dominus-sdk-nodejs 1.1.7 → 1.2.0

package/dist/namespaces/auth.js

@@ -3,44 +3,41 @@
  *
  * Provides RESTful access to users, roles, scopes, clients, tenants, etc.
  */
-import bcrypt from 'bcryptjs';
-// Helper to hash password client-side
-function hashPassword(password) {
-    const salt = bcrypt.genSaltSync(12);
-    return bcrypt.hashSync(password, salt);
-}
 export class AuthNamespace {
     client;
+    _publicKeyCache = null;
     constructor(client) {
         this.client = client;
     }
     // ========================================
     // USERS
     // ========================================
-    async getUser(userId) {
+    async createUser(params) {
         return this.client.request({
-            endpoint: `/api/guardian/users/${userId}`,
-            method: 'GET',
+            endpoint: '/api/guardian/users',
+            body: {
+                username: params.username,
+                email: params.email,
+                password: params.password,
+                status: params.status || 'active',
+            },
         });
     }
-    async listUsers() {
-        const result = await this.client.request({
-            endpoint: '/api/guardian/users',
+    async getUser(userId) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}`,
             method: 'GET',
         });
-        return Array.isArray(result) ? result : result.users || [];
     }
-    async addUser(params) {
-        const { username, password, email, roleId } = params;
-        const passwordHash = hashPassword(password);
+    async listUsers(params) {
+        const { status, limit = 100, offset = 0, orderBy = 'created_at', orderDesc = true } = params || {};
+        let queryParams = `?limit=${limit}&offset=${offset}&order_by=${orderBy}&order_desc=${orderDesc}`;
+        if (status) {
+            queryParams += `&status=${status}`;
+        }
         return this.client.request({
-            endpoint: '/api/guardian/users',
-            body: {
-                username,
-                password_hash: passwordHash,
-                email,
-                role_id: roleId,
-            },
+            endpoint: `/api/guardian/users${queryParams}`,
+            method: 'GET',
         });
     }
     async updateUser(userId, data) {
@@ -56,32 +53,121 @@ export class AuthNamespace {
             method: 'DELETE',
         });
     }
-    // ========================================
-    // ROLES
-    // ========================================
-    async getRole(roleId) {
+    async updatePassword(userId, password) {
         return this.client.request({
-            endpoint: `/api/guardian/roles/${roleId}`,
+            endpoint: `/api/guardian/users/${userId}/password`,
+            method: 'PUT',
+            body: { password },
+        });
+    }
+    async verifyPassword(userId, password) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/verify-password`,
+            body: { password },
+        });
+    }
+    // User junction tables
+    async getUserRoles(userId) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/roles`,
             method: 'GET',
         });
     }
-    async listRoles() {
-        const result = await this.client.request({
-            endpoint: '/api/guardian/roles',
+    async addUserRoles(userId, roleIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/roles`,
+            body: { role_ids: roleIds },
+        });
+    }
+    async removeUserRoles(userId, roleIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/roles`,
+            method: 'DELETE',
+            body: { role_ids: roleIds },
+        });
+    }
+    async getUserScopes(userId) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/scopes`,
             method: 'GET',
         });
-        return Array.isArray(result) ? result : result.roles || [];
     }
-    async addRole(params) {
+    async addUserScopes(userId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/scopes`,
+            body: { scope_ids: scopeIds },
+        });
+    }
+    async removeUserScopes(userId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/scopes`,
+            method: 'DELETE',
+            body: { scope_ids: scopeIds },
+        });
+    }
+    async getUserTenants(userId) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/tenants`,
+            method: 'GET',
+        });
+    }
+    async addUserTenants(userId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/tenants`,
+            body: { tenant_ids: tenantIds },
+        });
+    }
+    async removeUserTenants(userId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/tenants`,
+            method: 'DELETE',
+            body: { tenant_ids: tenantIds },
+        });
+    }
+    async getUserSubtypes(userId) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/subtypes`,
+            method: 'GET',
+        });
+    }
+    async addUserSubtypes(userId, subtypeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/subtypes`,
+            body: { subtype_ids: subtypeIds },
+        });
+    }
+    async removeUserSubtypes(userId, subtypeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/users/${userId}/subtypes`,
+            method: 'DELETE',
+            body: { subtype_ids: subtypeIds },
+        });
+    }
+    // ========================================
+    // ROLES
+    // ========================================
+    async createRole(params) {
         return this.client.request({
             endpoint: '/api/guardian/roles',
             body: {
                 name: params.name,
-                scope_slugs: params.scopeSlugs || [],
                 description: params.description,
             },
         });
     }
+    async getRole(roleId) {
+        return this.client.request({
+            endpoint: `/api/guardian/roles/${roleId}`,
+            method: 'GET',
+        });
+    }
+    async listRoles(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/roles?limit=${limit}&offset=${offset}`,
+            method: 'GET',
+        });
+    }
     async updateRole(roleId, data) {
         return this.client.request({
             endpoint: `/api/guardian/roles/${roleId}`,
@@ -95,23 +181,29 @@ export class AuthNamespace {
             method: 'DELETE',
         });
     }
-    // ========================================
-    // SCOPES
-    // ========================================
-    async getScope(scopeId) {
+    async getRoleScopes(roleId) {
         return this.client.request({
-            endpoint: `/api/guardian/scopes/${scopeId}`,
+            endpoint: `/api/guardian/roles/${roleId}/scopes`,
             method: 'GET',
         });
     }
-    async listScopes() {
-        const result = await this.client.request({
-            endpoint: '/api/guardian/scopes',
-            method: 'GET',
+    async addRoleScopes(roleId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/roles/${roleId}/scopes`,
+            body: { scope_ids: scopeIds },
         });
-        return Array.isArray(result) ? result : result.scopes || [];
     }
-    async addScope(params) {
+    async removeRoleScopes(roleId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/roles/${roleId}/scopes`,
+            method: 'DELETE',
+            body: { scope_ids: scopeIds },
+        });
+    }
+    // ========================================
+    // SCOPES
+    // ========================================
+    async createScope(params) {
         return this.client.request({
             endpoint: '/api/guardian/scopes',
             body: {
@@ -121,11 +213,31 @@ export class AuthNamespace {
             },
         });
     }
+    async getScope(scopeId) {
+        return this.client.request({
+            endpoint: `/api/guardian/scopes/${scopeId}`,
+            method: 'GET',
+        });
+    }
+    async listScopes(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/scopes?limit=${limit}&offset=${offset}`,
+            method: 'GET',
+        });
+    }
     async updateScope(scopeId, data) {
+        const body = {};
+        if (data.slug !== undefined)
+            body.slug = data.slug;
+        if (data.displayName !== undefined)
+            body.display_name = data.displayName;
+        if (data.description !== undefined)
+            body.description = data.description;
         return this.client.request({
             endpoint: `/api/guardian/scopes/${scopeId}`,
             method: 'PUT',
-            body: data,
+            body,
         });
     }
     async deleteScope(scopeId) {
@@ -135,28 +247,35 @@ export class AuthNamespace {
         });
     }
     // ========================================
-    // CLIENTS
+    // CLIENTS (PSK/Machine Auth)
     // ========================================
+    async createClient(params) {
+        return this.client.request({
+            endpoint: '/api/guardian/clients',
+            body: {
+                label: params.label,
+                description: params.description,
+            },
+        });
+    }
     async getClient(clientId) {
         return this.client.request({
             endpoint: `/api/guardian/clients/${clientId}`,
             method: 'GET',
         });
     }
-    async listClients() {
-        const result = await this.client.request({
-            endpoint: '/api/guardian/clients',
+    async listClients(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/clients?limit=${limit}&offset=${offset}`,
             method: 'GET',
         });
-        return Array.isArray(result) ? result : result.clients || [];
     }
-    async addClient(params) {
+    async updateClient(clientId, data) {
         return this.client.request({
-            endpoint: '/api/guardian/clients',
-            body: {
-                label: params.label,
-                role_id: params.roleId,
-            },
+            endpoint: `/api/guardian/clients/${clientId}`,
+            method: 'PUT',
+            body: data,
         });
     }
     async deleteClient(clientId) {
@@ -165,102 +284,402 @@ export class AuthNamespace {
             method: 'DELETE',
         });
     }
+    async regeneratePsk(clientId) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}/regenerate-psk`,
+            body: {},
+        });
+    }
+    async verifyPsk(clientId, psk) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}/verify-psk`,
+            body: { psk },
+        });
+    }
+    async getClientTenants(clientId) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}/tenants`,
+            method: 'GET',
+        });
+    }
+    async addClientTenants(clientId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}/tenants`,
+            body: { tenant_ids: tenantIds },
+        });
+    }
+    async removeClientTenants(clientId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/clients/${clientId}/tenants`,
+            method: 'DELETE',
+            body: { tenant_ids: tenantIds },
+        });
+    }
     // ========================================
     // TENANTS
     // ========================================
+    async createTenant(params) {
+        const body = {
+            name: params.name,
+            slug: params.slug,
+        };
+        if (params.categoryId)
+            body.category_id = params.categoryId;
+        if (params.displayName)
+            body.display_name = params.displayName;
+        if (params.description)
+            body.description = params.description;
+        return this.client.request({
+            endpoint: '/api/guardian/tenants',
+            body,
+        });
+    }
     async getTenant(tenantId) {
         return this.client.request({
             endpoint: `/api/guardian/tenants/${tenantId}`,
             method: 'GET',
         });
     }
-    async listTenants() {
-        const result = await this.client.request({
-            endpoint: '/api/guardian/tenants',
+    async listTenants(params) {
+        const { status, categoryId, limit = 100, offset = 0 } = params || {};
+        let queryParams = `?limit=${limit}&offset=${offset}`;
+        if (status)
+            queryParams += `&status=${status}`;
+        if (categoryId)
+            queryParams += `&category_id=${categoryId}`;
+        return this.client.request({
+            endpoint: `/api/guardian/tenants${queryParams}`,
             method: 'GET',
         });
-        return Array.isArray(result) ? result : result.tenants || [];
     }
-    async addTenant(params) {
+    async updateTenant(tenantId, data) {
+        const body = {};
+        if (data.name !== undefined)
+            body.name = data.name;
+        if (data.displayName !== undefined)
+            body.display_name = data.displayName;
+        if (data.status !== undefined)
+            body.status = data.status;
         return this.client.request({
-            endpoint: '/api/guardian/tenants',
+            endpoint: `/api/guardian/tenants/${tenantId}`,
+            method: 'PUT',
+            body,
+        });
+    }
+    async deleteTenant(tenantId) {
+        return this.client.request({
+            endpoint: `/api/guardian/tenants/${tenantId}`,
+            method: 'DELETE',
+        });
+    }
+    // ========================================
+    // TENANT CATEGORIES
+    // ========================================
+    async createTenantCategory(params) {
+        return this.client.request({
+            endpoint: '/api/guardian/tenant-categories',
             body: {
                 name: params.name,
                 slug: params.slug,
-                category_id: params.categoryId,
+                description: params.description,
+                color: params.color || '#3B82F6',
             },
         });
     }
-    async updateTenant(tenantId, data) {
+    async getTenantCategory(categoryId) {
         return this.client.request({
-            endpoint: `/api/guardian/tenants/${tenantId}`,
+            endpoint: `/api/guardian/tenant-categories/${categoryId}`,
+            method: 'GET',
+        });
+    }
+    async listTenantCategories(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/tenant-categories?limit=${limit}&offset=${offset}`,
+            method: 'GET',
+        });
+    }
+    async updateTenantCategory(categoryId, data) {
+        return this.client.request({
+            endpoint: `/api/guardian/tenant-categories/${categoryId}`,
             method: 'PUT',
             body: data,
         });
     }
-    async deleteTenant(tenantId) {
+    async deleteTenantCategory(categoryId) {
         return this.client.request({
-            endpoint: `/api/guardian/tenants/${tenantId}`,
+            endpoint: `/api/guardian/tenant-categories/${categoryId}`,
             method: 'DELETE',
         });
     }
     // ========================================
-    // TENANT CATEGORIES
+    // SUBTYPES
     // ========================================
-    async getTenantCategory(categoryId) {
+    async createSubtype(params) {
         return this.client.request({
-            endpoint: `/api/guardian/tenant-categories/${categoryId}`,
+            endpoint: '/api/guardian/subtypes',
+            body: {
+                name: params.name,
+                slug: params.slug,
+                description: params.description,
+            },
+        });
+    }
+    async getSubtype(subtypeId) {
+        return this.client.request({
+            endpoint: `/api/guardian/subtypes/${subtypeId}`,
             method: 'GET',
         });
     }
-    async listTenantCategories() {
-        const result = await this.client.request({
-            endpoint: '/api/guardian/tenant-categories',
+    async listSubtypes(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/subtypes?limit=${limit}&offset=${offset}`,
             method: 'GET',
         });
-        return Array.isArray(result) ? result : result.categories || [];
+    }
+    async updateSubtype(subtypeId, data) {
+        return this.client.request({
+            endpoint: `/api/guardian/subtypes/${subtypeId}`,
+            method: 'PUT',
+            body: data,
+        });
+    }
+    async deleteSubtype(subtypeId) {
+        return this.client.request({
+            endpoint: `/api/guardian/subtypes/${subtypeId}`,
+            method: 'DELETE',
+        });
     }
     // ========================================
-    // PAGES & NAVIGATION
+    // PAGES
     // ========================================
-    async listPages() {
-        const result = await this.client.request({
+    async createPage(params) {
+        return this.client.request({
             endpoint: '/api/guardian/pages',
+            body: {
+                path: params.path,
+                name: params.name,
+                description: params.description,
+                is_active: params.isActive ?? true,
+            },
+        });
+    }
+    async getPage(pageId) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}`,
             method: 'GET',
         });
-        return Array.isArray(result) ? result : result.pages || [];
     }
-    async listNavigation() {
-        const result = await this.client.request({
-            endpoint: '/api/guardian/navigation',
+    async listPages(params) {
+        const { isActive, limit = 100, offset = 0 } = params || {};
+        let queryParams = `?limit=${limit}&offset=${offset}`;
+        if (isActive !== undefined)
+            queryParams += `&is_active=${isActive}`;
+        return this.client.request({
+            endpoint: `/api/guardian/pages${queryParams}`,
+            method: 'GET',
+        });
+    }
+    async updatePage(pageId, data) {
+        const body = {};
+        if (data.path !== undefined)
+            body.path = data.path;
+        if (data.name !== undefined)
+            body.name = data.name;
+        if (data.description !== undefined)
+            body.description = data.description;
+        if (data.isActive !== undefined)
+            body.is_active = data.isActive;
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}`,
+            method: 'PUT',
+            body,
+        });
+    }
+    async deletePage(pageId) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}`,
+            method: 'DELETE',
+        });
+    }
+    async getPageTenants(pageId) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}/tenants`,
             method: 'GET',
         });
-        return Array.isArray(result) ? result : result.navigation || [];
+    }
+    async addPageTenants(pageId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}/tenants`,
+            body: { tenant_ids: tenantIds },
+        });
+    }
+    async removePageTenants(pageId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/pages/${pageId}/tenants`,
+            method: 'DELETE',
+            body: { tenant_ids: tenantIds },
+        });
     }
     // ========================================
-    // SECURE TABLES
+    // NAVIGATION
     // ========================================
-    async listSecureTables() {
-        const result = await this.client.request({
-            endpoint: '/api/guardian/secure-tables',
+    async createNavItem(params) {
+        const body = {
+            title: params.title,
+            sort_order: params.sortOrder ?? 0,
+        };
+        if (params.icon)
+            body.icon = params.icon;
+        if (params.pageId)
+            body.page_id = params.pageId;
+        if (params.parentId)
+            body.parent_id = params.parentId;
+        return this.client.request({
+            endpoint: '/api/guardian/navigation',
+            body,
+        });
+    }
+    async getNavItem(navId) {
+        return this.client.request({
+            endpoint: `/api/guardian/navigation/${navId}`,
+            method: 'GET',
+        });
+    }
+    async listNavItems(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/navigation?limit=${limit}&offset=${offset}`,
+            method: 'GET',
+        });
+    }
+    async updateNavItem(navId, data) {
+        const body = {};
+        if (data.title !== undefined)
+            body.title = data.title;
+        if (data.icon !== undefined)
+            body.icon = data.icon;
+        if (data.sortOrder !== undefined)
+            body.sort_order = data.sortOrder;
+        return this.client.request({
+            endpoint: `/api/guardian/navigation/${navId}`,
+            method: 'PUT',
+            body,
+        });
+    }
+    async deleteNavItem(navId) {
+        return this.client.request({
+            endpoint: `/api/guardian/navigation/${navId}`,
+            method: 'DELETE',
+        });
+    }
+    async getNavTenants(navId) {
+        return this.client.request({
+            endpoint: `/api/guardian/navigation/${navId}/tenants`,
             method: 'GET',
         });
-        return Array.isArray(result) ? result : result.tables || [];
     }
-    async addSecureTable(params) {
+    async addNavTenants(navId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/navigation/${navId}/tenants`,
+            body: { tenant_ids: tenantIds },
+        });
+    }
+    async removeNavTenants(navId, tenantIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/navigation/${navId}/tenants`,
+            method: 'DELETE',
+            body: { tenant_ids: tenantIds },
+        });
+    }
+    // ========================================
+    // SECURE TABLES
+    // ========================================
+    async createSecureTable(params) {
         return this.client.request({
             endpoint: '/api/guardian/secure-tables',
             body: {
-                schema_name: params.schema,
                 table_name: params.tableName,
+                schema_name: params.schemaName || 'public',
             },
         });
     }
-    async deleteSecureTable(tableId) {
+    async getSecureTable(secureTableId) {
         return this.client.request({
-            endpoint: `/api/guardian/secure-tables/${tableId}`,
+            endpoint: `/api/guardian/secure-tables/${secureTableId}`,
+            method: 'GET',
+        });
+    }
+    async listSecureTables(params) {
+        const { limit = 100, offset = 0 } = params || {};
+        return this.client.request({
+            endpoint: `/api/guardian/secure-tables?limit=${limit}&offset=${offset}`,
+            method: 'GET',
+        });
+    }
+    async deleteSecureTable(secureTableId) {
+        return this.client.request({
+            endpoint: `/api/guardian/secure-tables/${secureTableId}`,
+            method: 'DELETE',
+        });
+    }
+    async getSecureTableScopes(secureTableId) {
+        return this.client.request({
+            endpoint: `/api/guardian/secure-tables/${secureTableId}/scopes`,
+            method: 'GET',
+        });
+    }
+    async addSecureTableScopes(secureTableId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/secure-tables/${secureTableId}/scopes`,
+            body: { scope_ids: scopeIds },
+        });
+    }
+    async removeSecureTableScopes(secureTableId, scopeIds) {
+        return this.client.request({
+            endpoint: `/api/guardian/secure-tables/${secureTableId}/scopes`,
             method: 'DELETE',
+            body: { scope_ids: scopeIds },
+        });
+    }
+    // ========================================
+    // JWT OPERATIONS (via Warden)
+    // ========================================
+    async getJwks() {
+        if (this._publicKeyCache) {
+            return this._publicKeyCache;
+        }
+        const result = await this.client.request({
+            endpoint: '/api/warden/jwks',
+            method: 'GET',
         });
+        this._publicKeyCache = result;
+        return result;
+    }
+    async validateJwt(token) {
+        // Ensure JWKS is cached for future signature verification
+        await this.getJwks();
+        // Decode JWT without verification to get claims
+        // For full signature validation, use a JWT library like jsonwebtoken
+        const parts = token.split('.');
+        if (parts.length !== 3) {
+            throw new Error('Invalid JWT format');
+        }
+        try {
+            const payload = JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf-8'));
+            // Check expiration
+            if (payload.exp && payload.exp < Math.floor(Date.now() / 1000)) {
+                throw new Error('Token has expired');
+            }
+            return payload;
+        }
+        catch (e) {
+            if (e instanceof Error && e.message === 'Token has expired') {
+                throw e;
+            }
+            throw new Error(`Invalid token: ${e}`);
+        }
     }
 }
 //# sourceMappingURL=auth.js.map