viza 1.5.45 → 1.5.47

package/dist/src/commands/aws/rolesanywhere/bootstrap/bootstrap.js

@@ -38,9 +38,7 @@ export async function bootstrapAwsRolesAnywhereCommand(options) {
         flowGates: {
             secrets: true,
         },
-        payload: {
-            allow_rebootstrap: options.rebootstrap === true
-        }
+        payload: {}
     }, {
         status: options.status === true,
         log: "show",

package/dist/src/commands/aws/rolesanywhere/bootstrap/register.js

@@ -6,7 +6,6 @@ export function registerAwsRolesAnywhereBootstrap(program) {
         .description("Bootstrap AWS RolesAnywhere infrastructure")
         .option("--prod", "Use production environment")
         .option("--dev", "Use development environment")
-        .option("--rebootstrap", "Re-bootstrap RolesAnywhere (dangerous: reset existing trust chain)")
         .action(async (_opts, command) => {
         const fullOpts = getResolvedOptions(command);
         await bootstrapAwsRolesAnywhereCommand(fullOpts);

package/dist/src/commands/aws/rolesanywhere/rebootstrap/rebootstrap.js

@@ -0,0 +1,52 @@
+import { resolveEnv } from "../../../../context/env.js";
+import { resolveHubIntent } from "../../../../context/hubIntent.js";
+import { dispatchIntentAndWait } from "../../../../core/dispatch.js";
+/**
+ * Target teams for `viza aws rolesanywhere bootstrap`.
+ * CLI-only fail-fast UX constraint.
+ * NOT a policy and MUST NOT be sent to gateway.
+ */
+const TARGET_TEAMS = {
+    "dev": [
+        "viza-admin",
+        "viza-super"
+    ],
+    "prod": [
+        "viza-admin",
+        "viza-super"
+    ]
+};
+/**
+ * viza aws rolesanywhere bootstrap
+ *
+ * Flow:
+ * 1) Resolve env
+ * 2) Resolve hub intent
+ * 3) Derive allowed teams (CLI UX only)
+ * 4) Dispatch frozen intent
+ */
+export async function rebootstrapAwsRolesAnywhereCommand(options) {
+    // 1) Resolve environment
+    const env = resolveEnv(options);
+    const intent = resolveHubIntent(env);
+    // 2) Resolve allowed teams (no status mode for bootstrap)
+    const allowedTeams = TARGET_TEAMS[env];
+    // 3) Dispatch intent (freeze)
+    await dispatchIntentAndWait({
+        intent,
+        commandType: "aws.rolesanywhere.rebootstrap",
+        infraKey: "aws",
+        targetEnv: env,
+        allowedTeams,
+        // Canonical CLI contract (explicit, non-magical)
+        selfHosted: options.selfHosted === true,
+        keepLog: options.removeLog !== true,
+        flowGates: {
+            secrets: true,
+        },
+        payload: {}
+    }, {
+        status: options.status === true,
+        log: "show",
+    });
+}

package/dist/src/commands/aws/rolesanywhere/rebootstrap/register.js

@@ -0,0 +1,13 @@
+import { rebootstrapAwsRolesAnywhereCommand } from "./rebootstrap.js";
+import { getResolvedOptions } from "../../../../cli/resolveOptions.js";
+export function registerAwsRolesAnywhereRebootstrap(program) {
+    program
+        .command("rebootstrap")
+        .description("Re-bootstrap AWS RolesAnywhere infrastructure")
+        .option("--prod", "Use production environment")
+        .option("--dev", "Use development environment")
+        .action(async (_opts, command) => {
+        const fullOpts = getResolvedOptions(command);
+        await rebootstrapAwsRolesAnywhereCommand(fullOpts);
+    });
+}

package/dist/src/commands/aws/rolesanywhere/register.js

@@ -1,12 +1,14 @@
 import { registerAwsRolesAnywhereBootstrap } from "./bootstrap/register.js";
 import { registerAwsRolesAnywhereRotate } from "./rotate/register.js";
 import { registerAwsRolesAnywhereRollback } from "./rollback/register.js";
+import { registerAwsRolesAnywhereRebootstrap } from "./rebootstrap/register.js";
 export function registerAwsRolesAnywhereCommand(program) {
     const aws = program.command("aws").description("AWS related commands");
     const rolesanywhere = aws
         .command("rolesanywhere")
         .description("AWS RolesAnywhere operations");
     registerAwsRolesAnywhereBootstrap(rolesanywhere);
+    registerAwsRolesAnywhereRebootstrap(rolesanywhere);
     registerAwsRolesAnywhereRotate(rolesanywhere);
     registerAwsRolesAnywhereRollback(rolesanywhere);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "viza",
-  "version": "1.5.45",
+  "version": "1.5.47",
   "type": "module",
   "description": "Viza unified command line interface",
   "bin": {