opal-security 3.1.1-beta.72a6ae5 → 3.1.1-beta.756584f

package/README.md

@@ -22,7 +22,7 @@ $ npm install -g opal-security
 $ opal COMMAND
 running command...
 $ opal (--version)
-opal-security/3.1.1-beta.72a6ae5 linux-x64 node-v20.19.1
+opal-security/3.1.1-beta.756584f linux-x64 node-v20.19.1
 $ opal --help [COMMAND]
 USAGE
   $ opal COMMAND
@@ -101,7 +101,7 @@ EXAMPLES
   $ opal aws:identity
 ```
 
-_See code: [src/commands/aws/identity.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/aws/identity.ts)_
+_See code: [src/commands/aws/identity.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/aws/identity.ts)_
 
 ## `opal clear-auth-provider`
 
@@ -121,7 +121,7 @@ EXAMPLES
   $ opal clear-auth-provider
 ```
 
-_See code: [src/commands/clear-auth-provider.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/clear-auth-provider.ts)_
+_See code: [src/commands/clear-auth-provider.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/clear-auth-provider.ts)_
 
 ## `opal curl-example`
 
@@ -138,7 +138,7 @@ DESCRIPTION
   Prints out an example cURL command containing the parameters the CLI uses to query the Opal server.
 ```
 
-_See code: [src/commands/curl-example.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/curl-example.ts)_
+_See code: [src/commands/curl-example.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/curl-example.ts)_
 
 ## `opal groups get`
 
@@ -159,7 +159,7 @@ EXAMPLES
   $ opal groups:get --id 54052a3e-5375-4392-aeaf-0c6c44c131d4
 ```
 
-_See code: [src/commands/groups/get.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/groups/get.ts)_
+_See code: [src/commands/groups/get.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/groups/get.ts)_
 
 ## `opal help [COMMANDS]`
 
@@ -209,7 +209,7 @@ EXAMPLES
   $ opal iam-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --profileName "custom-profile"
 ```
 
-_See code: [src/commands/iam-roles/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/iam-roles/start.ts)_
+_See code: [src/commands/iam-roles/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/iam-roles/start.ts)_
 
 ## `opal kube-roles start`
 
@@ -240,7 +240,7 @@ EXAMPLES
   $ opal kube-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId "arn:aws:iam::712234975475:role/acme-eks-cluster-admin-role"
 ```
 
-_See code: [src/commands/kube-roles/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/kube-roles/start.ts)_
+_See code: [src/commands/kube-roles/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/kube-roles/start.ts)_
 
 ## `opal login`
 
@@ -261,7 +261,7 @@ EXAMPLES
   $ opal login
 ```
 
-_See code: [src/commands/login.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/login.ts)_
 
 ## `opal logout`
 
@@ -281,7 +281,7 @@ EXAMPLES
   $ opal logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/logout.ts)_
 
 ## `opal postgres-instances start`
 
@@ -318,7 +318,7 @@ EXAMPLES
   $ opal postgres-instances:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId fullaccess --action view
 ```
 
-_See code: [src/commands/postgres-instances/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/postgres-instances/start.ts)_
+_See code: [src/commands/postgres-instances/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/postgres-instances/start.ts)_
 
 ## `opal resources get`
 
@@ -339,7 +339,7 @@ EXAMPLES
   $ opal resources:get --id 54052a3e-5375-4392-aeaf-0c6c44c131d4
 ```
 
-_See code: [src/commands/resources/get.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/resources/get.ts)_
+_See code: [src/commands/resources/get.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/resources/get.ts)_
 
 ## `opal set-auth-provider`
 
@@ -365,7 +365,7 @@ EXAMPLES
   $ opal set-auth-provider --clientID 1234asdf --issuerUrl https://auth.example.com
 ```
 
-_See code: [src/commands/set-auth-provider.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/set-auth-provider.ts)_
+_See code: [src/commands/set-auth-provider.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/set-auth-provider.ts)_
 
 ## `opal set-custom-header`
 
@@ -386,7 +386,7 @@ EXAMPLES
   $ opal set-custom-header --header 'cf-access-token: $TOKEN'
 ```
 
-_See code: [src/commands/set-custom-header.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/set-custom-header.ts)_
+_See code: [src/commands/set-custom-header.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/set-custom-header.ts)_
 
 ## `opal set-token`
 
@@ -406,7 +406,7 @@ EXAMPLES
   $ opal set-token
 ```
 
-_See code: [src/commands/set-token.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/set-token.ts)_
+_See code: [src/commands/set-token.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/set-token.ts)_
 
 ## `opal set-url [URL]`
 
@@ -430,7 +430,7 @@ EXAMPLES
   $ opal set-url
 ```
 
-_See code: [src/commands/set-url.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/set-url.ts)_
+_See code: [src/commands/set-url.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/set-url.ts)_
 
 ## `opal ssh copyFrom`
 
@@ -461,7 +461,7 @@ EXAMPLES
   $ opal ssh:copyFrom --src instance/dir --dest my/dir --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/ssh/copyFrom.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/ssh/copyFrom.ts)_
+_See code: [src/commands/ssh/copyFrom.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/ssh/copyFrom.ts)_
 
 ## `opal ssh copyTo`
 
@@ -492,7 +492,7 @@ EXAMPLES
   $ opal ssh:copyTo --src my/dir --dest instance/dir --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/ssh/copyTo.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/ssh/copyTo.ts)_
+_See code: [src/commands/ssh/copyTo.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/ssh/copyTo.ts)_
 
 ## `opal ssh start`
 
@@ -519,7 +519,7 @@ EXAMPLES
   $ opal ssh:start --id 51f7176b-0464-4a6f-8369-e951e187b398
 ```
 
-_See code: [src/commands/ssh/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.72a6ae5/src/commands/ssh/start.ts)_
+_See code: [src/commands/ssh/start.ts](https://github.com/opalsecurity/opal-cli/blob/v3.1.1-beta.756584f/src/commands/ssh/start.ts)_
 
 ## `opal version`
 

package/lib/lib/requests.js

@@ -12,6 +12,7 @@ exports.submitFinalRequest = submitFinalRequest;
 const inquirer = require("inquirer");
 const graphql_1 = require("../graphql");
 inquirer.registerPrompt("autocomplete", require("inquirer-autocomplete-prompt"));
+const { AutoComplete } = require("enquirer");
 function createEmptyRequestMetadata() {
     // Initialize with empty defaults
     const requestDefaults = {
@@ -81,10 +82,11 @@ async function queryRequestableApps(cmd, client, input) {
             }
             const label = `${edge.node.displayName} (${type})`;
             return {
-                name: label,
+                message: label,
                 value: {
                     id: edge.node.id,
                     name: label,
+                    toString: () => label,
                 },
             };
         });
@@ -153,7 +155,7 @@ async function queryRequestableAssets(cmd, client, appId, input) {
                     const type = ((_e = item.resource) === null || _e === void 0 ? void 0 : _e.__typename) || ((_f = item.group) === null || _f === void 0 ? void 0 : _f.__typename);
                     const label = `${name} (${type})`;
                     return {
-                        name: label,
+                        message: label,
                         value: {
                             name: label,
                             id: id,
@@ -273,18 +275,18 @@ async function queryRequestDefaults(cmd, client, requestedResources, requestedGr
 }
 // Helper functions
 async function selectRequestableItems(cmd, client, requestMap) {
-    const { App } = await inquirer.prompt([
-        {
-            name: "App",
-            message: "Select an app:",
-            type: "autocomplete",
-            source: async (answers, input) => {
-                var _a;
-                return (_a = (await queryRequestableApps(cmd, client, input))) !== null && _a !== void 0 ? _a : [];
-            },
-            pageSize: 15,
+    const initialChoices = (await queryRequestableApps(cmd, client, "")) || [];
+    const appPrompt = new AutoComplete({
+        name: "App",
+        message: "Select an app:",
+        limit: 15,
+        choices: initialChoices,
+        async suggest(input) {
+            const filteredChoices = await queryRequestableApps(cmd, client, input || "");
+            return filteredChoices || initialChoices;
         },
-    ]);
+    });
+    const App = await appPrompt.run();
     // Set the app in the requestMap and call choose assets step
     if (!(App.id in requestMap)) {
         requestMap[App.id] = {
@@ -295,13 +297,16 @@ async function selectRequestableItems(cmd, client, requestMap) {
     await chooseAssets(cmd, client, App.id, requestMap);
 }
 async function chooseAssets(cmd, client, appId, requestMap) {
-    var _a;
-    const { Assets } = await inquirer.prompt({
+    const initialChoices = queryRequestableAssets(cmd, client, appId, "") || [];
+    const assetPrompt = new AutoComplete({
         name: "Assets",
-        type: "checkbox",
-        pageSize: 15,
-        message: "Select one or more items:",
-        choices: (_a = (await queryRequestableAssets(cmd, client, appId, undefined))) !== null && _a !== void 0 ? _a : [],
+        message: "Select one or more assets:",
+        limit: 15,
+        multiple: true,
+        async choices(input) {
+            const filteredChoices = await queryRequestableAssets(cmd, client, appId, input);
+            return filteredChoices || initialChoices;
+        },
         validate: (answer) => {
             if (answer.length < 1) {
                 return "You must select at least one item.";
@@ -309,10 +314,11 @@ async function chooseAssets(cmd, client, appId, requestMap) {
             return true;
         },
     });
+    const Assets = await assetPrompt.run();
     const entry = requestMap[appId];
     for (const asset of Assets) {
         if (entry === undefined) {
-            throw new Error(`App ${appId} not found in requestMap`);
+            throw new Error(`Error formatting app ${appId} in request`);
         }
         if (!(asset.id in entry.assets)) {
             entry.assets[asset.id] = {

package/lib/utils/displays.js

@@ -74,19 +74,23 @@ function displayRequestDetails(cmd, requestResp) {
             cmd.log(`Request Details ${chalk_1.default.cyan(requestResp.data.request.request.id)}`);
             cmd.log("━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━");
             const status = requestResp.data.request.request.status;
-            // If status is "PENDING" or "APPROVED", display it
-            // If status is "DENIED", display it in red
-            if (status === "PENDING") {
-                cmd.log(`${chalk_1.default.bold("Status:")} ${chalk_1.default.blueBright(status)}`);
-            }
-            else if (status === "APPROVED") {
-                cmd.log(`${chalk_1.default.bold("Status:")}  ${chalk_1.default.greenBright(status)}`);
-            }
-            else if (status === "DENIED") {
-                cmd.log(`${chalk_1.default.bold("Status:")}  ${chalk_1.default.redBright(status)}`);
-            }
-            else if (status === "CANCELED") {
-                cmd.log(`${chalk_1.default.bold("Status:")}  ${chalk_1.default.redBright(status)}`);
+            switch (status) {
+                case "PENDING": {
+                    cmd.log(`${chalk_1.default.bold("Status:")} ${chalk_1.default.blueBright(status)}`);
+                    break;
+                }
+                case "APPROVED": {
+                    cmd.log(`${chalk_1.default.bold("Status:")}  ${chalk_1.default.greenBright(status)}`);
+                    break;
+                }
+                case "DENIED": {
+                    cmd.log(`${chalk_1.default.bold("Status:")}  ${chalk_1.default.redBright(status)}`);
+                    break;
+                }
+                case "CANCELED": {
+                    cmd.log(`${chalk_1.default.bold("Status:")}  ${chalk_1.default.redBright(status)}`);
+                    break;
+                }
             }
             // Request users "Requested by: <requester> -> Requested for: <targetUser>"
             const requester = (_a = requestResp.data.request.request.requester) === null || _a === void 0 ? void 0 : _a.displayName;

package/oclif.manifest.json

@@ -388,14 +388,14 @@
         "get.js"
       ]
     },
-    "iam-roles:start": {
+    "kube-roles:start": {
       "aliases": [],
       "args": {},
-      "description": "Starts a session to assume an IAM role.",
+      "description": "Starts a session to assume a Kubernetes cluster IAM role.",
       "examples": [
-        "opal iam-roles:start",
-        "opal iam-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398",
-        "opal iam-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --profileName \"custom-profile\""
+        "opal kube-roles:start",
+        "opal kube-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398",
+        "opal kube-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId \"arn:aws:iam::712234975475:role/acme-eks-cluster-admin-role\""
       ],
       "flags": {
         "help": {
@@ -413,6 +413,14 @@
           "multiple": false,
           "type": "option"
         },
+        "accessLevelRemoteId": {
+          "char": "a",
+          "description": "The remote ID of the access level with which to access the resource.",
+          "name": "accessLevelRemoteId",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
         "sessionId": {
           "char": "s",
           "description": "The Opal ID of the session to connect to. Uses an existing session that was created via the web flow.",
@@ -427,18 +435,11 @@
           "name": "refresh",
           "allowNo": false,
           "type": "boolean"
-        },
-        "profileName": {
-          "description": "Uses a custom AWS profile name for the IAM role. Default value is the role's name.",
-          "name": "profileName",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "iam-roles:start",
+      "id": "kube-roles:start",
       "pluginAlias": "opal-security",
       "pluginName": "opal-security",
       "pluginType": "core",
@@ -448,18 +449,18 @@
       "relativePath": [
         "lib",
         "commands",
-        "iam-roles",
+        "kube-roles",
         "start.js"
       ]
     },
-    "kube-roles:start": {
+    "iam-roles:start": {
       "aliases": [],
       "args": {},
-      "description": "Starts a session to assume a Kubernetes cluster IAM role.",
+      "description": "Starts a session to assume an IAM role.",
       "examples": [
-        "opal kube-roles:start",
-        "opal kube-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398",
-        "opal kube-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --accessLevelRemoteId \"arn:aws:iam::712234975475:role/acme-eks-cluster-admin-role\""
+        "opal iam-roles:start",
+        "opal iam-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398",
+        "opal iam-roles:start --id 51f7176b-0464-4a6f-8369-e951e187b398 --profileName \"custom-profile\""
       ],
       "flags": {
         "help": {
@@ -477,14 +478,6 @@
           "multiple": false,
           "type": "option"
         },
-        "accessLevelRemoteId": {
-          "char": "a",
-          "description": "The remote ID of the access level with which to access the resource.",
-          "name": "accessLevelRemoteId",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
         "sessionId": {
           "char": "s",
           "description": "The Opal ID of the session to connect to. Uses an existing session that was created via the web flow.",
@@ -499,11 +492,18 @@
           "name": "refresh",
           "allowNo": false,
           "type": "boolean"
+        },
+        "profileName": {
+          "description": "Uses a custom AWS profile name for the IAM role. Default value is the role's name.",
+          "name": "profileName",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "kube-roles:start",
+      "id": "iam-roles:start",
       "pluginAlias": "opal-security",
       "pluginName": "opal-security",
       "pluginType": "core",
@@ -513,7 +513,7 @@
       "relativePath": [
         "lib",
         "commands",
-        "kube-roles",
+        "iam-roles",
         "start.js"
       ]
     },
@@ -971,5 +971,5 @@
       ]
     }
   },
-  "version": "3.1.1-beta.72a6ae5"
+  "version": "3.1.1-beta.756584f"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "opal-security",
   "description": "Opal allows you to centrally manage access to all of your sensitive systems.",
-  "version": "3.1.1-beta.72a6ae5",
+  "version": "3.1.1-beta.756584f",
   "author": "Stephen Cobbe",
   "bin": {
     "opal": "./bin/run"
@@ -16,6 +16,7 @@
     "argon2": "^0.40.1",
     "chalk": "^2.4.2",
     "cli-table3": "^0.6.5",
+    "enquirer": "^2.4.1",
     "graphql": "^15.5.0",
     "inquirer": "^8.2.6",
     "inquirer-autocomplete-prompt": "^2.0.1",