@noy-db/cli 0.1.0-pre.10

package/dist/bin/noydb.js

@@ -0,0 +1,650 @@
+#!/usr/bin/env node
+
+// src/commands/inspect.ts
+import { readNoydbBundleHeader } from "@noy-db/hub";
+import { readFile } from "fs/promises";
+async function inspect(filePath) {
+  const bytes = await readFile(filePath);
+  const header = readNoydbBundleHeader(new Uint8Array(bytes));
+  return {
+    formatVersion: header.formatVersion,
+    handle: header.handle,
+    bodyBytes: header.bodyBytes,
+    bodySha256: header.bodySha256
+  };
+}
+async function runInspect(argv) {
+  const file = argv[0];
+  if (!file) {
+    process.stderr.write("usage: noydb inspect <file.noydb>\n");
+    return 2;
+  }
+  try {
+    const info = await inspect(file);
+    process.stdout.write(JSON.stringify(info, null, 2) + "\n");
+    return 0;
+  } catch (err) {
+    process.stderr.write(`inspect failed: ${err.message}
+`);
+    return 1;
+  }
+}
+
+// src/commands/verify.ts
+import { readNoydbBundle, readNoydbBundleHeader as readNoydbBundleHeader2 } from "@noy-db/hub";
+import { readFile as readFile2 } from "fs/promises";
+async function verify(filePath) {
+  const bytes = new Uint8Array(await readFile2(filePath));
+  const checks = { magic: false, header: false, bodyHash: false };
+  let handle = "";
+  let bodyBytes = 0;
+  try {
+    const header = readNoydbBundleHeader2(bytes);
+    checks.magic = true;
+    checks.header = true;
+    handle = header.handle;
+    bodyBytes = header.bodyBytes;
+    await readNoydbBundle(bytes);
+    checks.bodyHash = true;
+    return { ok: true, file: filePath, handle, bodyBytes, checks };
+  } catch (err) {
+    return {
+      ok: false,
+      file: filePath,
+      handle,
+      bodyBytes,
+      checks,
+      error: err.message
+    };
+  }
+}
+async function runVerify(argv) {
+  const file = argv[0];
+  if (!file) {
+    process.stderr.write("usage: noydb verify <file.noydb>\n");
+    return 2;
+  }
+  const report = await verify(file);
+  process.stdout.write(JSON.stringify(report, null, 2) + "\n");
+  return report.ok ? 0 : 1;
+}
+
+// src/commands/config.ts
+import { pathToFileURL } from "url";
+import { resolve } from "path";
+function safeStringify(v) {
+  if (typeof v === "string") return v;
+  if (typeof v === "number" || typeof v === "boolean" || v === null || v === void 0) {
+    return String(v);
+  }
+  try {
+    return JSON.stringify(v);
+  } catch {
+    return "<unserializable>";
+  }
+}
+function validateOptions(opts) {
+  const issues = [];
+  if (!isRecord(opts)) {
+    issues.push({
+      severity: "error",
+      code: "not-object",
+      path: "<root>",
+      message: "NoydbOptions must be an object"
+    });
+    return { ok: false, issues };
+  }
+  if (!opts.store) {
+    issues.push({
+      severity: "error",
+      code: "missing-store",
+      path: "store",
+      message: "`store` is required"
+    });
+  } else if (!isStoreShape(opts.store)) {
+    issues.push({
+      severity: "error",
+      code: "bad-store-shape",
+      path: "store",
+      message: "`store` does not expose the 6-method NoydbStore contract"
+    });
+  }
+  if (opts.sync !== void 0) {
+    const targets = normalizeSync(opts.sync);
+    targets.forEach((t, i) => validateTarget(t, `sync[${i}]`, issues));
+  }
+  if (opts.syncPolicy !== void 0 && opts.sync === void 0) {
+    issues.push({
+      severity: "warn",
+      code: "policy-without-sync",
+      path: "syncPolicy",
+      message: "`syncPolicy` has no effect without a `sync` target"
+    });
+  }
+  if (typeof opts.user !== "string" || !opts.user) {
+    issues.push({
+      severity: "warn",
+      code: "missing-user",
+      path: "user",
+      message: '`user` identifier is recommended \u2014 audit entries default to "anonymous" without it'
+    });
+  }
+  if (opts.secret === void 0 && opts.passphrase === void 0 && opts.encrypt !== false) {
+    issues.push({
+      severity: "warn",
+      code: "no-secret",
+      path: "secret",
+      message: "`secret` / `passphrase` missing and `encrypt` not explicitly false \u2014 vault open will fail"
+    });
+  }
+  const hasError = issues.some((i) => i.severity === "error");
+  return { ok: !hasError, issues };
+}
+async function loadOptionsFromFile(filePath) {
+  const abs = resolve(filePath);
+  if (abs.endsWith(".ts") || abs.endsWith(".mts") || abs.endsWith(".cts")) {
+    throw new Error(
+      `TypeScript config files are not directly loadable \u2014 Node has no native .ts loader.
+  Options:
+    (a) compile first:  tsc ${filePath} && noydb config validate ${filePath.replace(/\.[mc]?ts$/, ".js")}
+    (b) run via tsx:    npx tsx $(which noydb) config validate ${filePath}
+    (c) rename to .mjs/.js if your config has no TS-only syntax`
+    );
+  }
+  const mod = await import(pathToFileURL(abs).href);
+  const value = mod.default ?? mod;
+  if (typeof value === "function") {
+    return await value();
+  }
+  return value;
+}
+async function runConfigValidate(argv) {
+  const file = argv[0];
+  if (!file) {
+    process.stderr.write("usage: noydb config validate <file.ts|js>\n");
+    return 2;
+  }
+  let opts;
+  try {
+    opts = await loadOptionsFromFile(file);
+  } catch (err) {
+    process.stderr.write(`failed to load ${file}: ${err.message}
+`);
+    return 1;
+  }
+  const report = validateOptions(opts);
+  process.stdout.write(JSON.stringify(report, null, 2) + "\n");
+  return report.ok ? 0 : 1;
+}
+function scaffold(profile) {
+  switch (profile) {
+    case "A":
+      return {
+        profile,
+        notes: "Local-only single-user. No cloud.",
+        code: [
+          `import { createNoydb } from '@noy-db/hub'`,
+          `import { jsonFile } from '@noy-db/to-file'`,
+          ``,
+          `export default {`,
+          `  store:  jsonFile({ dir: process.env.NOYDB_DATA_DIR ?? './data' }),`,
+          `  user:   process.env.NOYDB_USER ?? 'owner',`,
+          `  secret: process.env.NOYDB_SECRET,`,
+          `}`
+        ].join("\n"),
+        env: `NOYDB_USER=owner
+NOYDB_SECRET=
+NOYDB_DATA_DIR=./data
+`
+      };
+    case "B":
+      return {
+        profile,
+        notes: "Offline-first + cloud mirror. Local authoritative, sync opportunistically.",
+        code: [
+          `import { createNoydb, INDEXED_STORE_POLICY } from '@noy-db/hub'`,
+          `import { browserIdbStore } from '@noy-db/to-browser-idb'`,
+          `import { awsDynamoStore } from '@noy-db/to-aws-dynamo'`,
+          ``,
+          `export default {`,
+          `  store: browserIdbStore({ prefix: process.env.NOYDB_APP ?? 'myapp' }),`,
+          `  sync: [{`,
+          `    store: awsDynamoStore({`,
+          `      table:  process.env.NOYDB_DYNAMO_TABLE!,`,
+          `      region: process.env.AWS_REGION ?? 'us-east-1',`,
+          `    }),`,
+          `    role:  'sync-peer',`,
+          `    label: 'dynamo-live',`,
+          `  }],`,
+          `  syncPolicy: INDEXED_STORE_POLICY,`,
+          `  user:   process.env.NOYDB_USER ?? 'owner',`,
+          `  secret: process.env.NOYDB_SECRET,`,
+          `}`
+        ].join("\n"),
+        env: `NOYDB_USER=owner
+NOYDB_SECRET=
+NOYDB_APP=myapp
+NOYDB_DYNAMO_TABLE=myapp-live
+AWS_REGION=us-east-1
+`
+      };
+    case "C":
+      return {
+        profile,
+        notes: "Records + blobs split (routeStore). Dynamo for records, S3 for blobs.",
+        code: [
+          `import { createNoydb, routeStore } from '@noy-db/hub'`,
+          `import { awsDynamoStore } from '@noy-db/to-aws-dynamo'`,
+          `import { awsS3Store } from '@noy-db/to-aws-s3'`,
+          ``,
+          `export default {`,
+          `  store: routeStore({`,
+          `    default: awsDynamoStore({`,
+          `      table:  process.env.NOYDB_DYNAMO_TABLE!,`,
+          `      region: process.env.AWS_REGION ?? 'us-east-1',`,
+          `    }),`,
+          `    blobs:   awsS3Store({`,
+          `      bucket: process.env.NOYDB_S3_BUCKET!,`,
+          `      region: process.env.AWS_REGION ?? 'us-east-1',`,
+          `    }),`,
+          `  }),`,
+          `  user:   process.env.NOYDB_USER ?? 'owner',`,
+          `  secret: process.env.NOYDB_SECRET,`,
+          `}`
+        ].join("\n"),
+        env: `NOYDB_USER=owner
+NOYDB_SECRET=
+NOYDB_DYNAMO_TABLE=myapp-records
+NOYDB_S3_BUCKET=myapp-blobs
+AWS_REGION=us-east-1
+`
+      };
+    case "G":
+      return {
+        profile,
+        notes: "Middleware-hardened production: retry + breaker + cache + metrics.",
+        code: [
+          `import { createNoydb, wrapStore, withRetry, withCircuitBreaker, withCache, withHealthCheck, withMetrics } from '@noy-db/hub'`,
+          `import { awsDynamoStore } from '@noy-db/to-aws-dynamo'`,
+          ``,
+          `export default {`,
+          `  store: wrapStore(`,
+          `    awsDynamoStore({ table: process.env.NOYDB_DYNAMO_TABLE! }),`,
+          `    withRetry({ maxRetries: 3 }),`,
+          `    withCircuitBreaker({ failureThreshold: 5, resetTimeoutMs: 30_000 }),`,
+          `    withCache({ ttlMs: 60_000 }),`,
+          `    withHealthCheck(),`,
+          `    withMetrics({ onOperation: op => console.log(op) }),`,
+          `  ),`,
+          `  user:   process.env.NOYDB_USER ?? 'owner',`,
+          `  secret: process.env.NOYDB_SECRET,`,
+          `}`
+        ].join("\n"),
+        env: `NOYDB_USER=owner
+NOYDB_SECRET=
+NOYDB_DYNAMO_TABLE=myapp-prod
+`
+      };
+    case "D":
+      return {
+        profile,
+        notes: "Hot + cold tiered. Records age out to archive after N days.",
+        code: [
+          `import { createNoydb, routeStore } from '@noy-db/hub'`,
+          `import { awsDynamoStore } from '@noy-db/to-aws-dynamo'`,
+          `import { awsS3Store } from '@noy-db/to-aws-s3'`,
+          ``,
+          `export default {`,
+          `  store: routeStore({`,
+          `    default: awsDynamoStore({ table: process.env.NOYDB_DYNAMO_TABLE! }),`,
+          `    age: {`,
+          `      cold:          awsS3Store({ bucket: process.env.NOYDB_S3_COLD! }),`,
+          `      coldAfterDays: Number(process.env.NOYDB_COLD_AFTER_DAYS ?? '90'),`,
+          `    },`,
+          `  }),`,
+          `  user:   process.env.NOYDB_USER ?? 'owner',`,
+          `  secret: process.env.NOYDB_SECRET,`,
+          `}`
+        ].join("\n"),
+        env: `NOYDB_USER=owner
+NOYDB_SECRET=
+NOYDB_DYNAMO_TABLE=myapp-hot
+NOYDB_S3_COLD=myapp-archive
+NOYDB_COLD_AFTER_DAYS=90
+`
+      };
+    case "E":
+      return {
+        profile,
+        notes: "Multi-peer team sync. Primary + peer + backup + archive.",
+        code: [
+          `import { createNoydb } from '@noy-db/hub'`,
+          `import { browserIdbStore } from '@noy-db/to-browser-idb'`,
+          `import { awsDynamoStore } from '@noy-db/to-aws-dynamo'`,
+          `import { awsS3Store } from '@noy-db/to-aws-s3'`,
+          ``,
+          `export default {`,
+          `  store: browserIdbStore({ prefix: process.env.NOYDB_APP ?? 'team' }),`,
+          `  sync: [`,
+          `    { store: awsDynamoStore({ table: process.env.NOYDB_DYNAMO_TABLE! }), role: 'sync-peer', label: 'team-hot' },`,
+          `    { store: awsS3Store({ bucket: process.env.NOYDB_S3_BACKUP! }),       role: 'backup',    label: 'team-backup' },`,
+          `    { store: awsS3Store({ bucket: process.env.NOYDB_S3_ARCHIVE! }),      role: 'archive',   label: 'team-archive' },`,
+          `  ],`,
+          `  user:   process.env.NOYDB_USER ?? 'member',`,
+          `  secret: process.env.NOYDB_SECRET,`,
+          `}`
+        ].join("\n"),
+        env: `NOYDB_USER=member
+NOYDB_SECRET=
+NOYDB_APP=team
+NOYDB_DYNAMO_TABLE=team-hot
+NOYDB_S3_BACKUP=team-backup
+NOYDB_S3_ARCHIVE=team-archive
+`
+      };
+    case "F":
+      return {
+        profile,
+        notes: "CRDT collaboration \u2014 Yjs-backed shared records over the encrypted envelope.",
+        code: [
+          `import { createNoydb } from '@noy-db/hub'`,
+          `import { browserIdbStore } from '@noy-db/to-browser-idb'`,
+          `import { awsDynamoStore } from '@noy-db/to-aws-dynamo'`,
+          `// import { yjsCollection } from '@noy-db/in-yjs'   // use inside your app`,
+          ``,
+          `export default {`,
+          `  store: browserIdbStore({ prefix: 'collab' }),`,
+          `  sync: [{ store: awsDynamoStore({ table: process.env.NOYDB_DYNAMO_TABLE! }), role: 'sync-peer' }],`,
+          `  user:   process.env.NOYDB_USER!,`,
+          `  secret: process.env.NOYDB_SECRET,`,
+          `}`,
+          ``,
+          `// After createNoydb(), replace normal collections with yjsCollection() for CRDT fields.`
+        ].join("\n"),
+        env: `NOYDB_USER=
+NOYDB_SECRET=
+NOYDB_DYNAMO_TABLE=collab-live
+`
+      };
+    case "H":
+      return {
+        profile,
+        notes: "USB-portable \u2014 everything on a single file store, no cloud.",
+        code: [
+          `import { createNoydb } from '@noy-db/hub'`,
+          `import { jsonFile } from '@noy-db/to-file'`,
+          ``,
+          `export default {`,
+          `  store:  jsonFile({ dir: process.env.NOYDB_DATA_DIR ?? '/Volumes/MY_USB/data' }),`,
+          `  user:   process.env.NOYDB_USER!,`,
+          `  secret: process.env.NOYDB_SECRET,`,
+          `}`
+        ].join("\n"),
+        env: `NOYDB_USER=
+NOYDB_SECRET=
+NOYDB_DATA_DIR=/Volumes/MY_USB/data
+`
+      };
+    case "I":
+      return {
+        profile,
+        notes: "Multi-tenant geographic sharding \u2014 per-vault primary per region.",
+        code: [
+          `import { createNoydb } from '@noy-db/hub'`,
+          `import { awsDynamoStore } from '@noy-db/to-aws-dynamo'`,
+          ``,
+          `// Pick the nearest region at init time based on tenant config.`,
+          `const region = process.env.NOYDB_REGION ?? 'ap-southeast-1'`,
+          `const table  = \`myapp-\${region}\``,
+          ``,
+          `export default {`,
+          `  store:  awsDynamoStore({ table, region }),`,
+          `  user:   process.env.NOYDB_USER!,`,
+          `  secret: process.env.NOYDB_SECRET,`,
+          `}`
+        ].join("\n"),
+        env: `NOYDB_USER=
+NOYDB_SECRET=
+NOYDB_REGION=ap-southeast-1
+`
+      };
+    case "J":
+      return {
+        profile,
+        notes: "Authentication bridge (passphrase-less unlock via OIDC or WebAuthn).",
+        code: [
+          `import { createNoydb } from '@noy-db/hub'`,
+          `import { browserIdbStore } from '@noy-db/to-browser-idb'`,
+          `// import { unlockWebAuthn } from '@noy-db/on-webauthn'   // in the browser`,
+          `// import { keyConnector } from '@noy-db/on-oidc'         // in a server app`,
+          ``,
+          `export default {`,
+          `  store: browserIdbStore({ prefix: process.env.NOYDB_APP ?? 'app' }),`,
+          `  user:  process.env.NOYDB_USER!,`,
+          `  // secret supplied by the unlock method at openVault() time, not here.`,
+          `}`
+        ].join("\n"),
+        env: `NOYDB_USER=
+NOYDB_APP=app
+`
+      };
+  }
+}
+async function runConfigScaffold(argv) {
+  const profileArg = argv.find((a) => a.startsWith("--profile="));
+  const profile = profileArg?.split("=")[1] ?? "A";
+  if (!/^[A-J]$/.test(profile)) {
+    process.stderr.write(`unknown profile: ${profile}. Valid: A-J (see docs/guides/topology-matrix.md)
+`);
+    return 2;
+  }
+  const out = scaffold(profile);
+  process.stdout.write(`// \u2500\u2500 noydb config (profile ${out.profile}) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+`);
+  process.stdout.write(`// ${out.notes}
+
+`);
+  process.stdout.write(out.code + "\n\n");
+  if (out.env) {
+    process.stdout.write(`// \u2500\u2500 .env template \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+`);
+    process.stdout.write(out.env);
+  }
+  return 0;
+}
+function isRecord(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function isStoreShape(v) {
+  if (!isRecord(v)) return false;
+  return ["get", "put", "delete", "list", "loadAll", "saveAll"].every((m) => typeof v[m] === "function");
+}
+function normalizeSync(v) {
+  if (Array.isArray(v)) return v;
+  return [v];
+}
+function validateTarget(t, path, issues) {
+  if (!isRecord(t)) {
+    issues.push({
+      severity: "error",
+      code: "bad-target",
+      path,
+      message: "sync target must be an object with { store, role }"
+    });
+    return;
+  }
+  if (t["role"] === void 0) {
+    if (!isStoreShape(t)) {
+      issues.push({
+        severity: "error",
+        code: "bad-store-shape",
+        path,
+        message: "sync target store does not expose the 6-method contract"
+      });
+    }
+    return;
+  }
+  const validRoles = ["sync-peer", "backup", "archive"];
+  if (!validRoles.includes(safeStringify(t["role"]))) {
+    issues.push({
+      severity: "error",
+      code: "bad-role",
+      path: `${path}.role`,
+      message: `role must be one of ${validRoles.join(", ")}; got ${safeStringify(t["role"])}`
+    });
+  }
+  if (!t["store"] || !isStoreShape(t["store"])) {
+    issues.push({
+      severity: "error",
+      code: "bad-store-shape",
+      path: `${path}.store`,
+      message: "sync target store does not expose the 6-method contract"
+    });
+  }
+  if (t["role"] === "archive" && isRecord(t["policy"]) && isRecord(t["policy"]["pull"])) {
+    issues.push({
+      severity: "error",
+      code: "archive-pull-configured",
+      path: `${path}.policy.pull`,
+      message: "archive targets are push-only \u2014 pull policy is invalid"
+    });
+  }
+}
+
+// src/commands/monitor.ts
+import { toMeter } from "@noy-db/to-meter";
+async function runMonitor(argv) {
+  const file = argv[0];
+  if (!file) {
+    process.stderr.write("usage: noydb monitor <config.ts> [--interval=ms]\n");
+    return 2;
+  }
+  const intervalArg = argv.find((a) => a.startsWith("--interval="));
+  const intervalMs = intervalArg ? parseInt(intervalArg.split("=")[1] ?? "5000", 10) : 5e3;
+  let opts;
+  try {
+    const loaded = await loadOptionsFromFile(file);
+    if (typeof loaded !== "object" || loaded === null) {
+      process.stderr.write(`config file must export a NoydbOptions-shaped object
+`);
+      return 1;
+    }
+    opts = loaded;
+  } catch (err) {
+    process.stderr.write(`failed to load ${file}: ${err.message}
+`);
+    return 1;
+  }
+  const innerStore = opts["store"];
+  if (!innerStore || typeof innerStore !== "object") {
+    process.stderr.write("config has no `store` \u2014 nothing to monitor\n");
+    return 1;
+  }
+  const { store: metered, meter } = toMeter(innerStore, {
+    degradedMs: 500,
+    onDegraded: (e) => process.stderr.write(`DEGRADED: ${e.reason}
+`),
+    onRestored: (e) => process.stderr.write(`RESTORED: ${e.reason}
+`)
+  });
+  const liveOpts = { ...opts, store: metered };
+  const hub = await import("@noy-db/hub");
+  await hub.createNoydb(liveOpts);
+  process.stdout.write(`monitoring ${file} \u2014 interval ${intervalMs}ms \u2014 Ctrl-C to stop
+
+`);
+  const stop = installSigintHandler(meter);
+  return new Promise((resolveP) => {
+    const timer = setInterval(() => {
+      if (stop.signalled) {
+        clearInterval(timer);
+        meter.close();
+        resolveP(0);
+        return;
+      }
+      const snap = meter.snapshot();
+      process.stdout.write(formatSnapshot(snap) + "\n");
+    }, intervalMs);
+  });
+}
+function installSigintHandler(meter) {
+  const state = { signalled: false };
+  const handler = () => {
+    state.signalled = true;
+    meter.close();
+  };
+  process.on("SIGINT", handler);
+  process.on("SIGTERM", handler);
+  return state;
+}
+function formatSnapshot(snap) {
+  const lines = [];
+  const ts = new Date(snap.collectedAt).toISOString().slice(11, 19);
+  lines.push(`[${ts}] status=${snap.status} calls=${snap.totalCalls} casConflicts=${snap.casConflicts} windowMs=${snap.windowMs}`);
+  for (const m of ["get", "put", "delete", "list", "loadAll", "saveAll"]) {
+    const s = snap.byMethod[m];
+    if (s.count === 0) continue;
+    lines.push(`  ${m.padEnd(7)} count=${s.count} errors=${s.errors} p50=${s.p50}ms p99=${s.p99}ms max=${s.max}ms avg=${s.avg}ms`);
+  }
+  return lines.join("\n");
+}
+
+// src/bin/noydb.ts
+var VERSION = "0.1.0";
+function usage() {
+  return [
+    "noydb \u2014 command-line tools for @noy-db",
+    "",
+    "Usage:",
+    "  noydb inspect <file.noydb>                 Print bundle header (no passphrase)",
+    "  noydb verify  <file.noydb>                 Verify bundle integrity (no passphrase)",
+    "  noydb config validate <file.js|mjs>        Sanity-check a NoydbOptions file",
+    "  noydb config scaffold [--profile=<A-J>]    Emit a topology-profile skeleton",
+    "  noydb monitor <file.js|mjs> [--interval=ms] Live dashboard of store metrics",
+    "",
+    "TypeScript configs: run under a TS-capable runtime, e.g. `npx tsx $(which noydb) config validate foo.ts`.",
+    "  noydb --version                            Print CLI version",
+    "  noydb --help                               Show this message",
+    "",
+    "Profiles for `config scaffold` map to docs/guides/topology-matrix.md \xA7 View 3."
+  ].join("\n");
+}
+async function main(argv) {
+  const [cmd, ...rest] = argv;
+  if (!cmd || cmd === "--help" || cmd === "-h" || cmd === "help") {
+    process.stdout.write(usage() + "\n");
+    return 0;
+  }
+  if (cmd === "--version" || cmd === "-v") {
+    process.stdout.write(VERSION + "\n");
+    return 0;
+  }
+  switch (cmd) {
+    case "inspect":
+      return runInspect(rest);
+    case "verify":
+      return runVerify(rest);
+    case "monitor":
+      return runMonitor(rest);
+    case "config": {
+      const [sub, ...subRest] = rest;
+      if (sub === "validate") return runConfigValidate(subRest);
+      if (sub === "scaffold") return runConfigScaffold(subRest);
+      process.stderr.write(`unknown config subcommand: ${sub ?? "(none)"}
+`);
+      return 2;
+    }
+    default:
+      process.stderr.write(`unknown command: ${cmd}
+
+${usage()}
+`);
+      return 2;
+  }
+}
+main(process.argv.slice(2)).then((code) => process.exit(code)).catch((err) => {
+  process.stderr.write(`fatal: ${err.message}
+`);
+  process.exit(1);
+});
+//# sourceMappingURL=noydb.js.map