@affinidi/cli 2.4.0 → 2.6.0

package/dist/commands/token/create-token.js

@@ -2,59 +2,220 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CreateToken = void 0;
 const promises_1 = require("fs/promises");
+const node_crypto_1 = require("node:crypto");
+const prompts_1 = require("@inquirer/prompts");
 const core_1 = require("@oclif/core");
+const uuid_1 = require("uuid");
 const zod_1 = require("zod");
 const common_1 = require("../../common");
-const prompts_1 = require("../../common/prompts");
+const prompts_2 = require("../../common/prompts");
 const validators_1 = require("../../common/validators");
 const jwk_1 = require("../../helpers/jwk");
+const bff_service_1 = require("../../services/affinidi/bff-service");
 const iam_1 = require("../../services/affinidi/iam");
+const flagsSchema = zod_1.z
+    .object({
+    name: zod_1.z.string().max(validators_1.INPUT_LIMIT),
+    algorithm: zod_1.z.nativeEnum(common_1.SupportedAlgorithms),
+    'key-id': zod_1.z.string().max(validators_1.INPUT_LIMIT).optional(),
+    'public-key-file': zod_1.z.string().max(validators_1.INPUT_LIMIT).optional(),
+    'auto-generate-key': zod_1.z.boolean(),
+    passphrase: zod_1.z.string().max(validators_1.INPUT_LIMIT).optional(),
+    'with-permissions': zod_1.z.boolean(),
+    resources: zod_1.z.string().max(validators_1.INPUT_LIMIT).optional().default('*'),
+    actions: zod_1.z.string().max(validators_1.INPUT_LIMIT).optional().default('*'),
+})
+    .refine((data) => {
+    if (!data['auto-generate-key'] && !data['public-key-file']) {
+        return false;
+    }
+    return true;
+}, {
+    message: 'public-key-file is required when auto-generate-key is false',
+    path: ['public-key-file'],
+});
 class CreateToken extends common_1.BaseCommand {
     async run() {
         const { flags } = await this.parse(CreateToken);
-        const promptFlags = await (0, prompts_1.promptRequiredParameters)(['name', 'key-id', 'public-key-file'], flags);
-        const schema = zod_1.z.object({
-            name: zod_1.z.string().max(validators_1.INPUT_LIMIT).min(8),
-            algorithm: zod_1.z.nativeEnum(common_1.SupportedAlgorithms),
-            'key-id': zod_1.z.string().max(validators_1.INPUT_LIMIT),
-            'public-key-file': zod_1.z.string().max(validators_1.INPUT_LIMIT),
-        });
-        const validatedFlags = schema.parse(promptFlags);
+        const validatedFlags = await this.validateFlags(flags);
         core_1.ux.action.start('Creating Personal Access Token');
-        const publicKeyPEM = await (0, promises_1.readFile)(validatedFlags['public-key-file'], 'utf8');
-        const jwk = await (0, jwk_1.pemToJWK)(publicKeyPEM, validatedFlags.algorithm);
-        const out = await iam_1.iamService.createToken({
-            name: validatedFlags.name,
+        let keypair, jwks;
+        const kid = validatedFlags['key-id'] ?? (0, uuid_1.v4)();
+        if (validatedFlags['auto-generate-key']) {
+            keypair = this.generateKeyPair(kid, validatedFlags.algorithm, validatedFlags.passphrase);
+            jwks = keypair.jwks;
+        }
+        else {
+            const publicKeyPEM = await (0, promises_1.readFile)(validatedFlags['public-key-file'], 'utf8');
+            const jwk = await (0, jwk_1.pemToJWK)(publicKeyPEM, validatedFlags.algorithm);
+            jwks = {
+                keys: [
+                    {
+                        kid,
+                        alg: validatedFlags.algorithm,
+                        use: 'sig',
+                        kty: jwk.kty ?? (0, jwk_1.getKeyType)(validatedFlags.algorithm),
+                        n: jwk.n,
+                        e: jwk.e,
+                    },
+                ],
+            };
+        }
+        const token = await this.createToken(validatedFlags.name, validatedFlags.algorithm, jwks, validatedFlags['key-id']);
+        core_1.ux.action.stop('Created successfully!');
+        let projectId;
+        if (validatedFlags['with-permissions']) {
+            core_1.ux.action.start('Adding token to active project');
+            const promises = [this.addPrincipal(token.id), bff_service_1.bffService.getActiveProject()];
+            const [, activeProject] = await Promise.all(promises);
+            projectId = activeProject.id;
+            core_1.ux.action.stop('Added successfully!');
+            core_1.ux.action.start('Granting permissions to token');
+            const actions = validatedFlags.actions ? validatedFlags.actions.split(' ') : ['*'];
+            const resources = validatedFlags.actions ? validatedFlags.actions.split(' ') : ['*'];
+            await this.updatePolicies(token.id, projectId, actions, resources);
+            core_1.ux.action.stop('Granted successfully!');
+        }
+        if (!this.jsonEnabled()) {
+            this.logJson(token);
+            this.log('\nUse the projectId, tokenId, privateKey and passphrase (if provided) to use this token with Affinidi TDK');
+            this.logJson({
+                tokenId: token.id,
+                ...(validatedFlags['with-permissions'] && { projectId }),
+                ...(validatedFlags['auto-generate-key'] && {
+                    privateKey: keypair?.privateKey,
+                    ...(validatedFlags.passphrase && { passphrase: validatedFlags.passphrase }),
+                }),
+            });
+            if (validatedFlags['auto-generate-key']) {
+                this.warn(this.chalk.yellowBright.bold('\nPlease save the privateKey and passphrase (if provided) somewhere safe. You will not be able to view them again.\n'));
+            }
+        }
+        return token;
+    }
+    async validateFlags(flags) {
+        let promptFlags = await (0, prompts_2.promptRequiredParameters)(['name'], flags);
+        if (!promptFlags['public-key-file'] && !promptFlags['no-input']) {
+            promptFlags['auto-generate-key'] ?? (promptFlags['auto-generate-key'] = await (0, prompts_1.confirm)({
+                message: 'Generate a new keypair for the token?',
+            }));
+        }
+        else {
+            promptFlags['auto-generate-key'] = !!promptFlags['auto-generate-key'];
+        }
+        if (promptFlags['auto-generate-key'] && !promptFlags['no-input']) {
+            promptFlags.passphrase = (0, validators_1.validateInputLength)(await (0, prompts_1.input)({
+                message: 'Enter a passphrase to encrypt the private key. Leave it empty for no encryption',
+            }), validators_1.INPUT_LIMIT);
+        }
+        if (!promptFlags['auto-generate-key']) {
+            promptFlags = await (0, prompts_2.promptRequiredParameters)(['public-key-file'], promptFlags);
+        }
+        if (!promptFlags['no-input']) {
+            promptFlags['with-permissions'] ?? (promptFlags['with-permissions'] = await (0, prompts_1.confirm)({
+                message: 'Add token to active project and grant permissions?',
+            }));
+        }
+        else {
+            promptFlags['with-permissions'] = !!promptFlags['with-permissions'];
+        }
+        if (!promptFlags['no-input'] && promptFlags['with-permissions']) {
+            promptFlags.resources = (0, validators_1.validateInputLength)(await (0, prompts_1.input)({
+                message: 'Enter the allowed resources, separated by spaces. Use * to allow access to all project resources',
+                default: '*',
+            }), validators_1.INPUT_LIMIT);
+            promptFlags.actions = (0, validators_1.validateInputLength)(await (0, prompts_1.input)({
+                message: 'Enter the allowed actions, separated by spaces. Use * to allow all actions',
+                default: '*',
+            }), validators_1.INPUT_LIMIT);
+        }
+        return flagsSchema.parse(promptFlags);
+    }
+    async createToken(name, algorithm, jwks, keyId) {
+        let token = await iam_1.iamService.createToken({
+            name,
             authenticationMethod: {
                 type: 'PRIVATE_KEY',
-                signingAlgorithm: validatedFlags.algorithm,
+                signingAlgorithm: algorithm,
                 publicKeyInfo: {
-                    jwks: {
-                        keys: [
-                            {
-                                kid: validatedFlags['key-id'],
-                                alg: validatedFlags.algorithm,
-                                use: 'sig',
-                                kty: jwk.kty ?? (0, jwk_1.getKeyType)(validatedFlags.algorithm),
-                                n: jwk.n,
-                                e: jwk.e,
-                            },
-                        ],
-                    },
+                    jwks,
                 },
             },
         });
-        core_1.ux.action.stop('Created successfully!');
-        if (!this.jsonEnabled())
-            this.logJson(out);
-        return out;
+        // If keyId was not provided it means that a randomly generated uuid was assigned and we should change it to the tokenId
+        if (!keyId) {
+            jwks.keys[0].kid = token.id;
+            token = await iam_1.iamService.updateToken(token.id, {
+                name,
+                authenticationMethod: {
+                    type: 'PRIVATE_KEY',
+                    signingAlgorithm: algorithm,
+                    publicKeyInfo: {
+                        jwks,
+                    },
+                },
+            });
+        }
+        return token;
+    }
+    generateKeyPair(keyId, algorithm, passphrase) {
+        const { publicKey, privateKey } = (0, node_crypto_1.generateKeyPairSync)('rsa', { modulusLength: 4096 });
+        const publicKeyPem = publicKey.export({ format: 'pem', type: 'spki' });
+        const exportOptions = {
+            format: 'pem',
+            type: 'pkcs8',
+        };
+        if (passphrase) {
+            exportOptions.cipher = 'aes-256-cbc';
+            exportOptions.passphrase = passphrase;
+        }
+        const privateKeyPem = privateKey.export(exportOptions);
+        const publicKeyJwk = publicKey.export({ format: 'jwk' });
+        const jwks = {
+            keys: [
+                {
+                    use: 'sig',
+                    kid: keyId,
+                    alg: algorithm,
+                    ...publicKeyJwk,
+                },
+            ],
+        };
+        return { publicKey: publicKeyPem, privateKey: privateKeyPem, jwks };
+    }
+    async addPrincipal(tokenId) {
+        await iam_1.iamService.addPrincipalToProject({
+            principalId: tokenId,
+            principalType: 'token',
+        });
+    }
+    async updatePolicies(tokenId, activeProjectId, actions, resources) {
+        const policiesData = {
+            version: '2022-12-15',
+            statement: [
+                {
+                    principal: [`ari:iam::${activeProjectId}:token/${tokenId}`],
+                    action: actions,
+                    resource: resources,
+                    effect: 'Allow',
+                },
+            ],
+        };
+        const validatedPolicies = validators_1.policiesDataSchema.parse(policiesData);
+        const result = await iam_1.iamService.updatePolicies(tokenId, 'token', validatedPolicies);
+        return result;
     }
 }
 exports.CreateToken = CreateToken;
 CreateToken.summary = 'Creates a Personal Access Token (PAT)';
 CreateToken.examples = [
-    '<%= config.bin %> <%= command.id %> -n MyNewToken -k MyKeyID -f publicKey.pem',
-    '<%= config.bin %> <%= command.id %> --name "My new token" --key-id MyKeyID --public-key-file publicKey.pem --algorithm RS256',
+    '<%= config.bin %> <%= command.id %>',
+    '<%= config.bin %> <%= command.id %> --name "My new token"',
+    '<%= config.bin %> <%= command.id %> -n MyNewToken --with-permissions',
+    '<%= config.bin %> <%= command.id %> -n MyNewToken --auto-generate-key',
+    '<%= config.bin %> <%= command.id %> -n MyNewToken --auto-generate-key --passphrase "MySecretPassphrase" --with-permissions',
+    '<%= config.bin %> <%= command.id %> -n MyNewToken --public-key-file publicKey.pem --key-id MyKeyID --algorithm RS256 --with-permissions',
+    '<%= config.bin %> <%= command.id %> -n MyNewToken -g -w',
 ];
 CreateToken.flags = {
     name: core_1.Flags.string({
@@ -70,9 +231,24 @@ CreateToken.flags = {
         summary: 'Location of the public key PEM file',
     }),
     algorithm: core_1.Flags.custom({
+        char: 'a',
         summary: 'The specific cryptographic algorithm used with the key',
         options: Object.values(common_1.SupportedAlgorithms),
         default: common_1.SupportedAlgorithms.RS256,
     })(),
+    'with-permissions': core_1.Flags.boolean({
+        char: 'w',
+        summary: 'Set token policies to perform any action on the active project',
+    }),
+    'auto-generate-key': core_1.Flags.boolean({
+        char: 'g',
+        summary: 'Auto-generate private-public key pair',
+        exclusive: ['public-key-file'],
+    }),
+    passphrase: core_1.Flags.string({
+        char: 'p',
+        summary: 'Passphrase for generation of private public key pair',
+        dependsOn: ['auto-generate-key'],
+    }),
 };
 //# sourceMappingURL=create-token.js.map

package/dist/commands/token/create-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-token.js","sourceRoot":"","sources":["../../../src/commands/token/create-token.ts"],"names":[],"mappings":";;;AAAA,0CAAsC;AACtC,sCAAuC;AACvC,6BAAuB;AACvB,yCAA+D;AAC/D,kDAA+D;AAC/D,wDAAqD;AACrD,2CAAwD;AACxD,qDAAwD;AAGxD,MAAa,WAAY,SAAQ,oBAA+B;IA0BvD,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QAC/C,MAAM,WAAW,GAAG,MAAM,IAAA,kCAAwB,EAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAA;QAEhG,MAAM,MAAM,GAAG,OAAC,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,wBAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,4BAAmB,CAAC;YAC5C,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,wBAAW,CAAC;YACrC,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,wBAAW,CAAC;SAC/C,CAAC,CAAA;QACF,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QAEhD,SAAE,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAEjD,MAAM,YAAY,GAAG,MAAM,IAAA,mBAAQ,EAAC,cAAc,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAA;QAC9E,MAAM,GAAG,GAAG,MAAM,IAAA,cAAQ,EAAC,YAAY,EAAE,cAAc,CAAC,SAAS,CAAC,CAAA;QAClE,MAAM,GAAG,GAAG,MAAM,gBAAU,CAAC,WAAW,CAAC;YACvC,IAAI,EAAE,cAAc,CAAC,IAAI;YACzB,oBAAoB,EAAE;gBACpB,IAAI,EAAE,aAAa;gBACnB,gBAAgB,EAAE,cAAc,CAAC,SAAS;gBAC1C,aAAa,EAAE;oBACb,IAAI,EAAE;wBACJ,IAAI,EAAE;4BACJ;gCACE,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC;gCAC7B,GAAG,EAAE,cAAc,CAAC,SAAS;gCAC7B,GAAG,EAAE,KAAK;gCACV,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,IAAA,gBAAU,EAAC,cAAc,CAAC,SAAS,CAAC;gCACpD,CAAC,EAAE,GAAG,CAAC,CAAC;gCACR,CAAC,EAAE,GAAG,CAAC,CAAC;6BACT;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAA;QACF,SAAE,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;QAEvC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC1C,OAAO,GAAG,CAAA;IACZ,CAAC;;AAnEH,kCAoEC;AAnEQ,mBAAO,GAAG,uCAAuC,CAAA;AACjD,oBAAQ,GAAG;IAChB,+EAA+E;IAC/E,8HAA8H;CAC/H,CAAA;AACM,iBAAK,GAAG;IACb,IAAI,EAAE,YAAK,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,0DAA0D;KACpE,CAAC;IACF,QAAQ,EAAE,YAAK,CAAC,MAAM,CAAC;QACrB,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,6BAA6B;KACvC,CAAC;IACF,iBAAiB,EAAE,YAAK,CAAC,MAAM,CAAC;QAC9B,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,qCAAqC;KAC/C,CAAC;IACF,SAAS,EAAE,YAAK,CAAC,MAAM,CAAsB;QAC3C,OAAO,EAAE,wDAAwD;QACjE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,4BAAmB,CAAC;QAC3C,OAAO,EAAE,4BAAmB,CAAC,KAAK;KACnC,CAAC,EAAE;CACL,CAAA"}
+{"version":3,"file":"create-token.js","sourceRoot":"","sources":["../../../src/commands/token/create-token.ts"],"names":[],"mappings":";;;AACA,0CAAsC;AACtC,6CAAiD;AACjD,+CAAkD;AAClD,sCAAuC;AACvC,+BAAmC;AACnC,6BAAuB;AACvB,yCAA+D;AAC/D,kDAA+D;AAC/D,wDAA8F;AAC9F,2CAAwD;AACxD,qEAAgE;AAChE,qDAAwD;AAGxD,MAAM,WAAW,GAAG,OAAC;KAClB,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,wBAAW,CAAC;IACjC,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,4BAAmB,CAAC;IAC5C,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,wBAAW,CAAC,CAAC,QAAQ,EAAE;IAChD,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,wBAAW,CAAC,CAAC,QAAQ,EAAE;IACzD,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE;IAChC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,wBAAW,CAAC,CAAC,QAAQ,EAAE;IAClD,kBAAkB,EAAE,OAAC,CAAC,OAAO,EAAE;IAC/B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,wBAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAC9D,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,wBAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;CAC7D,CAAC;KACD,MAAM,CACL,CAAC,IAAI,EAAE,EAAE;IACP,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE;QAC1D,OAAO,KAAK,CAAA;KACb;IACD,OAAO,IAAI,CAAA;AACb,CAAC,EACD;IACE,OAAO,EAAE,6DAA6D;IACtE,IAAI,EAAE,CAAC,iBAAiB,CAAC;CAC1B,CACF,CAAA;AAEH,MAAa,WAAY,SAAQ,oBAA+B;IA8CvD,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QAC/C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAEtD,SAAE,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAA;QACjD,IAAI,OAAO,EAAE,IAAI,CAAA;QACjB,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,IAAA,SAAM,GAAE,CAAA;QAChD,IAAI,cAAc,CAAC,mBAAmB,CAAC,EAAE;YACvC,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,UAAU,CAAC,CAAA;YACxF,IAAI,GAAG,OAAO,CAAC,IAAwB,CAAA;SACxC;aAAM;YACL,MAAM,YAAY,GAAG,MAAM,IAAA,mBAAQ,EAAC,cAAc,CAAC,iBAAiB,CAAW,EAAE,MAAM,CAAC,CAAA;YACxF,MAAM,GAAG,GAAG,MAAM,IAAA,cAAQ,EAAC,YAAY,EAAE,cAAc,CAAC,SAAS,CAAC,CAAA;YAClE,IAAI,GAAG;gBACL,IAAI,EAAE;oBACJ;wBACE,GAAG;wBACH,GAAG,EAAE,cAAc,CAAC,SAAS;wBAC7B,GAAG,EAAE,KAAK;wBACV,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,IAAA,gBAAU,EAAC,cAAc,CAAC,SAAS,CAAC;wBACpD,CAAC,EAAE,GAAG,CAAC,CAAC;wBACR,CAAC,EAAE,GAAG,CAAC,CAAC;qBACT;iBACF;aACF,CAAA;SACF;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAA;QAEnH,SAAE,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;QAEvC,IAAI,SAAS,CAAA;QACb,IAAI,cAAc,CAAC,kBAAkB,CAAC,EAAE;YACtC,SAAE,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAA;YACjD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,wBAAU,CAAC,gBAAgB,EAAE,CAAC,CAAA;YAC7E,MAAM,CAAC,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACrD,SAAS,GAAG,aAAc,CAAC,EAAE,CAAA;YAC7B,SAAE,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;YAErC,SAAE,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;YAChD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YAClF,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YACpF,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;YAClE,SAAE,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;SACxC;QAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE;YACvB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACnB,IAAI,CAAC,GAAG,CACN,2GAA2G,CAC5G,CAAA;YACD,IAAI,CAAC,OAAO,CAAC;gBACX,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,GAAG,CAAC,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;gBACxD,GAAG,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI;oBACzC,UAAU,EAAE,OAAO,EAAE,UAAoB;oBACzC,GAAG,CAAC,cAAc,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,UAAU,EAAE,CAAC;iBAC5E,CAAC;aACH,CAAC,CAAA;YACF,IAAI,cAAc,CAAC,mBAAmB,CAAC,EAAE;gBACvC,IAAI,CAAC,IAAI,CACP,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAC1B,sHAAsH,CACvH,CACF,CAAA;aACF;SACF;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,KAA2B;QACrD,IAAI,WAAW,GAAG,MAAM,IAAA,kCAAwB,EAAC,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;QAEjE,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;YAC/D,WAAW,CAAC,mBAAmB,MAA/B,WAAW,CAAC,mBAAmB,IAAM,MAAM,IAAA,iBAAO,EAAC;gBACjD,OAAO,EAAE,uCAAuC;aACjD,CAAC,EAAA;SACH;aAAM;YACL,WAAW,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAA;SACtE;QAED,IAAI,WAAW,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;YAChE,WAAW,CAAC,UAAU,GAAG,IAAA,gCAAmB,EAC1C,MAAM,IAAA,eAAK,EAAC;gBACV,OAAO,EAAE,iFAAiF;aAC3F,CAAC,EACF,wBAAW,CACZ,CAAA;SACF;QACD,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE;YACrC,WAAW,GAAG,MAAM,IAAA,kCAAwB,EAAC,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,CAAA;SAC/E;QAED,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;YAC5B,WAAW,CAAC,kBAAkB,MAA9B,WAAW,CAAC,kBAAkB,IAAM,MAAM,IAAA,iBAAO,EAAC;gBAChD,OAAO,EAAE,oDAAoD;aAC9D,CAAC,EAAA;SACH;aAAM;YACL,WAAW,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAA;SACpE;QAED,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,kBAAkB,CAAC,EAAE;YAC/D,WAAW,CAAC,SAAS,GAAG,IAAA,gCAAmB,EACzC,MAAM,IAAA,eAAK,EAAC;gBACV,OAAO,EAAE,kGAAkG;gBAC3G,OAAO,EAAE,GAAG;aACb,CAAC,EACF,wBAAW,CACZ,CAAA;YACD,WAAW,CAAC,OAAO,GAAG,IAAA,gCAAmB,EACvC,MAAM,IAAA,eAAK,EAAC;gBACV,OAAO,EAAE,4EAA4E;gBACrF,OAAO,EAAE,GAAG;aACb,CAAC,EACF,wBAAW,CACZ,CAAA;SACF;QAED,OAAO,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IACvC,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,SAA8B,EAAE,IAAsB,EAAE,KAAc;QAC5G,IAAI,KAAK,GAAG,MAAM,gBAAU,CAAC,WAAW,CAAC;YACvC,IAAI;YACJ,oBAAoB,EAAE;gBACpB,IAAI,EAAE,aAAa;gBACnB,gBAAgB,EAAE,SAAS;gBAC3B,aAAa,EAAE;oBACb,IAAI;iBACL;aACF;SACF,CAAC,CAAA;QACF,wHAAwH;QACxH,IAAI,CAAC,KAAK,EAAE;YACV,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,EAAE,CAAA;YAC3B,KAAK,GAAG,MAAM,gBAAU,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE;gBAC7C,IAAI;gBACJ,oBAAoB,EAAE;oBACpB,IAAI,EAAE,aAAa;oBACnB,gBAAgB,EAAE,SAAS;oBAC3B,aAAa,EAAE;wBACb,IAAI;qBACL;iBACF;aACF,CAAC,CAAA;SACH;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,eAAe,CAAC,KAAa,EAAE,SAAiB,EAAE,UAAmB;QAC3E,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAA,iCAAmB,EAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAErF,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;QACtE,MAAM,aAAa,GAA4B;YAC7C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SACd,CAAA;QACD,IAAI,UAAU,EAAE;YACd,aAAa,CAAC,MAAM,GAAG,aAAa,CAAA;YACpC,aAAa,CAAC,UAAU,GAAG,UAAU,CAAA;SACtC;QACD,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACtD,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;QAExD,MAAM,IAAI,GAAG;YACX,IAAI,EAAE;gBACJ;oBACE,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,SAAS;oBACd,GAAG,YAAY;iBAChB;aACF;SACF,CAAA;QAED,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,CAAA;IACrE,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAe;QACxC,MAAM,gBAAU,CAAC,qBAAqB,CAAC;YACrC,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,OAAO;SACvB,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,eAAuB,EAAE,OAAiB,EAAE,SAAmB;QAC3G,MAAM,YAAY,GAAG;YACnB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE;gBACT;oBACE,SAAS,EAAE,CAAC,YAAY,eAAe,UAAU,OAAO,EAAE,CAAC;oBAC3D,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,SAAS;oBACnB,MAAM,EAAE,OAAO;iBAChB;aACF;SACF,CAAA;QACD,MAAM,iBAAiB,GAAG,+BAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAChE,MAAM,MAAM,GAAG,MAAM,gBAAU,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAA;QACnF,OAAO,MAAM,CAAA;IACf,CAAC;;AArPH,kCAsPC;AArPQ,mBAAO,GAAG,uCAAuC,CAAA;AACjD,oBAAQ,GAAG;IAChB,qCAAqC;IACrC,2DAA2D;IAC3D,sEAAsE;IACtE,uEAAuE;IACvE,4HAA4H;IAC5H,yIAAyI;IACzI,yDAAyD;CAC1D,CAAA;AACM,iBAAK,GAAG;IACb,IAAI,EAAE,YAAK,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,0DAA0D;KACpE,CAAC;IACF,QAAQ,EAAE,YAAK,CAAC,MAAM,CAAC;QACrB,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,6BAA6B;KACvC,CAAC;IACF,iBAAiB,EAAE,YAAK,CAAC,MAAM,CAAC;QAC9B,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,qCAAqC;KAC/C,CAAC;IACF,SAAS,EAAE,YAAK,CAAC,MAAM,CAAsB;QAC3C,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,wDAAwD;QACjE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,4BAAmB,CAAC;QAC3C,OAAO,EAAE,4BAAmB,CAAC,KAAK;KACnC,CAAC,EAAE;IACJ,kBAAkB,EAAE,YAAK,CAAC,OAAO,CAAC;QAChC,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,gEAAgE;KAC1E,CAAC;IACF,mBAAmB,EAAE,YAAK,CAAC,OAAO,CAAC;QACjC,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,uCAAuC;QAChD,SAAS,EAAE,CAAC,iBAAiB,CAAC;KAC/B,CAAC;IACF,UAAU,EAAE,YAAK,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,sDAAsD;QAC/D,SAAS,EAAE,CAAC,mBAAmB,CAAC;KACjC,CAAC;CACH,CAAA"}

package/dist/common/validators.d.ts

@@ -1,5 +1,51 @@
+import z from 'zod';
 export declare const INPUT_LIMIT = 2000;
 export declare const TOKEN_LIMIT = 5000;
 export declare const PRESENTATION_DEFINITION_LIMIT = 5000;
 export declare function validateInputLength(text: string, maxLength: number): string;
 export declare function split(text: string, delimiter: string): string[];
+export declare const policiesDataSchema: z.ZodObject<{
+    version: z.ZodString;
+    statement: z.ZodArray<z.ZodObject<{
+        principal: z.ZodArray<z.ZodString, "many">;
+        action: z.ZodArray<z.ZodString, "atleastone">;
+        resource: z.ZodArray<z.ZodString, "atleastone">;
+        effect: z.ZodLiteral<"Allow">;
+    }, "strip", z.ZodTypeAny, {
+        effect: "Allow";
+        principal: string[];
+        action: [string, ...string[]];
+        resource: [string, ...string[]];
+    }, {
+        effect: "Allow";
+        principal: string[];
+        action: [string, ...string[]];
+        resource: [string, ...string[]];
+    }>, "atleastone">;
+}, "strip", z.ZodTypeAny, {
+    version: string;
+    statement: [{
+        effect: "Allow";
+        principal: string[];
+        action: [string, ...string[]];
+        resource: [string, ...string[]];
+    }, ...{
+        effect: "Allow";
+        principal: string[];
+        action: [string, ...string[]];
+        resource: [string, ...string[]];
+    }[]];
+}, {
+    version: string;
+    statement: [{
+        effect: "Allow";
+        principal: string[];
+        action: [string, ...string[]];
+        resource: [string, ...string[]];
+    }, ...{
+        effect: "Allow";
+        principal: string[];
+        action: [string, ...string[]];
+        resource: [string, ...string[]];
+    }[]];
+}>;

package/dist/common/validators.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.split = exports.validateInputLength = exports.PRESENTATION_DEFINITION_LIMIT = exports.TOKEN_LIMIT = exports.INPUT_LIMIT = void 0;
+exports.policiesDataSchema = exports.split = exports.validateInputLength = exports.PRESENTATION_DEFINITION_LIMIT = exports.TOKEN_LIMIT = exports.INPUT_LIMIT = void 0;
+const tslib_1 = require("tslib");
 const errors_1 = require("@oclif/core/lib/errors");
+const zod_1 = tslib_1.__importDefault(require("zod"));
 exports.INPUT_LIMIT = 2000;
 exports.TOKEN_LIMIT = 5000;
 exports.PRESENTATION_DEFINITION_LIMIT = 5000;
@@ -16,4 +18,16 @@ function split(text, delimiter) {
     return text.split(delimiter).filter((item) => item.length > 0);
 }
 exports.split = split;
+exports.policiesDataSchema = zod_1.default.object({
+    version: zod_1.default.string().max(exports.INPUT_LIMIT),
+    statement: zod_1.default
+        .object({
+        principal: zod_1.default.string().max(exports.INPUT_LIMIT).array().length(1),
+        action: zod_1.default.string().max(exports.INPUT_LIMIT).array().nonempty(),
+        resource: zod_1.default.string().max(exports.INPUT_LIMIT).array().nonempty(),
+        effect: zod_1.default.literal('Allow'),
+    })
+        .array()
+        .nonempty(),
+});
 //# sourceMappingURL=validators.js.map

package/dist/common/validators.js.map

@@ -1 +1 @@
-{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../src/common/validators.ts"],"names":[],"mappings":";;;AAAA,mDAAiD;AAEpC,QAAA,WAAW,GAAG,IAAI,CAAA;AAClB,QAAA,WAAW,GAAG,IAAI,CAAA;AAClB,QAAA,6BAA6B,GAAG,IAAI,CAAA;AAEjD,SAAgB,mBAAmB,CAAC,IAAY,EAAE,SAAiB;IACjE,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE;QAC3B,MAAM,IAAI,iBAAQ,CAAC,+BAA+B,SAAS,eAAe,CAAC,CAAA;KAC5E;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAND,kDAMC;AAED,SAAgB,KAAK,CAAC,IAAY,EAAE,SAAiB;IACnD,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAChE,CAAC;AAFD,sBAEC"}
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../src/common/validators.ts"],"names":[],"mappings":";;;;AAAA,mDAAiD;AACjD,sDAAmB;AAEN,QAAA,WAAW,GAAG,IAAI,CAAA;AAClB,QAAA,WAAW,GAAG,IAAI,CAAA;AAClB,QAAA,6BAA6B,GAAG,IAAI,CAAA;AAEjD,SAAgB,mBAAmB,CAAC,IAAY,EAAE,SAAiB;IACjE,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE;QAC3B,MAAM,IAAI,iBAAQ,CAAC,+BAA+B,SAAS,eAAe,CAAC,CAAA;KAC5E;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAND,kDAMC;AAED,SAAgB,KAAK,CAAC,IAAY,EAAE,SAAiB;IACnD,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAChE,CAAC;AAFD,sBAEC;AAEY,QAAA,kBAAkB,GAAG,aAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,mBAAW,CAAC;IACpC,SAAS,EAAE,aAAC;SACT,MAAM,CAAC;QACN,SAAS,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,mBAAW,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,MAAM,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,mBAAW,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;QACtD,QAAQ,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,mBAAW,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;QACxD,MAAM,EAAE,aAAC,CAAC,OAAO,CAAC,OAAO,CAAC;KAC3B,CAAC;SACD,KAAK,EAAE;SACP,QAAQ,EAAE;CACd,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@affinidi/cli",
-  "version": "2.4.0",
+  "version": "2.6.0",
   "description": "Affinidi CLI",
   "author": "affinidi.com",
   "license": "Apache-2.0",
@@ -21,7 +21,7 @@
     "lint": "eslint . --ext .ts",
     "lint:fix": "eslint . --ext .ts --fix",
     "test": "mocha \"test/**/*.test.ts\"",
-    "generate:readme": "npm run build && oclif readme",
+    "generate:readme": "npm run build && oclif readme --multi --no-aliases",
     "generate:api": "node scripts/generate-api.cjs"
   },
   "publishConfig": {
@@ -67,6 +67,7 @@
     "open": "^8.4.1",
     "pkginfo": "^0.4.1",
     "tcp-port-used": "^1.0.2",
+    "uuid": "^9.0.1",
     "zod": "^3.22.2",
     "zod-validation-error": "^1.5.0"
   },
@@ -80,6 +81,7 @@
     "@types/mocha": "10.0.1",
     "@types/node": "^18.11.19",
     "@types/tcp-port-used": "^1.0.1",
+    "@types/uuid": "^9.0.8",
     "@typescript-eslint/eslint-plugin": "^5.62.0",
     "@typescript-eslint/parser": "^5.59.9",
     "chai": "4.3.7",