@schema-weaver/pg-connector 0.0.0-stage → 2.0.1

package/dist/esm/cli/commands/config.d.ts

@@ -0,0 +1,6 @@
+export declare function runConfigShow(args?: string[]): Promise<void>;
+export declare function runConfigGet(args: string[]): Promise<void>;
+export declare function runConfigSet(args: string[]): Promise<void>;
+export declare function runConfigPath(): Promise<void>;
+export declare function runConfig(args?: string[]): Promise<void>;
+//# sourceMappingURL=config.d.ts.map

package/dist/esm/cli/commands/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/config.ts"],"names":[],"mappings":"AAiEA,wBAAsB,aAAa,CAAC,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDtE;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA+DhE;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAyFhE;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAenD;AAED,wBAAsB,SAAS,CAAC,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ClE"}

package/dist/esm/cli/commands/config.js

@@ -0,0 +1,259 @@
+import { loadMachineConfig, mutateMachineConfig, SAFEST_PERMISSION, } from '../../config/machine-config';
+import { isSecureCloudUrl } from '../../config/schema';
+import { getAgentHome, getMachineConfigPath, getDbConfigPath, getPidFilePath, getStatusFilePath, getDaemonLogPath, getErrorsPath, getAuditLogPath, getCredentialKeyPath, } from '../../config/paths';
+import { isReplMode, askConfirm, isInteractive } from '../prompt';
+import { C, S } from '../ui';
+function exit_(code) {
+    if (isReplMode()) {
+        throw { __exitCode: code };
+    }
+    process.exit(code);
+}
+/** Keeps the REPL/CLI exit sentinel from being swallowed by a catch block. */
+function rethrowExit(err) {
+    if (err && typeof err === 'object' && '__exitCode' in err) {
+        throw err;
+    }
+}
+function redactToken(token) {
+    if (!token)
+        return '***';
+    if (token.length <= 12)
+        return '***';
+    return `${token.slice(0, 10)}...${token.slice(-4)}`;
+}
+/** Flags that print the raw agent token. `--token` is the legacy spelling. */
+const REVEAL_FLAGS = ['--reveal', '--token', '-t'];
+function wantsReveal(args) {
+    return args.some((a) => REVEAL_FLAGS.includes(a));
+}
+/**
+ * The agent token is a permanent bearer credential. Printing it is allowed,
+ * but never silently: the exposure is named on stderr (so a redirected stdout
+ * stays clean) and an interactive caller is asked first.
+ */
+async function confirmReveal(args) {
+    console.error(`  ${C.yellow(S.warning)} ${C.yellow('Revealing the agent token.')} ${C.yellow('It is a permanent bearer credential: it lands in your shell history,')}`);
+    console.error(`  ${C.yellow('terminal scrollback and CI job logs. Anyone who reads it can act as this agent.')}`);
+    if (args.includes('--yes') || args.includes('-y') || !isInteractive())
+        return true;
+    return askConfirm(C.red('Print the raw agent token to stdout?'), false);
+}
+export async function runConfigShow(args = []) {
+    try {
+        const config = loadMachineConfig();
+        const revealToken = wantsReveal(args);
+        const json = args.includes('--json') || args.includes('-j');
+        if (revealToken && !(await confirmReveal(args))) {
+            console.log(`  ${C.yellow(S.warning)} Token not revealed.`);
+            exit_(1);
+        }
+        if (json) {
+            console.log(JSON.stringify({
+                ...config,
+                agent_token: revealToken ? config.agent_token : redactToken(config.agent_token),
+            }, null, 2));
+            exit_(0);
+        }
+        console.log();
+        console.log(`  ${C.bold(C.brand('Machine Configuration'))}`);
+        console.log();
+        console.log(`    ${C.bold('Agent ID:')}    ${C.cyan(config.agent_id)}`);
+        console.log(`    ${C.bold('Label:')}       ${C.white(config.machine_label)}`);
+        console.log(`    ${C.bold('Cloud URL:')}   ${C.white(config.cloud_url)}`);
+        console.log(`    ${C.bold('Permission:')}  ${C.yellow(config.default_permission)}`);
+        console.log(`    ${C.bold('Log level:')}   ${C.white(config.log_level)}`);
+        console.log(`    ${C.bold('Token:')}       ${revealToken
+            ? C.white(config.agent_token)
+            : C.dim(redactToken(config.agent_token) + ' (use --reveal to print it)')}`);
+        console.log(`    ${C.bold('Config path:')} ${C.dim(getMachineConfigPath())}`);
+        if (revealToken) {
+            console.log();
+            console.log(`  ${C.yellow(S.warning)} ${C.yellow('Token revealed because --token was provided.')}`);
+        }
+        console.log();
+    }
+    catch (err) {
+        rethrowExit(err);
+        console.log(`  ${C.red('Error:')} ${err instanceof Error ? err.message : String(err)}`);
+    }
+    exit_(0);
+}
+export async function runConfigGet(args) {
+    const key = args[0];
+    if (!key) {
+        console.log(`  ${C.yellow('Usage:')} ${C.cyan('config get <key>')}`);
+        console.log(`  ${C.dim('Available keys: agent_id, machine_label, cloud_url, default_permission, log_level, agent_token')}`);
+        exit_(1);
+    }
+    try {
+        // `config get` accepts any key, so the validated config is read as a
+        // key/value map; the values themselves stay `unknown` and are stringified
+        // only at the point of output.
+        const config = loadMachineConfig();
+        if (!(key in config)) {
+            console.log(`  ${C.yellow(S.warning)} Unknown config key: ${C.white(key)}`);
+            console.log(`  ${C.dim('Available keys: agent_id, machine_label, cloud_url, default_permission, log_level, agent_token')}`);
+            exit_(1);
+        }
+        const val = config[key];
+        if (key === 'agent_token') {
+            // The token is a permanent bearer credential, so stdout is not assumed
+            // to be private: masked by default, and printed only on an explicit
+            // --reveal that names the exposure (and is confirmed on a terminal).
+            if (!wantsReveal(args)) {
+                const masked = redactToken(String(val));
+                if (args.includes('--json') || args.includes('-j')) {
+                    console.log(JSON.stringify({ [key]: masked }, null, 2));
+                }
+                else {
+                    console.log(masked);
+                }
+                console.log(`  ${C.dim('Masked. Pass')} ${C.cyan('--reveal')} ${C.dim('to print the raw token, or use')} ${C.cyan('agent rotate-token')}${C.dim(' to mint a new one.')}`);
+                exit_(0);
+            }
+            if (!(await confirmReveal(args))) {
+                console.log(`  ${C.yellow(S.warning)} Token not revealed.`);
+                exit_(1);
+            }
+            if (args.includes('--json') || args.includes('-j')) {
+                console.log(JSON.stringify({ [key]: val }, null, 2));
+            }
+            else {
+                console.log(String(val));
+            }
+            exit_(0);
+        }
+        if (args.includes('--json') || args.includes('-j')) {
+            console.log(JSON.stringify({ [key]: val }, null, 2));
+        }
+        else {
+            console.log(typeof val === 'object' ? JSON.stringify(val, null, 2) : String(val));
+        }
+    }
+    catch (err) {
+        rethrowExit(err);
+        console.log(`  ${C.red('Error:')} ${err instanceof Error ? err.message : String(err)}`);
+        exit_(1);
+    }
+    exit_(0);
+}
+export async function runConfigSet(args) {
+    const key = args[0];
+    const value = args[1];
+    const allowInsecureTransport = args.includes('--insecure-transport');
+    if (!key || value === undefined) {
+        console.log(`  ${C.yellow('Usage:')} ${C.cyan('config set <key> <value>')}`);
+        console.log(`  ${C.dim('Modifiable keys: cloud_url, default_permission, log_level, machine_label')}`);
+        console.log(`  ${C.dim('To replace the agent token use')} ${C.cyan('agent rotate-token')}`);
+        exit_(1);
+    }
+    try {
+        mutateMachineConfig((config) => {
+            switch (key) {
+                case 'cloud_url':
+                    if (!isSecureCloudUrl(value)) {
+                        console.log(`  ${C.red('Error:')} cloud_url must be a wss:// URL`);
+                        console.log(`  ${C.dim('ws:// and http:// are refused: the agent token would be sent in cleartext.')}`);
+                        if (allowInsecureTransport) {
+                            console.log(`  ${C.red(S.warning)} ${C.yellow('--insecure-transport')} ${C.yellow('was passed but plaintext cloud URLs are no longer supported.')} ${C.yellow('Use a --relay override on a dev token instead.')}`);
+                        }
+                        exit_(1);
+                    }
+                    config.cloud_url = value;
+                    break;
+                case 'log_level':
+                    if (!['debug', 'info', 'warn', 'error'].includes(value)) {
+                        console.log(`  ${C.red('Error:')} log_level must be one of: debug, info, warn, error`);
+                        exit_(1);
+                    }
+                    config.log_level = value;
+                    break;
+                case 'default_permission':
+                    if (!['read_only', 'auto_upgrade', 'manual', 'full'].includes(value)) {
+                        console.log(`  ${C.red('Error:')} default_permission must be one of: read_only, auto_upgrade, manual, full`);
+                        exit_(1);
+                    }
+                    if (value !== SAFEST_PERMISSION) {
+                        console.log(`  ${C.yellow(S.warning)} ${C.yellow('Opting out of the least-privileged default:')} ${C.white(value)} ${C.yellow('allows write access to every linked database.')}`);
+                    }
+                    config.default_permission = value;
+                    break;
+                case 'machine_label':
+                    if (!/^[a-zA-Z0-9_-]{1,64}$/.test(value)) {
+                        console.log(`  ${C.red('Error:')} machine_label must be 1-64 alphanumeric characters, dashes or underscores`);
+                        exit_(1);
+                    }
+                    config.machine_label = value;
+                    break;
+                case 'agent_token':
+                    console.log(`  ${C.red('Error:')} agent_token is not directly settable`);
+                    console.log(`  ${C.dim('Use')} ${C.cyan('agent rotate-token')} ${C.dim('to mint a new token (keeps agent_id).')}`);
+                    exit_(1);
+                    break;
+                default:
+                    console.log(`  ${C.yellow(S.warning)} Cannot modify key: ${C.white(key)}`);
+                    console.log(`  ${C.dim('Modifiable keys: cloud_url, default_permission, log_level, machine_label')}`);
+                    exit_(1);
+            }
+        });
+        console.log(`  ${C.green(S.check)} Updated ${C.cyan(key)} = ${C.white(value)}`);
+    }
+    catch (err) {
+        rethrowExit(err);
+        console.log(`  ${C.red('Error:')} ${err instanceof Error ? err.message : String(err)}`);
+        exit_(1);
+    }
+    exit_(0);
+}
+export async function runConfigPath() {
+    console.log();
+    console.log(`  ${C.bold(C.brand('Configuration & State Paths'))}`);
+    console.log();
+    console.log(`    ${C.bold('Home directory:')}    ${C.white(getAgentHome())}`);
+    console.log(`    ${C.bold('Machine config:')}    ${C.white(getMachineConfigPath())}`);
+    console.log(`    ${C.bold('Databases config:')}  ${C.white(getDbConfigPath())}`);
+    console.log(`    ${C.bold('Credential key:')}    ${C.white(getCredentialKeyPath())}`);
+    console.log(`    ${C.bold('PID file:')}          ${C.white(getPidFilePath())}`);
+    console.log(`    ${C.bold('Status file:')}        ${C.white(getStatusFilePath())}`);
+    console.log(`    ${C.bold('Daemon log:')}         ${C.white(getDaemonLogPath())}`);
+    console.log(`    ${C.bold('Error log:')}          ${C.white(getErrorsPath())}`);
+    console.log(`    ${C.bold('Audit log:')}          ${C.white(getAuditLogPath())}`);
+    console.log();
+    exit_(0);
+}
+export async function runConfig(args = []) {
+    const sub = args[0];
+    const rest = args.slice(1);
+    if (!sub || sub === 'show') {
+        return runConfigShow(sub === 'show' ? rest : args);
+    }
+    if (sub === 'get') {
+        return runConfigGet(rest);
+    }
+    if (sub === 'set') {
+        return runConfigSet(rest);
+    }
+    if (sub === 'path' || sub === 'paths') {
+        return runConfigPath();
+    }
+    if (sub === '--help' || sub === '-h') {
+        console.log();
+        console.log(`  ${C.bold('Config Commands')}`);
+        console.log();
+        console.log(`    ${C.cyan('config [show]')}           Show current machine configuration (${C.dim('--reveal, --json')})`);
+        console.log(`    ${C.cyan('config get <key>')}        Get value of a config key (${C.dim('agent_token is masked unless --reveal')})`);
+        console.log(`    ${C.cyan('config set <key> <val>')}  Update configuration key (${C.dim('cloud_url, default_permission, log_level, machine_label')})`);
+        console.log(`    ${C.cyan('config path')}             Show config and state file paths`);
+        console.log();
+        exit_(0);
+    }
+    // If argument starts with flag (e.g. --token or --json), run show
+    if (sub.startsWith('-')) {
+        return runConfigShow(args);
+    }
+    console.log(`  ${C.yellow('Unknown config subcommand:')} ${C.white(sub)}`);
+    console.log(`  ${C.dim('Subcommands: show, get, set, path')}`);
+    exit_(1);
+}
+//# sourceMappingURL=config.js.map

package/dist/esm/cli/commands/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../src/cli/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,GAGlB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,OAAO,CAAC;AAE7B,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;QAC1D,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAEnD,SAAS,WAAW,CAAC,IAAc;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,IAAc;IACzC,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,sEAAsE,CAAC,EAAE,CACzJ,CAAC;IACF,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,CAAC,MAAM,CAAC,iFAAiF,CAAC,EAAE,CACnG,CAAC;IACF,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO,IAAI,CAAC;IACnF,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,sCAAsC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAiB,EAAE;IACrD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE5D,IAAI,WAAW,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;YAC5D,KAAK,CAAC,CAAC,CAAC,CAAC;QACX,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;gBACE,GAAG,MAAM;gBACT,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC;aAChF,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;YACF,KAAK,CAAC,CAAC,CAAC,CAAC;QACX,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UACrB,WAAW;YACT,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;YAC7B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,6BAA6B,CAC3E,EAAE,CACH,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;QAE9E,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,8CAA8C,CAAC,EAAE,CACvF,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,KAAK,CAAC,CAAC,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,gGAAgG,CAAC,EAAE,CAC/G,CAAC;QACF,KAAK,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,qEAAqE;QACrE,0EAA0E;QAC1E,+BAA+B;QAC/B,MAAM,MAAM,GAAG,iBAAiB,EAAwC,CAAC;QACzE,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,gGAAgG,CAAC,EAAE,CAC/G,CAAC;YACF,KAAK,CAAC,CAAC,CAAC,CAAC;QACX,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC1B,uEAAuE;YACvE,oEAAoE;YACpE,qEAAqE;YACrE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC1D,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACtB,CAAC;gBACD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAC7J,CAAC;gBACF,KAAK,CAAC,CAAC,CAAC,CAAC;YACX,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAC5D,KAAK,CAAC,CAAC,CAAC,CAAC;YACX,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,CAAC,CAAC,CAAC;QACX,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxF,KAAK,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IACD,KAAK,CAAC,CAAC,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,sBAAsB,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAErE,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,0EAA0E,CAAC,EAAE,CACzF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAC5F,KAAK,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,mBAAmB,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7B,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,WAAW;oBACd,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;wBACnE,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,4EAA4E,CAAC,EAAE,CAC3F,CAAC;wBACF,IAAI,sBAAsB,EAAE,CAAC;4BAC3B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,8DAA8D,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,gDAAgD,CAAC,EAAE,CACtM,CAAC;wBACJ,CAAC;wBACD,KAAK,CAAC,CAAC,CAAC,CAAC;oBACX,CAAC;oBACD,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;oBACzB,MAAM;gBAER,KAAK,WAAW;oBACd,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,qDAAqD,CAAC,CAAC;wBACvF,KAAK,CAAC,CAAC,CAAC,CAAC;oBACX,CAAC;oBACD,MAAM,CAAC,SAAS,GAAG,KAAmC,CAAC;oBACvD,MAAM;gBAER,KAAK,oBAAoB;oBACvB,IAAI,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACrE,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,2EAA2E,CAChG,CAAC;wBACF,KAAK,CAAC,CAAC,CAAC,CAAC;oBACX,CAAC;oBACD,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;wBAChC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,6CAA6C,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,+CAA+C,CAAC,EAAE,CACrK,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,kBAAkB,GAAG,KAAwB,CAAC;oBACrD,MAAM;gBAER,KAAK,eAAe;oBAClB,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;wBACzC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,4EAA4E,CACjG,CAAC;wBACF,KAAK,CAAC,CAAC,CAAC,CAAC;oBACX,CAAC;oBACD,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC;oBAC7B,MAAM;gBAER,KAAK,aAAa;oBAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC;oBACzE,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,uCAAuC,CAAC,EAAE,CACtG,CAAC;oBACF,KAAK,CAAC,CAAC,CAAC,CAAC;oBACT,MAAM;gBAER;oBACE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC3E,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,0EAA0E,CAAC,EAAE,CACzF,CAAC;oBACF,KAAK,CAAC,CAAC,CAAC,CAAC;YACb,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxF,KAAK,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IACD,KAAK,CAAC,CAAC,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,KAAK,CAAC,CAAC,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAiB,EAAE;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,aAAa,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACtC,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAC7G,CAAC;QACF,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,uCAAuC,CAAC,GAAG,CACzH,CAAC;QACF,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,+BAA+B,CAAC,CAAC,GAAG,CAAC,yDAAyD,CAAC,GAAG,CAC1I,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,+CAA+C,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,KAAK,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IAED,kEAAkE;IAClE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,CAAC,CAAC,CAAC;AACX,CAAC"}

package/dist/esm/cli/commands/db-add.d.ts

@@ -0,0 +1,16 @@
+/**
+ * One-shot password channel read from the environment.
+ *
+ * `/proc/<pid>/environ` is mode 0400 and owned by the process's own user, so
+ * unlike argv it is NOT readable by another local UID, and the value never
+ * enters `ps` output, the shell history or a CI command echo. `SW_AGENT_DB_PASSWORD=x
+ * sw-agent db add …` is therefore a genuine secret channel, and the only one
+ * that needs no file and no TTY.
+ *
+ * Checked before the interactive prompt so a scripted `db add` is unattended,
+ * and never echoed, never passed to a child process, and never written to any
+ * log: the NAME is safe to print, the VALUE is not.
+ */
+export declare const DB_PASSWORD_ENV_VAR = "SW_AGENT_DB_PASSWORD";
+export declare function runDbAdd(args?: string[]): Promise<void>;
+//# sourceMappingURL=db-add.d.ts.map

package/dist/esm/cli/commands/db-add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-add.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/db-add.ts"],"names":[],"mappings":"AAqDA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAuC1D,wBAAsB,QAAQ,CAAC,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA0mBjE"}