@zincapp/znvault-cli 2.16.5 → 2.18.0

package/dist/lib/client/index.js

@@ -0,0 +1,172 @@
+// Path: src/lib/client/index.ts
+/**
+ * VaultClient facade
+ *
+ * This module provides backward compatibility by exposing all client methods
+ * through a single VaultClient class that delegates to domain-specific clients.
+ */
+import { HttpClient } from './http.js';
+import { HealthClient, ClusterClient } from './health.js';
+import { TenantsClient } from './tenants.js';
+import { UsersClient, SuperadminsClient } from './users.js';
+import { LockdownClient } from './lockdown.js';
+import { AuditClient } from './audit.js';
+import { ApiKeysClient } from './apikeys.js';
+import { ManagedKeysClient } from './managed-keys.js';
+import { PoliciesClient, PermissionsClient } from './policies.js';
+// Re-export domain clients for direct use
+export { HttpClient } from './http.js';
+export { HealthClient, ClusterClient } from './health.js';
+export { TenantsClient } from './tenants.js';
+export { UsersClient, SuperadminsClient } from './users.js';
+export { LockdownClient } from './lockdown.js';
+export { AuditClient } from './audit.js';
+export { ApiKeysClient } from './apikeys.js';
+export { ManagedKeysClient } from './managed-keys.js';
+export { PoliciesClient, PermissionsClient } from './policies.js';
+// Re-export types
+export * from './types.js';
+/**
+ * VaultClient - Unified facade for all vault API operations
+ *
+ * This class maintains backward compatibility with the original monolithic client
+ * while internally delegating to domain-specific client modules.
+ */
+export class VaultClient extends HttpClient {
+    // Domain clients (lazy initialized)
+    _healthClient;
+    _clusterClient;
+    _tenantsClient;
+    _usersClient;
+    _superadminsClient;
+    _lockdownClient;
+    _auditClient;
+    _apiKeysClient;
+    _managedKeysClient;
+    _policiesClient;
+    _permissionsClient;
+    // Lazy getters for domain clients
+    get healthClient() {
+        return this._healthClient ??= new HealthClient();
+    }
+    get clusterClient() {
+        return this._clusterClient ??= new ClusterClient();
+    }
+    get tenantsClient() {
+        return this._tenantsClient ??= new TenantsClient();
+    }
+    get usersClient() {
+        return this._usersClient ??= new UsersClient();
+    }
+    get superadminsClient() {
+        return this._superadminsClient ??= new SuperadminsClient();
+    }
+    get lockdownClient() {
+        return this._lockdownClient ??= new LockdownClient();
+    }
+    get auditClient() {
+        return this._auditClient ??= new AuditClient();
+    }
+    get apiKeysClient() {
+        return this._apiKeysClient ??= new ApiKeysClient();
+    }
+    get managedKeysClient() {
+        return this._managedKeysClient ??= new ManagedKeysClient();
+    }
+    get policiesClient() {
+        return this._policiesClient ??= new PoliciesClient();
+    }
+    get permissionsClient() {
+        return this._permissionsClient ??= new PermissionsClient();
+    }
+    // ============ Authentication (inherited from HttpClient) ============
+    async login(username, password, totp) {
+        return super.login(username, password, totp);
+    }
+    // ============ Health ============
+    health = () => this.healthClient.health();
+    leaderHealth = () => this.healthClient.leaderHealth();
+    // ============ Cluster ============
+    clusterStatus = () => this.clusterClient.status();
+    clusterTakeover = () => this.clusterClient.takeover();
+    clusterPromote = (nodeId) => this.clusterClient.promote(nodeId);
+    clusterRelease = () => this.clusterClient.release();
+    clusterMaintenance = (enable) => this.clusterClient.maintenance(enable);
+    // ============ Tenants ============
+    listTenants = (options) => this.tenantsClient.list(options);
+    createTenant = (data) => this.tenantsClient.create(data);
+    getTenant = (id, withUsage) => this.tenantsClient.getById(id, withUsage);
+    updateTenant = (id, data) => this.tenantsClient.update(id, data);
+    deleteTenant = (id) => this.tenantsClient.deleteById(id);
+    getTenantUsage = (id) => this.tenantsClient.getUsage(id);
+    // ============ Users ============
+    listUsers = (options) => this.usersClient.list(options);
+    createUser = (data) => this.usersClient.create(data);
+    getUser = (id) => this.usersClient.getById(id);
+    updateUser = (id, data) => this.usersClient.update(id, data);
+    deleteUser = (id) => this.usersClient.deleteById(id);
+    unlockUser = (id) => this.usersClient.unlock(id);
+    resetUserPassword = (id, newPassword) => this.usersClient.resetPassword(id, newPassword);
+    disableUserTotp = (id) => this.usersClient.disableTotp(id);
+    // ============ Superadmins ============
+    listSuperadmins = () => this.superadminsClient.list();
+    createSuperadmin = (data) => this.superadminsClient.create(data);
+    resetSuperadminPassword = (username, password) => this.superadminsClient.resetPassword(username, password);
+    unlockSuperadmin = (username) => this.superadminsClient.unlock(username);
+    disableSuperadmin = (username) => this.superadminsClient.disable(username);
+    enableSuperadmin = (username) => this.superadminsClient.enable(username);
+    // ============ Lockdown ============
+    getLockdownStatus = () => this.lockdownClient.getStatus();
+    triggerLockdown = (level, reason) => this.lockdownClient.trigger(level, reason);
+    clearLockdown = (reason) => this.lockdownClient.clear(reason);
+    getLockdownHistory = (limit) => this.lockdownClient.getHistory(limit);
+    getThreats = (options) => this.lockdownClient.getThreats(options);
+    // ============ Audit ============
+    listAudit = (options) => this.auditClient.list(options);
+    verifyAuditChain = () => this.auditClient.verifyChain();
+    exportAudit = (options) => this.auditClient.export(options);
+    // ============ API Keys ============
+    createApiKey = (data) => this.apiKeysClient.create(data);
+    listApiKeys = (tenantId) => this.apiKeysClient.list(tenantId);
+    getApiKey = (id, tenantId) => this.apiKeysClient.getById(id, tenantId);
+    deleteApiKey = (id, tenantId) => this.apiKeysClient.deleteById(id, tenantId);
+    rotateApiKey = (id, name, tenantId) => this.apiKeysClient.rotate(id, name, tenantId);
+    updateApiKeyPermissions = (id, permissions, tenantId) => this.apiKeysClient.updatePermissions(id, permissions, tenantId);
+    updateApiKeyConditions = (id, conditions, tenantId) => this.apiKeysClient.updateConditions(id, conditions, tenantId);
+    setApiKeyEnabled = (id, enabled, tenantId) => this.apiKeysClient.setEnabled(id, enabled, tenantId);
+    getApiKeyPolicies = (id, tenantId) => this.apiKeysClient.getPolicies(id, tenantId);
+    attachApiKeyPolicy = (keyId, policyId, tenantId) => this.apiKeysClient.attachPolicy(keyId, policyId, tenantId);
+    detachApiKeyPolicy = (keyId, policyId, tenantId) => this.apiKeysClient.detachPolicy(keyId, policyId, tenantId);
+    getApiKeySelf = () => this.apiKeysClient.getSelf();
+    rotateApiKeySelf = (name) => this.apiKeysClient.rotateSelf(name);
+    // ============ Managed API Keys ============
+    createManagedApiKey = (data) => this.managedKeysClient.create(data);
+    listManagedApiKeys = (tenantId) => this.managedKeysClient.list(tenantId);
+    getManagedApiKey = (name, tenantId) => this.managedKeysClient.getByName(name, tenantId);
+    bindManagedApiKey = (name, tenantId) => this.managedKeysClient.bind(name, tenantId);
+    rotateManagedApiKey = (name, tenantId) => this.managedKeysClient.rotate(name, tenantId);
+    updateManagedApiKeyConfig = (name, config, tenantId) => this.managedKeysClient.updateConfig(name, config, tenantId);
+    deleteManagedApiKey = (name, tenantId) => this.managedKeysClient.deleteByName(name, tenantId);
+    // ============ Permissions ============
+    getPermissions = (category) => this.permissionsClient.list(category);
+    validatePermissions = (permissions) => this.permissionsClient.validate(permissions);
+    // ============ ABAC Policies ============
+    listPolicies = (options) => this.policiesClient.list(options);
+    getPolicy = (id) => this.policiesClient.getById(id);
+    createPolicy = (data) => this.policiesClient.create(data);
+    updatePolicy = (id, data) => this.policiesClient.update(id, data);
+    deletePolicy = (id) => this.policiesClient.deleteById(id);
+    togglePolicy = (id, enabled) => this.policiesClient.toggle(id, enabled);
+    validatePolicy = (policy) => this.policiesClient.validate(policy);
+    getPolicyAttachments = (policyId) => this.policiesClient.getAttachments(policyId);
+    attachPolicyToUser = (policyId, userId) => this.policiesClient.attachToUser(policyId, userId);
+    attachPolicyToRole = (policyId, roleId) => this.policiesClient.attachToRole(policyId, roleId);
+    detachPolicyFromUser = (policyId, userId) => this.policiesClient.detachFromUser(policyId, userId);
+    detachPolicyFromRole = (policyId, roleId) => this.policiesClient.detachFromRole(policyId, roleId);
+    getUserPolicies = (userId) => this.policiesClient.getUserPolicies(userId);
+    getRolePolicies = (roleId) => this.policiesClient.getRolePolicies(roleId);
+    testPolicy = (request) => this.policiesClient.test(request);
+}
+// Export singleton instance for backward compatibility
+export const client = new VaultClient();
+//# sourceMappingURL=index.js.map

package/dist/lib/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/client/index.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAEhC;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAKlE,0CAA0C;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElE,kBAAkB;AAClB,cAAc,YAAY,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,OAAO,WAAY,SAAQ,UAAU;IACzC,oCAAoC;IAC5B,aAAa,CAAgB;IAC7B,cAAc,CAAiB;IAC/B,cAAc,CAAiB;IAC/B,YAAY,CAAe;IAC3B,kBAAkB,CAAqB;IACvC,eAAe,CAAkB;IACjC,YAAY,CAAe;IAC3B,cAAc,CAAiB;IAC/B,kBAAkB,CAAqB;IACvC,eAAe,CAAkB;IACjC,kBAAkB,CAAqB;IAE/C,kCAAkC;IAClC,IAAY,YAAY;QACtB,OAAO,IAAI,CAAC,aAAa,KAAK,IAAI,YAAY,EAAE,CAAC;IACnD,CAAC;IAED,IAAY,aAAa;QACvB,OAAO,IAAI,CAAC,cAAc,KAAK,IAAI,aAAa,EAAE,CAAC;IACrD,CAAC;IAED,IAAY,aAAa;QACvB,OAAO,IAAI,CAAC,cAAc,KAAK,IAAI,aAAa,EAAE,CAAC;IACrD,CAAC;IAED,IAAY,WAAW;QACrB,OAAO,IAAI,CAAC,YAAY,KAAK,IAAI,WAAW,EAAE,CAAC;IACjD,CAAC;IAED,IAAY,iBAAiB;QAC3B,OAAO,IAAI,CAAC,kBAAkB,KAAK,IAAI,iBAAiB,EAAE,CAAC;IAC7D,CAAC;IAED,IAAY,cAAc;QACxB,OAAO,IAAI,CAAC,eAAe,KAAK,IAAI,cAAc,EAAE,CAAC;IACvD,CAAC;IAED,IAAY,WAAW;QACrB,OAAO,IAAI,CAAC,YAAY,KAAK,IAAI,WAAW,EAAE,CAAC;IACjD,CAAC;IAED,IAAY,aAAa;QACvB,OAAO,IAAI,CAAC,cAAc,KAAK,IAAI,aAAa,EAAE,CAAC;IACrD,CAAC;IAED,IAAY,iBAAiB;QAC3B,OAAO,IAAI,CAAC,kBAAkB,KAAK,IAAI,iBAAiB,EAAE,CAAC;IAC7D,CAAC;IAED,IAAY,cAAc;QACxB,OAAO,IAAI,CAAC,eAAe,KAAK,IAAI,cAAc,EAAE,CAAC;IACvD,CAAC;IAED,IAAY,iBAAiB;QAC3B,OAAO,IAAI,CAAC,kBAAkB,KAAK,IAAI,iBAAiB,EAAE,CAAC;IAC7D,CAAC;IAED,uEAAuE;IAE9D,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,QAAgB,EAAE,IAAa;QACpE,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,mCAAmC;IAEnC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;IAC1C,YAAY,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;IAEtD,oCAAoC;IAEpC,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;IAClD,eAAe,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;IACtD,cAAc,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxE,cAAc,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;IACpD,kBAAkB,GAAG,CAAC,MAAe,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAEjF,oCAAoC;IAEpC,WAAW,GAAG,CAAC,OAA8C,EAAE,EAAE,CAC/D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,YAAY,GAAG,CAAC,IAA4C,EAAE,EAAE,CAC9D,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,SAAS,GAAG,CAAC,EAAU,EAAE,SAAmB,EAAE,EAAE,CAC9C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC5C,YAAY,GAAG,CAAC,EAAU,EAAE,IAA4C,EAAE,EAAE,CAC1E,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACtC,YAAY,GAAG,CAAC,EAAU,EAAE,EAAE,CAC5B,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACpC,cAAc,GAAG,CAAC,EAAU,EAAE,EAAE,CAC9B,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAElC,kCAAkC;IAElC,SAAS,GAAG,CAAC,OAA4C,EAAE,EAAE,CAC3D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,UAAU,GAAG,CAAC,IAA0C,EAAE,EAAE,CAC1D,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC,EAAU,EAAE,EAAE,CACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,UAAU,GAAG,CAAC,EAAU,EAAE,IAA0C,EAAE,EAAE,CACtE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpC,UAAU,GAAG,CAAC,EAAU,EAAE,EAAE,CAC1B,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAClC,UAAU,GAAG,CAAC,EAAU,EAAE,EAAE,CAC1B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9B,iBAAiB,GAAG,CAAC,EAAU,EAAE,WAAmB,EAAE,EAAE,CACtD,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAClD,eAAe,GAAG,CAAC,EAAU,EAAE,EAAE,CAC/B,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAEnC,wCAAwC;IAExC,eAAe,GAAG,GAAG,EAAE,CACrB,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IAChC,gBAAgB,GAAG,CAAC,IAAgD,EAAE,EAAE,CACtE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,uBAAuB,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAE,EAAE,CAC/D,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3D,gBAAgB,GAAG,CAAC,QAAgB,EAAE,EAAE,CACtC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,iBAAiB,GAAG,CAAC,QAAgB,EAAE,EAAE,CACvC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,gBAAgB,GAAG,CAAC,QAAgB,EAAE,EAAE,CACtC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE1C,qCAAqC;IAErC,iBAAiB,GAAG,GAAG,EAAE,CACvB,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;IAClC,eAAe,GAAG,CAAC,KAAoB,EAAE,MAAc,EAAE,EAAE,CACzD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7C,aAAa,GAAG,CAAC,MAAc,EAAE,EAAE,CACjC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,kBAAkB,GAAG,CAAC,KAAc,EAAE,EAAE,CACtC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACxC,UAAU,GAAG,CAAC,OAAqD,EAAE,EAAE,CACrE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAE1C,kCAAkC;IAElC,SAAS,GAAG,CAAC,OAA4C,EAAE,EAAE,CAC3D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,gBAAgB,GAAG,GAAG,EAAE,CACtB,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;IACjC,WAAW,GAAG,CAAC,OAA8C,EAAE,EAAE,CAC/D,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnC,qCAAqC;IAErC,YAAY,GAAG,CAAC,IAA4C,EAAE,EAAE,CAC9D,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,WAAW,GAAG,CAAC,QAAiB,EAAE,EAAE,CAClC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,SAAS,GAAG,CAAC,EAAU,EAAE,QAAiB,EAAE,EAAE,CAC5C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC3C,YAAY,GAAG,CAAC,EAAU,EAAE,QAAiB,EAAE,EAAE,CAC/C,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9C,YAAY,GAAG,CAAC,EAAU,EAAE,IAAa,EAAE,QAAiB,EAAE,EAAE,CAC9D,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,uBAAuB,GAAG,CAAC,EAAU,EAAE,WAAqB,EAAE,QAAiB,EAAE,EAAE,CACjF,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClE,sBAAsB,GAAG,CAAC,EAAU,EAAE,UAAmC,EAAE,QAAiB,EAAE,EAAE,CAC9F,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAChE,gBAAgB,GAAG,CAAC,EAAU,EAAE,OAAgB,EAAE,QAAiB,EAAE,EAAE,CACrE,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvD,iBAAiB,GAAG,CAAC,EAAU,EAAE,QAAiB,EAAE,EAAE,CACpD,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC/C,kBAAkB,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAE,QAAiB,EAAE,EAAE,CAC1E,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,kBAAkB,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAE,QAAiB,EAAE,EAAE,CAC1E,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,aAAa,GAAG,GAAG,EAAE,CACnB,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;IAC/B,gBAAgB,GAAG,CAAC,IAAa,EAAE,EAAE,CACnC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAEtC,6CAA6C;IAE7C,mBAAmB,GAAG,CAAC,IAAgD,EAAE,EAAE,CACzE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,kBAAkB,GAAG,CAAC,QAAiB,EAAE,EAAE,CACzC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,gBAAgB,GAAG,CAAC,IAAY,EAAE,QAAiB,EAAE,EAAE,CACrD,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnD,iBAAiB,GAAG,CAAC,IAAY,EAAE,QAAiB,EAAE,EAAE,CACtD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,mBAAmB,GAAG,CAAC,IAAY,EAAE,QAAiB,EAAE,EAAE,CACxD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,yBAAyB,GAAG,CAC1B,IAAY,EACZ,MAAwD,EACxD,QAAiB,EACjB,EAAE,CACF,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9D,mBAAmB,GAAG,CAAC,IAAY,EAAE,QAAiB,EAAE,EAAE,CACxD,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEtD,wCAAwC;IAExC,cAAc,GAAG,CAAC,QAAiB,EAAE,EAAE,CACrC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,mBAAmB,GAAG,CAAC,WAAqB,EAAE,EAAE,CAC9C,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE/C,0CAA0C;IAE1C,YAAY,GAAG,CAAC,OAA+C,EAAE,EAAE,CACjE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,SAAS,GAAG,CAAC,EAAU,EAAE,EAAE,CACzB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClC,YAAY,GAAG,CAAC,IAA6C,EAAE,EAAE,CAC/D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnC,YAAY,GAAG,CAAC,EAAU,EAAE,IAA6C,EAAE,EAAE,CAC3E,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACvC,YAAY,GAAG,CAAC,EAAU,EAAE,EAAE,CAC5B,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACrC,YAAY,GAAG,CAAC,EAAU,EAAE,OAAgB,EAAE,EAAE,CAC9C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1C,cAAc,GAAG,CAAC,MAAiD,EAAE,EAAE,CACrE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,oBAAoB,GAAG,CAAC,QAAgB,EAAE,EAAE,CAC1C,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC/C,kBAAkB,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAE,EAAE,CACxD,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrD,kBAAkB,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAE,EAAE,CACxD,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrD,oBAAoB,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAE,EAAE,CAC1D,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvD,oBAAoB,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAE,EAAE,CAC1D,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvD,eAAe,GAAG,CAAC,MAAc,EAAE,EAAE,CACnC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9C,eAAe,GAAG,CAAC,MAAc,EAAE,EAAE,CACnC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9C,UAAU,GAAG,CAAC,OAA8C,EAAE,EAAE,CAC9D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;CACrC;AAED,uDAAuD;AACvD,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC"}

package/dist/lib/client/lockdown.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Lockdown and threat management client
+ */
+import { HttpClient } from './http.js';
+import type { LockdownStatus, ThreatEvent, LockdownHistoryEntry } from '../../types/index.js';
+export declare class LockdownClient extends HttpClient {
+    getStatus(): Promise<LockdownStatus>;
+    trigger(level: 1 | 2 | 3 | 4, reason: string): Promise<{
+        success: boolean;
+        status: string;
+    }>;
+    clear(reason: string): Promise<{
+        success: boolean;
+        previousStatus: string;
+    }>;
+    getHistory(limit?: number): Promise<LockdownHistoryEntry[]>;
+    getThreats(options?: {
+        category?: string;
+        since?: string;
+        limit?: number;
+    }): Promise<ThreatEvent[]>;
+}
+//# sourceMappingURL=lockdown.d.ts.map

package/dist/lib/client/lockdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockdown.d.ts","sourceRoot":"","sources":["../../../src/lib/client/lockdown.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EACX,oBAAoB,EAErB,MAAM,sBAAsB,CAAC;AAE9B,qBAAa,cAAe,SAAQ,UAAU;IACtC,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC;IAOpC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAQ5F,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAQ5E,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAS3D,UAAU,CAAC,OAAO,CAAC,EAAE;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;CAY3B"}

package/dist/lib/client/lockdown.js

@@ -0,0 +1,48 @@
+// Path: src/lib/client/lockdown.ts
+/**
+ * Lockdown and threat management client
+ */
+import { HttpClient } from './http.js';
+export class LockdownClient extends HttpClient {
+    async getStatus() {
+        return this.request({
+            method: 'GET',
+            path: '/v1/admin/lockdown/status',
+        });
+    }
+    async trigger(level, reason) {
+        return this.request({
+            method: 'POST',
+            path: '/v1/admin/lockdown/trigger',
+            body: { level, reason },
+        });
+    }
+    async clear(reason) {
+        return this.request({
+            method: 'POST',
+            path: '/v1/admin/lockdown/clear',
+            body: { reason },
+        });
+    }
+    async getHistory(limit) {
+        const response = await this.request({
+            method: 'GET',
+            path: '/v1/admin/lockdown/history',
+            query: { limit: limit ?? 50 },
+        });
+        return response.items;
+    }
+    async getThreats(options) {
+        const response = await this.request({
+            method: 'GET',
+            path: '/v1/admin/lockdown/threats',
+            query: {
+                category: options?.category,
+                since: options?.since,
+                limit: options?.limit ?? 100,
+            },
+        });
+        return response.items;
+    }
+}
+//# sourceMappingURL=lockdown.js.map

package/dist/lib/client/lockdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockdown.js","sourceRoot":"","sources":["../../../src/lib/client/lockdown.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAQvC,MAAM,OAAO,cAAe,SAAQ,UAAU;IAC5C,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,OAAO,CAAiB;YAClC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,2BAA2B;SAClC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAoB,EAAE,MAAc;QAChD,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,4BAA4B;YAClC,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAc;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,0BAA0B;YAChC,IAAI,EAAE,EAAE,MAAM,EAAE;SACjB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAc;QAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAA0C;YAC3E,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,4BAA4B;YAClC,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE;SAC9B,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAIhB;QACC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAiC;YAClE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,4BAA4B;YAClC,KAAK,EAAE;gBACL,QAAQ,EAAE,OAAO,EAAE,QAAQ;gBAC3B,KAAK,EAAE,OAAO,EAAE,KAAK;gBACrB,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG;aAC7B;SACF,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;CACF"}

package/dist/lib/client/managed-keys.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Managed API Key client
+ */
+import { HttpClient } from './http.js';
+import type { ManagedAPIKey, ManagedKeyBindResponse, ManagedKeyListResponse, CreateManagedKeyRequest, CreateManagedKeyResponse, UpdateManagedKeyConfigRequest } from '../../types/index.js';
+export declare class ManagedKeysClient extends HttpClient {
+    create(data: CreateManagedKeyRequest): Promise<CreateManagedKeyResponse>;
+    list(tenantId?: string): Promise<ManagedKeyListResponse>;
+    getByName(name: string, tenantId?: string): Promise<ManagedAPIKey>;
+    bind(name: string, tenantId?: string): Promise<ManagedKeyBindResponse>;
+    rotate(name: string, tenantId?: string): Promise<{
+        message: string;
+        nextRotationAt?: string;
+    }>;
+    updateConfig(name: string, config: UpdateManagedKeyConfigRequest, tenantId?: string): Promise<ManagedAPIKey>;
+    deleteByName(name: string, tenantId?: string): Promise<void>;
+}
+//# sourceMappingURL=managed-keys.d.ts.map

package/dist/lib/client/managed-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-keys.d.ts","sourceRoot":"","sources":["../../../src/lib/client/managed-keys.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,KAAK,EACV,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,EAC9B,MAAM,sBAAsB,CAAC;AAqF9B,qBAAa,iBAAkB,SAAQ,UAAU;IACzC,MAAM,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAkDxE,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAkDxD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAqClE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAStE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAS9F,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,6BAA6B,EACrC,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,CAAC;IAsCnB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQnE"}

package/dist/lib/client/managed-keys.js

@@ -0,0 +1,190 @@
+// Path: src/lib/client/managed-keys.ts
+/**
+ * Managed API Key client
+ */
+import { HttpClient } from './http.js';
+import { formatSecondsToHuman } from '../format-helpers.js';
+export class ManagedKeysClient extends HttpClient {
+    async create(data) {
+        const response = await this.request({
+            method: 'POST',
+            path: '/auth/api-keys',
+            query: data.tenantId ? { tenantId: data.tenantId } : undefined,
+            body: {
+                name: data.name,
+                description: data.description,
+                expiresInDays: data.expiresInDays,
+                permissions: data.permissions,
+                ipAllowlist: data.ipAllowlist,
+                conditions: data.conditions,
+                managed: data.managed,
+            },
+        });
+        const serverKey = response.apiKey;
+        return {
+            apiKey: {
+                id: serverKey.id,
+                tenant_id: serverKey.tenant_id,
+                created_by: serverKey.created_by,
+                name: serverKey.name,
+                description: serverKey.description,
+                prefix: serverKey.prefix,
+                expires_at: serverKey.expires_at,
+                last_used: null,
+                created_at: serverKey.created_at,
+                ip_allowlist: null,
+                permissions: serverKey.permissions,
+                conditions: serverKey.conditions,
+                created_by_username: undefined,
+                enabled: serverKey.enabled,
+                rotation_count: serverKey.rotation_count,
+                last_rotation: serverKey.last_rotation,
+                is_managed: serverKey.is_managed,
+                rotation_mode: serverKey.rotation_mode,
+                rotation_interval: serverKey.rotation_interval_seconds
+                    ? formatSecondsToHuman(serverKey.rotation_interval_seconds)
+                    : undefined,
+                grace_period: formatSecondsToHuman(serverKey.grace_period_seconds),
+                notify_before: serverKey.notify_before,
+                webhook_url: serverKey.webhook_url,
+                next_rotation_at: serverKey.next_rotation_at,
+                last_bound_at: serverKey.last_bound_at,
+            },
+            message: response.message,
+        };
+    }
+    async list(tenantId) {
+        const response = await this.request({
+            method: 'GET',
+            path: '/auth/api-keys/managed',
+            query: tenantId ? { tenantId } : undefined,
+        });
+        return {
+            items: response.items.map(key => ({
+                id: key.id,
+                tenant_id: key.tenant_id,
+                created_by: key.created_by,
+                name: key.name,
+                description: key.description,
+                prefix: key.prefix,
+                expires_at: key.expires_at,
+                last_used: key.last_used,
+                created_at: key.created_at,
+                ip_allowlist: null,
+                permissions: key.permissions,
+                conditions: key.conditions,
+                created_by_username: key.created_by_username,
+                enabled: key.enabled,
+                rotation_count: key.rotation_count,
+                last_rotation: key.last_rotation,
+                is_managed: key.is_managed,
+                rotation_mode: key.rotation_mode,
+                rotation_interval: key.rotation_interval_seconds
+                    ? formatSecondsToHuman(key.rotation_interval_seconds)
+                    : undefined,
+                grace_period: formatSecondsToHuman(key.grace_period_seconds),
+                notify_before: key.notify_before,
+                webhook_url: key.rotation_webhook_url ?? undefined,
+                next_rotation_at: key.next_rotation_at,
+                last_bound_at: key.first_used_at ?? undefined,
+            })),
+            pagination: response.pagination,
+        };
+    }
+    async getByName(name, tenantId) {
+        const info = await this.request({
+            method: 'GET',
+            path: `/auth/api-keys/managed/${encodeURIComponent(name)}`,
+            query: tenantId ? { tenantId } : undefined,
+        });
+        return {
+            id: info.id,
+            tenant_id: info.tenantId,
+            created_by: info.createdBy ?? null,
+            name: info.name,
+            description: info.description ?? null,
+            prefix: info.prefix,
+            expires_at: info.expiresAt ?? '',
+            last_used: info.lastUsed ?? null,
+            created_at: info.createdAt ?? '',
+            ip_allowlist: null,
+            permissions: info.permissions,
+            conditions: undefined,
+            created_by_username: info.createdByUsername,
+            enabled: info.enabled,
+            rotation_count: info.rotationCount,
+            last_rotation: info.lastRotatedAt ?? null,
+            is_managed: info.isManaged,
+            rotation_mode: info.rotationMode,
+            rotation_interval: info.rotationIntervalSeconds
+                ? formatSecondsToHuman(info.rotationIntervalSeconds)
+                : undefined,
+            grace_period: formatSecondsToHuman(info.gracePeriodSeconds),
+            notify_before: info.notifyBefore,
+            webhook_url: info.webhookUrl,
+            next_rotation_at: info.nextRotationAt,
+            last_bound_at: info.lastBoundAt,
+        };
+    }
+    async bind(name, tenantId) {
+        return this.request({
+            method: 'POST',
+            path: `/auth/api-keys/managed/${encodeURIComponent(name)}/bind`,
+            query: tenantId ? { tenantId } : undefined,
+            body: {},
+        });
+    }
+    async rotate(name, tenantId) {
+        return this.request({
+            method: 'POST',
+            path: `/auth/api-keys/managed/${encodeURIComponent(name)}/rotate`,
+            query: tenantId ? { tenantId } : undefined,
+            body: {},
+        });
+    }
+    async updateConfig(name, config, tenantId) {
+        const info = await this.request({
+            method: 'PATCH',
+            path: `/auth/api-keys/managed/${encodeURIComponent(name)}/config`,
+            query: tenantId ? { tenantId } : undefined,
+            body: config,
+        });
+        return {
+            id: info.id,
+            tenant_id: info.tenantId,
+            created_by: info.createdBy ?? null,
+            name: info.name,
+            description: info.description ?? null,
+            prefix: info.prefix,
+            expires_at: info.expiresAt ?? '',
+            last_used: info.lastUsed ?? null,
+            created_at: info.createdAt ?? '',
+            ip_allowlist: null,
+            permissions: info.permissions,
+            conditions: undefined,
+            created_by_username: info.createdByUsername,
+            enabled: info.enabled,
+            rotation_count: info.rotationCount,
+            last_rotation: info.lastRotatedAt ?? null,
+            is_managed: info.isManaged,
+            rotation_mode: info.rotationMode,
+            rotation_interval: info.rotationIntervalSeconds
+                ? formatSecondsToHuman(info.rotationIntervalSeconds)
+                : undefined,
+            grace_period: formatSecondsToHuman(info.gracePeriodSeconds),
+            notify_before: info.notifyBefore,
+            webhook_url: info.webhookUrl,
+            next_rotation_at: info.nextRotationAt,
+            last_bound_at: info.lastBoundAt,
+        };
+    }
+    async deleteByName(name, tenantId) {
+        const key = await this.getByName(name, tenantId);
+        await this.request({
+            method: 'DELETE',
+            path: `/auth/api-keys/${encodeURIComponent(key.id)}`,
+            query: tenantId ? { tenantId } : undefined,
+        });
+    }
+}
+//# sourceMappingURL=managed-keys.js.map

package/dist/lib/client/managed-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-keys.js","sourceRoot":"","sources":["../../../src/lib/client/managed-keys.ts"],"names":[],"mappings":"AAAA,uCAAuC;AAEvC;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AA6F5D,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IAC/C,KAAK,CAAC,MAAM,CAAC,IAA6B;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAuB;YACxD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;YAC9D,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB;SACF,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;QAClC,OAAO;YACL,MAAM,EAAE;gBACN,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,mBAAmB,EAAE,SAAS;gBAC9B,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,cAAc,EAAE,SAAS,CAAC,cAAc;gBACxC,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,aAAa,EAAE,SAAS,CAAC,aAAmD;gBAC5E,iBAAiB,EAAE,SAAS,CAAC,yBAAyB;oBACpD,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC,yBAAyB,CAAC;oBAC3D,CAAC,CAAC,SAAS;gBACb,YAAY,EAAE,oBAAoB,CAAC,SAAS,CAAC,oBAAoB,CAAC;gBAClE,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;gBAC5C,aAAa,EAAE,SAAS,CAAC,aAAa;aACvC;YACD,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAiB;QAW1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAqB;YACtD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;SAC3C,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChC,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;gBAC5C,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,GAAG,CAAC,aAAmD;gBACtE,iBAAiB,EAAE,GAAG,CAAC,yBAAyB;oBAC9C,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,yBAAyB,CAAC;oBACrD,CAAC,CAAC,SAAS;gBACb,YAAY,EAAE,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,CAAC;gBAC5D,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,WAAW,EAAE,GAAG,CAAC,oBAAoB,IAAI,SAAS;gBAClD,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;aAC9C,CAAC,CAAC;YACH,UAAU,EAAE,QAAQ,CAAC,UAAU;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,QAAiB;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAuB;YACpD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,0BAA0B,kBAAkB,CAAC,IAAI,CAAC,EAAE;YAC1D,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;SAC3C,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;YAChC,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAChC,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;YAChC,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,SAAS;YACrB,mBAAmB,EAAE,IAAI,CAAC,iBAAiB;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,cAAc,EAAE,IAAI,CAAC,aAAa;YAClC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;YACzC,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,aAAa,EAAE,IAAI,CAAC,YAAkD;YACtE,iBAAiB,EAAE,IAAI,CAAC,uBAAuB;gBAC7C,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,uBAAuB,CAAC;gBACpD,CAAC,CAAC,SAAS;YACb,YAAY,EAAE,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,CAAC;YAC3D,aAAa,EAAE,IAAI,CAAC,YAAY;YAChC,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,gBAAgB,EAAE,IAAI,CAAC,cAAc;YACrC,aAAa,EAAE,IAAI,CAAC,WAAW;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,QAAiB;QACxC,OAAO,IAAI,CAAC,OAAO,CAAyB;YAC1C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,0BAA0B,kBAAkB,CAAC,IAAI,CAAC,OAAO;YAC/D,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;YAC1C,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,QAAiB;QAC1C,OAAO,IAAI,CAAC,OAAO,CAA+C;YAChE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,0BAA0B,kBAAkB,CAAC,IAAI,CAAC,SAAS;YACjE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;YAC1C,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,MAAqC,EACrC,QAAiB;QAEjB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAuB;YACpD,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,0BAA0B,kBAAkB,CAAC,IAAI,CAAC,SAAS;YACjE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;YAC1C,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;YAChC,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAChC,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;YAChC,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,SAAS;YACrB,mBAAmB,EAAE,IAAI,CAAC,iBAAiB;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,cAAc,EAAE,IAAI,CAAC,aAAa;YAClC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;YACzC,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,aAAa,EAAE,IAAI,CAAC,YAAkD;YACtE,iBAAiB,EAAE,IAAI,CAAC,uBAAuB;gBAC7C,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,uBAAuB,CAAC;gBACpD,CAAC,CAAC,SAAS;YACb,YAAY,EAAE,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,CAAC;YAC3D,aAAa,EAAE,IAAI,CAAC,YAAY;YAChC,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,gBAAgB,EAAE,IAAI,CAAC,cAAc;YACrC,aAAa,EAAE,IAAI,CAAC,WAAW;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,QAAiB;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,OAAO,CAAU;YAC1B,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,kBAAkB,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YACpD,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;SAC3C,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/lib/client/policies.d.ts

@@ -0,0 +1,35 @@
+/**
+ * ABAC Policy management client
+ */
+import { HttpClient } from './http.js';
+import type { Policy, PolicyListResponse, CreatePolicyInput, UpdatePolicyInput, PolicyTestRequest, PolicyTestResult } from '../../types/index.js';
+import type { MessageResponse, PermissionsResponse, ValidatePermissionsResponse, ValidatePolicyResponse, PolicyAttachmentsResponse } from './types.js';
+export declare class PoliciesClient extends HttpClient {
+    list(options?: {
+        tenantId?: string;
+        enabled?: boolean;
+        effect?: 'allow' | 'deny';
+        search?: string;
+        page?: number;
+        pageSize?: number;
+    }): Promise<PolicyListResponse>;
+    getById(id: string): Promise<Policy>;
+    create(data: CreatePolicyInput): Promise<Policy>;
+    update(id: string, data: UpdatePolicyInput): Promise<Policy>;
+    deleteById(id: string): Promise<void>;
+    toggle(id: string, enabled: boolean): Promise<Policy>;
+    validate(policy: CreatePolicyInput): Promise<ValidatePolicyResponse>;
+    getAttachments(policyId: string): Promise<PolicyAttachmentsResponse>;
+    attachToUser(policyId: string, userId: string): Promise<MessageResponse>;
+    attachToRole(policyId: string, roleId: string): Promise<MessageResponse>;
+    detachFromUser(policyId: string, userId: string): Promise<MessageResponse>;
+    detachFromRole(policyId: string, roleId: string): Promise<MessageResponse>;
+    getUserPolicies(userId: string): Promise<Policy[]>;
+    getRolePolicies(roleId: string): Promise<Policy[]>;
+    test(request: PolicyTestRequest): Promise<PolicyTestResult>;
+}
+export declare class PermissionsClient extends HttpClient {
+    list(category?: string): Promise<PermissionsResponse>;
+    validate(permissions: string[]): Promise<ValidatePermissionsResponse>;
+}
+//# sourceMappingURL=policies.d.ts.map

package/dist/lib/client/policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../../src/lib/client/policies.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,KAAK,EACV,MAAM,EACN,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,EACtB,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AAEpB,qBAAa,cAAe,SAAQ,UAAU;IACtC,IAAI,CAAC,OAAO,CAAC,EAAE;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAezB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOpC,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAQhD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAQ5D,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOrC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAQrD,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAQpE,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAOpE,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAQxE,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAQxE,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAO1E,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAO1E,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQlD,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQlD,IAAI,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAOlE;AAED,qBAAa,iBAAkB,SAAQ,UAAU;IACzC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAQrD,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC;CAO5E"}