@mtndev/cli 2.0.0 → 2.0.1

package/cjs/__chunks/JB7T7PKQ.cjs

@@ -1,538 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
-
-var _NIMXXHJQcjs = require('./NIMXXHJQ.cjs');
-
-// src/commands/doppler/utils.js
-var _child_process = require('child_process');
-
-
-
-
-
-
-
-var _fs = require('fs');
-var _os = require('os');
-var _path = require('path');
-var _readline = require('readline');
-var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
-var DEFAULT_DOPPLER_ENVIRONMENT = "dev";
-var DOPPLER_INTERNAL_KEYS = /* @__PURE__ */ new Set([
-  "DOPPLER_CONFIG",
-  "DOPPLER_ENVIRONMENT",
-  "DOPPLER_PROJECT"
-]);
-function execDoppler(args, parser = "string", silent = false, verbose = false) {
-  const command = `doppler ${args.join(" ")}`;
-  let verbosity = "default";
-  if (verbose) {
-    verbosity = "verbose";
-  } else if (silent) {
-    verbosity = "silent";
-  }
-  return _NIMXXHJQcjs.exec.call(void 0, command, {
-    verbosity,
-    stdoutParser: parser,
-    throwOnError: true
-  });
-}
-function checkDopplerAuth(verbose = false) {
-  if (verbose) {
-    console.log(_chalk2.default.blue("\n\u{1F50D} Checking Doppler authentication..."));
-  }
-  try {
-    _child_process.execSync.call(void 0, "which doppler", { stdio: "pipe" });
-    if (verbose) {
-      console.log(_chalk2.default.green("   \u2713 Doppler CLI is installed"));
-    }
-  } catch (e2) {
-    throw new Error(
-      "Doppler is not installed. Please install Doppler (brew install dopplerhq/cli/doppler), login, and try again."
-    );
-  }
-  try {
-    execDoppler(["me"], "string", true, verbose);
-    if (verbose) {
-      console.log(_chalk2.default.green("   \u2713 Doppler is authenticated"));
-    }
-  } catch (e3) {
-    throw new Error(
-      "Doppler is not logged in. Please run 'doppler login' and try again."
-    );
-  }
-}
-function checkDependencies(verbose = false) {
-  checkDopplerAuth(verbose);
-  if (verbose) {
-    console.log(_chalk2.default.blue("\n\u{1F50D} Checking Doppler project setup..."));
-  }
-  try {
-    execDoppler(["configs", "--json"], "json", true, verbose);
-    if (verbose) {
-      console.log(_chalk2.default.green("   \u2713 Doppler project is configured"));
-    }
-  } catch (e4) {
-    throw new Error(
-      "Doppler is not configured. Please run 'doppler setup' and try again."
-    );
-  }
-}
-function getConfigs(environments, verbose = false, project = null) {
-  if (verbose) {
-    console.log(
-      _chalk2.default.blue(
-        `
-\u{1F4CB} Resolving configurations for environments: ${_chalk2.default.cyan(environments)}`
-      )
-    );
-  }
-  const configArgs = ["configs", "--json"];
-  if (project) configArgs.push("--project", project);
-  const availableConfigs = execDoppler(configArgs, "json", true, verbose);
-  const configNames = Array.isArray(availableConfigs) ? availableConfigs.map(
-    (config) => config.name
-  ) : [];
-  if (verbose && configNames.length > 0) {
-    console.log(
-      _chalk2.default.gray(`   Available configurations: ${configNames.join(", ")}`)
-    );
-  }
-  if (environments === "all") {
-    if (configNames.length === 0) {
-      throw new Error("No configurations found in Doppler");
-    }
-    if (verbose) {
-      console.log(
-        _chalk2.default.green(`   \u2713 Using all ${configNames.length} configurations`)
-      );
-    }
-    return configNames;
-  }
-  const requested = environments.split(",").map((e) => e.trim());
-  if (configNames.length > 0) {
-    const missing = requested.filter((e) => !configNames.includes(e));
-    if (missing.length > 0) {
-      throw new Error(
-        `Configurations not found: ${missing.join(", ")}. Available: ${configNames.join(", ")}`
-      );
-    }
-  }
-  if (verbose) {
-    console.log(
-      _chalk2.default.green(`   \u2713 Using configurations: ${requested.join(", ")}`)
-    );
-  }
-  return requested;
-}
-function normalizeEscapeSequences(content) {
-  return content.replace(/\\n/g, "\n").replace(/\\t/g, "	").replace(/\\r/g, "\r");
-}
-function createDiff(oldContent, newContent) {
-  const oldLines = oldContent.split("\n");
-  const newLines = newContent.split("\n");
-  const diff = [];
-  const maxLines = Math.max(oldLines.length, newLines.length);
-  for (let i = 0; i < maxLines; i++) {
-    const oldLine = oldLines[i] || "";
-    const newLine = newLines[i] || "";
-    if (oldLine !== newLine) {
-      if (oldLine && !newLine) {
-        diff.push(`-${oldLine}`);
-      } else if (!oldLine && newLine) {
-        diff.push(`+${newLine}`);
-      } else {
-        diff.push(`-${oldLine}`);
-        diff.push(`+${newLine}`);
-      }
-    }
-  }
-  return diff;
-}
-function promptConfirmation(message) {
-  return new Promise((resolve) => {
-    const rl = _readline.createInterface.call(void 0, {
-      input: process.stdin,
-      output: process.stdout
-    });
-    rl.question(message, (answer) => {
-      rl.close();
-      resolve(answer.toLowerCase() === "y" || answer.toLowerCase() === "yes");
-    });
-  });
-}
-async function downloadConfigs(options) {
-  const { environments, verbose } = options;
-  const actualEnvironments = _nullishCoalesce(environments, () => ( DEFAULT_DOPPLER_ENVIRONMENT));
-  const configs = getConfigs(actualEnvironments, verbose);
-  if (verbose) {
-    console.log(
-      _chalk2.default.blue(
-        `
-\u2B07\uFE0F  Starting download process for ${configs.length} configuration(s)...`
-      )
-    );
-  }
-  if (configs.length === 1 && actualEnvironments !== "all") {
-    console.log(
-      "You can use -e all to download all configurations, or -e dev,stg for specific environments."
-    );
-  }
-  for (const config of configs) {
-    const envFile = `.env.${config}`;
-    const backupFile = `${envFile}.backup`;
-    let backupMsg = "";
-    if (verbose) {
-      console.log(_chalk2.default.blue(`
-\u{1F4E6} Processing config: ${_chalk2.default.cyan(config)}`));
-    }
-    try {
-      if (_fs.existsSync.call(void 0, envFile)) {
-        if (verbose) {
-          console.log(_chalk2.default.gray(`   Creating backup: ${backupFile}`));
-        }
-        _fs.renameSync.call(void 0, envFile, backupFile);
-        backupMsg = "Backed up existing file, ";
-      }
-      if (verbose) {
-        console.log(_chalk2.default.gray(`   Downloading secrets from Doppler...`));
-      }
-      const content = execDoppler(
-        [
-          "secrets",
-          "download",
-          "--no-file",
-          "--format",
-          "env",
-          "--config",
-          config
-        ],
-        "string",
-        !verbose,
-        // Only silent if not verbose
-        verbose
-      );
-      if (typeof content === "string") {
-        _fs.writeFileSync.call(void 0, envFile, content, "utf-8");
-        if (verbose) {
-          console.log(_chalk2.default.gray(`   Written to: ${envFile}`));
-        }
-      } else {
-        throw new Error("Invalid content received from Doppler");
-      }
-      console.log(
-        `Config ${_chalk2.default.blue(config)}: ${backupMsg}downloaded successfully to ${_chalk2.default.green(envFile)}`
-      );
-      if (config === "dev" && !_fs.existsSync.call(void 0, ".env")) {
-        _fs.copyFileSync.call(void 0, envFile, ".env");
-        console.log(
-          `Copied ${_chalk2.default.green(".env.dev")} to ${_chalk2.default.green(".env")}`
-        );
-      }
-      if (_fs.existsSync.call(void 0, backupFile)) {
-        if (verbose) {
-          console.log(_chalk2.default.gray(`   Removing backup file`));
-        }
-        _fs.unlinkSync.call(void 0, backupFile);
-      }
-    } catch (error) {
-      console.error(`Failed to download ${config}: ${_optionalChain([error, 'optionalAccess', _ => _.message]) || error}`);
-      if (_fs.existsSync.call(void 0, backupFile)) {
-        _fs.renameSync.call(void 0, backupFile, envFile);
-        console.log(`Restored backup for ${envFile}`);
-      }
-    }
-  }
-}
-async function uploadConfigs(options) {
-  const { environments, verbose } = options;
-  const configs = getConfigs(environments, verbose);
-  if (verbose) {
-    console.log(
-      _chalk2.default.blue(
-        `
-\u2B06\uFE0F  Starting upload process for ${configs.length} configuration(s)...`
-      )
-    );
-  }
-  for (const config of configs) {
-    const envFile = `.env.${config}`;
-    const backupFile = `${envFile}.doppler`;
-    const normalizedFile = `${envFile}.normalized`;
-    if (verbose) {
-      console.log(_chalk2.default.blue(`
-\u{1F4E6} Processing config: ${_chalk2.default.cyan(config)}`));
-    }
-    try {
-      if (!_fs.existsSync.call(void 0, envFile)) {
-        console.log(
-          `Config ${config}: ${_chalk2.default.green(envFile)} does not exist. Skipping upload.`
-        );
-        continue;
-      }
-      if (verbose) {
-        console.log(
-          _chalk2.default.gray(`   Creating backup of current Doppler config...`)
-        );
-      }
-      try {
-        const backupContent2 = execDoppler(
-          [
-            "secrets",
-            "download",
-            "--no-file",
-            "--format",
-            "env",
-            "--config",
-            config
-          ],
-          "string",
-          !verbose,
-          // Only silent if not verbose
-          verbose
-        );
-        if (typeof backupContent2 === "string") {
-          _fs.writeFileSync.call(void 0, backupFile, backupContent2, "utf-8");
-          if (verbose) {
-            console.log(_chalk2.default.gray(`   Backup created: ${backupFile}`));
-          }
-        } else {
-          throw new Error("Invalid backup content received from Doppler");
-        }
-      } catch (e5) {
-        console.log(
-          `Config ${config}: Failed to create backup. Skipping upload.`
-        );
-        continue;
-      }
-      if (verbose) {
-        console.log(_chalk2.default.gray(`   Reading local file: ${envFile}`));
-      }
-      const localContent = _fs.readFileSync.call(void 0, envFile, "utf-8");
-      const normalizedContent = normalizeEscapeSequences(localContent);
-      _fs.writeFileSync.call(void 0, normalizedFile, normalizedContent, "utf-8");
-      if (verbose) {
-        console.log(_chalk2.default.gray(`   Comparing local changes with Doppler...`));
-      }
-      const backupContent = _fs.readFileSync.call(void 0, backupFile, "utf-8");
-      const diff = createDiff(backupContent, normalizedContent);
-      if (diff.length === 0) {
-        console.log(`Config ${config}: No differences found. Skipping upload.`);
-        _fs.unlinkSync.call(void 0, backupFile);
-        _fs.unlinkSync.call(void 0, normalizedFile);
-        continue;
-      }
-      if (verbose) {
-        console.log(_chalk2.default.yellow(`   Found ${diff.length} line changes`));
-      }
-      console.log("\nChanges to be uploaded:");
-      for (const line of diff) {
-        if (line.startsWith("-")) {
-          console.log(_chalk2.default.red(line));
-        } else if (line.startsWith("+")) {
-          console.log(_chalk2.default.green(line));
-        }
-      }
-      const confirmed = await promptConfirmation(
-        "\nDo you want to proceed with the upload? (y/n) "
-      );
-      if (!confirmed) {
-        console.log(`Upload cancelled for ${_chalk2.default.green(envFile)}`);
-        _fs.unlinkSync.call(void 0, backupFile);
-        _fs.unlinkSync.call(void 0, normalizedFile);
-        continue;
-      }
-      if (verbose) {
-        console.log(_chalk2.default.gray(`   Uploading to Doppler...`));
-      }
-      try {
-        execDoppler(
-          ["secrets", "upload", normalizedFile, "--config", config, "--silent"],
-          "string",
-          !verbose,
-          // Only silent if not verbose
-          verbose
-        );
-        if (config === "dev") {
-          console.log(
-            `Config ${_chalk2.default.blue(config)}: Successfully uploaded ${_chalk2.default.green(envFile)}`
-          );
-        } else {
-          console.log(
-            `Config ${config}: Successfully uploaded ${_chalk2.default.green(envFile)}`
-          );
-        }
-      } catch (e6) {
-        console.error(
-          `Config ${config}: Failed to upload ${_chalk2.default.green(envFile)}. Restoring previous configuration.`
-        );
-        try {
-          if (verbose) {
-            console.log(_chalk2.default.gray(`   Restoring previous configuration...`));
-          }
-          execDoppler(
-            ["secrets", "upload", backupFile, "--config", config, "--silent"],
-            "string",
-            !verbose,
-            // Only silent if not verbose
-            verbose
-          );
-          console.log(
-            `Config ${config}: Successfully restored previous configuration`
-          );
-        } catch (e7) {
-          console.error(
-            `Config ${config}: Failed to restore previous configuration`
-          );
-        }
-      }
-      if (_fs.existsSync.call(void 0, backupFile)) {
-        _fs.unlinkSync.call(void 0, backupFile);
-      }
-      if (_fs.existsSync.call(void 0, normalizedFile)) {
-        _fs.unlinkSync.call(void 0, normalizedFile);
-      }
-    } catch (error) {
-      console.error(
-        `Error processing config ${config}: ${_optionalChain([error, 'optionalAccess', _2 => _2.message]) || error}`
-      );
-      if (_fs.existsSync.call(void 0, backupFile)) {
-        _fs.unlinkSync.call(void 0, backupFile);
-      }
-      if (_fs.existsSync.call(void 0, normalizedFile)) {
-        _fs.unlinkSync.call(void 0, normalizedFile);
-      }
-    }
-  }
-}
-async function cloneProject({ from, to, environments, force, verbose }) {
-  if (verbose) {
-    console.log(
-      _chalk2.default.blue(
-        `
-\u{1F501} Cloning from ${_chalk2.default.cyan(from)} to ${_chalk2.default.cyan(to)}...`
-      )
-    );
-  }
-  const configsToClone = getConfigs(environments, verbose, from);
-  if (configsToClone.length === 0) {
-    throw new Error(`No configurations found in source project "${from}"`);
-  }
-  const targetConfigsRaw = execDoppler(
-    ["configs", "--json", "--project", to],
-    "json",
-    true,
-    verbose
-  );
-  const targetConfigNames = Array.isArray(targetConfigsRaw) ? targetConfigsRaw.map((c) => c.name) : [];
-  const missingInTarget = configsToClone.filter(
-    (c) => !targetConfigNames.includes(c)
-  );
-  if (missingInTarget.length > 0) {
-    throw new Error(
-      `Configs missing in target project "${to}": ${missingInTarget.join(", ")}. Create them in Doppler first.`
-    );
-  }
-  for (const config of configsToClone) {
-    if (verbose) {
-      console.log(_chalk2.default.blue(`
-\u{1F4E6} Processing config: ${_chalk2.default.cyan(config)}`));
-    }
-    const sourceSecrets = execDoppler(
-      ["secrets", "--json", "--project", from, "--config", config],
-      "json",
-      true,
-      verbose
-    );
-    const sourceKeys = sourceSecrets ? Object.keys(sourceSecrets).filter((k) => !DOPPLER_INTERNAL_KEYS.has(k)) : [];
-    const targetSecrets = execDoppler(
-      ["secrets", "--json", "--project", to, "--config", config],
-      "json",
-      true,
-      verbose
-    );
-    const targetKeys = targetSecrets ? Object.keys(targetSecrets) : [];
-    const conflicts = sourceKeys.filter((k) => targetKeys.includes(k));
-    if (conflicts.length > 0) {
-      if (process.env["CI"]) {
-        throw new Error(
-          `Config "${config}" has ${conflicts.length} conflicting key(s) in target: ${conflicts.join(", ")}`
-        );
-      }
-      if (!force) {
-        console.log(
-          `
-Config ${_chalk2.default.cyan(config)}: ${conflicts.length} key(s) already exist in ${_chalk2.default.cyan(to)}:`
-        );
-        conflicts.forEach((k) => console.log(_chalk2.default.yellow(`  \u2022 ${k}`)));
-        const confirmed = await promptConfirmation(
-          `
-Overwrite these keys in "${to}/${config}"? (y/n) `
-        );
-        if (!confirmed) {
-          console.log(`Skipped ${_chalk2.default.blue(config)}`);
-          continue;
-        }
-      }
-    }
-    const tmpFile = _path.join.call(void 0, _os.tmpdir.call(void 0, ), `doppler-clone-${config}-${Date.now()}.env`);
-    try {
-      const content = execDoppler(
-        [
-          "secrets",
-          "download",
-          "--no-file",
-          "--format",
-          "env",
-          "--project",
-          from,
-          "--config",
-          config
-        ],
-        "string",
-        true,
-        verbose
-      );
-      if (typeof content !== "string" || !content) {
-        throw new Error(`No secrets returned for config "${config}"`);
-      }
-      const filtered = content.split("\n").filter((line) => {
-        const key = _nullishCoalesce(line.split("=")[0], () => ( ""));
-        return !DOPPLER_INTERNAL_KEYS.has(key);
-      }).join("\n");
-      _fs.writeFileSync.call(void 0, tmpFile, filtered, "utf-8");
-      execDoppler(
-        [
-          "secrets",
-          "upload",
-          tmpFile,
-          "--project",
-          to,
-          "--config",
-          config,
-          "--silent"
-        ],
-        "string",
-        true,
-        verbose
-      );
-      console.log(`Config ${_chalk2.default.blue(config)}: cloned to ${_chalk2.default.green(to)}`);
-    } finally {
-      if (_fs.existsSync.call(void 0, tmpFile)) {
-        _fs.unlinkSync.call(void 0, tmpFile);
-      }
-    }
-  }
-}
-
-
-
-
-
-
-
-
-
-
-
-
-exports.execDoppler = execDoppler; exports.checkDopplerAuth = checkDopplerAuth; exports.checkDependencies = checkDependencies; exports.getConfigs = getConfigs; exports.normalizeEscapeSequences = normalizeEscapeSequences; exports.createDiff = createDiff; exports.promptConfirmation = promptConfirmation; exports.downloadConfigs = downloadConfigs; exports.uploadConfigs = uploadConfigs; exports.cloneProject = cloneProject;

package/cjs/__chunks/JSL2JDMW.cjs

@@ -1 +0,0 @@
-"use strict";

package/cjs/__chunks/K4QNHRTP.cjs

@@ -1,163 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
-
-
-
-var _NWZGFHKHcjs = require('./NWZGFHKH.cjs');
-
-// src/commands/db/create-readonly-user/postgres.js
-var _pg = require('pg'); var _pg2 = _interopRequireDefault(_pg);
-var { Client } = _pg2.default;
-function createClient(config, database) {
-  return new Client({
-    host: config.host,
-    port: config.port,
-    user: config.user,
-    password: config.password,
-    database: _nullishCoalesce(database, () => ( (config.database || "postgres"))),
-    ssl: config.ssl
-  });
-}
-async function query(client, sql, params) {
-  return client.query(sql, params);
-}
-async function listPostgresDatabases(config) {
-  const client = createClient(config, config.database || "postgres");
-  await client.connect();
-  try {
-    const result = await query(
-      client,
-      `SELECT datname
-       FROM pg_database
-       WHERE datistemplate = false
-       ORDER BY datname`
-    );
-    return result.rows.map((row) => row.datname).filter((name) => !_NWZGFHKHcjs.isSystemDatabase.call(void 0, { engine: "postgres", name }));
-  } finally {
-    await client.end();
-  }
-}
-async function ensureRole(client, params) {
-  const { username, password } = params;
-  const ident = _NWZGFHKHcjs.quoteIdent.call(void 0, { engine: "postgres", name: username });
-  const passwordLiteral = _NWZGFHKHcjs.quoteLiteral.call(void 0, password);
-  const existing = await query(
-    client,
-    "SELECT 1 FROM pg_roles WHERE rolname = $1",
-    [username]
-  );
-  const statements = [];
-  if (existing.rowCount && existing.rowCount > 0) {
-    const sql2 = `ALTER ROLE ${ident} WITH LOGIN PASSWORD ${passwordLiteral}`;
-    statements.push(sql2);
-    await query(client, sql2);
-    return { created: false, statements };
-  }
-  const sql = `CREATE ROLE ${ident} WITH LOGIN PASSWORD ${passwordLiteral}`;
-  statements.push(sql);
-  await query(client, sql);
-  return { created: true, statements };
-}
-async function grantReadonlyInDatabase(client, params) {
-  const { username } = params;
-  const ident = _NWZGFHKHcjs.quoteIdent.call(void 0, { engine: "postgres", name: username });
-  const statements = [];
-  const schemasResult = await query(
-    client,
-    `SELECT nspname
-     FROM pg_namespace
-     WHERE nspname NOT IN ('pg_catalog', 'information_schema', 'pg_toast')
-       AND nspname NOT LIKE 'pg_temp_%'
-       AND nspname NOT LIKE 'pg_toast_temp_%'
-     ORDER BY nspname`
-  );
-  const schemas = schemasResult.rows.map(
-    (row) => row.nspname
-  );
-  if (schemas.length === 0) {
-    schemas.push("public");
-  }
-  for (const schema of schemas) {
-    const schemaIdent = _NWZGFHKHcjs.quoteIdent.call(void 0, { engine: "postgres", name: schema });
-    const grants = [
-      `GRANT USAGE ON SCHEMA ${schemaIdent} TO ${ident}`,
-      `GRANT SELECT ON ALL TABLES IN SCHEMA ${schemaIdent} TO ${ident}`,
-      `GRANT SELECT ON ALL SEQUENCES IN SCHEMA ${schemaIdent} TO ${ident}`,
-      `ALTER DEFAULT PRIVILEGES IN SCHEMA ${schemaIdent} GRANT SELECT ON TABLES TO ${ident}`,
-      `ALTER DEFAULT PRIVILEGES IN SCHEMA ${schemaIdent} GRANT SELECT ON SEQUENCES TO ${ident}`
-    ];
-    for (const sql of grants) {
-      statements.push(sql);
-      await query(client, sql);
-    }
-  }
-  return statements;
-}
-async function applyPostgresReadonly(params) {
-  const {
-    config,
-    username,
-    password,
-    databases,
-    dryRun = false,
-    verbose = false
-  } = params;
-  const statements = [];
-  let created = false;
-  if (dryRun) {
-    const ident = _NWZGFHKHcjs.quoteIdent.call(void 0, { engine: "postgres", name: username });
-    statements.push(
-      `-- Would CREATE/ALTER ROLE ${ident} WITH LOGIN PASSWORD ***`
-    );
-    for (const database of databases) {
-      const dbIdent = _NWZGFHKHcjs.quoteIdent.call(void 0, { engine: "postgres", name: database });
-      statements.push(`GRANT CONNECT ON DATABASE ${dbIdent} TO ${ident}`);
-      statements.push(
-        `-- In database ${database}: GRANT USAGE/SELECT on all user schemas + ALTER DEFAULT PRIVILEGES`
-      );
-    }
-    return { created: true, statements, databases };
-  }
-  const adminDb = config.database || "postgres";
-  const adminClient = createClient(config, adminDb);
-  await adminClient.connect();
-  try {
-    if (verbose) {
-      console.log(
-        `   Connected to Postgres as ${config.user}@${config.host}/${adminDb}`
-      );
-    }
-    const roleResult = await ensureRole(adminClient, { username, password });
-    created = roleResult.created;
-    statements.push(...roleResult.statements);
-    const ident = _NWZGFHKHcjs.quoteIdent.call(void 0, { engine: "postgres", name: username });
-    for (const database of databases) {
-      const dbIdent = _NWZGFHKHcjs.quoteIdent.call(void 0, { engine: "postgres", name: database });
-      const connectSql = `GRANT CONNECT ON DATABASE ${dbIdent} TO ${ident}`;
-      statements.push(connectSql);
-      await query(adminClient, connectSql);
-    }
-  } finally {
-    await adminClient.end();
-  }
-  for (const database of databases) {
-    const dbClient = createClient(config, database);
-    await dbClient.connect();
-    try {
-      if (verbose) {
-        console.log(`   Granting read-only in database ${database}`);
-      }
-      const dbStatements = await grantReadonlyInDatabase(dbClient, {
-        username
-      });
-      statements.push(...dbStatements);
-    } finally {
-      await dbClient.end();
-    }
-  }
-  return { created, statements, databases };
-}
-
-
-
-
-exports.listPostgresDatabases = listPostgresDatabases; exports.applyPostgresReadonly = applyPostgresReadonly;