indraq_cli 1.9.1 → 2.0.0

package/cloud-api/tsconfig.json

@@ -1,18 +1,18 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "NodeNext",
-    "moduleResolution": "NodeNext",
-    "rootDir": "src",
-    "outDir": "dist",
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "types": [
-      "node"
-    ]
-  },
-  "include": [
-    "src/**/*.ts"
-  ]
-}
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "rootDir": "src",
+    "outDir": "dist",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "types": [
+      "node"
+    ]
+  },
+  "include": [
+    "src/**/*.ts"
+  ]
+}

package/dist/cli/help-content.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"help-content.d.ts","sourceRoot":"","sources":["../../src/cli/help-content.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;AAMrF,eAAO,MAAM,oBAAoB,QAAO,MAgIvC,CAAC;AAuIF,eAAO,MAAM,YAAY,GAAI,OAAO,SAAS,KAAG,MAO/C,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,QAAQ,MAAM,KAAG,SAAS,GAAG,SAU3D,CAAC"}
+{"version":3,"file":"help-content.d.ts","sourceRoot":"","sources":["../../src/cli/help-content.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;AAMrF,eAAO,MAAM,oBAAoB,QAAO,MAmIvC,CAAC;AAuIF,eAAO,MAAM,YAAY,GAAI,OAAO,SAAS,KAAG,MAO/C,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,QAAQ,MAAM,KAAG,SAAS,GAAG,SAU3D,CAAC"}

package/dist/cli/help-content.js

@@ -8,263 +8,266 @@ const chalk_1 = __importDefault(require("chalk"));
 const heading = (value) => chalk_1.default.bold(value);
 const command = (value) => chalk_1.default.cyan(value);
 const note = (value) => chalk_1.default.gray(value);
-const fullCommandReference = () => `
-${heading('Complete command reference')}
-
-${heading('Core')}
-  ${command('indraq --version')}                         Show installed CLI version
-  ${command('indraq --help')}                            Show this complete help screen
-  ${command('indraq help')}                              Show this complete help screen
-  ${command('indraq help <topic>')}                      Help topic: configure, docker, mobile, doctor
-  ${command('indraq doctor')}                            Diagnose Node, Java, Git, tar and PATH issues
-  ${command('indraq configure')}                         Open the project configuration home
-
-${heading('Docker / GHCR deployment')}
-  ${command('indraq deploy:dev')}                        Build, push and deploy Development
-  ${command('indraq deploy:development')}                Alias for deploy:dev
-  ${command('indraq deploy:prod')}                       Build, push and deploy Production
-  ${command('indraq deploy:production')}                 Alias for deploy:prod
-  ${command('indraq deploy build --env dev')}            Long-form Development deployment
-  ${command('indraq deploy build --env development')}    Long-form Development alias
-  ${command('indraq deploy build --env prod')}           Long-form Production deployment
-  ${command('indraq deploy build --env production')}     Long-form Production alias
-  ${command('indraq deploy configure')}                  Open the main configuration home
-  ${command('indraq deploy:configure')}                  Alias for indraq configure
-
-${heading('Mobile Android builds')}
-  ${command('indraq build mobile:dev')}                  Mobile Development build
-  ${command('indraq build mobile:development')}          Alias for mobile:dev
-  ${command('indraq build mobile:staging')}              Mobile Staging build
-  ${command('indraq build mobile:prod')}                 Mobile Production build
-  ${command('indraq build mobile:production')}           Alias for mobile:prod
-
-${heading('AWS IAM and Route53')}
-  ${command('indraq iam users')}                         List/search IAM users
-  ${command('indraq iam user:create <username>')}        Create an IAM user
-  ${command('indraq iam user:update [username]')}        Select/update an IAM user
-  ${command('indraq iam user:delete [username]')}        Select/delete an IAM user
-  ${command('indraq iam access-key rotate [username]')}  Rotate own/managed AWS access key
-  ${command('indraq healthcheck list')}                  List Route53 health checks
-  ${command('indraq healthcheck create')}                Create health check (admin only)
-  ${command('indraq healthcheck delete')}                Delete health check (admin only)
-  ${command('indraq dns zones')}                         List Route53 hosted zones
-  ${command('indraq dns records [--zone <id>]')}         List records
-  ${command('indraq dns create [record]')}               Interactive Route53 record/routing wizard
-  ${command('indraq dns update <record>')}               Update an existing record
-  ${command('indraq dns delete <record> --value <ip>')}  Delete an exact A record
-
-${heading('Nginx Proxy Manager')}
-  ${command('indraq npm-user create [options]')}         Create an NPM user
-  ${command('indraq npm-user update <identity>')}        Update an NPM user
-  ${command('indraq npm-user delete <identity>')}        Delete an NPM user
-  ${command('indraq proxy create <domain> [options]')}   Create a proxy host
-  ${command('indraq proxy update <domain> [options]')}   Update a proxy host
-  ${command('indraq proxy delete <domain>')}             Delete a proxy host
-
-${heading('Unified users')}
-  ${command('indraq user list')}                         List/search organization users (manager/admin)
-  ${command('indraq user create [username]')}            Provision across configured providers
-  ${command('indraq user update [username]')}            Select/update a user/providers
-  ${command('indraq user delete [username]')}            Select/deprovision a user/providers
-  ${command('indraq password reset')}                    Email-OTP reset for Cloud/NPM/Jenkins
-
-${heading('Projects, access and infrastructure')}
-  ${command('indraq init [directory]')}                  Initialize/link a project safely
-  ${command('indraq project create [name]')}             Register an existing folder without scaffolding
-  ${command('indraq project list')}                      List organization projects + VIEW/WRITE access
-  ${command('indraq project link')}                      Re-link this folder to a Cloud project
-  ${command('indraq project status')}                    Show project infrastructure resources
-  ${command('indraq project add user')}                  Add a user to a project (manager/admin)
-  ${command('indraq project delete user')}               Remove a user from a project (manager/admin)
-  ${command('indraq access add user')}                   Grant AWS/NPM/Jenkins project-resource access
-  ${command('indraq access delete user')}                Revoke project-resource access
-  ${command('indraq prebuild')}                          Reconcile GHCR + Jenkins + Route53 + NPM
-  ${command('indraq jenkins create-deployment')}         Trigger Jenkins CREATE-DEPLOYMENT only
-  ${command('indraq dockerfile create')}                 Generate Docker artifacts for an existing app
-
-${heading('Mobile build flags')}
-  ${command('--output <output>')}                        One-build output override
-      dev-client | development-client | client
-      debug | debug-apk
-      apk | release-apk
-      aab | release-aab
-
-  ${command('--profile <profile>')}                      One-build profile override
-      fast | clean | full-reset
-
-  ${command('--verbose')}                                Verbose Gradle/Jenkins output
-  ${command('--dry-run')}                                Validate and print plan; do not start Jenkins
-  ${command('-y, --yes')}                                Skip final build confirmation
-
-${heading('Configuration home')}
-  ${command('indraq configure')}
-      Jenkins
-        Development  → Docker Development deployments
-        Production   → Docker Production + ALL mobile builds
-
-      Docker / GHCR
-        Development
-        Production
-
-      Mobile App
-        Project settings
-        Version & versionCode
-        Development
-        Staging
-        Production
-
-      AWS
-        IAM credentials and region
-        Default Route53 hosted zone
-
-      Review current project configuration
-      Exit
-
-${heading('Environment routing')}
-  Docker Development   → Development Jenkins
-  Docker Production    → Production Jenkins
-  Mobile Development   → Production Jenkins
-  Mobile Staging       → Production Jenkins
-  Mobile Production    → Production Jenkins
-
-${heading('Examples')}
-  ${command('indraq configure')}
-  ${command('indraq deploy:dev')}
-  ${command('indraq deploy:prod')}
-  ${command('indraq build mobile:dev --dry-run')}
-  ${command('indraq build mobile:staging --output apk')}
-  ${command('indraq build mobile:prod --output aab --profile clean --verbose')}
-
-${note('Tip: use `indraq help mobile` or `indraq help docker` for focused help.')}
+const fullCommandReference = () => `
+${heading('Complete command reference')}
+
+${heading('Core')}
+  ${command('indraq --version')}                         Show installed CLI version
+  ${command('indraq --help')}                            Show this complete help screen
+  ${command('indraq help')}                              Show this complete help screen
+  ${command('indraq help <topic>')}                      Help topic: configure, docker, mobile, doctor
+  ${command('indraq doctor')}                            Diagnose Node, Java, Git, tar and PATH issues
+  ${command('indraq configure')}                         Open the project configuration home
+
+${heading('Docker / GHCR deployment')}
+  ${command('indraq deploy:dev')}                        Build, push and deploy Development
+  ${command('indraq deploy:development')}                Alias for deploy:dev
+  ${command('indraq deploy:prod')}                       Build, push and deploy Production
+  ${command('indraq deploy:production')}                 Alias for deploy:prod
+  ${command('indraq deploy build --env dev')}            Long-form Development deployment
+  ${command('indraq deploy build --env development')}    Long-form Development alias
+  ${command('indraq deploy build --env prod')}           Long-form Production deployment
+  ${command('indraq deploy build --env production')}     Long-form Production alias
+  ${command('indraq deploy configure')}                  Open the main configuration home
+  ${command('indraq deploy:configure')}                  Alias for indraq configure
+
+${heading('Mobile Android builds')}
+  ${command('indraq build mobile:dev')}                  Mobile Development build
+  ${command('indraq build mobile:development')}          Alias for mobile:dev
+  ${command('indraq build mobile:staging')}              Mobile Staging build
+  ${command('indraq build mobile:prod')}                 Mobile Production build
+  ${command('indraq build mobile:production')}           Alias for mobile:prod
+
+${heading('AWS IAM and Route53')}
+  ${command('indraq iam users')}                         List/search IAM users
+  ${command('indraq iam user:create <username>')}        Create an IAM user
+  ${command('indraq iam user:update [username]')}        Select/update an IAM user
+  ${command('indraq iam user:delete [username]')}        Select/delete an IAM user
+  ${command('indraq iam access-key rotate [username]')}  Rotate own/managed AWS access key
+  ${command('indraq healthcheck list')}                  List Route53 health checks
+  ${command('indraq healthcheck create')}                Create health check (admin only)
+  ${command('indraq healthcheck delete')}                Delete health check (admin only)
+  ${command('indraq dns zones')}                         List Route53 hosted zones
+  ${command('indraq dns records [--zone <id>]')}         List records
+  ${command('indraq dns create [record]')}               Interactive Route53 record/routing wizard
+  ${command('indraq dns update <record>')}               Update an existing record
+  ${command('indraq dns delete <record> --value <ip>')}  Delete an exact A record
+
+${heading('Nginx Proxy Manager')}
+  ${command('indraq npm-user create [options]')}         Create an NPM user
+  ${command('indraq npm-user update <identity>')}        Update an NPM user
+  ${command('indraq npm-user delete <identity>')}        Delete an NPM user
+  ${command('indraq proxy create <domain> [options]')}   Create a proxy host
+  ${command('indraq proxy update <domain> [options]')}   Update a proxy host
+  ${command('indraq proxy delete <domain>')}             Delete a proxy host
+
+${heading('Unified users')}
+  ${command('indraq user list')}                         List/search organization users (manager/admin)
+  ${command('indraq user create [username]')}            Provision across Cloud/AWS/NPM and every configured Jenkins controller
+  ${command('indraq user update [username]')}            Update password/provider settings; --role syncs every linked provider
+  ${command('indraq user delete [username]')}            Permanently delete identities; retain project/infrastructure configuration
+  ${command('indraq password reset')}                    Email-OTP reset for Cloud/NPM/Jenkins
+
+${heading('Projects, access and infrastructure')}
+  ${command('indraq init [directory]')}                  Initialize/link a project safely
+  ${command('indraq project create [name]')}             Register an existing folder without scaffolding
+  ${command('indraq project list')}                      List organization projects + VIEW/WRITE access
+  ${command('indraq project link')}                      Re-link this folder to a Cloud project
+  ${command('indraq project status')}                    Show project infrastructure resources
+  ${command('indraq project add user')}                  Add user + inherit existing project resources (manager/admin)
+  ${command('indraq project delete user')}               Remove a user from a project (manager/admin)
+  ${command('indraq access add user')}                   Grant selected AWS/NPM/Jenkins/GHCR project resources
+  ${command('indraq access delete user')}                Revoke project-resource access
+  ${command('indraq prebuild')}                          Reconcile GHCR + Jenkins + Route53 + NPM
+  ${command('indraq jenkins create-deployment')}         Trigger Jenkins CREATE-DEPLOYMENT only
+  ${command('indraq jenkins pipelines')}                 List all buildable pipelines visible to this Jenkins account
+  ${command('indraq jenkins run [job]')}                 Inspect required/optional parameters and run any pipeline
+  ${command('indraq jenkins pipeline:run [job]')}        Long-form alias for indraq jenkins run
+  ${command('indraq dockerfile create')}                 Generate Docker artifacts for an existing app
+
+${heading('Mobile build flags')}
+  ${command('--output <output>')}                        One-build output override
+      dev-client | development-client | client
+      debug | debug-apk
+      apk | release-apk
+      aab | release-aab
+
+  ${command('--profile <profile>')}                      One-build profile override
+      fast | clean | full-reset
+
+  ${command('--verbose')}                                Verbose Gradle/Jenkins output
+  ${command('--dry-run')}                                Validate and print plan; do not start Jenkins
+  ${command('-y, --yes')}                                Skip final build confirmation
+
+${heading('Configuration home')}
+  ${command('indraq configure')}
+      Jenkins
+        Development  → Docker Development deployments
+        Production   → Docker Production + ALL mobile builds
+
+      Docker / GHCR
+        Development
+        Production
+
+      Mobile App
+        Project settings
+        Version & versionCode
+        Development
+        Staging
+        Production
+
+      AWS
+        IAM credentials and region
+        Default Route53 hosted zone
+
+      Review current project configuration
+      Exit
+
+${heading('Environment routing')}
+  Docker Development   → Development Jenkins
+  Docker Production    → Production Jenkins
+  Mobile Development   → Production Jenkins
+  Mobile Staging       → Production Jenkins
+  Mobile Production    → Production Jenkins
+
+${heading('Examples')}
+  ${command('indraq configure')}
+  ${command('indraq deploy:dev')}
+  ${command('indraq deploy:prod')}
+  ${command('indraq build mobile:dev --dry-run')}
+  ${command('indraq build mobile:staging --output apk')}
+  ${command('indraq build mobile:prod --output aab --profile clean --verbose')}
+
+${note('Tip: use `indraq help mobile` or `indraq help docker` for focused help.')}
 `;
 exports.fullCommandReference = fullCommandReference;
-const configureHelp = () => `
-${heading('IndraQ Cloud configuration')}
-
-  ${command('indraq configure')}
-  ${command('indraq provider configure')}              Configure your reusable AWS/NPM/Jenkins/GHCR credentials
-  ${command('indraq provider list')}                   Review your reusable providers without exposing secrets
-  ${command('indraq prebuild --env dev')}              Reconcile project infrastructure
-
-${heading('Cloud model')}
-  Reusable credentials belong to the logged-in IndraQ user
-    AWS credentials + optional default Route53 hosted zone
-    Nginx Proxy Manager credentials
-    Jenkins Development credentials
-    Jenkins Production credentials
-    GHCR token + selected GitHub account/organization
-
-  Project settings
-    GHCR image association
-    Route53 SIMPLE / FAILOVER / WEIGHTED / LATENCY association
-    NPM reverse-proxy association
-    Jenkins deployment job association
-
-${heading('Local project state')}
-  .indraq/project.json stores only the IndraQ Cloud project ID after project sync.
-  Provider credentials are never copied into project-local configuration files.
-
-${note('Reusable provider credentials are encrypted per IndraQ user. Prebuild warns about missing configuration, offers to configure it, and reuses existing valid infrastructure instead of recreating it.')}
+const configureHelp = () => `
+${heading('IndraQ Cloud configuration')}
+
+  ${command('indraq configure')}
+  ${command('indraq provider configure')}              Configure your reusable AWS/NPM/Jenkins/GHCR credentials
+  ${command('indraq provider list')}                   Review your reusable providers without exposing secrets
+  ${command('indraq prebuild --env dev')}              Reconcile project infrastructure
+
+${heading('Cloud model')}
+  Reusable credentials belong to the logged-in IndraQ user
+    AWS credentials + optional default Route53 hosted zone
+    Nginx Proxy Manager credentials
+    Jenkins Development credentials
+    Jenkins Production credentials
+    GHCR token + selected GitHub account/organization
+
+  Project settings
+    GHCR image association
+    Route53 SIMPLE / FAILOVER / WEIGHTED / LATENCY association
+    NPM reverse-proxy association
+    Jenkins deployment job association
+
+${heading('Local project state')}
+  .indraq/project.json stores only the IndraQ Cloud project ID after project sync.
+  Provider credentials are never copied into project-local configuration files.
+
+${note('Reusable provider credentials are encrypted per IndraQ user. Prebuild warns about missing configuration, offers to configure it, and reuses existing valid infrastructure instead of recreating it.')}
 `;
-const dockerHelp = () => `
-${heading('Docker / GHCR deployment')}
-
-${heading('Commands')}
-  ${command('indraq prebuild --env dev')}               Reconcile DNS, proxy, GHCR and Jenkins before deployment
-  ${command('indraq deploy:dev')}                        Development
-  ${command('indraq deploy:development')}                Development alias
-  ${command('indraq deploy:prod')}                       Production
-  ${command('indraq deploy:production')}                 Production alias
-  ${command('indraq deploy build --env dev')}            Long form
-  ${command('indraq deploy build --env prod')}           Long form
-
-${heading('Flow')}
-  Cloud project ID → project resource lookup → temporary cloud-managed GHCR login → Docker build/push → Jenkins deployment
-
-${heading('Prebuild reconciliation')}
-  GHCR image → Jenkins/port validation → Route53 routing record/health checks → NPM reverse proxy
-  Missing resources produce warnings and an interactive configure-now prompt.
-
-${heading('Credentials')}
-  AWS, NPM, Jenkins and GHCR credentials are reusable Cloud settings owned by the logged-in user.
-  GHCR Docker authentication uses an isolated temporary Docker config and is removed after the operation.
+const dockerHelp = () => `
+${heading('Docker / GHCR deployment')}
+
+${heading('Commands')}
+  ${command('indraq prebuild --env dev')}               Reconcile DNS, proxy, GHCR and Jenkins before deployment
+  ${command('indraq deploy:dev')}                        Development
+  ${command('indraq deploy:development')}                Development alias
+  ${command('indraq deploy:prod')}                       Production
+  ${command('indraq deploy:production')}                 Production alias
+  ${command('indraq deploy build --env dev')}            Long form
+  ${command('indraq deploy build --env prod')}           Long form
+
+${heading('Flow')}
+  Cloud project ID → project resource lookup → temporary cloud-managed GHCR login → Docker build/push → Jenkins deployment
+
+${heading('Prebuild reconciliation')}
+  GHCR image → Jenkins/port validation → Route53 routing record/health checks → NPM reverse proxy
+  Missing resources produce warnings and an interactive configure-now prompt.
+
+${heading('Credentials')}
+  AWS, NPM, Jenkins and GHCR credentials are reusable Cloud settings owned by the logged-in user.
+  GHCR Docker authentication uses an isolated temporary Docker config and is removed after the operation.
 `;
-const mobileHelp = () => `
-${heading('Mobile Android builds')}
-
-${heading('Commands')}
-  ${command('indraq build mobile:dev')}                  Development
-  ${command('indraq build mobile:development')}          Development alias
-  ${command('indraq build mobile:staging')}              Staging
-  ${command('indraq build mobile:prod')}                 Production
-  ${command('indraq build mobile:production')}           Production alias
-
-${heading('Flags')}
-  ${command('--output <output>')}                        dev-client | debug-apk | apk | aab
-  ${command('--profile <profile>')}                      fast | clean | full-reset
-  ${command('--verbose')}                                Verbose Gradle/Jenkins output
-  ${command('--dry-run')}                                Validate only; do not upload/build
-  ${command('-y, --yes')}                                Skip final confirmation
-
-${heading('Allowed build matrix')}
-  Expo / Development          → Development Client
-  Expo / Staging              → Release APK or Release AAB
-  Expo / Production           → Release APK or Release AAB
-  React Native / Development  → Debug APK
-  React Native / Staging      → Release APK or Release AAB
-  React Native / Production   → Release APK or Release AAB
-
-${heading('Jenkins')}
-  ALL mobile environments use Production Jenkins.
-  Jenkins job: Mobile app Cli build
-
-${heading('Versioning')}
-  Android Version and versionCode are configured through:
-  ${command('indraq configure')} → Mobile App → Version & versionCode
-
-${heading('Examples')}
-  ${command('indraq build mobile:dev --dry-run')}
-  ${command('indraq build mobile:staging --output apk')}
-  ${command('indraq build mobile:prod --output aab --profile clean --verbose --yes')}
+const mobileHelp = () => `
+${heading('Mobile Android builds')}
+
+${heading('Commands')}
+  ${command('indraq build mobile:dev')}                  Development
+  ${command('indraq build mobile:development')}          Development alias
+  ${command('indraq build mobile:staging')}              Staging
+  ${command('indraq build mobile:prod')}                 Production
+  ${command('indraq build mobile:production')}           Production alias
+
+${heading('Flags')}
+  ${command('--output <output>')}                        dev-client | debug-apk | apk | aab
+  ${command('--profile <profile>')}                      fast | clean | full-reset
+  ${command('--verbose')}                                Verbose Gradle/Jenkins output
+  ${command('--dry-run')}                                Validate only; do not upload/build
+  ${command('-y, --yes')}                                Skip final confirmation
+
+${heading('Allowed build matrix')}
+  Expo / Development          → Development Client
+  Expo / Staging              → Release APK or Release AAB
+  Expo / Production           → Release APK or Release AAB
+  React Native / Development  → Debug APK
+  React Native / Staging      → Release APK or Release AAB
+  React Native / Production   → Release APK or Release AAB
+
+${heading('Jenkins')}
+  ALL mobile environments use Production Jenkins.
+  Jenkins job: Mobile app Cli build
+
+${heading('Versioning')}
+  Android Version and versionCode are configured through:
+  ${command('indraq configure')} → Mobile App → Version & versionCode
+
+${heading('Examples')}
+  ${command('indraq build mobile:dev --dry-run')}
+  ${command('indraq build mobile:staging --output apk')}
+  ${command('indraq build mobile:prod --output aab --profile clean --verbose --yes')}
 `;
-const doctorHelp = () => `
-${heading('IndraQ doctor')}
-
-  ${command('indraq doctor')}
-
-Checks:
-  • Node.js version
-  • Java availability
-  • Git availability
-  • tar availability
-  • Windows command-resolution order
-  • whether another file/app is shadowing the indraq command
+const doctorHelp = () => `
+${heading('IndraQ doctor')}
+
+  ${command('indraq doctor')}
+
+Checks:
+  • Node.js version
+  • Java availability
+  • Git availability
+  • tar availability
+  • Windows command-resolution order
+  • whether another file/app is shadowing the indraq command
 `;
-const awsHelp = () => `
-${heading('AWS IAM and Route53')}
-
-Configure your reusable AWS profile with ${command('indraq provider configure aws')}.
-Unified AWS users receive an IndraQ role policy automatically; optional managed-policy mappings can add role-specific AWS permissions.
-
-${heading('IAM')}
-  ${command('indraq iam users')}
-  ${command('indraq iam user:create alice')}
-  ${command('indraq iam credentials alice')}             Recover your encrypted generated IAM access key
-  ${command('indraq iam access-key rotate')}             Rotate your own key; manager/admin can select users
-  ${command('indraq iam user:update [alice]')}
-  ${command('indraq iam user:delete [alice]')}
-
-${heading('Route53 health checks')}
-  ${command('indraq healthcheck list')}
-  ${command('indraq healthcheck create')}                Admin only
-  ${command('indraq healthcheck delete')}                Admin only
-
-${heading('Route53')}
-  ${command('indraq dns zones')}
-  ${command('indraq dns records --zone <id>')}
-  ${command('indraq dns create api.example.com --value 203.0.113.10 --ttl 300')}
-  ${command('indraq dns update api.example.com --value 203.0.113.11 --ttl 300')}
-  ${command('indraq dns delete api.example.com --value 203.0.113.11 --ttl 300')}
+const awsHelp = () => `
+${heading('AWS IAM and Route53')}
+
+Configure your reusable AWS profile with ${command('indraq provider configure aws')}.
+Unified AWS users receive an IndraQ role policy automatically; optional managed-policy mappings can add role-specific AWS permissions.
+
+${heading('IAM')}
+  ${command('indraq iam users')}
+  ${command('indraq iam user:create alice')}
+  ${command('indraq iam credentials alice')}             Recover your encrypted generated IAM access key
+  ${command('indraq iam access-key rotate')}             Rotate your own key; manager/admin can select users
+  ${command('indraq iam user:update [alice]')}
+  ${command('indraq iam user:delete [alice]')}
+
+${heading('Route53 health checks')}
+  ${command('indraq healthcheck list')}
+  ${command('indraq healthcheck create')}                Admin only
+  ${command('indraq healthcheck delete')}                Admin only
+
+${heading('Route53')}
+  ${command('indraq dns zones')}
+  ${command('indraq dns records --zone <id>')}
+  ${command('indraq dns create api.example.com --value 203.0.113.10 --ttl 300')}
+  ${command('indraq dns update api.example.com --value 203.0.113.11 --ttl 300')}
+  ${command('indraq dns delete api.example.com --value 203.0.113.11 --ttl 300')}
 `;
 const helpForTopic = (topic) => {
     if (topic === 'configure')

package/dist/cli/help-content.js.map

@@ -1 +1 @@
-{"version":3,"file":"help-content.js","sourceRoot":"","sources":["../../src/cli/help-content.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAI1B,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAEnD,MAAM,oBAAoB,GAAG,GAAW,EAAE,CAAC;EAChD,OAAO,CAAC,4BAA4B,CAAC;;EAErC,OAAO,CAAC,MAAM,CAAC;IACb,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,eAAe,CAAC;IACxB,OAAO,CAAC,aAAa,CAAC;IACtB,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,eAAe,CAAC;IACxB,OAAO,CAAC,kBAAkB,CAAC;;EAE7B,OAAO,CAAC,0BAA0B,CAAC;IACjC,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,uCAAuC,CAAC;IAChD,OAAO,CAAC,gCAAgC,CAAC;IACzC,OAAO,CAAC,sCAAsC,CAAC;IAC/C,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,yBAAyB,CAAC;;EAEpC,OAAO,CAAC,uBAAuB,CAAC;IAC9B,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,iCAAiC,CAAC;IAC1C,OAAO,CAAC,6BAA6B,CAAC;IACtC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,gCAAgC,CAAC;;EAE3C,OAAO,CAAC,qBAAqB,CAAC;IAC5B,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,yCAAyC,CAAC;IAClD,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,4BAA4B,CAAC;IACrC,OAAO,CAAC,4BAA4B,CAAC;IACrC,OAAO,CAAC,yCAAyC,CAAC;;EAEpD,OAAO,CAAC,qBAAqB,CAAC;IAC5B,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,wCAAwC,CAAC;IACjD,OAAO,CAAC,wCAAwC,CAAC;IACjD,OAAO,CAAC,8BAA8B,CAAC;;EAEzC,OAAO,CAAC,eAAe,CAAC;IACtB,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,uBAAuB,CAAC;;EAElC,OAAO,CAAC,qCAAqC,CAAC;IAC5C,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,4BAA4B,CAAC;IACrC,OAAO,CAAC,wBAAwB,CAAC;IACjC,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,iBAAiB,CAAC;IAC1B,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,0BAA0B,CAAC;;EAErC,OAAO,CAAC,oBAAoB,CAAC;IAC3B,OAAO,CAAC,mBAAmB,CAAC;;;;;;IAM5B,OAAO,CAAC,qBAAqB,CAAC;;;IAG9B,OAAO,CAAC,WAAW,CAAC;IACpB,OAAO,CAAC,WAAW,CAAC;IACpB,OAAO,CAAC,WAAW,CAAC;;EAEtB,OAAO,CAAC,oBAAoB,CAAC;IAC3B,OAAO,CAAC,kBAAkB,CAAC;;;;;;;;;;;;;;;;;;;;;;;EAuB7B,OAAO,CAAC,qBAAqB,CAAC;;;;;;;EAO9B,OAAO,CAAC,UAAU,CAAC;IACjB,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,0CAA0C,CAAC;IACnD,OAAO,CAAC,iEAAiE,CAAC;;EAE5E,IAAI,CAAC,yEAAyE,CAAC;CAChF,CAAC;AAhIW,QAAA,oBAAoB,wBAgI/B;AAEF,MAAM,aAAa,GAAG,GAAW,EAAE,CAAC;EAClC,OAAO,CAAC,4BAA4B,CAAC;;IAEnC,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,sBAAsB,CAAC;IAC/B,OAAO,CAAC,2BAA2B,CAAC;;EAEtC,OAAO,CAAC,aAAa,CAAC;;;;;;;;;;;;;;EActB,OAAO,CAAC,qBAAqB,CAAC;;;;EAI9B,IAAI,CAAC,qMAAqM,CAAC;CAC5M,CAAC;AAEF,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC;EAC/B,OAAO,CAAC,0BAA0B,CAAC;;EAEnC,OAAO,CAAC,UAAU,CAAC;IACjB,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,gCAAgC,CAAC;;EAE3C,OAAO,CAAC,MAAM,CAAC;;;EAGf,OAAO,CAAC,yBAAyB,CAAC;;;;EAIlC,OAAO,CAAC,aAAa,CAAC;;;CAGvB,CAAC;AAEF,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC;EAC/B,OAAO,CAAC,uBAAuB,CAAC;;EAEhC,OAAO,CAAC,UAAU,CAAC;IACjB,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,iCAAiC,CAAC;IAC1C,OAAO,CAAC,6BAA6B,CAAC;IACtC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,gCAAgC,CAAC;;EAE3C,OAAO,CAAC,OAAO,CAAC;IACd,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,WAAW,CAAC;IACpB,OAAO,CAAC,WAAW,CAAC;IACpB,OAAO,CAAC,WAAW,CAAC;;EAEtB,OAAO,CAAC,sBAAsB,CAAC;;;;;;;;EAQ/B,OAAO,CAAC,SAAS,CAAC;;;;EAIlB,OAAO,CAAC,YAAY,CAAC;;IAEnB,OAAO,CAAC,kBAAkB,CAAC;;EAE7B,OAAO,CAAC,UAAU,CAAC;IACjB,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,0CAA0C,CAAC;IACnD,OAAO,CAAC,uEAAuE,CAAC;CACnF,CAAC;AAEF,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC;EAC/B,OAAO,CAAC,eAAe,CAAC;;IAEtB,OAAO,CAAC,eAAe,CAAC;;;;;;;;;CAS3B,CAAC;AAEF,MAAM,OAAO,GAAG,GAAW,EAAE,CAAC;EAC5B,OAAO,CAAC,qBAAqB,CAAC;;2CAEW,OAAO,CAAC,+BAA+B,CAAC;;;EAGjF,OAAO,CAAC,KAAK,CAAC;IACZ,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,gCAAgC,CAAC;IACzC,OAAO,CAAC,gCAAgC,CAAC;;EAE3C,OAAO,CAAC,uBAAuB,CAAC;IAC9B,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,2BAA2B,CAAC;;EAEtC,OAAO,CAAC,SAAS,CAAC;IAChB,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,gCAAgC,CAAC;IACzC,OAAO,CAAC,kEAAkE,CAAC;IAC3E,OAAO,CAAC,kEAAkE,CAAC;IAC3E,OAAO,CAAC,kEAAkE,CAAC;CAC9E,CAAC;AAEK,MAAM,YAAY,GAAG,CAAC,KAAgB,EAAU,EAAE;IACvD,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,aAAa,EAAE,CAAC;IAClD,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAC5C,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAC5C,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,OAAO,EAAE,CAAC;IACtC,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAC5C,OAAO,IAAA,4BAAoB,GAAE,CAAC;AAChC,CAAC,CAAC;AAPW,QAAA,YAAY,gBAOvB;AAEK,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE;IACtE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAC9E,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IACjG,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IACnG,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACnH,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,aAAa,IAAI,UAAU,KAAK,YAAY;QAAE,OAAO,QAAQ,CAAC;IAC5G,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAVW,QAAA,cAAc,kBAUzB"}
+{"version":3,"file":"help-content.js","sourceRoot":"","sources":["../../src/cli/help-content.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAI1B,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAEnD,MAAM,oBAAoB,GAAG,GAAW,EAAE,CAAC;EAChD,OAAO,CAAC,4BAA4B,CAAC;;EAErC,OAAO,CAAC,MAAM,CAAC;IACb,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,eAAe,CAAC;IACxB,OAAO,CAAC,aAAa,CAAC;IACtB,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,eAAe,CAAC;IACxB,OAAO,CAAC,kBAAkB,CAAC;;EAE7B,OAAO,CAAC,0BAA0B,CAAC;IACjC,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,uCAAuC,CAAC;IAChD,OAAO,CAAC,gCAAgC,CAAC;IACzC,OAAO,CAAC,sCAAsC,CAAC;IAC/C,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,yBAAyB,CAAC;;EAEpC,OAAO,CAAC,uBAAuB,CAAC;IAC9B,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,iCAAiC,CAAC;IAC1C,OAAO,CAAC,6BAA6B,CAAC;IACtC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,gCAAgC,CAAC;;EAE3C,OAAO,CAAC,qBAAqB,CAAC;IAC5B,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,yCAAyC,CAAC;IAClD,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,4BAA4B,CAAC;IACrC,OAAO,CAAC,4BAA4B,CAAC;IACrC,OAAO,CAAC,yCAAyC,CAAC;;EAEpD,OAAO,CAAC,qBAAqB,CAAC;IAC5B,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,wCAAwC,CAAC;IACjD,OAAO,CAAC,wCAAwC,CAAC;IACjD,OAAO,CAAC,8BAA8B,CAAC;;EAEzC,OAAO,CAAC,eAAe,CAAC;IACtB,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,uBAAuB,CAAC;;EAElC,OAAO,CAAC,qCAAqC,CAAC;IAC5C,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,4BAA4B,CAAC;IACrC,OAAO,CAAC,wBAAwB,CAAC;IACjC,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,iBAAiB,CAAC;IAC1B,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,0BAA0B,CAAC;;EAErC,OAAO,CAAC,oBAAoB,CAAC;IAC3B,OAAO,CAAC,mBAAmB,CAAC;;;;;;IAM5B,OAAO,CAAC,qBAAqB,CAAC;;;IAG9B,OAAO,CAAC,WAAW,CAAC;IACpB,OAAO,CAAC,WAAW,CAAC;IACpB,OAAO,CAAC,WAAW,CAAC;;EAEtB,OAAO,CAAC,oBAAoB,CAAC;IAC3B,OAAO,CAAC,kBAAkB,CAAC;;;;;;;;;;;;;;;;;;;;;;;EAuB7B,OAAO,CAAC,qBAAqB,CAAC;;;;;;;EAO9B,OAAO,CAAC,UAAU,CAAC;IACjB,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,0CAA0C,CAAC;IACnD,OAAO,CAAC,iEAAiE,CAAC;;EAE5E,IAAI,CAAC,yEAAyE,CAAC;CAChF,CAAC;AAnIW,QAAA,oBAAoB,wBAmI/B;AAEF,MAAM,aAAa,GAAG,GAAW,EAAE,CAAC;EAClC,OAAO,CAAC,4BAA4B,CAAC;;IAEnC,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,sBAAsB,CAAC;IAC/B,OAAO,CAAC,2BAA2B,CAAC;;EAEtC,OAAO,CAAC,aAAa,CAAC;;;;;;;;;;;;;;EActB,OAAO,CAAC,qBAAqB,CAAC;;;;EAI9B,IAAI,CAAC,qMAAqM,CAAC;CAC5M,CAAC;AAEF,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC;EAC/B,OAAO,CAAC,0BAA0B,CAAC;;EAEnC,OAAO,CAAC,UAAU,CAAC;IACjB,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,gCAAgC,CAAC;;EAE3C,OAAO,CAAC,MAAM,CAAC;;;EAGf,OAAO,CAAC,yBAAyB,CAAC;;;;EAIlC,OAAO,CAAC,aAAa,CAAC;;;CAGvB,CAAC;AAEF,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC;EAC/B,OAAO,CAAC,uBAAuB,CAAC;;EAEhC,OAAO,CAAC,UAAU,CAAC;IACjB,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,iCAAiC,CAAC;IAC1C,OAAO,CAAC,6BAA6B,CAAC;IACtC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,gCAAgC,CAAC;;EAE3C,OAAO,CAAC,OAAO,CAAC;IACd,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,WAAW,CAAC;IACpB,OAAO,CAAC,WAAW,CAAC;IACpB,OAAO,CAAC,WAAW,CAAC;;EAEtB,OAAO,CAAC,sBAAsB,CAAC;;;;;;;;EAQ/B,OAAO,CAAC,SAAS,CAAC;;;;EAIlB,OAAO,CAAC,YAAY,CAAC;;IAEnB,OAAO,CAAC,kBAAkB,CAAC;;EAE7B,OAAO,CAAC,UAAU,CAAC;IACjB,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,0CAA0C,CAAC;IACnD,OAAO,CAAC,uEAAuE,CAAC;CACnF,CAAC;AAEF,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC;EAC/B,OAAO,CAAC,eAAe,CAAC;;IAEtB,OAAO,CAAC,eAAe,CAAC;;;;;;;;;CAS3B,CAAC;AAEF,MAAM,OAAO,GAAG,GAAW,EAAE,CAAC;EAC5B,OAAO,CAAC,qBAAqB,CAAC;;2CAEW,OAAO,CAAC,+BAA+B,CAAC;;;EAGjF,OAAO,CAAC,KAAK,CAAC;IACZ,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,gCAAgC,CAAC;IACzC,OAAO,CAAC,gCAAgC,CAAC;;EAE3C,OAAO,CAAC,uBAAuB,CAAC;IAC9B,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,2BAA2B,CAAC;;EAEtC,OAAO,CAAC,SAAS,CAAC;IAChB,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,gCAAgC,CAAC;IACzC,OAAO,CAAC,kEAAkE,CAAC;IAC3E,OAAO,CAAC,kEAAkE,CAAC;IAC3E,OAAO,CAAC,kEAAkE,CAAC;CAC9E,CAAC;AAEK,MAAM,YAAY,GAAG,CAAC,KAAgB,EAAU,EAAE;IACvD,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,aAAa,EAAE,CAAC;IAClD,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAC5C,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAC5C,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,OAAO,EAAE,CAAC;IACtC,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAC5C,OAAO,IAAA,4BAAoB,GAAE,CAAC;AAChC,CAAC,CAAC;AAPW,QAAA,YAAY,gBAOvB;AAEK,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE;IACtE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAC9E,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IACjG,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IACnG,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACnH,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,aAAa,IAAI,UAAU,KAAK,YAAY;QAAE,OAAO,QAAQ,CAAC;IAC5G,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAVW,QAAA,cAAc,kBAUzB"}

package/dist/modules/access/commands/access.command.d.ts

@@ -1,3 +1,22 @@
+export interface NativeAccessUser {
+    id: string;
+    email: string;
+    name: string;
+    role: 'user' | 'manager' | 'admin';
+    is_active: boolean;
+}
+interface ProjectResource {
+    id: string;
+    project_id: string;
+    environment: string;
+    resource_type: string;
+    provider: string;
+    external_id?: string | null;
+    config: Record<string, any>;
+}
+export declare const syncNativeAccess: (user: NativeAccessUser, services: Set<string>) => Promise<void>;
+export declare const resourceServices: (resources: Array<Pick<ProjectResource, "provider">>) => Set<string>;
 export declare const addResourceUser: () => Promise<void>;
 export declare const deleteResourceUser: () => Promise<void>;
+export {};
 //# sourceMappingURL=access.command.d.ts.map

package/dist/modules/access/commands/access.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.command.d.ts","sourceRoot":"","sources":["../../../../src/modules/access/commands/access.command.ts"],"names":[],"mappings":"AA4LA,eAAO,MAAM,eAAe,QAAa,OAAO,CAAC,IAAI,CAoBpD,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAa,OAAO,CAAC,IAAI,CAevD,CAAC"}
+{"version":3,"file":"access.command.d.ts","sourceRoot":"","sources":["../../../../src/modules/access/commands/access.command.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,gBAAgB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;CAAE;AAEtI,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAC7F,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC1D;AAuKD,eAAO,MAAM,gBAAgB,GAAU,MAAM,gBAAgB,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,KAAG,OAAO,CAAC,IAAI,CAWlG,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,WAAW,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,KAAG,GAAG,CAAC,MAAM,CAK/E,CAAC;AAEnB,eAAO,MAAM,eAAe,QAAa,OAAO,CAAC,IAAI,CAoBpD,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAa,OAAO,CAAC,IAAI,CAevD,CAAC"}