@adaptive-ds/zitadel-cli 0.2.0 → 0.3.0

package/README.md

@@ -1,7 +1,7 @@
 # @adaptive-ds/zitadel-cli
 
-Typed ZITADEL API client and CLI for stable APIs, OIDC/OAuth protocol operations, and two deliberately
-isolated legacy v1 identity-provider operations.
+Typed ZITADEL API client and CLI for stable APIs, OIDC/OAuth protocol operations, and deliberately isolated
+legacy v1 compatibility operations, including user project-role grants.
 
 [![npm](https://img.shields.io/npm/v/%40adaptive-ds%2Fzitadel-cli)](https://www.npmjs.com/package/@adaptive-ds/zitadel-cli)
 [![license](https://img.shields.io/npm/l/%40adaptive-ds%2Fzitadel-cli)](./LICENSE)
@@ -22,9 +22,11 @@ The catalog contains non-deprecated stable v2 services for:
 - users
 
 The package also provides OIDC discovery, OAuth device authorization, token requests, and UserInfo requests.
-`legacy_v1` is a compatibility boundary, not general v1 support: only `AdminService.ListIDPs` and
-`AdminService.AddGoogleProvider` are included. Beta, alpha, deprecated, and other v1 methods are excluded and
-cannot be called through the catalog.
+`legacy_v1` is a compatibility boundary, not general v1 support: the catalog includes only
+`AdminService.ListIDPs` and `AdminService.AddGoogleProvider`. The separately routed Management v1 user-grant
+adapters are exposed for the shared-user workflow described in
+[`docs/central-configuration-and-user-access.md`](./docs/central-configuration-and-user-access.md). Beta, alpha,
+deprecated, and other v1 methods are excluded and cannot be called through the catalog.
 
 This is a client library and command-line tool, not a ZITADEL server or an interactive login browser. Review
 the official [ZITADEL API reference](https://zitadel.com/docs/reference/api) and the output of `api describe`
@@ -60,7 +62,10 @@ ZITADEL_TOKEN=replace-with-a-bearer-token
 ```
 
 For every setting, the precedence is explicit CLI flag/library option, then the process environment, then the
-explicitly selected `.env` file passed with `--env-file` or `envFile`. There is **no implicit `.env` loading**.
+explicitly selected `.env` file passed with `--env-file` or `envFile`. Central project/profile configuration is
+consulted after those sources, and defaults are last. There is **no implicit `.env` loading**. The complete central
+layout, selection rules, credential lookup, and user-grant workflow are documented in
+[`docs/central-configuration-and-user-access.md`](./docs/central-configuration-and-user-access.md).
 For example:
 
 ```sh
@@ -129,13 +134,15 @@ are:
 - `api`: list, describe, and call the policy-filtered catalog.
 - `actions`: targets, executions, execution functions/methods/services, and public keys.
 - `applications`: application lifecycle, keys, and client-secret operations.
+- `credentials`: local shared test-user credential lookup.
 - `internal-permissions`: administrator lifecycle operations.
 - `organizations`: organization lifecycle, domains, validation, and metadata.
 - `projects`: project lifecycle, grants, and roles.
 - `users`: user lifecycle, metadata, IDP links, OTP/TOTP/U2F/passkeys, recovery codes, secrets, keys, personal
-  access tokens, invite codes, and verification operations.
+  access tokens, invite codes, verification operations, and `grants add|list|update|remove` for project-role
+  assignments.
 - `protocol`: discovery, device authorization, token, and UserInfo.
-- `legacy-v1`: the two approved compatibility operations only.
+- `legacy-v1`: the two approved AdminService compatibility operations. User grants are under `users grants`.
 
 All generated API groups use the same request/configuration pattern:
 
@@ -207,7 +214,8 @@ zitadel-cli legacy-v1 add-google-provider --request-file ./requests/add-google-p
 ```
 
 They use the generated v1 protobuf shapes but are not mixed into the v2 service exports. Other v1 methods,
-deprecated methods, alpha methods, and beta methods are rejected by the policy-filtered catalog.
+deprecated methods, alpha methods, and beta methods are rejected by the policy-filtered catalog. User-grant adapters
+are available from `@adaptive-ds/zitadel-cli/legacy_v1` but are intentionally not catalog routes.
 
 ## Library
 
@@ -262,6 +270,40 @@ if (!discovery.success) {
 }
 ```
 
+Configuration and central credentials use the same precedence and file validation as the CLI. The loaders are
+available from the root export or the `@adaptive-ds/zitadel-cli/config` entry point and return
+`PromiseResult<...>` values:
+
+```ts
+import {
+  credentialsConfigRead,
+  testUserIdResolve,
+  zitadelConfigResolve,
+} from "@adaptive-ds/zitadel-cli"
+
+const selection = { project: "application" }
+const config = await zitadelConfigResolve(selection)
+if (!config.success) {
+  console.error(`${config.op}: ${config.errorMessage}`)
+} else {
+  console.log(config.data.baseUrl, config.data.projectId)
+}
+
+const credentials = await credentialsConfigRead(selection)
+if (!credentials.success) {
+  console.error(`${credentials.op}: ${credentials.errorMessage}`)
+} else {
+  console.log(credentials.data.testUsers.admin?.username)
+}
+
+const userId = await testUserIdResolve({ ...selection, user: "admin" })
+if (userId.success) console.log(userId.data)
+```
+
+`zitadelConfigResolve` returns `ZitadelConfigResolution`, `credentialsConfigRead` returns `CredentialsConfig`, and
+`testUserIdResolve` returns the selected test user's ID. Pass `profile`, `project`, `envFile`, or an explicit `env`
+object to the loaders when a consumer needs to select a different central configuration context.
+
 `zitadelConfigCreate`, `apiCall`, `apiCatalogList`, `apiMethodDescribe`, `deviceAuthorizationRequest`,
 `oauthTokenRequest`, and `oidcUserInfo` are exported for composing the same workflows without the CLI. Inject a
 custom `fetch` or Connect transport in library options when tests or a custom runtime need one.

package/dist/cli/credentialsGetCommand.d.ts

@@ -0,0 +1,3 @@
+import type { ApplicationContext, Command } from "@stricli/core";
+export declare const credentialsGetCommand: Command<ApplicationContext>;
+//# sourceMappingURL=credentialsGetCommand.d.ts.map

package/dist/cli/credentialsGetCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialsGetCommand.d.ts","sourceRoot":"","sources":["../../src/cli/credentialsGetCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAgDhE,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC,kBAAkB,CAyD5D,CAAA"}

package/dist/cli/credentialsGetCommand.js

@@ -0,0 +1,87 @@
+import { buildCommand } from "@stricli/core";
+import { credentialsConfigRead } from "../config/index.js";
+const credentialsGetCommandFlags = {
+    envFile: {
+        brief: "Explicit .env file path",
+        kind: "parsed",
+        optional: true,
+        parse: (input) => input,
+        placeholder: "PATH",
+    },
+    field: {
+        brief: "Return one credential field as a raw value",
+        kind: "enum",
+        optional: true,
+        values: ["username", "password", "userId"],
+    },
+    output: {
+        brief: "Return the complete credential entry",
+        kind: "enum",
+        optional: true,
+        values: ["json"],
+    },
+    profile: {
+        brief: "Configuration profile (overrides environment, env file, and project)",
+        kind: "parsed",
+        optional: true,
+        parse: (input) => input,
+        placeholder: "NAME",
+    },
+    project: {
+        brief: "Named project configuration",
+        kind: "parsed",
+        optional: true,
+        parse: (input) => input,
+        placeholder: "NAME",
+    },
+};
+export const credentialsGetCommand = buildCommand({
+    func: async function (flags, testUserName) {
+        const op = "credentialsGetCommand";
+        if (flags.field === undefined && flags.output !== "json") {
+            this.process.stderr.write(`${op}: Specify --field or --output json\n`);
+            this.process.exitCode = 1;
+            return;
+        }
+        const credentialsResult = await credentialsConfigRead({
+            env: this.process.env,
+            envFile: flags.envFile,
+            profile: flags.profile,
+            project: flags.project,
+        });
+        if (!credentialsResult.success) {
+            this.process.stderr.write(`${credentialsResult.errorMessage}\n`);
+            this.process.exitCode = 1;
+            return;
+        }
+        const testUser = credentialsResult.data.testUsers[testUserName];
+        if (testUser === undefined) {
+            this.process.stderr.write(`The test user "${testUserName}" was not found in the selected credentials\n`);
+            this.process.exitCode = 1;
+            return;
+        }
+        if (flags.field !== undefined) {
+            this.process.stdout.write(`${testUser[flags.field]}\n`);
+            return;
+        }
+        this.process.stdout.write(`${JSON.stringify(testUser)}\n`);
+    },
+    parameters: {
+        flags: credentialsGetCommandFlags,
+        positional: {
+            kind: "tuple",
+            parameters: [
+                {
+                    brief: "Named test user",
+                    parse: (input) => input,
+                    placeholder: "TEST-USER",
+                },
+            ],
+        },
+    },
+    docs: {
+        brief: "Get a local test-user credential",
+        fullDescription: "Reads credentials from the central local configuration. Use --field for a raw username, password, or userId; use --output json for the complete entry. No token or network access is required.",
+    },
+});
+//# sourceMappingURL=credentialsGetCommand.js.map

package/dist/cli/credentialsGetCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialsGetCommand.js","sourceRoot":"","sources":["../../src/cli/credentialsGetCommand.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAU1D,MAAM,0BAA0B,GAAG;IACjC,OAAO,EAAE;QACP,KAAK,EAAE,yBAAyB;QAChC,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,MAAM;KACpB;IACD,KAAK,EAAE;QACL,KAAK,EAAE,4CAA4C;QACnD,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC;KAC3C;IACD,MAAM,EAAE;QACN,KAAK,EAAE,sCAAsC;QAC7C,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,CAAC,MAAM,CAAC;KACjB;IACD,OAAO,EAAE;QACP,KAAK,EAAE,sEAAsE;QAC7E,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,MAAM;KACpB;IACD,OAAO,EAAE;QACP,KAAK,EAAE,6BAA6B;QACpC,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,MAAM;KACpB;CACO,CAAA;AAEV,MAAM,CAAC,MAAM,qBAAqB,GAAgC,YAAY,CAI5E;IACA,IAAI,EAAE,KAAK,WAAqC,KAAiC,EAAE,YAAoB;QACrG,MAAM,EAAE,GAAG,uBAAuB,CAAA;QAClC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACzD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAA;YACtE,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,qBAAqB,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAA;QACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,iBAAiB,CAAC,YAAY,IAAI,CAAC,CAAA;YAChE,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC/D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,YAAY,+CAA+C,CAAC,CAAA;YACxG,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACvD,OAAM;QACR,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC5D,CAAC;IACD,UAAU,EAAE;QACV,KAAK,EAAE,0BAA0B;QACjC,UAAU,EAAE;YACV,IAAI,EAAE,OAAO;YACb,UAAU,EAAE;gBACV;oBACE,KAAK,EAAE,iBAAiB;oBACxB,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;oBAC/B,WAAW,EAAE,WAAW;iBACzB;aACF;SACF;KACF;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,kCAAkC;QACzC,eAAe,EACb,gMAAgM;KACnM;CACF,CAAC,CAAA"}

package/dist/cli/endpointCommandBuild.d.ts

@@ -9,6 +9,10 @@ type EndpointCommandCallOptions<Request> = {
     readonly baseUrl?: string;
     readonly env?: Readonly<Record<string, string | undefined>>;
     readonly envFile?: string;
+    readonly organizationId?: string;
+    readonly profile?: string;
+    readonly project?: string;
+    readonly projectId?: string;
     readonly request: Request;
     readonly token?: string;
 };

package/dist/cli/endpointCommandBuild.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"endpointCommandBuild.d.ts","sourceRoot":"","sources":["../../src/cli/endpointCommandBuild.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACnE,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAahE,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB,CAAA;AAED,KAAK,0BAA0B,CAAC,OAAO,IAAI;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB,CAAA;AAED,KAAK,yBAAyB,CAC5B,OAAO,EACP,cAAc,SAAS,WAAW,EAClC,QAAQ,SAAS,YAAY,CAAC,cAAc,CAAC,IAC3C;IACF,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,0BAA0B,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,CAAA;IACxF,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;KACjC,CAAA;IACD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,aAAa,CAAC,OAAO,CAAC,CAAA;IAC9E,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;CACxC,CAAA;AA6CD,wBAAgB,oBAAoB,CAClC,OAAO,EACP,cAAc,SAAS,WAAW,EAClC,QAAQ,SAAS,YAAY,CAAC,cAAc,CAAC,EAC7C,UAAU,EAAE,yBAAyB,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAiDvG"}
+{"version":3,"file":"endpointCommandBuild.d.ts","sourceRoot":"","sources":["../../src/cli/endpointCommandBuild.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACnE,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAiBhE,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB,CAAA;AAED,KAAK,0BAA0B,CAAC,OAAO,IAAI;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB,CAAA;AAED,KAAK,yBAAyB,CAC5B,OAAO,EACP,cAAc,SAAS,WAAW,EAClC,QAAQ,SAAS,YAAY,CAAC,cAAc,CAAC,IAC3C;IACF,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,0BAA0B,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,CAAA;IACxF,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;KACjC,CAAA;IACD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,aAAa,CAAC,OAAO,CAAC,CAAA;IAC9E,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;CACxC,CAAA;AAyED,wBAAgB,oBAAoB,CAClC,OAAO,EACP,cAAc,SAAS,WAAW,EAClC,QAAQ,SAAS,YAAY,CAAC,cAAc,CAAC,EAC7C,UAAU,EAAE,yBAAyB,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAqDvG"}

package/dist/cli/endpointCommandBuild.js

@@ -16,6 +16,13 @@ const endpointCommandFlags = {
         parse: (input) => input,
         placeholder: "PATH",
     },
+    organizationId: {
+        brief: "Organization ID (overrides environment and env file)",
+        kind: "parsed",
+        optional: true,
+        parse: (input) => input,
+        placeholder: "ID",
+    },
     output: {
         brief: "Output format",
         default: "json",
@@ -35,6 +42,27 @@ const endpointCommandFlags = {
         parse: (input) => input,
         placeholder: "JSON",
     },
+    profile: {
+        brief: "Configuration profile (overrides environment, env file, and project)",
+        kind: "parsed",
+        optional: true,
+        parse: (input) => input,
+        placeholder: "NAME",
+    },
+    project: {
+        brief: "Named project configuration",
+        kind: "parsed",
+        optional: true,
+        parse: (input) => input,
+        placeholder: "NAME",
+    },
+    projectId: {
+        brief: "Project ID (overrides environment and env file)",
+        kind: "parsed",
+        optional: true,
+        parse: (input) => input,
+        placeholder: "ID",
+    },
     token: {
         brief: "Bearer token (overrides environment and env file)",
         kind: "parsed",
@@ -58,6 +86,10 @@ export function endpointCommandBuild(definition) {
             baseUrl: flags.baseUrl,
             env: this.process.env,
             envFile: flags.envFile,
+            organizationId: flags.organizationId,
+            profile: flags.profile,
+            project: flags.project,
+            projectId: flags.projectId,
             request: requestResult.data,
             token: flags.token,
         });

package/dist/cli/endpointCommandBuild.js.map

@@ -1 +1 @@
-{"version":3,"file":"endpointCommandBuild.js","sourceRoot":"","sources":["../../src/cli/endpointCommandBuild.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAE/D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,gBAAgB,EAA4B,MAAM,oBAAoB,CAAA;AAwC/E,MAAM,oBAAoB,GAAG;IAC3B,OAAO,EAAE;QACP,KAAK,EAAE,uDAAuD;QAC9D,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,KAAK;KACnB;IACD,OAAO,EAAE;QACP,KAAK,EAAE,yBAAyB;QAChC,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,MAAM;KACpB;IACD,MAAM,EAAE;QACN,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB;IACD,WAAW,EAAE;QACX,KAAK,EAAE,4CAA4C;QACnD,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,MAAM;KACpB;IACD,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,MAAM;KACpB;IACD,KAAK,EAAE;QACL,KAAK,EAAE,mDAAmD;QAC1D,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,OAAO;KACrB;CACO,CAAA;AAEV,MAAM,UAAU,oBAAoB,CAIlC,UAAwE;IACxE,MAAM,kBAAkB,GAAG,KAAK,WAAqC,KAA2B;QAC9F,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC;YAClD,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,IAAI,EAAE,KAAK,CAAC,WAAW;SACxB,CAAC,CAAA;QACF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,YAAY,IAAI,CAAC,CAAA;YAC5D,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;YACnC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,aAAa,CAAC,IAAI;YAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAA;YACrD,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QACzF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,CAAA;YAC9E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,YAAY,IAAI,CAAC,CAAA;YACpD,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,IAAI,CAAC,CAAA;IACnD,CAAC,CAAA;IAED,OAAO,YAAY,CAA+C;QAChE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,GAAG,oBAAoB;gBACvB,WAAW,EAAE;oBACX,GAAG,oBAAoB,CAAC,WAAW;oBACnC,KAAK,EAAE,kCAAkC,UAAU,CAAC,WAAW,wBAAwB;iBACxF;aACF;SACF;QACD,IAAI,EAAE,UAAU,CAAC,IAAI;KACtB,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"endpointCommandBuild.js","sourceRoot":"","sources":["../../src/cli/endpointCommandBuild.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAE/D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,gBAAgB,EAA4B,MAAM,oBAAoB,CAAA;AAgD/E,MAAM,oBAAoB,GAAG;IAC3B,OAAO,EAAE;QACP,KAAK,EAAE,uDAAuD;QAC9D,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,KAAK;KACnB;IACD,OAAO,EAAE;QACP,KAAK,EAAE,yBAAyB;QAChC,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,MAAM;KACpB;IACD,cAAc,EAAE;QACd,KAAK,EAAE,sDAAsD;QAC7D,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,IAAI;KAClB;IACD,MAAM,EAAE;QACN,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB;IACD,WAAW,EAAE;QACX,KAAK,EAAE,4CAA4C;QACnD,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,MAAM;KACpB;IACD,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,MAAM;KACpB;IACD,OAAO,EAAE;QACP,KAAK,EAAE,sEAAsE;QAC7E,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,MAAM;KACpB;IACD,OAAO,EAAE;QACP,KAAK,EAAE,6BAA6B;QACpC,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,MAAM;KACpB;IACD,SAAS,EAAE;QACT,KAAK,EAAE,iDAAiD;QACxD,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,IAAI;KAClB;IACD,KAAK,EAAE;QACL,KAAK,EAAE,mDAAmD;QAC1D,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,WAAW,EAAE,OAAO;KACrB;CACO,CAAA;AAEV,MAAM,UAAU,oBAAoB,CAIlC,UAAwE;IACxE,MAAM,kBAAkB,GAAG,KAAK,WAAqC,KAA2B;QAC9F,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC;YAClD,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,IAAI,EAAE,KAAK,CAAC,WAAW;SACxB,CAAC,CAAA;QACF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,YAAY,IAAI,CAAC,CAAA;YAC5D,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;YACnC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,aAAa,CAAC,IAAI;YAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAA;YACrD,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QACzF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,CAAA;YAC9E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,YAAY,IAAI,CAAC,CAAA;YACpD,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,IAAI,CAAC,CAAA;IACnD,CAAC,CAAA;IAED,OAAO,YAAY,CAA+C;QAChE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,GAAG,oBAAoB;gBACvB,WAAW,EAAE;oBACX,GAAG,oBAAoB,CAAC,WAAW;oBACnC,KAAK,EAAE,kCAAkC,UAAU,CAAC,WAAW,wBAAwB;iBACxF;aACF;SACF;QACD,IAAI,EAAE,UAAU,CAAC,IAAI;KACtB,CAAC,CAAA;AACJ,CAAC"}

package/dist/cli/usersGrantsAddCommand.d.ts

@@ -0,0 +1,3 @@
+import type { ApplicationContext, Command } from "@stricli/core";
+export declare const usersGrantsAddCommand: Command<ApplicationContext>;
+//# sourceMappingURL=usersGrantsAddCommand.d.ts.map

package/dist/cli/usersGrantsAddCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usersGrantsAddCommand.d.ts","sourceRoot":"","sources":["../../src/cli/usersGrantsAddCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAyBhE,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC,kBAAkB,CAuG5D,CAAA"}

package/dist/cli/usersGrantsAddCommand.js

@@ -0,0 +1,100 @@
+import { buildCommand } from "@stricli/core";
+import { userGrantServiceAddUserGrant, } from "../legacy_v1/userGrantServiceAddUserGrant.js";
+import { usersGrantsCommandSupport } from "./usersGrantsCommandSupport.js";
+export const usersGrantsAddCommand = buildCommand({
+    func: async function (flags) {
+        const requestResult = await usersGrantsCommandSupport.requestParse({
+            file: flags.requestFile,
+            json: flags.requestJson,
+        });
+        if (!requestResult.success) {
+            this.process.stderr.write(`${requestResult.errorMessage}\n`);
+            this.process.exitCode = 1;
+            return;
+        }
+        if (requestResult.data !== undefined && (flags.roleKey !== undefined || flags.roleKeys !== undefined)) {
+            this.process.stderr.write("Do not combine --request-json/--request-file with role-key flags\n");
+            this.process.exitCode = 1;
+            return;
+        }
+        const userIdResult = await usersGrantsCommandSupport.userIdResolve({
+            env: this.process.env,
+            envFile: flags.envFile,
+            profile: flags.profile,
+            project: flags.project,
+            user: flags.user,
+            userId: flags.userId,
+        });
+        if (!userIdResult.success) {
+            this.process.stderr.write(`${userIdResult.errorMessage}\n`);
+            this.process.exitCode = 1;
+            return;
+        }
+        const configResult = await usersGrantsCommandSupport.configCreate({
+            baseUrl: flags.baseUrl,
+            env: this.process.env,
+            envFile: flags.envFile,
+            organizationId: flags.organizationId,
+            profile: flags.profile,
+            project: flags.project,
+            projectId: flags.projectId,
+            token: flags.token,
+        });
+        if (!configResult.success) {
+            this.process.stderr.write(`${configResult.errorMessage}\n`);
+            this.process.exitCode = 1;
+            return;
+        }
+        let request;
+        if (requestResult.data !== undefined) {
+            request = requestResult.data;
+        }
+        else {
+            if (configResult.data.projectId === undefined) {
+                this.process.stderr.write("Specify --project-id or select a project with a project ID\n");
+                this.process.exitCode = 1;
+                return;
+            }
+            const roleKeysResult = usersGrantsCommandSupport.roleKeysParse({
+                roleKey: flags.roleKey,
+                roleKeys: flags.roleKeys,
+            });
+            if (!roleKeysResult.success) {
+                this.process.stderr.write(`${roleKeysResult.errorMessage}\n`);
+                this.process.exitCode = 1;
+                return;
+            }
+            request = { projectId: configResult.data.projectId, roleKeys: roleKeysResult.data };
+        }
+        const result = await userGrantServiceAddUserGrant({
+            config: configResult.data,
+            request,
+            userId: userIdResult.data,
+        });
+        if (!result.success) {
+            this.process.stderr.write(`${result.errorMessage}\n`);
+            this.process.exitCode = 1;
+            return;
+        }
+        const serialized = usersGrantsCommandSupport.serialize(result.data, flags.output);
+        if (!serialized.success) {
+            this.process.stderr.write(`${serialized.errorMessage}\n`);
+            this.process.exitCode = 1;
+            return;
+        }
+        this.process.stdout.write(`${serialized.data}\n`);
+    },
+    parameters: {
+        flags: {
+            ...usersGrantsCommandSupport.commonFlags,
+            ...usersGrantsCommandSupport.rawRequestFlags,
+            ...usersGrantsCommandSupport.roleFlags,
+            ...usersGrantsCommandSupport.userFlags,
+        },
+    },
+    docs: {
+        brief: "Add a project-role assignment to a user",
+        fullDescription: "Use --user TEST-USER for a central test-user alias or --user-id ID for an explicit user. The structured form requires --project-id (or a selected project) and one or more role keys. --request-json and --request-file send a raw Management v1 request body.",
+    },
+});
+//# sourceMappingURL=usersGrantsAddCommand.js.map

package/dist/cli/usersGrantsAddCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usersGrantsAddCommand.js","sourceRoot":"","sources":["../../src/cli/usersGrantsAddCommand.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EACL,4BAA4B,GAE7B,MAAM,8CAA8C,CAAA;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAmB1E,MAAM,CAAC,MAAM,qBAAqB,GAAgC,YAAY,CAI5E;IACA,IAAI,EAAE,KAAK,WAAqC,KAAiC;QAC/E,MAAM,aAAa,GAAG,MAAM,yBAAyB,CAAC,YAAY,CAAC;YACjE,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,IAAI,EAAE,KAAK,CAAC,WAAW;SACxB,CAAC,CAAA;QACF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,YAAY,IAAI,CAAC,CAAA;YAC5D,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QACD,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;YACtG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAA;YAC/F,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,aAAa,CAAC;YACjE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAA;QACF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,YAAY,IAAI,CAAC,CAAA;YAC3D,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,YAAY,CAAC;YAChE,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAA;QACF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,YAAY,IAAI,CAAC,CAAA;YAC3D,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,IAAI,OAA4C,CAAA;QAChD,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,GAAG,aAAa,CAAC,IAA2C,CAAA;QACrE,CAAC;aAAM,CAAC;YACN,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAA;gBACzF,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;gBACzB,OAAM;YACR,CAAC;YACD,MAAM,cAAc,GAAG,yBAAyB,CAAC,aAAa,CAAC;gBAC7D,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAA;YACF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,YAAY,IAAI,CAAC,CAAA;gBAC7D,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;gBACzB,OAAM;YACR,CAAC;YACD,OAAO,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAI,EAAE,CAAA;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC;YAChD,MAAM,EAAE,YAAY,CAAC,IAAI;YACzB,OAAO;YACP,MAAM,EAAE,YAAY,CAAC,IAAI;SAC1B,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAA;YACrD,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QACD,MAAM,UAAU,GAAG,yBAAyB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QACjF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,YAAY,IAAI,CAAC,CAAA;YACzD,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,IAAI,CAAC,CAAA;IACnD,CAAC;IACD,UAAU,EAAE;QACV,KAAK,EAAE;YACL,GAAG,yBAAyB,CAAC,WAAW;YACxC,GAAG,yBAAyB,CAAC,eAAe;YAC5C,GAAG,yBAAyB,CAAC,SAAS;YACtC,GAAG,yBAAyB,CAAC,SAAS;SACvC;KACF;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,yCAAyC;QAChD,eAAe,EACb,gQAAgQ;KACnQ;CACF,CAAC,CAAA"}

package/dist/cli/usersGrantsCommandSupport.d.ts

@@ -0,0 +1,169 @@
+import { type PromiseResult, type Result } from "#result";
+import { type ZitadelConfigCreateOptions } from "../config/zitadelConfigCreate.js";
+import type { ZitadelConfigEnvironment } from "../config/zitadelConfigPaths.js";
+type UserGrantsCommandConfigOptions = Omit<ZitadelConfigCreateOptions, "config"> & {
+    readonly env?: ZitadelConfigEnvironment;
+};
+type UserGrantsCommandUserOptions = {
+    readonly env?: ZitadelConfigEnvironment;
+    readonly envFile?: string;
+    readonly profile?: string;
+    readonly project?: string;
+    readonly user?: string;
+    readonly userId?: string;
+};
+type UserGrantsCommandRequestOptions = {
+    readonly file?: string;
+    readonly json?: string;
+};
+type UserGrantsCommandRoleOptions = {
+    readonly roleKey?: readonly string[];
+    readonly roleKeys?: readonly string[];
+};
+export declare const usersGrantsCommandSupport: {
+    commonFlags: {
+        readonly baseUrl: {
+            readonly brief: "ZITADEL base URL (overrides environment and env file)";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "URL";
+        };
+        readonly envFile: {
+            readonly brief: "Explicit .env file path";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "PATH";
+        };
+        readonly organizationId: {
+            readonly brief: "Organization ID (overrides environment and env file)";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "ID";
+        };
+        readonly output: {
+            readonly brief: "Output format";
+            readonly default: "json";
+            readonly kind: "enum";
+            readonly values: readonly ["json", "yaml"];
+        };
+        readonly profile: {
+            readonly brief: "Configuration profile (overrides environment, env file, and project)";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "NAME";
+        };
+        readonly project: {
+            readonly brief: "Named project configuration";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "NAME";
+        };
+        readonly projectId: {
+            readonly brief: "Project ID (overrides environment and env file)";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "ID";
+        };
+        readonly token: {
+            readonly brief: "Bearer token (overrides environment and env file)";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "TOKEN";
+        };
+    };
+    configCreate: (options: UserGrantsCommandConfigOptions) => PromiseResult<{
+        baseUrl: string;
+        organizationId?: string | undefined;
+        projectId?: string | undefined;
+        token: string;
+    }>;
+    grantFlags: {
+        readonly grantId: {
+            readonly brief: "User-grant ID";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "ID";
+        };
+    };
+    listFlags: {
+        readonly limit: {
+            readonly brief: "Maximum number of grants to return";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "NUMBER";
+        };
+        readonly offset: {
+            readonly brief: "Number of grants to skip";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "NUMBER";
+        };
+    };
+    numberParse: (value: string | undefined, name: string, fallback: number) => Result<number>;
+    rawRequestFlags: {
+        readonly requestFile: {
+            readonly brief: "Read the complete Management v1 JSON request from a file";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "PATH";
+        };
+        readonly requestJson: {
+            readonly brief: "Provide the complete Management v1 JSON request";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "JSON";
+        };
+    };
+    requestParse: (options: UserGrantsCommandRequestOptions) => PromiseResult<Record<string, unknown> | undefined>;
+    roleFlags: {
+        readonly roleKey: {
+            readonly brief: "Project role key; repeat the flag or provide comma-separated values";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "ROLE";
+            readonly variadic: ",";
+        };
+        readonly roleKeys: {
+            readonly brief: "Project role keys; repeat the flag or provide comma-separated values";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "ROLE";
+            readonly variadic: ",";
+        };
+    };
+    roleKeysParse: (options: UserGrantsCommandRoleOptions) => Result<readonly string[]>;
+    serialize: (value: unknown, format: "json" | "yaml") => Result<string>;
+    userFlags: {
+        readonly user: {
+            readonly brief: "Named test-user alias from the selected credentials";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "TEST-USER";
+        };
+        readonly userId: {
+            readonly brief: "Explicit ZITADEL user ID";
+            readonly kind: "parsed";
+            readonly optional: true;
+            readonly parse: (input: string) => string;
+            readonly placeholder: "ID";
+        };
+    };
+    userIdResolve: (options: UserGrantsCommandUserOptions) => PromiseResult<string>;
+};
+export {};
+//# sourceMappingURL=usersGrantsCommandSupport.d.ts.map

package/dist/cli/usersGrantsCommandSupport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usersGrantsCommandSupport.d.ts","sourceRoot":"","sources":["../../src/cli/usersGrantsCommandSupport.ts"],"names":[],"mappings":"AACA,OAAO,EAAmC,KAAK,aAAa,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AAG1F,OAAO,EAAuB,KAAK,0BAA0B,EAAE,MAAM,kCAAkC,CAAA;AACvG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAE/E,KAAK,8BAA8B,GAAG,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,GAAG;IACjF,QAAQ,CAAC,GAAG,CAAC,EAAE,wBAAwB,CAAA;CACxC,CAAA;AAED,KAAK,4BAA4B,GAAG;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,wBAAwB,CAAA;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,KAAK,+BAA+B,GAAG;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB,CAAA;AAED,KAAK,4BAA4B,GAAG;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACtC,CAAA;AAuOD,eAAO,MAAM,yBAAyB;;;;;;oCAhOnB,MAAM;;;;;;;oCAON,MAAM;;;;;;;oCAON,MAAM;;;;;;;;;;;;;oCAaN,MAAM;;;;;;;oCAON,MAAM;;;;;;;oCAON,MAAM;;;;;;;oCAON,MAAM;;;;4BAkLC,8BAA8B;;;;;;;;;;;oCAnHrC,MAAM;;;;;;;;;oCAUN,MAAM;;;;;;;oCAON,MAAM;;;;yBAsEqB,MAAM,GAAG,SAAS,QAAQ,MAAM,YAAY,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC;;;;;;oCA5I9F,MAAM;;;;;;;oCAON,MAAM;;;;4BAqEd,+BAA+B,KACvC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;;;;;;oCA3ClC,MAAM;;;;;;;;oCAQN,MAAM;;;;;6BAqFyB,4BAA4B,KAAG,MAAM,CAAC,SAAS,MAAM,EAAE,CAAC;uBAyB9D,OAAO,UAAU,MAAM,GAAG,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC;;;;;;oCAvI1E,MAAM;;;;;;;oCAON,MAAM;;;;6BAiF+B,4BAA4B,KAAG,aAAa,CAAC,MAAM,CAAC;CA0E3G,CAAA"}