@simplysf/simply-permissions 1.0.0

package/lib/common/permissionSetXmlTemplate.js

@@ -0,0 +1,76 @@
+/*
+ * Copyright (c) 2026, Clay Chipps; Copyright (c) 2026 Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+function escapeXml(value) {
+    return value
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&apos;');
+}
+export function buildPermissionSetXml(data) {
+    const objectPermissionsXml = data.objectPermissions
+        .map((permission) => `  <objectPermissions>
+    <object>${escapeXml(permission.object)}</object>
+    <allowCreate>${permission.allowCreate}</allowCreate>
+    <allowDelete>${permission.allowDelete}</allowDelete>
+    <allowEdit>${permission.allowEdit}</allowEdit>
+    <allowRead>${permission.allowRead}</allowRead>
+    <modifyAllRecords>${permission.modifyAllRecords}</modifyAllRecords>
+    <viewAllRecords>${permission.viewAllRecords}</viewAllRecords>
+  </objectPermissions>`)
+        .join('\n');
+    const fieldPermissionsXml = data.fieldPermissions
+        .map((permission) => `  <fieldPermissions>
+    <field>${escapeXml(permission.field)}</field>
+    <readable>${permission.readable}</readable>
+    <editable>${permission.editable}</editable>
+  </fieldPermissions>`)
+        .join('\n');
+    const tabSettingsXml = data.tabSettings
+        .map((setting) => `  <tabSettings>
+    <tab>${escapeXml(setting.tab)}</tab>
+    <visibility>${setting.visible ? 'Visible' : 'Hidden'}</visibility>
+  </tabSettings>`)
+        .join('\n');
+    const recordTypeVisibilitiesXml = data.recordTypeVisibilities
+        .map((visibility) => `  <recordTypeVisibilities>
+    <recordType>${escapeXml(visibility.recordType)}</recordType>
+    <visible>${visibility.visible}</visible>
+  </recordTypeVisibilities>`)
+        .join('\n');
+    const userPermissionsXml = data.userPermissions
+        .map((permission) => `  <userPermissions>
+    <name>${escapeXml(permission.name)}</name>
+    <enabled>${permission.enabled}</enabled>
+  </userPermissions>`)
+        .join('\n');
+    const sections = [
+        `  <label>${escapeXml(data.label)}</label>`,
+        data.description ? `  <description>${escapeXml(data.description)}</description>` : '',
+        objectPermissionsXml,
+        fieldPermissionsXml,
+        tabSettingsXml,
+        recordTypeVisibilitiesXml,
+        userPermissionsXml,
+    ].filter(Boolean);
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<PermissionSet xmlns="http://soap.sforce.com/2006/04/metadata">
+${sections.join('\n')}
+</PermissionSet>
+`;
+}
+//# sourceMappingURL=permissionSetXmlTemplate.js.map

package/lib/common/permissionSetXmlTemplate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionSetXmlTemplate.js","sourceRoot":"","sources":["../../src/common/permissionSetXmlTemplate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA4CH,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAA+B;IACnE,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB;SAChD,GAAG,CACF,CAAC,UAAU,EAAE,EAAE,CAAC;cACR,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;mBACvB,UAAU,CAAC,WAAW;mBACtB,UAAU,CAAC,WAAW;iBACxB,UAAU,CAAC,SAAS;iBACpB,UAAU,CAAC,SAAS;wBACb,UAAU,CAAC,gBAAgB;sBAC7B,UAAU,CAAC,cAAc;uBACxB,CAClB;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB;SAC9C,GAAG,CACF,CAAC,UAAU,EAAE,EAAE,CAAC;aACT,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;gBACxB,UAAU,CAAC,QAAQ;gBACnB,UAAU,CAAC,QAAQ;sBACb,CACjB;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW;SACpC,GAAG,CACF,CAAC,OAAO,EAAE,EAAE,CAAC;WACR,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;kBACf,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;iBACvC,CACZ;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,yBAAyB,GAAG,IAAI,CAAC,sBAAsB;SAC1D,GAAG,CACF,CAAC,UAAU,EAAE,EAAE,CAAC;kBACJ,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC;eACnC,UAAU,CAAC,OAAO;4BACL,CACvB;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe;SAC5C,GAAG,CACF,CAAC,UAAU,EAAE,EAAE,CAAC;YACV,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;eACvB,UAAU,CAAC,OAAO;qBACZ,CAChB;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,QAAQ,GAAG;QACf,YAAY,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU;QAC3C,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE;QACrF,oBAAoB;QACpB,mBAAmB;QACnB,cAAc;QACd,yBAAyB;QACzB,kBAAkB;KACnB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAElB,OAAO;;EAEP,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;;CAEpB,CAAC;AACF,CAAC"}

package/lib/common/permissionsReportTemplate.d.ts

@@ -0,0 +1,41 @@
+export type ObjectPermissionEntry = {
+    SobjectType: string;
+    PermissionsRead: boolean;
+    PermissionsCreate: boolean;
+    PermissionsEdit: boolean;
+    PermissionsDelete: boolean;
+    PermissionsViewAllRecords: boolean;
+    PermissionsModifyAllRecords: boolean;
+};
+export type FieldPermissionEntry = {
+    SobjectType: string;
+    Field: string;
+    PermissionsRead: boolean;
+    PermissionsEdit: boolean;
+};
+export type PermissionSetReportEntry = {
+    Id: string;
+    Name: string;
+    Label: string;
+    Description?: string;
+    objectPerms: ObjectPermissionEntry[];
+    fieldPerms: FieldPermissionEntry[];
+};
+export type PermissionSetGroupReportEntry = {
+    Id: string;
+    DeveloperName: string;
+    MasterLabel: string;
+    Description?: string;
+    components: string[];
+    objectPerms: ObjectPermissionEntry[];
+    fieldPerms: FieldPermissionEntry[];
+};
+export type GroupedPermissionsData = Map<string, {
+    permissionSets: PermissionSetReportEntry[];
+    permissionSetGroups: PermissionSetGroupReportEntry[];
+}>;
+export declare function buildPermissionsReportHtml(options: {
+    username: string;
+    reportDate: string;
+    groupedData: GroupedPermissionsData;
+}): string;

package/lib/common/permissionsReportTemplate.js

@@ -0,0 +1,109 @@
+/*
+ * Copyright (c) 2026, Clay Chipps; Copyright (c) 2026 Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+function escapeHtml(value) {
+    return value.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+}
+function renderObjectPermsTable(perms) {
+    if (perms.length === 0) {
+        return '<p>No object permissions.</p>';
+    }
+    const rows = perms
+        .map((permission) => `<tr><td>${escapeHtml(permission.SobjectType)}</td><td>${permission.PermissionsRead}</td><td>${permission.PermissionsCreate}</td><td>${permission.PermissionsEdit}</td><td>${permission.PermissionsDelete}</td><td>${permission.PermissionsViewAllRecords}</td><td>${permission.PermissionsModifyAllRecords}</td></tr>`)
+        .join('');
+    return `<table><thead><tr><th>Object</th><th>Read</th><th>Create</th><th>Edit</th><th>Delete</th><th>View All</th><th>Modify All</th></tr></thead><tbody>${rows}</tbody></table>`;
+}
+function renderFieldPermsTable(perms) {
+    if (perms.length === 0) {
+        return '<p>No field permissions.</p>';
+    }
+    const rows = perms
+        .map((permission) => `<tr><td>${escapeHtml(permission.SobjectType)}</td><td>${escapeHtml(permission.Field.split('.')[1] ?? permission.Field)}</td><td>${permission.PermissionsRead}</td><td>${permission.PermissionsEdit}</td></tr>`)
+        .join('');
+    return `<table><thead><tr><th>Object</th><th>Field</th><th>Read</th><th>Edit</th></tr></thead><tbody>${rows}</tbody></table>`;
+}
+function renderPermissionSet(permissionSet) {
+    return `
+    <details>
+      <summary>${escapeHtml(permissionSet.Label)} (${escapeHtml(permissionSet.Name)})</summary>
+      <div class="content">
+        ${permissionSet.Description ? `<p>${escapeHtml(permissionSet.Description)}</p>` : ''}
+        <h4>Object Permissions</h4>
+        ${renderObjectPermsTable(permissionSet.objectPerms)}
+        <h4>Field Permissions</h4>
+        ${renderFieldPermsTable(permissionSet.fieldPerms)}
+      </div>
+    </details>`;
+}
+function renderPermissionSetGroup(permissionSetGroup) {
+    return `
+    <details>
+      <summary>${escapeHtml(permissionSetGroup.MasterLabel)} (${escapeHtml(permissionSetGroup.DeveloperName)}) [Group]</summary>
+      <div class="content">
+        ${permissionSetGroup.Description ? `<p>${escapeHtml(permissionSetGroup.Description)}</p>` : ''}
+        <p><strong>Components:</strong> ${permissionSetGroup.components.map(escapeHtml).join(', ') || 'None'}</p>
+        <h4>Object Permissions</h4>
+        ${renderObjectPermsTable(permissionSetGroup.objectPerms)}
+        <h4>Field Permissions</h4>
+        ${renderFieldPermsTable(permissionSetGroup.fieldPerms)}
+      </div>
+    </details>`;
+}
+export function buildPermissionsReportHtml(options) {
+    const { username, reportDate, groupedData } = options;
+    const sortedPackages = [...groupedData.keys()].sort();
+    const sections = sortedPackages
+        .map((pkg) => {
+        const data = groupedData.get(pkg);
+        if (!data) {
+            return '';
+        }
+        return `
+        <div class="package-section" data-package="${escapeHtml(pkg)}">
+          <h2>Package: ${escapeHtml(pkg)}</h2>
+          <h3>Permission Sets (${data.permissionSets.length})</h3>
+          ${data.permissionSets.map(renderPermissionSet).join('')}
+          <h3>Permission Set Groups (${data.permissionSetGroups.length})</h3>
+          ${data.permissionSetGroups.map(renderPermissionSetGroup).join('')}
+        </div>`;
+    })
+        .join('');
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>Permissions Report</title>
+<style>
+  body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif; line-height: 1.6; color: #333; max-width: 1200px; margin: 0 auto; padding: 20px; background-color: #f4f7f6; }
+  h1 { color: #2c3e50; border-bottom: 2px solid #3498db; padding-bottom: 10px; }
+  .package-section { background: white; border-radius: 8px; box-shadow: 0 2px 4px rgba(0,0,0,0.1); margin-bottom: 20px; padding: 15px; }
+  details { margin-bottom: 10px; border: 1px solid #ddd; border-radius: 4px; }
+  summary { padding: 12px; cursor: pointer; font-weight: bold; background: #eee; outline: none; }
+  summary:hover { background: #e0e0e0; }
+  .content { padding: 15px; background: white; }
+  table { width: 100%; border-collapse: collapse; margin-top: 10px; margin-bottom: 15px; font-size: 0.9em; }
+  th, td { border: 1px solid #ddd; padding: 8px; text-align: left; }
+  th { background-color: #f8f9fa; }
+</style>
+</head>
+<body>
+  <h1>Permissions Report</h1>
+  <p>Org: <strong>${escapeHtml(username)}</strong> | Generated: ${escapeHtml(reportDate)}</p>
+  ${sections}
+</body>
+</html>`;
+}
+//# sourceMappingURL=permissionsReportTemplate.js.map

package/lib/common/permissionsReportTemplate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionsReportTemplate.js","sourceRoot":"","sources":["../../src/common/permissionsReportTemplate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA2CH,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,sBAAsB,CAAC,KAA8B;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,+BAA+B,CAAC;IACzC,CAAC;IAED,MAAM,IAAI,GAAG,KAAK;SACf,GAAG,CACF,CAAC,UAAU,EAAE,EAAE,CACb,WAAW,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,YAAY,UAAU,CAAC,eAAe,YAAY,UAAU,CAAC,iBAAiB,YAAY,UAAU,CAAC,eAAe,YAAY,UAAU,CAAC,iBAAiB,YAAY,UAAU,CAAC,yBAAyB,YAAY,UAAU,CAAC,2BAA2B,YAAY,CAC1T;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,OAAO,oJAAoJ,IAAI,kBAAkB,CAAC;AACpL,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA6B;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,8BAA8B,CAAC;IACxC,CAAC;IAED,MAAM,IAAI,GAAG,KAAK;SACf,GAAG,CACF,CAAC,UAAU,EAAE,EAAE,CACb,WAAW,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,YAAY,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,YAAY,UAAU,CAAC,eAAe,YAAY,UAAU,CAAC,eAAe,YAAY,CAClN;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,OAAO,gGAAgG,IAAI,kBAAkB,CAAC;AAChI,CAAC;AAED,SAAS,mBAAmB,CAAC,aAAuC;IAClE,OAAO;;iBAEQ,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC;;UAEzE,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;;UAElF,sBAAsB,CAAC,aAAa,CAAC,WAAW,CAAC;;UAEjD,qBAAqB,CAAC,aAAa,CAAC,UAAU,CAAC;;eAE1C,CAAC;AAChB,CAAC;AAED,SAAS,wBAAwB,CAAC,kBAAiD;IACjF,OAAO;;iBAEQ,UAAU,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,UAAU,CAAC,kBAAkB,CAAC,aAAa,CAAC;;UAElG,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,kBAAkB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;0CAC5D,kBAAkB,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM;;UAElG,sBAAsB,CAAC,kBAAkB,CAAC,WAAW,CAAC;;UAEtD,qBAAqB,CAAC,kBAAkB,CAAC,UAAU,CAAC;;eAE/C,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAI1C;IACC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IACtD,MAAM,cAAc,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtD,MAAM,QAAQ,GAAG,cAAc;SAC5B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;qDACwC,UAAU,CAAC,GAAG,CAAC;yBAC3C,UAAU,CAAC,GAAG,CAAC;iCACP,IAAI,CAAC,cAAc,CAAC,MAAM;YAC/C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;uCAC1B,IAAI,CAAC,mBAAmB,CAAC,MAAM;YAC1D,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;eAC5D,CAAC;IACZ,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,OAAO;;;;;;;;;;;;;;;;;;;;;oBAqBW,UAAU,CAAC,QAAQ,CAAC,0BAA0B,UAAU,CAAC,UAAU,CAAC;IACpF,QAAQ;;QAEJ,CAAC;AACT,CAAC"}

package/lib/index.d.ts

@@ -0,0 +1,2 @@
+declare const _default: {};
+export default _default;

package/lib/index.js

@@ -0,0 +1,17 @@
+/*
+ * Copyright (c) 2026, Clay Chipps; Copyright (c) 2026 Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export default {};
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,eAAe,EAAE,CAAC"}

package/lib/schemas/build/permissionConfig.d.ts

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+export declare const PermissionSetBuildConfigSchema: z.ZodObject<{
+    objects: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        read: z.ZodOptional<z.ZodBoolean>;
+        create: z.ZodOptional<z.ZodBoolean>;
+        edit: z.ZodOptional<z.ZodBoolean>;
+        delete: z.ZodOptional<z.ZodBoolean>;
+        modifyAll: z.ZodOptional<z.ZodBoolean>;
+        viewAll: z.ZodOptional<z.ZodBoolean>;
+        viewAllFields: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    fields: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        readable: z.ZodOptional<z.ZodBoolean>;
+        editable: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    tabs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        visible: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    recordTypeVisibilities: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        visible: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    userPermissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+}, z.core.$strip>;
+export type PermissionSetBuildConfig = z.infer<typeof PermissionSetBuildConfigSchema>;

package/lib/schemas/build/permissionConfig.js

@@ -0,0 +1,43 @@
+/*
+ * Copyright (c) 2026, Clay Chipps; Copyright (c) 2026 Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { z } from 'zod';
+const ObjectPermissionConfigSchema = z.object({
+    read: z.boolean().optional(),
+    create: z.boolean().optional(),
+    edit: z.boolean().optional(),
+    delete: z.boolean().optional(),
+    modifyAll: z.boolean().optional(),
+    viewAll: z.boolean().optional(),
+    viewAllFields: z.boolean().optional(),
+});
+const FieldPermissionConfigSchema = z.object({
+    readable: z.boolean().optional(),
+    editable: z.boolean().optional(),
+});
+const TabPermissionConfigSchema = z.object({
+    visible: z.boolean().optional(),
+});
+const RecordTypeVisibilityConfigSchema = z.object({
+    visible: z.boolean().optional(),
+});
+export const PermissionSetBuildConfigSchema = z.object({
+    objects: z.record(z.string(), ObjectPermissionConfigSchema).optional(),
+    fields: z.record(z.string(), FieldPermissionConfigSchema).optional(),
+    tabs: z.record(z.string(), TabPermissionConfigSchema).optional(),
+    recordTypeVisibilities: z.record(z.string(), RecordTypeVisibilityConfigSchema).optional(),
+    userPermissions: z.record(z.string(), z.boolean()).optional(),
+});
+//# sourceMappingURL=permissionConfig.js.map

package/lib/schemas/build/permissionConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionConfig.js","sourceRoot":"","sources":["../../../src/schemas/build/permissionConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,QAAQ,EAAE;IACtE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IACpE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,QAAQ,EAAE;IAChE,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,gCAAgC,CAAC,CAAC,QAAQ,EAAE;IACzF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC"}

package/messages/simply.permissions.analyze.md

@@ -0,0 +1,57 @@
+# summary
+
+Analyze permission sets and permission set groups in an org.
+
+# description
+
+Generates an HTML report of every permission set and permission set group in the target org, grouped by installed package, including their object and field permissions.
+
+# flags.output.summary
+
+Output HTML file path
+
+# flags.output.description
+
+The path to write the generated HTML report to.
+
+# flags.filter.summary
+
+Permission set or group names to include
+
+# flags.filter.description
+
+One or more PermissionSet (Name) or PermissionSetGroup (DeveloperName) API names to restrict the report to. If omitted, all permission sets and groups are included.
+
+# examples
+
+- <%= config.bin %> <%= command.id %> --target-org myOrg
+
+- <%= config.bin %> <%= command.id %> --target-org myOrg --output reports/permissions.html --filter My_Permission_Set --filter Another_Set
+
+# error.targetOrgConnectionFailed
+
+Unable to establish connection to the org.
+
+# info.fetchingPermissionSets
+
+Fetching permission sets and groups...
+
+# info.resolvingPackages
+
+Resolving package names...
+
+# info.fetchingPermissions
+
+Fetching object and field permissions...
+
+# info.mappingGroups
+
+Mapping permission sets to groups...
+
+# info.generatingReport
+
+Generating HTML report...
+
+# info.reportGenerated
+
+Report successfully generated at: %s

package/messages/simply.permissions.build.md

@@ -0,0 +1,97 @@
+# summary
+
+Generate a permission set from Salesforce source metadata.
+
+# description
+
+Scans a Salesforce project directory for custom objects, fields, tabs, and (optionally) record types, then generates a permission set XML file with a baseline of permissions determined by --type. An optional JSON --config file can override individual object, field, tab, record type, and user permission settings.
+
+# flags.type.summary
+
+Baseline permission type
+
+# flags.type.description
+
+The baseline permission level to generate: 'read-only' grants read access to all discovered objects and fields, 'view-all' additionally grants view-all-records, and 'modify-all' grants full CRUD and modify-all-records access.
+
+# flags.name.summary
+
+API name for the permission set
+
+# flags.name.description
+
+The API name for the generated permission set; also used to derive the output filename.
+
+# flags.directory.summary
+
+Path to the Salesforce project directory
+
+# flags.directory.description
+
+The path to the Salesforce source directory to scan for custom objects, fields, tabs, and record types.
+
+# flags.config.summary
+
+Path to a permission set configuration file
+
+# flags.config.description
+
+The path to a JSON file that overrides individual object, field, tab, record type, and user permission settings on top of the --type baseline.
+
+# flags.output.summary
+
+Output directory
+
+# flags.output.description
+
+The directory to write the generated permission set XML file to.
+
+# flags.include-record-types.summary
+
+Include record type visibilities
+
+# flags.include-record-types.description
+
+Automatically include record type visibilities discovered from the source metadata, marked as visible by default.
+
+# flags.label.summary
+
+Label for the permission set
+
+# flags.description.summary
+
+Description for the permission set
+
+# examples
+
+- <%= config.bin %> <%= command.id %> --type read-only --name My_Read_Only_Access --directory force-app --output force-app/main/default/permissionsets
+
+- <%= config.bin %> <%= command.id %> --type modify-all --name My_Admin_Access --directory force-app --config config/permission-overrides.json --output force-app/main/default/permissionsets --include-record-types
+
+# error.invalidConfig
+
+The permission set configuration file is invalid: %s
+
+# error.scanFailed
+
+Failed to scan the Salesforce project directory: %s
+
+# info.readingConfig
+
+Reading and validating configuration file...
+
+# info.scanningProject
+
+Scanning Salesforce project directory...
+
+# info.compilingPermissions
+
+Compiling permissions baseline and configuration overrides...
+
+# info.writingFile
+
+Generating and writing permission set XML file...
+
+# info.fileGenerated
+
+Permission set successfully generated at %s