switch-profile 2.3.0 → 2.4.0

package/README.md

@@ -21,7 +21,7 @@ npx switch-profile
 │  ○ globex-dev      ReadOnly  333333333333  us-east-1
 │  ○ initech-dev     Admin     444444444444  eu-west-1
 │
-│  [Log in] [Add] [Remove] [Log out] [Settings]
+│  [Log in] [Add] [Rename] [Remove] [Log out] [Settings]
 └  ↑↓ choose · enter switch · tab actions · esc quit
 ```
 
@@ -100,7 +100,7 @@ No profiles yet? `switch-profile` starts the **Add profiles** flow. To import ev
 Running `sp` (or `npx switch-profile`) with no arguments opens the home screen:
 
 - **Type and press Enter** to switch. That's the whole path for everyday use.
-- **Tab** moves to the action bar below the list, which is always visible however many profiles you have: **Log in**, **Add**, **Remove**, **Log out**, **Settings**. Use ←→ to choose and Enter to open.
+- **Tab** moves to the action bar below the list, which is always visible however many profiles you have: **Log in**, **Add**, **Rename**, **Remove**, **Log out**, **Settings**. Use ←→ to choose and Enter to open.
 - **Every action opens as a page and comes back** to the home screen when it's done. **Esc** goes back from a page, and quits from the home screen.
 - A switch ends the session, which is what lets `sp` set `AWS_PROFILE` in your terminal.
 
@@ -115,6 +115,7 @@ Running `sp` (or `npx switch-profile`) with no arguments opens the home screen:
 | `logout [--yes]` | Ends every SSO session on this machine (`aws sso logout`, plus `aws logout --all` on AWS CLI 2.32+). |
 | `add` | Adds profiles: import accounts from an SSO portal (recommended), a single SSO profile, a console sign-in profile, or access keys. |
 | `add --from-sso [session]` | Imports or re-syncs every account and role of an `[sso-session]`. Options: `--region`, `--prefix`, `--prune`, `--yes`. |
+| `rename [profile] [new-name]` | Renames a profile (alias `mv`), for example an imported `acme-prod-workloads-administratoraccess` to `acme-prod`. Also updates `source_profile` references, the default profile and the home screen order. SSO logins are kept. Scripts, terminals and tools that use the old name need the new one. |
 | `remove [profiles...] [--yes]` | Removes profiles (alias `rm`). The current default cannot be removed. |
 | `settings` | Per-terminal switching, SSO login mode, legacy SSO upgrade. |
 
@@ -155,7 +156,7 @@ sp add          # then choose "Accounts from an SSO portal"
 
 1. Pick an existing `[sso-session]` or create one: start URL (e.g. `https://acme.awsapps.com/start`), SSO region (where Identity Center lives, not where you deploy), and a short name, usually the client.
 2. Log in if needed.
-3. `switch-profile` lists every account and role you can access, then asks for a default region and a name prefix. Profiles are named `<prefix>-<account-name>-<role>`, for example `acme-prod-workloads-admin`.
+3. `switch-profile` lists every account and role you can access, then asks for a default region and a name prefix. Profiles are named `<prefix>-<account-name>-<role>`, for example `acme-prod-workloads-admin`. Rename any of them later with `sp rename` (re-imports still recognize them).
 4. A preview shows the new profiles, the ones already set up, and the ones that no longer exist. Then pick the new profiles to add: all are selected, so press Enter to add everything, or untick the ones you don't want (type to search by name, account or role).
 
 Run it again later to pick up new accounts. Account/role pairs that already have a profile are never duplicated, whatever its name. Generated profiles that no longer exist can be pruned (after a backup); profiles you wrote by hand are never pruned.
@@ -251,7 +252,7 @@ The SSO login is missing or expired. Run `sp login` (or just switch to the profi
 
 ### SSO login hangs on a remote machine
 
-The AWS CLI is waiting for a browser on the remote machine. Run `sp login --device`, or set **Settings > SSO login** to always use a device code.
+The AWS CLI is waiting for a browser on the remote machine. Run `sp login --device`, or set **Settings > SSO login** to always use a device code. Since 2.3.1, `sp add` > A single SSO profile also uses a device code automatically over SSH; with an older version, press Ctrl+C and update (`sp` always runs the latest).
 
 ### The code is not in my clipboard over SSH
 

package/dist/cli.js

@@ -5419,7 +5419,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "switch-profile",
-      version: "2.3.0",
+      version: "2.4.0",
       main: "index.js",
       bin: {
         "switch-profile": "index.js"
@@ -5602,6 +5602,9 @@ var require_ini = __commonJS({
         return str;
       let newline = detectNewline(str);
       return tidy(stringify(blocks.filter((b3) => b3.name !== name), newline), newline);
+    }, renameSection = (str, name, newName) => {
+      let blocks = parse(str), block2 = findBlock(blocks, name);
+      return block2 ? (block2.lines[0] = `[${newName}]`, stringify(blocks, detectNewline(str))) : str;
     }, setKeys = (str, name, changes) => {
       let blocks = parse(str), block2 = findBlock(blocks, name);
       if (!block2)
@@ -5636,6 +5639,7 @@ var require_ini = __commonJS({
       getSection,
       setSection,
       removeSection,
+      renameSection,
       setKeys
     };
   }
@@ -5755,6 +5759,19 @@ var require_transforms = __commonJS({
         for (let name of stale)
           config = ini.removeSection(config, configSectionName(config, name)), removed.push(name);
       return { config, added, addedEntries, existing, stale, removed };
+    }, escapeRegex = (text2) => text2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), renameProfile = (configStr, credsStr, from, to) => {
+      let section = from == "default" ? null : configSectionName(configStr, from);
+      if (!section)
+        throw new Error(`Profile ${from} not found in ~/.aws/config.`);
+      if (to == "default" || configSectionName(configStr, to) || ini.getSection(credsStr, to))
+        throw new Error(`Profile ${to} already exists.`);
+      let config = ini.renameSection(configStr, section, `profile ${to}`), creds = ini.renameSection(credsStr, from, to), sources = [], processes = [], mentions = new RegExp(`--profile[\\s=]+["']?${escapeRegex(from)}(?=["'\\s]|$)`);
+      for (let s of ini.listSections(config).filter((s2) => s2 != "default" && !s2.startsWith("sso-session "))) {
+        let params = ini.getSection(config, s), name = s.replace(/^profile\s+/, "");
+        params.source_profile == from && (config = ini.setKeys(config, s, { source_profile: to }), sources.push(name)), params.credential_process && mentions.test(params.credential_process) && processes.push(name);
+      }
+      let defaults = ini.getSection(config, "default") || {}, wasDefault = defaults[NAME_KEY] == from;
+      return wasDefault && (config = ini.setKeys(config, "default", { [NAME_KEY]: to, ...defaults.source_profile == from ? { source_profile: to } : {} })), { config, creds, sources, wasDefault, processes };
     }, listSsoSessions = (configStr) => ini.listSections(configStr).filter((s) => s.startsWith("sso-session ")).map((s) => ({ name: s.replace(/^sso-session\s+/, ""), ...ini.getSection(configStr, s) })), addSsoSession = (configStr, { name, startUrl, region, version }) => ini.getSection(configStr, `sso-session ${name}`) ? configStr : ini.setSection(configStr, `sso-session ${name}`, [
       ["sso_start_url", startUrl],
       ["sso_region", region],
@@ -5781,7 +5798,8 @@ var require_transforms = __commonJS({
       sessionNameFromUrl,
       upgradeLegacySsoProfiles,
       stampProfile,
-      listProfiles
+      listProfiles,
+      renameProfile
     };
   }
 });
@@ -6078,6 +6096,16 @@ var require_aws = __commonJS({
         configStr = deleteProfileFromConfig(profile, configStr), credsStr = deleteProfileFromCreds(profile, credsStr);
       }
       updateConfig && await writeAwsFile(AWS_CONFIG_FILE, configStr), updateCreds && await writeAwsFile(AWS_CREDS_FILE, credsStr);
+    })()), renameProfile = (from, to) => catchErrors((async () => {
+      let errMsg = `Fail to rename profile ${from} to ${to}`, [configStrErrors, configStr] = await getConfigFile(), [credsStrErrors, credsStr] = await getCredsFile();
+      if (configStrErrors || credsStrErrors)
+        throw wrapErrors(errMsg, configStrErrors || credsStrErrors);
+      try {
+        let { config, creds, sources, wasDefault, processes } = transforms.renameProfile(configStr, credsStr, from, to);
+        return await writeAwsFiles({ config, creds }), { sources, wasDefault, processes };
+      } catch (err) {
+        throw wrapErrors(errMsg, [err]);
+      }
     })()), createProfile = ({ name, aws_access_key_id, aws_secret_access_key, region }) => catchErrors((async () => {
       await awsCliV2Exists();
       let errMsg = "Fail to create AWS profile";
@@ -6104,10 +6132,11 @@ var require_aws = __commonJS({
         `${transforms.VERSION_KEY} = ${CLI_VERSION2}`
       ].join(NL) + NL, append = (str, section) => (str || "").trim() ? str.replace(/\s+$/, "") + NL + NL + section : section;
       await writeAwsFile(AWS_CONFIG_FILE, append(configStr, newConfig)), await writeAwsFile(AWS_CREDS_FILE, append(credsStr, newCreds));
-    })()), createSsoProfile = (name) => catchErrors((async () => {
+    })()), createSsoProfile = (name, { loginMode } = {}) => catchErrors((async () => {
       await awsCliV2Exists();
+      let flags = loginFlags(loginMode || "auto", { env: process.env, platform: process.platform, cliVersion: await getAwsCliVersion() });
       try {
-        await run2("aws", ["configure", "sso", "--profile", name], { tee: !0 });
+        await run2("aws", ["configure", "sso", "--profile", name, ...flags], { tee: !0 });
       } catch (err) {
         throw Object.assign(new Error(`'aws configure sso' failed: ${err.message}`, { cause: err }), { output: err.output || "" });
       }
@@ -6134,6 +6163,7 @@ var require_aws = __commonJS({
       getDefaultProfile,
       setDefaultProfile,
       deleteProfiles,
+      renameProfile,
       createProfile,
       createSsoProfile,
       backupAwsFiles,
@@ -6150,7 +6180,7 @@ var require_aws = __commonJS({
 // src/shell.js
 var require_shell = __commonJS({
   "src/shell.js"(exports2, module2) {
-    var fs = require("fs"), { homedir } = require("os"), { join: join2, dirname: dirname2, basename } = require("path"), { run: run2 } = require_core(), log3 = require_log(), IS_WINDOWS = process.platform === "win32", IS_MAC = process.platform === "darwin", FUNCTION_NAME = "sp", BLOCK_START_PREFIX = "# >>> switch-profile", BLOCK_END = "# <<< switch-profile <<<", BLOCK_REGEX = /(^|\r?\n)# >>> switch-profile[^\n]*\r?\n[\s\S]*?# <<< switch-profile <<<[^\n]*(\r?\n)?/, blockStart = (version) => `${BLOCK_START_PREFIX} v${version} (managed by switch-profile, do not edit) >>>`, CLEARED_VARS = ["AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN", "AWS_DEFAULT_PROFILE"], SUBCOMMANDS = ["status", "login", "logout", "add", "remove", "settings", "use"], PROFILES_SED = "sed -n 's/^\\[profile \\(.*\\)\\]$/\\1/p'", POSIX_FUNCTION = (shell) => `${FUNCTION_NAME}() {
+    var fs = require("fs"), { homedir } = require("os"), { join: join2, dirname: dirname2, basename } = require("path"), { run: run2 } = require_core(), log3 = require_log(), IS_WINDOWS = process.platform === "win32", IS_MAC = process.platform === "darwin", FUNCTION_NAME = "sp", BLOCK_START_PREFIX = "# >>> switch-profile", BLOCK_END = "# <<< switch-profile <<<", BLOCK_REGEX = /(^|\r?\n)# >>> switch-profile[^\n]*\r?\n[\s\S]*?# <<< switch-profile <<<[^\n]*(\r?\n)?/, blockStart = (version) => `${BLOCK_START_PREFIX} v${version} (managed by switch-profile, do not edit) >>>`, CLEARED_VARS = ["AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN", "AWS_DEFAULT_PROFILE"], SUBCOMMANDS = ["status", "login", "logout", "add", "remove", "settings", "use", "rename"], PROFILES_SED = "sed -n 's/^\\[profile \\(.*\\)\\]$/\\1/p'", POSIX_FUNCTION = (shell) => `${FUNCTION_NAME}() {
 	local __sp_file __sp_status
 	__sp_file="$(mktemp "\${TMPDIR:-/tmp}/switch-profile.XXXXXX")" || return 1
 	if [ -n "\${SWITCH_PROFILE_DEV_BIN:-}" ]; then
@@ -6170,7 +6200,7 @@ var require_shell = __commonJS({
 	items=(\${(f)"$(${PROFILES_SED} "\${AWS_CONFIG_FILE:-$HOME/.aws/config}" 2>/dev/null)"})
 	if (( CURRENT == 2 )); then
 		compadd -- $items ${SUBCOMMANDS.join(" ")}
-	elif [[ $words[2] == (remove|rm) ]] || { (( CURRENT == 3 )) && [[ $words[2] == (use|login) ]] }; then
+	elif [[ $words[2] == (remove|rm) ]] || { (( CURRENT == 3 )) && [[ $words[2] == (use|login|rename|mv) ]] }; then
 		compadd -- $items
 	fi
 }
@@ -6181,7 +6211,7 @@ fi`, BASH_COMPLETION = `_switch_profile_complete() {
 	items="$(${PROFILES_SED} "\${AWS_CONFIG_FILE:-$HOME/.aws/config}" 2>/dev/null)"
 	if [ "$COMP_CWORD" -eq 1 ]; then
 		items="$items ${SUBCOMMANDS.join(" ")}"
-	elif [ "$COMP_CWORD" -lt 2 ] || ! case "\${COMP_WORDS[1]}" in use|login|remove|rm) true ;; *) false ;; esac; then
+	elif [ "$COMP_CWORD" -lt 2 ] || ! case "\${COMP_WORDS[1]}" in use|login|rename|mv|remove|rm) true ;; *) false ;; esac; then
 		return 0
 	elif [ "$COMP_CWORD" -gt 2 ] && [ "\${COMP_WORDS[1]}" != remove ] && [ "\${COMP_WORDS[1]}" != rm ]; then
 		return 0
@@ -6210,7 +6240,7 @@ function __switch_profile_profiles
 end
 for __sp_cmd in ${FUNCTION_NAME} switch-profile
 	complete -c $__sp_cmd -f -n 'test (count (commandline -opc)) -eq 1' -a '(__switch_profile_profiles) ${SUBCOMMANDS.join(" ")}'
-	complete -c $__sp_cmd -f -n 'test (count (commandline -opc)) -eq 2; and __fish_seen_subcommand_from use login' -a '(__switch_profile_profiles)'
+	complete -c $__sp_cmd -f -n 'test (count (commandline -opc)) -eq 2; and __fish_seen_subcommand_from use login rename mv' -a '(__switch_profile_profiles)'
 	complete -c $__sp_cmd -f -n '__fish_seen_subcommand_from remove rm' -a '(__switch_profile_profiles)'
 end`, POWERSHELL_FUNCTION = `function ${FUNCTION_NAME} {
 	param([Parameter(ValueFromRemainingArguments = $true)] [string[]] $Rest)
@@ -7660,6 +7690,7 @@ ${ui2.dim(viaShortcut ? "Switching clears them from this terminal." : `Unset ${s
     }, ACTIONS = [
       { key: "login", label: "Log in" },
       { key: "add", label: "Add" },
+      { key: "rename", label: "Rename" },
       { key: "remove", label: "Remove" },
       { key: "logout", label: "Log out" },
       { key: "settings", label: "Settings" }
@@ -7756,7 +7787,7 @@ ${ui2.dim("Tip: enable per-terminal switching in Settings.")}` : ""}`);
 ${ui2.dim(`Open a new terminal or run: ${installed.reload}`)}`), installed.name == "powershell" && p4.log.message(ui2.dim("If PowerShell refuses to load your profile: Set-ExecutionPolicy -Scope CurrentUser RemoteSigned"));
     }, runAction = async (key, state, opts) => {
       let commands2 = require_commands();
-      return key == "login" ? commands2.login(state.defaultName, { ...opts, fromPicker: !0 }) : commands2[key](opts.args || [], { ...opts, fromPicker: !0 });
+      return key == "login" ? commands2.login(state.defaultName, { ...opts, fromPicker: !0 }) : key == "rename" ? commands2.rename(null, null, { ...opts, fromPicker: !0 }) : commands2[key](opts.args || [], { ...opts, fromPicker: !0 });
     }, routeChoice = (choice) => {
       if (p4.isCancel(choice))
         return { type: "quit" };
@@ -7823,7 +7854,7 @@ ${ui2.dim(`Open a new terminal or run: ${installed.reload}`)}`), installed.name
 // src/commands/index.js
 var require_commands = __commonJS({
   "src/commands/index.js"(exports2, module2) {
-    var p4 = (init_dist4(), __toCommonJS(dist_exports2)), log3 = require_log(), aws = require_aws(), transforms = require_transforms(), settings2 = require_settings(), shell = require_shell(), migrate = require_migrate(), rank = require_rank(), { resolveLoginMode, isRemoteSession, configureSsoFailure } = require_login(), ui2 = require_ui(), { ask, preflight, loadState, loginKey, describe, loginState, upgradeLegacySso } = require_common(), { ssoLogin, rememberLogin } = require_login_flow(), { switchCommand, switchTo, connect, enableShortcut } = require_switch(), intro2 = (opts) => {
+    var p4 = (init_dist4(), __toCommonJS(dist_exports2)), log3 = require_log(), aws = require_aws(), transforms = require_transforms(), settings2 = require_settings(), shell = require_shell(), migrate = require_migrate(), rank = require_rank(), { resolveLoginMode, isRemoteSession, configureSsoFailure } = require_login(), ui2 = require_ui(), { ask, preflight, loadState, loginKey, describe, loginState, upgradeLegacySso } = require_common(), { ssoLogin, rememberLogin } = require_login_flow(), { switchCommand, switchTo, connect, enableShortcut, exportHint } = require_switch(), intro2 = (opts) => {
       !opts.fromPicker && !opts.json && p4.intro(`${ui2.badge("switch-profile")} ${ui2.dim(settings2.CLI_VERSION)}`);
     }, begin = async (opts, { needsInput } = {}) => {
       let interactive = ui2.isInteractive(opts);
@@ -7919,7 +7950,7 @@ var require_commands = __commonJS({
           ...sessions.length ? [ui2.dim(`Portals already set up: ${sessions.map((x2) => `${x2.name} (${x2.sso_region || "?"})`).join(", ")}. Type one of these names to reuse it.`)] : []
         ].join(`
 `));
-        let [errors, upgraded] = await aws.createSsoProfile(name);
+        let [errors, upgraded] = await aws.createSsoProfile(name, { loginMode: settings2.getLoginMode(state.settings) });
         if (errors) {
           let failed = errors.find((e) => e.output != null);
           if (!failed)
@@ -8059,6 +8090,53 @@ AWS recommends SSO or console sign-in instead.`), !await ask(p4.confirm({ messag
       if (errors)
         throw ui2.cliErrorFrom(errors);
       p4.outro(`${ui2.ok(ui2.sym.ok)} Removed ${names.join(", ")}`);
+    }, moveKey = (obj, from, to) => {
+      if (!obj || !(from in obj))
+        return obj;
+      let { [from]: value, ...rest } = obj;
+      return { ...rest, [to]: value };
+    }, rename = async (from, to, opts) => {
+      let interactive = await begin(opts), state = await loadState();
+      if (!from) {
+        if (!interactive)
+          throw new ui2.CliError("Which profile?", { code: 3, hint: "Run: switch-profile rename <profile> <new-name>" });
+        from = await ask(p4.autocomplete({
+          message: "Rename which profile?",
+          maxItems: 12,
+          options: state.profiles.map((x2) => ({ value: x2.name, label: x2.name, hint: describe(x2) }))
+        }));
+      }
+      let profile = findProfile(state, from), taken = [...state.profiles.map((x2) => x2.name).filter((n3) => n3 != from), "default"], validate = (v) => v == from ? "That is already its name." : validateProfileName(taken)(v);
+      if (!to) {
+        if (!interactive)
+          throw new ui2.CliError("What is the new name?", { code: 3, hint: `Run: switch-profile rename ${from} <new-name>` });
+        to = await ask(p4.text({ message: `New name for ${from}`, initialValue: from, validate }));
+      }
+      let invalid = validate(to);
+      if (invalid)
+        throw new ui2.CliError(invalid, { code: 3 });
+      let [errors, result] = await aws.renameProfile(from, to);
+      if (errors)
+        throw ui2.cliErrorFrom(errors);
+      let current = await settings2.read();
+      await settings2.update({
+        usage: moveKey(current.usage, from, to),
+        ...loginKey(profile) == from ? { logins: moveKey(current.logins, from, to) } : {}
+      });
+      let inTerminal = process.env.AWS_PROFILE == from, terminal = inTerminal ? await shell.exportProfile(to).catch(log3.tolerated("handing the profile to sp", !1)) : !1;
+      if (opts.json) {
+        process.stdout.write(JSON.stringify({ from, to, default: result.wasDefault, sources: result.sources, processes: result.processes, terminal }) + `
+`);
+        return;
+      }
+      let lines = [
+        result.wasDefault ? ui2.dim("still the default profile") : null,
+        result.sources.length ? ui2.dim(`source_profile updated in ${result.sources.join(", ")}`) : null,
+        terminal ? ui2.dim("this terminal now uses the new name") : null
+      ].filter(Boolean);
+      p4.log.success([`Renamed ${ui2.accent(from)} to ${ui2.accent(to)}`, ...lines].join(`
+`)), result.processes.length && p4.log.warn(`The credential_process of ${result.processes.join(", ")} still uses --profile ${from}. Update ${result.processes.length == 1 ? "it" : "them"} in ~/.aws/config.`), inTerminal && !terminal && p4.log.warn(`This terminal still uses ${from}. Run:
+   ${ui2.accent(exportHint(to))}`), p4.outro(ui2.dim(`Other terminals, scripts and tools that use ${from} (AWS_PROFILE or --profile) need the new name.`));
     }, LOGIN_MODE_LABELS = {
       auto: "Auto: device code over SSH, browser otherwise",
       device: "Always device code (approve from any device)",
@@ -8110,6 +8188,7 @@ AWS recommends SSO or console sign-in instead.`), !await ask(p4.confirm({ messag
       logout,
       add,
       remove,
+      rename,
       settings: settingsCommand
     };
   }
@@ -8125,6 +8204,7 @@ Examples:
   $ sp acme prod                fuzzy match: switches if only one profile matches
   $ sp login                    log in again now (device code over SSH)
   $ sp add                      import every account of an SSO portal
+  $ sp rename <profile> <new>   give a profile a friendlier name
   $ switch-profile status --json
 
 'sp' is the shortcut switch-profile installs on first use (or from Settings). It also
@@ -8154,6 +8234,6 @@ Exit codes: 0 ok \xB7 1 error \xB7 2 login required \xB7 3 bad input \xB7 130 ca
 }, main = (argv) => {
   log2.start({ version: CLI_VERSION, argv }), process.on("uncaughtException", crashed), process.on("unhandledRejection", crashed), process.on("exit", (code) => log2.info(`exit ${code}`));
   let program = new Command();
-  return program.name("switch-profile").description("Switch between AWS profiles, log in with SSO, and keep every terminal on the right account.").version(CLI_VERSION, "-v, --version").argument("[profile...]", "profile name or search text").option("--json", "machine-readable output").option("--no-input", "never prompt (fails with a hint instead)").option("--debug", "show error details").addHelpText("after", EXAMPLES).showSuggestionAfterError().action(run((words, opts) => commands.switch((words || []).join(" "), opts))), program.command("use").argument("<profile>").description("switch to a profile by its exact name").action(run(commands.use)), program.command("status").description("show the current profile and login state").action(run((opts) => commands.status([], opts))), program.command("login").argument("[profile]", "defaults to this terminal's profile, then the default profile").description("log in again now, even if the session is still valid").option("--device", "use a device code (approve from any device)").option("--browser", "use the browser on this machine").action(run(commands.login)), program.command("logout").description("end every SSO session on this machine").option("-y, --yes", "do not ask for confirmation").action(run((opts) => commands.logout([], opts))), program.command("add").description("add profiles: import an SSO portal, or create one").option("--from-sso [session]", "import (or re-sync) every account and role of an [sso-session]").option("--region <region>", "default region of imported profiles").option("--prefix <prefix>", "name prefix of imported profiles").option("--prune", "remove imported profiles that no longer exist").option("-y, --yes", "do not ask for confirmation").action(run((opts) => commands.add([], opts))), program.command("remove").alias("rm").argument("[profiles...]").description("remove profiles").option("-y, --yes", "do not ask for confirmation").action(run(commands.remove)), program.command("settings").description("per-terminal switching, login mode and more").action(run((opts) => commands.settings([], opts))), program.command("switch", { hidden: !0 }).action(run((opts) => commands.switch("", opts))), program.parseAsync(argv);
+  return program.name("switch-profile").description("Switch between AWS profiles, log in with SSO, and keep every terminal on the right account.").version(CLI_VERSION, "-v, --version").argument("[profile...]", "profile name or search text").option("--json", "machine-readable output").option("--no-input", "never prompt (fails with a hint instead)").option("--debug", "show error details").addHelpText("after", EXAMPLES).showSuggestionAfterError().action(run((words, opts) => commands.switch((words || []).join(" "), opts))), program.command("use").argument("<profile>").description("switch to a profile by its exact name").action(run(commands.use)), program.command("status").description("show the current profile and login state").action(run((opts) => commands.status([], opts))), program.command("login").argument("[profile]", "defaults to this terminal's profile, then the default profile").description("log in again now, even if the session is still valid").option("--device", "use a device code (approve from any device)").option("--browser", "use the browser on this machine").action(run(commands.login)), program.command("logout").description("end every SSO session on this machine").option("-y, --yes", "do not ask for confirmation").action(run((opts) => commands.logout([], opts))), program.command("add").description("add profiles: import an SSO portal, or create one").option("--from-sso [session]", "import (or re-sync) every account and role of an [sso-session]").option("--region <region>", "default region of imported profiles").option("--prefix <prefix>", "name prefix of imported profiles").option("--prune", "remove imported profiles that no longer exist").option("-y, --yes", "do not ask for confirmation").action(run((opts) => commands.add([], opts))), program.command("remove").alias("rm").argument("[profiles...]").description("remove profiles").option("-y, --yes", "do not ask for confirmation").action(run(commands.remove)), program.command("rename").alias("mv").argument("[profile]").argument("[new-name]").description("rename a profile").action(run(commands.rename)), program.command("settings").description("per-terminal switching, login mode and more").action(run((opts) => commands.settings([], opts))), program.command("switch", { hidden: !0 }).action(run((opts) => commands.switch("", opts))), program.parseAsync(argv);
 };
 module.exports = { main };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switch-profile",
-  "version": "2.3.0",
+  "version": "2.4.0",
   "main": "index.js",
   "bin": {
     "switch-profile": "index.js"