@taruvi/sdk 1.0.9 → 1.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taruvi/sdk",
-  "version": "1.0.9",
+  "version": "1.1.0",
   "description": "Taruvi SDK",
   "main": "src/index.ts",
   "type": "module",

package/src/index.ts

@@ -9,11 +9,13 @@ export { Database } from "./lib/Database/DatabaseClient.js"
 export { Settings } from "./lib/Settings/SettingsClient.js"
 export { Functions } from "./lib/Function/FunctionsClient.js"
 export { Secrets } from "./lib/Secrets/SecretsClient.js"
+export { Policy } from "./lib/Policy/PolicyClient.js"
 
 // Export types
 export type { TaruviConfig, StorageFilters, DatabaseFilters } from "./types.js"
 export type { AuthTokens } from "./lib-internal/token/TokenClient.js"
 export type { UserCreateRequest, UserCreateResponse as UserResponse, UserDataResponse } from "./lib/user/types.js"
+export type { Principal, Resource, Resources } from "./lib/Policy/types.js"
 export type { FunctionRequest, FunctionResponse, FunctionInvocation } from "./lib/Function/types.js"
 export type { DatabaseRequest, DatabaseResponse } from "./lib/Database/types.js"
 export type { StorageRequest, StorageUpdateRequest, StorageResponse } from "./lib/Storage/types.js"

package/src/lib/Policy/PolicyClient.ts

@@ -0,0 +1,29 @@
+import type { Client } from "../../client.js"
+import { PolicyRoutes } from "../../lib-internal/routes/PolicyRoutes.js"
+import type { TaruviConfig } from "../../types.js"
+import type { Principal, Resource, Resources } from "./types.js"
+
+export class Policy {
+    private client: Client
+    private config: TaruviConfig
+    constructor(client: Client) {
+        this.client = client
+        this.config = this.client.getConfig()
+    }
+
+    async checkResource(resources: Resources, principal?: Principal) {
+        const url = PolicyRoutes.baseUrl(this.config.appSlug) + PolicyRoutes.checkResource
+        const body = JSON.stringify({
+            principal,
+            resources: resources.map(r => ({
+                resource: {
+                    kind: `${this.config.appSlug}:${r.tableName}`,
+                    id: r.recordId,
+                    attr: r.attributes || {}
+                }
+            }))
+        })
+
+        return await this.client.httpClient.post(url, body)
+    }
+}

package/src/lib/Policy/types.ts

@@ -0,0 +1,23 @@
+export interface Principal {
+    id: string
+    roles: string[]
+    attr: Record<string, unknown>
+}
+
+export type Resource = {
+    kind: string
+    id: string
+    attr: Record<string, unknown>
+};
+
+export type Resources = {
+    tableName: string
+    recordId: string
+    attributes: Record<string, unknown>
+    actions: string[]
+}[]
+
+export type ResourceCheckResponse = {
+    allowed: boolean
+    reason: string
+}

package/src/lib-internal/routes/PolicyRoutes.ts

@@ -0,0 +1,4 @@
+export const PolicyRoutes = {
+    baseUrl: (appSlug: string) => `api/apps/${appSlug}`,
+    checkResource: "/check/resources"
+}