@flowcore/cli-plugin-iam 1.6.1 → 1.8.0

package/dist/resource-types/policy.resource.d.ts

@@ -6,6 +6,7 @@ export declare enum PolicyDocumentAction {
     FETCH = "fetch",
     INGEST = "ingest",
     READ = "read",
+    SENSITIVE_DATA_FETCH = "sensitive-data-fetch",
     WRITE = "write"
 }
 export declare const policyDto: z.ZodObject<z.objectUtil.extendShape<{
@@ -26,15 +27,15 @@ export declare const policyDto: z.ZodObject<z.objectUtil.extendShape<{
         description: z.ZodOptional<z.ZodString>;
         flowcoreManaged: z.ZodOptional<z.ZodBoolean>;
         policyDocuments: z.ZodArray<z.ZodObject<{
-            action: z.ZodUnion<[z.ZodArray<z.ZodNativeEnum<typeof PolicyDocumentAction>, "many">, z.ZodNativeEnum<typeof PolicyDocumentAction>]>;
+            action: z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodNativeEnum<typeof PolicyDocumentAction>, z.ZodString]>, "many">, z.ZodUnion<[z.ZodNativeEnum<typeof PolicyDocumentAction>, z.ZodString]>]>;
             resource: z.ZodString;
             statementId: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
-            action: PolicyDocumentAction | PolicyDocumentAction[];
+            action: string | string[];
             resource: string;
             statementId?: string | undefined;
         }, {
-            action: PolicyDocumentAction | PolicyDocumentAction[];
+            action: string | string[];
             resource: string;
             statementId?: string | undefined;
         }>, "many">;
@@ -43,7 +44,7 @@ export declare const policyDto: z.ZodObject<z.objectUtil.extendShape<{
     }, "strip", z.ZodTypeAny, {
         version: string;
         policyDocuments: {
-            action: PolicyDocumentAction | PolicyDocumentAction[];
+            action: string | string[];
             resource: string;
             statementId?: string | undefined;
         }[];
@@ -53,7 +54,7 @@ export declare const policyDto: z.ZodObject<z.objectUtil.extendShape<{
     }, {
         version: string;
         policyDocuments: {
-            action: PolicyDocumentAction | PolicyDocumentAction[];
+            action: string | string[];
             resource: string;
             statementId?: string | undefined;
         }[];
@@ -71,7 +72,7 @@ export declare const policyDto: z.ZodObject<z.objectUtil.extendShape<{
     spec: {
         version: string;
         policyDocuments: {
-            action: PolicyDocumentAction | PolicyDocumentAction[];
+            action: string | string[];
             resource: string;
             statementId?: string | undefined;
         }[];
@@ -89,7 +90,7 @@ export declare const policyDto: z.ZodObject<z.objectUtil.extendShape<{
     spec: {
         version: string;
         policyDocuments: {
-            action: PolicyDocumentAction | PolicyDocumentAction[];
+            action: string | string[];
             resource: string;
             statementId?: string | undefined;
         }[];

package/dist/resource-types/policy.resource.js

@@ -1,3 +1,4 @@
+import { inspect } from "node:util";
 import { baseResourceDto } from "@flowcore/cli-plugin-core";
 import { diff } from "@opentf/obj-diff";
 import enquirer from "enquirer";
@@ -10,6 +11,7 @@ export var PolicyDocumentAction;
     PolicyDocumentAction["FETCH"] = "fetch";
     PolicyDocumentAction["INGEST"] = "ingest";
     PolicyDocumentAction["READ"] = "read";
+    PolicyDocumentAction["SENSITIVE_DATA_FETCH"] = "sensitive-data-fetch";
     PolicyDocumentAction["WRITE"] = "write";
 })(PolicyDocumentAction || (PolicyDocumentAction = {}));
 export const policyDto = baseResourceDto.extend({
@@ -18,8 +20,8 @@ export const policyDto = baseResourceDto.extend({
         flowcoreManaged: z.boolean().optional(),
         policyDocuments: z.array(z.object({
             action: z
-                .array(z.nativeEnum(PolicyDocumentAction))
-                .or(z.nativeEnum(PolicyDocumentAction)),
+                .array(z.union([z.nativeEnum(PolicyDocumentAction), z.string()]))
+                .or(z.union([z.nativeEnum(PolicyDocumentAction), z.string()])),
             resource: z.string(),
             statementId: z.string().optional(),
         })),
@@ -83,7 +85,7 @@ export class PolicyService {
                 flowcoreManaged: parsedPolicy.spec.flowcoreManaged ?? false,
             };
             if (diff({
-                ...omit(existingPolicy, ["id"]),
+                ...omit(existingPolicy, ["id", "frn"]),
                 policyDocuments: existingPolicy.policyDocuments.map((doc) => useStatementIds ? doc : omit(doc, ["statementId"])),
             }, newPolicy).length === 0) {
                 return false;
@@ -91,7 +93,7 @@ export class PolicyService {
             if (!skipConfirmation) {
                 this.logger.info("Policy has changed, do you want to apply these changes?");
                 this.logger.info(diffString({
-                    ...omit(existingPolicy, ["id"]),
+                    ...omit(existingPolicy, ["id", "frn"]),
                     policyDocuments: existingPolicy.policyDocuments.map((doc) => useStatementIds ? doc : omit(doc, ["statementId"])),
                 }, newPolicy, { color: true, full: true }));
                 const { confirm } = await enquirer.prompt({
@@ -119,6 +121,7 @@ export class PolicyService {
                 this.logger.fatal(`Failed to create policy with error(${err.error.status} - ${err.error.code}): ${err.error.message}`);
             }
             else {
+                console.log(`Error: ${error}`, inspect(error, { depth: null }));
                 this.logger.fatal(`Failed to create policy with unknown error: ${error}`);
             }
         }

package/dist/resource-types/role-binding.resource.d.ts

@@ -28,17 +28,17 @@ export declare const roleBindingDto: z.ZodObject<z.objectUtil.extendShape<{
             type: "key" | "user";
         }>, "many">;
     }, "strip", z.ZodTypeAny, {
+        role: string;
         subjects: {
             id: string;
             type: "key" | "user";
         }[];
-        role: string;
     }, {
+        role: string;
         subjects: {
             id: string;
             type: "key" | "user";
         }[];
-        role: string;
     }>;
 }>, "strip", z.ZodTypeAny, {
     kind: string;
@@ -48,11 +48,11 @@ export declare const roleBindingDto: z.ZodObject<z.objectUtil.extendShape<{
         tenant: string;
     };
     spec: {
+        role: string;
         subjects: {
             id: string;
             type: "key" | "user";
         }[];
-        role: string;
     };
 }, {
     kind: string;
@@ -62,11 +62,11 @@ export declare const roleBindingDto: z.ZodObject<z.objectUtil.extendShape<{
         tenant: string;
     };
     spec: {
+        role: string;
         subjects: {
             id: string;
             type: "key" | "user";
         }[];
-        role: string;
     };
 }>;
 export type RoleBinding = z.infer<typeof roleBindingDto>;

package/dist/resource-types/role.resource.d.ts

@@ -18,14 +18,14 @@ export declare const roleDto: z.ZodObject<z.objectUtil.extendShape<{
     spec: z.ZodObject<{
         description: z.ZodOptional<z.ZodString>;
         flowcoreManaged: z.ZodOptional<z.ZodBoolean>;
-        policies: z.ZodArray<z.ZodString, "many">;
+        policies: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
         policies: string[];
         description?: string | undefined;
         flowcoreManaged?: boolean | undefined;
     }, {
-        policies: string[];
         description?: string | undefined;
+        policies?: string[] | undefined;
         flowcoreManaged?: boolean | undefined;
     }>;
 }>, "strip", z.ZodTypeAny, {
@@ -48,8 +48,8 @@ export declare const roleDto: z.ZodObject<z.objectUtil.extendShape<{
         tenant: string;
     };
     spec: {
-        policies: string[];
         description?: string | undefined;
+        policies?: string[] | undefined;
         flowcoreManaged?: boolean | undefined;
     };
 }>;

package/dist/resource-types/role.resource.js

@@ -1,14 +1,14 @@
+import { inspect } from "node:util";
 import { baseResourceDto } from "@flowcore/cli-plugin-core";
 import { diff } from "@opentf/obj-diff";
 import enquirer from "enquirer";
 import { diffString } from "json-diff";
-import { inspect } from "node:util";
 import { z } from "zod";
 export const roleDto = baseResourceDto.extend({
     spec: z.object({
         description: z.string().optional(),
         flowcoreManaged: z.boolean().optional(),
-        policies: z.array(z.string()),
+        policies: z.array(z.string()).default([]),
     }),
 });
 export class RoleService {

package/dist/utils/combine-merge.util.d.ts

@@ -1,2 +1,2 @@
-import merge from 'deepmerge';
+import merge from "deepmerge";
 export declare const combineMerge: (target: unknown[], source: unknown[], options: merge.ArrayMergeOptions) => unknown[];

package/dist/utils/combine-merge.util.js

@@ -1,4 +1,4 @@
-import merge from 'deepmerge';
+import merge from "deepmerge";
 export const combineMerge = (target, source, options) => {
     const destination = [...target];
     for (const [index, item] of source.entries()) {

package/dist/utils/error-message.util.d.ts

@@ -0,0 +1 @@
+export declare function getErrorMessage(err: Error): string;

package/dist/utils/error-message.util.js

@@ -0,0 +1,4 @@
+export function getErrorMessage(err) {
+    const httpErr = err;
+    return err.message ?? httpErr.error?.message ?? String(err);
+}

package/dist/utils/fetch-manifest.util.js

@@ -1,7 +1,7 @@
+import fs from "node:fs";
 import { ux } from "@oclif/core";
 import merge from "deepmerge";
 import { load } from "js-yaml";
-import fs from "node:fs";
 import { combineMerge } from "./combine-merge.util.js";
 import { readPipe } from "./read-pipe.util.js";
 export const FetchManifestUtil = {
@@ -9,7 +9,7 @@ export const FetchManifestUtil = {
         const contents = [];
         for (const file of files) {
             if (file === "-") {
-                contents.push(await readPipe() || "");
+                contents.push((await readPipe()) || "");
             }
             else if (fs.existsSync(file)) {
                 contents.push(fs.readFileSync(file, "utf8"));

package/dist/utils/read-pipe.util.js

@@ -1,14 +1,14 @@
-export const readPipe = () => new Promise(resolve => {
+export const readPipe = () => new Promise((resolve) => {
     const stdin = process.openStdin();
     stdin.setEncoding("utf8");
-    let data = '';
-    stdin.on('data', chunk => {
+    let data = "";
+    stdin.on("data", (chunk) => {
         data += chunk;
     });
-    stdin.on('end', () => {
+    stdin.on("end", () => {
         resolve(data);
     });
     if (stdin.isTTY) {
-        resolve('');
+        resolve("");
     }
 });