@sdt-tools/cli 0.2.0 → 0.2.6

package/dist/index.js

@@ -18,7 +18,10 @@ var logger = {
 // src/commands/init.ts
 function initCommand() {
   const cmd = new Command("init");
-  cmd.description("Initialize a new SDT project in the current directory.").option("--name <name>", "Project name", "NewSnowflakeProject").option("--scope <scope>", "Project scope: account | database | schema", "database").option("--db <database>", "Database name (required for database/schema scope)").option("--schema <schema>", "Schema name (required for schema scope)").option("--dir <dir>", "Target directory (default: cwd)", process.cwd()).action(async (opts) => {
+  cmd.description("Initialize a new SDT project in the current directory.").option("--name <name>", "Project name", "NewSnowflakeProject").option("--scope <scope>", "Project scope: account | database | schema", "database").option("--db <database>", "Database name (required for database/schema scope)").option("--schema <schema>", "Schema name (required for schema scope)").option("--dir <dir>", "Target directory (default: cwd)", process.cwd()).option(
+    "--force",
+    "Overwrite an existing <name>.sdtproj in the target directory. Without this flag, init refuses to clobber an existing project file so a re-run never silently discards your project configuration."
+  ).action(async (opts) => {
     const scopeType = String(opts.scope);
     if (!["account", "database", "schema"].includes(scopeType)) {
       throw new Error(`Invalid --scope: ${opts.scope}. Use account | database | schema.`);
@@ -36,6 +39,15 @@ function initCommand() {
     await fs.mkdir(root, { recursive: true });
     const project10 = newProjectTemplate(String(opts.name), scope);
     const projectPath = path.join(root, `${project10.name}.sdtproj`);
+    if (!opts.force) {
+      try {
+        await fs.access(projectPath);
+        logger.error(`${projectPath} already exists; pass --force to overwrite.`);
+        process.exitCode = 1;
+        return;
+      } catch {
+      }
+    }
     await saveProject(projectPath, project10);
     const seedFolders = ["databases", "scripts/pre", "scripts/post"];
     for (const f of seedFolders) await fs.mkdir(path.join(root, f), { recursive: true });
@@ -318,7 +330,13 @@ function compareCommand() {
   const cmd = new Command4("compare");
   cmd.description(
     "Compare two schemas. Sources may be .sdtproj, .sdtpac, or snowflake://<profile>[/db[/schema]]."
-  ).argument("<source>", "Left side of the comparison").argument("<target>", "Right side of the comparison").option("-o, --output <path>", "Write JSON result to this path").option("--format <format>", "Output format: json | summary | markdown", "summary").option("--ignore-case", "Treat unquoted identifiers case-insensitively", false).option(
+  ).argument("[source]", "Left side of the comparison (or use --source)").argument("[target]", "Right side of the comparison (or use --target)").option(
+    "--source <path>",
+    "Left side of the comparison (flag form of the positional source arg)"
+  ).option(
+    "--target <path>",
+    "Right side of the comparison (flag form of the positional target arg)"
+  ).option("-o, --output <path>", "Write JSON result to this path").option("--format <format>", "Output format: json | summary | markdown", "summary").option("--ignore-case", "Treat unquoted identifiers case-insensitively", false).option(
     "--no-slice",
     "Disable the source project's Slice (if it has one). Default: a project's slice is applied automatically."
   ).option(
@@ -343,7 +361,14 @@ function compareCommand() {
   ).option(
     "--no-history",
     "Skip writing the compare-history audit record (AUDITCMP.1). Default: every compare run writes a record to `.sdt/history/compare/`, exportable via `sdt audit-log emit`."
-  ).action(async (sourceArg, targetArg, opts) => {
+  ).action(async (sourceArgPos, targetArgPos, opts) => {
+    const sourceArg = opts.source ? String(opts.source) : sourceArgPos ? String(sourceArgPos) : "";
+    const targetArg = opts.target ? String(opts.target) : targetArgPos ? String(targetArgPos) : "";
+    if (!sourceArg || !targetArg) {
+      throw new Error(
+        "compare needs a source and a target \u2014 pass them positionally (`sdt compare <source> <target>`) or via `--source`/`--target`."
+      );
+    }
     const nameMapping = await buildMappingFromOptions(opts);
     const source = await resolveSource(String(sourceArg));
     const target = await resolveSource(String(targetArg));
@@ -653,11 +678,14 @@ function splitStatements(sql) {
 function publishCommand() {
   const cmd = new Command5("publish");
   cmd.description(
-    "Compare a .sdtpac to a live Snowflake target and apply (or dry-run) the migration."
+    "Compare a .sdtpac (the desired state) to a live Snowflake target and apply (or dry-run) the migration. Shared form with `ddt publish`: `--source <desired> --connection <live-target>`."
+  ).option(
+    "--source <path>",
+    "Path to the desired-state .sdtpac (canonical name; the same flag `ddt publish` uses). Required for a normal publish; omit only with --restore-from-snapshot."
   ).option(
     "--pac <path>",
-    "Path to a built .sdtpac. Required for a normal publish; omit only with --restore-from-snapshot."
-  ).requiredOption("-c, --connection <profile>", "Connection profile name").option(
+    "Back-compat alias for --source (the desired-state .sdtpac). Prefer --source for cross-platform parity with `ddt publish`."
+  ).requiredOption("-c, --connection <profile>", "Connection profile name (the live target).").option(
     "--restore-from-snapshot <batchId>",
     "Recovery mode: skip the compare step and emit ALTER TABLE \u2026 SWAP WITH against the snapshot batch <batchId> from the registry. Dry-run by default; pass --apply --yes to execute. This is the command printed by TRUST.4's post-deploy-smoke + TRUST.8's restore-hint when a deploy fails \u2014 they tell the operator to run `sdt publish --restore-from-snapshot <id>`."
   ).option(
@@ -744,12 +772,15 @@ function publishCommand() {
       await runRestoreFromSnapshot(opts);
       return;
     }
-    if (!opts.pac) {
-      logger.error("--pac <path> is required (unless --restore-from-snapshot is given).");
+    const pacRef = opts.source ?? opts.pac;
+    if (!pacRef) {
+      logger.error(
+        "--source <path> (or its alias --pac) is required (unless --restore-from-snapshot is given)."
+      );
       process.exitCode = 1;
       return;
     }
-    const pacPath = path4.resolve(String(opts.pac));
+    const pacPath = path4.resolve(String(pacRef));
     const pac10 = await readPac(pacPath);
     const freshnessMode = opts.freshness ?? "warn";
     if (freshnessMode !== "skip") {
@@ -1512,7 +1543,12 @@ function driftCommand() {
 import { promises as fs6 } from "fs";
 import path6 from "path";
 import { Command as Command7 } from "commander";
-import { project, validate as validateNs, variables as variablesNs } from "@sdt-tools/core";
+import {
+  catalog as catalog2,
+  project,
+  validate as validateNs,
+  variables as variablesNs
+} from "@sdt-tools/core";
 function validateCommand() {
   const cmd = new Command7("validate");
   cmd.description(
@@ -1541,12 +1577,17 @@ function validateCommand() {
     logger.dim(`  Profiles: ${Object.keys(loaded.project.deploymentProfiles ?? {}).length}`);
     if (opts.checkVariables) {
       const projRoot = path6.dirname(path6.resolve(String(opts.project)));
-      const fileContents = await Promise.all(
-        files.map(async (f) => {
+      const { results } = await catalog2.mapPool(
+        files,
+        async (f) => {
           const relPath = path6.relative(projRoot, f).split(path6.sep).join("/");
           const content = await fs6.readFile(f, "utf8");
           return { path: relPath, content };
-        })
+        },
+        { concurrency: 16, stopOnError: true }
+      );
+      const fileContents = results.filter(
+        (r) => r !== void 0
       );
       const profilesBlock = loaded.project.deploymentProfiles ?? {};
       const profileVariableKeys = Object.values(profilesBlock).map(
@@ -1677,6 +1718,11 @@ function connectionCommand() {
     await upsertProfile(profile);
     logger.success(`Saved profile "${profile.name}".`);
   });
+  cmd.command("get <name>").description("Print a profile (secrets are redacted).").action(async (name) => {
+    const profile = await getProfile5(String(name));
+    const redacted = { ...profile, auth: redactAuth(profile.auth) };
+    logger.info(JSON.stringify(redacted, null, 2));
+  });
   cmd.command("remove").description("Remove a connection profile.").argument("<name>").action(async (name) => {
     const ok = await removeProfile(String(name));
     if (ok) logger.success(`Removed profile "${name}".`);
@@ -1694,6 +1740,24 @@ function connectionCommand() {
   });
   return cmd;
 }
+function redactAuth(auth) {
+  const isPlaceholder = (v) => v.startsWith("env:") || v.startsWith("keyring:");
+  switch (auth.method) {
+    case "PASSWORD":
+    case "MFA":
+      return auth.password && !isPlaceholder(auth.password) ? { ...auth, password: "<redacted>" } : auth;
+    case "OAUTH":
+      return auth.token && !isPlaceholder(auth.token) ? { ...auth, token: "<redacted>" } : auth;
+    case "KEY_PAIR":
+      return auth.privateKeyPassphrase && !isPlaceholder(auth.privateKeyPassphrase) ? { ...auth, privateKeyPassphrase: "<redacted>" } : auth;
+    case "EXTERNAL_BROWSER":
+      return auth;
+    default: {
+      const _exhaustive = auth;
+      return _exhaustive;
+    }
+  }
+}
 
 // src/commands/scaffold.ts
 import { Command as Command9 } from "commander";
@@ -4690,7 +4754,7 @@ async function readStdin() {
 // src/commands/compare-profiles.ts
 import { promises as fs23 } from "fs";
 import { Command as Command28 } from "commander";
-import { catalog as catalog2, compareProfiles, pac as pac9, project as project9 } from "@sdt-tools/core";
+import { catalog as catalog3, compareProfiles, pac as pac9, project as project9 } from "@sdt-tools/core";
 function compareProfilesCommand() {
   const cmd = new Command28("compare-profiles");
   cmd.description("Manage saved compare profiles (.sdt/compare-profiles.json).");
@@ -4839,7 +4903,7 @@ function compareProfilesCommand() {
 }
 async function resolveEndpointFqns(endpoint, root) {
   if (endpoint.kind === "connection") {
-    const cache = new catalog2.CatalogCache({ root, connection: endpoint.reference });
+    const cache = new catalog3.CatalogCache({ root, connection: endpoint.reference });
     const snapshot = await cache.get();
     if (snapshot.databases.length === 0) {
       return {
@@ -4899,7 +4963,7 @@ async function readStdin2() {
 
 // src/commands/explorer.ts
 import { Command as Command29 } from "commander";
-import { catalog as catalog3, objectExplorer } from "@sdt-tools/core";
+import { catalog as catalog4, objectExplorer } from "@sdt-tools/core";
 function explorerCommand() {
   const cmd = new Command29("explorer");
   cmd.description(
@@ -4909,7 +4973,7 @@ function explorerCommand() {
     "Truncate tree at depth N (0 = root only, 1 = +databases, 2 = +schemas, 3 = +object-groups, 4 = +objects). Default unlimited.",
     (v) => parseInt(v, 10)
   ).option("--json", "Emit tree as JSON instead of ASCII.").action(async (opts) => {
-    const cache = new catalog3.CatalogCache({
+    const cache = new catalog4.CatalogCache({
       root: String(opts.root),
       connection: String(opts.connection)
     });
@@ -4952,7 +5016,7 @@ function renderChild(node, prefix, isLast) {
 
 // src/commands/catalog.ts
 import { Command as Command30 } from "commander";
-import { catalog as catalog4 } from "@sdt-tools/core";
+import { catalog as catalog5 } from "@sdt-tools/core";
 import { getProfile as getProfile9, SnowflakeConnection as SnowflakeConnection9 } from "@sdt-tools/core/connection";
 var BUILTIN_DATABASES = /* @__PURE__ */ new Set(["SNOWFLAKE", "SNOWFLAKE_SAMPLE_DATA", "UTIL_DB"]);
 function catalogCommand() {
@@ -4967,7 +5031,7 @@ function catalogCommand() {
   ).option("--no-fingerprint-skip", "Force a full scan even when fingerprints are unchanged.").action(async (opts) => {
     const profile = await getProfile9(String(opts.connection));
     const conn = new SnowflakeConnection9(profile);
-    const cache = new catalog4.CatalogCache({
+    const cache = new catalog5.CatalogCache({
       root: String(opts.root),
       connection: profile.name
     });
@@ -4986,27 +5050,27 @@ function catalogCommand() {
       const cachedByDb = new Map(cached.databases.map((d) => [d.database, d]));
       const concurrency = Math.max(1, Number(opts.concurrency) || 10);
       const fingerprintSkip = opts.fingerprintSkip !== false;
-      const { results, errors } = await catalog4.mapPool(
+      const { results, errors } = await catalog5.mapPool(
         dbs,
         async (db) => {
           let freshFingerprint = null;
           try {
             const fpRes = await conn.query(
-              catalog4.fingerprintSqlForDatabase(db)
+              catalog5.fingerprintSqlForDatabase(db)
             );
-            freshFingerprint = catalog4.parseFingerprintRow(fpRes.rows);
+            freshFingerprint = catalog5.parseFingerprintRow(fpRes.rows);
           } catch (err) {
             logger.warn(
               `fingerprint(${db}) failed; falling through to full scan: ${err.message}`
             );
           }
           const cachedDb = cachedByDb.get(db);
-          if (fingerprintSkip && cachedDb && cachedDb.fingerprint != null && freshFingerprint != null && catalog4.isFresh(cachedDb.fingerprint, freshFingerprint)) {
+          if (fingerprintSkip && cachedDb && cachedDb.fingerprint != null && freshFingerprint != null && catalog5.isFresh(cachedDb.fingerprint, freshFingerprint)) {
             logger.dim(`  ${db}: fresh; reusing cache`);
             return { database: db, fingerprint: cachedDb.fingerprint, schemas: cachedDb.schemas };
           }
-          const scanRes = await conn.query(catalog4.bulkScanSqlForDatabase(db));
-          const schemas = catalog4.parseBulkScanRows(db, scanRes.rows);
+          const scanRes = await conn.query(catalog5.bulkScanSqlForDatabase(db));
+          const schemas = catalog5.parseBulkScanRows(db, scanRes.rows);
           const fingerprint = freshFingerprint ?? null;
           logger.dim(
             `  ${db}: ${schemas.length} schemas / ${schemas.reduce((sum, s) => sum + s.objects.length, 0)} objects`
@@ -5018,8 +5082,8 @@ function catalogCommand() {
       for (const e of errors) {
         logger.warn(`scan failed for "${dbs[e.index]}": ${e.error.message}`);
       }
-      const snapshot = catalog4.refreshFingerprints({
-        version: catalog4.CATALOG_SNAPSHOT_VERSION,
+      const snapshot = catalog5.refreshFingerprints({
+        version: catalog5.CATALOG_SNAPSHOT_VERSION,
         connection: profile.name,
         snapshotAt: (/* @__PURE__ */ new Date()).toISOString(),
         fingerprint: null,
@@ -5032,7 +5096,7 @@ function catalogCommand() {
     }
   });
   cmd.command("show").description("Pretty-print or JSON-dump the cached snapshot for a connection.").requiredOption("-c, --connection <name>", "Connection profile name.").option("--root <path>", "Project root. Default cwd.", process.cwd()).option("--json", "Emit JSON instead of summary.").action(async (opts) => {
-    const cache = new catalog4.CatalogCache({
+    const cache = new catalog5.CatalogCache({
       root: String(opts.root),
       connection: String(opts.connection)
     });
@@ -5059,7 +5123,7 @@ function catalogCommand() {
     }
   });
   cmd.command("clear").description("Delete the cached snapshot for a connection.").requiredOption("-c, --connection <name>", "Connection profile name.").option("--root <path>", "Project root. Default cwd.", process.cwd()).action(async (opts) => {
-    const cache = new catalog4.CatalogCache({
+    const cache = new catalog5.CatalogCache({
       root: String(opts.root),
       connection: String(opts.connection)
     });
@@ -5200,7 +5264,7 @@ import { Command as Command32 } from "commander";
 import { promises as fs25 } from "fs";
 import os from "os";
 import path20 from "path";
-import { catalog as catalog5 } from "@sdt-tools/core";
+import { catalog as catalog6 } from "@sdt-tools/core";
 function buildDriftReport(results) {
   const allFqns = /* @__PURE__ */ new Set();
   const byFqn = /* @__PURE__ */ new Map();
@@ -5263,7 +5327,7 @@ async function loadProfileNames(profilesOpt, profilesDir) {
 }
 async function defaultSearchFn(profile, pattern, opts) {
   const root = opts.root ?? process.cwd();
-  const cache = new catalog5.CatalogCache({ root, connection: profile });
+  const cache = new catalog6.CatalogCache({ root, connection: profile });
   const snapshot = await cache.get();
   if (snapshot.databases.length === 0) {
     throw new Error(