doover-js 0.6.0 → 0.6.1

package/dist/index.d.ts

@@ -47,4 +47,6 @@ export type * from "./types/common";
 export type * from "./types/connection";
 export type * from "./types/openapi";
 export type * from "./types/viewer";
+export type * from "./types/audit";
+export { DV_AUDIT_CHANNEL } from "./types/audit";
 export { addTimestampToMessage, extractSnowflakeId, generateSnowflakeIdAtTime, } from "./utils/snowflake";

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.generateSnowflakeIdAtTime = exports.extractSnowflakeId = exports.addTimestampToMessage = exports.getIdentifierFromPath = exports.DooverDataProvider = exports.DooverValidationError = exports.DooverGatewayError = exports.DooverApiError = exports.RestClient = exports.GatewayClient = exports.buildAuth = exports.DooverAuthError = exports.AuthProfile = exports.DooverTokenAuth = exports.CookieAuth = exports.DooverAuth = exports.AmbiguousWriteError = exports.UnsupportedCapabilityError = exports.ALL_CAPABILITIES = exports.DooverRpcError = exports.RpcDispatcher = exports.UsersApi = exports.TurnApi = exports.ProcessorsApi = exports.PermissionsApi = exports.NotificationsApi = exports.MessagesApi = exports.ConnectionsApi = exports.ChannelsApi = exports.AlarmsApi = exports.AggregatesApi = exports.AgentsApi = exports.DooverStatsCollector = exports.resetDooverClient = exports.peekDooverClient = exports.getDooverClient = exports.MultiplexClient = exports.LocalAgentClient = exports.DooverClient = void 0;
+exports.generateSnowflakeIdAtTime = exports.extractSnowflakeId = exports.addTimestampToMessage = exports.DV_AUDIT_CHANNEL = exports.getIdentifierFromPath = exports.DooverDataProvider = exports.DooverValidationError = exports.DooverGatewayError = exports.DooverApiError = exports.RestClient = exports.GatewayClient = exports.buildAuth = exports.DooverAuthError = exports.AuthProfile = exports.DooverTokenAuth = exports.CookieAuth = exports.DooverAuth = exports.AmbiguousWriteError = exports.UnsupportedCapabilityError = exports.ALL_CAPABILITIES = exports.DooverRpcError = exports.RpcDispatcher = exports.UsersApi = exports.TurnApi = exports.ProcessorsApi = exports.PermissionsApi = exports.NotificationsApi = exports.MessagesApi = exports.ConnectionsApi = exports.ChannelsApi = exports.AlarmsApi = exports.AggregatesApi = exports.AgentsApi = exports.DooverStatsCollector = exports.resetDooverClient = exports.peekDooverClient = exports.getDooverClient = exports.MultiplexClient = exports.LocalAgentClient = exports.DooverClient = void 0;
 var doover_client_1 = require("./client/doover-client");
 Object.defineProperty(exports, "DooverClient", { enumerable: true, get: function () { return doover_client_1.DooverClient; } });
 var local_agent_client_1 = require("./client/local-agent-client");
@@ -68,6 +68,8 @@ var doover_data_provider_1 = require("./viewer/doover-data-provider");
 Object.defineProperty(exports, "DooverDataProvider", { enumerable: true, get: function () { return doover_data_provider_1.DooverDataProvider; } });
 var path_parsing_1 = require("./viewer/path-parsing");
 Object.defineProperty(exports, "getIdentifierFromPath", { enumerable: true, get: function () { return path_parsing_1.getIdentifierFromPath; } });
+var audit_1 = require("./types/audit");
+Object.defineProperty(exports, "DV_AUDIT_CHANNEL", { enumerable: true, get: function () { return audit_1.DV_AUDIT_CHANNEL; } });
 var snowflake_1 = require("./utils/snowflake");
 Object.defineProperty(exports, "addTimestampToMessage", { enumerable: true, get: function () { return snowflake_1.addTimestampToMessage; } });
 Object.defineProperty(exports, "extractSnowflakeId", { enumerable: true, get: function () { return snowflake_1.extractSnowflakeId; } });

package/dist/react/useMultiAgentChannelMessages.d.ts

@@ -1,6 +1,9 @@
 import { type InfiniteData, type UseInfiniteQueryResult } from "@tanstack/react-query";
 import type { MessageStructure } from "../types/common";
-export declare function multiAgentChannelMessagesQueryKey(channelName: string, agentIds: string[], sources?: string[]): readonly ["doover", "channel", string, "messages", string, "src", string];
+export declare function multiAgentChannelMessagesQueryKey(channelName: string, agentIds: string[], sources?: string[], scope?: {
+    after?: string;
+    fields?: readonly string[];
+}): readonly ["doover", "channel", string, "messages", string, "src", string] | readonly ["doover", "channel", string, "messages", string, "src", string, Record<string, unknown>];
 export interface UseMultiAgentChannelMessagesOptions {
     limit?: number;
     /** If false, skip live subscriptions per agent. Defaults true. */
@@ -12,6 +15,14 @@ export interface UseMultiAgentChannelMessagesOptions {
     fields?: string[];
     /** Optional first-page `before` cursor (snowflake id). */
     initialBefore?: string;
+    /**
+     * Optional lower-bound snowflake id. Forwarded server-side so each
+     * agent's pagination stops on its own once it walks past the bound —
+     * mirrors `useChannelMessages`'s `after`. Use this to fetch a bounded
+     * time window (e.g. last 24h) across many agents without filtering
+     * on the client.
+     */
+    after?: string;
     /**
      * Restrict to these source ids on a `MultiplexClient`. Ignored for a plain
      * `DooverClient` or `LocalAgentClient`. When set, the query key is

package/dist/react/useMultiAgentChannelMessages.js

@@ -5,9 +5,9 @@ exports.useMultiAgentChannelMessages = useMultiAgentChannelMessages;
 const react_1 = require("react");
 const react_query_1 = require("@tanstack/react-query");
 const context_1 = require("./context");
-function multiAgentChannelMessagesQueryKey(channelName, agentIds, sources) {
+function multiAgentChannelMessagesQueryKey(channelName, agentIds, sources, scope) {
     const sourceDim = sources && sources.length ? [...sources].sort().join(",") : "*";
-    return [
+    const base = [
         "doover",
         "channel",
         channelName,
@@ -16,6 +16,19 @@ function multiAgentChannelMessagesQueryKey(channelName, agentIds, sources) {
         "src",
         sourceDim,
     ];
+    // Pagination cursors come from the first page's response and are scoped
+    // to *that* response's `after`/`fields`. Mixing them under one cache
+    // entry would cause `getNextPageParam` to anchor on an unrelated page,
+    // so a differently-bounded request must live under its own key.
+    const scopeKey = {};
+    if (scope?.after)
+        scopeKey.after = scope.after;
+    if (scope?.fields && scope.fields.length > 0) {
+        scopeKey.fields = [...scope.fields].sort();
+    }
+    return Object.keys(scopeKey).length > 0
+        ? [...base, scopeKey]
+        : base;
 }
 function useMultiAgentChannelMessages(channelName, agentIds, options) {
     const client = (0, context_1.useDooverClient)();
@@ -25,7 +38,11 @@ function useMultiAgentChannelMessages(channelName, agentIds, options) {
     const fields = options?.fields;
     const initialBefore = options?.initialBefore;
     const sources = options?.sources;
-    const key = multiAgentChannelMessagesQueryKey(channelName, agentIds, sources);
+    const after = options?.after;
+    const key = multiAgentChannelMessagesQueryKey(channelName, agentIds, sources, {
+        after,
+        fields,
+    });
     const prependMessage = (0, react_1.useCallback)((message) => {
         queryClient.setQueryData(key, (current) => {
             if (!current)
@@ -72,6 +89,7 @@ function useMultiAgentChannelMessages(channelName, agentIds, options) {
                 ...(typeof pageParam === "string" ? { before: pageParam } : {}),
                 ...(limit !== undefined ? { limit } : {}),
                 ...(fields && fields.length > 0 ? { field_name: fields } : {}),
+                ...(after !== undefined ? { after } : {}),
             };
             // Pass `{ sources }` as a trailing bag only when set — cast through
             // `never` since the TypeScript overloads don't declare it.

package/dist/types/audit.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Audit event types — mirror of the records doover-control writes to the
+ * `dv-audit` channel (see ``doover-control/doover_control/events/audit.py``
+ * for the source of truth).
+ *
+ * Each record is read back via the standard channel-messages APIs: it lands
+ * inside a ``MessageStructure<AuditEvent>`` envelope (with ``id``, ``timestamp``,
+ * ``channel``, etc.), and the record itself is on ``message.data``.
+ */
+/** Channel name on which audit records live in doover-data. */
+export declare const DV_AUDIT_CHANNEL = "dv-audit";
+/** The role this party plays in the record. */
+export type AuditEntityType = "device" | "user" | "organisation" | "Tunnel" | "ApplicationInstallation" | "SolutionInstallation" | "ApplicationDeployment" | "ObjectGroup" | "PendingUser" | "User" | "fusionauth" | "system";
+export interface AuditEntity {
+    type: AuditEntityType;
+    /** Stringified id (User pk, Device pk, FA UUID, etc.). May be absent for `system`. */
+    id?: string;
+    /** Display name. May be an email for users / pending invites. */
+    name?: string;
+}
+export interface AuditOrganisation {
+    id: string;
+    name: string;
+}
+export interface AuditRequestContext {
+    ip_address?: string;
+    user_agent?: string;
+}
+/** Origin system for the event. */
+export type AuditSource = "control" | "fusionauth" | "data" | "tunnels";
+/**
+ * String-literal union of every wired audit action — kept in lock-step with
+ * ``doover_control/events/types.py``'s ``EventType`` enum. Future event types
+ * declared in Python but not yet emitted are intentionally included so the
+ * frontend mapping (icons, labels) can be filled in ahead of the wire-up.
+ */
+export type AuditAction = "user.logged_in" | "user.login.failed" | "user.signed_up" | "user.created" | "user.updated" | "user.deleted" | "user.deactivated" | "user.reactivated" | "user.password_changed" | "user.password_reset" | "user.password_breached" | "user.mfa_changed" | "user.email_verified" | "user.email_changed" | "user.idp_linked" | "user.idp_unlinked" | "user.token_revoked" | "user.invited" | "user.removed" | "user.role_changed" | "app.installed" | "app.deployed" | "app.config_changed" | "app.uninstalled" | "solution.config_changed" | "group.created" | "group.edited" | "group.deleted" | "device.created" | "device.updated" | "device.config_changed" | "device.archived" | "device.unarchived" | "device.deleted" | "device.opened" | "tunnel.created" | "tunnel.deleted" | "tunnel.opened" | "tunnel.closed" | "tunnel.accessed" | "notification.sent" | "report.created" | "command.received";
+/**
+ * The audit record payload as written by ``publish_audit`` — i.e. what you
+ * find on ``MessageStructure<AuditEvent>.data`` after reading the channel.
+ *
+ * The doover-data ``MessageStructure`` envelope provides ``id`` (snowflake)
+ * and ``timestamp`` (epoch ms) for ordering; this struct is the body only.
+ */
+export interface AuditEvent {
+    action: AuditAction;
+    actor: AuditEntity | null;
+    subject: AuditEntity | null;
+    organisation: AuditOrganisation | null;
+    source: AuditSource;
+    metadata: Record<string, unknown>;
+    request_context: AuditRequestContext | null;
+}

package/dist/types/audit.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Audit event types — mirror of the records doover-control writes to the
+ * `dv-audit` channel (see ``doover-control/doover_control/events/audit.py``
+ * for the source of truth).
+ *
+ * Each record is read back via the standard channel-messages APIs: it lands
+ * inside a ``MessageStructure<AuditEvent>`` envelope (with ``id``, ``timestamp``,
+ * ``channel``, etc.), and the record itself is on ``message.data``.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DV_AUDIT_CHANNEL = void 0;
+/** Channel name on which audit records live in doover-data. */
+exports.DV_AUDIT_CHANNEL = "dv-audit";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "doover-js",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "TypeScript client for Doover.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",