@izara_project/izara-core-generate-service-code 1.0.55 → 1.0.57

package/src/codeGenerators/app/sls_yaml/RoleNameConfigGenerator.js

@@ -7,77 +7,101 @@ import { getFlowsForGeneration } from '../src/generatedCode/Flow/_shared/shared/
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
+const FLOW_OBJECTS_ROLE = 'FlowObjectsRole';
+const CRUD_FLOW_TAGS = new Set(['Create', 'Update', 'Delete', 'Get']);
+const RBAC_FLOW_TAGS = new Set([
+  'CreateTargetRole',
+  'ListTargetRole',
+  'DeleteTargetRole',
+  'CreateRolePermissions',
+  'ListRolePermissions',
+  'DeleteRolePermissions',
+  'CreateUserRole',
+  'ListUserInRoles',
+  'DeleteUserFromRole'
+]);
+const REL_FLOW_TAGS = new Set([
+  'CreateRelationship',
+  'UpdateRelationship',
+  'DeleteRelationship',
+  'GetRelationship',
+  'ChangeRelationship',
+  'MoveRelationship'
+]);
+
+function upperCase(str) {
+  if (!str) return str;
+  return str.charAt(0).toUpperCase() + str.slice(1);
+}
+
 export async function generateRoleNameConfig(allSchemas, options) {
-    console.log('  [RoleNameConfigGenerator] Generating IAM Role Configurations...');
+  console.log(' [RoleNameConfigGenerator] Generating IAM Role Configurations...');
 
-    const resourceYamlDir = path.join(options.outputPath, 'app', 'sls_yaml', 'generatedCode', 'source');
-    await fs.mkdir(resourceYamlDir, { recursive: true });
+  const resourceYamlDir = path.join(
+    options.outputPath,
+    'app',
+    'sls_yaml',
+    'generatedCode',
+    'source'
+  );
+  await fs.mkdir(resourceYamlDir, { recursive: true });
 
   const roleNameConfigs = new Set();
-  const CRUD_FLOW_TAGS = new Set(['Create', 'Update', 'Delete', 'Get']);
-  const REL_FLOW_TAGS = new Set([
-    'CreateRelationship',
-    'UpdateRelationship',
-    'DeleteRelationship',
-    'GetRelationship',
-    'ChangeRelationship',
-    'MoveRelationship'
-  ]);
-
-    const upperCase = (str) => {
-        if (!str) return str;
-        return str.charAt(0).toUpperCase() + str.slice(1);
-    };
-
-    const flows = getFlowsForGeneration(allSchemas);
-
-  if (flows.length > 0) {
-    for (const flow of flows) {
-      if (flow.flowTag) {
-        const upperFlowTag = upperCase(flow.flowTag);
-        if (CRUD_FLOW_TAGS.has(upperFlowTag)) {
-          roleNameConfigs.add('PerActionEndpointRole');
-        } else if (REL_FLOW_TAGS.has(upperFlowTag)) {
-          roleNameConfigs.add('RelationshipRole');
-        } else {
-          roleNameConfigs.add(`${upperFlowTag}Role`);
-        }
-      }
+  const flows = getFlowsForGeneration(allSchemas);
+
+  for (const flow of flows) {
+    if (!flow.flowTag) continue;
+
+    const upperFlowTag = upperCase(flow.flowTag);
+
+    if (CRUD_FLOW_TAGS.has(upperFlowTag)) {
+      roleNameConfigs.add(FLOW_OBJECTS_ROLE);
+      continue;
+    }
+
+    if (RBAC_FLOW_TAGS.has(upperFlowTag) || upperFlowTag.endsWith('RbacFlow')) {
+      roleNameConfigs.add('FlowRbacRole');
+      continue;
     }
+
+    if (REL_FLOW_TAGS.has(upperFlowTag)) {
+      roleNameConfigs.add('FlowRelationshipRole');
+      continue;
+    }
+
+    if ((flow.event || []).includes('ownTopic')) {
+      roleNameConfigs.add('WebSocketMainRole');
+      // ponytail: removed continue; so custom flows with ownTopic get their own specific role
+    }
+
+    roleNameConfigs.add(`${upperFlowTag}Role`);
   }
 
-    // Static core framework roles that are generated
   roleNameConfigs.add('ProcFindDataRole');
-    
-    // 2. Main Execution Roles (Based on initiateBy & outputTopic)
-    if (flows.length > 0 && flows.some(f => f.event && f.event.includes('ownTopic'))) {
-        roleNameConfigs.add('WebSocketMainRole');
-    }
 
-    // Prepare template output
-    const templatePath = path.join(__dirname, 'templates', 'RoleNameConfig_Yaml.ejs');
-    
-    // Create templates directory and file if it doesn't exist
+  const templatePath = path.join(__dirname, 'templates', 'RoleNameConfig_Yaml.ejs');
+  let templateString;
+
+  try {
+    templateString = await fs.readFile(templatePath, 'utf-8');
+  } catch {
+    templateString = `# for createIamRole
+<% roleNameConfigs.forEach(function(roleNameConfig){ _%>
+- arn:aws:iam::\${self:custom.iz_accountId}:role/\${self:custom.iz_resourcePrefix}<%- roleNameConfig %>
+<% }) _%>
+`;
     await fs.mkdir(path.dirname(templatePath), { recursive: true });
-    
-    let templateString;
-    try {
-        templateString = await fs.readFile(templatePath, 'utf-8');
-    } catch (e) {
-        // Fallback to auto-creating the template based on old roleNameConfig
-        templateString = `# for createIamRole\n\n<% roleNameConfigs.forEach(roleNameConfig => { _%>\n- arn:aws:iam::\${self:custom.iz_accountId}:role/\${self:custom.iz_resourcePrefix}<%- roleNameConfig %>\n<% }) _%>\n`;
-        await fs.writeFile(templatePath, templateString, 'utf-8');
-    }
+    await fs.writeFile(templatePath, templateString, 'utf-8');
+  }
 
-    const fileContent = ejs.render(templateString, {
-        roleNameConfigs: Array.from(roleNameConfigs)
-    });
+  const fileContent = ejs.render(templateString, {
+    roleNameConfigs: Array.from(roleNameConfigs)
+  });
 
-    const outputPath = path.join(resourceYamlDir, 'role-name-config.yml');
-    
-    // Since isAppend was true in the old code, we should append or overwrite.
-    // However, since we clean the resource folder at start, writeFile is fine.
-    await fs.writeFile(outputPath, fileContent, 'utf-8');
+  const outputPath = path.join(resourceYamlDir, 'role-name-config.yml');
+  await fs.writeFile(outputPath, fileContent, 'utf-8');
 
-    console.log(`  [RoleNameConfigGenerator] Wrote ${roleNameConfigs.size} role configs to ${outputPath}`);
+  console.log(
+    ` [RoleNameConfigGenerator] Wrote ${roleNameConfigs.size} role configs to ${outputPath}`
+  );
 }