@codiac.io/codiac-cli 1.2.18

package/lib/uilogic/cloud-resource-configurators/az-interactive-login-configurator.js

@@ -0,0 +1,248 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AzureInteractiveLoginConfigurator = void 0;
+const tslib_1 = require("tslib");
+const open = require("open");
+const inversify_1 = require("inversify");
+const codiac_common_1 = require("@codiac.io/codiac-common");
+const codiac_domain_1 = require("@codiac.io/codiac-domain");
+const codiac_ops_common_1 = require("@codiac.io/codiac-ops-common");
+const codiac_relay_1 = require("../../apis/codiac-relay");
+const ops_1 = require("../../ops");
+const relay_websocket_client_1 = require("../../relay/wsclient/relay-websocket-client");
+const _ = require("lodash");
+/** Implements AuthorizationCode Flow with a popup-browser interactive login
+ * for user to authenticate and provide consent.
+ */
+let AzureInteractiveLoginConfigurator = class AzureInteractiveLoginConfigurator {
+    constructor(opMeta, genRelayClient, 
+    // @inject(RelaySocketListener) private relayWebSocket: RelaySocketListener,
+    relayWebSocket, codiacUser, _ui, _styler, logger) {
+        this.opMeta = opMeta;
+        this.genRelayClient = genRelayClient;
+        this.relayWebSocket = relayWebSocket;
+        this.codiacUser = codiacUser;
+        this._ui = _ui;
+        this._styler = _styler;
+        this.logger = logger;
+    }
+    get cloudProvider() {
+        return codiac_domain_1.CloudProviderEnum.azure;
+    }
+    /** Performs an EXPLICIT login sequence in ALL CASES.
+     * It does NOT attempt or defer to a silent authentication.
+     *
+     * iow:  Invoke this when the silent methods have failed. */
+    promptToLogin(azSubscriptionId, suppressConfirmations, userName, password, webSocketId) {
+        var _a, _b, _c;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            try {
+                // 1. Establish 2-way messaging channel w the relay
+                let commChannel;
+                // if (webSocketId) {
+                //   commChannel = { socketId: webSocketId };
+                // } else {
+                //   commChannel = {
+                //     socketId: await this.openWebSocket()
+                //   };
+                // }
+                commChannel = {
+                    socketId: yield this.relayWebSocket.open() // .start()
+                };
+                // 2. Get the login url
+                let authResult = yield this.genRelayClient.Call.csp_login_interactive({ providerCode: this.cloudProvider, commChannel: commChannel, correlationId: this.opMeta.correlationId }, {});
+                if (authResult.error)
+                    throw authResult.error;
+                let loginUrl = (_a = authResult.output) === null || _a === void 0 ? void 0 : _a.loginUrl;
+                if (loginUrl == undefined)
+                    throw new Error(`No interactive login url found.`);
+                // 3. Trigger the external auth sequence in a browser window.
+                let result = yield this.invokeBrowserSequence(loginUrl);
+                yield this.relayWebSocket.close();
+                return result;
+            }
+            catch (err) {
+                if (_.isEmpty(err.message)) {
+                    this.logger.error(`Error logging into ${this.cloudProvider}`, err);
+                }
+                throw new Error(`Error logging into ${this.cloudProvider}: ${(_b = err.name) !== null && _b !== void 0 ? _b : ""} ${(_c = err.message) !== null && _c !== void 0 ? _c : "(not details available)"}`);
+            }
+        });
+    }
+    /** Opens the the external login url in a browser window.
+     * Returns at the end of the sequence.
+     * Throws on any errors.
+     */
+    invokeBrowserSequence(loginUrl) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                try {
+                    let isCompleted = false;
+                    let isAuthed = false; // Read this from the websocket message / fail / timeout.
+                    let cspUserName; // Read this from the websocket message
+                    let handlerId = this.relayWebSocket.listenFor("loginComplete", msg => {
+                        var _a, _b, _c, _d;
+                        isCompleted = true;
+                        // TODO: get these from the completion message
+                        isAuthed = Boolean((_b = (_a = msg.payload) === null || _a === void 0 ? void 0 : _a.success) !== null && _b !== void 0 ? _b : "false") === true;
+                        cspUserName = (_d = (_c = msg.payload) === null || _c === void 0 ? void 0 : _c.cspUserName) !== null && _d !== void 0 ? _d : "anonymous@domain.com";
+                        this.logger.debug(`Interactive ${this.cloudProvider} login sequence completed [${cspUserName}]`, msg);
+                        this.relayWebSocket.unlisten("loginComplete", handlerId);
+                        // resolve([isAuthed, cspUserName]);
+                        // return;
+                    });
+                    // 3. Sprout the login interaction in a browser popup
+                    let childProcess = yield open(loginUrl, {});
+                    // 4. Wait for the completion message via websocket
+                    let timeout = Date.now() + 300000; // 5 mins
+                    this._ui.startSpinner(`Waiting on interactive login...`);
+                    let intervalId = setInterval(() => {
+                        if (isCompleted) {
+                            // Kill the popup browser process (ie: close the window) cuz we know the sequence has completed.
+                            // childProcess.kill();  // Commneted out bc it doesnt actually close the browser window.
+                            this._ui.stopSpinner("Completed");
+                            clearInterval(intervalId);
+                            resolve([isAuthed, cspUserName !== null && cspUserName !== void 0 ? cspUserName : ""]);
+                        }
+                        else if (Date.now() > timeout) {
+                            // console.log(".");
+                            this._ui.stopSpinner("Timed out");
+                            clearInterval(intervalId);
+                            resolve([false, "none"]); // <--- This is our safety net
+                        }
+                    }, 250);
+                }
+                catch (err) {
+                    reject(err);
+                }
+            }));
+        });
+    }
+    /** Performs an EXPLICIT logout sequence in ALL CASES.
+     * It does NOT attempt or defer to a silent authentication.
+     *  */
+    promptToLogout() {
+        var _a, _b, _c, _d;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            try {
+                // 1. Establish 2-way messaging channel w the relay
+                let commChannel;
+                // if (webSocketId) {
+                //   commChannel = { socketId: webSocketId };
+                // } else {
+                //   commChannel = {
+                //     socketId: await this.openWebSocket()
+                //   };
+                // }
+                commChannel = {
+                    socketId: yield this.relayWebSocket.open() // .start()
+                };
+                // 2. Get the logout url
+                let authResult = yield this.genRelayClient.Call.csp_logout_interactive({ providerCode: this.cloudProvider, commChannel: commChannel, correlationId: this.opMeta.correlationId }, {});
+                if (authResult.error)
+                    throw authResult.error;
+                let logoutUrl = (_a = authResult.output) === null || _a === void 0 ? void 0 : _a.logoutUrl;
+                if (logoutUrl == undefined)
+                    throw new Error(`No interactive login url found.`);
+                // 3. Trigger the external auth sequence in a browser window.
+                let result = yield this.invokeLogoutBrowserSequence(logoutUrl, (_b = authResult.output) === null || _b === void 0 ? void 0 : _b.cspUserName);
+                yield this.relayWebSocket.close();
+                return result;
+            }
+            catch (err) {
+                if (_.isEmpty(err.message)) {
+                    this.logger.error(`Error logging out from ${this.cloudProvider}`, err);
+                }
+                throw new Error(`Error logging out from ${this.cloudProvider}: ${(_c = err.name) !== null && _c !== void 0 ? _c : ""} ${(_d = err.message) !== null && _d !== void 0 ? _d : "(no details available)"}`);
+            }
+        });
+    }
+    /** Opens the the external login url in a browser window.
+   * Returns at the end of the sequence.
+   * Throws on any errors.
+   *
+   * @param currentCspUserName (Required, but may be undefined) The username assocaited with any tokens or credentials we may currently have on file for the given Cloud Service Provider (CSP).  If this argument is undefined or empty, this command will NOT wait for the logout sequence to complete in the browser.
+   */
+    invokeLogoutBrowserSequence(logoutUrl, currentCspUserName) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                try {
+                    let isCompleted = false;
+                    let isAuthed = false; // Read this from the websocket message / fail / timeout.
+                    let cspUserName; // Read this from the websocket message
+                    /** If false, this method will simply open the logout popoup without standing by for the ultimate result of the logout sequence.
+                     *
+                     * Set this to false when we already have no tokens or credentials to clear for that cloud provider.
+                     *
+                     * EXPLANATION: We need this parameter because Azure decides AFTER we open the popup whether or not to redirect to our completion endpoint
+                     * *(it wont redirect if we are already logged out. Remember: Microsoft caches our csp session in the browser,
+                     * whereas Codiac caches our tokens in encrypted stores on the local machine)*.
+                     * That is, if we are already logged out, then we're gonna end up hanging here waiting for a message that'll never come (thanks, M$).
+                     * SO instead, we can set this parameter to false when we dont have any creds or tokens on file,
+                     * then we can just popup the logout page and not worry about waiting for a response,
+                     * because we dont have anything to clean up on our end.
+                     *
+                     * Do we need to fire the logout at all in that scenario?  Perhaps. We may want to run this command anyway to make sure our systems are in sync. */
+                    let waitForResult = !_.isEmpty(currentCspUserName);
+                    if (waitForResult) {
+                        let handlerId = this.relayWebSocket.listenFor("logoutComplete", msg => {
+                            isCompleted = true;
+                            // TODO: get these from the completion message
+                            isAuthed = true;
+                            cspUserName = currentCspUserName;
+                            this.logger.debug(`Interactive logout sequence completed`, msg);
+                            this.relayWebSocket.unlisten("logoutComplete", handlerId);
+                            // resolve([isAuthed, cspUserName]);
+                            // return;
+                        });
+                    }
+                    // 3. Sprout the login interaction in a browser popup
+                    let childProcess = yield open(logoutUrl, {});
+                    if (waitForResult) {
+                        // 4. Wait for the completion message via websocket
+                        let timeout = Date.now() + 300000; // 5 mins
+                        this._ui.startSpinner(`Waiting on interactive logout...`);
+                        let intervalId = setInterval(() => {
+                            var _a;
+                            if (isCompleted) {
+                                // Kill the popup browser process (ie: close the window) cuz we know the sequence has completed.
+                                // childProcess.kill();  // Commneted out bc it doesnt actually close the browser window.
+                                this._ui.stopSpinner("Completed");
+                                clearInterval(intervalId);
+                                resolve([isAuthed, (_a = cspUserName !== null && cspUserName !== void 0 ? cspUserName : currentCspUserName) !== null && _a !== void 0 ? _a : ""]);
+                            }
+                            else if (Date.now() > timeout) {
+                                // console.log(".");
+                                this._ui.stopSpinner("Timed out");
+                                clearInterval(intervalId);
+                                resolve([false, "none"]); // <--- This is our safety net
+                            }
+                        }, 250);
+                    }
+                    else {
+                        resolve([true, ""]);
+                    }
+                }
+                catch (err) {
+                    reject(err);
+                }
+            }));
+        });
+    }
+};
+AzureInteractiveLoginConfigurator = tslib_1.__decorate([
+    (0, inversify_1.injectable)(),
+    tslib_1.__param(0, (0, inversify_1.inject)(ops_1.OperationMeta)),
+    tslib_1.__param(1, (0, inversify_1.inject)(codiac_relay_1.RelayClient)),
+    tslib_1.__param(2, (0, inversify_1.inject)(relay_websocket_client_1.RelayWebsocketClient)),
+    tslib_1.__param(3, (0, inversify_1.inject)(codiac_ops_common_1.UserNameTenantCode)),
+    tslib_1.__param(4, (0, inversify_1.inject)(codiac_ops_common_1.INTERFACES_OPS.IUserInputProvider)),
+    tslib_1.__param(5, (0, inversify_1.inject)(codiac_ops_common_1.INTERFACES_OPS.IOutputStyler)),
+    tslib_1.__param(6, (0, inversify_1.inject)(codiac_common_1.INTERFACES.IBetterLogger)),
+    tslib_1.__metadata("design:paramtypes", [ops_1.OperationMeta,
+        codiac_relay_1.RelayClient,
+        relay_websocket_client_1.RelayWebsocketClient,
+        codiac_ops_common_1.UserNameTenantCode, Object, Object, Object])
+], AzureInteractiveLoginConfigurator);
+exports.AzureInteractiveLoginConfigurator = AzureInteractiveLoginConfigurator;
+//# sourceMappingURL=az-interactive-login-configurator.js.map

package/lib/uilogic/cloud-resource-configurators/az-interactive-login-configurator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"az-interactive-login-configurator.js","sourceRoot":"","sources":["../../../src/uilogic/cloud-resource-configurators/az-interactive-login-configurator.ts"],"names":[],"mappings":";;;;AAAA,6BAA6B;AAC7B,yCAA+C;AAC/C,4DAAqE;AACrE,4DAA6D;AAC7D,oEAAqH;AACrH,0DAAwE;AAGxE,mCAA0C;AAE1C,wFAAmF;AACnF,4BAA6B;AAG7B;;GAEG;AAEI,IAAM,iCAAiC,GAAvC,MAAM,iCAAiC;IAC5C,YACiC,MAAqB,EACpB,cAA8B;IAC9D,4EAA4E;IACtC,cAAoC,EACtC,UAA8B,EACf,GAAuB,EAC5B,OAAsB,EAC1B,MAAqB;QAPhC,WAAM,GAAN,MAAM,CAAe;QACpB,mBAAc,GAAd,cAAc,CAAgB;QAExB,mBAAc,GAAd,cAAc,CAAsB;QACtC,eAAU,GAAV,UAAU,CAAoB;QACf,QAAG,GAAH,GAAG,CAAoB;QAC5B,YAAO,GAAP,OAAO,CAAe;QAC1B,WAAM,GAAN,MAAM,CAAe;IAEjE,CAAC;IAGD,IAAW,aAAa;QACtB,OAAO,iCAAiB,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;;gEAG4D;IAC/C,aAAa,CACxB,gBAAqC,EACrC,qBAA2C,EAC3C,QAA6B,EAC7B,QAA6B,EAC7B,WAAoB;;;YAEpB,IAAI;gBAEF,mDAAmD;gBAEnD,IAAI,WAA2B,CAAC;gBAChC,qBAAqB;gBACrB,6CAA6C;gBAC7C,WAAW;gBACX,oBAAoB;gBACpB,2CAA2C;gBAC3C,OAAO;gBACP,IAAI;gBACJ,WAAW,GAAG;oBACZ,QAAQ,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAE,WAAW;iBACxD,CAAC;gBAEF,uBAAuB;gBACvB,IAAI,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;gBACpL,IAAI,UAAU,CAAC,KAAK;oBAAE,MAAM,UAAU,CAAC,KAAK,CAAC;gBAE7C,IAAI,QAAQ,GAAG,MAAA,UAAU,CAAC,MAAM,0CAAE,QAAQ,CAAC;gBAC3C,IAAI,QAAQ,IAAI,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBAE9E,6DAA6D;gBAC7D,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;gBAExD,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;gBAElC,OAAO,MAAM,CAAC;aACf;YAAC,OAAO,GAAG,EAAE;gBACZ,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;oBAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;iBACpE;gBACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,aAAa,KAAK,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,IAAI,MAAA,GAAG,CAAC,OAAO,mCAAI,yBAAyB,EAAE,CAAC,CAAC;aAC5H;;KACF;IAGD;;;OAGG;IACW,qBAAqB,CAAC,QAAgB;;YAClD,OAAO,IAAI,OAAO,CAAoB,CAAO,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC9D,IAAI;oBACF,IAAI,WAAW,GAAY,KAAK,CAAC;oBACjC,IAAI,QAAQ,GAAY,KAAK,CAAC,CAAE,yDAAyD;oBACzF,IAAI,WAA+B,CAAC,CAAC,uCAAuC;oBAE5E,IAAI,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,CAAC,EAAE;;wBACnE,WAAW,GAAG,IAAI,CAAC;wBAEnB,8CAA8C;wBAC9C,QAAQ,GAAG,OAAO,CAAC,MAAA,MAAA,GAAG,CAAC,OAAO,0CAAE,OAAO,mCAAI,OAAO,CAAC,KAAK,IAAI,CAAC;wBAC7D,WAAW,GAAG,MAAA,MAAA,GAAG,CAAC,OAAO,0CAAE,WAAW,mCAAI,sBAAsB,CAAC;wBAEjE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,aAAa,8BAA8B,WAAW,GAAG,EAAE,GAAG,CAAC,CAAC;wBACtG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;wBAEzD,oCAAoC;wBACpC,UAAU;oBACZ,CAAC,CAAC,CAAC;oBAGH,qDAAqD;oBACrD,IAAI,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBAE5C,mDAAmD;oBACnD,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAE,SAAS;oBAC7C,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC,CAAC;oBACzD,IAAI,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;wBAChC,IAAI,WAAW,EAAE;4BACf,gGAAgG;4BAChG,yFAAyF;4BACzF,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;4BAClC,aAAa,CAAC,UAAU,CAAC,CAAC;4BAC1B,OAAO,CAAC,CAAC,QAAQ,EAAE,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,EAAE,CAAC,CAAC,CAAA;yBACvC;6BAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE;4BAC/B,oBAAoB;4BACpB,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;4BAClC,aAAa,CAAC,UAAU,CAAC,CAAC;4BAC1B,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAE,8BAA8B;yBAC1D;oBACH,CAAC,EAAE,GAAG,CAAC,CAAC;iBAET;gBAAC,OAAO,GAAG,EAAE;oBACZ,MAAM,CAAC,GAAG,CAAC,CAAC;iBACb;YACH,CAAC,CAAA,CAAC,CAAC;QACL,CAAC;KAAA;IAKD;;UAEM;IACO,cAAc;;;YACzB,IAAI;gBAEF,mDAAmD;gBAEnD,IAAI,WAA2B,CAAC;gBAChC,qBAAqB;gBACrB,6CAA6C;gBAC7C,WAAW;gBACX,oBAAoB;gBACpB,2CAA2C;gBAC3C,OAAO;gBACP,IAAI;gBACJ,WAAW,GAAG;oBACZ,QAAQ,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAE,WAAW;iBACxD,CAAC;gBAEF,wBAAwB;gBACxB,IAAI,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;gBACrL,IAAI,UAAU,CAAC,KAAK;oBAAE,MAAM,UAAU,CAAC,KAAK,CAAC;gBAE7C,IAAI,SAAS,GAAG,MAAA,UAAU,CAAC,MAAM,0CAAE,SAAS,CAAC;gBAC7C,IAAI,SAAS,IAAI,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBAE/E,6DAA6D;gBAC7D,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,MAAA,UAAU,CAAC,MAAM,0CAAE,WAAW,CAAC,CAAC;gBAE/F,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;gBAElC,OAAO,MAAM,CAAC;aACf;YAAC,OAAO,GAAG,EAAE;gBACZ,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;oBAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;iBACxE;gBACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,aAAa,KAAK,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,IAAI,MAAA,GAAG,CAAC,OAAO,mCAAI,wBAAwB,EAAE,CAAC,CAAC;aAC/H;;KACF;IAGD;;;;;KAKC;IACa,2BAA2B,CAAC,SAAiB,EAAE,kBAAuC;;YAClG,OAAO,IAAI,OAAO,CAAoB,CAAO,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC9D,IAAI;oBACF,IAAI,WAAW,GAAY,KAAK,CAAC;oBACjC,IAAI,QAAQ,GAAY,KAAK,CAAC,CAAE,yDAAyD;oBACzF,IAAI,WAA+B,CAAC,CAAC,uCAAuC;oBAG5E;;;;;;;;;;;;uKAYmJ;oBACnJ,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;oBAGnD,IAAI,aAAa,EAAE;wBACjB,IAAI,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE;4BACpE,WAAW,GAAG,IAAI,CAAC;4BAEnB,8CAA8C;4BAC9C,QAAQ,GAAG,IAAI,CAAC;4BAChB,WAAW,GAAG,kBAAkB,CAAC;4BAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;4BAChE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;4BAE1D,oCAAoC;4BACpC,UAAU;wBACZ,CAAC,CAAC,CAAC;qBACJ;oBAGD,qDAAqD;oBACrD,IAAI,YAAY,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBAE7C,IAAI,aAAa,EAAE;wBACjB,mDAAmD;wBACnD,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAE,SAAS;wBAC7C,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,kCAAkC,CAAC,CAAC;wBAC1D,IAAI,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;;4BAChC,IAAI,WAAW,EAAE;gCACf,gGAAgG;gCAChG,yFAAyF;gCACzF,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;gCAClC,aAAa,CAAC,UAAU,CAAC,CAAC;gCAC1B,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAA,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,kBAAkB,mCAAI,EAAE,CAAC,CAAC,CAAA;6BAC7D;iCAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE;gCAC/B,oBAAoB;gCACpB,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;gCAClC,aAAa,CAAC,UAAU,CAAC,CAAC;gCAC1B,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAE,8BAA8B;6BAC1D;wBACH,CAAC,EAAE,GAAG,CAAC,CAAC;qBACT;yBAAM;wBACL,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;qBACpB;iBAEF;gBAAC,OAAO,GAAG,EAAE;oBACZ,MAAM,CAAC,GAAG,CAAC,CAAC;iBACb;YACH,CAAC,CAAA,CAAC,CAAC;QACL,CAAC;KAAA;CAEF,CAAA;AAnPY,iCAAiC;IAD7C,IAAA,sBAAU,GAAE;IAGR,mBAAA,IAAA,kBAAM,EAAC,mBAAa,CAAC,CAAA;IACrB,mBAAA,IAAA,kBAAM,EAAC,0BAAc,CAAC,CAAA;IAEtB,mBAAA,IAAA,kBAAM,EAAC,6CAAoB,CAAC,CAAA;IAC5B,mBAAA,IAAA,kBAAM,EAAC,sCAAkB,CAAC,CAAA;IAC1B,mBAAA,IAAA,kBAAM,EAAC,kCAAc,CAAC,kBAAkB,CAAC,CAAA;IACzC,mBAAA,IAAA,kBAAM,EAAC,kCAAc,CAAC,aAAa,CAAC,CAAA;IACpC,mBAAA,IAAA,kBAAM,EAAC,0BAAU,CAAC,aAAa,CAAC,CAAA;6CAPM,mBAAa;QACJ,0BAAc;QAER,6CAAoB;QAC1B,sCAAkB;GANzD,iCAAiC,CAmP7C;AAnPY,8EAAiC"}

package/lib/uilogic/cloud-resource-configurators/azure-resource-configurator.d.ts

@@ -0,0 +1,110 @@
+import { IAuditable, IBetterLogger } from "@codiac.io/codiac-common";
+import { CloudProviderEnum, ClusterDef, ImageRegistry } from "../../apis/codiac-api/contracts";
+import { RelayClient as GenRelayClient } from "../../apis/codiac-relay";
+import { ExtendedRelayClient } from "../../relay/extended-relay-client";
+import { AzureKeyVaultDef } from "../../relay/contracts/contracts";
+import { IEntryValidator, IOutputStyler, IUserInputProvider, UserNameTenantCode, ValidationResult } from "@codiac.io/codiac-ops-common";
+import { SecurityAccount } from "@codiac.io/codiac-domain/security-account";
+import { SecurityAccountTypeEnum } from "@codiac.io/codiac-domain/security-account-type-enum";
+import { IRegistryConfigurator } from "../i-registry-configurator";
+import { IClusterConfigurator } from "../i-cluster-configurator";
+import { ISecretStoreConfigurator } from "../i-secret-store-configurator";
+export type ClusterIdentityDef = {
+    instance: SecurityAccount;
+    spec: {
+        type: SecurityAccountTypeEnum;
+        name: string;
+    };
+};
+/** Parameters by which to validate a string with a regular expression. */
+export declare class RegExValidator implements IEntryValidator<string> {
+    rx: RegExp;
+    whyInvalid?: string | undefined;
+    allowUndefined: boolean;
+    constructor(rx: RegExp, whyInvalid?: string | undefined, allowUndefined?: boolean);
+    isValid(candidate: string | undefined): ValidationResult;
+}
+/** Disallows undefined or whitespace */
+export declare class NonEmptyValidator implements IEntryValidator<string> {
+    private whyInvalid?;
+    constructor(whyInvalid?: string | undefined);
+    isValid(candidate: string | undefined): ValidationResult;
+}
+/** Walks the user through the selection of an existing
+ * or the declaration of a new image registry.
+ */
+export declare class AzureResourceConfigurator implements ISecretStoreConfigurator, IRegistryConfigurator, IClusterConfigurator {
+    private relayClient;
+    private genRelayClient;
+    private codiacUser;
+    private _ui;
+    private _styler;
+    private logger;
+    constructor(relayClient: ExtendedRelayClient, genRelayClient: GenRelayClient, codiacUser: UserNameTenantCode, _ui: IUserInputProvider, _styler: IOutputStyler, logger: IBetterLogger);
+    private cliExec;
+    readonly cloudProvider = CloudProviderEnum.azure;
+    /** Currently supporting only a single reg type per cloud provider. */
+    private regType;
+    /** Validates the given name for use as the name of an entity in Azure.
+     *
+     * 1-50
+     * alphanumerics and hyphens,
+     * starting with a letter and ending with an alphanumeric.
+     *
+     * @see https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules
+     */
+    private azServiceNameValidator;
+    /** Validates the given name for use as the name of an entity in Azure.
+     *
+     *  1-90
+     *  Underscores, hyphens, periods, and letters or digits as defined by the Char.IsLetterOrDigit function.
+     *
+     *  Valid characters are members of the following categories in UnicodeCategory:
+     *  UppercaseLetter,
+     *  LowercaseLetter,
+     *  TitlecaseLetter,
+     *  ModifierLetter,
+     *  OtherLetter,
+     *  DecimalDigitNumber.
+     *
+     *  Can't end with period.
+     *
+     * NOTE: the azure portal says Parentheses `()` are also valid characters in a resource group name.
+     *
+     * @see https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftresources
+     */
+    private azRgNameValidator;
+    /** Validates the given name for use as the name of a userAssignedIdentity in Azure.
+     *
+     * 3-128 Alphanumerics, hyphens, and underscores,
+     * starting with a letter or number.
+     *
+     * @see https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftmanagedidentity
+     */
+    private azIdentityNameValidator;
+    promptToLogin(providerSubscriptionId?: string, suppressConfirmations?: boolean, providedUserName?: string, providedSecret?: string): Promise<[boolean, string]>;
+    captureImageRegistry(): Promise<ImageRegistry>;
+    private promptForSubscriptionId;
+    defineCluster(initial: Partial<ClusterDef>, defaults?: Partial<ClusterDef>): Promise<{
+        spec: ClusterDef;
+        defaults: Partial<ClusterDef>;
+    }>;
+    private promptForClusterIdentity;
+    private promptForVnetSubnet;
+    private getVnets;
+    private promptForResourceGroup;
+    private getResourceGroups;
+    /** Asks the user whether to keep the default version, and if not presents a select list. */
+    private promptForLocation;
+    /** Queries data centers under the current user's subscription.
+     *
+     * @see:  https://docs.microsoft.com/en-us/rest/api/resources/subscriptions/listlocations
+     * DEVNOTE:  This uses the subx set in the current user state (az account show), so is it possible that this is NOT the subscription chosen a few steps earlier? */
+    private getAvailableLocations;
+    /** Asks the user whether to keep the default version, and if not presents a select list. */
+    private promptForK8sVersion;
+    private promptForNodeSpec;
+    private getAvailableNodeSizes;
+    captureSecretStore(/* storeProv: ISecretStoreProvisioner, */ defaults?: Partial<AzureKeyVaultDef>): Promise<AzureKeyVaultDef>;
+    protected createAuditable(): IAuditable;
+}