kessel-sdk 1.4.0 → 1.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2e2b24045b21b41dc888f7ce2c81efefbb882e7c81b9e747e1587d11bed3882e
-  data.tar.gz: 906ce22a27644bacd76e79a30257d463dd73ae0d46ccf784133adc545979bb4a
+  metadata.gz: 132faed54cbcf58a49d8df8874313020b7c4def0530aa9a28470bff44a71b5ec
+  data.tar.gz: dd16fef5803fc33e4f1a982642e86463899cfdeb931af1f18a824c10fc7b6f43
 SHA512:
-  metadata.gz: 3a072b07ce4021d603045744b35d68680a53ef492e2bc7839706ca5402ffe024105399a8e5a1b835f22d93e4c3be1029a0331aa05b3a3695e7a457481b1094f8
-  data.tar.gz: 884484eb24a3ce17829bcc370712201bd593770f4a673e914671f47d70582c13dc60e79b9ab80c96804277b3cc8372fa791e5bca4c2aa499a716ee056f835636
+  metadata.gz: d394e1795bb83da7531936fe856daed2c6d290267ab2cb3d79482aa549ac32c48d5a4b1e4e4f26d020fc208e5c6e29f3c2e18dd73cf25eaa60b73b22b4e4c813
+  data.tar.gz: d27bc7c50233a369a0ec3cbfb519efc9cbd242e2fde3870374a4e84fb2c801e6e590ef0f6a37d170c6ed7a24b581fa4e5308c4cc085e911e1a3ee4a08c85d928

data/README.md

@@ -299,8 +299,9 @@ This project follows [Semantic Versioning 2.0.0](https://semver.org/). Version n
 
 4. **Commit Changes**
    ```bash
+   export VERSION=$(ruby -e "require_relative './lib/kessel/version.rb'; puts Kessel::Inventory::VERSION")
    git add lib/kessel/version.rb Gemfile.lock
-   git commit -m "Release version X.Y.Z"
+   git commit -m "Release version ${VERSION}"
    git push origin main # or git push upstream main
    ```
 
@@ -310,7 +311,7 @@ This project follows [Semantic Versioning 2.0.0](https://semver.org/). Version n
    gem build kessel-sdk.gemspec
    
    # Push to RubyGems (requires RubyGems account and gem ownership)
-   gem push kessel-sdk-X.Y.Z.gem
+   gem push kessel-sdk-${VERSION}.gem
    ```
 
 6. **Tag the Release**

data/lib/google/rpc/status_pb.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: google/rpc/status.proto
+
+require 'google/protobuf'
+
+require 'google/protobuf/any_pb'
+
+
+descriptor_data = "\n\x17google/rpc/status.proto\x12\ngoogle.rpc\x1a\x19google/protobuf/any.proto\"f\n\x06Status\x12\x12\n\x04\x63ode\x18\x01 \x01(\x05R\x04\x63ode\x12\x18\n\x07message\x18\x02 \x01(\tR\x07message\x12.\n\x07\x64\x65tails\x18\x03 \x03(\x0b\x32\x14.google.protobuf.AnyR\x07\x64\x65tailsBa\n\x0e\x63om.google.rpcB\x0bStatusProtoP\x01Z7google.golang.org/genproto/googleapis/rpc/status;status\xf8\x01\x01\xa2\x02\x03RPCb\x06proto3"
+
+pool = ::Google::Protobuf::DescriptorPool.generated_pool
+pool.add_serialized_file(descriptor_data)
+
+module Google
+  module Rpc
+    Status = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.rpc.Status").msgclass
+  end
+end

data/lib/kessel/inventory/v1beta2/check_bulk_request_pb.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: kessel/inventory/v1beta2/check_bulk_request.proto
+
+require 'google/protobuf'
+
+require 'buf/validate/validate_pb'
+require 'kessel/inventory/v1beta2/resource_reference_pb'
+require 'kessel/inventory/v1beta2/subject_reference_pb'
+require 'kessel/inventory/v1beta2/consistency_pb'
+
+
+descriptor_data = "\n1kessel/inventory/v1beta2/check_bulk_request.proto\x12\x18kessel.inventory.v1beta2\x1a\x1b\x62uf/validate/validate.proto\x1a\x31kessel/inventory/v1beta2/resource_reference.proto\x1a\x30kessel/inventory/v1beta2/subject_reference.proto\x1a*kessel/inventory/v1beta2/consistency.proto\"\xd6\x01\n\x14\x43heckBulkRequestItem\x12K\n\x06object\x18\x01 \x01(\x0b\x32+.kessel.inventory.v1beta2.ResourceReferenceB\x06\xbaH\x03\xc8\x01\x01R\x06object\x12#\n\x08relation\x18\x02 \x01(\tB\x07\xbaH\x04r\x02\x10\x01R\x08relation\x12L\n\x07subject\x18\x03 \x01(\x0b\x32*.kessel.inventory.v1beta2.SubjectReferenceB\x06\xbaH\x03\xc8\x01\x01R\x07subject\"\xae\x01\n\x10\x43heckBulkRequest\x12Q\n\x05items\x18\x01 \x03(\x0b\x32..kessel.inventory.v1beta2.CheckBulkRequestItemB\x0b\xbaH\x08\x92\x01\x05\x08\x01\x10\xe8\x07R\x05items\x12G\n\x0b\x63onsistency\x18\x02 \x01(\x0b\x32%.kessel.inventory.v1beta2.ConsistencyR\x0b\x63onsistencyBr\n(org.project_kessel.api.inventory.v1beta2P\x01ZDgithub.com/project-kessel/inventory-api/api/kessel/inventory/v1beta2b\x06proto3"
+
+pool = ::Google::Protobuf::DescriptorPool.generated_pool
+pool.add_serialized_file(descriptor_data)
+
+module Kessel
+  module Inventory
+    module V1beta2
+      CheckBulkRequestItem = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("kessel.inventory.v1beta2.CheckBulkRequestItem").msgclass
+      CheckBulkRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("kessel.inventory.v1beta2.CheckBulkRequest").msgclass
+    end
+  end
+end

data/lib/kessel/inventory/v1beta2/check_bulk_response_pb.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: kessel/inventory/v1beta2/check_bulk_response.proto
+
+require 'google/protobuf'
+
+require 'kessel/inventory/v1beta2/check_bulk_request_pb'
+require 'kessel/inventory/v1beta2/consistency_token_pb'
+require 'kessel/inventory/v1beta2/allowed_pb'
+require 'buf/validate/validate_pb'
+require 'google/rpc/status_pb'
+
+
+descriptor_data = "\n2kessel/inventory/v1beta2/check_bulk_response.proto\x12\x18kessel.inventory.v1beta2\x1a\x31kessel/inventory/v1beta2/check_bulk_request.proto\x1a\x30kessel/inventory/v1beta2/consistency_token.proto\x1a&kessel/inventory/v1beta2/allowed.proto\x1a\x1b\x62uf/validate/validate.proto\x1a\x17google/rpc/status.proto\"T\n\x15\x43heckBulkResponseItem\x12;\n\x07\x61llowed\x18\x01 \x01(\x0e\x32!.kessel.inventory.v1beta2.AllowedR\x07\x61llowed\"\xe0\x01\n\x15\x43heckBulkResponsePair\x12H\n\x07request\x18\x01 \x01(\x0b\x32..kessel.inventory.v1beta2.CheckBulkRequestItemR\x07request\x12\x45\n\x04item\x18\x02 \x01(\x0b\x32/.kessel.inventory.v1beta2.CheckBulkResponseItemH\x00R\x04item\x12*\n\x05\x65rror\x18\x03 \x01(\x0b\x32\x12.google.rpc.StatusH\x00R\x05\x65rrorB\n\n\x08response\"\xbd\x01\n\x11\x43heckBulkResponse\x12O\n\x05pairs\x18\x01 \x03(\x0b\x32/.kessel.inventory.v1beta2.CheckBulkResponsePairB\x08\xbaH\x05\x92\x01\x02\x08\x01R\x05pairs\x12W\n\x11\x63onsistency_token\x18\x02 \x01(\x0b\x32*.kessel.inventory.v1beta2.ConsistencyTokenR\x10\x63onsistencyTokenBr\n(org.project_kessel.api.inventory.v1beta2P\x01ZDgithub.com/project-kessel/inventory-api/api/kessel/inventory/v1beta2b\x06proto3"
+
+pool = ::Google::Protobuf::DescriptorPool.generated_pool
+pool.add_serialized_file(descriptor_data)
+
+module Kessel
+  module Inventory
+    module V1beta2
+      CheckBulkResponseItem = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("kessel.inventory.v1beta2.CheckBulkResponseItem").msgclass
+      CheckBulkResponsePair = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("kessel.inventory.v1beta2.CheckBulkResponsePair").msgclass
+      CheckBulkResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("kessel.inventory.v1beta2.CheckBulkResponse").msgclass
+    end
+  end
+end

data/lib/kessel/inventory/v1beta2/inventory_service_pb.rb

@@ -15,9 +15,11 @@ require 'kessel/inventory/v1beta2/delete_resource_request_pb'
 require 'kessel/inventory/v1beta2/delete_resource_response_pb'
 require 'kessel/inventory/v1beta2/streamed_list_objects_request_pb'
 require 'kessel/inventory/v1beta2/streamed_list_objects_response_pb'
+require 'kessel/inventory/v1beta2/check_bulk_request_pb'
+require 'kessel/inventory/v1beta2/check_bulk_response_pb'
 
 
-descriptor_data = "\n0kessel/inventory/v1beta2/inventory_service.proto\x12\x18kessel.inventory.v1beta2\x1a\x1cgoogle/api/annotations.proto\x1a,kessel/inventory/v1beta2/check_request.proto\x1a-kessel/inventory/v1beta2/check_response.proto\x1a\x37kessel/inventory/v1beta2/check_for_update_request.proto\x1a\x38kessel/inventory/v1beta2/check_for_update_response.proto\x1a\x36kessel/inventory/v1beta2/report_resource_request.proto\x1a\x37kessel/inventory/v1beta2/report_resource_response.proto\x1a\x36kessel/inventory/v1beta2/delete_resource_request.proto\x1a\x37kessel/inventory/v1beta2/delete_resource_response.proto\x1a<kessel/inventory/v1beta2/streamed_list_objects_request.proto\x1a=kessel/inventory/v1beta2/streamed_list_objects_response.proto2\x91\x06\n\x16KesselInventoryService\x12\x81\x01\n\x05\x43heck\x12&.kessel.inventory.v1beta2.CheckRequest\x1a\'.kessel.inventory.v1beta2.CheckResponse\"\'\x82\xd3\xe4\x93\x02!\"\x1c/api/inventory/v1beta2/check:\x01*\x12\xa5\x01\n\x0e\x43heckForUpdate\x12/.kessel.inventory.v1beta2.CheckForUpdateRequest\x1a\x30.kessel.inventory.v1beta2.CheckForUpdateResponse\"0\x82\xd3\xe4\x93\x02*\"%/api/inventory/v1beta2/checkforupdate:\x01*\x12\xa0\x01\n\x0eReportResource\x12/.kessel.inventory.v1beta2.ReportResourceRequest\x1a\x30.kessel.inventory.v1beta2.ReportResourceResponse\"+\x82\xd3\xe4\x93\x02%\" /api/inventory/v1beta2/resources:\x01*\x12\xa0\x01\n\x0e\x44\x65leteResource\x12/.kessel.inventory.v1beta2.DeleteResourceRequest\x1a\x30.kessel.inventory.v1beta2.DeleteResourceResponse\"+\x82\xd3\xe4\x93\x02%* /api/inventory/v1beta2/resources:\x01*\x12\x84\x01\n\x13StreamedListObjects\x12\x34.kessel.inventory.v1beta2.StreamedListObjectsRequest\x1a\x35.kessel.inventory.v1beta2.StreamedListObjectsResponse0\x01\x42r\n(org.project_kessel.api.inventory.v1beta2P\x01ZDgithub.com/project-kessel/inventory-api/api/kessel/inventory/v1beta2b\x06proto3"
+descriptor_data = "\n0kessel/inventory/v1beta2/inventory_service.proto\x12\x18kessel.inventory.v1beta2\x1a\x1cgoogle/api/annotations.proto\x1a,kessel/inventory/v1beta2/check_request.proto\x1a-kessel/inventory/v1beta2/check_response.proto\x1a\x37kessel/inventory/v1beta2/check_for_update_request.proto\x1a\x38kessel/inventory/v1beta2/check_for_update_response.proto\x1a\x36kessel/inventory/v1beta2/report_resource_request.proto\x1a\x37kessel/inventory/v1beta2/report_resource_response.proto\x1a\x36kessel/inventory/v1beta2/delete_resource_request.proto\x1a\x37kessel/inventory/v1beta2/delete_resource_response.proto\x1a<kessel/inventory/v1beta2/streamed_list_objects_request.proto\x1a=kessel/inventory/v1beta2/streamed_list_objects_response.proto\x1a\x31kessel/inventory/v1beta2/check_bulk_request.proto\x1a\x32kessel/inventory/v1beta2/check_bulk_response.proto2\xa5\x07\n\x16KesselInventoryService\x12\x81\x01\n\x05\x43heck\x12&.kessel.inventory.v1beta2.CheckRequest\x1a\'.kessel.inventory.v1beta2.CheckResponse\"\'\x82\xd3\xe4\x93\x02!\"\x1c/api/inventory/v1beta2/check:\x01*\x12\xa5\x01\n\x0e\x43heckForUpdate\x12/.kessel.inventory.v1beta2.CheckForUpdateRequest\x1a\x30.kessel.inventory.v1beta2.CheckForUpdateResponse\"0\x82\xd3\xe4\x93\x02*\"%/api/inventory/v1beta2/checkforupdate:\x01*\x12\x91\x01\n\tCheckBulk\x12*.kessel.inventory.v1beta2.CheckBulkRequest\x1a+.kessel.inventory.v1beta2.CheckBulkResponse\"+\x82\xd3\xe4\x93\x02%\" /api/inventory/v1beta2/checkbulk:\x01*\x12\xa0\x01\n\x0eReportResource\x12/.kessel.inventory.v1beta2.ReportResourceRequest\x1a\x30.kessel.inventory.v1beta2.ReportResourceResponse\"+\x82\xd3\xe4\x93\x02%\" /api/inventory/v1beta2/resources:\x01*\x12\xa0\x01\n\x0e\x44\x65leteResource\x12/.kessel.inventory.v1beta2.DeleteResourceRequest\x1a\x30.kessel.inventory.v1beta2.DeleteResourceResponse\"+\x82\xd3\xe4\x93\x02%* /api/inventory/v1beta2/resources:\x01*\x12\x84\x01\n\x13StreamedListObjects\x12\x34.kessel.inventory.v1beta2.StreamedListObjectsRequest\x1a\x35.kessel.inventory.v1beta2.StreamedListObjectsResponse0\x01\x42r\n(org.project_kessel.api.inventory.v1beta2P\x01ZDgithub.com/project-kessel/inventory-api/api/kessel/inventory/v1beta2b\x06proto3"
 
 pool = ::Google::Protobuf::DescriptorPool.generated_pool
 pool.add_serialized_file(descriptor_data)

data/lib/kessel/inventory/v1beta2/inventory_service_services_pb.rb

@@ -39,6 +39,20 @@ module Kessel
           # It is intended to be used just prior to sensitive operation (e.g., update, delete)
           # which depend on the current state of the relationship.
           rpc :CheckForUpdate, ::Kessel::Inventory::V1beta2::CheckForUpdateRequest, ::Kessel::Inventory::V1beta2::CheckForUpdateResponse
+          # Performs bulk permission checks for multiple resource-subject-relation combinations.
+          #
+          # This API is more efficient than making individual Check calls when verifying permissions
+          # for multiple items. It answers questions like:
+          # "Which of these resources can subject *X* perform action *Y* on?"
+          #
+          # Common use cases include:
+          # - Filtering lists based on user permissions
+          # - Batch authorization checks before performing bulk operations
+          # - Dashboard rendering with multiple permission checks
+          # - Pre-authorization for UI components
+          #
+          # The response includes a result for each item in the request, maintaining the same order.
+          rpc :CheckBulk, ::Kessel::Inventory::V1beta2::CheckBulkRequest, ::Kessel::Inventory::V1beta2::CheckBulkResponse
           # Reports to Kessel Inventory that a Resource has been created or has been updated.
           #
           # Reporters can use this API to report facts about their resources in order to

data/lib/kessel/rbac/v2.rb

@@ -3,8 +3,6 @@
 require 'net/http'
 require 'uri'
 require 'json'
-require_relative 'v2_helpers'
-require_relative 'v2_http'
 require_relative '../inventory/v1beta2'
 
 module Kessel

data/lib/kessel/rbac/v2_helpers.rb

@@ -1,8 +1,12 @@
 # frozen_string_literal: true
 
+require_relative 'v2'
+
 module Kessel
   module RBAC
     module V2
+      include Kessel::Inventory::V1beta2
+
       def workspace_type
         RepresentationType.new(
           resource_type: 'workspace',

data/lib/kessel/rbac/v2_http.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require_relative 'v2'
+
 module Kessel
   module RBAC
     module V2

data/lib/kessel/version.rb

@@ -2,6 +2,6 @@
 
 module Kessel
   module Inventory
-    VERSION = '1.4.0'
+    VERSION = '1.5.0'
   end
 end

data/lib/kessel-sdk.rb

@@ -4,6 +4,8 @@ require 'kessel/version'
 require 'kessel/grpc'
 require 'kessel/auth'
 require 'kessel/rbac/v2'
+require 'kessel/rbac/v2_helpers'
+require 'kessel/rbac/v2_http'
 
 require 'kessel/inventory/v1'
 require 'kessel/inventory/v1beta1'

metadata

@@ -1,27 +1,27 @@
 --- !ruby/object:Gem::Specification
 name: kessel-sdk
 version: !ruby/object:Gem::Version
-  version: 1.4.0
+  version: 1.5.0
 platform: ruby
 authors:
 - Project Kessel
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-10-20 00:00:00.000000000 Z
+date: 2025-11-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: grpc
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 1.73.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 1.73.0
 - !ruby/object:Gem::Dependency
@@ -206,6 +206,7 @@ files:
 - lib/google/api/annotations_pb.rb
 - lib/google/api/field_behavior_pb.rb
 - lib/google/api/http_pb.rb
+- lib/google/rpc/status_pb.rb
 - lib/kessel-sdk.rb
 - lib/kessel/auth.rb
 - lib/kessel/grpc.rb
@@ -237,6 +238,8 @@ files:
 - lib/kessel/inventory/v1beta1/resources/resource_label_pb.rb
 - lib/kessel/inventory/v1beta2.rb
 - lib/kessel/inventory/v1beta2/allowed_pb.rb
+- lib/kessel/inventory/v1beta2/check_bulk_request_pb.rb
+- lib/kessel/inventory/v1beta2/check_bulk_response_pb.rb
 - lib/kessel/inventory/v1beta2/check_for_update_request_pb.rb
 - lib/kessel/inventory/v1beta2/check_for_update_response_pb.rb
 - lib/kessel/inventory/v1beta2/check_request_pb.rb