@cef-ai/vault-sdk 3.3.0 → 4.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/client.d.ts +26 -2
- package/dist/client.d.ts.map +1 -1
- package/dist/client.js +40 -3
- package/dist/client.js.map +1 -1
- package/dist/core/canonical.d.ts +17 -1
- package/dist/core/canonical.d.ts.map +1 -1
- package/dist/core/canonical.js +26 -1
- package/dist/core/canonical.js.map +1 -1
- package/dist/core/endpoints.d.ts +5 -4
- package/dist/core/endpoints.d.ts.map +1 -1
- package/dist/core/endpoints.js +13 -4
- package/dist/core/endpoints.js.map +1 -1
- package/dist/core/grant-doc.d.ts +345 -0
- package/dist/core/grant-doc.d.ts.map +1 -0
- package/dist/core/grant-doc.js +603 -0
- package/dist/core/grant-doc.js.map +1 -0
- package/dist/core/types.d.ts +181 -49
- package/dist/core/types.d.ts.map +1 -1
- package/dist/fluent/vault.d.ts +6 -0
- package/dist/fluent/vault.d.ts.map +1 -1
- package/dist/fluent/vault.js +7 -0
- package/dist/fluent/vault.js.map +1 -1
- package/dist/index.d.ts +4 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +5 -0
- package/dist/index.js.map +1 -1
- package/dist/internal/memberships.d.ts +360 -0
- package/dist/internal/memberships.d.ts.map +1 -0
- package/dist/internal/memberships.js +403 -0
- package/dist/internal/memberships.js.map +1 -0
- package/dist/internal/vaults.d.ts +22 -0
- package/dist/internal/vaults.d.ts.map +1 -1
- package/dist/internal/vaults.js +11 -0
- package/dist/internal/vaults.js.map +1 -1
- package/dist/internal-exports.d.ts +2 -1
- package/dist/internal-exports.d.ts.map +1 -1
- package/dist/internal-exports.js +1 -1
- package/dist/internal-exports.js.map +1 -1
- package/package.json +3 -3
- package/dist/internal/orgs.d.ts +0 -59
- package/dist/internal/orgs.d.ts.map +0 -1
- package/dist/internal/orgs.js +0 -80
- package/dist/internal/orgs.js.map +0 -1
package/dist/internal/orgs.js
DELETED
|
@@ -1,80 +0,0 @@
|
|
|
1
|
-
import { endpoints } from "../core/endpoints.js";
|
|
2
|
-
export class Orgs {
|
|
3
|
-
http;
|
|
4
|
-
constructor(http) {
|
|
5
|
-
this.http = http;
|
|
6
|
-
}
|
|
7
|
-
/** Orgs the caller owns or is a member of, with the scopes granted to them. */
|
|
8
|
-
list() {
|
|
9
|
-
return this.http.send("GET", endpoints.orgs());
|
|
10
|
-
}
|
|
11
|
-
/**
|
|
12
|
-
* Registers `orgId` under the caller's vault. The vault is DERIVED
|
|
13
|
-
* server-side from the caller's key — there is no `vaultId` parameter, and
|
|
14
|
-
* none should be added. Idempotent (upsert) when the org is already
|
|
15
|
-
* registered to the SAME wallet; 409 if it's registered to a different
|
|
16
|
-
* wallet; 403 if the caller isn't that vault's owner.
|
|
17
|
-
*
|
|
18
|
-
* The wallet-signature middleware (`pkg/shared/auth/signature.go`) rejects
|
|
19
|
-
* ANY mutation body with no top-level RFC3339 `timestamp` as 401
|
|
20
|
-
* `CodeInvalidSignature "body missing timestamp"` — this applies before
|
|
21
|
-
* the request ever reaches `org.go`, which itself does not validate the
|
|
22
|
-
* field. `WalletAuthProvider` supplies one during canonicalisation;
|
|
23
|
-
* `DelegationAuthProvider` (which never passes through that middleware)
|
|
24
|
-
* supplies nothing. Sending it explicitly here keeps the body correct on
|
|
25
|
-
* both paths and matches the `Timestamp` field this wire struct declares.
|
|
26
|
-
*/
|
|
27
|
-
register(orgId, name) {
|
|
28
|
-
return this.http.send("POST", endpoints.orgs(), {
|
|
29
|
-
body: { orgId, name, timestamp: new Date().toISOString() },
|
|
30
|
-
});
|
|
31
|
-
}
|
|
32
|
-
/**
|
|
33
|
-
* Member rows for `orgId`. 403 unless the caller is the org wallet itself
|
|
34
|
-
* or holds a LIVE membership; 404 if the org doesn't exist.
|
|
35
|
-
*/
|
|
36
|
-
members(orgId) {
|
|
37
|
-
return this.http.send("GET", endpoints.orgMembers(orgId));
|
|
38
|
-
}
|
|
39
|
-
/**
|
|
40
|
-
* Upserts a member's role (and optional expiry). 400 if `memberPubkey` is
|
|
41
|
-
* the org wallet itself — the org wallet owns the org and is never a
|
|
42
|
-
* member row. `memberPubkey` should already be in the server's canonical
|
|
43
|
-
* 0x-lowercase-hex spelling (`auth.CanonicalPubKeyHex`). `expiresAt` must
|
|
44
|
-
* be RFC3339 — Go unmarshals it into `*time.Time`, and e.g. `"2031-01-01"`
|
|
45
|
-
* 400s as "put member: bad body".
|
|
46
|
-
*
|
|
47
|
-
* See `register`'s doc comment: the timestamp is explicit here for the
|
|
48
|
-
* same reason (the wallet-signature middleware, not org.go, requires it).
|
|
49
|
-
*/
|
|
50
|
-
putMember(orgId, memberPubkey, role, expiresAt) {
|
|
51
|
-
return this.http.send("PUT", endpoints.orgMember(orgId, memberPubkey), {
|
|
52
|
-
body: { role, expiresAt, timestamp: new Date().toISOString() },
|
|
53
|
-
});
|
|
54
|
-
}
|
|
55
|
-
/**
|
|
56
|
-
* Removes a member row. `org.go`'s DeleteMember handler never reads the
|
|
57
|
-
* body at all, but the wallet-signature middleware still requires a
|
|
58
|
-
* top-level `timestamp` on every mutation body regardless of what the
|
|
59
|
-
* handler does with it (see `register`'s doc comment) — so this body is
|
|
60
|
-
* `{timestamp}` and nothing else.
|
|
61
|
-
*/
|
|
62
|
-
deleteMember(orgId, memberPubkey) {
|
|
63
|
-
return this.http.send("DELETE", endpoints.orgMember(orgId, memberPubkey), {
|
|
64
|
-
body: { timestamp: new Date().toISOString() },
|
|
65
|
-
});
|
|
66
|
-
}
|
|
67
|
-
/**
|
|
68
|
-
* Replaces a member's FULL scope-grant set — the server deletes then
|
|
69
|
-
* reinserts, so this is never a merge/diff against the existing grants.
|
|
70
|
-
* 404 if the membership row doesn't exist, INCLUDING for an empty
|
|
71
|
-
* `scopes` map: the check is existence, not liveness, so an admin may
|
|
72
|
-
* prepare grants for a currently-suspended membership.
|
|
73
|
-
*/
|
|
74
|
-
putScopes(orgId, memberPubkey, scopes) {
|
|
75
|
-
return this.http.send("PUT", endpoints.orgMemberScopes(orgId, memberPubkey), {
|
|
76
|
-
body: { scopes, timestamp: new Date().toISOString() },
|
|
77
|
-
});
|
|
78
|
-
}
|
|
79
|
-
}
|
|
80
|
-
//# sourceMappingURL=orgs.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"orgs.js","sourceRoot":"","sources":["../../src/internal/orgs.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,MAAM,OAAO,IAAI;IACc;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,+EAA+E;IAC/E,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,KAAa,EAAE,IAAY;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE;YAC9C,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SAC3D,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,KAAa;QACnB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;;;;OAUG;IACH,SAAS,CACP,KAAa,EACb,YAAoB,EACpB,IAAa,EACb,SAAkB;QAElB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE;YACrE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SAC/D,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CAAC,KAAa,EAAE,YAAoB;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE;YACxE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CACP,KAAa,EACb,YAAoB,EACpB,MAAqC;QAErC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE;YAC3E,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SACtD,CAAC,CAAC;IACL,CAAC;CACF"}
|