bella_baxter 0.1.1.pre.preview.36 → 0.1.1.pre.preview.37

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7d72c1c3327f02d6ffc17bce5b45598bab576cde0c00ccbdd4e4d4c64c718ebe
-  data.tar.gz: 34b6032cad242bccb660bfb37883aba0bddcf4f4fdea590b200ec91b190c5931
+  metadata.gz: 521d464a5b26310db37bb33002edda860d8afe37d36a770aae7087b8edac245e
+  data.tar.gz: c6625ec5b8091fe77028ea37a8b9848081b8efb753973ccf43f1a56bcc35055d
 SHA512:
-  metadata.gz: d4a4bde19cef90cf0a5a18b82d6c173d169e0e0a626ba351598c56bc517fe64e3ae09ecfcf7715a3b86195742fc5eafd5b3719dbb1eb089d2eab58775722c690
-  data.tar.gz: 4c23e4ff25da58e41641260bf4f350ce76366378fad9578cb5219fe956625ef6be492f5d560729ab7a5dd62827f00769d579f37e02376461d4c141b069371ebd
+  metadata.gz: c55bb42ebaaca3644eb750a64224cb9b1e801a412020cb8a014838592b392cebfa13df52275ba21f8d8822cbfbc5f1332613e66395b8fae4aaf3c75db653f006
+  data.tar.gz: 3bfc8cdf2816b18095cd15eecf92a03007f8f39f25ec559f161a390d142bfe7f66ce29d6a46e3c67c59a1dd263ed8b3cf396b367e23bd427fd76a19c41e83c3d

data/lib/bella_baxter/client.rb

@@ -47,15 +47,18 @@ module BellaBaxter
     end
 
     # @param opts [Hash, BellaBaxter::Configuration]
-    def initialize(**opts)
+    def initialize(private_key: nil, on_wrapped_dek_received: nil, **opts)
       config = opts.size == 1 && opts.key?(:config) ? opts[:config] : Configuration.new(**opts)
 
+      resolved_private_key = private_key || ENV["BELLA_BAXTER_PRIVATE_KEY"]
+      key_pair = resolved_private_key ? E2EE::KeyPair.from_pem(resolved_private_key) : nil
+
       auth = HmacAuthProvider.new(config.api_key)
 
       @conn = Faraday.new(url: config.baxter_url.chomp("/")) do |f|
         f.headers["User-Agent"]     = "bella-ruby-sdk/1.0"
         f.headers["X-Bella-Client"] = "bella-ruby-sdk"
-        f.use E2EEFaradayMiddleware
+        f.use E2EEFaradayMiddleware, key_pair: key_pair, on_wrapped_dek_received: on_wrapped_dek_received
         f.adapter :net_http
       end
 

data/lib/bella_baxter/e2ee.rb

@@ -25,6 +25,18 @@ module BellaBaxter
         @public_key_b64 = Base64.strict_encode64(@ec.public_to_der)
       end
 
+      # Create a KeyPair from a PKCS#8 PEM private key (ZKE persistent device key).
+      # Use this instead of KeyPair.new for ZKE mode.
+      # Obtain a key with: bella auth setup
+      def self.from_pem(pem)
+        private_key    = OpenSSL::PKey::EC.new(pem)
+        public_key_b64 = Base64.strict_encode64(private_key.public_to_der)
+
+        instance = allocate
+        instance.send(:initialize_from_key, private_key, public_key_b64)
+        instance
+      end
+
       # Decrypt a response payload.
       #
       # @param payload [Hash] Parsed JSON with keys:
@@ -114,6 +126,12 @@ module BellaBaxter
 
       private
 
+      # Shared setup used by from_pem — sets the same instance variables as initialize.
+      def initialize_from_key(ec_key, public_key_b64)
+        @ec             = ec_key
+        @public_key_b64 = public_key_b64
+      end
+
       # HKDF (RFC 5869) using HMAC-SHA256. Salt is 32 zero bytes (matches server).
       def hkdf_sha256(ikm, length)
         salt = "\x00" * 32

data/lib/bella_baxter/e2ee_faraday_middleware.rb

@@ -9,9 +9,10 @@ module BellaBaxter
   # On outbound: adds X-E2E-Public-Key header so the server encrypts the response.
   # On inbound:  decrypts the encrypted payload and reconstructs a normal secrets response.
   class E2EEFaradayMiddleware < Faraday::Middleware
-    def initialize(app)
-      super
-      @e2ee = E2EE::KeyPair.new
+    def initialize(app, key_pair: nil, on_wrapped_dek_received: nil)
+      super(app)
+      @e2ee = key_pair || E2EE::KeyPair.new
+      @on_wrapped_dek_received = on_wrapped_dek_received
     end
 
     def call(env)
@@ -40,6 +41,19 @@ module BellaBaxter
             "lastModified"    => ""
           )
         end
+
+        if @on_wrapped_dek_received
+          wrapped_dek = resp_env.response_headers["X-Bella-Wrapped-Dek"] ||
+                        resp_env.response_headers["x-bella-wrapped-dek"]
+          if wrapped_dek
+            lease_expires = resp_env.response_headers["X-Bella-Lease-Expires"] ||
+                            resp_env.response_headers["x-bella-lease-expires"]
+            path        = env.url.path
+            project_slug = path[%r{/projects/([^/]+)}, 1] || ""
+            env_slug     = path[%r{/environments/([^/]+)}, 1] || ""
+            @on_wrapped_dek_received.call(project_slug, env_slug, wrapped_dek, lease_expires)
+          end
+        end
       end
     end
   end

data/lib/bella_baxter/generated/api/v1/me/api_keys/api_keys_request_builder.rb

@@ -0,0 +1,116 @@
+require 'microsoft_kiota_abstractions'
+require_relative '../../../../bella_baxter/generated'
+require_relative '../../../../models/api_key_response'
+require_relative '../../../../models/create_personal_api_key_request'
+require_relative '../../../../models/i_result'
+require_relative '../../../api'
+require_relative '../../v1'
+require_relative '../me'
+require_relative './api_keys'
+require_relative './item/api_keys_item_request_builder'
+
+module Bella_baxter/generated
+    module Api
+        module V1
+            module Me
+                module ApiKeys
+                    ## 
+                    # Builds and executes requests for operations under \api\v1\me\api-keys
+                    class ApiKeysRequestBuilder < MicrosoftKiotaAbstractions::BaseRequestBuilder
+                        
+                        ## 
+                        ## Gets an item from the bella_baxter/generated.api.v1.me.apiKeys.item collection
+                        ## @param id Unique identifier of the item
+                        ## @return a api_keys_item_request_builder
+                        ## 
+                        def by_id(id)
+                            raise StandardError, 'id cannot be null' if id.nil?
+                            url_tpl_params = @path_parameters.clone
+                            url_tpl_params["id"] = id
+                            return Bella_baxter/generated::Api::V1::Me::ApiKeys::Item::ApiKeysItemRequestBuilder.new(url_tpl_params, @request_adapter)
+                        end
+                        ## 
+                        ## Instantiates a new ApiKeysRequestBuilder and sets the default values.
+                        ## @param path_parameters Path parameters for the request
+                        ## @param request_adapter The request adapter to use to execute the requests.
+                        ## @return a void
+                        ## 
+                        def initialize(path_parameters, request_adapter)
+                            super(path_parameters, request_adapter, "{+baseurl}/api/v1/me/api-keys")
+                        end
+                        ## 
+                        ## GET_api_v1_me_api_keys
+                        ## @param request_configuration Configuration for the request such as headers, query parameters, and middleware options.
+                        ## @return a Fiber of api_key_response
+                        ## 
+                        def get(request_configuration=nil)
+                            request_info = self.to_get_request_information(
+                                request_configuration
+                            )
+                            return @request_adapter.send_async(request_info, lambda {|pn| Bella_baxter/generated::Models::ApiKeyResponse.create_from_discriminator_value(pn) }, nil)
+                        end
+                        ## 
+                        ## POST_api_v1_me_api_keys
+                        ## @param body The request body
+                        ## @param request_configuration Configuration for the request such as headers, query parameters, and middleware options.
+                        ## @return a Fiber of i_result
+                        ## 
+                        def post(body, request_configuration=nil)
+                            raise StandardError, 'body cannot be null' if body.nil?
+                            request_info = self.to_post_request_information(
+                                body, request_configuration
+                            )
+                            return @request_adapter.send_async(request_info, lambda {|pn| Bella_baxter/generated::Models::IResult.create_from_discriminator_value(pn) }, nil)
+                        end
+                        ## 
+                        ## GET_api_v1_me_api_keys
+                        ## @param request_configuration Configuration for the request such as headers, query parameters, and middleware options.
+                        ## @return a request_information
+                        ## 
+                        def to_get_request_information(request_configuration=nil)
+                            request_info = MicrosoftKiotaAbstractions::RequestInformation.new()
+                            unless request_configuration.nil?
+                                request_info.add_headers_from_raw_object(request_configuration.headers)
+                                request_info.add_request_options(request_configuration.options)
+                            end
+                            request_info.url_template = @url_template
+                            request_info.path_parameters = @path_parameters
+                            request_info.http_method = :GET
+                            request_info.headers.try_add('Accept', 'application/json')
+                            return request_info
+                        end
+                        ## 
+                        ## POST_api_v1_me_api_keys
+                        ## @param body The request body
+                        ## @param request_configuration Configuration for the request such as headers, query parameters, and middleware options.
+                        ## @return a request_information
+                        ## 
+                        def to_post_request_information(body, request_configuration=nil)
+                            raise StandardError, 'body cannot be null' if body.nil?
+                            request_info = MicrosoftKiotaAbstractions::RequestInformation.new()
+                            unless request_configuration.nil?
+                                request_info.add_headers_from_raw_object(request_configuration.headers)
+                                request_info.add_request_options(request_configuration.options)
+                            end
+                            request_info.set_content_from_parsable(@request_adapter, 'application/json', body)
+                            request_info.url_template = @url_template
+                            request_info.path_parameters = @path_parameters
+                            request_info.http_method = :POST
+                            request_info.headers.try_add('Accept', 'application/json')
+                            return request_info
+                        end
+                        ## 
+                        ## Returns a request builder with the provided arbitrary URL. Using this method means any other path or query parameters are ignored.
+                        ## @param raw_url The raw URL to use for the request builder.
+                        ## @return a api_keys_request_builder
+                        ## 
+                        def with_url(raw_url)
+                            raise StandardError, 'raw_url cannot be null' if raw_url.nil?
+                            return ApiKeysRequestBuilder.new(raw_url, @request_adapter)
+                        end
+                    end
+                end
+            end
+        end
+    end
+end

data/lib/bella_baxter/generated/api/v1/me/api_keys/item/api_keys_item_request_builder.rb

@@ -0,0 +1,72 @@
+require 'microsoft_kiota_abstractions'
+require_relative '../../../../../bella_baxter/generated'
+require_relative '../../../../../models/i_result'
+require_relative '../../../../api'
+require_relative '../../../v1'
+require_relative '../../me'
+require_relative '../api_keys'
+require_relative './item'
+
+module Bella_baxter/generated
+    module Api
+        module V1
+            module Me
+                module ApiKeys
+                    module Item
+                        ## 
+                        # Builds and executes requests for operations under \api\v1\me\api-keys\{id}
+                        class ApiKeysItemRequestBuilder < MicrosoftKiotaAbstractions::BaseRequestBuilder
+                            
+                            ## 
+                            ## Instantiates a new ApiKeysItemRequestBuilder and sets the default values.
+                            ## @param path_parameters Path parameters for the request
+                            ## @param request_adapter The request adapter to use to execute the requests.
+                            ## @return a void
+                            ## 
+                            def initialize(path_parameters, request_adapter)
+                                super(path_parameters, request_adapter, "{+baseurl}/api/v1/me/api-keys/{id}")
+                            end
+                            ## 
+                            ## DELETE_api_v1_me_api_keys_id
+                            ## @param request_configuration Configuration for the request such as headers, query parameters, and middleware options.
+                            ## @return a Fiber of i_result
+                            ## 
+                            def delete(request_configuration=nil)
+                                request_info = self.to_delete_request_information(
+                                    request_configuration
+                                )
+                                return @request_adapter.send_async(request_info, lambda {|pn| Bella_baxter/generated::Models::IResult.create_from_discriminator_value(pn) }, nil)
+                            end
+                            ## 
+                            ## DELETE_api_v1_me_api_keys_id
+                            ## @param request_configuration Configuration for the request such as headers, query parameters, and middleware options.
+                            ## @return a request_information
+                            ## 
+                            def to_delete_request_information(request_configuration=nil)
+                                request_info = MicrosoftKiotaAbstractions::RequestInformation.new()
+                                unless request_configuration.nil?
+                                    request_info.add_headers_from_raw_object(request_configuration.headers)
+                                    request_info.add_request_options(request_configuration.options)
+                                end
+                                request_info.url_template = @url_template
+                                request_info.path_parameters = @path_parameters
+                                request_info.http_method = :DELETE
+                                request_info.headers.try_add('Accept', 'application/json')
+                                return request_info
+                            end
+                            ## 
+                            ## Returns a request builder with the provided arbitrary URL. Using this method means any other path or query parameters are ignored.
+                            ## @param raw_url The raw URL to use for the request builder.
+                            ## @return a api_keys_item_request_builder
+                            ## 
+                            def with_url(raw_url)
+                                raise StandardError, 'raw_url cannot be null' if raw_url.nil?
+                                return ApiKeysItemRequestBuilder.new(raw_url, @request_adapter)
+                            end
+                        end
+                    end
+                end
+            end
+        end
+    end
+end

data/lib/bella_baxter/generated/api/v1/me/me_request_builder.rb

@@ -0,0 +1,34 @@
+require 'microsoft_kiota_abstractions'
+require_relative '../../../bella_baxter/generated'
+require_relative '../../api'
+require_relative '../v1'
+require_relative './api_keys/api_keys_request_builder'
+require_relative './me'
+
+module Bella_baxter/generated
+    module Api
+        module V1
+            module Me
+                ## 
+                # Builds and executes requests for operations under \api\v1\me
+                class MeRequestBuilder < MicrosoftKiotaAbstractions::BaseRequestBuilder
+                    
+                    ## 
+                    # The apiKeys property
+                    def api_keys()
+                        return Bella_baxter/generated::Api::V1::Me::ApiKeys::ApiKeysRequestBuilder.new(@path_parameters, @request_adapter)
+                    end
+                    ## 
+                    ## Instantiates a new MeRequestBuilder and sets the default values.
+                    ## @param path_parameters Path parameters for the request
+                    ## @param request_adapter The request adapter to use to execute the requests.
+                    ## @return a void
+                    ## 
+                    def initialize(path_parameters, request_adapter)
+                        super(path_parameters, request_adapter, "{+baseurl}/api/v1/me")
+                    end
+                end
+            end
+        end
+    end
+end

data/lib/bella_baxter/generated/api/v1/projects/item/encryption_key/encryption_key_request_builder.rb

@@ -0,0 +1,40 @@
+require 'microsoft_kiota_abstractions'
+require_relative '../../../../../bella_baxter/generated'
+require_relative '../../../../api'
+require_relative '../../../v1'
+require_relative '../../projects'
+require_relative '../item'
+require_relative './encryption_key'
+require_relative './rotate/rotate_request_builder'
+
+module Bella_baxter/generated
+    module Api
+        module V1
+            module Projects
+                module Item
+                    module EncryptionKey
+                        ## 
+                        # Builds and executes requests for operations under \api\v1\projects\{-id}\encryption-key
+                        class EncryptionKeyRequestBuilder < MicrosoftKiotaAbstractions::BaseRequestBuilder
+                            
+                            ## 
+                            # The rotate property
+                            def rotate()
+                                return Bella_baxter/generated::Api::V1::Projects::Item::EncryptionKey::Rotate::RotateRequestBuilder.new(@path_parameters, @request_adapter)
+                            end
+                            ## 
+                            ## Instantiates a new EncryptionKeyRequestBuilder and sets the default values.
+                            ## @param path_parameters Path parameters for the request
+                            ## @param request_adapter The request adapter to use to execute the requests.
+                            ## @return a void
+                            ## 
+                            def initialize(path_parameters, request_adapter)
+                                super(path_parameters, request_adapter, "{+baseurl}/api/v1/projects/{%2Did}/encryption-key")
+                            end
+                        end
+                    end
+                end
+            end
+        end
+    end
+end

data/lib/bella_baxter/generated/api/v1/projects/item/encryption_key/rotate/rotate_request_builder.rb

@@ -0,0 +1,75 @@
+require 'microsoft_kiota_abstractions'
+require_relative '../../../../../../bella_baxter/generated'
+require_relative '../../../../../../models/rotate_project_dek_response'
+require_relative '../../../../../api'
+require_relative '../../../../v1'
+require_relative '../../../projects'
+require_relative '../../item'
+require_relative '../encryption_key'
+require_relative './rotate'
+
+module Bella_baxter/generated
+    module Api
+        module V1
+            module Projects
+                module Item
+                    module EncryptionKey
+                        module Rotate
+                            ## 
+                            # Builds and executes requests for operations under \api\v1\projects\{-id}\encryption-key\rotate
+                            class RotateRequestBuilder < MicrosoftKiotaAbstractions::BaseRequestBuilder
+                                
+                                ## 
+                                ## Instantiates a new RotateRequestBuilder and sets the default values.
+                                ## @param path_parameters Path parameters for the request
+                                ## @param request_adapter The request adapter to use to execute the requests.
+                                ## @return a void
+                                ## 
+                                def initialize(path_parameters, request_adapter)
+                                    super(path_parameters, request_adapter, "{+baseurl}/api/v1/projects/{%2Did}/encryption-key/rotate")
+                                end
+                                ## 
+                                ## POST_api_v1_projects_id_encryption_key_rotate
+                                ## @param request_configuration Configuration for the request such as headers, query parameters, and middleware options.
+                                ## @return a Fiber of rotate_project_dek_response
+                                ## 
+                                def post(request_configuration=nil)
+                                    request_info = self.to_post_request_information(
+                                        request_configuration
+                                    )
+                                    return @request_adapter.send_async(request_info, lambda {|pn| Bella_baxter/generated::Models::RotateProjectDekResponse.create_from_discriminator_value(pn) }, nil)
+                                end
+                                ## 
+                                ## POST_api_v1_projects_id_encryption_key_rotate
+                                ## @param request_configuration Configuration for the request such as headers, query parameters, and middleware options.
+                                ## @return a request_information
+                                ## 
+                                def to_post_request_information(request_configuration=nil)
+                                    request_info = MicrosoftKiotaAbstractions::RequestInformation.new()
+                                    unless request_configuration.nil?
+                                        request_info.add_headers_from_raw_object(request_configuration.headers)
+                                        request_info.add_request_options(request_configuration.options)
+                                    end
+                                    request_info.url_template = @url_template
+                                    request_info.path_parameters = @path_parameters
+                                    request_info.http_method = :POST
+                                    request_info.headers.try_add('Accept', 'application/json')
+                                    return request_info
+                                end
+                                ## 
+                                ## Returns a request builder with the provided arbitrary URL. Using this method means any other path or query parameters are ignored.
+                                ## @param raw_url The raw URL to use for the request builder.
+                                ## @return a rotate_request_builder
+                                ## 
+                                def with_url(raw_url)
+                                    raise StandardError, 'raw_url cannot be null' if raw_url.nil?
+                                    return RotateRequestBuilder.new(raw_url, @request_adapter)
+                                end
+                            end
+                        end
+                    end
+                end
+            end
+        end
+    end
+end

data/lib/bella_baxter/generated/api/v1/projects/item/item_request_builder.rb

@@ -6,6 +6,7 @@ require_relative '../../../../models/update_project_request'
 require_relative '../../../api'
 require_relative '../../v1'
 require_relative '../projects'
+require_relative './encryption_key/encryption_key_request_builder'
 require_relative './environments/environments_request_builder'
 require_relative './export/export_request_builder'
 require_relative './global_secret_provider/global_secret_provider_request_builder'
@@ -28,6 +29,11 @@ module Bella_baxter/generated
                     # Builds and executes requests for operations under \api\v1\projects\{-id}
                     class ItemRequestBuilder < MicrosoftKiotaAbstractions::BaseRequestBuilder
                         
+                        ## 
+                        # The encryptionKey property
+                        def encryption_key()
+                            return Bella_baxter/generated::Api::V1::Projects::Item::EncryptionKey::EncryptionKeyRequestBuilder.new(@path_parameters, @request_adapter)
+                        end
                         ## 
                         # The environments property
                         def environments()

data/lib/bella_baxter/generated/api/v1/tenants/me/encryption_key/emergency_kit/emergency_kit_request_builder.rb

@@ -0,0 +1,75 @@
+require 'microsoft_kiota_abstractions'
+require_relative '../../../../../../bella_baxter/generated'
+require_relative '../../../../../../models/i_result'
+require_relative '../../../../../api'
+require_relative '../../../../v1'
+require_relative '../../../tenants'
+require_relative '../../me'
+require_relative '../encryption_key'
+require_relative './emergency_kit'
+
+module Bella_baxter/generated
+    module Api
+        module V1
+            module Tenants
+                module Me
+                    module EncryptionKey
+                        module EmergencyKit
+                            ## 
+                            # Builds and executes requests for operations under \api\v1\tenants\me\encryption-key\emergency-kit
+                            class EmergencyKitRequestBuilder < MicrosoftKiotaAbstractions::BaseRequestBuilder
+                                
+                                ## 
+                                ## Instantiates a new EmergencyKitRequestBuilder and sets the default values.
+                                ## @param path_parameters Path parameters for the request
+                                ## @param request_adapter The request adapter to use to execute the requests.
+                                ## @return a void
+                                ## 
+                                def initialize(path_parameters, request_adapter)
+                                    super(path_parameters, request_adapter, "{+baseurl}/api/v1/tenants/me/encryption-key/emergency-kit")
+                                end
+                                ## 
+                                ## GET_api_v1_tenants_me_encryption_key_emergency_kit
+                                ## @param request_configuration Configuration for the request such as headers, query parameters, and middleware options.
+                                ## @return a Fiber of i_result
+                                ## 
+                                def get(request_configuration=nil)
+                                    request_info = self.to_get_request_information(
+                                        request_configuration
+                                    )
+                                    return @request_adapter.send_async(request_info, lambda {|pn| Bella_baxter/generated::Models::IResult.create_from_discriminator_value(pn) }, nil)
+                                end
+                                ## 
+                                ## GET_api_v1_tenants_me_encryption_key_emergency_kit
+                                ## @param request_configuration Configuration for the request such as headers, query parameters, and middleware options.
+                                ## @return a request_information
+                                ## 
+                                def to_get_request_information(request_configuration=nil)
+                                    request_info = MicrosoftKiotaAbstractions::RequestInformation.new()
+                                    unless request_configuration.nil?
+                                        request_info.add_headers_from_raw_object(request_configuration.headers)
+                                        request_info.add_request_options(request_configuration.options)
+                                    end
+                                    request_info.url_template = @url_template
+                                    request_info.path_parameters = @path_parameters
+                                    request_info.http_method = :GET
+                                    request_info.headers.try_add('Accept', 'application/json')
+                                    return request_info
+                                end
+                                ## 
+                                ## Returns a request builder with the provided arbitrary URL. Using this method means any other path or query parameters are ignored.
+                                ## @param raw_url The raw URL to use for the request builder.
+                                ## @return a emergency_kit_request_builder
+                                ## 
+                                def with_url(raw_url)
+                                    raise StandardError, 'raw_url cannot be null' if raw_url.nil?
+                                    return EmergencyKitRequestBuilder.new(raw_url, @request_adapter)
+                                end
+                            end
+                        end
+                    end
+                end
+            end
+        end
+    end
+end