dominus-sdk-python-dev 2.1.8__py3-none-any.whl → 2.2.0__py3-none-any.whl

dominus/namespaces/auth.py

@@ -316,6 +316,75 @@ class AuthNamespace:
             body={"scope_ids": scope_ids}
         )
 
+    # Role-tenant junction
+    async def get_role_tenants(self, role_id: str) -> List[Dict[str, Any]]:
+        """Get tenants assigned to role."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/roles/{role_id}/tenants",
+            method="GET"
+        )
+
+    async def add_role_tenants(self, role_id: str, tenant_ids: List[str]) -> Dict[str, Any]:
+        """Add tenants to role."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/roles/{role_id}/tenants",
+            body={"tenant_ids": tenant_ids}
+        )
+
+    async def remove_role_tenants(self, role_id: str, tenant_ids: List[str]) -> Dict[str, Any]:
+        """Remove tenants from role."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/roles/{role_id}/tenants",
+            method="DELETE",
+            body={"tenant_ids": tenant_ids}
+        )
+
+    # Role-category junction
+    async def get_role_categories(self, role_id: str) -> List[Dict[str, Any]]:
+        """Get categories assigned to role."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/roles/{role_id}/categories",
+            method="GET"
+        )
+
+    async def add_role_categories(self, role_id: str, category_ids: List[str]) -> Dict[str, Any]:
+        """Add categories to role."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/roles/{role_id}/categories",
+            body={"category_ids": category_ids}
+        )
+
+    async def remove_role_categories(self, role_id: str, category_ids: List[str]) -> Dict[str, Any]:
+        """Remove categories from role."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/roles/{role_id}/categories",
+            method="DELETE",
+            body={"category_ids": category_ids}
+        )
+
+    # Role-subtype junction
+    async def get_role_subtypes(self, role_id: str) -> List[Dict[str, Any]]:
+        """Get subtypes assigned to role."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/roles/{role_id}/subtypes",
+            method="GET"
+        )
+
+    async def add_role_subtypes(self, role_id: str, subtype_ids: List[str]) -> Dict[str, Any]:
+        """Add subtypes to role."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/roles/{role_id}/subtypes",
+            body={"subtype_ids": subtype_ids}
+        )
+
+    async def remove_role_subtypes(self, role_id: str, subtype_ids: List[str]) -> Dict[str, Any]:
+        """Remove subtypes from role."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/roles/{role_id}/subtypes",
+            method="DELETE",
+            body={"subtype_ids": subtype_ids}
+        )
+
     # ========================================
     # SCOPES
     # ========================================
@@ -383,6 +452,52 @@ class AuthNamespace:
             method="DELETE"
         )
 
+    # Scope-tenant junction
+    async def get_scope_tenants(self, scope_id: str) -> List[Dict[str, Any]]:
+        """Get tenants assigned to scope."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/scopes/{scope_id}/tenants",
+            method="GET"
+        )
+
+    async def add_scope_tenants(self, scope_id: str, tenant_ids: List[str]) -> Dict[str, Any]:
+        """Add tenants to scope."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/scopes/{scope_id}/tenants",
+            body={"tenant_ids": tenant_ids}
+        )
+
+    async def remove_scope_tenants(self, scope_id: str, tenant_ids: List[str]) -> Dict[str, Any]:
+        """Remove tenants from scope."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/scopes/{scope_id}/tenants",
+            method="DELETE",
+            body={"tenant_ids": tenant_ids}
+        )
+
+    # Scope-category junction
+    async def get_scope_categories(self, scope_id: str) -> List[Dict[str, Any]]:
+        """Get categories assigned to scope."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/scopes/{scope_id}/categories",
+            method="GET"
+        )
+
+    async def add_scope_categories(self, scope_id: str, category_ids: List[str]) -> Dict[str, Any]:
+        """Add categories to scope."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/scopes/{scope_id}/categories",
+            body={"category_ids": category_ids}
+        )
+
+    async def remove_scope_categories(self, scope_id: str, category_ids: List[str]) -> Dict[str, Any]:
+        """Remove categories from scope."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/scopes/{scope_id}/categories",
+            method="DELETE",
+            body={"category_ids": category_ids}
+        )
+
     # ========================================
     # CLIENTS (PSK/Machine Auth)
     # ========================================
@@ -490,6 +605,75 @@ class AuthNamespace:
             body={"tenant_ids": tenant_ids}
         )
 
+    # Client-role junction
+    async def get_client_roles(self, client_id: str) -> List[Dict[str, Any]]:
+        """Get roles assigned to client."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/clients/{client_id}/roles",
+            method="GET"
+        )
+
+    async def add_client_roles(self, client_id: str, role_ids: List[str]) -> Dict[str, Any]:
+        """Add roles to client."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/clients/{client_id}/roles",
+            body={"role_ids": role_ids}
+        )
+
+    async def remove_client_roles(self, client_id: str, role_ids: List[str]) -> Dict[str, Any]:
+        """Remove roles from client."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/clients/{client_id}/roles",
+            method="DELETE",
+            body={"role_ids": role_ids}
+        )
+
+    # Client-scope junction
+    async def get_client_scopes(self, client_id: str) -> List[Dict[str, Any]]:
+        """Get scopes assigned to client."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/clients/{client_id}/scopes",
+            method="GET"
+        )
+
+    async def add_client_scopes(self, client_id: str, scope_ids: List[str]) -> Dict[str, Any]:
+        """Add scopes to client."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/clients/{client_id}/scopes",
+            body={"scope_ids": scope_ids}
+        )
+
+    async def remove_client_scopes(self, client_id: str, scope_ids: List[str]) -> Dict[str, Any]:
+        """Remove scopes from client."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/clients/{client_id}/scopes",
+            method="DELETE",
+            body={"scope_ids": scope_ids}
+        )
+
+    # Client-subtype junction
+    async def get_client_subtypes(self, client_id: str) -> List[Dict[str, Any]]:
+        """Get subtypes assigned to client."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/clients/{client_id}/subtypes",
+            method="GET"
+        )
+
+    async def add_client_subtypes(self, client_id: str, subtype_ids: List[str]) -> Dict[str, Any]:
+        """Add subtypes to client."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/clients/{client_id}/subtypes",
+            body={"subtype_ids": subtype_ids}
+        )
+
+    async def remove_client_subtypes(self, client_id: str, subtype_ids: List[str]) -> Dict[str, Any]:
+        """Remove subtypes from client."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/clients/{client_id}/subtypes",
+            method="DELETE",
+            body={"subtype_ids": subtype_ids}
+        )
+
     # ========================================
     # TENANTS
     # ========================================
@@ -703,6 +887,75 @@ class AuthNamespace:
             method="DELETE"
         )
 
+    # Subtype-tenant junction
+    async def get_subtype_tenants(self, subtype_id: str) -> List[Dict[str, Any]]:
+        """Get tenants assigned to subtype."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/subtypes/{subtype_id}/tenants",
+            method="GET"
+        )
+
+    async def add_subtype_tenants(self, subtype_id: str, tenant_ids: List[str]) -> Dict[str, Any]:
+        """Add tenants to subtype."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/subtypes/{subtype_id}/tenants",
+            body={"tenant_ids": tenant_ids}
+        )
+
+    async def remove_subtype_tenants(self, subtype_id: str, tenant_ids: List[str]) -> Dict[str, Any]:
+        """Remove tenants from subtype."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/subtypes/{subtype_id}/tenants",
+            method="DELETE",
+            body={"tenant_ids": tenant_ids}
+        )
+
+    # Subtype-category junction
+    async def get_subtype_categories(self, subtype_id: str) -> List[Dict[str, Any]]:
+        """Get categories assigned to subtype."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/subtypes/{subtype_id}/categories",
+            method="GET"
+        )
+
+    async def add_subtype_categories(self, subtype_id: str, category_ids: List[str]) -> Dict[str, Any]:
+        """Add categories to subtype."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/subtypes/{subtype_id}/categories",
+            body={"category_ids": category_ids}
+        )
+
+    async def remove_subtype_categories(self, subtype_id: str, category_ids: List[str]) -> Dict[str, Any]:
+        """Remove categories from subtype."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/subtypes/{subtype_id}/categories",
+            method="DELETE",
+            body={"category_ids": category_ids}
+        )
+
+    # Subtype-scope junction
+    async def get_subtype_scopes(self, subtype_id: str) -> List[Dict[str, Any]]:
+        """Get scopes assigned to subtype."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/subtypes/{subtype_id}/scopes",
+            method="GET"
+        )
+
+    async def add_subtype_scopes(self, subtype_id: str, scope_ids: List[str]) -> Dict[str, Any]:
+        """Add scopes to subtype."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/subtypes/{subtype_id}/scopes",
+            body={"scope_ids": scope_ids}
+        )
+
+    async def remove_subtype_scopes(self, subtype_id: str, scope_ids: List[str]) -> Dict[str, Any]:
+        """Remove scopes from subtype."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/subtypes/{subtype_id}/scopes",
+            method="DELETE",
+            body={"scope_ids": scope_ids}
+        )
+
     # ========================================
     # PAGES
     # ========================================
@@ -712,10 +965,16 @@ class AuthNamespace:
         path: str,
         name: str,
         description: Optional[str] = None,
-        is_active: bool = True
+        is_active: bool = True,
+        show_in_nav: bool = True
     ) -> Dict[str, Any]:
         """Create a new page."""
-        body = {"path": path, "name": name, "is_active": is_active}
+        body = {
+            "path": path,
+            "name": name,
+            "is_active": is_active,
+            "show_in_nav": show_in_nav
+        }
         if description:
             body["description"] = description
 
@@ -753,7 +1012,8 @@ class AuthNamespace:
         path: Optional[str] = None,
         name: Optional[str] = None,
         description: Optional[str] = None,
-        is_active: Optional[bool] = None
+        is_active: Optional[bool] = None,
+        show_in_nav: Optional[bool] = None
     ) -> Dict[str, Any]:
         """Update page."""
         body = {}
@@ -765,6 +1025,8 @@ class AuthNamespace:
             body["description"] = description
         if is_active is not None:
             body["is_active"] = is_active
+        if show_in_nav is not None:
+            body["show_in_nav"] = show_in_nav
 
         return await self._client._request(
             endpoint=f"/api/guardian/pages/{page_id}",
@@ -833,6 +1095,110 @@ class AuthNamespace:
             body={"scope_ids": scope_ids}
         )
 
+    async def set_page_tenants(self, page_id: str, tenant_ids: List[str]) -> List[Dict[str, Any]]:
+        """Set all tenants for page (replaces existing)."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/tenants",
+            method="PUT",
+            body={"tenant_ids": tenant_ids}
+        )
+
+    # Page-category junction
+    async def get_page_categories(self, page_id: str) -> List[Dict[str, Any]]:
+        """Get categories assigned to page."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/categories",
+            method="GET"
+        )
+
+    async def add_page_categories(self, page_id: str, category_ids: List[str]) -> Dict[str, Any]:
+        """Add categories to page."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/categories",
+            method="POST",
+            body={"category_ids": category_ids}
+        )
+
+    async def remove_page_categories(self, page_id: str, category_ids: List[str]) -> Dict[str, Any]:
+        """Remove categories from page."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/categories",
+            method="DELETE",
+            body={"category_ids": category_ids}
+        )
+
+    async def set_page_categories(self, page_id: str, category_ids: List[str]) -> List[Dict[str, Any]]:
+        """Set all categories for page (replaces existing)."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/categories",
+            method="PUT",
+            body={"category_ids": category_ids}
+        )
+
+    # Page excluded scopes (blocklist - users with these scopes CANNOT access)
+    async def get_page_excluded_scopes(self, page_id: str) -> List[Dict[str, Any]]:
+        """Get excluded scopes for page."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/excluded-scopes",
+            method="GET"
+        )
+
+    async def add_page_excluded_scopes(self, page_id: str, scope_ids: List[str]) -> Dict[str, Any]:
+        """Add excluded scopes to page."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/excluded-scopes",
+            method="POST",
+            body={"scope_ids": scope_ids}
+        )
+
+    async def remove_page_excluded_scopes(self, page_id: str, scope_ids: List[str]) -> Dict[str, Any]:
+        """Remove excluded scopes from page."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/excluded-scopes",
+            method="DELETE",
+            body={"scope_ids": scope_ids}
+        )
+
+    async def set_page_excluded_scopes(self, page_id: str, scope_ids: List[str]) -> List[Dict[str, Any]]:
+        """Set all excluded scopes for page (replaces existing)."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/excluded-scopes",
+            method="PUT",
+            body={"scope_ids": scope_ids}
+        )
+
+    # Page excluded roles (blocklist - users with these roles CANNOT access)
+    async def get_page_excluded_roles(self, page_id: str) -> List[Dict[str, Any]]:
+        """Get excluded roles for page."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/excluded-roles",
+            method="GET"
+        )
+
+    async def add_page_excluded_roles(self, page_id: str, role_ids: List[str]) -> Dict[str, Any]:
+        """Add excluded roles to page."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/excluded-roles",
+            method="POST",
+            body={"role_ids": role_ids}
+        )
+
+    async def remove_page_excluded_roles(self, page_id: str, role_ids: List[str]) -> Dict[str, Any]:
+        """Remove excluded roles from page."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/excluded-roles",
+            method="DELETE",
+            body={"role_ids": role_ids}
+        )
+
+    async def set_page_excluded_roles(self, page_id: str, role_ids: List[str]) -> List[Dict[str, Any]]:
+        """Set all excluded roles for page (replaces existing)."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/pages/{page_id}/excluded-roles",
+            method="PUT",
+            body={"role_ids": role_ids}
+        )
+
     # ========================================
     # NAVIGATION
     # ========================================
@@ -841,14 +1207,39 @@ class AuthNamespace:
         self,
         title: str,
         icon: Optional[str] = None,
+        description: Optional[str] = None,
         page_id: Optional[str] = None,
         parent_id: Optional[str] = None,
-        sort_order: int = 0
+        item_type: str = "link",
+        is_active: bool = True,
+        sort_order: int = 0,
+        is_expanded_default: bool = False
     ) -> Dict[str, Any]:
-        """Create a new navigation item."""
-        body = {"title": title, "sort_order": sort_order}
+        """
+        Create a new navigation item.
+
+        Args:
+            title: Display title
+            icon: Icon name/class
+            description: Description text
+            page_id: Associated page ID
+            parent_id: Parent nav item ID (for hierarchical nav)
+            item_type: Type - 'link', 'header', or 'group_label'
+            is_active: Whether item is active
+            sort_order: Sort position
+            is_expanded_default: Whether group is expanded by default
+        """
+        body = {
+            "title": title,
+            "sort_order": sort_order,
+            "item_type": item_type,
+            "is_active": is_active,
+            "is_expanded_default": is_expanded_default
+        }
         if icon:
             body["icon"] = icon
+        if description:
+            body["description"] = description
         if page_id:
             body["page_id"] = page_id
         if parent_id:
@@ -868,12 +1259,40 @@ class AuthNamespace:
 
     async def list_nav_items(
         self,
+        tenant_id: Optional[str] = None,
+        parent_id: Optional[str] = None,
+        is_active: Optional[bool] = None,
         limit: int = 100,
-        offset: int = 0
+        offset: int = 0,
+        order_by: Optional[str] = None,
+        order_desc: Optional[bool] = None
     ) -> Dict[str, Any]:
-        """List all navigation items."""
+        """
+        List navigation items with optional filters.
+
+        Args:
+            tenant_id: Filter by tenant ID
+            parent_id: Filter by parent nav item ID
+            is_active: Filter by active status
+            limit: Max items to return
+            offset: Pagination offset
+            order_by: Sort field
+            order_desc: Sort descending
+        """
+        params = f"?limit={limit}&offset={offset}"
+        if tenant_id:
+            params += f"&tenant_id={tenant_id}"
+        if parent_id:
+            params += f"&parent_id={parent_id}"
+        if is_active is not None:
+            params += f"&is_active={str(is_active).lower()}"
+        if order_by:
+            params += f"&order_by={order_by}"
+        if order_desc is not None:
+            params += f"&order_desc={str(order_desc).lower()}"
+
         return await self._client._request(
-            endpoint=f"/api/guardian/nav-items?limit={limit}&offset={offset}",
+            endpoint=f"/api/guardian/nav-items{params}",
             method="GET"
         )
 
@@ -882,7 +1301,13 @@ class AuthNamespace:
         nav_id: str,
         title: Optional[str] = None,
         icon: Optional[str] = None,
-        sort_order: Optional[int] = None
+        description: Optional[str] = None,
+        page_id: Optional[str] = None,
+        parent_id: Optional[str] = None,
+        item_type: Optional[str] = None,
+        is_active: Optional[bool] = None,
+        sort_order: Optional[int] = None,
+        is_expanded_default: Optional[bool] = None
     ) -> Dict[str, Any]:
         """Update navigation item."""
         body = {}
@@ -890,8 +1315,20 @@ class AuthNamespace:
             body["title"] = title
         if icon is not None:
             body["icon"] = icon
+        if description is not None:
+            body["description"] = description
+        if page_id is not None:
+            body["page_id"] = page_id
+        if parent_id is not None:
+            body["parent_id"] = parent_id
+        if item_type is not None:
+            body["item_type"] = item_type
+        if is_active is not None:
+            body["is_active"] = is_active
         if sort_order is not None:
             body["sort_order"] = sort_order
+        if is_expanded_default is not None:
+            body["is_expanded_default"] = is_expanded_default
 
         return await self._client._request(
             endpoint=f"/api/guardian/nav-items/{nav_id}",
@@ -929,6 +1366,98 @@ class AuthNamespace:
             body={"tenant_ids": tenant_ids}
         )
 
+    # Nav-scope junction
+    async def get_nav_scopes(self, nav_id: str) -> List[Dict[str, Any]]:
+        """Get scopes assigned to nav item."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/nav-items/{nav_id}/scopes",
+            method="GET"
+        )
+
+    async def add_nav_scopes(self, nav_id: str, scope_ids: List[str]) -> Dict[str, Any]:
+        """Add scopes to nav item."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/nav-items/{nav_id}/scopes",
+            body={"scope_ids": scope_ids}
+        )
+
+    async def remove_nav_scopes(self, nav_id: str, scope_ids: List[str]) -> Dict[str, Any]:
+        """Remove scopes from nav item."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/nav-items/{nav_id}/scopes",
+            method="DELETE",
+            body={"scope_ids": scope_ids}
+        )
+
+    # Nav-role junction
+    async def get_nav_roles(self, nav_id: str) -> List[Dict[str, Any]]:
+        """Get roles assigned to nav item."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/nav-items/{nav_id}/roles",
+            method="GET"
+        )
+
+    async def add_nav_roles(self, nav_id: str, role_ids: List[str]) -> Dict[str, Any]:
+        """Add roles to nav item."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/nav-items/{nav_id}/roles",
+            body={"role_ids": role_ids}
+        )
+
+    async def remove_nav_roles(self, nav_id: str, role_ids: List[str]) -> Dict[str, Any]:
+        """Remove roles from nav item."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/nav-items/{nav_id}/roles",
+            method="DELETE",
+            body={"role_ids": role_ids}
+        )
+
+    # Nav-subtype junction
+    async def get_nav_subtypes(self, nav_id: str) -> List[Dict[str, Any]]:
+        """Get subtypes assigned to nav item."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/nav-items/{nav_id}/subtypes",
+            method="GET"
+        )
+
+    async def add_nav_subtypes(self, nav_id: str, subtype_ids: List[str]) -> Dict[str, Any]:
+        """Add subtypes to nav item."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/nav-items/{nav_id}/subtypes",
+            body={"subtype_ids": subtype_ids}
+        )
+
+    async def remove_nav_subtypes(self, nav_id: str, subtype_ids: List[str]) -> Dict[str, Any]:
+        """Remove subtypes from nav item."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/nav-items/{nav_id}/subtypes",
+            method="DELETE",
+            body={"subtype_ids": subtype_ids}
+        )
+
+    # Nav-category junction
+    async def get_nav_categories(self, nav_id: str) -> List[Dict[str, Any]]:
+        """Get categories assigned to nav item."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/nav-items/{nav_id}/categories",
+            method="GET"
+        )
+
+    async def add_nav_categories(self, nav_id: str, category_ids: List[str]) -> Dict[str, Any]:
+        """Add categories to nav item."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/nav-items/{nav_id}/categories",
+            body={"category_ids": category_ids}
+        )
+
+    async def remove_nav_categories(self, nav_id: str, category_ids: List[str]) -> Dict[str, Any]:
+        """Remove categories from nav item."""
+        return await self._client._request(
+            endpoint=f"/api/guardian/nav-items/{nav_id}/categories",
+            method="DELETE",
+            body={"category_ids": category_ids}
+        )
+
     # ========================================
     # SECURE TABLES
     # ========================================