@mtndev/cli 0.0.0-dev-20260626045346 → 0.0.0-pr-20-20261020022402

package/cjs/__chunks/CMUD7LLN.cjs

@@ -0,0 +1,47 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/commands/aws/utils/tty.js
+var _readline = require('readline');
+function prompt(message) {
+  return new Promise((resolve) => {
+    const rl = _readline.createInterface.call(void 0, {
+      input: process.stdin,
+      output: process.stdout
+    });
+    rl.question(message, (answer) => {
+      rl.close();
+      resolve(answer.trim());
+    });
+  });
+}
+async function promptChoice(params) {
+  const { message, options } = params;
+  if (options.length === 0) {
+    throw new Error("promptChoice: no options to choose from");
+  }
+  console.log(message);
+  options.forEach((option, index) => {
+    console.log(`  ${index + 1}. ${option}`);
+  });
+  for (; ; ) {
+    const raw = await prompt("Enter number: ");
+    const choice = Number.parseInt(raw, 10);
+    if (Number.isInteger(choice) && choice >= 1 && choice <= options.length) {
+      return choice - 1;
+    }
+    console.log(`Please enter a number between 1 and ${options.length}.`);
+  }
+}
+async function promptYesNo(params) {
+  const { message, defaultYes = false } = params;
+  const suffix = defaultYes ? " [Y/n]: " : " [y/N]: ";
+  const answer = (await prompt(`${message}${suffix}`)).toLowerCase();
+  if (answer === "") {
+    return defaultYes;
+  }
+  return answer === "y" || answer === "yes";
+}
+
+
+
+
+
+exports.prompt = prompt; exports.promptChoice = promptChoice; exports.promptYesNo = promptYesNo;

package/cjs/__chunks/DTQ2LB3I.cjs

@@ -0,0 +1,49 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+
+var _LXDF5QVZcjs = require('./LXDF5QVZ.cjs');
+
+// src/commands/db/index.js
+function registerDbCommands(program) {
+  const db = program.command("db").summary("Database operational commands").description("Database operational helpers (MySQL and Postgres)");
+  db.command("create-readonly-user").summary("Create a read-only database user").description(
+    "Create (or update) a read-only database user on MySQL or Postgres. Interactively pick a single database or all databases, then print a connection URL."
+  ).option(
+    "-e, --engine <engine>",
+    "Database engine: postgres or mysql (inferred from --url when omitted)"
+  ).option(
+    "-u, --url <url>",
+    "Admin connection URL (defaults to DATABASE_URL / MYSQL_URL / POSTGRES_URL)"
+  ).option(
+    "-d, --database <name>",
+    'Target database name, or "all" for every non-system database'
+  ).option(
+    "--username <name>",
+    "Read-only username to create (default: readonly)"
+  ).option(
+    "--password <password>",
+    "Password for the new user (generated when omitted)"
+  ).option("--host-pattern <pattern>", "MySQL user host pattern (default: %)").option("--ssl", "Force SSL on (loose verify \u2014 useful for RDS)").option("--no-ssl", "Force SSL off").option("-y, --yes", "Skip the confirmation prompt").option("--dry-run", "Print the SQL plan without applying it").option("-v, --verbose", "Enable verbose logging").action(async (options) => {
+    let ssl;
+    if (options.ssl === true) {
+      ssl = true;
+    } else if (options.noSsl === true) {
+      ssl = false;
+    }
+    await _LXDF5QVZcjs.createReadonlyUserCommand.call(void 0, {
+      engine: options.engine,
+      url: options.url,
+      database: options.database,
+      username: options.username,
+      password: options.password,
+      hostPattern: options.hostPattern,
+      ssl,
+      yes: _nullishCoalesce(options.yes, () => ( false)),
+      dryRun: _nullishCoalesce(options.dryRun, () => ( false)),
+      verbose: _nullishCoalesce(options.verbose, () => ( false))
+    });
+  });
+}
+
+
+
+exports.registerDbCommands = registerDbCommands;

package/cjs/__chunks/FM5MVRQF.cjs

@@ -0,0 +1,23 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+var _WOYF2L6Tcjs = require('./WOYF2L6T.cjs');
+
+// src/commands/aws/iam/setup-acl/schema.js
+var _zod = require('zod');
+var setupAclOptionsSchema = _zod.z.object({
+  restrictRegions: _zod.z.enum(["yes", "no"]).optional().describe(
+    "Attach the region restriction to acl-power-users (skips the interactive prompt)"
+  ),
+  createUsers: _zod.z.boolean().optional().default(true).describe(
+    "Create IAM users after configuring groups (use --no-create-users to skip)"
+  ),
+  profile: _WOYF2L6Tcjs.profileField,
+  region: _WOYF2L6Tcjs.regionField,
+  verbose: _WOYF2L6Tcjs.verboseField
+});
+
+
+
+exports.setupAclOptionsSchema = setupAclOptionsSchema;

package/cjs/__chunks/FRHST54J.cjs

@@ -0,0 +1,135 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/commands/doppler/schema.js
+var _zod = require('zod');
+var environmentsBase = _zod.z.string().optional().describe(
+  'Environments to process, comma-separated (e.g., dev,stg,prd or "all")'
+);
+var commonFields = {
+  verbose: _zod.z.boolean().optional().default(false).describe("Enable verbose logging for detailed error information"),
+  help: _zod.z.boolean().optional().default(false).describe("Display help for command")
+};
+var dopplerDownloadSchema = _zod.z.object({
+  action: _zod.z.literal("download"),
+  environments: environmentsBase.default("dev"),
+  ...commonFields
+});
+var dopplerUploadSchema = _zod.z.object({
+  action: _zod.z.literal("upload"),
+  environments: environmentsBase.default("all"),
+  ...commonFields
+});
+var dopplerCloneSchema = _zod.z.object({
+  action: _zod.z.literal("clone"),
+  from: _zod.z.string({ required_error: "--from <project> is required for clone" }).describe("Source Doppler project name"),
+  to: _zod.z.string({ required_error: "--to <project> is required for clone" }).describe("Target Doppler project name"),
+  force: _zod.z.boolean().optional().default(false).describe("Skip confirmation prompts when overwriting existing secrets"),
+  environments: environmentsBase.default("all"),
+  ...commonFields
+});
+var dopplerSetSchema = _zod.z.object({
+  action: _zod.z.literal("set"),
+  project: _zod.z.string().optional().describe("Doppler project name (prompts when omitted)"),
+  environment: _zod.z.string().optional().describe(
+    'Doppler environment id (e.g. dev, stg, prd) or "all" (prompts when omitted)'
+  ),
+  config: _zod.z.string().optional().describe(
+    'Config name, comma-separated list, or "all" within the chosen environment (prompts when omitted)'
+  ),
+  name: _zod.z.string().optional().describe("Secret name / env var key (e.g. DATABASE_URL)"),
+  value: _zod.z.string().optional().describe("Secret value (prompts when omitted)"),
+  yes: _zod.z.boolean().optional().default(false).describe("Skip the confirmation prompt"),
+  ...commonFields
+});
+var dopplerCommandOptionsSchema = _zod.z.discriminatedUnion("action", [
+  dopplerDownloadSchema,
+  dopplerUploadSchema,
+  dopplerCloneSchema,
+  dopplerSetSchema
+]);
+var dopplerCommandMetadata = {
+  name: "doppler",
+  description: `Manage Doppler configurations
+
+Subcommands:
+  download  Download configurations from Doppler to local .env files
+  upload    Upload local .env files to Doppler (with confirmation prompt)
+  clone     Clone all secrets from one Doppler project to another
+  set       Add or update a secret (interactive project/env/config picker)
+
+Examples:
+  $ @mtndev/cli doppler download                                          # Download dev config
+  $ @mtndev/cli doppler download -e all                                   # Download all configs
+  $ @mtndev/cli doppler download -e dev,stg                               # Download dev and stg
+  $ @mtndev/cli doppler upload                                            # Upload .env.dev
+  $ @mtndev/cli doppler upload -e prd                                     # Upload production config
+  $ @mtndev/cli doppler clone --from my-app --to my-app-copy             # Clone all configs
+  $ @mtndev/cli doppler clone --from my-app --to my-app-copy -e dev,stg  # Clone specific envs
+  $ @mtndev/cli doppler clone --from my-app --to my-app-copy --force     # Clone without prompts
+  $ @mtndev/cli doppler set                                               # Interactive set
+  $ @mtndev/cli doppler set -p core --environment dev -c dev --name API_KEY --value secret --yes`,
+  options: {
+    environments: {
+      description: dopplerDownloadSchema.shape.environments.description,
+      default: "dev",
+      alias: "e"
+    },
+    from: {
+      description: dopplerCloneSchema.shape.from.description,
+      default: void 0
+    },
+    to: {
+      description: dopplerCloneSchema.shape.to.description,
+      default: void 0
+    },
+    force: {
+      description: dopplerCloneSchema.shape.force.description,
+      default: false,
+      alias: "f"
+    },
+    project: {
+      description: dopplerSetSchema.shape.project.description,
+      default: void 0,
+      alias: "p"
+    },
+    environment: {
+      description: dopplerSetSchema.shape.environment.description,
+      default: void 0
+    },
+    config: {
+      description: dopplerSetSchema.shape.config.description,
+      default: void 0,
+      alias: "c"
+    },
+    name: {
+      description: dopplerSetSchema.shape.name.description,
+      default: void 0
+    },
+    value: {
+      description: dopplerSetSchema.shape.value.description,
+      default: void 0
+    },
+    yes: {
+      description: dopplerSetSchema.shape.yes.description,
+      default: false,
+      alias: "y"
+    },
+    verbose: {
+      description: dopplerDownloadSchema.shape.verbose.description,
+      default: false,
+      alias: "v"
+    },
+    help: {
+      description: dopplerDownloadSchema.shape.help.description,
+      default: false,
+      alias: "h"
+    }
+  }
+};
+
+
+
+
+
+
+
+
+exports.dopplerDownloadSchema = dopplerDownloadSchema; exports.dopplerUploadSchema = dopplerUploadSchema; exports.dopplerCloneSchema = dopplerCloneSchema; exports.dopplerSetSchema = dopplerSetSchema; exports.dopplerCommandOptionsSchema = dopplerCommandOptionsSchema; exports.dopplerCommandMetadata = dopplerCommandMetadata;

package/cjs/__chunks/FU4VP2LN.cjs

@@ -0,0 +1 @@
+"use strict";

package/cjs/__chunks/G5K4PVIL.cjs

@@ -0,0 +1,26 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+var _WOYF2L6Tcjs = require('./WOYF2L6T.cjs');
+
+// src/commands/aws/ec2/allow-ip/schema.js
+var _zod = require('zod');
+var DEFAULT_REGION = "us-east-1";
+var SSH_PORT = 22;
+var DEFAULT_ROAMING_NAME = "Declan";
+var allowIpOptionsSchema = _zod.z.object({
+  profile: _WOYF2L6Tcjs.profileField,
+  region: _WOYF2L6Tcjs.regionField,
+  ruleName: _zod.z.string().optional().describe(
+    'SSH rule description to update or create (default: "{FirstName} Roaming" derived from the profile/IAM user)'
+  ),
+  verbose: _WOYF2L6Tcjs.verboseField
+});
+
+
+
+
+
+
+exports.DEFAULT_REGION = DEFAULT_REGION; exports.SSH_PORT = SSH_PORT; exports.DEFAULT_ROAMING_NAME = DEFAULT_ROAMING_NAME; exports.allowIpOptionsSchema = allowIpOptionsSchema;

package/cjs/__chunks/{NSRFG4DF.cjs → GU3R54MK.cjs}

@@ -1,50 +1,77 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
+var _NFXQNOQHcjs = require('./NFXQNOQH.cjs');
 
 
-var _EMMC33QAcjs = require('./EMMC33QA.cjs');
 
 
 
-var _4GFJUCSPcjs = require('./4GFJUCSP.cjs');
+
+var _JB7T7PKQcjs = require('./JB7T7PKQ.cjs');
+
+
+
+var _FRHST54Jcjs = require('./FRHST54J.cjs');
 
 // src/commands/doppler/handler.js
 var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
 var _zod = require('zod');
 async function dopplerCommand(options) {
   try {
-    const validatedOptions = _4GFJUCSPcjs.dopplerCommandOptionsSchema.parse(options);
-    if (validatedOptions.help || !validatedOptions.action) {
+    const rawOptions = (
+      /** @type {any} */
+      _nullishCoalesce(options, () => ( {}))
+    );
+    if (rawOptions.help || !rawOptions.action) {
       console.log(
         _chalk2.default.bold(`
 Usage: @mtndev/cli doppler [options] <action>`)
       );
-      console.log(_4GFJUCSPcjs.dopplerCommandMetadata.description);
+      console.log(_FRHST54Jcjs.dopplerCommandMetadata.description);
       console.log(_chalk2.default.bold("\nOptions:"));
-      Object.entries(_4GFJUCSPcjs.dopplerCommandOptionsSchema.shape).forEach(
-        ([key, fieldSchema]) => {
-          if (key === "action") return;
-          const description = fieldSchema.description || "No description available";
-          const optionMeta = (
+      Object.entries(_FRHST54Jcjs.dopplerCommandMetadata.options).forEach(
+        ([key, optionMeta]) => {
+          const meta = (
             /** @type {any} */
-            _4GFJUCSPcjs.dopplerCommandMetadata.options[key]
+            optionMeta
           );
-          const defaultValue = _nullishCoalesce(_optionalChain([optionMeta, 'optionalAccess', _ => _.default]), () => ( false));
-          const alias = _optionalChain([optionMeta, 'optionalAccess', _2 => _2.alias]) ? _chalk2.default.cyan(`, -${optionMeta.alias}`) : "";
+          const alias = _optionalChain([meta, 'optionalAccess', _ => _.alias]) ? _chalk2.default.cyan(`, -${meta.alias}`) : "";
+          const defaultValue = _nullishCoalesce(_optionalChain([meta, 'optionalAccess', _2 => _2.default]), () => ( false));
           console.log(
-            _chalk2.default.cyan(`  --${key}`) + alias + `  ${description} (default: ${defaultValue})`
+            _chalk2.default.cyan(`  --${key}`) + alias + `  ${meta.description} (default: ${defaultValue})`
           );
         }
       );
       console.log("");
       return;
     }
-    const { action, environment, verbose } = validatedOptions;
-    _EMMC33QAcjs.checkDependencies.call(void 0, verbose);
+    const validatedOptions = _FRHST54Jcjs.dopplerCommandOptionsSchema.parse(options);
+    const { action, verbose } = validatedOptions;
+    if (action === "set") {
+      _JB7T7PKQcjs.checkDopplerAuth.call(void 0, verbose);
+    } else {
+      _JB7T7PKQcjs.checkDependencies.call(void 0, verbose);
+    }
     if (action === "download") {
-      await _EMMC33QAcjs.downloadConfigs.call(void 0, { environment, verbose });
+      const { environments } = validatedOptions;
+      await _JB7T7PKQcjs.downloadConfigs.call(void 0, { environments, verbose });
     } else if (action === "upload") {
-      await _EMMC33QAcjs.uploadConfigs.call(void 0, { environment, verbose });
+      const { environments } = validatedOptions;
+      await _JB7T7PKQcjs.uploadConfigs.call(void 0, { environments, verbose });
+    } else if (action === "clone") {
+      const { from, to, force, environments } = validatedOptions;
+      await _JB7T7PKQcjs.cloneProject.call(void 0, { from, to, environments, force, verbose });
+    } else if (action === "set") {
+      const { project, environment, config, name, value, yes } = validatedOptions;
+      await _NFXQNOQHcjs.setSecretInteractive.call(void 0, {
+        project,
+        environment,
+        config,
+        name,
+        value,
+        yes,
+        verbose
+      });
     }
     console.log(_chalk2.default.green(`
 \u2705 Doppler ${action} completed successfully!`));

package/cjs/__chunks/GUL36IFZ.cjs

@@ -0,0 +1,61 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/commands/aws/ses/smtp-password.js
+var _crypto = require('crypto');
+var SMTP_REGIONS = /* @__PURE__ */ new Set([
+  "us-east-2",
+  "us-east-1",
+  "us-west-1",
+  "us-west-2",
+  "ap-south-1",
+  "ap-northeast-2",
+  "ap-southeast-1",
+  "ap-southeast-2",
+  "ap-northeast-1",
+  "ca-central-1",
+  "eu-central-1",
+  "eu-west-1",
+  "eu-west-2",
+  "eu-west-3",
+  "eu-south-1",
+  "eu-north-1",
+  "sa-east-1",
+  "us-gov-west-1",
+  "us-gov-east-1",
+  "me-south-1",
+  "af-south-1",
+  "il-central-1"
+]);
+var DATE = "11111111";
+var SERVICE = "ses";
+var MESSAGE = "SendRawEmail";
+var TERMINAL = "aws4_request";
+var VERSION = 4;
+function sign(key, message) {
+  return _crypto.createHmac.call(void 0, "sha256", key).update(message, "utf8").digest();
+}
+function calculateSmtpPassword(params) {
+  const { secretAccessKey, region } = params;
+  if (!SMTP_REGIONS.has(region)) {
+    throw new Error(
+      `calculateSmtpPassword: region "${region}" has no SES SMTP endpoint`
+    );
+  }
+  let signature = sign(Buffer.from(`AWS4${secretAccessKey}`, "utf8"), DATE);
+  signature = sign(signature, region);
+  signature = sign(signature, SERVICE);
+  signature = sign(signature, TERMINAL);
+  signature = sign(signature, MESSAGE);
+  const signatureAndVersion = Buffer.concat([
+    Buffer.from([VERSION]),
+    signature
+  ]);
+  return signatureAndVersion.toString("base64");
+}
+function smtpEndpoint(region) {
+  return `email-smtp.${region}.amazonaws.com`;
+}
+
+
+
+
+
+exports.SMTP_REGIONS = SMTP_REGIONS; exports.calculateSmtpPassword = calculateSmtpPassword; exports.smtpEndpoint = smtpEndpoint;

package/cjs/__chunks/GZMTNK5N.cjs

@@ -0,0 +1 @@
+"use strict";

package/cjs/__chunks/H74JSDBU.cjs

@@ -0,0 +1,30 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/commands/db/create-readonly-user/schema.js
+var _zod = require('zod');
+var ENGINES = ["postgres", "mysql"];
+var createReadonlyUserOptionsSchema = _zod.z.object({
+  engine: _zod.z.enum(["postgres", "mysql"]).optional().describe(
+    "Database engine (postgres or mysql); inferred from --url when omitted"
+  ),
+  url: _zod.z.string().optional().describe(
+    "Admin connection URL (postgres://\u2026 or mysql://\u2026). Defaults to DATABASE_URL / MYSQL_URL / POSTGRES_URL."
+  ),
+  database: _zod.z.string().optional().describe('Target database name, or "all" for every non-system database'),
+  username: _zod.z.string().optional().describe("Read-only username to create (default: readonly)"),
+  password: _zod.z.string().optional().describe("Password for the new user (generated when omitted)"),
+  hostPattern: _zod.z.string().optional().describe("MySQL user host pattern (default: %)"),
+  ssl: _zod.z.boolean().optional().describe(
+    "Force SSL on/off. Default: off for localhost, on (loose) for remote hosts."
+  ),
+  yes: _zod.z.boolean().optional().default(false).describe("Skip the confirmation prompt"),
+  dryRun: _zod.z.boolean().optional().default(false).describe("Print the SQL plan without applying it"),
+  verbose: _zod.z.boolean().optional().default(false).describe("Enable verbose logging")
+});
+var DEFAULT_READONLY_USERNAME = "readonly";
+var DEFAULT_MYSQL_HOST_PATTERN = "%";
+
+
+
+
+
+
+exports.ENGINES = ENGINES; exports.createReadonlyUserOptionsSchema = createReadonlyUserOptionsSchema; exports.DEFAULT_READONLY_USERNAME = DEFAULT_READONLY_USERNAME; exports.DEFAULT_MYSQL_HOST_PATTERN = DEFAULT_MYSQL_HOST_PATTERN;