@aifabrix/builder 2.46.0 → 2.47.1

package/.npmrc.token

@@ -0,0 +1 @@
+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

package/.temp/jest-protection-convert/run-IFN2nv/.protection/hubspot-companies.json

@@ -0,0 +1 @@
+{"apiVersion":"dataplane.aifabrix.ai/v1","kind":"Protection","metadata":{"key":"hubspot-country-sales","displayName":"HubSpot Country Sales Access"},"spec":{"enabled":true,"datasourceKey":"hubspot-companies","mode":"replaceForSource","rules":[{"key":"sales-country-users","principal":{"type":"group","expression":"Sales {{fk.country.metadata.iso3}} Users"},"grants":[{"dimensionKey":"country","valueExpression":"{{fk.country.metadata.iso2}}"}]}]}}

package/.temp/jest-protection-convert/run-IvmKLO/.protection/hubspot-companies.yaml

@@ -0,0 +1,17 @@
+apiVersion: dataplane.aifabrix.ai/v1
+kind: Protection
+metadata:
+  key: hubspot-country-sales
+  displayName: HubSpot Country Sales Access
+spec:
+  enabled: true
+  datasourceKey: hubspot-companies
+  mode: replaceForSource
+  rules:
+    - key: sales-country-users
+      principal:
+        type: group
+        expression: "Sales {{fk.country.metadata.iso3}} Users"
+      grants:
+        - dimensionKey: country
+          valueExpression: "{{fk.country.metadata.iso2}}"

package/.temp/jest-protection-convert/run-SdvblF/.protection/hubspot-companies.json

@@ -0,0 +1 @@
+{"kind":"Protection"}

package/.temp/jest-protection-convert/run-b51TsW/.protection/hubspot-companies.json

@@ -0,0 +1 @@
+{"apiVersion":"dataplane.aifabrix.ai/v1","kind":"Protection","metadata":{"key":"hubspot-country-sales","displayName":"HubSpot Country Sales Access"},"spec":{"enabled":true,"datasourceKey":"hubspot-companies","mode":"replaceForSource","rules":[{"key":"sales-country-users","principal":{"type":"group","expression":"Sales {{fk.country.metadata.iso3}} Users"},"grants":[{"dimensionKey":"country","valueExpression":"{{fk.country.metadata.iso2}}"}]}]}}

package/.temp/jest-protection-convert/run-fiLmb1/.protection/hubspot-companies.json

@@ -0,0 +1 @@
+{"kind":"Protection"}

package/.temp/jest-protection-convert/run-qYGHMU/.protection/hubspot-companies.yaml

@@ -0,0 +1,17 @@
+apiVersion: dataplane.aifabrix.ai/v1
+kind: Protection
+metadata:
+  key: hubspot-country-sales
+  displayName: HubSpot Country Sales Access
+spec:
+  enabled: true
+  datasourceKey: hubspot-companies
+  mode: replaceForSource
+  rules:
+    - key: sales-country-users
+      principal:
+        type: group
+        expression: "Sales {{fk.country.metadata.iso3}} Users"
+      grants:
+        - dimensionKey: country
+          valueExpression: "{{fk.country.metadata.iso2}}"

package/.temp/jest-protection-fixtures/hubspot-Mq5re8/hubspot-companies.yaml

@@ -0,0 +1,17 @@
+apiVersion: dataplane.aifabrix.ai/v1
+kind: Protection
+metadata:
+  key: hubspot-country-sales
+  displayName: HubSpot Country Sales Access
+spec:
+  enabled: true
+  datasourceKey: hubspot-companies
+  mode: replaceForSource
+  rules:
+    - key: sales-country-users
+      principal:
+        type: group
+        expression: "Sales {{fk.country.metadata.iso3}} Users"
+      grants:
+        - dimensionKey: country
+          valueExpression: "{{fk.country.metadata.iso2}}"

package/.temp/jest-protection-fixtures/hubspot-f3u4YL/hubspot-companies.yaml

@@ -0,0 +1,17 @@
+apiVersion: dataplane.aifabrix.ai/v1
+kind: Protection
+metadata:
+  key: hubspot-country-sales
+  displayName: HubSpot Country Sales Access
+spec:
+  enabled: true
+  datasourceKey: hubspot-companies
+  mode: replaceForSource
+  rules:
+    - key: sales-country-users
+      principal:
+        type: group
+        expression: "Sales {{fk.country.metadata.iso3}} Users"
+      grants:
+        - dimensionKey: country
+          valueExpression: "{{fk.country.metadata.iso2}}"

package/.temp/jest-protection-fixtures/hubspot-iQtd1O/hubspot-companies.yaml

@@ -0,0 +1,17 @@
+apiVersion: dataplane.aifabrix.ai/v1
+kind: Protection
+metadata:
+  key: hubspot-country-sales
+  displayName: HubSpot Country Sales Access
+spec:
+  enabled: true
+  datasourceKey: hubspot-companies
+  mode: replaceForSource
+  rules:
+    - key: sales-country-users
+      principal:
+        type: group
+        expression: "Sales {{fk.country.metadata.iso3}} Users"
+      grants:
+        - dimensionKey: country
+          valueExpression: "{{fk.country.metadata.iso2}}"

package/.temp/jest-protection-fixtures/hubspot-mdmz5M/hubspot-companies.yaml

@@ -0,0 +1,17 @@
+apiVersion: dataplane.aifabrix.ai/v1
+kind: Protection
+metadata:
+  key: hubspot-country-sales
+  displayName: HubSpot Country Sales Access
+spec:
+  enabled: true
+  datasourceKey: hubspot-companies
+  mode: replaceForSource
+  rules:
+    - key: sales-country-users
+      principal:
+        type: group
+        expression: "Sales {{fk.country.metadata.iso3}} Users"
+      grants:
+        - dimensionKey: country
+          valueExpression: "{{fk.country.metadata.iso2}}"

package/.temp/jest-protection-fixtures/hubspot-qbKYxQ/hubspot-companies.yaml

@@ -0,0 +1,17 @@
+apiVersion: dataplane.aifabrix.ai/v1
+kind: Protection
+metadata:
+  key: hubspot-country-sales
+  displayName: HubSpot Country Sales Access
+spec:
+  enabled: true
+  datasourceKey: hubspot-companies
+  mode: replaceForSource
+  rules:
+    - key: sales-country-users
+      principal:
+        type: group
+        expression: "Sales {{fk.country.metadata.iso3}} Users"
+      grants:
+        - dimensionKey: country
+          valueExpression: "{{fk.country.metadata.iso2}}"

package/.temp/jest-protection-fixtures/hubspot-yzlJy6/hubspot-companies.yaml

@@ -0,0 +1,17 @@
+apiVersion: dataplane.aifabrix.ai/v1
+kind: Protection
+metadata:
+  key: hubspot-country-sales
+  displayName: HubSpot Country Sales Access
+spec:
+  enabled: true
+  datasourceKey: hubspot-companies
+  mode: replaceForSource
+  rules:
+    - key: sales-country-users
+      principal:
+        type: group
+        expression: "Sales {{fk.country.metadata.iso3}} Users"
+      grants:
+        - dimensionKey: country
+          valueExpression: "{{fk.country.metadata.iso2}}"

package/.temp/validation/summary.txt

@@ -0,0 +1,5 @@
+lint:fix exit=0
+lint exit=0
+test exit=0
+miso typecheck exit=0
+miso build exit=0

package/jest.isolated-projects.js

@@ -40,7 +40,13 @@ const ISOLATED_SUITE_ENTRIES = [
   ],
   ['database-secret-values', ['**/tests/lib/parameters/database-secret-values.test.js']],
   ['infra-parameter-validate', ['**/tests/lib/parameters/infra-parameter-validate.test.js']],
-  ['infra-parameter-catalog', ['**/tests/lib/parameters/infra-parameter-catalog.test.js']],
+  [
+    'infra-parameter-catalog',
+    [
+      '**/tests/lib/parameters/infra-parameter-catalog.test.js',
+      '**/tests/lib/utils/platform-kv-ref.test.js'
+    ]
+  ],
   ['urls-local-registry', ['**/tests/lib/utils/urls-local-registry.test.js']],
   ['aifabrix-runtime-config-dir', ['**/tests/lib/utils/aifabrix-runtime-config-dir.test.js']],
   ['platform-env-template-kv-catalog', ['**/tests/lib/parameters/platform-env-template-kv-catalog.test.js']],
@@ -77,6 +83,8 @@ const ISOLATED_SUITE_ENTRIES = [
   ['generator-validation', ['**/tests/lib/generator/generator-validation.test.js']],
   ['secrets-databaselog', ['**/tests/lib/core/secrets-databaselog.test.js']],
   ['schema-241-alignment', ['**/tests/lib/validation/schema-241-alignment.test.js']],
+  ['hubspot-e2e-com-v2', ['**/tests/lib/validation/hubspot-e2e-com-v2.test.js']],
+  ['runtime-configuration-download', ['**/tests/lib/utils/runtime-configuration-download.test.js']],
   ['schema-resolver-order', ['**/tests/lib/utils/schema-resolver-order.test.js']],
   ['app-module', ['**/tests/lib/app/app.test.js']],
   ['admin-secrets', ['**/tests/lib/core/admin-secrets.test.js']],
@@ -110,7 +118,15 @@ const ISOLATED_SUITE_ENTRIES = [
   ['aifabrix-runtime-sandbox', ['**/tests/helpers/aifabrix-runtime-sandbox.test.js']],
   ['aifabrix-runtime-backup', ['**/tests/helpers/aifabrix-runtime-backup.test.js']],
   ['paths-jest-sandbox-integration', ['**/tests/lib/utils/paths-jest-sandbox-integration.test.js']],
-  ['secrets-remove-all-guard', ['**/tests/lib/commands/secrets-remove-all-guard.test.js']]
+  ['secrets-remove-all-guard', ['**/tests/lib/commands/secrets-remove-all-guard.test.js']],
+  ['app-logs', ['**/tests/lib/commands/app-logs.test.js']],
+  [
+    'channel-real-fs',
+    [
+      '**/tests/lib/channels/channel-integration-generator.test.js',
+      '**/tests/lib/channels/channel-artifact-generator.test.js'
+    ]
+  ]
 ];
 
 /**

package/jest.projects.js

@@ -116,6 +116,10 @@ const defaultProject = {
       '\\\\tests\\\\lib\\\\parameters\\\\infra-parameter-catalog.test.js',
       'lib/parameters/infra-parameter-catalog.test.js',
       'infra-parameter-catalog\\.test\\.js',
+      '/tests/lib/utils/platform-kv-ref.test.js',
+      '\\\\tests\\\\lib\\\\utils\\\\platform-kv-ref.test.js',
+      'lib/utils/platform-kv-ref.test.js',
+      'platform-kv-ref\\.test\\.js',
       '/tests/lib/utils/urls-local-registry.test.js',
       '\\\\tests\\\\lib\\\\utils\\\\urls-local-registry.test.js',
       'lib/utils/urls-local-registry.test.js',
@@ -252,6 +256,14 @@ const defaultProject = {
       '\\\\tests\\\\lib\\\\validation\\\\schema-241-alignment.test.js',
       'lib/validation/schema-241-alignment.test.js',
       'schema-241-alignment\\.test\\.js',
+      '/tests/lib/validation/hubspot-e2e-com-v2.test.js',
+      '\\\\tests\\\\lib\\\\validation\\\\hubspot-e2e-com-v2.test.js',
+      'lib/validation/hubspot-e2e-com-v2.test.js',
+      'hubspot-e2e-com-v2\\.test\\.js',
+      '/tests/lib/utils/runtime-configuration-download.test.js',
+      '\\\\tests\\\\lib\\\\utils\\\\runtime-configuration-download.test.js',
+      'lib/utils/runtime-configuration-download.test.js',
+      'runtime-configuration-download\\.test\\.js',
       '/tests/lib/utils/schema-resolver-order.test.js',
       '\\\\tests\\\\lib\\\\utils\\\\schema-resolver-order.test.js',
       'lib/utils/schema-resolver-order.test.js',
@@ -335,6 +347,18 @@ const defaultProject = {
       '\\\\tests\\\\lib\\\\commands\\\\secrets-remove-all-guard.test.js',
       'lib/commands/secrets-remove-all-guard.test.js',
       'secrets-remove-all-guard\\.test\\.js',
+      '/tests/lib/commands/app-logs.test.js',
+      '\\\\tests\\\\lib\\\\commands\\\\app-logs.test.js',
+      'lib/commands/app-logs.test.js',
+      'app-logs\\.test\\.js',
+      '/tests/lib/channels/channel-integration-generator.test.js',
+      '\\\\tests\\\\lib\\\\channels\\\\channel-integration-generator.test.js',
+      'lib/channels/channel-integration-generator.test.js',
+      'channel-integration-generator\\.test\\.js',
+      '/tests/lib/channels/channel-artifact-generator.test.js',
+      '\\\\tests\\\\lib\\\\channels\\\\channel-artifact-generator.test.js',
+      'lib/channels/channel-artifact-generator.test.js',
+      'channel-artifact-generator\\.test\\.js',
       '/tests/setup-ci-live-fabrix-guard.test.js',
       '\\\\tests\\\\setup-ci-live-fabrix-guard.test.js',
       'setup-ci-live-fabrix-guard\\.test\\.js'

package/lib/api/dataplane-health.api.js

@@ -90,6 +90,17 @@ function parseGeneralHealthResponse(response, endpoint) {
  *          Snapshot, or null when both endpoints fail
  * @throws {Error} When dataplaneUrl is missing or not a string
  */
+/**
+ * @param {'v1-first'|'legacy-first'} [endpointOrder]
+ * @returns {[string, string]}
+ */
+function healthEndpointOrder(endpointOrder) {
+  if (endpointOrder === 'legacy-first') {
+    return [FALLBACK_ENDPOINT, PRIMARY_ENDPOINT];
+  }
+  return [PRIMARY_ENDPOINT, FALLBACK_ENDPOINT];
+}
+
 async function fetchDataplaneGeneralHealth(dataplaneUrl, options = {}) {
   if (!dataplaneUrl || typeof dataplaneUrl !== 'string') {
     throw new Error('dataplaneUrl is required and must be a string');
@@ -100,13 +111,14 @@ async function fetchDataplaneGeneralHealth(dataplaneUrl, options = {}) {
     requestOpts.timeoutMs = options.timeoutMs;
   }
 
-  const primary = await safeGet(client, PRIMARY_ENDPOINT, requestOpts);
-  const primarySnapshot = parseGeneralHealthResponse(primary, PRIMARY_ENDPOINT);
-  if (primarySnapshot) return primarySnapshot;
-
-  const fallback = await safeGet(client, FALLBACK_ENDPOINT, requestOpts);
-  const fallbackSnapshot = parseGeneralHealthResponse(fallback, FALLBACK_ENDPOINT);
-  if (fallbackSnapshot) return fallbackSnapshot;
+  const endpoints = healthEndpointOrder(options.endpointOrder);
+  for (const endpoint of endpoints) {
+    const response = await safeGet(client, endpoint, requestOpts);
+    const snapshot = parseGeneralHealthResponse(response, endpoint);
+    if (snapshot) {
+      return snapshot;
+    }
+  }
 
   return null;
 }

package/lib/api/lifecycle.api.js

@@ -71,7 +71,28 @@ async function runSystemLifecycle(dataplaneUrl, authConfig, systemKey, body = {}
   return unwrapped;
 }
 
+async function runSystemVerifyTrust(dataplaneUrl, authConfig, systemKey, body = {}) {
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
+  const res = await client.post(
+    `/api/v1/external/systems/${encodeURIComponent(systemKey)}/verify-trust`,
+    { body }
+  );
+  if (res && res.success === false) {
+    const msg =
+      (res.error && (res.error.formattedError || res.error.error || res.error.message)) ||
+      res.formattedError ||
+      'verify-trust request failed';
+    throw new Error(msg);
+  }
+  const unwrapped = unwrapApiData(res);
+  if (!unwrapped || !unwrapped.systemKey) {
+    throw new Error('verify-trust returned an unexpected response shape');
+  }
+  return unwrapped;
+}
+
 module.exports = {
   getSystemLifecycleReport,
-  runSystemLifecycle
+  runSystemLifecycle,
+  runSystemVerifyTrust
 };

package/lib/api/resource-types.api.js

@@ -0,0 +1,107 @@
+/**
+ * @fileoverview Resource types API (Controller /api/v1/resource-types)
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+'use strict';
+
+const { ApiClient } = require('./index');
+
+const BASE = '/api/v1/resource-types';
+
+/**
+ * List resource types (paginated)
+ * @requiresPermission {Controller} resourceTypes:read
+ * @async
+ * @function listResourceTypes
+ * @param {string} controllerUrl
+ * @param {Object} authConfig
+ * @param {Object} [options]
+ * @param {number} [options.page]
+ * @param {number} [options.pageSize]
+ * @param {string} [options.sort]
+ * @param {string} [options.filter]
+ * @param {string} [options.search]
+ * @param {string} [options.category]
+ * @param {string} [options.status]
+ * @returns {Promise<Object>}
+ */
+async function listResourceTypes(controllerUrl, authConfig, options = {}) {
+  const client = new ApiClient(controllerUrl, authConfig);
+  return await client.get(BASE, { params: options });
+}
+
+/**
+ * Get a resource type by id or key
+ * @requiresPermission {Controller} resourceTypes:read
+ * @async
+ * @function getResourceType
+ * @param {string} controllerUrl
+ * @param {Object} authConfig
+ * @param {string} resourceTypeIdOrKey
+ * @returns {Promise<Object>}
+ */
+async function getResourceType(controllerUrl, authConfig, resourceTypeIdOrKey) {
+  const client = new ApiClient(controllerUrl, authConfig);
+  return await client.get(`${BASE}/${encodeURIComponent(resourceTypeIdOrKey)}`);
+}
+
+/**
+ * Create a resource type
+ * @requiresPermission {Controller} resourceTypes:create
+ * @async
+ * @function createResourceType
+ * @param {string} controllerUrl
+ * @param {Object} authConfig
+ * @param {import('./types/resource-types.types').CreateResourceTypeRequest} body
+ * @returns {Promise<Object>}
+ */
+async function createResourceType(controllerUrl, authConfig, body) {
+  const client = new ApiClient(controllerUrl, authConfig);
+  const payload = {
+    key: body.key,
+    displayName: body.displayName
+  };
+  if (body.description !== undefined && body.description !== null && body.description !== '') {
+    payload.description = body.description;
+  }
+  if (body.category) payload.category = body.category;
+  if (body.defaultRiskLevel) payload.defaultRiskLevel = body.defaultRiskLevel;
+  if (body.status) payload.status = body.status;
+  return await client.post(BASE, { body: payload });
+}
+
+/**
+ * Create-if-missing (idempotent): if a resource type already exists for the key, return success.
+ * @requiresPermission {Controller} resourceTypes:read + resourceTypes:create
+ * @async
+ * @function createResourceTypeIdempotent
+ * @param {string} controllerUrl
+ * @param {Object} authConfig
+ * @param {import('./types/resource-types.types').CreateResourceTypeRequest} body
+ * @returns {Promise<{ created: boolean, response: Object }>}
+ */
+async function createResourceTypeIdempotent(controllerUrl, authConfig, body) {
+  const key = String(body?.key || '').trim();
+  if (!key) {
+    throw new Error('Resource type key is required');
+  }
+  const getRes = await getResourceType(controllerUrl, authConfig, key);
+  if (getRes && getRes.success === true) {
+    return { created: false, response: getRes };
+  }
+  const createRes = await createResourceType(controllerUrl, authConfig, body);
+  if (createRes && createRes.success === true) {
+    return { created: true, response: createRes };
+  }
+  const msg = createRes?.error || createRes?.formattedError || 'Failed to create resource type';
+  throw new Error(msg);
+}
+
+module.exports = {
+  listResourceTypes,
+  getResourceType,
+  createResourceType,
+  createResourceTypeIdempotent
+};

package/lib/api/runtime-configuration.api.js

@@ -0,0 +1,72 @@
+/**
+ * @fileoverview Runtime configuration variable API (dataplane configuration_values)
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+const { createDataplaneApiClient } = require('./index');
+
+/**
+ * GET /api/v1/external/systems/{systemIdOrKey}/configuration
+ * @requiresPermission {Dataplane} external-system:read
+ */
+async function getExternalSystemConfiguration(dataplaneUrl, systemIdOrKey, authConfig) {
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
+  return await client.get(`/api/v1/external/systems/${systemIdOrKey}/configuration`);
+}
+
+/**
+ * PUT /api/v1/external/systems/{systemIdOrKey}/configuration
+ * @requiresPermission {Dataplane} external-system:update
+ * @param {{ name: string, value?: string|null, kvKey?: string|null }} body
+ */
+async function putExternalSystemConfiguration(dataplaneUrl, systemIdOrKey, authConfig, body) {
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
+  return await client.put(`/api/v1/external/systems/${systemIdOrKey}/configuration`, { body });
+}
+
+/**
+ * GET /api/v1/external/{sourceIdOrKey}/configuration
+ * @requiresPermission {Dataplane} external-data-source:read
+ */
+async function getExternalDataSourceConfiguration(dataplaneUrl, sourceIdOrKey, authConfig) {
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
+  return await client.get(`/api/v1/external/${sourceIdOrKey}/configuration`);
+}
+
+/**
+ * GET /api/v1/external/systems/{systemIdOrKey}/configuration/resolved
+ * @requiresPermission {Dataplane} external-system:configuration:resolve
+ */
+async function getExternalSystemConfigurationResolved(dataplaneUrl, systemIdOrKey, authConfig) {
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
+  return await client.get(`/api/v1/external/systems/${systemIdOrKey}/configuration/resolved`);
+}
+
+/**
+ * GET /api/v1/external/{sourceIdOrKey}/configuration/resolved
+ * @requiresPermission {Dataplane} external-data-source:configuration:resolve
+ */
+async function getExternalDataSourceConfigurationResolved(dataplaneUrl, sourceIdOrKey, authConfig) {
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
+  return await client.get(`/api/v1/external/${sourceIdOrKey}/configuration/resolved`);
+}
+
+/**
+ * PUT /api/v1/external/{sourceIdOrKey}/configuration
+ * @requiresPermission {Dataplane} external-data-source:update
+ * @param {{ name: string, value?: string|null, kvKey?: string|null }} body
+ */
+async function putExternalDataSourceConfiguration(dataplaneUrl, sourceIdOrKey, authConfig, body) {
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
+  return await client.put(`/api/v1/external/${sourceIdOrKey}/configuration`, { body });
+}
+
+module.exports = {
+  getExternalSystemConfiguration,
+  getExternalSystemConfigurationResolved,
+  putExternalSystemConfiguration,
+  getExternalDataSourceConfiguration,
+  getExternalDataSourceConfigurationResolved,
+  putExternalDataSourceConfiguration
+};

package/lib/api/types/resource-types.types.js

@@ -0,0 +1,45 @@
+/**
+ * @fileoverview Resource type catalog API type definitions
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+/**
+ * Resource type category
+ * @typedef {'business'|'collaboration'|'governance'|'content'|'communication'|'people'} ResourceTypeCategory
+ */
+
+/**
+ * Resource type risk level
+ * @typedef {'low'|'medium'|'high'|'critical'} ResourceTypeRiskLevel
+ */
+
+/**
+ * Resource type lifecycle status
+ * @typedef {'draft'|'active'|'deprecated'|'retired'} ResourceTypeStatus
+ */
+
+/**
+ * Create resource type request body
+ * @typedef {Object} CreateResourceTypeRequest
+ * @property {string} key - Catalog key (lowercase, hyphens)
+ * @property {string} displayName - Human-readable name
+ * @property {string} [description] - Optional description
+ * @property {ResourceTypeCategory} [category] - Catalog category
+ * @property {ResourceTypeRiskLevel} [defaultRiskLevel] - Default risk level
+ * @property {ResourceTypeStatus} [status] - Lifecycle status
+ */
+
+/**
+ * Resource type record
+ * @typedef {Object} ResourceTypeRecord
+ * @property {string} id - Controller id
+ * @property {string} key - Catalog key
+ * @property {string} displayName - Display name
+ * @property {string} [description] - Description
+ * @property {ResourceTypeCategory} category - Category
+ * @property {ResourceTypeRiskLevel} defaultRiskLevel - Default risk
+ * @property {ResourceTypeStatus} status - Status
+ */
+
+module.exports = {};

package/lib/api/user-groups.api.js

@@ -9,20 +9,20 @@
 const { ApiClient } = require('./index');
 
 /**
- * Add user to group
+ * Add user to group (flexible path segments per plan 194)
  * @requiresPermission {Controller} users:update
  * @async
  * @param {string} controllerUrl
  * @param {Object} authConfig
- * @param {string} userId
- * @param {string} groupId
+ * @param {string} userIdOrEmail - UUID, email, or username
+ * @param {string} groupIdOrName - UUID or group name
  * @param {Object} [body]
  * @returns {Promise<Object>}
  */
-async function addUserToGroup(controllerUrl, authConfig, userId, groupId, body = {}) {
+async function addUserToGroup(controllerUrl, authConfig, userIdOrEmail, groupIdOrName, body = {}) {
   const client = new ApiClient(controllerUrl, authConfig);
   return await client.post(
-    `/api/v1/users/${encodeURIComponent(userId)}/groups/${encodeURIComponent(groupId)}`,
+    `/api/v1/users/${encodeURIComponent(userIdOrEmail)}/groups/${encodeURIComponent(groupIdOrName)}`,
     { body }
   );
 }
@@ -33,14 +33,14 @@ async function addUserToGroup(controllerUrl, authConfig, userId, groupId, body =
  * @async
  * @param {string} controllerUrl
  * @param {Object} authConfig
- * @param {string} userId
- * @param {string} groupId
+ * @param {string} userIdOrEmail - UUID, email, or username
+ * @param {string} groupIdOrName - UUID or group name
  * @returns {Promise<Object>}
  */
-async function removeUserFromGroup(controllerUrl, authConfig, userId, groupId) {
+async function removeUserFromGroup(controllerUrl, authConfig, userIdOrEmail, groupIdOrName) {
   const client = new ApiClient(controllerUrl, authConfig);
   return await client.delete(
-    `/api/v1/users/${encodeURIComponent(userId)}/groups/${encodeURIComponent(groupId)}`
+    `/api/v1/users/${encodeURIComponent(userIdOrEmail)}/groups/${encodeURIComponent(groupIdOrName)}`
   );
 }
 

package/lib/api/users.api.js

@@ -25,22 +25,22 @@ async function listUsers(controllerUrl, authConfig, options = {}) {
 }
 
 /**
- * Get user by id
+ * Get user by id, email, or username (controller path: userIdOrEmail)
  * @requiresPermission {Controller} users:read
  * @async
  * @param {string} controllerUrl
  * @param {Object} authConfig
- * @param {string} userId
+ * @param {string} userIdOrEmail - UUID, email, or username
  * @param {Object} [options]
  * @returns {Promise<Object>}
  */
-async function getUser(controllerUrl, authConfig, userId, options = {}) {
+async function getUser(controllerUrl, authConfig, userIdOrEmail, options = {}) {
   const client = new ApiClient(controllerUrl, authConfig);
   const params = {};
   if (options.includeGroups) {
     params.includeGroups = 'true';
   }
-  return await client.get(`${BASE}/${encodeURIComponent(userId)}`, { params });
+  return await client.get(`${BASE}/${encodeURIComponent(userIdOrEmail)}`, { params });
 }
 
 /**
@@ -73,17 +73,17 @@ async function updateUser(controllerUrl, authConfig, userId, body) {
 }
 
 /**
- * List groups for a user
+ * List groups for a user (controller path: userIdOrEmail)
  * @requiresPermission {Controller} users:read
  * @async
  * @param {string} controllerUrl
  * @param {Object} authConfig
- * @param {string} userId
+ * @param {string} userIdOrEmail - UUID, email, or username
  * @returns {Promise<Object>}
  */
-async function listUserGroups(controllerUrl, authConfig, userId) {
+async function listUserGroups(controllerUrl, authConfig, userIdOrEmail) {
   const client = new ApiClient(controllerUrl, authConfig);
-  return await client.get(`${BASE}/${encodeURIComponent(userId)}/groups`);
+  return await client.get(`${BASE}/${encodeURIComponent(userIdOrEmail)}/groups`);
 }
 
 module.exports = {