@openork/cli 0.1.1 → 0.2.1

package/{dist/openapi.yml → openapi.yml}

@@ -40,6 +40,10 @@ tags:
   - name: Documentation
     description: In-app documentation for agents, teams, workflows, and MCP tools —
       read these to understand how to use the platform
+  - name: Users
+    description: User management (admin)
+  - name: Roles
+    description: Role and permission management (admin)
 components:
   schemas:
     TreeNode:
@@ -3587,6 +3591,107 @@ paths:
                         - error
                 required:
                   - agents
+  //settings/gateway:
+    get:
+      tags:
+        - Settings
+      summary: Get gateway configuration
+      responses:
+        "200":
+          description: Current gateway config
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  port:
+                    type: number
+                  trustedOrigins:
+                    type: array
+                    items:
+                      type: string
+                  token:
+                    type: string
+                required:
+                  - port
+                  - trustedOrigins
+                  - token
+    put:
+      tags:
+        - Settings
+      summary: Update gateway configuration
+      requestBody:
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                trustedOrigins:
+                  type: array
+                  items:
+                    type: string
+                token:
+                  type: string
+      responses:
+        "200":
+          description: Updated gateway config
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  port:
+                    type: number
+                  trustedOrigins:
+                    type: array
+                    items:
+                      type: string
+                  token:
+                    type: string
+                required:
+                  - port
+                  - trustedOrigins
+                  - token
+  //settings/gateway/status:
+    get:
+      tags:
+        - Settings
+      summary: Get gateway status
+      responses:
+        "200":
+          description: Gateway status
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  connected:
+                    type: boolean
+                  uptime:
+                    type: number
+                  version:
+                    type: string
+                required:
+                  - connected
+                  - uptime
+                  - version
+  //settings/gateway/restart:
+    post:
+      tags:
+        - Settings
+      summary: Restart gateway
+      responses:
+        "200":
+          description: Restart initiated
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  message:
+                    type: string
+                required:
+                  - message
   //debug/watchers:
     get:
       tags:
@@ -5646,3 +5751,668 @@ paths:
                     type: string
                 required:
                   - error
+  //users:
+    get:
+      tags:
+        - Users
+      summary: List all users
+      responses:
+        "200":
+          description: Paginated list of users
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  users:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        name:
+                          type: string
+                        email:
+                          type: string
+                        image:
+                          type: string
+                          nullable: true
+                        roleId:
+                          type: string
+                        roleName:
+                          type: string
+                        createdAt:
+                          type: string
+                      required:
+                        - id
+                        - name
+                        - email
+                        - image
+                        - roleId
+                        - roleName
+                        - createdAt
+                  total:
+                    type: number
+                required:
+                  - users
+                  - total
+  //users/{id}:
+    get:
+      tags:
+        - Users
+      summary: Get user by ID
+      parameters:
+        - schema:
+            type: string
+          required: true
+          name: id
+          in: path
+      responses:
+        "200":
+          description: User details
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  id:
+                    type: string
+                  name:
+                    type: string
+                  email:
+                    type: string
+                  image:
+                    type: string
+                    nullable: true
+                  roleId:
+                    type: string
+                  roleName:
+                    type: string
+                  createdAt:
+                    type: string
+                required:
+                  - id
+                  - name
+                  - email
+                  - image
+                  - roleId
+                  - roleName
+                  - createdAt
+        "404":
+          description: User not found
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error
+    put:
+      tags:
+        - Users
+      summary: Update user
+      parameters:
+        - schema:
+            type: string
+          required: true
+          name: id
+          in: path
+      requestBody:
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                name:
+                  type: string
+                email:
+                  type: string
+                  format: email
+                roleId:
+                  type: string
+      responses:
+        "200":
+          description: Updated user
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  id:
+                    type: string
+                  name:
+                    type: string
+                  email:
+                    type: string
+                  image:
+                    type: string
+                    nullable: true
+                  roleId:
+                    type: string
+                  roleName:
+                    type: string
+                  createdAt:
+                    type: string
+                required:
+                  - id
+                  - name
+                  - email
+                  - image
+                  - roleId
+                  - roleName
+                  - createdAt
+        "403":
+          description: Cannot modify owner
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error
+        "404":
+          description: User not found
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error
+    delete:
+      tags:
+        - Users
+      summary: Delete user
+      parameters:
+        - schema:
+            type: string
+          required: true
+          name: id
+          in: path
+      responses:
+        "200":
+          description: User deleted
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  success:
+                    type: boolean
+                required:
+                  - success
+        "403":
+          description: Cannot delete owner
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error
+        "404":
+          description: User not found
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error
+  //users/invite:
+    post:
+      tags:
+        - Users
+      summary: Invite a new user
+      requestBody:
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                email:
+                  type: string
+                  format: email
+                name:
+                  type: string
+                roleId:
+                  type: string
+                password:
+                  type: string
+                  minLength: 8
+              required:
+                - email
+                - name
+                - roleId
+                - password
+      responses:
+        "201":
+          description: User created
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  id:
+                    type: string
+                  name:
+                    type: string
+                  email:
+                    type: string
+                  image:
+                    type: string
+                    nullable: true
+                  roleId:
+                    type: string
+                  roleName:
+                    type: string
+                  createdAt:
+                    type: string
+                required:
+                  - id
+                  - name
+                  - email
+                  - image
+                  - roleId
+                  - roleName
+                  - createdAt
+        "409":
+          description: Email already in use
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error
+  //roles:
+    get:
+      tags:
+        - Roles
+      summary: List all roles with permissions
+      responses:
+        "200":
+          description: All roles
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  roles:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        name:
+                          type: string
+                        description:
+                          type: string
+                          nullable: true
+                        isSystem:
+                          type: boolean
+                        permissions:
+                          type: array
+                          items:
+                            type: object
+                            properties:
+                              id:
+                                type: string
+                              entity:
+                                type: string
+                              action:
+                                type: string
+                              scope:
+                                type: string
+                            required:
+                              - id
+                              - entity
+                              - action
+                              - scope
+                        userCount:
+                          type: number
+                        createdAt:
+                          type: string
+                      required:
+                        - id
+                        - name
+                        - description
+                        - isSystem
+                        - permissions
+                        - userCount
+                        - createdAt
+                required:
+                  - roles
+    post:
+      tags:
+        - Roles
+      summary: Create a custom role
+      requestBody:
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                name:
+                  type: string
+                  minLength: 1
+                description:
+                  type: string
+                permissions:
+                  type: array
+                  items:
+                    type: object
+                    properties:
+                      entity:
+                        type: string
+                      action:
+                        type: string
+                      scope:
+                        type: string
+                        default: all
+                    required:
+                      - entity
+                      - action
+              required:
+                - name
+                - permissions
+      responses:
+        "201":
+          description: Role created
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  id:
+                    type: string
+                  name:
+                    type: string
+                  description:
+                    type: string
+                    nullable: true
+                  isSystem:
+                    type: boolean
+                  permissions:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        entity:
+                          type: string
+                        action:
+                          type: string
+                        scope:
+                          type: string
+                      required:
+                        - id
+                        - entity
+                        - action
+                        - scope
+                  userCount:
+                    type: number
+                  createdAt:
+                    type: string
+                required:
+                  - id
+                  - name
+                  - description
+                  - isSystem
+                  - permissions
+                  - userCount
+                  - createdAt
+        "409":
+          description: Role name already exists
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error
+  //roles/{id}:
+    get:
+      tags:
+        - Roles
+      summary: Get role by ID
+      parameters:
+        - schema:
+            type: string
+          required: true
+          name: id
+          in: path
+      responses:
+        "200":
+          description: Role details
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  id:
+                    type: string
+                  name:
+                    type: string
+                  description:
+                    type: string
+                    nullable: true
+                  isSystem:
+                    type: boolean
+                  permissions:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        entity:
+                          type: string
+                        action:
+                          type: string
+                        scope:
+                          type: string
+                      required:
+                        - id
+                        - entity
+                        - action
+                        - scope
+                  userCount:
+                    type: number
+                  createdAt:
+                    type: string
+                required:
+                  - id
+                  - name
+                  - description
+                  - isSystem
+                  - permissions
+                  - userCount
+                  - createdAt
+        "404":
+          description: Role not found
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error
+    put:
+      tags:
+        - Roles
+      summary: Update a custom role
+      parameters:
+        - schema:
+            type: string
+          required: true
+          name: id
+          in: path
+      requestBody:
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                name:
+                  type: string
+                description:
+                  type: string
+                permissions:
+                  type: array
+                  items:
+                    type: object
+                    properties:
+                      entity:
+                        type: string
+                      action:
+                        type: string
+                      scope:
+                        type: string
+                        default: all
+                    required:
+                      - entity
+                      - action
+      responses:
+        "200":
+          description: Updated role
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  id:
+                    type: string
+                  name:
+                    type: string
+                  description:
+                    type: string
+                    nullable: true
+                  isSystem:
+                    type: boolean
+                  permissions:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        entity:
+                          type: string
+                        action:
+                          type: string
+                        scope:
+                          type: string
+                      required:
+                        - id
+                        - entity
+                        - action
+                        - scope
+                  userCount:
+                    type: number
+                  createdAt:
+                    type: string
+                required:
+                  - id
+                  - name
+                  - description
+                  - isSystem
+                  - permissions
+                  - userCount
+                  - createdAt
+        "403":
+          description: Cannot modify system role
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error
+        "404":
+          description: Role not found
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error
+    delete:
+      tags:
+        - Roles
+      summary: Delete a custom role
+      parameters:
+        - schema:
+            type: string
+          required: true
+          name: id
+          in: path
+      responses:
+        "200":
+          description: Role deleted
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  success:
+                    type: boolean
+                required:
+                  - success
+        "403":
+          description: Cannot delete system role
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error
+        "404":
+          description: Role not found
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error
+        "409":
+          description: Role still has users assigned
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                required:
+                  - error