@mtndev/cli 2.0.0 → 2.0.1

package/cjs/__chunks/YRHFKTW2.cjs

@@ -1,63 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
-
-
-var _GUL36IFZcjs = require('./GUL36IFZ.cjs');
-
-// src/commands/aws/ses/send-email/utils.js
-var _crypto = require('crypto');
-function defaultBody() {
-  const token = _crypto.randomBytes.call(void 0, 16).toString("hex");
-  const sentAt = (/* @__PURE__ */ new Date()).toISOString();
-  return `MTN CLI test email \u2014 random token: ${token} \u2014 sent at ${sentAt}`;
-}
-async function sendViaApi(params) {
-  const { to, from, subject, body, region, profile } = params;
-  const { SESClient, SendEmailCommand } = await Promise.resolve().then(() => _interopRequireWildcard(require("@aws-sdk/client-ses")));
-  const { fromNodeProviderChain } = await Promise.resolve().then(() => _interopRequireWildcard(require("@aws-sdk/credential-providers")));
-  const client = new SESClient({
-    region,
-    credentials: fromNodeProviderChain(profile ? { profile } : {})
-  });
-  const command = new SendEmailCommand({
-    Source: from,
-    Destination: { ToAddresses: [to] },
-    Message: {
-      Subject: { Data: subject },
-      Body: { Text: { Data: body } }
-    }
-  });
-  const result = await client.send(command);
-  return result.MessageId;
-}
-async function sendViaSmtp(params) {
-  const { to, from, subject, body, region, accessKeyId } = params;
-  const user = _nullishCoalesce(process.env.SES_SMTP_USER, () => ( accessKeyId));
-  let pass = process.env.SES_SMTP_PASSWORD;
-  if (!pass) {
-    const secret = process.env.AWS_SECRET_ACCESS_KEY;
-    if (secret) {
-      pass = _GUL36IFZcjs.calculateSmtpPassword.call(void 0, { secretAccessKey: secret, region });
-    }
-  }
-  if (!user || !pass) {
-    throw new Error(
-      "SMTP transport requires SES_SMTP_USER and SES_SMTP_PASSWORD, or AWS_SECRET_ACCESS_KEY (plus --access-key-id) to derive the SMTP password."
-    );
-  }
-  const nodemailerModule = await Promise.resolve().then(() => _interopRequireWildcard(require("nodemailer")));
-  const nodemailer = _nullishCoalesce(nodemailerModule.default, () => ( nodemailerModule));
-  const transporter = nodemailer.createTransport({
-    host: _GUL36IFZcjs.smtpEndpoint.call(void 0, region),
-    port: 587,
-    secure: false,
-    auth: { user, pass }
-  });
-  const info = await transporter.sendMail({ from, to, subject, text: body });
-  return info.messageId;
-}
-
-
-
-
-
-exports.defaultBody = defaultBody; exports.sendViaApi = sendViaApi; exports.sendViaSmtp = sendViaSmtp;

package/cjs/__chunks/ZMDIOZPT.cjs

@@ -1,22 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/commands/schema.js
-var _zod = require('zod');
-var globalOptionsSchema = _zod.z.object({
-  verbose: _zod.z.boolean().default(false).optional().describe("Enable verbose logging for detailed output and error traces")
-});
-var globalCommandsMetadata = {
-  name: "mtndev-cli",
-  version: "1.0.0",
-  description: "Omnibus CLI tool for mtndev projects",
-  options: {
-    verbose: {
-      description: globalOptionsSchema.shape.verbose.description,
-      default: false,
-      alias: "v"
-    }
-  }
-};
-
-
-
-
-exports.globalOptionsSchema = globalOptionsSchema; exports.globalCommandsMetadata = globalCommandsMetadata;

package/cjs/commands/aws/iam/policies/s3-restrictions-deny-non-s3-services.cjs

@@ -1,28 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/commands/aws/iam/policies/s3-restrictions-deny-non-s3-services.json
-var Version = "2012-10-17";
-var Statement = [
-  {
-    Sid: "DenyNonS3Services",
-    Effect: "Deny",
-    NotAction: [
-      "s3:*",
-      "logs:*",
-      "sts:AssumeRole",
-      "iam:PassRole",
-      "kms:Decrypt",
-      "kms:GenerateDataKey",
-      "kms:DescribeKey",
-      "lambda:InvokeFunction"
-    ],
-    Resource: "*"
-  }
-];
-var s3_restrictions_deny_non_s3_services_default = {
-  Version,
-  Statement
-};
-
-
-
-
-exports.Statement = Statement; exports.Version = Version; exports.default = s3_restrictions_deny_non_s3_services_default;

package/cjs/commands/aws/iam/policies/sts-federation.cjs

@@ -1,19 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/commands/aws/iam/policies/sts-federation.json
-var Version = "2012-10-17";
-var Statement = [
-  {
-    Sid: "StsFederation",
-    Effect: "Allow",
-    Action: ["sts:GetFederationToken", "sts:GetCallerIdentity"],
-    Resource: "*"
-  }
-];
-var sts_federation_default = {
-  Version,
-  Statement
-};
-
-
-
-
-exports.Statement = Statement; exports.Version = Version; exports.default = sts_federation_default;

package/cjs/commands/aws/iam/policies/user-admins-deny-list.cjs

@@ -1,183 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/commands/aws/iam/policies/user-admins-deny-list.json
-var Version = "2012-10-17";
-var Statement = [
-  {
-    Sid: "DenyAIServices",
-    Effect: "Deny",
-    Action: [
-      "bedrock:*",
-      "sagemaker:*",
-      "comprehend:*",
-      "comprehendmedical:*",
-      "rekognition:*",
-      "textract:*",
-      "personalize:*",
-      "forecast:*",
-      "lex:*",
-      "polly:*",
-      "translate:*",
-      "transcribe:*",
-      "kendra:*",
-      "q:*"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "DenyOrgAndAccountWrites",
-    Effect: "Deny",
-    Action: [
-      "organizations:*",
-      "account:CloseAccount",
-      "account:DeleteAlternateContact",
-      "account:PutAlternateContact",
-      "account:PutChallengeQuestions",
-      "account:EnableRegion",
-      "account:DisableRegion",
-      "account:PutAccountName"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "DenyBillingMutations",
-    Effect: "Deny",
-    Action: [
-      "aws-portal:Modify*",
-      "billing:Update*",
-      "billing:Put*",
-      "billing:Delete*",
-      "budgets:Modify*",
-      "budgets:Create*",
-      "budgets:Delete*",
-      "savingsplans:Create*",
-      "savingsplans:Delete*",
-      "supportplans:Create*",
-      "supportplans:Delete*",
-      "purchase-orders:Modify*",
-      "purchase-orders:Create*",
-      "cur:Put*",
-      "cur:Delete*"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "DenyCloudTrailTampering",
-    Effect: "Deny",
-    Action: [
-      "cloudtrail:StopLogging",
-      "cloudtrail:DeleteTrail",
-      "cloudtrail:UpdateTrail",
-      "cloudtrail:PutEventSelectors",
-      "cloudtrail:DeleteEventDataStore"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "DenyExpensiveServices",
-    Effect: "Deny",
-    Action: [
-      "airflow:CreateEnvironment",
-      "airflow:UpdateEnvironment",
-      "mwaa:*",
-      "transfer:CreateServer",
-      "transfer:UpdateServer",
-      "transfer:StartServer",
-      "shield:CreateSubscription",
-      "shield:CreateProtection",
-      "shield:CreateProtectionGroup"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "DenyKMSDestruction",
-    Effect: "Deny",
-    Action: [
-      "kms:ScheduleKeyDeletion",
-      "kms:DisableKey",
-      "kms:DisableKeyRotation"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "DenyNeptuneViaRds",
-    Effect: "Deny",
-    Action: [
-      "rds:CreateDBCluster",
-      "rds:CreateDBInstance",
-      "rds:ModifyDBCluster",
-      "rds:ModifyDBInstance",
-      "rds:RestoreDBClusterFromSnapshot",
-      "rds:RestoreDBInstanceFromDBSnapshot"
-    ],
-    Resource: "*",
-    Condition: {
-      StringEquals: {
-        "rds:DatabaseEngine": "neptune"
-      }
-    }
-  },
-  {
-    Sid: "DenyExpensiveGpuEc2",
-    Effect: "Deny",
-    Action: [
-      "ec2:RunInstances",
-      "ec2:RequestSpotInstances",
-      "ec2:RequestSpotFleet",
-      "ec2:ModifyInstanceAttribute"
-    ],
-    Resource: "*",
-    Condition: {
-      StringLike: {
-        "ec2:InstanceType": [
-          "p2.*",
-          "p3.*",
-          "p4d.*",
-          "p4de.*",
-          "p5.*",
-          "p5d.*",
-          "p5e.*",
-          "p5en.*",
-          "p6*",
-          "g3.*",
-          "g3s.*",
-          "g4dn.*",
-          "g4ad.*",
-          "g5.*",
-          "g5g.*",
-          "g6.*",
-          "g6e.*",
-          "g6f.*",
-          "inf1.*",
-          "inf2.*",
-          "trn1.*",
-          "trn1n.*",
-          "trn2.*",
-          "trn2a.*",
-          "trn2i.*",
-          "dl1.*",
-          "dl2q.*",
-          "f1.*",
-          "f2.*",
-          "vt1.*",
-          "hpc6id.*",
-          "u-12tb1.metal",
-          "u-18tb1.metal",
-          "u-24tb1.metal",
-          "u-6tb1.56xlarge",
-          "u-9tb1.112xlarge",
-          "x2iedn.*",
-          "x2idn.*",
-          "x2iezn.*"
-        ]
-      }
-    }
-  }
-];
-var user_admins_deny_list_default = {
-  Version,
-  Statement
-};
-
-
-
-
-exports.Statement = Statement; exports.Version = Version; exports.default = user_admins_deny_list_default;

package/cjs/commands/aws/iam/policies/user-admins-deny-regions-list.cjs

@@ -1,49 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/commands/aws/iam/policies/user-admins-deny-regions-list.json
-var Version = "2012-10-17";
-var Statement = [
-  {
-    Sid: "DenyNonApprovedRegions",
-    Effect: "Deny",
-    NotAction: [
-      "iam:*",
-      "organizations:*",
-      "route53:*",
-      "route53domains:*",
-      "cloudfront:*",
-      "waf:*",
-      "wafv2:*",
-      "shield:*",
-      "globalaccelerator:*",
-      "sts:*",
-      "support:*",
-      "supportplans:*",
-      "trustedadvisor:*",
-      "health:*",
-      "budgets:*",
-      "ce:*",
-      "cur:*",
-      "account:*",
-      "billing:*",
-      "aws-portal:*",
-      "tag:*",
-      "resource-groups:*",
-      "ram:*",
-      "cloudshell:*"
-    ],
-    Resource: "*",
-    Condition: {
-      StringNotEquals: {
-        "aws:RequestedRegion": ["us-east-1", "us-east-2", "us-west-2"]
-      }
-    }
-  }
-];
-var user_admins_deny_regions_list_default = {
-  Version,
-  Statement
-};
-
-
-
-
-exports.Statement = Statement; exports.Version = Version; exports.default = user_admins_deny_regions_list_default;

package/cjs/commands/aws/iam/policies/user-admins-self-service-iam.cjs

@@ -1,64 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/commands/aws/iam/policies/user-admins-self-service-iam.json
-var Version = "2012-10-17";
-var Statement = [
-  {
-    Sid: "ViewAccountInfo",
-    Effect: "Allow",
-    Action: ["iam:GetAccountPasswordPolicy", "iam:ListVirtualMFADevices"],
-    Resource: "*"
-  },
-  {
-    Sid: "ManageOwnPassword",
-    Effect: "Allow",
-    Action: ["iam:ChangePassword", "iam:GetUser"],
-    Resource: "arn:aws:iam::*:user/${aws:username}"
-  },
-  {
-    Sid: "ManageOwnAccessKeys",
-    Effect: "Allow",
-    Action: [
-      "iam:CreateAccessKey",
-      "iam:DeleteAccessKey",
-      "iam:ListAccessKeys",
-      "iam:UpdateAccessKey",
-      "iam:GetAccessKeyLastUsed"
-    ],
-    Resource: "arn:aws:iam::*:user/${aws:username}"
-  },
-  {
-    Sid: "ManageOwnMFA",
-    Effect: "Allow",
-    Action: [
-      "iam:CreateVirtualMFADevice",
-      "iam:DeleteVirtualMFADevice",
-      "iam:EnableMFADevice",
-      "iam:ListMFADevices",
-      "iam:ResyncMFADevice",
-      "iam:DeactivateMFADevice"
-    ],
-    Resource: [
-      "arn:aws:iam::*:mfa/${aws:username}",
-      "arn:aws:iam::*:user/${aws:username}"
-    ]
-  },
-  {
-    Sid: "ValidateIAMPolicies",
-    Effect: "Allow",
-    Action: [
-      "access-analyzer:ValidatePolicy",
-      "access-analyzer:CheckAccessNotGranted",
-      "access-analyzer:CheckNoNewAccess",
-      "access-analyzer:CheckNoPublicAccess"
-    ],
-    Resource: "*"
-  }
-];
-var user_admins_self_service_iam_default = {
-  Version,
-  Statement
-};
-
-
-
-
-exports.Statement = Statement; exports.Version = Version; exports.default = user_admins_self_service_iam_default;

package/cjs/commands/aws/iam/policies/user-admins-write-list.cjs

@@ -1,125 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/commands/aws/iam/policies/user-admins-write-list.json
-var Version = "2012-10-17";
-var Statement = [
-  {
-    Sid: "WriteComputeAndNetwork",
-    Effect: "Allow",
-    Action: [
-      "ec2:*",
-      "elasticloadbalancing:*",
-      "autoscaling:*",
-      "application-autoscaling:*",
-      "lambda:*",
-      "ecs:*",
-      "ecr:*",
-      "elasticfilesystem:*",
-      "route53:*",
-      "route53domains:*",
-      "cloudfront:*",
-      "apigateway:*",
-      "servicediscovery:*"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "WriteDataAndStorage",
-    Effect: "Allow",
-    Action: ["s3:*", "rds:*", "pi:*", "dynamodb:*", "backup:*"],
-    Resource: "*"
-  },
-  {
-    Sid: "WriteDeploymentAndOps",
-    Effect: "Allow",
-    Action: [
-      "cloudformation:*",
-      "cloudwatch:*",
-      "logs:*",
-      "events:*",
-      "scheduler:*",
-      "ssm:*",
-      "cloudtrail:*",
-      "xray:*",
-      "states:*",
-      "cloudshell:*"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "WriteSecurityAndMessaging",
-    Effect: "Allow",
-    Action: [
-      "acm:*",
-      "secretsmanager:*",
-      "kms:*",
-      "sns:*",
-      "sqs:*",
-      "ses:*"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "WriteResourceOrganization",
-    Effect: "Allow",
-    Action: ["resource-groups:*", "tag:*", "ram:*"],
-    Resource: "*"
-  },
-  {
-    Sid: "SupportAndHealth",
-    Effect: "Allow",
-    Action: [
-      "support:*",
-      "supportplans:Get*",
-      "supportplans:List*",
-      "health:*",
-      "trustedadvisor:*"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "Sts",
-    Effect: "Allow",
-    Action: [
-      "sts:GetCallerIdentity",
-      "sts:GetFederationToken",
-      "sts:GetSessionToken"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "IamPassRoleForServices",
-    Effect: "Allow",
-    Action: "iam:PassRole",
-    Resource: "arn:aws:iam::*:role/*",
-    Condition: {
-      StringEquals: {
-        "iam:PassedToService": [
-          "ec2.amazonaws.com",
-          "lambda.amazonaws.com",
-          "ecs.amazonaws.com",
-          "ecs-tasks.amazonaws.com",
-          "elasticloadbalancing.amazonaws.com",
-          "events.amazonaws.com",
-          "apigateway.amazonaws.com",
-          "rds.amazonaws.com",
-          "backup.amazonaws.com",
-          "cloudformation.amazonaws.com"
-        ]
-      }
-    }
-  },
-  {
-    Sid: "ServiceLinkedRoles",
-    Effect: "Allow",
-    Action: ["iam:CreateServiceLinkedRole", "iam:DeleteServiceLinkedRole"],
-    Resource: "*"
-  }
-];
-var user_admins_write_list_default = {
-  Version,
-  Statement
-};
-
-
-
-
-exports.Statement = Statement; exports.Version = Version; exports.default = user_admins_write_list_default;

package/esm/__chunks/2FTTEFEK.js

@@ -1,97 +0,0 @@
-import {
-  defaultBody,
-  sendViaApi,
-  sendViaSmtp
-} from "./UXWY7BYE.js";
-import {
-  resolveProfile
-} from "./5GIUAFXL.js";
-import {
-  sendEmailOptionsSchema
-} from "./3BKWTHLJ.js";
-
-// src/commands/aws/ses/send-email/handler.js
-import chalk from "chalk";
-import { ZodError } from "zod";
-async function sendEmailCommand(options) {
-  try {
-    const parsed = sendEmailOptionsSchema.parse(options);
-    const {
-      to,
-      from,
-      subject,
-      transport,
-      region,
-      profile: profileOption,
-      accessKeyId,
-      dryRun,
-      verbose
-    } = parsed;
-    const body = parsed.body ?? defaultBody();
-    const profile = transport === "api" ? await resolveProfile({ profile: profileOption }) : profileOption;
-    console.log(chalk.blue("\n\u{1F4E7} SES send-email"));
-    console.log(chalk.gray(`   transport: ${transport}`));
-    console.log(chalk.gray(`   region:    ${region}`));
-    console.log(chalk.gray(`   from:      ${from}`));
-    console.log(chalk.gray(`   to:        ${to}`));
-    console.log(chalk.gray(`   subject:   ${subject}`));
-    if (verbose) {
-      console.log(chalk.gray(`   body:      ${body}`));
-    }
-    if (dryRun) {
-      console.log(chalk.yellow("\n[dry-run] No email sent."));
-      return;
-    }
-    const messageId = transport === "api" ? await sendViaApi({ to, from, subject, body, region, profile }) : await sendViaSmtp({ to, from, subject, body, region, accessKeyId });
-    console.log(
-      chalk.green(
-        `
-\u2705 Email sent${messageId ? ` (messageId: ${messageId})` : ""}.`
-      )
-    );
-  } catch (error) {
-    if (error instanceof ZodError) {
-      console.error(chalk.red("\n\u274C Invalid command options:"));
-      error.errors.forEach((err) => {
-        console.error(chalk.red(`   ${err.path.join(".")}: ${err.message}`));
-      });
-      process.exit(1);
-    }
-    const verbose = (
-      /** @type {any} */
-      options?.verbose || false
-    );
-    console.error(chalk.red("\n\u274C send-email failed:"));
-    if (error instanceof Error) {
-      console.error(chalk.red(`   ${error.message}`));
-      if (verbose && error.stack) {
-        console.error(chalk.gray("\nStack trace:"));
-        console.error(chalk.gray(error.stack));
-      }
-    } else {
-      console.error(chalk.red(`   ${String(error)}`));
-    }
-    console.error(chalk.yellow("\n\u{1F4A1} Troubleshooting tips:"));
-    console.error(
-      chalk.yellow("   \u2022 The sender address must be verified in SES")
-    );
-    console.error(
-      chalk.yellow(
-        "   \u2022 New SES accounts are sandboxed \u2014 recipients must also be verified"
-      )
-    );
-    console.error(
-      chalk.yellow(
-        "   \u2022 For smtp transport, set SES_SMTP_USER and SES_SMTP_PASSWORD"
-      )
-    );
-    console.error(
-      chalk.yellow("   \u2022 Use --verbose for detailed error information\n")
-    );
-    process.exit(1);
-  }
-}
-
-export {
-  sendEmailCommand
-};