@microsoft/managed-apps-cli 0.23.0 → 0.24.0

package/dist/chunk-MAWTAPQE.js

@@ -0,0 +1,12 @@
+import { createRequire as __createRequire } from 'node:module';
+import { fileURLToPath as __fileURLToPath } from 'node:url';
+import { dirname as __pathDirname } from 'node:path';
+const require = __createRequire(import.meta.url);
+const __filename = __fileURLToPath(import.meta.url);
+const __dirname = __pathDirname(__filename);
+import{a as $,b as D,d as W,e as _,g as F}from"./chunk-MKCTKQZA.js";import{a as K}from"./chunk-USRRI5H4.js";import{h as V,i as q,j as H}from"./chunk-WADQ54KB.js";import{Ga as g,Ha as J,Q as P,T,g as E,ma as x,pa as b,va as L,x as k,xa as O,y as I,ya as B,z as N}from"./chunk-CBXGTKIE.js";import{b as y}from"./chunk-RBG2H562.js";import{u as U,v as j}from"./chunk-LGJ3PMWD.js";import{c as C,d as S,h,i as A}from"./chunk-PVAIJSAI.js";import{a as w}from"./chunk-KZIKF2VH.js";import{a as G}from"./chunk-MPRAPBI2.js";async function ke(e,n){fe(e,n),await e.runVerb();let s=J();if(!s.appConfig)throw new y(`No ${G} found in the current directory. Run "${"ms"} app init" first.`);let i=await q(e),c=await e.getTenantIdAsync();if(!c)throw new y("Unable to determine tenant ID. Ensure you are logged in.");let p=await V(e),l=W(await e.getOption("access")),m=l==="edit"?_(s.appConfig):s.appConfig.repoType??"none",u=se(e.getPositionalArgs(0));if(u.length===0)throw new y("Provide at least one principal (Entra object ID or user/group email address). Separate multiple entries with commas, spaces, or both.");let o=n==="share"&&(l!=="edit"||m!=="native"),a=g(),f=a.trackScenario("MaafApp.SharePermissions",{mode:n,access:l,repoType:m,inputCount:u.length});try{let t=[],r=await ie(u,t,o);if(a.trackActivityEvent("MaafApp.SharePermissions.PrincipalResolution",{mode:n,inputCount:u.length,resolvedCount:r.length,failedCount:t.length,emailPassthrough:o}),r.length===0)throw new y(Y(t));t.length>0&&A(Y(t));let d=await(n==="share"?ee:ne)({tenantId:c,environmentId:i,appName:p,access:l,refs:r,repoType:m,jsonMode:e.isJsonMode()});f.complete({resolvedCount:r.length,failedResolutionCount:t.length,scope:d.scope,role:d.role,appScopeContributorFallback:l==="edit"&&d.scope==="app",...n==="unshare"&&{revokedCount:d.revokedCount??0,revokedPrincipalCount:d.revokedPrincipalCount??0,notFoundCount:d.notFound?.length??0,skippedCount:d.skipped?.length??0}});let M=n==="share"&&l==="edit"?await te({appInfo:d.appInfo,tenantId:c,environmentId:i,appName:p,jsonMode:e.isJsonMode()}):void 0;e.isJsonMode()?S({access:l,partialFailure:t.length>0,...d.result,...n==="unshare"&&{revokedCount:d.revokedCount??0,revokedPrincipalCount:d.revokedPrincipalCount??0,notFound:(d.notFound??[]).map(X),skipped:(d.skipped??[]).map(X)},...M&&{repoType:M.repoType,cloneUrl:M.cloneUrl},warnings:t}):(de({appName:p,mode:n,access:l,inputCount:r.length,outcome:d}),oe(M))}catch(t){throw f.failure(t),t}}async function ee(e){let{tenantId:n,environmentId:s,appName:i,access:c,refs:p,repoType:l,jsonMode:m}=e;if(c==="play"||c==="test"){let f=c==="test"?N:k,t=p.map(R=>Q(R,f));return{result:await b({tenantId:n,environmentId:s,logger:g(),actionsParams:{appName:i,put:t,delete:[]}}),scope:"app",role:f}}if(l==="none")throw new y($);if(l!=="native"){m||A(D);let f=p.map(r=>Q(r,I));return{result:await b({tenantId:n,environmentId:s,logger:g(),actionsParams:{appName:i,put:f,delete:[]}}),scope:"app",role:I}}let u=await F({tenantId:n,environmentId:s,appName:i}),o=p.map(ue);return{result:await O({tenantId:n,environmentId:s,logger:g(),actionsParams:{repoId:u.repositoryId,put:o,delete:[]}}),scope:"repo",role:P,appInfo:u}}async function ne(e){let{tenantId:n,environmentId:s,appName:i,access:c,refs:p,repoType:l,jsonMode:m}=e,u=p.map(z),o=new Map(p.map(r=>[z(r),r]));if(c==="edit"&&l==="none")throw new y($);let a=c!=="edit"||l!=="native",f=a?c==="test"?N:c==="play"?k:I:P,t;if(a)c==="edit"&&l!=="native"&&(m||A(D)),t=await L({tenantId:n,environmentId:s,logger:g(),actionsParams:{appName:i,principalIds:u,roleDefinitionName:f}});else{let r=await F({tenantId:n,environmentId:s,appName:i});t=await B({tenantId:n,environmentId:s,logger:g(),actionsParams:{repoId:r.repositoryId,principalIds:u}})}return{result:t.result,scope:a?"app":"repo",role:f,revokedCount:t.revokedCount,revokedPrincipalCount:t.revokedPrincipalCount,notFound:t.notFoundPrincipalIds.map(r=>o.get(r)??{id:r,input:r}),skipped:t.skippedNullRoleAssignments.map(r=>o.get(r.principalObjectId)??{id:r.principalObjectId,input:r.principalObjectId})}}function z(e){if(!e.id)throw new y(`Could not resolve '${e.input}' to an AAD object ID. Unshare requires object IDs.`);return e.id}async function te(e){let n=e.appInfo;if(!n)try{n=await x({tenantId:e.tenantId,environmentId:e.environmentId,logger:g(),actionsParams:{appName:e.appName}})}catch{e.jsonMode||A(`Share succeeded, but repository details for '${e.appName}' could not be read.`);return}return K(n)}function oe(e){e&&(e.repoType&&h(`Repo type: ${e.repoType}`),e.cloneUrl&&h(`Clone URL: ${e.cloneUrl}`))}function se(e){let n=new Set;for(let s of e)for(let i of s.split(",")){let c=i.trim();c&&n.add(c)}return[...n]}async function ie(e,n,s){let i=new Map,c=new Map,l=(await Promise.all(e.map(async o=>{let a=o.toLowerCase(),f=i.get(a);if(f)return f;if(H(o)){let t={id:o,input:o};return i.set(a,t),t}if(!le(o))return n.push({input:o,reason:"not an AAD object ID (GUID) or a valid email address"}),null;if(s){let t={input:o,email:o};return i.set(a,t),t}try{let t=c.get(a);t||(t=T(o,g()),c.set(a,t));let r=await t;if(!r)return n.push({input:o,reason:"no user or group found in this tenant (invite as a guest in Entra ID first if external)"}),null;let R={id:r.id,input:o,type:r.type,email:o,displayName:r.displayName};return i.set(a,R),R}catch(t){return n.push({input:o,reason:ae(t)}),null}}))).filter(o=>o!==null),m=[],u=new Set;for(let o of l){let a=(o.id??o.email??o.input).toLowerCase();u.has(a)||(u.add(a),m.push(o))}return m}function Y(e){let n=e.length===1?"entry":"entries",s=e.map(i=>`  - ${i.input}: ${i.reason}`);return[`Could not resolve ${e.length} ${n}:`,...s].join(`
+`)}function ae(e){if(e instanceof E){if(e.status===403)return re(e.status);let n=pe(e.body);return n!==void 0?`Graph ${e.status}: ${n}`:e.message}return e instanceof Error?e.message:String(e)}function re(e){return`Graph ${e}: your sign-in lacks permission to look up accounts by email. Pass the AAD object ID (GUID) instead, or have an admin grant the User.ReadBasic.All and Group.Read.All Graph permissions.`}function pe(e){if(e)try{let s=JSON.parse(e)?.error?.message;return typeof s=="string"?s:void 0}catch{return}}function le(e){return/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(e)}function Q(e,n){return{name:e.displayName??e.input,properties:{roleName:n,principal:ce(e)}}}function ce(e){return e.id?e.email?{id:e.id,email:e.email}:{id:e.id}:{email:e.email??e.input}}function ue(e){let n=e.id??e.input;return{name:e.displayName??e.input,properties:{roleName:P,principal:e.type?{id:n,type:e.type}:{id:n}}}}function X(e){return{id:e.id??e.input,label:e.displayName??e.input}}function de(e){let{appName:n,mode:s,access:i,inputCount:c,outcome:p}=e,l=i==="play"?"play":i==="test"?"test":"edit";if(s==="share"){let a=p.result.put?.length??0;if(a===0){h("No changes were applied.");return}C(`Shared app '${n}' with ${a} ${v("principal",a)}. They can now ${l} the app.`);return}let m=p.revokedCount??0,u=p.revokedPrincipalCount??m;if(u===0){h(`No ${l} assignments to revoke on '${n}' \u2014 none of the ${c} ${v("principal",c)} had existing access.`);return}if(C(`Revoked ${l} permissions for ${u} ${v("principal",u)} on '${n}'.`),p.notFound&&p.notFound.length>0){let o=p.notFound.map(a=>a.displayName??a.input).join(", ");h(`${p.notFound.length} ${v("principal",p.notFound.length)} had no existing ${l} access (no-op): ${o}`)}if(p.skipped&&p.skipped.length>0){let o=p.skipped.map(a=>a.displayName??a.input).join(", ");h(`${p.skipped.length} ${v("principal",p.skipped.length)} had a role assignment with an unknown role definition; ${l} access was not modified for: ${o}. Investigate via the role-assignments API.`)}}function v(e,n){return n===1?e:`${e}s`}function fe(e,n){let s=n==="share"?w.app.share:w.app.unshare,i=n==="share"?U:j;e.setDescription(s.description),e.addExamples(s.examples),e.consumePositionalArgs("principal"),e.addOptions([{flags:{key:i.AppName.name},env:i.AppName.envVar,description:s.options.app,optionalInNonInteractive:!0},{flags:{key:i.Access.name},env:i.Access.envVar,default:i.Access.defaultValue,description:s.options.access,optionalInNonInteractive:!0}])}export{ke as a};
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+//# sourceMappingURL=chunk-MAWTAPQE.js.map

package/dist/{chunk-2HSJ2XAQ.js → chunk-MKCTKQZA.js}

@@ -4,10 +4,10 @@ import { dirname as __pathDirname } from 'node:path';
 const require = __createRequire(import.meta.url);
 const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __pathDirname(__filename);
-import{Ga as i,ma as r}from"./chunk-UIW77LMA.js";import{b as t}from"./chunk-RBG2H562.js";import{a as n}from"./chunk-3FP37TPE.js";var u=`Cannot share source code \u2014 no repository linked.
+import{Ga as i,ma as r}from"./chunk-CBXGTKIE.js";import{b as t}from"./chunk-RBG2H562.js";import{a as n}from"./chunk-MPRAPBI2.js";var u=`Cannot share source code \u2014 no repository linked.
 
 This app has no linked repository, so source code isn't stored on the platform. To collaborate on code, run 'ms app init' to create an app instance with a repo, or share the source with your collaborator directly.`,g="This app is not backed by a platform managed repo. Repository access must be configured in the external repository.",s="00000000-0000-0000-0000-000000000000";function p(e){return!!e&&e!==s}function h(e){let o=(e??"play").trim().toLowerCase();if(o==="play"||o==="edit"||o==="test")return o;throw new t(`Unknown --access value '${e}'. Use 'play' (default \u2014 app access), 'edit', or 'test'.`)}function A(e){if(e.repoType)return e.repoType;if(p(e.repositoryId))throw new t(`${n} is missing the 'repoType' field but has a 'repositoryId' set. This usually means the file was written by an older CLI. Re-run "${"ms"} app init" to migrate the config, then retry.`);return"none"}async function c(e){return r({tenantId:e.tenantId,environmentId:e.environmentId,logger:i(),actionsParams:{appName:e.appName}})}async function I(e){let o=await c(e);if(!p(o.repositoryId))throw new t(`App '${e.appName}' has no associated repository.`);return o}export{u as a,g as b,p as c,h as d,A as e,c as f,I as g};
 /*!
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
-//# sourceMappingURL=chunk-2HSJ2XAQ.js.map
+//# sourceMappingURL=chunk-MKCTKQZA.js.map