@cloudbase/manager-node 4.11.0-alpha.7 → 4.11.0-alpha.8

package/lib/environment.js

@@ -18,6 +18,7 @@ const access_1 = require("./access");
 const user_1 = require("./user");
 const cloudBaseRun_1 = require("./cloudBaseRun");
 const mysql_1 = require("./mysql");
+const permission_1 = require("./permission");
 class Environment {
     constructor(context, envId) {
         this.inited = false;
@@ -39,6 +40,7 @@ class Environment {
         this.userService = new user_1.UserService(this);
         this.cloudBaseRunService = new cloudBaseRun_1.CloudBaseRunService(this);
         this.mysqlService = new mysql_1.MysqlService(this);
+        this.permissionService = new permission_1.PermissionService(this);
     }
     async lazyInit() {
         if (!this.inited) {
@@ -101,6 +103,9 @@ class Environment {
     getMysqlService() {
         return this.mysqlService;
     }
+    getPermissionService() {
+        return this.permissionService;
+    }
     getCommonService(serviceType = 'tcb', serviceVersion) {
         return new common_1.CommonService(this, serviceType, serviceVersion);
     }

package/lib/index.js

@@ -88,6 +88,9 @@ class CloudBase {
     get user() {
         return this.currentEnvironment().getUserService();
     }
+    get permission() {
+        return this.currentEnvironment().getPermissionService();
+    }
     get docs() {
         if (!this.docsService) {
             this.docsService = new docs_1.DocsService();

package/lib/log/index.js

@@ -15,14 +15,62 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogService = void 0;
+exports.isLogServiceEnabled = isLogServiceEnabled;
 const utils_1 = require("../utils");
 __exportStar(require("./types"), exports);
+/**
+ * 纯函数：根据 DescribeEnvs 返回的 LogServices 列表判断日志服务是否已开通。
+ * 已开通条件：至少一个条目有有效的 TopicId。
+ */
+function isLogServiceEnabled(logServices) {
+    if (!logServices || logServices.length === 0)
+        return false;
+    return logServices.some(svc => !!svc.TopicId);
+}
 class LogService {
     constructor(environment) {
         this.envId = environment.getEnvId();
         this.cloudService = new utils_1.CloudService(environment.cloudBaseContext, 'tcb', '2018-06-08');
         this.tcbrService = new utils_1.CloudService(environment.cloudBaseContext, 'tcbr', '2022-02-17');
     }
+    /**
+     * 检查当前环境的日志服务是否已开通
+     *
+     * 通过 DescribeEnvs 接口获取环境信息，判断 LogServices 字段中是否包含有效的
+     * 日志主题（TopicId 不为空）。
+     *
+     * @returns true 表示已开通，false 表示未开通或开通中
+     */
+    async checkLogServiceEnabled() {
+        var _a;
+        const res = await this.cloudService.request('DescribeEnvs', {
+            EnvId: this.envId
+        });
+        const envInfo = (_a = res === null || res === void 0 ? void 0 : res.EnvList) === null || _a === void 0 ? void 0 : _a[0];
+        if (!envInfo) {
+            return false;
+        }
+        const logServices = envInfo.LogServices;
+        if (!logServices || logServices.length === 0) {
+            return false;
+        }
+        // 已开通：LogServiceInfo 中存在有效的日志主题 ID
+        return isLogServiceEnabled(logServices);
+    }
+    /**
+     * 开通环境日志服务（异步操作）
+     *
+     * 调用 CreateEnvResource 接口开通日志资源。
+     * 注意：接口调用成功不代表日志资源立即可用，需通过 checkLogServiceEnabled() 轮询确认。
+     *
+     * @returns 请求 ID
+     */
+    async createLogService() {
+        return this.cloudService.request('CreateEnvResource', {
+            EnvId: this.envId,
+            Resources: ['log']
+        });
+    }
     /**
      * 搜索 CLS 日志
      *

package/lib/permission/index.js

@@ -0,0 +1,313 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionService = void 0;
+const utils_1 = require("../utils");
+const PERMISSION_BY_RESOURCE = {
+    function: ['CUSTOM'],
+    storage: ['READONLY', 'PRIVATE', 'ADMINWRITE', 'ADMINONLY', 'CUSTOM'],
+    table: ['READONLY', 'PRIVATE', 'ADMINWRITE', 'ADMINONLY'],
+    collection: ['READONLY', 'PRIVATE', 'ADMINWRITE', 'ADMINONLY', 'CUSTOM']
+};
+class PermissionService {
+    constructor(environment) {
+        this.environment = environment;
+        this.tcbService = new utils_1.CloudService(environment.cloudBaseContext, 'tcb', '2018-06-08');
+    }
+    async modifyResourcePermission(options) {
+        const { EnvId } = this.environment.lazyEnvironmentConfig;
+        const { resourceType, resource, permission, securityRule } = options;
+        if (!resourceType || !PERMISSION_BY_RESOURCE[resourceType]) {
+            throw new Error('Invalid resourceType');
+        }
+        if (typeof resource !== 'string' || resource.trim().length === 0) {
+            throw new Error('Invalid resource');
+        }
+        const allowed = PERMISSION_BY_RESOURCE[resourceType];
+        if (!allowed.includes(permission)) {
+            throw new Error(`Permission ${permission} is not allowed for resourceType ${resourceType}`);
+        }
+        if (permission === 'CUSTOM') {
+            if (typeof securityRule !== 'string' || securityRule.trim().length === 0) {
+                throw new Error('securityRule is required when permission is CUSTOM');
+            }
+            // // 校验 JSON 字符串合法性
+            // try {
+            //     JSON.parse(securityRule)
+            // } catch {
+            //     throw new Error('securityRule must be a valid JSON string')
+            // }
+        }
+        const reqData = {
+            EnvId,
+            ResourceType: resourceType,
+            Resource: resource,
+            Permission: permission
+        };
+        if (permission === 'CUSTOM') {
+            reqData.SecurityRule = securityRule;
+        }
+        return this.tcbService.request('ModifyResourcePermission', reqData);
+    }
+    async describeResourcePermission(options) {
+        const { EnvId } = this.environment.lazyEnvironmentConfig;
+        const { resourceType, resources } = options;
+        if (!resourceType || !PERMISSION_BY_RESOURCE[resourceType]) {
+            throw new Error('Invalid resourceType');
+        }
+        if (resources !== undefined) {
+            if (!Array.isArray(resources)) {
+                throw new Error('Invalid resources');
+            }
+            if (resources.length > 100) {
+                throw new Error('resources length must be <= 100');
+            }
+            const invalid = resources.find(item => typeof item !== 'string' || item.trim().length === 0);
+            if (invalid !== undefined) {
+                throw new Error('resources contains invalid item');
+            }
+        }
+        return this.tcbService.request('DescribeResourcePermission', Object.assign({ EnvId, ResourceType: resourceType }, (resources !== undefined ? { Resources: resources } : {})));
+    }
+    async createRole(options) {
+        const { EnvId } = this.environment.lazyEnvironmentConfig;
+        const { roleName, roleIdentity, description, memberUids, policies } = options;
+        // RoleName 校验：非空，2-32字符，中文/字母/数字/_-:@.，必须以字母或中文开头
+        if (typeof roleName !== 'string' || roleName.trim().length === 0) {
+            throw new Error('roleName is required');
+        }
+        if (roleName.length < 2 || roleName.length > 32) {
+            throw new Error('roleName length must be between 2 and 32');
+        }
+        if (!/^[\u4e00-\u9fa5a-zA-Z]/.test(roleName)) {
+            throw new Error('roleName must start with a letter or Chinese character');
+        }
+        if (!/^[\u4e00-\u9fa5a-zA-Z0-9\-_:@.]+$/.test(roleName)) {
+            throw new Error('roleName can only contain Chinese, letters, digits, and -_:@.');
+        }
+        // RoleIdentity 校验：非空，字母/数字/_-:@.，不能与默认角色标识重复
+        if (typeof roleIdentity !== 'string' || roleIdentity.trim().length === 0) {
+            throw new Error('roleIdentity is required');
+        }
+        if (!/^[a-zA-Z0-9\-_:@.]+$/.test(roleIdentity)) {
+            throw new Error('roleIdentity can only contain letters, digits, and -_:@.');
+        }
+        // Description 校验
+        if (description !== undefined && description.length > 255) {
+            throw new Error('description length must be <= 255');
+        }
+        // MemberUids 校验
+        if (memberUids !== undefined) {
+            if (!Array.isArray(memberUids)) {
+                throw new Error('memberUids must be an array');
+            }
+            if (memberUids.length > 100) {
+                throw new Error('memberUids length must be <= 100');
+            }
+            const invalidUid = memberUids.find(uid => typeof uid !== 'string' || uid.trim().length === 0);
+            if (invalidUid !== undefined) {
+                throw new Error('memberUids contains invalid item');
+            }
+        }
+        // Policies 校验
+        if (policies !== undefined) {
+            if (!Array.isArray(policies)) {
+                throw new Error('policies must be an array');
+            }
+            if (policies.length > 50) {
+                throw new Error('policies length must be <= 50');
+            }
+            const invalidPolicy = policies.find(policy => !policy.ResourceType || !policy.Resource);
+            if (invalidPolicy !== undefined) {
+                throw new Error('each policy must have ResourceType and Resource');
+            }
+        }
+        const reqData = {
+            EnvId,
+            RoleName: roleName,
+            RoleIdentity: roleIdentity
+        };
+        if (description !== undefined) {
+            reqData.Description = description;
+        }
+        if (memberUids !== undefined && memberUids.length > 0) {
+            reqData.MemberUids = memberUids;
+        }
+        if (policies !== undefined && policies.length > 0) {
+            reqData.Policies = policies;
+        }
+        return this.tcbService.request('CreateRole', reqData);
+    }
+    async describeRoleList(options = {}) {
+        const { EnvId } = this.environment.lazyEnvironmentConfig;
+        const { pageNumber, pageSize, roleId, roleIdentity, roleName, loadDetails } = options;
+        // PageNumber 校验：从1开始
+        if (pageNumber !== undefined && (pageNumber < 1 || !Number.isInteger(pageNumber))) {
+            throw new Error('pageNumber must be a positive integer');
+        }
+        // PageSize 校验：默认10，最大100
+        if (pageSize !== undefined && (pageSize < 1 || pageSize > 100 || !Number.isInteger(pageSize))) {
+            throw new Error('pageSize must be an integer between 1 and 100');
+        }
+        // RoleId 校验
+        if (roleId !== undefined && (typeof roleId !== 'string' || roleId.trim().length === 0)) {
+            throw new Error('Invalid roleId');
+        }
+        // RoleIdentity 校验
+        if (roleIdentity !== undefined && (typeof roleIdentity !== 'string' || roleIdentity.trim().length === 0)) {
+            throw new Error('Invalid roleIdentity');
+        }
+        // RoleName 校验
+        if (roleName !== undefined && (typeof roleName !== 'string' || roleName.trim().length === 0)) {
+            throw new Error('Invalid roleName');
+        }
+        const reqData = { EnvId };
+        if (pageNumber !== undefined) {
+            reqData.PageNumber = pageNumber;
+        }
+        if (pageSize !== undefined) {
+            reqData.PageSize = pageSize;
+        }
+        if (roleId !== undefined) {
+            reqData.RoleId = roleId;
+        }
+        if (roleIdentity !== undefined) {
+            reqData.RoleIdentity = roleIdentity;
+        }
+        if (roleName !== undefined) {
+            reqData.RoleName = roleName;
+        }
+        if (loadDetails !== undefined) {
+            reqData.LoadDetails = loadDetails;
+        }
+        return this.tcbService.request('DescribeRoleList', reqData);
+    }
+    async modifyRole(options) {
+        const { EnvId } = this.environment.lazyEnvironmentConfig;
+        const { roleId, roleName, description, addMemberUids, removeMemberUids, addPolicies, removePolicies } = options;
+        // RoleId 校验：必填
+        if (typeof roleId !== 'string' || roleId.trim().length === 0) {
+            throw new Error('roleId is required');
+        }
+        // RoleName 校验：不传或传空 => 不修改；非空时校验规则
+        if (roleName !== undefined && roleName !== '') {
+            if (roleName.length < 2 || roleName.length > 32) {
+                throw new Error('roleName length must be between 2 and 32');
+            }
+            if (!/^[\u4e00-\u9fa5a-zA-Z]/.test(roleName)) {
+                throw new Error('roleName must start with a letter or Chinese character');
+            }
+            if (!/^[\u4e00-\u9fa5a-zA-Z0-9\-_:@.]+$/.test(roleName)) {
+                throw new Error('roleName can only contain Chinese, letters, digits, and -_:@.');
+            }
+        }
+        // Description 校验
+        if (description !== undefined && description.length > 255) {
+            throw new Error('description length must be <= 255');
+        }
+        // AddMemberUids 校验
+        if (addMemberUids !== undefined) {
+            if (!Array.isArray(addMemberUids)) {
+                throw new Error('addMemberUids must be an array');
+            }
+            const invalidUid = addMemberUids.find(uid => typeof uid !== 'string' || uid.trim().length === 0);
+            if (invalidUid !== undefined) {
+                throw new Error('addMemberUids contains invalid item');
+            }
+        }
+        // RemoveMemberUids 校验
+        if (removeMemberUids !== undefined) {
+            if (!Array.isArray(removeMemberUids)) {
+                throw new Error('removeMemberUids must be an array');
+            }
+            const invalidUid = removeMemberUids.find(uid => typeof uid !== 'string' || uid.trim().length === 0);
+            if (invalidUid !== undefined) {
+                throw new Error('removeMemberUids contains invalid item');
+            }
+        }
+        // AddPolicies 校验
+        if (addPolicies !== undefined) {
+            if (!Array.isArray(addPolicies)) {
+                throw new Error('addPolicies must be an array');
+            }
+            const invalidPolicy = addPolicies.find(policy => !policy.ResourceType || !policy.Resource);
+            if (invalidPolicy !== undefined) {
+                throw new Error('each addPolicy must have ResourceType and Resource');
+            }
+        }
+        // RemovePolicies 校验
+        if (removePolicies !== undefined) {
+            if (!Array.isArray(removePolicies)) {
+                throw new Error('removePolicies must be an array');
+            }
+            const invalidPolicy = removePolicies.find(policy => !policy.ResourceType || !policy.Resource);
+            if (invalidPolicy !== undefined) {
+                throw new Error('each removePolicy must have ResourceType and Resource');
+            }
+        }
+        const reqData = { EnvId, RoleId: roleId };
+        // RoleName：不传或传空 => 不修改（不下发）
+        if (roleName !== undefined && roleName !== '') {
+            reqData.RoleName = roleName;
+        }
+        if (description !== undefined) {
+            reqData.Description = description;
+        }
+        if (addMemberUids !== undefined) {
+            reqData.AddMemberUids = addMemberUids;
+        }
+        if (removeMemberUids !== undefined) {
+            reqData.RemoveMemberUids = removeMemberUids;
+        }
+        if (addPolicies !== undefined) {
+            reqData.AddPolicies = addPolicies;
+        }
+        if (removePolicies !== undefined) {
+            reqData.RemovePolicies = removePolicies;
+        }
+        return this.tcbService.request('ModifyRole', reqData);
+    }
+    async deleteRoles(options) {
+        const { EnvId } = this.environment.lazyEnvironmentConfig;
+        const { roleIds } = options;
+        // RoleIds 校验：必填数组，最多100个
+        if (!Array.isArray(roleIds) || roleIds.length === 0) {
+            throw new Error('roleIds is required and must be a non-empty array');
+        }
+        if (roleIds.length > 100) {
+            throw new Error('roleIds length must be <= 100');
+        }
+        const invalidId = roleIds.find(id => typeof id !== 'string' || id.trim().length === 0);
+        if (invalidId !== undefined) {
+            throw new Error('roleIds contains invalid item');
+        }
+        return this.tcbService.request('DeleteRoles', {
+            EnvId,
+            RoleIds: roleIds
+        });
+    }
+}
+exports.PermissionService = PermissionService;
+__decorate([
+    (0, utils_1.preLazy)()
+], PermissionService.prototype, "modifyResourcePermission", null);
+__decorate([
+    (0, utils_1.preLazy)()
+], PermissionService.prototype, "describeResourcePermission", null);
+__decorate([
+    (0, utils_1.preLazy)()
+], PermissionService.prototype, "createRole", null);
+__decorate([
+    (0, utils_1.preLazy)()
+], PermissionService.prototype, "describeRoleList", null);
+__decorate([
+    (0, utils_1.preLazy)()
+], PermissionService.prototype, "modifyRole", null);
+__decorate([
+    (0, utils_1.preLazy)()
+], PermissionService.prototype, "deleteRoles", null);

package/lib/permission/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@cloudbase/manager-node",
-    "version": "4.11.0-alpha.7",
+    "version": "4.11.0-alpha.8",
     "description": "The node manage service api for cloudbase.",
     "main": "lib/index.js",
     "scripts": {

package/types/environment.d.ts

@@ -14,6 +14,7 @@ import { UserService } from './user';
 import { CloudBaseRunService } from './cloudBaseRun';
 import { MysqlService } from './mysql';
 import { EnvInfo } from './interfaces';
+import { PermissionService } from './permission';
 export declare class Environment {
     inited: boolean;
     cloudBaseContext: CloudBaseContext;
@@ -33,6 +34,7 @@ export declare class Environment {
     private userService;
     private cloudBaseRunService;
     private mysqlService;
+    private permissionService;
     constructor(context: CloudBaseContext, envId: string);
     lazyInit(): Promise<any>;
     getEnvId(): string;
@@ -50,6 +52,7 @@ export declare class Environment {
     getUserService(): UserService;
     getCloudBaseRunService(): CloudBaseRunService;
     getMysqlService(): MysqlService;
+    getPermissionService(): PermissionService;
     getCommonService(serviceType: string, serviceVersion: any): CommonService;
     getServicesEnvInfo(): Promise<any>;
     getAuthConfig(): {

package/types/index.d.ts

@@ -15,6 +15,7 @@ import { UserService } from './user';
 import { CloudBaseRunService } from './cloudBaseRun';
 import { MysqlService } from './mysql';
 import { DocsService } from './docs';
+import { PermissionService } from './permission';
 interface CloudBaseConfig {
     secretId?: string;
     secretKey?: string;
@@ -58,6 +59,7 @@ declare class CloudBase {
     get log(): LogService;
     get third(): ThirdService;
     get user(): UserService;
+    get permission(): PermissionService;
     get docs(): DocsService;
     getEnvironmentManager(): EnvironmentManager;
     getManagerConfig(): CloudBaseConfig;

package/types/log/index.d.ts

@@ -1,11 +1,43 @@
 import { Environment } from '../environment';
 import { ISearchClsLogParams, ISearchClsLogResponse } from './types';
 export * from './types';
+export interface ICreateEnvResourceResponse {
+    RequestId: string;
+}
+export interface ILogServiceEntry {
+    LogsetId?: string;
+    TopicId?: string;
+    TopicName?: string;
+    Region?: string;
+}
+/**
+ * 纯函数：根据 DescribeEnvs 返回的 LogServices 列表判断日志服务是否已开通。
+ * 已开通条件：至少一个条目有有效的 TopicId。
+ */
+export declare function isLogServiceEnabled(logServices?: ILogServiceEntry[]): boolean;
 export declare class LogService {
     private envId;
     private cloudService;
     private tcbrService;
     constructor(environment: Environment);
+    /**
+     * 检查当前环境的日志服务是否已开通
+     *
+     * 通过 DescribeEnvs 接口获取环境信息，判断 LogServices 字段中是否包含有效的
+     * 日志主题（TopicId 不为空）。
+     *
+     * @returns true 表示已开通，false 表示未开通或开通中
+     */
+    checkLogServiceEnabled(): Promise<boolean>;
+    /**
+     * 开通环境日志服务（异步操作）
+     *
+     * 调用 CreateEnvResource 接口开通日志资源。
+     * 注意：接口调用成功不代表日志资源立即可用，需通过 checkLogServiceEnabled() 轮询确认。
+     *
+     * @returns 请求 ID
+     */
+    createLogService(): Promise<ICreateEnvResourceResponse>;
     /**
      * 搜索 CLS 日志
      *

package/types/permission/index.d.ts

@@ -0,0 +1,31 @@
+import { Environment } from '../environment';
+import { ModifyResourcePermissionOptions, ModifyResourcePermissionResp, DescribeResourcePermissionOptions, DescribeResourcePermissionResp, CreateRoleOptions, CreateRoleResp, DescribeRoleListOptions, DescribeRoleListResp, ModifyRoleOptions, ModifyRoleResp, DeleteRolesOptions, DeleteRolesResp } from './types';
+export declare class PermissionService {
+    private environment;
+    private tcbService;
+    constructor(environment: Environment);
+    modifyResourcePermission(options: ModifyResourcePermissionOptions): Promise<{
+        Data: ModifyResourcePermissionResp;
+        RequestId: string;
+    }>;
+    describeResourcePermission(options: DescribeResourcePermissionOptions): Promise<{
+        Data: DescribeResourcePermissionResp;
+        RequestId: string;
+    }>;
+    createRole(options: CreateRoleOptions): Promise<{
+        Data: CreateRoleResp;
+        RequestId: string;
+    }>;
+    describeRoleList(options?: DescribeRoleListOptions): Promise<{
+        Data: DescribeRoleListResp;
+        RequestId: string;
+    }>;
+    modifyRole(options: ModifyRoleOptions): Promise<{
+        Data: ModifyRoleResp;
+        RequestId: string;
+    }>;
+    deleteRoles(options: DeleteRolesOptions): Promise<{
+        Data: DeleteRolesResp;
+        RequestId: string;
+    }>;
+}

package/types/permission/types.d.ts

@@ -0,0 +1,127 @@
+export type PermissionResourceType = 'function' | 'storage' | 'table' | 'collection';
+export type BasePermission = 'READONLY' | 'PRIVATE' | 'ADMINWRITE' | 'ADMINONLY' | 'CUSTOM';
+export interface ModifyResourcePermissionOptions {
+    resourceType: PermissionResourceType;
+    resource: string;
+    permission: BasePermission;
+    securityRule?: string;
+}
+export interface ModifyResourcePermissionResp {
+    Success: boolean;
+}
+export interface DescribeResourcePermissionOptions {
+    resourceType: PermissionResourceType;
+    resources?: string[];
+}
+export interface ResourcePermission {
+    ResourceType?: PermissionResourceType;
+    Resource?: string;
+    Permission?: BasePermission | string;
+    SecurityRule?: string;
+}
+export interface DescribeResourcePermissionResp {
+    TotalCount: number;
+    PermissionList: ResourcePermission[];
+}
+export type QueryConditionRel = 'eq' | 'neq' | 'lt' | 'gt' | 'gte' | 'lte' | 'in' | 'nin' | 'search';
+export interface QueryConditionItem {
+    Key: string;
+    Rel: QueryConditionRel;
+    Val: string;
+    ValueType?: string;
+}
+export interface QueryCondition {
+    Key: string;
+    Value: string;
+    QueryConditions?: QueryConditionItem[];
+}
+export interface WorkBenchFeatureItem {
+    Code?: string;
+    Name?: string;
+    IsAccess?: boolean;
+    ParentCode?: string;
+    SubPermissions?: WorkBenchFeatureItem[];
+}
+export interface WorkBenchPermission {
+    AllPermission?: boolean;
+    PartPermission?: boolean;
+    Permissions?: WorkBenchFeatureItem[];
+}
+export interface PermissionPolicyItem {
+    ResourceType: string;
+    Resource: string;
+    ResourceName?: string;
+    Permission?: string;
+    Effect?: string;
+    IsBindAllAccess?: boolean;
+    SubResourceIdList?: string[];
+    RowPermission?: QueryCondition[];
+    FeatureAuth?: WorkBenchPermission;
+    GatewayPolicyCode?: string;
+    GatewayPolicyName?: string;
+    GatewayPolicyDescription?: string;
+    GatewayPolicyExpression?: string;
+}
+export interface CreateRoleOptions {
+    roleName: string;
+    roleIdentity: string;
+    description?: string;
+    memberUids?: string[];
+    policies?: PermissionPolicyItem[];
+}
+export interface CreateRoleResp {
+    RoleId?: string;
+    MemberUids?: string[];
+    Policies?: PermissionPolicyItem[];
+}
+export interface MemberInfo {
+    Uid?: string;
+    Name?: string;
+    NickName?: string;
+}
+export interface RoleItem {
+    RoleId?: string;
+    RoleIdentity?: string;
+    RoleName?: string;
+    RoleType?: 'system' | 'custom';
+    Description?: string;
+    Members?: MemberInfo[];
+    Policies?: PermissionPolicyItem[];
+}
+export interface DescribeRoleListOptions {
+    pageNumber?: number;
+    pageSize?: number;
+    roleId?: string;
+    roleIdentity?: string;
+    roleName?: string;
+    loadDetails?: boolean;
+}
+export interface DescribeRoleListResp {
+    TotalCount?: number;
+    CustomTotalCount?: number;
+    SystemRoles?: RoleItem[];
+    CustomRoles?: RoleItem[];
+}
+export interface ModifyRoleOptions {
+    roleId: string;
+    roleName?: string;
+    description?: string;
+    addMemberUids?: string[];
+    removeMemberUids?: string[];
+    addPolicies?: PermissionPolicyItem[];
+    removePolicies?: PermissionPolicyItem[];
+}
+export interface ModifyRoleResp {
+    Success?: boolean;
+    AddedMemberUids?: string[];
+    RemovedMemberUids?: string[];
+    AddedPolicies?: PermissionPolicyItem[];
+    RemovedPolicies?: PermissionPolicyItem[];
+}
+export interface DeleteRolesOptions {
+    roleIds: string[];
+}
+export interface DeleteRolesResp {
+    SuccessCount?: number;
+    FailedCount?: number;
+}