@kinotic-ai/os-api 1.12.0 → 1.14.0

package/dist/index.cjs

@@ -82,6 +82,7 @@ __export(exports_src, {
   LogManager: () => LogManager,
   LogLevel: () => LogLevel,
   KinoticProjectConfig: () => KinoticProjectConfig,
+  KinoticOsCredentialsAuthProvider: () => KinoticOsCredentialsAuthProvider,
   InviteEmailTemplateService: () => InviteEmailTemplateService,
   InviteEmailTemplate: () => InviteEmailTemplate,
   IdDecorator: () => IdDecorator,
@@ -561,6 +562,21 @@ function isOrganizationParticipant(participant) {
 function isApplicationParticipant(participant) {
   return scopeType(participant) === "application" /* APPLICATION */;
 }
+// packages/os-api/src/api/security/KinoticOsCredentialsAuthProvider.ts
+class KinoticOsCredentialsAuthProvider {
+  authHeaders;
+  constructor(clientId, clientSecret, organizationId, applicationId) {
+    const authHeaders = { clientId, clientSecret };
+    if (organizationId != null)
+      authHeaders.organizationId = organizationId;
+    if (applicationId != null)
+      authHeaders.applicationId = applicationId;
+    this.authHeaders = authHeaders;
+  }
+  getAuthHeaders() {
+    return this.authHeaders;
+  }
+}
 // packages/os-api/src/api/services/IApplicationService.ts
 var import_core = require("@kinotic-ai/core");
 

package/dist/index.d.cts

@@ -879,6 +879,21 @@ declare function isOrganizationParticipant(participant: IParticipant4): particip
 * @return true if the participant authenticated against an Application
 */
 declare function isApplicationParticipant(participant: IParticipant4): participant is IApplicationParticipant;
+import { IAuthProvider } from "@kinotic-ai/core";
+/**
+* {@link IAuthProvider} for Kinotic OS credential authentication. Sends the credential and
+* scope as discrete WebSocket upgrade headers — {@code clientId}, {@code clientSecret}, and,
+* when supplied, {@code organizationId} / {@code applicationId} — which the gateway matches
+* against an {@code IamUser} at handshake time.
+*
+* Scope is structural, determined by which ids are given: neither → SYSTEM, organizationId
+* only → ORGANIZATION, both → APPLICATION.
+*/
+declare class KinoticOsCredentialsAuthProvider implements IAuthProvider {
+	private readonly authHeaders;
+	constructor(clientId: string, clientSecret: string, organizationId?: string, applicationId?: string);
+	getAuthHeaders(): Record<string, string>;
+}
 import { IKinotic } from "@kinotic-ai/core";
 import { CrudServiceProxy, ICrudServiceProxy } from "@kinotic-ai/core";
 interface IApplicationService extends ICrudServiceProxy<Application> {
@@ -1346,4 +1361,4 @@ declare const OsApiPlugin: KinoticPlugin<IOsApiExtension>;
 declare module "@kinotic-ai/core" {
 	interface KinoticSingleton extends IOsApiExtension {}
 }
-export { isSystemParticipant, isOrganizationParticipant, isApplicationParticipant, WorkloadStatus, WorkloadServiceProxy, Workload, VolumeMount, VmProviderType, VmNodeStatus, VmNodeServiceProxy, VmNode, VersionDecorator, TimeReferenceDecorator, TextDecorator, TenantSelectionC3Type, TenantIdDecorator, SingleLoggerLevelsDescriptor, SignUpRequest, SignUpCompleteRequest, RepositoryConnectionStatus, QueryOptionsC3Type, QueryDecorator, ProjectType, ProjectService, Project, ProgressType, PortProtocol, PortMapping, PendingInviteSummary, ParticipantType, PageableC3Type, PageC3Type, OsApiPlugin, OrganizationService, Organization, NotIndexedDecorator, NestedDecorator, NamedQueriesDefinitionService, NamedQueriesDefinition, MigrationService, MigrationResult, MigrationRequest, MigrationDefinition, MemberService, LoggersDescriptor, LoggerLevelsDescriptor, LogManager, LogLevel, KinoticProjectConfig, InviteEmailTemplateService, InviteEmailTemplate, InsightRequest, InsightProgress, IdDecorator, IamUser, IWorkloadService, IVmNodeService, ISystemParticipant, IProjectService, IOsApiExtension, IOrganizationService, IOrganizationParticipant, INamedQueriesDefinitionService, IMigrationService, IMemberService, ILogManager, IInviteEmailTemplateService, IGitHubAppInstallationService, IEntityDefinitionService, IDeviceApprovalService, IDataInsightsService, IApplicationService, IApplicationParticipant, GroupLoggerLevelsDescriptor, GitHubToken, GitHubRepoToken, GitHubInstallCompletion, GitHubAppInstallationService, GitHubAppInstallation, FlattenedDecorator, EsIndexConfigurationDecorator, EntityDefinitionService, EntityDefinition, EntityDecorator, EntitiesPathConfig, DiscriminatorDecorator, DeviceApprovalService, DataInsightsService, DataInsightsComponent, CompleteOrgRequest, AutoGeneratedIdDecorator, AuthType, ApplicationService, Application };
+export { isSystemParticipant, isOrganizationParticipant, isApplicationParticipant, WorkloadStatus, WorkloadServiceProxy, Workload, VolumeMount, VmProviderType, VmNodeStatus, VmNodeServiceProxy, VmNode, VersionDecorator, TimeReferenceDecorator, TextDecorator, TenantSelectionC3Type, TenantIdDecorator, SingleLoggerLevelsDescriptor, SignUpRequest, SignUpCompleteRequest, RepositoryConnectionStatus, QueryOptionsC3Type, QueryDecorator, ProjectType, ProjectService, Project, ProgressType, PortProtocol, PortMapping, PendingInviteSummary, ParticipantType, PageableC3Type, PageC3Type, OsApiPlugin, OrganizationService, Organization, NotIndexedDecorator, NestedDecorator, NamedQueriesDefinitionService, NamedQueriesDefinition, MigrationService, MigrationResult, MigrationRequest, MigrationDefinition, MemberService, LoggersDescriptor, LoggerLevelsDescriptor, LogManager, LogLevel, KinoticProjectConfig, KinoticOsCredentialsAuthProvider, InviteEmailTemplateService, InviteEmailTemplate, InsightRequest, InsightProgress, IdDecorator, IamUser, IWorkloadService, IVmNodeService, ISystemParticipant, IProjectService, IOsApiExtension, IOrganizationService, IOrganizationParticipant, INamedQueriesDefinitionService, IMigrationService, IMemberService, ILogManager, IInviteEmailTemplateService, IGitHubAppInstallationService, IEntityDefinitionService, IDeviceApprovalService, IDataInsightsService, IApplicationService, IApplicationParticipant, GroupLoggerLevelsDescriptor, GitHubToken, GitHubRepoToken, GitHubInstallCompletion, GitHubAppInstallationService, GitHubAppInstallation, FlattenedDecorator, EsIndexConfigurationDecorator, EntityDefinitionService, EntityDefinition, EntityDecorator, EntitiesPathConfig, DiscriminatorDecorator, DeviceApprovalService, DataInsightsService, DataInsightsComponent, CompleteOrgRequest, AutoGeneratedIdDecorator, AuthType, ApplicationService, Application };

package/dist/index.d.ts

@@ -879,6 +879,21 @@ declare function isOrganizationParticipant(participant: IParticipant4): particip
 * @return true if the participant authenticated against an Application
 */
 declare function isApplicationParticipant(participant: IParticipant4): participant is IApplicationParticipant;
+import { IAuthProvider } from "@kinotic-ai/core";
+/**
+* {@link IAuthProvider} for Kinotic OS credential authentication. Sends the credential and
+* scope as discrete WebSocket upgrade headers — {@code clientId}, {@code clientSecret}, and,
+* when supplied, {@code organizationId} / {@code applicationId} — which the gateway matches
+* against an {@code IamUser} at handshake time.
+*
+* Scope is structural, determined by which ids are given: neither → SYSTEM, organizationId
+* only → ORGANIZATION, both → APPLICATION.
+*/
+declare class KinoticOsCredentialsAuthProvider implements IAuthProvider {
+	private readonly authHeaders;
+	constructor(clientId: string, clientSecret: string, organizationId?: string, applicationId?: string);
+	getAuthHeaders(): Record<string, string>;
+}
 import { IKinotic } from "@kinotic-ai/core";
 import { CrudServiceProxy, ICrudServiceProxy } from "@kinotic-ai/core";
 interface IApplicationService extends ICrudServiceProxy<Application> {
@@ -1346,4 +1361,4 @@ declare const OsApiPlugin: KinoticPlugin<IOsApiExtension>;
 declare module "@kinotic-ai/core" {
 	interface KinoticSingleton extends IOsApiExtension {}
 }
-export { isSystemParticipant, isOrganizationParticipant, isApplicationParticipant, WorkloadStatus, WorkloadServiceProxy, Workload, VolumeMount, VmProviderType, VmNodeStatus, VmNodeServiceProxy, VmNode, VersionDecorator, TimeReferenceDecorator, TextDecorator, TenantSelectionC3Type, TenantIdDecorator, SingleLoggerLevelsDescriptor, SignUpRequest, SignUpCompleteRequest, RepositoryConnectionStatus, QueryOptionsC3Type, QueryDecorator, ProjectType, ProjectService, Project, ProgressType, PortProtocol, PortMapping, PendingInviteSummary, ParticipantType, PageableC3Type, PageC3Type, OsApiPlugin, OrganizationService, Organization, NotIndexedDecorator, NestedDecorator, NamedQueriesDefinitionService, NamedQueriesDefinition, MigrationService, MigrationResult, MigrationRequest, MigrationDefinition, MemberService, LoggersDescriptor, LoggerLevelsDescriptor, LogManager, LogLevel, KinoticProjectConfig, InviteEmailTemplateService, InviteEmailTemplate, InsightRequest, InsightProgress, IdDecorator, IamUser, IWorkloadService, IVmNodeService, ISystemParticipant, IProjectService, IOsApiExtension, IOrganizationService, IOrganizationParticipant, INamedQueriesDefinitionService, IMigrationService, IMemberService, ILogManager, IInviteEmailTemplateService, IGitHubAppInstallationService, IEntityDefinitionService, IDeviceApprovalService, IDataInsightsService, IApplicationService, IApplicationParticipant, GroupLoggerLevelsDescriptor, GitHubToken, GitHubRepoToken, GitHubInstallCompletion, GitHubAppInstallationService, GitHubAppInstallation, FlattenedDecorator, EsIndexConfigurationDecorator, EntityDefinitionService, EntityDefinition, EntityDecorator, EntitiesPathConfig, DiscriminatorDecorator, DeviceApprovalService, DataInsightsService, DataInsightsComponent, CompleteOrgRequest, AutoGeneratedIdDecorator, AuthType, ApplicationService, Application };
+export { isSystemParticipant, isOrganizationParticipant, isApplicationParticipant, WorkloadStatus, WorkloadServiceProxy, Workload, VolumeMount, VmProviderType, VmNodeStatus, VmNodeServiceProxy, VmNode, VersionDecorator, TimeReferenceDecorator, TextDecorator, TenantSelectionC3Type, TenantIdDecorator, SingleLoggerLevelsDescriptor, SignUpRequest, SignUpCompleteRequest, RepositoryConnectionStatus, QueryOptionsC3Type, QueryDecorator, ProjectType, ProjectService, Project, ProgressType, PortProtocol, PortMapping, PendingInviteSummary, ParticipantType, PageableC3Type, PageC3Type, OsApiPlugin, OrganizationService, Organization, NotIndexedDecorator, NestedDecorator, NamedQueriesDefinitionService, NamedQueriesDefinition, MigrationService, MigrationResult, MigrationRequest, MigrationDefinition, MemberService, LoggersDescriptor, LoggerLevelsDescriptor, LogManager, LogLevel, KinoticProjectConfig, KinoticOsCredentialsAuthProvider, InviteEmailTemplateService, InviteEmailTemplate, InsightRequest, InsightProgress, IdDecorator, IamUser, IWorkloadService, IVmNodeService, ISystemParticipant, IProjectService, IOsApiExtension, IOrganizationService, IOrganizationParticipant, INamedQueriesDefinitionService, IMigrationService, IMemberService, ILogManager, IInviteEmailTemplateService, IGitHubAppInstallationService, IEntityDefinitionService, IDeviceApprovalService, IDataInsightsService, IApplicationService, IApplicationParticipant, GroupLoggerLevelsDescriptor, GitHubToken, GitHubRepoToken, GitHubInstallCompletion, GitHubAppInstallationService, GitHubAppInstallation, FlattenedDecorator, EsIndexConfigurationDecorator, EntityDefinitionService, EntityDefinition, EntityDecorator, EntitiesPathConfig, DiscriminatorDecorator, DeviceApprovalService, DataInsightsService, DataInsightsComponent, CompleteOrgRequest, AutoGeneratedIdDecorator, AuthType, ApplicationService, Application };

package/dist/index.js

@@ -452,6 +452,21 @@ function isOrganizationParticipant(participant) {
 function isApplicationParticipant(participant) {
   return scopeType(participant) === "application" /* APPLICATION */;
 }
+// packages/os-api/src/api/security/KinoticOsCredentialsAuthProvider.ts
+class KinoticOsCredentialsAuthProvider {
+  authHeaders;
+  constructor(clientId, clientSecret, organizationId, applicationId) {
+    const authHeaders = { clientId, clientSecret };
+    if (organizationId != null)
+      authHeaders.organizationId = organizationId;
+    if (applicationId != null)
+      authHeaders.applicationId = applicationId;
+    this.authHeaders = authHeaders;
+  }
+  getAuthHeaders() {
+    return this.authHeaders;
+  }
+}
 // packages/os-api/src/api/services/IApplicationService.ts
 import { CrudServiceProxy } from "@kinotic-ai/core";
 
@@ -814,6 +829,7 @@ export {
   LogManager,
   LogLevel,
   KinoticProjectConfig,
+  KinoticOsCredentialsAuthProvider,
   InviteEmailTemplateService,
   InviteEmailTemplate,
   IdDecorator,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kinotic-ai/os-api",
-  "version": "1.12.0",
+  "version": "1.14.0",
   "type": "module",
   "files": [
     "dist"
@@ -33,15 +33,15 @@
     "ui-test": "vitest --ui --coverage.enabled=true --mode development"
   },
   "peerDependencies": {
-    "@kinotic-ai/core": ">=1.7.0"
+    "@kinotic-ai/core": ">=1.8.0"
   },
   "dependencies": {
     "@kinotic-ai/idl": "1.0.9",
-    "@kinotic-ai/persistence": "1.4.0",
+    "@kinotic-ai/persistence": "1.5.0",
     "rxjs": "^7.8.2"
   },
   "devDependencies": {
-    "@kinotic-ai/core": "1.7.0",
+    "@kinotic-ai/core": "1.8.0",
     "@types/node": "^25.3.2",
     "@vitest/coverage-v8": "^4.0.18",
     "@vitest/runner": "^4.0.18",