@mtndev/cli 2.0.0 → 2.0.1

package/cjs/__chunks/LXDF5QVZ.cjs

@@ -1,313 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
-
-
-var _3A5ZYU5Mcjs = require('./3A5ZYU5M.cjs');
-
-
-
-var _K4QNHRTPcjs = require('./K4QNHRTP.cjs');
-
-
-
-
-
-var _H74JSDBUcjs = require('./H74JSDBU.cjs');
-
-
-
-
-
-
-var _NWZGFHKHcjs = require('./NWZGFHKH.cjs');
-
-
-
-
-var _CMUD7LLNcjs = require('./CMUD7LLN.cjs');
-
-// src/commands/db/create-readonly-user/handler.js
-var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
-var _zod = require('zod');
-async function resolveEngine(engineOption, url) {
-  if (engineOption) {
-    return engineOption;
-  }
-  if (url) {
-    const detected = _NWZGFHKHcjs.detectEngineFromUrl.call(void 0, url);
-    if (detected) {
-      return detected;
-    }
-  }
-  const index = await _CMUD7LLNcjs.promptChoice.call(void 0, {
-    message: "Choose a database engine:",
-    options: ["postgres", "mysql"]
-  });
-  const chosen = _H74JSDBUcjs.ENGINES[index];
-  if (!chosen) {
-    throw new Error("No engine selected");
-  }
-  return chosen;
-}
-async function resolveUrl(params) {
-  const { urlOption, engine } = params;
-  const fromEnv = _NWZGFHKHcjs.resolveAdminUrl.call(void 0, { url: urlOption, engine });
-  if (fromEnv) {
-    return fromEnv;
-  }
-  const example = engine === "postgres" ? "postgresql://admin:pass@host:5432/postgres" : "mysql://admin:pass@host:3306/";
-  const raw = await _CMUD7LLNcjs.prompt.call(void 0, `  Admin connection URL (e.g. ${example}): `);
-  if (!raw) {
-    throw new Error(
-      "Admin connection URL is required (pass --url or set DATABASE_URL)"
-    );
-  }
-  return raw;
-}
-async function resolveScope(params) {
-  const { databaseOption, databases } = params;
-  if (databaseOption) {
-    const normalized = databaseOption.trim().toLowerCase();
-    if (normalized === "all" || normalized === "*") {
-      return { mode: "all", databases };
-    }
-    if (!databases.includes(databaseOption)) {
-      throw new Error(
-        `Database "${databaseOption}" not found. Available: ${databases.join(", ") || "(none)"}`
-      );
-    }
-    return { mode: "one", databases: [databaseOption] };
-  }
-  if (databases.length === 0) {
-    throw new Error("No user databases found to grant access on.");
-  }
-  const options = [
-    ...databases.map((name) => name),
-    `all (${databases.length} databases)`
-  ];
-  const index = await _CMUD7LLNcjs.promptChoice.call(void 0, {
-    message: "Grant read-only on which database?",
-    options
-  });
-  if (index === options.length - 1) {
-    return { mode: "all", databases };
-  }
-  const chosen = databases[index];
-  if (!chosen) {
-    throw new Error("No database selected");
-  }
-  return { mode: "one", databases: [chosen] };
-}
-async function resolveUsername(usernameOption) {
-  if (usernameOption) {
-    return usernameOption;
-  }
-  const raw = await _CMUD7LLNcjs.prompt.call(void 0, 
-    `  Read-only username [default: ${_H74JSDBUcjs.DEFAULT_READONLY_USERNAME}]: `
-  );
-  const username = raw || _H74JSDBUcjs.DEFAULT_READONLY_USERNAME;
-  if (!/^[A-Za-z0-9_]+$/.test(username)) {
-    throw new Error(
-      "Username must contain only letters, numbers, and underscores"
-    );
-  }
-  return username;
-}
-async function resolvePassword(passwordOption) {
-  if (passwordOption) {
-    return { password: passwordOption, generated: false };
-  }
-  const generate = await _CMUD7LLNcjs.promptYesNo.call(void 0, {
-    message: "  Generate a random password?",
-    defaultYes: true
-  });
-  if (generate) {
-    return { password: _NWZGFHKHcjs.generatePassword.call(void 0, ), generated: true };
-  }
-  const password = await _CMUD7LLNcjs.prompt.call(void 0, "  Password: ");
-  if (!password) {
-    throw new Error("Password is required");
-  }
-  return { password, generated: false };
-}
-function redactUrl(url) {
-  try {
-    const parsed = new URL(url);
-    if (parsed.password) {
-      parsed.password = "***";
-    }
-    return parsed.toString();
-  } catch (e) {
-    return url;
-  }
-}
-async function createReadonlyUserCommand(options) {
-  try {
-    const {
-      engine: engineOption,
-      url: urlOption,
-      database: databaseOption,
-      username: usernameOption,
-      password: passwordOption,
-      hostPattern: hostPatternOption,
-      ssl: sslOption,
-      yes,
-      dryRun,
-      verbose
-    } = _H74JSDBUcjs.createReadonlyUserOptionsSchema.parse(options);
-    console.log(_chalk2.default.blue("\nCreate read-only database user"));
-    console.log("");
-    const urlForDetect = _NWZGFHKHcjs.resolveAdminUrl.call(void 0, {
-      url: urlOption,
-      engine: engineOption
-    });
-    const engine = await resolveEngine(engineOption, urlForDetect);
-    console.log(`Engine: ${engine}`);
-    const url = await resolveUrl({ urlOption, engine });
-    const config = _NWZGFHKHcjs.parseConnectionUrl.call(void 0, {
-      url,
-      engine,
-      sslOption
-    });
-    console.log(
-      `Admin:  ${config.user}@${config.host}:${config.port}` + (config.database ? `/${config.database}` : "")
-    );
-    console.log("");
-    const listed = engine === "postgres" ? await _K4QNHRTPcjs.listPostgresDatabases.call(void 0, config) : await _3A5ZYU5Mcjs.listMysqlDatabases.call(void 0, config);
-    if (verbose) {
-      console.log(`Found databases: ${listed.join(", ") || "(none)"}`);
-      console.log("");
-    }
-    const scope = await resolveScope({
-      databaseOption,
-      databases: listed
-    });
-    console.log(
-      scope.mode === "all" ? `Scope:  all (${scope.databases.length} databases)` : `Scope:  ${scope.databases[0]}`
-    );
-    console.log("");
-    const username = await resolveUsername(usernameOption);
-    const { password, generated } = await resolvePassword(passwordOption);
-    const hostPattern = _nullishCoalesce(hostPatternOption, () => ( _H74JSDBUcjs.DEFAULT_MYSQL_HOST_PATTERN));
-    console.log("");
-    console.log("Plan:");
-    console.log(`  User:     ${username}`);
-    console.log(
-      `  Password: ${generated ? "(generated)" : "(provided)"}${dryRun ? " [dry-run]" : ""}`
-    );
-    if (engine === "mysql") {
-      console.log(`  Host:     ${hostPattern}`);
-    }
-    console.log(
-      scope.mode === "all" ? `  Grants:   SELECT on ALL databases (${scope.databases.length})` : `  Grants:   SELECT on ${scope.databases[0]}`
-    );
-    if (scope.mode === "all" && engine === "postgres") {
-      console.log(
-        _chalk2.default.yellow(
-          "  Note:     Databases created later will NOT get these grants automatically \u2014 re-run this command."
-        )
-      );
-    }
-    console.log("");
-    if (!yes && !dryRun) {
-      const confirmed = await _CMUD7LLNcjs.promptYesNo.call(void 0, {
-        message: "Apply these changes?",
-        defaultYes: false
-      });
-      if (!confirmed) {
-        console.log("Aborted.");
-        return;
-      }
-      console.log("");
-    }
-    const result = engine === "postgres" ? await _K4QNHRTPcjs.applyPostgresReadonly.call(void 0, {
-      config,
-      username,
-      password,
-      databases: scope.databases,
-      dryRun,
-      verbose
-    }) : await _3A5ZYU5Mcjs.applyMysqlReadonly.call(void 0, {
-      config,
-      username,
-      password,
-      databases: scope.mode === "all" ? "all" : scope.databases,
-      hostPattern,
-      dryRun,
-      verbose
-    });
-    if (dryRun) {
-      console.log(_chalk2.default.cyan("Dry run \u2014 SQL that would run:"));
-      for (const statement of result.statements) {
-        console.log(`  ${statement}`);
-      }
-      console.log("");
-      console.log(_chalk2.default.cyan("No changes made."));
-      return;
-    }
-    console.log(
-      _chalk2.default.green(
-        result.created ? `Created user "${username}" and granted read-only access.` : `Updated user "${username}" password and refreshed read-only grants.`
-      )
-    );
-    console.log("");
-    const sampleDb = scope.mode === "one" ? _nullishCoalesce(scope.databases[0], () => ( "")) : _nullishCoalesce(scope.databases[0], () => ( ""));
-    const readonlyUrl = _NWZGFHKHcjs.buildReadonlyUrl.call(void 0, {
-      engine,
-      host: config.host,
-      port: config.port,
-      username,
-      password,
-      database: sampleDb
-    });
-    console.log("Connection (secret shown once \u2014 copy now):");
-    console.log(
-      "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"
-    );
-    console.log(readonlyUrl);
-    if (scope.mode === "all") {
-      console.log("");
-      console.log(
-        _chalk2.default.gray(
-          `  (URL uses database "${sampleDb}" as an example; user can connect to any granted database.)`
-        )
-      );
-    }
-    console.log(
-      "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"
-    );
-    console.log("");
-    console.log(_chalk2.default.gray(`Admin URL used: ${redactUrl(url)}`));
-  } catch (error) {
-    if (error instanceof _zod.ZodError) {
-      console.error(_chalk2.default.red("\n\u274C Invalid command options:"));
-      error.errors.forEach((err) => {
-        console.error(_chalk2.default.red(`   ${err.path.join(".")}: ${err.message}`));
-      });
-      process.exit(1);
-    }
-    const verbose = (
-      /** @type {any} */
-      _optionalChain([options, 'optionalAccess', _ => _.verbose]) || false
-    );
-    console.error(_chalk2.default.red("\n\u274C create-readonly-user failed:"));
-    if (error instanceof Error) {
-      console.error(_chalk2.default.red(`   ${error.message}`));
-      if (verbose && error.stack) {
-        console.error(_chalk2.default.gray("\nStack trace:"));
-        console.error(_chalk2.default.gray(error.stack));
-      }
-    } else {
-      console.error(_chalk2.default.red(`   ${String(error)}`));
-    }
-    console.error(
-      _chalk2.default.yellow(
-        "\n\u{1F4A1} Pass --url or set DATABASE_URL. Use --verbose for details.\n"
-      )
-    );
-    process.exit(1);
-  }
-}
-
-
-
-exports.createReadonlyUserCommand = createReadonlyUserCommand;

package/cjs/__chunks/LXOOJR2R.cjs

@@ -1,74 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
-
-var _XMKOKRXZcjs = require('./XMKOKRXZ.cjs');
-
-
-var _3T2LXW7Jcjs = require('./3T2LXW7J.cjs');
-
-
-
-var _R3GUC7O7cjs = require('./R3GUC7O7.cjs');
-
-
-var _NT2XXAI6cjs = require('./NT2XXAI6.cjs');
-
-// src/commands/aws/iam/users/handler.js
-var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
-var _zod = require('zod');
-async function usersCommand(options) {
-  try {
-    const {
-      accountName,
-      profile: profileOption,
-      verbose
-    } = _XMKOKRXZcjs.usersOptionsSchema.parse(options);
-    _R3GUC7O7cjs.requireCommands.call(void 0, ["aws"]);
-    const profile = await _NT2XXAI6cjs.resolveProfile.call(void 0, { profile: profileOption });
-    console.log(_chalk2.default.blue("\nAWS IAM user management"));
-    console.log("");
-    console.log("Caller:");
-    const identity = _R3GUC7O7cjs.getCallerIdentity.call(void 0, { profile, verbose });
-    console.log(`  Account: ${identity.Account}`);
-    console.log(`  Arn:     ${identity.Arn}`);
-    console.log("");
-    await _3T2LXW7Jcjs.createUsersInteractive.call(void 0, {
-      accountName,
-      profile,
-      identity,
-      verbose
-    });
-    console.log("Done.");
-  } catch (error) {
-    if (error instanceof _zod.ZodError) {
-      console.error(_chalk2.default.red("\n\u274C Invalid command options:"));
-      error.errors.forEach((err) => {
-        console.error(_chalk2.default.red(`   ${err.path.join(".")}: ${err.message}`));
-      });
-      process.exit(1);
-    }
-    const verbose = (
-      /** @type {any} */
-      _optionalChain([options, 'optionalAccess', _ => _.verbose]) || false
-    );
-    console.error(_chalk2.default.red("\n\u274C iam users failed:"));
-    if (error instanceof Error) {
-      console.error(_chalk2.default.red(`   ${error.message}`));
-      if (verbose && error.stack) {
-        console.error(_chalk2.default.gray("\nStack trace:"));
-        console.error(_chalk2.default.gray(error.stack));
-      }
-    } else {
-      console.error(_chalk2.default.red(`   ${String(error)}`));
-    }
-    console.error(
-      _chalk2.default.yellow(
-        "\n\u{1F4A1} Requires the AWS CLI and a profile with IAM write access.\n"
-      )
-    );
-    process.exit(1);
-  }
-}
-
-
-
-exports.usersCommand = usersCommand;

package/cjs/__chunks/N5MXFOQZ.cjs

@@ -1,167 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
-
-var _S3LVCWPNcjs = require('./S3LVCWPN.cjs');
-
-
-
-
-var _T2A7TN4Fcjs = require('./T2A7TN4F.cjs');
-
-
-var _R3GUC7O7cjs = require('./R3GUC7O7.cjs');
-
-
-var _CMUD7LLNcjs = require('./CMUD7LLN.cjs');
-
-// src/commands/aws/iam/remove-admin/handler.js
-var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
-var _zod = require('zod');
-async function removeAdminCommand(options) {
-  try {
-    const { profile, all, user, yes, dryRun, verbose } = _S3LVCWPNcjs.removeAdminOptionsSchema.parse(options);
-    _R3GUC7O7cjs.requireCommands.call(void 0, ["aws"]);
-    const userFilter = new Set(user);
-    const needsVault = all || !(_nullishCoalesce(profile, () => ( process.env.AWS_PROFILE)));
-    if (needsVault) {
-      _R3GUC7O7cjs.requireCommands.call(void 0, ["aws-vault"]);
-    }
-    let profiles;
-    try {
-      profiles = _T2A7TN4Fcjs.resolveAdminScanProfiles.call(void 0, { profile, all });
-    } catch (resolveError) {
-      if (resolveError instanceof Error && resolveError.message === "No aws-vault profiles with credentials found.") {
-        console.error(_chalk2.default.red(resolveError.message));
-        process.exit(1);
-      }
-      throw resolveError;
-    }
-    console.log(
-      _chalk2.default.blue(
-        `
-==> Removing break-glass access (${_T2A7TN4Fcjs.ADMIN_GROUP_NAME}) across ${profiles.length} profile(s)
-`
-      )
-    );
-    if (dryRun) {
-      console.log(_chalk2.default.yellow("[dry-run] No changes will be made.\n"));
-    }
-    let removed = 0;
-    let cleaned = 0;
-    let skipped = 0;
-    for (const candidate of profiles) {
-      const scan = _T2A7TN4Fcjs.resolveProfileScan.call(void 0, { profile: candidate, verbose });
-      if (!scan) {
-        skipped += 1;
-        continue;
-      }
-      if (scan.users.length === 0) {
-        if (verbose) {
-          console.log(
-            _chalk2.default.green(`OK     ${candidate} (${scan.accountId}) \u2014 0 users`)
-          );
-        }
-        cleaned += 1;
-        continue;
-      }
-      const targets = userFilter.size > 0 ? scan.users.filter((name) => userFilter.has(name)) : scan.users;
-      if (targets.length === 0) {
-        console.log(
-          _chalk2.default.dim(
-            `--     ${candidate} (${scan.accountId}) \u2014 has users but none match --user`
-          )
-        );
-        skipped += 1;
-        continue;
-      }
-      console.log(
-        _chalk2.default.red(
-          `FOUND  ${candidate} (${scan.accountId}) \u2014 ${targets.length} user(s): ${targets.join(", ")}`
-        )
-      );
-      if (dryRun) {
-        for (const name of targets) {
-          console.log(
-            _chalk2.default.yellow(
-              `  [dry-run] would remove ${name} from ${_T2A7TN4Fcjs.ADMIN_GROUP_NAME}`
-            )
-          );
-        }
-        continue;
-      }
-      let confirmed = yes;
-      if (!confirmed) {
-        confirmed = await _CMUD7LLNcjs.promptYesNo.call(void 0, {
-          message: `  Remove ${targets.length} user(s) from ${_T2A7TN4Fcjs.ADMIN_GROUP_NAME} in ${candidate}?`,
-          defaultYes: false
-        });
-      }
-      if (!confirmed) {
-        console.log(_chalk2.default.dim("  skipped (not confirmed)"));
-        skipped += 1;
-        continue;
-      }
-      for (const name of targets) {
-        try {
-          scan.run(
-            [
-              "iam",
-              "remove-user-from-group",
-              "--group-name",
-              _T2A7TN4Fcjs.ADMIN_GROUP_NAME,
-              "--user-name",
-              name
-            ],
-            { expectJson: false }
-          );
-          console.log(_chalk2.default.green(`  removed ${name}`));
-          removed += 1;
-        } catch (removeError) {
-          const reason = removeError instanceof Error ? _nullishCoalesce(removeError.message.split("\n")[0], () => ( "")) : String(removeError);
-          console.log(_chalk2.default.red(`  failed to remove ${name}: ${reason}`));
-        }
-      }
-    }
-    console.log(_chalk2.default.blue("\n==> Summary"));
-    console.log(`  Profiles scanned:  ${profiles.length}`);
-    console.log(`  Users removed:     ${removed}`);
-    console.log(`  Already clean:     ${cleaned}`);
-    console.log(`  Skipped:           ${skipped}`);
-    if (dryRun) {
-      console.log(
-        _chalk2.default.yellow("\n[dry-run] Re-run without --dry-run to apply changes.")
-      );
-    }
-  } catch (error) {
-    if (error instanceof _zod.ZodError) {
-      console.error(_chalk2.default.red("\n\u274C Invalid command options:"));
-      error.errors.forEach((err) => {
-        console.error(_chalk2.default.red(`   ${err.path.join(".")}: ${err.message}`));
-      });
-      process.exit(1);
-    }
-    const verbose = (
-      /** @type {any} */
-      _optionalChain([options, 'optionalAccess', _ => _.verbose]) || false
-    );
-    console.error(_chalk2.default.red("\n\u274C remove-admin failed:"));
-    if (error instanceof Error) {
-      console.error(_chalk2.default.red(`   ${error.message}`));
-      if (verbose && error.stack) {
-        console.error(_chalk2.default.gray("\nStack trace:"));
-        console.error(_chalk2.default.gray(error.stack));
-      }
-    } else {
-      console.error(_chalk2.default.red(`   ${String(error)}`));
-    }
-    console.error(
-      _chalk2.default.yellow(
-        "\n\u{1F4A1} Requires the AWS CLI (and aws-vault when scanning multiple profiles) and iam:RemoveUserFromGroup.\n"
-      )
-    );
-    process.exit(1);
-  }
-}
-
-
-
-exports.removeAdminCommand = removeAdminCommand;

package/cjs/__chunks/N7D56LPP.cjs

@@ -1,25 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-var _WOYF2L6Tcjs = require('./WOYF2L6T.cjs');
-
-// src/commands/aws/ses/send-email/schema.js
-var _zod = require('zod');
-var sendEmailOptionsSchema = _zod.z.object({
-  to: _zod.z.string({ required_error: "--to <address> is required" }).describe("Recipient email address"),
-  from: _zod.z.string({ required_error: "--from <address> is required" }).describe("Verified SES sender email address"),
-  subject: _zod.z.string().optional().default("MTN CLI test email").describe("Email subject line"),
-  body: _zod.z.string().optional().describe("Email body (defaults to a timestamp and random token)"),
-  transport: _zod.z.enum(["api", "smtp"]).optional().default("api").describe("Send via the SES API (default) or SES SMTP"),
-  region: _zod.z.string().optional().default("us-east-1").describe("AWS region for the SES endpoint"),
-  profile: _WOYF2L6Tcjs.profileField,
-  accessKeyId: _zod.z.string().optional().describe(
-    "IAM access key ID used as the SMTP username (smtp transport only)"
-  ),
-  dryRun: _zod.z.boolean().optional().default(false).describe("Print the email payload without sending"),
-  verbose: _WOYF2L6Tcjs.verboseField
-});
-
-
-
-exports.sendEmailOptionsSchema = sendEmailOptionsSchema;