@databricks/sdk-uc-grants 0.0.0-dev → 0.1.0-dev.1

package/src/v1/model.ts

@@ -0,0 +1,235 @@
+// Code generated from API definition by Databricks SDK Generator. DO NOT EDIT.
+
+import {z} from 'zod';
+
+export interface EffectivePrivilege {
+  /** The privilege assigned to the principal. */
+  privilege?: string | undefined;
+  /**
+   * The type of the object that conveys this privilege via inheritance.
+   * This field is omitted when privilege is not inherited (it's assigned to the securable itself).
+   */
+  inheritedFromType?: string | undefined;
+  /**
+   * The full name of the object that conveys this privilege via inheritance.
+   * This field is omitted when privilege is not inherited (it's assigned to the securable itself).
+   */
+  inheritedFromName?: string | undefined;
+}
+
+export interface EffectivePrivilegeAssignment {
+  /** The principal (user email address or group name). */
+  principal?: string | undefined;
+  /** The privileges conveyed to the principal (either directly or via inheritance). */
+  privileges?: EffectivePrivilege[] | undefined;
+}
+
+export interface GetEffectivePermissionsRequest {
+  /** Type of securable. */
+  securableType?: string | undefined;
+  /** Full name of securable. */
+  securableFullName?: string | undefined;
+  /** If provided, only the effective permissions for the specified principal (user or group) are returned. */
+  principal?: string | undefined;
+  /**
+   * Specifies the maximum number of privileges to return (page length).
+   * Every EffectivePrivilegeAssignment present in a single page response is guaranteed to contain all the effective
+   * privileges granted on (or inherited by) the requested Securable for the respective principal.
+   *
+   * If not set, all the effective permissions are returned.
+   * If set to
+   * - lesser than 0: invalid parameter error
+   * - 0: page length is set to a server configured value
+   * - lesser than 150 but greater than 0: invalid parameter error (this is to ensure that server is able to return at
+   * least one complete EffectivePrivilegeAssignment in a single page response)
+   * - greater than (or equal to) 150: page length is the minimum of this value and a server configured value
+   */
+  maxResults?: number | undefined;
+  /** Opaque token for the next page of results (pagination). */
+  pageToken?: string | undefined;
+}
+
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export interface GetEffectivePermissionsRequest_Response {
+  /**
+   * Opaque token to retrieve the next page of results. Absent if there are no more pages.
+   * __page_token__ should be set to this value for the next request (for the next page of results).
+   */
+  nextPageToken?: string | undefined;
+  /** The privileges conveyed to each principal (either directly or via inheritance) */
+  privilegeAssignments?: EffectivePrivilegeAssignment[] | undefined;
+}
+
+export interface GetPermissionsRequest {
+  /** Type of securable. */
+  securableType?: string | undefined;
+  /** Full name of securable. */
+  securableFullName?: string | undefined;
+  /** If provided, only the permissions for the specified principal (user or group) are returned. */
+  principal?: string | undefined;
+  /**
+   * Specifies the maximum number of privileges to return (page length).
+   * Every PrivilegeAssignment present in a single page response is guaranteed to contain all the privileges granted on
+   * the requested Securable for the respective principal.
+   *
+   * If not set, all the permissions are returned.
+   * If set to
+   * - lesser than 0: invalid parameter error
+   * - 0: page length is set to a server configured value
+   * - lesser than 150 but greater than 0: invalid parameter error (this is to ensure that server is able to return at
+   * least one complete PrivilegeAssignment in a single page response)
+   * - greater than (or equal to) 150: page length is the minimum of this value and a server configured value
+   */
+  maxResults?: number | undefined;
+  /** Opaque pagination token to go to next page based on previous query. */
+  pageToken?: string | undefined;
+}
+
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export interface GetPermissionsRequest_Response {
+  /**
+   * Opaque token to retrieve the next page of results. Absent if there are no more pages.
+   * __page_token__ should be set to this value for the next request (for the next page of results).
+   */
+  nextPageToken?: string | undefined;
+  /** The privileges assigned to each principal */
+  privilegeAssignments?: PrivilegeAssignment[] | undefined;
+}
+
+export interface PermissionsChange {
+  /**
+   * The principal whose privileges we are changing.
+   * Only one of principal or principal_id should be specified, never both at the same time.
+   */
+  principal?: string | undefined;
+  /** The set of privileges to add. */
+  add?: string[] | undefined;
+  /** The set of privileges to remove. */
+  remove?: string[] | undefined;
+}
+
+export interface PrivilegeAssignment {
+  /**
+   * The principal (user email address or group name).
+   * For deleted principals, `principal` is empty while `principal_id` is populated.
+   */
+  principal?: string | undefined;
+  /** The privileges assigned to the principal. */
+  privileges?: string[] | undefined;
+}
+
+export interface UpdatePermissionsRequest {
+  /** Type of securable. */
+  securableType?: string | undefined;
+  /** Full name of securable. */
+  securableFullName?: string | undefined;
+  /** Array of permissions change objects. */
+  changes?: PermissionsChange[] | undefined;
+}
+
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export interface UpdatePermissionsRequest_Response {
+  /** The privileges assigned to each principal */
+  privilegeAssignments?: PrivilegeAssignment[] | undefined;
+}
+
+export const unmarshalEffectivePrivilegeSchema: z.ZodType<EffectivePrivilege> =
+  z
+    .object({
+      privilege: z.string().optional(),
+      inherited_from_type: z.string().optional(),
+      inherited_from_name: z.string().optional(),
+    })
+    .transform(d => ({
+      privilege: d.privilege,
+      inheritedFromType: d.inherited_from_type,
+      inheritedFromName: d.inherited_from_name,
+    }));
+
+export const unmarshalEffectivePrivilegeAssignmentSchema: z.ZodType<EffectivePrivilegeAssignment> =
+  z
+    .object({
+      principal: z.string().optional(),
+      privileges: z
+        .array(z.lazy(() => unmarshalEffectivePrivilegeSchema))
+        .optional(),
+    })
+    .transform(d => ({
+      principal: d.principal,
+      privileges: d.privileges,
+    }));
+
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalGetEffectivePermissionsRequest_ResponseSchema: z.ZodType<GetEffectivePermissionsRequest_Response> =
+  z
+    .object({
+      next_page_token: z.string().optional(),
+      privilege_assignments: z
+        .array(z.lazy(() => unmarshalEffectivePrivilegeAssignmentSchema))
+        .optional(),
+    })
+    .transform(d => ({
+      nextPageToken: d.next_page_token,
+      privilegeAssignments: d.privilege_assignments,
+    }));
+
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalGetPermissionsRequest_ResponseSchema: z.ZodType<GetPermissionsRequest_Response> =
+  z
+    .object({
+      next_page_token: z.string().optional(),
+      privilege_assignments: z
+        .array(z.lazy(() => unmarshalPrivilegeAssignmentSchema))
+        .optional(),
+    })
+    .transform(d => ({
+      nextPageToken: d.next_page_token,
+      privilegeAssignments: d.privilege_assignments,
+    }));
+
+export const unmarshalPrivilegeAssignmentSchema: z.ZodType<PrivilegeAssignment> =
+  z
+    .object({
+      principal: z.string().optional(),
+      privileges: z.array(z.string()).optional(),
+    })
+    .transform(d => ({
+      principal: d.principal,
+      privileges: d.privileges,
+    }));
+
+// eslint-disable-next-line @typescript-eslint/naming-convention -- Proto-style nested message name.
+export const unmarshalUpdatePermissionsRequest_ResponseSchema: z.ZodType<UpdatePermissionsRequest_Response> =
+  z
+    .object({
+      privilege_assignments: z
+        .array(z.lazy(() => unmarshalPrivilegeAssignmentSchema))
+        .optional(),
+    })
+    .transform(d => ({
+      privilegeAssignments: d.privilege_assignments,
+    }));
+
+export const marshalPermissionsChangeSchema: z.ZodType = z
+  .object({
+    principal: z.string().optional(),
+    add: z.array(z.string()).optional(),
+    remove: z.array(z.string()).optional(),
+  })
+  .transform(d => ({
+    principal: d.principal,
+    add: d.add,
+    remove: d.remove,
+  }));
+
+export const marshalUpdatePermissionsRequestSchema: z.ZodType = z
+  .object({
+    securableType: z.string().optional(),
+    securableFullName: z.string().optional(),
+    changes: z.array(z.lazy(() => marshalPermissionsChangeSchema)).optional(),
+  })
+  .transform(d => ({
+    securable_type: d.securableType,
+    securable_full_name: d.securableFullName,
+    changes: d.changes,
+  }));

package/src/v1/transport.ts

@@ -0,0 +1,73 @@
+// Code generated from API definition by Databricks SDK Generator. DO NOT EDIT.
+
+import type {Credentials} from '@databricks/sdk-auth';
+import {defaultCredentials} from '@databricks/sdk-auth/credentials';
+import type {
+  HttpClient,
+  HttpRequest,
+  HttpResponse,
+} from '@databricks/sdk-core/http';
+import {newFetchHttpClient} from '@databricks/sdk-core/http';
+import type {ClientOptions} from '@databricks/sdk-options/client';
+
+/** Creates a new HTTP client with the given options. */
+export function newHttpClient(options?: ClientOptions): HttpClient {
+  const opts = options ?? {};
+
+  // If an HTTP client is provided, use it as-is. Throw if other options are
+  // also set, since they would be silently ignored.
+  if (opts.httpClient !== undefined) {
+    if (opts.credentials !== undefined || opts.timeout !== undefined) {
+      throw new Error(
+        'httpClient cannot be combined with credentials or timeout'
+      );
+    }
+    return opts.httpClient;
+  }
+
+  const credentials = opts.credentials ?? defaultCredentials();
+
+  const base = newFetchHttpClient();
+  let client: HttpClient = new AuthHttpClient(base, credentials);
+
+  if (opts.timeout !== undefined) {
+    client = new TimeoutHttpClient(client, opts.timeout);
+  }
+
+  return client;
+}
+
+/** Wraps an HttpClient and adds authentication headers to requests. */
+class AuthHttpClient implements HttpClient {
+  constructor(
+    private readonly base: HttpClient,
+    private readonly credentials: Credentials
+  ) {}
+
+  async send(request: HttpRequest): Promise<HttpResponse> {
+    const authHeaders = await this.credentials.authHeaders();
+    // Do not modify the original request.
+    const headers = new Headers(request.headers);
+    for (const h of authHeaders) {
+      headers.set(h.key, h.value);
+    }
+    return this.base.send({...request, headers});
+  }
+}
+
+/** Wraps an HttpClient and applies a default timeout to requests. */
+class TimeoutHttpClient implements HttpClient {
+  constructor(
+    private readonly base: HttpClient,
+    private readonly timeout: number
+  ) {}
+
+  async send(request: HttpRequest): Promise<HttpResponse> {
+    const timeoutSignal = AbortSignal.timeout(this.timeout);
+    const signal =
+      request.signal !== undefined
+        ? AbortSignal.any([request.signal, timeoutSignal])
+        : timeoutSignal;
+    return this.base.send({...request, signal});
+  }
+}

package/src/v1/utils.ts

@@ -0,0 +1,156 @@
+// Code generated from API definition by Databricks SDK Generator. DO NOT EDIT.
+
+import type {Call, Options} from '@databricks/sdk-core/api';
+import {execute} from '@databricks/sdk-core/api';
+import {ApiError} from '@databricks/sdk-core/apierror';
+import type {
+  HttpClient,
+  HttpRequest,
+  HttpResponse,
+} from '@databricks/sdk-core/http';
+import type {Logger} from '@databricks/sdk-core/logger';
+import type {CallOptions} from '@databricks/sdk-options/call';
+import JSONBig from 'json-bigint';
+import type {z} from 'zod';
+
+// JSON codec that preserves int64 precision. On the way in, large integer
+// literals come back as bigint instead of being rounded to JS Number. On the
+// way out, bigint values are emitted as raw JSON number digits.
+const jsonBigint = JSONBig({useNativeBigInt: true});
+
+export interface HttpCallOptions {
+  readonly request: HttpRequest;
+  readonly httpClient: HttpClient;
+  readonly logger: Logger;
+}
+
+/**
+ * Translates public CallOptions to the internal Options shape accepted by
+ * execute(). Even though the shapes match today, this isolates the public
+ * API from the executor's internal type so they can diverge.
+ */
+export async function executeCall(
+  call: Call,
+  options?: CallOptions
+): Promise<void> {
+  const opts: Options = {
+    ...(options?.retrier !== undefined && {retrier: options.retrier}),
+    ...(options?.rateLimiter !== undefined && {
+      rateLimiter: options.rateLimiter,
+    }),
+    ...(options?.timeout !== undefined && {timeout: options.timeout}),
+  };
+  return execute(options?.signal, call, opts);
+}
+
+async function readAll(
+  body: ReadableStream<Uint8Array> | null
+): Promise<Uint8Array> {
+  if (body === null) {
+    return new Uint8Array(0);
+  }
+  const reader = body.getReader();
+  const chunks: Uint8Array[] = [];
+  for (;;) {
+    const {done, value} = await reader.read();
+    if (done) {
+      break;
+    }
+    chunks.push(value);
+  }
+  const totalLength = chunks.reduce((acc, chunk) => acc + chunk.length, 0);
+  const result = new Uint8Array(totalLength);
+  let offset = 0;
+  for (const chunk of chunks) {
+    result.set(chunk, offset);
+    offset += chunk.length;
+  }
+  return result;
+}
+
+export async function executeHttpCall(
+  opts: HttpCallOptions
+): Promise<Uint8Array> {
+  opts.logger.debug('HTTP request', {
+    method: opts.request.method,
+    url: opts.request.url,
+  });
+
+  let resp: HttpResponse;
+  try {
+    resp = await opts.httpClient.send(opts.request);
+  } catch (e: unknown) {
+    opts.logger.debug('HTTP request failed');
+    throw e;
+  }
+
+  const body = await readAll(resp.body);
+
+  opts.logger.debug('HTTP response', {
+    statusCode: resp.statusCode,
+    body: new TextDecoder().decode(body),
+  });
+
+  const apiErr = ApiError.fromHttpError(resp.statusCode, resp.headers, body);
+  if (apiErr !== undefined) {
+    throw apiErr;
+  }
+
+  return body;
+}
+
+export function buildHttpRequest(
+  method: string,
+  url: string,
+  headers: Headers,
+  signal?: AbortSignal,
+  body?: string | ReadableStream<Uint8Array>
+): HttpRequest {
+  const req: HttpRequest = {url, method, headers};
+  if (body !== undefined) {
+    req.body = body;
+  }
+  if (signal !== undefined) {
+    req.signal = signal;
+  }
+  return req;
+}
+
+export function parseResponse<T>(body: Uint8Array, schema: z.ZodType<T>): T {
+  const text = new TextDecoder().decode(body);
+  const parsed: unknown = jsonBigint.parse(text);
+  return schema.parse(parsed);
+}
+
+export function marshalRequest(data: unknown, schema: z.ZodType): string {
+  return jsonBigint.stringify(schema.parse(data));
+}
+
+export function flattenQueryParams(
+  prefix: string,
+  value: unknown,
+  params: URLSearchParams
+): void {
+  if (value === null || value === undefined) {
+    return;
+  }
+  if (Array.isArray(value)) {
+    // arrays of objects are not yet supported
+    for (const item of value) {
+      params.append(prefix, String(item));
+    }
+  } else if (typeof value === 'object') {
+    for (const [key, val] of Object.entries(value as Record<string, unknown>)) {
+      flattenQueryParams(`${prefix}.${key}`, val, params);
+    }
+  } else if (
+    typeof value === 'string' ||
+    typeof value === 'number' ||
+    typeof value === 'boolean' ||
+    typeof value === 'bigint'
+  ) {
+    params.append(prefix, String(value));
+  } else {
+    throw new Error(`Unsupported query parameter type: ${typeof value}`);
+  }
+}

package/README.md

@@ -1 +0,0 @@
-This is a placeholder release used to enable OIDC trusted publishing. Real code lands in a later version.

package/index.js

@@ -1 +0,0 @@
-module.exports = {};