opal-security 2.1.0 → 2.1.1

package/README.md

@@ -22,7 +22,7 @@ $ npm install -g opal-security
 $ opal COMMAND
 running command...
 $ opal (-v|--version|version)
-opal-security/2.1.0 darwin-x64 node-v14.16.1
+opal-security/2.1.1 darwin-x64 node-v14.16.1
 $ opal --help [COMMAND]
 USAGE
   $ opal COMMAND
@@ -88,7 +88,7 @@ EXAMPLE
   opal aws:identity
 ```
 
-_See code: [src/commands/aws/identity.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/aws/identity.ts)_
+_See code: [src/commands/aws/identity.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/aws/identity.ts)_
 
 ## `opal curl-example`
 
@@ -102,7 +102,7 @@ OPTIONS
   -h, --help  show CLI help
 ```
 
-_See code: [src/commands/curl-example.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/curl-example.ts)_
+_See code: [src/commands/curl-example.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/curl-example.ts)_
 
 ## `opal help [COMMAND]`
 
@@ -131,9 +131,16 @@ USAGE
 
 OPTIONS
   -h, --help                 show CLI help
-  --id=id                    The ID of the Opal role resource.
+
+  -i, --id=id                The Opal ID of the resource. You can find this from the URL, e.g.
+                             https://opal.dev/resources/[ID]
+
+  -r, --refresh              Starts a new session even if one already exists. Useful if a session is about to expire.
+
+  -s, --sessionId=sessionId  The Opal ID of the session to connect to. Uses an existing session that was created via the
+                             web flow.
+
   --profileName=profileName  Uses a custom AWS profile name for the IAM role. Default value is the role's name.
-  --sessionId=sessionId      SessionId of a session that has already been created via the web flow.
 
 EXAMPLES
   opal iam-roles:start
@@ -141,7 +148,7 @@ EXAMPLES
   opal iam-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --profileName "custom-profile"
 ```
 
-_See code: [src/commands/iam-roles/start.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/iam-roles/start.ts)_
+_See code: [src/commands/iam-roles/start.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/iam-roles/start.ts)_
 
 ## `opal kube-roles:start`
 
@@ -152,10 +159,17 @@ USAGE
   $ opal kube-roles:start
 
 OPTIONS
-  -h, --help                                 show CLI help
-  --accessLevelRemoteId=accessLevelRemoteId  The remote ID of the access level with which to access the cluster.
-  --id=id                                    The ID of the Opal role resource.
-  --sessionId=sessionId                      SessionId of a session that has already been created via the web flow.
+  -a, --accessLevelRemoteId=accessLevelRemoteId  The remote ID of the access level with which to access the resource.
+  -h, --help                                     show CLI help
+
+  -i, --id=id                                    The Opal ID of the resource. You can find this from the URL, e.g.
+                                                 https://opal.dev/resources/[ID]
+
+  -r, --refresh                                  Starts a new session even if one already exists. Useful if a session is
+                                                 about to expire.
+
+  -s, --sessionId=sessionId                      The Opal ID of the session to connect to. Uses an existing session that
+                                                 was created via the web flow.
 
 EXAMPLES
   opal kube-roles:start
@@ -164,7 +178,7 @@ EXAMPLES
   "arn:aws:iam::712234975475:role/acme-eks-cluster-admin-role"
 ```
 
-_See code: [src/commands/kube-roles/start.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/kube-roles/start.ts)_
+_See code: [src/commands/kube-roles/start.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/kube-roles/start.ts)_
 
 ## `opal login`
 
@@ -182,7 +196,7 @@ EXAMPLE
   $ opal login
 ```
 
-_See code: [src/commands/login.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/login.ts)_
 
 ## `opal logout`
 
@@ -199,29 +213,42 @@ EXAMPLE
   $ opal logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/logout.ts)_
 
 ## `opal postgres-instances:start`
 
-Starts a session to query a Postgres database.
+Starts a session to connect to a Postgres database.
 
 ```
 USAGE
   $ opal postgres-instances:start
 
 OPTIONS
-  -h, --help                                 show CLI help
-  --accessLevelRemoteId=accessLevelRemoteId  The remote ID of the access level with which to access the database.
-  --id=id                                    The ID of the Opal instance resource.
-  --sessionId=sessionId                      SessionId of a session that has already been created via the web flow.
+  -a, --accessLevelRemoteId=accessLevelRemoteId  The remote ID of the access level with which to access the resource.
+  -h, --help                                     show CLI help
+
+  -i, --id=id                                    The Opal ID of the resource. You can find this from the URL, e.g.
+                                                 https://opal.dev/resources/[ID]
+
+  -r, --refresh                                  Starts a new session even if one already exists. Useful if a session is
+                                                 about to expire.
+
+  -s, --sessionId=sessionId                      The Opal ID of the session to connect to. Uses an existing session that
+                                                 was created via the web flow.
+
+  --action=open|psql|view                        Method of connecting to the database.
+                                                 - open: Open external database app
+                                                 - psql: Start psql session in shell
+                                                 - view: View connection configuration details
 
 EXAMPLES
   opal postgres-instances:start
   opal postgres-instances:start --id 51f7176b-0464-4a6f-8369-e951e187b398
-  opal postgres-instances:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId "fullaccess"
+  opal postgres-instances:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId fullaccess
+  opal postgres-instances:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId fullaccess --action view
 ```
 
-_See code: [src/commands/postgres-instances/start.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/postgres-instances/start.ts)_
+_See code: [src/commands/postgres-instances/start.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/postgres-instances/start.ts)_
 
 ## `opal resources:get`
 
@@ -232,14 +259,14 @@ USAGE
   $ opal resources:get
 
 OPTIONS
-  -h, --help  show CLI help
-  --id=id     (required)
+  -h, --help   show CLI help
+  -i, --id=id  The Opal ID of the resource. You can find this from the URL, e.g. https://opal.dev/resources/[ID]
 
 EXAMPLE
   opal resources:get --id 54052a3e-5375-4392-aeaf-0c6c44c131d4
 ```
 
-_See code: [src/commands/resources/get.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/resources/get.ts)_
+_See code: [src/commands/resources/get.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/resources/get.ts)_
 
 ## `opal set-custom-header`
 
@@ -257,7 +284,7 @@ EXAMPLE
   $ opal set-custom-header --header 'cf-access-token: $TOKEN'
 ```
 
-_See code: [src/commands/set-custom-header.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/set-custom-header.ts)_
+_See code: [src/commands/set-custom-header.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/set-custom-header.ts)_
 
 ## `opal set-token`
 
@@ -274,7 +301,7 @@ EXAMPLE
   $ opal set-token
 ```
 
-_See code: [src/commands/set-token.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/set-token.ts)_
+_See code: [src/commands/set-token.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/set-token.ts)_
 
 ## `opal set-url [URL]`
 
@@ -295,7 +322,7 @@ EXAMPLE
   $ opal set-url
 ```
 
-_See code: [src/commands/set-url.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/set-url.ts)_
+_See code: [src/commands/set-url.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/set-url.ts)_
 
 ## `opal ssh:copyFrom`
 
@@ -306,23 +333,28 @@ USAGE
   $ opal ssh:copyFrom
 
 OPTIONS
-  -h, --help             show CLI help
-  --dest=dest            [default: .] Pick which directory you want your files to be copied to.
-  --id=id                The ID of the Opal instance resource.
-  --sessionId=sessionId  SessionId of a session that has already been created via the web flow.
+  -h, --help                 show CLI help
+
+  -i, --id=id                The Opal ID of the resource. You can find this from the URL, e.g.
+                             https://opal.dev/resources/[ID]
+
+  -s, --sessionId=sessionId  The Opal ID of the session to connect to. Uses an existing session that was created via the
+                             web flow.
 
-  --src=src              (required) The path of the directory or file you would like to copy over SCP. Note we only
-                         support one file or directory at a time.
+  --dest=dest                [default: .] The directory you want your files to be copied to.
 
-  --user=user            [default: ssm-user] Pick which user you want to run SCP over. Keep in mind not all users will
-                         have access to each other's home directory.
+  --src=src                  (required) The directory or file you would like to copy over SCP. Note we only support one
+                             file or directory at a time.
+
+  --user=user                [default: ssm-user] The user you want to run SCP over. Keep in mind not all users will have
+                             access to each other's home directory.
 
 EXAMPLES
   opal ssh:copyFrom --src instance/dir --dest my/dir
   opal ssh:copyFrom --src instance/dir --dest my/dir --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/ssh/copyFrom.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/ssh/copyFrom.ts)_
+_See code: [src/commands/ssh/copyFrom.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/ssh/copyFrom.ts)_
 
 ## `opal ssh:copyTo`
 
@@ -333,23 +365,28 @@ USAGE
   $ opal ssh:copyTo
 
 OPTIONS
-  -h, --help             show CLI help
-  --dest=dest            [default: .] Pick which directory you want your files to be copied to.
-  --id=id                The ID of the Opal instance resource.
-  --sessionId=sessionId  SessionId of a session that has already been created via the web flow.
+  -h, --help                 show CLI help
+
+  -i, --id=id                The Opal ID of the resource. You can find this from the URL, e.g.
+                             https://opal.dev/resources/[ID]
 
-  --src=src              (required) The path of the directory or file you would like to copy over SCP. Note we only
-                         support one file or directory at a time.
+  -s, --sessionId=sessionId  The Opal ID of the session to connect to. Uses an existing session that was created via the
+                             web flow.
 
-  --user=user            [default: ssm-user] Pick which user you want to run SCP over. Keep in mind not all users will
-                         have access to each other's home directory.
+  --dest=dest                [default: .] The directory you want your files to be copied to.
+
+  --src=src                  (required) The directory or file you would like to copy over SCP. Note we only support one
+                             file or directory at a time.
+
+  --user=user                [default: ssm-user] The user you want to run SCP over. Keep in mind not all users will have
+                             access to each other's home directory.
 
 EXAMPLES
   opal ssh:copyTo --src my/dir --dest instance/dir
   opal ssh:copyTo --src my/dir --dest instance/dir --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/ssh/copyTo.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/ssh/copyTo.ts)_
+_See code: [src/commands/ssh/copyTo.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/ssh/copyTo.ts)_
 
 ## `opal ssh:start`
 
@@ -360,14 +397,20 @@ USAGE
   $ opal ssh:start
 
 OPTIONS
-  -h, --help             show CLI help
-  --id=id                The ID of the Opal instance resource.
-  --sessionId=sessionId  SessionId of a session that has already been created via the web flow.
+  -h, --help                 show CLI help
+
+  -i, --id=id                The Opal ID of the resource. You can find this from the URL, e.g.
+                             https://opal.dev/resources/[ID]
+
+  -r, --refresh              Starts a new session even if one already exists. Useful if a session is about to expire.
+
+  -s, --sessionId=sessionId  The Opal ID of the session to connect to. Uses an existing session that was created via the
+                             web flow.
 
 EXAMPLES
   opal ssh:start
   opal ssh:start --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/ssh/start.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.0/src/commands/ssh/start.ts)_
+_See code: [src/commands/ssh/start.ts](https://github.com/opalsecurity/opal-cli/blob/v2.1.1/src/commands/ssh/start.ts)_
 <!-- commandsstop -->

package/lib/commands/aws/identity.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const command_1 = require("@oclif/command");
 const cmd_1 = require("../../lib/cmd");
+const flags_1 = require("../../lib/flags");
 class Identity extends command_1.Command {
     async run() {
         cmd_1.setMostRecentCommand(this);
@@ -13,5 +14,5 @@ exports.default = Identity;
 Identity.description = 'Gets the current caller identity for the "opal" AWS profile.';
 Identity.examples = ['opal aws:identity'];
 Identity.flags = {
-    help: command_1.flags.help({ char: 'h' }),
+    help: flags_1.SHARED_FLAGS.help,
 };

package/lib/commands/curl-example.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const command_1 = require("@oclif/command");
 const config_1 = require("../lib/config");
 const credentials_1 = require("../lib/credentials");
+const flags_1 = require("../lib/flags");
 class CurlExample extends command_1.Command {
     async run() {
         const accessToken = await credentials_1.cred.accessToken;
@@ -21,5 +22,5 @@ curl -v ${url}/query \\
 exports.default = CurlExample;
 CurlExample.description = 'Prints out an example cURL command containing the parameters the CLI uses to query the Opal server.';
 CurlExample.flags = {
-    help: command_1.flags.help({ char: 'h' }),
+    help: flags_1.SHARED_FLAGS.help,
 };

package/lib/commands/iam-roles/start.d.ts

@@ -6,6 +6,7 @@ export default class StartIAMRoleSession extends Command {
         help: import("@oclif/parser/lib/flags").IBooleanFlag<void>;
         id: flags.IOptionFlag<string | undefined>;
         sessionId: flags.IOptionFlag<string | undefined>;
+        refresh: import("@oclif/parser/lib/flags").IBooleanFlag<boolean>;
         profileName: flags.IOptionFlag<string | undefined>;
     };
     run(): Promise<void>;

package/lib/commands/iam-roles/start.js

@@ -8,6 +8,7 @@ const aws_1 = require("../../lib/aws");
 const resources_1 = require("../../lib/resources");
 const get_1 = require("../../commands/resources/get");
 const sessions_1 = require("../../lib/sessions");
+const flags_1 = require("../../lib/flags");
 const IamSessionMetadataFragment = `
 ... on AwsIamFederatedRoleSession {
   awsAccessKeyId
@@ -20,6 +21,9 @@ class StartIAMRoleSession extends command_1.Command {
     async run() {
         cmd_1.setMostRecentCommand(this);
         const { flags } = this.parse(StartIAMRoleSession);
+        if (flags.sessionId && flags.refresh) {
+            return apollo_1.handleError(this, 'Cannot use both --sessionId and --refresh');
+        }
         let roleId = flags.id;
         let roleName = null;
         const sessionId = flags.sessionId;
@@ -50,7 +54,7 @@ class StartIAMRoleSession extends command_1.Command {
         if (flags.profileName && flags.profileName !== '') {
             roleName = flags.profileName;
         }
-        const session = await sessions_1.getOrCreateSession(this, roleId, resources_1.DEFAULT_ACCESS_LEVEL, sessionId, IamSessionMetadataFragment);
+        const session = await sessions_1.getOrCreateSession(this, roleId, resources_1.DEFAULT_ACCESS_LEVEL, sessionId, IamSessionMetadataFragment, flags.refresh);
         const metadata = session.metadata;
         switch (metadata === null || metadata === void 0 ? void 0 : metadata.__typename) {
             case 'AwsIamFederatedRoleSession': {
@@ -74,15 +78,10 @@ StartIAMRoleSession.examples = [
     'opal iam-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --profileName "custom-profile"',
 ];
 StartIAMRoleSession.flags = {
-    help: command_1.flags.help({ char: 'h' }),
-    id: command_1.flags.string({
-        multiple: false,
-        description: 'The ID of the Opal role resource.',
-    }),
-    sessionId: command_1.flags.string({
-        multiple: false,
-        description: 'SessionId of a session that has already been created via the web flow.',
-    }),
+    help: flags_1.SHARED_FLAGS.help,
+    id: flags_1.SHARED_FLAGS.id,
+    sessionId: flags_1.SHARED_FLAGS.sessionId,
+    refresh: flags_1.SHARED_FLAGS.refresh,
     profileName: command_1.flags.string({
         multiple: false,
         description: 'Uses a custom AWS profile name for the IAM role. Default value is the role\'s name.',

package/lib/commands/kube-roles/start.d.ts

@@ -1,12 +1,13 @@
-import { Command, flags } from '@oclif/command';
+import { Command } from '@oclif/command';
 export default class StartKubeIAMRoleSession extends Command {
     static description: string;
     static examples: string[];
     static flags: {
         help: import("@oclif/parser/lib/flags").IBooleanFlag<void>;
-        id: flags.IOptionFlag<string | undefined>;
-        accessLevelRemoteId: flags.IOptionFlag<string | undefined>;
-        sessionId: flags.IOptionFlag<string | undefined>;
+        id: import("@oclif/command/lib/flags").IOptionFlag<string | undefined>;
+        accessLevelRemoteId: import("@oclif/command/lib/flags").IOptionFlag<string | undefined>;
+        sessionId: import("@oclif/command/lib/flags").IOptionFlag<string | undefined>;
+        refresh: import("@oclif/parser/lib/flags").IBooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/lib/commands/kube-roles/start.js

@@ -6,6 +6,7 @@ const apollo_1 = require("../../lib/apollo");
 const aws_1 = require("../../lib/aws");
 const resources_1 = require("../../lib/resources");
 const sessions_1 = require("../../lib/sessions");
+const flags_1 = require("../../lib/flags");
 const EksSessionMetadataFragment = `
 ... on AwsIamFederatedEksSession {
   awsAccessKeyId
@@ -18,6 +19,9 @@ class StartKubeIAMRoleSession extends command_1.Command {
     async run() {
         cmd_1.setMostRecentCommand(this);
         const { flags } = this.parse(StartKubeIAMRoleSession);
+        if (flags.sessionId && flags.refresh) {
+            return apollo_1.handleError(this, 'Cannot use both --sessionId and --refresh');
+        }
         let clusterId = flags.id;
         const sessionId = flags.sessionId;
         if (!clusterId) {
@@ -32,7 +36,7 @@ class StartKubeIAMRoleSession extends command_1.Command {
         if (!accessLevel) {
             return;
         }
-        const session = await sessions_1.getOrCreateSession(this, clusterId, accessLevel, sessionId, EksSessionMetadataFragment);
+        const session = await sessions_1.getOrCreateSession(this, clusterId, accessLevel, sessionId, EksSessionMetadataFragment, flags.refresh);
         const metadata = session.metadata;
         switch (metadata === null || metadata === void 0 ? void 0 : metadata.__typename) {
             case 'AwsIamFederatedEksSession': {
@@ -58,17 +62,9 @@ StartKubeIAMRoleSession.examples = [
     'opal kube-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId "arn:aws:iam::712234975475:role/acme-eks-cluster-admin-role"',
 ];
 StartKubeIAMRoleSession.flags = {
-    help: command_1.flags.help({ char: 'h' }),
-    id: command_1.flags.string({
-        multiple: false,
-        description: 'The ID of the Opal role resource.',
-    }),
-    accessLevelRemoteId: command_1.flags.string({
-        multiple: false,
-        description: 'The remote ID of the access level with which to access the cluster.',
-    }),
-    sessionId: command_1.flags.string({
-        multiple: false,
-        description: 'SessionId of a session that has already been created via the web flow.',
-    }),
+    help: flags_1.SHARED_FLAGS.help,
+    id: flags_1.SHARED_FLAGS.id,
+    accessLevelRemoteId: flags_1.SHARED_FLAGS.accessLevelRemoteId,
+    sessionId: flags_1.SHARED_FLAGS.sessionId,
+    refresh: flags_1.SHARED_FLAGS.refresh,
 };

package/lib/commands/login.js

@@ -10,7 +10,8 @@ const credentials_1 = require("../lib/credentials");
 const inquirer = require("inquirer");
 const handler_1 = require("../handler");
 const config_1 = require("../lib/config");
-const common_1 = require("../lib/common");
+const util_1 = require("../lib/util");
+const flags_1 = require("../lib/flags");
 const ISSUER_PROD = 'https://auth.opal.dev';
 const ISSUER_DEV = 'https://authdev.opal.dev';
 const GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:device_code';
@@ -59,8 +60,8 @@ class Login extends command_1.Command {
                 await credentials_1.cred.removeCredentials(-1);
             }
             this.log('Welcome to Opal! ⚡️\n');
-            this.log('Please confirm your Opal instance URL:', configData[config_1.urlKey]);
-            this.log('If this is not correct, please first use `opal set-url --help`\n');
+            this.log('Connecting to Opal server URL:', configData[config_1.urlKey]);
+            this.log('If this is incorrect, please run `opal set-url --help`\n');
             if (email) {
                 this.log('Signing in as: ' + email + ' - to use a different account, run `opal login --email [EMAIL]`');
             }
@@ -80,7 +81,8 @@ class Login extends command_1.Command {
                     variables: { input: { email } },
                 });
                 if (error) {
-                    this.log('Could not connect to Opal. Did you set the right URL? (`opal set-url --help`)');
+                    this.log(''); // Intentional newline
+                    return apollo_1.handleError(this, 'Could not connect to Opal. Did you set the right URL? (`opal set-url --help`)');
                 }
                 const signInOrganizations = (_b = (_a = signInOrganizationsResponse === null || signInOrganizationsResponse === void 0 ? void 0 : signInOrganizationsResponse.data) === null || _a === void 0 ? void 0 : _a.signInMethod) === null || _b === void 0 ? void 0 : _b.signInOrganizations;
                 if (signInOrganizations && signInOrganizations.length > 0) {
@@ -133,7 +135,7 @@ class Login extends command_1.Command {
             this.log(`      User Code: ${handle.user_code}\n`);
             // Wait before opening the browser window to ensure the user has time to
             // see the User Code.
-            await common_1.sleep(1000);
+            await util_1.sleep(1000);
             await open(handle.verification_uri_complete, { wait: false });
             const tokenSet = await handle.poll();
             const userInfo = await client.userinfo(tokenSet);
@@ -160,7 +162,7 @@ exports.default = Login;
 Login.description = 'Authenticates you with the Opal server.';
 Login.examples = ['$ opal login'];
 Login.flags = {
-    help: command_1.flags.help({ char: 'h' }),
+    help: flags_1.SHARED_FLAGS.help,
     email: command_1.flags.string({
         multiple: false,
         description: 'Email address to login with.',

package/lib/commands/logout.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const command_1 = require("@oclif/command");
 const credentials_1 = require("../lib/credentials");
+const flags_1 = require("../lib/flags");
 class Logout extends command_1.Command {
     async run() {
         try {
@@ -17,6 +18,6 @@ exports.default = Logout;
 Logout.description = 'Clears locally stored Opal server authentication credentials.';
 Logout.examples = ['$ opal logout'];
 Logout.flags = {
-    help: command_1.flags.help({ char: 'h' }),
+    help: flags_1.SHARED_FLAGS.help,
 };
 Logout.args = [];

package/lib/commands/postgres-instances/start.d.ts

@@ -7,6 +7,8 @@ export default class StartPostgresInstanceSession extends Command {
         id: flags.IOptionFlag<string | undefined>;
         accessLevelRemoteId: flags.IOptionFlag<string | undefined>;
         sessionId: flags.IOptionFlag<string | undefined>;
+        refresh: import("@oclif/parser/lib/flags").IBooleanFlag<boolean>;
+        action: flags.IOptionFlag<string | undefined>;
     };
     run(): Promise<void>;
 }