commands

func BackupFilterNames ¶ added in v1.11.0

func BackupFilterNames() []string

BackupFilterNames returns the unique set of FilterName values (sorted) — used for CLI help text and completion hints.

func BackupSubDirs ¶ added in v1.28.0

func BackupSubDirs() map[string]string

BackupSubDirs maps each curated resource's on-disk subdirectory (relative to the backup root, slash-separated) to the FilterName that owns it. `diff` reads this table rather than walking the backup tree, so files off disk are bucketed under exactly the key live mode uses and a directory and an instance are comparable; it also uses the key set to tell which directories in the backup root a curated resource already owns from those it must key by name.

It matters because thirteen of the curated resources nest two levels deep (profiles/macos, smart-groups/computers, accounts/users, …). `diff` used to treat every top-level directory as a resource and read only the files sitting directly inside it, so those thirteen contributed nothing to either snapshot and their changes were reported as no change at all — silently, exit 0.

func BoundedParallelFetch ¶

func BoundedParallelFetch[T any, R any](ctx context.Context, items []T, concurrency int, fn func(context.Context, T) (R, error)) ([]R, []error)

BoundedParallelFetch runs fn for each item with bounded concurrency. Returns all results (in input order) and any errors collected.

func ClassifyError ¶ added in v1.19.0

func ClassifyError(err error) error

ClassifyError normalizes framework errors that carry no explicit exit code so they map to the documented codes. Cobra reports an unknown command as a plain error (default exit 1); classify it as a usage error (2) to match the unknown-flag path handled by SetFlagErrorFunc. Errors that already carry an exit code (including wrapped unknown-flag errors) pass through unchanged.

func DeduplicateSlug ¶

func DeduplicateSlug(slug string, seen map[string]bool) string

DeduplicateSlug appends a numeric suffix if slug already exists in the set. Returns the unique slug and adds it to the set.

func EnrichPrivilegeError ¶ added in v1.22.0

func EnrichPrivilegeError(cmd *cobra.Command, err error) error

EnrichPrivilegeError names the permission a 403 wanted, in the vocabulary of whichever API served the command.

The two vocabularies are independent sets and neither is derivable from the other. A Jamf Pro instance enforces API-role privileges ("Read Categories"), granted in Jamf Pro. The Jamf Platform gateway enforces GA capability permissions (categories:read), granted in Jamf Account when the API integration is created; the GA consolidation folded several Jamf Pro privileges into one capability, and Jamf Account no longer offers the old names at all. So printing the wrong one sends the operator to a console where the grant it names does not exist.

Three cases, in the order they are checked:

• A Platform command (jamf:api platform-gateway, which covers the gateway-served Security Cloud commands too). Its jamf:privileges annotation is already the capability vocabulary, and its error comes from the platform SDK rather than internal/client, so nothing has mapped it to an exit code yet.
• A Pro or Classic command whose 403 hint already carries a platform answer: internal/client wrote it, for the request it actually sent, on a gateway credential. Left alone — appending the Jamf Pro names here is the bug this whole function exists to avoid.
• Everything else: a Pro or Classic 403 against a Jamf Pro instance, where the annotation's Jamf Pro privilege names are the right answer.

func FetchAllPaginated ¶

func FetchAllPaginated(ctx context.Context, client registry.HTTPClient, basePath string, pageSize int) ([]map[string]any, error)

FetchAllPaginated fetches all items from a modern API endpoint. It auto-detects the response format:

• Paginated: `{"totalCount": N, "results": [...]}` — fetches all pages
• Array: `[{...}, {...}]` — returns the full array directly

Some Jamf Pro endpoints (e.g. /v1/sites, /v1/computer-groups, /v2/patch-software-title-configurations) return plain arrays even when pagination params are provided. This function handles both transparently.

func FetchClassicList ¶

func FetchClassicList(ctx context.Context, client registry.HTTPClient, path, wrapperKey string) ([]any, error)

FetchClassicList performs a GET on a Classic API list endpoint and returns the unwrapped array. Classic API returns XML; JSON is handled as a fallback.

func FetchClassicListSubset ¶ added in v1.11.0

func FetchClassicListSubset(ctx context.Context, client registry.HTTPClient, path, subset string) ([]map[string]any, error)

FetchClassicListSubset performs a GET on a Classic API endpoint that hosts multiple sibling collections under a single root (currently only /JSSResource/accounts, which nests <users> and <groups> inside <accounts>) and returns the items belonging to the named subset. The runtime mirror of the list_subset manifest opt-in handled by the classic generator in PR 152.

func FetchJSON ¶

func FetchJSON(ctx context.Context, client registry.HTTPClient, path string) (map[string]any, error)

FetchJSON performs a GET request and returns the parsed JSON object. Exported version of the overview.go fetchJSON helper.

func FormatError ¶

func FormatError(err error) bool

FormatError writes a structured JSON error to stdout when the output format is "json". Returns true if the error was handled, false otherwise (caller should fall back to plain stderr).

func FprintError ¶ added in v1.19.0

func FprintError(w io.Writer, err error)

FprintError writes a human-facing error (and a "hint:" line when present) to w. Used by main when the JSON envelope path does not apply.

func NewRootCmd ¶

func NewRootCmd(version, commit, date, specProVersion string) *cobra.Command

func ResolveAuthForProfile ¶

func ResolveAuthForProfile(cfg *config.Config, params AuthParams) (string, auth.Provider, error)

ResolveAuthForProfile determines the server URL and auth provider for a specific profile name using the given config. Unlike resolveAuth, it does not read or mutate package-level variables, making it safe to call multiple times for different profiles (e.g., in the diff command).

func SlugifyName ¶

func SlugifyName(name string) string

SlugifyName converts a display name to a filesystem-safe slug. "Deploy Chrome - v1.2" → "deploy-chrome-v1-2"

func StripServerFields ¶

func StripServerFields(obj map[string]any) map[string]any

StripServerFields removes server-generated fields from a JSON object for clean diffing. Removes id, timestamps, and other server-set fields.