@kinotic-ai/os-api 1.0.14 → 1.0.16

package/dist/index.cjs

@@ -71,7 +71,10 @@ __export(exports_src, {
   LoggerLevelsDescriptor: () => LoggerLevelsDescriptor,
   LogManager: () => LogManager,
   LogLevel: () => LogLevel,
+  KinoticProjectConfig: () => KinoticProjectConfig,
   IdDecorator: () => IdDecorator,
+  IamUserService: () => IamUserService,
+  IamUser: () => IamUser,
   GroupLoggerLevelsDescriptor: () => GroupLoggerLevelsDescriptor,
   FlattenedDecorator: () => FlattenedDecorator,
   EsIndexConfigurationDecorator: () => EsIndexConfigurationDecorator,
@@ -81,6 +84,7 @@ __export(exports_src, {
   DiscriminatorDecorator: () => DiscriminatorDecorator,
   DataInsightsService: () => DataInsightsService,
   AutoGeneratedIdDecorator: () => AutoGeneratedIdDecorator,
+  AuthType: () => AuthType,
   ApplicationService: () => ApplicationService,
   Application: () => Application
 });
@@ -294,6 +298,7 @@ var ProjectType;
 // packages/os-api/src/api/model/EntityDefinition.ts
 class EntityDefinition {
   id;
+  organizationId;
   applicationId;
   projectId;
   name;
@@ -314,6 +319,7 @@ class EntityDefinition {
 // packages/os-api/src/api/model/NamedQueriesDefinition.ts
 class NamedQueriesDefinition {
   id;
+  organizationId;
   applicationId;
   projectId;
   entityDefinitionName;
@@ -403,6 +409,38 @@ class VmNode {
     this.hostname = hostname;
   }
 }
+// packages/os-api/src/api/model/iam/AuthType.ts
+var AuthType;
+((AuthType2) => {
+  AuthType2["LOCAL"] = "LOCAL";
+  AuthType2["OIDC"] = "OIDC";
+})(AuthType ||= {});
+// packages/os-api/src/api/model/iam/IamUser.ts
+class IamUser {
+  id = null;
+  email = "";
+  displayName = null;
+  authType = null;
+  oidcSubject = null;
+  oidcConfigId = null;
+  authScopeType = "";
+  authScopeId = "";
+  tenantId = null;
+  enabled = true;
+  created = null;
+  updated = null;
+}
+// packages/os-api/src/api/model/KinoticProjectConfig.ts
+class KinoticProjectConfig {
+  name;
+  description;
+  organization;
+  application;
+  entitiesPaths;
+  generatedPath;
+  fileExtensionForImports = ".js";
+  validate;
+}
 // packages/os-api/src/api/services/IApplicationService.ts
 var import_core = require("@kinotic-ai/core");
 
@@ -608,6 +646,29 @@ class WorkloadServiceProxy extends import_core6.CrudServiceProxy {
     return this.serviceProxy.invoke("syncIndex", []);
   }
 }
+// packages/os-api/src/api/services/iam/IIamUserService.ts
+var import_core7 = require("@kinotic-ai/core");
+
+class IamUserService extends import_core7.CrudServiceProxy {
+  constructor(kinotic) {
+    super(kinotic.serviceProxy("org.kinotic.os.api.services.iam.IamUserService"));
+  }
+  findByEmailAndScope(email, authScopeType, authScopeId) {
+    return this.serviceProxy.invoke("findByEmailAndScope", [email, authScopeType, authScopeId]);
+  }
+  findByScope(authScopeType, authScopeId, pageable) {
+    return this.serviceProxy.invoke("findByScope", [authScopeType, authScopeId, pageable]);
+  }
+  createUser(user, password) {
+    return this.serviceProxy.invoke("createUser", [user, password]);
+  }
+  changePassword(userId, currentPassword, newPassword) {
+    return this.serviceProxy.invoke("changePassword", [userId, currentPassword, newPassword]);
+  }
+  resetPassword(userId, newPassword) {
+    return this.serviceProxy.invoke("resetPassword", [userId, newPassword]);
+  }
+}
 // packages/os-api/src/api/OsApiPlugin.ts
 var OsApiPlugin = {
   install(kinotic) {
@@ -620,7 +681,8 @@ var OsApiPlugin = {
       migrations: new MigrationService(kinotic),
       dataInsights: new DataInsightsService(kinotic),
       vmNodes: new VmNodeServiceProxy(kinotic),
-      workloads: new WorkloadServiceProxy(kinotic)
+      workloads: new WorkloadServiceProxy(kinotic),
+      iamUsers: new IamUserService(kinotic)
     };
   }
 };

package/dist/index.d.cts

@@ -180,6 +180,11 @@ import { Identifiable as Identifiable3 } from "@kinotic-ai/core";
 declare class EntityDefinition implements Identifiable3<string> {
 	id: string | null;
 	/**
+	* The id of the organization that owns this entity definition.
+	* Populated server-side by org enforcement on save.
+	*/
+	organizationId: string;
+	/**
 	* The id of the application that this entity definition belongs to.
 	* All application ids are unique throughout the entire system.
 	*/
@@ -205,6 +210,7 @@ import { FunctionDefinition } from "@kinotic-ai/idl";
 */
 declare class NamedQueriesDefinition implements Identifiable4<string> {
 	id: string;
+	organizationId?: string | null;
 	applicationId: string;
 	projectId: string;
 	entityDefinitionName: string;
@@ -473,6 +479,36 @@ declare class VmNode implements Identifiable6<string> {
 	constructor(id: string, name: string, hostname: string);
 }
 /**
+* Authentication method for an {@link IamUser}.
+*/
+declare enum AuthType {
+	LOCAL = "LOCAL",
+	OIDC = "OIDC"
+}
+import { Identifiable as Identifiable7 } from "@kinotic-ai/core";
+/**
+* Represents an authenticated identity at any scope layer in the IAM system.
+* Each user is scoped to exactly one layer and is unique by email within that scope.
+*
+* - For SYSTEM and ORGANIZATION scopes, {@link tenantId} must be null.
+* - For APPLICATION scopes, {@link tenantId} is required and identifies the
+*   client tenant the user belongs to within the application's data.
+*/
+declare class IamUser implements Identifiable7<string> {
+	id: string | null;
+	email: string;
+	displayName: string | null;
+	authType: AuthType | null;
+	oidcSubject: string | null;
+	oidcConfigId: string | null;
+	authScopeType: string;
+	authScopeId: string;
+	tenantId: string | null;
+	enabled: boolean;
+	created: number | null;
+	updated: number | null;
+}
+/**
 * Sent to the server to initiate an organization sign-up.
 * The user provides {@link orgName}, {@link orgDescription}, {@link email}, and
 * {@link displayName}. The remaining fields ({@link id}, {@link verificationToken},
@@ -498,6 +534,70 @@ interface SignUpCompleteRequest {
 	token: string;
 	password: string;
 }
+/**
+* Configuration for a single entities path and its corresponding repository output.
+*/
+type EntitiesPathConfig = {
+	/**
+	* The path to search for classes decorated with @Entity.
+	*/
+	path: string;
+	/**
+	* The path where generated Repository classes will be placed.
+	*/
+	repositoryPath: string;
+	/**
+	* If true, the subfolder structure under the entities path will be mirrored under the repository path.
+	* For example, if entitiesPath is "src/model" and contains "payments/Payment.ts",
+	* the generated repository will be placed in "repositoryPath/payments/".
+	* If false, all generated repositories are placed directly in the repositoryPath.
+	* Defaults to true.
+	*/
+	mirrorFolderStructure?: boolean;
+};
+/**
+* The project configuration for a Kinotic project.
+*/
+declare class KinoticProjectConfig {
+	/**
+	* The name of the project or undefined if a project name is used.
+	* i.e. if the project is typescript the package.json name will be used.
+	*/
+	name?: string;
+	/**
+	* The description of the project.
+	*/
+	description?: string;
+	/**
+	* The Kinotic Organization that this project belongs to.
+	*/
+	organization: string;
+	/**
+	* The Kinotic Application that this project belongs to.
+	*/
+	application: string;
+	/**
+	* The paths to search for classes decorated with @Entity that Kinotic will be created for.
+	* Each entry can be a string (simple path) or an {@link EntitiesPathConfig} object for full control
+	* over where repository classes are generated.
+	*
+	* When a plain string is provided, the {@link generatedPath} will be used as the repository output path.
+	*/
+	entitiesPaths: (string | EntitiesPathConfig)[];
+	/**
+	* The default path to where generated files will be placed when entitiesPaths contains plain strings.
+	* Ignored for entitiesPaths entries that use {@link EntitiesPathConfig}.
+	*/
+	generatedPath?: string;
+	/**
+	* The file extension to use for imports in generated files.
+	*/
+	fileExtensionForImports: string;
+	/**
+	* If true the generated Repository classes will validate all data before sending to the server.
+	*/
+	validate?: boolean;
+}
 import { IKinotic } from "@kinotic-ai/core";
 import { CrudServiceProxy, ICrudServiceProxy } from "@kinotic-ai/core";
 interface IApplicationService extends ICrudServiceProxy<Application> {
@@ -800,6 +900,39 @@ declare class WorkloadServiceProxy extends CrudServiceProxy6<Workload> implement
 	countForNode(nodeId: string): Promise<number>;
 	syncIndex(): Promise<void>;
 }
+import { CrudServiceProxy as CrudServiceProxy7, IKinotic as IKinotic10, ICrudServiceProxy as ICrudServiceProxy7, Page as Page3, Pageable as Pageable4 } from "@kinotic-ai/core";
+interface IIamUserService extends ICrudServiceProxy7<IamUser> {
+	/**
+	* Finds the user with the given email within the given auth scope.
+	* @return Promise emitting the user or null if no user matches
+	*/
+	findByEmailAndScope(email: string, authScopeType: string, authScopeId: string): Promise<IamUser | null>;
+	/**
+	* Finds all users registered against the given auth scope.
+	*/
+	findByScope(authScopeType: string, authScopeId: string, pageable: Pageable4): Promise<Page3<IamUser>>;
+	/**
+	* Creates a user and, if a password is provided, the matching credential.
+	* APPLICATION-scoped users must carry a {@code tenantId}; SYSTEM and ORGANIZATION users must not.
+	*/
+	createUser(user: IamUser, password: string | null): Promise<IamUser>;
+	/**
+	* Verifies the current password and updates it. Used when the user knows their current password.
+	*/
+	changePassword(userId: string, currentPassword: string, newPassword: string): Promise<void>;
+	/**
+	* Replaces the user's password without verifying the current one. Administrative reset.
+	*/
+	resetPassword(userId: string, newPassword: string): Promise<void>;
+}
+declare class IamUserService extends CrudServiceProxy7<IamUser> implements IIamUserService {
+	constructor(kinotic: IKinotic10);
+	findByEmailAndScope(email: string, authScopeType: string, authScopeId: string): Promise<IamUser | null>;
+	findByScope(authScopeType: string, authScopeId: string, pageable: Pageable4): Promise<Page3<IamUser>>;
+	createUser(user: IamUser, password: string | null): Promise<IamUser>;
+	changePassword(userId: string, currentPassword: string, newPassword: string): Promise<void>;
+	resetPassword(userId: string, newPassword: string): Promise<void>;
+}
 import { KinoticPlugin } from "@kinotic-ai/core";
 interface IOsApiExtension {
 	applications: IApplicationService;
@@ -811,9 +944,10 @@ interface IOsApiExtension {
 	dataInsights: IDataInsightsService;
 	vmNodes: IVmNodeService;
 	workloads: IWorkloadService;
+	iamUsers: IIamUserService;
 }
 declare const OsApiPlugin: KinoticPlugin<IOsApiExtension>;
 declare module "@kinotic-ai/core" {
 	interface KinoticSingleton extends IOsApiExtension {}
 }
-export { WorkloadStatus, WorkloadServiceProxy, Workload, VmProviderType, VmNodeStatus, VmNodeServiceProxy, VmNode, VersionDecorator, TimeReferenceDecorator, TextDecorator, TenantSelectionC3Type, TenantIdDecorator, SingleLoggerLevelsDescriptor, SignUpRequest, SignUpCompleteRequest, QueryOptionsC3Type, QueryDecorator, ProjectType, ProjectService, Project, ProgressType, PageableC3Type, PageC3Type, OsApiPlugin, NotIndexedDecorator, NestedDecorator, NamedQueriesDefinitionService, NamedQueriesDefinition, MigrationService, MigrationResult, MigrationRequest, MigrationDefinition, LoggersDescriptor, LoggerLevelsDescriptor, LogManager, LogLevel, InsightRequest, InsightProgress, IdDecorator, IWorkloadService, IVmNodeService, IProjectService, IOsApiExtension, INamedQueriesDefinitionService, IMigrationService, ILogManager, IEntityDefinitionService, IDataInsightsService, IApplicationService, GroupLoggerLevelsDescriptor, FlattenedDecorator, EsIndexConfigurationDecorator, EntityDefinitionService, EntityDefinition, EntityDecorator, DiscriminatorDecorator, DataInsightsService, DataInsightsComponent, AutoGeneratedIdDecorator, ApplicationService, Application };
+export { WorkloadStatus, WorkloadServiceProxy, Workload, VmProviderType, VmNodeStatus, VmNodeServiceProxy, VmNode, VersionDecorator, TimeReferenceDecorator, TextDecorator, TenantSelectionC3Type, TenantIdDecorator, SingleLoggerLevelsDescriptor, SignUpRequest, SignUpCompleteRequest, QueryOptionsC3Type, QueryDecorator, ProjectType, ProjectService, Project, ProgressType, PageableC3Type, PageC3Type, OsApiPlugin, NotIndexedDecorator, NestedDecorator, NamedQueriesDefinitionService, NamedQueriesDefinition, MigrationService, MigrationResult, MigrationRequest, MigrationDefinition, LoggersDescriptor, LoggerLevelsDescriptor, LogManager, LogLevel, KinoticProjectConfig, InsightRequest, InsightProgress, IdDecorator, IamUserService, IamUser, IWorkloadService, IVmNodeService, IProjectService, IOsApiExtension, INamedQueriesDefinitionService, IMigrationService, ILogManager, IIamUserService, IEntityDefinitionService, IDataInsightsService, IApplicationService, GroupLoggerLevelsDescriptor, FlattenedDecorator, EsIndexConfigurationDecorator, EntityDefinitionService, EntityDefinition, EntityDecorator, EntitiesPathConfig, DiscriminatorDecorator, DataInsightsService, DataInsightsComponent, AutoGeneratedIdDecorator, AuthType, ApplicationService, Application };

package/dist/index.d.ts

@@ -180,6 +180,11 @@ import { Identifiable as Identifiable3 } from "@kinotic-ai/core";
 declare class EntityDefinition implements Identifiable3<string> {
 	id: string | null;
 	/**
+	* The id of the organization that owns this entity definition.
+	* Populated server-side by org enforcement on save.
+	*/
+	organizationId: string;
+	/**
 	* The id of the application that this entity definition belongs to.
 	* All application ids are unique throughout the entire system.
 	*/
@@ -205,6 +210,7 @@ import { FunctionDefinition } from "@kinotic-ai/idl";
 */
 declare class NamedQueriesDefinition implements Identifiable4<string> {
 	id: string;
+	organizationId?: string | null;
 	applicationId: string;
 	projectId: string;
 	entityDefinitionName: string;
@@ -473,6 +479,36 @@ declare class VmNode implements Identifiable6<string> {
 	constructor(id: string, name: string, hostname: string);
 }
 /**
+* Authentication method for an {@link IamUser}.
+*/
+declare enum AuthType {
+	LOCAL = "LOCAL",
+	OIDC = "OIDC"
+}
+import { Identifiable as Identifiable7 } from "@kinotic-ai/core";
+/**
+* Represents an authenticated identity at any scope layer in the IAM system.
+* Each user is scoped to exactly one layer and is unique by email within that scope.
+*
+* - For SYSTEM and ORGANIZATION scopes, {@link tenantId} must be null.
+* - For APPLICATION scopes, {@link tenantId} is required and identifies the
+*   client tenant the user belongs to within the application's data.
+*/
+declare class IamUser implements Identifiable7<string> {
+	id: string | null;
+	email: string;
+	displayName: string | null;
+	authType: AuthType | null;
+	oidcSubject: string | null;
+	oidcConfigId: string | null;
+	authScopeType: string;
+	authScopeId: string;
+	tenantId: string | null;
+	enabled: boolean;
+	created: number | null;
+	updated: number | null;
+}
+/**
 * Sent to the server to initiate an organization sign-up.
 * The user provides {@link orgName}, {@link orgDescription}, {@link email}, and
 * {@link displayName}. The remaining fields ({@link id}, {@link verificationToken},
@@ -498,6 +534,70 @@ interface SignUpCompleteRequest {
 	token: string;
 	password: string;
 }
+/**
+* Configuration for a single entities path and its corresponding repository output.
+*/
+type EntitiesPathConfig = {
+	/**
+	* The path to search for classes decorated with @Entity.
+	*/
+	path: string;
+	/**
+	* The path where generated Repository classes will be placed.
+	*/
+	repositoryPath: string;
+	/**
+	* If true, the subfolder structure under the entities path will be mirrored under the repository path.
+	* For example, if entitiesPath is "src/model" and contains "payments/Payment.ts",
+	* the generated repository will be placed in "repositoryPath/payments/".
+	* If false, all generated repositories are placed directly in the repositoryPath.
+	* Defaults to true.
+	*/
+	mirrorFolderStructure?: boolean;
+};
+/**
+* The project configuration for a Kinotic project.
+*/
+declare class KinoticProjectConfig {
+	/**
+	* The name of the project or undefined if a project name is used.
+	* i.e. if the project is typescript the package.json name will be used.
+	*/
+	name?: string;
+	/**
+	* The description of the project.
+	*/
+	description?: string;
+	/**
+	* The Kinotic Organization that this project belongs to.
+	*/
+	organization: string;
+	/**
+	* The Kinotic Application that this project belongs to.
+	*/
+	application: string;
+	/**
+	* The paths to search for classes decorated with @Entity that Kinotic will be created for.
+	* Each entry can be a string (simple path) or an {@link EntitiesPathConfig} object for full control
+	* over where repository classes are generated.
+	*
+	* When a plain string is provided, the {@link generatedPath} will be used as the repository output path.
+	*/
+	entitiesPaths: (string | EntitiesPathConfig)[];
+	/**
+	* The default path to where generated files will be placed when entitiesPaths contains plain strings.
+	* Ignored for entitiesPaths entries that use {@link EntitiesPathConfig}.
+	*/
+	generatedPath?: string;
+	/**
+	* The file extension to use for imports in generated files.
+	*/
+	fileExtensionForImports: string;
+	/**
+	* If true the generated Repository classes will validate all data before sending to the server.
+	*/
+	validate?: boolean;
+}
 import { IKinotic } from "@kinotic-ai/core";
 import { CrudServiceProxy, ICrudServiceProxy } from "@kinotic-ai/core";
 interface IApplicationService extends ICrudServiceProxy<Application> {
@@ -800,6 +900,39 @@ declare class WorkloadServiceProxy extends CrudServiceProxy6<Workload> implement
 	countForNode(nodeId: string): Promise<number>;
 	syncIndex(): Promise<void>;
 }
+import { CrudServiceProxy as CrudServiceProxy7, IKinotic as IKinotic10, ICrudServiceProxy as ICrudServiceProxy7, Page as Page3, Pageable as Pageable4 } from "@kinotic-ai/core";
+interface IIamUserService extends ICrudServiceProxy7<IamUser> {
+	/**
+	* Finds the user with the given email within the given auth scope.
+	* @return Promise emitting the user or null if no user matches
+	*/
+	findByEmailAndScope(email: string, authScopeType: string, authScopeId: string): Promise<IamUser | null>;
+	/**
+	* Finds all users registered against the given auth scope.
+	*/
+	findByScope(authScopeType: string, authScopeId: string, pageable: Pageable4): Promise<Page3<IamUser>>;
+	/**
+	* Creates a user and, if a password is provided, the matching credential.
+	* APPLICATION-scoped users must carry a {@code tenantId}; SYSTEM and ORGANIZATION users must not.
+	*/
+	createUser(user: IamUser, password: string | null): Promise<IamUser>;
+	/**
+	* Verifies the current password and updates it. Used when the user knows their current password.
+	*/
+	changePassword(userId: string, currentPassword: string, newPassword: string): Promise<void>;
+	/**
+	* Replaces the user's password without verifying the current one. Administrative reset.
+	*/
+	resetPassword(userId: string, newPassword: string): Promise<void>;
+}
+declare class IamUserService extends CrudServiceProxy7<IamUser> implements IIamUserService {
+	constructor(kinotic: IKinotic10);
+	findByEmailAndScope(email: string, authScopeType: string, authScopeId: string): Promise<IamUser | null>;
+	findByScope(authScopeType: string, authScopeId: string, pageable: Pageable4): Promise<Page3<IamUser>>;
+	createUser(user: IamUser, password: string | null): Promise<IamUser>;
+	changePassword(userId: string, currentPassword: string, newPassword: string): Promise<void>;
+	resetPassword(userId: string, newPassword: string): Promise<void>;
+}
 import { KinoticPlugin } from "@kinotic-ai/core";
 interface IOsApiExtension {
 	applications: IApplicationService;
@@ -811,9 +944,10 @@ interface IOsApiExtension {
 	dataInsights: IDataInsightsService;
 	vmNodes: IVmNodeService;
 	workloads: IWorkloadService;
+	iamUsers: IIamUserService;
 }
 declare const OsApiPlugin: KinoticPlugin<IOsApiExtension>;
 declare module "@kinotic-ai/core" {
 	interface KinoticSingleton extends IOsApiExtension {}
 }
-export { WorkloadStatus, WorkloadServiceProxy, Workload, VmProviderType, VmNodeStatus, VmNodeServiceProxy, VmNode, VersionDecorator, TimeReferenceDecorator, TextDecorator, TenantSelectionC3Type, TenantIdDecorator, SingleLoggerLevelsDescriptor, SignUpRequest, SignUpCompleteRequest, QueryOptionsC3Type, QueryDecorator, ProjectType, ProjectService, Project, ProgressType, PageableC3Type, PageC3Type, OsApiPlugin, NotIndexedDecorator, NestedDecorator, NamedQueriesDefinitionService, NamedQueriesDefinition, MigrationService, MigrationResult, MigrationRequest, MigrationDefinition, LoggersDescriptor, LoggerLevelsDescriptor, LogManager, LogLevel, InsightRequest, InsightProgress, IdDecorator, IWorkloadService, IVmNodeService, IProjectService, IOsApiExtension, INamedQueriesDefinitionService, IMigrationService, ILogManager, IEntityDefinitionService, IDataInsightsService, IApplicationService, GroupLoggerLevelsDescriptor, FlattenedDecorator, EsIndexConfigurationDecorator, EntityDefinitionService, EntityDefinition, EntityDecorator, DiscriminatorDecorator, DataInsightsService, DataInsightsComponent, AutoGeneratedIdDecorator, ApplicationService, Application };
+export { WorkloadStatus, WorkloadServiceProxy, Workload, VmProviderType, VmNodeStatus, VmNodeServiceProxy, VmNode, VersionDecorator, TimeReferenceDecorator, TextDecorator, TenantSelectionC3Type, TenantIdDecorator, SingleLoggerLevelsDescriptor, SignUpRequest, SignUpCompleteRequest, QueryOptionsC3Type, QueryDecorator, ProjectType, ProjectService, Project, ProgressType, PageableC3Type, PageC3Type, OsApiPlugin, NotIndexedDecorator, NestedDecorator, NamedQueriesDefinitionService, NamedQueriesDefinition, MigrationService, MigrationResult, MigrationRequest, MigrationDefinition, LoggersDescriptor, LoggerLevelsDescriptor, LogManager, LogLevel, KinoticProjectConfig, InsightRequest, InsightProgress, IdDecorator, IamUserService, IamUser, IWorkloadService, IVmNodeService, IProjectService, IOsApiExtension, INamedQueriesDefinitionService, IMigrationService, ILogManager, IIamUserService, IEntityDefinitionService, IDataInsightsService, IApplicationService, GroupLoggerLevelsDescriptor, FlattenedDecorator, EsIndexConfigurationDecorator, EntityDefinitionService, EntityDefinition, EntityDecorator, EntitiesPathConfig, DiscriminatorDecorator, DataInsightsService, DataInsightsComponent, AutoGeneratedIdDecorator, AuthType, ApplicationService, Application };

package/dist/index.js

@@ -206,6 +206,7 @@ var ProjectType;
 // packages/os-api/src/api/model/EntityDefinition.ts
 class EntityDefinition {
   id;
+  organizationId;
   applicationId;
   projectId;
   name;
@@ -226,6 +227,7 @@ class EntityDefinition {
 // packages/os-api/src/api/model/NamedQueriesDefinition.ts
 class NamedQueriesDefinition {
   id;
+  organizationId;
   applicationId;
   projectId;
   entityDefinitionName;
@@ -315,6 +317,38 @@ class VmNode {
     this.hostname = hostname;
   }
 }
+// packages/os-api/src/api/model/iam/AuthType.ts
+var AuthType;
+((AuthType2) => {
+  AuthType2["LOCAL"] = "LOCAL";
+  AuthType2["OIDC"] = "OIDC";
+})(AuthType ||= {});
+// packages/os-api/src/api/model/iam/IamUser.ts
+class IamUser {
+  id = null;
+  email = "";
+  displayName = null;
+  authType = null;
+  oidcSubject = null;
+  oidcConfigId = null;
+  authScopeType = "";
+  authScopeId = "";
+  tenantId = null;
+  enabled = true;
+  created = null;
+  updated = null;
+}
+// packages/os-api/src/api/model/KinoticProjectConfig.ts
+class KinoticProjectConfig {
+  name;
+  description;
+  organization;
+  application;
+  entitiesPaths;
+  generatedPath;
+  fileExtensionForImports = ".js";
+  validate;
+}
 // packages/os-api/src/api/services/IApplicationService.ts
 import { CrudServiceProxy } from "@kinotic-ai/core";
 
@@ -520,6 +554,29 @@ class WorkloadServiceProxy extends CrudServiceProxy6 {
     return this.serviceProxy.invoke("syncIndex", []);
   }
 }
+// packages/os-api/src/api/services/iam/IIamUserService.ts
+import { CrudServiceProxy as CrudServiceProxy7 } from "@kinotic-ai/core";
+
+class IamUserService extends CrudServiceProxy7 {
+  constructor(kinotic) {
+    super(kinotic.serviceProxy("org.kinotic.os.api.services.iam.IamUserService"));
+  }
+  findByEmailAndScope(email, authScopeType, authScopeId) {
+    return this.serviceProxy.invoke("findByEmailAndScope", [email, authScopeType, authScopeId]);
+  }
+  findByScope(authScopeType, authScopeId, pageable) {
+    return this.serviceProxy.invoke("findByScope", [authScopeType, authScopeId, pageable]);
+  }
+  createUser(user, password) {
+    return this.serviceProxy.invoke("createUser", [user, password]);
+  }
+  changePassword(userId, currentPassword, newPassword) {
+    return this.serviceProxy.invoke("changePassword", [userId, currentPassword, newPassword]);
+  }
+  resetPassword(userId, newPassword) {
+    return this.serviceProxy.invoke("resetPassword", [userId, newPassword]);
+  }
+}
 // packages/os-api/src/api/OsApiPlugin.ts
 var OsApiPlugin = {
   install(kinotic) {
@@ -532,7 +589,8 @@ var OsApiPlugin = {
       migrations: new MigrationService(kinotic),
       dataInsights: new DataInsightsService(kinotic),
       vmNodes: new VmNodeServiceProxy(kinotic),
-      workloads: new WorkloadServiceProxy(kinotic)
+      workloads: new WorkloadServiceProxy(kinotic),
+      iamUsers: new IamUserService(kinotic)
     };
   }
 };
@@ -568,7 +626,10 @@ export {
   LoggerLevelsDescriptor,
   LogManager,
   LogLevel,
+  KinoticProjectConfig,
   IdDecorator,
+  IamUserService,
+  IamUser,
   GroupLoggerLevelsDescriptor,
   FlattenedDecorator,
   EsIndexConfigurationDecorator,
@@ -578,6 +639,7 @@ export {
   DiscriminatorDecorator,
   DataInsightsService,
   AutoGeneratedIdDecorator,
+  AuthType,
   ApplicationService,
   Application
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kinotic-ai/os-api",
-  "version": "1.0.14",
+  "version": "1.0.16",
   "type": "module",
   "files": [
     "dist"
@@ -37,7 +37,7 @@
   },
   "dependencies": {
     "@kinotic-ai/idl": "1.0.9",
-    "@kinotic-ai/persistence": "1.1.0",
+    "@kinotic-ai/persistence": "1.1.1",
     "rxjs": "^7.8.2"
   },
   "devDependencies": {