@decaf-ts/integrations 0.2.2 → 0.3.1

package/lib/types/keycloak/services/KeycloakRoleService.d.mts

@@ -8,6 +8,20 @@ export declare class KeycloakRoleService extends ClientBasedService<AxiosInstanc
         client: AxiosInstance;
     }>;
     createClientRoles(keycloakSetupConfig: KeycloakSetupConfig, roleConfigs: KeycloakClientRoleConfig[] | undefined, ...args: MaybeContextualArg<any>): Promise<void>;
+    /**
+     * Creates a realm-level role in the specified realm.
+     *
+     * When `compositeRoles` is provided, the role is created as a Keycloak
+     * composite role that includes the given sub-roles.  This allows role
+     * hierarchies (e.g. `admin ⊃ writer ⊃ reader`) so that a user assigned
+     * the composite role automatically inherits all sub-roles in their JWT.
+     *
+     * @param realmName      The realm in which to create the role.
+     * @param roleName       The name of the realm role to create.
+     * @param compositeRoles Optional array of existing realm role names to
+     *                       include as composites.
+     */
+    createRealmRole(realmName: string, roleName: string, compositeRoles: string[] | undefined, ...args: MaybeContextualArg<any>): Promise<void>;
     getRealmRoles(realmName: string, ...args: MaybeContextualArg<any>): Promise<any[]>;
     getClientRoles(realmName: string, clientUUID: string, ...args: MaybeContextualArg<any>): Promise<any[]>;
     grantRealmRolesToUser(realmName: string, userUUID: string, roleNames: string[], ...args: MaybeContextualArg<any>): Promise<void>;
@@ -17,7 +31,6 @@ export declare class KeycloakRoleService extends ClientBasedService<AxiosInstanc
     revokeClientRolesFromUser(realmName: string, clientUUID: string, userUUID: string, roleNames: string[], ...args: MaybeContextualArg<any>): Promise<void>;
     replaceClientRolesForUser(realmName: string, clientUUID: string, userUUID: string, roleNames: string[], ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
-    private isProduction;
     private getAdminAccessToken;
     private getRealmAccessToken;
     private getAccessToken;

package/lib/types/keycloak/services/KeycloakService.d.cts

@@ -27,12 +27,21 @@ export declare class KeycloakService extends ClientBasedService<AxiosInstance, K
     editUser(realmName: string, userUUID: string, payload: any, ...args: MaybeContextualArg<any>): Promise<void>;
     removeUserFromRealm(realmName: string, userUUID: string, ...args: MaybeContextualArg<any>): Promise<void>;
     addRealmRolesToUser(realmName: string, userUUID: string, roleNames: string[], ...args: MaybeContextualArg<any>): Promise<void>;
+    /**
+     * Creates a realm-level role, optionally as a composite of existing roles.
+     */
+    createRealmRole(realmName: string, roleName: string, compositeRoles: string[] | undefined, ...args: MaybeContextualArg<any>): Promise<void>;
+    /**
+     * Creates a client in the configured realm and returns its UUID.
+     */
+    createClient(config: KeycloakSetupConfig, overrides: Partial<import("../types.d.cts").KeycloakClientConfig> | undefined, ...args: MaybeContextualArg<any>): Promise<string>;
     addClientRolesToUser(realmName: string, clientUUID: string, userUUID: string, roleNames: string[], ...args: MaybeContextualArg<any>): Promise<void>;
     deleteAdminApiUser(keycloakSetupConfig: KeycloakSetupConfig, ...args: MaybeContextualArg<any>): Promise<void>;
     setupOrganization(config: KeycloakSetupConfig, ...args: MaybeContextualArg<any>): Promise<KeycloakSetupConfig>;
     setupOrganizationSSO(keycloakSetupConfig: KeycloakSetupConfig, ...args: MaybeContextualArg<any>): Promise<void>;
     deleteOrganization(realmName: string, ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
+    private waitForRealm;
     private updateClientScopesRolesMappers;
     private parseJsonResponse;
 }

package/lib/types/keycloak/services/KeycloakService.d.mts

@@ -27,12 +27,21 @@ export declare class KeycloakService extends ClientBasedService<AxiosInstance, K
     editUser(realmName: string, userUUID: string, payload: any, ...args: MaybeContextualArg<any>): Promise<void>;
     removeUserFromRealm(realmName: string, userUUID: string, ...args: MaybeContextualArg<any>): Promise<void>;
     addRealmRolesToUser(realmName: string, userUUID: string, roleNames: string[], ...args: MaybeContextualArg<any>): Promise<void>;
+    /**
+     * Creates a realm-level role, optionally as a composite of existing roles.
+     */
+    createRealmRole(realmName: string, roleName: string, compositeRoles: string[] | undefined, ...args: MaybeContextualArg<any>): Promise<void>;
+    /**
+     * Creates a client in the configured realm and returns its UUID.
+     */
+    createClient(config: KeycloakSetupConfig, overrides: Partial<import("../types.d.mts").KeycloakClientConfig> | undefined, ...args: MaybeContextualArg<any>): Promise<string>;
     addClientRolesToUser(realmName: string, clientUUID: string, userUUID: string, roleNames: string[], ...args: MaybeContextualArg<any>): Promise<void>;
     deleteAdminApiUser(keycloakSetupConfig: KeycloakSetupConfig, ...args: MaybeContextualArg<any>): Promise<void>;
     setupOrganization(config: KeycloakSetupConfig, ...args: MaybeContextualArg<any>): Promise<KeycloakSetupConfig>;
     setupOrganizationSSO(keycloakSetupConfig: KeycloakSetupConfig, ...args: MaybeContextualArg<any>): Promise<void>;
     deleteOrganization(realmName: string, ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
+    private waitForRealm;
     private updateClientScopesRolesMappers;
     private parseJsonResponse;
 }

package/lib/types/keycloak/services/KeycloakUserService.d.cts

@@ -35,7 +35,6 @@ export declare class KeycloakUserService extends ClientBasedService<AxiosInstanc
     revokeClientRolesFromUser(realmName: string, clientUUID: string, userUUID: string, roleNames: string[], ...args: MaybeContextualArg<any>): Promise<void>;
     replaceClientRolesForUser(realmName: string, clientUUID: string, userUUID: string, roleNames: string[], ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
-    private isProduction;
     private getAdminAccessToken;
     private getAccessToken;
     private request;

package/lib/types/keycloak/services/KeycloakUserService.d.mts

@@ -35,7 +35,6 @@ export declare class KeycloakUserService extends ClientBasedService<AxiosInstanc
     revokeClientRolesFromUser(realmName: string, clientUUID: string, userUUID: string, roleNames: string[], ...args: MaybeContextualArg<any>): Promise<void>;
     replaceClientRolesForUser(realmName: string, clientUUID: string, userUUID: string, roleNames: string[], ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
-    private isProduction;
     private getAdminAccessToken;
     private getAccessToken;
     private request;

package/lib/types/keycloak/types.d.cts

@@ -22,6 +22,9 @@ export interface KeycloakClientRoleConfig {
     claimValue: string;
     description?: string;
 }
+export interface ProductionAwareConfig {
+    isProduction(): boolean;
+}
 export interface KeycloakClientConfig {
     clientId: string;
     secret: string;
@@ -90,7 +93,7 @@ export interface KeycloakUserConfigOverrides {
 export interface KeycloakIdentityProviderConfigOverrides {
     payload?: Partial<Record<string, unknown>>;
 }
-export interface KeycloakSetupConfig {
+export interface KeycloakSetupConfig extends ProductionAwareConfig {
     id: string;
     host: string;
     protocol: "http" | "https";
@@ -100,4 +103,15 @@ export interface KeycloakSetupConfig {
     client: KeycloakClientConfig;
     identityProvider?: KeycloakIdentityProviderConfig;
     realmConfig?: KeycloakRealmConfig;
+    /**
+     * When true, realm roles are created as Keycloak composite roles forming a
+     * hierarchy (e.g. admin ⊃ writer ⊃ reader).  A user assigned the composite
+     * role automatically inherits all sub-roles in their JWT.
+     *
+     * When false (default), roles are independent — admin does NOT imply writer
+     * or reader.  Each user must be explicitly granted every role they need.
+     *
+     * @default false
+     */
+    useCompositeRoles?: boolean;
 }

package/lib/types/keycloak/types.d.mts

@@ -22,6 +22,9 @@ export interface KeycloakClientRoleConfig {
     claimValue: string;
     description?: string;
 }
+export interface ProductionAwareConfig {
+    isProduction(): boolean;
+}
 export interface KeycloakClientConfig {
     clientId: string;
     secret: string;
@@ -90,7 +93,7 @@ export interface KeycloakUserConfigOverrides {
 export interface KeycloakIdentityProviderConfigOverrides {
     payload?: Partial<Record<string, unknown>>;
 }
-export interface KeycloakSetupConfig {
+export interface KeycloakSetupConfig extends ProductionAwareConfig {
     id: string;
     host: string;
     protocol: "http" | "https";
@@ -100,4 +103,15 @@ export interface KeycloakSetupConfig {
     client: KeycloakClientConfig;
     identityProvider?: KeycloakIdentityProviderConfig;
     realmConfig?: KeycloakRealmConfig;
+    /**
+     * When true, realm roles are created as Keycloak composite roles forming a
+     * hierarchy (e.g. admin ⊃ writer ⊃ reader).  A user assigned the composite
+     * role automatically inherits all sub-roles in their JWT.
+     *
+     * When false (default), roles are independent — admin does NOT imply writer
+     * or reader.  Each user must be explicitly granted every role they need.
+     *
+     * @default false
+     */
+    useCompositeRoles?: boolean;
 }

package/lib/types/kibana/services/KibanaAuthService.d.cts

@@ -11,6 +11,5 @@ export declare class KibanaAuthService extends ClientBasedService<AxiosInstance,
     logout(user: KibanaUser, ...args: MaybeContextualArg<any>): Promise<void>;
     protected parseError(error: Error): Error;
     private createHttpClient;
-    private isSecureEnvironment;
     private request;
 }

package/lib/types/kibana/services/KibanaAuthService.d.mts

@@ -11,6 +11,5 @@ export declare class KibanaAuthService extends ClientBasedService<AxiosInstance,
     logout(user: KibanaUser, ...args: MaybeContextualArg<any>): Promise<void>;
     protected parseError(error: Error): Error;
     private createHttpClient;
-    private isSecureEnvironment;
     private request;
 }

package/lib/types/kibana/services/KibanaDashboardService.d.cts

@@ -25,7 +25,5 @@ export declare class KibanaDashboardService extends ClientBasedService<AxiosInst
     verifySpaceSetup(realmName: string, ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
     protected parseError(error: Error): Error;
-    private isSecureEnvironment;
     private request;
-    private parseJson;
 }

package/lib/types/kibana/services/KibanaDashboardService.d.mts

@@ -25,7 +25,5 @@ export declare class KibanaDashboardService extends ClientBasedService<AxiosInst
     verifySpaceSetup(realmName: string, ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
     protected parseError(error: Error): Error;
-    private isSecureEnvironment;
     private request;
-    private parseJson;
 }

package/lib/types/kibana/services/KibanaDataViewService.d.cts

@@ -15,9 +15,7 @@ export declare class KibanaDataViewService extends ClientBasedService<AxiosInsta
     setDefaultDataView(realmName: string, dataViewId: string | undefined, ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
     protected parseError(error: Error): Error;
-    private isSecureEnvironment;
     private normalizeDataViewConfig;
     private defaultDataViewConfigs;
     private request;
-    private parseJson;
 }

package/lib/types/kibana/services/KibanaDataViewService.d.mts

@@ -15,9 +15,7 @@ export declare class KibanaDataViewService extends ClientBasedService<AxiosInsta
     setDefaultDataView(realmName: string, dataViewId: string | undefined, ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
     protected parseError(error: Error): Error;
-    private isSecureEnvironment;
     private normalizeDataViewConfig;
     private defaultDataViewConfigs;
     private request;
-    private parseJson;
 }

package/lib/types/kibana/services/KibanaRoleService.d.cts

@@ -13,7 +13,6 @@ export declare class KibanaRoleService extends ClientBasedService<AxiosInstance,
     updateRole(realmName: string, payload: Partial<KibanaRoleConfig>, ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
     protected parseError(error: Error): Error;
-    private isSecureEnvironment;
     private normalizeRoleConfig;
     private request;
 }

package/lib/types/kibana/services/KibanaRoleService.d.mts

@@ -13,7 +13,6 @@ export declare class KibanaRoleService extends ClientBasedService<AxiosInstance,
     updateRole(realmName: string, payload: Partial<KibanaRoleConfig>, ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
     protected parseError(error: Error): Error;
-    private isSecureEnvironment;
     private normalizeRoleConfig;
     private request;
 }

package/lib/types/kibana/services/KibanaSpaceService.d.cts

@@ -14,7 +14,6 @@ export declare class KibanaSpaceService extends ClientBasedService<AxiosInstance
     deleteSpace(realmName: string, ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
     protected parseError(error: Error): Error;
-    private isSecureEnvironment;
     private normalizeSpaceConfig;
     private request;
 }

package/lib/types/kibana/services/KibanaSpaceService.d.mts

@@ -14,7 +14,6 @@ export declare class KibanaSpaceService extends ClientBasedService<AxiosInstance
     deleteSpace(realmName: string, ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
     protected parseError(error: Error): Error;
-    private isSecureEnvironment;
     private normalizeSpaceConfig;
     private request;
 }

package/lib/types/kibana/services/KibanaUserService.d.cts

@@ -13,7 +13,6 @@ export declare class KibanaUserService extends ClientBasedService<AxiosInstance,
     updateUser(user: KibanaUser, realmName: string, roleNames: string[] | undefined, ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
     protected parseError(error: Error): Error;
-    private isSecureEnvironment;
     private normalizeRoleConfig;
     private request;
 }

package/lib/types/kibana/services/KibanaUserService.d.mts

@@ -13,7 +13,6 @@ export declare class KibanaUserService extends ClientBasedService<AxiosInstance,
     updateUser(user: KibanaUser, realmName: string, roleNames: string[] | undefined, ...args: MaybeContextualArg<any>): Promise<void>;
     private createHttpClient;
     protected parseError(error: Error): Error;
-    private isSecureEnvironment;
     private normalizeRoleConfig;
     private request;
 }

package/lib/types/kibana/types.d.cts

@@ -20,6 +20,9 @@ export interface KibanaSpaceConfig {
     solution?: string;
     imageUrl?: string;
 }
+export interface ProductionAwareConfig {
+    isProduction(): boolean;
+}
 /**
  * @module integrations/kibana/types
  * @summary Kibana configuration and payload types.
@@ -57,7 +60,7 @@ export interface KibanaRoleConfig {
     }>;
     metadata?: Record<string, unknown>;
 }
-export interface KibanaSetupConfig {
+export interface KibanaSetupConfig extends ProductionAwareConfig {
     id: string;
     host: string;
     es_host: string;

package/lib/types/kibana/types.d.mts

@@ -20,6 +20,9 @@ export interface KibanaSpaceConfig {
     solution?: string;
     imageUrl?: string;
 }
+export interface ProductionAwareConfig {
+    isProduction(): boolean;
+}
 /**
  * @module integrations/kibana/types
  * @summary Kibana configuration and payload types.
@@ -57,7 +60,7 @@ export interface KibanaRoleConfig {
     }>;
     metadata?: Record<string, unknown>;
 }
-export interface KibanaSetupConfig {
+export interface KibanaSetupConfig extends ProductionAwareConfig {
     id: string;
     host: string;
     es_host: string;

package/lib/types/shared/runtime.d.cts

@@ -0,0 +1,2 @@
+export declare function parseJsonBody<T>(value: unknown): T | undefined;
+export declare function responseBodyAsText(value: unknown): string;

package/lib/types/shared/runtime.d.mts

@@ -0,0 +1,2 @@
+export declare function parseJsonBody<T>(value: unknown): T | undefined;
+export declare function responseBodyAsText(value: unknown): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decaf-ts/integrations",
-  "version": "0.2.2",
+  "version": "0.3.1",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/index.d.mts",
@@ -254,8 +254,10 @@
     "uuid": "^11.1.1"
   },
   "devDependencies": {
+    "@decaf-ts/cli": "latest",
     "@decaf-ts/for-http": "latest",
-    "@decaf-ts/for-nest": "^0.11.2-refactor.2",
+    "@decaf-ts/for-nano": "latest",
+    "@decaf-ts/for-nest": "0.11.2-refactor.5",
     "@decaf-ts/utils": "latest",
     "@nestjs/common": "^11.0.0",
     "@nestjs/core": "^11.0.0",
@@ -270,7 +272,7 @@
   },
   "peerDependencies": {
     "@decaf-ts/for-http": "latest",
-    "@decaf-ts/for-nest": "0.11.2.refactor.2",
+    "@decaf-ts/for-nest": "0.11.2-refactor.5",
     "jose": ">=5.0.0"
   },
   "peerDependenciesMeta": {