@cloudbase/manager-node 4.11.0-alpha.9 → 5.0.0

package/jest.config.js

@@ -10,6 +10,7 @@ module.exports = {
     },
     transformIgnorePatterns: ['node_modules'],
     testEnvironment: 'node',
+    forceExit: true,
     // https://github.com/facebook/jest/issues/5164
     globalSetup: './test/global-setup-hook.ts',
     // globalTeardown: './test/global-teardown-hook.js',

package/lib/agent/index.js

@@ -28,14 +28,14 @@ class AgentService {
     }
     // ==================== SCF 云函数部署 ====================
     /**
-     * 创建 SCF Agent
+     * 创建 Agent
      * 支持两种方式：
      * 1. 传入 cwd 代码目录，自动打包上传
      * 2. 传入 ZipFile / CosBucketRegion + TempCosObjectName，直接上传
      * @param params 创建参数
      * @returns Agent 创建结果
      */
-    async createScfAgent(params) {
+    async createAgent(params) {
         const envConfig = this.environment.lazyEnvironmentConfig;
         // 默认会话配置
         const defaultSessionConfig = {
@@ -622,7 +622,7 @@ class AgentService {
 exports.AgentService = AgentService;
 __decorate([
     (0, utils_1.preLazy)()
-], AgentService.prototype, "createScfAgent", null);
+], AgentService.prototype, "createAgent", null);
 __decorate([
     (0, utils_1.preLazy)()
 ], AgentService.prototype, "describeAgentList", null);

package/lib/cloudrun/index.js

@@ -346,34 +346,6 @@ class CloudRunService {
     async getTemplates() {
         return (0, utils_1.fetchTemplates)(['tcbrFunc', 'tcbrContainer']);
     }
-    async _checkFunctionExist(name) {
-        try {
-            await this.detail({
-                serverName: name
-            });
-            return true;
-        }
-        catch (e) {
-            if (e.code === 'ResourceNotFound' ||
-                e.code === 'ResourceNotFound.ServerNotFound' ||
-                // 备注：以下条件当 NotFound 处理（已与 fisheryan 确认过）
-                (e.code === 'InvalidParameter' && e.original.Message === 'service data illegal')) {
-                return false;
-            }
-            throw e;
-        }
-    }
-    _upsertFunction(isNew, data) {
-        const { name, deployInfo, serverConfig } = data;
-        const envConfig = this.environment.lazyEnvironmentConfig;
-        const Items = parseObjectToDiffConfigItem(serverConfig);
-        return this.tcbrService.request(isNew ? 'CreateCloudRunServer' : 'UpdateCloudRunServer', {
-            EnvId: envConfig.EnvId,
-            ServerName: name,
-            DeployInfo: deployInfo,
-            Items,
-        });
-    }
     /**
      * 获取部署记录列表，按部署时间倒序（最新在前）
      */
@@ -408,6 +380,34 @@ class CloudRunService {
             RunId: params.RunId,
         });
     }
+    async _checkFunctionExist(name) {
+        try {
+            await this.detail({
+                serverName: name
+            });
+            return true;
+        }
+        catch (e) {
+            if (e.code === 'ResourceNotFound' ||
+                e.code === 'ResourceNotFound.ServerNotFound' ||
+                // 备注：以下条件当 NotFound 处理（已与 fisheryan 确认过）
+                (e.code === 'InvalidParameter' && e.original.Message === 'service data illegal')) {
+                return false;
+            }
+            throw e;
+        }
+    }
+    _upsertFunction(isNew, data) {
+        const { name, deployInfo, serverConfig } = data;
+        const envConfig = this.environment.lazyEnvironmentConfig;
+        const Items = parseObjectToDiffConfigItem(serverConfig);
+        return this.tcbrService.request(isNew ? 'CreateCloudRunServer' : 'UpdateCloudRunServer', {
+            EnvId: envConfig.EnvId,
+            ServerName: name,
+            DeployInfo: deployInfo,
+            Items,
+        });
+    }
 }
 exports.CloudRunService = CloudRunService;
 __decorate([

package/lib/env/index.js

@@ -508,6 +508,98 @@ class EnvService {
     async describeCreditsUsageDetail(params) {
         return this.cloudService.request('DescribeCreditsUsageDetail', Object.assign({}, params));
     }
+    /**
+     * 查询HTTP访问服务域名路由信息
+     * @param {DescribeHttpServiceRouteParams} params 查询参数
+     * @returns {Promise<DescribeHttpServiceRouteRes>}
+     */
+    async describeHttpServiceRoute(params) {
+        return this.cloudService.request('DescribeHTTPServiceRoute', Object.assign({}, params));
+    }
+    /**
+     * 创建HTTP访问服务域名路由
+     * @param {CreateHttpServiceRouteParams} params 创建参数
+     * @returns {Promise<CreateHttpServiceRouteRes>}
+     */
+    async createHttpServiceRoute(params) {
+        return this.cloudService.request('CreateHTTPServiceRoute', Object.assign({}, params));
+    }
+    /**
+     * 修改HTTP访问服务域名路由
+     * @param {ModifyHttpServiceRouteParams} params 修改参数
+     * @returns {Promise<ModifyHttpServiceRouteRes>}
+     */
+    async modifyHttpServiceRoute(params) {
+        return this.cloudService.request('ModifyHTTPServiceRoute', Object.assign({}, params));
+    }
+    /**
+     * 删除HTTP访问服务域名路由
+     * @param {DeleteHttpServiceRouteParams} params 删除参数
+     * @returns {Promise<DeleteHttpServiceRouteRes>}
+     */
+    async deleteHttpServiceRoute(params) {
+        return this.cloudService.request('DeleteHTTPServiceRoute', Object.assign({}, params));
+    }
+    /**
+     * 绑定自定义域名到HTTP访问服务
+     * 底层调用 CreateHTTPServiceRoute API，专用于域名绑定场景
+     * @param {BindCustomDomainParams} params 绑定参数
+     * @returns {Promise<BindCustomDomainRes>}
+     */
+    async bindCustomDomain(params) {
+        const { EnvId, Domain } = params;
+        // 构建域名参数，设置默认值
+        const domainParam = {
+            Domain: Domain.Domain,
+            CertId: Domain.CertId,
+            AccessType: Domain.AccessType || 'DIRECT',
+            Protocol: Domain.Protocol || 'HTTP_AND_HTTPS',
+            Enable: Domain.Enable !== undefined ? Domain.Enable : true
+        };
+        // 自定义接入类型时需要传入 CustomCname
+        if (domainParam.AccessType === 'CUSTOM' && Domain.CustomCname) {
+            domainParam.CustomCname = Domain.CustomCname;
+        }
+        return this.cloudService.request('CreateHTTPServiceRoute', {
+            EnvId,
+            Domain: domainParam
+        });
+    }
+    /**
+     * 删除自定义域名
+     * 仅当域名下无路由绑定时可删除，否则抛出错误
+     * @param {DeleteCustomDomainParams} params 删除参数
+     * @returns {Promise<DeleteCustomDomainRes>}
+     */
+    async deleteCustomDomain(params) {
+        const { EnvId, Domain } = params;
+        // 查询domain下的路由
+        const queryRes = await this.describeHttpServiceRoute({
+            EnvId,
+            Filters: [
+                {
+                    Name: 'Domain',
+                    Values: [Domain]
+                }
+            ]
+        });
+        const domains = queryRes.Domains || [];
+        const targetDomain = domains.find(d => d.Domain === Domain);
+        if (!targetDomain) {
+            throw new error_1.CloudBaseError(`Domain ${Domain} does not exist`);
+        }
+        // 检查是否有路由绑定
+        const routes = targetDomain.Routes || [];
+        if (routes.length > 0) {
+            const routePaths = routes.map(r => r.Path).join(', ');
+            throw new error_1.CloudBaseError(`Domain ${Domain} has ${routes.length} route binding(s) (${routePaths}). Please delete the routes before deleting the domain.`);
+        }
+        // 无路由绑定，可以删除域名
+        return this.cloudService.request('DeleteHTTPServiceRoute', {
+            EnvId,
+            Domain
+        });
+    }
     // 获取 COS CORS 域名
     async getCOSDomains() {
         const cos = this.getCos();

package/lib/permission/index.js

@@ -25,7 +25,9 @@ class PermissionService {
         if (!resourceType || !PERMISSION_BY_RESOURCE[resourceType]) {
             throw new Error('Invalid resourceType');
         }
-        if (typeof resource !== 'string' || resource.trim().length === 0) {
+        const isFunctionResourceType = resourceType === 'function';
+        const hasValidResourceValue = typeof resource === 'string' && resource.trim().length > 0;
+        if (!isFunctionResourceType && !hasValidResourceValue) {
             throw new Error('Invalid resource');
         }
         const allowed = PERMISSION_BY_RESOURCE[resourceType];
@@ -43,12 +45,7 @@ class PermissionService {
             //     throw new Error('securityRule must be a valid JSON string')
             // }
         }
-        const reqData = {
-            EnvId,
-            ResourceType: resourceType,
-            Resource: resource,
-            Permission: permission
-        };
+        const reqData = Object.assign({ EnvId, ResourceType: resourceType, Permission: permission }, (hasValidResourceValue || !isFunctionResourceType ? { Resource: resource } : {}));
         if (permission === 'CUSTOM') {
             reqData.SecurityRule = securityRule;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@cloudbase/manager-node",
-    "version": "4.11.0-alpha.9",
+    "version": "5.0.0",
     "description": "The node manage service api for cloudbase.",
     "main": "lib/index.js",
     "scripts": {
@@ -52,7 +52,7 @@
         "node-fetch": "^2.6.0",
         "query-string": "^6.8.3",
         "unzipper": "^0.12.3",
-        "uuid": "^13.0.0",
+        "uuid": "^9.0.0",
         "walkdir": "^0.4.1"
     },
     "husky": {

package/types/agent/index.d.ts

@@ -1,5 +1,5 @@
 import { Environment } from '../environment';
-import { ICreateFunctionAgentParams, ICreateScfAgentParams, ICreateTcbrAgentByImageParams, ICreateTcbrAgentByPackageParams, ICreateTcbrAgentByCodeParams, IDescribeAgentListParams, IDescribeAgentListResponse, IDescribeAgentResponse, IDeleteAgentParams, IDescribeCloudBaseBuildServiceParams, IDescribeCloudBaseBuildServiceResponse, ICreateAgentResponse, IDeleteAgentResponse, ICommonResponse, IUpdateAgentParams, IUpdateScfAgentParams, IUpdateScfAgentResponse, IUpdateTcbrAgentParams, IGetAgentLogsParams } from './type';
+import { ICreateFunctionAgentParams, ICreateAgentParams, ICreateTcbrAgentByImageParams, ICreateTcbrAgentByPackageParams, ICreateTcbrAgentByCodeParams, IDescribeAgentListParams, IDescribeAgentListResponse, IDescribeAgentResponse, IDeleteAgentParams, IDescribeCloudBaseBuildServiceParams, IDescribeCloudBaseBuildServiceResponse, ICreateAgentResponse, IDeleteAgentResponse, ICommonResponse, IUpdateAgentParams, IUpdateScfAgentParams, IUpdateScfAgentResponse, IUpdateTcbrAgentParams, IGetAgentLogsParams } from './type';
 /**
  * Agent 管理类
  * 支持三种部署方式：
@@ -12,14 +12,14 @@ export declare class AgentService {
     private tcbService;
     constructor(environment: Environment);
     /**
-     * 创建 SCF Agent
+     * 创建 Agent
      * 支持两种方式：
      * 1. 传入 cwd 代码目录，自动打包上传
      * 2. 传入 ZipFile / CosBucketRegion + TempCosObjectName，直接上传
      * @param params 创建参数
      * @returns Agent 创建结果
      */
-    createScfAgent(params: ICreateScfAgentParams): Promise<ICreateAgentResponse>;
+    createAgent(params: ICreateAgentParams): Promise<ICreateAgentResponse>;
     /**
      * 查询 Agent 列表
      * @param params 查询参数

package/types/agent/type.d.ts

@@ -28,12 +28,12 @@ export interface ISessionConfig {
     MaxConcurrency?: number;
 }
 /**
- * 创建 SCF Agent 的参数
+ * 创建 Agent 的参数
  * 支持两种方式：
  * 1. 传入 cwd 代码目录，自动打包上传
  * 2. 传入 ZipFile / CosBucketRegion + TempCosObjectName，直接上传
  */
-export interface ICreateScfAgentParams {
+export interface ICreateAgentParams {
     /** Agent 名称 */
     Name: string;
     /** Agent ID，不传则自动生成 */

package/types/cloudrun/index.d.ts

@@ -135,8 +135,6 @@ export declare class CloudRunService {
      * @returns {Promise<ITemplate[]>} 返回模板数组
      */
     getTemplates(): Promise<ITemplate[]>;
-    private _checkFunctionExist;
-    private _upsertFunction;
     /**
      * 获取部署记录列表，按部署时间倒序（最新在前）
      */
@@ -150,6 +148,8 @@ export declare class CloudRunService {
     getProcessLog(params: {
         RunId: string;
     }): Promise<IProcessLogResponse>;
+    private _checkFunctionExist;
+    private _upsertFunction;
 }
 export declare function codeToZip(cwd: string, options?: {
     installDependency?: boolean;

package/types/cloudrun/type.d.ts

@@ -38,10 +38,12 @@ export interface ICloudrunServerBaseInfo {
      */
     CustomDomainName: string;
     /**
-     * 服务状态
-     * @example "running" | "deploying" | "deploy_failed"
+     * 服务状态（来自 DescribeCloudRunServers）
+     * 常见值："creating" | "create_failed" | "freezing" | "freeze_fail" | "froze" |
+     * "unfreezing" | "unfreeze_fail" | "normal" | "deleting" | "delete_failed" | "abnormal"
+     * @example "normal"
      */
-    Status: 'running' | 'deploying' | 'deploy_failed';
+    Status: 'creating' | 'create_failed' | 'freezing' | 'freeze_fail' | 'froze' | 'unfreezing' | 'unfreeze_fail' | 'normal' | 'deleting' | 'delete_failed' | 'abnormal';
     /**
      * 更新时间
      * @example "2022-03-09 14:00:00"

package/types/env/index.d.ts

@@ -1,6 +1,6 @@
 import { Environment } from '../environment';
 import { IResponseInfo, AuthDomain, EnvInfo, LoginConfigItem, ICheckTcbServiceRes, ICreatePostpayRes, EnvBillingInfoItem, PriceResult } from '../interfaces';
-import { CalculatePackageCreatePriceParams, CalculatePackageRenewPriceParams, CalculatePackageModifyPriceParams } from './type';
+import { CalculatePackageCreatePriceParams, CalculatePackageRenewPriceParams, CalculatePackageModifyPriceParams, DescribeHttpServiceRouteParams, DescribeHttpServiceRouteRes, CreateHttpServiceRouteParams, CreateHttpServiceRouteRes, ModifyHttpServiceRouteParams, ModifyHttpServiceRouteRes, DeleteHttpServiceRouteParams, DeleteHttpServiceRouteRes, BindCustomDomainParams, BindCustomDomainRes, DeleteCustomDomainParams, DeleteCustomDomainRes } from './type';
 import { CreateBillingDealParams, CreateEnvParams, BaasPackageInfo, DescribeBaasPackageListParams, ModifyEnvPlanParams, RenewEnvParams, DestroyEnvParams, DescribeEnvsParams, DescribeEnvAccountCircleParams, DescribeEnvAccountCircleRes, DescribeCreditsUsageDetailParams, EnvPkgCreditsUsage } from '../interfaces/tcb.interface';
 type SOURCE = 'miniapp' | 'qcloud';
 interface IDeleteDomainRes {
@@ -264,6 +264,44 @@ export declare class EnvService {
         Usages: EnvPkgCreditsUsage[];
         RequestId: string;
     }>;
+    /**
+     * 查询HTTP访问服务域名路由信息
+     * @param {DescribeHttpServiceRouteParams} params 查询参数
+     * @returns {Promise<DescribeHttpServiceRouteRes>}
+     */
+    describeHttpServiceRoute(params: DescribeHttpServiceRouteParams): Promise<DescribeHttpServiceRouteRes>;
+    /**
+     * 创建HTTP访问服务域名路由
+     * @param {CreateHttpServiceRouteParams} params 创建参数
+     * @returns {Promise<CreateHttpServiceRouteRes>}
+     */
+    createHttpServiceRoute(params: CreateHttpServiceRouteParams): Promise<CreateHttpServiceRouteRes>;
+    /**
+     * 修改HTTP访问服务域名路由
+     * @param {ModifyHttpServiceRouteParams} params 修改参数
+     * @returns {Promise<ModifyHttpServiceRouteRes>}
+     */
+    modifyHttpServiceRoute(params: ModifyHttpServiceRouteParams): Promise<ModifyHttpServiceRouteRes>;
+    /**
+     * 删除HTTP访问服务域名路由
+     * @param {DeleteHttpServiceRouteParams} params 删除参数
+     * @returns {Promise<DeleteHttpServiceRouteRes>}
+     */
+    deleteHttpServiceRoute(params: DeleteHttpServiceRouteParams): Promise<DeleteHttpServiceRouteRes>;
+    /**
+     * 绑定自定义域名到HTTP访问服务
+     * 底层调用 CreateHTTPServiceRoute API，专用于域名绑定场景
+     * @param {BindCustomDomainParams} params 绑定参数
+     * @returns {Promise<BindCustomDomainRes>}
+     */
+    bindCustomDomain(params: BindCustomDomainParams): Promise<BindCustomDomainRes>;
+    /**
+     * 删除自定义域名
+     * 仅当域名下无路由绑定时可删除，否则抛出错误
+     * @param {DeleteCustomDomainParams} params 删除参数
+     * @returns {Promise<DeleteCustomDomainRes>}
+     */
+    deleteCustomDomain(params: DeleteCustomDomainParams): Promise<DeleteCustomDomainRes>;
     private getCOSDomains;
     private modifyCosCorsDomain;
     private getCos;

package/types/env/type.d.ts

@@ -14,3 +14,190 @@ export interface CalculatePackageModifyPriceParams {
     envId: string;
     currency?: 'CNY' | 'USD';
 }
+/**
+ * 客户端限频配置
+ */
+export interface HTTPServiceQPSPerClient {
+    LimitBy?: 'UserID' | 'ClientIP';
+    LimitValue?: number;
+}
+/**
+ * QPS限频策略
+ */
+export interface HTTPServiceRouteQPSPolicy {
+    QPSTotal?: number;
+    QPSPerClient?: HTTPServiceQPSPerClient;
+}
+/**
+ * 路径重写
+ */
+export interface HTTPServicePathRewrite {
+    StaticStorePrefix?: string;
+    Prefix?: string;
+}
+/**
+ * HTTP访问服务路由信息
+ */
+export interface HTTPServiceRoute {
+    Path: string;
+    PathRewrite?: HTTPServicePathRewrite;
+    UpstreamResourceType: 'SCF' | 'CBR' | 'STATIC_STORE' | 'WEB_SCF' | 'LH';
+    UpstreamResourceName: string;
+    EnableSafeDomain: boolean;
+    EnableAuth: boolean;
+    EnablePathTransmission: boolean;
+    QPSPolicy?: HTTPServiceRouteQPSPolicy;
+    Enable: boolean;
+    CreateTime: string;
+    UpdateTime: string;
+}
+/**
+ * 域名路由信息
+ */
+export interface HTTPServiceDomain {
+    Domain: string;
+    DomainType: 'HTTPSERVICE' | 'CBR' | 'ANYSERVICE' | 'AI_AGENT' | 'VM' | 'INTEGRATION_CALLBACK';
+    AccessType: 'DIRECT' | 'CDN' | 'CUSTOM';
+    CertId: string;
+    Protocol: 'HTTP_AND_HTTPS' | 'HTTP_TO_HTTPS' | 'HTTPS_TO_HTTP';
+    Cname: string;
+    IsDefault: boolean;
+    Enable: boolean;
+    Status: 'PROCESSING' | 'FAIL' | 'SUCCESS';
+    DNSStatus: 'OK' | 'INVALID';
+    Routes?: HTTPServiceRoute[];
+    CreateTime: string;
+    UpdateTime: string;
+}
+/**
+ * 过滤条件
+ */
+export interface HTTPServiceRouteFilter {
+    Name?: 'Domain' | 'Path' | 'DomainType' | 'UpstreamResourceType';
+    Values?: string[];
+}
+/**
+ * DescribeHTTPServiceRoute 请求参数
+ */
+export interface DescribeHttpServiceRouteParams {
+    EnvId: string;
+    Filters?: HTTPServiceRouteFilter[];
+    Offset?: number;
+    Limit?: number;
+}
+/**
+ * DescribeHTTPServiceRoute 返回结果
+ */
+export interface DescribeHttpServiceRouteRes {
+    Domains?: HTTPServiceDomain[];
+    OriginDomain: string;
+    TotalCount: number;
+    RequestId: string;
+}
+/**
+ * HTTP访问服务路由参数（创建/修改）
+ */
+export interface HTTPServiceRouteParam {
+    Path: string;
+    UpstreamResourceType?: 'SCF' | 'CBR' | 'STATIC_STORE' | 'WEB_SCF' | 'LH';
+    UpstreamResourceName?: string;
+    PathRewrite?: HTTPServicePathRewrite;
+    EnableSafeDomain?: boolean;
+    EnableAuth?: boolean;
+    EnablePathTransmission?: boolean;
+    QPSPolicy?: HTTPServiceRouteQPSPolicy;
+    Enable?: boolean;
+}
+/**
+ * HTTP访问服务域名参数（创建/修改）
+ */
+export interface HTTPServiceDomainParam {
+    Domain: string;
+    AccessType?: 'DIRECT' | 'CDN' | 'CUSTOM';
+    CertId?: string;
+    Protocol?: 'HTTP_AND_HTTPS' | 'HTTP_TO_HTTPS' | 'HTTPS_TO_HTTP';
+    CustomCname?: string;
+    Enable?: boolean;
+    Routes?: HTTPServiceRouteParam[];
+}
+/**
+ * CreateHTTPServiceRoute 请求参数
+ */
+export interface CreateHttpServiceRouteParams {
+    EnvId: string;
+    Domain: HTTPServiceDomainParam;
+}
+/**
+ * CreateHTTPServiceRoute 返回结果
+ */
+export interface CreateHttpServiceRouteRes {
+    RequestId: string;
+}
+/**
+ * ModifyHTTPServiceRoute 请求参数
+ */
+export interface ModifyHttpServiceRouteParams {
+    EnvId: string;
+    Domain: HTTPServiceDomainParam;
+}
+/**
+ * ModifyHTTPServiceRoute 返回结果
+ */
+export interface ModifyHttpServiceRouteRes {
+    RequestId: string;
+}
+/**
+ * DeleteHTTPServiceRoute 请求参数
+ */
+export interface DeleteHttpServiceRouteParams {
+    EnvId: string;
+    Domain: string;
+    Paths?: string[];
+}
+/**
+ * DeleteHTTPServiceRoute 返回结果
+ */
+export interface DeleteHttpServiceRouteRes {
+    RequestId: string;
+}
+/**
+ * 绑定自定义域名的域名参数
+ * 与 HTTPServiceDomainParam 类似，但不包含 Routes（绑定域名场景）
+ */
+export interface BindCustomDomainDomainParam {
+    Domain: string;
+    CertId: string;
+    AccessType?: 'DIRECT' | 'CDN' | 'CUSTOM';
+    Protocol?: 'HTTP_AND_HTTPS' | 'HTTP_TO_HTTPS' | 'HTTPS_TO_HTTP';
+    Enable?: boolean;
+    CustomCname?: string;
+}
+/**
+ * BindCustomDomain 请求参数
+ * 用于绑定自定义域名到 HTTP 访问服务
+ * 底层调用 CreateHTTPServiceRoute API，但参数配置不同
+ */
+export interface BindCustomDomainParams {
+    EnvId: string;
+    Domain: BindCustomDomainDomainParam;
+}
+/**
+ * BindCustomDomain 返回结果
+ */
+export interface BindCustomDomainRes {
+    RequestId: string;
+}
+/**
+ * DeleteCustomDomain 请求参数
+ * 用于删除自定义域名（仅当域名下无路由绑定时可删除）
+ */
+export interface DeleteCustomDomainParams {
+    EnvId: string;
+    Domain: string;
+}
+/**
+ * DeleteCustomDomain 返回结果
+ */
+export interface DeleteCustomDomainRes {
+    RequestId: string;
+}

package/types/permission/types.d.ts

@@ -2,7 +2,7 @@ export type PermissionResourceType = 'function' | 'storage' | 'table' | 'collect
 export type BasePermission = 'READONLY' | 'PRIVATE' | 'ADMINWRITE' | 'ADMINONLY' | 'CUSTOM';
 export interface ModifyResourcePermissionOptions {
     resourceType: PermissionResourceType;
-    resource: string;
+    resource?: string;
     permission: BasePermission;
     securityRule?: string;
 }