@seliseblocks/cli-os 0.1.4 → 0.2.0

package/dist/commands/data/validation/by-schema-field.js

@@ -0,0 +1,18 @@
+import { stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function dataValidationBySchemaField(argv) {
+    const { args, flags } = parseCommand(argv);
+    const schemaId = args[0] || stringFlag(flags, "schema-id", { required: true });
+    const fieldName = args[1] || stringFlag(flags, "field-name", { required: true });
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/data/v4/data-validations/by-schema-and-field", {
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey,
+        query: { fieldName, schemaId }
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/data/validation/by-schema.d.ts

@@ -0,0 +1 @@
+export declare function dataValidationBySchema(argv: string[]): Promise<void>;

package/dist/commands/data/validation/by-schema.js

@@ -0,0 +1,17 @@
+import { stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function dataValidationBySchema(argv) {
+    const { args, flags } = parseCommand(argv);
+    const schemaId = args[0] || stringFlag(flags, "schema-id", { required: true });
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/data/v4/data-validations/by-schema-id", {
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey,
+        query: { schemaId }
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/data/validation/delete.d.ts

@@ -0,0 +1 @@
+export declare function dataValidationDelete(argv: string[]): Promise<void>;

package/dist/commands/data/validation/delete.js

@@ -0,0 +1,24 @@
+import { booleanFlag, stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { confirmMutation } from "../../../lib/confirm.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function dataValidationDelete(argv) {
+    const { args, flags } = parseCommand(argv);
+    const validationId = args[0] || stringFlag(flags, "validation-id", { required: true });
+    if (booleanFlag(flags, "dry-run")) {
+        writeOutput({ dryRun: true, endpoint: "/data/v4/data-validations", validationId }, flags);
+        return;
+    }
+    await confirmMutation(flags, `Delete data validation '${validationId}'.`);
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/data/v4/data-validations", {
+        impersonatedProjectAuth: true,
+        method: "DELETE",
+        ...requestContext(flags),
+        projectTenantId: projectKey,
+        query: { validationId }
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/data/validation/get.d.ts

@@ -0,0 +1 @@
+export declare function dataValidationGet(argv: string[]): Promise<void>;

package/dist/commands/data/validation/get.js

@@ -0,0 +1,17 @@
+import { stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function dataValidationGet(argv) {
+    const { args, flags } = parseCommand(argv);
+    const validationId = args[0] || stringFlag(flags, "validation-id", { required: true });
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/data/v4/data-validations/get-by-id", {
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey,
+        query: { validationId }
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/data/validation/list.d.ts

@@ -0,0 +1 @@
+export declare function dataValidationList(argv: string[]): Promise<void>;

package/dist/commands/data/validation/list.js

@@ -0,0 +1,25 @@
+import { booleanFlag, integerFlag, stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function dataValidationList(argv) {
+    const { flags } = parseCommand(argv);
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/data/v4/data-validations", {
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey,
+        query: {
+            FieldName: stringFlag(flags, "field-name") || undefined,
+            Keyword: stringFlag(flags, "keyword") || undefined,
+            PageNo: integerFlag(flags, "page", 1),
+            PageSize: integerFlag(flags, "page-size", 100),
+            ProjectKey: projectKey,
+            SchemaId: stringFlag(flags, "schema-id") || undefined,
+            SortBy: stringFlag(flags, "sort-by") || undefined,
+            SortDescending: booleanFlag(flags, "sort-desc") || undefined
+        }
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/data/validation/save.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Upsert: omit --item-id to create, pass it to update. `validations` (an array of
+ * { type, value, secondaryValue?, errorMessage?, isActive }) has no scalar flag
+ * equivalent - pass it via --body/--file, e.g. --body '{"validations":[{"type":1,"value":"^[0-9]+$","isActive":true}]}'.
+ */
+export declare function dataValidationSave(argv: string[]): Promise<void>;

package/dist/commands/data/validation/save.js

@@ -0,0 +1,44 @@
+import { booleanFlag, stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { confirmMutation } from "../../../lib/confirm.js";
+import { compact, jsonBodyFlag } from "../../../lib/json-flag.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+/**
+ * Upsert: omit --item-id to create, pass it to update. `validations` (an array of
+ * { type, value, secondaryValue?, errorMessage?, isActive }) has no scalar flag
+ * equivalent - pass it via --body/--file, e.g. --body '{"validations":[{"type":1,"value":"^[0-9]+$","isActive":true}]}'.
+ */
+export async function dataValidationSave(argv) {
+    const { flags } = parseCommand(argv);
+    const body = {
+        ...(await jsonBodyFlag(flags)),
+        ...compact({
+            fieldName: stringFlag(flags, "field-name") || undefined,
+            itemId: stringFlag(flags, "item-id") || undefined,
+            schemaId: stringFlag(flags, "schema-id") || undefined
+        })
+    };
+    if (!body.schemaId)
+        throw new Error("Provide --schema-id (or set it in --body/--file).");
+    if (!body.fieldName)
+        throw new Error("Provide --field-name (or set it in --body/--file).");
+    if (!Array.isArray(body.validations) || !body.validations.length) {
+        throw new Error("Provide validation rules via --body/--file, e.g. { \"validations\": [{ \"type\": 1, \"value\": \"...\", \"isActive\": true }] }.");
+    }
+    if (booleanFlag(flags, "dry-run")) {
+        writeOutput({ dryRun: true, endpoint: "/data/v4/data-validations", request: body }, flags);
+        return;
+    }
+    await confirmMutation(flags, `Save data validation for schema '${body.schemaId}' field '${body.fieldName}'.`);
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/data/v4/data-validations", {
+        body,
+        impersonatedProjectAuth: true,
+        method: body.itemId ? "PUT" : "POST",
+        ...requestContext(flags),
+        projectTenantId: projectKey
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/deselect.js

@@ -1,31 +1,21 @@
-import { normalizeAccountName, readConfig } from "../lib/config.js";
-import { readTokenStore, writeTokenStore } from "../lib/token-store.js";
-import { requestContext } from "../lib/request-context.js";
+import { stringFlag } from "../lib/args.js";
+import { stopProjectImpersonation } from "../lib/auth.js";
+import { readConfig } from "../lib/config.js";
 import { clearSelectedProject, parseCommand } from "../lib/workspace.js";
 export async function deselectProject(argv) {
     const { flags } = parseCommand(argv);
+    const accountName = stringFlag(flags, "account") || undefined;
     const config = await readConfig();
-    const { accountName } = requestContext(flags);
-    const account = normalizeAccountName(accountName ?? config.activeAccount);
-    const tenantId = await clearSelectedProject();
+    const tenantId = config.selectedProject?.tenantId;
     if (!tenantId) {
         console.log("No project is currently selected.");
         return;
     }
-    const store = await readTokenStore();
-    const projects = store.accounts[account]?.projects;
-    if (projects && tenantId in projects) {
-        const { [tenantId]: _removed, ...remainingProjects } = projects;
-        await writeTokenStore({
-            accounts: {
-                ...store.accounts,
-                [account]: {
-                    ...store.accounts[account],
-                    projects: remainingProjects
-                }
-            }
-        });
-    }
-    console.log(`Deselected project tenant ${tenantId}.`);
-    console.log("Run 'blocks-os use <tenantId>' to select a project again.");
+    // Stop-impersonation restores a fresh account refresh token and drops the
+    // project's cached token from the store, so there's nothing left to clean
+    // up here beyond the selection itself.
+    await stopProjectImpersonation(accountName, tenantId);
+    await clearSelectedProject();
+    console.log(`Deselected project tenant ${tenantId}. Account session restored.`);
+    console.log("Run 'blocks use <tenantId>' to select a project again.");
 }

package/dist/commands/iam/email/available.d.ts

@@ -0,0 +1 @@
+export declare function iamEmailAvailable(argv: string[]): Promise<void>;

package/dist/commands/iam/email/available.js

@@ -0,0 +1,17 @@
+import { stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function iamEmailAvailable(argv) {
+    const { args, flags } = parseCommand(argv);
+    const email = args[0] || stringFlag(flags, "email", { required: true });
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/iam/v4/iam/email/available", {
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey,
+        query: { Email: email }
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/iam/me.js

@@ -4,8 +4,11 @@ import { requestContext } from "../../lib/request-context.js";
 import { parseCommand } from "../../lib/workspace.js";
 export async function iamMe(argv = []) {
     const { flags } = parseCommand(argv);
+    // The server resets to the root tenant's identity for this endpoint
+    // regardless of which token calls it, so the impersonated project session
+    // works fine here too -- prefer it when a project is selected.
     const me = await blocksRequest("/iam/v4/iam/me", {
-        accountAuth: true,
+        preferImpersonatedProjectAuth: true,
         ...requestContext(flags)
     });
     writeOutput(me, { ...flags, json: true });

package/dist/commands/iam/organizations/config-get.d.ts

@@ -0,0 +1 @@
+export declare function iamOrganizationsConfigGet(argv: string[]): Promise<void>;

package/dist/commands/iam/organizations/config-get.js

@@ -0,0 +1,14 @@
+import { blocksRequest } from "../../../lib/api.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function iamOrganizationsConfigGet(argv) {
+    const { flags } = parseCommand(argv);
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/iam/v4/iam/organizations/config", {
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/iam/organizations/config-save.d.ts

@@ -0,0 +1 @@
+export declare function iamOrganizationsConfigSave(argv: string[]): Promise<void>;

package/dist/commands/iam/organizations/config-save.js

@@ -0,0 +1,34 @@
+import { booleanFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { confirmMutation } from "../../../lib/confirm.js";
+import { compact, jsonBodyFlag } from "../../../lib/json-flag.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function iamOrganizationsConfigSave(argv) {
+    const { flags } = parseCommand(argv);
+    const body = {
+        ...(await jsonBodyFlag(flags)),
+        ...compact({
+            allowOrgCreationFromCloud: booleanFlag(flags, "allow-org-creation-from-cloud") || undefined,
+            allowOrgCreationFromConstruct: booleanFlag(flags, "allow-org-creation-from-construct") || undefined,
+            allowOrgCreationFromPortal: booleanFlag(flags, "allow-org-creation-from-portal") || undefined,
+            allowOrgCreationFromSignup: booleanFlag(flags, "allow-org-creation-from-signup") || undefined,
+            consentForMultiOrgEnable: booleanFlag(flags, "consent-for-multi-org-enable") || undefined,
+            isMultiOrgEnabled: booleanFlag(flags, "multi-org-enabled") || undefined
+        })
+    };
+    if (booleanFlag(flags, "dry-run")) {
+        writeOutput({ dryRun: true, endpoint: "/iam/v4/iam/organizations/config", request: body }, flags);
+        return;
+    }
+    await confirmMutation(flags, "Save IAM organization configuration for the selected project.");
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/iam/v4/iam/organizations/config", {
+        body,
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/iam/organizations/create.d.ts

@@ -0,0 +1 @@
+export declare function iamOrganizationsCreate(argv: string[]): Promise<void>;

package/dist/commands/iam/organizations/create.js

@@ -0,0 +1,37 @@
+import { booleanFlag, stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { confirmMutation } from "../../../lib/confirm.js";
+import { compact, jsonBodyFlag, listFlag } from "../../../lib/json-flag.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function iamOrganizationsCreate(argv) {
+    const { flags } = parseCommand(argv);
+    const body = {
+        ...(await jsonBodyFlag(flags)),
+        ...compact({
+            defaultPermissionsForMembers: listFlag(flags, "default-permissions"),
+            defaultRoleForMembers: listFlag(flags, "default-roles"),
+            description: stringFlag(flags, "description") || undefined,
+            email: stringFlag(flags, "email") || undefined,
+            name: stringFlag(flags, "name") || undefined,
+            phoneNumber: stringFlag(flags, "phone-number") || undefined,
+            websiteUrl: stringFlag(flags, "website-url") || undefined
+        })
+    };
+    if (!body.name)
+        throw new Error("Provide --name (or set it in --body/--file).");
+    if (booleanFlag(flags, "dry-run")) {
+        writeOutput({ dryRun: true, endpoint: "/iam/v4/iam/organizations/create", request: body }, flags);
+        return;
+    }
+    await confirmMutation(flags, `Create IAM organization '${body.name}'.`);
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/iam/v4/iam/organizations/create", {
+        body,
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/iam/organizations/get.d.ts

@@ -0,0 +1 @@
+export declare function iamOrganizationsGet(argv: string[]): Promise<void>;

package/dist/commands/iam/organizations/get.js

@@ -0,0 +1,16 @@
+import { stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function iamOrganizationsGet(argv) {
+    const { args, flags } = parseCommand(argv);
+    const id = args[0] || stringFlag(flags, "id", { required: true });
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest(`/iam/v4/iam/organizations/${encodeURIComponent(id)}`, {
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/iam/organizations/list.d.ts

@@ -0,0 +1 @@
+export declare function iamOrganizationsList(argv: string[]): Promise<void>;

package/dist/commands/iam/organizations/list.js

@@ -0,0 +1,26 @@
+import { integerFlag, optionalBooleanFlag, stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { listFlag } from "../../../lib/json-flag.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function iamOrganizationsList(argv) {
+    const { flags } = parseCommand(argv);
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/iam/v4/iam/organizations", {
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey,
+        query: {
+            "Filter.Ids": listFlag(flags, "ids")?.join(","),
+            "Filter.IsDisabled": optionalBooleanFlag(flags, "is-disabled"),
+            "Filter.ParentOrganizationId": stringFlag(flags, "parent-organization-id") || undefined,
+            "Filter.Search": stringFlag(flags, "search") || undefined,
+            Page: integerFlag(flags, "page", 1),
+            PageSize: integerFlag(flags, "page-size", 20),
+            "Sort.IsDescending": optionalBooleanFlag(flags, "sort-desc"),
+            "Sort.Property": stringFlag(flags, "sort-by") || undefined
+        }
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/iam/organizations/my.d.ts

@@ -0,0 +1 @@
+export declare function iamOrganizationsMy(argv: string[]): Promise<void>;

package/dist/commands/iam/organizations/my.js

@@ -0,0 +1,14 @@
+import { blocksRequest } from "../../../lib/api.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function iamOrganizationsMy(argv) {
+    const { flags } = parseCommand(argv);
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/iam/v4/iam/organizations/my", {
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/iam/organizations/update.d.ts

@@ -0,0 +1 @@
+export declare function iamOrganizationsUpdate(argv: string[]): Promise<void>;

package/dist/commands/iam/organizations/update.js

@@ -0,0 +1,39 @@
+import { booleanFlag, optionalBooleanFlag, stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { confirmMutation } from "../../../lib/confirm.js";
+import { compact, jsonBodyFlag } from "../../../lib/json-flag.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function iamOrganizationsUpdate(argv) {
+    const { args, flags } = parseCommand(argv);
+    const id = args[0] || stringFlag(flags, "id", { required: true });
+    const body = {
+        ...(await jsonBodyFlag(flags)),
+        ...compact({
+            currency: stringFlag(flags, "currency") || undefined,
+            description: stringFlag(flags, "description") || undefined,
+            email: stringFlag(flags, "email") || undefined,
+            industry: stringFlag(flags, "industry") || undefined,
+            isEnable: optionalBooleanFlag(flags, "is-enabled"),
+            locale: stringFlag(flags, "locale") || undefined,
+            name: stringFlag(flags, "name") || undefined,
+            phoneNumber: stringFlag(flags, "phone-number") || undefined,
+            timeZone: stringFlag(flags, "time-zone") || undefined,
+            websiteUrl: stringFlag(flags, "website-url") || undefined
+        })
+    };
+    if (booleanFlag(flags, "dry-run")) {
+        writeOutput({ dryRun: true, endpoint: `/iam/v4/iam/organizations/${id}`, request: body }, flags);
+        return;
+    }
+    await confirmMutation(flags, `Update IAM organization '${id}'.`);
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest(`/iam/v4/iam/organizations/${encodeURIComponent(id)}`, {
+        body,
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/iam/permissions/by-severity.d.ts

@@ -0,0 +1 @@
+export declare function iamPermissionsBySeverity(argv: string[]): Promise<void>;

package/dist/commands/iam/permissions/by-severity.js

@@ -0,0 +1,14 @@
+import { blocksRequest } from "../../../lib/api.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function iamPermissionsBySeverity(argv) {
+    const { flags } = parseCommand(argv);
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/iam/v4/iam/permissions/by-severity", {
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/iam/permissions/create.d.ts

@@ -0,0 +1 @@
+export declare function iamPermissionsCreate(argv: string[]): Promise<void>;

package/dist/commands/iam/permissions/create.js

@@ -0,0 +1,39 @@
+import { booleanFlag, optionalBooleanFlag, optionalIntegerFlag, stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { confirmMutation } from "../../../lib/confirm.js";
+import { compact, jsonBodyFlag, listFlag } from "../../../lib/json-flag.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function iamPermissionsCreate(argv) {
+    const { flags } = parseCommand(argv);
+    const body = {
+        ...(await jsonBodyFlag(flags)),
+        ...compact({
+            dependentPermissions: listFlag(flags, "dependent-permissions"),
+            description: stringFlag(flags, "description") || undefined,
+            isBuiltIn: optionalBooleanFlag(flags, "is-built-in"),
+            name: stringFlag(flags, "name") || undefined,
+            permissionSeverity: optionalIntegerFlag(flags, "severity"),
+            resource: stringFlag(flags, "resource") || undefined,
+            resourceGroup: stringFlag(flags, "resource-group") || undefined,
+            tags: listFlag(flags, "tags"),
+            type: optionalIntegerFlag(flags, "type")
+        })
+    };
+    if (!body.name)
+        throw new Error("Provide --name (or set it in --body/--file).");
+    if (booleanFlag(flags, "dry-run")) {
+        writeOutput({ dryRun: true, endpoint: "/iam/v4/iam/permissions/create", request: body }, flags);
+        return;
+    }
+    await confirmMutation(flags, `Create IAM permission '${body.name}'.`);
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest("/iam/v4/iam/permissions/create", {
+        body,
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/iam/permissions/get.d.ts

@@ -0,0 +1 @@
+export declare function iamPermissionsGet(argv: string[]): Promise<void>;

package/dist/commands/iam/permissions/get.js

@@ -0,0 +1,16 @@
+import { stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function iamPermissionsGet(argv) {
+    const { args, flags } = parseCommand(argv);
+    const id = args[0] || stringFlag(flags, "id", { required: true });
+    const projectKey = await selectedProject(flags);
+    const result = await blocksRequest(`/iam/v4/iam/permissions/${encodeURIComponent(id)}`, {
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/iam/permissions/list.d.ts

@@ -0,0 +1 @@
+export declare function iamPermissionsList(argv: string[]): Promise<void>;

package/dist/commands/iam/permissions/list.js

@@ -0,0 +1,41 @@
+import { integerFlag, optionalBooleanFlag, optionalIntegerFlag, stringFlag } from "../../../lib/args.js";
+import { blocksRequest } from "../../../lib/api.js";
+import { compact, jsonBodyFlag, listFlag } from "../../../lib/json-flag.js";
+import { writeOutput } from "../../../lib/output.js";
+import { requestContext } from "../../../lib/request-context.js";
+import { parseCommand, selectedProject } from "../../../lib/workspace.js";
+export async function iamPermissionsList(argv) {
+    const { flags } = parseCommand(argv);
+    const projectKey = await selectedProject(flags);
+    const filter = {
+        ...(await jsonBodyFlag(flags)).filter,
+        ...compact({
+            isArchived: optionalBooleanFlag(flags, "is-archived"),
+            isBuiltIn: stringFlag(flags, "is-built-in") || undefined,
+            permissionSeverity: optionalIntegerFlag(flags, "severity"),
+            resourceGroup: stringFlag(flags, "resource-group") || undefined,
+            resources: listFlag(flags, "resources"),
+            search: stringFlag(flags, "search") || undefined,
+            tags: listFlag(flags, "tags"),
+            type: optionalIntegerFlag(flags, "type")
+        })
+    };
+    const body = {
+        filter,
+        organizationId: stringFlag(flags, "organization-id") || undefined,
+        page: integerFlag(flags, "page", 1),
+        pageSize: integerFlag(flags, "page-size", 20),
+        roles: listFlag(flags, "roles"),
+        sort: {
+            isDescending: stringFlag(flags, "sort-desc") === "true",
+            property: stringFlag(flags, "sort-by") || undefined
+        }
+    };
+    const result = await blocksRequest("/iam/v4/iam/permissions", {
+        body,
+        impersonatedProjectAuth: true,
+        ...requestContext(flags),
+        projectTenantId: projectKey
+    });
+    writeOutput(result, flags);
+}

package/dist/commands/iam/permissions/update.d.ts

@@ -0,0 +1 @@
+export declare function iamPermissionsUpdate(argv: string[]): Promise<void>;