opal-security 2.0.5 → 2.0.9

package/README.md

@@ -22,7 +22,7 @@ $ npm install -g opal-security
 $ opal COMMAND
 running command...
 $ opal (-v|--version|version)
-opal-security/2.0.5 darwin-x64 node-v14.16.1
+opal-security/2.0.9 darwin-x64 node-v14.16.1
 $ opal --help [COMMAND]
 USAGE
   $ opal COMMAND
@@ -86,7 +86,7 @@ EXAMPLE
   opal aws:identity
 ```
 
-_See code: [src/commands/aws/identity.ts](https://github.com/cli/opal/blob/v2.0.5/src/commands/aws/identity.ts)_
+_See code: [src/commands/aws/identity.ts](https://github.com/cli/opal/blob/v2.0.9/src/commands/aws/identity.ts)_
 
 ## `opal curl-example`
 
@@ -100,7 +100,7 @@ OPTIONS
   -h, --help  show CLI help
 ```
 
-_See code: [src/commands/curl-example.ts](https://github.com/cli/opal/blob/v2.0.5/src/commands/curl-example.ts)_
+_See code: [src/commands/curl-example.ts](https://github.com/cli/opal/blob/v2.0.9/src/commands/curl-example.ts)_
 
 ## `opal help [COMMAND]`
 
@@ -136,7 +136,7 @@ EXAMPLES
   opal iam-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/iam-roles/start.ts](https://github.com/cli/opal/blob/v2.0.5/src/commands/iam-roles/start.ts)_
+_See code: [src/commands/iam-roles/start.ts](https://github.com/cli/opal/blob/v2.0.9/src/commands/iam-roles/start.ts)_
 
 ## `opal kube-roles:start`
 
@@ -158,7 +158,7 @@ EXAMPLES
   "arn:aws:iam::712234975475:role/acme-eks-cluster-admin-role"
 ```
 
-_See code: [src/commands/kube-roles/start.ts](https://github.com/cli/opal/blob/v2.0.5/src/commands/kube-roles/start.ts)_
+_See code: [src/commands/kube-roles/start.ts](https://github.com/cli/opal/blob/v2.0.9/src/commands/kube-roles/start.ts)_
 
 ## `opal login`
 
@@ -175,7 +175,7 @@ EXAMPLE
   $ opal login
 ```
 
-_See code: [src/commands/login.ts](https://github.com/cli/opal/blob/v2.0.5/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/cli/opal/blob/v2.0.9/src/commands/login.ts)_
 
 ## `opal logout`
 
@@ -192,7 +192,7 @@ EXAMPLE
   $ opal logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/cli/opal/blob/v2.0.5/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/cli/opal/blob/v2.0.9/src/commands/logout.ts)_
 
 ## `opal postgres-instances:start`
 
@@ -213,7 +213,7 @@ EXAMPLES
   opal postgres-instances:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId "fullaccess"
 ```
 
-_See code: [src/commands/postgres-instances/start.ts](https://github.com/cli/opal/blob/v2.0.5/src/commands/postgres-instances/start.ts)_
+_See code: [src/commands/postgres-instances/start.ts](https://github.com/cli/opal/blob/v2.0.9/src/commands/postgres-instances/start.ts)_
 
 ## `opal resources:get`
 
@@ -231,7 +231,7 @@ EXAMPLE
   opal resources:get --id 54052a3e-5375-4392-aeaf-0c6c44c131d4
 ```
 
-_See code: [src/commands/resources/get.ts](https://github.com/cli/opal/blob/v2.0.5/src/commands/resources/get.ts)_
+_See code: [src/commands/resources/get.ts](https://github.com/cli/opal/blob/v2.0.9/src/commands/resources/get.ts)_
 
 ## `opal set-url`
 
@@ -254,7 +254,7 @@ EXAMPLE
   $ opal set-host
 ```
 
-_See code: [src/commands/set-url.ts](https://github.com/cli/opal/blob/v2.0.5/src/commands/set-url.ts)_
+_See code: [src/commands/set-url.ts](https://github.com/cli/opal/blob/v2.0.9/src/commands/set-url.ts)_
 
 ## `opal ssh:copyFrom`
 
@@ -280,7 +280,7 @@ EXAMPLES
   opal ssh:copyFrom --src instance/dir --dest my/dir --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/ssh/copyFrom.ts](https://github.com/cli/opal/blob/v2.0.5/src/commands/ssh/copyFrom.ts)_
+_See code: [src/commands/ssh/copyFrom.ts](https://github.com/cli/opal/blob/v2.0.9/src/commands/ssh/copyFrom.ts)_
 
 ## `opal ssh:copyTo`
 
@@ -306,7 +306,7 @@ EXAMPLES
   opal ssh:copyTo --src my/dir --dest instance/dir --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/ssh/copyTo.ts](https://github.com/cli/opal/blob/v2.0.5/src/commands/ssh/copyTo.ts)_
+_See code: [src/commands/ssh/copyTo.ts](https://github.com/cli/opal/blob/v2.0.9/src/commands/ssh/copyTo.ts)_
 
 ## `opal ssh:start`
 
@@ -325,5 +325,5 @@ EXAMPLES
   opal ssh:start --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/ssh/start.ts](https://github.com/cli/opal/blob/v2.0.5/src/commands/ssh/start.ts)_
+_See code: [src/commands/ssh/start.ts](https://github.com/cli/opal/blob/v2.0.9/src/commands/ssh/start.ts)_
 <!-- commandsstop -->

package/lib/commands/iam-roles/start.js

@@ -75,11 +75,12 @@ class StartIAMRoleSession extends command_1.Command {
             resourceInfos.forEach(resourceInfo => {
                 resourceInfoByName[resourceInfo.name] = resourceInfo;
             });
+            inquirer.registerPrompt('autocomplete', require('inquirer-autocomplete-prompt'));
             const selectedIamRoleInfo = await inquirer.prompt([{
                     name: 'role',
                     message: 'Select an IAM role to assume',
-                    type: 'list',
-                    choices: resourceInfos,
+                    type: 'autocomplete',
+                    source: (answers, input) => cmd_1.filterChoices(input, resourceInfos),
                 }]);
             const selectedIamRole = resourceInfoByName[selectedIamRoleInfo.role];
             if (!selectedIamRole) {

package/lib/commands/kube-roles/start.js

@@ -5,6 +5,7 @@ const handler_1 = require("../../handler");
 const cmd_1 = require("../../lib/cmd");
 const apollo_1 = require("../../lib/apollo");
 const inquirer = require("inquirer");
+const types_1 = require("../../types");
 const aws_1 = require("../../lib/aws");
 const resources_1 = require("../../lib/resources");
 const StartKubeIAMRoleSessionDocument = `
@@ -39,6 +40,9 @@ query ListKubeIAMRoles {
       resources {
         name
         id
+        connection {
+          connectionType
+        }
       }
       cursor
     }
@@ -60,7 +64,7 @@ class StartKubeIAMRoleSession extends command_1.Command {
                 apollo_1.printRequestOutput(this, kubeIamRolesResp, error);
                 return;
             }
-            const resourceInfos = kubeIamRolesResp === null || kubeIamRolesResp === void 0 ? void 0 : kubeIamRolesResp.data.resources.resources.map((resource) => {
+            const resourceInfos = kubeIamRolesResp === null || kubeIamRolesResp === void 0 ? void 0 : kubeIamRolesResp.data.resources.resources.filter((resource) => { var _a; return ((_a = resource.connection) === null || _a === void 0 ? void 0 : _a.connectionType) === types_1.ConnectionType.Aws; }).map((resource) => {
                 return {
                     id: resource.id,
                     name: resource.name,
@@ -74,11 +78,12 @@ class StartKubeIAMRoleSession extends command_1.Command {
             resourceInfos.forEach(resourceInfo => {
                 resourceInfoByName[resourceInfo.name] = resourceInfo;
             });
+            inquirer.registerPrompt('autocomplete', require('inquirer-autocomplete-prompt'));
             const selectedKubeClusterInfo = await inquirer.prompt([{
                     name: 'role',
                     message: 'Select a Kubernetes cluster to connect to',
-                    type: 'list',
-                    choices: resourceInfos,
+                    type: 'autocomplete',
+                    source: (answers, input) => cmd_1.filterChoices(input, resourceInfos),
                 }]);
             const selectedKubeCluster = resourceInfoByName[selectedKubeClusterInfo.role];
             if (!selectedKubeCluster) {

package/lib/commands/postgres-instances/start.js

@@ -74,11 +74,12 @@ class StartPostgresInstanceSession extends command_1.Command {
             resourceInfos.forEach(resourceInfo => {
                 resourceInfoByName[resourceInfo.name] = resourceInfo;
             });
+            inquirer.registerPrompt('autocomplete', require('inquirer-autocomplete-prompt'));
             const selectedInstanceInfo = await inquirer.prompt([{
                     name: 'instance',
                     message: 'Select a Postgres RDS instance to login to',
-                    type: 'list',
-                    choices: resourceInfos,
+                    type: 'autocomplete',
+                    source: (answers, input) => cmd_1.filterChoices(input, resourceInfos),
                 }]);
             const selectedInstance = resourceInfoByName[selectedInstanceInfo.instance];
             if (!selectedInstance) {

package/lib/commands/resources/get.d.ts

@@ -1,5 +1,5 @@
 import { Command, flags } from '@oclif/command';
-export declare const GetResourceDocument = "\nquery GetResource($id: ResourceId!) {\n  resource(input: {id: $id}) {\n    __typename\n    ... on ResourceResult {\n      resource {\n        name\n        id\n        description\n        ownerTeam {\n          name\n          id\n        }\n        connection {\n          name\n          id\n        }\n        resourceUsers {\n          user {\n            email\n          }\n        }\n        access {\n          status\n          expiration\n        }\n      }\n    }\n    ... on ResourceNotFoundError {\n      message\n    }\n  }\n}";
+export declare const GetResourceDocument = "\nquery GetResource($id: ResourceId!) {\n  resource(input: {id: $id}) {\n    __typename\n    ... on ResourceResult {\n      resource {\n        name\n        id\n        description\n        ownerTeam {\n          name\n          id\n        }\n        connection {\n          name\n          id\n        }\n        resourceUsers {\n          user {\n            email\n          }\n        }\n      }\n    }\n    ... on ResourceNotFoundError {\n      message\n    }\n  }\n}";
 export default class GetResource extends Command {
     static description: string;
     static examples: string[];

package/lib/commands/resources/get.js

@@ -26,10 +26,6 @@ query GetResource($id: ResourceId!) {
             email
           }
         }
-        access {
-          status
-          expiration
-        }
       }
     }
     ... on ResourceNotFoundError {

package/lib/lib/apollo.js

@@ -44,15 +44,15 @@ exports.initClient = async (command) => {
         const headers = (_a = operation.getContext().response) === null || _a === void 0 ? void 0 : _a.headers;
         if (headers) {
             const expectedCLIMajorVersion = headers.get('Opal-CLI-Expected-Major-Version');
-            // defaults to version 1 since old Opal version won't have an advertised expected client version
-            const semvarExpectedMinCLIVersion = `${expectedCLIMajorVersion || '1'}.0.0`;
-            if (semver_1.major(currentCLIVersion) < semver_1.major(semvarExpectedMinCLIVersion)) {
-                command.warn(chalk_1.default.yellow(`❗️ Update your CLI to match the compatible version. Expected major version ${chalk_1.default.blueBright(semvarExpectedMinCLIVersion)}, but version ${chalk_1.default.blueBright(currentCLIVersion)} is installed.
-
-       Upgrade using the following command: ${chalk_1.default.blueBright('brew upgrade opalsecurity/brew/opal-security')}`));
-            }
-            else if (semver_1.major(currentCLIVersion) > semver_1.major(semvarExpectedMinCLIVersion)) {
-                command.warn(chalk_1.default.yellow('❗️ Uh oh! The currently installed Opal server is outdated. Please contact your Opal admins to let them know they need to upgrade their deployment.'));
+            if (expectedCLIMajorVersion) {
+                const semvarExpectedMinCLIVersion = `${expectedCLIMajorVersion}.0.0`;
+                if (semver_1.major(currentCLIVersion) < semver_1.major(semvarExpectedMinCLIVersion)) {
+                    command.warn(chalk_1.default.yellow(`❗️ Update your CLI to match the compatible version. Expected major version ${chalk_1.default.blueBright(semvarExpectedMinCLIVersion)}, but version ${chalk_1.default.blueBright(currentCLIVersion)} is installed.
+          Upgrade using the following command: ${chalk_1.default.blueBright('brew upgrade opalsecurity/brew/opal-security')}`));
+                }
+                else if (semver_1.major(currentCLIVersion) > semver_1.major(semvarExpectedMinCLIVersion)) {
+                    command.warn(chalk_1.default.yellow('❗️ Uh oh! The currently installed Opal server is outdated. Please contact your Opal admins to let them know they need to upgrade their deployment.'));
+                }
             }
         }
     };
@@ -63,8 +63,16 @@ exports.initClient = async (command) => {
         });
     });
     const errorLink = error_1.onError(({ networkError, operation }) => {
+        var _a, _b;
         checkCLIVersion(operation);
         if (networkError && 'statusCode' in networkError) {
+            let errorMessage = null;
+            if ('result' in networkError) {
+                const errors = (_a = networkError === null || networkError === void 0 ? void 0 : networkError.result) === null || _a === void 0 ? void 0 : _a.errors;
+                if (errors && errors.length > 0) {
+                    errorMessage = (_b = errors[0]) === null || _b === void 0 ? void 0 : _b.message;
+                }
+            }
             switch (networkError.statusCode) {
                 case 401: {
                     command.log('Your session is invalid or expired. Authenticating now...\n');
@@ -80,7 +88,7 @@ exports.initClient = async (command) => {
                     break;
                 }
                 default:
-                    command.log(`❗ Error: received status code ${networkError.statusCode} from server`);
+                    command.log(`❗ Error: received status code ${networkError.statusCode} from server${errorMessage ? ` with message "${errorMessage}"` : ''}`);
             }
         }
     });

package/lib/lib/cmd.d.ts

@@ -19,3 +19,4 @@ export declare const startInteractiveShell: (runCmd: string, shellName?: string
 export declare const runCommandExec: (runCmd: string, successMessage: string, errorMessage: string, envVars?: Record<string, any> | undefined) => void;
 export declare const runCommandExecWithCallback: (cmd: string, callback?: ((error: ExecException | null, stdout: Buffer, stderr: Buffer) => void) | undefined) => Promise<unknown>;
 export declare const runCommandSpawn: (runCmd: string, successMessage: string, errorMessage: string, envVars?: Record<string, any> | undefined) => void;
+export declare const filterChoices: (input: string, choices: ResourceInfo[] | AccessLevelInfo[]) => ResourceInfo[];

package/lib/lib/cmd.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runCommandSpawn = exports.runCommandExecWithCallback = exports.runCommandExec = exports.startInteractiveShell = exports.setMostRecentCommand = exports.mostRecentCommandTime = exports.mostRecentCommand = exports.DEFAULT_ACCESS_LEVEL = void 0;
+exports.filterChoices = exports.runCommandSpawn = exports.runCommandExecWithCallback = exports.runCommandExec = exports.startInteractiveShell = exports.setMostRecentCommand = exports.mostRecentCommandTime = exports.mostRecentCommand = exports.DEFAULT_ACCESS_LEVEL = void 0;
 const _ = require("lodash");
 const moment = require("moment");
 const { exec, spawn } = require('child_process');
@@ -83,3 +83,11 @@ exports.runCommandSpawn = (runCmd, successMessage, errorMessage, envVars) => {
         }
     });
 };
+// Returns a filtered array of items that match the input
+exports.filterChoices = (input, choices) => {
+    input = input || '';
+    if (input === '') {
+        return choices;
+    }
+    return choices.filter(choice => choice.name.toLowerCase().includes(input.toLowerCase()));
+};

package/lib/lib/resources.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.promptUserForAccessLevels = exports.unexpectedAmountOfAccessLevelsFound = exports.resourcesAreEmpty = void 0;
+const cmd_1 = require("./cmd");
 const handler_1 = require("../handler");
 const apollo_1 = require("./apollo");
 const inquirer = require("inquirer");
@@ -54,11 +55,12 @@ exports.promptUserForAccessLevels = async (context, resourceId, instanceType, ac
         selectedAccessLevel = accessLevelInfoByRemoteId[accessLevelRemoteId];
     }
     if (!selectedAccessLevel) {
+        inquirer.registerPrompt('autocomplete', require('inquirer-autocomplete-prompt'));
         const selectedAccessLevelInfo = await inquirer.prompt([{
                 name: 'accessLevel',
                 message: `Select an access level to the ${instanceType}`,
-                type: 'list',
-                choices: accessLevelInfos,
+                type: 'autocomplete',
+                source: (answers, input) => cmd_1.filterChoices(input, accessLevelInfos),
             }]);
         selectedAccessLevel = accessLevelInfoByName[selectedAccessLevelInfo.accessLevel];
     }

package/lib/lib/ssh.js

@@ -43,11 +43,12 @@ exports.selectComputeInstance = async (command, description) => {
     resourceInfos.forEach(resourceInfo => {
         resourceInfoByName[resourceInfo.name] = resourceInfo;
     });
+    inquirer.registerPrompt('autocomplete', require('inquirer-autocomplete-prompt'));
     const selectedInstanceInfo = await inquirer.prompt([{
             name: 'instance',
             message: `Select a compute instance to ${description}`,
-            type: 'list',
-            choices: resourceInfos,
+            type: 'autocomplete',
+            source: (answers, input) => cmd_1.filterChoices(input, resourceInfos),
         }]);
     return resourceInfoByName[selectedInstanceInfo.instance];
 };

package/oclif.manifest.json

@@ -1 +1 @@
-{"version":"2.0.5","commands":{"curl-example":{"id":"curl-example","description":"Prints out an example cURL command containing the parameters the CLI uses to query the Opal server.","pluginName":"opal-security","pluginType":"core","aliases":[],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false}},"args":[]},"login":{"id":"login","description":"Authenticates you with the Opal server.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["$ opal login"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false}},"args":[]},"logout":{"id":"logout","description":"Clears locally stored Opal server authentication credentials.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["$ opal logout"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false}},"args":[]},"set-url":{"id":"set-url","description":"Sets the url of the Opal server. Defaults to https://app.opal.dev.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["$ opal set-host"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"custom":{"name":"custom","type":"option"},"allowSelfSignedCerts":{"name":"allowSelfSignedCerts","type":"boolean","allowNo":false},"prod":{"name":"prod","type":"boolean","allowNo":false},"demo":{"name":"demo","type":"boolean","allowNo":false},"dev":{"name":"dev","type":"boolean","allowNo":false},"devLocal":{"name":"devLocal","type":"boolean","allowNo":false}},"args":[]},"aws:identity":{"id":"aws:identity","description":"Gets the current caller identity for the \"opal\" AWS profile.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal aws:identity"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false}},"args":[]},"iam-roles:start":{"id":"iam-roles:start","description":"Starts a session to assume an IAM role.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal iam-roles:start","opal iam-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"id":{"name":"id","type":"option","description":"The ID of the Opal role resource."}},"args":[]},"kube-roles:start":{"id":"kube-roles:start","description":"Starts a session to assume a Kubernetes cluster IAM role.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal kube-roles:start","opal kube-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398","opal kube-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId \"arn:aws:iam::712234975475:role/acme-eks-cluster-admin-role\""],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"id":{"name":"id","type":"option","description":"The ID of the Opal role resource."},"accessLevelRemoteId":{"name":"accessLevelRemoteId","type":"option","description":"The remote ID of the access level with which to access the cluster."}},"args":[]},"postgres-instances:start":{"id":"postgres-instances:start","description":"Starts a session to query a Postgres database.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal postgres-instances:start","opal postgres-instances:start --id 51f7176b-0464-4a6f-8369-e951e187b398","opal postgres-instances:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId \"fullaccess\""],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"id":{"name":"id","type":"option","description":"The ID of the Opal instance resource."},"accessLevelRemoteId":{"name":"accessLevelRemoteId","type":"option","description":"The remote ID of the access level with which to access the database."}},"args":[]},"resources:get":{"id":"resources:get","description":"Get resource info for a particular resource.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal resources:get --id 54052a3e-5375-4392-aeaf-0c6c44c131d4"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"id":{"name":"id","type":"option","required":true}},"args":[]},"ssh:copyFrom":{"id":"ssh:copyFrom","description":"Use SCP to copy files from a compute instance.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal ssh:copyFrom --src instance/dir --dest my/dir","opal ssh:copyFrom --src instance/dir --dest my/dir --id 51f7176b-0464-4a6f-8369-e951e187b398"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"src":{"name":"src","type":"option","description":"The path of the directory or file you would like to copy over SCP. Note we only support one file or directory at a time.","required":true},"dest":{"name":"dest","type":"option","description":"Pick which directory you want your files to be copied to.","required":false,"default":"."},"user":{"name":"user","type":"option","description":"Pick which user you want to run SCP over. Keep in mind not all users will have access to each other's home directory.","required":false,"default":"ssm-user"},"id":{"name":"id","type":"option","description":"The ID of the Opal instance resource."}},"args":[]},"ssh:copyTo":{"id":"ssh:copyTo","description":"Use SCP to copy files to a compute instance.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal ssh:copyTo --src my/dir --dest instance/dir","opal ssh:copyTo --src my/dir --dest instance/dir --id 51f7176b-0464-4a6f-8369-e951e187b398"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"src":{"name":"src","type":"option","description":"The path of the directory or file you would like to copy over SCP. Note we only support one file or directory at a time.","required":true},"dest":{"name":"dest","type":"option","description":"Pick which directory you want your files to be copied to.","required":false,"default":"."},"user":{"name":"user","type":"option","description":"Pick which user you want to run SCP over. Keep in mind not all users will have access to each other's home directory.","required":false,"default":"ssm-user"},"id":{"name":"id","type":"option","description":"The ID of the Opal instance resource."}},"args":[]},"ssh:start":{"id":"ssh:start","description":"Start an SSH session to access a particular compute instance.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal ssh:start","opal ssh:start --id 51f7176b-0464-4a6f-8369-e951e187b398"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"id":{"name":"id","type":"option","description":"The ID of the Opal instance resource."}},"args":[]}}}
+{"version":"2.0.9","commands":{"curl-example":{"id":"curl-example","description":"Prints out an example cURL command containing the parameters the CLI uses to query the Opal server.","pluginName":"opal-security","pluginType":"core","aliases":[],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false}},"args":[]},"login":{"id":"login","description":"Authenticates you with the Opal server.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["$ opal login"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false}},"args":[]},"logout":{"id":"logout","description":"Clears locally stored Opal server authentication credentials.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["$ opal logout"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false}},"args":[]},"set-url":{"id":"set-url","description":"Sets the url of the Opal server. Defaults to https://app.opal.dev.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["$ opal set-host"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"custom":{"name":"custom","type":"option"},"allowSelfSignedCerts":{"name":"allowSelfSignedCerts","type":"boolean","allowNo":false},"prod":{"name":"prod","type":"boolean","allowNo":false},"demo":{"name":"demo","type":"boolean","allowNo":false},"dev":{"name":"dev","type":"boolean","allowNo":false},"devLocal":{"name":"devLocal","type":"boolean","allowNo":false}},"args":[]},"aws:identity":{"id":"aws:identity","description":"Gets the current caller identity for the \"opal\" AWS profile.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal aws:identity"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false}},"args":[]},"iam-roles:start":{"id":"iam-roles:start","description":"Starts a session to assume an IAM role.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal iam-roles:start","opal iam-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"id":{"name":"id","type":"option","description":"The ID of the Opal role resource."}},"args":[]},"kube-roles:start":{"id":"kube-roles:start","description":"Starts a session to assume a Kubernetes cluster IAM role.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal kube-roles:start","opal kube-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398","opal kube-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId \"arn:aws:iam::712234975475:role/acme-eks-cluster-admin-role\""],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"id":{"name":"id","type":"option","description":"The ID of the Opal role resource."},"accessLevelRemoteId":{"name":"accessLevelRemoteId","type":"option","description":"The remote ID of the access level with which to access the cluster."}},"args":[]},"postgres-instances:start":{"id":"postgres-instances:start","description":"Starts a session to query a Postgres database.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal postgres-instances:start","opal postgres-instances:start --id 51f7176b-0464-4a6f-8369-e951e187b398","opal postgres-instances:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId \"fullaccess\""],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"id":{"name":"id","type":"option","description":"The ID of the Opal instance resource."},"accessLevelRemoteId":{"name":"accessLevelRemoteId","type":"option","description":"The remote ID of the access level with which to access the database."}},"args":[]},"resources:get":{"id":"resources:get","description":"Get resource info for a particular resource.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal resources:get --id 54052a3e-5375-4392-aeaf-0c6c44c131d4"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"id":{"name":"id","type":"option","required":true}},"args":[]},"ssh:copyFrom":{"id":"ssh:copyFrom","description":"Use SCP to copy files from a compute instance.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal ssh:copyFrom --src instance/dir --dest my/dir","opal ssh:copyFrom --src instance/dir --dest my/dir --id 51f7176b-0464-4a6f-8369-e951e187b398"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"src":{"name":"src","type":"option","description":"The path of the directory or file you would like to copy over SCP. Note we only support one file or directory at a time.","required":true},"dest":{"name":"dest","type":"option","description":"Pick which directory you want your files to be copied to.","required":false,"default":"."},"user":{"name":"user","type":"option","description":"Pick which user you want to run SCP over. Keep in mind not all users will have access to each other's home directory.","required":false,"default":"ssm-user"},"id":{"name":"id","type":"option","description":"The ID of the Opal instance resource."}},"args":[]},"ssh:copyTo":{"id":"ssh:copyTo","description":"Use SCP to copy files to a compute instance.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal ssh:copyTo --src my/dir --dest instance/dir","opal ssh:copyTo --src my/dir --dest instance/dir --id 51f7176b-0464-4a6f-8369-e951e187b398"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"src":{"name":"src","type":"option","description":"The path of the directory or file you would like to copy over SCP. Note we only support one file or directory at a time.","required":true},"dest":{"name":"dest","type":"option","description":"Pick which directory you want your files to be copied to.","required":false,"default":"."},"user":{"name":"user","type":"option","description":"Pick which user you want to run SCP over. Keep in mind not all users will have access to each other's home directory.","required":false,"default":"ssm-user"},"id":{"name":"id","type":"option","description":"The ID of the Opal instance resource."}},"args":[]},"ssh:start":{"id":"ssh:start","description":"Start an SSH session to access a particular compute instance.","pluginName":"opal-security","pluginType":"core","aliases":[],"examples":["opal ssh:start","opal ssh:start --id 51f7176b-0464-4a6f-8369-e951e187b398"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"id":{"name":"id","type":"option","description":"The ID of the Opal instance resource."}},"args":[]}}}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "opal-security",
   "description": "Opal allows you to centrally manage access to all of your sensitive systems.",
-  "version": "2.0.5",
+  "version": "2.0.9",
   "author": "Stephen Cobbe",
   "bin": {
     "opal": "./bin/run"
@@ -21,6 +21,7 @@
     "@types/prettyjson": "0.0.29",
     "chalk": "^2.4.2",
     "graphql": "^15.5.0",
+    "inquirer-autocomplete-prompt": "^1.4.0",
     "keytar": "^7.7.0",
     "lodash": "^4.17.21",
     "node-fetch": "^2.6.1",