@pnp/cli-microsoft365 10.4.0-beta.3149a76 → 10.4.0-beta.47f1e4d

package/dist/cli/cli.js

@@ -159,9 +159,17 @@ async function execute(rawArgs) {
                     shouldPrompt) {
                     await cli.error('🌶️  Provide values for the following parameters:');
                     for (const error of result.error.errors) {
-                        const optionInfo = cli.commandToExecute.options.find(o => o.name === error.path.join('.'));
+                        const optionName = error.path.join('.');
+                        const optionInfo = cli.commandToExecute.options.find(o => o.name === optionName);
                         const answer = await cli.promptForValue(optionInfo);
-                        cli.optionsFromArgs.options[error.path.join('.')] = answer;
+                        // coerce the answer to the correct type
+                        try {
+                            const parsed = getCommandOptionsFromArgs([`--${optionName}`, answer], cli.commandToExecute);
+                            cli.optionsFromArgs.options[optionName] = parsed[optionName];
+                        }
+                        catch (e) {
+                            return cli.closeWithError(e.message, cli.optionsFromArgs, true);
+                        }
                     }
                 }
                 else {

package/dist/config.js

@@ -35,8 +35,10 @@ export default {
         'https://graph.microsoft.com/Policy.Read.All',
         'https://graph.microsoft.com/RecordsManagement.ReadWrite.All',
         'https://graph.microsoft.com/Reports.ReadWrite.All',
+        'https://graph.microsoft.com/ReportSettings.ReadWrite.All',
         'https://graph.microsoft.com/RoleAssignmentSchedule.ReadWrite.Directory',
         'https://graph.microsoft.com/RoleEligibilitySchedule.Read.Directory',
+        'https://graph.microsoft.com/RoleManagement.Read.Directory',
         'https://graph.microsoft.com/SecurityEvents.Read.All',
         'https://graph.microsoft.com/ServiceHealth.Read.All',
         'https://graph.microsoft.com/ServiceMessage.Read.All',

package/dist/m365/entra/commands/resourcenamespace/resourcenamespace-list.js

@@ -0,0 +1,28 @@
+import { odata } from '../../../../utils/odata.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+class EntraResourcenamespaceListCommand extends GraphCommand {
+    get name() {
+        return commands.RESOURCENAMESPACE_LIST;
+    }
+    get description() {
+        return 'Get a list of the RBAC resource namespaces and their properties';
+    }
+    defaultProperties() {
+        return ['id', 'name'];
+    }
+    async commandAction(logger) {
+        if (this.verbose) {
+            await logger.logToStderr('Getting a list of the RBAC resource namespaces and their properties...');
+        }
+        try {
+            const results = await odata.getAllItems(`${this.resource}/beta/roleManagement/directory/resourceNamespaces`);
+            await logger.log(results);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new EntraResourcenamespaceListCommand();
+//# sourceMappingURL=resourcenamespace-list.js.map

package/dist/m365/entra/commands/user/user-session-revoke.js

@@ -0,0 +1,70 @@
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
+import { zod } from '../../../../utils/zod.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+import { validation } from '../../../../utils/validation.js';
+import request from '../../../../request.js';
+import { cli } from '../../../../cli/cli.js';
+import { formatting } from '../../../../utils/formatting.js';
+const options = globalOptionsZod
+    .extend({
+    userId: zod.alias('i', z.string().refine(id => validation.isValidGuid(id), id => ({
+        message: `'${id}' is not a valid GUID.`
+    })).optional()),
+    userName: zod.alias('n', z.string().refine(name => validation.isValidUserPrincipalName(name), name => ({
+        message: `'${name}' is not a valid UPN.`
+    })).optional()),
+    force: zod.alias('f', z.boolean().optional())
+})
+    .strict();
+class EntraUserSessionRevokeCommand extends GraphCommand {
+    get name() {
+        return commands.USER_SESSION_REVOKE;
+    }
+    get description() {
+        return 'Revokes all sign-in sessions for a given user';
+    }
+    get schema() {
+        return options;
+    }
+    getRefinedSchema(schema) {
+        return schema
+            .refine(options => [options.userId, options.userName].filter(o => o !== undefined).length === 1, {
+            message: `Specify either 'userId' or 'userName'.`
+        });
+    }
+    async commandAction(logger, args) {
+        const revokeUserSessions = async () => {
+            try {
+                const userIdentifier = args.options.userId ?? args.options.userName;
+                if (this.verbose) {
+                    await logger.logToStderr(`Invalidating all the refresh tokens for user ${userIdentifier}...`);
+                }
+                const requestOptions = {
+                    url: `${this.resource}/v1.0/users('${formatting.encodeQueryParameter(userIdentifier)}')/revokeSignInSessions`,
+                    headers: {
+                        accept: 'application/json;odata.metadata=none'
+                    },
+                    responseType: 'json',
+                    data: {}
+                };
+                await request.post(requestOptions);
+            }
+            catch (err) {
+                this.handleRejectedODataJsonPromise(err);
+            }
+        };
+        if (args.options.force) {
+            await revokeUserSessions();
+        }
+        else {
+            const result = await cli.promptForConfirmation({ message: `This will revoke all sessions for the user '${args.options.userId || args.options.userName}', requiring the user to re-sign in from all devices. Are you sure?` });
+            if (result) {
+                await revokeUserSessions();
+            }
+        }
+    }
+}
+export default new EntraUserSessionRevokeCommand();
+//# sourceMappingURL=user-session-revoke.js.map

package/dist/m365/entra/commands.js

@@ -88,6 +88,7 @@ export default {
     PIM_ROLE_ASSIGNMENT_ELIGIBILITY_LIST: `${prefix} pim role assignment eligibility list`,
     PIM_ROLE_REQUEST_LIST: `${prefix} pim role request list`,
     POLICY_LIST: `${prefix} policy list`,
+    RESOURCENAMESPACE_LIST: `${prefix} resourcenamespace list`,
     ROLEDEFINITION_ADD: `${prefix} roledefinition add`,
     ROLEDEFINITION_LIST: `${prefix} roledefinition list`,
     ROLEDEFINITION_GET: `${prefix} roledefinition get`,
@@ -118,6 +119,7 @@ export default {
     USER_REGISTRATIONDETAILS_LIST: `${prefix} user registrationdetails list`,
     USER_REMOVE: `${prefix} user remove`,
     USER_RECYCLEBINITEM_RESTORE: `${prefix} user recyclebinitem restore`,
+    USER_SESSION_REVOKE: `${prefix} user session revoke`,
     USER_SET: `${prefix} user set`,
     USER_SIGNIN_LIST: `${prefix} user signin list`
 };

package/dist/m365/outlook/commands/mailbox/mailbox-settings-get.js

@@ -0,0 +1,71 @@
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
+import { zod } from '../../../../utils/zod.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+import { validation } from '../../../../utils/validation.js';
+import request from '../../../../request.js';
+import { accessToken } from '../../../../utils/accessToken.js';
+import auth from '../../../../Auth.js';
+const options = globalOptionsZod
+    .extend({
+    userId: zod.alias('i', z.string().refine(id => validation.isValidGuid(id), id => ({
+        message: `'${id}' is not a valid GUID.`
+    })).optional()),
+    userName: zod.alias('n', z.string().refine(name => validation.isValidUserPrincipalName(name), name => ({
+        message: `'${name}' is not a valid UPN.`
+    })).optional())
+})
+    .strict();
+class OutlookMailboxSettingsGetCommand extends GraphCommand {
+    get name() {
+        return commands.MAILBOX_SETTINGS_GET;
+    }
+    get description() {
+        return `Get the user's mailbox settings`;
+    }
+    get schema() {
+        return options;
+    }
+    getRefinedSchema(schema) {
+        return schema
+            .refine(options => !(options.userId && options.userName), {
+            message: 'Specify either userId or userName, but not both'
+        });
+    }
+    async commandAction(logger, args) {
+        const isAppOnlyAccessToken = accessToken.isAppOnlyAccessToken(auth.connection.accessTokens[auth.defaultResource].accessToken);
+        let requestUrl = `${this.resource}/v1.0/me/mailboxSettings`;
+        if (isAppOnlyAccessToken) {
+            if (!args.options.userId && !args.options.userName) {
+                throw 'When running with application permissions either userId or userName is required';
+            }
+            const userIdentifier = args.options.userId ?? args.options.userName;
+            if (this.verbose) {
+                await logger.logToStderr(`Retrieving mailbox settings for user ${userIdentifier}...`);
+            }
+            requestUrl = `${this.resource}/v1.0/users('${userIdentifier}')/mailboxSettings`;
+        }
+        else {
+            if (args.options.userId || args.options.userName) {
+                throw 'You can retrieve mailbox settings of other users only if CLI is authenticated in app-only mode';
+            }
+        }
+        const requestOptions = {
+            url: requestUrl,
+            headers: {
+                accept: 'application/json;odata.metadata=none'
+            },
+            responseType: 'json'
+        };
+        try {
+            const result = await request.get(requestOptions);
+            await logger.log(result);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new OutlookMailboxSettingsGetCommand();
+//# sourceMappingURL=mailbox-settings-get.js.map

package/dist/m365/outlook/commands/mailbox/mailbox-settings-set.js

@@ -46,6 +46,9 @@ class OutlookMailboxSettingsSetCommand extends GraphCommand {
     }
     getRefinedSchema(schema) {
         return schema
+            .refine(options => !(options.userId && options.userName), {
+            message: 'Specify either userId or userName, but not both'
+        })
             .refine(options => [options.workingDays, options.workingHoursStartTime, options.workingHoursEndTime, options.workingHoursTimeZone,
             options.autoReplyStatus, options.autoReplyExternalAudience, options.autoReplyExternalMessage, options.autoReplyInternalMessage,
             options.autoReplyStartDateTime, options.autoReplyStartTimeZone, options.autoReplyEndDateTime, options.autoReplyEndTimeZone,
@@ -57,8 +60,8 @@ class OutlookMailboxSettingsSetCommand extends GraphCommand {
         const isAppOnlyAccessToken = accessToken.isAppOnlyAccessToken(auth.connection.accessTokens[auth.defaultResource].accessToken);
         let requestUrl = `${this.resource}/v1.0/me/mailboxSettings`;
         if (isAppOnlyAccessToken) {
-            if (args.options.userId && args.options.userName) {
-                throw 'When running with application permissions either userId or userName is required, but not both';
+            if (!args.options.userId && !args.options.userName) {
+                throw 'When running with application permissions either userId or userName is required';
             }
             const userIdentifier = args.options.userId ?? args.options.userName;
             if (this.verbose) {

package/dist/m365/outlook/commands.js

@@ -1,6 +1,7 @@
 const prefix = 'outlook';
 export default {
     MAIL_SEND: `${prefix} mail send`,
+    MAILBOX_SETTINGS_GET: `${prefix} mailbox settings get`,
     MAILBOX_SETTINGS_SET: `${prefix} mailbox settings set`,
     MESSAGE_GET: `${prefix} message get`,
     MESSAGE_LIST: `${prefix} message list`,

package/dist/m365/spo/commands/mail/mail-send.js

@@ -8,6 +8,7 @@ import request from '../../../../request.js';
 import { validation } from '../../../../utils/validation.js';
 import SpoCommand from '../../../base/SpoCommand.js';
 import commands from '../../commands.js';
+import outlookCommands from '../../../outlook/commands.js';
 class SpoMailSendCommand extends SpoCommand {
     get name() {
         return commands.MAIL_SEND;
@@ -23,6 +24,7 @@ class SpoMailSendCommand extends SpoCommand {
         __classPrivateFieldGet(this, _SpoMailSendCommand_instances, "m", _SpoMailSendCommand_initValidators).call(this);
     }
     async commandAction(logger, args) {
+        await this.showDeprecationWarning(logger, commands.MAIL_SEND, outlookCommands.MAIL_SEND);
         const params = {
             properties: {
                 __metadata: { "type": "SP.Utilities.EmailProperties" },

package/dist/m365/spo/commands/page/page-get.js

@@ -1,15 +1,23 @@
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _SpoPageGetCommand_instances, _SpoPageGetCommand_initOptions, _SpoPageGetCommand_initValidators;
+import { z } from 'zod';
+import { zod } from '../../../../utils/zod.js';
+import { globalOptionsZod } from '../../../../Command.js';
 import request from '../../../../request.js';
 import { formatting } from '../../../../utils/formatting.js';
 import { urlUtil } from '../../../../utils/urlUtil.js';
 import { validation } from '../../../../utils/validation.js';
 import SpoCommand from '../../../base/SpoCommand.js';
 import commands from '../../commands.js';
+const options = globalOptionsZod
+    .extend({
+    webUrl: zod.alias('u', z.string()
+        .refine(url => validation.isValidSharePointUrl(url) === true, url => ({
+        message: `'${url}' is not a valid SharePoint Online site URL.`
+    }))),
+    name: zod.alias('n', z.string()).optional(),
+    default: z.boolean().optional(),
+    metadataOnly: z.boolean().optional()
+})
+    .strict();
 class SpoPageGetCommand extends SpoCommand {
     get name() {
         return commands.PAGE_GET;
@@ -20,21 +28,37 @@ class SpoPageGetCommand extends SpoCommand {
     defaultProperties() {
         return ['commentsDisabled', 'numSections', 'numControls', 'title', 'layoutType'];
     }
-    constructor() {
-        super();
-        _SpoPageGetCommand_instances.add(this);
-        __classPrivateFieldGet(this, _SpoPageGetCommand_instances, "m", _SpoPageGetCommand_initOptions).call(this);
-        __classPrivateFieldGet(this, _SpoPageGetCommand_instances, "m", _SpoPageGetCommand_initValidators).call(this);
+    get schema() {
+        return options;
+    }
+    getRefinedSchema(schema) {
+        return schema
+            .refine(options => [options.name, options.default].filter(x => x !== undefined).length === 1, {
+            message: `Specify either name or default, but not both.`
+        });
     }
     async commandAction(logger, args) {
         if (this.verbose) {
             await logger.logToStderr(`Retrieving information about the page...`);
         }
-        let pageName = args.options.name;
-        if (args.options.name.indexOf('.aspx') < 0) {
-            pageName += '.aspx';
-        }
+        let pageName = '';
         try {
+            if (args.options.name) {
+                pageName = args.options.name.endsWith('.aspx')
+                    ? args.options.name
+                    : `${args.options.name}.aspx`;
+            }
+            else if (args.options.default) {
+                const requestOptions = {
+                    url: `${args.options.webUrl}/_api/Web/RootFolder?$select=WelcomePage`,
+                    headers: {
+                        accept: 'application/json;odata=nometadata'
+                    },
+                    responseType: 'json'
+                };
+                const { WelcomePage } = await request.get(requestOptions);
+                pageName = WelcomePage.split('/').pop();
+            }
             let requestOptions = {
                 url: `${args.options.webUrl}/_api/web/GetFileByServerRelativePath(DecodedUrl='${urlUtil.getServerRelativeSiteUrl(args.options.webUrl)}/SitePages/${formatting.encodeQueryParameter(pageName)}')?$expand=ListItemAllFields/ClientSideApplicationId,ListItemAllFields/PageLayoutType,ListItemAllFields/CommentsDisabled`,
                 headers: {
@@ -45,7 +69,7 @@ class SpoPageGetCommand extends SpoCommand {
             };
             const page = await request.get(requestOptions);
             if (page.ListItemAllFields.ClientSideApplicationId !== 'b6917cb1-93a0-4b97-a84d-7cf49975d4ec') {
-                throw `Page ${args.options.name} is not a modern page.`;
+                throw `Page ${pageName} is not a modern page.`;
             }
             let pageItemData = {};
             pageItemData = Object.assign({}, page);
@@ -80,16 +104,5 @@ class SpoPageGetCommand extends SpoCommand {
         }
     }
 }
-_SpoPageGetCommand_instances = new WeakSet(), _SpoPageGetCommand_initOptions = function _SpoPageGetCommand_initOptions() {
-    this.options.unshift({
-        option: '-n, --name <name>'
-    }, {
-        option: '-u, --webUrl <webUrl>'
-    }, {
-        option: '--metadataOnly'
-    });
-}, _SpoPageGetCommand_initValidators = function _SpoPageGetCommand_initValidators() {
-    this.validators.push(async (args) => validation.isValidSharePointUrl(args.options.webUrl));
-};
 export default new SpoPageGetCommand();
 //# sourceMappingURL=page-get.js.map

package/dist/m365/tenant/commands/report/report-settings-get.js

@@ -0,0 +1,32 @@
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+import request from '../../../../request.js';
+class TenantReportSettingsGetCommand extends GraphCommand {
+    get name() {
+        return commands.REPORT_SETTINGS_GET;
+    }
+    get description() {
+        return 'Get the tenant-level settings for Microsoft 365 reports';
+    }
+    async commandAction(logger) {
+        if (this.verbose) {
+            await logger.logToStderr('Getting tenant-level settings for Microsoft 365 reports...');
+        }
+        const requestOptions = {
+            url: `${this.resource}/v1.0/admin/reportSettings`,
+            headers: {
+                accept: 'application/json;odata.metadata=none'
+            },
+            responseType: 'json'
+        };
+        try {
+            const res = await request.get(requestOptions);
+            await logger.log(res);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new TenantReportSettingsGetCommand();
+//# sourceMappingURL=report-settings-get.js.map

package/dist/m365/tenant/commands.js

@@ -15,6 +15,7 @@ export default {
     REPORT_OFFICE365ACTIVATIONSUSERDETAIL: `${prefix} report office365activationsuserdetail`,
     REPORT_OFFICE365ACTIVATIONSUSERCOUNTS: `${prefix} report office365activationsusercounts`,
     REPORT_SERVICESUSERCOUNTS: `${prefix} report servicesusercounts`,
+    REPORT_SETTINGS_GET: `${prefix} report settings get`,
     REPORT_SETTINGS_SET: `${prefix} report settings set`,
     SECURITY_ALERTS_LIST: `${prefix} security alerts list`,
     SERVICEANNOUNCEMENT_HEALTHISSUE_GET: `${prefix} serviceannouncement healthissue get`,

package/docs/docs/cmd/entra/resourcenamespace/resourcenamespace-list.mdx

@@ -0,0 +1,96 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# entra resourcenamespace list
+
+Get a list of the RBAC resource namespaces and their properties
+
+## Usage
+
+```sh
+m365 entra resourcenamespace list [options]
+```
+
+## Options
+
+<Global />
+
+## Remarks
+
+:::warning
+
+The command is based on an API that is currently in preview and is subject to change once the API reached general availability.
+
+:::
+
+## Examples
+
+Retrieve all resource namespaces.
+
+```sh
+m365 entra resourcenamespace list
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  [
+    {
+      "id": "microsoft.directory",
+      "name": "microsoft.directory"
+    },
+    {
+      "id": "microsoft.aad.b2c",
+      "name": "microsoft.aad.b2c"
+    }
+  ]
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  id                     name
+  --------------------   --------------------
+  microsoft.directory    microsoft.directory
+  microsoft.aad.b2c      microsoft.aad.b2c
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  id,name
+  microsoft.directory,microsoft.directory
+  microsoft.aad.b2c,microsoft.aad.b2c
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  # entra resourcenamespace list
+
+  Date: 1/31/2025
+
+  ## microsoft.directory (microsoft.directory)
+
+  Property | Value
+  ---------|-------
+  id | microsoft.directory
+  name | microsoft.directory
+
+  ## microsoft.aad.b2c (microsoft.aad.b2c)
+
+  Property | Value
+  ---------|-------
+  id | microsoft.aad.b2c
+  name | microsoft.aad.b2c
+  ```
+  
+  </TabItem>
+</Tabs>

package/docs/docs/cmd/entra/rolepermission/rolepermission-list.mdx

@@ -32,6 +32,8 @@ The command is based on an API that is currently in preview and is subject to ch
 
 :::
 
+Use the `m365 entra resourcenamespace list` command to get a list of available resource namespaces.
+
 ## Examples
 
 Get a list of role permissions

package/docs/docs/cmd/entra/user/user-session-revoke.mdx

@@ -0,0 +1,65 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# entra user session revoke
+
+Revokes all sign-in sessions for a given user
+
+## Usage
+
+```sh
+m365 entra user session revoke [options]
+```
+
+## Options
+```md definition-list
+`-i, --userId [userId]`
+: The id of the user. Specify either `userId` or `userName`, but not both.
+
+`-n, --userName [userName]`
+: The user principal name of the user. Specify either `userId` or `userName`, but not both.
+
+`-f, --force`
+: Don't prompt for confirmation.
+```
+
+<Global />
+
+## Remarks
+
+:::info
+
+To use this command you must be either **User Administrator** or **Global Administrator**.
+
+:::
+
+:::note
+
+There might be a small delay of a few minutes before tokens are revoked.
+
+This API doesn't revoke sign-in sessions for external users, because external users sign in through their home tenant.
+
+:::
+
+## Examples
+
+Revoke sign-in sessions of a user specified by id
+
+```sh
+m365 entra user session revoke --userId 4fb72b9b-d0b0-4a35-8bc1-83f9a6488c48
+```
+
+Revoke sign-in sessions of a user specified by its UPN
+
+```sh
+m365 entra user session revoke --userName john.doe@contoso.onmicrosoft.com
+```
+
+Revoke sign-in sessions of a user specified by its UPN without prompting for confirmation
+
+```sh
+m365 entra user session revoke --userName john.doe@contoso.onmicrosoft.com --force
+```
+
+## Response
+
+The command won't return a response on success.