@mtndev/cli 2.0.0 → 2.0.1

package/esm/__chunks/XOUWDB3T.js

@@ -1,249 +0,0 @@
-import {
-  runAws
-} from "./FNXUONAV.js";
-import {
-  resolvePolicyPath
-} from "./ZO55YUSY.js";
-
-// src/commands/aws/iam/setup-acl/utils.js
-var ACL_GROUPS = [
-  "acl-admin-do-not-use",
-  "acl-iam-full-access",
-  "acl-power-users",
-  "acl-read-only",
-  "acl-s3-restrictions"
-];
-var CUSTOM_POLICIES = [
-  { name: "UserAdminsWriteList", fileName: "user-admins-write-list.json" },
-  { name: "UserAdminsDenyList", fileName: "user-admins-deny-list.json" },
-  {
-    name: "UserAdminsSelfServiceIAM",
-    fileName: "user-admins-self-service-iam.json"
-  },
-  {
-    name: "UserAdminsDenyRegionsList",
-    fileName: "user-admins-deny-regions-list.json"
-  },
-  { name: "sts-federation", fileName: "sts-federation.json" },
-  {
-    name: "S3RestrictionsDenyNonS3Services",
-    fileName: "s3-restrictions-deny-non-s3-services.json"
-  }
-];
-function ensureGroup(params) {
-  const { name, profile, verbose } = params;
-  let exists = true;
-  try {
-    runAws({
-      profile,
-      args: ["iam", "get-group", "--group-name", name],
-      verbose
-    });
-  } catch {
-    exists = false;
-  }
-  if (exists) {
-    console.log(`  Group exists: ${name}`);
-    return;
-  }
-  console.log(`  Create group: ${name}`);
-  runAws({
-    profile,
-    args: ["iam", "create-group", "--group-name", name, "--path", "/"],
-    expectJson: false,
-    verbose
-  });
-}
-function publishPolicy(params) {
-  const { name, fileName, accountId, profile, verbose } = params;
-  const arn = `arn:aws:iam::${accountId}:policy/${name}`;
-  const file = resolvePolicyPath(fileName);
-  let exists = true;
-  try {
-    runAws({
-      profile,
-      args: ["iam", "get-policy", "--policy-arn", arn],
-      verbose
-    });
-  } catch {
-    exists = false;
-  }
-  if (!exists) {
-    console.log(`  Create policy: ${name}`);
-    runAws({
-      profile,
-      args: [
-        "iam",
-        "create-policy",
-        "--policy-name",
-        name,
-        "--policy-document",
-        `file://${file}`,
-        "--description",
-        `ACL: ${name}`
-      ],
-      expectJson: false,
-      verbose
-    });
-    return;
-  }
-  const nonDefaultCount = Number.parseInt(
-    runAws({
-      profile,
-      args: [
-        "iam",
-        "list-policy-versions",
-        "--policy-arn",
-        arn,
-        "--query",
-        "length(Versions[?IsDefaultVersion==`false`])",
-        "--output",
-        "text"
-      ],
-      expectJson: false,
-      verbose
-    }),
-    10
-  ) || 0;
-  if (nonDefaultCount >= 4) {
-    const oldest = runAws({
-      profile,
-      args: [
-        "iam",
-        "list-policy-versions",
-        "--policy-arn",
-        arn,
-        "--query",
-        "Versions[?IsDefaultVersion==`false`] | sort_by(@, &CreateDate)[0].VersionId",
-        "--output",
-        "text"
-      ],
-      expectJson: false,
-      verbose
-    });
-    console.log(`  Prune oldest version of ${name}: ${oldest}`);
-    runAws({
-      profile,
-      args: [
-        "iam",
-        "delete-policy-version",
-        "--policy-arn",
-        arn,
-        "--version-id",
-        oldest
-      ],
-      expectJson: false,
-      verbose
-    });
-  }
-  console.log(`  Update policy: ${name}`);
-  runAws({
-    profile,
-    args: [
-      "iam",
-      "create-policy-version",
-      "--policy-arn",
-      arn,
-      "--policy-document",
-      `file://${file}`,
-      "--set-as-default"
-    ],
-    expectJson: false,
-    verbose
-  });
-}
-function isPolicyAttached(params) {
-  const { group, arn, profile, verbose } = params;
-  const out = runAws({
-    profile,
-    args: [
-      "iam",
-      "list-attached-group-policies",
-      "--group-name",
-      group,
-      "--query",
-      `AttachedPolicies[?PolicyArn=='${arn}'].PolicyArn`,
-      "--output",
-      "text"
-    ],
-    expectJson: false,
-    verbose
-  });
-  return Boolean(out);
-}
-function attach(params) {
-  const { group, arn, profile, verbose } = params;
-  const policyName = arn.split("/").pop() ?? arn;
-  if (isPolicyAttached({ group, arn, profile, verbose })) {
-    console.log(`  [${group}] already attached: ${policyName}`);
-    return;
-  }
-  console.log(`  [${group}] attach: ${policyName}`);
-  runAws({
-    profile,
-    args: [
-      "iam",
-      "attach-group-policy",
-      "--group-name",
-      group,
-      "--policy-arn",
-      arn
-    ],
-    expectJson: false,
-    verbose
-  });
-}
-function detach(params) {
-  const { group, arn, profile, verbose } = params;
-  const policyName = arn.split("/").pop() ?? arn;
-  if (!isPolicyAttached({ group, arn, profile, verbose })) {
-    return;
-  }
-  console.log(`  [${group}] detach legacy: ${policyName}`);
-  runAws({
-    profile,
-    args: [
-      "iam",
-      "detach-group-policy",
-      "--group-name",
-      group,
-      "--policy-arn",
-      arn
-    ],
-    expectJson: false,
-    verbose
-  });
-}
-function printFinalState(params) {
-  const { profile, verbose } = params;
-  for (const group of ACL_GROUPS) {
-    console.log("");
-    console.log(`=== ${group} ===`);
-    const table = runAws({
-      profile,
-      args: [
-        "iam",
-        "list-attached-group-policies",
-        "--group-name",
-        group,
-        "--query",
-        "AttachedPolicies[].PolicyName",
-        "--output",
-        "table"
-      ],
-      expectJson: false,
-      verbose
-    });
-    console.log(table);
-  }
-}
-
-export {
-  ACL_GROUPS,
-  CUSTOM_POLICIES,
-  ensureGroup,
-  publishPolicy,
-  attach,
-  detach,
-  printFinalState
-};

package/esm/__chunks/XQN2TA4S.js

@@ -1,23 +0,0 @@
-import {
-  profileField,
-  regionField,
-  verboseField
-} from "./73BJG53F.js";
-
-// src/commands/aws/iam/setup-acl/schema.js
-import { z } from "zod";
-var setupAclOptionsSchema = z.object({
-  restrictRegions: z.enum(["yes", "no"]).optional().describe(
-    "Attach the region restriction to acl-power-users (skips the interactive prompt)"
-  ),
-  createUsers: z.boolean().optional().default(true).describe(
-    "Create IAM users after configuring groups (use --no-create-users to skip)"
-  ),
-  profile: profileField,
-  region: regionField,
-  verbose: verboseField
-});
-
-export {
-  setupAclOptionsSchema
-};

package/esm/__chunks/XXK32TIM.js

@@ -1,16 +0,0 @@
-import {
-  profileField,
-  verboseField
-} from "./73BJG53F.js";
-
-// src/commands/aws/iam/users/schema.js
-import { z } from "zod";
-var usersOptionsSchema = z.object({
-  accountName: z.string().optional().describe("AWS account slug used in md-{identifier}-{account}-{role}"),
-  profile: profileField,
-  verbose: verboseField
-});
-
-export {
-  usersOptionsSchema
-};