add --include-default-roles flag to env export terraform command

source/commands/env/export/generators/RoleGenerator.ts

@@ -71,6 +71,7 @@ export class RoleGenerator implements HCLGenerator {
 	constructor(
 		private permit: Permit,
 		private warningCollector: WarningCollector,
+		private includeDefaultRoles: boolean = false,
 	) {
 		// Register Handlebars helpers
 		this.registerHandlebarsHelpers();
@@ -300,8 +301,11 @@ export class RoleGenerator implements HCLGenerator {
 		const validRoles: RoleData[] = [];
 
 		for (const role of roles) {
-			// Skip default global roles that already exist in the system
-			if (DEFAULT_GLOBAL_ROLES.includes(role.key)) {
+			// Skip default global roles that already exist in the system unless includeDefaultRoles is true
+			if (
+				DEFAULT_GLOBAL_ROLES.includes(role.key) &&
+				!this.includeDefaultRoles
+			) {
 				// Still add to the ID map for role derivations
 				this.roleIdMap.set(role.key, role.key);
 				continue;

source/commands/env/export/index.tsx

@@ -23,6 +23,17 @@ export const options = zod.object({
 				alias: 'f',
 			}),
 		),
+	includeDefaultRoles: zod
+		.boolean()
+		.optional()
+		.default(false)
+		.describe(
+			option({
+				description:
+					'Include default roles (admin, editor, viewer) in the export',
+				alias: 'i',
+			}),
+		),
 });
 
 type Props = {

source/commands/env/export/types.ts

@@ -8,6 +8,7 @@ export interface ExportState {
 export interface ExportOptions {
 	key?: string;
 	file?: string;
+	includeDefaultRoles?: boolean;
 }
 
 export interface HCLGenerator {

source/components/export/ExportContent.tsx

@@ -9,12 +9,15 @@ import fs from 'node:fs/promises';
 import { Text } from 'ink';
 
 export const ExportContent: FC<{ options: ExportOptions }> = ({
-	options: { key: apiKey, file },
+	options: { key: apiKey, file, includeDefaultRoles },
 }) => {
 	const { validateApiKeyScope } = useApiKeyApi();
 	const { authToken } = useAuth();
 	const key = apiKey || authToken;
-	const { state, setState, exportConfig } = useExport(key);
+	const { state, setState, exportConfig } = useExport({
+		apiKey: key,
+		includeDefaultRoles,
+	});
 	const [hclOutput, setHclOutput] = useState<string | null>(null);
 	const hasRunRef = useRef(false);
 

source/hooks/export/useExport.ts

@@ -51,18 +51,30 @@ type ExtendedRelationGenerator = Omit<RelationGenerator, 'getRelationIdMap'> & {
 	getRelationIdMap?: () => Map<string, string>;
 };
 
-export const useExport = (apiKey: string) => {
+interface UseExportProps {
+	apiKey?: string;
+	includeDefaultRoles?: boolean;
+}
+
+export const useExport = ({
+	apiKey,
+	includeDefaultRoles,
+}: UseExportProps = {}) => {
 	const [state, setState] = useState<ExportState>({
 		status: '',
 		isComplete: false,
 		error: null,
 		warnings: [],
 	});
 
-	const permit = usePermitSDK(apiKey);
+	const permit = apiKey ? usePermitSDK(apiKey) : null;
 
 	const exportConfig = async (scope: ExportScope) => {
 		try {
+			if (!permit) {
+				throw new Error('No API key provided. Please provide a key or login first.');
+			}
+
 			const warningCollector = createWarningCollector();
 
 			let hcl = `# Generated by Permit CLI
@@ -73,7 +85,11 @@ ${generateProviderBlock()}`;
 
 			// Create all generators first
 			const resourceGenerator = new ResourceGenerator(permit, warningCollector);
-			const roleGenerator = new RoleGenerator(permit, warningCollector);
+			const roleGenerator = new RoleGenerator(
+				permit,
+				warningCollector,
+				includeDefaultRoles,
+			);
 			const userAttributesGenerator = new UserAttributesGenerator(
 				permit,
 				warningCollector,