@xemahq/authorization-internal-api-client 0.9.1 → 0.9.3

package/dist/endpoints/durable-delegations/durable-delegations.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { CreateDurableDelegationDto, DurableDelegationDtoDataEnvelope } from '../../models';
+export declare const getDurableDelegationsControllerCreateUrl: () => string;
+/**
+ * @summary Lend a holder durable authority, owned by a user, team or org (C1–C6)
+ */
+export declare const durableDelegationsControllerCreate: (createDurableDelegationDto: CreateDurableDelegationDto, options?: RequestInit) => Promise<DurableDelegationDtoDataEnvelope>;
+export declare const getDurableDelegationsControllerRevokeUrl: (id: string) => string;
+/**
+ * @summary Revoke a durable delegation (terminal; the PDP denies from the commit)
+ */
+export declare const durableDelegationsControllerRevoke: (id: string, options?: RequestInit) => Promise<DurableDelegationDtoDataEnvelope>;
+export declare const getDurableDelegationsHolderControllerReadUrl: (id: string) => string;
+/**
+ * @summary Read a durable delegation this workload holds
+ */
+export declare const durableDelegationsHolderControllerRead: (id: string, options?: RequestInit) => Promise<DurableDelegationDtoDataEnvelope>;
+export declare const getDurableDelegationsHolderControllerRevokeUrl: (id: string) => string;
+/**
+ * @summary Stop a durable delegation this workload holds
+ */
+export declare const durableDelegationsHolderControllerRevoke: (id: string, options?: RequestInit) => Promise<DurableDelegationDtoDataEnvelope>;

package/dist/endpoints/durable-delegations/durable-delegations.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.durableDelegationsHolderControllerRevoke = exports.getDurableDelegationsHolderControllerRevokeUrl = exports.durableDelegationsHolderControllerRead = exports.getDurableDelegationsHolderControllerReadUrl = exports.durableDelegationsControllerRevoke = exports.getDurableDelegationsControllerRevokeUrl = exports.durableDelegationsControllerCreate = exports.getDurableDelegationsControllerCreateUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getDurableDelegationsControllerCreateUrl = () => {
+    return `/durable-delegations`;
+};
+exports.getDurableDelegationsControllerCreateUrl = getDurableDelegationsControllerCreateUrl;
+/**
+ * @summary Lend a holder durable authority, owned by a user, team or org (C1–C6)
+ */
+const durableDelegationsControllerCreate = async (createDurableDelegationDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getDurableDelegationsControllerCreateUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(createDurableDelegationDto)
+    });
+};
+exports.durableDelegationsControllerCreate = durableDelegationsControllerCreate;
+const getDurableDelegationsControllerRevokeUrl = (id) => {
+    return `/durable-delegations/${id}/revoke`;
+};
+exports.getDurableDelegationsControllerRevokeUrl = getDurableDelegationsControllerRevokeUrl;
+/**
+ * @summary Revoke a durable delegation (terminal; the PDP denies from the commit)
+ */
+const durableDelegationsControllerRevoke = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getDurableDelegationsControllerRevokeUrl)(id), {
+        ...options,
+        method: 'POST'
+    });
+};
+exports.durableDelegationsControllerRevoke = durableDelegationsControllerRevoke;
+const getDurableDelegationsHolderControllerReadUrl = (id) => {
+    return `/internal/durable-delegations/${id}`;
+};
+exports.getDurableDelegationsHolderControllerReadUrl = getDurableDelegationsHolderControllerReadUrl;
+/**
+ * @summary Read a durable delegation this workload holds
+ */
+const durableDelegationsHolderControllerRead = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getDurableDelegationsHolderControllerReadUrl)(id), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.durableDelegationsHolderControllerRead = durableDelegationsHolderControllerRead;
+const getDurableDelegationsHolderControllerRevokeUrl = (id) => {
+    return `/internal/durable-delegations/${id}/revoke`;
+};
+exports.getDurableDelegationsHolderControllerRevokeUrl = getDurableDelegationsHolderControllerRevokeUrl;
+/**
+ * @summary Stop a durable delegation this workload holds
+ */
+const durableDelegationsHolderControllerRevoke = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getDurableDelegationsHolderControllerRevokeUrl)(id), {
+        ...options,
+        method: 'POST'
+    });
+};
+exports.durableDelegationsHolderControllerRevoke = durableDelegationsHolderControllerRevoke;

package/dist/endpoints/facts/facts.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { FactsWriterCheckRequestDto, FactsWriterCheckResponseDtoDataEnvelope } from '../../models';
+export declare const getFactsWriterControllerCheckUrl: () => string;
+/**
+ * @summary Whether a service writes the facts of an authorization type
+ */
+export declare const factsWriterControllerCheck: (factsWriterCheckRequestDto: FactsWriterCheckRequestDto, options?: RequestInit) => Promise<FactsWriterCheckResponseDtoDataEnvelope>;

package/dist/endpoints/facts/facts.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.factsWriterControllerCheck = exports.getFactsWriterControllerCheckUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getFactsWriterControllerCheckUrl = () => {
+    return `/internal/facts/writers/check`;
+};
+exports.getFactsWriterControllerCheckUrl = getFactsWriterControllerCheckUrl;
+/**
+ * @summary Whether a service writes the facts of an authorization type
+ */
+const factsWriterControllerCheck = async (factsWriterCheckRequestDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getFactsWriterControllerCheckUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(factsWriterCheckRequestDto)
+    });
+};
+exports.factsWriterControllerCheck = factsWriterControllerCheck;

package/dist/index.d.ts

@@ -7,7 +7,9 @@ export * from './endpoints/capability-authority-requests/capability-authority-re
 export * from './endpoints/contribution-sync/contribution-sync';
 export * from './endpoints/credential-defaults/credential-defaults';
 export * from './endpoints/describe-objects/describe-objects';
+export * from './endpoints/durable-delegations/durable-delegations';
 export * from './endpoints/environments/environments';
+export * from './endpoints/facts/facts';
 export * from './endpoints/grants/grants';
 export * from './endpoints/org-erasure/org-erasure';
 export * from './endpoints/output-routes/output-routes';

package/dist/index.js

@@ -29,7 +29,9 @@ __exportStar(require("./endpoints/capability-authority-requests/capability-autho
 __exportStar(require("./endpoints/contribution-sync/contribution-sync"), exports);
 __exportStar(require("./endpoints/credential-defaults/credential-defaults"), exports);
 __exportStar(require("./endpoints/describe-objects/describe-objects"), exports);
+__exportStar(require("./endpoints/durable-delegations/durable-delegations"), exports);
 __exportStar(require("./endpoints/environments/environments"), exports);
+__exportStar(require("./endpoints/facts/facts"), exports);
 __exportStar(require("./endpoints/grants/grants"), exports);
 __exportStar(require("./endpoints/org-erasure/org-erasure"), exports);
 __exportStar(require("./endpoints/output-routes/output-routes"), exports);

package/dist/models/createDurableDelegationDto.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { DurableDelegationOwnerDto } from './durableDelegationOwnerDto.js';
+export interface CreateDurableDelegationDto {
+    /**
+       * Only a composed member attested as this may present the carrier.
+       * @minLength 1
+       */
+    holderMember?: string;
+    /** Optional tighten-only ceiling. Absent ⇒ none: revocation and the per-use re-check end it. */
+    expiresAt?: string;
+    owner: DurableDelegationOwnerDto;
+    /**
+       * Opaque scope refs, e.g. `integration:jira-42`, `project:P`.
+       * @minItems 1
+       */
+    scope: string[];
+    /**
+       * The exact capabilities lent; each must be declared `delegable: true`.
+       * @minItems 1
+       */
+    capabilities: string[];
+    /**
+       * The `xema_integration` instance (unqualified id) the work serves.
+       * @minLength 1
+       */
+    integrationId: string;
+    /**
+       * `environment:<slug>` the work runs in.
+       * @minLength 1
+       */
+    environmentId: string;
+    /**
+       * The holder's idempotency key: a retry resumes the same delegation.
+       * @minLength 1
+       */
+    requestKey: string;
+}

package/dist/models/createDurableDelegationDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/durableDelegationDenialDto.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+export interface DurableDelegationDenialDto {
+    at: string;
+    /** The use check that failed (`U4_OWNER_HOLDS_RIGHT_NOW`, …). */
+    check: string;
+    right: string;
+    scope: string;
+}

package/dist/models/durableDelegationDenialDto.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/durableDelegationDto.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { DurableDelegationDenialDto } from './durableDelegationDenialDto.js';
+import type { DurableDelegationEndReason } from './durableDelegationEndReason.js';
+import type { DurableDelegationOwnerDto } from './durableDelegationOwnerDto.js';
+import type { DurableDelegationState } from './durableDelegationState.js';
+export interface DurableDelegationDto {
+    state: DurableDelegationState;
+    endReason?: DurableDelegationEndReason;
+    owner: DurableDelegationOwnerDto;
+    /**
+       * The identity-api carrier the HOLDER mints contexts from. Absent while
+       * ACTIVE ⇒ under-access: nothing can act until a retry provisions it.
+       */
+    carrierId?: string;
+    expiresAt?: string;
+    /** The last use denial (non-terminal), for the integration's status line. */
+    lastDenial?: DurableDelegationDenialDto;
+    id: string;
+    scope: string[];
+    capabilities: string[];
+    integrationId: string;
+    environmentId: string;
+    holderWorkload: string;
+}

package/dist/models/durableDelegationDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/durableDelegationDtoDataEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { DurableDelegationDto } from './durableDelegationDto.js';
+export interface DurableDelegationDtoDataEnvelope {
+    data: DurableDelegationDto;
+}

package/dist/models/durableDelegationDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/durableDelegationEndReason.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+export type DurableDelegationEndReason = typeof DurableDelegationEndReason[keyof typeof DurableDelegationEndReason];
+export declare const DurableDelegationEndReason: {
+    readonly EXPLICIT: "EXPLICIT";
+    readonly INTEGRATION_DISABLED: "INTEGRATION_DISABLED";
+    readonly INTEGRATION_DELETED: "INTEGRATION_DELETED";
+    readonly OWNER_DELETED: "OWNER_DELETED";
+    readonly EXPIRED: "EXPIRED";
+};

package/dist/models/durableDelegationEndReason.js

@@ -0,0 +1,15 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DurableDelegationEndReason = void 0;
+exports.DurableDelegationEndReason = {
+    EXPLICIT: 'EXPLICIT',
+    INTEGRATION_DISABLED: 'INTEGRATION_DISABLED',
+    INTEGRATION_DELETED: 'INTEGRATION_DELETED',
+    OWNER_DELETED: 'OWNER_DELETED',
+    EXPIRED: 'EXPIRED',
+};

package/dist/models/durableDelegationOwnerDto.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { DurableDelegationOwnerKind } from './durableDelegationOwnerKind.js';
+export interface DurableDelegationOwnerDto {
+    kind: DurableDelegationOwnerKind;
+    /**
+       * The user principal id, the team id, or the organization id.
+       * @minLength 1
+       */
+    id: string;
+}

package/dist/models/durableDelegationOwnerDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/durableDelegationOwnerKind.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+export type DurableDelegationOwnerKind = typeof DurableDelegationOwnerKind[keyof typeof DurableDelegationOwnerKind];
+export declare const DurableDelegationOwnerKind: {
+    readonly USER: "USER";
+    readonly TEAM: "TEAM";
+    readonly ORG: "ORG";
+};

package/dist/models/durableDelegationOwnerKind.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DurableDelegationOwnerKind = void 0;
+exports.DurableDelegationOwnerKind = {
+    USER: 'USER',
+    TEAM: 'TEAM',
+    ORG: 'ORG',
+};

package/dist/models/durableDelegationState.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+export type DurableDelegationState = typeof DurableDelegationState[keyof typeof DurableDelegationState];
+export declare const DurableDelegationState: {
+    readonly PROVISIONING: "PROVISIONING";
+    readonly ACTIVE: "ACTIVE";
+    readonly REVOKED: "REVOKED";
+    readonly EXPIRED: "EXPIRED";
+};

package/dist/models/durableDelegationState.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DurableDelegationState = void 0;
+exports.DurableDelegationState = {
+    PROVISIONING: 'PROVISIONING',
+    ACTIVE: 'ACTIVE',
+    REVOKED: 'REVOKED',
+    EXPIRED: 'EXPIRED',
+};

package/dist/models/factsWriterCheckRequestDto.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+export interface FactsWriterCheckRequestDto {
+    /**
+       * The authorization type whose facts writer is asked about (for example `xema_document`).
+       * @minLength 1
+       * @maxLength 256
+       */
+    objectType: string;
+    /**
+       * The service name (the verified caller of the asking service).
+       * @minLength 1
+       * @maxLength 256
+       */
+    service: string;
+}

package/dist/models/factsWriterCheckRequestDto.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/factsWriterCheckResponseDto.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+export interface FactsWriterCheckResponseDto {
+    /** Whether the service is a signed component of the biome that writes this type's facts in the caller's organization. */
+    writes: boolean;
+}

package/dist/models/factsWriterCheckResponseDto.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/factsWriterCheckResponseDtoDataEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { FactsWriterCheckResponseDto } from './factsWriterCheckResponseDto.js';
+export interface FactsWriterCheckResponseDtoDataEnvelope {
+    data: FactsWriterCheckResponseDto;
+}

package/dist/models/factsWriterCheckResponseDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/index.d.ts

@@ -22,6 +22,7 @@ export * from './capabilityGrantDtoPaginatedEnvelope';
 export * from './capabilityGrantRelation';
 export * from './capabilityReach';
 export * from './capabilityRiskTier';
+export * from './createDurableDelegationDto';
 export * from './createExecutionEnvironmentDto';
 export * from './createExecutionEnvironmentDtoAllowedCapabilitiesItem';
 export * from './createExecutionEnvironmentDtoApprovalRulesItem';
@@ -38,6 +39,13 @@ export * from './credentialDefaultsControllerListParams';
 export * from './dataClassification';
 export * from './describeObjectsResponseDto';
 export * from './describeObjectsResponseDtoDataEnvelope';
+export * from './durableDelegationDenialDto';
+export * from './durableDelegationDto';
+export * from './durableDelegationDtoDataEnvelope';
+export * from './durableDelegationEndReason';
+export * from './durableDelegationOwnerDto';
+export * from './durableDelegationOwnerKind';
+export * from './durableDelegationState';
 export * from './environmentCeilingSource';
 export * from './environmentsControllerFindBySlugParams';
 export * from './environmentsControllerListParams';
@@ -66,6 +74,9 @@ export * from './executionEnvironmentResponseDtoDataArrayEnvelope';
 export * from './executionEnvironmentResponseDtoDataEnvelope';
 export * from './executionEnvironmentResponseDtoOrgId';
 export * from './executionEnvironmentResponseDtoRuntimeLimits';
+export * from './factsWriterCheckRequestDto';
+export * from './factsWriterCheckResponseDto';
+export * from './factsWriterCheckResponseDtoDataEnvelope';
 export * from './grantConstraintsDto';
 export * from './grantVersionResponseDto';
 export * from './grantVersionResponseDtoDataEnvelope';

package/dist/models/index.js

@@ -39,6 +39,7 @@ __exportStar(require("./capabilityGrantDtoPaginatedEnvelope"), exports);
 __exportStar(require("./capabilityGrantRelation"), exports);
 __exportStar(require("./capabilityReach"), exports);
 __exportStar(require("./capabilityRiskTier"), exports);
+__exportStar(require("./createDurableDelegationDto"), exports);
 __exportStar(require("./createExecutionEnvironmentDto"), exports);
 __exportStar(require("./createExecutionEnvironmentDtoAllowedCapabilitiesItem"), exports);
 __exportStar(require("./createExecutionEnvironmentDtoApprovalRulesItem"), exports);
@@ -55,6 +56,13 @@ __exportStar(require("./credentialDefaultsControllerListParams"), exports);
 __exportStar(require("./dataClassification"), exports);
 __exportStar(require("./describeObjectsResponseDto"), exports);
 __exportStar(require("./describeObjectsResponseDtoDataEnvelope"), exports);
+__exportStar(require("./durableDelegationDenialDto"), exports);
+__exportStar(require("./durableDelegationDto"), exports);
+__exportStar(require("./durableDelegationDtoDataEnvelope"), exports);
+__exportStar(require("./durableDelegationEndReason"), exports);
+__exportStar(require("./durableDelegationOwnerDto"), exports);
+__exportStar(require("./durableDelegationOwnerKind"), exports);
+__exportStar(require("./durableDelegationState"), exports);
 __exportStar(require("./environmentCeilingSource"), exports);
 __exportStar(require("./environmentsControllerFindBySlugParams"), exports);
 __exportStar(require("./environmentsControllerListParams"), exports);
@@ -83,6 +91,9 @@ __exportStar(require("./executionEnvironmentResponseDtoDataArrayEnvelope"), expo
 __exportStar(require("./executionEnvironmentResponseDtoDataEnvelope"), exports);
 __exportStar(require("./executionEnvironmentResponseDtoOrgId"), exports);
 __exportStar(require("./executionEnvironmentResponseDtoRuntimeLimits"), exports);
+__exportStar(require("./factsWriterCheckRequestDto"), exports);
+__exportStar(require("./factsWriterCheckResponseDto"), exports);
+__exportStar(require("./factsWriterCheckResponseDtoDataEnvelope"), exports);
 __exportStar(require("./grantConstraintsDto"), exports);
 __exportStar(require("./grantVersionResponseDto"), exports);
 __exportStar(require("./grantVersionResponseDtoDataEnvelope"), exports);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/authorization-internal-api-client",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [