sf-plugin-permission-sets 0.0.0-dev.7 → 0.0.0-dev.70

package/lib/adapters/connection-org-client.js

@@ -0,0 +1,361 @@
+/** SObject + foreign-key field to set per kind when assigning. */
+const assignmentObjects = {
+    permissionSet: { sobject: 'PermissionSetAssignment', idField: 'PermissionSetId' },
+    permissionSetGroup: { sobject: 'PermissionSetAssignment', idField: 'PermissionSetGroupId' },
+    permissionSetLicense: { sobject: 'PermissionSetLicenseAssign', idField: 'PermissionSetLicenseId' },
+};
+/** The sObject Collections API caps each create/delete call at 200 records. */
+const collectionBatchSize = 200;
+/** Escape a value for safe inclusion in a SOQL string literal. */
+function escapeSoqlLiteral(value) {
+    return value.replace(/\\/g, '\\\\').replace(/'/g, "\\'");
+}
+/** Build a comma-separated, quoted IN list from the values. */
+function buildInList(values) {
+    return values.map((value) => `'${escapeSoqlLiteral(value)}'`).join(', ');
+}
+/** Full membership SOQL for the active, non-profile-owned assignments matching the filter. */
+function buildMembershipQuery(usernames, wantsPermissionSet, wantsGroup) {
+    const clauses = [
+        'Assignee.IsActive = true',
+        'PermissionSet.IsOwnedByProfile = false',
+    ];
+    if (usernames)
+        clauses.push(`Assignee.Username IN(${buildInList(usernames)})`);
+    if (!wantsGroup)
+        clauses.push('PermissionSetGroupId = null');
+    if (!wantsPermissionSet)
+        clauses.push('PermissionSetGroupId != null');
+    return `
+        SELECT
+            Id,
+            Assignee.Username,
+            PermissionSet.Name,
+            PermissionSetGroup.DeveloperName,
+            PermissionSetGroupId,
+            ExpirationDate
+        FROM PermissionSetAssignment
+        WHERE ${clauses.join(' AND ')}
+    `;
+}
+/** Full membership SOQL for the current assignments of the given permission set and group ids. */
+function buildCurrentMembershipQuery(permissionSetIds, groupIds) {
+    const clauses = [];
+    if (permissionSetIds.length > 0)
+        clauses.push(`PermissionSetId IN(${buildInList(permissionSetIds)})`);
+    if (groupIds.length > 0)
+        clauses.push(`PermissionSetGroupId IN(${buildInList(groupIds)})`);
+    return `
+        SELECT
+            Id,
+            Assignee.Username,
+            PermissionSet.Name,
+            PermissionSetGroup.DeveloperName,
+            PermissionSetGroupId,
+            ExpirationDate
+        FROM PermissionSetAssignment
+        WHERE ${clauses.join(' OR ')}
+    `;
+}
+/** Full license SOQL for the active assignments matching the filter. */
+function buildLicenseQuery(usernames) {
+    const clauses = ['Assignee.IsActive = true'];
+    if (usernames)
+        clauses.push(`Assignee.Username IN(${buildInList(usernames)})`);
+    return `
+        SELECT
+            Id,
+            Assignee.Username,
+            PermissionSetLicense.DeveloperName
+        FROM PermissionSetLicenseAssign
+        WHERE ${clauses.join(' AND ')}
+    `;
+}
+/** Full license SOQL for the current assignments of the given license ids. */
+function buildCurrentLicenseQuery(licenseIds) {
+    return `
+        SELECT
+            Id,
+            Assignee.Username,
+            PermissionSetLicense.DeveloperName
+        FROM PermissionSetLicenseAssign
+        WHERE PermissionSetLicenseId IN(${buildInList(licenseIds)})
+    `;
+}
+/** Full SOQL for the users with the given usernames. */
+function buildUserQuery(usernames) {
+    return `
+        SELECT
+            Id,
+            Username,
+            IsActive
+        FROM User
+        WHERE Username IN(${buildInList(usernames)})
+    `;
+}
+/** Full SOQL for the permission sets with the given names. */
+function buildPermissionSetQuery(names) {
+    return `
+        SELECT
+            Id,
+            Name
+        FROM PermissionSet
+        WHERE Name IN(${buildInList(names)})
+    `;
+}
+/** Full SOQL for the permission set groups with the given developer names. */
+function buildPermissionSetGroupQuery(names) {
+    return `
+        SELECT
+            Id,
+            DeveloperName
+        FROM PermissionSetGroup
+        WHERE DeveloperName IN(${buildInList(names)})
+    `;
+}
+/** Full SOQL for the permission set licenses with the given developer names. */
+function buildPermissionSetLicenseQuery(names) {
+    return `
+        SELECT
+            Id,
+            DeveloperName
+        FROM PermissionSetLicense
+        WHERE DeveloperName IN(${buildInList(names)})
+    `;
+}
+/** Split items into chunks of at most `size`. */
+function chunk(items, size) {
+    const chunks = [];
+    for (let index = 0; index < items.length; index += size) {
+        chunks.push(items.slice(index, index + size));
+    }
+    return chunks;
+}
+/** Turn a per-record DML result into a domain outcome, capturing the error message on failure. */
+function deriveOutcome(assignment, operation, result) {
+    const success = result?.success ?? false;
+    const message = result && !result.success ? result.errors.map((error) => error.message).join('; ') : undefined;
+    return {
+        assignee: assignment.assignee,
+        kind: assignment.kind,
+        target: assignment.target,
+        operation,
+        success,
+        message,
+    };
+}
+/** Group additions by sObject and chunk them for the Collections API, keeping each record's source. */
+function buildAdditionBatches(additions) {
+    const bySobject = new Map();
+    for (const addition of additions) {
+        const { sobject } = assignmentObjects[addition.kind];
+        const grouped = bySobject.get(sobject) ?? [];
+        grouped.push(addition);
+        bySobject.set(sobject, grouped);
+    }
+    const batches = [];
+    for (const [sobject, grouped] of bySobject) {
+        for (const batch of chunk(grouped, collectionBatchSize)) {
+            const records = batch.map((addition) => ({
+                AssigneeId: addition.assigneeId,
+                [assignmentObjects[addition.kind].idField]: addition.targetId,
+                ...(addition.expiration ? { ExpirationDate: addition.expiration } : {}),
+            }));
+            batches.push({ sobject, additions: batch, records });
+        }
+    }
+    return batches;
+}
+/** Group expiration updates by sObject and chunk them, building the Id + ExpirationDate records. */
+function buildUpdateBatches(updates) {
+    const bySobject = new Map();
+    for (const update of updates) {
+        const { sobject } = assignmentObjects[update.kind];
+        const grouped = bySobject.get(sobject) ?? [];
+        grouped.push(update);
+        bySobject.set(sobject, grouped);
+    }
+    const batches = [];
+    for (const [sobject, grouped] of bySobject) {
+        for (const batch of chunk(grouped, collectionBatchSize)) {
+            const records = batch.map((update) => ({
+                Id: update.recordId,
+                ExpirationDate: update.expiration ?? null,
+            }));
+            batches.push({ sobject, updates: batch, records });
+        }
+    }
+    return batches;
+}
+/** Group removals by sObject and chunk them for the Collections API. */
+function buildRemovalBatches(removals) {
+    const bySobject = new Map();
+    for (const removal of removals) {
+        const { sobject } = assignmentObjects[removal.kind];
+        const grouped = bySobject.get(sobject) ?? [];
+        grouped.push(removal);
+        bySobject.set(sobject, grouped);
+    }
+    const batches = [];
+    for (const [sobject, grouped] of bySobject) {
+        for (const batch of chunk(grouped, collectionBatchSize)) {
+            batches.push({ sobject, removals: batch });
+        }
+    }
+    return batches;
+}
+/** Classify a membership row: a group grant when it carries a group id, otherwise a plain permission set. */
+function classifyMembership(record) {
+    if (record.PermissionSetGroupId && record.PermissionSetGroup) {
+        return { kind: 'permissionSetGroup', target: record.PermissionSetGroup.DeveloperName };
+    }
+    return { kind: 'permissionSet', target: record.PermissionSet.Name };
+}
+/** Adapter backing OrgClient with a Salesforce Connection. autoFetchQuery pages past 2000 rows. */
+export class ConnectionOrgClient {
+    connection;
+    constructor(connection) {
+        this.connection = connection;
+    }
+    async findUsers(usernames) {
+        const records = await this.query(buildUserQuery(usernames));
+        return records.map((record) => ({ id: record.Id, username: record.Username, isActive: record.IsActive }));
+    }
+    async findPermissionSets(names) {
+        const records = await this.query(buildPermissionSetQuery(names));
+        return records.map((record) => ({ id: record.Id, name: record.Name }));
+    }
+    async findPermissionSetGroups(names) {
+        const records = await this.query(buildPermissionSetGroupQuery(names));
+        return records.map((record) => ({ id: record.Id, name: record.DeveloperName }));
+    }
+    async findPermissionSetLicenses(names) {
+        const records = await this.query(buildPermissionSetLicenseQuery(names));
+        return records.map((record) => ({ id: record.Id, name: record.DeveloperName }));
+    }
+    async listAssignments(filter) {
+        const kinds = filter?.kinds;
+        const wantsPermissionSet = !kinds || kinds.includes('permissionSet');
+        const wantsGroup = !kinds || kinds.includes('permissionSetGroup');
+        const wantsLicense = !kinds || kinds.includes('permissionSetLicense');
+        const tasks = [];
+        if (wantsPermissionSet || wantsGroup) {
+            tasks.push(this.listMemberships(filter?.usernames, wantsPermissionSet, wantsGroup));
+        }
+        if (wantsLicense) {
+            tasks.push(this.listLicenses(filter?.usernames));
+        }
+        const results = await Promise.all(tasks);
+        return results.flat();
+    }
+    async listMemberships(usernames, wantsPermissionSet, wantsGroup) {
+        const soql = buildMembershipQuery(usernames, wantsPermissionSet, wantsGroup);
+        const records = await this.query(soql);
+        return records.map((record) => {
+            const { kind, target } = classifyMembership(record);
+            return {
+                kind,
+                target,
+                assignee: record.Assignee.Username,
+                expiration: record.ExpirationDate,
+            };
+        });
+    }
+    async listLicenses(usernames) {
+        const soql = buildLicenseQuery(usernames);
+        const records = await this.query(soql);
+        return records.map((record) => ({
+            assignee: record.Assignee.Username,
+            kind: 'permissionSetLicense',
+            target: record.PermissionSetLicense.DeveloperName,
+            expiration: null,
+        }));
+    }
+    async listCurrentAssignments(targets) {
+        const permissionSetIds = targets.filter((ref) => ref.kind === 'permissionSet').map((ref) => ref.id);
+        const groupIds = targets.filter((ref) => ref.kind === 'permissionSetGroup').map((ref) => ref.id);
+        const licenseIds = targets.filter((ref) => ref.kind === 'permissionSetLicense').map((ref) => ref.id);
+        const tasks = [];
+        if (permissionSetIds.length > 0 || groupIds.length > 0) {
+            const soql = buildCurrentMembershipQuery(permissionSetIds, groupIds);
+            tasks.push(this.listMembershipAssignments(soql));
+        }
+        if (licenseIds.length > 0) {
+            const soql = buildCurrentLicenseQuery(licenseIds);
+            tasks.push(this.listLicenseAssignments(soql));
+        }
+        const results = await Promise.all(tasks);
+        return results.flat();
+    }
+    async listMembershipAssignments(soql) {
+        const records = await this.query(soql);
+        return records.map((record) => {
+            const { kind, target } = classifyMembership(record);
+            return {
+                kind,
+                target,
+                recordId: record.Id,
+                assignee: record.Assignee.Username,
+                expiration: record.ExpirationDate,
+            };
+        });
+    }
+    async listLicenseAssignments(soql) {
+        const records = await this.query(soql);
+        return records.map((record) => ({
+            recordId: record.Id,
+            assignee: record.Assignee.Username,
+            kind: 'permissionSetLicense',
+            target: record.PermissionSetLicense.DeveloperName,
+            expiration: null,
+        }));
+    }
+    async addAssignments(additions) {
+        const batches = buildAdditionBatches(additions);
+        const settled = await Promise.all(batches.map(async (batch) => {
+            const results = await this.connection.create(batch.sobject, batch.records, { allOrNone: false });
+            return { batch, results };
+        }));
+        const outcomes = [];
+        for (const { batch, results } of settled) {
+            batch.additions.forEach((addition, index) => {
+                outcomes.push(deriveOutcome(addition, 'add', results[index]));
+            });
+        }
+        return outcomes;
+    }
+    async updateAssignments(updates) {
+        const batches = buildUpdateBatches(updates);
+        const settled = await Promise.all(batches.map(async (batch) => {
+            const results = await this.connection.update(batch.sobject, batch.records, { allOrNone: false });
+            return { batch, results };
+        }));
+        const outcomes = [];
+        for (const { batch, results } of settled) {
+            batch.updates.forEach((update, index) => {
+                outcomes.push(deriveOutcome(update, 'update', results[index]));
+            });
+        }
+        return outcomes;
+    }
+    async removeAssignments(removals) {
+        const batches = buildRemovalBatches(removals);
+        const settled = await Promise.all(batches.map(async (batch) => {
+            const recordIds = batch.removals.map((removal) => removal.recordId);
+            const results = await this.connection.destroy(batch.sobject, recordIds, { allOrNone: false });
+            return { batch, results };
+        }));
+        const outcomes = [];
+        for (const { batch, results } of settled) {
+            batch.removals.forEach((removal, index) => {
+                outcomes.push(deriveOutcome(removal, 'remove', results[index]));
+            });
+        }
+        return outcomes;
+    }
+    async query(soql) {
+        const result = await this.connection.autoFetchQuery(soql);
+        return result.records;
+    }
+}
+//# sourceMappingURL=connection-org-client.js.map

package/lib/adapters/connection-org-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-org-client.js","sourceRoot":"","sources":["../../src/adapters/connection-org-client.ts"],"names":[],"mappings":"AAqCA,kEAAkE;AAClE,MAAM,iBAAiB,GAAmC;IACtD,aAAa,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,OAAO,EAAE,iBAAiB,EAAE;IACjF,kBAAkB,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,OAAO,EAAE,sBAAsB,EAAE;IAC3F,oBAAoB,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,OAAO,EAAE,wBAAwB,EAAE;CACrG,CAAC;AAEF,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,kEAAkE;AAClE,SAAS,iBAAiB,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,+DAA+D;AAC/D,SAAS,WAAW,CAAC,MAAgB;IACjC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC;AAED,8FAA8F;AAC9F,SAAS,oBAAoB,CAAC,SAA+B,EAAE,kBAA2B,EAAE,UAAmB;IAC3G,MAAM,OAAO,GAAG;QACZ,0BAA0B;QAC1B,wCAAwC;KAC3C,CAAC;IACF,IAAI,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/E,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7D,IAAI,CAAC,kBAAkB;QAAE,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAEtE,OAAO;;;;;;;;;gBASK,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;KAChC,CAAC;AACN,CAAC;AAED,kGAAkG;AAClG,SAAS,2BAA2B,CAAC,gBAA0B,EAAE,QAAkB;IAC/E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB,WAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE3F,OAAO;;;;;;;;;gBASK,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;KAC/B,CAAC;AACN,CAAC;AAED,wEAAwE;AACxE,SAAS,iBAAiB,CAAC,SAA+B;IACtD,MAAM,OAAO,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC7C,IAAI,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAE/E,OAAO;;;;;;gBAMK,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;KAChC,CAAC;AACN,CAAC;AAED,8EAA8E;AAC9E,SAAS,wBAAwB,CAAC,UAAoB;IAClD,OAAO;;;;;;0CAM+B,WAAW,CAAC,UAAU,CAAC;KAC5D,CAAC;AACN,CAAC;AAED,wDAAwD;AACxD,SAAS,cAAc,CAAC,SAAmB;IACvC,OAAO;;;;;;4BAMiB,WAAW,CAAC,SAAS,CAAC;KAC7C,CAAC;AACN,CAAC;AAED,8DAA8D;AAC9D,SAAS,uBAAuB,CAAC,KAAe;IAC5C,OAAO;;;;;wBAKa,WAAW,CAAC,KAAK,CAAC;KACrC,CAAC;AACN,CAAC;AAED,8EAA8E;AAC9E,SAAS,4BAA4B,CAAC,KAAe;IACjD,OAAO;;;;;iCAKsB,WAAW,CAAC,KAAK,CAAC;KAC9C,CAAC;AACN,CAAC;AAED,gFAAgF;AAChF,SAAS,8BAA8B,CAAC,KAAe;IACnD,OAAO;;;;;iCAKsB,WAAW,CAAC,KAAK,CAAC;KAC9C,CAAC;AACN,CAAC;AAGD,iDAAiD;AACjD,SAAS,KAAK,CAAI,KAAU,EAAE,IAAY;IACtC,MAAM,MAAM,GAAU,EAAE,CAAC;IACzB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,kGAAkG;AAClG,SAAS,aAAa,CAClB,UAA4D,EAC5D,SAAsC,EACtC,MAA6B;IAE7B,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE/G,OAAO;QACH,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,SAAS;QACT,OAAO;QACP,OAAO;KACV,CAAC;AACN,CAAC;AAQD,uGAAuG;AACvG,SAAS,oBAAoB,CACzB,SAA6B;IAE7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8B,CAAC;IACxD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAAoF,EAAE,CAAC;IACpG,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,QAAQ;gBAC7D,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1E,CAAC,CAAC,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,oGAAoG;AACpG,SAAS,kBAAkB,CACvB,OAA2B;IAE3B,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8B,CAAC;IACxD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAAqF,EAAE,CAAC;IACrG,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,EAAE,CAAC;YACtD,MAAM,OAAO,GAAmB,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACnD,EAAE,EAAE,MAAM,CAAC,QAAQ;gBACnB,cAAc,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;aAC5C,CAAC,CAAC,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,wEAAwE;AACxE,SAAS,mBAAmB,CAAC,QAA4B;IACrD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8B,CAAC;IACxD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAA6D,EAAE,CAAC;IAC7E,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,6GAA6G;AAC7G,SAAS,kBAAkB,CAAC,MAAwB;IAChD,IAAI,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;IAC3F,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;AACxE,CAAC;AAED,mGAAmG;AACnG,MAAM,OAAO,mBAAmB;IACQ;IAApC,YAAoC,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAI,CAAC;IAExD,KAAK,CAAC,SAAS,CAAC,SAAmB;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAsD,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QAEjH,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9G,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,KAAe;QAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAA+B,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;QAE/F,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,KAAe;QAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAwC,4BAA4B,CAAC,KAAK,CAAC,CAAC,CAAC;QAE7G,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;IAEM,KAAK,CAAC,yBAAyB,CAAC,KAAe;QAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAwC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC;QAE/G,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,MAAyB;QAClD,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC;QAC5B,MAAM,kBAAkB,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;QAEtE,MAAM,KAAK,GAAwC,EAAE,CAAC;QACtD,IAAI,kBAAkB,IAAI,UAAU,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,eAAe,CACzB,SAA+B,EAC/B,kBAA2B,EAC3B,UAAmB;QAEnB,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAmB,IAAI,CAAC,CAAC;QAEzD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAEpD,OAAO;gBACH,IAAI;gBACJ,MAAM;gBACN,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;gBAClC,UAAU,EAAE,MAAM,CAAC,cAAc;aACpC,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,SAA+B;QACtD,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAgB,IAAI,CAAC,CAAC;QAEtD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;YAClC,IAAI,EAAE,sBAA+B;YACrC,MAAM,EAAE,MAAM,CAAC,oBAAoB,CAAC,aAAa;YACjD,UAAU,EAAE,IAAI;SACnB,CAAC,CAAC,CAAC;IACR,CAAC;IAEM,KAAK,CAAC,sBAAsB,CAAC,OAAoB;QACpD,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjG,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAErG,MAAM,KAAK,GAAuC,EAAE,CAAC;QAErD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,2BAA2B,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;YACrE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,IAAY;QAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAmB,IAAI,CAAC,CAAC;QACzD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAEpD,OAAO;gBACH,IAAI;gBACJ,MAAM;gBACN,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;gBAClC,UAAU,EAAE,MAAM,CAAC,cAAc;aACpC,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,IAAY;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAgB,IAAI,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC5B,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;YAClC,IAAI,EAAE,sBAA+B;YACrC,MAAM,EAAE,MAAM,CAAC,oBAAoB,CAAC,aAAa;YACjD,UAAU,EAAE,IAAI;SACnB,CAAC,CAAC,CAAC;IACR,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,SAA6B;QACrD,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACjG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC9B,CAAC,CAAC,CACL,CAAC;QAEF,MAAM,QAAQ,GAAwB,EAAE,CAAC;QACzC,KAAK,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;YACvC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;gBACxC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,OAA2B;QACtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACjG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC9B,CAAC,CAAC,CACL,CAAC;QAEF,MAAM,QAAQ,GAAwB,EAAE,CAAC;QACzC,KAAK,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;YACvC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;gBACpC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,QAA4B;QACvD,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACxB,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9F,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC9B,CAAC,CAAC,CACL,CAAC;QAEF,MAAM,QAAQ,GAAwB,EAAE,CAAC;QACzC,KAAK,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;YACvC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;gBACtC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,KAAK,CAAI,IAAY;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1D,OAAO,MAAM,CAAC,OAAyB,CAAC;IAC5C,CAAC;CACJ"}

package/lib/adapters/index.d.ts

@@ -0,0 +1,2 @@
+export { ConnectionOrgClient } from './connection-org-client.js';
+//# sourceMappingURL=index.d.ts.map

package/lib/adapters/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC"}

package/lib/adapters/index.js

@@ -0,0 +1,2 @@
+export { ConnectionOrgClient } from './connection-org-client.js';
+//# sourceMappingURL=index.js.map

package/lib/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC"}

package/lib/commands/ps/apply.d.ts

@@ -0,0 +1,41 @@
+import { SfCommand } from '@salesforce/sf-plugins-core';
+export type PsApplyResult = {
+    status: string;
+    toAdd: number;
+    toUpdate: number;
+    toRemove: number;
+    added: number;
+    updated: number;
+    removed: number;
+    failures: number;
+};
+export default class Apply extends SfCommand<PsApplyResult> {
+    static readonly summary: string;
+    static readonly description: string;
+    static readonly examples: string[];
+    static readonly flags: {
+        'target-org': import("@oclif/core/interfaces").OptionFlag<import("@salesforce/core").Org, import("@oclif/core/interfaces").CustomOptions>;
+        file: import("@oclif/core/interfaces").OptionFlag<string[], import("@oclif/core/interfaces").CustomOptions>;
+        mode: import("@oclif/core/interfaces").OptionFlag<"additive" | "destructive" | "sync", import("@oclif/core/interfaces").CustomOptions>;
+        'max-deletes': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        'dry-run': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'show-unchanged': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'no-prompt': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<PsApplyResult>;
+    /** Log findings, print the diff body, and report the outcome. Shared by both sources. */
+    private report;
+    /** Report the outcome of a completed (non-invalid) apply, setting the exit code as needed. */
+    private reportOutcome;
+    private reportDrift;
+    private logSummaryDryRun;
+    private logSummaryDeclined;
+    private logSummaryApplied;
+    private logFailureLine;
+    private logDriftNote;
+    private confirmDelete;
+    private errorInvalid;
+    private errorMaxDeletes;
+    private errorFailed;
+}
+//# sourceMappingURL=apply.d.ts.map

package/lib/commands/ps/apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/commands/ps/apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAS,MAAM,6BAA6B,CAAC;AAU/D,MAAM,MAAM,aAAa,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,SAAS,CAAC,aAAa,CAAC;IACvD,gBAAuB,OAAO,SAAkC;IAChE,gBAAuB,WAAW,SAAsC;IACxE,gBAAuB,QAAQ,WAAoC;IAEnE,gBAAuB,KAAK;;;;;;;;MA2B1B;IAEW,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC;IAoB1C,yFAAyF;IACzF,OAAO,CAAC,MAAM;IA2Cd,8FAA8F;IAC9F,OAAO,CAAC,aAAa;IAqCrB,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,WAAW;CAGtB"}

package/lib/commands/ps/apply.js

@@ -0,0 +1,178 @@
+import { SfCommand, Flags } from '@salesforce/sf-plugins-core';
+import { Messages } from '@salesforce/core';
+import { ConnectionOrgClient } from '../../adapters/index.js';
+import { ApplyService } from '../../services/index.js';
+import { formatDiff, formatFindings } from '../../core/index.js';
+Messages.importMessagesDirectoryFromMetaUrl(import.meta.url);
+const messages = Messages.loadMessages('sf-plugin-permission-sets', 'ps.apply');
+export default class Apply extends SfCommand {
+    static summary = messages.getMessage('summary');
+    static description = messages.getMessage('description');
+    static examples = messages.getMessages('examples');
+    static flags = {
+        'target-org': Flags.requiredOrg(),
+        file: Flags.string({
+            char: 'f',
+            summary: messages.getMessage('flags.file.summary'),
+            required: true,
+            multiple: true,
+        }),
+        mode: Flags.option({
+            summary: messages.getMessage('flags.mode.summary'),
+            options: ['additive', 'destructive', 'sync'],
+            default: 'additive',
+        })(),
+        'max-deletes': Flags.integer({
+            summary: messages.getMessage('flags.max-deletes.summary'),
+            default: 50,
+            min: 0,
+        }),
+        'dry-run': Flags.boolean({
+            summary: messages.getMessage('flags.dry-run.summary'),
+        }),
+        'show-unchanged': Flags.boolean({
+            summary: messages.getMessage('flags.show-unchanged.summary'),
+        }),
+        'no-prompt': Flags.boolean({
+            summary: messages.getMessage('flags.no-prompt.summary'),
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(Apply);
+        const targetOrg = flags['target-org'];
+        const connection = targetOrg.getConnection();
+        const orgClient = new ConnectionOrgClient(connection);
+        const confirmDeletions = async (count) => {
+            if (flags['no-prompt'])
+                return true;
+            if (this.jsonEnabled())
+                throw messages.createError('error.promptInJson');
+            return this.confirmDelete(count);
+        };
+        const service = new ApplyService(orgClient, confirmDeletions);
+        const result = await service.run(flags.file, {
+            mode: flags.mode,
+            maxDeletes: flags['max-deletes'],
+            dryRun: flags['dry-run'],
+        });
+        return this.report(result, flags.mode, flags['max-deletes'], flags['show-unchanged']);
+    }
+    /** Log findings, print the diff body, and report the outcome. Shared by both sources. */
+    report(result, mode, maxDeletes, showUnchanged) {
+        for (const line of formatFindings(result.findings)) {
+            this.log(line);
+        }
+        const added = result.outcomes.filter((outcome) => outcome.operation === 'add' && outcome.success).length;
+        const updated = result.outcomes.filter((outcome) => outcome.operation === 'update' && outcome.success).length;
+        const removed = result.outcomes.filter((outcome) => outcome.operation === 'remove' && outcome.success).length;
+        const failures = result.outcomes.filter((outcome) => !outcome.success);
+        const summary = {
+            status: result.status,
+            toAdd: result.diff.toAdd.length,
+            toUpdate: result.diff.toUpdate.length,
+            toRemove: result.diff.toRemove.length,
+            added,
+            updated,
+            removed,
+            failures: failures.length,
+        };
+        if (result.status === 'invalid') {
+            process.exitCode = 1;
+            if (!this.jsonEnabled())
+                this.errorInvalid();
+            return summary;
+        }
+        this.log('');
+        for (const line of formatDiff(result.diff, { mode, showUnchanged })) {
+            this.log(line);
+        }
+        this.log('');
+        this.reportOutcome(result, summary, mode, maxDeletes);
+        return summary;
+    }
+    /** Report the outcome of a completed (non-invalid) apply, setting the exit code as needed. */
+    reportOutcome(result, summary, mode, maxDeletes) {
+        if (result.status === 'max-deletes-exceeded') {
+            process.exitCode = 1;
+            if (!this.jsonEnabled())
+                this.errorMaxDeletes(result.diff.toRemove.length, maxDeletes);
+            return;
+        }
+        this.reportDrift(result.drift, mode);
+        if (result.status === 'dry-run') {
+            // Report what this mode would actually do, matching the mode-scoped body: the full
+            // diff minus whatever the mode leaves as drift. Otherwise the counts contradict it.
+            this.logSummaryDryRun(summary.toAdd - result.drift.adds, summary.toUpdate - result.drift.updates, summary.toRemove - result.drift.removes);
+            return;
+        }
+        if (result.status === 'declined') {
+            this.logSummaryDeclined();
+            return;
+        }
+        this.logSummaryApplied(summary.added, summary.updated, summary.removed);
+        const failures = result.outcomes.filter((outcome) => !outcome.success);
+        for (const failure of failures) {
+            this.logFailureLine(failure.operation, failure.assignee, failure.target, failure.message ?? '');
+        }
+        if (result.failed) {
+            process.exitCode = 1;
+            if (!this.jsonEnabled())
+                this.errorFailed();
+        }
+    }
+    reportDrift(drift, mode) {
+        if (drift.adds > 0)
+            this.logDriftNote(drift.adds, mode);
+        if (drift.updates > 0)
+            this.logDriftNote(drift.updates, mode);
+        if (drift.removes > 0)
+            this.logDriftNote(drift.removes, mode);
+    }
+    logSummaryDryRun(toAdd, toUpdate, toRemove) {
+        this.log(messages.getMessage('summary.dryRun', [
+            toAdd,
+            toUpdate,
+            toRemove,
+        ]));
+    }
+    logSummaryDeclined() {
+        this.log(messages.getMessage('summary.declined'));
+    }
+    logSummaryApplied(added, updated, removed) {
+        this.log(messages.getMessage('summary.applied', [
+            added,
+            updated,
+            removed,
+        ]));
+    }
+    logFailureLine(operation, assignee, target, message) {
+        this.log(messages.getMessage('failure.line', [
+            operation,
+            assignee,
+            target,
+            message,
+        ]));
+    }
+    logDriftNote(count, mode) {
+        this.log(messages.getMessage('drift.note', [
+            count,
+            mode,
+        ]));
+    }
+    confirmDelete(count) {
+        return this.confirm({ message: messages.getMessage('confirm.delete', [count]) });
+    }
+    errorInvalid() {
+        this.error(messages.getMessage('error.invalid'), { exit: 1 });
+    }
+    errorMaxDeletes(removeCount, maxDeletes) {
+        this.error(messages.getMessage('error.maxDeletes', [
+            removeCount,
+            maxDeletes,
+        ]), { exit: 1 });
+    }
+    errorFailed() {
+        this.error(messages.getMessage('error.failed'), { exit: 1 });
+    }
+}
+//# sourceMappingURL=apply.js.map

package/lib/commands/ps/apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../../src/commands/ps/apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAiC,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,cAAc,EAAiB,MAAM,qBAAqB,CAAC;AAEhF,QAAQ,CAAC,kCAAkC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,2BAA2B,EAAE,UAAU,CAAC,CAAC;AAahF,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,SAAwB;IAChD,MAAM,CAAU,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,CAAU,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,CAAU,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAE5D,MAAM,CAAU,KAAK,GAAG;QAC3B,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE;QACjC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACf,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC;YAClD,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAI;SACjB,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACf,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC;YAClD,OAAO,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAU;YACrD,OAAO,EAAE,UAAU;SACtB,CAAC,EAAE;QACJ,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC;YACzB,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,2BAA2B,CAAC;YACzD,OAAO,EAAE,EAAE;YACX,GAAG,EAAE,CAAC;SACT,CAAC;QACF,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;YACrB,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,uBAAuB,CAAC;SACxD,CAAC;QACF,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC;YAC5B,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,8BAA8B,CAAC;SAC/D,CAAC;QACF,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC;YACvB,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,yBAAyB,CAAC;SAC1D,CAAC;KACL,CAAC;IAEK,KAAK,CAAC,GAAG;QACZ,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,gBAAgB,GAAqB,KAAK,EAAE,KAAK,EAAE,EAAE;YACvD,IAAI,KAAK,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,MAAM,QAAQ,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;YACzC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC;YAChC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;SAC3B,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,yFAAyF;IACjF,MAAM,CACV,MAAmB,EACnB,IAAmB,EACnB,UAAkB,EAClB,aAAsB;QAEtB,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACzG,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC9G,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC9G,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEvE,MAAM,OAAO,GAAkB;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;YAC/B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;YACrC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;YACrC,KAAK;YACL,OAAO;YACP,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,MAAM;SAC5B,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7C,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEb,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAEtD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,8FAA8F;IACtF,aAAa,CAAC,MAAmB,EAAE,OAAsB,EAAE,IAAY,EAAE,UAAkB;QAC/F,IAAI,MAAM,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;YAC3C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACvF,OAAO;QACX,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAErC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,mFAAmF;YACnF,oFAAoF;YACpF,IAAI,CAAC,gBAAgB,CACjB,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EACjC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EACvC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAC1C,CAAC;YACF,OAAO;QACX,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1B,OAAO;QACX,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACpG,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAChD,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,KAAyD,EAAE,IAAY;QACvF,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9D,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAEO,gBAAgB,CAAC,KAAa,EAAE,QAAgB,EAAE,QAAgB;QACtE,IAAI,CAAC,GAAG,CACJ,QAAQ,CAAC,UAAU,CAAC,gBAAgB,EAAE;YAClC,KAAK;YACL,QAAQ;YACR,QAAQ;SACX,CAAC,CACL,CAAC;IACN,CAAC;IAEO,kBAAkB;QACtB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,iBAAiB,CAAC,KAAa,EAAE,OAAe,EAAE,OAAe;QACrE,IAAI,CAAC,GAAG,CACJ,QAAQ,CAAC,UAAU,CAAC,iBAAiB,EAAE;YACnC,KAAK;YACL,OAAO;YACP,OAAO;SACV,CAAC,CACL,CAAC;IACN,CAAC;IAEO,cAAc,CAAC,SAAiB,EAAE,QAAgB,EAAE,MAAc,EAAE,OAAe;QACvF,IAAI,CAAC,GAAG,CACJ,QAAQ,CAAC,UAAU,CAAC,cAAc,EAAE;YAChC,SAAS;YACT,QAAQ;YACR,MAAM;YACN,OAAO;SACV,CAAC,CACL,CAAC;IACN,CAAC;IAEO,YAAY,CAAC,KAAa,EAAE,IAAY;QAC5C,IAAI,CAAC,GAAG,CACJ,QAAQ,CAAC,UAAU,CAAC,YAAY,EAAE;YAC9B,KAAK;YACL,IAAI;SACP,CAAC,CACL,CAAC;IACN,CAAC;IAEO,aAAa,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IAEO,YAAY;QAChB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IAEO,eAAe,CAAC,WAAmB,EAAE,UAAkB;QAC3D,IAAI,CAAC,KAAK,CACN,QAAQ,CAAC,UAAU,CAAC,kBAAkB,EAAE;YACpC,WAAW;YACX,UAAU;SACb,CAAC,EACF,EAAE,IAAI,EAAE,CAAC,EAAE,CACd,CAAC;IACN,CAAC;IAEO,WAAW;QACf,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC"}

package/lib/commands/ps/check.d.ts

@@ -0,0 +1,21 @@
+import { SfCommand } from '@salesforce/sf-plugins-core';
+import { Finding } from '../../core/index.js';
+export type PsCheckResult = {
+    files: number;
+    users: number;
+    assignments: number;
+    findings: Finding[];
+};
+export default class Check extends SfCommand<PsCheckResult> {
+    static readonly summary: string;
+    static readonly description: string;
+    static readonly examples: string[];
+    static readonly flags: {
+        file: import("@oclif/core/interfaces").OptionFlag<string[], import("@oclif/core/interfaces").CustomOptions>;
+        strict: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<PsCheckResult>;
+    private logSummaryCounts;
+    private errorFailed;
+}
+//# sourceMappingURL=check.d.ts.map

package/lib/commands/ps/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../../src/commands/ps/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAS,MAAM,6BAA6B,CAAC;AAI/D,OAAO,EAAkB,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAK9D,MAAM,MAAM,aAAa,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACvB,CAAC;AAEF,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,SAAS,CAAC,aAAa,CAAC;IACvD,gBAAuB,OAAO,SAAkC;IAChE,gBAAuB,WAAW,SAAsC;IACxE,gBAAuB,QAAQ,WAAoC;IAEnE,gBAAuB,KAAK;;;MAU1B;IAEW,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC;IA8B1C,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,WAAW;CAGtB"}