temper-rb 0.5.1

data/lib/temper/generated/models/embed_dispatch_summary.rb

@@ -0,0 +1,355 @@
+=begin
+#Temper Cloud API
+
+#Knowledge base management API for temper cloud
+
+The version of the OpenAPI document: 0.5.1
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.23.0
+
+=end
+
+require 'date'
+require 'time'
+
+module Temper::Generated
+  # Outcome of one embed-dispatch invocation (issue #299): across the invocation's claim loop, how many resource-keyed embed jobs were claimed, how many completed cleanly, how many failed (left for the reaper's retry→dead path), and the total chunks embedded. Returned by the `/api/embed/dispatch` drain so a cron/operator has observability. (An invocation loop-drains: it keeps claiming until the queue is empty or the wall-clock deadline is hit, so these counts span many claims, not one — see the `claimed` field.)
+  class EmbedDispatchSummary < ApiModelBase
+    # Total chunks embedded across all jobs this invocation, whether they completed or were re-enqueued.
+    attr_accessor :chunks_embedded
+
+    # Total jobs claimed across the invocation's claim loop. Each loop iteration claims ≤ the dispatch cap, so the invocation total routinely **exceeds** `cap` — and a re-enqueued partial re-claimed on a later iteration is counted again. `claimed = 30` at `cap = 5` is a healthy long invocation, not a bug.
+    attr_accessor :claimed
+
+    # Jobs whose resource embedded cleanly and were marked done.
+    attr_accessor :completed
+
+    # Jobs whose embed errored — left in_progress for the reaper to retry (then dead at max attempts).
+    attr_accessor :failed
+
+    # Jobs that embedded their per-claim chunk budget but still hold stale chunks, and were **re-enqueued** to resume later (a subsequent claim this same invocation, or a later tick). Not a failure — the normal path for a resource larger than one claim's budget (prod's biggest holds 939 chunks against a budget of 64). A persistently non-zero `partial` with `chunks_embedded` climbing is a drain making progress, not a stuck one.
+    attr_accessor :partial
+
+    # Dead embed jobs re-enqueued this invocation (Phase 4 re-drive). Zero unless the caller asked for a re-drive (`?redrive=true`); these resources are then eligible for the invocation's claim loop.
+    attr_accessor :redriven
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    def self.attribute_map
+      {
+        :'chunks_embedded' => :'chunks_embedded',
+        :'claimed' => :'claimed',
+        :'completed' => :'completed',
+        :'failed' => :'failed',
+        :'partial' => :'partial',
+        :'redriven' => :'redriven'
+      }
+    end
+
+    # Returns attribute mapping this model knows about
+    def self.acceptable_attribute_map
+      attribute_map
+    end
+
+    # Returns all the JSON keys this model knows about
+    def self.acceptable_attributes
+      acceptable_attribute_map.values
+    end
+
+    # Attribute type mapping.
+    def self.openapi_types
+      {
+        :'chunks_embedded' => :'Integer',
+        :'claimed' => :'Integer',
+        :'completed' => :'Integer',
+        :'failed' => :'Integer',
+        :'partial' => :'Integer',
+        :'redriven' => :'Integer'
+      }
+    end
+
+    # List of attributes with nullable: true
+    def self.openapi_nullable
+      Set.new([
+      ])
+    end
+
+    # Initializes the object
+    # @param [Hash] attributes Model attributes in the form of hash
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `Temper::Generated::EmbedDispatchSummary` initialize method"
+      end
+
+      # check to see if the attribute exists and convert string to symbol for hash key
+      acceptable_attribute_map = self.class.acceptable_attribute_map
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!acceptable_attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `Temper::Generated::EmbedDispatchSummary`. Please check the name to make sure it's valid. List of attributes: " + acceptable_attribute_map.keys.inspect
+        end
+        h[k.to_sym] = v
+      }
+
+      if attributes.key?(:'chunks_embedded')
+        self.chunks_embedded = attributes[:'chunks_embedded']
+      else
+        self.chunks_embedded = nil
+      end
+
+      if attributes.key?(:'claimed')
+        self.claimed = attributes[:'claimed']
+      else
+        self.claimed = nil
+      end
+
+      if attributes.key?(:'completed')
+        self.completed = attributes[:'completed']
+      else
+        self.completed = nil
+      end
+
+      if attributes.key?(:'failed')
+        self.failed = attributes[:'failed']
+      else
+        self.failed = nil
+      end
+
+      if attributes.key?(:'partial')
+        self.partial = attributes[:'partial']
+      else
+        self.partial = nil
+      end
+
+      if attributes.key?(:'redriven')
+        self.redriven = attributes[:'redriven']
+      else
+        self.redriven = nil
+      end
+    end
+
+    # Show invalid properties with the reasons. Usually used together with valid?
+    # @return Array for valid properties with the reasons
+    def list_invalid_properties
+      warn '[DEPRECATED] the `list_invalid_properties` method is obsolete'
+      invalid_properties = Array.new
+      if @chunks_embedded.nil?
+        invalid_properties.push('invalid value for "chunks_embedded", chunks_embedded cannot be nil.')
+      end
+
+      if @chunks_embedded < 0
+        invalid_properties.push('invalid value for "chunks_embedded", must be greater than or equal to 0.')
+      end
+
+      if @claimed.nil?
+        invalid_properties.push('invalid value for "claimed", claimed cannot be nil.')
+      end
+
+      if @claimed < 0
+        invalid_properties.push('invalid value for "claimed", must be greater than or equal to 0.')
+      end
+
+      if @completed.nil?
+        invalid_properties.push('invalid value for "completed", completed cannot be nil.')
+      end
+
+      if @completed < 0
+        invalid_properties.push('invalid value for "completed", must be greater than or equal to 0.')
+      end
+
+      if @failed.nil?
+        invalid_properties.push('invalid value for "failed", failed cannot be nil.')
+      end
+
+      if @failed < 0
+        invalid_properties.push('invalid value for "failed", must be greater than or equal to 0.')
+      end
+
+      if @partial.nil?
+        invalid_properties.push('invalid value for "partial", partial cannot be nil.')
+      end
+
+      if @partial < 0
+        invalid_properties.push('invalid value for "partial", must be greater than or equal to 0.')
+      end
+
+      if @redriven.nil?
+        invalid_properties.push('invalid value for "redriven", redriven cannot be nil.')
+      end
+
+      if @redriven < 0
+        invalid_properties.push('invalid value for "redriven", must be greater than or equal to 0.')
+      end
+
+      invalid_properties
+    end
+
+    # Check to see if the all the properties in the model are valid
+    # @return true if the model is valid
+    def valid?
+      warn '[DEPRECATED] the `valid?` method is obsolete'
+      return false if @chunks_embedded.nil?
+      return false if @chunks_embedded < 0
+      return false if @claimed.nil?
+      return false if @claimed < 0
+      return false if @completed.nil?
+      return false if @completed < 0
+      return false if @failed.nil?
+      return false if @failed < 0
+      return false if @partial.nil?
+      return false if @partial < 0
+      return false if @redriven.nil?
+      return false if @redriven < 0
+      true
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] chunks_embedded Value to be assigned
+    def chunks_embedded=(chunks_embedded)
+      if chunks_embedded.nil?
+        fail ArgumentError, 'chunks_embedded cannot be nil'
+      end
+
+      if chunks_embedded < 0
+        fail ArgumentError, 'invalid value for "chunks_embedded", must be greater than or equal to 0.'
+      end
+
+      @chunks_embedded = chunks_embedded
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] claimed Value to be assigned
+    def claimed=(claimed)
+      if claimed.nil?
+        fail ArgumentError, 'claimed cannot be nil'
+      end
+
+      if claimed < 0
+        fail ArgumentError, 'invalid value for "claimed", must be greater than or equal to 0.'
+      end
+
+      @claimed = claimed
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] completed Value to be assigned
+    def completed=(completed)
+      if completed.nil?
+        fail ArgumentError, 'completed cannot be nil'
+      end
+
+      if completed < 0
+        fail ArgumentError, 'invalid value for "completed", must be greater than or equal to 0.'
+      end
+
+      @completed = completed
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] failed Value to be assigned
+    def failed=(failed)
+      if failed.nil?
+        fail ArgumentError, 'failed cannot be nil'
+      end
+
+      if failed < 0
+        fail ArgumentError, 'invalid value for "failed", must be greater than or equal to 0.'
+      end
+
+      @failed = failed
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] partial Value to be assigned
+    def partial=(partial)
+      if partial.nil?
+        fail ArgumentError, 'partial cannot be nil'
+      end
+
+      if partial < 0
+        fail ArgumentError, 'invalid value for "partial", must be greater than or equal to 0.'
+      end
+
+      @partial = partial
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] redriven Value to be assigned
+    def redriven=(redriven)
+      if redriven.nil?
+        fail ArgumentError, 'redriven cannot be nil'
+      end
+
+      if redriven < 0
+        fail ArgumentError, 'invalid value for "redriven", must be greater than or equal to 0.'
+      end
+
+      @redriven = redriven
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param [Object] Object to be compared
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          chunks_embedded == o.chunks_embedded &&
+          claimed == o.claimed &&
+          completed == o.completed &&
+          failed == o.failed &&
+          partial == o.partial &&
+          redriven == o.redriven
+    end
+
+    # @see the `==` method
+    # @param [Object] Object to be compared
+    def eql?(o)
+      self == o
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    def hash
+      [chunks_embedded, claimed, completed, failed, partial, redriven].hash
+    end
+
+    # Builds the object from hash
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @return [Object] Returns the model itself
+    def self.build_from_hash(attributes)
+      return nil unless attributes.is_a?(Hash)
+      attributes = attributes.transform_keys(&:to_sym)
+      transformed_hash = {}
+      openapi_types.each_pair do |key, type|
+        if attributes.key?(attribute_map[key]) && attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = nil
+        elsif type =~ /\AArray<(.*)>/i
+          # check to ensure the input is an array given that the attribute
+          # is documented as an array but the input is not
+          if attributes[attribute_map[key]].is_a?(Array)
+            transformed_hash["#{key}"] = attributes[attribute_map[key]].map { |v| _deserialize($1, v) }
+          end
+        elsif !attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = _deserialize(type, attributes[attribute_map[key]])
+        end
+      end
+      new(transformed_hash)
+    end
+
+    # Returns the object in the form of hash
+    # @return [Hash] Returns the object in the form of hash
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+
+        hash[param] = _to_hash(value)
+      end
+      hash
+    end
+
+  end
+
+end

data/lib/temper/generated/models/enforcement_mode.rb

@@ -0,0 +1,40 @@
+=begin
+#Temper Cloud API
+
+#Knowledge base management API for temper cloud
+
+The version of the OpenAPI document: 0.5.1
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.23.0
+
+=end
+
+require 'date'
+require 'time'
+
+module Temper::Generated
+  class EnforcementMode
+    ADVISORY = "advisory".freeze
+    ENFORCING = "enforcing".freeze
+
+    def self.all_vars
+      @all_vars ||= [ADVISORY, ENFORCING].freeze
+    end
+
+    # Builds the enum from string
+    # @param [String] The enum value in the form of the string
+    # @return [String] The enum value
+    def self.build_from_hash(value)
+      new.build_from_hash(value)
+    end
+
+    # Builds the enum from string
+    # @param [String] The enum value in the form of the string
+    # @return [String] The enum value
+    def build_from_hash(value)
+      return value if EnforcementMode.all_vars.include?(value)
+      raise "Invalid ENUM value #{value} for class #EnforcementMode"
+    end
+  end
+end

data/lib/temper/generated/models/entitlements.rb

@@ -0,0 +1,234 @@
+=begin
+#Temper Cloud API
+
+#Knowledge base management API for temper cloud
+
+The version of the OpenAPI document: 0.5.1
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.23.0
+
+=end
+
+require 'date'
+require 'time'
+
+module Temper::Generated
+  # Entitlements included in the profile response — tells the client what this profile is allowed to do at the system level.  `Deserialize` is not decoration: `temper-client` reads this back off `GET /api/profile`, and before it was derived the client deserialized the response into a bare `Profile`, which has no `entitlements` field and no `deny_unknown_fields` — so serde dropped the whole object silently on every call. The CLI was fetching the authoritative access answer and discarding it.  **There is deliberately no narrowed `standing` field here.** One was built and removed: the premise was that a principal must not learn they were *revoked* rather than merely *denied*. That is not this system's posture. Spec D15 grants a revoked principal the right to request reconsideration — `Act::RequestReview` is legal from `Revoked` and from nothing else (`temper-principal/src/transition.rs`) — and a right nobody may be told they hold is not a right. Accordingly the refusal type names the state on purpose (`temper-principal/src/refusal.rs`: *\"access was revoked; you may request a review\"*), and the CLI routes it to a different remedy than `denied` (`temper-cli/src/access_gate.rs`). Narrowing here would have contradicted all of that while five other surfaces still disclosed it — and it also hid legitimate *rejections*, since rejection returns standing to `denied`.
+  class Entitlements < ApiModelBase
+    attr_accessor :is_admin
+
+    attr_accessor :join_request_status
+
+    # The caller's own standing, **as stored** — all five states, not a narrowed subset.  Reporting `revoked` and `deactivated` is deliberate and matches the rest of the system. Spec D15 grants a revoked principal the right to request reconsideration (`Act::RequestReview` is legal from `Revoked` and nothing else), so the refusal path names the state on purpose and routes it to a different remedy than `denied`. A narrowed three-variant version of this field was built and reverted: it contradicted that design while five other surfaces still disclosed the state, and it hid legitimate *rejections*, since rejection returns standing to `denied`.  **`None` means the server predates this field — never \"no standing\".** Absence of a standing row denies, and the producer reports that as `Denied`, so `None` carries exactly one meaning: this instance is older than the client asking. That matters because a CLI upgrades independently of the instance it talks to; a required field here would cost such a client the whole object, `system_access` included, which older servers answer correctly.  The `Option` alone buys that — serde's derive already reads a missing `Option` field as `None`, so no `#[serde(default)]` is needed and one here would be inert. Verified by probe: removing it changed nothing. `crates/temper-client/tests/profile_entitlements_test.rs` covers the absent-field case against a real body rather than a constructed value.  `Deactivated` is unreachable through `GET /api/profile`: a deactivated principal fails authentication outright (`temper-services/src/auth/mod.rs` Level-1 kill-switch) and never reaches a handler. It is in the type because the type is the stored state, not this endpoint's reachable subset.
+    attr_accessor :standing
+
+    attr_accessor :system_access
+
+    class EnumAttributeValidator
+      attr_reader :datatype
+      attr_reader :allowable_values
+
+      def initialize(datatype, allowable_values)
+        @allowable_values = allowable_values.map do |value|
+          case datatype.to_s
+          when /Integer/i
+            value.to_i
+          when /Float/i
+            value.to_f
+          else
+            value
+          end
+        end
+      end
+
+      def valid?(value)
+        !value || allowable_values.include?(value)
+      end
+    end
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    def self.attribute_map
+      {
+        :'is_admin' => :'is_admin',
+        :'join_request_status' => :'join_request_status',
+        :'standing' => :'standing',
+        :'system_access' => :'system_access'
+      }
+    end
+
+    # Returns attribute mapping this model knows about
+    def self.acceptable_attribute_map
+      attribute_map
+    end
+
+    # Returns all the JSON keys this model knows about
+    def self.acceptable_attributes
+      acceptable_attribute_map.values
+    end
+
+    # Attribute type mapping.
+    def self.openapi_types
+      {
+        :'is_admin' => :'Boolean',
+        :'join_request_status' => :'JoinRequestStatus',
+        :'standing' => :'Standing',
+        :'system_access' => :'Boolean'
+      }
+    end
+
+    # List of attributes with nullable: true
+    def self.openapi_nullable
+      Set.new([
+        :'join_request_status',
+        :'standing',
+      ])
+    end
+
+    # Initializes the object
+    # @param [Hash] attributes Model attributes in the form of hash
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `Temper::Generated::Entitlements` initialize method"
+      end
+
+      # check to see if the attribute exists and convert string to symbol for hash key
+      acceptable_attribute_map = self.class.acceptable_attribute_map
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!acceptable_attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `Temper::Generated::Entitlements`. Please check the name to make sure it's valid. List of attributes: " + acceptable_attribute_map.keys.inspect
+        end
+        h[k.to_sym] = v
+      }
+
+      if attributes.key?(:'is_admin')
+        self.is_admin = attributes[:'is_admin']
+      else
+        self.is_admin = nil
+      end
+
+      if attributes.key?(:'join_request_status')
+        self.join_request_status = attributes[:'join_request_status']
+      end
+
+      if attributes.key?(:'standing')
+        self.standing = attributes[:'standing']
+      end
+
+      if attributes.key?(:'system_access')
+        self.system_access = attributes[:'system_access']
+      else
+        self.system_access = nil
+      end
+    end
+
+    # Show invalid properties with the reasons. Usually used together with valid?
+    # @return Array for valid properties with the reasons
+    def list_invalid_properties
+      warn '[DEPRECATED] the `list_invalid_properties` method is obsolete'
+      invalid_properties = Array.new
+      if @is_admin.nil?
+        invalid_properties.push('invalid value for "is_admin", is_admin cannot be nil.')
+      end
+
+      if @system_access.nil?
+        invalid_properties.push('invalid value for "system_access", system_access cannot be nil.')
+      end
+
+      invalid_properties
+    end
+
+    # Check to see if the all the properties in the model are valid
+    # @return true if the model is valid
+    def valid?
+      warn '[DEPRECATED] the `valid?` method is obsolete'
+      return false if @is_admin.nil?
+      return false if @system_access.nil?
+      true
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] is_admin Value to be assigned
+    def is_admin=(is_admin)
+      if is_admin.nil?
+        fail ArgumentError, 'is_admin cannot be nil'
+      end
+
+      @is_admin = is_admin
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] system_access Value to be assigned
+    def system_access=(system_access)
+      if system_access.nil?
+        fail ArgumentError, 'system_access cannot be nil'
+      end
+
+      @system_access = system_access
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param [Object] Object to be compared
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          is_admin == o.is_admin &&
+          join_request_status == o.join_request_status &&
+          standing == o.standing &&
+          system_access == o.system_access
+    end
+
+    # @see the `==` method
+    # @param [Object] Object to be compared
+    def eql?(o)
+      self == o
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    def hash
+      [is_admin, join_request_status, standing, system_access].hash
+    end
+
+    # Builds the object from hash
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @return [Object] Returns the model itself
+    def self.build_from_hash(attributes)
+      return nil unless attributes.is_a?(Hash)
+      attributes = attributes.transform_keys(&:to_sym)
+      transformed_hash = {}
+      openapi_types.each_pair do |key, type|
+        if attributes.key?(attribute_map[key]) && attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = nil
+        elsif type =~ /\AArray<(.*)>/i
+          # check to ensure the input is an array given that the attribute
+          # is documented as an array but the input is not
+          if attributes[attribute_map[key]].is_a?(Array)
+            transformed_hash["#{key}"] = attributes[attribute_map[key]].map { |v| _deserialize($1, v) }
+          end
+        elsif !attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = _deserialize(type, attributes[attribute_map[key]])
+        end
+      end
+      new(transformed_hash)
+    end
+
+    # Returns the object in the form of hash
+    # @return [Hash] Returns the object in the form of hash
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+
+        hash[param] = _to_hash(value)
+      end
+      hash
+    end
+
+  end
+
+end