@syntax-syllogism/warden-core 0.2.0 → 0.3.1

package/README.md

@@ -9,9 +9,12 @@ dependency. Call its functions directly from a script, an editor extension, a
 CI job, or any other Node codebase.
 
 The [domain guides](docs/) describe the implemented workflows and data
-contracts for [access auditing](docs/access.md),
+contracts for [callable command use cases](docs/use-cases.md),
+[access auditing](docs/access.md),
 [lifecycle operations](docs/lifecycle.md), [provisioning](docs/provisioning.md),
-[related records](docs/related-records.md), and [user matching](docs/matching.md).
+[related records](docs/related-records.md), [user matching](docs/matching.md),
+[file-format schemas](docs/spec-schemas.md), and
+[conformance fixtures](docs/conformance.md).
 
 ## Install
 
@@ -31,7 +34,11 @@ Requires Node.js 22 or later.
 | `LifecycleError` | Typed lifecycle-operation errors. |
 | `ProvisioningError`, `DefinitionError` | Typed provisioning and definition-reading errors. |
 | `RelatedRecordsError` | Typed related-record catalog errors. |
+| `commandDescriptors` | Metadata and Zod option schemas for the eight callable command use cases. `uiHints(schema)` reads the front-end input hints without coupling callers to Zod internals. |
+| `provision`, `freeze`, `unfreeze`, `strip`, `restore` | Write use cases exposing `plan()` and `apply()`. Plans are plain JSON-safe data and carry warnings for the caller to present before confirmation. |
+| `access`, `diff`, `snapshot` | Read use cases exposing `run()`. Diff accepts `verify` for persona conformance results; snapshot returns the file object and the caller owns serialization and filesystem output. |
 | File-format schemas and parsers | Zod schemas, JSON-text validators, and inferred types for persona, users, related-catalog, and snapshot files. |
+| `conformanceFixtureSchema`, `planFromState` | The versioned fixture contract and pure v1 additive reconciliation planner. |
 | Lifecycle, access, provisioning, CSV, snapshot, and rendering functions | Framework-free domain operations used by Warden consumers. |
 
 ```ts
@@ -48,6 +55,15 @@ try {
 }
 ```
 
+Write commands keep confirmation in the front end and make the state boundary
+explicit:
+
+```ts
+const plan = await freeze.plan(connection, options, { onProgress });
+// Show plan.warnings and plan.users, then confirm in the caller.
+const result = await freeze.apply(connection, JSON.parse(JSON.stringify(plan)));
+```
+
 ## Errors
 
 Errors are reported as `WardenError` instances (or area-specific subclasses).
@@ -58,14 +74,14 @@ text is not and may be reworded in any release.
 | --- | --- |
 | `errorUnsupportedAccessType`, `errorInvalidTarget`, `errorFieldTargetMustBeQualified`, `errorObjectNotFound`, `errorFieldNotFound`, `errorApexClassNotFound`, `errorVisualforcePageNotFound`, `errorCustomPermissionNotFound`, `errorTabNotFound`, `errorRecordTypeTargetMustBeQualified`, `errorMasterRecordTypeUnsupported`, `errorRecordTypeNotFound`, `errorRecordTypeAmbiguous`, `errorRecordTypeInactive`, `errorRecordTypeMetadataReadFailed`, `errorAccessQueryFailed` | Access audit and target resolution. |
 | `errorInvalidCsv`, `errorInvalidJson`, `errorInvalidPersonaDefinition`, `errorMissingUserFieldMap`, `errorPersonasWithoutDefinition` | Definition readers. |
-| `errorInvalidJson`, `errorInvalidUserMatchField`, `errorInvalidUserValue`, `errorInvalidAgainstValue`, `errorInvalidAgainstMatchField`, `errorInvalidSnapshot`, `errorPromptDeclined` | Lifecycle targeting, snapshot validation, and operations. |
+| `errorInvalidJson`, `errorInvalidUserMatchField`, `errorInvalidUserValue`, `errorInvalidAgainstValue`, `errorInvalidAgainstMatchField`, `errorInvalidSnapshot`, `errorPromptDeclined`, `errorAccessScopesMutuallyExclusive`, `errorVerifyUserMode` | Lifecycle targeting, snapshot validation, access scope validation, and diff verification. |
 | `errorInvalidRelatedCatalog`, `errorRelationshipInvalidDefinition`, `errorRelationshipInvalidSobject`, `errorRelationshipMissingPhase`, `errorRelationshipInvalidPhase`, `errorPhaseBeforeUnsupported`, `errorLinkUserUnsupported`, `errorRelatedContextUnsupported`, `errorRelationshipInvalidMatch`, `errorRelationshipMatchFromUserId`, `errorRelationshipInvalidFields`, `errorRelationshipInvalidSource`, `errorRelationshipInvalidFrom`, `errorRelationshipUnknownUserField`, `errorRelationshipUnwritableField`, `errorRelationshipInvalidMode`, `errorRelationshipInvalidRecordType` | Related-record catalog validation. |
 | `errorDuplicateExternalIdMatch`, `errorMissingRequiredFields`, `errorMissingSaveId`, `errorPromptDeclined`, `errorInvalidJson`, `errorInvalidPersonaDefinition`, `errorPersonasWithoutDefinition` | Provisioning execution and planning. |
 | `schema-invalid`, `schema-version-unsupported` | Structural file-format validation. `data.issues` contains `{ path, message }` entries. |
 
 ## File formats and schemas
 
-The four JSON file formats are defined by the exported Zod schemas and the
+The five JSON file formats are defined by the exported Zod schemas and the
 generated Draft 2020-12 schemas. See the detailed
 [file-format schema guide](docs/spec-schemas.md)
 for the full structural contract, parser results, versioning behavior, and
@@ -80,6 +96,12 @@ artifact-generation workflow.
   `{ relationships: Record<string, RelationshipDef> }`.
 - [snapshot](schemas/snapshot.schema.json): the lifecycle snapshot with
   `snapshotVersion: 1`.
+- [conformance fixture](schemas/conformance-fixture.schema.json): the
+  engine-neutral definitions + simulated org state + expected plan contract.
+
+The canonical conformance fixtures are published under
+[`conformance/`](conformance/README.md). They are the executable spec shared
+by the TypeScript and Apex planning engines.
 
 ## Versioning
 

package/conformance/README.md

@@ -0,0 +1,21 @@
+# Warden conformance fixtures
+
+This directory contains the canonical, versioned JSON fixtures shipped in the
+`@syntax-syllogism/warden-core` package. The full fixture contract, v1 planner
+semantics, deterministic ordering, and public API are documented in the
+[published conformance guide](https://github.com/Syntax-Syllogism/warden-core/blob/release/docs/conformance.md).
+
+The generated structural contract is
+[`schemas/conformance-fixture.schema.json`](../schemas/conformance-fixture.schema.json).
+
+## Adding a fixture
+
+Use a numbered filename such as `08-new-case.json`. Keep all references and
+IDs deterministic, add the smallest scenario that demonstrates one behavior,
+and calculate `expectedPlan` according to the
+[v1 planner behavior](https://github.com/Syntax-Syllogism/warden-core/blob/release/docs/conformance.md#v1-planner-behavior). Run the
+conformance test and normal package checks before committing.
+
+Fixtures contain no imports or executable code. They are shipped in the
+`@syntax-syllogism/warden-core` package for the Apex consumer to load without
+transformation.

package/conformance/fixtures/01-single-persona.json

@@ -0,0 +1,34 @@
+{
+  "schemaVersion": 1,
+  "definitions": {
+    "personas": {
+      "schemaVersion": 1,
+      "personas": {
+        "support": {
+          "permissionSets": ["Support_User"],
+          "publicGroups": ["Support_Group"],
+          "queues": ["Case_Queue"]
+        }
+      }
+    },
+    "users": {
+      "schemaVersion": 1,
+      "users": [{ "userKey": "alice", "userId": "005000000000001AAA", "personas": ["support"] }]
+    }
+  },
+  "orgState": {
+    "permissionSets": [{ "id": "0PS000000000001AAA", "name": "Support_User", "label": "Support User" }],
+    "permissionSetGroups": [],
+    "groups": [
+      { "id": "00G000000000001AAA", "developerName": "Support_Group", "label": "Support Group", "type": "Regular" },
+      { "id": "00G000000000002AAA", "developerName": "Case_Queue", "label": "Case Queue", "type": "Queue" }
+    ],
+    "permissionSetAssignments": [],
+    "groupMembers": []
+  },
+  "expectedPlan": [
+    { "userKey": "alice", "userId": "005000000000001AAA", "category": "PermissionSet", "action": "wouldAssign", "status": "planned", "detail": "Support User", "error": "" },
+    { "userKey": "alice", "userId": "005000000000001AAA", "category": "PublicGroup", "action": "wouldAssign", "status": "planned", "detail": "Support Group", "error": "" },
+    { "userKey": "alice", "userId": "005000000000001AAA", "category": "Queue", "action": "wouldAssign", "status": "planned", "detail": "Case Queue", "error": "" }
+  ]
+}

package/conformance/fixtures/02-multi-persona-union.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": 1,
+  "definitions": {
+    "personas": {
+      "personas": {
+        "support": { "permissionSets": ["Support_User", "Common_Access"], "publicGroups": ["Support_Group"] },
+        "service": { "permissionSets": ["Case_Manager", "Common_Access"], "permissionSetGroups": ["Service_Team"] }
+      }
+    },
+    "users": {
+      "users": [{ "userKey": "alice", "userId": "005000000000002AAA", "personas": ["support", "service"] }]
+    }
+  },
+  "orgState": {
+    "permissionSets": [
+      { "id": "0PS000000000002AAA", "name": "Support_User", "label": "Support User" },
+      { "id": "0PS000000000003AAA", "name": "Common_Access", "label": "Common Access" },
+      { "id": "0PS000000000004AAA", "name": "Case_Manager", "label": "Case Manager" }
+    ],
+    "permissionSetGroups": [{ "id": "0PG000000000001AAA", "developerName": "Service_Team", "label": "Service Team" }],
+    "groups": [{ "id": "00G000000000003AAA", "developerName": "Support_Group", "label": "Support Group", "type": "Regular" }],
+    "permissionSetAssignments": [],
+    "groupMembers": []
+  },
+  "expectedPlan": [
+    { "userKey": "alice", "userId": "005000000000002AAA", "category": "PermissionSet", "action": "wouldAssign", "status": "planned", "detail": "Case Manager", "error": "" },
+    { "userKey": "alice", "userId": "005000000000002AAA", "category": "PermissionSet", "action": "wouldAssign", "status": "planned", "detail": "Common Access", "error": "" },
+    { "userKey": "alice", "userId": "005000000000002AAA", "category": "PermissionSet", "action": "wouldAssign", "status": "planned", "detail": "Support User", "error": "" },
+    { "userKey": "alice", "userId": "005000000000002AAA", "category": "PermissionSetGroup", "action": "wouldAssign", "status": "planned", "detail": "Service Team", "error": "" },
+    { "userKey": "alice", "userId": "005000000000002AAA", "category": "PublicGroup", "action": "wouldAssign", "status": "planned", "detail": "Support Group", "error": "" }
+  ]
+}

package/conformance/fixtures/03-duplicate-grant-dedup.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": 1,
+  "definitions": {
+    "personas": {
+      "personas": {
+        "one": { "permissionSets": ["Shared_Access"] },
+        "two": { "permissionSets": ["Shared_Access", "Shared_Access"] }
+      }
+    },
+    "users": {
+      "users": [{ "userKey": "duplicate-user", "userId": "005000000000003AAA", "personas": ["one", "two"] }]
+    }
+  },
+  "orgState": {
+    "permissionSets": [{ "id": "0PS000000000005AAA", "name": "Shared_Access", "label": "Shared Access" }],
+    "permissionSetGroups": [],
+    "groups": [],
+    "permissionSetAssignments": [],
+    "groupMembers": []
+  },
+  "expectedPlan": [
+    { "userKey": "duplicate-user", "userId": "005000000000003AAA", "category": "PermissionSet", "action": "wouldAssign", "status": "planned", "detail": "Shared Access", "error": "" }
+  ]
+}

package/conformance/fixtures/04-already-present-noop.json

@@ -0,0 +1,15 @@
+{
+  "schemaVersion": 1,
+  "definitions": {
+    "personas": { "personas": { "support": { "permissionSets": ["Support_User"] } } },
+    "users": { "users": [{ "userKey": "existing-user", "userId": "005000000000004AAA", "personas": ["support"] }] }
+  },
+  "orgState": {
+    "permissionSets": [{ "id": "0PS000000000006AAA", "name": "Support_User", "label": "Support User" }],
+    "permissionSetGroups": [],
+    "groups": [],
+    "permissionSetAssignments": [{ "id": "0PA000000000001AAA", "userId": "005000000000004AAA", "permissionSetId": "0PS000000000006AAA", "permissionSetGroupId": null }],
+    "groupMembers": []
+  },
+  "expectedPlan": []
+}

package/conformance/fixtures/05-unresolved-reference.json

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": 1,
+  "definitions": {
+    "personas": { "personas": { "support": { "permissionSets": ["Missing_Set"] } } },
+    "users": { "users": [{ "userKey": "unresolved-user", "userId": "005000000000005AAA", "personas": ["support"] }] }
+  },
+  "orgState": {
+    "permissionSets": [],
+    "permissionSetGroups": [],
+    "groups": [],
+    "permissionSetAssignments": [],
+    "groupMembers": []
+  },
+  "expectedPlan": [
+    { "userKey": "unresolved-user", "userId": "005000000000005AAA", "category": "PermissionSet", "action": "unresolved", "status": "unmanaged", "detail": "Missing_Set", "error": "Unresolved PermissionSet reference \"Missing_Set\"." }
+  ]
+}

package/conformance/fixtures/06-multi-user.json

@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "definitions": {
+    "personas": {
+      "personas": {
+        "support": { "permissionSets": ["Support_User"] },
+        "service": { "permissionSetGroups": ["Service_Team"] }
+      }
+    },
+    "users": {
+      "users": [
+        { "userKey": "alice", "userId": "005000000000006AAA", "personas": ["support"] },
+        { "userKey": "bob", "userId": "005000000000007AAA", "personas": ["service"] }
+      ]
+    }
+  },
+  "orgState": {
+    "permissionSets": [{ "id": "0PS000000000007AAA", "name": "Support_User", "label": "Support User" }],
+    "permissionSetGroups": [{ "id": "0PG000000000002AAA", "developerName": "Service_Team", "label": "Service Team" }],
+    "groups": [],
+    "permissionSetAssignments": [],
+    "groupMembers": []
+  },
+  "expectedPlan": [
+    { "userKey": "alice", "userId": "005000000000006AAA", "category": "PermissionSet", "action": "wouldAssign", "status": "planned", "detail": "Support User", "error": "" },
+    { "userKey": "bob", "userId": "005000000000007AAA", "category": "PermissionSetGroup", "action": "wouldAssign", "status": "planned", "detail": "Service Team", "error": "" }
+  ]
+}

package/conformance/fixtures/07-deterministic-ordering.json

@@ -0,0 +1,39 @@
+{
+  "schemaVersion": 1,
+  "definitions": {
+    "personas": {
+      "personas": {
+        "ops": { "queues": ["Z_Queue"], "permissionSets": ["Zeta_Access", "Alpha_Access"] },
+        "sales": { "publicGroups": ["A_Group"] }
+      }
+    },
+    "users": {
+      "users": [
+        { "userKey": "zulu", "userId": "005000000000008AAA", "personas": ["ops"] },
+        { "userKey": "alpha", "userId": "005000000000009AAA", "personas": ["sales", "ops"] }
+      ]
+    }
+  },
+  "orgState": {
+    "permissionSets": [
+      { "id": "0PS000000000008AAA", "name": "Zeta_Access", "label": "Zeta Access" },
+      { "id": "0PS000000000009AAA", "name": "Alpha_Access", "label": "Alpha Access" }
+    ],
+    "permissionSetGroups": [],
+    "groups": [
+      { "id": "00G000000000004AAA", "developerName": "Z_Queue", "label": "Z Queue", "type": "Queue" },
+      { "id": "00G000000000005AAA", "developerName": "A_Group", "label": "A Group", "type": "Regular" }
+    ],
+    "permissionSetAssignments": [],
+    "groupMembers": []
+  },
+  "expectedPlan": [
+    { "userKey": "alpha", "userId": "005000000000009AAA", "category": "PermissionSet", "action": "wouldAssign", "status": "planned", "detail": "Alpha Access", "error": "" },
+    { "userKey": "alpha", "userId": "005000000000009AAA", "category": "PermissionSet", "action": "wouldAssign", "status": "planned", "detail": "Zeta Access", "error": "" },
+    { "userKey": "alpha", "userId": "005000000000009AAA", "category": "PublicGroup", "action": "wouldAssign", "status": "planned", "detail": "A Group", "error": "" },
+    { "userKey": "alpha", "userId": "005000000000009AAA", "category": "Queue", "action": "wouldAssign", "status": "planned", "detail": "Z Queue", "error": "" },
+    { "userKey": "zulu", "userId": "005000000000008AAA", "category": "PermissionSet", "action": "wouldAssign", "status": "planned", "detail": "Alpha Access", "error": "" },
+    { "userKey": "zulu", "userId": "005000000000008AAA", "category": "PermissionSet", "action": "wouldAssign", "status": "planned", "detail": "Zeta Access", "error": "" },
+    { "userKey": "zulu", "userId": "005000000000008AAA", "category": "Queue", "action": "wouldAssign", "status": "planned", "detail": "Z Queue", "error": "" }
+  ]
+}

package/conformance/fixtures/08-category-specific-reference-keys.json

@@ -0,0 +1,42 @@
+{
+  "schemaVersion": 1,
+  "definitions": {
+    "personas": {
+      "personas": {
+        "category-keys": {
+          "permissionSets": ["Perm_Name", "Perm_DeveloperName"],
+          "permissionSetGroups": ["Psg_DeveloperName", "Psg_Name"],
+          "publicGroups": ["Group_DeveloperName", "Group_Name"],
+          "queues": ["Queue_DeveloperName", "Queue_Name"]
+        }
+      }
+    },
+    "users": {
+      "users": [{ "userKey": "category-keys-user", "userId": "005000000000008AAA", "personas": ["category-keys"] }]
+    }
+  },
+  "orgState": {
+    "permissionSets": [
+      { "id": "0PS000000000008AAA", "name": "Perm_Name", "developerName": "Perm_DeveloperName", "label": "Permission Set" }
+    ],
+    "permissionSetGroups": [
+      { "id": "0PG000000000008AAA", "name": "Psg_Name", "developerName": "Psg_DeveloperName", "label": "Permission Set Group" }
+    ],
+    "groups": [
+      { "id": "00G000000000008AAA", "name": "Group_Name", "developerName": "Group_DeveloperName", "label": "Public Group", "type": "Regular" },
+      { "id": "00G000000000009AAA", "name": "Queue_Name", "developerName": "Queue_DeveloperName", "label": "Queue", "type": "Queue" }
+    ],
+    "permissionSetAssignments": [],
+    "groupMembers": []
+  },
+  "expectedPlan": [
+    { "userKey": "category-keys-user", "userId": "005000000000008AAA", "category": "PermissionSet", "action": "unresolved", "status": "unmanaged", "detail": "Perm_DeveloperName", "error": "Unresolved PermissionSet reference \"Perm_DeveloperName\"." },
+    { "userKey": "category-keys-user", "userId": "005000000000008AAA", "category": "PermissionSet", "action": "wouldAssign", "status": "planned", "detail": "Permission Set", "error": "" },
+    { "userKey": "category-keys-user", "userId": "005000000000008AAA", "category": "PermissionSetGroup", "action": "wouldAssign", "status": "planned", "detail": "Permission Set Group", "error": "" },
+    { "userKey": "category-keys-user", "userId": "005000000000008AAA", "category": "PermissionSetGroup", "action": "unresolved", "status": "unmanaged", "detail": "Psg_Name", "error": "Unresolved PermissionSetGroup reference \"Psg_Name\"." },
+    { "userKey": "category-keys-user", "userId": "005000000000008AAA", "category": "PublicGroup", "action": "unresolved", "status": "unmanaged", "detail": "Group_Name", "error": "Unresolved PublicGroup reference \"Group_Name\"." },
+    { "userKey": "category-keys-user", "userId": "005000000000008AAA", "category": "PublicGroup", "action": "wouldAssign", "status": "planned", "detail": "Public Group", "error": "" },
+    { "userKey": "category-keys-user", "userId": "005000000000008AAA", "category": "Queue", "action": "wouldAssign", "status": "planned", "detail": "Queue", "error": "" },
+    { "userKey": "category-keys-user", "userId": "005000000000008AAA", "category": "Queue", "action": "unresolved", "status": "unmanaged", "detail": "Queue_Name", "error": "Unresolved Queue reference \"Queue_Name\"." }
+  ]
+}

package/lib/commandOptions.d.ts

@@ -0,0 +1,84 @@
+import { z } from 'zod';
+export declare const provisionOptionsSchema: z.ZodObject<{
+    usersPath: z.ZodOptional<z.ZodString>;
+    usersDoc: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    personasPath: z.ZodOptional<z.ZodString>;
+    personasDoc: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    relatedPath: z.ZodOptional<z.ZodString>;
+    relatedDoc: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    externalId: z.ZodOptional<z.ZodString>;
+    inputFormat: z.ZodOptional<z.ZodType<string, unknown, z.core.$ZodTypeInternals<string, unknown>>>;
+    csvListDelimiter: z.ZodOptional<z.ZodString>;
+    fuzzyUsername: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const freezeOptionsSchema: z.ZodObject<{
+    user: z.ZodOptional<z.ZodString>;
+    usersPath: z.ZodOptional<z.ZodString>;
+    usersDoc: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    externalId: z.ZodOptional<z.ZodString>;
+    inputFormat: z.ZodOptional<z.ZodType<string, unknown, z.core.$ZodTypeInternals<string, unknown>>>;
+    csvListDelimiter: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const unfreezeOptionsSchema: z.ZodObject<{
+    user: z.ZodOptional<z.ZodString>;
+    usersPath: z.ZodOptional<z.ZodString>;
+    usersDoc: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    externalId: z.ZodOptional<z.ZodString>;
+    inputFormat: z.ZodOptional<z.ZodType<string, unknown, z.core.$ZodTypeInternals<string, unknown>>>;
+    csvListDelimiter: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const stripOptionsSchema: z.ZodObject<{
+    noFreeze: z.ZodDefault<z.ZodBoolean>;
+    noDeactivate: z.ZodDefault<z.ZodBoolean>;
+    keepPermsets: z.ZodDefault<z.ZodBoolean>;
+    keepPermsetGroups: z.ZodDefault<z.ZodBoolean>;
+    keepPublicGroups: z.ZodDefault<z.ZodBoolean>;
+    keepQueues: z.ZodDefault<z.ZodBoolean>;
+    keepLicenses: z.ZodDefault<z.ZodBoolean>;
+    user: z.ZodOptional<z.ZodString>;
+    usersPath: z.ZodOptional<z.ZodString>;
+    usersDoc: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    externalId: z.ZodOptional<z.ZodString>;
+    inputFormat: z.ZodOptional<z.ZodType<string, unknown, z.core.$ZodTypeInternals<string, unknown>>>;
+    csvListDelimiter: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const diffOptionsSchema: z.ZodObject<{
+    mode: z.ZodType<string, unknown, z.core.$ZodTypeInternals<string, unknown>>;
+    verify: z.ZodDefault<z.ZodBoolean>;
+    user: z.ZodOptional<z.ZodString>;
+    against: z.ZodOptional<z.ZodString>;
+    usersPath: z.ZodOptional<z.ZodString>;
+    usersDoc: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    personasPath: z.ZodOptional<z.ZodString>;
+    personasDoc: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    externalId: z.ZodOptional<z.ZodString>;
+    inputFormat: z.ZodOptional<z.ZodType<string, unknown, z.core.$ZodTypeInternals<string, unknown>>>;
+    csvListDelimiter: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const accessOptionsSchema: z.ZodObject<{
+    type: z.ZodType<string, unknown, z.core.$ZodTypeInternals<string, unknown>>;
+    target: z.ZodOptional<z.ZodString>;
+    user: z.ZodOptional<z.ZodString>;
+    sobject: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const snapshotOptionsSchema: z.ZodObject<{
+    org: z.ZodOptional<z.ZodString>;
+    user: z.ZodOptional<z.ZodString>;
+    usersPath: z.ZodOptional<z.ZodString>;
+    usersDoc: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    externalId: z.ZodOptional<z.ZodString>;
+    inputFormat: z.ZodOptional<z.ZodType<string, unknown, z.core.$ZodTypeInternals<string, unknown>>>;
+    csvListDelimiter: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const restoreOptionsSchema: z.ZodObject<{
+    snapshotPath: z.ZodOptional<z.ZodString>;
+    snapshotDoc: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+}, z.core.$strip>;
+export type ProvisionOptions = z.infer<typeof provisionOptionsSchema>;
+export type FreezeOptions = z.infer<typeof freezeOptionsSchema>;
+export type UnfreezeOptions = z.infer<typeof unfreezeOptionsSchema>;
+export type StripOptions = z.infer<typeof stripOptionsSchema>;
+export type DiffOptions = z.infer<typeof diffOptionsSchema>;
+export type AccessOptions = z.infer<typeof accessOptionsSchema>;
+export type SnapshotOptions = z.infer<typeof snapshotOptionsSchema>;
+export type RestoreOptions = z.infer<typeof restoreOptionsSchema>;

package/lib/commandOptions.js

@@ -0,0 +1,71 @@
+import { z } from 'zod';
+const field = (schema, ui) => schema.meta({ ui });
+const file = (label, fileFilter = 'json') => field(z.string(), { kind: 'file', label, fileFilter });
+const text = (label, extra = {}) => field(z.string(), { kind: 'string', label, ...extra });
+const boolean = (label) => field(z.boolean(), { kind: 'boolean', label });
+const enumValue = (values, label) => field(z.enum(values), { kind: 'enum', label });
+const document = (label) => field(z.record(z.string(), z.unknown()).optional(), { kind: 'string', label });
+const targetFields = {
+    user: text('User match (field:value)', { exclusiveGroup: 'user' }).optional(),
+    usersPath: file('Users definition file', 'json-or-csv').optional(),
+    usersDoc: document('Users definition document').optional(),
+    externalId: text('External ID field', { dependsOn: 'usersPath' }).optional(),
+    inputFormat: enumValue(['json', 'csv'], 'Input format').optional(),
+    csvListDelimiter: text('CSV list delimiter', { dependsOn: 'inputFormat' }).optional(),
+};
+export const provisionOptionsSchema = z.object({
+    usersPath: file('Users definition file', 'json-or-csv').optional(),
+    usersDoc: document('Users definition document').optional(),
+    personasPath: file('Personas definition file').optional(),
+    personasDoc: document('Personas definition document').optional(),
+    relatedPath: file('Related record definition file').optional(),
+    relatedDoc: document('Related record definition document').optional(),
+    externalId: text('External ID field', { dependsOn: 'usersPath' }).optional(),
+    inputFormat: enumValue(['json', 'csv'], 'Input format').optional(),
+    csvListDelimiter: text('CSV list delimiter', { dependsOn: 'inputFormat' }).optional(),
+    fuzzyUsername: boolean('Allow fuzzy usernames').default(false),
+});
+export const freezeOptionsSchema = z.object({
+    ...targetFields,
+});
+export const unfreezeOptionsSchema = z.object({
+    ...targetFields,
+});
+export const stripOptionsSchema = z.object({
+    ...targetFields,
+    noFreeze: boolean('Do not freeze users').default(false),
+    noDeactivate: boolean('Do not deactivate users').default(false),
+    keepPermsets: boolean('Keep permission sets').default(false),
+    keepPermsetGroups: boolean('Keep permission set groups').default(false),
+    keepPublicGroups: boolean('Keep public groups').default(false),
+    keepQueues: boolean('Keep queues').default(false),
+    keepLicenses: boolean('Keep permission set licenses').default(false),
+});
+export const diffOptionsSchema = z.object({
+    mode: enumValue(['persona', 'user'], 'Diff mode'),
+    verify: boolean('Verify conformance').default(false),
+    user: text('User match (field:value)', { exclusiveGroup: 'user' }).optional(),
+    against: text('Reference user match (field:value)', { dependsOn: 'user' }).optional(),
+    usersPath: file('Users definition file', 'json-or-csv').optional(),
+    usersDoc: document('Users definition document').optional(),
+    personasPath: file('Personas definition file').optional(),
+    personasDoc: document('Personas definition document').optional(),
+    externalId: text('External ID field', { dependsOn: 'usersPath' }).optional(),
+    inputFormat: enumValue(['json', 'csv'], 'Input format').optional(),
+    csvListDelimiter: text('CSV list delimiter', { dependsOn: 'inputFormat' }).optional(),
+});
+export const accessOptionsSchema = z.object({
+    type: enumValue(['field', 'object', 'apex-class', 'vf-page', 'custom-permission', 'tab', 'record-type'], 'Access type'),
+    target: text('Access target', { exclusiveGroup: 'target' }).optional(),
+    user: text('User match (field:value)', { exclusiveGroup: 'user' }).optional(),
+    sobject: text('SObject API name', { dependsOn: 'user' }).optional(),
+});
+export const snapshotOptionsSchema = z.object({
+    ...targetFields,
+    org: text('Org provenance').optional(),
+});
+export const restoreOptionsSchema = z.object({
+    snapshotPath: file('Snapshot file').optional(),
+    snapshotDoc: document('Snapshot document').optional(),
+});
+//# sourceMappingURL=commandOptions.js.map

package/lib/commandOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandOptions.js","sourceRoot":"","sources":["../src/commandOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,KAAK,GAAG,CAAsB,MAAS,EAAE,EAAU,EAAK,EAAE,CAC7D,MAA8C,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAE/D,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,aAAmC,MAAM,EAAe,EAAE,CACrF,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;AAEzD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,QAAyB,EAAE,EAAe,EAAE,CACvE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AAEzD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAgB,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AAEhG,MAAM,SAAS,GAAG,CAAC,MAA6B,EAAE,KAAa,EAAqB,EAAE,CACpF,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAEjD,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAyD,EAAE,CACxF,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AAEjF,MAAM,YAAY,GAAG;IACnB,IAAI,EAAE,IAAI,CAAC,0BAA0B,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7E,SAAS,EAAE,IAAI,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC,QAAQ,EAAE;IAClE,QAAQ,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IAC1D,UAAU,EAAE,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5E,WAAW,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE;IAClE,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtF,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,IAAI,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC,QAAQ,EAAE;IAClE,QAAQ,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IAC1D,YAAY,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;IACzD,WAAW,EAAE,QAAQ,CAAC,8BAA8B,CAAC,CAAC,QAAQ,EAAE;IAChE,WAAW,EAAE,IAAI,CAAC,gCAAgC,CAAC,CAAC,QAAQ,EAAE;IAC9D,UAAU,EAAE,QAAQ,CAAC,oCAAoC,CAAC,CAAC,QAAQ,EAAE;IACrE,UAAU,EAAE,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5E,WAAW,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE;IAClE,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrF,aAAa,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;CAC/D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,YAAY;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,YAAY;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,YAAY;IACf,QAAQ,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACvD,YAAY,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/D,YAAY,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5D,iBAAiB,EAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACvE,gBAAgB,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9D,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACjD,YAAY,EAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;CACrE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,SAAS,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IACjD,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACpD,IAAI,EAAE,IAAI,CAAC,0BAA0B,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7E,OAAO,EAAE,IAAI,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrF,SAAS,EAAE,IAAI,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC,QAAQ,EAAE;IAClE,QAAQ,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IAC1D,YAAY,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;IACzD,WAAW,EAAE,QAAQ,CAAC,8BAA8B,CAAC,CAAC,QAAQ,EAAE;IAChE,UAAU,EAAE,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5E,WAAW,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE;IAClE,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,SAAS,CACb,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,CAAC,EACvF,aAAa,CACd;IACD,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtE,IAAI,EAAE,IAAI,CAAC,0BAA0B,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7E,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,YAAY;IACf,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC"}

package/lib/index.d.ts

@@ -4,9 +4,8 @@ export { flattenAccessRow, renderEnabledTable, renderFieldTable, renderObjectTab
 export { getResolver } from './access/resolvers/index.js';
 export { resolveReverseAccess, reverseCsvColumns } from './access/reverse.js';
 export { LifecycleError } from './lifecycle/errors.js';
-export { executeFreezeToggle, FREEZE, UNFREEZE } from './lifecycle/freezeState.js';
+export { FREEZE, UNFREEZE } from './lifecycle/freezeState.js';
 export { failedResult, makeNotice, renderLifecycleResult, resolvedTargetResult, summarizeLifecycle, } from './lifecycle/output.js';
-export { executeStrip } from './lifecycle/stripPlan.js';
 export { buildSnapshotFile, readSnapshotFile, writeSnapshotFile } from './lifecycle/snapshotState.js';
 export { buildTargetRequests, parseUserFlag, resolveTargetField, resolveTargets } from './lifecycle/targeting.js';
 export { executePersonaDiff, executeUserToUserDiff } from './lifecycle/userDiff.js';
@@ -20,12 +19,19 @@ export { readProvisionDefinitions } from './provisioning/definitionReader.js';
 export { RelatedRecordsError } from './relatedRecords/errors.js';
 export { personaDefinitionsFileSchema, personaSchema, relatedCatalogSchema, relationshipDefSchema, snapshotFileSchema, userInputSchema, userSnapshotEntrySchema, usersDefinitionFileSchema, USERS_CSV_COLUMNS, } from './spec/index.js';
 export { parsePersonaDefinitions, parseRelatedCatalog, parseSnapshot, parseUsersDefinition, safeParsePersonaDefinitions, safeParseRelatedCatalog, safeParseSnapshot, safeParseUsersDefinition, validatePersonaDefinitionsText, validateRelatedCatalogText, validateSnapshotText, validateUsersDefinitionText, } from './spec/index.js';
-export { confirmWithTimeout } from './shared/prompt.js';
 export { detectInputFormat, serializeCsv } from './shared/csv.js';
 export { describeUserFields } from './shared/userFields.js';
 export { renderLifecycleCsv, renderProvisionCsv, renderRestoreCsv, renderSnapshotCsv, renderStripCsv, } from './shared/output.js';
 export { soqlIn } from './shared/sfUtils.js';
+export { access, commandDescriptors, diff, freeze, provision, restore, snapshot, strip, unfreeze } from './useCases.js';
+export { accessOptionsSchema, diffOptionsSchema, freezeOptionsSchema, provisionOptionsSchema, restoreOptionsSchema, snapshotOptionsSchema, stripOptionsSchema, unfreezeOptionsSchema, } from './commandOptions.js';
+export { uiHints } from './useCase.js';
+export { planFromState } from './provisioning/conformancePlan.js';
+export { conformanceCategorySchema, conformanceDefinitionsSchema, conformanceFixtureSchema, conformanceOrgStateSchema, conformancePlanRowSchema, conformanceUsersDefinitionSchema, parseConformanceFixture, safeParseConformanceFixture, validateConformanceFixtureText, } from './spec/index.js';
 export type { InputFormat } from './shared/csv.js';
+export type { AccessOptions, DiffOptions, FreezeOptions, ProvisionOptions, RestoreOptions, SnapshotOptions, StripOptions, UnfreezeOptions, } from './commandOptions.js';
+export type { CommandDescriptor, ProgressEvent, ReadUseCase, UiHint, UseCase, UseCaseContext, WriteUseCase, } from './useCase.js';
+export type { FreezePlan, ProvisionPlan, RestorePlan, StripPlan } from './useCases.js';
 export type { AccessTargetType, UserAccessResult, UserAccessRow, ValidatedAccessTarget } from './access/types.js';
 export type { AssignmentState } from './lifecycle/assignmentState.js';
 export type { IdentityReview, LabelBundle, LifecycleResult, LifecycleUserResult, ResolvedTargetUser, TargetRequest, } from './lifecycle/types.js';
@@ -34,4 +40,5 @@ export type { StripFlags } from './lifecycle/stripPlan.js';
 export type { UserDiffResult } from './lifecycle/userDiff.js';
 export type { UserConformanceVerdict } from './lifecycle/conformance.js';
 export type { UserSnapshotEntry } from './lifecycle/snapshotState.js';
+export type { ConformanceCategory, ConformanceDefinitions, ConformanceFixture, ConformanceOrgState, ConformancePlanRow, } from './spec/index.js';
 export type { PersonaDefinition, PersonaDefinitionsFile, RelatedCatalog, RelationshipDef, RelationshipMode, RelationshipPhase, SchemaFailure, SchemaIssue, SchemaResult, SchemaSuccess, SourceExpr, UserInput, UserSnapshotFile, UsersDefinitionFile, } from './spec/index.js';

package/lib/index.js

@@ -9,9 +9,8 @@ export { flattenAccessRow, renderEnabledTable, renderFieldTable, renderObjectTab
 export { getResolver } from './access/resolvers/index.js';
 export { resolveReverseAccess, reverseCsvColumns } from './access/reverse.js';
 export { LifecycleError } from './lifecycle/errors.js';
-export { executeFreezeToggle, FREEZE, UNFREEZE } from './lifecycle/freezeState.js';
+export { FREEZE, UNFREEZE } from './lifecycle/freezeState.js';
 export { failedResult, makeNotice, renderLifecycleResult, resolvedTargetResult, summarizeLifecycle, } from './lifecycle/output.js';
-export { executeStrip } from './lifecycle/stripPlan.js';
 export { buildSnapshotFile, readSnapshotFile, writeSnapshotFile } from './lifecycle/snapshotState.js';
 export { buildTargetRequests, parseUserFlag, resolveTargetField, resolveTargets } from './lifecycle/targeting.js';
 export { executePersonaDiff, executeUserToUserDiff } from './lifecycle/userDiff.js';
@@ -25,9 +24,13 @@ export { readProvisionDefinitions } from './provisioning/definitionReader.js';
 export { RelatedRecordsError } from './relatedRecords/errors.js';
 export { personaDefinitionsFileSchema, personaSchema, relatedCatalogSchema, relationshipDefSchema, snapshotFileSchema, userInputSchema, userSnapshotEntrySchema, usersDefinitionFileSchema, USERS_CSV_COLUMNS, } from './spec/index.js';
 export { parsePersonaDefinitions, parseRelatedCatalog, parseSnapshot, parseUsersDefinition, safeParsePersonaDefinitions, safeParseRelatedCatalog, safeParseSnapshot, safeParseUsersDefinition, validatePersonaDefinitionsText, validateRelatedCatalogText, validateSnapshotText, validateUsersDefinitionText, } from './spec/index.js';
-export { confirmWithTimeout } from './shared/prompt.js';
 export { detectInputFormat, serializeCsv } from './shared/csv.js';
 export { describeUserFields } from './shared/userFields.js';
 export { renderLifecycleCsv, renderProvisionCsv, renderRestoreCsv, renderSnapshotCsv, renderStripCsv, } from './shared/output.js';
 export { soqlIn } from './shared/sfUtils.js';
+export { access, commandDescriptors, diff, freeze, provision, restore, snapshot, strip, unfreeze } from './useCases.js';
+export { accessOptionsSchema, diffOptionsSchema, freezeOptionsSchema, provisionOptionsSchema, restoreOptionsSchema, snapshotOptionsSchema, stripOptionsSchema, unfreezeOptionsSchema, } from './commandOptions.js';
+export { uiHints } from './useCase.js';
+export { planFromState } from './provisioning/conformancePlan.js';
+export { conformanceCategorySchema, conformanceDefinitionsSchema, conformanceFixtureSchema, conformanceOrgStateSchema, conformancePlanRowSchema, conformanceUsersDefinitionSchema, parseConformanceFixture, safeParseConformanceFixture, validateConformanceFixtureText, } from './spec/index.js';
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,+EAA+E;AAC/E,6DAA6D;AAC7D,2EAA2E;AAC3E,oFAAoF;AAEpF,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EACL,YAAY,EACZ,UAAU,EACV,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACtG,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAClH,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAClH,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEjF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EACL,4BAA4B,EAC5B,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,2BAA2B,EAC3B,uBAAuB,EACvB,iBAAiB,EACjB,wBAAwB,EACxB,8BAA8B,EAC9B,0BAA0B,EAC1B,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,+EAA+E;AAC/E,6DAA6D;AAC7D,2EAA2E;AAC3E,oFAAoF;AAEpF,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EACL,YAAY,EACZ,UAAU,EACV,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACtG,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAClH,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAClH,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEjF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EACL,4BAA4B,EAC5B,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,2BAA2B,EAC3B,uBAAuB,EACvB,iBAAiB,EACjB,wBAAwB,EACxB,8BAA8B,EAC9B,0BAA0B,EAC1B,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACxH,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EACL,yBAAyB,EACzB,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,gCAAgC,EAChC,uBAAuB,EACvB,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,iBAAiB,CAAC"}

package/lib/lifecycle/errors.d.ts

@@ -1,5 +1,5 @@
 import { WardenError } from '../errors.js';
-export type LifecycleErrorCode = 'errorInvalidJson' | 'errorInvalidUserMatchField' | 'errorInvalidUserValue' | 'errorInvalidAgainstValue' | 'errorInvalidAgainstMatchField' | 'errorInvalidSnapshot' | 'errorPromptDeclined';
+export type LifecycleErrorCode = 'errorInvalidJson' | 'errorInvalidUserMatchField' | 'errorInvalidUserValue' | 'errorInvalidAgainstValue' | 'errorInvalidAgainstMatchField' | 'errorInvalidSnapshot' | 'errorPromptDeclined' | 'errorAccessScopesMutuallyExclusive' | 'errorVerifyUserMode';
 export declare class LifecycleError extends WardenError<LifecycleErrorCode> {
     constructor(code: LifecycleErrorCode, message: string, data?: unknown);
 }

package/lib/lifecycle/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lifecycle/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAW3C,MAAM,OAAO,cAAe,SAAQ,WAA+B;IACjE,YAAmB,IAAwB,EAAE,OAAe,EAAE,IAAc;QAC1E,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lifecycle/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAa3C,MAAM,OAAO,cAAe,SAAQ,WAA+B;IACjE,YAAmB,IAAwB,EAAE,OAAe,EAAE,IAAc;QAC1E,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF"}