airbyte-internal-ops 0.1.3__py3-none-any.whl → 0.1.4__py3-none-any.whl

{airbyte_internal_ops-0.1.3.dist-info → airbyte_internal_ops-0.1.4.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: airbyte-internal-ops
-Version: 0.1.3
+Version: 0.1.4
 Summary: MCP and API interfaces that let the agents do the admin work
 Author-email: Aaron Steers <aj@airbyte.io>
 Keywords: admin,airbyte,api,mcp
@@ -10,18 +10,20 @@ Classifier: License :: OSI Approved :: MIT License
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
-Classifier: Programming Language :: Python :: 3.13
-Requires-Python: >=3.11
-Requires-Dist: airbyte-cdk<7.0,>=6.0.0
+Requires-Python: <3.13,>=3.11
+Requires-Dist: airbyte-cdk<8.0,>=7.3.9
 Requires-Dist: airbyte-protocol-models-pdv2>=0.13.0
-Requires-Dist: airbyte>=0.1.0
+Requires-Dist: airbyte>=0.34.0
 Requires-Dist: asyncer<1.0,>=0.0.4
 Requires-Dist: click<9.0,>=8.1.3
+Requires-Dist: cloud-sql-python-connector[pg8000]<2.0,>=1.7.0
 Requires-Dist: cyclopts<5.0,>=4.0.0
 Requires-Dist: docker<7.0,>=6.0
 Requires-Dist: dpath<3.0,>=2.1.5
 Requires-Dist: fastmcp<3.0,>=2.12.1
 Requires-Dist: gitpython<4.0,>=3.1.29
+Requires-Dist: google-cloud-logging<4.0,>=3.9.0
+Requires-Dist: google-cloud-secret-manager<3.0,>=2.18.0
 Requires-Dist: jinja2<4.0,>=3.1.2
 Requires-Dist: pydantic>=2.0.0
 Requires-Dist: python-dotenv<2.0,>=1.0.0
@@ -30,6 +32,7 @@ Requires-Dist: requests<3.0,>=2.31.0
 Requires-Dist: rich<14.0,>=13.0.0
 Requires-Dist: semver<4.0,>=3.0.1
 Requires-Dist: slack-sdk<4.0,>=3.36.0
+Requires-Dist: sqlalchemy<3.0,>=2.0.0
 Requires-Dist: toml<1.0,>=0.10.2
 Description-Content-Type: text/markdown
 

{airbyte_internal_ops-0.1.3.dist-info → airbyte_internal_ops-0.1.4.dist-info}/RECORD

@@ -138,7 +138,7 @@ airbyte_ops_mcp/_legacy/airbyte_ci/connector_pipelines/airbyte_ci/connectors/tes
 airbyte_ops_mcp/_legacy/airbyte_ci/connector_pipelines/airbyte_ci/connectors/test/context.py,sha256=ounJj-ZjLBTtZx088t6u_UKy_aHJZmMmfXskSTbWjFM,9789
 airbyte_ops_mcp/_legacy/airbyte_ci/connector_pipelines/airbyte_ci/connectors/test/pipeline.py,sha256=QaxeepQxl5PX5xitTt7pbt2eIkQJTgAqmmxL2nFqvvI,3020
 airbyte_ops_mcp/_legacy/airbyte_ci/connector_pipelines/airbyte_ci/connectors/test/steps/__init__.py,sha256=4Hw-PX1-VgESLF16cDdvuYCzGJtHntThLF4qIiULWeo,61
-airbyte_ops_mcp/_legacy/airbyte_ci/connector_pipelines/airbyte_ci/connectors/test/steps/common.py,sha256=e4SWZVYIbUiTnTSbamMJLLIDlzrTbh78a1KcXwkpsv0,42952
+airbyte_ops_mcp/_legacy/airbyte_ci/connector_pipelines/airbyte_ci/connectors/test/steps/common.py,sha256=Gv9kFNgteTqGV92TgQxzlUefEi6NL0VNZy31V1l7DwM,42948
 airbyte_ops_mcp/_legacy/airbyte_ci/connector_pipelines/airbyte_ci/connectors/test/steps/java_connectors.py,sha256=UOwoLiSpVdDSGFhrV__XTbJgF4eQj-MyS3tezej09qA,5774
 airbyte_ops_mcp/_legacy/airbyte_ci/connector_pipelines/airbyte_ci/connectors/test/steps/manifest_only_connectors.py,sha256=aVD-FYW_5yDryZUXIjgm-H_jJetiAfmxRwiPQV4Fnlc,9529
 airbyte_ops_mcp/_legacy/airbyte_ci/connector_pipelines/airbyte_ci/connectors/test/steps/python_connectors.py,sha256=BJKZLovnfA1_vYNcEC2ko8xeD0FhSLorhccVCx7q7RY,15755
@@ -358,36 +358,56 @@ airbyte_ops_mcp/cli/__init__.py,sha256=XpL7FyVfgabfBF2JR7u7NwJ2krlYqjd_OwLcWf-Xc
 airbyte_ops_mcp/cli/_base.py,sha256=I8tWnyQf0ks4r3J8N8h-5GZxyn37T-55KsbuHnxYlcg,415
 airbyte_ops_mcp/cli/_shared.py,sha256=jg-xMyGzTCGPqKd8VTfE_3kGPIyO_3Kx5sQbG4rPc0Y,1311
 airbyte_ops_mcp/cli/app.py,sha256=SEdBpqFUG2O8zGV5ifwptxrLGFph_dLr66-MX9d69gQ,789
-airbyte_ops_mcp/cli/cloud.py,sha256=7lx5FE65hpBBxsNDNouoAkounCUqxy1xZE-xlDpom9Q,20735
+airbyte_ops_mcp/cli/cloud.py,sha256=iEkwromM8VByNa9V-2zBnAJZfr6CzCTiYSajqu4hSok,31996
 airbyte_ops_mcp/cli/gh.py,sha256=91b1AxFXvHQCFyXhrrym-756ZjnMCqvxFdmwCtma1zI,2046
 airbyte_ops_mcp/cli/registry.py,sha256=wHyfiysASuy-HGvLJIiU8TRguaiuqRaXQP9QJ-LC7bk,2940
 airbyte_ops_mcp/cli/repo.py,sha256=2LurE6AvRpdgYpiRZuvA33bI1-e7_e0QsFbEO7Bba_g,15780
 airbyte_ops_mcp/cloud_admin/__init__.py,sha256=cqE96Q10Kp6elhH9DAi6TVsIwSUy3sooDLLrxTaktGk,816
 airbyte_ops_mcp/cloud_admin/api_client.py,sha256=4vZv1J4S2Q8ETl6gIB20X1X6KHTVV-bx__b2Ax8oqyc,17358
 airbyte_ops_mcp/cloud_admin/auth.py,sha256=j45pRR8fg6CLwVdn7Uu5KW_kTz_CjRP6ZJGUzqHj_Dk,2558
+airbyte_ops_mcp/cloud_admin/connection_config.py,sha256=UtbIwuB7CA3WJr9oYRwlKDsjciqd_9ewWdml2f8DuXw,4887
 airbyte_ops_mcp/cloud_admin/models.py,sha256=YZ3FbEW-tZa50khKTTl4Bzvy_LsGyyQd6qcpXo62jls,2670
-airbyte_ops_mcp/live_tests/__init__.py,sha256=udSsiz8WNI69WSn6Ib9uGB1LEblL6ElVHaY8hWGMHLc,525
+airbyte_ops_mcp/live_tests/__init__.py,sha256=qJac67dt6DQCqif39HqeiG3Tr9xrxfP-ala8HsLZKis,1020
 airbyte_ops_mcp/live_tests/ci_output.py,sha256=NQATOGid0OCbLEl2NOtGK4cHLL5OxXhjmtanBjIlCyE,11369
-airbyte_ops_mcp/live_tests/connection_fetcher.py,sha256=ffMD6bGWW4a1MA83Fs-tXLyOnT6aO9dvm1Kk9FT9ocA,6662
+airbyte_ops_mcp/live_tests/config.py,sha256=dwWeY0tatdbwl9BqbhZ7EljoZDCtKmGO5fvOAIxeXmA,5873
+airbyte_ops_mcp/live_tests/connection_fetcher.py,sha256=5wIiA0VvCFNEc-fr6Po18gZMX3E5fyPOGf2SuVOqv5U,12799
+airbyte_ops_mcp/live_tests/connection_secret_retriever.py,sha256=XBuPfmA9GnNCHlJdDocwiB_UIx8F0D6OHBNNIDPrfk0,5869
 airbyte_ops_mcp/live_tests/connector_runner.py,sha256=fGE_TCii9zhC3pbyBupJ3JVkuxOWB59Q1DgigcF3q04,9707
-airbyte_ops_mcp/live_tests/http_metrics.py,sha256=ryZANWz4CXT24j7PxeE7r3gDuRbcEGR9ezLrav_E32U,9701
+airbyte_ops_mcp/live_tests/evaluation_modes.py,sha256=lAL6pEDmy_XCC7_m4_NXjt_f6Z8CXeAhMkc0FU8bm_M,1364
+airbyte_ops_mcp/live_tests/http_metrics.py,sha256=oTD7f2MnQOvx4plOxHop2bInQ0-whvuToSsrC7TIM-M,12469
 airbyte_ops_mcp/live_tests/models.py,sha256=brtAT9oO1TwjFcP91dFcu0XcUNqQb-jf7di1zkoVEuo,8782
+airbyte_ops_mcp/live_tests/obfuscation.py,sha256=JanpCLj6M9-_Zto6PABzNaY3OA93Frq3YpJ1411QNtQ,4395
+airbyte_ops_mcp/live_tests/schema_generation.py,sha256=VQfn2WbsMptfjO_ub709FYSwwwvjOuWy2Jut7o5ThIs,5308
+airbyte_ops_mcp/live_tests/_connection_retriever/__init__.py,sha256=3Mm9Lauqf4TcdeXhujbXXitl_A7_3iUbc0iQqd6gfog,1125
+airbyte_ops_mcp/live_tests/_connection_retriever/audit_logging.py,sha256=DbziKNbZppb9YBly9x3WGWtPhSTkg9MIreIr7mUBkl8,2823
+airbyte_ops_mcp/live_tests/_connection_retriever/consts.py,sha256=k1FJk9Gyc9fWwuzh9TFUU-XpbohhbsrGC5EEJaIPy2c,1021
+airbyte_ops_mcp/live_tests/_connection_retriever/db_access.py,sha256=riTQ7OjwJhZqPQqjwT3WLxbx3TenI2PfgpUpuwoVsd0,2686
+airbyte_ops_mcp/live_tests/_connection_retriever/retrieval.py,sha256=wehmHbEoai_ab9lyobzq6ifMzacJEZv5mwJh53tOi60,12443
+airbyte_ops_mcp/live_tests/_connection_retriever/secrets_resolution.py,sha256=TnqhzkpIaM3aHV34MMw65i1-jVdtRAk9Qqefz7DZJP8,4384
 airbyte_ops_mcp/live_tests/commons/__init__.py,sha256=lNew_sAL4c8dPy3gMFbGC5_FuUX1P6QzGULbqS2H4M0,104
+airbyte_ops_mcp/live_tests/message_cache/__init__.py,sha256=h6G_c73k2_OR8otg1YYV42rfKgKG7eiMIRiNxfo5fzU,545
+airbyte_ops_mcp/live_tests/message_cache/duckdb_cache.py,sha256=LVj8sCA1pgJimT8NFQJzbsW8dEzIX5hB280sFtkP3xA,15355
+airbyte_ops_mcp/live_tests/regression/__init__.py,sha256=SsgBKULvowwYeeS5GmrtyyVzghS9-cfZwdxskWCcRBg,851
+airbyte_ops_mcp/live_tests/regression/comparators.py,sha256=MJkLZEKHivgrG0-3Y8BzLtnXlOb16t9z-reC9lhyObQ,15967
+airbyte_ops_mcp/live_tests/validation/__init__.py,sha256=To16AfC5k4xwtKI4Ep8FZrdl1DexesVKe002reWwmGA,1520
+airbyte_ops_mcp/live_tests/validation/catalog_validators.py,sha256=jqqVAMOk0mtdPgwu4d0hA0ZEjtsNh5gapvGydRv3_qk,12553
+airbyte_ops_mcp/live_tests/validation/record_validators.py,sha256=-7Ir2LWGCrtadK2JLuBgppSyk0RFJX6Nsy0lrabtwrs,7411
 airbyte_ops_mcp/mcp/__init__.py,sha256=QqkNkxzdXlg-W03urBAQ3zmtOKFPf35rXgO9ceUjpng,334
 airbyte_ops_mcp/mcp/_guidance.py,sha256=48tQSnDnxqXtyGJxxgjz0ZiI814o_7Fj7f6R8jpQ7so,2375
-airbyte_ops_mcp/mcp/_mcp_utils.py,sha256=LTekWdqvyzLd_2VFeUZ1Qd_ibIDJ91ZNPS0mEnXnqBo,9011
+airbyte_ops_mcp/mcp/_mcp_utils.py,sha256=Im3J3yCtXPbW_Kp-oh5b11Z2187V3-Zsos5LBgdvQrc,9111
 airbyte_ops_mcp/mcp/cloud_connector_versions.py,sha256=G8mVzhvSCmrTEqDseV57-wwL0s3oWdydgyvgMr027tU,10443
 airbyte_ops_mcp/mcp/connector_analysis.py,sha256=OC4KrOSkMkKPkOisWnSv96BDDE5TQYHq-Jxa2vtjJpo,298
 airbyte_ops_mcp/mcp/connector_qa.py,sha256=aImpqdnqBPDrz10BS0owsV4kuIU2XdalzgbaGZsbOL0,258
 airbyte_ops_mcp/mcp/github.py,sha256=5ZPsSTy4-gummS96xGoG-n2RwCgyg3-UWAvmEmxd5x4,7686
 airbyte_ops_mcp/mcp/github_repo_ops.py,sha256=D7yDtqMISFqaUzqnyA0dLE_6j6G3wHrNz8Byo8ajR8E,4929
+airbyte_ops_mcp/mcp/live_tests.py,sha256=4KTGCfct69WTCCrxZ23l-Nrz3iKZA5tuieNM_Aa4aTs,17408
 airbyte_ops_mcp/mcp/metadata.py,sha256=fwGW97WknR5lfKcQnFtK6dU87aA6TmLj1NkKyqDAV9g,270
 airbyte_ops_mcp/mcp/prerelease.py,sha256=2Mr0LdCLhEc9Q7CEtmganJXHGHCLCXODKlkSapLsSsY,9484
 airbyte_ops_mcp/mcp/prompts.py,sha256=6opN4ZweQxfSdtoK0gL6wTrlxkRvxTQvH1VTmAuhoBE,1645
 airbyte_ops_mcp/mcp/registry.py,sha256=PW-VYUj42qx2pQ_apUkVaoUFq7VgB9zEU7-aGrkSCCw,290
-airbyte_ops_mcp/mcp/server.py,sha256=RtyQfCsxiCvcVHpm6w7Ozt9-77j0KrUYROdryrmhCFo,2673
+airbyte_ops_mcp/mcp/server.py,sha256=oJOrwZP7hAwx2pjChZUZYv-aA4NITWiCRiXFiKVOf8E,2843
 airbyte_ops_mcp/mcp/server_info.py,sha256=VcNLn6CSy2UcgM2V1ep9-JGwV63p3cK1G14BFHXEn0U,2402
-airbyte_internal_ops-0.1.3.dist-info/METADATA,sha256=ZDywWwtt2Gj5UjG1mV7AaFcgGpDJIEa9I3UP2aj9sv0,2706
-airbyte_internal_ops-0.1.3.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
-airbyte_internal_ops-0.1.3.dist-info/entry_points.txt,sha256=eUgJ9xIy9PlR-CgRbqRMsh1NVp6jz08v9bul9vCYlU4,111
-airbyte_internal_ops-0.1.3.dist-info/RECORD,,
+airbyte_internal_ops-0.1.4.dist-info/METADATA,sha256=5vi9tCrTgfHK0NnN7hG2jkdRsuBalql3pCVO8nVh2RE,2866
+airbyte_internal_ops-0.1.4.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+airbyte_internal_ops-0.1.4.dist-info/entry_points.txt,sha256=eUgJ9xIy9PlR-CgRbqRMsh1NVp6jz08v9bul9vCYlU4,111
+airbyte_internal_ops-0.1.4.dist-info/RECORD,,

airbyte_ops_mcp/_legacy/airbyte_ci/connector_pipelines/airbyte_ci/connectors/test/steps/common.py

@@ -976,7 +976,7 @@ class LiveTests(Step):
                 # Add GCP credentials from the environment and point google to their location (also required for connection-retriever)
                 .with_new_file(
                     "/tmp/credentials.json",
-                    contents=os.getenv("GCP_INTEGRATION_TESTER_CREDENTIALS", ""),
+                    contents=os.getenv("GCP_PROD_DB_ACCESS_CREDENTIALS", ""),
                 )
                 .with_env_variable(
                     "GOOGLE_APPLICATION_CREDENTIALS", "/tmp/credentials.json"

airbyte_ops_mcp/cli/cloud.py

@@ -7,6 +7,7 @@ Commands:
     airbyte-ops cloud connector clear-version-override - Clear connector version override
     airbyte-ops cloud connector live-test - Run live validation tests on a connector
     airbyte-ops cloud connector regression-test - Run regression tests comparing connector versions
+    airbyte-ops cloud connector fetch-connection-config - Fetch connection config to local file
 """
 
 from __future__ import annotations
@@ -15,11 +16,15 @@ import json
 from pathlib import Path
 from typing import Annotated, Literal
 
+from airbyte_cdk.models.connector_metadata import MetadataFile
+from airbyte_cdk.utils.connector_paths import find_connector_root_from_name
+from airbyte_cdk.utils.docker import build_connector_image, verify_docker_installation
 from airbyte_protocol.models import ConfiguredAirbyteCatalog
 from cyclopts import App, Parameter
 
 from airbyte_ops_mcp.cli._base import app
 from airbyte_ops_mcp.cli._shared import print_error, print_json, print_success
+from airbyte_ops_mcp.cloud_admin.connection_config import fetch_connection_config
 from airbyte_ops_mcp.live_tests.ci_output import (
     generate_regression_report,
     get_report_summary,
@@ -52,6 +57,9 @@ from airbyte_ops_mcp.mcp.cloud_connector_versions import (
     set_cloud_connector_version_override,
 )
 
+# Path to connectors directory within the airbyte repo
+CONNECTORS_SUBDIR = Path("airbyte-integrations") / "connectors"
+
 # Create the cloud sub-app
 cloud_app = App(name="cloud", help="Airbyte Cloud operations.")
 app.command(cloud_app)
@@ -250,14 +258,83 @@ def _run_connector_command(
     }
 
 
+def _build_connector_image_from_source(
+    connector_name: str,
+    repo_root: Path | None = None,
+    tag: str = "dev",
+) -> str | None:
+    """Build a connector image from source code.
+
+    Args:
+        connector_name: Name of the connector (e.g., 'source-pokeapi').
+        repo_root: Optional path to the airbyte repo root. If not provided,
+            will attempt to auto-detect from current directory.
+        tag: Tag to apply to the built image (default: 'dev').
+
+    Returns:
+        The full image name with tag if successful, None if build fails.
+    """
+    if not verify_docker_installation():
+        print_error("Docker is not installed or not running")
+        return None
+
+    try:
+        connector_directory = find_connector_root_from_name(connector_name)
+    except FileNotFoundError:
+        if repo_root:
+            connector_directory = repo_root / CONNECTORS_SUBDIR / connector_name
+            if not connector_directory.exists():
+                print_error(f"Connector directory not found: {connector_directory}")
+                return None
+        else:
+            print_error(
+                f"Could not find connector '{connector_name}'. "
+                "Try providing --repo-root to specify the airbyte repo location."
+            )
+            return None
+
+    metadata_file_path = connector_directory / "metadata.yaml"
+    if not metadata_file_path.exists():
+        print_error(f"metadata.yaml not found at {metadata_file_path}")
+        return None
+
+    metadata = MetadataFile.from_file(metadata_file_path)
+    print_success(f"Building image for connector: {connector_name}")
+
+    built_image = build_connector_image(
+        connector_name=connector_name,
+        connector_directory=connector_directory,
+        metadata=metadata,
+        tag=tag,
+        no_verify=False,
+    )
+    print_success(f"Successfully built image: {built_image}")
+    return built_image
+
+
 @connector_app.command(name="live-test")
 def live_test(
     connector_image: Annotated[
-        str,
+        str | None,
         Parameter(
-            help="Full connector image name with tag (e.g., airbyte/source-github:1.0.0)."
+            help="Full connector image name with tag (e.g., airbyte/source-github:1.0.0). "
+            "Optional if connector_name or connection_id is provided."
         ),
-    ],
+    ] = None,
+    connector_name: Annotated[
+        str | None,
+        Parameter(
+            help="Connector name to build from source (e.g., 'source-pokeapi'). "
+            "If provided, builds the image locally with tag 'dev'."
+        ),
+    ] = None,
+    repo_root: Annotated[
+        str | None,
+        Parameter(
+            help="Path to the airbyte repo root. Required if connector_name is provided "
+            "and the repo cannot be auto-detected."
+        ),
+    ] = None,
     command: Annotated[
         Literal["spec", "check", "discover", "read"],
         Parameter(help="The Airbyte command to run."),
@@ -266,7 +343,8 @@ def live_test(
         str | None,
         Parameter(
             help="Airbyte Cloud connection ID to fetch config/catalog from. "
-            "Mutually exclusive with config-path/catalog-path."
+            "Mutually exclusive with config-path/catalog-path. "
+            "If provided, connector_image can be auto-detected."
         ),
     ] = None,
     config_path: Annotated[
@@ -292,6 +370,11 @@ def live_test(
     and validates the output. Results are written to the output directory and
     to GitHub Actions outputs if running in CI.
 
+    You can provide the connector image in three ways:
+    1. --connector-image: Use a pre-built image from Docker registry
+    2. --connector-name: Build the image locally from source code
+    3. --connection-id: Auto-detect from an Airbyte Cloud connection
+
     You can provide config/catalog either via file paths OR via a connection_id
     that fetches them from Airbyte Cloud.
     """
@@ -300,15 +383,32 @@ def live_test(
 
     cmd = Command(command)
 
-    if not ensure_image_available(connector_image):
-        print_error(f"Failed to pull connector image: {connector_image}")
-        write_github_output("success", False)
-        write_github_output("error", f"Failed to pull image: {connector_image}")
-        return
-
     config_file: Path | None = None
     catalog_file: Path | None = None
     state_file = Path(state_path) if state_path else None
+    resolved_connector_image: str | None = connector_image
+
+    # If connector_name is provided, build the image from source
+    if connector_name:
+        if connector_image:
+            print_error("Cannot specify both connector_image and connector_name")
+            write_github_output("success", False)
+            write_github_output(
+                "error", "Cannot specify both connector_image and connector_name"
+            )
+            return
+
+        repo_root_path = Path(repo_root) if repo_root else None
+        built_image = _build_connector_image_from_source(
+            connector_name=connector_name,
+            repo_root=repo_root_path,
+            tag="dev",
+        )
+        if not built_image:
+            write_github_output("success", False)
+            write_github_output("error", f"Failed to build image for {connector_name}")
+            return
+        resolved_connector_image = built_image
 
     if connection_id:
         if config_path or catalog_path:
@@ -330,12 +430,37 @@ def live_test(
             f"Fetched config for source: {connection_data.source_name} "
             f"with {len(connection_data.stream_names)} streams"
         )
+
+        if not resolved_connector_image and connection_data.connector_image:
+            resolved_connector_image = connection_data.connector_image
+            print_success(f"Auto-detected connector image: {resolved_connector_image}")
     else:
         config_file = Path(config_path) if config_path else None
         catalog_file = Path(catalog_path) if catalog_path else None
 
+    if not resolved_connector_image:
+        print_error(
+            "You must provide one of the following: a connector_image, a connector_name, "
+            "or a connection_id for a connection that has an associated connector image. "
+            "If using connection_id, ensure the connection has a connector image configured."
+        )
+        write_github_output("success", False)
+        write_github_output("error", "Missing connector image")
+        return
+
+    # If connector_name was provided, we just built the image locally and it is already
+    # available in Docker, so we skip the image availability check/pull. Only try to pull
+    # if we didn't just build it (i.e., using a pre-built image from registry).
+    if not connector_name and not ensure_image_available(resolved_connector_image):
+        print_error(f"Failed to pull connector image: {resolved_connector_image}")
+        write_github_output("success", False)
+        write_github_output(
+            "error", f"Failed to pull image: {resolved_connector_image}"
+        )
+        return
+
     result = _run_connector_command(
-        connector_image=connector_image,
+        connector_image=resolved_connector_image,
         command=cmd,
         output_dir=output_path,
         target_or_control=TargetOrControl.TARGET,
@@ -349,14 +474,14 @@ def live_test(
     write_github_outputs(
         {
             "success": result["success"],
-            "connector": connector_image,
+            "connector": resolved_connector_image,
             "command": command,
             "exit_code": result["exit_code"],
         }
     )
 
     write_test_summary(
-        connector_image=connector_image,
+        connector_image=resolved_connector_image,
         test_type="live-test",
         success=result["success"],
         results={
@@ -367,9 +492,9 @@ def live_test(
     )
 
     if result["success"]:
-        print_success(f"Live test passed for {connector_image}")
+        print_success(f"Live test passed for {resolved_connector_image}")
     else:
-        print_error(f"Live test failed for {connector_image}")
+        print_error(f"Live test failed for {resolved_connector_image}")
 
 
 def _run_with_optional_http_metrics(
@@ -451,17 +576,33 @@ def _run_with_optional_http_metrics(
 @connector_app.command(name="regression-test")
 def regression_test(
     target_image: Annotated[
-        str,
+        str | None,
         Parameter(
-            help="Target connector image (new version) with tag (e.g., airbyte/source-github:2.0.0)."
+            help="Target connector image (new version) with tag (e.g., airbyte/source-github:2.0.0). "
+            "Optional if connector_name is provided."
         ),
-    ],
+    ] = None,
     control_image: Annotated[
-        str,
+        str | None,
         Parameter(
-            help="Control connector image (baseline version) with tag (e.g., airbyte/source-github:1.0.0)."
+            help="Control connector image (baseline version) with tag (e.g., airbyte/source-github:1.0.0). "
+            "Optional if connection_id is provided (auto-detected from connection)."
         ),
-    ],
+    ] = None,
+    connector_name: Annotated[
+        str | None,
+        Parameter(
+            help="Connector name to build target image from source (e.g., 'source-pokeapi'). "
+            "If provided, builds the target image locally with tag 'dev'."
+        ),
+    ] = None,
+    repo_root: Annotated[
+        str | None,
+        Parameter(
+            help="Path to the airbyte repo root. Required if connector_name is provided "
+            "and the repo cannot be auto-detected."
+        ),
+    ] = None,
     command: Annotated[
         Literal["spec", "check", "discover", "read"],
         Parameter(help="The Airbyte command to run."),
@@ -470,7 +611,8 @@ def regression_test(
         str | None,
         Parameter(
             help="Airbyte Cloud connection ID to fetch config/catalog from. "
-            "Mutually exclusive with config-path/catalog-path."
+            "Mutually exclusive with config-path/catalog-path. "
+            "If provided, control_image can be auto-detected."
         ),
     ] = None,
     config_path: Annotated[
@@ -506,6 +648,14 @@ def regression_test(
     Results are written to the output directory and to GitHub Actions outputs
     if running in CI.
 
+    You can provide the target image in two ways:
+    1. --target-image: Use a pre-built image from Docker registry
+    2. --connector-name: Build the target image locally from source code
+
+    You can provide the control image in two ways:
+    1. --control-image: Use a pre-built image from Docker registry
+    2. --connection-id: Auto-detect from an Airbyte Cloud connection
+
     You can provide config/catalog either via file paths OR via a connection_id
     that fetches them from Airbyte Cloud.
     """
@@ -514,16 +664,33 @@ def regression_test(
 
     cmd = Command(command)
 
-    for image in [target_image, control_image]:
-        if not ensure_image_available(image):
-            print_error(f"Failed to pull connector image: {image}")
-            write_github_output("success", False)
-            write_github_output("error", f"Failed to pull image: {image}")
-            return
-
     config_file: Path | None = None
     catalog_file: Path | None = None
     state_file = Path(state_path) if state_path else None
+    resolved_target_image: str | None = target_image
+    resolved_control_image: str | None = control_image
+
+    # If connector_name is provided, build the target image from source
+    if connector_name:
+        if target_image:
+            print_error("Cannot specify both target_image and connector_name")
+            write_github_output("success", False)
+            write_github_output(
+                "error", "Cannot specify both target_image and connector_name"
+            )
+            return
+
+        repo_root_path = Path(repo_root) if repo_root else None
+        built_image = _build_connector_image_from_source(
+            connector_name=connector_name,
+            repo_root=repo_root_path,
+            tag="dev",
+        )
+        if not built_image:
+            write_github_output("success", False)
+            write_github_output("error", f"Failed to build image for {connector_name}")
+            return
+        resolved_target_image = built_image
 
     if connection_id:
         if config_path or catalog_path:
@@ -545,15 +712,53 @@ def regression_test(
             f"Fetched config for source: {connection_data.source_name} "
             f"with {len(connection_data.stream_names)} streams"
         )
+
+        # Auto-detect control_image from connection if not provided
+        if not resolved_control_image and connection_data.connector_image:
+            resolved_control_image = connection_data.connector_image
+            print_success(f"Auto-detected control image: {resolved_control_image}")
     else:
         config_file = Path(config_path) if config_path else None
         catalog_file = Path(catalog_path) if catalog_path else None
 
+    # Validate that we have both images
+    if not resolved_target_image:
+        print_error(
+            "You must provide one of the following: a target_image or a connector_name "
+            "to build the target image from source."
+        )
+        write_github_output("success", False)
+        write_github_output("error", "No target image specified")
+        return
+
+    if not resolved_control_image:
+        print_error(
+            "You must provide one of the following: a control_image or a connection_id "
+            "for a connection that has an associated connector image."
+        )
+        write_github_output("success", False)
+        write_github_output("error", "No control image specified")
+        return
+
+    # Pull images if they weren't just built locally
+    # If connector_name was provided, we just built the target image locally
+    if not connector_name and not ensure_image_available(resolved_target_image):
+        print_error(f"Failed to pull target connector image: {resolved_target_image}")
+        write_github_output("success", False)
+        write_github_output("error", f"Failed to pull image: {resolved_target_image}")
+        return
+
+    if not ensure_image_available(resolved_control_image):
+        print_error(f"Failed to pull control connector image: {resolved_control_image}")
+        write_github_output("success", False)
+        write_github_output("error", f"Failed to pull image: {resolved_control_image}")
+        return
+
     target_output = output_path / "target"
     control_output = output_path / "control"
 
     target_result = _run_with_optional_http_metrics(
-        connector_image=target_image,
+        connector_image=resolved_target_image,
         command=cmd,
         output_dir=target_output,
         target_or_control=TargetOrControl.TARGET,
@@ -564,7 +769,7 @@ def regression_test(
     )
 
     control_result = _run_with_optional_http_metrics(
-        connector_image=control_image,
+        connector_image=resolved_control_image,
         command=cmd,
         output_dir=control_output,
         target_or_control=TargetOrControl.CONTROL,
@@ -589,8 +794,8 @@ def regression_test(
     write_github_outputs(
         {
             "success": both_succeeded and not regression_detected,
-            "target_image": target_image,
-            "control_image": control_image,
+            "target_image": resolved_target_image,
+            "control_image": resolved_control_image,
             "command": command,
             "target_exit_code": target_result["exit_code"],
             "control_exit_code": control_result["exit_code"],
@@ -601,8 +806,8 @@ def regression_test(
     write_json_output("regression_report", combined_result)
 
     report_path = generate_regression_report(
-        target_image=target_image,
-        control_image=control_image,
+        target_image=resolved_target_image,
+        control_image=resolved_control_image,
         command=command,
         target_result=target_result,
         control_result=control_result,
@@ -614,8 +819,74 @@ def regression_test(
     write_github_summary(summary)
 
     if regression_detected:
-        print_error(f"Regression detected between {target_image} and {control_image}")
+        print_error(
+            f"Regression detected between {resolved_target_image} and {resolved_control_image}"
+        )
     elif both_succeeded:
-        print_success(f"Regression test passed for {target_image} vs {control_image}")
+        print_success(
+            f"Regression test passed for {resolved_target_image} vs {resolved_control_image}"
+        )
+    else:
+        print_error(
+            f"Both versions failed for {resolved_target_image} vs {resolved_control_image}"
+        )
+
+
+@connector_app.command(name="fetch-connection-config")
+def fetch_connection_config_cmd(
+    connection_id: Annotated[
+        str,
+        Parameter(help="The UUID of the Airbyte Cloud connection."),
+    ],
+    output_path: Annotated[
+        str | None,
+        Parameter(
+            help="Path to output file or directory. "
+            "If directory, writes connection-<id>-config.json. "
+            "Default: ./connection-<id>-config.json"
+        ),
+    ] = None,
+    with_secrets: Annotated[
+        bool,
+        Parameter(
+            name="--with-secrets",
+            negative="--no-secrets",
+            help="If set, fetches unmasked secrets from the internal database. "
+            "Requires GCP_PROD_DB_ACCESS_CREDENTIALS env var or `gcloud auth application-default login`. "
+            "Must be used with --oc-issue-url.",
+        ),
+    ] = False,
+    oc_issue_url: Annotated[
+        str | None,
+        Parameter(
+            help="OC issue URL for audit logging. Required when using --with-secrets."
+        ),
+    ] = None,
+) -> None:
+    """Fetch connection configuration from Airbyte Cloud to a local file.
+
+    This command retrieves the source configuration for a given connection ID
+    and writes it to a local JSON file.
+
+    Requires authentication via AIRBYTE_CLOUD_CLIENT_ID and
+    AIRBYTE_CLOUD_CLIENT_SECRET environment variables.
+
+    When --with-secrets is specified, the command fetches unmasked secrets from
+    the internal database using the connection-retriever. This additionally requires:
+    - An OC issue URL for audit logging (--oc-issue-url)
+    - GCP credentials via `GCP_PROD_DB_ACCESS_CREDENTIALS` env var or `gcloud auth application-default login`
+    - If `CI=true`: expects `cloud-sql-proxy` running on localhost, or
+      direct network access to the Cloud SQL instance.
+    """
+    path = Path(output_path) if output_path else None
+    result = fetch_connection_config(
+        connection_id=connection_id,
+        output_path=path,
+        with_secrets=with_secrets,
+        oc_issue_url=oc_issue_url,
+    )
+    if result.success:
+        print_success(result.message)
     else:
-        print_error(f"Both versions failed for {target_image} vs {control_image}")
+        print_error(result.message)
+    print_json(result.model_dump())