import {z} from 'zod' export type CedarEffectFilter = 'Permit' | 'Forbid'; export type CedarPrincipalConstraintPattern = {eq?: boolean | undefined, in?: boolean | undefined, is?: boolean | undefined}; export type CedarPrincipalTypeFilter = {any?: boolean | undefined, role?: CedarPrincipalConstraintPattern | undefined, user?: CedarPrincipalConstraintPattern | undefined}; export type CedarResourceConstraintPattern = {eq?: boolean | undefined, in?: boolean | undefined, is?: boolean | undefined}; export type CedarResourceTypeFilter = {any?: boolean | undefined, 'generic-table'?: CedarResourceConstraintPattern | undefined, namespace?: CedarResourceConstraintPattern | undefined, project?: CedarResourceConstraintPattern | undefined, role?: CedarResourceConstraintPattern | undefined, server?: CedarResourceConstraintPattern | undefined, table?: CedarResourceConstraintPattern | undefined, user?: CedarResourceConstraintPattern | undefined, view?: CedarResourceConstraintPattern | undefined, warehouse?: CedarResourceConstraintPattern | undefined}; export type ListCedarPoliciesQuery = {'effect-filter'?: (CedarEffectFilter | null) | undefined, 'page-size'?: number | undefined, 'page-token'?: (string | null) | undefined, 'principal-type-filter'?: (CedarPrincipalTypeFilter | null) | undefined, 'resource-type-filter'?: (CedarResourceTypeFilter | null) | undefined, 'source-filter'?: (Array | null) | undefined}; export type CreateApiManagementV1PermissionsCedarPolicyListArgs = {body: ListCedarPoliciesQuery}; export type CreateApiManagementV1PermissionsCedarPolicyListOptions = {baseUrl?: string | undefined, bearerAuth?: string | undefined, fetch?: typeof fetch | undefined}; export const getCedarPoliciesResponse = z.object({"next-page-token": z.string().nullable().optional(), policies: z.array(z.unknown())}); export const validateResponse = async ( schema: { readonly '~standard': { readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }> } }, value: unknown ): Promise => { const result = await schema['~standard'].validate(value) if (result.issues !== undefined) { const detail = result.issues .map(({ message, path }) => path?.length ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}` : message ) .join('; ') throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } }) } return result.value }; /** * Get active Cedar policies * * POST /management/v1/permissions/cedar/policy-list */ export const createApiManagementV1PermissionsCedarPolicyList = async (args: CreateApiManagementV1PermissionsCedarPolicyListArgs, options?: CreateApiManagementV1PermissionsCedarPolicyListOptions) => { const {baseUrl = "https://localhost", fetch: fetchFn = fetch, bearerAuth} = options ?? {} const query = new URLSearchParams() const headers = new Headers() headers.set('content-type', "application/json") headers.set('accept', "application/json") if (bearerAuth !== undefined) headers.set('authorization', `Bearer ${bearerAuth}`) const url = `${baseUrl.replace(/\/+$/, '')}/management/v1/permissions/cedar/policy-list${query.size > 0 ? `?${query}` : ''}` const res = await fetchFn(url, {method: "POST", headers, body: JSON.stringify(args.body)}) if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}}) return validateResponse(getCedarPoliciesResponse, await res.json()) };