;
+    engine?: "postgres" | "mysql" | undefined;
+    password?: string | undefined;
+    database?: string | undefined;
+    ssl?: boolean | undefined;
+    hostPattern?: string | undefined;
+}, {
+    verbose?: boolean | undefined;
+    yes?: boolean | undefined;
+    dryRun?: boolean | undefined;
+    username?: string | undefined;
+    url?: string | undefined;
+    engine?: "postgres" | "mysql" | undefined;
+    password?: string | undefined;
+    database?: string | undefined;
+    ssl?: boolean | undefined;
+    hostPattern?: string | undefined;
+}>;
+/**
+ * @typedef {z.infer<typeof createReadonlyUserOptionsSchema>} CreateReadonlyUserOptions
+ */
+/**
+ * Default username when none is provided.
+ */
+export const DEFAULT_READONLY_USERNAME: "readonly";
+/**
+ * Default MySQL host pattern (any client host).
+ */
+export const DEFAULT_MYSQL_HOST_PATTERN: "%";
+export type CreateReadonlyUserOptions = z.infer<typeof createReadonlyUserOptionsSchema>;
+import { z } from "zod";

package/esm/commands/db/create-readonly-user/schema.js

@@ -0,0 +1,12 @@
+import {
+  DEFAULT_MYSQL_HOST_PATTERN,
+  DEFAULT_READONLY_USERNAME,
+  ENGINES,
+  createReadonlyUserOptionsSchema
+} from "../../../__chunks/T3TTUHTW.js";
+export {
+  DEFAULT_MYSQL_HOST_PATTERN,
+  DEFAULT_READONLY_USERNAME,
+  ENGINES,
+  createReadonlyUserOptionsSchema
+};

package/esm/commands/db/create-readonly-user/utils.d.ts

@@ -0,0 +1,112 @@
+/**
+ * @typedef {"postgres" | "mysql"} Engine
+ */
+/**
+ * @typedef {Object} ConnectionConfig
+ * @property {Engine} engine
+ * @property {string} host
+ * @property {number} port
+ * @property {string} user
+ * @property {string} password
+ * @property {string} database
+ * @property {boolean | object} ssl
+ * @property {string} [url]
+ */
+/**
+ * Generate a URL-safe random password.
+ * @param {{ length?: number }} [params]
+ * @returns {string}
+ */
+export function generatePassword(params?: {
+    length?: number;
+}): string;
+/**
+ * Detect engine from a connection URL scheme.
+ * @param {string} url
+ * @returns {Engine | null}
+ */
+export function detectEngineFromUrl(url: string): Engine | null;
+/**
+ * Resolve an admin URL from flags / common env vars.
+ * @param {{ url?: string; engine?: Engine }} params
+ * @returns {string | null}
+ */
+export function resolveAdminUrl(params: {
+    url?: string;
+    engine?: Engine;
+}): string | null;
+/**
+ * Decide SSL settings: remote hosts get loose SSL by default (RDS-friendly).
+ * @param {{ host: string; sslOption?: boolean }} params
+ * @returns {boolean | object}
+ */
+export function resolveSsl(params: {
+    host: string;
+    sslOption?: boolean;
+}): boolean | object;
+/**
+ * Parse a postgres/mysql connection URL into a config object.
+ * @param {{ url: string; engine?: Engine; sslOption?: boolean }} params
+ * @returns {ConnectionConfig}
+ */
+export function parseConnectionUrl(params: {
+    url: string;
+    engine?: Engine;
+    sslOption?: boolean;
+}): ConnectionConfig;
+/**
+ * Build a client connection URL for the new read-only user.
+ * @param {{
+ *   engine: Engine;
+ *   host: string;
+ *   port: number;
+ *   username: string;
+ *   password: string;
+ *   database: string;
+ * }} params
+ * @returns {string}
+ */
+export function buildReadonlyUrl(params: {
+    engine: Engine;
+    host: string;
+    port: number;
+    username: string;
+    password: string;
+    database: string;
+}): string;
+/**
+ * Quote an identifier for the given engine (not for string literals).
+ * @param {{ engine: Engine; name: string }} params
+ * @returns {string}
+ */
+export function quoteIdent(params: {
+    engine: Engine;
+    name: string;
+}): string;
+/**
+ * Escape a string literal for SQL (single-quote doubling).
+ * Prefer parameterized queries when the driver supports them for DDL.
+ * @param {string} value
+ * @returns {string}
+ */
+export function quoteLiteral(value: string): string;
+/**
+ * System / template databases to skip when granting "all".
+ * @param {{ engine: Engine; name: string }} params
+ * @returns {boolean}
+ */
+export function isSystemDatabase(params: {
+    engine: Engine;
+    name: string;
+}): boolean;
+export type Engine = "postgres" | "mysql";
+export type ConnectionConfig = {
+    engine: Engine;
+    host: string;
+    port: number;
+    user: string;
+    password: string;
+    database: string;
+    ssl: boolean | object;
+    url?: string | undefined;
+};

package/esm/commands/db/create-readonly-user/utils.js

@@ -0,0 +1,22 @@
+import {
+  buildReadonlyUrl,
+  detectEngineFromUrl,
+  generatePassword,
+  isSystemDatabase,
+  parseConnectionUrl,
+  quoteIdent,
+  quoteLiteral,
+  resolveAdminUrl,
+  resolveSsl
+} from "../../../__chunks/DLEJ25GZ.js";
+export {
+  buildReadonlyUrl,
+  detectEngineFromUrl,
+  generatePassword,
+  isSystemDatabase,
+  parseConnectionUrl,
+  quoteIdent,
+  quoteLiteral,
+  resolveAdminUrl,
+  resolveSsl
+};

package/esm/commands/db/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Register the `db` command group and its subcommands on the root program.
+ * @param {import('commander').Command} program
+ */
+export function registerDbCommands(program: import("commander").Command): void;
+export * from "./create-readonly-user/index.js";

package/esm/commands/db/index.js

@@ -0,0 +1,44 @@
+import {
+  registerDbCommands
+} from "../../__chunks/DVKD6YSR.js";
+import "../../__chunks/WD2YR6I7.js";
+import {
+  createReadonlyUserCommand
+} from "../../__chunks/M35URMT4.js";
+import "../../__chunks/3HE4BEJX.js";
+import "../../__chunks/SD3E3EPH.js";
+import {
+  DEFAULT_MYSQL_HOST_PATTERN,
+  DEFAULT_READONLY_USERNAME,
+  ENGINES,
+  createReadonlyUserOptionsSchema
+} from "../../__chunks/T3TTUHTW.js";
+import {
+  buildReadonlyUrl,
+  detectEngineFromUrl,
+  generatePassword,
+  isSystemDatabase,
+  parseConnectionUrl,
+  quoteIdent,
+  quoteLiteral,
+  resolveAdminUrl,
+  resolveSsl
+} from "../../__chunks/DLEJ25GZ.js";
+import "../../__chunks/ZHKVJO2U.js";
+export {
+  DEFAULT_MYSQL_HOST_PATTERN,
+  DEFAULT_READONLY_USERNAME,
+  ENGINES,
+  buildReadonlyUrl,
+  createReadonlyUserCommand,
+  createReadonlyUserOptionsSchema,
+  detectEngineFromUrl,
+  generatePassword,
+  isSystemDatabase,
+  parseConnectionUrl,
+  quoteIdent,
+  quoteLiteral,
+  registerDbCommands,
+  resolveAdminUrl,
+  resolveSsl
+};

package/esm/commands/doppler/handler.js

@@ -1,9 +1,11 @@
 import {
   dopplerCommand
-} from "../../__chunks/6L5RNR7G.js";
-import "../../__chunks/O262GK4B.js";
+} from "../../__chunks/YRG7PT33.js";
+import "../../__chunks/QFXN4EHM.js";
+import "../../__chunks/YGWTVPZE.js";
+import "../../__chunks/ZHKVJO2U.js";
 import "../../__chunks/SJXQJ7RS.js";
-import "../../__chunks/X3R5PSWH.js";
+import "../../__chunks/KWUJP5MG.js";
 export {
   dopplerCommand
 };

package/esm/commands/doppler/index.d.ts

@@ -1,3 +1,4 @@
 export * from "./handler.js";
 export * from "./schema.js";
+export * from "./set-secret.js";
 export * from "./utils.js";

package/esm/commands/doppler/index.js

@@ -1,9 +1,19 @@
-import "../../__chunks/46HGXFME.js";
+import "../../__chunks/AZCP3SFJ.js";
 import {
   dopplerCommand
-} from "../../__chunks/6L5RNR7G.js";
+} from "../../__chunks/YRG7PT33.js";
+import {
+  getSecret,
+  listConfigs,
+  listEnvironments,
+  listProjects,
+  setSecret,
+  setSecretInteractive
+} from "../../__chunks/QFXN4EHM.js";
 import {
   checkDependencies,
+  checkDopplerAuth,
+  cloneProject,
   createDiff,
   downloadConfigs,
   execDoppler,
@@ -11,7 +21,8 @@ import {
   normalizeEscapeSequences,
   promptConfirmation,
   uploadConfigs
-} from "../../__chunks/O262GK4B.js";
+} from "../../__chunks/YGWTVPZE.js";
+import "../../__chunks/ZHKVJO2U.js";
 import {
   exec,
   execJson,
@@ -19,15 +30,25 @@ import {
   execString
 } from "../../__chunks/SJXQJ7RS.js";
 import {
+  dopplerCloneSchema,
   dopplerCommandMetadata,
-  dopplerCommandOptionsSchema
-} from "../../__chunks/X3R5PSWH.js";
+  dopplerCommandOptionsSchema,
+  dopplerDownloadSchema,
+  dopplerSetSchema,
+  dopplerUploadSchema
+} from "../../__chunks/KWUJP5MG.js";
 export {
   checkDependencies,
+  checkDopplerAuth,
+  cloneProject,
   createDiff,
+  dopplerCloneSchema,
   dopplerCommand,
   dopplerCommandMetadata,
   dopplerCommandOptionsSchema,
+  dopplerDownloadSchema,
+  dopplerSetSchema,
+  dopplerUploadSchema,
   downloadConfigs,
   exec,
   execDoppler,
@@ -35,7 +56,13 @@ export {
   execNumber,
   execString,
   getConfigs,
+  getSecret,
+  listConfigs,
+  listEnvironments,
+  listProjects,
   normalizeEscapeSequences,
   promptConfirmation,
+  setSecret,
+  setSecretInteractive,
   uploadConfigs
 };