@flowcore/sdk 1.50.0 → 1.51.0

package/esm/commands/iam/validate/validate-user.d.ts

@@ -0,0 +1,77 @@
+import { Command } from "@flowcore/sdk";
+import { type Static, type TArray, type TBoolean, type TObject, type TString } from "@sinclair/typebox";
+/**
+ * The mode of validation
+ */
+export type ValidationMode = "tenant" | "organization";
+/**
+ * The validation request access item
+ */
+export interface ValidationRequestAccessItem {
+    action: string;
+    resource: string[];
+}
+/**
+ * The schema for a valid policy
+ */
+export declare const ValidPolicySchema: TObject<{
+    policyFrn: TString;
+    statementId: TString;
+}>;
+/**
+ * The schema for a validation response
+ */
+export declare const ValidationResponseSchema: TObject<{
+    valid: TBoolean;
+    checksum: TString;
+    validPolicies: TArray<typeof ValidPolicySchema>;
+}>;
+/**
+ * The valid policy type
+ */
+export type ValidPolicy = Static<typeof ValidPolicySchema>;
+/**
+ * The validation response type
+ */
+export type ValidationResponse = Static<typeof ValidationResponseSchema>;
+/**
+ * The input for the user validation command
+ */
+export interface ValidateUserInput {
+    /** The user id */
+    userId: string;
+    /** The mode of validation */
+    mode: ValidationMode;
+    /** The requested access */
+    requestedAccess: ValidationRequestAccessItem[];
+}
+/**
+ * Validate if a user can perform actions
+ */
+export declare class ValidateUserCommand extends Command<ValidateUserInput, ValidationResponse> {
+    /**
+     * Whether the command should retry on failure
+     */
+    protected retryOnFailure: boolean;
+    /**
+     * Get the method
+     */
+    protected getMethod(): string;
+    /**
+     * Get the base url
+     */
+    protected getBaseUrl(): string;
+    /**
+     * Get the path
+     */
+    protected getPath(): string;
+    /**
+     * Get the body
+     */
+    protected getBody(): Record<string, unknown>;
+    /**
+     * Parse the response
+     */
+    protected parseResponse(rawResponse: unknown): ValidationResponse;
+}
+//# sourceMappingURL=validate-user.d.ts.map

package/esm/commands/iam/validate/validate-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-user.d.ts","sourceRoot":"","sources":["../../../../src/commands/iam/validate/validate-user.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAuB,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,MAAM,EAAE,KAAK,QAAQ,EAAE,KAAK,OAAO,EAAE,KAAK,OAAO,EAAQ,MAAM,mBAAmB,CAAA;AAE7G;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,cAAc,CAAA;AAEtD;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAAO,CAAC;IACtC,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;CACrB,CAGC,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC;IAC7C,KAAK,EAAE,QAAQ,CAAA;IACf,QAAQ,EAAE,OAAO,CAAA;IACjB,aAAa,EAAE,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAA;CAChD,CAIC,CAAA;AAEF;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAE1D;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAExE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,kBAAkB;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,6BAA6B;IAC7B,IAAI,EAAE,cAAc,CAAA;IACpB,2BAA2B;IAC3B,eAAe,EAAE,2BAA2B,EAAE,CAAA;CAC/C;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,OAAO,CAC9C,iBAAiB,EACjB,kBAAkB,CACnB;IACC;;OAEG;IACH,UAAmB,cAAc,UAAO;IAExC;;OAEG;cACgB,SAAS,IAAI,MAAM;IAItC;;OAEG;cACgB,UAAU,IAAI,MAAM;IAIvC;;OAEG;cACgB,OAAO,IAAI,MAAM;IAIpC;;OAEG;cACgB,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAKrD;;OAEG;cACgB,aAAa,CAAC,WAAW,EAAE,OAAO,GAAG,kBAAkB;CAG3E"}

package/esm/commands/iam/validate/validate-user.js

@@ -0,0 +1,57 @@
+import { Command, parseResponseHelper } from "@flowcore/sdk";
+import { Type } from "@sinclair/typebox";
+/**
+ * The schema for a valid policy
+ */
+export const ValidPolicySchema = Type.Object({
+    policyFrn: Type.String(),
+    statementId: Type.String(),
+});
+/**
+ * The schema for a validation response
+ */
+export const ValidationResponseSchema = Type.Object({
+    valid: Type.Boolean(),
+    checksum: Type.String(),
+    validPolicies: Type.Array(ValidPolicySchema),
+});
+/**
+ * Validate if a user can perform actions
+ */
+export class ValidateUserCommand extends Command {
+    /**
+     * Whether the command should retry on failure
+     */
+    retryOnFailure = true;
+    /**
+     * Get the method
+     */
+    getMethod() {
+        return "POST";
+    }
+    /**
+     * Get the base url
+     */
+    getBaseUrl() {
+        return "https://iam.api.flowcore.io";
+    }
+    /**
+     * Get the path
+     */
+    getPath() {
+        return `/api/v1/validate/users/${this.input.userId}`;
+    }
+    /**
+     * Get the body
+     */
+    getBody() {
+        const { ...rest } = this.input;
+        return rest;
+    }
+    /**
+     * Parse the response
+     */
+    parseResponse(rawResponse) {
+        return parseResponseHelper(ValidationResponseSchema, rawResponse);
+    }
+}

package/esm/commands/index.d.ts

@@ -57,4 +57,37 @@ export * from "./scenario/scenario.delete.js";
 export * from "./scenario/scenario.fetch.js";
 export * from "./scenario/scenario.list.js";
 export * from "./scenario/scenario.update.js";
+export * from "./iam/permissions/get-user-permissions.js";
+export * from "./iam/policies/create-policy.js";
+export * from "./iam/policies/get-policy.js";
+export * from "./iam/policies/id/archive-policy.js";
+export * from "./iam/policies/id/get-policy.js";
+export * from "./iam/policies/id/update-policy.js";
+export * from "./iam/policy-associations/get-key-policies.js";
+export * from "./iam/policy-associations/get-organization-policies.js";
+export * from "./iam/policy-associations/get-policy-associations.js";
+export * from "./iam/policy-associations/get-role-policies.js";
+export * from "./iam/policy-associations/get-user-policies.js";
+export * from "./iam/policy-associations/link-key-policy.js";
+export * from "./iam/policy-associations/link-role-policy.js";
+export * from "./iam/policy-associations/link-user-policy.js";
+export * from "./iam/policy-associations/unlink-key-policy.js";
+export * from "./iam/policy-associations/unlink-role-policy.js";
+export * from "./iam/policy-associations/unlink-user-policy.js";
+export * from "./iam/role-associations/get-key-roles.js";
+export * from "./iam/role-associations/get-organization-roles.js";
+export * from "./iam/role-associations/get-role-associations.js";
+export * from "./iam/role-associations/get-user-roles.js";
+export * from "./iam/role-associations/link-key-role.js";
+export * from "./iam/role-associations/link-user-role.js";
+export * from "./iam/role-associations/unlink-key-role.js";
+export * from "./iam/role-associations/unlink-user-role.js";
+export * from "./iam/roles/create-role.js";
+export * from "./iam/roles/get-roles.js";
+export * from "./iam/roles/id/archive-role.js";
+export * from "./iam/roles/id/get-role.js";
+export * from "./iam/roles/id/update-role.js";
+export * from "./iam/tenant-iam-audit/get-audit-for-tenant.js";
+export * from "./iam/validate/validate-key.js";
+export * from "./iam/validate/validate-user.js";
 //# sourceMappingURL=index.d.ts.map

package/esm/commands/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AACA,cAAc,2CAA2C,CAAA;AACzD,cAAc,0CAA0C,CAAA;AACxD,cAAc,0BAA0B,CAAA;AACxC,cAAc,yBAAyB,CAAA;AACvC,cAAc,yCAAyC,CAAA;AAGvD,cAAc,4BAA4B,CAAA;AAG1C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,2BAA2B,CAAA;AAGzC,cAAc,2BAA2B,CAAA;AACzC,cAAc,2BAA2B,CAAA;AACzC,cAAc,yBAAyB,CAAA;AAGvC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,6BAA6B,CAAA;AAG3C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,yCAAyC,CAAA;AACvD,cAAc,iCAAiC,CAAA;AAG/C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,yCAAyC,CAAA;AACvD,cAAc,iCAAiC,CAAA;AAG/C,cAAc,mCAAmC,CAAA;AACjD,cAAc,mCAAmC,CAAA;AACjD,cAAc,kCAAkC,CAAA;AAChD,cAAc,iCAAiC,CAAA;AAC/C,cAAc,wDAAwD,CAAA;AACtE,cAAc,iCAAiC,CAAA;AAC/C,cAAc,kDAAkD,CAAA;AAChE,cAAc,2CAA2C,CAAA;AACzD,cAAc,6CAA6C,CAAA;AAC3D,cAAc,mCAAmC,CAAA;AAGjD,cAAc,6BAA6B,CAAA;AAC3C,cAAc,6BAA6B,CAAA;AAG3C,cAAc,wBAAwB,CAAA;AACtC,cAAc,gDAAgD,CAAA;AAC9D,cAAc,0BAA0B,CAAA;AACxC,cAAc,8BAA8B,CAAA;AAG5C,cAAc,mDAAmD,CAAA;AACjE,cAAc,mDAAmD,CAAA;AACjE,cAAc,kDAAkD,CAAA;AAChE,cAAc,iDAAiD,CAAA;AAC/D,cAAc,mDAAmD,CAAA;AAGjE,cAAc,0BAA0B,CAAA;AACxC,cAAc,0BAA0B,CAAA;AACxC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,uBAAuB,CAAA;AACrC,cAAc,wBAAwB,CAAA;AACtC,cAAc,gCAAgC,CAAA;AAG9C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,+BAA+B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AACA,cAAc,2CAA2C,CAAA;AACzD,cAAc,0CAA0C,CAAA;AACxD,cAAc,0BAA0B,CAAA;AACxC,cAAc,yBAAyB,CAAA;AACvC,cAAc,yCAAyC,CAAA;AAGvD,cAAc,4BAA4B,CAAA;AAG1C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,2BAA2B,CAAA;AAGzC,cAAc,2BAA2B,CAAA;AACzC,cAAc,2BAA2B,CAAA;AACzC,cAAc,yBAAyB,CAAA;AAGvC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,6BAA6B,CAAA;AAG3C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,yCAAyC,CAAA;AACvD,cAAc,iCAAiC,CAAA;AAG/C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,yCAAyC,CAAA;AACvD,cAAc,iCAAiC,CAAA;AAG/C,cAAc,mCAAmC,CAAA;AACjD,cAAc,mCAAmC,CAAA;AACjD,cAAc,kCAAkC,CAAA;AAChD,cAAc,iCAAiC,CAAA;AAC/C,cAAc,wDAAwD,CAAA;AACtE,cAAc,iCAAiC,CAAA;AAC/C,cAAc,kDAAkD,CAAA;AAChE,cAAc,2CAA2C,CAAA;AACzD,cAAc,6CAA6C,CAAA;AAC3D,cAAc,mCAAmC,CAAA;AAGjD,cAAc,6BAA6B,CAAA;AAC3C,cAAc,6BAA6B,CAAA;AAG3C,cAAc,wBAAwB,CAAA;AACtC,cAAc,gDAAgD,CAAA;AAC9D,cAAc,0BAA0B,CAAA;AACxC,cAAc,8BAA8B,CAAA;AAG5C,cAAc,mDAAmD,CAAA;AACjE,cAAc,mDAAmD,CAAA;AACjE,cAAc,kDAAkD,CAAA;AAChE,cAAc,iDAAiD,CAAA;AAC/D,cAAc,mDAAmD,CAAA;AAGjE,cAAc,0BAA0B,CAAA;AACxC,cAAc,0BAA0B,CAAA;AACxC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,uBAAuB,CAAA;AACrC,cAAc,wBAAwB,CAAA;AACtC,cAAc,gCAAgC,CAAA;AAG9C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,+BAA+B,CAAA;AAG7C,cAAc,2CAA2C,CAAA;AAEzD,cAAc,iCAAiC,CAAA;AAC/C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,qCAAqC,CAAA;AACnD,cAAc,iCAAiC,CAAA;AAC/C,cAAc,oCAAoC,CAAA;AAElD,cAAc,+CAA+C,CAAA;AAC7D,cAAc,wDAAwD,CAAA;AACtE,cAAc,sDAAsD,CAAA;AACpE,cAAc,gDAAgD,CAAA;AAC9D,cAAc,gDAAgD,CAAA;AAC9D,cAAc,8CAA8C,CAAA;AAC5D,cAAc,+CAA+C,CAAA;AAC7D,cAAc,+CAA+C,CAAA;AAC7D,cAAc,gDAAgD,CAAA;AAC9D,cAAc,iDAAiD,CAAA;AAC/D,cAAc,iDAAiD,CAAA;AAE/D,cAAc,0CAA0C,CAAA;AACxD,cAAc,mDAAmD,CAAA;AACjE,cAAc,kDAAkD,CAAA;AAChE,cAAc,2CAA2C,CAAA;AACzD,cAAc,0CAA0C,CAAA;AACxD,cAAc,2CAA2C,CAAA;AACzD,cAAc,4CAA4C,CAAA;AAC1D,cAAc,6CAA6C,CAAA;AAE3D,cAAc,4BAA4B,CAAA;AAC1C,cAAc,0BAA0B,CAAA;AACxC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,4BAA4B,CAAA;AAC1C,cAAc,+BAA+B,CAAA;AAE7C,cAAc,gDAAgD,CAAA;AAE9D,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iCAAiC,CAAA"}

package/esm/commands/index.js

@@ -70,3 +70,37 @@ export * from "./scenario/scenario.delete.js";
 export * from "./scenario/scenario.fetch.js";
 export * from "./scenario/scenario.list.js";
 export * from "./scenario/scenario.update.js";
+// Identity and Access Management
+export * from "./iam/permissions/get-user-permissions.js";
+export * from "./iam/policies/create-policy.js";
+export * from "./iam/policies/get-policy.js";
+export * from "./iam/policies/id/archive-policy.js";
+export * from "./iam/policies/id/get-policy.js";
+export * from "./iam/policies/id/update-policy.js";
+export * from "./iam/policy-associations/get-key-policies.js";
+export * from "./iam/policy-associations/get-organization-policies.js";
+export * from "./iam/policy-associations/get-policy-associations.js";
+export * from "./iam/policy-associations/get-role-policies.js";
+export * from "./iam/policy-associations/get-user-policies.js";
+export * from "./iam/policy-associations/link-key-policy.js";
+export * from "./iam/policy-associations/link-role-policy.js";
+export * from "./iam/policy-associations/link-user-policy.js";
+export * from "./iam/policy-associations/unlink-key-policy.js";
+export * from "./iam/policy-associations/unlink-role-policy.js";
+export * from "./iam/policy-associations/unlink-user-policy.js";
+export * from "./iam/role-associations/get-key-roles.js";
+export * from "./iam/role-associations/get-organization-roles.js";
+export * from "./iam/role-associations/get-role-associations.js";
+export * from "./iam/role-associations/get-user-roles.js";
+export * from "./iam/role-associations/link-key-role.js";
+export * from "./iam/role-associations/link-user-role.js";
+export * from "./iam/role-associations/unlink-key-role.js";
+export * from "./iam/role-associations/unlink-user-role.js";
+export * from "./iam/roles/create-role.js";
+export * from "./iam/roles/get-roles.js";
+export * from "./iam/roles/id/archive-role.js";
+export * from "./iam/roles/id/get-role.js";
+export * from "./iam/roles/id/update-role.js";
+export * from "./iam/tenant-iam-audit/get-audit-for-tenant.js";
+export * from "./iam/validate/validate-key.js";
+export * from "./iam/validate/validate-user.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowcore/sdk",
-  "version": "1.50.0",
+  "version": "1.51.0",
   "description": "Flowcore SDK",
   "homepage": "https://github.com/flowcore-io/flowcore-sdk#readme",
   "repository": {

package/script/commands/iam/permissions/get-user-permissions.d.ts

@@ -0,0 +1,48 @@
+import { Command } from "@flowcore/sdk";
+import { type Static, type TArray, type TObject, type TString } from "@sinclair/typebox";
+/**
+ * The schema for a permission
+ */
+export declare const UserPermissionSchema: TObject<{
+    tenant: TString;
+    type: TString;
+    id: TString;
+    action: TArray<TString>;
+}>;
+/**
+ * The permission type
+ */
+export type UserPermission = Static<typeof UserPermissionSchema>;
+/**
+ * The input for the user permissions command
+ */
+export interface UserPermissionsInput {
+    /** The optional permission type */
+    type?: string;
+}
+/**
+ * Get all permissions for the current user
+ */
+export declare class UserPermissionsCommand extends Command<UserPermissionsInput, UserPermission[]> {
+    /**
+     * Whether the command should retry on failure
+     */
+    protected retryOnFailure: boolean;
+    /**
+     * Get the method
+     */
+    protected getMethod(): string;
+    /**
+     * Get the base url
+     */
+    protected getBaseUrl(): string;
+    /**
+     * Get the path
+     */
+    protected getPath(): string;
+    /**
+     * Parse the response
+     */
+    protected parseResponse(rawResponse: unknown): UserPermission[];
+}
+//# sourceMappingURL=get-user-permissions.d.ts.map

package/script/commands/iam/permissions/get-user-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user-permissions.d.ts","sourceRoot":"","sources":["../../../../src/commands/iam/permissions/get-user-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAuB,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,EAAE,KAAK,OAAO,EAAQ,MAAM,mBAAmB,CAAA;AAE9F;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC;IACzC,MAAM,EAAE,OAAO,CAAA;IACf,IAAI,EAAE,OAAO,CAAA;IACb,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;CACxB,CAKC,CAAA;AAEF;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEhE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,OAAO,CACjD,oBAAoB,EACpB,cAAc,EAAE,CACjB;IACC;;OAEG;IACH,UAAmB,cAAc,UAAO;IAExC;;OAEG;cACgB,SAAS,IAAI,MAAM;IAItC;;OAEG;cACgB,UAAU,IAAI,MAAM;IAIvC;;OAEG;cACgB,OAAO,IAAI,MAAM;IAIpC;;OAEG;cACgB,aAAa,CAAC,WAAW,EAAE,OAAO,GAAG,cAAc,EAAE;CAGzE"}

package/script/commands/iam/permissions/get-user-permissions.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserPermissionsCommand = exports.UserPermissionSchema = void 0;
+const sdk_1 = require("@flowcore/sdk");
+const typebox_1 = require("@sinclair/typebox");
+/**
+ * The schema for a permission
+ */
+exports.UserPermissionSchema = typebox_1.Type.Object({
+    tenant: typebox_1.Type.String(),
+    type: typebox_1.Type.String(),
+    id: typebox_1.Type.String(),
+    action: typebox_1.Type.Array(typebox_1.Type.String()),
+});
+/**
+ * Get all permissions for the current user
+ */
+class UserPermissionsCommand extends sdk_1.Command {
+    /**
+     * Whether the command should retry on failure
+     */
+    retryOnFailure = true;
+    /**
+     * Get the method
+     */
+    getMethod() {
+        return "GET";
+    }
+    /**
+     * Get the base url
+     */
+    getBaseUrl() {
+        return "https://iam.api.flowcore.io";
+    }
+    /**
+     * Get the path
+     */
+    getPath() {
+        return "/api/v1/permissions/";
+    }
+    /**
+     * Parse the response
+     */
+    parseResponse(rawResponse) {
+        return (0, sdk_1.parseResponseHelper)(typebox_1.Type.Array(exports.UserPermissionSchema), rawResponse);
+    }
+}
+exports.UserPermissionsCommand = UserPermissionsCommand;

package/script/commands/iam/policies/create-policy.d.ts

@@ -0,0 +1,89 @@
+import { Command } from "@flowcore/sdk";
+import { type Static, type TArray, type TBoolean, type TObject, type TOptional, type TString, type TUnion } from "@sinclair/typebox";
+/**
+ * The schema for a policy statement document
+ */
+export declare const PolicyStatementSchema: TObject<{
+    statementId: TOptional<TString>;
+    resource: TString;
+    action: TUnion<[TString, TArray<TString>]>;
+}>;
+/**
+ * The schema for a policy
+ */
+export declare const PolicySchema: TObject<{
+    id: TString;
+    organizationId: TString;
+    name: TString;
+    version: TString;
+    policyDocuments: TArray<typeof PolicyStatementSchema>;
+    description: TOptional<TString>;
+    principal: TOptional<TString>;
+    flowcoreManaged: TBoolean;
+    archived: TOptional<TBoolean>;
+    frn: TString;
+}>;
+/**
+ * The Policy type
+ */
+export type Policy = Static<typeof PolicySchema>;
+/**
+ * The Policy Statement type
+ */
+export type PolicyStatement = Static<typeof PolicyStatementSchema>;
+/**
+ * The input for the policy create command
+ */
+export interface PolicyCreateInput {
+    /** The organization id */
+    organizationId: string;
+    /** The name of the policy */
+    name: string;
+    /** The version of the policy */
+    version: string;
+    /** The policy documents */
+    policyDocuments: Array<{
+        /** The optional statement id */
+        statementId?: string;
+        /** The resource for this statement */
+        resource: string;
+        /** The actions for this statement */
+        action: string | string[];
+    }>;
+    /** The description of the policy */
+    description?: string;
+    /** The principal role that can access the resource */
+    principal?: string;
+    /** Whether the policy is managed by Flowcore */
+    flowcoreManaged?: boolean;
+}
+/**
+ * Create a policy
+ */
+export declare class PolicyCreateCommand extends Command<PolicyCreateInput, Policy> {
+    /**
+     * Whether the command should retry on failure
+     */
+    protected retryOnFailure: boolean;
+    /**
+     * Get the method
+     */
+    protected getMethod(): string;
+    /**
+     * Get the base url
+     */
+    protected getBaseUrl(): string;
+    /**
+     * Get the path
+     */
+    protected getPath(): string;
+    /**
+     * Get the body
+     */
+    protected getBody(): Record<string, unknown>;
+    /**
+     * Parse the response
+     */
+    protected parseResponse(rawResponse: unknown): Policy;
+}
+//# sourceMappingURL=create-policy.d.ts.map

package/script/commands/iam/policies/create-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-policy.d.ts","sourceRoot":"","sources":["../../../../src/commands/iam/policies/create-policy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAuB,MAAM,eAAe,CAAA;AAC5D,OAAO,EACL,KAAK,MAAM,EACX,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,OAAO,EACZ,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,KAAK,MAAM,EAEZ,MAAM,mBAAmB,CAAA;AAE1B;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC;IAC1C,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;CAC3C,CAIC,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,OAAO,CAAC;IACjC,EAAE,EAAE,OAAO,CAAA;IACX,cAAc,EAAE,OAAO,CAAA;IACvB,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,EAAE,OAAO,CAAA;IAChB,eAAe,EAAE,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAA;IACrD,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IAC/B,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IAC7B,eAAe,EAAE,QAAQ,CAAA;IACzB,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;IAC7B,GAAG,EAAE,OAAO,CAAA;CACb,CAWC,CAAA;AAEF;;GAEG;AACH,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,YAAY,CAAC,CAAA;AAEhD;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAElE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,0BAA0B;IAC1B,cAAc,EAAE,MAAM,CAAA;IACtB,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAA;IACf,2BAA2B;IAC3B,eAAe,EAAE,KAAK,CAAC;QACrB,gCAAgC;QAChC,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,sCAAsC;QACtC,QAAQ,EAAE,MAAM,CAAA;QAChB,qCAAqC;QACrC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAC1B,CAAC,CAAA;IACF,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gDAAgD;IAChD,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACzE;;OAEG;IACH,UAAmB,cAAc,UAAQ;IAEzC;;OAEG;cACgB,SAAS,IAAI,MAAM;IAItC;;OAEG;cACgB,UAAU,IAAI,MAAM;IAIvC;;OAEG;cACgB,OAAO,IAAI,MAAM;IAIpC;;OAEG;cACgB,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAOrD;;OAEG;cACgB,aAAa,CAAC,WAAW,EAAE,OAAO,GAAG,MAAM;CAG/D"}

package/script/commands/iam/policies/create-policy.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyCreateCommand = exports.PolicySchema = exports.PolicyStatementSchema = void 0;
+// src/contracts/policy.ts
+const sdk_1 = require("@flowcore/sdk");
+const typebox_1 = require("@sinclair/typebox");
+/**
+ * The schema for a policy statement document
+ */
+exports.PolicyStatementSchema = typebox_1.Type.Object({
+    statementId: typebox_1.Type.Optional(typebox_1.Type.String()),
+    resource: typebox_1.Type.String(),
+    action: typebox_1.Type.Union([typebox_1.Type.String(), typebox_1.Type.Array(typebox_1.Type.String())]),
+});
+/**
+ * The schema for a policy
+ */
+exports.PolicySchema = typebox_1.Type.Object({
+    id: typebox_1.Type.String(),
+    organizationId: typebox_1.Type.String(),
+    name: typebox_1.Type.String(),
+    version: typebox_1.Type.String(),
+    policyDocuments: typebox_1.Type.Array(exports.PolicyStatementSchema),
+    description: typebox_1.Type.Optional(typebox_1.Type.String()),
+    principal: typebox_1.Type.Optional(typebox_1.Type.String()),
+    flowcoreManaged: typebox_1.Type.Boolean(),
+    archived: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
+    frn: typebox_1.Type.String(),
+});
+/**
+ * Create a policy
+ */
+class PolicyCreateCommand extends sdk_1.Command {
+    /**
+     * Whether the command should retry on failure
+     */
+    retryOnFailure = false;
+    /**
+     * Get the method
+     */
+    getMethod() {
+        return "POST";
+    }
+    /**
+     * Get the base url
+     */
+    getBaseUrl() {
+        return "https://iam.api.flowcore.io";
+    }
+    /**
+     * Get the path
+     */
+    getPath() {
+        return "/api/v1/policies/";
+    }
+    /**
+     * Get the body
+     */
+    getBody() {
+        return {
+            ...this.input,
+            flowcoreManaged: this.input.flowcoreManaged ?? false,
+        };
+    }
+    /**
+     * Parse the response
+     */
+    parseResponse(rawResponse) {
+        return (0, sdk_1.parseResponseHelper)(exports.PolicySchema, rawResponse);
+    }
+}
+exports.PolicyCreateCommand = PolicyCreateCommand;

package/script/commands/iam/policies/get-policy.d.ts

@@ -0,0 +1,35 @@
+import { Command } from "@flowcore/sdk";
+import { type Policy } from "./create-policy.js";
+/**
+ * The input for the policy list command
+ */
+export interface PolicyListInput {
+    /** The organization id */
+    organizationId?: string;
+}
+/**
+ * List policies
+ */
+export declare class PolicyListCommand extends Command<PolicyListInput, Policy[]> {
+    /**
+     * Whether the command should retry on failure
+     */
+    protected retryOnFailure: boolean;
+    /**
+     * Get the method
+     */
+    protected getMethod(): string;
+    /**
+     * Get the base url
+     */
+    protected getBaseUrl(): string;
+    /**
+     * Get the path
+     */
+    protected getPath(): string;
+    /**
+     * Parse the response
+     */
+    protected parseResponse(rawResponse: unknown): Policy[];
+}
+//# sourceMappingURL=get-policy.d.ts.map

package/script/commands/iam/policies/get-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-policy.d.ts","sourceRoot":"","sources":["../../../../src/commands/iam/policies/get-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAuB,MAAM,eAAe,CAAA;AAE5D,OAAO,EAAE,KAAK,MAAM,EAAgB,MAAM,oBAAoB,CAAA;AAE9D;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,0BAA0B;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,OAAO,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IACvE;;OAEG;IACH,UAAmB,cAAc,UAAO;IAExC;;OAEG;cACgB,SAAS,IAAI,MAAM;IAItC;;OAEG;cACgB,UAAU,IAAI,MAAM;IAIvC;;OAEG;cACgB,OAAO,IAAI,MAAM;IAIpC;;OAEG;cACgB,aAAa,CAAC,WAAW,EAAE,OAAO,GAAG,MAAM,EAAE;CAGjE"}

package/script/commands/iam/policies/get-policy.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyListCommand = void 0;
+const sdk_1 = require("@flowcore/sdk");
+const typebox_1 = require("@sinclair/typebox");
+const create_policy_js_1 = require("./create-policy.js"); // Reuse the Policy type definition
+/**
+ * List policies
+ */
+class PolicyListCommand extends sdk_1.Command {
+    /**
+     * Whether the command should retry on failure
+     */
+    retryOnFailure = true;
+    /**
+     * Get the method
+     */
+    getMethod() {
+        return "GET";
+    }
+    /**
+     * Get the base url
+     */
+    getBaseUrl() {
+        return "https://iam.api.flowcore.io";
+    }
+    /**
+     * Get the path
+     */
+    getPath() {
+        return "/api/v1/policies/";
+    }
+    /**
+     * Parse the response
+     */
+    parseResponse(rawResponse) {
+        return (0, sdk_1.parseResponseHelper)(typebox_1.Type.Array(create_policy_js_1.PolicySchema), rawResponse);
+    }
+}
+exports.PolicyListCommand = PolicyListCommand;

package/script/commands/iam/policies/id/archive-policy.d.ts

@@ -0,0 +1,45 @@
+import { Command } from "@flowcore/sdk";
+import { type Static, type TObject, type TString } from "@sinclair/typebox";
+/**
+ * The input for the policy archive command
+ */
+export interface PolicyArchiveInput {
+    /** The policy id */
+    policyId: string;
+}
+/**
+ * The schema for the archive policy response
+ */
+export declare const ArchivePolicyResponseSchema: TObject<{
+    message: TString;
+}>;
+/**
+ * The archive policy response type
+ */
+export type ArchivePolicyResponse = Static<typeof ArchivePolicyResponseSchema>;
+/**
+ * Archive a policy by ID
+ */
+export declare class PolicyArchiveCommand extends Command<PolicyArchiveInput, ArchivePolicyResponse> {
+    /**
+     * Whether the command should retry on failure
+     */
+    protected retryOnFailure: boolean;
+    /**
+     * Get the method
+     */
+    protected getMethod(): string;
+    /**
+     * Get the base url
+     */
+    protected getBaseUrl(): string;
+    /**
+     * Get the path
+     */
+    protected getPath(): string;
+    /**
+     * Parse the response
+     */
+    protected parseResponse(rawResponse: unknown): ArchivePolicyResponse;
+}
+//# sourceMappingURL=archive-policy.d.ts.map

package/script/commands/iam/policies/id/archive-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-policy.d.ts","sourceRoot":"","sources":["../../../../../src/commands/iam/policies/id/archive-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAuB,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,EAAE,KAAK,OAAO,EAAQ,MAAM,mBAAmB,CAAA;AAEjF;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;GAEG;AACH,eAAO,MAAM,2BAA2B,EAAE,OAAO,CAAC;IAChD,OAAO,EAAE,OAAO,CAAA;CACjB,CAEC,CAAA;AAEF;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAE9E;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,OAAO,CAC/C,kBAAkB,EAClB,qBAAqB,CACtB;IACC;;OAEG;IACH,UAAmB,cAAc,UAAQ;IAEzC;;OAEG;cACgB,SAAS,IAAI,MAAM;IAItC;;OAEG;cACgB,UAAU,IAAI,MAAM;IAIvC;;OAEG;cACgB,OAAO,IAAI,MAAM;IAIpC;;OAEG;cACgB,aAAa,CAC9B,WAAW,EAAE,OAAO,GACnB,qBAAqB;CAGzB"}