@omnibase/core-js 0.8.0 → 0.9.0

package/src/apis/PermissionsApi.ts

@@ -0,0 +1,216 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Omnibase REST API
+ * Self-hostable Backend-as-a-Service providing database management, authentication, payments, storage, and email services.  ## Features - **Database**: PostgreSQL with RLS and migrations - **Authentication**: Ory Kratos integration with session management - **Payments**: Stripe integration with version-controlled billing configs - **Storage**: S3-compatible object storage with RLS - **Email**: Transactional email service - **Permissions**: Fine-grained access control via Ory Keto  ## Authentication Most endpoints require authentication via session cookies or JWT tokens. Use the appropriate security scheme based on the endpoint requirements.
+ *
+ * The version of the OpenAPI document: 0.9.0
+ * Contact: support@omnibase.dev
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+import * as runtime from '../runtime';
+import type {
+  CheckPermission200Response,
+  CreateRelationship200Response,
+  DeployPermissionNamespaces200Response,
+  HandlersBadRequestResponse,
+  HandlersInternalServerErrorResponse,
+  HandlersUnauthorizedResponse,
+  V1CheckPermissionRequest,
+  V1CreateRelationshipRequest,
+} from '../models/index';
+import {
+    CheckPermission200ResponseFromJSON,
+    CheckPermission200ResponseToJSON,
+    CreateRelationship200ResponseFromJSON,
+    CreateRelationship200ResponseToJSON,
+    DeployPermissionNamespaces200ResponseFromJSON,
+    DeployPermissionNamespaces200ResponseToJSON,
+    HandlersBadRequestResponseFromJSON,
+    HandlersBadRequestResponseToJSON,
+    HandlersInternalServerErrorResponseFromJSON,
+    HandlersInternalServerErrorResponseToJSON,
+    HandlersUnauthorizedResponseFromJSON,
+    HandlersUnauthorizedResponseToJSON,
+    V1CheckPermissionRequestFromJSON,
+    V1CheckPermissionRequestToJSON,
+    V1CreateRelationshipRequestFromJSON,
+    V1CreateRelationshipRequestToJSON,
+} from '../models/index';
+
+export interface CheckPermissionRequest {
+    body: V1CheckPermissionRequest;
+}
+
+export interface CreateRelationshipRequest {
+    body: V1CreateRelationshipRequest;
+}
+
+export interface DeployPermissionNamespacesRequest {
+    namespaces: Blob;
+}
+
+/**
+ * 
+ */
+export class PermissionsApi extends runtime.BaseAPI {
+
+    /**
+     * Checks if a subject has a specific permission on an object using Ory Keto.  ## Authentication Requires session authentication.  ## Request Format Provide either `subject_id` or `subject_set` (not both).  ## Use Cases - Verify user permissions before performing actions - Implement fine-grained access control - Check role-based permissions
+     * Check permission
+     */
+    async checkPermissionRaw(requestParameters: CheckPermissionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CheckPermission200Response>> {
+        if (requestParameters['body'] == null) {
+            throw new runtime.RequiredError(
+                'body',
+                'Required parameter "body" was null or undefined when calling checkPermission().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["Cookie"] = await this.configuration.apiKey("Cookie"); // SessionAuth authentication
+        }
+
+
+        let urlPath = `/permissions/check`;
+
+        const response = await this.request({
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: V1CheckPermissionRequestToJSON(requestParameters['body']),
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => CheckPermission200ResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Checks if a subject has a specific permission on an object using Ory Keto.  ## Authentication Requires session authentication.  ## Request Format Provide either `subject_id` or `subject_set` (not both).  ## Use Cases - Verify user permissions before performing actions - Implement fine-grained access control - Check role-based permissions
+     * Check permission
+     */
+    async checkPermission(requestParameters: CheckPermissionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CheckPermission200Response> {
+        const response = await this.checkPermissionRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Creates a new relationship tuple in Ory Keto.  ## Authentication Requires session authentication.  ## Request Format Provide either `subject_id` or `subject_set` (not both).  ## Use Cases - Link resources to tenants - Assign users to projects - Create permission relationships
+     * Create relationship
+     */
+    async createRelationshipRaw(requestParameters: CreateRelationshipRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CreateRelationship200Response>> {
+        if (requestParameters['body'] == null) {
+            throw new runtime.RequiredError(
+                'body',
+                'Required parameter "body" was null or undefined when calling createRelationship().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["Cookie"] = await this.configuration.apiKey("Cookie"); // SessionAuth authentication
+        }
+
+
+        let urlPath = `/permissions/relationships`;
+
+        const response = await this.request({
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: V1CreateRelationshipRequestToJSON(requestParameters['body']),
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => CreateRelationship200ResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Creates a new relationship tuple in Ory Keto.  ## Authentication Requires session authentication.  ## Request Format Provide either `subject_id` or `subject_set` (not both).  ## Use Cases - Link resources to tenants - Assign users to projects - Create permission relationships
+     * Create relationship
+     */
+    async createRelationship(requestParameters: CreateRelationshipRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CreateRelationship200Response> {
+        const response = await this.createRelationshipRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Uploads and deploys permission namespace configurations as a zip file.  ## Authentication Requires JWT token with appropriate permissions.  ## File Format Upload a zip file containing namespace definition files and optionally a roles.config.json file. The namespace files are stored in S3 and parsed to extract permission definitions.  ## Managed Mode If managed hosting is enabled, this endpoint will also trigger a restart of the Keto service.  ## Use Cases - CLI namespace deployment via `omnibase permissions push` - CI/CD pipeline integrations - Programmatic permission management
+     * Deploy Keto namespace configurations
+     */
+    async deployPermissionNamespacesRaw(requestParameters: DeployPermissionNamespacesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DeployPermissionNamespaces200Response>> {
+        if (requestParameters['namespaces'] == null) {
+            throw new runtime.RequiredError(
+                'namespaces',
+                'Required parameter "namespaces" was null or undefined when calling deployPermissionNamespaces().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["Authorization"] = await this.configuration.apiKey("Authorization"); // BearerAuth authentication
+        }
+
+        const consumes: runtime.Consume[] = [
+            { contentType: 'multipart/form-data' },
+        ];
+        // @ts-ignore: canConsumeForm may be unused
+        const canConsumeForm = runtime.canConsumeForm(consumes);
+
+        let formParams: { append(param: string, value: any): any };
+        let useForm = false;
+        // use FormData to transmit files using content-type "multipart/form-data"
+        useForm = canConsumeForm;
+        if (useForm) {
+            formParams = new FormData();
+        } else {
+            formParams = new URLSearchParams();
+        }
+
+        if (requestParameters['namespaces'] != null) {
+            formParams.append('namespaces', requestParameters['namespaces'] as any);
+        }
+
+
+        let urlPath = `/permissions/namespaces`;
+
+        const response = await this.request({
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: formParams,
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => DeployPermissionNamespaces200ResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Uploads and deploys permission namespace configurations as a zip file.  ## Authentication Requires JWT token with appropriate permissions.  ## File Format Upload a zip file containing namespace definition files and optionally a roles.config.json file. The namespace files are stored in S3 and parsed to extract permission definitions.  ## Managed Mode If managed hosting is enabled, this endpoint will also trigger a restart of the Keto service.  ## Use Cases - CLI namespace deployment via `omnibase permissions push` - CI/CD pipeline integrations - Programmatic permission management
+     * Deploy Keto namespace configurations
+     */
+    async deployPermissionNamespaces(requestParameters: DeployPermissionNamespacesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DeployPermissionNamespaces200Response> {
+        const response = await this.deployPermissionNamespacesRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+}

package/src/apis/StorageApi.ts

@@ -0,0 +1,207 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Omnibase REST API
+ * Self-hostable Backend-as-a-Service providing database management, authentication, payments, storage, and email services.  ## Features - **Database**: PostgreSQL with RLS and migrations - **Authentication**: Ory Kratos integration with session management - **Payments**: Stripe integration with version-controlled billing configs - **Storage**: S3-compatible object storage with RLS - **Email**: Transactional email service - **Permissions**: Fine-grained access control via Ory Keto  ## Authentication Most endpoints require authentication via session cookies or JWT tokens. Use the appropriate security scheme based on the endpoint requirements.
+ *
+ * The version of the OpenAPI document: 0.9.0
+ * Contact: support@omnibase.dev
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+import * as runtime from '../runtime';
+import type {
+  HandlersBadRequestResponse,
+  HandlersForbiddenResponse,
+  HandlersInternalServerErrorResponse,
+  HandlersNotFoundErrorResponse,
+  HandlersUnauthorizedResponse,
+  ModelsDeleteObjectRequest,
+  ModelsDownloadRequest,
+  ModelsUploadRequest,
+  StorageDownloadPost200Response,
+  StorageObjectDelete200Response,
+  StorageUploadPost200Response,
+} from '../models/index';
+import {
+    HandlersBadRequestResponseFromJSON,
+    HandlersBadRequestResponseToJSON,
+    HandlersForbiddenResponseFromJSON,
+    HandlersForbiddenResponseToJSON,
+    HandlersInternalServerErrorResponseFromJSON,
+    HandlersInternalServerErrorResponseToJSON,
+    HandlersNotFoundErrorResponseFromJSON,
+    HandlersNotFoundErrorResponseToJSON,
+    HandlersUnauthorizedResponseFromJSON,
+    HandlersUnauthorizedResponseToJSON,
+    ModelsDeleteObjectRequestFromJSON,
+    ModelsDeleteObjectRequestToJSON,
+    ModelsDownloadRequestFromJSON,
+    ModelsDownloadRequestToJSON,
+    ModelsUploadRequestFromJSON,
+    ModelsUploadRequestToJSON,
+    StorageDownloadPost200ResponseFromJSON,
+    StorageDownloadPost200ResponseToJSON,
+    StorageObjectDelete200ResponseFromJSON,
+    StorageObjectDelete200ResponseToJSON,
+    StorageUploadPost200ResponseFromJSON,
+    StorageUploadPost200ResponseToJSON,
+} from '../models/index';
+
+export interface StorageDownloadPostRequest {
+    request: ModelsDownloadRequest;
+}
+
+export interface StorageObjectDeleteRequest {
+    request: ModelsDeleteObjectRequest;
+}
+
+export interface StorageUploadPostRequest {
+    request: ModelsUploadRequest;
+}
+
+/**
+ * 
+ */
+export class StorageApi extends runtime.BaseAPI {
+
+    /**
+     * Generates a presigned S3 download URL with Row-Level Security (RLS) enforcement.  ## RLS Policy Download permission is checked via PostgREST against the `storage.objects` table. Users must have SELECT permission based on their custom RLS policies.  ## Download Process 1. Request presigned URL from this endpoint 2. Download file directly from S3 using returned URL (GET request)  ## URL Expiration Presigned URLs are valid for 15 minutes after generation.
+     * Download file from storage
+     */
+    async storageDownloadPostRaw(requestParameters: StorageDownloadPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<StorageDownloadPost200Response>> {
+        if (requestParameters['request'] == null) {
+            throw new runtime.RequiredError(
+                'request',
+                'Required parameter "request" was null or undefined when calling storageDownloadPost().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["Cookie"] = await this.configuration.apiKey("Cookie"); // SessionAuth authentication
+        }
+
+
+        let urlPath = `/storage/download`;
+
+        const response = await this.request({
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: ModelsDownloadRequestToJSON(requestParameters['request']),
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => StorageDownloadPost200ResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Generates a presigned S3 download URL with Row-Level Security (RLS) enforcement.  ## RLS Policy Download permission is checked via PostgREST against the `storage.objects` table. Users must have SELECT permission based on their custom RLS policies.  ## Download Process 1. Request presigned URL from this endpoint 2. Download file directly from S3 using returned URL (GET request)  ## URL Expiration Presigned URLs are valid for 15 minutes after generation.
+     * Download file from storage
+     */
+    async storageDownloadPost(requestParameters: StorageDownloadPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<StorageDownloadPost200Response> {
+        const response = await this.storageDownloadPostRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Deletes a file from S3 storage with Row-Level Security (RLS) enforcement.  ## RLS Policy Delete permission is checked via PostgREST against the `storage.objects` table. Users must have DELETE permission based on their custom RLS policies.  ## Deletion Process 1. Metadata is deleted from database (with RLS check) 2. File is deleted from S3 storage 3. If S3 deletion fails, metadata is already removed (eventual consistency)
+     * Delete file from storage
+     */
+    async storageObjectDeleteRaw(requestParameters: StorageObjectDeleteRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<StorageObjectDelete200Response>> {
+        if (requestParameters['request'] == null) {
+            throw new runtime.RequiredError(
+                'request',
+                'Required parameter "request" was null or undefined when calling storageObjectDelete().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["Cookie"] = await this.configuration.apiKey("Cookie"); // SessionAuth authentication
+        }
+
+
+        let urlPath = `/storage/object`;
+
+        const response = await this.request({
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+            body: ModelsDeleteObjectRequestToJSON(requestParameters['request']),
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => StorageObjectDelete200ResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Deletes a file from S3 storage with Row-Level Security (RLS) enforcement.  ## RLS Policy Delete permission is checked via PostgREST against the `storage.objects` table. Users must have DELETE permission based on their custom RLS policies.  ## Deletion Process 1. Metadata is deleted from database (with RLS check) 2. File is deleted from S3 storage 3. If S3 deletion fails, metadata is already removed (eventual consistency)
+     * Delete file from storage
+     */
+    async storageObjectDelete(requestParameters: StorageObjectDeleteRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<StorageObjectDelete200Response> {
+        const response = await this.storageObjectDeleteRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Generates a presigned S3 upload URL with Row-Level Security (RLS) enforcement.  ## RLS Policy Upload permission is checked via PostgREST against the `storage.objects` table. Users must have INSERT permission based on their custom RLS policies.  ## Upload Process 1. Request presigned URL from this endpoint 2. Upload file directly to S3 using returned URL (PUT request) 3. File metadata is automatically stored in database  ## URL Expiration Presigned URLs are valid for 15 minutes after generation.
+     * Upload file to storage
+     */
+    async storageUploadPostRaw(requestParameters: StorageUploadPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<StorageUploadPost200Response>> {
+        if (requestParameters['request'] == null) {
+            throw new runtime.RequiredError(
+                'request',
+                'Required parameter "request" was null or undefined when calling storageUploadPost().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["Cookie"] = await this.configuration.apiKey("Cookie"); // SessionAuth authentication
+        }
+
+
+        let urlPath = `/storage/upload`;
+
+        const response = await this.request({
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: ModelsUploadRequestToJSON(requestParameters['request']),
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => StorageUploadPost200ResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Generates a presigned S3 upload URL with Row-Level Security (RLS) enforcement.  ## RLS Policy Upload permission is checked via PostgREST against the `storage.objects` table. Users must have INSERT permission based on their custom RLS policies.  ## Upload Process 1. Request presigned URL from this endpoint 2. Upload file directly to S3 using returned URL (PUT request) 3. File metadata is automatically stored in database  ## URL Expiration Presigned URLs are valid for 15 minutes after generation.
+     * Upload file to storage
+     */
+    async storageUploadPost(requestParameters: StorageUploadPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<StorageUploadPost200Response> {
+        const response = await this.storageUploadPostRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+}