الفرق والمؤسسة وسجل التدقيق

كل الطلبات أدناه تستخدم Authorization: Bearer <access_token> — راجع المصادقة. نقاط نهاية السرد تقبل ?limit= و?cursor= — راجع شكل الاستجابة والتقسيم إلى صفحات.

الفرق

{
  "id": "5b1c...",
  "org_id": "7a1c2e3f-...",
  "name": "Platform",
  "icon_index": 2,
  "color": "#22C55E",
  "created_at": "2026-01-10T08:00:00.000Z"
}

GET /v1/teams — قائمة مقسَّمة إلى صفحات.

curl -s https://api.oneguard.one/v1/teams \
  -H "Authorization: Bearer $TOKEN"

POST /v1/teams — يعيد 201 مع ترويسة Location.

curl -s https://api.oneguard.one/v1/teams \
  -X POST \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name":"Platform"}'

GET /v1/teams/{teamId}

curl -s https://api.oneguard.one/v1/teams/{teamId} \
  -H "Authorization: Bearer $TOKEN"

PATCH /v1/teams/{teamId} — جزئي، أي من name أو icon_index أو color.

curl -s https://api.oneguard.one/v1/teams/{teamId} \
  -X PATCH \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name":"New name"}'

DELETE /v1/teams/{teamId} — 204 No Content.

curl -s https://api.oneguard.one/v1/teams/{teamId} \
  -X DELETE \
  -H "Authorization: Bearer $TOKEN"

أعضاء الفريق

{
  "id": "8c2f...",
  "team_id": "5b1c...",
  "user": { "id": "3f1a...", "name": "Sam", "email": "sam@example.com" },
  "created_at": "2026-01-11T09:00:00.000Z"
}

GET /v1/teams/{teamId}/members — قائمة مقسَّمة إلى صفحات.

curl -s https://api.oneguard.one/v1/teams/{teamId}/members \
  -H "Authorization: Bearer $TOKEN"

POST /v1/teams/{teamId}/members — لا يوجد دور لعضو الفريق؛ العضوية نفسها هي الحالة الوحيدة.

curl -s https://api.oneguard.one/v1/teams/{teamId}/members \
  -X POST \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"user_id":"3f1a..."}'

DELETE /v1/teams/{teamId}/members/{memberId} — 204 No Content. لا يوجد PATCH: عضوية الفريق لا تملك ما يُحدَّث سوى إزالتها.

curl -s https://api.oneguard.one/v1/teams/{teamId}/members/{memberId} \
  -X DELETE \
  -H "Authorization: Bearer $TOKEN"

المؤسسة

GET /v1/org

مؤسسة المفتاح المستدعي نفسها.

curl -s https://api.oneguard.one/v1/org \
  -H "Authorization: Bearer $TOKEN"

{
  "id": "7a1c2e3f-...",
  "name": "Acme Inc",
  "plan": "pro",
  "emoji_icon": "🛡️",
  "color": "#4F46E5",
  "created_at": "2026-01-01T00:00:00.000Z"
}

أعضاء المؤسسة

{
  "id": "9e2a...",
  "org_id": "7a1c2e3f-...",
  "user": { "id": "3f1a...", "name": "Sam", "email": "sam@example.com" },
  "email": "sam@example.com",
  "role": "member",
  "status": "active",
  "created_at": "2026-01-05T12:00:00.000Z"
}

GET /v1/org/members — قائمة مقسَّمة إلى صفحات.

curl -s https://api.oneguard.one/v1/org/members \
  -H "Authorization: Bearer $TOKEN"

PATCH /v1/org/members/{memberId} — المفتاح الذي يتصرف كمشرف (admin) لا يمكنه أبدًا منح دور أعلى من دوره الفعلي.

curl -s https://api.oneguard.one/v1/org/members/{memberId} \
  -X PATCH \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"role":"admin"}'

DELETE /v1/org/members/{memberId} — 204 No Content.

curl -s https://api.oneguard.one/v1/org/members/{memberId} \
  -X DELETE \
  -H "Authorization: Bearer $TOKEN"

الدعوات

{
  "id": "1a2b...",
  "org_id": "7a1c2e3f-...",
  "invitee_email": "new.person@example.com",
  "role": "member",
  "status": "pending",
  "expires_at": "2026-09-30T00:00:00.000Z",
  "created_at": "2026-09-23T10:00:00.000Z"
}

GET /v1/org/invitations — قائمة مقسَّمة إلى صفحات.

curl -s https://api.oneguard.one/v1/org/invitations \
  -H "Authorization: Bearer $TOKEN"

POST /v1/org/invitations — لا يمكن منح "owner" عبر الدعوة؛ الملكية تنتقل فقط بتغيير دور عضو موجود.

curl -s https://api.oneguard.one/v1/org/invitations \
  -X POST \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"email":"new.person@example.com","role":"member"}'

سجل التدقيق

GET /v1/audit

{
  "id": "6f3a...",
  "action": "secret.value.read",
  "resource": "secret:3cb0cce2-...",
  "user_name": "Sam",
  "ip_address": "203.0.113.7",
  "success": true,
  "type": "read",
  "time": "2026-09-23T14:58:02.000Z"
}

curl -s https://api.oneguard.one/v1/audit \
  -H "Authorization: Bearer $TOKEN"