@blimu/backend 1.2.0 → 1.2.2

package/README.md

@@ -19,7 +19,12 @@ import { BlimuClient } from '@blimu/backend';
 const client = new BlimuClient({
   baseURL: 'https://api.blimu.dev',
   timeoutMs: 10000,
-  retry: { retries: 2, strategy: 'exponential', backoffMs: 300, retryOn: [429, 500, 502, 503, 504] },
+  retry: {
+    retries: 2,
+    strategy: 'exponential',
+    backoffMs: 300,
+    retryOn: [429, 500, 502, 503, 504],
+  },
   // Auth configuration
   authStrategies: [
     {
@@ -29,12 +34,20 @@ const client = new BlimuClient({
   ],
 });
 
+// Example: Get JSON Web Key Set for environment (Public)
+try {
+  const result = await client.authJwks.getJwks();
+  console.log('Result:', result);
+} catch (error) {
+  // FetchError with structured data
+  console.error(error);
+}
 // Example: Bulk create resources
 try {
   const result = await client.bulkResources.create(
-    'resourceType'
-    
-    , {
+    'resourceType',
+
+    {
       // Request body data
     }
   );
@@ -45,13 +58,9 @@ try {
 }
 // Example: Bulk create roles
 try {
-  const result = await client.bulkRoles.create(
-    
-    
-    {
-      // Request body data
-    }
-  );
+  const result = await client.bulkRoles.create({
+    // Request body data
+  });
   console.log('Result:', result);
 } catch (error) {
   // FetchError with structured data
@@ -59,13 +68,19 @@ try {
 }
 // Example: Check if a user has a specific entitlement on a resource
 try {
-  const result = await client.entitlements.checkEntitlement(
-    
-    
-    {
-      // Request body data
-    }
-  );
+  const result = await client.entitlements.checkEntitlement({
+    // Request body data
+  });
+  console.log('Result:', result);
+} catch (error) {
+  // FetchError with structured data
+  console.error(error);
+}
+// Example: Check consent requirement
+try {
+  const result = await client.oauth.checkConsentRequired({
+    client_id: 'example',
+  });
   console.log('Result:', result);
 } catch (error) {
   // FetchError with structured data
@@ -73,11 +88,7 @@ try {
 }
 // Example: Remove plan assignment from a tenant resource
 try {
-  const result = await client.plans.delete(
-    'resourceType', 'resourceId'
-    
-    
-  );
+  const result = await client.plans.delete('resourceType', 'resourceId');
   console.log('Result:', result);
 } catch (error) {
   // FetchError with structured data
@@ -85,12 +96,7 @@ try {
 }
 // Example: List members for a resource
 try {
-  const result = await client.resourceMembers.list(
-    'resourceType', 'resourceId'
-    , {
-    }
-    
-  );
+  const result = await client.resourceMembers.list('resourceType', 'resourceId', {});
   console.log('Result:', result);
 } catch (error) {
   // FetchError with structured data
@@ -98,12 +104,7 @@ try {
 }
 // Example: List resources
 try {
-  const result = await client.resources.list(
-    'resourceType'
-    , {
-    }
-    
-  );
+  const result = await client.resources.list('resourceType', {});
   console.log('Result:', result);
 } catch (error) {
   // FetchError with structured data
@@ -111,12 +112,7 @@ try {
 }
 // Example: List user roles
 try {
-  const result = await client.roles.list(
-    'userId'
-    , {
-    }
-    
-  );
+  const result = await client.roles.list('userId', {});
   console.log('Result:', result);
 } catch (error) {
   // FetchError with structured data
@@ -124,13 +120,9 @@ try {
 }
 // Example: Get wallet balance
 try {
-  const result = await client.usage.getBalance(
-    'resourceType', 'resourceId', 'limitType'
-    , {
-      period: undefined,
-    }
-    
-  );
+  const result = await client.usage.getBalance('resourceType', 'resourceId', 'limitType', {
+    period: undefined,
+  });
   console.log('Result:', result);
 } catch (error) {
   // FetchError with structured data
@@ -138,12 +130,7 @@ try {
 }
 // Example: List users
 try {
-  const result = await client.users.list(
-    
-    {
-    }
-    
-  );
+  const result = await client.users.list({});
   console.log('Result:', result);
 } catch (error) {
   // FetchError with structured data
@@ -158,11 +145,13 @@ This SDK is written in TypeScript and provides full type safety:
 ```typescript
 import { BlimuClient, Schema } from '@blimu/backend';
 
-const client = new BlimuClient({ /* config */ });
+const client = new BlimuClient({
+  /* config */
+});
 
 // All methods are fully typed
 // Schema types are available
-const data: Schema.BalanceResponse = {
+const data: Schema.AuthorizeRequest = {
   // Fully typed object
 };
 ```
@@ -189,30 +178,48 @@ const client = new BlimuClient({
 
 The SDK includes the following TypeScript interfaces:
 
+- **AuthorizeRequest**
 - **BalanceResponse**
 - **CheckLimitResponse**
+- **ConsentCheckResponse**
+- **DeviceAuthorizeRequest**
+- **DeviceAuthorizeResponse**
+- **DeviceCodeInfoResponse**
+- **DeviceCodeRequest**
+- **DeviceCodeResponse**
+- **DeviceTokenRequest**
 - **EntitlementCheckBody**
 - **EntitlementCheckResult**
+- **EntitlementType**: Entitlement identifier
 - **EntitlementsListResult**
+- **IntrospectionRequest**
+- **IntrospectionResponse**
+- **JWK**
 - **PlanAssignBody**
 - **PlanDeleteResponse**
 - **PlanResponse**
+- **PlanType**: Plan type identifier
 - **Resource**
 - **ResourceBulkCreateBody**
 - **ResourceBulkResult**
 - **ResourceCreateBody**
 - **ResourceList**
 - **ResourceMemberList**
+- **ResourceType**: Resource type identifier
 - **ResourceUpdateBody**
+- **RevocationRequest**
 - **Role**
 - **RoleBulkCreateBody**
 - **RoleBulkResult**
 - **RoleCreateBody**
 - **RoleList**
+- **TokenRequest**
+- **TokenResponse**
 - **TransactionHistoryResponse**
 - **UsageCheckBody**
 - **UsageConsumeBody**
 - **UsageCreditBody**
+- **UsageLimitType**: Usage-based limit type identifier
 - **UsageWalletResponse**
 - **User**
 - **UserCreateBody**
@@ -226,12 +233,14 @@ All types are available under the `Schema` namespace:
 import { Schema } from '@blimu/backend';
 
 // Use any model type
-const user: Schema.User = { /* ... */ };
+const user: Schema.User = {
+  /* ... */
+};
 ```
 
 ## Contributing
 
-This SDK is auto-generated. Please do not edit the generated files directly. 
+This SDK is auto-generated. Please do not edit the generated files directly.
 If you find issues, please report them in the main project repository.
 
 ## License

package/dist/client.cjs

@@ -22,11 +22,11 @@ var client_exports = {};
 __export(client_exports, {
   Blimu: () => Blimu,
   BlimuError: () => BlimuError,
-  FetchError: () => import_fetch10.FetchError
+  FetchError: () => import_fetch.FetchError
 });
 module.exports = __toCommonJS(client_exports);
-var import_fetch10 = require("@blimu/fetch");
-var import_fetch11 = require("@blimu/fetch");
+var import_fetch = require("@blimu/fetch");
+var import_fetch2 = require("@blimu/fetch");
 
 // src/auth-strategies.ts
 function buildAuthStrategies(cfg) {
@@ -42,8 +42,48 @@ function buildAuthStrategies(cfg) {
   return authStrategies;
 }
 
+// src/services/auth_jwks.ts
+var AuthJwksService = class {
+  constructor(core) {
+    this.core = core;
+  }
+  /**
+   * GET /v1/auth/.well-known/jwks.json*
+   * @summary Get JSON Web Key Set for environment (Public)*
+   * @description Returns the public keys used to verify JWT tokens issued by this environment. Authenticate using either x-api-key header (secretKey) or x-blimu-publishable-key header (publishableKey).*/
+  getJwks(init) {
+    return this.core.request({
+      method: "GET",
+      path: `/v1/auth/.well-known/jwks.json`,
+      ...init ?? {}
+    });
+  }
+  /**
+   * GET /v1/auth/.well-known/public-key.pem*
+   * @summary Get environment public key (PEM)*
+   * @description Returns the public key in PEM format for verifying JWT tokens. Authenticate with x-api-key or x-blimu-publishable-key.*/
+  getPublicKeyPem(init) {
+    return this.core.request({
+      method: "GET",
+      path: `/v1/auth/.well-known/public-key.pem`,
+      ...init ?? {}
+    });
+  }
+  /**
+   * GET /v1/auth/oauth/.well-known/jwks.json*
+   * @summary Get JSON Web Key Set for OAuth app (Public)*
+   * @description Returns the public key for a specific OAuth app to verify JWT tokens. This is a public endpoint following OAuth2/OIDC standards. Provide client_id to get keys for a specific OAuth app, or use authenticated endpoint for environment keys.*/
+  getOAuthAppJwks(query, init) {
+    return this.core.request({
+      method: "GET",
+      path: `/v1/auth/oauth/.well-known/jwks.json`,
+      query,
+      ...init ?? {}
+    });
+  }
+};
+
 // src/services/bulk_resources.ts
-var import_fetch = require("@blimu/fetch");
 var BulkResourcesService = class {
   constructor(core) {
     this.core = core;
@@ -63,7 +103,6 @@ var BulkResourcesService = class {
 };
 
 // src/services/bulk_roles.ts
-var import_fetch2 = require("@blimu/fetch");
 var BulkRolesService = class {
   constructor(core) {
     this.core = core;
@@ -83,7 +122,6 @@ var BulkRolesService = class {
 };
 
 // src/services/entitlements.ts
-var import_fetch3 = require("@blimu/fetch");
 var EntitlementsService = class {
   constructor(core) {
     this.core = core;
@@ -126,8 +164,121 @@ var EntitlementsService = class {
   }
 };
 
+// src/services/oauth.ts
+var OauthService = class {
+  constructor(core) {
+    this.core = core;
+  }
+  /**
+   * GET /v1/oauth/authorize*
+   * @summary Check consent requirement*
+   * @description Checks if user consent is required for the OAuth2 app and requested scopes.*/
+  checkConsentRequired(query, init) {
+    return this.core.request({
+      method: "GET",
+      path: `/v1/oauth/authorize`,
+      query,
+      ...init ?? {}
+    });
+  }
+  /**
+   * POST /v1/oauth/authorize*
+   * @summary Authorize OAuth2 application*
+   * @description Handles user consent approval/denial. Validates auto_approved flag against consent requirements.*/
+  authorize(body, init) {
+    return this.core.request({
+      method: "POST",
+      path: `/v1/oauth/authorize`,
+      body,
+      ...init ?? {}
+    });
+  }
+  /**
+   * POST /v1/oauth/device/authorize*
+   * @summary Authorize or deny device code*
+   * @description Allows an authenticated user to authorize or deny a device code request. Requires valid user session.*/
+  authorizeDeviceCode(body, init) {
+    return this.core.request({
+      method: "POST",
+      path: `/v1/oauth/device/authorize`,
+      body,
+      ...init ?? {}
+    });
+  }
+  /**
+   * POST /v1/oauth/device/code*
+   * @summary Request device authorization codes*
+   * @description Initiates device authorization flow. Returns device_code (for polling) and user_code (for user entry).*/
+  requestDeviceCode(body, init) {
+    return this.core.request({
+      method: "POST",
+      path: `/v1/oauth/device/code`,
+      body,
+      ...init ?? {}
+    });
+  }
+  /**
+   * GET /v1/oauth/device/code/{user_code}*
+   * @summary Get device code information*
+   * @description Returns device code information including app name, scopes, and consent requirement status.*/
+  getDeviceCodeInfo(user_code, init) {
+    return this.core.request({
+      method: "GET",
+      path: `/v1/oauth/device/code/${encodeURIComponent(user_code)}`,
+      ...init ?? {}
+    });
+  }
+  /**
+   * POST /v1/oauth/device/token*
+   * @summary Poll for device authorization tokens*
+   * @description Client polls this endpoint to exchange device_code for tokens once user has authorized.*/
+  exchangeDeviceCode(body, init) {
+    return this.core.request({
+      method: "POST",
+      path: `/v1/oauth/device/token`,
+      body,
+      ...init ?? {}
+    });
+  }
+  /**
+   * POST /v1/oauth/introspect*
+   * @summary Introspect token*
+   * @description Validates a token and returns metadata. Requires client authentication.*/
+  introspect(body, init) {
+    return this.core.request({
+      method: "POST",
+      path: `/v1/oauth/introspect`,
+      body,
+      ...init ?? {}
+    });
+  }
+  /**
+   * POST /v1/oauth/revoke*
+   * @summary Revoke token*
+   * @description Revokes an access or refresh token. Requires client authentication.*/
+  revoke(body, init) {
+    return this.core.request({
+      method: "POST",
+      path: `/v1/oauth/revoke`,
+      body,
+      ...init ?? {}
+    });
+  }
+  /**
+   * POST /v1/oauth/token*
+   * @summary Token endpoint*
+   * @description Issues access and refresh tokens. Supports authorization_code and refresh_token (always available per OAuth2 spec).*/
+  token(body, init) {
+    return this.core.request({
+      method: "POST",
+      path: `/v1/oauth/token`,
+      body,
+      ...init ?? {}
+    });
+  }
+};
+
 // src/services/plans.ts
-var import_fetch4 = require("@blimu/fetch");
 var PlansService = class {
   constructor(core) {
     this.core = core;
@@ -169,7 +320,6 @@ var PlansService = class {
 };
 
 // src/services/resource_members.ts
-var import_fetch5 = require("@blimu/fetch");
 var ResourceMembersService = class {
   constructor(core) {
     this.core = core;
@@ -189,7 +339,6 @@ var ResourceMembersService = class {
 };
 
 // src/services/resources.ts
-var import_fetch6 = require("@blimu/fetch");
 var ResourcesService = class {
   constructor(core) {
     this.core = core;
@@ -255,7 +404,6 @@ var ResourcesService = class {
 };
 
 // src/services/roles.ts
-var import_fetch7 = require("@blimu/fetch");
 var RolesService = class {
   constructor(core) {
     this.core = core;
@@ -298,7 +446,6 @@ var RolesService = class {
 };
 
 // src/services/usage.ts
-var import_fetch8 = require("@blimu/fetch");
 var UsageService = class {
   constructor(core) {
     this.core = core;
@@ -366,7 +513,6 @@ var UsageService = class {
 };
 
 // src/services/users.ts
-var import_fetch9 = require("@blimu/fetch");
 var UsersService = class {
   constructor(core) {
     this.core = core;
@@ -444,9 +590,11 @@ var UsersService = class {
 
 // src/client.ts
 var Blimu = class {
+  authJwks;
   bulkResources;
   bulkRoles;
   entitlements;
+  oauth;
   plans;
   resourceMembers;
   resources;
@@ -457,14 +605,16 @@ var Blimu = class {
     const restCfg = { ...options ?? {} };
     delete restCfg.apiKey;
     const authStrategies = buildAuthStrategies(options ?? {});
-    const core = new import_fetch10.FetchClient({
+    const core = new import_fetch.FetchClient({
       ...restCfg,
       baseURL: options?.baseURL ?? "https://api.blimu.dev",
       ...authStrategies.length > 0 ? { authStrategies } : {}
     });
+    this.authJwks = new AuthJwksService(core);
     this.bulkResources = new BulkResourcesService(core);
     this.bulkRoles = new BulkRolesService(core);
     this.entitlements = new EntitlementsService(core);
+    this.oauth = new OauthService(core);
     this.plans = new PlansService(core);
     this.resourceMembers = new ResourceMembersService(core);
     this.resources = new ResourcesService(core);
@@ -473,7 +623,7 @@ var Blimu = class {
     this.users = new UsersService(core);
   }
 };
-var BlimuError = import_fetch10.FetchError;
+var BlimuError = import_fetch.FetchError;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   Blimu,