dominus-sdk-nodejs-dev 1.2.4

package/dist/namespaces/auth.js

@@ -0,0 +1,785 @@
+/**
+ * Auth Namespace - Guardian authentication/authorization management.
+ *
+ * Provides RESTful access to users, roles, scopes, clients, tenants, etc.
+ */
+export class AuthNamespace {
+    client;
+    _publicKeyCache = null;
+    constructor(client) {
+        this.client = client;
+    }
+    // ========================================
+    // USERS
+    // ========================================
+    async createUser(params) {
+        return this.client.request({
+            endpoint: '/api/guardian/users',
+            body: {
+                username: params.username,
+                email: params.email,
+                password: params.password,
+                status: params.status || 'active',
+            },
+        });
+    }
+    async getUser(userId) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}`,
+            method: 'GET',
+        });
+    }
+    async listUsers(params) {
+        const { status, limit = 100, offset = 0, orderBy = 'created_at', orderDesc = true } = params || {};
+        let queryParams = `?limit=${limit}&offset=${offset}&order_by=${orderBy}&order_desc=${orderDesc}`;
+        if (status) {
+            queryParams += `&status=${status}`;
+        }
+        return this.client.request({
+            endpoint: `/api/guardian/users${queryParams}`,
+            method: 'GET',
+        });
+    }
+    async updateUser(userId, data) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}`,
+            method: 'PUT',
+            body: data,
+        });
+    }
+    async deleteUser(userId) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}`,
+            method: 'DELETE',
+        });
+    }
+    async updatePassword(userId, password) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/password`,
+            method: 'PUT',
+            body: { password },
+        });
+    }
+    async verifyPassword(userId, password) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/verify-password`,
+            body: { password },
+        });
+    }
+    // User junction tables
+    async getUserRoles(userId) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/roles`,
+            method: 'GET',
+        });
+    }
+    async addUserRoles(userId, roleIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/roles`,
+            body: { role_ids: roleIds },
+        });
+    }
+    async removeUserRoles(userId, roleIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/roles`,
+            method: 'DELETE',
+            body: { role_ids: roleIds },
+        });
+    }
+    async getUserScopes(userId) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/scopes`,
+            method: 'GET',
+        });
+    }
+    async addUserScopes(userId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/scopes`,
+            body: { scope_ids: scopeIds },
+        });
+    }
+    async removeUserScopes(userId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/scopes`,
+            method: 'DELETE',
+            body: { scope_ids: scopeIds },
+        });
+    }
+    async getUserTenants(userId) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/tenants`,
+            method: 'GET',
+        });
+    }
+    async addUserTenants(userId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/tenants`,
+            body: { tenant_ids: tenantIds },
+        });
+    }
+    async removeUserTenants(userId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/tenants`,
+            method: 'DELETE',
+            body: { tenant_ids: tenantIds },
+        });
+    }
+    async getUserSubtypes(userId) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/subtypes`,
+            method: 'GET',
+        });
+    }
+    async addUserSubtypes(userId, subtypeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/subtypes`,
+            body: { subtype_ids: subtypeIds },
+        });
+    }
+    async removeUserSubtypes(userId, subtypeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/subtypes`,
+            method: 'DELETE',
+            body: { subtype_ids: subtypeIds },
+        });
+    }
+    // ========================================
+    // ROLES
+    // ========================================
+    async createRole(params) {
+        return this.client.request({
+            endpoint: '/api/guardian/roles',
+            body: {
+                name: params.name,
+                description: params.description,
+            },
+        });
+    }
+    async getRole(roleId) {
+        return this.client.request({
+            endpoint: `/api/guardian/roles/${roleId}`,
+            method: 'GET',
+        });
+    }
+    async listRoles(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/roles?limit=${limit}&offset=${offset}`,
+            method: 'GET',
+        });
+    }
+    async updateRole(roleId, data) {
+        return this.client.request({
+            endpoint: `/api/guardian/roles/${roleId}`,
+            method: 'PUT',
+            body: data,
+        });
+    }
+    async deleteRole(roleId) {
+        return this.client.request({
+            endpoint: `/api/guardian/roles/${roleId}`,
+            method: 'DELETE',
+        });
+    }
+    async getRoleScopes(roleId) {
+        return this.client.request({
+            endpoint: `/api/guardian/roles/${roleId}/scopes`,
+            method: 'GET',
+        });
+    }
+    async addRoleScopes(roleId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/roles/${roleId}/scopes`,
+            body: { scope_ids: scopeIds },
+        });
+    }
+    async removeRoleScopes(roleId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/roles/${roleId}/scopes`,
+            method: 'DELETE',
+            body: { scope_ids: scopeIds },
+        });
+    }
+    // ========================================
+    // SCOPES
+    // ========================================
+    async createScope(params) {
+        return this.client.request({
+            endpoint: '/api/guardian/scopes',
+            body: {
+                slug: params.slug,
+                display_name: params.displayName,
+                description: params.description,
+            },
+        });
+    }
+    async getScope(scopeId) {
+        return this.client.request({
+            endpoint: `/api/guardian/scopes/${scopeId}`,
+            method: 'GET',
+        });
+    }
+    async listScopes(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/scopes?limit=${limit}&offset=${offset}`,
+            method: 'GET',
+        });
+    }
+    async updateScope(scopeId, data) {
+        const body = {};
+        if (data.slug !== undefined)
+            body.slug = data.slug;
+        if (data.displayName !== undefined)
+            body.display_name = data.displayName;
+        if (data.description !== undefined)
+            body.description = data.description;
+        return this.client.request({
+            endpoint: `/api/guardian/scopes/${scopeId}`,
+            method: 'PUT',
+            body,
+        });
+    }
+    async deleteScope(scopeId) {
+        return this.client.request({
+            endpoint: `/api/guardian/scopes/${scopeId}`,
+            method: 'DELETE',
+        });
+    }
+    // ========================================
+    // CLIENTS (PSK/Machine Auth)
+    // ========================================
+    async createClient(params) {
+        return this.client.request({
+            endpoint: '/api/guardian/clients',
+            body: {
+                label: params.label,
+                description: params.description,
+            },
+        });
+    }
+    async getClient(clientId) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}`,
+            method: 'GET',
+        });
+    }
+    async listClients(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/clients?limit=${limit}&offset=${offset}`,
+            method: 'GET',
+        });
+    }
+    async updateClient(clientId, data) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}`,
+            method: 'PUT',
+            body: data,
+        });
+    }
+    async deleteClient(clientId) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}`,
+            method: 'DELETE',
+        });
+    }
+    async regeneratePsk(clientId) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}/regenerate-psk`,
+            body: {},
+        });
+    }
+    async verifyPsk(clientId, psk) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}/verify-psk`,
+            body: { psk },
+        });
+    }
+    async getClientTenants(clientId) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}/tenants`,
+            method: 'GET',
+        });
+    }
+    async addClientTenants(clientId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}/tenants`,
+            body: { tenant_ids: tenantIds },
+        });
+    }
+    async removeClientTenants(clientId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}/tenants`,
+            method: 'DELETE',
+            body: { tenant_ids: tenantIds },
+        });
+    }
+    // ========================================
+    // TENANTS
+    // ========================================
+    async createTenant(params) {
+        const body = {
+            name: params.name,
+            slug: params.slug,
+        };
+        if (params.categoryId)
+            body.category_id = params.categoryId;
+        if (params.displayName)
+            body.display_name = params.displayName;
+        if (params.description)
+            body.description = params.description;
+        return this.client.request({
+            endpoint: '/api/guardian/tenants',
+            body,
+        });
+    }
+    async getTenant(tenantId) {
+        return this.client.request({
+            endpoint: `/api/guardian/tenants/${tenantId}`,
+            method: 'GET',
+        });
+    }
+    async listTenants(params) {
+        const { status, categoryId, limit = 100, offset = 0 } = params || {};
+        let queryParams = `?limit=${limit}&offset=${offset}`;
+        if (status)
+            queryParams += `&status=${status}`;
+        if (categoryId)
+            queryParams += `&category_id=${categoryId}`;
+        return this.client.request({
+            endpoint: `/api/guardian/tenants${queryParams}`,
+            method: 'GET',
+        });
+    }
+    async updateTenant(tenantId, data) {
+        const body = {};
+        if (data.name !== undefined)
+            body.name = data.name;
+        if (data.displayName !== undefined)
+            body.display_name = data.displayName;
+        if (data.status !== undefined)
+            body.status = data.status;
+        return this.client.request({
+            endpoint: `/api/guardian/tenants/${tenantId}`,
+            method: 'PUT',
+            body,
+        });
+    }
+    async deleteTenant(tenantId) {
+        return this.client.request({
+            endpoint: `/api/guardian/tenants/${tenantId}`,
+            method: 'DELETE',
+        });
+    }
+    // ========================================
+    // TENANT CATEGORIES
+    // ========================================
+    async createTenantCategory(params) {
+        return this.client.request({
+            endpoint: '/api/guardian/tenant-categories',
+            body: {
+                name: params.name,
+                slug: params.slug,
+                description: params.description,
+                color: params.color || '#3B82F6',
+            },
+        });
+    }
+    async getTenantCategory(categoryId) {
+        return this.client.request({
+            endpoint: `/api/guardian/tenant-categories/${categoryId}`,
+            method: 'GET',
+        });
+    }
+    async listTenantCategories(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/tenant-categories?limit=${limit}&offset=${offset}`,
+            method: 'GET',
+        });
+    }
+    async updateTenantCategory(categoryId, data) {
+        return this.client.request({
+            endpoint: `/api/guardian/tenant-categories/${categoryId}`,
+            method: 'PUT',
+            body: data,
+        });
+    }
+    async deleteTenantCategory(categoryId) {
+        return this.client.request({
+            endpoint: `/api/guardian/tenant-categories/${categoryId}`,
+            method: 'DELETE',
+        });
+    }
+    // ========================================
+    // SUBTYPES
+    // ========================================
+    async createSubtype(params) {
+        return this.client.request({
+            endpoint: '/api/guardian/subtypes',
+            body: {
+                name: params.name,
+                slug: params.slug,
+                description: params.description,
+            },
+        });
+    }
+    async getSubtype(subtypeId) {
+        return this.client.request({
+            endpoint: `/api/guardian/subtypes/${subtypeId}`,
+            method: 'GET',
+        });
+    }
+    async listSubtypes(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/subtypes?limit=${limit}&offset=${offset}`,
+            method: 'GET',
+        });
+    }
+    async updateSubtype(subtypeId, data) {
+        return this.client.request({
+            endpoint: `/api/guardian/subtypes/${subtypeId}`,
+            method: 'PUT',
+            body: data,
+        });
+    }
+    async deleteSubtype(subtypeId) {
+        return this.client.request({
+            endpoint: `/api/guardian/subtypes/${subtypeId}`,
+            method: 'DELETE',
+        });
+    }
+    // ========================================
+    // PAGES
+    // ========================================
+    async createPage(params) {
+        return this.client.request({
+            endpoint: '/api/guardian/pages',
+            body: {
+                path: params.path,
+                name: params.name,
+                description: params.description,
+                is_active: params.isActive ?? true,
+                show_in_nav: params.showInNav ?? true,
+            },
+        });
+    }
+    async getPage(pageId) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}`,
+            method: 'GET',
+        });
+    }
+    async listPages(params) {
+        const { isActive, limit = 100, offset = 0 } = params || {};
+        let queryParams = `?limit=${limit}&offset=${offset}`;
+        if (isActive !== undefined)
+            queryParams += `&is_active=${isActive}`;
+        return this.client.request({
+            endpoint: `/api/guardian/pages${queryParams}`,
+            method: 'GET',
+        });
+    }
+    async updatePage(pageId, data) {
+        const body = {};
+        if (data.path !== undefined)
+            body.path = data.path;
+        if (data.name !== undefined)
+            body.name = data.name;
+        if (data.description !== undefined)
+            body.description = data.description;
+        if (data.isActive !== undefined)
+            body.is_active = data.isActive;
+        if (data.showInNav !== undefined)
+            body.show_in_nav = data.showInNav;
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}`,
+            method: 'PUT',
+            body,
+        });
+    }
+    async deletePage(pageId) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}`,
+            method: 'DELETE',
+        });
+    }
+    async getPageTenants(pageId) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}/tenants`,
+            method: 'GET',
+        });
+    }
+    async addPageTenants(pageId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}/tenants`,
+            body: { tenant_ids: tenantIds },
+        });
+    }
+    async removePageTenants(pageId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}/tenants`,
+            method: 'DELETE',
+            body: { tenant_ids: tenantIds },
+        });
+    }
+    async getPageScopes(pageId) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}/scopes`,
+            method: 'GET',
+        });
+    }
+    async addPageScopes(pageId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}/scopes`,
+            body: { scope_ids: scopeIds },
+        });
+    }
+    async removePageScopes(pageId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}/scopes`,
+            method: 'DELETE',
+            body: { scope_ids: scopeIds },
+        });
+    }
+    async setPageScopes(pageId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}/scopes`,
+            method: 'PUT',
+            body: { scope_ids: scopeIds },
+        });
+    }
+    // ========================================
+    // NAVIGATION
+    // ========================================
+    async createNavItem(params) {
+        const body = {
+            tenant_id: params.tenantId,
+            title: params.title,
+            sort_order: params.sortOrder ?? 0,
+            is_header: params.isHeader ?? false,
+            is_active: params.isActive ?? true,
+            is_expanded_default: params.isExpandedDefault ?? false,
+        };
+        if (params.icon)
+            body.icon = params.icon;
+        if (params.description)
+            body.description = params.description;
+        if (params.pageId)
+            body.page_id = params.pageId;
+        if (params.parentId)
+            body.parent_id = params.parentId;
+        return this.client.request({
+            endpoint: '/api/guardian/nav-items',
+            body,
+        });
+    }
+    async getNavItem(navId) {
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items/${navId}`,
+            method: 'GET',
+        });
+    }
+    async listNavItems(params) {
+        const queryParams = new URLSearchParams();
+        if (params?.tenantId)
+            queryParams.append('tenant_id', params.tenantId);
+        if (params?.parentId)
+            queryParams.append('parent_id', params.parentId);
+        if (params?.isActive !== undefined)
+            queryParams.append('is_active', String(params.isActive));
+        queryParams.append('limit', String(params?.limit ?? 100));
+        queryParams.append('offset', String(params?.offset ?? 0));
+        if (params?.orderBy)
+            queryParams.append('order_by', params.orderBy);
+        if (params?.orderDesc !== undefined)
+            queryParams.append('order_desc', String(params.orderDesc));
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items?${queryParams.toString()}`,
+            method: 'GET',
+        });
+    }
+    async updateNavItem(navId, data) {
+        const body = {};
+        if (data.title !== undefined)
+            body.title = data.title;
+        if (data.icon !== undefined)
+            body.icon = data.icon;
+        if (data.description !== undefined)
+            body.description = data.description;
+        if (data.pageId !== undefined)
+            body.page_id = data.pageId;
+        if (data.parentId !== undefined)
+            body.parent_id = data.parentId;
+        if (data.isHeader !== undefined)
+            body.is_header = data.isHeader;
+        if (data.isActive !== undefined)
+            body.is_active = data.isActive;
+        if (data.sortOrder !== undefined)
+            body.sort_order = data.sortOrder;
+        if (data.isExpandedDefault !== undefined)
+            body.is_expanded_default = data.isExpandedDefault;
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items/${navId}`,
+            method: 'PUT',
+            body,
+        });
+    }
+    async deleteNavItem(navId) {
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items/${navId}`,
+            method: 'DELETE',
+        });
+    }
+    // Navigation Scopes
+    async getNavScopes(navId) {
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items/${navId}/scopes`,
+            method: 'GET',
+        });
+    }
+    async addNavScopes(navId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items/${navId}/scopes`,
+            body: { scope_ids: scopeIds },
+        });
+    }
+    async removeNavScopes(navId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items/${navId}/scopes`,
+            method: 'DELETE',
+            body: { scope_ids: scopeIds },
+        });
+    }
+    // Navigation Roles
+    async getNavRoles(navId) {
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items/${navId}/roles`,
+            method: 'GET',
+        });
+    }
+    async addNavRoles(navId, roleIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items/${navId}/roles`,
+            body: { role_ids: roleIds },
+        });
+    }
+    async removeNavRoles(navId, roleIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items/${navId}/roles`,
+            method: 'DELETE',
+            body: { role_ids: roleIds },
+        });
+    }
+    // Navigation Subtypes
+    async getNavSubtypes(navId) {
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items/${navId}/subtypes`,
+            method: 'GET',
+        });
+    }
+    async addNavSubtypes(navId, subtypeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items/${navId}/subtypes`,
+            body: { subtype_ids: subtypeIds },
+        });
+    }
+    async removeNavSubtypes(navId, subtypeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/nav-items/${navId}/subtypes`,
+            method: 'DELETE',
+            body: { subtype_ids: subtypeIds },
+        });
+    }
+    // ========================================
+    // SECURE TABLES
+    // ========================================
+    async createSecureTable(params) {
+        return this.client.request({
+            endpoint: '/api/guardian/secure-tables',
+            body: {
+                table_name: params.tableName,
+                schema_name: params.schemaName || 'public',
+            },
+        });
+    }
+    async getSecureTable(secureTableId) {
+        return this.client.request({
+            endpoint: `/api/guardian/secure-tables/${secureTableId}`,
+            method: 'GET',
+        });
+    }
+    async listSecureTables(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/secure-tables?limit=${limit}&offset=${offset}`,
+            method: 'GET',
+        });
+    }
+    async deleteSecureTable(secureTableId) {
+        return this.client.request({
+            endpoint: `/api/guardian/secure-tables/${secureTableId}`,
+            method: 'DELETE',
+        });
+    }
+    async getSecureTableScopes(secureTableId) {
+        return this.client.request({
+            endpoint: `/api/guardian/secure-tables/${secureTableId}/scopes`,
+            method: 'GET',
+        });
+    }
+    async addSecureTableScopes(secureTableId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/secure-tables/${secureTableId}/scopes`,
+            body: { scope_ids: scopeIds },
+        });
+    }
+    async removeSecureTableScopes(secureTableId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/secure-tables/${secureTableId}/scopes`,
+            method: 'DELETE',
+            body: { scope_ids: scopeIds },
+        });
+    }
+    // ========================================
+    // JWT OPERATIONS (via Warden)
+    // ========================================
+    async getJwks() {
+        if (this._publicKeyCache) {
+            return this._publicKeyCache;
+        }
+        const result = await this.client.request({
+            endpoint: '/api/warden/jwks',
+            method: 'GET',
+        });
+        this._publicKeyCache = result;
+        return result;
+    }
+    async validateJwt(token) {
+        // Ensure JWKS is cached for future signature verification
+        await this.getJwks();
+        // Decode JWT without verification to get claims
+        // For full signature validation, use a JWT library like jsonwebtoken
+        const parts = token.split('.');
+        if (parts.length !== 3) {
+            throw new Error('Invalid JWT format');
+        }
+        try {
+            const payload = JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf-8'));
+            // Check expiration
+            if (payload.exp && payload.exp < Math.floor(Date.now() / 1000)) {
+                throw new Error('Token has expired');
+            }
+            return payload;
+        }
+        catch (e) {
+            if (e instanceof Error && e.message === 'Token has expired') {
+                throw e;
+            }
+            throw new Error(`Invalid token: ${e}`);
+        }
+    }
+}
+//# sourceMappingURL=auth.js.map