@sdt-tools/cli 0.2.5 → 0.3.0

package/dist/index.js

@@ -678,11 +678,14 @@ function splitStatements(sql) {
 function publishCommand() {
   const cmd = new Command5("publish");
   cmd.description(
-    "Compare a .sdtpac to a live Snowflake target and apply (or dry-run) the migration."
+    "Compare a .sdtpac (the desired state) to a live Snowflake target and apply (or dry-run) the migration. Shared form with `ddt publish`: `--source <desired> --connection <live-target>`."
+  ).option(
+    "--source <path>",
+    "Path to the desired-state .sdtpac (canonical name; the same flag `ddt publish` uses). Required for a normal publish; omit only with --restore-from-snapshot."
   ).option(
     "--pac <path>",
-    "Path to a built .sdtpac. Required for a normal publish; omit only with --restore-from-snapshot."
-  ).requiredOption("-c, --connection <profile>", "Connection profile name").option(
+    "Back-compat alias for --source (the desired-state .sdtpac). Prefer --source for cross-platform parity with `ddt publish`."
+  ).requiredOption("-c, --connection <profile>", "Connection profile name (the live target).").option(
     "--restore-from-snapshot <batchId>",
     "Recovery mode: skip the compare step and emit ALTER TABLE \u2026 SWAP WITH against the snapshot batch <batchId> from the registry. Dry-run by default; pass --apply --yes to execute. This is the command printed by TRUST.4's post-deploy-smoke + TRUST.8's restore-hint when a deploy fails \u2014 they tell the operator to run `sdt publish --restore-from-snapshot <id>`."
   ).option(
@@ -769,12 +772,15 @@ function publishCommand() {
       await runRestoreFromSnapshot(opts);
       return;
     }
-    if (!opts.pac) {
-      logger.error("--pac <path> is required (unless --restore-from-snapshot is given).");
+    const pacRef = opts.source ?? opts.pac;
+    if (!pacRef) {
+      logger.error(
+        "--source <path> (or its alias --pac) is required (unless --restore-from-snapshot is given)."
+      );
       process.exitCode = 1;
       return;
     }
-    const pacPath = path4.resolve(String(opts.pac));
+    const pacPath = path4.resolve(String(pacRef));
     const pac10 = await readPac(pacPath);
     const freshnessMode = opts.freshness ?? "warn";
     if (freshnessMode !== "skip") {
@@ -1712,6 +1718,11 @@ function connectionCommand() {
     await upsertProfile(profile);
     logger.success(`Saved profile "${profile.name}".`);
   });
+  cmd.command("get <name>").description("Print a profile (secrets are redacted).").action(async (name) => {
+    const profile = await getProfile5(String(name));
+    const redacted = { ...profile, auth: redactAuth(profile.auth) };
+    logger.info(JSON.stringify(redacted, null, 2));
+  });
   cmd.command("remove").description("Remove a connection profile.").argument("<name>").action(async (name) => {
     const ok = await removeProfile(String(name));
     if (ok) logger.success(`Removed profile "${name}".`);
@@ -1729,6 +1740,24 @@ function connectionCommand() {
   });
   return cmd;
 }
+function redactAuth(auth) {
+  const isPlaceholder = (v) => v.startsWith("env:") || v.startsWith("keyring:");
+  switch (auth.method) {
+    case "PASSWORD":
+    case "MFA":
+      return auth.password && !isPlaceholder(auth.password) ? { ...auth, password: "<redacted>" } : auth;
+    case "OAUTH":
+      return auth.token && !isPlaceholder(auth.token) ? { ...auth, token: "<redacted>" } : auth;
+    case "KEY_PAIR":
+      return auth.privateKeyPassphrase && !isPlaceholder(auth.privateKeyPassphrase) ? { ...auth, privateKeyPassphrase: "<redacted>" } : auth;
+    case "EXTERNAL_BROWSER":
+      return auth;
+    default: {
+      const _exhaustive = auth;
+      return _exhaustive;
+    }
+  }
+}
 
 // src/commands/scaffold.ts
 import { Command as Command9 } from "commander";