@lucern/sdk 0.2.0-alpha.6 → 0.2.0-alpha.7

package/dist/lib/platform/sdk/policyClient.d.ts

@@ -1,293 +0,0 @@
-import { type GatewayClientConfig, type GatewayScope, LucernApiError } from "./coreClient";
-export { LucernApiError };
-export type { GatewayScope, PlatformGatewaySuccess } from "./coreClient";
-/** Configuration for the policy client. */
-export type PolicyClientConfig = GatewayClientConfig;
-/** Permission direction: read access or write access. */
-export type PermissionKind = "read" | "write";
-/** Permission level for a write policy rule. */
-export type WritePolicyPermission = "allow" | "deny" | "review_required";
-type TopicRecord = {
-    topicId?: string;
-    name?: string;
-    type?: string;
-    isOwner?: boolean;
-    [key: string]: unknown;
-};
-/** Structured explanation of how a policy decision was derived. */
-export type PolicyDecisionExplanation = {
-    summary?: string;
-    matchedReasonCode?: string;
-    steps?: Array<{
-        stage?: string;
-        outcome?: string;
-        reasonCode?: string;
-        detail?: string;
-    }>;
-    [key: string]: unknown;
-};
-/** Result of a permission check against the policy engine. */
-export type PermissionDecision = {
-    allowed?: boolean;
-    decision?: string;
-    reasonCode?: string;
-    principalId?: string;
-    topicId?: string;
-    permission?: string;
-    policyVersion?: string;
-    traceId?: string | null;
-    explanation?: PolicyDecisionExplanation;
-};
-/** A persisted write policy rule controlling mutation access. */
-export type WritePolicyRecord = {
-    id?: string;
-    topicId?: string;
-    role?: string;
-    toolCategory?: string;
-    permission?: WritePolicyPermission;
-    maxWritesPerSession?: number;
-    enabled?: boolean;
-    rationale?: string;
-    createdAt?: number;
-    updatedAt?: number;
-    createdBy?: string;
-    resolution?: string;
-    [key: string]: unknown;
-};
-/** Input for creating a write policy rule. */
-export type WritePolicyCreateInput = GatewayScope & {
-    topicId?: string;
-    role: string;
-    toolCategory: string;
-    permission: WritePolicyPermission;
-    maxWritesPerSession?: number;
-    enabled?: boolean;
-    rationale?: string;
-    createdBy?: string;
-};
-/** Input for partially updating an existing write policy rule. */
-export type WritePolicyUpdateInput = GatewayScope & {
-    topicId?: string;
-    clearTopicId?: boolean;
-    role?: string;
-    toolCategory?: string;
-    permission?: WritePolicyPermission;
-    maxWritesPerSession?: number;
-    clearMaxWritesPerSession?: boolean;
-    enabled?: boolean;
-    rationale?: string;
-    clearRationale?: boolean;
-};
-export type TenantPolicyPermission = {
-    resource: string;
-    actions: string[];
-};
-export type TenantPolicyRecord = {
-    id?: string;
-    tenantId: string;
-    workspaceId?: string;
-    roleName: string;
-    description?: string;
-    permissions: TenantPolicyPermission[];
-    groupBindings: string[];
-    createdAt?: number;
-    updatedAt?: number;
-    createdBy?: string;
-    updatedBy?: string;
-};
-/**
- * Create the policy client for permission checks, grants, and write policies.
- * @param config - Gateway transport configuration.
- * @returns An object with methods to check permissions, manage grants, and manage write policies.
- */
-export declare function createPolicyClient(config?: PolicyClientConfig): {
-    /**
-     * List policy decisions in the current scope.
-     */
-    listDecisions(query?: GatewayScope & {
-        action?: string;
-        decision?: string;
-        traceId?: string;
-        principalId?: string;
-        topicId?: string;
-        limit?: number;
-    }): Promise<import("./coreClient").PlatformGatewaySuccess<import("./types").ListResult<any, "decisions">>>;
-    /**
-     * Create a permission grant.
-     */
-    grant(input: GatewayScope & {
-        topicId: string;
-        permission: PermissionKind;
-        principal?: string;
-        principalId?: string;
-        groupId?: string;
-        beliefClusterId?: string;
-        expiresAt?: number;
-    }, idempotencyKey?: string): Promise<import("./coreClient").PlatformGatewaySuccess<unknown>>;
-    /**
-     * Delete a permission grant by revoking it.
-     */
-    revoke(input: GatewayScope & {
-        topicId: string;
-        principal?: string;
-        principalId?: string;
-        groupId?: string;
-        beliefClusterId?: string;
-    }, idempotencyKey?: string): Promise<import("./coreClient").PlatformGatewaySuccess<unknown>>;
-    /**
-     * List write policy rules for the current scope.
-     */
-    listWritePolicies(query?: GatewayScope & {
-        topicId?: string;
-        role?: string;
-        toolCategory?: string;
-        enabled?: boolean;
-    }): Promise<{
-        data: {
-            policies: WritePolicyRecord[];
-        };
-        success: true;
-        correlationId: string;
-        policyTraceId: string | null;
-        idempotentReplay: boolean;
-    }>;
-    /**
-     * Create a write policy rule.
-     */
-    createWritePolicy(input: WritePolicyCreateInput, idempotencyKey?: string): Promise<{
-        data: {
-            id: string | undefined;
-            created: boolean;
-            policy: WritePolicyRecord | null;
-        };
-        success: true;
-        correlationId: string;
-        policyTraceId: string | null;
-        idempotentReplay: boolean;
-    }>;
-    /**
-     * Update an existing write policy rule by identifier.
-     */
-    updateWritePolicy(id: string, input: WritePolicyUpdateInput, idempotencyKey?: string): Promise<{
-        data: {
-            id: string | undefined;
-            updated: boolean;
-            policy: WritePolicyRecord | null;
-        };
-        success: true;
-        correlationId: string;
-        policyTraceId: string | null;
-        idempotentReplay: boolean;
-    }>;
-    /**
-     * Delete a write policy rule by identifier.
-     */
-    deleteWritePolicy(id: string, scope?: GatewayScope, idempotencyKey?: string): Promise<import("./coreClient").PlatformGatewaySuccess<{
-        id?: string;
-        deleted?: boolean;
-    }>>;
-    /**
-     * List tenant role policies for the current scope.
-     */
-    listRolePolicies(query?: GatewayScope): Promise<{
-        data: {
-            policies: TenantPolicyRecord[];
-        };
-        success: true;
-        correlationId: string;
-        policyTraceId: string | null;
-        idempotentReplay: boolean;
-    }>;
-    /**
-     * Create a tenant role policy.
-     */
-    createRolePolicy(input: GatewayScope & {
-        roleName: string;
-        description?: string;
-        permissions: TenantPolicyPermission[];
-        groupBindings?: string[];
-    }, idempotencyKey?: string): Promise<{
-        data: {
-            policy: TenantPolicyRecord | null;
-        };
-        success: true;
-        correlationId: string;
-        policyTraceId: string | null;
-        idempotentReplay: boolean;
-    }>;
-    /**
-     * Update a tenant role policy by identifier.
-     */
-    updateRolePolicy(id: string, input: GatewayScope & {
-        roleName: string;
-        description?: string;
-        permissions: TenantPolicyPermission[];
-        groupBindings?: string[];
-    }, idempotencyKey?: string): Promise<{
-        data: {
-            policy: TenantPolicyRecord | null;
-        };
-        success: true;
-        correlationId: string;
-        policyTraceId: string | null;
-        idempotentReplay: boolean;
-    }>;
-    /**
-     * Delete a tenant role policy by identifier.
-     */
-    deleteRolePolicy(id: string, scope?: GatewayScope, idempotencyKey?: string): Promise<import("./coreClient").PlatformGatewaySuccess<unknown>>;
-    /**
-     * Check a permission decision for a topic or project scope.
-     */
-    checkPermission(query: GatewayScope & {
-        topicId?: string;
-        permission?: PermissionKind;
-        principal?: string;
-        principalId?: string;
-        beliefClusterId?: string;
-    }): Promise<import("./coreClient").PlatformGatewaySuccess<PermissionDecision>>;
-    /**
-     * List accessible topics for a principal.
-     */
-    listAccessibleTopics(query?: GatewayScope & {
-        permission?: PermissionKind;
-        includeShared?: boolean;
-        principal?: string;
-        principalId?: string;
-        limit?: number;
-    }): Promise<{
-        data: {
-            permission: PermissionKind;
-            topics: TopicRecord[];
-            total: number;
-            deniedTopics: {
-                topicId: string;
-                reasonCode: string;
-            }[];
-        };
-        success: true;
-        correlationId: string;
-        policyTraceId: string | null;
-        idempotentReplay: boolean;
-    }>;
-    /**
-     * Filter topic identifiers by permission.
-     */
-    filterByPermission(input: GatewayScope & {
-        topicIds?: string[];
-        permission?: PermissionKind;
-        principal?: string;
-        principalId?: string;
-    }): Promise<{
-        success: boolean;
-        data: {
-            permission: PermissionKind;
-            allowedTopicIds: string[];
-            deniedTopics: {
-                topicId: string;
-                reasonCode: string;
-            }[];
-            count: number;
-        };
-    }>;
-};

package/dist/lib/platform/sdk/policyClient.js

@@ -1,277 +0,0 @@
-import { createGatewayRequestClient, LucernApiError, randomIdempotencyKey, toQueryString, } from "./coreClient.js";
-import { createListResult, mapGatewayData } from "./sdkSurface.js";
-export { LucernApiError };
-function asTopicArray(data) {
-    if (Array.isArray(data)) {
-        return data.filter((row) => Boolean(row) && typeof row === "object");
-    }
-    return [];
-}
-function asWritePolicyRecord(data) {
-    if (!data || typeof data !== "object") {
-        return null;
-    }
-    return data;
-}
-function asWritePolicyArray(data) {
-    if (!Array.isArray(data)) {
-        return [];
-    }
-    return data
-        .map(asWritePolicyRecord)
-        .filter((row) => Boolean(row));
-}
-function asRolePolicyRecord(data) {
-    if (!data || typeof data !== "object") {
-        return null;
-    }
-    return data;
-}
-function asRolePolicyArray(data) {
-    if (!Array.isArray(data)) {
-        return [];
-    }
-    return data
-        .map(asRolePolicyRecord)
-        .filter((row) => Boolean(row));
-}
-/**
- * Create the policy client for permission checks, grants, and write policies.
- * @param config - Gateway transport configuration.
- * @returns An object with methods to check permissions, manage grants, and manage write policies.
- */
-export function createPolicyClient(config = {}) {
-    const gateway = createGatewayRequestClient(config);
-    return {
-        /**
-         * List policy decisions in the current scope.
-         */
-        async listDecisions(query = {}) {
-            return gateway.request({
-                path: `/api/platform/v1/policy/decisions${toQueryString(query)}`,
-            }).then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "decisions")));
-        },
-        /**
-         * Create a permission grant.
-         */
-        async grant(input, idempotencyKey) {
-            return gateway.request({
-                path: "/api/platform/v1/policy/grant",
-                method: "POST",
-                body: input,
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
-            });
-        },
-        /**
-         * Delete a permission grant by revoking it.
-         */
-        async revoke(input, idempotencyKey) {
-            return gateway.request({
-                path: "/api/platform/v1/policy/revoke",
-                method: "POST",
-                body: input,
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
-            });
-        },
-        /**
-         * List write policy rules for the current scope.
-         */
-        async listWritePolicies(query = {}) {
-            const response = await gateway.request({
-                path: `/api/platform/v1/policy/write-policies${toQueryString(query)}`,
-            });
-            const rawPolicies = response.data && typeof response.data === "object"
-                ? response.data.policies
-                : response.data;
-            return {
-                ...response,
-                data: {
-                    policies: asWritePolicyArray(rawPolicies),
-                },
-            };
-        },
-        /**
-         * Create a write policy rule.
-         */
-        async createWritePolicy(input, idempotencyKey) {
-            const response = await gateway.request({
-                path: "/api/platform/v1/policy/write-policies",
-                method: "POST",
-                body: input,
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
-            });
-            return {
-                ...response,
-                data: {
-                    id: typeof response.data?.id === "string" ? response.data.id : undefined,
-                    created: response.data?.created === true,
-                    policy: asWritePolicyRecord(response.data?.policy),
-                },
-            };
-        },
-        /**
-         * Update an existing write policy rule by identifier.
-         */
-        async updateWritePolicy(id, input, idempotencyKey) {
-            const response = await gateway.request({
-                path: `/api/platform/v1/policy/write-policies/${encodeURIComponent(id)}`,
-                method: "PATCH",
-                body: input,
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
-            });
-            return {
-                ...response,
-                data: {
-                    id: typeof response.data?.id === "string" ? response.data.id : undefined,
-                    updated: response.data?.updated === true,
-                    policy: asWritePolicyRecord(response.data?.policy),
-                },
-            };
-        },
-        /**
-         * Delete a write policy rule by identifier.
-         */
-        async deleteWritePolicy(id, scope = {}, idempotencyKey) {
-            return gateway.request({
-                path: `/api/platform/v1/policy/write-policies/${encodeURIComponent(id)}${toQueryString(scope)}`,
-                method: "DELETE",
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
-            });
-        },
-        /**
-         * List tenant role policies for the current scope.
-         */
-        async listRolePolicies(query = {}) {
-            const response = await gateway.request({
-                path: `/api/platform/v1/policy/roles${toQueryString(query)}`,
-            });
-            return {
-                ...response,
-                data: {
-                    policies: asRolePolicyArray(response.data?.policies),
-                },
-            };
-        },
-        /**
-         * Create a tenant role policy.
-         */
-        async createRolePolicy(input, idempotencyKey) {
-            const response = await gateway.request({
-                path: "/api/platform/v1/policy/roles",
-                method: "POST",
-                body: input,
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
-            });
-            return {
-                ...response,
-                data: {
-                    policy: asRolePolicyRecord(response.data?.policy),
-                },
-            };
-        },
-        /**
-         * Update a tenant role policy by identifier.
-         */
-        async updateRolePolicy(id, input, idempotencyKey) {
-            const response = await gateway.request({
-                path: `/api/platform/v1/policy/roles/${encodeURIComponent(id)}`,
-                method: "PATCH",
-                body: input,
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
-            });
-            return {
-                ...response,
-                data: {
-                    policy: asRolePolicyRecord(response.data?.policy),
-                },
-            };
-        },
-        /**
-         * Delete a tenant role policy by identifier.
-         */
-        async deleteRolePolicy(id, scope = {}, idempotencyKey) {
-            return gateway.request({
-                path: `/api/platform/v1/policy/roles/${encodeURIComponent(id)}${toQueryString(scope)}`,
-                method: "DELETE",
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
-            });
-        },
-        /**
-         * Check a permission decision for a topic or project scope.
-         */
-        async checkPermission(query) {
-            if (!query.topicId) {
-                throw new Error("topicId is required");
-            }
-            return gateway.request({
-                path: `/api/platform/v1/policy/check${toQueryString(query)}`,
-            });
-        },
-        /**
-         * List accessible topics for a principal.
-         */
-        async listAccessibleTopics(query = {}) {
-            const permission = query.permission ?? "read";
-            const principal = query.principal ?? query.principalId;
-            const response = await gateway.request({
-                path: `/api/platform/v1/policy/topics${toQueryString({
-                    tenantId: query.tenantId,
-                    workspaceId: query.workspaceId,
-                    permission,
-                    includeShared: query.includeShared,
-                    principal,
-                    limit: query.limit,
-                })}`,
-            });
-            return {
-                ...response,
-                data: {
-                    permission,
-                    topics: asTopicArray(response.data?.topics),
-                    total: typeof response.data?.total === "number"
-                        ? response.data.total
-                        : asTopicArray(response.data?.topics).length,
-                    deniedTopics: Array.isArray(response.data?.deniedTopics)
-                        ? response.data.deniedTopics
-                        : [],
-                },
-            };
-        },
-        /**
-         * Filter topic identifiers by permission.
-         */
-        async filterByPermission(input) {
-            const permission = input.permission ?? "read";
-            const principal = input.principal ?? input.principalId;
-            const uniqueTopicIds = [...new Set(input.topicIds ?? [])].filter((topicId) => typeof topicId === "string" && topicId.trim().length > 0);
-            const response = await gateway.request({
-                path: "/api/platform/v1/policy/filter",
-                method: "POST",
-                body: {
-                    tenantId: input.tenantId,
-                    workspaceId: input.workspaceId,
-                    topicIds: uniqueTopicIds,
-                    permission,
-                    principal,
-                },
-            });
-            const allowedTopicIds = Array.isArray(response.data?.allowedTopicIds)
-                ? response.data.allowedTopicIds
-                : [];
-            const deniedTopics = Array.isArray(response.data?.deniedTopics)
-                ? response.data.deniedTopics
-                : [];
-            return {
-                success: true,
-                data: {
-                    permission,
-                    allowedTopicIds,
-                    deniedTopics,
-                    count: typeof response.data?.count === "number"
-                        ? response.data.count
-                        : allowedTopicIds.length,
-                },
-            };
-        },
-    };
-}

package/dist/lib/platform/sdk/promptCatalog.js

@@ -1 +0,0 @@
-export { getPromptCatalogSnapshot } from "@/lib/langfuse/prompt-catalog";

package/dist/lib/platform/sdk/reportsClient.d.ts

@@ -1,34 +0,0 @@
-import { type GatewayClientConfig } from "./coreClient";
-import type { TopicIdentifierInput, ReportTemplatesResponse, ReportWithSectionsResponse } from "./types";
-/** Configuration for the reports client. */
-export type ReportsClientConfig = GatewayClientConfig;
-export type { ProjectReportsResponse, ReportTemplatesResponse, ReportWithSectionsResponse, } from "./types";
-/**
- * Create the reports client for report templates and generated reports.
- * @param config - Gateway transport configuration.
- * @returns An object with methods to list templates, list reports, and get a report.
- */
-export declare function createReportsClient(config?: ReportsClientConfig): {
-    /**
-     * List report templates.
-     */
-    listTemplates(args?: {
-        slug?: string;
-    }): Promise<import("./coreClient").PlatformGatewaySuccess<ReportTemplatesResponse>>;
-    /**
-     * @deprecated Use listTemplates.
-     */
-    getTemplates(args?: {
-        slug?: string;
-    }): Promise<import("./coreClient").PlatformGatewaySuccess<ReportTemplatesResponse>>;
-    /**
-     * List reports for a topic scope.
-     */
-    listReports(input: TopicIdentifierInput, args?: {
-        summary?: boolean;
-    }): Promise<import("./coreClient").PlatformGatewaySuccess<import("./types").ListResult<any, "reports">>>;
-    /**
-     * Get a generated report.
-     */
-    getReport(reportId: string): Promise<import("./coreClient").PlatformGatewaySuccess<ReportWithSectionsResponse>>;
-};

package/dist/lib/platform/sdk/reportsClient.js

@@ -1,64 +0,0 @@
-import { createGatewayRequestClient, toQueryString, } from "./coreClient.js";
-import { createListResult, mapGatewayData, resolveTopicId } from "./sdkSurface.js";
-/**
- * Create the reports client for report templates and generated reports.
- * @param config - Gateway transport configuration.
- * @returns An object with methods to list templates, list reports, and get a report.
- */
-export function createReportsClient(config = {}) {
-    const gateway = createGatewayRequestClient(config);
-    return {
-        /**
-         * List report templates.
-         */
-        async listTemplates(args = {}) {
-            return gateway.request({
-                path: `/api/platform/v1/reports/templates${toQueryString({
-                    slug: args.slug,
-                })}`,
-            }).then((response) => mapGatewayData(response, (data) => {
-                const record = data && typeof data === "object"
-                    ? data
-                    : {};
-                const rows = Array.isArray(data)
-                    ? data
-                    : Array.isArray(record.templates)
-                        ? record.templates
-                        : [];
-                return createListResult(rows, "templates");
-            }));
-        },
-        /**
-         * @deprecated Use listTemplates.
-         */
-        async getTemplates(args = {}) {
-            return this.listTemplates(args);
-        },
-        /**
-         * List reports for a topic scope.
-         */
-        async listReports(input, args = {}) {
-            const topicId = resolveTopicId(input);
-            if (!topicId) {
-                throw new Error("topicId is required");
-            }
-            return gateway.request({
-                path: `/api/platform/v1/reports/topics/${encodeURIComponent(topicId)}${toQueryString({
-                    summary: typeof args.summary === "boolean"
-                        ? args.summary
-                            ? "true"
-                            : "false"
-                        : undefined,
-                })}`,
-            }).then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "reports")));
-        },
-        /**
-         * Get a generated report.
-         */
-        async getReport(reportId) {
-            return gateway.request({
-                path: `/api/platform/v1/reports/${encodeURIComponent(reportId)}`,
-            });
-        },
-    };
-}