@inf-monkeys-tech/monkeys-cli 0.12.13 → 0.12.14

package/dist/identity-governance/runtime.js

@@ -0,0 +1,30 @@
+import { AuthService } from '../credential/auth-service.js';
+import { resolveCommandRuntime } from '../credential/command-runtime.js';
+import { EXIT_CODES } from '../errors/cli-error.js';
+import { loadSemanticRuntime } from '../semantic/runtime.js';
+import { fail } from './contracts.js';
+export async function loadIdentityRuntime(subscription, refresh) {
+    const resolved = await resolveCommandRuntime(subscription, undefined, { inheritDefaultTeam: false });
+    if (!resolved.context.expectedSurfaces.includes('kernel') || resolved.context.team)
+        fail('IDENTITY_KERNEL_CONTEXT_REQUIRED', 'User and group administration requires a Kernel Subscription without Team context.', EXIT_CODES.authorization);
+    const session = await new AuthService(resolved.secrets).whoAmI(resolved.context);
+    if (!session.surfaces.kernel || !session.principal.userId)
+        fail('IDENTITY_KERNEL_PRINCIPAL_REQUIRED', 'An authenticated Kernel user principal is required.', EXIT_CODES.authorization);
+    const runtime = await loadSemanticRuntime({ subscription, forceRefresh: refresh, inheritDefaultTeam: false });
+    if (runtime.context.fingerprint !== resolved.context.fingerprint)
+        fail('IDENTITY_CONTEXT_CHANGED', 'Subscription context changed during preflight. Start again.', EXIT_CODES.configuration);
+    return { ...runtime, principalId: session.principal.userId };
+}
+export function identityMeta(runtime) {
+    return {
+        authSurface: 'kernel',
+        teamMode: 'none',
+        subscription: runtime.context.subscription,
+        deployment: runtime.context.deployment,
+        tenant: runtime.context.tenant,
+        principalId: runtime.principalId,
+        contextFingerprint: runtime.context.fingerprint,
+        schemaDigest: runtime.digest,
+    };
+}
+//# sourceMappingURL=runtime.js.map

package/dist/identity-governance/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/identity-governance/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAwB,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAMtC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,YAAoB,EAAE,OAAgB;IAC9E,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI;QAChF,IAAI,CACF,kCAAkC,EAClC,oFAAoF,EACpF,UAAU,CAAC,aAAa,CACzB,CAAC;IACJ,MAAM,OAAO,GAAG,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM;QACvD,IAAI,CAAC,oCAAoC,EAAE,qDAAqD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC9H,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9G,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW;QAC9D,IAAI,CAAC,0BAA0B,EAAE,6DAA6D,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC5H,OAAO,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAwB;IACnD,OAAO;QACL,WAAW,EAAE,QAAQ;QACrB,QAAQ,EAAE,MAAM;QAChB,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY;QAC1C,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU;QACtC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW;QAC/C,YAAY,EAAE,OAAO,CAAC,MAAM;KAC7B,CAAC;AACJ,CAAC"}