@raisenow/tamaro-cli 1.9.0-dev.1 → 1.9.0-dev.2

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { A as EPMS_AUTH_CLIENT_ID_STAGE, B as logSuccess, C as DEFAULT_PORT, D as EPMS_AUTH_BASE_URL_PROD, E as EPMS_API_BASE_URL_STAGE, F as runCommandSync, I as createTerminalLink, L as logCommand, M as HTTPS_KEY_FILE, N as halt, O as EPMS_AUTH_BASE_URL_STAGE, P as promptConfirmation, R as logDataTable, S as DEFAULT_HTTP_TIMEOUT, T as EPMS_API_BASE_URL_PROD, V as logTitle, _ as AWS_S3_BUCKET_TAMARO, a as getIfCoreFns, b as CACHE_DIR, c as getWidgetUuid, d as resolveBin, f as resolveCoreVersion, g as AWS_CLOUDFRONT_DISTRIBUTION_ID, h as AUTH_PORT, j as HTTPS_CRT_FILE, k as EPMS_AUTH_CLIENT_ID_PROD, l as resolveAccountUuidFromConfig, m as resolveOwn, n as assertEnvValid, o as getPaths, t as applyEnv, v as AWS_S3_BUCKET_TAMARO_EMAIL_CONFIG_PROD, w as DEFAULT_TAG, x as CORE_CONFIG_NAME, y as AWS_S3_BUCKET_TAMARO_EMAIL_CONFIG_STAGE, z as logError } from "./env-JzPIlctP.js";
+import { A as HTTPS_CRT_FILE, B as logSuccess, C as DEFAULT_PORT, D as EPMS_AUTH_BASE_URL_PROD, E as EPMS_API_BASE_URL_STAGE, F as createTerminalLink, I as logCommand, L as logDataTable, M as halt, N as promptConfirmation, O as EPMS_AUTH_BASE_URL_STAGE, P as runCommandSync, R as logError, S as DEFAULT_HTTP_TIMEOUT, T as EPMS_API_BASE_URL_PROD, V as logTitle, _ as AWS_S3_BUCKET_TAMARO, a as getIfCoreFns, b as CACHE_DIR, c as getWidgetUuid, d as resolveBin, f as resolveCoreVersion, g as AWS_CLOUDFRONT_DISTRIBUTION_ID, h as AUTH_PORT, j as HTTPS_KEY_FILE, k as EPMS_OAUTH_CLIENT_ID, l as resolveAccountUuidFromConfig, m as resolveOwn, n as assertEnvValid, o as getPaths, t as applyEnv, v as AWS_S3_BUCKET_TAMARO_EMAIL_CONFIG_PROD, w as DEFAULT_TAG, x as CORE_CONFIG_NAME, y as AWS_S3_BUCKET_TAMARO_EMAIL_CONFIG_STAGE, z as logInfo } from "./env-DBP70I1v.js";
 import { createCommand } from "commander";
 import fs, { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import path from "node:path";
@@ -364,29 +364,32 @@ const AuthResponseSchema = z.object({
 	expires_in: z.number(),
 	token_type: z.string()
 });
-const getCacheFilePath = (baseUrl, clientId) => {
-	const cacheKey = Buffer.from(`${baseUrl}|${clientId}`).toString("base64url");
+const getCacheFilePath = (key) => {
+	const cacheKey = Buffer.from(key).toString("base64url");
 	return path.join(CACHE_DIR, `token-${cacheKey}.json`);
 };
-const readCachedToken = (baseUrl, clientId) => {
+const getTokenCacheKey = (baseUrl, clientId) => {
+	return `${baseUrl}|${clientId}`;
+};
+const readCachedToken = (key) => {
 	try {
-		const filePath = getCacheFilePath(baseUrl, clientId);
+		const filePath = getCacheFilePath(key);
 		if (!existsSync(filePath)) return;
 		const data = JSON.parse(readFileSync(filePath, "utf8"));
 		const parsed = CachedTokenSchema.safeParse(data);
 		if (parsed.success) return parsed.data;
 	} catch {}
 };
-const writeCachedToken = (baseUrl, clientId, cached) => {
+const writeCachedToken = (key, cached) => {
 	try {
-		const filePath = getCacheFilePath(baseUrl, clientId);
+		const filePath = getCacheFilePath(key);
 		mkdirSync(path.dirname(filePath), { recursive: true });
 		writeFileSync(filePath, JSON.stringify(cached), { mode: 384 });
 	} catch {}
 };
-const removeCachedToken = (baseUrl, clientId) => {
+const removeCachedToken = (key) => {
 	try {
-		const filePath = getCacheFilePath(baseUrl, clientId);
+		const filePath = getCacheFilePath(key);
 		if (existsSync(filePath)) writeFileSync(filePath, "", { flag: "w" });
 	} catch {}
 };
@@ -396,11 +399,13 @@ const createAuthorizer = (baseUrl, clientId, clientSecret) => {
 	const apiUnauthorized = ky.extend({
 		headers: { "Access-Control-Allow-Origin": "*" },
 		prefixUrl: baseUrl,
+		retry: { limit: 3 },
 		timeout: DEFAULT_HTTP_TIMEOUT
 	});
 	let expirationTime = void 0;
 	let token = void 0;
-	const cached = readCachedToken(baseUrl, clientId);
+	const cacheKey = getTokenCacheKey(baseUrl, clientId);
+	const cached = readCachedToken(cacheKey);
 	if (cached) {
 		token = cached.token;
 		expirationTime = cached.expirationTime;
@@ -415,7 +420,7 @@ const createAuthorizer = (baseUrl, clientId, clientSecret) => {
 		} }).json();
 		token = `${data.token_type} ${data.access_token}`;
 		expirationTime = Date.now() + data.expires_in * 1e3;
-		writeCachedToken(baseUrl, clientId, {
+		writeCachedToken(cacheKey, {
 			expirationTime,
 			token
 		});
@@ -475,7 +480,9 @@ const doBrowserOAuthFlow = (authBaseUrl, clientId, port) => {
 		server.listen(port, () => {
 			const redirectUri = `http://localhost:${port}`;
 			const authUrl = `${authBaseUrl}/oauth2/authorize?client_id=${encodeURIComponent(clientId)}&redirect_uri=${encodeURIComponent(redirectUri)}&response_type=token`;
-			console.log(`Opening browser for authentication: ${authUrl}`);
+			logInfo("\nℹ️  Log in with your super admin account in the browser to continue.");
+			console.log(`Opening browser for authentication...`);
+			console.log(createTerminalLink(authUrl, authUrl));
 			open(authUrl).catch((error) => {
 				reject(error instanceof Error ? error : new Error(String(error)));
 			});
@@ -485,12 +492,13 @@ const doBrowserOAuthFlow = (authBaseUrl, clientId, port) => {
 const createBrowserAuthorizer = (authBaseUrl, clientId, epmsBaseUrl) => {
 	const apiBase = ky.extend({
 		prefixUrl: epmsBaseUrl,
+		retry: { limit: 3 },
 		timeout: DEFAULT_HTTP_TIMEOUT
 	});
 	let expirationTime = void 0;
 	let token = void 0;
-	const cacheBaseUrl = `browser|${authBaseUrl}`;
-	const cached = readCachedToken(cacheBaseUrl, clientId);
+	const cacheKey = getTokenCacheKey(authBaseUrl, clientId);
+	const cached = readCachedToken(cacheKey);
 	if (cached) {
 		token = cached.token;
 		expirationTime = cached.expirationTime;
@@ -498,7 +506,7 @@ const createBrowserAuthorizer = (authBaseUrl, clientId, epmsBaseUrl) => {
 	const resetAuth = () => {
 		token = void 0;
 		expirationTime = void 0;
-		removeCachedToken(cacheBaseUrl, clientId);
+		removeCachedToken(cacheKey);
 	};
 	const authorize = async () => {
 		const isExpired = (expirationTime ?? 0) - Date.now() < 300 * 1e3;
@@ -506,7 +514,7 @@ const createBrowserAuthorizer = (authBaseUrl, clientId, epmsBaseUrl) => {
 		const data = await doBrowserOAuthFlow(authBaseUrl, clientId, AUTH_PORT);
 		token = `${data.token_type} ${data.access_token}`;
 		expirationTime = Date.now() + data.expires_in * 1e3;
-		writeCachedToken(cacheBaseUrl, clientId, {
+		writeCachedToken(cacheKey, {
 			expirationTime,
 			token
 		});
@@ -530,17 +538,54 @@ const createBrowserAuthorizer = (authBaseUrl, clientId, epmsBaseUrl) => {
 	} });
 };
 //#endregion
-//#region src/lib/epms/client.ts
+//#region src/lib/epms/myselfSchema.ts
+const myselfSchema = z.object({
+	email: z.string(),
+	identity_roles: z.array(z.object({
+		identity_uuid: z.string(),
+		role: z.object({
+			name: z.string(),
+			uuid: z.string()
+		})
+	})),
+	uuid: z.string()
+});
+//#endregion
+//#region src/lib/epms/epmsClient.ts
+/**
+* Manages authentication and API interactions with EPMS.
+* It provides factory methods for creating instances based on different authentication flows (client credentials or browser-based) and handles token caching and renewal transparently.
+*/
 var EpmsClient = class EpmsClient {
+	#cacheKey;
 	#epmsClient;
-	constructor(epmsClient) {
+	#authType;
+	/**
+	* Creates an instance of EpmsClient.
+	*
+	* @param authType The type of authentication used by the client.
+	* @param cacheKey They key used for caching the token so that the client can manage the cache (e.g. clear it on logout). It should be unique per EPMS environment and client ID.
+	* @param epmsClient The underlying KyInstance used for making API requests.
+	*/
+	constructor(authType, cacheKey, epmsClient) {
+		this.#authType = authType;
+		this.#cacheKey = cacheKey;
 		this.#epmsClient = epmsClient;
 	}
 	static fromClientCredentials(baseUrl, clientId, clientSecret) {
-		return new EpmsClient(createAuthorizer(baseUrl, clientId, clientSecret));
+		return new EpmsClient("client_credentials", getTokenCacheKey(baseUrl, clientId), createAuthorizer(baseUrl, clientId, clientSecret));
 	}
 	static fromBrowserAuth(epmsBaseUrl, authBaseUrl, clientId) {
-		return new EpmsClient(createBrowserAuthorizer(authBaseUrl, clientId, epmsBaseUrl));
+		return new EpmsClient("browser", getTokenCacheKey(authBaseUrl, clientId), createBrowserAuthorizer(authBaseUrl, clientId, epmsBaseUrl));
+	}
+	get authType() {
+		return this.#authType;
+	}
+	logout() {
+		removeCachedToken(this.#cacheKey);
+	}
+	async myself() {
+		return this.#epmsClient.get("users/myself").json().then((response) => myselfSchema.parse(response));
 	}
 	async getOrganisationIdByAccountUuid(accountUuid) {
 		const query = {
@@ -549,7 +594,7 @@ var EpmsClient = class EpmsClient {
 			size: 1
 		};
 		const response = await this.#epmsClient.post("search/events", { json: query }).json();
-		if (response.hits.length === 0) throw new Error(`No events found for account UUID: ${accountUuid}`);
+		if (response.hits.length === 0) throw new Error(`No organisation found for account UUID: ${accountUuid}`);
 		const organisationId = response.hits[0].organisation_uuid;
 		if (!organisationId) throw new Error(`Organisation UUID not found for account UUID: ${accountUuid}`);
 		return organisationId;
@@ -557,6 +602,57 @@ var EpmsClient = class EpmsClient {
 	async updateTamaro(configName, tag, json) {
 		return this.#epmsClient.put(`products/tamaro/${configName}/tags/${tag}`, { json }).json();
 	}
+	async archiveTamaro(configName, tag) {
+		return this.#epmsClient.post(`products/tamaro/${configName}/tags/${tag}/archive`).json();
+	}
+};
+//#endregion
+//#region src/lib/epms/helpers.ts
+const epmsAuthenticate = (env) => {
+	const { authBaseUrl, baseUrl, clientId, clientSecret } = {
+		prod: {
+			authBaseUrl: EPMS_AUTH_BASE_URL_PROD,
+			baseUrl: EPMS_API_BASE_URL_PROD,
+			clientId: process.env.EPMS_CLIENT_ID,
+			clientSecret: process.env.EPMS_CLIENT_SECRET
+		},
+		stage: {
+			authBaseUrl: EPMS_AUTH_BASE_URL_STAGE,
+			baseUrl: EPMS_API_BASE_URL_STAGE,
+			clientId: process.env.EPMS_CLIENT_ID_STAGE,
+			clientSecret: process.env.EPMS_CLIENT_SECRET_STAGE
+		}
+	}[env];
+	if (clientId && clientSecret) return EpmsClient.fromClientCredentials(baseUrl, clientId, clientSecret);
+	return EpmsClient.fromBrowserAuth(baseUrl, authBaseUrl, EPMS_OAUTH_CLIENT_ID);
+};
+const loadAccountUuidsFromConfig = (paths) => {
+	if (!("configYml" in paths)) {
+		halt("Fatal error, this should never happen");
+		throw new Error("Fatal error");
+	}
+	const configContent = yaml.load(readFileSync(paths.configYml, "utf8"));
+	const accountUuidStage = resolveAccountUuidFromConfig(configContent, "epms_stage");
+	return {
+		accountUuidProd: resolveAccountUuidFromConfig(configContent, "epms"),
+		accountUuidStage
+	};
+};
+const assertUserIsSuperAdmin = async (epmsClient) => {
+	if (epmsClient.authType === "client_credentials") return;
+	const myself = await epmsClient.myself();
+	if (!myself.identity_roles.some(({ role }) => role.name === "super_admin")) {
+		epmsClient.logout();
+		logError("\nYou must be a super admin to perform this action.");
+		logTitle("\nYour EPMS user details:");
+		logDataTable({
+			email: myself.email,
+			roles: myself.identity_roles.map(({ role }) => role.name).join(", "),
+			uuid: myself.uuid
+		});
+		logError("If this keeps happening, go to Configurator / Hub and logout before trying again.");
+		halt();
+	}
 };
 //#endregion
 //#region src/commands/update-epms.ts
@@ -576,7 +672,11 @@ const updateEpms = async (options) => {
 	const { dryrun, tag } = options;
 	const configName = getWidgetUuid();
 	loadEnv(paths);
-	const { accountUuidsProd, accountUuidsStage } = loadAccountUuidsFromConfig(paths);
+	const { accountUuidProd, accountUuidStage } = loadAccountUuidsFromConfig(paths);
+	if (!accountUuidProd && !accountUuidStage) {
+		logTitle("No EPMS account UUIDs found in config.yml. Skipping EPMS update.");
+		return;
+	}
 	if (dryrun) logTitle("🧪 DRY RUN MODE - No actual changes will be made 🧪");
 	const configuredVersion = resolveCoreVersion();
 	if (!configuredVersion) {
@@ -588,15 +688,26 @@ const updateEpms = async (options) => {
 		last_deployment: Math.trunc(Date.now() / 1e3),
 		read_only: false
 	};
-	for (const accountUuidStage of accountUuidsStage) if (accountUuidStage) {
-		const epmsClient = epmsAuthenticate("stage");
-		const organisationUuid = await epmsClient.getOrganisationIdByAccountUuid(accountUuidStage);
+	const environments = [{
+		accountUuid: accountUuidStage,
+		env: "stage",
+		label: "Stage"
+	}, {
+		accountUuid: accountUuidProd,
+		env: "prod",
+		label: "Prod"
+	}];
+	for (const { accountUuid, env, label } of environments) {
+		if (!accountUuid) continue;
+		const epmsClient = epmsAuthenticate(env);
+		await assertUserIsSuperAdmin(epmsClient);
+		const organisationUuid = await epmsClient.getOrganisationIdByAccountUuid(accountUuid);
 		const body = {
 			...baseInfo,
-			account_uuid: accountUuidStage,
+			account_uuid: accountUuid,
 			organisation_uuid: organisationUuid
 		};
-		logTitle(`Updating EPMS Stage for tag "${tag}":`);
+		logTitle(`\nUpdating EPMS ${label}:`);
 		logDataTable({
 			name: configName,
 			tag,
@@ -604,48 +715,9 @@ const updateEpms = async (options) => {
 		});
 		if (!dryrun) {
 			await epmsClient.updateTamaro(configName, tag, body);
-			logSuccess("✅ EPMS Stage is updated.");
-		} else logSuccess("⏭️ EPMS Stage would be updated (dry run).");
+			logSuccess(`✅ EPMS ${label} is updated.`);
+		} else logSuccess(`⏭️ EPMS ${label} would be updated (dry run).`);
 	}
-	for (const accountUuidProd of accountUuidsProd) if (accountUuidProd) {
-		const epmsClient = epmsAuthenticate("prod");
-		const organisationUuid = await epmsClient.getOrganisationIdByAccountUuid(accountUuidProd);
-		logTitle(`Updating EPMS Prod for tag "${tag}":`);
-		const body = {
-			...baseInfo,
-			account_uuid: accountUuidProd,
-			organisation_uuid: organisationUuid
-		};
-		logDataTable({
-			name: configName,
-			tag,
-			...body
-		});
-		if (!dryrun) {
-			await epmsClient.updateTamaro(configName, tag, body);
-			logSuccess("✅ EPMS Prod is updated.");
-		} else logSuccess("⏭️ EPMS Prod would be updated (dry run).");
-	}
-};
-const epmsAuthenticate = (env) => {
-	if (env === "stage") {
-		if (process.env.EPMS_CLIENT_ID_STAGE && process.env.EPMS_CLIENT_SECRET_STAGE) return EpmsClient.fromClientCredentials(EPMS_API_BASE_URL_STAGE, process.env.EPMS_CLIENT_ID_STAGE, process.env.EPMS_CLIENT_SECRET_STAGE);
-		return EpmsClient.fromBrowserAuth(EPMS_API_BASE_URL_STAGE, EPMS_AUTH_BASE_URL_STAGE, EPMS_AUTH_CLIENT_ID_STAGE);
-	}
-	if (process.env.EPMS_CLIENT_ID && process.env.EPMS_CLIENT_SECRET) return EpmsClient.fromClientCredentials(EPMS_API_BASE_URL_PROD, process.env.EPMS_CLIENT_ID, process.env.EPMS_CLIENT_SECRET);
-	return EpmsClient.fromBrowserAuth(EPMS_API_BASE_URL_PROD, EPMS_AUTH_BASE_URL_PROD, EPMS_AUTH_CLIENT_ID_PROD);
-};
-const loadAccountUuidsFromConfig = (paths) => {
-	if (!("configYml" in paths)) {
-		halt("Fatal error, this should never happen");
-		throw new Error("Fatal error");
-	}
-	const configContent = yaml.load(readFileSync(paths.configYml, "utf8"));
-	const accountUuidsStage = resolveAccountUuidFromConfig(configContent, "epms_stage");
-	return {
-		accountUuidsProd: resolveAccountUuidFromConfig(configContent, "epms"),
-		accountUuidsStage
-	};
 };
 const loadEnv = (paths) => {
 	const filePath = globSync(paths.appEnv).find((file) => path.basename(file) === ".env");
@@ -1037,6 +1109,8 @@ const undeploy = async (options) => {
 			halt(error.stderr);
 		}
 	}
+	if (!dryRunFlag && !all && !ifCore() && !options.skipEpmsSyncOnlyUseInEmergenciesOrYouWillBeFired) await archiveEpms(configName, tag, false);
+	else if (all && !ifCore()) logTitle("⚠️  EPMS archive skipped: --all flag used. Archive entries in EPMS manually if needed.");
 	logTitle(`\n${description} has been undeployed.`);
 	logDataTable({ "Removed URL:": deployUrl });
 	process.on("exit", () => {
@@ -1046,6 +1120,33 @@ const undeploy = async (options) => {
 		});
 	});
 };
+const archiveEpms = async (configName, tag, dryrun) => {
+	const { ifCore } = getIfCoreFns();
+	const { accountUuidProd, accountUuidStage } = loadAccountUuidsFromConfig(getPaths(ifCore));
+	if (!accountUuidProd && !accountUuidStage) {
+		logTitle("No EPMS account UUIDs found in config.yml. Skipping EPMS archive.");
+		return;
+	}
+	const environments = [{
+		accountUuid: accountUuidStage,
+		env: "stage",
+		label: "Stage"
+	}, {
+		accountUuid: accountUuidProd,
+		env: "prod",
+		label: "Prod"
+	}];
+	for (const { accountUuid, env, label } of environments) {
+		if (!accountUuid) continue;
+		const epmsClient = epmsAuthenticate(env);
+		await assertUserIsSuperAdmin(epmsClient);
+		logTitle(`\nArchiving EPMS ${label}: ${configName}/${tag}`);
+		if (!dryrun) {
+			await epmsClient.archiveTamaro(configName, tag);
+			logSuccess(`✅ EPMS ${label} entry archived.`);
+		} else logSuccess(`⏭️ EPMS ${label} entry would be archived (dry run).`);
+	}
+};
 const assertOptionsValid$1 = (options) => {
 	const { all, profile, tag } = options;
 	const { ifCore } = getIfCoreFns();
@@ -1128,7 +1229,7 @@ const promptBucketTamaroEmailConfig = async () => {
 //#endregion
 //#region package.json
 var name = "@raisenow/tamaro-cli";
-var version = "1.9.0-dev.1";
+var version = "1.9.0-dev.2";
 //#endregion
 //#region src/cli.ts
 /**
@@ -1163,7 +1264,7 @@ cli.command("list-deployed").description("List deployments of Tamaro Core or a p
 cli.command("deploy-email-config").description("Deploy a widget's email configuration to AWS S3").option("--profile <profile>", "AWS profile").option("--ci", "CI environment", false).option("--bucket <bucket>", "AWS bucket for email configs").option("--dryrun", "Displays the operations that would be performed without actually running them", false).action(async (options) => {
 	await deployEmailConfig(options);
 });
-cli.command("undeploy").description("Undeploy a Tamaro Core or customer configuration bundle from AWS S3").option("--profile <profile>", "AWS profile").option("--ci", "CI environment", false).option("--tag <tag>", "Tag which should be undeployed").option("--all", "Undeploy all tags", false).option("--dryrun", "Displays the operations that would be performed without actually running them", false).action(async (options) => {
+cli.command("undeploy").description("Undeploy a Tamaro Core or customer configuration bundle from AWS S3").option("--profile <profile>", "AWS profile").option("--ci", "CI environment", false).option("--tag <tag>", "Tag which should be undeployed").option("--all", "Undeploy all tags", false).option("--dryrun", "Displays the operations that would be performed without actually running them", false).option("--skip-epms-sync-only-use-in-emergencies-or-you-will-be-fired", "Skip EPMS archive sync (emergency use only)", false).action(async (options) => {
 	await undeploy(options);
 });
 cli.command("undeploy-email-config").description("Undeploy a widget's email configuration from AWS S3").option("--profile <profile>", "AWS profile").option("--ci", "CI environment", false).option("--bucket <bucket>", "AWS bucket for email configs").option("--stage", "Undeploy from stage environment (alternative to --bucket)").option("--prod", "Undeploy from prod environment (alternative to --bucket)").option("--dryrun", "Displays the operations that would be performed without actually running them", false).action(async (options) => {

package/dist/{env-JzPIlctP.js → env-DBP70I1v.js}

@@ -22,6 +22,9 @@ const logError = (message) => {
 const logSuccess = (message) => {
 	if (message) console.log(chalk.green(message));
 };
+const logInfo = (message) => {
+	if (message) console.log(chalk.blue(message));
+};
 const logCommand = (cmd) => {
 	console.log(`\n${chalk.dim(stripIndent(cmd).trim())}\n`);
 };
@@ -66,16 +69,15 @@ const EPMS_API_BASE_URL_STAGE = "https://api.stage.mesos.raisenow.net";
 const EPMS_API_BASE_URL_PROD = "https://api.raisenow.io";
 const EPMS_AUTH_BASE_URL_STAGE = "https://login.stage.mesos.raisenow.net";
 const EPMS_AUTH_BASE_URL_PROD = "https://login.raisenow.com";
-const EPMS_AUTH_CLIENT_ID_STAGE = "luna-stage-local";
-const EPMS_AUTH_CLIENT_ID_PROD = "luna-local";
+const EPMS_OAUTH_CLIENT_ID = "tamaro-cli";
 const CORE_CONFIG_NAME = "tamaro-core";
-const AUTH_PORT = 8080;
+const AUTH_PORT = 4571;
 const AWS_CLOUDFRONT_DISTRIBUTION_ID = "EHJ1OM458YQ0I";
 const HTTPS_CRT_FILE = "localhost.crt";
 const HTTPS_KEY_FILE = "localhost.key";
 const CACHE_DIR = envPaths("tamaro-cli", { suffix: "" }).cache;
 //#endregion
-//#region node_modules/.pnpm/tsdown@0.21.8_synckit@0.11.11_typescript@6.0.2/node_modules/tsdown/esm-shims.js
+//#region node_modules/.pnpm/tsdown@0.21.10_synckit@0.11.11_typescript@6.0.3/node_modules/tsdown/esm-shims.js
 const getFilename = () => fileURLToPath(import.meta.url);
 const getDirname = () => path.dirname(getFilename());
 const __dirname = /* @__PURE__ */ getDirname();
@@ -199,25 +201,19 @@ const getIfCoreFns = ({ allowArchived = false } = {}) => {
 };
 const resolveAccountUuidFromConfig = (rawConfig, field) => {
 	const epmsConfig = z.object({ [field]: z.record(z.string(), z.unknown()) }).safeParse(rawConfig);
-	if (!epmsConfig.success) return [];
+	if (!epmsConfig.success) return;
 	const configContent = epmsConfig.data[field];
 	const accountUuid = configContent.account_mapping ?? configContent.account_uuid;
 	const accountUuidValidation = z.uuid().safeParse(accountUuid);
-	const accontUuidArrayValidation = z.array(z.uuid()).safeParse(accountUuid);
-	if (!accountUuidValidation.success && !accontUuidArrayValidation.success) halt(stripIndent(`Could not extract EPMS account UUID(s) from config.yml. Please ensure that the "${field}" field is correctly formatted. Expected formats:
+	if (!accountUuidValidation.success) halt(stripIndent(`Could not extract EPMS account UUID from config.yml. Please ensure that the "${field}" field is correctly formatted. Expected formats:
       1. ${field}:
            account_uuid: <UUID>
-      
+
       Alternatively, if the account_uuid is conditional using "if" / "then" / "else" statements, it must be provided using the "account_mapping" format:
       2. ${field}:
-           account_mapping:
-            - <UUID_1>
-            - <UUID_2>
-            - <UUID_N>
+           account_mapping: <UUID>
       `));
-	if (accontUuidArrayValidation.success) return accontUuidArrayValidation.data;
-	if (accountUuidValidation.success) return [accountUuidValidation.data];
-	throw new Error("This should never happen");
+	return accountUuidValidation.data;
 };
 const TAMARO_VERSION_IN_URL_REGEX = /tamaro-core\/(.*)\/index.js/;
 const extractTamaroVersionFromUrl = (url) => {
@@ -343,4 +339,4 @@ const applyEnv = (env) => {
 	if (filePath) config({ path: filePath });
 };
 //#endregion
-export { EPMS_AUTH_CLIENT_ID_STAGE as A, logSuccess as B, DEFAULT_PORT as C, EPMS_AUTH_BASE_URL_PROD as D, EPMS_API_BASE_URL_STAGE as E, runCommandSync as F, createTerminalLink as I, logCommand as L, HTTPS_KEY_FILE as M, halt as N, EPMS_AUTH_BASE_URL_STAGE as O, promptConfirmation as P, logDataTable as R, DEFAULT_HTTP_TIMEOUT as S, EPMS_API_BASE_URL_PROD as T, logTitle as V, AWS_S3_BUCKET_TAMARO as _, getIfCoreFns as a, CACHE_DIR as b, getWidgetUuid as c, resolveBin as d, resolveCoreVersion as f, AWS_CLOUDFRONT_DISTRIBUTION_ID as g, AUTH_PORT as h, extensions as i, HTTPS_CRT_FILE as j, EPMS_AUTH_CLIENT_ID_PROD as k, resolveAccountUuidFromConfig as l, resolveOwn as m, assertEnvValid as n, getPaths as o, resolveEslintPluginConfig as p, getEnvVars as r, getRelativePaths as s, applyEnv as t, resolveApp as u, AWS_S3_BUCKET_TAMARO_EMAIL_CONFIG_PROD as v, DEFAULT_TAG as w, CORE_CONFIG_NAME as x, AWS_S3_BUCKET_TAMARO_EMAIL_CONFIG_STAGE as y, logError as z };
+export { HTTPS_CRT_FILE as A, logSuccess as B, DEFAULT_PORT as C, EPMS_AUTH_BASE_URL_PROD as D, EPMS_API_BASE_URL_STAGE as E, createTerminalLink as F, logCommand as I, logDataTable as L, halt as M, promptConfirmation as N, EPMS_AUTH_BASE_URL_STAGE as O, runCommandSync as P, logError as R, DEFAULT_HTTP_TIMEOUT as S, EPMS_API_BASE_URL_PROD as T, logTitle as V, AWS_S3_BUCKET_TAMARO as _, getIfCoreFns as a, CACHE_DIR as b, getWidgetUuid as c, resolveBin as d, resolveCoreVersion as f, AWS_CLOUDFRONT_DISTRIBUTION_ID as g, AUTH_PORT as h, extensions as i, HTTPS_KEY_FILE as j, EPMS_OAUTH_CLIENT_ID as k, resolveAccountUuidFromConfig as l, resolveOwn as m, assertEnvValid as n, getPaths as o, resolveEslintPluginConfig as p, getEnvVars as r, getRelativePaths as s, applyEnv as t, resolveApp as u, AWS_S3_BUCKET_TAMARO_EMAIL_CONFIG_PROD as v, DEFAULT_TAG as w, CORE_CONFIG_NAME as x, AWS_S3_BUCKET_TAMARO_EMAIL_CONFIG_STAGE as y, logInfo as z };

package/dist/webpack.config.js

@@ -1,4 +1,4 @@
-import { M as HTTPS_KEY_FILE, R as logDataTable, V as logTitle, a as getIfCoreFns, i as extensions, j as HTTPS_CRT_FILE, o as getPaths, p as resolveEslintPluginConfig, r as getEnvVars, s as getRelativePaths, u as resolveApp } from "./env-JzPIlctP.js";
+import { A as HTTPS_CRT_FILE, L as logDataTable, V as logTitle, a as getIfCoreFns, i as extensions, j as HTTPS_KEY_FILE, o as getPaths, p as resolveEslintPluginConfig, r as getEnvVars, s as getRelativePaths, u as resolveApp } from "./env-DBP70I1v.js";
 import { createRequire } from "node:module";
 import { existsSync } from "node:fs";
 import path from "node:path";
@@ -164,6 +164,22 @@ const getWebpackConfig = (env) => {
 							debug: ifDebug(),
 							modules: false,
 							useBuiltIns: "usage",
+							/**
+							* Exclude plugins that interfere with MobX flow inference via makeAutoObservable.
+							*
+							* MobX detects generator methods on the prototype and wraps them as `flow` automatically.
+							* Several Babel transforms break this detection:
+							*
+							* - transform-parameters: rewrites generator methods with default params (e.g. `*update(data, skip = false)`)
+							*   into plain functions returning an IIFE generator. makeAutoObservable then sees a regular function
+							*   and wraps it as `action` instead of `flow`.
+							*
+							* - async-to-generator / regenerator / async-generator-functions: downcompile async/generator syntax
+							*   to state-machine helpers, again making the methods invisible to MobX flow inference.
+							*
+							* All of these transforms are unnecessary — our browser targets support default parameters,
+							* generators, and async functions natively.
+							*/
 							exclude: [
 								"@babel/plugin-transform-async-to-generator",
 								"@babel/plugin-transform-regenerator",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raisenow/tamaro-cli",
-  "version": "1.9.0-dev.1",
+  "version": "1.9.0-dev.2",
   "author": {
     "name": "RaiseNow",
     "email": "development@raisenow.com"
@@ -9,7 +9,7 @@
   "bin": "dist/cli.js",
   "engines": {
     "node": ">=22.22.2",
-    "pnpm": ">=10.33.0",
+    "pnpm": ">=10.33.2",
     "npm": "please-use-pnpm",
     "yarn": "please-use-pnpm"
   },
@@ -18,7 +18,7 @@
     "@babel/cli": "^7.28.6",
     "@babel/core": "^7.29.0",
     "@babel/plugin-syntax-dynamic-import": "^7.8.3",
-    "@babel/preset-env": "^7.29.2",
+    "@babel/preset-env": "^7.29.3",
     "@babel/preset-react": "^7.28.5",
     "@babel/preset-typescript": "^7.28.5",
     "@pmmmwh/react-refresh-webpack-plugin": "^0.6.2",
@@ -54,7 +54,7 @@
     "handlebars": "^4.7.9",
     "handlebars-helpers": "^0.10.0",
     "html-loader": "^5.1.0",
-    "html-webpack-plugin": "^5.6.6",
+    "html-webpack-plugin": "^5.6.7",
     "js-yaml": "^4.1.1",
     "json-loader": "^0.5.7",
     "ky": "^1.14.3",
@@ -63,7 +63,7 @@
     "node-notifier": "^10.0.1",
     "open": "^11.0.0",
     "portfinder": "^1.0.38",
-    "postcss": "^8.5.9",
+    "postcss": "^8.5.13",
     "postcss-import": "^16.1.1",
     "postcss-loader": "^8.2.1",
     "postcss-nested": "^7.0.2",
@@ -74,13 +74,13 @@
     "sass-loader": "^16.0.7",
     "strip-indent": "^4.1.1",
     "style-loader": "^4.0.0",
-    "terser-webpack-plugin": "^5.4.0",
+    "terser-webpack-plugin": "^5.5.0",
     "tsconfig-paths-webpack-plugin": "^4.2.0",
-    "tsdown": "^0.21.8",
-    "typescript": "^6.0.2",
+    "tsdown": "^0.21.10",
+    "typescript": "^6.0.3",
     "url-loader": "^4.1.1",
-    "vitest": "^4.1.4",
-    "webpack": "^5.106.1",
+    "vitest": "^4.1.5",
+    "webpack": "^5.106.2",
     "webpack-cli": "^7.0.2",
     "webpack-config-utils": "^2.3.1",
     "webpack-dev-server": "^5.2.3",
@@ -90,11 +90,11 @@
   "devDependencies": {
     "@rnw-npm/eslint-config": "^2.0.0",
     "@rnw-npm/prettier-config": "^1.0.0",
+    "eslint": "^10.3.0",
     "@types/js-yaml": "^4.0.9",
-    "eslint": "^10.2.0",
     "husky": "^9.1.7",
     "lint-staged": "^16.4.0",
-    "prettier": "^3.8.2"
+    "prettier": "^3.8.3"
   },
   "prettier": "@rnw-npm/prettier-config",
   "lint-staged": {

package/eslint.config.ts

@@ -1,30 +0,0 @@
-import {
-  baseConfig,
-  defineConfig,
-  GLOB_MARKDOWN,
-  GLOB_SRC,
-  OFF,
-} from '@rnw-npm/eslint-config'
-
-export default defineConfig([
-  ...baseConfig,
-
-  /**
-   * "tamaro-cli" specific overrides.
-   */
-  {
-    files: [GLOB_SRC],
-    name: 'tamaro-cli/overrides/ts',
-    rules: {
-      'jsdoc/convert-to-jsdoc-comments': OFF,
-      'no-useless-assignment': OFF,
-    },
-  },
-  {
-    files: [GLOB_MARKDOWN],
-    name: 'tamaro-cli/overrides/md',
-    rules: {
-      'markdown/no-multiple-h1': OFF,
-    },
-  },
-])