@axinom/mosaic-cli 0.31.0-rc.7 → 0.31.0-rc.8

package/dist/commands/service/index.js

@@ -1,60 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.service = void 0;
-const tslib_1 = require("tslib");
-const chalk_1 = require("chalk");
-const sync_permissions_1 = require("./sync-permissions");
+const purge_permissions_command_1 = require("./purge-permissions/purge-permissions-command");
+const sync_permission_command_1 = require("./sync-permissions/sync-permission-command");
 exports.service = {
     command: 'service',
     describe: 'General commands related to Mosaic services.',
     builder: (yargs) => yargs
-        .command('sync-permissions', 'Synchronize permissions for a given service with ID Service.', syncPermissions)
+        .command('sync-permissions', 'Synchronize permissions for a given service with ID Service.', sync_permission_command_1.syncPermissionsCommand)
+        .command('purge-permissions', 'Purge permissions for a given service from ID Service.', purge_permissions_command_1.purgePermissionsCommand)
         .demandCommand(),
     handler: (_args) => {
         console.log('Please pick a sub command related to Mosaic services.');
     },
 };
-const syncPermissions = {
-    builder: (yargs) => {
-        return yargs
-            .option('serviceId', {
-            describe: 'Service ID the permissions should be synchronized to. If no value is explicity given, environment variable SERVICE_ID will be used.',
-            alias: 'i',
-            string: true,
-        })
-            .option('idServiceAuthBaseURL', {
-            describe: 'ID Service Authentication Endpoint Base URL. If no value is explicity given, environment variable ID_SERVICE_AUTH_BASE_URL will be used.',
-            alias: 'a',
-            string: true,
-        })
-            .option('permissionDefinitionJsonPath', {
-            describe: 'Path to permission-definition.json file. The default location is src/generated/security/permission-definition.json',
-            alias: 'p',
-            string: true,
-        })
-            .option('clientId', {
-            describe: 'Client ID of a Service Account which has Synchronize Permission permission assigned. If no value is explicity given, environment variable SERVICE_ACCOUNT_CLIENT_ID will be used.',
-            alias: 'c',
-            string: true,
-        })
-            .option('clientSecret', {
-            describe: 'Client Secret for the above Client ID. If no value is explicity given, environment variable SERVICE_ACCOUNT_CLIENT_SECRET will be used.',
-            alias: 's',
-            string: true,
-        });
-    },
-    handler: (args) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
-        const [validatedArgs, errorMessages] = (0, sync_permissions_1.validateArgs)(args);
-        if (errorMessages.length > 0) {
-            console.log((0, chalk_1.red)('Some required arguments are missing.'));
-            errorMessages.map((message) => {
-                console.log((0, chalk_1.yellow)(`${message}`));
-            });
-            console.log();
-        }
-        else {
-            yield (0, sync_permissions_1.synchronizePermissions)(validatedArgs);
-        }
-    }),
-};
 //# sourceMappingURL=index.js.map

package/dist/commands/service/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/service/index.ts"],"names":[],"mappings":";;;;AAAA,iCAAoC;AAEpC,yDAA0E;AAG7D,QAAA,OAAO,GAAoC;IACtD,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,8CAA8C;IACxD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,OAAO,CACN,kBAAkB,EAClB,8DAA8D,EAC9D,eAAe,CAChB;SACA,aAAa,EAAE;IACpB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACjB,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;CACF,CAAC;AAEF,MAAM,eAAe,GAAsD;IACzE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACjB,OAAO,KAAK;aACT,MAAM,CAAC,WAAW,EAAE;YACnB,QAAQ,EACN,qIAAqI;YACvI,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,sBAAsB,EAAE;YAC9B,QAAQ,EACN,0IAA0I;YAC5I,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,8BAA8B,EAAE;YACtC,QAAQ,EACN,oHAAoH;YACtH,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,UAAU,EAAE;YAClB,QAAQ,EACN,mLAAmL;YACrL,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,cAAc,EAAE;YACtB,QAAQ,EACN,yIAAyI;YAC3I,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAO,IAAI,EAAE,EAAE;QACtB,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,IAAA,+BAAY,EAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;YAC5B,OAAO,CAAC,GAAG,CAAC,IAAA,WAAG,EAAC,sCAAsC,CAAC,CAAC,CAAC;YACzD,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC5B,OAAO,CAAC,GAAG,CAAC,IAAA,cAAM,EAAC,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,EAAE,CAAC;SACf;aAAM;YACL,MAAM,IAAA,yCAAsB,EAAC,aAAa,CAAC,CAAC;SAC7C;IACH,CAAC,CAAA;CACF,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/service/index.ts"],"names":[],"mappings":";;;AACA,6FAAwF;AACxF,wFAAoF;AAEvE,QAAA,OAAO,GAAoC;IACtD,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,8CAA8C;IACxD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,OAAO,CACN,kBAAkB,EAClB,8DAA8D,EAC9D,gDAAsB,CACvB;SACA,OAAO,CACN,mBAAmB,EACnB,wDAAwD,EACxD,mDAAuB,CACxB;SACA,aAAa,EAAE;IACpB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACjB,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;CACF,CAAC"}

package/dist/commands/service/purge-permissions/purge-permissions-command.d.ts

@@ -0,0 +1,3 @@
+import { CommandModule } from 'yargs';
+import { GetPurgePermissionsOptions } from './purge-permissions-options';
+export declare const purgePermissionsCommand: CommandModule<unknown, GetPurgePermissionsOptions>;

package/dist/commands/service/purge-permissions/purge-permissions-command.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.purgePermissionsCommand = void 0;
+const tslib_1 = require("tslib");
+const chalk_1 = require("chalk");
+const purge_permissions_1 = require("./purge-permissions");
+exports.purgePermissionsCommand = {
+    builder: (yargs) => {
+        return yargs
+            .option('serviceId', {
+            describe: 'Service ID the permissions should be purged from. If no value is explicity given, environment variable SERVICE_ID will be used.',
+            alias: 'i',
+            string: true,
+        })
+            .option('idServiceAuthBaseURL', {
+            describe: 'ID Service Authentication Endpoint Base URL. If no value is explicity given, environment variable ID_SERVICE_AUTH_BASE_URL will be used.',
+            alias: 'a',
+            string: true,
+        })
+            .option('clientId', {
+            describe: 'Client ID of a Service Account which has Synchronize Permission permission assigned. If no value is explicity given, environment variable SERVICE_ACCOUNT_CLIENT_ID will be used.',
+            alias: 'c',
+            string: true,
+        })
+            .option('clientSecret', {
+            describe: 'Client Secret for the above Client ID. If no value is explicity given, environment variable SERVICE_ACCOUNT_CLIENT_SECRET will be used.',
+            alias: 's',
+            string: true,
+        });
+    },
+    handler: (args) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
+        const [validatedArgs, errorMessages] = (0, purge_permissions_1.validateArgs)(args);
+        if (errorMessages.length > 0) {
+            console.log((0, chalk_1.red)('Some required arguments are missing and/or are erroneous.'));
+            errorMessages.map((message) => {
+                console.log((0, chalk_1.yellow)(`${message}`));
+            });
+            console.log();
+        }
+        else {
+            yield (0, purge_permissions_1.purgePermissions)(validatedArgs);
+        }
+    }),
+};
+//# sourceMappingURL=purge-permissions-command.js.map

package/dist/commands/service/purge-permissions/purge-permissions-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purge-permissions-command.js","sourceRoot":"","sources":["../../../../src/commands/service/purge-permissions/purge-permissions-command.ts"],"names":[],"mappings":";;;;AAAA,iCAAoC;AAEpC,2DAAqE;AAGxD,QAAA,uBAAuB,GAGhC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACjB,OAAO,KAAK;aACT,MAAM,CAAC,WAAW,EAAE;YACnB,QAAQ,EACN,iIAAiI;YACnI,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,sBAAsB,EAAE;YAC9B,QAAQ,EACN,0IAA0I;YAC5I,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,UAAU,EAAE;YAClB,QAAQ,EACN,mLAAmL;YACrL,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,cAAc,EAAE;YACtB,QAAQ,EACN,yIAAyI;YAC3I,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAO,IAAI,EAAE,EAAE;QACtB,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,IAAA,gCAAY,EAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;YAC5B,OAAO,CAAC,GAAG,CACT,IAAA,WAAG,EAAC,2DAA2D,CAAC,CACjE,CAAC;YACF,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC5B,OAAO,CAAC,GAAG,CAAC,IAAA,cAAM,EAAC,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,EAAE,CAAC;SACf;aAAM;YACL,MAAM,IAAA,oCAAgB,EAAC,aAAa,CAAC,CAAC;SACvC;IACH,CAAC,CAAA;CACF,CAAC"}

package/dist/commands/service/purge-permissions/purge-permissions-options.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Options to Purge Permissions
+ */
+export interface GetPurgePermissionsOptions {
+    serviceId?: string;
+    idServiceAuthBaseURL?: string;
+    clientId?: string;
+    clientSecret?: string;
+}

package/dist/commands/service/purge-permissions/purge-permissions-options.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=purge-permissions-options.js.map

package/dist/commands/service/purge-permissions/purge-permissions-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purge-permissions-options.js","sourceRoot":"","sources":["../../../../src/commands/service/purge-permissions/purge-permissions-options.ts"],"names":[],"mappings":""}

package/dist/commands/service/purge-permissions/purge-permissions.d.ts

@@ -0,0 +1,3 @@
+import { GetPurgePermissionsOptions } from './purge-permissions-options';
+export declare const validateArgs: (args: GetPurgePermissionsOptions) => [Required<GetPurgePermissionsOptions>, string[]];
+export declare const purgePermissions: (args: Required<GetPurgePermissionsOptions>) => Promise<void>;

package/dist/commands/service/purge-permissions/purge-permissions.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.purgePermissions = exports.validateArgs = void 0;
+const tslib_1 = require("tslib");
+const mosaic_id_link_be_1 = require("@axinom/mosaic-id-link-be");
+const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
+const chalk_1 = require("chalk");
+const validateArgs = (args) => {
+    var _a, _b, _c, _d, _e, _f, _g, _h;
+    const errorMessages = [];
+    const serviceId = (_b = (_a = args.serviceId) !== null && _a !== void 0 ? _a : process.env.SERVICE_ID) !== null && _b !== void 0 ? _b : '';
+    const idServiceAuthBaseURL = (_d = (_c = args.idServiceAuthBaseURL) !== null && _c !== void 0 ? _c : process.env.ID_SERVICE_AUTH_BASE_URL) !== null && _d !== void 0 ? _d : '';
+    const clientId = (_f = (_e = args.clientId) !== null && _e !== void 0 ? _e : process.env.SERVICE_ACCOUNT_CLIENT_ID) !== null && _f !== void 0 ? _f : '';
+    const clientSecret = (_h = (_g = args.clientSecret) !== null && _g !== void 0 ? _g : process.env.SERVICE_ACCOUNT_CLIENT_SECRET) !== null && _h !== void 0 ? _h : '';
+    if ((0, mosaic_service_common_1.isNullOrWhitespace)(serviceId)) {
+        errorMessages.push('[serviceId] is required.');
+    }
+    else if (serviceId.startsWith('ax-')) {
+        errorMessages.push(`[serviceId] cannot start with ax-`);
+    }
+    if ((0, mosaic_service_common_1.isNullOrWhitespace)(idServiceAuthBaseURL)) {
+        errorMessages.push('[idServiceBaseURL] is required.');
+    }
+    if ((0, mosaic_service_common_1.isNullOrWhitespace)(clientId)) {
+        errorMessages.push('[clientId] is required.');
+    }
+    if ((0, mosaic_service_common_1.isNullOrWhitespace)(clientSecret)) {
+        errorMessages.push('[clientSecret] is required.');
+    }
+    return [
+        {
+            serviceId,
+            idServiceAuthBaseURL,
+            clientId,
+            clientSecret,
+        },
+        errorMessages,
+    ];
+};
+exports.validateArgs = validateArgs;
+const purgePermissions = (args) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
+    try {
+        const serviceAccountToken = yield (0, mosaic_id_link_be_1.getServiceAccountToken)(args.idServiceAuthBaseURL, args.clientId, args.clientSecret);
+        const purgePermissionResults = yield (0, mosaic_id_link_be_1.purgePermissions)(args.idServiceAuthBaseURL, serviceAccountToken.accessToken, args.serviceId);
+        console.log((0, chalk_1.green)(`Permissions purged successfully for Service [${args.serviceId}].`));
+        console.log((0, chalk_1.green)(JSON.stringify(purgePermissionResults, null, 2)));
+    }
+    catch (e) {
+        const error = (0, mosaic_service_common_1.ensureError)(e);
+        console.log((0, chalk_1.red)(`Error while purging permission for Service ID [${args.serviceId}].`));
+        console.log((0, chalk_1.red)(JSON.stringify(error.message)));
+    }
+});
+exports.purgePermissions = purgePermissions;
+//# sourceMappingURL=purge-permissions.js.map

package/dist/commands/service/purge-permissions/purge-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purge-permissions.js","sourceRoot":"","sources":["../../../../src/commands/service/purge-permissions/purge-permissions.ts"],"names":[],"mappings":";;;;AAAA,iEAGmC;AACnC,yEAAgF;AAChF,iCAAmC;AAG5B,MAAM,YAAY,GAAG,CAC1B,IAAgC,EACkB,EAAE;;IACpD,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,MAAM,SAAS,GAAG,MAAA,MAAA,IAAI,CAAC,SAAS,mCAAI,OAAO,CAAC,GAAG,CAAC,UAAU,mCAAI,EAAE,CAAC;IAEjE,MAAM,oBAAoB,GACxB,MAAA,MAAA,IAAI,CAAC,oBAAoB,mCAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,mCAAI,EAAE,CAAC;IAC1E,MAAM,QAAQ,GAAG,MAAA,MAAA,IAAI,CAAC,QAAQ,mCAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,mCAAI,EAAE,CAAC;IAC9E,MAAM,YAAY,GAChB,MAAA,MAAA,IAAI,CAAC,YAAY,mCAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,mCAAI,EAAE,CAAC;IAEvE,IAAI,IAAA,0CAAkB,EAAC,SAAS,CAAC,EAAE;QACjC,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;KAChD;SAAM,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE;QACtC,aAAa,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;KACzD;IACD,IAAI,IAAA,0CAAkB,EAAC,oBAAoB,CAAC,EAAE;QAC5C,aAAa,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;KACvD;IACD,IAAI,IAAA,0CAAkB,EAAC,QAAQ,CAAC,EAAE;QAChC,aAAa,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;KAC/C;IACD,IAAI,IAAA,0CAAkB,EAAC,YAAY,CAAC,EAAE;QACpC,aAAa,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;KACnD;IAED,OAAO;QACL;YACE,SAAS;YACT,oBAAoB;YACpB,QAAQ;YACR,YAAY;SACb;QACD,aAAa;KACd,CAAC;AACJ,CAAC,CAAC;AArCW,QAAA,YAAY,gBAqCvB;AAEK,MAAM,gBAAgB,GAAG,CAC9B,IAA0C,EAC3B,EAAE;IACjB,IAAI;QACF,MAAM,mBAAmB,GAAG,MAAM,IAAA,0CAAsB,EACtD,IAAI,CAAC,oBAAoB,EACzB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,YAAY,CAClB,CAAC;QAEF,MAAM,sBAAsB,GAAG,MAAM,IAAA,oCAAkB,EACrD,IAAI,CAAC,oBAAoB,EACzB,mBAAmB,CAAC,WAAW,EAC/B,IAAI,CAAC,SAAS,CACf,CAAC;QAEF,OAAO,CAAC,GAAG,CACT,IAAA,aAAK,EAAC,gDAAgD,IAAI,CAAC,SAAS,IAAI,CAAC,CAC1E,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAA,aAAK,EAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KACrE;IAAC,OAAO,CAAC,EAAE;QACV,MAAM,KAAK,GAAG,IAAA,mCAAW,EAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CACT,IAAA,WAAG,EAAC,kDAAkD,IAAI,CAAC,SAAS,IAAI,CAAC,CAC1E,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAA,WAAG,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;KACjD;AACH,CAAC,CAAA,CAAC;AA3BW,QAAA,gBAAgB,oBA2B3B"}

package/dist/commands/service/sync-permissions/sync-permission-command.d.ts

@@ -0,0 +1,3 @@
+import { CommandModule } from 'yargs';
+import { GetSyncPermissionsOptions } from './sync-permissions-options';
+export declare const syncPermissionsCommand: CommandModule<unknown, GetSyncPermissionsOptions>;

package/dist/commands/service/sync-permissions/sync-permission-command.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.syncPermissionsCommand = void 0;
+const tslib_1 = require("tslib");
+const chalk_1 = require("chalk");
+const sync_permissions_1 = require("./sync-permissions");
+exports.syncPermissionsCommand = {
+    builder: (yargs) => {
+        return yargs
+            .option('serviceId', {
+            describe: 'Service ID the permissions should be synchronized to. If no value is explicity given, environment variable SERVICE_ID will be used.',
+            alias: 'i',
+            string: true,
+        })
+            .option('idServiceAuthBaseURL', {
+            describe: 'ID Service Authentication Endpoint Base URL. If no value is explicity given, environment variable ID_SERVICE_AUTH_BASE_URL will be used.',
+            alias: 'a',
+            string: true,
+        })
+            .option('permissionDefinitionJsonPath', {
+            describe: 'Path to permission-definition.json file. The default location is src/generated/security/permission-definition.json',
+            alias: 'p',
+            string: true,
+        })
+            .option('clientId', {
+            describe: 'Client ID of a Service Account which has Synchronize Permission permission assigned. If no value is explicity given, environment variable SERVICE_ACCOUNT_CLIENT_ID will be used.',
+            alias: 'c',
+            string: true,
+        })
+            .option('clientSecret', {
+            describe: 'Client Secret for the above Client ID. If no value is explicity given, environment variable SERVICE_ACCOUNT_CLIENT_SECRET will be used.',
+            alias: 's',
+            string: true,
+        });
+    },
+    handler: (args) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
+        const [validatedArgs, errorMessages] = (0, sync_permissions_1.validateArgs)(args);
+        if (errorMessages.length > 0) {
+            console.log((0, chalk_1.red)('Some required arguments are missing and/or are erroneous.'));
+            errorMessages.map((message) => {
+                console.log((0, chalk_1.yellow)(`${message}`));
+            });
+            console.log();
+        }
+        else {
+            yield (0, sync_permissions_1.synchronizePermissions)(validatedArgs);
+        }
+    }),
+};
+//# sourceMappingURL=sync-permission-command.js.map

package/dist/commands/service/sync-permissions/sync-permission-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-permission-command.js","sourceRoot":"","sources":["../../../../src/commands/service/sync-permissions/sync-permission-command.ts"],"names":[],"mappings":";;;;AAAA,iCAAoC;AAEpC,yDAA0E;AAG7D,QAAA,sBAAsB,GAG/B;IACF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACjB,OAAO,KAAK;aACT,MAAM,CAAC,WAAW,EAAE;YACnB,QAAQ,EACN,qIAAqI;YACvI,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,sBAAsB,EAAE;YAC9B,QAAQ,EACN,0IAA0I;YAC5I,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,8BAA8B,EAAE;YACtC,QAAQ,EACN,oHAAoH;YACtH,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,UAAU,EAAE;YAClB,QAAQ,EACN,mLAAmL;YACrL,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,cAAc,EAAE;YACtB,QAAQ,EACN,yIAAyI;YAC3I,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAO,IAAI,EAAE,EAAE;QACtB,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,IAAA,+BAAY,EAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;YAC5B,OAAO,CAAC,GAAG,CACT,IAAA,WAAG,EAAC,2DAA2D,CAAC,CACjE,CAAC;YACF,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC5B,OAAO,CAAC,GAAG,CAAC,IAAA,cAAM,EAAC,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,EAAE,CAAC;SACf;aAAM;YACL,MAAM,IAAA,yCAAsB,EAAC,aAAa,CAAC,CAAC;SAC7C;IACH,CAAC,CAAA;CACF,CAAC"}

package/dist/commands/service/sync-permissions/sync-permissions-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-permissions-options.js","sourceRoot":"","sources":["../../../../src/commands/service/sync-permissions/sync-permissions-options.ts"],"names":[],"mappings":""}

package/dist/commands/service/sync-permissions/sync-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-permissions.js","sourceRoot":"","sources":["../../../../src/commands/service/sync-permissions/sync-permissions.ts"],"names":[],"mappings":";;;;AAAA,iEAGmC;AAEnC,yEAAgF;AAChF,iCAA2C;AAC3C,yBAAyB;AAGlB,MAAM,YAAY,GAAG,CAC1B,IAA+B,EACkB,EAAE;;IACnD,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,MAAM,SAAS,GAAG,MAAA,MAAA,IAAI,CAAC,SAAS,mCAAI,OAAO,CAAC,GAAG,CAAC,UAAU,mCAAI,EAAE,CAAC;IAEjE,MAAM,oBAAoB,GACxB,MAAA,MAAA,IAAI,CAAC,oBAAoB,mCAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,mCAAI,EAAE,CAAC;IAC1E,MAAM,4BAA4B,GAChC,MAAA,IAAI,CAAC,4BAA4B,mCACjC,qDAAqD,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAA,MAAA,IAAI,CAAC,QAAQ,mCAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,mCAAI,EAAE,CAAC;IAC9E,MAAM,YAAY,GAChB,MAAA,MAAA,IAAI,CAAC,YAAY,mCAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,mCAAI,EAAE,CAAC;IAEvE,IAAI,IAAA,0CAAkB,EAAC,SAAS,CAAC,EAAE;QACjC,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;KAChD;SAAM,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE;QACtC,aAAa,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;KACzD;IACD,IAAI,IAAA,0CAAkB,EAAC,oBAAoB,CAAC,EAAE;QAC5C,aAAa,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;KACvD;IACD,IAAI,IAAA,0CAAkB,EAAC,QAAQ,CAAC,EAAE;QAChC,aAAa,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;KAC/C;IACD,IAAI,IAAA,0CAAkB,EAAC,YAAY,CAAC,EAAE;QACpC,aAAa,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;KACnD;IAED,OAAO;QACL;YACE,SAAS;YACT,oBAAoB;YACpB,4BAA4B;YAC5B,QAAQ;YACR,YAAY;SACb;QACD,aAAa;KACd,CAAC;AACJ,CAAC,CAAC;AAzCW,QAAA,YAAY,gBAyCvB;AAEK,MAAM,sBAAsB,GAAG,CACpC,IAAyC,EAC1B,EAAE;IACjB,IAAI;QACF,MAAM,mBAAmB,GAAG,MAAM,IAAA,0CAAsB,EACtD,IAAI,CAAC,oBAAoB,EACzB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,YAAY,CAClB,CAAC;QAEF,OAAO,CAAC,GAAG,CACT,IAAA,cAAM,EAAC,4BAA4B,IAAI,CAAC,4BAA4B,EAAE,CAAC,CACxE,CAAC;QAEF,MAAM,oBAAoB,GAAyB,IAAI,CAAC,KAAK,CAC3D,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAC5D,CAAC;QAEF,IACE,oBAAoB,KAAK,SAAS;YAClC,oBAAoB,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAC7C;YACA,OAAO,CAAC,GAAG,CACT,IAAA,cAAM,EACJ,qCAAqC,IAAI,CAAC,4BAA4B,mDAAmD,CAC1H,CACF,CAAC;YACF,OAAO;SACR;QAED,MAAM,qBAAqB,GAAG,MAAM,IAAA,0CAAwB,EAC1D,IAAI,CAAC,oBAAoB,EACzB,mBAAmB,CAAC,WAAW,EAC/B,IAAI,CAAC,SAAS,EACd,oBAAoB,CACrB,CAAC;QAEF,OAAO,CAAC,GAAG,CACT,IAAA,aAAK,EACH,sDAAsD,IAAI,CAAC,SAAS,IAAI,CACzE,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAA,aAAK,EAAC,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KACpE;IAAC,OAAO,CAAC,EAAE;QACV,MAAM,KAAK,GAAG,IAAA,mCAAW,EAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CACT,IAAA,WAAG,EACD,qEAAqE,IAAI,CAAC,SAAS,IAAI,CACxF,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAA,WAAG,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;KACjD;AACH,CAAC,CAAA,CAAC;AApDW,QAAA,sBAAsB,0BAoDjC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axinom/mosaic-cli",
-  "version": "0.31.0-rc.7",
+  "version": "0.31.0-rc.8",
   "description": "The Axinom Mosaic CLI",
   "author": "Axinom",
   "license": "PROPRIETARY",
@@ -34,8 +34,8 @@
     "@asyncapi/diff": "^0.4.1",
     "@asyncapi/modelina": "^1.8.4",
     "@asyncapi/parser": "^2.0.2",
-    "@axinom/mosaic-id-link-be": "^0.19.0-rc.7",
-    "@axinom/mosaic-service-common": "^0.47.0-rc.7",
+    "@axinom/mosaic-id-link-be": "^0.19.0-rc.8",
+    "@axinom/mosaic-service-common": "^0.47.0-rc.8",
     "@graphql-inspector/core": "^3.1.2",
     "@stoplight/spectral-core": "^1.18.3",
     "@stoplight/spectral-parsers": "^1.0.3",
@@ -72,5 +72,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "ed089f2391fef0170a5a30341e33da33a3861ebf"
+  "gitHead": "4f20dff1faef3634d5352fbc4dabb0556b9fe1d0"
 }

package/src/commands/service/index.ts

@@ -1,7 +1,6 @@
-import { red, yellow } from 'chalk';
 import { CommandModule } from 'yargs';
-import { synchronizePermissions, validateArgs } from './sync-permissions';
-import { GetSyncPermissionsOptions } from './sync-permissions-options';
+import { purgePermissionsCommand } from './purge-permissions/purge-permissions-command';
+import { syncPermissionsCommand } from './sync-permissions/sync-permission-command';
 
 export const service: CommandModule<unknown, unknown> = {
   command: 'service',
@@ -11,59 +10,15 @@ export const service: CommandModule<unknown, unknown> = {
       .command(
         'sync-permissions',
         'Synchronize permissions for a given service with ID Service.',
-        syncPermissions,
+        syncPermissionsCommand,
+      )
+      .command(
+        'purge-permissions',
+        'Purge permissions for a given service from ID Service.',
+        purgePermissionsCommand,
       )
       .demandCommand(),
   handler: (_args) => {
     console.log('Please pick a sub command related to Mosaic services.');
   },
 };
-
-const syncPermissions: CommandModule<unknown, GetSyncPermissionsOptions> = {
-  builder: (yargs) => {
-    return yargs
-      .option('serviceId', {
-        describe:
-          'Service ID the permissions should be synchronized to. If no value is explicity given, environment variable SERVICE_ID will be used.',
-        alias: 'i',
-        string: true,
-      })
-      .option('idServiceAuthBaseURL', {
-        describe:
-          'ID Service Authentication Endpoint Base URL. If no value is explicity given, environment variable ID_SERVICE_AUTH_BASE_URL will be used.',
-        alias: 'a',
-        string: true,
-      })
-      .option('permissionDefinitionJsonPath', {
-        describe:
-          'Path to permission-definition.json file. The default location is src/generated/security/permission-definition.json',
-        alias: 'p',
-        string: true,
-      })
-      .option('clientId', {
-        describe:
-          'Client ID of a Service Account which has Synchronize Permission permission assigned. If no value is explicity given, environment variable SERVICE_ACCOUNT_CLIENT_ID will be used.',
-        alias: 'c',
-        string: true,
-      })
-      .option('clientSecret', {
-        describe:
-          'Client Secret for the above Client ID. If no value is explicity given, environment variable SERVICE_ACCOUNT_CLIENT_SECRET will be used.',
-        alias: 's',
-        string: true,
-      });
-  },
-  handler: async (args) => {
-    const [validatedArgs, errorMessages] = validateArgs(args);
-    if (errorMessages.length > 0) {
-      console.log(red('Some required arguments are missing.'));
-      errorMessages.map((message) => {
-        console.log(yellow(`${message}`));
-      });
-
-      console.log();
-    } else {
-      await synchronizePermissions(validatedArgs);
-    }
-  },
-};

package/src/commands/service/purge-permissions/purge-permissions-command.ts

@@ -0,0 +1,52 @@
+import { red, yellow } from 'chalk';
+import { CommandModule } from 'yargs';
+import { purgePermissions, validateArgs } from './purge-permissions';
+import { GetPurgePermissionsOptions } from './purge-permissions-options';
+
+export const purgePermissionsCommand: CommandModule<
+  unknown,
+  GetPurgePermissionsOptions
+> = {
+  builder: (yargs) => {
+    return yargs
+      .option('serviceId', {
+        describe:
+          'Service ID the permissions should be purged from. If no value is explicity given, environment variable SERVICE_ID will be used.',
+        alias: 'i',
+        string: true,
+      })
+      .option('idServiceAuthBaseURL', {
+        describe:
+          'ID Service Authentication Endpoint Base URL. If no value is explicity given, environment variable ID_SERVICE_AUTH_BASE_URL will be used.',
+        alias: 'a',
+        string: true,
+      })
+      .option('clientId', {
+        describe:
+          'Client ID of a Service Account which has Synchronize Permission permission assigned. If no value is explicity given, environment variable SERVICE_ACCOUNT_CLIENT_ID will be used.',
+        alias: 'c',
+        string: true,
+      })
+      .option('clientSecret', {
+        describe:
+          'Client Secret for the above Client ID. If no value is explicity given, environment variable SERVICE_ACCOUNT_CLIENT_SECRET will be used.',
+        alias: 's',
+        string: true,
+      });
+  },
+  handler: async (args) => {
+    const [validatedArgs, errorMessages] = validateArgs(args);
+    if (errorMessages.length > 0) {
+      console.log(
+        red('Some required arguments are missing and/or are erroneous.'),
+      );
+      errorMessages.map((message) => {
+        console.log(yellow(`${message}`));
+      });
+
+      console.log();
+    } else {
+      await purgePermissions(validatedArgs);
+    }
+  },
+};

package/src/commands/service/purge-permissions/purge-permissions-options.ts

@@ -0,0 +1,9 @@
+/**
+ * Options to Purge Permissions
+ */
+export interface GetPurgePermissionsOptions {
+  serviceId?: string;
+  idServiceAuthBaseURL?: string;
+  clientId?: string;
+  clientSecret?: string;
+}

package/src/commands/service/purge-permissions/purge-permissions.ts

@@ -0,0 +1,75 @@
+import {
+  getServiceAccountToken,
+  purgePermissions as purgePermissionsBe,
+} from '@axinom/mosaic-id-link-be';
+import { ensureError, isNullOrWhitespace } from '@axinom/mosaic-service-common';
+import { green, red } from 'chalk';
+import { GetPurgePermissionsOptions } from './purge-permissions-options';
+
+export const validateArgs = (
+  args: GetPurgePermissionsOptions,
+): [Required<GetPurgePermissionsOptions>, string[]] => {
+  const errorMessages: string[] = [];
+
+  const serviceId = args.serviceId ?? process.env.SERVICE_ID ?? '';
+
+  const idServiceAuthBaseURL =
+    args.idServiceAuthBaseURL ?? process.env.ID_SERVICE_AUTH_BASE_URL ?? '';
+  const clientId = args.clientId ?? process.env.SERVICE_ACCOUNT_CLIENT_ID ?? '';
+  const clientSecret =
+    args.clientSecret ?? process.env.SERVICE_ACCOUNT_CLIENT_SECRET ?? '';
+
+  if (isNullOrWhitespace(serviceId)) {
+    errorMessages.push('[serviceId] is required.');
+  } else if (serviceId.startsWith('ax-')) {
+    errorMessages.push(`[serviceId] cannot start with ax-`);
+  }
+  if (isNullOrWhitespace(idServiceAuthBaseURL)) {
+    errorMessages.push('[idServiceBaseURL] is required.');
+  }
+  if (isNullOrWhitespace(clientId)) {
+    errorMessages.push('[clientId] is required.');
+  }
+  if (isNullOrWhitespace(clientSecret)) {
+    errorMessages.push('[clientSecret] is required.');
+  }
+
+  return [
+    {
+      serviceId,
+      idServiceAuthBaseURL,
+      clientId,
+      clientSecret,
+    },
+    errorMessages,
+  ];
+};
+
+export const purgePermissions = async (
+  args: Required<GetPurgePermissionsOptions>,
+): Promise<void> => {
+  try {
+    const serviceAccountToken = await getServiceAccountToken(
+      args.idServiceAuthBaseURL,
+      args.clientId,
+      args.clientSecret,
+    );
+
+    const purgePermissionResults = await purgePermissionsBe(
+      args.idServiceAuthBaseURL,
+      serviceAccountToken.accessToken,
+      args.serviceId,
+    );
+
+    console.log(
+      green(`Permissions purged successfully for Service [${args.serviceId}].`),
+    );
+    console.log(green(JSON.stringify(purgePermissionResults, null, 2)));
+  } catch (e) {
+    const error = ensureError(e);
+    console.log(
+      red(`Error while purging permission for Service ID [${args.serviceId}].`),
+    );
+    console.log(red(JSON.stringify(error.message)));
+  }
+};

package/src/commands/service/sync-permissions/sync-permission-command.ts

@@ -0,0 +1,58 @@
+import { red, yellow } from 'chalk';
+import { CommandModule } from 'yargs';
+import { synchronizePermissions, validateArgs } from './sync-permissions';
+import { GetSyncPermissionsOptions } from './sync-permissions-options';
+
+export const syncPermissionsCommand: CommandModule<
+  unknown,
+  GetSyncPermissionsOptions
+> = {
+  builder: (yargs) => {
+    return yargs
+      .option('serviceId', {
+        describe:
+          'Service ID the permissions should be synchronized to. If no value is explicity given, environment variable SERVICE_ID will be used.',
+        alias: 'i',
+        string: true,
+      })
+      .option('idServiceAuthBaseURL', {
+        describe:
+          'ID Service Authentication Endpoint Base URL. If no value is explicity given, environment variable ID_SERVICE_AUTH_BASE_URL will be used.',
+        alias: 'a',
+        string: true,
+      })
+      .option('permissionDefinitionJsonPath', {
+        describe:
+          'Path to permission-definition.json file. The default location is src/generated/security/permission-definition.json',
+        alias: 'p',
+        string: true,
+      })
+      .option('clientId', {
+        describe:
+          'Client ID of a Service Account which has Synchronize Permission permission assigned. If no value is explicity given, environment variable SERVICE_ACCOUNT_CLIENT_ID will be used.',
+        alias: 'c',
+        string: true,
+      })
+      .option('clientSecret', {
+        describe:
+          'Client Secret for the above Client ID. If no value is explicity given, environment variable SERVICE_ACCOUNT_CLIENT_SECRET will be used.',
+        alias: 's',
+        string: true,
+      });
+  },
+  handler: async (args) => {
+    const [validatedArgs, errorMessages] = validateArgs(args);
+    if (errorMessages.length > 0) {
+      console.log(
+        red('Some required arguments are missing and/or are erroneous.'),
+      );
+      errorMessages.map((message) => {
+        console.log(yellow(`${message}`));
+      });
+
+      console.log();
+    } else {
+      await synchronizePermissions(validatedArgs);
+    }
+  },
+};

package/dist/commands/service/sync-permissions-options.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sync-permissions-options.js","sourceRoot":"","sources":["../../../src/commands/service/sync-permissions-options.ts"],"names":[],"mappings":""}

package/dist/commands/service/sync-permissions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sync-permissions.js","sourceRoot":"","sources":["../../../src/commands/service/sync-permissions.ts"],"names":[],"mappings":";;;;AAAA,iEAGmC;AAEnC,yEAAgF;AAChF,iCAA2C;AAC3C,yBAAyB;AAGlB,MAAM,YAAY,GAAG,CAC1B,IAA+B,EACkB,EAAE;;IACnD,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,MAAM,SAAS,GAAG,MAAA,MAAA,IAAI,CAAC,SAAS,mCAAI,OAAO,CAAC,GAAG,CAAC,UAAU,mCAAI,EAAE,CAAC;IAEjE,MAAM,oBAAoB,GACxB,MAAA,MAAA,IAAI,CAAC,oBAAoB,mCAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,mCAAI,EAAE,CAAC;IAC1E,MAAM,4BAA4B,GAChC,MAAA,IAAI,CAAC,4BAA4B,mCACjC,qDAAqD,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAA,MAAA,IAAI,CAAC,QAAQ,mCAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,mCAAI,EAAE,CAAC;IAC9E,MAAM,YAAY,GAChB,MAAA,MAAA,IAAI,CAAC,YAAY,mCAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,mCAAI,EAAE,CAAC;IAEvE,IAAI,IAAA,0CAAkB,EAAC,SAAS,CAAC,EAAE;QACjC,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;KAChD;SAAM,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE;QACtC,aAAa,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;KACzD;IACD,IAAI,IAAA,0CAAkB,EAAC,oBAAoB,CAAC,EAAE;QAC5C,aAAa,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;KACvD;IACD,IAAI,IAAA,0CAAkB,EAAC,QAAQ,CAAC,EAAE;QAChC,aAAa,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;KAC/C;IACD,IAAI,IAAA,0CAAkB,EAAC,YAAY,CAAC,EAAE;QACpC,aAAa,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;KACnD;IAED,OAAO;QACL;YACE,SAAS;YACT,oBAAoB;YACpB,4BAA4B;YAC5B,QAAQ;YACR,YAAY;SACb;QACD,aAAa;KACd,CAAC;AACJ,CAAC,CAAC;AAzCW,QAAA,YAAY,gBAyCvB;AAEK,MAAM,sBAAsB,GAAG,CACpC,IAAyC,EAC1B,EAAE;IACjB,IAAI;QACF,MAAM,mBAAmB,GAAG,MAAM,IAAA,0CAAsB,EACtD,IAAI,CAAC,oBAAoB,EACzB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,YAAY,CAClB,CAAC;QAEF,OAAO,CAAC,GAAG,CACT,IAAA,cAAM,EAAC,4BAA4B,IAAI,CAAC,4BAA4B,EAAE,CAAC,CACxE,CAAC;QAEF,MAAM,oBAAoB,GAAyB,IAAI,CAAC,KAAK,CAC3D,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAC5D,CAAC;QAEF,IACE,oBAAoB,KAAK,SAAS;YAClC,oBAAoB,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAC7C;YACA,OAAO,CAAC,GAAG,CACT,IAAA,cAAM,EACJ,qCAAqC,IAAI,CAAC,4BAA4B,mDAAmD,CAC1H,CACF,CAAC;YACF,OAAO;SACR;QAED,MAAM,qBAAqB,GAAG,MAAM,IAAA,0CAAwB,EAC1D,IAAI,CAAC,oBAAoB,EACzB,mBAAmB,CAAC,WAAW,EAC/B,IAAI,CAAC,SAAS,EACd,oBAAoB,CACrB,CAAC;QAEF,OAAO,CAAC,GAAG,CACT,IAAA,aAAK,EACH,sDAAsD,IAAI,CAAC,SAAS,IAAI,CACzE,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAA,aAAK,EAAC,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KACpE;IAAC,OAAO,CAAC,EAAE;QACV,MAAM,KAAK,GAAG,IAAA,mCAAW,EAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CACT,IAAA,WAAG,EACD,qEAAqE,IAAI,CAAC,SAAS,IAAI,CACxF,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAA,WAAG,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;KACjD;AACH,CAAC,CAAA,CAAC;AApDW,QAAA,sBAAsB,0BAoDjC"}