@syntax-syllogism/warden-core 0.2.0

package/lib/lifecycle/stripPlan.js

@@ -0,0 +1,192 @@
+import { confirmWithTimeout } from '../shared/prompt.js';
+import { groupMemberLabel, loadAssignmentState, permissionSetAssignmentLabel, permissionSetLicenseLabel, } from './assignmentState.js';
+import { failedResult, makeNotice, resolvedTargetResult, summarizeLifecycle } from './output.js';
+import { buildSnapshotFile, writeSnapshotFile } from './snapshotState.js';
+import { applyStripState } from './stripApply.js';
+import { buildTargetRequests, resolveTargets } from './targeting.js';
+import { LifecycleError } from './errors.js';
+import { lifecycleMessage } from './messages.js';
+// The definition is checked against its concrete row type before it is used by
+// the uniform planner. `select` always supplies the matching row type.
+const defineCategory = (category) => category;
+const isFlagSet = (flags, key) => flags[key] === true;
+const addAction = (result, key, count, dryRun = false, items) => {
+    result.status = dryRun ? 'planned' : 'changed';
+    result.actions.push(makeNotice(key, count, items));
+};
+const addSkipped = (result, key, count, items) => {
+    if (count && count > 0)
+        result.skipped.push(makeNotice(key, count, items));
+};
+export const STRIP_CATEGORIES = [
+    defineCategory({
+        select: (state) => state.psa.filter((row) => row.PermissionSetGroupId == null && row.PermissionSet?.IsOwnedByProfile !== true),
+        sobject: 'PermissionSetAssignment',
+        skipFlag: 'keep-permsets',
+        skipKey: 'skippedPermissionSets',
+        dryRunKey: 'wouldRemovePermissionSet',
+        actionKey: 'removedPermissionSet',
+        toItem: permissionSetAssignmentLabel,
+        rowId: (row) => row.Id,
+    }),
+    defineCategory({
+        select: (state) => state.psa.filter((row) => row.PermissionSetGroupId != null),
+        sobject: 'PermissionSetAssignment',
+        skipFlag: 'keep-permset-groups',
+        skipKey: 'skippedPermissionSetGroups',
+        dryRunKey: 'wouldRemovePermissionSetGroup',
+        actionKey: 'removedPermissionSetGroup',
+        toItem: permissionSetAssignmentLabel,
+        rowId: (row) => row.Id,
+    }),
+    defineCategory({
+        select: (state) => state.group.filter((row) => row.Group?.Type === 'Regular'),
+        sobject: 'GroupMember',
+        skipFlag: 'keep-public-groups',
+        skipKey: 'skippedPublicGroups',
+        dryRunKey: 'wouldRemovePublicGroupMember',
+        actionKey: 'removedPublicGroupMember',
+        toItem: groupMemberLabel,
+        rowId: (row) => row.Id,
+    }),
+    defineCategory({
+        select: (state) => state.group.filter((row) => row.Group?.Type === 'Queue'),
+        sobject: 'GroupMember',
+        skipFlag: 'keep-queues',
+        skipKey: 'skippedQueues',
+        dryRunKey: 'wouldRemoveQueueMember',
+        actionKey: 'removedQueueMember',
+        toItem: groupMemberLabel,
+        rowId: (row) => row.Id,
+    }),
+    defineCategory({
+        select: (state) => state.psl,
+        sobject: 'PermissionSetLicenseAssign',
+        skipFlag: 'keep-licenses',
+        skipKey: 'skippedPermissionSetLicenses',
+        dryRunKey: 'wouldRemovePermissionSetLicense',
+        actionKey: 'removedPermissionSetLicense',
+        toItem: permissionSetLicenseLabel,
+        rowId: (row) => row.Id,
+    }),
+];
+const planFreezeState = (result, loginRow, flags, message = lifecycleMessage) => {
+    if (isFlagSet(flags, 'no-freeze')) {
+        result.skipped.push(makeNotice('skippedFreeze'));
+        return [];
+    }
+    if (!loginRow) {
+        result.warnings.push(message('warningMissingUserLogin'));
+        return [];
+    }
+    if (loginRow.IsFrozen) {
+        result.actions.push(makeNotice('alreadyFrozen'));
+        return [];
+    }
+    if (isFlagSet(flags, 'dry-run')) {
+        addAction(result, 'wouldFreeze', undefined, true);
+        return [];
+    }
+    return [{ kind: 'update', sobject: 'UserLogin', row: { Id: loginRow.Id, IsFrozen: true }, actionKey: 'frozen' }];
+};
+const planCategory = (result, rows, category, flags) => {
+    const mappedRows = rows.flatMap((row) => {
+        const item = category.toItem(row);
+        return item ? [{ row, item }] : [];
+    });
+    if (isFlagSet(flags, category.skipFlag)) {
+        addSkipped(result, category.skipKey, mappedRows.length, mappedRows.map(({ item }) => item));
+        return [];
+    }
+    if (mappedRows.length === 0)
+        return [];
+    if (isFlagSet(flags, 'dry-run')) {
+        addAction(result, category.dryRunKey, mappedRows.length, true, mappedRows.map(({ item }) => item));
+        return [];
+    }
+    return [
+        {
+            kind: 'delete',
+            sobject: category.sobject,
+            ids: mappedRows.map(({ row }) => category.rowId(row)),
+            actionKey: category.actionKey,
+            items: mappedRows.map(({ item }) => item),
+        },
+    ];
+};
+const planDeactivateState = (result, target, flags) => {
+    if (isFlagSet(flags, 'no-deactivate')) {
+        result.skipped.push(makeNotice('skippedDeactivate'));
+        return [];
+    }
+    if (!target.IsActive) {
+        result.actions.push(makeNotice('alreadyInactive'));
+        return [];
+    }
+    if (isFlagSet(flags, 'dry-run')) {
+        addAction(result, 'wouldDeactivate', undefined, true);
+        return [];
+    }
+    return [{ kind: 'update', sobject: 'User', row: { Id: target.Id, IsActive: false }, actionKey: 'deactivated' }];
+};
+export const buildTargetState = (options) => {
+    const { target, loginRows, rows, flags, message = lifecycleMessage } = options;
+    const result = resolvedTargetResult(target, loginRows[0]);
+    const profileOwnedRows = rows.psa.filter((row) => row.PermissionSetGroupId == null && row.PermissionSet?.IsOwnedByProfile === true);
+    if (profileOwnedRows.length > 0) {
+        result.skipped.push(makeNotice('skippedProfileOwnedPermissionSets', profileOwnedRows.length));
+    }
+    const steps = [
+        ...planFreezeState(result, loginRows[0], flags, message),
+        ...STRIP_CATEGORIES.flatMap((category) => planCategory(result, category.select(rows), category, flags)),
+        ...planDeactivateState(result, target, flags),
+    ];
+    return { target, result, steps, hasDml: steps.length > 0 };
+};
+const buildStripResult = (initialErrors, states) => {
+    const results = [...initialErrors.map(failedResult), ...states.map((state) => state.result)];
+    return { results, states };
+};
+export const executeStrip = async (options) => {
+    const { conn, fieldMap, flags, interactive, message = lifecycleMessage, confirm, warn } = options;
+    const { requests, errors: requestErrors } = await buildTargetRequests(flags, fieldMap, {
+        invalidUserMatchField: (field) => message('errorInvalidUserMatchField', [field]),
+        invalidJson: (path, error) => message('errorInvalidJson', [path, error]),
+    });
+    const { targets, errors: resolutionErrors } = await resolveTargets(conn, requests, fieldMap);
+    const initialErrors = [...requestErrors, ...resolutionErrors];
+    const stateMaps = await loadAssignmentState(conn, targets.map((target) => target.Id));
+    const states = targets.map((target) => buildTargetState({
+        target,
+        loginRows: stateMaps.userLoginByUserId.get(target.Id) ?? [],
+        rows: {
+            psa: stateMaps.psaByUserId.get(target.Id) ?? [],
+            group: stateMaps.groupByUserId.get(target.Id) ?? [],
+            psl: stateMaps.pslByUserId.get(target.Id) ?? [],
+        },
+        flags,
+        message,
+    }));
+    const { results } = buildStripResult(initialErrors, states);
+    const hasDml = states.some((state) => state.hasDml);
+    if (!isFlagSet(flags, 'dry-run') && hasDml && !isFlagSet(flags, 'no-prompt') && interactive) {
+        const { confirmed, timedOut } = await confirmWithTimeout(confirm, message('promptContinue'));
+        if (!confirmed) {
+            if (timedOut)
+                warn(message('warningPromptTimeout'));
+            throw new LifecycleError('errorPromptDeclined', message('errorPromptDeclined'));
+        }
+    }
+    if (typeof flags.snapshot === 'string' && flags.snapshot.length > 0) {
+        const targetOrg = flags['target-org'];
+        const snapshot = await buildSnapshotFile(conn, targets, stateMaps, targetOrg?.getUsername?.());
+        await writeSnapshotFile(flags.snapshot, snapshot);
+        for (const state of states)
+            state.result.actions.push(makeNotice('snapshotWritten'));
+    }
+    if (!isFlagSet(flags, 'dry-run')) {
+        await states.reduce((chain, state) => chain.then(() => applyStripState(conn, state)), Promise.resolve());
+    }
+    return { summary: summarizeLifecycle(results), users: results };
+};
+//# sourceMappingURL=stripPlan.js.map

package/lib/lifecycle/stripPlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripPlan.js","sourceRoot":"","sources":["../../src/lifecycle/stripPlan.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EACL,gBAAgB,EAEhB,mBAAmB,EACnB,4BAA4B,EAE5B,yBAAyB,GAG1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,gBAAgB,CAAC;AAEhG,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AA2DjD,+EAA+E;AAC/E,uEAAuE;AACvE,MAAM,cAAc,GAAG,CAA+B,QAA4B,EAAuB,EAAE,CACzG,QAA0C,CAAC;AAE7C,MAAM,SAAS,GAAG,CAAC,KAAiB,EAAE,GAAW,EAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;AAEnF,MAAM,SAAS,GAAG,CAChB,MAA2B,EAC3B,GAAW,EACX,KAAc,EACd,MAAM,GAAG,KAAK,EACd,KAAqB,EACf,EAAE;IACR,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,MAA2B,EAAE,GAAW,EAAE,KAAc,EAAE,KAAqB,EAAQ,EAAE;IAC3G,IAAI,KAAK,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,cAAc,CAAC;QACb,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,IAAI,GAAG,CAAC,aAAa,EAAE,gBAAgB,KAAK,IAAI,CAAC;QAC7G,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,uBAAuB;QAChC,SAAS,EAAE,0BAA0B;QACrC,SAAS,EAAE,sBAAsB;QACjC,MAAM,EAAE,4BAA4B;QACpC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE;KACvB,CAAC;IACF,cAAc,CAAC;QACb,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC;QAC9E,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,qBAAqB;QAC/B,OAAO,EAAE,4BAA4B;QACrC,SAAS,EAAE,+BAA+B;QAC1C,SAAS,EAAE,2BAA2B;QACtC,MAAM,EAAE,4BAA4B;QACpC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE;KACvB,CAAC;IACF,cAAc,CAAC;QACb,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC;QAC7E,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,oBAAoB;QAC9B,OAAO,EAAE,qBAAqB;QAC9B,SAAS,EAAE,8BAA8B;QACzC,SAAS,EAAE,0BAA0B;QACrC,MAAM,EAAE,gBAAgB;QACxB,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE;KACvB,CAAC;IACF,cAAc,CAAC;QACb,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,KAAK,OAAO,CAAC;QAC3E,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,eAAe;QACxB,SAAS,EAAE,wBAAwB;QACnC,SAAS,EAAE,oBAAoB;QAC/B,MAAM,EAAE,gBAAgB;QACxB,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE;KACvB,CAAC;IACF,cAAc,CAAC;QACb,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG;QAC5B,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,8BAA8B;QACvC,SAAS,EAAE,iCAAiC;QAC5C,SAAS,EAAE,6BAA6B;QACxC,MAAM,EAAE,yBAAyB;QACjC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE;KACvB,CAAC;CACM,CAAC;AAEX,MAAM,eAAe,GAAG,CACtB,MAA2B,EAC3B,QAAkC,EAClC,KAAiB,EACjB,UAAmC,gBAAgB,EACtC,EAAE;IACf,IAAI,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;QACjD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACzD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;QACjD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAChC,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;AACnH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,MAA2B,EAC3B,IAAW,EACX,QAA4B,EAC5B,KAAiB,EACJ,EAAE;IACf,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,UAAU,CACR,MAAM,EACN,QAAQ,CAAC,OAAO,EAChB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CACnC,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,IAAI,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAChC,SAAS,CACP,MAAM,EACN,QAAQ,CAAC,SAAS,EAClB,UAAU,CAAC,MAAM,EACjB,IAAI,EACJ,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CACnC,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO;QACL;YACE,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;SAC1C;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,MAA2B,EAC3B,MAAyC,EACzC,KAAiB,EACJ,EAAE;IACf,IAAI,SAAS,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACrD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAChC,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACtD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;AAClH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAMhC,EAAoB,EAAE;IACrB,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,GAAG,gBAAgB,EAAE,GAAG,OAAO,CAAC;IAC/E,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CACtC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,IAAI,GAAG,CAAC,aAAa,EAAE,gBAAgB,KAAK,IAAI,CAC1F,CAAC;IAEF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,mCAAmC,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC;QACxD,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvG,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;KAC9C,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CACvB,aAA4B,EAC5B,MAA0B,EACsC,EAAE;IAClE,MAAM,OAAO,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7F,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,OAQlC,EAA4B,EAAE;IAC7B,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,GAAG,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAClG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE;QACrF,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,4BAA4B,EAAE,CAAC,KAAK,CAAC,CAAC;QAChF,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;KACzE,CAAC,CAAC;IACH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7F,MAAM,aAAa,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,gBAAgB,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,mBAAmB,CACzC,IAAI,EACJ,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CACnC,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpC,gBAAgB,CAAC;QACf,MAAM;QACN,SAAS,EAAE,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAC3D,IAAI,EAAE;YACJ,GAAG,EAAE,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;YAC/C,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;YACnD,GAAG,EAAE,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;SAChD;QACD,KAAK;QACL,OAAO;KACR,CAAC,CACH,CAAC;IACF,MAAM,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5F,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC7F,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACpD,MAAM,IAAI,cAAc,CAAC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAA+C,CAAC;QACpF,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/F,MAAM,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClD,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,CAAC,MAAM,CACjB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAChE,OAAO,CAAC,OAAO,EAAE,CAClB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAClE,CAAC,CAAC"}

package/lib/lifecycle/targeting.d.ts

@@ -0,0 +1,32 @@
+import type { Connection } from '@salesforce/core';
+import { type UserFieldMeta } from '../provisioning/planner.js';
+import { type InputFormat } from '../shared/csv.js';
+import type { ResolvedTargetUser, TargetError, TargetRequest } from './types.js';
+export type TargetSelectionFlags<TInputFormat extends string = InputFormat> = {
+    user?: string;
+    'users-def'?: string;
+    'external-id'?: string;
+    'input-format'?: TInputFormat;
+    'csv-list-delimiter'?: string;
+};
+export type TargetSelectionMessages = {
+    invalidUserMatchField: (field: string) => string;
+    invalidJson: (path: string, error: string) => string;
+};
+export declare const parseUserFlag: (raw: string) => {
+    field: string;
+    value: string;
+};
+export declare const resolveTargetField: (field: string, fieldMap: Map<string, UserFieldMeta>) => string | undefined;
+export declare const buildTargetRequests: (flags: TargetSelectionFlags<string>, fieldMap: Map<string, UserFieldMeta>, message?: TargetSelectionMessages) => Promise<{
+    requests: TargetRequest[];
+    errors: TargetError[];
+}>;
+export declare const extractDefTargets: (rawDoc: unknown, defaultExternalId: string | undefined, fieldMap: Map<string, UserFieldMeta>) => {
+    requests: TargetRequest[];
+    errors: TargetError[];
+};
+export declare const resolveTargets: (conn: Connection, requests: TargetRequest[], fieldMap: Map<string, UserFieldMeta>) => Promise<{
+    targets: ResolvedTargetUser[];
+    errors: TargetError[];
+}>;

package/lib/lifecycle/targeting.js

@@ -0,0 +1,195 @@
+import { readUsersDefinition } from '../provisioning/definitionReader.js';
+import { resolveExistingUsers, validateMatchField } from '../matching/index.js';
+import { getCsvRowInfo } from '../shared/csv.js';
+import { LifecycleError } from './errors.js';
+import { lifecycleMessage } from './messages.js';
+const defaultTargetSelectionMessages = {
+    invalidUserMatchField: (field) => lifecycleMessage('errorInvalidUserMatchField', [field]),
+    invalidJson: (path, error) => lifecycleMessage('errorInvalidJson', [path, error]),
+};
+const readCaseInsensitive = (source, field) => {
+    const rawKey = Object.keys(source).find((key) => key.toLowerCase() === field.toLowerCase());
+    return rawKey ? source[rawKey] : undefined;
+};
+const relationshipName = (id, relationship) => relationship?.Name ?? id ?? undefined;
+export const parseUserFlag = (raw) => {
+    const colon = raw.indexOf(':');
+    if (colon <= 0 || colon === raw.length - 1) {
+        throw new LifecycleError('errorInvalidUserValue', lifecycleMessage('errorInvalidUserValue', [raw]), { raw });
+    }
+    return {
+        field: raw.slice(0, colon).trim(),
+        value: raw.slice(colon + 1),
+    };
+};
+const resolveFieldName = (field, fieldMap) => {
+    if (field.toLowerCase() === 'id')
+        return 'Id';
+    return fieldMap.get(field.toLowerCase())?.name;
+};
+const resolveMatchField = (rawField, fieldMap) => {
+    try {
+        return { field: rawField.toLowerCase() === 'id' ? 'Id' : validateMatchField(rawField, fieldMap).name };
+    }
+    catch (error) {
+        return { error: error instanceof Error ? error.message : String(error) };
+    }
+};
+export const resolveTargetField = (field, fieldMap) => resolveFieldName(field, fieldMap);
+export const buildTargetRequests = async (flags, fieldMap, message = defaultTargetSelectionMessages) => {
+    if (typeof flags.user === 'string' && flags.user.length > 0) {
+        const { field, value } = parseUserFlag(flags.user);
+        const matchField = resolveTargetField(field, fieldMap);
+        if (!matchField)
+            throw new LifecycleError('errorInvalidUserMatchField', message.invalidUserMatchField(field), { field });
+        return { requests: [{ key: `${matchField}:${value}`, field: matchField, value, order: 0 }], errors: [] };
+    }
+    const inputFormat = flags['input-format'] === 'json' || flags['input-format'] === 'csv' ? flags['input-format'] : undefined;
+    const usersDoc = await readUsersDefinition(String(flags['users-def']), {
+        fieldMap,
+        inputFormat,
+        csvListDelimiter: flags['csv-list-delimiter'],
+    }, message.invalidJson);
+    return extractDefTargets(usersDoc, flags['external-id'], fieldMap);
+};
+export const extractDefTargets = (rawDoc, defaultExternalId, fieldMap) => {
+    const errors = [];
+    const requests = [];
+    if (!rawDoc || typeof rawDoc !== 'object') {
+        return {
+            requests,
+            errors: [
+                {
+                    key: 'user-def',
+                    field: 'users',
+                    value: '',
+                    message: 'users-def.json must contain a users array.',
+                    order: 0,
+                },
+            ],
+        };
+    }
+    const users = rawDoc.users;
+    if (!Array.isArray(users)) {
+        return {
+            requests,
+            errors: [
+                {
+                    key: 'user-def',
+                    field: 'users',
+                    value: '',
+                    message: 'users-def.json must contain a users array.',
+                    order: 0,
+                },
+            ],
+        };
+    }
+    for (const [index, rawUser] of users.entries()) {
+        const rowInfo = getCsvRowInfo(rawUser);
+        const key = rowInfo ? `${rowInfo.path}:${rowInfo.line}` : `user[${index + 1}]`;
+        const withRowContext = (message) => (rowInfo ? `${key} — ${message}` : message);
+        if (!rawUser || typeof rawUser !== 'object') {
+            errors.push({
+                key,
+                field: 'users',
+                value: '',
+                message: withRowContext('Each users-def entry must be an object.'),
+                order: index,
+            });
+            continue;
+        }
+        const user = rawUser;
+        const matchFieldRaw = readCaseInsensitive(user, 'match');
+        const rawField = typeof matchFieldRaw === 'string' && matchFieldRaw.trim().length > 0 ? matchFieldRaw : defaultExternalId;
+        if (!rawField || rawField.trim().length === 0) {
+            errors.push({
+                key,
+                field: 'match',
+                value: '',
+                message: withRowContext('Each users-def entry must specify a match field or the --external-id flag must be set.'),
+                order: index,
+            });
+            continue;
+        }
+        const matchFieldResult = resolveMatchField(rawField, fieldMap);
+        if ('error' in matchFieldResult) {
+            errors.push({
+                key,
+                field: 'match',
+                value: rawField,
+                message: withRowContext(matchFieldResult.error),
+                order: index,
+                ...(rowInfo ? { source: rowInfo } : {}),
+            });
+            continue;
+        }
+        const matchField = matchFieldResult.field;
+        const matchValue = readCaseInsensitive(user, matchField);
+        if (typeof matchValue !== 'string' || matchValue.length === 0) {
+            errors.push({
+                key,
+                field: matchField,
+                value: '',
+                message: withRowContext(`${matchField} must be populated on the user-def entry.`),
+                order: index,
+            });
+            continue;
+        }
+        requests.push({
+            key: `${matchField}:${matchValue}`,
+            field: matchField,
+            value: matchValue,
+            order: index,
+            ...(rowInfo ? { source: rowInfo } : {}),
+            ...(matchField === 'Username' && readCaseInsensitive(user, 'fuzzyUsername') === true ? { fuzzy: true } : {}),
+        });
+    }
+    return { requests, errors };
+};
+export const resolveTargets = async (conn, requests, fieldMap) => {
+    const targets = [];
+    const errors = [];
+    const resolution = await resolveExistingUsers(conn, requests, fieldMap);
+    for (const request of requests) {
+        const matches = resolution.matchesByRequest.get(request.key) ?? [];
+        const sourcePrefix = request.source ? `${request.source.path}:${request.source.line} — ` : '';
+        if (matches.length === 0) {
+            errors.push({
+                key: request.key,
+                field: request.field,
+                value: request.value,
+                message: `${sourcePrefix}${request.field}="${request.value}" matched no user`,
+                order: request.order,
+                ...(request.source ? { source: request.source } : {}),
+            });
+            continue;
+        }
+        if (matches.length > 1 || resolution.duplicates.has(`${request.field}:${request.value}`)) {
+            errors.push({
+                key: request.key,
+                field: request.field,
+                value: request.value,
+                message: `${sourcePrefix}${request.field}="${request.value}" matched multiple users`,
+                order: request.order,
+                ...(request.source ? { source: request.source } : {}),
+            });
+            continue;
+        }
+        const row = matches[0];
+        targets.push({
+            key: request.key,
+            Id: row.Id,
+            IsActive: Boolean(row.IsActive),
+            name: row.Name,
+            username: row.Username,
+            email: row.Email,
+            profile: relationshipName(row.ProfileId, row.Profile),
+            role: relationshipName(row.UserRoleId, row.UserRole),
+            field: request.field,
+            value: request.value,
+            order: request.order,
+        });
+    }
+    return { targets: targets.sort((a, b) => a.order - b.order), errors: errors.sort((a, b) => a.order - b.order) };
+};
+//# sourceMappingURL=targeting.js.map

package/lib/lifecycle/targeting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"targeting.js","sourceRoot":"","sources":["../../src/lifecycle/targeting.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,aAAa,EAAoB,MAAM,kBAAkB,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAejD,MAAM,8BAA8B,GAA4B;IAC9D,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,4BAA4B,EAAE,CAAC,KAAK,CAAC,CAAC;IACzF,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;CAClF,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,MAA+B,EAAE,KAAa,EAAW,EAAE;IACtF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CACvB,EAA6B,EAC7B,YAAkD,EAC9B,EAAE,CAAC,YAAY,EAAE,IAAI,IAAI,EAAE,IAAI,SAAS,CAAC;AAE/D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAW,EAAoC,EAAE;IAC7E,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,uBAAuB,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE;QACjC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;KAC5B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAE,QAAoC,EAAsB,EAAE;IACnG,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,CAAC;AACjD,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,QAAgB,EAChB,QAAoC,EACG,EAAE;IACzC,IAAI,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACzG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3E,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAE,QAAoC,EAAsB,EAAE,CAC5G,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAEpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,KAAmC,EACnC,QAAoC,EACpC,UAAmC,8BAA8B,EACF,EAAE;IACjE,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU;YACb,MAAM,IAAI,cAAc,CAAC,4BAA4B,EAAE,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1G,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,UAAU,IAAI,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3G,CAAC;IAED,MAAM,WAAW,GACf,KAAK,CAAC,cAAc,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAC1B;QACE,QAAQ;QACR,WAAW;QACX,gBAAgB,EAAE,KAAK,CAAC,oBAAoB,CAAC;KAC9C,EACD,OAAO,CAAC,WAAW,CACpB,CAAC;IACF,OAAO,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAC;AACrE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,MAAe,EACf,iBAAqC,EACrC,QAAoC,EACkB,EAAE;IACxD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO;YACL,QAAQ;YACR,MAAM,EAAE;gBACN;oBACE,GAAG,EAAE,UAAU;oBACf,KAAK,EAAE,OAAO;oBACd,KAAK,EAAE,EAAE;oBACT,OAAO,EAAE,4CAA4C;oBACrD,KAAK,EAAE,CAAC;iBACT;aACF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAI,MAA8B,CAAC,KAAK,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,QAAQ;YACR,MAAM,EAAE;gBACN;oBACE,GAAG,EAAE,UAAU;oBACf,KAAK,EAAE,OAAO;oBACd,KAAK,EAAE,EAAE;oBACT,OAAO,EAAE,4CAA4C;oBACrD,KAAK,EAAE,CAAC;iBACT;aACF;SACF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,GAAG,CAAC;QAC/E,MAAM,cAAc,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAChG,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG;gBACH,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,cAAc,CAAC,yCAAyC,CAAC;gBAClE,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,OAAkC,CAAC;QAChD,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,QAAQ,GACZ,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC3G,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG;gBACH,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,cAAc,CACrB,wFAAwF,CACzF;gBACD,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/D,IAAI,OAAO,IAAI,gBAAgB,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG;gBACH,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,cAAc,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBAC/C,KAAK,EAAE,KAAK;gBACZ,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC;QAC1C,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACzD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG;gBACH,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,cAAc,CAAC,GAAG,UAAU,2CAA2C,CAAC;gBACjF,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,EAAE,GAAG,UAAU,IAAI,UAAU,EAAE;YAClC,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,KAAK;YACZ,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,UAAU,KAAK,UAAU,IAAI,mBAAmB,CAAC,IAAI,EAAE,eAAe,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7G,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,IAAgB,EAChB,QAAyB,EACzB,QAAoC,EAC+B,EAAE;IACrE,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,GAAG,YAAY,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,mBAAmB;gBAC7E,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YACzF,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,GAAG,YAAY,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,0BAA0B;gBACpF,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC/B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC;YACrD,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC;YACpD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;AAClH,CAAC,CAAC"}

package/lib/lifecycle/types.d.ts

@@ -0,0 +1,88 @@
+import type { CsvRowInfo } from '../shared/csv.js';
+export type LifecycleNotice = {
+    key: string;
+    count?: number;
+    items?: LabelBundle[];
+};
+export type LabelBundle = {
+    id: string;
+    apiName?: string;
+    label?: string;
+    type?: 'PermissionSet' | 'PermissionSetGroup' | 'PublicGroup' | 'Queue' | 'Profile' | 'UserRole' | 'PermissionSetLicense';
+};
+export type LabelMap = Record<string, LabelBundle>;
+export type LifecycleStatus = 'changed' | 'failed' | 'planned' | 'unchanged';
+export type LifecycleUserResult = {
+    key: string;
+    id?: string;
+    name?: string;
+    username?: string;
+    isActive?: boolean;
+    isFrozen?: boolean;
+    status: LifecycleStatus;
+    actions: LifecycleNotice[];
+    skipped: LifecycleNotice[];
+    warnings: string[];
+    errors: string[];
+    identityReview?: IdentityReview;
+};
+export type LifecycleSummary = {
+    total: number;
+    changed: number;
+    unchanged: number;
+    failed: number;
+};
+export type LifecycleResult = {
+    summary: LifecycleSummary;
+    users: LifecycleUserResult[];
+};
+export type TargetRequest = {
+    key: string;
+    field: string;
+    value: string;
+    order: number;
+    fuzzy?: boolean;
+    source?: CsvRowInfo;
+};
+export type ResolvedTargetUser = {
+    key: string;
+    Id: string;
+    IsActive: boolean;
+    name?: string;
+    username?: string;
+    email?: string;
+    profile?: string;
+    role?: string;
+    field: string;
+    value: string;
+    order: number;
+};
+export type IdentityReview = {
+    snapshot: {
+        name?: string;
+        username?: string;
+        email?: string;
+        profile?: string;
+        role?: string;
+    };
+    org: {
+        name?: string;
+        username?: string;
+        email?: string;
+        profile?: string;
+        role?: string;
+        userId: string;
+    };
+    match: {
+        field: string;
+        value: string;
+    };
+};
+export type TargetError = {
+    key: string;
+    field: string;
+    value: string;
+    message: string;
+    order: number;
+    source?: CsvRowInfo;
+};

package/lib/lifecycle/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/lib/lifecycle/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lifecycle/types.ts"],"names":[],"mappings":""}

package/lib/lifecycle/userDiff.d.ts

@@ -0,0 +1,70 @@
+import type { Connection } from '@salesforce/core';
+import { type AssignmentDelta } from '../provisioning/assignmentPlan.js';
+import type { InputFormat } from '../shared/csv.js';
+import type { LabelMap } from './types.js';
+type JsonRecord = Record<string, unknown>;
+export type DiffField = {
+    current?: string | null;
+    intended?: string | null;
+    matches: boolean;
+};
+export type UserAssignmentDiff = {
+    key: string;
+    id?: string;
+    userName?: string;
+    username?: string;
+    personas?: string[];
+    matchedBy?: string | null;
+    status: 'compared' | 'would-create' | 'failed';
+    profile: DiffField;
+    role: DiffField;
+    assignments: AssignmentDelta;
+    errors: string[];
+};
+export type UserDiffRow = {
+    userKey: string;
+    userId: string;
+    userName?: string;
+    username?: string;
+    category: string;
+    kind: 'add' | 'remove' | 'inBoth' | 'onlyInOrg' | 'profile' | 'role' | 'error';
+    value: string;
+    mode?: string;
+    valueBefore?: string;
+    valueAfter?: string;
+};
+export type UserDiffResult = {
+    summary: {
+        total: number;
+        compared: number;
+        wouldCreate: number;
+        failed: number;
+        changed: number;
+    };
+    users: UserAssignmentDiff[];
+    rows: UserDiffRow[];
+    warnings: string[];
+    labels?: LabelMap;
+};
+type PersonaDiffRequest = {
+    connection: Connection;
+    usersDoc?: JsonRecord;
+    personasDoc?: JsonRecord;
+    usersPath?: string;
+    personasPath?: string;
+    inputFormat?: InputFormat;
+    csvListDelimiter?: string;
+    externalId?: string;
+    personasSupplied?: boolean;
+};
+type UserDiffRequest = {
+    connection: Connection;
+    user: string;
+    against: string;
+};
+export declare const displayName: (id: string | null | undefined, relationship: {
+    Name?: string;
+} | null | undefined) => string;
+export declare const executePersonaDiff: (request: PersonaDiffRequest) => Promise<UserDiffResult>;
+export declare const executeUserToUserDiff: (request: UserDiffRequest) => Promise<UserDiffResult>;
+export {};