@mtndev/cli 2.0.0 → 2.0.1

package/esm/__chunks/IEOGAQYI.js

@@ -1,46 +0,0 @@
-import {
-  profileField,
-  verboseField
-} from "./73BJG53F.js";
-
-// src/commands/aws/route53/add-record/schema.js
-import { z } from "zod";
-var RECORD_TYPES = [
-  "A",
-  "AAAA",
-  "CNAME",
-  "TXT",
-  "MX",
-  "NS",
-  "SRV",
-  "CAA"
-];
-var DEFAULT_TTL = 300;
-var addRecordOptionsSchema = z.object({
-  profile: profileField,
-  zone: z.string().optional().describe(
-    "Hosted zone name or ID (e.g. mountaindev.com or Z123\u2026). Skips the zone picker when set."
-  ),
-  type: z.string().optional().transform(
-    (value) => value === void 0 ? void 0 : value.toUpperCase()
-  ).refine(
-    (value) => value === void 0 || typeof value === "string" && RECORD_TYPES.includes(value),
-    {
-      message: `Record type must be one of: ${RECORD_TYPES.join(", ")}`
-    }
-  ).describe(`DNS record type (${RECORD_TYPES.join(", ")})`),
-  name: z.string().optional().describe(
-    'Record name relative to the zone (e.g. "redline") or a fully-qualified name'
-  ),
-  value: z.string().optional().describe("Record value (e.g. a CNAME target or A address)"),
-  ttl: z.number().int().positive().optional().describe(`TTL in seconds (default: ${DEFAULT_TTL})`),
-  yes: z.boolean().optional().default(false).describe("Skip the confirmation prompt"),
-  dryRun: z.boolean().optional().default(false).describe("Preview the change without calling Route53"),
-  verbose: verboseField
-});
-
-export {
-  RECORD_TYPES,
-  DEFAULT_TTL,
-  addRecordOptionsSchema
-};

package/esm/__chunks/IZFGBYGE.js

@@ -1,34 +0,0 @@
-import {
-  RECORD_TYPES
-} from "./IEOGAQYI.js";
-import {
-  profileField,
-  verboseField
-} from "./73BJG53F.js";
-
-// src/commands/aws/route53/remove-record/schema.js
-import { z } from "zod";
-var removeRecordOptionsSchema = z.object({
-  profile: profileField,
-  zone: z.string().optional().describe(
-    "Hosted zone name or ID (e.g. mountaindev.com or Z123\u2026). Skips the zone picker when set."
-  ),
-  type: z.string().optional().transform(
-    (value) => value === void 0 ? void 0 : value.toUpperCase()
-  ).refine(
-    (value) => value === void 0 || typeof value === "string" && RECORD_TYPES.includes(value),
-    {
-      message: `Record type must be one of: ${RECORD_TYPES.join(", ")}`
-    }
-  ).describe(`DNS record type (${RECORD_TYPES.join(", ")})`),
-  name: z.string().optional().describe(
-    'Record name relative to the zone (e.g. "redline") or a fully-qualified name'
-  ),
-  yes: z.boolean().optional().default(false).describe("Skip the confirmation prompt"),
-  dryRun: z.boolean().optional().default(false).describe("Preview the deletion without calling Route53"),
-  verbose: verboseField
-});
-
-export {
-  removeRecordOptionsSchema
-};

package/esm/__chunks/J34UVKLA.js

@@ -1,26 +0,0 @@
-import {
-  profileField,
-  regionField,
-  verboseField
-} from "./73BJG53F.js";
-
-// src/commands/aws/ec2/allow-ip/schema.js
-import { z } from "zod";
-var DEFAULT_REGION = "us-east-1";
-var SSH_PORT = 22;
-var DEFAULT_ROAMING_NAME = "Declan";
-var allowIpOptionsSchema = z.object({
-  profile: profileField,
-  region: regionField,
-  ruleName: z.string().optional().describe(
-    'SSH rule description to update or create (default: "{FirstName} Roaming" derived from the profile/IAM user)'
-  ),
-  verbose: verboseField
-});
-
-export {
-  DEFAULT_REGION,
-  SSH_PORT,
-  DEFAULT_ROAMING_NAME,
-  allowIpOptionsSchema
-};

package/esm/__chunks/JZPBBBIG.js

@@ -1,74 +0,0 @@
-import {
-  usersOptionsSchema
-} from "./XXK32TIM.js";
-import {
-  createUsersInteractive
-} from "./3QLI5BDL.js";
-import {
-  getCallerIdentity,
-  requireCommands
-} from "./FNXUONAV.js";
-import {
-  resolveProfile
-} from "./5GIUAFXL.js";
-
-// src/commands/aws/iam/users/handler.js
-import chalk from "chalk";
-import { ZodError } from "zod";
-async function usersCommand(options) {
-  try {
-    const {
-      accountName,
-      profile: profileOption,
-      verbose
-    } = usersOptionsSchema.parse(options);
-    requireCommands(["aws"]);
-    const profile = await resolveProfile({ profile: profileOption });
-    console.log(chalk.blue("\nAWS IAM user management"));
-    console.log("");
-    console.log("Caller:");
-    const identity = getCallerIdentity({ profile, verbose });
-    console.log(`  Account: ${identity.Account}`);
-    console.log(`  Arn:     ${identity.Arn}`);
-    console.log("");
-    await createUsersInteractive({
-      accountName,
-      profile,
-      identity,
-      verbose
-    });
-    console.log("Done.");
-  } catch (error) {
-    if (error instanceof ZodError) {
-      console.error(chalk.red("\n\u274C Invalid command options:"));
-      error.errors.forEach((err) => {
-        console.error(chalk.red(`   ${err.path.join(".")}: ${err.message}`));
-      });
-      process.exit(1);
-    }
-    const verbose = (
-      /** @type {any} */
-      options?.verbose || false
-    );
-    console.error(chalk.red("\n\u274C iam users failed:"));
-    if (error instanceof Error) {
-      console.error(chalk.red(`   ${error.message}`));
-      if (verbose && error.stack) {
-        console.error(chalk.gray("\nStack trace:"));
-        console.error(chalk.gray(error.stack));
-      }
-    } else {
-      console.error(chalk.red(`   ${String(error)}`));
-    }
-    console.error(
-      chalk.yellow(
-        "\n\u{1F4A1} Requires the AWS CLI and a profile with IAM write access.\n"
-      )
-    );
-    process.exit(1);
-  }
-}
-
-export {
-  usersCommand
-};

package/esm/__chunks/KWUJP5MG.js

@@ -1,135 +0,0 @@
-// src/commands/doppler/schema.js
-import { z } from "zod";
-var environmentsBase = z.string().optional().describe(
-  'Environments to process, comma-separated (e.g., dev,stg,prd or "all")'
-);
-var commonFields = {
-  verbose: z.boolean().optional().default(false).describe("Enable verbose logging for detailed error information"),
-  help: z.boolean().optional().default(false).describe("Display help for command")
-};
-var dopplerDownloadSchema = z.object({
-  action: z.literal("download"),
-  environments: environmentsBase.default("dev"),
-  ...commonFields
-});
-var dopplerUploadSchema = z.object({
-  action: z.literal("upload"),
-  environments: environmentsBase.default("all"),
-  ...commonFields
-});
-var dopplerCloneSchema = z.object({
-  action: z.literal("clone"),
-  from: z.string({ required_error: "--from <project> is required for clone" }).describe("Source Doppler project name"),
-  to: z.string({ required_error: "--to <project> is required for clone" }).describe("Target Doppler project name"),
-  force: z.boolean().optional().default(false).describe("Skip confirmation prompts when overwriting existing secrets"),
-  environments: environmentsBase.default("all"),
-  ...commonFields
-});
-var dopplerSetSchema = z.object({
-  action: z.literal("set"),
-  project: z.string().optional().describe("Doppler project name (prompts when omitted)"),
-  environment: z.string().optional().describe(
-    'Doppler environment id (e.g. dev, stg, prd) or "all" (prompts when omitted)'
-  ),
-  config: z.string().optional().describe(
-    'Config name, comma-separated list, or "all" within the chosen environment (prompts when omitted)'
-  ),
-  name: z.string().optional().describe("Secret name / env var key (e.g. DATABASE_URL)"),
-  value: z.string().optional().describe("Secret value (prompts when omitted)"),
-  yes: z.boolean().optional().default(false).describe("Skip the confirmation prompt"),
-  ...commonFields
-});
-var dopplerCommandOptionsSchema = z.discriminatedUnion("action", [
-  dopplerDownloadSchema,
-  dopplerUploadSchema,
-  dopplerCloneSchema,
-  dopplerSetSchema
-]);
-var dopplerCommandMetadata = {
-  name: "doppler",
-  description: `Manage Doppler configurations
-
-Subcommands:
-  download  Download configurations from Doppler to local .env files
-  upload    Upload local .env files to Doppler (with confirmation prompt)
-  clone     Clone all secrets from one Doppler project to another
-  set       Add or update a secret (interactive project/env/config picker)
-
-Examples:
-  $ @mtndev/cli doppler download                                          # Download dev config
-  $ @mtndev/cli doppler download -e all                                   # Download all configs
-  $ @mtndev/cli doppler download -e dev,stg                               # Download dev and stg
-  $ @mtndev/cli doppler upload                                            # Upload .env.dev
-  $ @mtndev/cli doppler upload -e prd                                     # Upload production config
-  $ @mtndev/cli doppler clone --from my-app --to my-app-copy             # Clone all configs
-  $ @mtndev/cli doppler clone --from my-app --to my-app-copy -e dev,stg  # Clone specific envs
-  $ @mtndev/cli doppler clone --from my-app --to my-app-copy --force     # Clone without prompts
-  $ @mtndev/cli doppler set                                               # Interactive set
-  $ @mtndev/cli doppler set -p core --environment dev -c dev --name API_KEY --value secret --yes`,
-  options: {
-    environments: {
-      description: dopplerDownloadSchema.shape.environments.description,
-      default: "dev",
-      alias: "e"
-    },
-    from: {
-      description: dopplerCloneSchema.shape.from.description,
-      default: void 0
-    },
-    to: {
-      description: dopplerCloneSchema.shape.to.description,
-      default: void 0
-    },
-    force: {
-      description: dopplerCloneSchema.shape.force.description,
-      default: false,
-      alias: "f"
-    },
-    project: {
-      description: dopplerSetSchema.shape.project.description,
-      default: void 0,
-      alias: "p"
-    },
-    environment: {
-      description: dopplerSetSchema.shape.environment.description,
-      default: void 0
-    },
-    config: {
-      description: dopplerSetSchema.shape.config.description,
-      default: void 0,
-      alias: "c"
-    },
-    name: {
-      description: dopplerSetSchema.shape.name.description,
-      default: void 0
-    },
-    value: {
-      description: dopplerSetSchema.shape.value.description,
-      default: void 0
-    },
-    yes: {
-      description: dopplerSetSchema.shape.yes.description,
-      default: false,
-      alias: "y"
-    },
-    verbose: {
-      description: dopplerDownloadSchema.shape.verbose.description,
-      default: false,
-      alias: "v"
-    },
-    help: {
-      description: dopplerDownloadSchema.shape.help.description,
-      default: false,
-      alias: "h"
-    }
-  }
-};
-
-export {
-  dopplerDownloadSchema,
-  dopplerUploadSchema,
-  dopplerCloneSchema,
-  dopplerSetSchema,
-  dopplerCommandOptionsSchema,
-  dopplerCommandMetadata
-};

package/esm/__chunks/M35URMT4.js

@@ -1,313 +0,0 @@
-import {
-  applyMysqlReadonly,
-  listMysqlDatabases
-} from "./3HE4BEJX.js";
-import {
-  applyPostgresReadonly,
-  listPostgresDatabases
-} from "./SD3E3EPH.js";
-import {
-  DEFAULT_MYSQL_HOST_PATTERN,
-  DEFAULT_READONLY_USERNAME,
-  ENGINES,
-  createReadonlyUserOptionsSchema
-} from "./T3TTUHTW.js";
-import {
-  buildReadonlyUrl,
-  detectEngineFromUrl,
-  generatePassword,
-  parseConnectionUrl,
-  resolveAdminUrl
-} from "./DLEJ25GZ.js";
-import {
-  prompt,
-  promptChoice,
-  promptYesNo
-} from "./ZHKVJO2U.js";
-
-// src/commands/db/create-readonly-user/handler.js
-import chalk from "chalk";
-import { ZodError } from "zod";
-async function resolveEngine(engineOption, url) {
-  if (engineOption) {
-    return engineOption;
-  }
-  if (url) {
-    const detected = detectEngineFromUrl(url);
-    if (detected) {
-      return detected;
-    }
-  }
-  const index = await promptChoice({
-    message: "Choose a database engine:",
-    options: ["postgres", "mysql"]
-  });
-  const chosen = ENGINES[index];
-  if (!chosen) {
-    throw new Error("No engine selected");
-  }
-  return chosen;
-}
-async function resolveUrl(params) {
-  const { urlOption, engine } = params;
-  const fromEnv = resolveAdminUrl({ url: urlOption, engine });
-  if (fromEnv) {
-    return fromEnv;
-  }
-  const example = engine === "postgres" ? "postgresql://admin:pass@host:5432/postgres" : "mysql://admin:pass@host:3306/";
-  const raw = await prompt(`  Admin connection URL (e.g. ${example}): `);
-  if (!raw) {
-    throw new Error(
-      "Admin connection URL is required (pass --url or set DATABASE_URL)"
-    );
-  }
-  return raw;
-}
-async function resolveScope(params) {
-  const { databaseOption, databases } = params;
-  if (databaseOption) {
-    const normalized = databaseOption.trim().toLowerCase();
-    if (normalized === "all" || normalized === "*") {
-      return { mode: "all", databases };
-    }
-    if (!databases.includes(databaseOption)) {
-      throw new Error(
-        `Database "${databaseOption}" not found. Available: ${databases.join(", ") || "(none)"}`
-      );
-    }
-    return { mode: "one", databases: [databaseOption] };
-  }
-  if (databases.length === 0) {
-    throw new Error("No user databases found to grant access on.");
-  }
-  const options = [
-    ...databases.map((name) => name),
-    `all (${databases.length} databases)`
-  ];
-  const index = await promptChoice({
-    message: "Grant read-only on which database?",
-    options
-  });
-  if (index === options.length - 1) {
-    return { mode: "all", databases };
-  }
-  const chosen = databases[index];
-  if (!chosen) {
-    throw new Error("No database selected");
-  }
-  return { mode: "one", databases: [chosen] };
-}
-async function resolveUsername(usernameOption) {
-  if (usernameOption) {
-    return usernameOption;
-  }
-  const raw = await prompt(
-    `  Read-only username [default: ${DEFAULT_READONLY_USERNAME}]: `
-  );
-  const username = raw || DEFAULT_READONLY_USERNAME;
-  if (!/^[A-Za-z0-9_]+$/.test(username)) {
-    throw new Error(
-      "Username must contain only letters, numbers, and underscores"
-    );
-  }
-  return username;
-}
-async function resolvePassword(passwordOption) {
-  if (passwordOption) {
-    return { password: passwordOption, generated: false };
-  }
-  const generate = await promptYesNo({
-    message: "  Generate a random password?",
-    defaultYes: true
-  });
-  if (generate) {
-    return { password: generatePassword(), generated: true };
-  }
-  const password = await prompt("  Password: ");
-  if (!password) {
-    throw new Error("Password is required");
-  }
-  return { password, generated: false };
-}
-function redactUrl(url) {
-  try {
-    const parsed = new URL(url);
-    if (parsed.password) {
-      parsed.password = "***";
-    }
-    return parsed.toString();
-  } catch {
-    return url;
-  }
-}
-async function createReadonlyUserCommand(options) {
-  try {
-    const {
-      engine: engineOption,
-      url: urlOption,
-      database: databaseOption,
-      username: usernameOption,
-      password: passwordOption,
-      hostPattern: hostPatternOption,
-      ssl: sslOption,
-      yes,
-      dryRun,
-      verbose
-    } = createReadonlyUserOptionsSchema.parse(options);
-    console.log(chalk.blue("\nCreate read-only database user"));
-    console.log("");
-    const urlForDetect = resolveAdminUrl({
-      url: urlOption,
-      engine: engineOption
-    });
-    const engine = await resolveEngine(engineOption, urlForDetect);
-    console.log(`Engine: ${engine}`);
-    const url = await resolveUrl({ urlOption, engine });
-    const config = parseConnectionUrl({
-      url,
-      engine,
-      sslOption
-    });
-    console.log(
-      `Admin:  ${config.user}@${config.host}:${config.port}` + (config.database ? `/${config.database}` : "")
-    );
-    console.log("");
-    const listed = engine === "postgres" ? await listPostgresDatabases(config) : await listMysqlDatabases(config);
-    if (verbose) {
-      console.log(`Found databases: ${listed.join(", ") || "(none)"}`);
-      console.log("");
-    }
-    const scope = await resolveScope({
-      databaseOption,
-      databases: listed
-    });
-    console.log(
-      scope.mode === "all" ? `Scope:  all (${scope.databases.length} databases)` : `Scope:  ${scope.databases[0]}`
-    );
-    console.log("");
-    const username = await resolveUsername(usernameOption);
-    const { password, generated } = await resolvePassword(passwordOption);
-    const hostPattern = hostPatternOption ?? DEFAULT_MYSQL_HOST_PATTERN;
-    console.log("");
-    console.log("Plan:");
-    console.log(`  User:     ${username}`);
-    console.log(
-      `  Password: ${generated ? "(generated)" : "(provided)"}${dryRun ? " [dry-run]" : ""}`
-    );
-    if (engine === "mysql") {
-      console.log(`  Host:     ${hostPattern}`);
-    }
-    console.log(
-      scope.mode === "all" ? `  Grants:   SELECT on ALL databases (${scope.databases.length})` : `  Grants:   SELECT on ${scope.databases[0]}`
-    );
-    if (scope.mode === "all" && engine === "postgres") {
-      console.log(
-        chalk.yellow(
-          "  Note:     Databases created later will NOT get these grants automatically \u2014 re-run this command."
-        )
-      );
-    }
-    console.log("");
-    if (!yes && !dryRun) {
-      const confirmed = await promptYesNo({
-        message: "Apply these changes?",
-        defaultYes: false
-      });
-      if (!confirmed) {
-        console.log("Aborted.");
-        return;
-      }
-      console.log("");
-    }
-    const result = engine === "postgres" ? await applyPostgresReadonly({
-      config,
-      username,
-      password,
-      databases: scope.databases,
-      dryRun,
-      verbose
-    }) : await applyMysqlReadonly({
-      config,
-      username,
-      password,
-      databases: scope.mode === "all" ? "all" : scope.databases,
-      hostPattern,
-      dryRun,
-      verbose
-    });
-    if (dryRun) {
-      console.log(chalk.cyan("Dry run \u2014 SQL that would run:"));
-      for (const statement of result.statements) {
-        console.log(`  ${statement}`);
-      }
-      console.log("");
-      console.log(chalk.cyan("No changes made."));
-      return;
-    }
-    console.log(
-      chalk.green(
-        result.created ? `Created user "${username}" and granted read-only access.` : `Updated user "${username}" password and refreshed read-only grants.`
-      )
-    );
-    console.log("");
-    const sampleDb = scope.mode === "one" ? scope.databases[0] ?? "" : scope.databases[0] ?? "";
-    const readonlyUrl = buildReadonlyUrl({
-      engine,
-      host: config.host,
-      port: config.port,
-      username,
-      password,
-      database: sampleDb
-    });
-    console.log("Connection (secret shown once \u2014 copy now):");
-    console.log(
-      "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"
-    );
-    console.log(readonlyUrl);
-    if (scope.mode === "all") {
-      console.log("");
-      console.log(
-        chalk.gray(
-          `  (URL uses database "${sampleDb}" as an example; user can connect to any granted database.)`
-        )
-      );
-    }
-    console.log(
-      "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"
-    );
-    console.log("");
-    console.log(chalk.gray(`Admin URL used: ${redactUrl(url)}`));
-  } catch (error) {
-    if (error instanceof ZodError) {
-      console.error(chalk.red("\n\u274C Invalid command options:"));
-      error.errors.forEach((err) => {
-        console.error(chalk.red(`   ${err.path.join(".")}: ${err.message}`));
-      });
-      process.exit(1);
-    }
-    const verbose = (
-      /** @type {any} */
-      options?.verbose || false
-    );
-    console.error(chalk.red("\n\u274C create-readonly-user failed:"));
-    if (error instanceof Error) {
-      console.error(chalk.red(`   ${error.message}`));
-      if (verbose && error.stack) {
-        console.error(chalk.gray("\nStack trace:"));
-        console.error(chalk.gray(error.stack));
-      }
-    } else {
-      console.error(chalk.red(`   ${String(error)}`));
-    }
-    console.error(
-      chalk.yellow(
-        "\n\u{1F4A1} Pass --url or set DATABASE_URL. Use --verbose for details.\n"
-      )
-    );
-    process.exit(1);
-  }
-}
-
-export {
-  createReadonlyUserCommand
-};