@flowcore/cli-plugin-iam 1.5.0 → 1.6.1

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [1.6.1](https://github.com/flowcore-io/cli-plugin-iam/compare/v1.6.0...v1.6.1) (2025-03-20)
+
+
+### Bug Fixes
+
+* **role:** :art: improve formatting in GetRole command output, removed console logs ([ee41739](https://github.com/flowcore-io/cli-plugin-iam/commit/ee417394174d567abf48133d767ba70bedb2bdc2))
+
+## [1.6.0](https://github.com/flowcore-io/cli-plugin-iam/compare/v1.5.0...v1.6.0) (2025-02-16)
+
+
+### Features
+
+* add edit role command to modify role details interactively ([d67eb3a](https://github.com/flowcore-io/cli-plugin-iam/commit/d67eb3a28d25ca7cac0683fb9aeb6f478386f8e8))
+
+
+### Bug Fixes
+
+* :rotating_light: fixed linting errors ([7f481bd](https://github.com/flowcore-io/cli-plugin-iam/commit/7f481bd90bf67edfbd483dbd351b52ebba0d0bd2))
+
 ## [1.5.0](https://github.com/flowcore-io/cli-plugin-iam/compare/v1.4.0...v1.5.0) (2025-02-16)
 
 

package/README.md

@@ -18,7 +18,7 @@ $ npm install -g @flowcore/cli-plugin-iam
 $ iam COMMAND
 running command...
 $ iam (--version)
-@flowcore/cli-plugin-iam/1.5.0 linux-x64 node-v20.16.0
+@flowcore/cli-plugin-iam/1.6.1 linux-x64 node-v20.16.0
 $ iam --help [COMMAND]
 USAGE
   $ iam COMMAND
@@ -30,6 +30,7 @@ USAGE
 * [`iam delete policy NAME`](#iam-delete-policy-name)
 * [`iam delete role NAME`](#iam-delete-role-name)
 * [`iam edit policy NAME`](#iam-edit-policy-name)
+* [`iam edit role NAME`](#iam-edit-role-name)
 * [`iam get policy [NAME]`](#iam-get-policy-name)
 * [`iam get role [NAME]`](#iam-get-role-name)
 
@@ -54,7 +55,7 @@ DESCRIPTION
   Delete a policy
 ```
 
-_See code: [src/commands/delete/policy.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.5.0/src/commands/delete/policy.ts)_
+_See code: [src/commands/delete/policy.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.6.1/src/commands/delete/policy.ts)_
 
 ## `iam delete role NAME`
 
@@ -77,7 +78,7 @@ DESCRIPTION
   Delete a role
 ```
 
-_See code: [src/commands/delete/role.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.5.0/src/commands/delete/role.ts)_
+_See code: [src/commands/delete/role.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.6.1/src/commands/delete/role.ts)_
 
 ## `iam edit policy NAME`
 
@@ -103,7 +104,33 @@ EXAMPLES
   $ FC_EDITOR=code flowcore iam edit policy my-policy -t my-tenant
 ```
 
-_See code: [src/commands/edit/policy.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.5.0/src/commands/edit/policy.ts)_
+_See code: [src/commands/edit/policy.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.6.1/src/commands/edit/policy.ts)_
+
+## `iam edit role NAME`
+
+Edit a role in your preferred editor
+
+```
+USAGE
+  $ iam edit role NAME -t <value> [--profile <value>]
+
+ARGUMENTS
+  NAME  name
+
+FLAGS
+  -t, --tenant=<value>   (required) tenant
+      --profile=<value>  Specify the configuration profile to use
+
+DESCRIPTION
+  Edit a role in your preferred editor
+
+EXAMPLES
+  $ flowcore iam edit role my-role -t my-tenant
+
+  $ FC_EDITOR=code flowcore iam edit role my-role -t my-tenant
+```
+
+_See code: [src/commands/edit/role.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.6.1/src/commands/edit/role.ts)_
 
 ## `iam get policy [NAME]`
 
@@ -126,7 +153,7 @@ DESCRIPTION
   Get a policy
 ```
 
-_See code: [src/commands/get/policy.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.5.0/src/commands/get/policy.ts)_
+_See code: [src/commands/get/policy.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.6.1/src/commands/get/policy.ts)_
 
 ## `iam get role [NAME]`
 
@@ -149,5 +176,5 @@ DESCRIPTION
   Get a role
 ```
 
-_See code: [src/commands/get/role.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.5.0/src/commands/get/role.ts)_
+_See code: [src/commands/get/role.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.6.1/src/commands/get/role.ts)_
 <!-- commandsstop -->

package/dist/commands/edit/role.d.ts

@@ -0,0 +1,16 @@
+import { BaseCommand } from "@flowcore/cli-plugin-config";
+export declare const EDIT_ROLE_ARGS: {
+    NAME: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+};
+export default class EditRole extends BaseCommand<typeof EditRole> {
+    static args: {
+        NAME: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        tenant: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+    private spawnEditor;
+}

package/dist/commands/edit/role.js

@@ -0,0 +1,115 @@
+import { BaseCommand, ValidateLogin } from "@flowcore/cli-plugin-config";
+import { ClientFactory } from "@flowcore/cli-plugin-core";
+import { Args, Flags } from "@oclif/core";
+import { spawn } from "node:child_process";
+import { unlink, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { tryit } from "radash";
+import { v4 as uuidv4 } from "uuid";
+import { OrganizationService } from "../../services/organization.service.js";
+import { Api as IamApi } from "../../utils/clients/iam/Api.js";
+export const EDIT_ROLE_ARGS = {
+    NAME: Args.string({ description: "name", required: true }),
+};
+export default class EditRole extends BaseCommand {
+    static args = EDIT_ROLE_ARGS;
+    static description = "Edit a role in your preferred editor";
+    static examples = [
+        "$ flowcore iam edit role my-role -t my-tenant",
+        "$ FC_EDITOR=code flowcore iam edit role my-role -t my-tenant",
+    ];
+    static flags = {
+        tenant: Flags.string({
+            char: "t",
+            description: "tenant",
+            required: true,
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(EditRole);
+        const graphqlClient = await ClientFactory.create(this.cliConfiguration, this.logger);
+        const organizationService = new OrganizationService(graphqlClient);
+        const organizations = await organizationService.getMyOrganizations();
+        const iamClient = new IamApi();
+        const config = this.cliConfiguration.getConfig();
+        const login = new ValidateLogin(config.login.url);
+        await login.validate(config, this.cliConfiguration, true);
+        const { auth } = config;
+        if (!auth?.accessToken) {
+            this.logger.fatal("Not logged in, run 'flowcore login'");
+        }
+        const organization = organizations.me.organizations.find((org) => org.organization.org === flags.tenant);
+        if (!organization) {
+            this.logger.fatal(`Organization ${flags.tenant} not found, or you are not a member`);
+        }
+        const [rolesErr, roles] = await tryit(iamClient.getApiV1RoleAssociationsOrganizationByOrganizationId)(organization.organization.id, {
+            headers: {
+                Authorization: `Bearer ${auth?.accessToken}`,
+            },
+        });
+        if (rolesErr) {
+            this.logger.fatal(`Failed to get roles: ${rolesErr.message}`);
+        }
+        const role = roles.data.find((role) => role.name === args.NAME);
+        if (!role) {
+            this.logger.fatal(`Role ${args.NAME} not found in tenant: ${flags.tenant}`);
+        }
+        // Create a temporary file with the role content
+        const tmpFile = join(tmpdir(), `role-${uuidv4()}.json`);
+        const roleContent = JSON.stringify({
+            description: role.description,
+            name: role.name,
+        }, null, 2);
+        try {
+            await writeFile(tmpFile, roleContent, "utf8");
+            await this.spawnEditor(tmpFile);
+            // Read and parse the edited content
+            const editedContent = await import(tmpFile, {
+                assert: { type: "json" },
+            });
+            // Update the role
+            const [updateErr] = await tryit(iamClient.patchApiV1RolesById)(role.id, {
+                description: editedContent.default.description,
+                id: role.id,
+                name: editedContent.default.name,
+                organizationId: organization.organization.id,
+            }, {
+                headers: {
+                    Authorization: `Bearer ${auth?.accessToken}`,
+                },
+            });
+            if (updateErr) {
+                this.logger.fatal(`Failed to update role: ${updateErr.message}`);
+            }
+            this.logger.info(`Role ${role.name} updated successfully`);
+        }
+        catch (error) {
+            this.logger.fatal(`Error editing role: ${error}`);
+        }
+        finally {
+            await unlink(tmpFile).catch(() => {
+                // Ignore error if file doesn't exist
+            });
+        }
+    }
+    async spawnEditor(filePath) {
+        return new Promise((resolve, reject) => {
+            const editor = process.env.FC_EDITOR || process.env.EDITOR || "vim";
+            const child = spawn(editor, [filePath], {
+                stdio: "inherit",
+            });
+            child.on("exit", (code) => {
+                if (code === 0) {
+                    resolve();
+                }
+                else {
+                    reject(new Error(`Editor process exited with code ${code}`));
+                }
+            });
+            child.on("error", (err) => {
+                reject(err);
+            });
+        });
+    }
+}

package/dist/commands/get/role.js

@@ -170,7 +170,6 @@ export default class GetRole extends BaseCommand {
         if (err) {
             this.logger.fatal(`Failed to get roles: ${err.message}`);
         }
-        console.log(userRoles.data);
         const headers = [
             "Role ID",
             "Name",

package/dist/resource-types/role.resource.js

@@ -129,7 +129,6 @@ export class RoleService {
                 this.logger.debug(`Created binding for policy ${policyId} to role ${existingRole.id}`);
             }
             for (const policy of toRemove) {
-                console.log(policy, alreadyLinkedPolicies.data);
                 const policyId = alreadyLinkedPolicies.data.find((p) => p.name === policy)?.id;
                 if (!policyId) {
                     this.logger.fatal(`Policy ${policy} not found`);

package/oclif.manifest.json

@@ -122,17 +122,20 @@
         "role.js"
       ]
     },
-    "get:policy": {
+    "edit:policy": {
       "aliases": [],
       "args": {
         "NAME": {
           "description": "name",
           "name": "NAME",
-          "required": false
+          "required": true
         }
       },
-      "description": "Get a policy",
-      "examples": [],
+      "description": "Edit a policy in your preferred editor",
+      "examples": [
+        "$ flowcore iam edit policy my-policy -t my-tenant",
+        "$ FC_EDITOR=code flowcore iam edit policy my-policy -t my-tenant"
+      ],
       "flags": {
         "profile": {
           "description": "Specify the configuration profile to use",
@@ -141,35 +144,19 @@
           "multiple": false,
           "type": "option"
         },
-        "json": {
-          "char": "j",
-          "description": "json output",
-          "name": "json",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
         "tenant": {
           "char": "t",
           "description": "tenant",
           "name": "tenant",
-          "required": false,
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "wide": {
-          "char": "w",
-          "description": "wide output",
-          "name": "wide",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "get:policy",
+      "id": "edit:policy",
       "pluginAlias": "@flowcore/cli-plugin-iam",
       "pluginName": "@flowcore/cli-plugin-iam",
       "pluginType": "core",
@@ -179,11 +166,59 @@
       "relativePath": [
         "dist",
         "commands",
-        "get",
+        "edit",
         "policy.js"
       ]
     },
-    "get:role": {
+    "edit:role": {
+      "aliases": [],
+      "args": {
+        "NAME": {
+          "description": "name",
+          "name": "NAME",
+          "required": true
+        }
+      },
+      "description": "Edit a role in your preferred editor",
+      "examples": [
+        "$ flowcore iam edit role my-role -t my-tenant",
+        "$ FC_EDITOR=code flowcore iam edit role my-role -t my-tenant"
+      ],
+      "flags": {
+        "profile": {
+          "description": "Specify the configuration profile to use",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "tenant": {
+          "char": "t",
+          "description": "tenant",
+          "name": "tenant",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "edit:role",
+      "pluginAlias": "@flowcore/cli-plugin-iam",
+      "pluginName": "@flowcore/cli-plugin-iam",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "edit",
+        "role.js"
+      ]
+    },
+    "get:policy": {
       "aliases": [],
       "args": {
         "NAME": {
@@ -192,7 +227,7 @@
           "required": false
         }
       },
-      "description": "Get a role",
+      "description": "Get a policy",
       "examples": [],
       "flags": {
         "profile": {
@@ -230,7 +265,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "get:role",
+      "id": "get:policy",
       "pluginAlias": "@flowcore/cli-plugin-iam",
       "pluginName": "@flowcore/cli-plugin-iam",
       "pluginType": "core",
@@ -241,23 +276,20 @@
         "dist",
         "commands",
         "get",
-        "role.js"
+        "policy.js"
       ]
     },
-    "edit:policy": {
+    "get:role": {
       "aliases": [],
       "args": {
         "NAME": {
           "description": "name",
           "name": "NAME",
-          "required": true
+          "required": false
         }
       },
-      "description": "Edit a policy in your preferred editor",
-      "examples": [
-        "$ flowcore iam edit policy my-policy -t my-tenant",
-        "$ FC_EDITOR=code flowcore iam edit policy my-policy -t my-tenant"
-      ],
+      "description": "Get a role",
+      "examples": [],
       "flags": {
         "profile": {
           "description": "Specify the configuration profile to use",
@@ -266,19 +298,35 @@
           "multiple": false,
           "type": "option"
         },
+        "json": {
+          "char": "j",
+          "description": "json output",
+          "name": "json",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "tenant": {
           "char": "t",
           "description": "tenant",
           "name": "tenant",
-          "required": true,
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "wide": {
+          "char": "w",
+          "description": "wide output",
+          "name": "wide",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "edit:policy",
+      "id": "get:role",
       "pluginAlias": "@flowcore/cli-plugin-iam",
       "pluginName": "@flowcore/cli-plugin-iam",
       "pluginType": "core",
@@ -288,10 +336,10 @@
       "relativePath": [
         "dist",
         "commands",
-        "edit",
-        "policy.js"
+        "get",
+        "role.js"
       ]
     }
   },
-  "version": "1.5.0"
+  "version": "1.6.1"
 }

package/package.json

@@ -91,7 +91,7 @@
 		"version": "oclif readme && git add README.md",
 		"update-schema": "rover graph introspect https://graph.api.flowcore.io/graphql -o schema.gql"
 	},
-	"version": "1.5.0",
+	"version": "1.6.1",
 	"bugs": "https://github.com/flowcore-io/cli-plugin-iam/issues",
 	"keywords": [
 		"oclif"