indraq_cli 2.1.0 → 2.2.1

package/cloud-api/src/index.ts

@@ -121,10 +121,10 @@ const listQuery = (req: Request, defaultLimit = 10, maximum = 5000): { search: s
 };
 
 type ProjectAccess = 'view' | 'write';
-const projectAccessLevel = async (projectIdRaw: string, user: Auth): Promise<ProjectAccess | null> => {
+const projectAccessLevel = async (projectIdRaw: string, user: Auth, includeArchived = false): Promise<ProjectAccess | null> => {
   const projectId = ensureUuid(projectIdRaw, 'Project ID');
   const result = await pool.query(
-    `SELECT p.id,p.created_by,pm.role,pm.access_level
+    `SELECT p.id,p.created_by,p.archived_at,pm.role,pm.access_level
        FROM projects p
        LEFT JOIN project_members pm ON pm.project_id=p.id AND pm.user_id=$2
       WHERE p.id=$1
@@ -132,11 +132,12 @@ const projectAccessLevel = async (projectIdRaw: string, user: Auth): Promise<Pro
     [projectId, user.id]
   );
   if (!result.rowCount) return null;
-  if (user.role === 'admin' || user.role === 'manager') return 'write';
   const row = result.rows[0];
+  if (row.archived_at && !includeArchived) return null;
+  if (user.role === 'admin') return 'write';
   if (row.created_by === user.id || row.role === 'owner' || row.access_level === 'write') return 'write';
-  // Every authenticated organization user can discover/read every project.
-  return 'view';
+  if (row.role || row.access_level === 'view') return 'view';
+  return null;
 };
 
 const hasProjectAccess = async (projectId: string, user: Auth): Promise<boolean> =>
@@ -147,7 +148,7 @@ const hasProjectWriteAccess = async (projectId: string, user: Auth): Promise<boo
 
 const hasProjectResourceAccess = async (resourceIdRaw: string, user: Auth, manage = false): Promise<boolean> => {
   const resourceId = ensureUuid(resourceIdRaw, 'Project resource ID');
-  if (user.role === 'admin' || user.role === 'manager') return true;
+  if (user.role === 'admin') return true;
   const resource = await pool.query('SELECT project_id,created_by FROM project_resources WHERE id=$1', [resourceId]);
   if (!resource.rowCount) return false;
   const access = await projectAccessLevel(resource.rows[0].project_id, user);
@@ -300,7 +301,7 @@ const rotateManagedAwsAccessKey = async (
   const operatorUserId = await awsRotationOperatorUserId(actor, row);
   const iam = await awsIamClientForUser(operatorUserId);
   const keys = await iam.send(new ListAccessKeysCommand({ UserName: awsUsername }));
-  const keyIds = (keys.AccessKeyMetadata || []).map((item) => item.AccessKeyId).filter((value): value is string => !!value);
+  const keyIds = (keys.AccessKeyMetadata || []).map((item: { AccessKeyId?: string }) => item.AccessKeyId).filter((value: string | undefined): value is string => !!value);
   if (keyIds.length >= 2) {
     throw Object.assign(
       new Error(`AWS IAM user ${awsUsername} already has two access keys. Remove the extra/unmanaged key before rotating through IndraQ.`),
@@ -834,11 +835,11 @@ app.post('/me/aws-credentials/:awsUsername/resolve', auth, async (req: AuthedReq
 
 app.get('/projects', auth, async (req: AuthedRequest, res) => {
   const { search, limit } = listQuery(req);
-  const privileged = req.auth!.role === 'manager' || req.auth!.role === 'admin';
+  const archivedMode = req.query.archived === 'only' ? 'only' : req.query.archived === 'all' ? 'all' : 'active';
   const result = await pool.query(
     `SELECT p.*,u.email AS creator_email,
       CASE
-        WHEN $3::boolean THEN 'write'
+        WHEN $3='admin' THEN 'write'
         WHEN p.created_by=$1 THEN 'write'
         WHEN pm.role='owner' OR pm.access_level='write' THEN 'write'
         ELSE 'view'
@@ -846,9 +847,11 @@ app.get('/projects', auth, async (req: AuthedRequest, res) => {
      FROM projects p
      JOIN users u ON u.id=p.created_by
      LEFT JOIN project_members pm ON pm.project_id=p.id AND pm.user_id=$1
-     WHERE ($2='' OR p.name ILIKE '%'||$2||'%' OR p.kind ILIKE '%'||$2||'%' OR u.email ILIKE '%'||$2||'%')
+     WHERE ($3='admin' OR p.created_by=$1 OR pm.user_id=$1)
+       AND ($2='' OR p.name ILIKE '%'||$2||'%' OR p.kind ILIKE '%'||$2||'%' OR u.email ILIKE '%'||$2||'%')
+       AND ($4='all' OR ($4='only' AND p.archived_at IS NOT NULL) OR ($4='active' AND p.archived_at IS NULL))
      ORDER BY p.created_at DESC
-     LIMIT $4`, [req.auth!.id, search, privileged, limit]
+     LIMIT $5`, [req.auth!.id, search, req.auth!.role, archivedMode, limit]
   );
   res.json(result.rows);
 });
@@ -887,6 +890,7 @@ app.get('/projects/:id', auth, async (req: AuthedRequest, res) => {
 app.patch('/projects/:id', ...allow('manager', 'admin'), async (req: AuthedRequest, res) => {
   const reason = requireReason(req, res); if (!reason) return;
   const id = ensureUuid(routeParam(req.params.id), 'Project ID');
+  if (!(await hasProjectWriteAccess(id, req.auth!))) { res.status(403).json({ error: 'WRITE access to the project is required.' }); return; }
   if (typeof req.body?.name === 'string' && req.body.name.trim()) {
     const duplicate = await pool.query('SELECT id FROM projects WHERE lower(name)=lower($1) AND id<>$2 LIMIT 1', [req.body.name.trim(), id]);
     if (duplicate.rowCount) { res.status(409).json({ error: `Project name "${req.body.name.trim()}" already exists organization-wide.` }); return; }
@@ -902,15 +906,37 @@ app.patch('/projects/:id', ...allow('manager', 'admin'), async (req: AuthedReque
 
 app.delete('/projects/:id', ...allow('manager', 'admin'), async (req: AuthedRequest, res) => {
   const reason = requireReason(req, res); if (!reason) return;
-  const id = routeParam(req.params.id);
+  const id = ensureUuid(routeParam(req.params.id), 'Project ID');
+  if ((await projectAccessLevel(id, req.auth!, true)) !== 'write') { res.status(403).json({ error: 'WRITE access to the project is required.' }); return; }
   const result = await pool.query('DELETE FROM projects WHERE id=$1 RETURNING id,name', [id]);
   if (!result.rowCount) { res.status(404).json({ error: 'Project not found' }); return; }
   await audit(req.auth!.id, 'project.delete', 'project', id, reason, { name: result.rows[0].name });
   res.status(204).end();
 });
 
+app.post('/projects/:id/archive', ...allow('manager', 'admin'), async (req: AuthedRequest, res) => {
+  const reason = requireReason(req, res); if (!reason) return;
+  const id = ensureUuid(routeParam(req.params.id), 'Project ID');
+  if ((await projectAccessLevel(id, req.auth!, true)) !== 'write') { res.status(403).json({ error: 'WRITE access to the project is required.' }); return; }
+  const result = await pool.query('UPDATE projects SET archived_at=COALESCE(archived_at,now()),archived_by=COALESCE(archived_by,$2),updated_at=now() WHERE id=$1 RETURNING id,name,archived_at,archived_by', [id, req.auth!.id]);
+  if (!result.rowCount) { res.status(404).json({ error: 'Project not found' }); return; }
+  await audit(req.auth!.id, 'project.archive', 'project', id, reason, { name: result.rows[0].name });
+  res.json(result.rows[0]);
+});
+
+app.post('/projects/:id/restore', ...allow('manager', 'admin'), async (req: AuthedRequest, res) => {
+  const reason = requireReason(req, res); if (!reason) return;
+  const id = ensureUuid(routeParam(req.params.id), 'Project ID');
+  if ((await projectAccessLevel(id, req.auth!, true)) !== 'write') { res.status(403).json({ error: 'WRITE access to the project is required.' }); return; }
+  const result = await pool.query('UPDATE projects SET archived_at=NULL,archived_by=NULL,updated_at=now() WHERE id=$1 RETURNING id,name,archived_at,archived_by', [id]);
+  if (!result.rowCount) { res.status(404).json({ error: 'Project not found' }); return; }
+  await audit(req.auth!.id, 'project.restore', 'project', id, reason, { name: result.rows[0].name });
+  res.json(result.rows[0]);
+});
+
 app.get('/projects/:id/members', ...allow('manager', 'admin'), async (req: AuthedRequest, res) => {
-  const id = routeParam(req.params.id);
+  const id = ensureUuid(routeParam(req.params.id), 'Project ID');
+  if (!(await hasProjectWriteAccess(id, req.auth!))) { res.status(403).json({ error: 'WRITE access to the project is required.' }); return; }
   const result = await pool.query(`SELECT pm.project_id,pm.user_id,pm.role,pm.access_level,pm.added_at,u.email,u.name,u.role AS user_role
       FROM project_members pm JOIN users u ON u.id=pm.user_id
       WHERE pm.project_id=$1 AND u.is_active=true ORDER BY u.email`, [id]);
@@ -919,7 +945,8 @@ app.get('/projects/:id/members', ...allow('manager', 'admin'), async (req: Authe
 
 app.post('/projects/:id/members', ...allow('manager', 'admin'), async (req: AuthedRequest, res) => {
   const reason = requireReason(req, res); if (!reason) return;
-  const id = routeParam(req.params.id);
+  const id = ensureUuid(routeParam(req.params.id), 'Project ID');
+  if (!(await hasProjectWriteAccess(id, req.auth!))) { res.status(403).json({ error: 'WRITE access to the project is required.' }); return; }
   const userId = String(req.body?.userId || '');
   const project = await pool.query('SELECT id FROM projects WHERE id=$1', [id]);
   if (!project.rowCount) { res.status(404).json({ error: 'Project not found' }); return; }
@@ -946,7 +973,8 @@ app.post('/projects/:id/members', ...allow('manager', 'admin'), async (req: Auth
 
 app.delete('/projects/:id/members/:userId', ...allow('manager', 'admin'), async (req: AuthedRequest, res) => {
   const reason = requireReason(req, res); if (!reason) return;
-  const id = routeParam(req.params.id);
+  const id = ensureUuid(routeParam(req.params.id), 'Project ID');
+  if (!(await hasProjectWriteAccess(id, req.auth!))) { res.status(403).json({ error: 'WRITE access to the project is required.' }); return; }
   const userId = routeParam(req.params.userId);
   const target = await pool.query('SELECT email,role FROM users WHERE id=$1', [userId]);
   if (req.auth!.role === 'manager' && target.rows[0]?.role && target.rows[0].role !== 'user') { res.status(403).json({ error: 'Managers may remove only normal users from projects.' }); return; }
@@ -1058,7 +1086,7 @@ app.get('/scopes', auth, async (req: AuthedRequest, res) => {
        LIMIT $${offset + 3}`,
     params
   );
-  res.json(result.rows.map((row) => ({
+  res.json(result.rows.map((row: any) => ({
     id: row.id, provider: row.provider, name: row.name, description: row.description, company: row.company,
     config: row.config || {}, has_secret: !!row.encrypted_secret, access: row.access || 'manage',
     is_default: false, created_at: row.created_at, updated_at: row.updated_at
@@ -1144,6 +1172,7 @@ app.post('/scopes/:id/resolve', auth, async (req: AuthedRequest, res) => {
   const id = ensureUuid(routeParam(req.params.id), 'Scope ID');
   const access = await scopeAccessFor(id, req.auth!);
   if (!access) { res.status(404).json({ error: 'Scope not found or access denied' }); return; }
+  if (access === 'use') { res.status(403).json({ error: 'MANAGE access is required to resolve the provider management credential.' }); return; }
   const result = await pool.query('SELECT id,provider,name,description,company,config,encrypted_secret FROM provider_scopes WHERE id=$1 AND is_active=true', [id]);
   if (!result.rowCount) { res.status(404).json({ error: 'Scope not found' }); return; }
   const row = result.rows[0];
@@ -1213,6 +1242,18 @@ app.get('/scopes/:id/audit', auth, async (req: AuthedRequest, res) => {
   res.json(result.rows);
 });
 
+app.get('/me/scopes', auth, async (req: AuthedRequest, res) => {
+  const result = await pool.query(
+    `SELECT ps.id,ps.provider,ps.name,ps.description,ps.company,ps.config,(ps.encrypted_secret IS NOT NULL) has_secret,
+            CASE WHEN $2='admin' THEN 'manage' ELSE psm.access END AS access
+       FROM provider_scopes ps
+       LEFT JOIN provider_scope_members psm ON psm.scope_id=ps.id AND psm.user_id=$1
+      WHERE ps.is_active=true AND ($2='admin' OR psm.user_id=$1)
+      ORDER BY ps.provider,lower(ps.name)`, [req.auth!.id, req.auth!.role]
+  );
+  res.json(result.rows);
+});
+
 app.get('/me/scope-defaults', auth, async (req: AuthedRequest, res) => {
   const result = await pool.query(
     `SELECT usd.provider,usd.scope_id,ps.name,ps.company,ps.config,ps.updated_at
@@ -1261,13 +1302,33 @@ app.post('/me/scopes/:provider/resolve', auth, async (req: AuthedRequest, res) =
     const visible = req.auth!.role === 'admin'
       ? await pool.query('SELECT id FROM provider_scopes WHERE provider=$1 AND is_active=true ORDER BY created_at', [provider])
       : await pool.query('SELECT ps.id FROM provider_scopes ps JOIN provider_scope_members psm ON psm.scope_id=ps.id WHERE psm.user_id=$1 AND ps.provider=$2 AND ps.is_active=true ORDER BY ps.created_at', [req.auth!.id, provider]);
-    if (visible.rowCount === 1) scopeId = visible.rows[0].id;
-    else if (visible.rowCount > 1) { res.status(409).json({ error: `Multiple ${provider} scopes are available. Link one to the project environment or set your default with \`indraq scope default\`.` }); return; }
+    if (visible.rows.length === 1) scopeId = visible.rows[0].id;
+    else if (visible.rows.length > 1) { res.status(409).json({ error: `Multiple ${provider} scopes are available. Link one to the project environment or set your default with \`indraq scope default\`.` }); return; }
   }
-  if (!scopeId || !(await scopeVisible(scopeId, req.auth!))) { res.status(404).json({ error: `No ${provider} scope is assigned to your account.` }); return; }
+  const access = scopeId ? await scopeAccessFor(scopeId, req.auth!) : null;
+  if (!scopeId || !access) { res.status(404).json({ error: `No ${provider} scope is assigned to your account.` }); return; }
   const row = (await pool.query('SELECT id,provider,name,description,company,config,encrypted_secret FROM provider_scopes WHERE id=$1 AND is_active=true', [scopeId])).rows[0];
-  await audit(req.auth!.id, 'scope.secret.resolve', 'provider-scope', scopeId, reason, { provider, projectId: projectId || null, environment: environment || null });
-  res.json({ id: row.id, provider: row.provider, name: row.name, description: row.description, company: row.company, config: row.config || {}, secret: row.encrypted_secret ? JSON.parse(decrypt(row.encrypted_secret)) : null });
+  let secret: any = null;
+  let credentialSource = 'scope-management';
+  if (req.auth!.role !== 'admin' && provider === 'aws') {
+    const own = await pool.query('SELECT access_key_id,encrypted_secret_access_key FROM scope_aws_credentials WHERE scope_id=$1 AND cloud_user_id=$2', [scopeId, req.auth!.id]);
+    if (!own.rowCount) { res.status(404).json({ error: 'No AWS credential is provisioned for you in this scope.' }); return; }
+    secret = { accessKeyId: own.rows[0].access_key_id, secretAccessKey: decrypt(own.rows[0].encrypted_secret_access_key) };
+    credentialSource = 'user-native';
+  } else if (req.auth!.role !== 'admin' && ['npm','jenkins-dev','jenkins-prod'].includes(provider)) {
+    const own = await pool.query('SELECT external_username,encrypted_secret FROM scope_external_accounts WHERE scope_id=$1 AND cloud_user_id=$2', [scopeId, req.auth!.id]);
+    if (!own.rowCount || !own.rows[0].encrypted_secret) { res.status(404).json({ error: `No ${provider} credential is provisioned for you in this scope. Rotate your provider password or ask a scope manager to reprovision you.` }); return; }
+    secret = provider === 'npm'
+      ? { identity: own.rows[0].external_username, secret: decrypt(own.rows[0].encrypted_secret) }
+      : { username: own.rows[0].external_username, secret: decrypt(own.rows[0].encrypted_secret) };
+    credentialSource = 'user-native';
+  } else {
+    secret = row.encrypted_secret ? JSON.parse(decrypt(row.encrypted_secret)) : null;
+  }
+  await audit(req.auth!.id, 'scope.credential.resolve', 'provider-scope', scopeId, reason, { provider, projectId: projectId || null, environment: environment || null, credentialSource });
+  res.setHeader('Cache-Control', 'no-store');
+  res.setHeader('Pragma', 'no-cache');
+  res.json({ id: row.id, provider: row.provider, name: row.name, description: row.description, company: row.company, config: row.config || {}, secret, access: access === 'admin' ? 'manage' : access });
 });
 
 app.get('/projects/:projectId/environment-scopes', auth, async (req: AuthedRequest, res) => {
@@ -1378,12 +1439,13 @@ app.put('/scopes/:scopeId/users/:userId/external-account', ...allow('manager','a
   const externalUsername = String(req.body?.externalUsername || '').trim();
   if (!externalUsername) { res.status(400).json({ error: 'externalUsername is required.' }); return; }
   const externalEmail = req.body?.externalEmail ? String(req.body.externalEmail).trim() : null;
+  const encryptedSecret = req.body?.secret ? encrypt(String(req.body.secret)) : null;
   const result = await pool.query(
-    `INSERT INTO scope_external_accounts(scope_id,cloud_user_id,provider,external_username,external_email,managed_by_user_id,config)
-     VALUES($1,$2,$3,$4,$5,$6,$7)
-     ON CONFLICT(scope_id,cloud_user_id) DO UPDATE SET external_username=excluded.external_username,external_email=excluded.external_email,managed_by_user_id=excluded.managed_by_user_id,config=excluded.config,updated_at=now()
+    `INSERT INTO scope_external_accounts(scope_id,cloud_user_id,provider,external_username,external_email,managed_by_user_id,config,encrypted_secret)
+     VALUES($1,$2,$3,$4,$5,$6,$7,$8)
+     ON CONFLICT(scope_id,cloud_user_id) DO UPDATE SET external_username=excluded.external_username,external_email=excluded.external_email,managed_by_user_id=excluded.managed_by_user_id,config=excluded.config,encrypted_secret=COALESCE(excluded.encrypted_secret,scope_external_accounts.encrypted_secret),updated_at=now()
      RETURNING id,scope_id,cloud_user_id,provider,external_username,external_email,config,updated_at`,
-    [scopeId, userId, scope.rows[0].provider, externalUsername, externalEmail, req.auth!.id, req.body?.config || {}]
+    [scopeId, userId, scope.rows[0].provider, externalUsername, externalEmail, req.auth!.id, req.body?.config || {}, encryptedSecret]
   );
   await audit(req.auth!.id, 'scope.native-account.upsert', 'provider-scope', scopeId, reason, { userId, provider: scope.rows[0].provider, externalUsername, externalEmail });
   res.json(result.rows[0]);
@@ -1490,6 +1552,74 @@ app.post('/me/scopes/:scopeId/aws-credential/resolve', auth, async (req: AuthedR
   res.json({ awsUsername: row.aws_username, accessKeyId: row.access_key_id, secretAccessKey: decrypt(row.encrypted_secret_access_key), indraqRole: row.indraq_role });
 });
 
+app.post('/me/scopes/:scopeId/aws-credential/rotate', auth, async (req: AuthedRequest, res) => {
+  const reason = requireReason(req, res); if (!reason) return;
+  const scopeId = ensureUuid(routeParam(req.params.scopeId), 'Scope ID');
+  if (!(await scopeVisible(scopeId, req.auth!))) { res.status(403).json({ error: 'Scope access denied.' }); return; }
+  const own = await pool.query('SELECT aws_username,access_key_id,encrypted_secret_access_key FROM scope_aws_credentials WHERE scope_id=$1 AND cloud_user_id=$2', [scopeId, req.auth!.id]);
+  if (!own.rowCount) { res.status(404).json({ error: 'No AWS credential is stored for you in this scope.' }); return; }
+  const scope = await pool.query('SELECT config,encrypted_secret FROM provider_scopes WHERE id=$1 AND provider=\'aws\' AND is_active=true', [scopeId]);
+  if (!scope.rowCount || !scope.rows[0].encrypted_secret) { res.status(409).json({ error: 'AWS scope management credential is unavailable.' }); return; }
+  const management = JSON.parse(decrypt(scope.rows[0].encrypted_secret));
+  const region = String(scope.rows[0].config?.region || 'us-east-1');
+  const iam = new IAMClient({ region, credentials: { accessKeyId: management.accessKeyId, secretAccessKey: management.secretAccessKey, ...(management.sessionToken ? { sessionToken: management.sessionToken } : {}) } });
+  const created = await iam.send(new CreateAccessKeyCommand({ UserName: own.rows[0].aws_username }));
+  const next = created.AccessKey;
+  if (!next?.AccessKeyId || !next.SecretAccessKey) { res.status(502).json({ error: 'AWS did not return a replacement access key.' }); return; }
+  try {
+    await pool.query('UPDATE scope_aws_credentials SET access_key_id=$1,encrypted_secret_access_key=$2,updated_at=now() WHERE scope_id=$3 AND cloud_user_id=$4', [next.AccessKeyId, encrypt(next.SecretAccessKey), scopeId, req.auth!.id]);
+    await iam.send(new DeleteAccessKeyCommand({ UserName: own.rows[0].aws_username, AccessKeyId: own.rows[0].access_key_id }));
+  } catch (error) {
+    try { await iam.send(new DeleteAccessKeyCommand({ UserName: own.rows[0].aws_username, AccessKeyId: next.AccessKeyId })); } catch { /* best effort */ }
+    throw error;
+  }
+  await audit(req.auth!.id, 'scope.aws-credential.self-rotate', 'provider-scope', scopeId, reason, { awsUsername: own.rows[0].aws_username, previousAccessKeyId: own.rows[0].access_key_id, accessKeyId: next.AccessKeyId });
+  res.setHeader('Cache-Control', 'no-store'); res.setHeader('Pragma', 'no-cache');
+  res.json({ awsUsername: own.rows[0].aws_username, accessKeyId: next.AccessKeyId, secretAccessKey: next.SecretAccessKey });
+});
+
+app.post('/me/scopes/:scopeId/external-account/rotate', auth, async (req: AuthedRequest, res) => {
+  const reason = requireReason(req, res); if (!reason) return;
+  const scopeId = ensureUuid(routeParam(req.params.scopeId), 'Scope ID');
+  if (!(await scopeVisible(scopeId, req.auth!))) { res.status(403).json({ error: 'Scope access denied.' }); return; }
+  const password = String(req.body?.password || '');
+  if (password.length < 10) { res.status(400).json({ error: 'Password must be at least 10 characters.' }); return; }
+  const account = await pool.query('SELECT provider,external_username FROM scope_external_accounts WHERE scope_id=$1 AND cloud_user_id=$2', [scopeId, req.auth!.id]);
+  if (!account.rowCount) { res.status(404).json({ error: 'No NPM/Jenkins account is stored for you in this scope.' }); return; }
+  const scope = await pool.query('SELECT provider,config,encrypted_secret FROM provider_scopes WHERE id=$1 AND is_active=true', [scopeId]);
+  if (!scope.rowCount || !scope.rows[0].encrypted_secret) { res.status(409).json({ error: 'Provider management credential is unavailable.' }); return; }
+  const provider = String(account.rows[0].provider);
+  const management = JSON.parse(decrypt(scope.rows[0].encrypted_secret));
+  const username = String(account.rows[0].external_username);
+  if (provider === 'npm') {
+    const base = String(scope.rows[0].config?.url || '').replace(/\/+$/, '');
+    const tokenResponse = await fetch(`${base}/api/tokens`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ identity: management.identity, secret: management.secret }) });
+    if (!tokenResponse.ok) { res.status(502).json({ error: `NPM management authentication failed (HTTP ${tokenResponse.status}).` }); return; }
+    const token = (await tokenResponse.json() as { token?: string }).token;
+    if (!token) { res.status(502).json({ error: 'NPM did not return a management token.' }); return; }
+    const headers = { authorization: `Bearer ${token}`, 'content-type': 'application/json' };
+    const usersResponse = await fetch(`${base}/api/users?expand=permissions`, { headers });
+    if (!usersResponse.ok) { res.status(502).json({ error: `Unable to list NPM users (HTTP ${usersResponse.status}).` }); return; }
+    const users = await usersResponse.json() as Array<{ id: number; email?: string; nickname?: string; name?: string }>;
+    const wanted = username.toLowerCase();
+    const target = users.find((u) => String(u.email || '').toLowerCase() === wanted || String(u.nickname || '').toLowerCase() === wanted || String(u.name || '').toLowerCase() === wanted);
+    if (!target) { res.status(404).json({ error: `NPM user ${username} was not found.` }); return; }
+    const update = await fetch(`${base}/api/users/${target.id}/auth`, { method: 'PUT', headers, body: JSON.stringify({ type: 'password', secret: password }) });
+    if (!update.ok) { res.status(502).json({ error: `NPM password reset failed (HTTP ${update.status}).` }); return; }
+  } else if (provider === 'jenkins-dev' || provider === 'jenkins-prod') {
+    const url = String(scope.rows[0].config?.url || '').replace(/\/+$/, '');
+    const adminUsername = String(management.username || '');
+    const adminSecret = String(management.secret || '');
+    const headers = await jenkinsRequestHeaders(url, adminUsername, adminSecret);
+    const script = `import hudson.security.HudsonPrivateSecurityRealm\ndef user = hudson.model.User.getById(${JSON.stringify(username)}, false)\nif (user == null) throw new IllegalStateException('Jenkins user not found')\nuser.addProperty(HudsonPrivateSecurityRealm.Details.fromPlainPassword(${JSON.stringify(password)}))\nuser.save()\nprintln 'updated'`;
+    const response = await fetch(`${url}/scriptText`, { method: 'POST', headers: { ...headers, 'content-type': 'application/x-www-form-urlencoded' }, body: new URLSearchParams({ script }).toString() });
+    if (!response.ok) { res.status(502).json({ error: `Jenkins password reset failed (HTTP ${response.status}).` }); return; }
+  } else { res.status(400).json({ error: 'Scope must be NPM or Jenkins.' }); return; }
+  await pool.query('UPDATE scope_external_accounts SET encrypted_secret=$1,updated_at=now() WHERE scope_id=$2 AND cloud_user_id=$3', [encrypt(password), scopeId, req.auth!.id]);
+  await audit(req.auth!.id, 'scope.external-account.self-rotate', 'provider-scope', scopeId, reason, { provider, username });
+  res.status(204).end();
+});
+
 // Reusable provider credentials are scoped to the authenticated IndraQ user.
 // A user configures AWS/NPM/Jenkins/GHCR once and can reuse that profile across
 // every project they are allowed to access. Secrets are encrypted at rest and
@@ -1699,18 +1829,23 @@ app.get('/users/:id/resource-grants', ...allow('manager', 'admin'), async (req:
   const target = await pool.query('SELECT id,email,role,is_active FROM users WHERE id=$1', [userId]);
   if (!target.rowCount) { res.status(404).json({ error: 'User not found' }); return; }
   if (req.auth!.role === 'manager' && target.rows[0].role !== 'user') { res.status(403).json({ error: 'Managers may inspect grants only for normal users.' }); return; }
+  const managerFilter = req.auth!.role === 'manager'
+    ? ` AND (p.created_by=$2 OR EXISTS (SELECT 1 FROM project_members pm WHERE pm.project_id=p.id AND pm.user_id=$2 AND (pm.role='owner' OR pm.access_level='write')))`
+    : '';
+  const params: unknown[] = req.auth!.role === 'manager' ? [userId, req.auth!.id] : [userId];
   const result = await pool.query(`SELECT g.id,g.project_resource_id,g.user_id,g.permission,g.created_at,
       pr.project_id,p.name AS project_name,pr.resource_type,pr.provider,pr.environment,pr.external_id,pr.config
       FROM project_resource_grants g
       JOIN project_resources pr ON pr.id=g.project_resource_id
       JOIN projects p ON p.id=pr.project_id
-      WHERE g.user_id=$1
-      ORDER BY p.name,pr.provider,pr.resource_type`, [userId]);
+      WHERE g.user_id=$1 AND p.archived_at IS NULL${managerFilter}
+      ORDER BY p.name,pr.provider,pr.resource_type`, params);
   res.json(result.rows);
 });
 
 app.get('/projects/:projectId/resource-grants', ...allow('manager', 'admin'), async (req: AuthedRequest, res) => {
   const projectId = routeParam(req.params.projectId);
+  if (!(await hasProjectWriteAccess(projectId, req.auth!))) { res.status(403).json({ error: 'WRITE access to the project is required.' }); return; }
   const userId = typeof req.query.userId === 'string' ? req.query.userId : undefined;
   const result = await pool.query(`SELECT g.id,g.project_resource_id,g.user_id,g.permission,g.created_at,
       u.email,u.name,pr.resource_type,pr.provider,pr.environment,pr.external_id,pr.config
@@ -1725,6 +1860,7 @@ app.get('/projects/:projectId/resource-grants', ...allow('manager', 'admin'), as
 app.post('/projects/:projectId/resources/:resourceId/grants', ...allow('manager', 'admin'), async (req: AuthedRequest, res) => {
   const reason = requireReason(req, res); if (!reason) return;
   const projectId = routeParam(req.params.projectId);
+  if (!(await hasProjectWriteAccess(projectId, req.auth!))) { res.status(403).json({ error: 'WRITE access to the project is required.' }); return; }
   const resourceId = routeParam(req.params.resourceId);
   const userId = String(req.body?.userId || '');
   const permission = req.body?.permission === 'view' ? 'view' : 'manage';
@@ -1743,6 +1879,7 @@ app.post('/projects/:projectId/resources/:resourceId/grants', ...allow('manager'
 app.delete('/projects/:projectId/resources/:resourceId/grants/:userId', ...allow('manager', 'admin'), async (req: AuthedRequest, res) => {
   const reason = requireReason(req, res); if (!reason) return;
   const projectId = routeParam(req.params.projectId);
+  if (!(await hasProjectWriteAccess(projectId, req.auth!))) { res.status(403).json({ error: 'WRITE access to the project is required.' }); return; }
   const resourceId = routeParam(req.params.resourceId);
   const userId = routeParam(req.params.userId);
   const target = await pool.query('SELECT email,role FROM users WHERE id=$1', [userId]);

package/cloud-api/tsconfig.json

@@ -1,18 +1,18 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "NodeNext",
-    "moduleResolution": "NodeNext",
-    "rootDir": "src",
-    "outDir": "dist",
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "types": [
-      "node"
-    ]
-  },
-  "include": [
-    "src/**/*.ts"
-  ]
-}
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "rootDir": "src",
+    "outDir": "dist",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "types": [
+      "node"
+    ]
+  },
+  "include": [
+    "src/**/*.ts"
+  ]
+}

package/dist/cli/help-content.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"help-content.d.ts","sourceRoot":"","sources":["../../src/cli/help-content.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;AAMpH,eAAO,MAAM,oBAAoB,QAAO,MA+FvC,CAAC;AA6HF,eAAO,MAAM,YAAY,GAAI,OAAO,SAAS,KAAG,MAS/C,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,QAAQ,MAAM,KAAG,SAAS,GAAG,SAa3D,CAAC"}
+{"version":3,"file":"help-content.d.ts","sourceRoot":"","sources":["../../src/cli/help-content.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;AAMpH,eAAO,MAAM,oBAAoB,QAAO,MAqGvC,CAAC;AA6IF,eAAO,MAAM,YAAY,GAAI,OAAO,SAAS,KAAG,MAS/C,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,QAAQ,MAAM,KAAG,SAAS,GAAG,SAa3D,CAAC"}

package/dist/cli/help-content.js

@@ -9,7 +9,7 @@ const heading = (value) => chalk_1.default.bold(value);
 const command = (value) => chalk_1.default.cyan(value);
 const note = (value) => chalk_1.default.gray(value);
 const fullCommandReference = () => `
-${heading('IndraQ CLI v2.1 — scope-based infrastructure and deployment')}
+${heading('IndraQ CLI v2.2 — scope-first infrastructure and deployment')}
 
 ${heading('Start here')}
   ${command('indraq login')}                              Sign in to https://cli.indraq.com
@@ -34,7 +34,8 @@ ${heading('Scopes — AWS / NPM / Jenkins / GHCR')}
   ${command('indraq scope rotate-password')}              Rotate your own NPM/Jenkins password
 
 ${heading('Organization users')}
-  ${command('indraq user list')}                          List organization users (MANAGER/ADMIN)
+  ${command('indraq user list')}                         List organization users (MANAGER/ADMIN)
+  ${command('indraq user scopes [email]')}               Show your own or a manageable user's scope assignments
   ${command('indraq user create [username]')}             Create Cloud user and select one or many manageable scopes
   ${command('indraq user update [username] --role <role>')} Admin changes organization role; assigned scopes synchronize
   ${command('indraq user delete [username]')}             Permanently remove identity from scopes, then Cloud
@@ -49,6 +50,10 @@ ${heading('Projects and project access')}
   ${command('indraq project scopes --env <env>')}         Link provider scopes to this project/environment
   ${command('indraq project add user')}                   Add a user and synchronize required scope/resource access
   ${command('indraq project delete user')}                Remove project membership
+  ${command('indraq project rename [name]')}             Rename a managed project
+  ${command('indraq project archive')}                    Archive a managed project
+  ${command('indraq project restore')}                    Restore an archived project
+  ${command('indraq project delete')}                     Permanently delete project metadata
   ${command('indraq access add user')}                    Grant selected project resources
   ${command('indraq access delete user')}                 Revoke selected project resources
 
@@ -56,7 +61,8 @@ ${heading('Prebuild and deploy')}
   ${command('indraq prebuild --env dev')}                 Jenkins + GHCR required; DNS + NPM optional
   ${command('indraq deploy:dev')}                         Deploy dev
   ${command('indraq deploy:prod')}                        Deploy prod
-  ${command('indraq deploy build --env staging')}         Deploy a named IndraQ project/resource environment
+  ${command('indraq deploy --env staging')}               Deploy a named IndraQ project/resource environment
+  ${command('indraq deploy --env dev --select-scopes')}   Explicitly review/change saved scope bindings before deploy
   ${command('indraq deployment create --env dev')}        Reconcile deployment infrastructure
   ${command('indraq deployment run --env dev')}           Run deployment
 
@@ -129,12 +135,21 @@ ${heading('Commands')}
   ${command('indraq scope remove-user')}
   ${command('indraq scope default aws')}
   ${command('indraq scope audit')}
+  ${command('indraq scope credentials')}                Own AWS IAM credential for an assigned AWS scope
+  ${command('indraq scope rotate-key')}                 Rotate your own AWS access key
+  ${command('indraq scope rotate-password')}            Rotate your own NPM/Jenkins password
 
-${note('scope describe never prints passwords, API tokens, AWS secret keys, or GHCR tokens.')}
+${note("scope describe never prints passwords, API tokens, AWS secret keys, or GHCR tokens. Normal USE members never receive the organization provider-management secret; AWS/NPM/Jenkins resolve to the member's own native identity.")}
 `;
 const usersHelp = () => `
 ${heading('Users and scope membership')}
 
+${command('indraq user list')}
+  Lists organization users for MANAGER/ADMIN accounts.
+
+${command('indraq user scopes [email]')}
+  Shows your own scope assignments, or a user you are authorized to manage.
+
 ${command('indraq user create')}
   Creates the Cloud identity first, then asks the admin/manager which MANAGE scopes
   should receive the user. Multiple AWS/NPM/Jenkins/GHCR scopes can be selected.
@@ -154,6 +169,9 @@ ${command('indraq user update <user> --role manager')}
 ${command('indraq user delete')}
   Removes every manageable provider-scope identity first. Cloud deletion happens only
   after provider cleanup succeeds, so failed cleanup can be retried safely.
+
+${command('indraq password reset')}
+  Resets your own IndraQ Cloud password.
 `;
 const deployHelp = () => `
 ${heading('Project scopes, prebuild and deployment')}
@@ -167,14 +185,18 @@ ${command('indraq prebuild --env dev')}
   Optional Route53: Skip | Create/reconcile | Link existing
   Optional NPM:     Skip | Create/reconcile | Link existing
 
-${command('indraq deploy build --env dev')}
+${command('indraq deploy --env dev')}
   Builds the Docker image, pushes it to the GHCR scope linked/defaulted for dev, then
-  runs the Jenkins deployment associated with the dev project environment.
+  runs the Jenkins deployment associated with the dev project environment. Normal
+  deployments reuse the saved project/environment scope bindings without prompting.
+
+${command('indraq deploy --env dev --select-scopes')}
+  Explicitly review or change the saved scope bindings before this deployment.
 
 ${note('--env is an IndraQ environment selector. Application environment files are part of your own Docker/build process and are not selected by this flag.')}
 `;
 const configureHelp = () => `
-${heading('Configuration in v2.1')}
+${heading('Configuration in v2.2')}
 
 Organization provider credentials are configured once as named scopes by an ADMIN.
 Managers and users do not create organization AWS/NPM/Jenkins/GHCR credentials.

package/dist/cli/help-content.js.map

@@ -1 +1 @@
-{"version":3,"file":"help-content.js","sourceRoot":"","sources":["../../src/cli/help-content.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAI1B,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAEnD,MAAM,oBAAoB,GAAG,GAAW,EAAE,CAAC;EAChD,OAAO,CAAC,6DAA6D,CAAC;;EAEtE,OAAO,CAAC,YAAY,CAAC;IACnB,OAAO,CAAC,cAAc,CAAC;IACvB,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,iCAAiC,CAAC;IAC1C,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,mBAAmB,CAAC;;EAE9B,OAAO,CAAC,qCAAqC,CAAC;IAC5C,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,gCAAgC,CAAC;IACzC,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,sBAAsB,CAAC;IAC/B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,iCAAiC,CAAC;IAC1C,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,8BAA8B,CAAC;;EAEzC,OAAO,CAAC,oBAAoB,CAAC;IAC3B,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,6CAA6C,CAAC;IACtD,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,uBAAuB,CAAC;;EAElC,OAAO,CAAC,6BAA6B,CAAC;IACpC,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,4BAA4B,CAAC;IACrC,OAAO,CAAC,wBAAwB,CAAC;IACjC,OAAO,CAAC,2BAA2B,CAAC;;EAEtC,OAAO,CAAC,qBAAqB,CAAC;IAC5B,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,oCAAoC,CAAC;IAC7C,OAAO,CAAC,iCAAiC,CAAC;;IAE1C,IAAI,CAAC,+GAA+G,CAAC;;EAEvH,OAAO,CAAC,SAAS,CAAC;IAChB,OAAO,CAAC,sCAAsC,CAAC;IAC/C,OAAO,CAAC,sCAAsC,CAAC;IAC/C,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,kCAAkC,CAAC;;IAE3C,IAAI,CAAC,2IAA2I,CAAC;;EAEnJ,OAAO,CAAC,KAAK,CAAC;IACZ,OAAO,CAAC,wBAAwB,CAAC;IACjC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,gCAAgC,CAAC;IACzC,OAAO,CAAC,yBAAyB,CAAC;;EAEpC,OAAO,CAAC,qBAAqB,CAAC;IAC5B,OAAO,CAAC,wBAAwB,CAAC;IACjC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,8BAA8B,CAAC;;EAEzC,OAAO,CAAC,QAAQ,CAAC;IACf,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,6BAA6B,CAAC;IACtC,OAAO,CAAC,0BAA0B,CAAC;;EAErC,OAAO,CAAC,uBAAuB,CAAC;IAC9B,OAAO,CAAC,sBAAsB,CAAC;IAC/B,OAAO,CAAC,sCAAsC,CAAC;;EAEjD,OAAO,CAAC,cAAc,CAAC;IACrB,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,iBAAiB,CAAC;IAC1B,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,oBAAoB,CAAC;CAChC,CAAC;AA/FW,QAAA,oBAAoB,wBA+F/B;AAEF,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC;EAC9B,OAAO,CAAC,iBAAiB,CAAC;;;;;EAK1B,OAAO,CAAC,WAAW,CAAC;;;;;EAKpB,OAAO,CAAC,UAAU,CAAC;IACjB,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,iCAAiC,CAAC;IAC1C,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,sBAAsB,CAAC;IAC/B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,oBAAoB,CAAC;;EAE/B,IAAI,CAAC,qFAAqF,CAAC;CAC5F,CAAC;AAEF,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC;EAC9B,OAAO,CAAC,4BAA4B,CAAC;;EAErC,OAAO,CAAC,oBAAoB,CAAC;;;;;EAK7B,OAAO,CAAC,uBAAuB,CAAC;;;;EAIhC,OAAO,CAAC,0BAA0B,CAAC;;;EAGnC,OAAO,CAAC,0CAA0C,CAAC;;;;EAInD,OAAO,CAAC,oBAAoB,CAAC;;;CAG9B,CAAC;AAEF,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC;EAC/B,OAAO,CAAC,yCAAyC,CAAC;;EAElD,OAAO,CAAC,iCAAiC,CAAC;;;;EAI1C,OAAO,CAAC,2BAA2B,CAAC;;;;;EAKpC,OAAO,CAAC,+BAA+B,CAAC;;;;EAIxC,IAAI,CAAC,qJAAqJ,CAAC;CAC5J,CAAC;AAEF,MAAM,aAAa,GAAG,GAAW,EAAE,CAAC;EAClC,OAAO,CAAC,uBAAuB,CAAC;;;;;IAK9B,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,sBAAsB,CAAC;IAC/B,OAAO,CAAC,iCAAiC,CAAC;;;CAG7C,CAAC;AAEF,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC;EAC/B,OAAO,CAAC,uBAAuB,CAAC;;IAE9B,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,6BAA6B,CAAC;IACtC,OAAO,CAAC,0BAA0B,CAAC;;;;CAItC,CAAC;AAEF,MAAM,OAAO,GAAG,GAAW,EAAE,CAAC;EAC5B,OAAO,CAAC,oBAAoB,CAAC;;;IAG3B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,yBAAyB,CAAC;;;IAGlC,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,yBAAyB,CAAC;CACrC,CAAC;AAEF,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC;EAC/B,OAAO,CAAC,eAAe,CAAC;;IAEtB,OAAO,CAAC,eAAe,CAAC;;;CAG3B,CAAC;AAEK,MAAM,YAAY,GAAG,CAAC,KAAgB,EAAU,EAAE;IACvD,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,aAAa,EAAE,CAAC;IAClD,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,SAAS,EAAE,CAAC;IAC1C,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,SAAS,EAAE,CAAC;IAC1C,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAClE,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAC5C,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,OAAO,EAAE,CAAC;IACtC,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAC5C,OAAO,IAAA,4BAAoB,GAAE,CAAC;AAChC,CAAC,CAAC;AATW,QAAA,YAAY,gBASvB;AAEK,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE;IACtE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAC9E,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,OAAO,CAAC;IACjI,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACxH,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,YAAY,IAAI,UAAU,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC;IACzG,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IACtE,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IACnG,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACnH,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,aAAa,IAAI,UAAU,KAAK,YAAY;QAAE,OAAO,QAAQ,CAAC;IAC5G,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAbW,QAAA,cAAc,kBAazB"}
+{"version":3,"file":"help-content.js","sourceRoot":"","sources":["../../src/cli/help-content.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAI1B,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAEnD,MAAM,oBAAoB,GAAG,GAAW,EAAE,CAAC;EAChD,OAAO,CAAC,6DAA6D,CAAC;;EAEtE,OAAO,CAAC,YAAY,CAAC;IACnB,OAAO,CAAC,cAAc,CAAC;IACvB,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,iCAAiC,CAAC;IAC1C,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,mBAAmB,CAAC;;EAE9B,OAAO,CAAC,qCAAqC,CAAC;IAC5C,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,gCAAgC,CAAC;IACzC,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,sBAAsB,CAAC;IAC/B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,iCAAiC,CAAC;IAC1C,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,8BAA8B,CAAC;;EAEzC,OAAO,CAAC,oBAAoB,CAAC;IAC3B,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,4BAA4B,CAAC;IACrC,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,6CAA6C,CAAC;IACtD,OAAO,CAAC,+BAA+B,CAAC;IACxC,OAAO,CAAC,uBAAuB,CAAC;;EAElC,OAAO,CAAC,6BAA6B,CAAC;IACpC,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,4BAA4B,CAAC;IACrC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,wBAAwB,CAAC;IACjC,OAAO,CAAC,wBAAwB,CAAC;IACjC,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,wBAAwB,CAAC;IACjC,OAAO,CAAC,2BAA2B,CAAC;;EAEtC,OAAO,CAAC,qBAAqB,CAAC;IAC5B,OAAO,CAAC,2BAA2B,CAAC;IACpC,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,6BAA6B,CAAC;IACtC,OAAO,CAAC,yCAAyC,CAAC;IAClD,OAAO,CAAC,oCAAoC,CAAC;IAC7C,OAAO,CAAC,iCAAiC,CAAC;;IAE1C,IAAI,CAAC,+GAA+G,CAAC;;EAEvH,OAAO,CAAC,SAAS,CAAC;IAChB,OAAO,CAAC,sCAAsC,CAAC;IAC/C,OAAO,CAAC,sCAAsC,CAAC;IAC/C,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,kCAAkC,CAAC;;IAE3C,IAAI,CAAC,2IAA2I,CAAC;;EAEnJ,OAAO,CAAC,KAAK,CAAC;IACZ,OAAO,CAAC,wBAAwB,CAAC;IACjC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,gCAAgC,CAAC;IACzC,OAAO,CAAC,yBAAyB,CAAC;;EAEpC,OAAO,CAAC,qBAAqB,CAAC;IAC5B,OAAO,CAAC,wBAAwB,CAAC;IACjC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,8BAA8B,CAAC;IACvC,OAAO,CAAC,8BAA8B,CAAC;;EAEzC,OAAO,CAAC,QAAQ,CAAC;IACf,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,6BAA6B,CAAC;IACtC,OAAO,CAAC,0BAA0B,CAAC;;EAErC,OAAO,CAAC,uBAAuB,CAAC;IAC9B,OAAO,CAAC,sBAAsB,CAAC;IAC/B,OAAO,CAAC,sCAAsC,CAAC;;EAEjD,OAAO,CAAC,cAAc,CAAC;IACrB,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,iBAAiB,CAAC;IAC1B,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,oBAAoB,CAAC;CAChC,CAAC;AArGW,QAAA,oBAAoB,wBAqG/B;AAEF,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC;EAC9B,OAAO,CAAC,iBAAiB,CAAC;;;;;EAK1B,OAAO,CAAC,WAAW,CAAC;;;;;EAKpB,OAAO,CAAC,UAAU,CAAC;IACjB,OAAO,CAAC,mBAAmB,CAAC;IAC5B,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,iCAAiC,CAAC;IAC1C,OAAO,CAAC,kCAAkC,CAAC;IAC3C,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,sBAAsB,CAAC;IAC/B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,8BAA8B,CAAC;;EAEzC,IAAI,CAAC,gOAAgO,CAAC;CACvO,CAAC;AAEF,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC;EAC9B,OAAO,CAAC,4BAA4B,CAAC;;EAErC,OAAO,CAAC,kBAAkB,CAAC;;;EAG3B,OAAO,CAAC,4BAA4B,CAAC;;;EAGrC,OAAO,CAAC,oBAAoB,CAAC;;;;;EAK7B,OAAO,CAAC,uBAAuB,CAAC;;;;EAIhC,OAAO,CAAC,0BAA0B,CAAC;;;EAGnC,OAAO,CAAC,0CAA0C,CAAC;;;;EAInD,OAAO,CAAC,oBAAoB,CAAC;;;;EAI7B,OAAO,CAAC,uBAAuB,CAAC;;CAEjC,CAAC;AAEF,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC;EAC/B,OAAO,CAAC,yCAAyC,CAAC;;EAElD,OAAO,CAAC,iCAAiC,CAAC;;;;EAI1C,OAAO,CAAC,2BAA2B,CAAC;;;;;EAKpC,OAAO,CAAC,yBAAyB,CAAC;;;;;EAKlC,OAAO,CAAC,yCAAyC,CAAC;;;EAGlD,IAAI,CAAC,qJAAqJ,CAAC;CAC5J,CAAC;AAEF,MAAM,aAAa,GAAG,GAAW,EAAE,CAAC;EAClC,OAAO,CAAC,uBAAuB,CAAC;;;;;IAK9B,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,qBAAqB,CAAC;IAC9B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,sBAAsB,CAAC;IAC/B,OAAO,CAAC,iCAAiC,CAAC;;;CAG7C,CAAC;AAEF,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC;EAC/B,OAAO,CAAC,uBAAuB,CAAC;;IAE9B,OAAO,CAAC,yBAAyB,CAAC;IAClC,OAAO,CAAC,6BAA6B,CAAC;IACtC,OAAO,CAAC,0BAA0B,CAAC;;;;CAItC,CAAC;AAEF,MAAM,OAAO,GAAG,GAAW,EAAE,CAAC;EAC5B,OAAO,CAAC,oBAAoB,CAAC;;;IAG3B,OAAO,CAAC,uBAAuB,CAAC;IAChC,OAAO,CAAC,0BAA0B,CAAC;IACnC,OAAO,CAAC,yBAAyB,CAAC;;;IAGlC,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,mCAAmC,CAAC;IAC5C,OAAO,CAAC,kBAAkB,CAAC;IAC3B,OAAO,CAAC,oBAAoB,CAAC;IAC7B,OAAO,CAAC,yBAAyB,CAAC;CACrC,CAAC;AAEF,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC;EAC/B,OAAO,CAAC,eAAe,CAAC;;IAEtB,OAAO,CAAC,eAAe,CAAC;;;CAG3B,CAAC;AAEK,MAAM,YAAY,GAAG,CAAC,KAAgB,EAAU,EAAE;IACvD,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,aAAa,EAAE,CAAC;IAClD,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,SAAS,EAAE,CAAC;IAC1C,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,SAAS,EAAE,CAAC;IAC1C,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAClE,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAC5C,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,OAAO,EAAE,CAAC;IACtC,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAC5C,OAAO,IAAA,4BAAoB,GAAE,CAAC;AAChC,CAAC,CAAC;AATW,QAAA,YAAY,gBASvB;AAEK,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE;IACtE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAC9E,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,OAAO,CAAC;IACjI,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACxH,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,YAAY,IAAI,UAAU,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC;IACzG,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IACtE,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IACnG,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACnH,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,aAAa,IAAI,UAAU,KAAK,YAAY;QAAE,OAAO,QAAQ,CAAC;IAC5G,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAbW,QAAA,cAAc,kBAazB"}

package/dist/modules/access/commands/access.command.js

@@ -139,36 +139,36 @@ const syncAwsNativeAccess = async (user) => {
 const jenkinsRoleScript = (username, roleName, jobs) => {
     const pattern = jobs.length ? `^(?:${jobs.map(escapeRegex).join('|')})$` : 'a^';
     const enc = (v) => Buffer.from(v, 'utf8').toString('base64');
-    return `
-import hudson.model.Item
-import hudson.model.Run
-import hudson.security.Permission
-import jenkins.model.Jenkins
-
-${role_strategy_groovy_1.jenkinsRoleStrategyCompatGroovy}
-def decode = { String value -> new String(value.decodeBase64(), 'UTF-8') }
-def username = decode('${enc(username)}')
-def roleName = decode('${enc(roleName)}')
-def pattern = decode('${enc(pattern)}')
-def j = Jenkins.get()
-def strategy = j.authorizationStrategy
-indraqRequireRoleStrategy(strategy)
-def map = strategy.getRoleMap(indraqRoleType('Project'))
-def old = map.getRole(roleName)
-if (old != null) map.removeRole(old)
-if (pattern != 'a^') {
-  Set<Permission> permissions = new HashSet<Permission>()
-  permissions.add(Item.DISCOVER)
-  permissions.add(Item.READ)
-  permissions.add(Item.BUILD)
-  permissions.add(Item.CANCEL)
-  permissions.add(Item.WORKSPACE)
-  def role = indraqNewRole(roleName, pattern, permissions)
-  map.addRole(role)
-  indraqAssignRole(map, role, username)
-}
-j.save()
-println 'OK|' + roleName + '|' + pattern
+    return `
+import hudson.model.Item
+import hudson.model.Run
+import hudson.security.Permission
+import jenkins.model.Jenkins
+
+${role_strategy_groovy_1.jenkinsRoleStrategyCompatGroovy}
+def decode = { String value -> new String(value.decodeBase64(), 'UTF-8') }
+def username = decode('${enc(username)}')
+def roleName = decode('${enc(roleName)}')
+def pattern = decode('${enc(pattern)}')
+def j = Jenkins.get()
+def strategy = j.authorizationStrategy
+indraqRequireRoleStrategy(strategy)
+def map = strategy.getRoleMap(indraqRoleType('Project'))
+def old = map.getRole(roleName)
+if (old != null) map.removeRole(old)
+if (pattern != 'a^') {
+  Set<Permission> permissions = new HashSet<Permission>()
+  permissions.add(Item.DISCOVER)
+  permissions.add(Item.READ)
+  permissions.add(Item.BUILD)
+  permissions.add(Item.CANCEL)
+  permissions.add(Item.WORKSPACE)
+  def role = indraqNewRole(roleName, pattern, permissions)
+  map.addRole(role)
+  indraqAssignRole(map, role, username)
+}
+j.save()
+println 'OK|' + roleName + '|' + pattern
 `;
 };
 const syncJenkinsNativeAccess = async (user) => {

package/dist/modules/aws/services/route53-lookup.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"route53-lookup.service.js","sourceRoot":"","sources":["../../../../src/modules/aws/services/route53-lookup.service.ts"],"names":[],"mappings":";;;AAAA,8DAAyH;AACzH,8EAA+E;AAC/E,6EAA6E;AAC7E,sFAAkF;AAElF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3F,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAQxE,MAAM,sBAAsB,GAAG,KAAK,EAAE,MAAc,EAAsC,EAAE;IACjG,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,2EAA2E;IAC3E,4EAA4E;IAC5E,yCAAyC;IACzC,IAAI,IAAA,sCAAmB,GAAE,EAAE,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAA,4CAAoB,GAAE,CAAC;YAC/C,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,IAAI,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,MAAM,CAAE,QAAQ,CAAC,MAAc,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;YACtM,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,UAAU,CAAC,MAAmE,CAAC;gBAC9F,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;oBACnC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC9C,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,CAA2C,EAAE;iBAC3I,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,kEAAkE,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,yCAAqB,EAAC,qDAAqD,CAAC,CAAC;IACvG,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,wCAAsB,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE,CAAC;SAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;SAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAG,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAK,CAAC,EAAE,CAAC,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SACjE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,+CAA6B,CAAC;YAClE,YAAY,EAAE,IAAI,CAAC,EAAE;YACrB,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG;YAC7D,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC;QACjG,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AArCW,QAAA,sBAAsB,0BAqCjC;AAEK,MAAM,oBAAoB,GAAG,KAAK,EAAE,MAAc,EAA+B,EAAE;IACxF,MAAM,KAAK,GAAG,MAAM,IAAA,8BAAsB,EAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,8DAA8D,MAAM,qDAAqD,CAAC,CAAC;IACtM,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAJW,QAAA,oBAAoB,wBAI/B"}
+{"version":3,"file":"route53-lookup.service.js","sourceRoot":"","sources":["../../../../src/modules/aws/services/route53-lookup.service.ts"],"names":[],"mappings":";;;AAAA,8DAAyH;AACzH,8EAA+E;AAC/E,6EAA6E;AAC7E,sFAAkF;AAElF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3F,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAQxE,MAAM,sBAAsB,GAAG,KAAK,EAAE,MAAc,EAAsC,EAAE;IACjG,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,2EAA2E;IAC3E,4EAA4E;IAC5E,yCAAyC;IACzC,IAAI,IAAA,sCAAmB,GAAE,EAAE,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAA,4CAAoB,GAAE,CAAC;YAC/C,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,IAAI,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,MAAM,CAAE,QAAQ,CAAC,MAAc,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;YACtM,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,UAAU,CAAC,MAAmE,CAAC;gBAC9F,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;oBACnC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC9C,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,CAA2C,EAAE;iBAC3I,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,kEAAkE,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,yCAAqB,EAAC,qDAAqD,CAAC,CAAC;IACvG,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,wCAAsB,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE,CAAC;SAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;SAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAG,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAK,CAAC,EAAE,CAAC,CAAC;SAC7D,MAAM,CAAC,CAAC,CAA+B,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SAC/F,IAAI,CAAC,CAAC,CAA+B,EAAE,CAA+B,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE7G,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,+CAA6B,CAAC;YAClE,YAAY,EAAE,IAAI,CAAC,EAAE;YACrB,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG;YAC7D,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC;QACpH,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AArCW,QAAA,sBAAsB,0BAqCjC;AAEK,MAAM,oBAAoB,GAAG,KAAK,EAAE,MAAc,EAA+B,EAAE;IACxF,MAAM,KAAK,GAAG,MAAM,IAAA,8BAAsB,EAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,8DAA8D,MAAM,qDAAqD,CAAC,CAAC;IACtM,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAJW,QAAA,oBAAoB,wBAI/B"}

package/dist/modules/cloud/commands/cloud.command.d.ts

@@ -34,5 +34,9 @@ export declare const listProjects: (options: ListCliOptions) => Promise<void>;
 export declare const linkProject: (options?: ListCliOptions) => Promise<void>;
 export declare const addProjectUser: () => Promise<void>;
 export declare const deleteProjectUser: () => Promise<void>;
+export declare const renameProject: (newNameArg?: string) => Promise<void>;
+export declare const archiveProject: (yes?: boolean) => Promise<void>;
+export declare const restoreProject: () => Promise<void>;
+export declare const deleteProject: (yes?: boolean) => Promise<void>;
 export {};
 //# sourceMappingURL=cloud.command.d.ts.map