@shipdit/cli 0.2.1 → 0.3.0

package/dist/index.mjs

@@ -378,10 +378,11 @@ const _$1 = (...t) => hc(...t);
 const v$1 = (...t) => hc(...t);
 const y$1 = (...t) => hc(...t);
 const b$1 = (...t) => hc(...t);
-function x$1(e) {
+const x$1 = (...t) => hc(...t);
+function S$1(e) {
 	return `${e.replace(/\/+$/, ``)}/api/v1/rpc`;
 }
-function S$1(e) {
+function C$1(e) {
 	return {
 		...e.fetch ? { fetch: e.fetch } : {},
 		init: { credentials: e.client === `dashboard` ? `include` : `same-origin` },
@@ -391,129 +392,148 @@ function S$1(e) {
 		}
 	};
 }
-async function C$1(e, t) {
+async function w$1(e, t) {
 	return i$1(await e({ json: t }));
 }
-function w$1(e) {
-	let t = x$1(e.baseUrl), n = S$1(e), r = a$1(t, n), i = o$1(t, n), w = s$1(t, n), T = c$1(t, n), E = l$1(t, n), D = u$1(t, n), O = d$2(t, n), k = f$2(t, n), A = h$1(t, n), j = p$1(t, n), M = m$1(t, n), N = g$1(t, n), P = _$1(t, n), F = v$1(t, n), I = y$1(t, n), L = b$1(t, n);
+function T$1(e) {
+	let t = S$1(e.baseUrl), n = C$1(e), r = a$1(t, n), i = o$1(t, n), T = s$1(t, n), E = c$1(t, n), D = l$1(t, n), O = u$1(t, n), k = d$2(t, n), A = f$2(t, n), j = g$1(t, n), M = h$1(t, n), N = p$1(t, n), P = m$1(t, n), F = _$1(t, n), I = v$1(t, n), L = y$1(t, n), R = b$1(t, n), z = x$1(t, n);
 	return {
 		me: {
-			get: (e = {}) => C$1(r.me.$post, e),
-			feedback: (e) => C$1(r.me.feedback.$post, e)
+			get: (e = {}) => w$1(r.me.$post, e),
+			feedback: (e) => w$1(r.me.feedback.$post, e)
 		},
 		project: {
-			list: (e = {}) => C$1(i.project.list.$post, e),
-			create: (e) => C$1(i.project.create.$post, e),
-			update: (e) => C$1(i.project.update.$post, e),
-			archive: (e) => C$1(i.project.archive.$post, e),
-			listTeams: (e) => C$1(i.project.listTeams.$post, e),
-			setTeams: (e) => C$1(i.project.setTeams.$post, e)
+			list: (e = {}) => w$1(i.project.list.$post, e),
+			create: (e) => w$1(i.project.create.$post, e),
+			update: (e) => w$1(i.project.update.$post, e),
+			archive: (e) => w$1(i.project.archive.$post, e),
+			listTeams: (e) => w$1(i.project.listTeams.$post, e),
+			setTeams: (e) => w$1(i.project.setTeams.$post, e)
 		},
-		team: { listMembers: (e) => C$1(I.team.listMembers.$post, e) },
+		team: { listMembers: (e) => w$1(R.team.listMembers.$post, e) },
 		environment: {
-			list: (e) => C$1(w.environment.list.$post, e),
-			create: (e) => C$1(w.environment.create.$post, e),
-			update: (e) => C$1(w.environment.update.$post, e),
-			archive: (e) => C$1(w.environment.archive.$post, e)
+			list: (e) => w$1(T.environment.list.$post, e),
+			create: (e) => w$1(T.environment.create.$post, e),
+			update: (e) => w$1(T.environment.update.$post, e),
+			archive: (e) => w$1(T.environment.archive.$post, e)
 		},
 		flag: {
-			list: (e) => C$1(T.flag.list.$post, e),
-			get: (e) => C$1(T.flag.get.$post, e),
-			create: (e) => C$1(T.flag.create.$post, e),
-			update: (e) => C$1(T.flag.update.$post, e),
-			archive: (e) => C$1(T.flag.archive.$post, e),
-			updateEnvironment: (e) => C$1(T.flag.updateEnvironment.$post, e),
-			toggleEnvironment: (e) => C$1(T.flag.toggleEnvironment.$post, e),
-			listEnvironmentStates: (e) => C$1(T.flag.listEnvironmentStates.$post, e),
-			pull: (e) => C$1(T.flag.pull.$post, e),
-			diff: (e) => C$1(T.flag.diff.$post, e),
-			push: (e) => C$1(T.flag.push.$post, e)
+			list: (e) => w$1(E.flag.list.$post, e),
+			get: (e) => w$1(E.flag.get.$post, e),
+			create: (e) => w$1(E.flag.create.$post, e),
+			update: (e) => w$1(E.flag.update.$post, e),
+			archive: (e) => w$1(E.flag.archive.$post, e),
+			updateEnvironment: (e) => w$1(E.flag.updateEnvironment.$post, e),
+			toggleEnvironment: (e) => w$1(E.flag.toggleEnvironment.$post, e),
+			listEnvironmentStates: (e) => w$1(E.flag.listEnvironmentStates.$post, e),
+			pull: (e) => w$1(E.flag.pull.$post, e),
+			diff: (e) => w$1(E.flag.diff.$post, e),
+			push: (e) => w$1(E.flag.push.$post, e)
 		},
 		apiKey: {
-			list: (e = {}) => C$1(E.apiKey.list.$post, e),
-			create: (e) => C$1(E.apiKey.create.$post, e),
-			revoke: (e) => C$1(E.apiKey.revoke.$post, e)
+			list: (e = {}) => w$1(D.apiKey.list.$post, e),
+			create: (e) => w$1(D.apiKey.create.$post, e),
+			revoke: (e) => w$1(D.apiKey.revoke.$post, e)
 		},
 		sdkKey: {
-			list: (e = {}) => C$1(k.sdkKey.list.$post, e),
-			create: (e) => C$1(k.sdkKey.create.$post, e),
-			revoke: (e) => C$1(k.sdkKey.revoke.$post, e)
+			list: (e = {}) => w$1(A.sdkKey.list.$post, e),
+			create: (e) => w$1(A.sdkKey.create.$post, e),
+			revoke: (e) => w$1(A.sdkKey.revoke.$post, e)
+		},
+		serviceAccount: {
+			list: (e = {}) => w$1(j.serviceAccount.list.$post, e),
+			get: (e) => w$1(j.serviceAccount.get.$post, e),
+			create: (e) => w$1(j.serviceAccount.create.$post, e),
+			update: (e) => w$1(j.serviceAccount.update.$post, e),
+			disable: (e) => w$1(j.serviceAccount.disable.$post, e),
+			enable: (e) => w$1(j.serviceAccount.enable.$post, e),
+			delete: (e) => w$1(j.serviceAccount.delete.$post, e),
+			createToken: (e) => w$1(j.serviceAccount.createToken.$post, e),
+			listTokens: (e) => w$1(j.serviceAccount.listTokens.$post, e),
+			revokeToken: (e) => w$1(j.serviceAccount.revokeToken.$post, e)
 		},
 		segment: {
-			list: (e) => C$1(A.segment.list.$post, e),
-			get: (e) => C$1(A.segment.get.$post, e),
-			create: (e) => C$1(A.segment.create.$post, e),
-			update: (e) => C$1(A.segment.update.$post, e),
-			archive: (e) => C$1(A.segment.archive.$post, e),
-			listEnvironmentStates: (e) => C$1(A.segment.listEnvironmentStates.$post, e),
-			updateEnvironment: (e) => C$1(A.segment.updateEnvironment.$post, e)
+			list: (e) => w$1(M.segment.list.$post, e),
+			get: (e) => w$1(M.segment.get.$post, e),
+			create: (e) => w$1(M.segment.create.$post, e),
+			update: (e) => w$1(M.segment.update.$post, e),
+			archive: (e) => w$1(M.segment.archive.$post, e),
+			listEnvironmentStates: (e) => w$1(M.segment.listEnvironmentStates.$post, e),
+			updateEnvironment: (e) => w$1(M.segment.updateEnvironment.$post, e)
 		},
 		evaluatedEntity: {
-			list: (e) => C$1(j.evaluatedEntity.list.$post, e),
-			get: (e) => C$1(j.evaluatedEntity.get.$post, e),
-			delete: (e) => C$1(j.evaluatedEntity.delete.$post, e)
+			list: (e) => w$1(N.evaluatedEntity.list.$post, e),
+			get: (e) => w$1(N.evaluatedEntity.get.$post, e),
+			delete: (e) => w$1(N.evaluatedEntity.delete.$post, e)
 		},
 		evaluationFact: {
-			list: (e) => C$1(M.evaluationFact.list.$post, e),
-			byRule: (e) => C$1(M.evaluationFact.byRule.$post, e),
-			orgSummary: (e = {}) => C$1(M.evaluationFact.orgSummary.$post, e),
-			projectSummary: (e) => C$1(M.evaluationFact.projectSummary.$post, e),
-			simulate: (e) => C$1(M.evaluationFact.simulate.$post, e)
+			list: (e) => w$1(P.evaluationFact.list.$post, e),
+			byRule: (e) => w$1(P.evaluationFact.byRule.$post, e),
+			orgSummary: (e = {}) => w$1(P.evaluationFact.orgSummary.$post, e),
+			projectSummary: (e) => w$1(P.evaluationFact.projectSummary.$post, e),
+			simulate: (e) => w$1(P.evaluationFact.simulate.$post, e)
 		},
-		snapshot: { publish: (e) => C$1(N.snapshot.publish.$post, e) },
-		device: { authorize: (e) => C$1(P.device.authorize.$post, e) },
+		snapshot: {
+			publish: (e) => w$1(F.snapshot.publish.$post, e),
+			listOutbox: (e = {}) => w$1(F.snapshot.outbox.list.$post, e),
+			requeue: (e) => w$1(F.snapshot.outbox.requeue.$post, e),
+			rebuild: (e) => w$1(F.snapshot.rebuild.$post, e),
+			listPublications: (e) => w$1(F.snapshot.publications.list.$post, e)
+		},
+		device: { authorize: (e) => w$1(I.device.authorize.$post, e) },
 		billing: {
-			get: (e = {}) => C$1(F.billing.get.$post, e),
-			attach: (e) => C$1(F.billing.attach.$post, e),
-			openPortal: (e) => C$1(F.billing.openPortal.$post, e)
+			get: (e = {}) => w$1(L.billing.get.$post, e),
+			attach: (e) => w$1(L.billing.attach.$post, e),
+			openPortal: (e) => w$1(L.billing.openPortal.$post, e)
 		},
 		approval: {
-			listPolicies: (e = {}) => C$1(D.approval.listPolicies.$post, e),
-			createPolicy: (e) => C$1(D.approval.createPolicy.$post, e),
-			updatePolicy: (e) => C$1(D.approval.updatePolicy.$post, e),
-			deletePolicy: (e) => C$1(D.approval.deletePolicy.$post, e),
-			listRequests: (e = {}) => C$1(D.approval.listRequests.$post, e),
-			get: (e) => C$1(D.approval.get.$post, e),
-			approve: (e) => C$1(D.approval.approve.$post, e),
-			reject: (e) => C$1(D.approval.reject.$post, e),
-			cancel: (e) => C$1(D.approval.cancel.$post, e)
+			listPolicies: (e = {}) => w$1(O.approval.listPolicies.$post, e),
+			createPolicy: (e) => w$1(O.approval.createPolicy.$post, e),
+			updatePolicy: (e) => w$1(O.approval.updatePolicy.$post, e),
+			deletePolicy: (e) => w$1(O.approval.deletePolicy.$post, e),
+			listRequests: (e = {}) => w$1(O.approval.listRequests.$post, e),
+			get: (e) => w$1(O.approval.get.$post, e),
+			approve: (e) => w$1(O.approval.approve.$post, e),
+			reject: (e) => w$1(O.approval.reject.$post, e),
+			cancel: (e) => w$1(O.approval.cancel.$post, e)
 		},
 		audit: {
-			list: (e = {}) => C$1(O.audit.list.$post, e),
-			get: (e) => C$1(O.audit.get.$post, e),
-			actions: (e = {}) => C$1(O.audit.actions.$post, e),
-			export: (e) => C$1(O.audit.export.$post, e),
-			getSettings: (e = {}) => C$1(O.audit.getSettings.$post, e),
-			updateSettings: (e) => C$1(O.audit.updateSettings.$post, e),
-			listDestinations: (e = {}) => C$1(O.audit.listDestinations.$post, e),
-			createDestination: (e) => C$1(O.audit.createDestination.$post, e),
-			updateDestination: (e) => C$1(O.audit.updateDestination.$post, e),
-			deleteDestination: (e) => C$1(O.audit.deleteDestination.$post, e),
-			testDestination: (e) => C$1(O.audit.testDestination.$post, e)
+			list: (e = {}) => w$1(k.audit.list.$post, e),
+			get: (e) => w$1(k.audit.get.$post, e),
+			actions: (e = {}) => w$1(k.audit.actions.$post, e),
+			export: (e) => w$1(k.audit.export.$post, e),
+			getSettings: (e = {}) => w$1(k.audit.getSettings.$post, e),
+			updateSettings: (e) => w$1(k.audit.updateSettings.$post, e),
+			listDestinations: (e = {}) => w$1(k.audit.listDestinations.$post, e),
+			createDestination: (e) => w$1(k.audit.createDestination.$post, e),
+			updateDestination: (e) => w$1(k.audit.updateDestination.$post, e),
+			deleteDestination: (e) => w$1(k.audit.deleteDestination.$post, e),
+			testDestination: (e) => w$1(k.audit.testDestination.$post, e)
 		},
 		sso: {
-			getSettings: (e = {}) => C$1(L.sso.getSettings.$post, e),
-			listProviders: (e = {}) => C$1(L.sso.listProviders.$post, e),
-			updateAllowedDomains: (e) => C$1(L.sso.updateAllowedDomains.$post, e),
-			setEnforcement: (e) => C$1(L.sso.setEnforcement.$post, e)
+			getSettings: (e = {}) => w$1(z.sso.getSettings.$post, e),
+			listProviders: (e = {}) => w$1(z.sso.listProviders.$post, e),
+			updateAllowedDomains: (e) => w$1(z.sso.updateAllowedDomains.$post, e),
+			setEnforcement: (e) => w$1(z.sso.setEnforcement.$post, e)
 		},
 		raw: {
 			me: r,
 			project: i,
-			environment: w,
-			flag: T,
-			apiKey: E,
-			approval: D,
-			audit: O,
-			sdkKey: k,
-			segment: A,
-			evaluatedEntity: j,
-			evaluationFact: M,
-			snapshot: N,
-			device: P,
-			billing: F,
-			team: I,
-			sso: L
+			environment: T,
+			flag: E,
+			apiKey: D,
+			approval: O,
+			audit: k,
+			sdkKey: A,
+			serviceAccount: j,
+			segment: M,
+			evaluatedEntity: N,
+			evaluationFact: P,
+			snapshot: F,
+			device: I,
+			billing: L,
+			team: R,
+			sso: z
 		}
 	};
 }
@@ -1860,6 +1880,18 @@ const t$1 = createAccessControl({
 		`read`,
 		`manage`,
 		`enforce`
+	],
+	service_account: [
+		`create`,
+		`read`,
+		`update`,
+		`disable`,
+		`delete`
+	],
+	service_account_token: [
+		`create`,
+		`read`,
+		`revoke`
 	]
 });
 const n$1 = {
@@ -1944,7 +1976,19 @@ const n$1 = {
 		],
 		evaluated_entity: [`read`, `delete`],
 		billing: [`read`, `manage`],
-		sso: [`read`, `manage`]
+		sso: [`read`, `manage`],
+		service_account: [
+			`create`,
+			`read`,
+			`update`,
+			`disable`,
+			`delete`
+		],
+		service_account_token: [
+			`create`,
+			`read`,
+			`revoke`
+		]
 	}),
 	owner: t$1.newRole({
 		organization: [`update`, `delete`],
@@ -2002,6 +2046,18 @@ const n$1 = {
 			`read`,
 			`manage`,
 			`enforce`
+		],
+		service_account: [
+			`create`,
+			`read`,
+			`update`,
+			`disable`,
+			`delete`
+		],
+		service_account_token: [
+			`create`,
+			`read`,
+			`revoke`
 		]
 	})
 };
@@ -4036,7 +4092,7 @@ async function createCliApiClient(runtime) {
 		sessionToken,
 		orgSlug: runtime.org
 	});
-	const client = w$1({
+	const client = T$1({
 		baseUrl: runtime.apiUrl,
 		client: "cli",
 		getHeaders: () => {
@@ -4073,7 +4129,7 @@ async function resolveProjectId(client, runtime) {
 		if (!match) throw new CliError("not_found", `Project not found: ${runtime.project}`);
 		projectId = match.id;
 	}
-	if (!projectId) throw new CliError("validation_error", "Project is required. Pass --project, set SHIPD_PROJECT, or use an API key with project metadata.");
+	if (!projectId) throw new CliError("validation_error", "Project is required. Pass --project, set SHIPD_PROJECT, or use a management key / service-account token bound to a project.");
 	return {
 		organizationId: me.organization.id,
 		projectId
@@ -4087,7 +4143,7 @@ async function resolveIds(client, runtime) {
 		if (!match) throw new CliError("not_found", `Environment not found: ${runtime.env}`);
 		environmentId = match.id;
 	}
-	if (!environmentId) throw new CliError("validation_error", "Environment is required. Pass --env, set SHIPD_ENV, or use an API key with environment metadata.");
+	if (!environmentId) throw new CliError("validation_error", "Environment is required. Pass --env, set SHIPD_ENV, or use a management key / service-account token bound to an environment.");
 	return {
 		organizationId,
 		projectId,
@@ -4213,6 +4269,7 @@ function registerAuthCommands(program) {
 			return;
 		}
 		if (me.auth.type === "user") console.log(`User: ${me.auth.name} <${me.auth.email}>`);
+		else if (me.auth.type === "service_account") console.log(`Service account: ${me.auth.serviceAccountId} (token ${me.auth.tokenId})`);
 		else console.log(`API key: ${me.auth.keyId}`);
 		console.log(`Organization: ${me.organization.slug} (${me.organization.id})`);
 		if (me.project) console.log(`Project: ${me.project.slug} (${me.project.id})`);
@@ -5038,7 +5095,8 @@ function registerPushCommand(program) {
 //#endregion
 //#region src/commands/snapshots.ts
 function registerSnapshotsCommands(program) {
-	program.command("snapshots").description("Data-plane snapshot operations").command("publish").description("Materialize the environment snapshot from Postgres and publish to the data plane").action(async (_opts, command) => {
+	const snapshots = program.command("snapshots").description("Data-plane snapshot operations");
+	snapshots.command("publish").description("Materialize the environment snapshot from Postgres and publish to the data plane").action(async (_opts, command) => {
 		const runtime = getRuntime(command);
 		const client = await createCliApiClient(runtime);
 		const { environmentId } = await resolveIds(client, runtime);
@@ -5049,6 +5107,62 @@ function registerSnapshotsCommands(program) {
 		}
 		console.log(`Published ${result.environmentKey} v${result.version} (${result.flagCount} flags) → ${result.keys.current}`);
 	});
+	snapshots.command("outbox").description("List snapshot outbox rows").option("--status <status>", "Filter by status (pending, failed, dead_lettered, …)").action(async (opts, command) => {
+		const runtime = getRuntime(command);
+		const client = await createCliApiClient(runtime);
+		const { environmentId } = await resolveIds(client, runtime);
+		const result = await client.snapshot.listOutbox({
+			environmentId,
+			status: opts.status
+		}).catch(mapApiError);
+		if (runtime.json) {
+			console.log(JSON.stringify(result, null, 2));
+			return;
+		}
+		const rows = Array.isArray(result) ? result : [];
+		if (rows.length === 0) {
+			console.log("No outbox rows.");
+			return;
+		}
+		for (const row of rows) console.log(`#${row.id} v${row.snapshotVersion} ${row.status} attempts=${row.attempts}${row.lastError ? ` — ${row.lastError}` : ""}`);
+	});
+	snapshots.command("requeue").description("Requeue dead-lettered snapshot outbox rows for this environment").action(async (_opts, command) => {
+		const runtime = getRuntime(command);
+		const client = await createCliApiClient(runtime);
+		const { environmentId } = await resolveIds(client, runtime);
+		const result = await client.snapshot.requeue({ environmentId }).catch(mapApiError);
+		if (runtime.json) {
+			console.log(JSON.stringify(result, null, 2));
+			return;
+		}
+		console.log(`Requeued ${result.requeued} dead-lettered row(s).`);
+	});
+	snapshots.command("rebuild").description("Enqueue a snapshot rebuild from Postgres (does not bump version)").option("--project", "Rebuild every environment in the current project").action(async (opts, command) => {
+		const runtime = getRuntime(command);
+		const client = await createCliApiClient(runtime);
+		const result = await (opts.project ? resolveProjectId(client, runtime).then(({ projectId }) => client.snapshot.rebuild({ projectId })) : resolveIds(client, runtime).then(({ environmentId }) => client.snapshot.rebuild({ environmentId }))).catch(mapApiError);
+		if (runtime.json) {
+			console.log(JSON.stringify(result, null, 2));
+			return;
+		}
+		console.log(`Enqueued ${result.enqueued} rebuild job(s).`);
+	});
+	snapshots.command("publications").description("List recorded snapshot publications for this environment").action(async (_opts, command) => {
+		const runtime = getRuntime(command);
+		const client = await createCliApiClient(runtime);
+		const { environmentId } = await resolveIds(client, runtime);
+		const result = await client.snapshot.listPublications({ environmentId }).catch(mapApiError);
+		if (runtime.json) {
+			console.log(JSON.stringify(result, null, 2));
+			return;
+		}
+		const rows = Array.isArray(result) ? result : [];
+		if (rows.length === 0) {
+			console.log("No publications.");
+			return;
+		}
+		for (const row of rows) console.log(`#${row.id} v${row.snapshotVersion} notify=${row.notifyStatus} ${row.contentHash.slice(0, 12)} ${row.createdAt}`);
+	});
 }
 
 //#endregion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shipdit/cli",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "shipd's command-line interface",
   "repository": {
     "type": "git",