weave-typescript 0.42.8 → 0.44.0

package/dist/weavesql/weavedb/auth_identity_sql.d.ts

@@ -455,6 +455,87 @@ export interface InsertAuthAuditEventArgs {
     metadata: any;
 }
 export declare function insertAuthAuditEvent(client: Client, args: InsertAuthAuditEventArgs): Promise<void>;
+export declare const insertAuthorizationDecisionEventQuery = "-- name: InsertAuthorizationDecisionEvent :one\nINSERT INTO weave.authorization_decision_events (\n    organization_id,\n    acting_user_id,\n    actor_organization_membership_id,\n    actor_identity_link_id,\n    rbac_role_ids,\n    org_team_ids,\n    platform_grant_ids,\n    support_access_session_id,\n    feature_flag_key,\n    feature_flag_provider,\n    feature_flag_variant,\n    resource_id,\n    resource_instance_id,\n    action,\n    decision,\n    reason_code,\n    safe_message,\n    used_support_elevation,\n    metadata\n) VALUES (\n    $1,\n    $2::uuid,\n    $3::uuid,\n    $4::uuid,\n    $5,\n    $6,\n    $7,\n    $8::uuid,\n    $9,\n    $10,\n    $11,\n    $12,\n    $13,\n    $14,\n    $15,\n    $16,\n    $17,\n    $18,\n    $19\n)\nRETURNING\n    id,\n    organization_id,\n    acting_user_id,\n    actor_organization_membership_id,\n    actor_identity_link_id,\n    rbac_role_ids,\n    org_team_ids,\n    platform_grant_ids,\n    support_access_session_id,\n    feature_flag_key,\n    feature_flag_provider,\n    feature_flag_variant,\n    resource_id,\n    resource_instance_id,\n    action,\n    decision,\n    reason_code,\n    safe_message,\n    used_support_elevation,\n    metadata,\n    created_at";
+export interface InsertAuthorizationDecisionEventArgs {
+    organizationId: string;
+    actingUserId: string | null;
+    actorOrganizationMembershipId: string | null;
+    actorIdentityLinkId: string | null;
+    rbacRoleIds: string[];
+    orgTeamIds: string[];
+    platformGrantIds: string[];
+    supportAccessSessionId: string | null;
+    featureFlagKey: string;
+    featureFlagProvider: string;
+    featureFlagVariant: string;
+    resourceId: string;
+    resourceInstanceId: string;
+    action: string;
+    decision: string;
+    reasonCode: string;
+    safeMessage: string;
+    usedSupportElevation: boolean;
+    metadata: any;
+}
+export interface InsertAuthorizationDecisionEventRow {
+    id: string;
+    organizationId: string;
+    actingUserId: string | null;
+    actorOrganizationMembershipId: string | null;
+    actorIdentityLinkId: string | null;
+    rbacRoleIds: string[];
+    orgTeamIds: string[];
+    platformGrantIds: string[];
+    supportAccessSessionId: string | null;
+    featureFlagKey: string;
+    featureFlagProvider: string;
+    featureFlagVariant: string;
+    resourceId: string;
+    resourceInstanceId: string;
+    action: string;
+    decision: string;
+    reasonCode: string;
+    safeMessage: string;
+    usedSupportElevation: boolean;
+    metadata: any;
+    createdAt: Date;
+}
+export declare function insertAuthorizationDecisionEvent(client: Client, args: InsertAuthorizationDecisionEventArgs): Promise<InsertAuthorizationDecisionEventRow | null>;
+export declare const listAuthorizationDecisionEventsByOrganizationQuery = "-- name: ListAuthorizationDecisionEventsByOrganization :many\nSELECT\n    id,\n    organization_id,\n    acting_user_id,\n    actor_organization_membership_id,\n    actor_identity_link_id,\n    rbac_role_ids,\n    org_team_ids,\n    platform_grant_ids,\n    support_access_session_id,\n    feature_flag_key,\n    feature_flag_provider,\n    feature_flag_variant,\n    resource_id,\n    resource_instance_id,\n    action,\n    decision,\n    reason_code,\n    safe_message,\n    used_support_elevation,\n    metadata,\n    created_at\nFROM weave.authorization_decision_events\nWHERE organization_id = $1\n  AND (\n      $2::uuid IS NULL\n      OR acting_user_id = $2::uuid\n  )\n  AND (\n      $3::text IS NULL\n      OR feature_flag_key = $3::text\n  )\n  AND (\n      $4::text IS NULL\n      OR resource_id = $4::text\n  )\n  AND (\n      $5::text IS NULL\n      OR action = $5::text\n  )\n  AND (\n      $6::text IS NULL\n      OR decision = $6::text\n  )\nORDER BY created_at DESC, id DESC\nLIMIT $8 OFFSET $7";
+export interface ListAuthorizationDecisionEventsByOrganizationArgs {
+    organizationId: string;
+    actingUserId: string | null;
+    featureFlagKey: string | null;
+    resourceId: string | null;
+    action: string | null;
+    decision: string | null;
+    pageOffset: string;
+    pageSize: string;
+}
+export interface ListAuthorizationDecisionEventsByOrganizationRow {
+    id: string;
+    organizationId: string;
+    actingUserId: string | null;
+    actorOrganizationMembershipId: string | null;
+    actorIdentityLinkId: string | null;
+    rbacRoleIds: string[];
+    orgTeamIds: string[];
+    platformGrantIds: string[];
+    supportAccessSessionId: string | null;
+    featureFlagKey: string;
+    featureFlagProvider: string;
+    featureFlagVariant: string;
+    resourceId: string;
+    resourceInstanceId: string;
+    action: string;
+    decision: string;
+    reasonCode: string;
+    safeMessage: string;
+    usedSupportElevation: boolean;
+    metadata: any;
+    createdAt: Date;
+}
+export declare function listAuthorizationDecisionEventsByOrganization(client: Client, args: ListAuthorizationDecisionEventsByOrganizationArgs): Promise<ListAuthorizationDecisionEventsByOrganizationRow[]>;
 export declare const createApplicationSessionQuery = "-- name: CreateApplicationSession :one\nINSERT INTO weave.application_sessions (\n    user_id,\n    active_organization_id,\n    expires_at\n) VALUES (\n    $1,\n    $2,\n    $3\n)\nRETURNING\n    id,\n    user_id,\n    active_organization_id,\n    status,\n    expires_at,\n    revoked_at,\n    created_at,\n    updated_at";
 export interface CreateApplicationSessionArgs {
     userId: string;

package/dist/weavesql/weavedb/auth_identity_sql.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteOrgTeamQuery = exports.updateOrgTeamQuery = exports.listOrgTeamsQuery = exports.getOrgTeamQuery = exports.createOrgTeamQuery = exports.deleteExpiredAuthInviteSessionsQuery = exports.revokeAuthInviteSessionsByMemberQuery = exports.markAuthInviteSessionRecoveryRequiredQuery = exports.markAuthInviteSessionCompletedQuery = exports.setAuthInviteSessionOAuthStateQuery = exports.getAuthInviteSessionQuery = exports.createAuthInviteSessionQuery = exports.deleteExpiredApplicationSessionsQuery = exports.markApplicationSessionOrganizationSessionStateQuery = exports.listApplicationSessionOrganizationSessionStatesQuery = exports.getApplicationSessionOrganizationSessionQuery = exports.upsertApplicationSessionOrganizationSessionQuery = exports.revokeApplicationSessionQuery = exports.setApplicationSessionActiveOrganizationQuery = exports.getApplicationSessionQuery = exports.createApplicationSessionQuery = exports.insertAuthAuditEventQuery = exports.endSupportAccessSessionQuery = exports.createSupportAccessSessionQuery = exports.createPlatformAdminGrantQuery = exports.listActivePlatformAdminGrantsForUserQuery = exports.getOrganizationMemberAdminRecordQuery = exports.listOrganizationMembersQuery = exports.listOrganizationMembershipsForUserQuery = exports.getOrganizationMembershipQuery = exports.upsertOrganizationMembershipQuery = exports.upsertOrganizationAuthLinkQuery = exports.getOrganizationAuthLinkByOrganizationIDQuery = exports.getOrganizationAuthLinkByStytchIDQuery = exports.upsertIdentityLinkQuery = exports.getIdentityLinkByStytchMemberQuery = exports.getUserProfileQuery = exports.upsertUserProfileQuery = exports.deleteOrganizationAuthDomainQuery = exports.listOrganizationAuthDomainsQuery = exports.upsertOrganizationAuthDomainQuery = exports.resolvePrimaryOrganizationAuthLinkByDomainQuery = exports.updateUserProfileThemeQuery = exports.setUserOrganizationPagePositionQuery = exports.setUserLastOrganizationQuery = exports.getUserAuthPreferencesQuery = exports.getUserPrimaryOrganizationAuthLinkQuery = exports.setUserPrimaryOrganizationQuery = exports.getUserByIDQuery = exports.createUserQuery = void 0;
-exports.deleteOrgTeamMembershipsForOrganizationMemberQuery = exports.listEffectiveOrganizationRoleIDsQuery = exports.listOrgTeamRoleGrantsQuery = exports.listOrgTeamMembersQuery = exports.addOrgTeamRoleGrantQuery = exports.deleteOrgTeamRoleGrantsQuery = exports.addOrgTeamMembershipQuery = exports.deleteOrgTeamMembershipsQuery = void 0;
+exports.listOrgTeamsQuery = exports.getOrgTeamQuery = exports.createOrgTeamQuery = exports.deleteExpiredAuthInviteSessionsQuery = exports.revokeAuthInviteSessionsByMemberQuery = exports.markAuthInviteSessionRecoveryRequiredQuery = exports.markAuthInviteSessionCompletedQuery = exports.setAuthInviteSessionOAuthStateQuery = exports.getAuthInviteSessionQuery = exports.createAuthInviteSessionQuery = exports.deleteExpiredApplicationSessionsQuery = exports.markApplicationSessionOrganizationSessionStateQuery = exports.listApplicationSessionOrganizationSessionStatesQuery = exports.getApplicationSessionOrganizationSessionQuery = exports.upsertApplicationSessionOrganizationSessionQuery = exports.revokeApplicationSessionQuery = exports.setApplicationSessionActiveOrganizationQuery = exports.getApplicationSessionQuery = exports.createApplicationSessionQuery = exports.listAuthorizationDecisionEventsByOrganizationQuery = exports.insertAuthorizationDecisionEventQuery = exports.insertAuthAuditEventQuery = exports.endSupportAccessSessionQuery = exports.createSupportAccessSessionQuery = exports.createPlatformAdminGrantQuery = exports.listActivePlatformAdminGrantsForUserQuery = exports.getOrganizationMemberAdminRecordQuery = exports.listOrganizationMembersQuery = exports.listOrganizationMembershipsForUserQuery = exports.getOrganizationMembershipQuery = exports.upsertOrganizationMembershipQuery = exports.upsertOrganizationAuthLinkQuery = exports.getOrganizationAuthLinkByOrganizationIDQuery = exports.getOrganizationAuthLinkByStytchIDQuery = exports.upsertIdentityLinkQuery = exports.getIdentityLinkByStytchMemberQuery = exports.getUserProfileQuery = exports.upsertUserProfileQuery = exports.deleteOrganizationAuthDomainQuery = exports.listOrganizationAuthDomainsQuery = exports.upsertOrganizationAuthDomainQuery = exports.resolvePrimaryOrganizationAuthLinkByDomainQuery = exports.updateUserProfileThemeQuery = exports.setUserOrganizationPagePositionQuery = exports.setUserLastOrganizationQuery = exports.getUserAuthPreferencesQuery = exports.getUserPrimaryOrganizationAuthLinkQuery = exports.setUserPrimaryOrganizationQuery = exports.getUserByIDQuery = exports.createUserQuery = void 0;
+exports.deleteOrgTeamMembershipsForOrganizationMemberQuery = exports.listEffectiveOrganizationRoleIDsQuery = exports.listOrgTeamRoleGrantsQuery = exports.listOrgTeamMembersQuery = exports.addOrgTeamRoleGrantQuery = exports.deleteOrgTeamRoleGrantsQuery = exports.addOrgTeamMembershipQuery = exports.deleteOrgTeamMembershipsQuery = exports.deleteOrgTeamQuery = exports.updateOrgTeamQuery = void 0;
 exports.createUser = createUser;
 exports.getUserByID = getUserByID;
 exports.setUserPrimaryOrganization = setUserPrimaryOrganization;
@@ -29,6 +29,8 @@ exports.listActivePlatformAdminGrantsForUser = listActivePlatformAdminGrantsForU
 exports.createPlatformAdminGrant = createPlatformAdminGrant;
 exports.createSupportAccessSession = createSupportAccessSession;
 exports.insertAuthAuditEvent = insertAuthAuditEvent;
+exports.insertAuthorizationDecisionEvent = insertAuthorizationDecisionEvent;
+exports.listAuthorizationDecisionEventsByOrganization = listAuthorizationDecisionEventsByOrganization;
 exports.createApplicationSession = createApplicationSession;
 exports.getApplicationSession = getApplicationSession;
 exports.setApplicationSessionActiveOrganization = setApplicationSessionActiveOrganization;
@@ -1117,6 +1119,183 @@ async function insertAuthAuditEvent(client, args) {
         rowMode: "array"
     });
 }
+exports.insertAuthorizationDecisionEventQuery = `-- name: InsertAuthorizationDecisionEvent :one
+INSERT INTO weave.authorization_decision_events (
+    organization_id,
+    acting_user_id,
+    actor_organization_membership_id,
+    actor_identity_link_id,
+    rbac_role_ids,
+    org_team_ids,
+    platform_grant_ids,
+    support_access_session_id,
+    feature_flag_key,
+    feature_flag_provider,
+    feature_flag_variant,
+    resource_id,
+    resource_instance_id,
+    action,
+    decision,
+    reason_code,
+    safe_message,
+    used_support_elevation,
+    metadata
+) VALUES (
+    $1,
+    $2::uuid,
+    $3::uuid,
+    $4::uuid,
+    $5,
+    $6,
+    $7,
+    $8::uuid,
+    $9,
+    $10,
+    $11,
+    $12,
+    $13,
+    $14,
+    $15,
+    $16,
+    $17,
+    $18,
+    $19
+)
+RETURNING
+    id,
+    organization_id,
+    acting_user_id,
+    actor_organization_membership_id,
+    actor_identity_link_id,
+    rbac_role_ids,
+    org_team_ids,
+    platform_grant_ids,
+    support_access_session_id,
+    feature_flag_key,
+    feature_flag_provider,
+    feature_flag_variant,
+    resource_id,
+    resource_instance_id,
+    action,
+    decision,
+    reason_code,
+    safe_message,
+    used_support_elevation,
+    metadata,
+    created_at`;
+async function insertAuthorizationDecisionEvent(client, args) {
+    const result = await client.query({
+        text: exports.insertAuthorizationDecisionEventQuery,
+        values: [args.organizationId, args.actingUserId, args.actorOrganizationMembershipId, args.actorIdentityLinkId, args.rbacRoleIds, args.orgTeamIds, args.platformGrantIds, args.supportAccessSessionId, args.featureFlagKey, args.featureFlagProvider, args.featureFlagVariant, args.resourceId, args.resourceInstanceId, args.action, args.decision, args.reasonCode, args.safeMessage, args.usedSupportElevation, args.metadata],
+        rowMode: "array"
+    });
+    if (result.rows.length !== 1) {
+        return null;
+    }
+    const row = result.rows[0];
+    return {
+        id: row[0],
+        organizationId: row[1],
+        actingUserId: row[2],
+        actorOrganizationMembershipId: row[3],
+        actorIdentityLinkId: row[4],
+        rbacRoleIds: row[5],
+        orgTeamIds: row[6],
+        platformGrantIds: row[7],
+        supportAccessSessionId: row[8],
+        featureFlagKey: row[9],
+        featureFlagProvider: row[10],
+        featureFlagVariant: row[11],
+        resourceId: row[12],
+        resourceInstanceId: row[13],
+        action: row[14],
+        decision: row[15],
+        reasonCode: row[16],
+        safeMessage: row[17],
+        usedSupportElevation: row[18],
+        metadata: row[19],
+        createdAt: row[20]
+    };
+}
+exports.listAuthorizationDecisionEventsByOrganizationQuery = `-- name: ListAuthorizationDecisionEventsByOrganization :many
+SELECT
+    id,
+    organization_id,
+    acting_user_id,
+    actor_organization_membership_id,
+    actor_identity_link_id,
+    rbac_role_ids,
+    org_team_ids,
+    platform_grant_ids,
+    support_access_session_id,
+    feature_flag_key,
+    feature_flag_provider,
+    feature_flag_variant,
+    resource_id,
+    resource_instance_id,
+    action,
+    decision,
+    reason_code,
+    safe_message,
+    used_support_elevation,
+    metadata,
+    created_at
+FROM weave.authorization_decision_events
+WHERE organization_id = $1
+  AND (
+      $2::uuid IS NULL
+      OR acting_user_id = $2::uuid
+  )
+  AND (
+      $3::text IS NULL
+      OR feature_flag_key = $3::text
+  )
+  AND (
+      $4::text IS NULL
+      OR resource_id = $4::text
+  )
+  AND (
+      $5::text IS NULL
+      OR action = $5::text
+  )
+  AND (
+      $6::text IS NULL
+      OR decision = $6::text
+  )
+ORDER BY created_at DESC, id DESC
+LIMIT $8 OFFSET $7`;
+async function listAuthorizationDecisionEventsByOrganization(client, args) {
+    const result = await client.query({
+        text: exports.listAuthorizationDecisionEventsByOrganizationQuery,
+        values: [args.organizationId, args.actingUserId, args.featureFlagKey, args.resourceId, args.action, args.decision, args.pageOffset, args.pageSize],
+        rowMode: "array"
+    });
+    return result.rows.map(row => {
+        return {
+            id: row[0],
+            organizationId: row[1],
+            actingUserId: row[2],
+            actorOrganizationMembershipId: row[3],
+            actorIdentityLinkId: row[4],
+            rbacRoleIds: row[5],
+            orgTeamIds: row[6],
+            platformGrantIds: row[7],
+            supportAccessSessionId: row[8],
+            featureFlagKey: row[9],
+            featureFlagProvider: row[10],
+            featureFlagVariant: row[11],
+            resourceId: row[12],
+            resourceInstanceId: row[13],
+            action: row[14],
+            decision: row[15],
+            reasonCode: row[16],
+            safeMessage: row[17],
+            usedSupportElevation: row[18],
+            metadata: row[19],
+            createdAt: row[20]
+        };
+    });
+}
 exports.createApplicationSessionQuery = `-- name: CreateApplicationSession :one
 INSERT INTO weave.application_sessions (
     user_id,