heddle-client 0.3.1

Heddle hosted-backend client: auth, support, presence, the gRPC client wrappers, and the global credential store.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

//! `heddle support` — customer-issued temporary admin grants for Heddle
//! staff. Mirrors the `GrantSupportAccess` / `ListSupportAccessGrants` /
//! `RevokeSupportAccess` RPCs on `HostedUserService`.

use clap::{Args, Subcommand};

#[derive(Clone, Debug, Subcommand)]
pub enum SupportCommands {
    /// Grant a Heddle staff member temporary admin on a namespace or
    /// repository. Reason and TTL are required; the server enforces a
    /// hard cap of 7 days.
    Grant(SupportGrantArgs),
    /// List active (or all) support-access grants on a namespace/repo.
    /// Caller must hold Admin on the target.
    List(SupportListArgs),
    /// Revoke an active support-access grant by id.
    Revoke(SupportRevokeArgs),
}

#[derive(Clone, Debug, Args)]
pub struct SupportGrantArgs {
    /// The Heddle staff email being granted access.
    pub operator_email: String,
    /// Namespace path, e.g. `org/acme`. Mutually exclusive with --repo.
    #[arg(long, conflicts_with = "repo")]
    pub namespace: Option<String>,
    /// Repository path, e.g. `org/acme/heddle`. Mutually exclusive with
    /// --namespace.
    #[arg(long, conflicts_with = "namespace")]
    pub repo: Option<String>,
    /// Time-to-live, e.g. `2h`, `24h`, `4d`. Hard-capped at 7d server-side.
    #[arg(long, default_value = "24h")]
    pub ttl: String,
    /// Free-form reason, surfaced in the audit listing. Required.
    #[arg(long)]
    pub reason: String,
    /// Remote that maps to the hosted server (default: `origin`).
    #[arg(long, default_value = "origin")]
    pub remote: String,
}

#[derive(Clone, Debug, Args)]
pub struct SupportListArgs {
    /// Namespace path. Mutually exclusive with --repo.
    #[arg(long, conflicts_with = "repo")]
    pub namespace: Option<String>,
    /// Repository path. Mutually exclusive with --namespace.
    #[arg(long, conflicts_with = "namespace")]
    pub repo: Option<String>,
    /// Include revoked + expired entries. Defaults to active-only.
    #[arg(long)]
    pub include_inactive: bool,
    /// Remote that maps to the hosted server (default: `origin`).
    #[arg(long, default_value = "origin")]
    pub remote: String,
}

#[derive(Clone, Debug, Args)]
pub struct SupportRevokeArgs {
    /// Audit-row id of the grant to revoke (UUID).
    pub id: String,
    /// Remote that maps to the hosted server (default: `origin`).
    #[arg(long, default_value = "origin")]
    pub remote: String,
}