@inf-monkeys-tech/monkeys-cli 0.12.13 → 0.12.15

package/dist/identity-governance/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/identity-governance/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAkB,MAAM,KAAK,CAAC;AAE1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAwB,MAAM,wBAAwB,CAAC;AACvG,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE5E,OAAO,EAAE,mBAAmB,EAA0B,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EACL,IAAI,EACJ,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,sBAAsB,EACtB,UAAU,EACV,KAAK,EACL,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,GACX,MAAM,gBAAgB,CAAC;AAGxB,MAAM,OAAO,cAAc;IACJ,OAAO;IAA5B,YAAqB,OAAwB;uBAAxB,OAAO;IAAoB,CAAC;IAEjD,OAAO,CAAC,GAAsB;QAC5B,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW;YACrH,IAAI,CAAC,kCAAkC,EAAE,qDAAqD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAC5H,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,KAAK,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/F,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7B,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,CAAC,SAAS;YACV,SAAS,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YACtC,SAAS,CAAC,SAAS,KAAK,IAAI;YAC5B,SAAS,CAAC,SAAS,KAAK,QAAQ;YAChC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ;YAC9C,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI;YAClC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAC5G,CAAC;YACD,IAAI,CACF,gCAAgC,EAChC,+HAA+H,EAC/H,UAAU,CAAC,aAAa,EACxB,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9G,IAAI,CACF,kCAAkC,EAClC,yFAAyF,EACzF,UAAU,CAAC,aAAa,CACzB,CAAC;QACJ,OAAO,EAAE,GAAG,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IAC/E,CAAC;IAED,eAAe,CAAC,GAAsB,EAAE,EAAW,EAAE,IAAc;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,EAAE,KAAK,SAAS;YAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,SAAS,CAAC,eAAe,KAAK,MAAM,EAAE,CAAC;gBACjD,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,wBAAwB,EAAE,gDAAgD,CAAC,CAAC;YAC3G,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,WAC0D,CAAC;gBAC7F,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;gBAC9D,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,QAAQ,KAAK,IAAI;oBACvC,IAAI,CAAC,yBAAyB,EAAE,sEAAsE,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;gBACpI,IAAI,QAAQ,CAAC;gBACb,IAAI,CAAC;oBACH,QAAQ,GAAG,IAAI,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;wBAC7D,GAAG,MAAM;wBACT,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU;qBACjC,CAAC,CAAC;gBAClB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,QAAQ,CAAC,uGAAuG,EAAE;wBAC1H,KAAK;wBACL,IAAI,EAAE,8BAA8B;wBACpC,QAAQ,EAAE,UAAU,CAAC,aAAa;wBAClC,WAAW,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE;qBAC5E,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,IAAI,CAAC,wBAAwB,EAAE,qDAAqD,EAAE,UAAU,CAAC,UAAU,EAAE;wBAC3G,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;qBAChG,CAAC,CAAC;YACP,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,GAAsB,EAAE,MAAoB,EAAE,KAAK,GAAkE,EAAE;QACnI,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACpG,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;QACvC,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC3C,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,MAAM;gBACvC,IAAI;gBACJ,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;gBACzD,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,YAAY,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC1F,MAAM,IAAI,QAAQ,CAAC,iFAAiF,EAAE;gBACpG,KAAK;gBACL,IAAI,EAAE,mCAAmC;gBACzC,QAAQ,EAAE,UAAU,CAAC,OAAO;gBAC5B,WAAW,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE;aACtG,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC7E,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc;gBACpC,IAAI,CAAC,gCAAgC,EAAE,4BAA4B,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;YACjG,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK;gBAAE,MAAM,KAAK,CAAC;YACxB,MAAM,IAAI,QAAQ,CAAC,2EAA2E,EAAE;gBAC9F,KAAK;gBACL,IAAI,EAAE,mCAAmC;gBACzC,QAAQ,EAAE,UAAU,CAAC,OAAO;gBAC5B,WAAW,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE;aAC3H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CACR,GAAsB,EACtB,IAAkB,EAClB,KAAsB,EACtB,EAAW,EACX,OAAO,GAA2B,EAAE;QAEpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,IAAI,KAAyB,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,KAAK,EACL,qBAAqB,CAAC;YACpB,SAAS,EAAE,GAAG;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW;YACzC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACnC,EAAE;YACF,OAAO;SACR,CAAC,EACF,KAAK,EAAE,MAAM,EAAE,EAAE;YACf,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,IAAI,CAAC,6BAA6B,EAAE,8BAA8B,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;gBACtH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE;gBACtD,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;gBACnC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aAC1F,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC;gBACrG,IAAI,CAAC,6BAA6B,EAAE,kDAAkD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;YACpH,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAE,IAAI,CAAC,6BAA6B,EAAE,0CAA0C,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;gBAClI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;gBACxE,IAAI,CAAC,6BAA6B,EAAE,8BAA8B,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;YAChG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpG,CAAC,CACF,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK;YACvH,IAAI,CAAC,6BAA6B,EAAE,oDAAoD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QACtH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,KAAsB,EAAE,OAAO,GAA2B,EAAE;QAChE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,CAAC,KAAsB;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,WAAW,CAAC,KAAsB;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,CAAC,EAAU,EAAE,KAAsB,EAAE,OAAgB;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAU;QACnB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;YAAE,IAAI,CAAC,0BAA0B,EAAE,gDAAgD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QACjI,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,EAAU;QACpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;YAAE,IAAI,CAAC,0BAA0B,EAAE,iDAAiD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAClI,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;YACpB,IAAI,CAAC,0BAA0B,EAAE,wDAAwD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QACvH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,IAAa;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAI,IAAoD;IACrF,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO;QACvB,IAAI,CACF,iCAAiC,EACjC,gHAAgH,EAChH,UAAU,CAAC,UAAU,CACtB,CAAC;IACJ,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC"}

package/dist/identity-governance/contracts.d.ts

@@ -0,0 +1,142 @@
+import { z } from 'zod';
+import { type ExitCode } from '../errors/cli-error.js';
+export declare const MAX_MEMBERSHIP_TARGETS = 10000;
+export declare const idSchema: z.ZodString;
+export declare const groupRefSchema: z.ZodObject<{
+    id: z.ZodString;
+    code: z.ZodString;
+    name: z.ZodString;
+}, z.core.$strip>;
+export declare const membershipGroupSchema: z.ZodObject<{
+    id: z.ZodString;
+    code: z.ZodString;
+    name: z.ZodString;
+    protected: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const permissionSchema: z.ZodObject<{
+    id: z.ZodString;
+    code: z.ZodString;
+    name: z.ZodString;
+    resource: z.ZodString;
+    action: z.ZodString;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    createdTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+    updatedTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+}, z.core.$strip>;
+export declare const groupSchema: z.ZodObject<{
+    id: z.ZodString;
+    code: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    isSystem: z.ZodBoolean;
+    membershipEditable: z.ZodBoolean;
+    permissions: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        code: z.ZodString;
+        name: z.ZodString;
+        resource: z.ZodString;
+        action: z.ZodString;
+        description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        createdTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        updatedTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+    }, z.core.$strip>>;
+    createdTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+    updatedTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+}, z.core.$strip>;
+export declare const userSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    email: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    nickname: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    departmentName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    verified: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+    isBlocked: z.ZodOptional<z.ZodBoolean>;
+    blockStateVersion: z.ZodOptional<z.ZodString>;
+    blockReasons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        code: z.ZodString;
+    }, z.core.$strip>>>;
+    groups: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        code: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+    createdTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+    updatedTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+}, z.core.$strip>;
+export declare const userGroupsSchema: z.ZodObject<{
+    userId: z.ZodString;
+    direct: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        code: z.ZodString;
+        name: z.ZodString;
+        protected: z.ZodBoolean;
+    }, z.core.$strip>>;
+    mapped: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        code: z.ZodString;
+        name: z.ZodString;
+        protected: z.ZodBoolean;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const memberSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    email: z.ZodString;
+    source: z.ZodLiteral<"direct">;
+}, z.core.$strip>;
+export declare const scopeSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        group: "group";
+        user: "user";
+    }>;
+    id: z.ZodString;
+}, z.core.$strict>;
+export declare const changeSchema: z.ZodObject<{
+    userId: z.ZodString;
+    groupId: z.ZodString;
+    action: z.ZodEnum<{
+        add: "add";
+        remove: "remove";
+    }>;
+}, z.core.$strict>;
+export declare const membershipResultSchema: z.ZodObject<{
+    changed: z.ZodNumber;
+    scope: z.ZodObject<{
+        kind: z.ZodEnum<{
+            group: "group";
+            user: "user";
+        }>;
+        id: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strip>;
+export declare const groupCreateSchema: z.ZodObject<{
+    code: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const groupUpdateSchema: z.ZodObject<{
+    code: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+}, z.core.$strict>;
+export declare const permissionSetSchema: z.ZodObject<{
+    permissionIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type Group = z.infer<typeof groupSchema>;
+export type UserGroups = z.infer<typeof userGroupsSchema>;
+export type MembershipScope = z.infer<typeof scopeSchema>;
+export type MembershipChange = z.infer<typeof changeSchema>;
+export declare function fail(code: string, message: string, exitCode?: ExitCode, safeDetails?: unknown): never;
+export declare function parse<T>(schema: z.ZodType<T>, value: unknown, response?: boolean): T;
+export declare function pageSchema<T>(item: z.ZodType<T>): z.ZodObject<{
+    items: z.ZodArray<z.ZodType<T, unknown, z.core.$ZodTypeInternals<T, unknown>>>;
+    pageInfo: z.ZodObject<{
+        hasMore: z.ZodBoolean;
+        nextPageToken: z.ZodOptional<z.ZodString>;
+        pageSize: z.ZodNumber;
+        returned: z.ZodNumber;
+        total: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare function requireCustomGroup(group: Group): void;
+//# sourceMappingURL=contracts.d.ts.map

package/dist/identity-governance/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/identity-governance/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAwB,KAAK,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAE7E,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAC7C,eAAO,MAAM,QAAQ,aAMmB,CAAC;AAIzC,eAAO,MAAM,cAAc;;;;iBAAqD,CAAC;AACjF,eAAO,MAAM,qBAAqB;;;;;iBAAoD,CAAC;AACvF,eAAO,MAAM,gBAAgB;;;;;;;;;iBAS3B,CAAC;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;iBAOtB,CAAC;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;iBAarB,CAAC;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;iBAI3B,CAAC;AACH,eAAO,MAAM,YAAY;;;;;iBAAmF,CAAC;AAC7G,eAAO,MAAM,WAAW;;;;;;kBAAuE,CAAC;AAChG,eAAO,MAAM,YAAY;;;;;;;kBAAgG,CAAC;AAC1H,eAAO,MAAM,sBAAsB;;;;;;;;;iBAA8E,CAAC;AAClH,eAAO,MAAM,iBAAiB;;;;kBAUnB,CAAC;AACZ,eAAO,MAAM,iBAAiB;;;;kBAEqD,CAAC;AACpF,eAAO,MAAM,mBAAmB;;kBAAsF,CAAC;AACvH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAChD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAC1D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE5D,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAE,QAAgC,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,KAAK,CAE5H;AAED,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,UAAQ,GAAG,CAAC,CAYlF;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;;;;;;;;;kBAqB/C;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAKrD"}

package/dist/identity-governance/contracts.js

@@ -0,0 +1,109 @@
+import { z } from 'zod';
+import { CliError, EXIT_CODES } from '../errors/cli-error.js';
+export const MAX_MEMBERSHIP_TARGETS = 10_000;
+export const idSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .max(128)
+    .refine((value) => value !== '.' && value !== '..', 'Dot path segments are not IDs.')
+    .regex(/^[^\s\u0000-\u001f\u007f]+$/u);
+const text = z.string();
+const nullableText = text.nullable().optional();
+const timestamp = z.union([z.number().finite(), z.string().regex(/^\d+$/)]).optional();
+export const groupRefSchema = z.object({ id: idSchema, code: text, name: text });
+export const membershipGroupSchema = groupRefSchema.extend({ protected: z.boolean() });
+export const permissionSchema = z.object({
+    id: idSchema,
+    code: text,
+    name: text,
+    resource: text,
+    action: text,
+    description: nullableText,
+    createdTimestamp: timestamp,
+    updatedTimestamp: timestamp,
+});
+export const groupSchema = groupRefSchema.extend({
+    description: nullableText,
+    isSystem: z.boolean(),
+    membershipEditable: z.boolean(),
+    permissions: z.array(permissionSchema),
+    createdTimestamp: timestamp,
+    updatedTimestamp: timestamp,
+});
+export const userSchema = z.object({
+    id: idSchema,
+    name: nullableText,
+    email: nullableText,
+    nickname: nullableText,
+    departmentName: nullableText,
+    verified: z.boolean().nullable().optional(),
+    isBlocked: z.boolean().optional(),
+    blockStateVersion: text.optional(),
+    blockReasons: z.array(z.object({ code: text })).optional(),
+    groups: z.array(groupRefSchema),
+    createdTimestamp: timestamp,
+    updatedTimestamp: timestamp,
+});
+export const userGroupsSchema = z.object({
+    userId: idSchema,
+    direct: z.array(membershipGroupSchema),
+    mapped: z.array(membershipGroupSchema),
+});
+export const memberSchema = z.object({ id: idSchema, name: text, email: text, source: z.literal('direct') });
+export const scopeSchema = z.object({ kind: z.enum(['user', 'group']), id: idSchema }).strict();
+export const changeSchema = z.object({ userId: idSchema, groupId: idSchema, action: z.enum(['add', 'remove']) }).strict();
+export const membershipResultSchema = z.object({ changed: z.number().int().min(0).max(200), scope: scopeSchema });
+export const groupCreateSchema = z
+    .object({
+    code: text
+        .trim()
+        .min(1)
+        .max(128)
+        .transform((v) => v.toLowerCase()),
+    name: text.trim().min(1).max(512),
+    description: text.trim().max(4096).optional(),
+})
+    .strict();
+export const groupUpdateSchema = groupCreateSchema
+    .partial()
+    .refine((v) => Object.keys(v).length > 0, 'Provide at least one metadata field.');
+export const permissionSetSchema = z.object({ permissionIds: z.array(idSchema).max(MAX_MEMBERSHIP_TARGETS) }).strict();
+export function fail(code, message, exitCode = EXIT_CODES.validation, safeDetails) {
+    throw new CliError(message, { code, exitCode, ...(safeDetails === undefined ? {} : { safeDetails }) });
+}
+export function parse(schema, value, response = false) {
+    const result = schema.safeParse(value);
+    if (!result.success)
+        fail(response ? 'IDENTITY_RESPONSE_INCOMPATIBLE' : 'IDENTITY_INPUT_INVALID', response ? 'The identity response does not match the supported contract.' : 'Invalid identity-management input.', response ? EXIT_CODES.compatibility : EXIT_CODES.validation, {
+            issues: result.error.issues.slice(0, 20).map((issue) => ({ code: issue.code, path: issue.path.join('.') })),
+        });
+    return result.data;
+}
+export function pageSchema(item) {
+    return z
+        .object({
+        items: z.array(item).max(1000),
+        pageInfo: z.object({
+            hasMore: z.boolean(),
+            nextPageToken: text.min(1).optional(),
+            pageSize: z.number().int().min(1).max(1000),
+            returned: z.number().int().nonnegative(),
+            total: z.number().int().nonnegative().optional(),
+        }),
+    })
+        .superRefine((value, context) => {
+        if (value.pageInfo.hasMore !== Boolean(value.pageInfo.nextPageToken) ||
+            value.pageInfo.returned !== value.items.length ||
+            value.items.length > value.pageInfo.pageSize) {
+            context.addIssue({ code: 'custom', message: 'Inconsistent pagination metadata.', path: ['pageInfo'] });
+        }
+    });
+}
+export function requireCustomGroup(group) {
+    if (group.isSystem || ['member', 'platform_admin', 'super_admin'].includes(group.code))
+        fail('IDENTITY_GROUP_PROTECTED', 'System group definitions and permissions cannot be changed.', EXIT_CODES.authorization, {
+            groupId: group.id,
+        });
+}
+//# sourceMappingURL=contracts.js.map

package/dist/identity-governance/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/identity-governance/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAiB,MAAM,wBAAwB,CAAC;AAE7E,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC7C,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,gCAAgC,CAAC;KACpF,KAAK,CAAC,8BAA8B,CAAC,CAAC;AACzC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AACxB,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC;AAChD,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AACvF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;IACV,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,WAAW,EAAE,YAAY;IACzB,gBAAgB,EAAE,SAAS;IAC3B,gBAAgB,EAAE,SAAS;CAC5B,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC;IAC/C,WAAW,EAAE,YAAY;IACzB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACtC,gBAAgB,EAAE,SAAS;IAC3B,gBAAgB,EAAE,SAAS;CAC5B,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,YAAY;IACtB,cAAc,EAAE,YAAY;IAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,iBAAiB,EAAE,IAAI,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IAC/B,gBAAgB,EAAE,SAAS;IAC3B,gBAAgB,EAAE,SAAS;CAC5B,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;CACvC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC7G,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAChG,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1H,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;AAClH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,IAAI,EAAE,IAAI;SACP,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB;KAC/C,OAAO,EAAE;KACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,sCAAsC,CAAC,CAAC;AACpF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAMvH,MAAM,UAAU,IAAI,CAAC,IAAY,EAAE,OAAe,EAAE,QAAQ,GAAa,UAAU,CAAC,UAAU,EAAE,WAAqB;IACnH,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,KAAK,CAAI,MAAoB,EAAE,KAAc,EAAE,QAAQ,GAAG,KAAK;IAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO;QACjB,IAAI,CACF,QAAQ,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,wBAAwB,EACtE,QAAQ,CAAC,CAAC,CAAC,8DAA8D,CAAC,CAAC,CAAC,oCAAoC,EAChH,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,EAC3D;YACE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;SAC5G,CACF,CAAC;IACJ,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,UAAU,CAAI,IAAkB;IAC9C,OAAO,CAAC;SACL,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;YACpB,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;SACjD,CAAC;KACH,CAAC;SACD,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9B,IACE,KAAK,CAAC,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;YAChE,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM;YAC9C,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAC5C,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mCAAmC,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAY;IAC7C,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QACpF,IAAI,CAAC,0BAA0B,EAAE,6DAA6D,EAAE,UAAU,CAAC,aAAa,EAAE;YACxH,OAAO,EAAE,KAAK,CAAC,EAAE;SAClB,CAAC,CAAC;AACP,CAAC"}

package/dist/identity-governance/definitions.d.ts

@@ -0,0 +1,54 @@
+import type { HttpMethod } from '../transport/types.js';
+import type { SemanticCommandDefinition } from '../api-operation/types.js';
+export declare const IDENTITY_OPERATIONS: {
+    users: SemanticCommandDefinition & {
+        method: HttpMethod;
+        permissions: string[];
+    };
+    user: SemanticCommandDefinition & {
+        method: HttpMethod;
+        permissions: string[];
+    };
+    userGroups: SemanticCommandDefinition & {
+        method: HttpMethod;
+        permissions: string[];
+    };
+    groups: SemanticCommandDefinition & {
+        method: HttpMethod;
+        permissions: string[];
+    };
+    group: SemanticCommandDefinition & {
+        method: HttpMethod;
+        permissions: string[];
+    };
+    members: SemanticCommandDefinition & {
+        method: HttpMethod;
+        permissions: string[];
+    };
+    permissions: SemanticCommandDefinition & {
+        method: HttpMethod;
+        permissions: string[];
+    };
+    change: SemanticCommandDefinition & {
+        method: HttpMethod;
+        permissions: string[];
+    };
+    create: SemanticCommandDefinition & {
+        method: HttpMethod;
+        permissions: string[];
+    };
+    update: SemanticCommandDefinition & {
+        method: HttpMethod;
+        permissions: string[];
+    };
+    delete: SemanticCommandDefinition & {
+        method: HttpMethod;
+        permissions: string[];
+    };
+    setPermissions: SemanticCommandDefinition & {
+        method: HttpMethod;
+        permissions: string[];
+    };
+};
+export type IdentityOperation = keyof typeof IDENTITY_OPERATIONS;
+//# sourceMappingURL=definitions.d.ts.map

package/dist/identity-governance/definitions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../src/identity-governance/definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAgB3E,eAAO,MAAM,mBAAmB;IAC9B,KAAK;gBAXkC,UAAU;qBAAe,MAAM,EAAE;;IAYxE,IAAI;;;;IACJ,UAAU;;;;IACV,MAAM;;;;IACN,KAAK;;;;IACL,OAAO;;;;IACP,WAAW;;;;IACX,MAAM;;;;IACN,MAAM;;;;IACN,MAAM;;;;IACN,MAAM;;;;IACN,cAAc;;;;CACf,CAAC;AACF,MAAM,MAAM,iBAAiB,GAAG,MAAM,OAAO,mBAAmB,CAAC"}

package/dist/identity-governance/definitions.js

@@ -0,0 +1,25 @@
+function define(id, method, permissions) {
+    return {
+        id,
+        method,
+        permissions,
+        command: id.split('.'),
+        risk: method === 'GET' ? 'read' : 'privileged',
+        apiBindings: [{ apiOperationId: id, adapter: 'kernel-identity-v1' }],
+    };
+}
+export const IDENTITY_OPERATIONS = {
+    users: define('kernel.user.list', 'GET', ['user:read']),
+    user: define('kernel.user.get', 'GET', ['user:read']),
+    userGroups: define('kernel.user.group.list', 'GET', ['user:read', 'permission:read']),
+    groups: define('kernel.group.list', 'GET', ['permission:read']),
+    group: define('kernel.group.get', 'GET', ['permission:read']),
+    members: define('kernel.group.member.list', 'GET', ['user:read', 'permission:read']),
+    permissions: define('kernel.permission.list', 'GET', ['permission:read']),
+    change: define('kernel.group-membership.change', 'PATCH', ['user:read', 'permission:read', 'permission:write']),
+    create: define('kernel.group.create', 'POST', ['permission:write']),
+    update: define('kernel.group.update', 'PUT', ['permission:write']),
+    delete: define('kernel.group.delete', 'DELETE', ['permission:write']),
+    setPermissions: define('kernel.group.permission.set', 'PUT', ['permission:write']),
+};
+//# sourceMappingURL=definitions.js.map

package/dist/identity-governance/definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/identity-governance/definitions.ts"],"names":[],"mappings":"AAGA,SAAS,MAAM,CACb,EAAU,EACV,MAAkB,EAClB,WAAqB;IAErB,OAAO;QACL,EAAE;QACF,MAAM;QACN,WAAW;QACX,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;QACtB,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;QAC9C,WAAW,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,MAAM,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,EAAE,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC;IACrD,UAAU,EAAE,MAAM,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACrF,MAAM,EAAE,MAAM,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,CAAC;IAC7D,OAAO,EAAE,MAAM,CAAC,0BAA0B,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACpF,WAAW,EAAE,MAAM,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,CAAC;IACzE,MAAM,EAAE,MAAM,CAAC,gCAAgC,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;IAC/G,MAAM,EAAE,MAAM,CAAC,qBAAqB,EAAE,MAAM,EAAE,CAAC,kBAAkB,CAAC,CAAC;IACnE,MAAM,EAAE,MAAM,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,kBAAkB,CAAC,CAAC;IAClE,MAAM,EAAE,MAAM,CAAC,qBAAqB,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,CAAC;IACrE,cAAc,EAAE,MAAM,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAC,kBAAkB,CAAC,CAAC;CACnF,CAAC"}

package/dist/identity-governance/files.d.ts

@@ -0,0 +1,5 @@
+export declare const MAX_IDENTITY_FILE_BYTES: number;
+export declare function digest(value: unknown): string;
+export declare function readJson(path: string): Promise<unknown>;
+export declare function writeArtifact(value: unknown, requestedPath?: string, label?: string): Promise<string>;
+//# sourceMappingURL=files.d.ts.map

package/dist/identity-governance/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/identity-governance/files.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AAExD,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAa7C;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAwB7D;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,SAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAqB/G"}

package/dist/identity-governance/files.js

@@ -0,0 +1,75 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { mkdir, open } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { CliError, EXIT_CODES } from '../errors/cli-error.js';
+export const MAX_IDENTITY_FILE_BYTES = 10 * 1024 * 1024;
+export function digest(value) {
+    function canonical(input) {
+        if (Array.isArray(input))
+            return input.map(canonical);
+        if (!input || typeof input !== 'object')
+            return input;
+        return Object.fromEntries(Object.entries(input)
+            .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+            .map(([key, child]) => [key, canonical(child)]));
+    }
+    return createHash('sha256')
+        .update(JSON.stringify(canonical(value)))
+        .digest('hex');
+}
+export async function readJson(path) {
+    let handle;
+    try {
+        handle = await open(resolve(path), 'r');
+        const stat = await handle.stat();
+        if (!stat.isFile() || stat.size > MAX_IDENTITY_FILE_BYTES)
+            throw new Error('Input must be a bounded regular file.');
+        const buffer = Buffer.alloc(MAX_IDENTITY_FILE_BYTES + 1);
+        let length = 0;
+        while (length < buffer.length) {
+            const { bytesRead } = await handle.read(buffer, length, buffer.length - length, null);
+            if (!bytesRead)
+                break;
+            length += bytesRead;
+        }
+        if (length > MAX_IDENTITY_FILE_BYTES)
+            throw new Error('Input exceeds 10 MiB.');
+        return JSON.parse(buffer.subarray(0, length).toString('utf8'));
+    }
+    catch (cause) {
+        throw new CliError('Cannot read a valid identity-management JSON file (maximum 10 MiB).', {
+            cause,
+            code: 'IDENTITY_FILE_INVALID',
+            exitCode: EXIT_CODES.validation,
+        });
+    }
+    finally {
+        await handle?.close();
+    }
+}
+export async function writeArtifact(value, requestedPath, label = 'snapshot') {
+    const path = resolve(requestedPath ?? `.monkeys-identity/${label}-${randomUUID()}.json`);
+    let handle;
+    try {
+        const serialized = `${JSON.stringify(value, null, 2)}\n`;
+        if (Buffer.byteLength(serialized) > MAX_IDENTITY_FILE_BYTES)
+            throw new Error('Artifact exceeds 10 MiB.');
+        await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+        handle = await open(path, 'wx', 0o600);
+        await handle.writeFile(serialized);
+        await handle.sync();
+        return path;
+    }
+    catch (cause) {
+        throw new CliError('Cannot create the non-overwriting identity-management artifact.', {
+            cause,
+            code: 'IDENTITY_ARTIFACT_WRITE_FAILED',
+            exitCode: EXIT_CODES.configuration,
+            safeDetails: { path },
+        });
+    }
+    finally {
+        await handle?.close();
+    }
+}
+//# sourceMappingURL=files.js.map

package/dist/identity-governance/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/identity-governance/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAExD,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,SAAS,SAAS,CAAC,KAAc;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACtD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAClB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAChD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;SACxC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,uBAAuB;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACpH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,uBAAuB,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;YACtF,IAAI,CAAC,SAAS;gBAAE,MAAM;YACtB,MAAM,IAAI,SAAS,CAAC;QACtB,CAAC;QACD,IAAI,MAAM,GAAG,uBAAuB;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,qEAAqE,EAAE;YACxF,KAAK;YACL,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,UAAU,CAAC,UAAU;SAChC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAc,EAAE,aAAsB,EAAE,KAAK,GAAG,UAAU;IAC5F,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,qBAAqB,KAAK,IAAI,UAAU,EAAE,OAAO,CAAC,CAAC;IACzF,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QACzD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,uBAAuB;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACzG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,iEAAiE,EAAE;YACpF,KAAK;YACL,IAAI,EAAE,gCAAgC;YACtC,QAAQ,EAAE,UAAU,CAAC,aAAa;YAClC,WAAW,EAAE,EAAE,IAAI,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/identity-governance/flags.d.ts

@@ -0,0 +1,43 @@
+export declare function identityFlags(): {
+    output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    subscription: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    refresh: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+};
+export declare function mutationFlags(): {
+    'page-all': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    'page-delay': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+    'page-limit': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+    'page-size': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+    'page-token': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    subscription: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    refresh: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    'dry-run': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+};
+export declare function membershipFlags(): {
+    'page-all': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    'page-delay': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+    'page-limit': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+    'page-size': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+    'page-token': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    subscription: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    refresh: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    'dry-run': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    ids: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'ids-file': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'plan-file': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'plan-out': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    report: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+};
+export declare function bodyFlags(): {
+    'input-json': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'input-file': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+};
+export declare function readBody(flags: {
+    'input-json'?: string | undefined;
+    'input-file'?: string | undefined;
+}): Promise<unknown>;
+//# sourceMappingURL=flags.d.ts.map

package/dist/identity-governance/flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../src/identity-governance/flags.ts"],"names":[],"mappings":"AAMA,wBAAgB,aAAa;IAEzB,MAAM;IACN,YAAY;IACZ,OAAO;EAEV;AACD,wBAAgB,aAAa;;;;;;;;;;;EAO5B;AACD,wBAAgB,eAAe;;;;;;;;;;;;;;;;EAS9B;AACD,wBAAgB,SAAS;IAErB,YAAY;IACZ,YAAY;EAEf;AACD,wBAAsB,QAAQ,CAAC,KAAK,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAWhI"}

package/dist/identity-governance/flags.js

@@ -0,0 +1,52 @@
+import { Flags } from '@oclif/core';
+import { localOutputFlag } from '../config/local-command.js';
+import { paginationFlags } from '../pagination/index.js';
+import { fail } from './contracts.js';
+import { MAX_IDENTITY_FILE_BYTES, readJson } from './files.js';
+export function identityFlags() {
+    return {
+        output: localOutputFlag,
+        subscription: Flags.string({ required: true, summary: 'Explicit Kernel Subscription name (global scope, no Team)' }),
+        refresh: Flags.boolean({ default: false, summary: 'Refresh the published API contract' }),
+    };
+}
+export function mutationFlags() {
+    return {
+        ...identityFlags(),
+        ...paginationFlags({ defaultPageSize: 100 }),
+        'dry-run': Flags.boolean({ default: false, exclusive: ['yes'], summary: 'Preview only; send no mutation request' }),
+        yes: Flags.boolean({ char: 'y', default: false, exclusive: ['dry-run'], summary: 'Confirm this privileged operation' }),
+    };
+}
+export function membershipFlags() {
+    return {
+        ...mutationFlags(),
+        ids: Flags.string({ multiple: true, summary: 'Exact counterpart IDs: group IDs for user scope, user IDs for group scope' }),
+        'ids-file': Flags.string({ summary: 'JSON array of exact counterpart IDs' }),
+        'plan-file': Flags.string({ summary: 'Reviewed frozen plan; required for bulk execution' }),
+        'plan-out': Flags.string({ summary: 'New file for the dry-run frozen plan (never overwritten)' }),
+        report: Flags.string({ summary: 'New file for the initial recovery report; receipt paths are returned' }),
+    };
+}
+export function bodyFlags() {
+    return {
+        'input-json': Flags.string({ exclusive: ['input-file'], summary: 'Explicit strict JSON request body' }),
+        'input-file': Flags.string({ exclusive: ['input-json'], summary: 'JSON request body file (maximum 10 MiB)' }),
+    };
+}
+export async function readBody(flags) {
+    if ((flags['input-json'] !== undefined) === (flags['input-file'] !== undefined))
+        fail('IDENTITY_INPUT_REQUIRED', 'Specify exactly one of --input-json or --input-file.');
+    if (flags['input-file'] !== undefined)
+        return readJson(flags['input-file']);
+    const input = flags['input-json'];
+    if (Buffer.byteLength(input) > MAX_IDENTITY_FILE_BYTES)
+        fail('IDENTITY_INPUT_INVALID', 'Input exceeds 10 MiB.');
+    try {
+        return JSON.parse(input);
+    }
+    catch {
+        return fail('IDENTITY_INPUT_INVALID', 'Input must be valid JSON.');
+    }
+}
+//# sourceMappingURL=flags.js.map

package/dist/identity-governance/flags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flags.js","sourceRoot":"","sources":["../../src/identity-governance/flags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE/D,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,MAAM,EAAE,eAAe;QACvB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,2DAA2D,EAAE,CAAC;QACpH,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;KAC1F,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,GAAG,aAAa,EAAE;QAClB,GAAG,eAAe,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC;QAC5C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;QACnH,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;KACxH,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,GAAG,aAAa,EAAE;QAClB,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,2EAA2E,EAAE,CAAC;QAC3H,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;QAC5E,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC;QAC3F,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC;QACjG,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,sEAAsE,EAAE,CAAC;KAC1G,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,SAAS;IACvB,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;QACvG,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;KAC9G,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAA+E;IAC5G,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC;QAC7E,IAAI,CAAC,yBAAyB,EAAE,sDAAsD,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAE,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,uBAAuB;QAAE,IAAI,CAAC,wBAAwB,EAAE,uBAAuB,CAAC,CAAC;IAChH,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}