@tsg-dsp/tsg-sdk 0.0.0-stage → 0.21.0

package/dist/vendor/control-plane-dtos/status/status.dto.d.ts

@@ -0,0 +1,37 @@
+import { ContractNegotiationState, NegotiationRole, TransferRole, TransferState } from "@tsg-dsp/common-dsp";
+export declare class MemoryUsageDto {
+    does_zap_garbage: number;
+    external_memory: number;
+    heap_size_limit: number;
+    malloced_memory: number;
+    number_of_detached_contexts: number;
+    number_of_native_contexts: number;
+    peak_malloced_memory: number;
+    total_available_size: number;
+    total_global_handles_size: number;
+    total_heap_size: number;
+    total_heap_size_executable: number;
+    total_physical_size: number;
+    used_global_handles_size: number;
+    used_heap_size: number;
+}
+export declare class StatusNegotiationDto {
+    role: NegotiationRole;
+    state: ContractNegotiationState;
+    count: number;
+}
+export declare class StatusTransferDto {
+    role: TransferRole;
+    state: TransferState;
+    count: number;
+}
+export declare class DatabaseStatusDto {
+    status: string;
+}
+export declare class StatusDto {
+    database: DatabaseStatusDto;
+    memoryUsage: MemoryUsageDto;
+    uptime: number;
+    negotiations: StatusNegotiationDto[];
+    transfers: StatusTransferDto[];
+}

package/dist/vendor/control-plane-dtos/status/status.dto.js

@@ -0,0 +1,172 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ApiProperty } from "@nestjs/swagger";
+import { ContractNegotiationState, TransferState } from "@tsg-dsp/common-dsp";
+export class MemoryUsageDto {
+    does_zap_garbage;
+    external_memory;
+    heap_size_limit;
+    malloced_memory;
+    number_of_detached_contexts;
+    number_of_native_contexts;
+    peak_malloced_memory;
+    total_available_size;
+    total_global_handles_size;
+    total_heap_size;
+    total_heap_size_executable;
+    total_physical_size;
+    used_global_handles_size;
+    used_heap_size;
+}
+__decorate([
+    ApiProperty({ example: 1024 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "does_zap_garbage", void 0);
+__decorate([
+    ApiProperty({ example: 2048 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "external_memory", void 0);
+__decorate([
+    ApiProperty({ example: 4096 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "heap_size_limit", void 0);
+__decorate([
+    ApiProperty({ example: 512 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "malloced_memory", void 0);
+__decorate([
+    ApiProperty({ example: 0 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "number_of_detached_contexts", void 0);
+__decorate([
+    ApiProperty({ example: 2 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "number_of_native_contexts", void 0);
+__decorate([
+    ApiProperty({ example: 1024 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "peak_malloced_memory", void 0);
+__decorate([
+    ApiProperty({ example: 8192 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "total_available_size", void 0);
+__decorate([
+    ApiProperty({ example: 256 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "total_global_handles_size", void 0);
+__decorate([
+    ApiProperty({ example: 16384 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "total_heap_size", void 0);
+__decorate([
+    ApiProperty({ example: 4096 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "total_heap_size_executable", void 0);
+__decorate([
+    ApiProperty({ example: 32768 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "total_physical_size", void 0);
+__decorate([
+    ApiProperty({ example: 128 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "used_global_handles_size", void 0);
+__decorate([
+    ApiProperty({ example: 8192 }),
+    __metadata("design:type", Number)
+], MemoryUsageDto.prototype, "used_heap_size", void 0);
+export class StatusNegotiationDto {
+    role;
+    state;
+    count;
+}
+__decorate([
+    ApiProperty({ example: "provider" }),
+    __metadata("design:type", String)
+], StatusNegotiationDto.prototype, "role", void 0);
+__decorate([
+    ApiProperty({ example: "OFFERED" }),
+    __metadata("design:type", String)
+], StatusNegotiationDto.prototype, "state", void 0);
+__decorate([
+    ApiProperty({ example: 1 }),
+    __metadata("design:type", Number)
+], StatusNegotiationDto.prototype, "count", void 0);
+export class StatusTransferDto {
+    role;
+    state;
+    count;
+}
+__decorate([
+    ApiProperty({ example: "provider" }),
+    __metadata("design:type", String)
+], StatusTransferDto.prototype, "role", void 0);
+__decorate([
+    ApiProperty({ example: TransferState.COMPLETED }),
+    __metadata("design:type", String)
+], StatusTransferDto.prototype, "state", void 0);
+__decorate([
+    ApiProperty({ example: 3 }),
+    __metadata("design:type", Number)
+], StatusTransferDto.prototype, "count", void 0);
+export class DatabaseStatusDto {
+    status;
+}
+__decorate([
+    ApiProperty({ example: "connected" }),
+    __metadata("design:type", String)
+], DatabaseStatusDto.prototype, "status", void 0);
+export class StatusDto {
+    database;
+    memoryUsage;
+    uptime;
+    negotiations;
+    transfers;
+}
+__decorate([
+    ApiProperty({
+        type: () => DatabaseStatusDto,
+        example: { status: "connected" }
+    }),
+    __metadata("design:type", DatabaseStatusDto)
+], StatusDto.prototype, "database", void 0);
+__decorate([
+    ApiProperty({
+        type: () => MemoryUsageDto,
+        example: {
+            does_zap_garbage: 1024,
+            external_memory: 2048,
+            heap_size_limit: 4096,
+            malloced_memory: 512,
+            number_of_detached_contexts: 0,
+            number_of_native_contexts: 2,
+            peak_malloced_memory: 1024,
+            total_available_size: 8192,
+            total_global_handles_size: 256,
+            total_heap_size: 16384,
+            total_heap_size_executable: 4096,
+            total_physical_size: 32768,
+            used_global_handles_size: 128,
+            used_heap_size: 8192
+        }
+    }),
+    __metadata("design:type", MemoryUsageDto)
+], StatusDto.prototype, "memoryUsage", void 0);
+__decorate([
+    ApiProperty({ example: 3600 }),
+    __metadata("design:type", Number)
+], StatusDto.prototype, "uptime", void 0);
+__decorate([
+    ApiProperty({ type: () => StatusNegotiationDto }),
+    __metadata("design:type", Array)
+], StatusDto.prototype, "negotiations", void 0);
+__decorate([
+    ApiProperty({ type: () => StatusTransferDto }),
+    __metadata("design:type", Array)
+], StatusDto.prototype, "transfers", void 0);

package/dist/vendor/sso-bridge-dtos/clients.dto.d.ts

@@ -0,0 +1,25 @@
+import { ClientAuthMethod, ClientKind, GrantType } from "./grants.js";
+export declare class ClientDto {
+    kind: ClientKind;
+    tenantId?: string;
+    audiences?: string[];
+    scopes?: string[];
+    id?: string;
+    name: string;
+    secretName?: string;
+    description: string;
+    clientId: string;
+    clientSecret?: string;
+    tokenEndpointAuthMethod?: ClientAuthMethod;
+    jwk?: Record<string, any>;
+    permissions: string[];
+    grants?: GrantType[];
+    redirectUris: string[];
+}
+declare const CreateClientDto_base: import("@nestjs/common").Type<Omit<ClientDto, "id">>;
+export declare class CreateClientDto extends CreateClientDto_base {
+}
+declare const UpdateClientDto_base: import("@nestjs/common").Type<Partial<Omit<ClientDto, "id">>>;
+export declare class UpdateClientDto extends UpdateClientDto_base {
+}
+export {};

package/dist/vendor/sso-bridge-dtos/clients.dto.js

@@ -0,0 +1,147 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ApiProperty, ApiPropertyOptional, OmitType, PartialType } from "@nestjs/swagger";
+import { IsArray, IsIn, IsNotEmpty, IsObject, IsOptional, IsString } from "class-validator";
+export class ClientDto {
+    kind;
+    tenantId;
+    audiences;
+    scopes;
+    id;
+    name;
+    secretName;
+    description;
+    clientId;
+    clientSecret;
+    tokenEndpointAuthMethod;
+    jwk;
+    permissions;
+    grants;
+    redirectUris;
+}
+__decorate([
+    ApiProperty({ enum: ["shared", "workload", "platform"] }),
+    IsIn(["shared", "workload", "platform"]),
+    __metadata("design:type", String)
+], ClientDto.prototype, "kind", void 0);
+__decorate([
+    ApiPropertyOptional({
+        description: "Canonical tenant UUID for a workload client"
+    }),
+    IsString(),
+    IsOptional(),
+    __metadata("design:type", String)
+], ClientDto.prototype, "tenantId", void 0);
+__decorate([
+    ApiPropertyOptional({ description: "Registered resource audiences" }),
+    IsString({ each: true }),
+    IsArray(),
+    IsOptional(),
+    __metadata("design:type", Array)
+], ClientDto.prototype, "audiences", void 0);
+__decorate([
+    ApiPropertyOptional({ description: "Allowed OAuth scopes" }),
+    IsString({ each: true }),
+    IsArray(),
+    IsOptional(),
+    __metadata("design:type", Array)
+], ClientDto.prototype, "scopes", void 0);
+__decorate([
+    ApiPropertyOptional({ example: "1" }),
+    IsString(),
+    IsOptional(),
+    __metadata("design:type", String)
+], ClientDto.prototype, "id", void 0);
+__decorate([
+    ApiProperty({ example: "Example Client" }),
+    IsString(),
+    IsNotEmpty(),
+    __metadata("design:type", String)
+], ClientDto.prototype, "name", void 0);
+__decorate([
+    ApiPropertyOptional({ example: "SecretExample" }),
+    IsString(),
+    IsOptional(),
+    __metadata("design:type", String)
+], ClientDto.prototype, "secretName", void 0);
+__decorate([
+    ApiProperty({ example: "A sample client used for demonstration purposes." }),
+    IsString(),
+    IsNotEmpty(),
+    __metadata("design:type", String)
+], ClientDto.prototype, "description", void 0);
+__decorate([
+    ApiProperty({ example: "client-id-123" }),
+    IsString(),
+    IsNotEmpty(),
+    __metadata("design:type", String)
+], ClientDto.prototype, "clientId", void 0);
+__decorate([
+    ApiPropertyOptional({
+        example: "client-secret-abc",
+        description: "Client secret for symmetric authentication. Required when tokenEndpointAuthMethod is client_secret_post."
+    }),
+    IsString(),
+    IsOptional(),
+    __metadata("design:type", String)
+], ClientDto.prototype, "clientSecret", void 0);
+__decorate([
+    ApiPropertyOptional({
+        example: "client_secret_post",
+        description: "Authentication method used at the token endpoint. Defaults to client_secret_post.",
+        enum: ["client_secret_post", "private_key_jwt", "none"]
+    }),
+    IsString(),
+    IsIn(["client_secret_post", "private_key_jwt", "none"]),
+    IsOptional(),
+    __metadata("design:type", String)
+], ClientDto.prototype, "tokenEndpointAuthMethod", void 0);
+__decorate([
+    ApiPropertyOptional({
+        example: {
+            kty: "RSA",
+            n: "0vx7agoebGcQSuuPiLJXZptN9nndrQmbXEps2aiAFbWhM78LhWx4cbbfAAtVT86zwu1RK7aPFFxuhDR1L6tSoc_BJECPebWKRXjBZCiFV4n3oknjhMstn64tZ_2W-5JsGY4Hc5n9yBXArwl93lqt7_RN5w6Cf0h4QyQ5v-65YGjQR0_FDW2QvzqY368QQMicAtaSqzs8KJZgnYb9c7d0zgdAZHzu6qMQvRL5hajrn1n91CbOpbISD08qNLyrdkt-bFTWhAI4vMQFh6WeZu0fM4lFd2NcRwr3XPksINHaQ-G_xBniIqbw0Ls1jF44-csFCur-kEgU8awapJzKnqDKgw",
+            e: "AQAB",
+            kid: "client-key-1"
+        },
+        description: "Public key in JWK format for asymmetric authentication. Required when tokenEndpointAuthMethod is private_key_jwt."
+    }),
+    IsObject(),
+    IsOptional(),
+    __metadata("design:type", Object)
+], ClientDto.prototype, "jwk", void 0);
+__decorate([
+    ApiProperty({
+        example: ["manage:catalog", "read:dataset"],
+        description: "Client permissions (can be permission strings or permission set names)"
+    }),
+    IsArray(),
+    IsNotEmpty(),
+    __metadata("design:type", Array)
+], ClientDto.prototype, "permissions", void 0);
+__decorate([
+    ApiPropertyOptional({
+        example: ["client_credentials", "authorization_code", "refresh_token"],
+        description: "On creation, defaults to authorization_code and refresh_token for shared clients; client_credentials for workload/platform clients. Omission during updates preserves the stored policy."
+    }),
+    IsArray(),
+    IsNotEmpty(),
+    IsOptional(),
+    __metadata("design:type", Array)
+], ClientDto.prototype, "grants", void 0);
+__decorate([
+    ApiProperty({ example: ["https://example.com/callback"] }),
+    IsArray(),
+    __metadata("design:type", Array)
+], ClientDto.prototype, "redirectUris", void 0);
+export class CreateClientDto extends OmitType(ClientDto, ["id"]) {
+}
+export class UpdateClientDto extends PartialType(OmitType(ClientDto, ["id"])) {
+}

package/dist/vendor/sso-bridge-dtos/grants.d.ts

@@ -0,0 +1,4 @@
+export type GrantType = "authorization_code" | "refresh_token" | "client_credentials" | "password";
+export type ClientAuthMethod = "client_secret_post" | "private_key_jwt" | "none";
+export type ClientKind = "shared" | "workload" | "platform";
+export declare function getDefaultClientGrants(kind: ClientKind): GrantType[];

package/dist/vendor/sso-bridge-dtos/grants.js

@@ -0,0 +1,7 @@
+export function getDefaultClientGrants(kind) {
+    if (kind === "shared")
+        return ["authorization_code", "refresh_token"];
+    if (kind === "workload" || kind === "platform")
+        return ["client_credentials"];
+    throw new Error("Explicit valid client kind required");
+}

package/dist/vendor/sso-bridge-dtos/index.d.ts

@@ -0,0 +1,5 @@
+import "reflect-metadata";
+export * from "./clients.dto.js";
+export * from "./grants.js";
+export * from "./tenant.dto.js";
+export * from "./users.dto.js";

package/dist/vendor/sso-bridge-dtos/index.js

@@ -0,0 +1,5 @@
+import "reflect-metadata";
+export * from "./clients.dto.js";
+export * from "./grants.js";
+export * from "./tenant.dto.js";
+export * from "./users.dto.js";

package/dist/vendor/sso-bridge-dtos/tenant.dto.d.ts

@@ -0,0 +1,70 @@
+import type { EnsureTenantRequest, PrincipalRef, TenantProvisioningResult, TenantRole, TenantState } from "../tenant-dtos/index.js";
+import type { CreateClientDto } from "./clients.dto.js";
+export interface SsoServiceBinding {
+    serviceInstanceId: string;
+    audience: string;
+    localTenantSlug?: string;
+}
+export interface SsoTenantConfiguration {
+    services: SsoServiceBinding[];
+    /** Workload credentials only. Global browser/platform clients are operator-controlled. */
+    clients: CreateClientDto[];
+}
+export type EnsureSsoTenantRequest = EnsureTenantRequest<SsoTenantConfiguration>;
+export type SsoTenantProvisioningResult = TenantProvisioningResult<{
+    issuer: string;
+    clientIds: string[];
+}> & {
+    appliedLifecycleRevision: number;
+};
+export interface SsoTenantSummary {
+    id: string;
+    slug: string;
+    name: string;
+    permissions: string[];
+}
+export interface SsoTenantMembershipSummary {
+    tenantId: string;
+    name: string;
+    slug: string;
+    role: TenantRole;
+    status: "active" | "revoked";
+    tenantState: TenantState;
+    authorizationStatus: "current" | "stale";
+}
+export interface SsoPlatformTenantSummary {
+    id: string;
+    name: string;
+    slug: string;
+    state: TenantState;
+    memberCount: number;
+    authorizationStatus: "current" | "stale" | "unavailable";
+}
+export interface ResolveSsoAccountRequest {
+    principal: PrincipalRef;
+}
+export interface SsoAccountSummary {
+    principal: PrincipalRef;
+    name: string;
+}
+export interface LookupSsoAccountRequest {
+    username: string;
+}
+export interface BootstrapSsoAccountRequest {
+    operationId: string;
+    tenantId: string;
+    userId: string;
+    username: string;
+    email: string;
+}
+export interface BootstrapSsoAccountResult {
+    principal: PrincipalRef;
+    setupPending: boolean;
+    notificationSent: boolean;
+}
+export interface SsoAccountSetupLink {
+    /** Present only when email delivery is disabled. */
+    url?: string;
+    expiresAt: number;
+    notificationSent: boolean;
+}

package/dist/vendor/sso-bridge-dtos/tenant.dto.js

@@ -0,0 +1 @@
+export {};

package/dist/vendor/sso-bridge-dtos/users.dto.d.ts

@@ -0,0 +1,42 @@
+import { GrantType } from "./grants.js";
+export declare class UserDto {
+    platformAdministrator?: boolean;
+    id?: string;
+    username: string;
+    email: string;
+    permissions: string[];
+    grants: GrantType[];
+    require2FA?: boolean;
+}
+export declare class UserWithPasswordDto extends UserDto {
+    password?: string;
+}
+declare const CreateUserDto_base: import("@nestjs/common").Type<Omit<UserWithPasswordDto, "id">>;
+export declare class CreateUserDto extends CreateUserDto_base {
+}
+declare const UpdateUserDto_base: import("@nestjs/common").Type<Partial<Omit<UserWithPasswordDto, "id">>>;
+export declare class UpdateUserDto extends UpdateUserDto_base {
+}
+export declare class ChangePasswordDto {
+    currentPassword: string;
+    newPassword: string;
+}
+export declare class BootstrapSsoAccountDto {
+    operationId: string;
+    tenantId: string;
+    userId: string;
+    username: string;
+    email: string;
+}
+export declare class ResolveSsoAccountDto {
+    issuer: string;
+    subject: string;
+}
+export declare class SetupLinkRequestDto {
+    tenantId: string;
+}
+export declare class SetupAccountDto {
+    token: string;
+    newPassword: string;
+}
+export {};