@athenaintel/sdk 4.3.2245 → 4.3.2246

package/dist/cjs/BaseClient.js

@@ -43,8 +43,8 @@ function normalizeClientOptions(options) {
     const headers = (0, headers_js_1.mergeHeaders)({
         "X-Fern-Language": "JavaScript",
         "X-Fern-SDK-Name": "@athenaintel/sdk",
-        "X-Fern-SDK-Version": "4.3.2245",
-        "User-Agent": "@athenaintel/sdk/4.3.2245",
+        "X-Fern-SDK-Version": "4.3.2246",
+        "User-Agent": "@athenaintel/sdk/4.3.2246",
         "X-Fern-Runtime": core.RUNTIME.type,
         "X-Fern-Runtime-Version": core.RUNTIME.version,
         "X-Athena-Session-Credential": options === null || options === void 0 ? void 0 : options.sessionCredential,

package/dist/cjs/api/resources/assets/client/Client.d.ts

@@ -157,6 +157,24 @@ export declare class AssetsClient {
      */
     rename(request: AthenaIntelligence.RenameAssetRequestIn, requestOptions?: AssetsClient.RequestOptions): core.HttpResponsePromise<AthenaIntelligence.RenameAssetResponseOut>;
     private __rename;
+    /**
+     * Read the access that you, or another user, have on an asset, and every grant that gives it. The level is what Athena's permission checks decide for the user in the asset's own workspace, whichever workspace is active for your key: 'view' can open the asset, 'edit' can also change it and manage its sharing, 'owner' created it and can edit it, and 'none' cannot open it. Each source names one grant: 'owner', 'direct' (shared with the user), 'group' (shared with a workspace group the user belongs to), 'workspace' (shared with the whole workspace), 'drive' (a role on the drive) or 'other' (access the share list does not hold, for example an environment admin). A folder's sharing reaches each asset inside it as that asset's own share, so a 'workspace' source on a sub-folder shows that a share of its parent folder reached it. Without user_id the route reads your own access; you need view access to the asset and membership in its workspace. To read another user's access, pass their user_id; you need edit access to the asset, as for sharing it. A user who is not a member of the asset's workspace, or who does not exist, reads as 'none' with is_member false. A suspended member reads as 'none' with no sources, and is_member still reports their membership. When a permission check cannot be answered (for example on an asset in a drive while the authorization service is unavailable), the route answers 503 and never a level. The route never changes a permission.
+     *
+     * @param {AthenaIntelligence.GetAccessAssetsRequest} request
+     * @param {AssetsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AthenaIntelligence.ForbiddenError}
+     * @throws {@link AthenaIntelligence.NotFoundError}
+     * @throws {@link AthenaIntelligence.UnprocessableEntityError}
+     * @throws {@link AthenaIntelligence.ServiceUnavailableError}
+     *
+     * @example
+     *     await client.assets.getAccess({
+     *         asset_id: "asset_92492920-d118-42d3-95b4-00eccfe0754f"
+     *     })
+     */
+    getAccess(request: AthenaIntelligence.GetAccessAssetsRequest, requestOptions?: AssetsClient.RequestOptions): core.HttpResponsePromise<AthenaIntelligence.AssetAccessOut>;
+    private __getAccess;
     /**
      * Admin only. List the edit history of a collaborative asset, newest first: who edited it, when, and under which agent/session attribution. Works for every collaborative asset type. Each item's from_clock/to_clock identify the edit for the companion delta endpoint, which reports what actually changed.
      *

package/dist/cjs/api/resources/assets/client/Client.js

@@ -699,6 +699,91 @@ class AssetsClient {
             }
         });
     }
+    /**
+     * Read the access that you, or another user, have on an asset, and every grant that gives it. The level is what Athena's permission checks decide for the user in the asset's own workspace, whichever workspace is active for your key: 'view' can open the asset, 'edit' can also change it and manage its sharing, 'owner' created it and can edit it, and 'none' cannot open it. Each source names one grant: 'owner', 'direct' (shared with the user), 'group' (shared with a workspace group the user belongs to), 'workspace' (shared with the whole workspace), 'drive' (a role on the drive) or 'other' (access the share list does not hold, for example an environment admin). A folder's sharing reaches each asset inside it as that asset's own share, so a 'workspace' source on a sub-folder shows that a share of its parent folder reached it. Without user_id the route reads your own access; you need view access to the asset and membership in its workspace. To read another user's access, pass their user_id; you need edit access to the asset, as for sharing it. A user who is not a member of the asset's workspace, or who does not exist, reads as 'none' with is_member false. A suspended member reads as 'none' with no sources, and is_member still reports their membership. When a permission check cannot be answered (for example on an asset in a drive while the authorization service is unavailable), the route answers 503 and never a level. The route never changes a permission.
+     *
+     * @param {AthenaIntelligence.GetAccessAssetsRequest} request
+     * @param {AssetsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AthenaIntelligence.ForbiddenError}
+     * @throws {@link AthenaIntelligence.NotFoundError}
+     * @throws {@link AthenaIntelligence.UnprocessableEntityError}
+     * @throws {@link AthenaIntelligence.ServiceUnavailableError}
+     *
+     * @example
+     *     await client.assets.getAccess({
+     *         asset_id: "asset_92492920-d118-42d3-95b4-00eccfe0754f"
+     *     })
+     */
+    getAccess(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__getAccess(request, requestOptions));
+    }
+    __getAccess(request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
+            const { asset_id: assetId, user_id: userId } = request;
+            const _queryParams = {};
+            if (userId !== undefined) {
+                _queryParams.user_id = userId;
+            }
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, (0, headers_js_1.mergeOnlyDefinedHeaders)({
+                "X-Athena-Session-Credential": (_b = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.sessionCredential) !== null && _b !== void 0 ? _b : (_c = this._options) === null || _c === void 0 ? void 0 : _c.sessionCredential,
+            }), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield ((_d = this._options.fetcher) !== null && _d !== void 0 ? _d : core.fetcher)({
+                url: core.url.join((_f = (_e = (yield core.Supplier.get(this._options.baseUrl))) !== null && _e !== void 0 ? _e : (yield core.Supplier.get(this._options.environment))) !== null && _f !== void 0 ? _f : environments.AthenaIntelligenceEnvironment.Production, `api/v0/assets/${core.url.encodePathParam(assetId)}/access`),
+                method: "GET",
+                headers: _headers,
+                queryParameters: Object.assign(Object.assign({}, _queryParams), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams),
+                timeoutMs: ((_j = (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.timeoutInSeconds) !== null && _j !== void 0 ? _j : 60) * 1000,
+                maxRetries: (_k = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _k !== void 0 ? _k : (_l = this._options) === null || _l === void 0 ? void 0 : _l.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_m = this._options) === null || _m === void 0 ? void 0 : _m.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return { data: _response.body, rawResponse: _response.rawResponse };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 403:
+                        throw new AthenaIntelligence.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 404:
+                        throw new AthenaIntelligence.NotFoundError(_response.error.body, _response.rawResponse);
+                    case 422:
+                        throw new AthenaIntelligence.UnprocessableEntityError(_response.error.body, _response.rawResponse);
+                    case 503:
+                        throw new AthenaIntelligence.ServiceUnavailableError(_response.error.body, _response.rawResponse);
+                    default:
+                        throw new errors.AthenaIntelligenceError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            switch (_response.error.reason) {
+                case "non-json":
+                    throw new errors.AthenaIntelligenceError({
+                        statusCode: _response.error.statusCode,
+                        body: _response.error.rawBody,
+                        rawResponse: _response.rawResponse,
+                    });
+                case "body-is-null":
+                    throw new errors.AthenaIntelligenceError({
+                        statusCode: _response.error.statusCode,
+                        rawResponse: _response.rawResponse,
+                    });
+                case "timeout":
+                    throw new errors.AthenaIntelligenceTimeoutError("Timeout exceeded when calling GET /api/v0/assets/{asset_id}/access.");
+                case "unknown":
+                    throw new errors.AthenaIntelligenceError({
+                        message: _response.error.errorMessage,
+                        rawResponse: _response.rawResponse,
+                    });
+            }
+        });
+    }
     /**
      * Admin only. List the edit history of a collaborative asset, newest first: who edited it, when, and under which agent/session attribution. Works for every collaborative asset type. Each item's from_clock/to_clock identify the edit for the companion delta endpoint, which reports what actually changed.
      *

package/dist/cjs/api/resources/assets/client/requests/GetAccessAssetsRequest.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @example
+ *     {
+ *         asset_id: "asset_92492920-d118-42d3-95b4-00eccfe0754f"
+ *     }
+ */
+export interface GetAccessAssetsRequest {
+    /** Unique identifier of the asset */
+    asset_id: string;
+    /** The user whose access to read. Leave it out to read your own. Reading another user's access needs edit access to the asset. */
+    user_id?: string | null;
+}

package/dist/cjs/api/resources/assets/client/requests/GetAccessAssetsRequest.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/api/resources/assets/client/requests/index.d.ts

@@ -7,6 +7,7 @@ export type { CreateAssetRequestIn } from "./CreateAssetRequestIn.js";
 export type { CreateProjectRequestIn } from "./CreateProjectRequestIn.js";
 export type { DownloadAssetsRequest } from "./DownloadAssetsRequest.js";
 export type { DuplicateAssetRequestIn } from "./DuplicateAssetRequestIn.js";
+export type { GetAccessAssetsRequest } from "./GetAccessAssetsRequest.js";
 export type { GetActivityDeltaAssetsRequest } from "./GetActivityDeltaAssetsRequest.js";
 export type { GetAssetsRequest } from "./GetAssetsRequest.js";
 export type { ListActivityAssetsRequest } from "./ListActivityAssetsRequest.js";

package/dist/cjs/api/types/AssetAccessOut.d.ts

@@ -0,0 +1,28 @@
+import type * as AthenaIntelligence from "../index.js";
+/**
+ * Response model for reading a user's effective access on an asset.
+ */
+export interface AssetAccessOut {
+    /** ID of the asset */
+    asset_id: string;
+    /** Whether the user has an active membership in the asset's workspace. A user who is not a member reads as 'none'; the one exception is the workspace's own external viewer, who can still open what is shared with them. A suspended member reads as 'none' with no sources, and this field still reports their membership. */
+    is_member: boolean;
+    /** The access the user has, as Athena's permission checks decide it: 'view' can open the asset, 'edit' can also change it and manage its sharing, 'owner' created it and can edit it, 'none' cannot open it. When a check refuses what a listed source grants, the level is lower than that source, and the level is what holds. */
+    level: AssetAccessOut.Level;
+    /** Every grant that contributes to the level */
+    sources: AthenaIntelligence.AssetAccessSourceOut[];
+    /** The user whose access was read */
+    user_id: string;
+    /** The workspace the asset belongs to */
+    workspace_id: string | null;
+}
+export declare namespace AssetAccessOut {
+    /** The access the user has, as Athena's permission checks decide it: 'view' can open the asset, 'edit' can also change it and manage its sharing, 'owner' created it and can edit it, 'none' cannot open it. When a check refuses what a listed source grants, the level is lower than that source, and the level is what holds. */
+    const Level: {
+        readonly Owner: "owner";
+        readonly Edit: "edit";
+        readonly View: "view";
+        readonly None: "none";
+    };
+    type Level = (typeof Level)[keyof typeof Level];
+}

package/dist/cjs/api/types/AssetAccessOut.js

@@ -0,0 +1,14 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AssetAccessOut = void 0;
+var AssetAccessOut;
+(function (AssetAccessOut) {
+    /** The access the user has, as Athena's permission checks decide it: 'view' can open the asset, 'edit' can also change it and manage its sharing, 'owner' created it and can edit it, 'none' cannot open it. When a check refuses what a listed source grants, the level is lower than that source, and the level is what holds. */
+    AssetAccessOut.Level = {
+        Owner: "owner",
+        Edit: "edit",
+        View: "view",
+        None: "none",
+    };
+})(AssetAccessOut || (exports.AssetAccessOut = AssetAccessOut = {}));

package/dist/cjs/api/types/AssetAccessSourceOut.d.ts

@@ -0,0 +1,32 @@
+/**
+ * One grant that contributes to a user's access on an asset.
+ */
+export interface AssetAccessSourceOut {
+    /** The workspace group, when kind is 'group' */
+    group_id?: string | null;
+    /** The workspace group's name, when kind is 'group' */
+    group_name?: string | null;
+    /** Where the grant comes from: 'owner' (the user created the asset), 'direct' (the asset is shared with the user), 'group' (it is shared with a workspace group the user belongs to), 'workspace' (it is shared with the whole workspace), 'drive' (a role on the drive the asset is in) or 'other' (access the share list does not hold, for example an environment admin, also on an asset in a drive, or the view of a folder that holds an asset the user can open). A folder's sharing reaches each asset inside it as that asset's own share, so a 'workspace' source on a sub-folder shows that a share of its parent folder reached it. */
+    kind: AssetAccessSourceOut.Kind;
+    /** The level this grant gives */
+    level: AssetAccessSourceOut.Level;
+}
+export declare namespace AssetAccessSourceOut {
+    /** Where the grant comes from: 'owner' (the user created the asset), 'direct' (the asset is shared with the user), 'group' (it is shared with a workspace group the user belongs to), 'workspace' (it is shared with the whole workspace), 'drive' (a role on the drive the asset is in) or 'other' (access the share list does not hold, for example an environment admin, also on an asset in a drive, or the view of a folder that holds an asset the user can open). A folder's sharing reaches each asset inside it as that asset's own share, so a 'workspace' source on a sub-folder shows that a share of its parent folder reached it. */
+    const Kind: {
+        readonly Owner: "owner";
+        readonly Direct: "direct";
+        readonly Group: "group";
+        readonly Workspace: "workspace";
+        readonly Drive: "drive";
+        readonly Other: "other";
+    };
+    type Kind = (typeof Kind)[keyof typeof Kind];
+    /** The level this grant gives */
+    const Level: {
+        readonly Owner: "owner";
+        readonly Edit: "edit";
+        readonly View: "view";
+    };
+    type Level = (typeof Level)[keyof typeof Level];
+}

package/dist/cjs/api/types/AssetAccessSourceOut.js

@@ -0,0 +1,22 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AssetAccessSourceOut = void 0;
+var AssetAccessSourceOut;
+(function (AssetAccessSourceOut) {
+    /** Where the grant comes from: 'owner' (the user created the asset), 'direct' (the asset is shared with the user), 'group' (it is shared with a workspace group the user belongs to), 'workspace' (it is shared with the whole workspace), 'drive' (a role on the drive the asset is in) or 'other' (access the share list does not hold, for example an environment admin, also on an asset in a drive, or the view of a folder that holds an asset the user can open). A folder's sharing reaches each asset inside it as that asset's own share, so a 'workspace' source on a sub-folder shows that a share of its parent folder reached it. */
+    AssetAccessSourceOut.Kind = {
+        Owner: "owner",
+        Direct: "direct",
+        Group: "group",
+        Workspace: "workspace",
+        Drive: "drive",
+        Other: "other",
+    };
+    /** The level this grant gives */
+    AssetAccessSourceOut.Level = {
+        Owner: "owner",
+        Edit: "edit",
+        View: "view",
+    };
+})(AssetAccessSourceOut || (exports.AssetAccessSourceOut = AssetAccessSourceOut = {}));

package/dist/cjs/api/types/index.d.ts

@@ -15,6 +15,8 @@ export * from "./AopExecuteRequestIn.js";
 export * from "./AopExecuteResponseOut.js";
 export * from "./ApprovalMode.js";
 export * from "./ArchiveAssetResponseOut.js";
+export * from "./AssetAccessOut.js";
+export * from "./AssetAccessSourceOut.js";
 export * from "./AssetActivityDeltaResponseOut.js";
 export * from "./AssetActivityResponseOut.js";
 export * from "./AssetCapabilitiesResponseOut.js";

package/dist/cjs/api/types/index.js

@@ -31,6 +31,8 @@ __exportStar(require("./AopExecuteRequestIn.js"), exports);
 __exportStar(require("./AopExecuteResponseOut.js"), exports);
 __exportStar(require("./ApprovalMode.js"), exports);
 __exportStar(require("./ArchiveAssetResponseOut.js"), exports);
+__exportStar(require("./AssetAccessOut.js"), exports);
+__exportStar(require("./AssetAccessSourceOut.js"), exports);
 __exportStar(require("./AssetActivityDeltaResponseOut.js"), exports);
 __exportStar(require("./AssetActivityResponseOut.js"), exports);
 __exportStar(require("./AssetCapabilitiesResponseOut.js"), exports);

package/dist/cjs/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "4.3.2245";
+export declare const SDK_VERSION = "4.3.2246";

package/dist/cjs/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SDK_VERSION = void 0;
-exports.SDK_VERSION = "4.3.2245";
+exports.SDK_VERSION = "4.3.2246";

package/dist/esm/BaseClient.mjs

@@ -6,8 +6,8 @@ export function normalizeClientOptions(options) {
     const headers = mergeHeaders({
         "X-Fern-Language": "JavaScript",
         "X-Fern-SDK-Name": "@athenaintel/sdk",
-        "X-Fern-SDK-Version": "4.3.2245",
-        "User-Agent": "@athenaintel/sdk/4.3.2245",
+        "X-Fern-SDK-Version": "4.3.2246",
+        "User-Agent": "@athenaintel/sdk/4.3.2246",
         "X-Fern-Runtime": core.RUNTIME.type,
         "X-Fern-Runtime-Version": core.RUNTIME.version,
         "X-Athena-Session-Credential": options === null || options === void 0 ? void 0 : options.sessionCredential,

package/dist/esm/api/resources/assets/client/Client.d.mts

@@ -157,6 +157,24 @@ export declare class AssetsClient {
      */
     rename(request: AthenaIntelligence.RenameAssetRequestIn, requestOptions?: AssetsClient.RequestOptions): core.HttpResponsePromise<AthenaIntelligence.RenameAssetResponseOut>;
     private __rename;
+    /**
+     * Read the access that you, or another user, have on an asset, and every grant that gives it. The level is what Athena's permission checks decide for the user in the asset's own workspace, whichever workspace is active for your key: 'view' can open the asset, 'edit' can also change it and manage its sharing, 'owner' created it and can edit it, and 'none' cannot open it. Each source names one grant: 'owner', 'direct' (shared with the user), 'group' (shared with a workspace group the user belongs to), 'workspace' (shared with the whole workspace), 'drive' (a role on the drive) or 'other' (access the share list does not hold, for example an environment admin). A folder's sharing reaches each asset inside it as that asset's own share, so a 'workspace' source on a sub-folder shows that a share of its parent folder reached it. Without user_id the route reads your own access; you need view access to the asset and membership in its workspace. To read another user's access, pass their user_id; you need edit access to the asset, as for sharing it. A user who is not a member of the asset's workspace, or who does not exist, reads as 'none' with is_member false. A suspended member reads as 'none' with no sources, and is_member still reports their membership. When a permission check cannot be answered (for example on an asset in a drive while the authorization service is unavailable), the route answers 503 and never a level. The route never changes a permission.
+     *
+     * @param {AthenaIntelligence.GetAccessAssetsRequest} request
+     * @param {AssetsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AthenaIntelligence.ForbiddenError}
+     * @throws {@link AthenaIntelligence.NotFoundError}
+     * @throws {@link AthenaIntelligence.UnprocessableEntityError}
+     * @throws {@link AthenaIntelligence.ServiceUnavailableError}
+     *
+     * @example
+     *     await client.assets.getAccess({
+     *         asset_id: "asset_92492920-d118-42d3-95b4-00eccfe0754f"
+     *     })
+     */
+    getAccess(request: AthenaIntelligence.GetAccessAssetsRequest, requestOptions?: AssetsClient.RequestOptions): core.HttpResponsePromise<AthenaIntelligence.AssetAccessOut>;
+    private __getAccess;
     /**
      * Admin only. List the edit history of a collaborative asset, newest first: who edited it, when, and under which agent/session attribution. Works for every collaborative asset type. Each item's from_clock/to_clock identify the edit for the companion delta endpoint, which reports what actually changed.
      *

package/dist/esm/api/resources/assets/client/Client.mjs

@@ -663,6 +663,91 @@ export class AssetsClient {
             }
         });
     }
+    /**
+     * Read the access that you, or another user, have on an asset, and every grant that gives it. The level is what Athena's permission checks decide for the user in the asset's own workspace, whichever workspace is active for your key: 'view' can open the asset, 'edit' can also change it and manage its sharing, 'owner' created it and can edit it, and 'none' cannot open it. Each source names one grant: 'owner', 'direct' (shared with the user), 'group' (shared with a workspace group the user belongs to), 'workspace' (shared with the whole workspace), 'drive' (a role on the drive) or 'other' (access the share list does not hold, for example an environment admin). A folder's sharing reaches each asset inside it as that asset's own share, so a 'workspace' source on a sub-folder shows that a share of its parent folder reached it. Without user_id the route reads your own access; you need view access to the asset and membership in its workspace. To read another user's access, pass their user_id; you need edit access to the asset, as for sharing it. A user who is not a member of the asset's workspace, or who does not exist, reads as 'none' with is_member false. A suspended member reads as 'none' with no sources, and is_member still reports their membership. When a permission check cannot be answered (for example on an asset in a drive while the authorization service is unavailable), the route answers 503 and never a level. The route never changes a permission.
+     *
+     * @param {AthenaIntelligence.GetAccessAssetsRequest} request
+     * @param {AssetsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AthenaIntelligence.ForbiddenError}
+     * @throws {@link AthenaIntelligence.NotFoundError}
+     * @throws {@link AthenaIntelligence.UnprocessableEntityError}
+     * @throws {@link AthenaIntelligence.ServiceUnavailableError}
+     *
+     * @example
+     *     await client.assets.getAccess({
+     *         asset_id: "asset_92492920-d118-42d3-95b4-00eccfe0754f"
+     *     })
+     */
+    getAccess(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__getAccess(request, requestOptions));
+    }
+    __getAccess(request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
+            const { asset_id: assetId, user_id: userId } = request;
+            const _queryParams = {};
+            if (userId !== undefined) {
+                _queryParams.user_id = userId;
+            }
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, mergeOnlyDefinedHeaders({
+                "X-Athena-Session-Credential": (_b = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.sessionCredential) !== null && _b !== void 0 ? _b : (_c = this._options) === null || _c === void 0 ? void 0 : _c.sessionCredential,
+            }), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield ((_d = this._options.fetcher) !== null && _d !== void 0 ? _d : core.fetcher)({
+                url: core.url.join((_f = (_e = (yield core.Supplier.get(this._options.baseUrl))) !== null && _e !== void 0 ? _e : (yield core.Supplier.get(this._options.environment))) !== null && _f !== void 0 ? _f : environments.AthenaIntelligenceEnvironment.Production, `api/v0/assets/${core.url.encodePathParam(assetId)}/access`),
+                method: "GET",
+                headers: _headers,
+                queryParameters: Object.assign(Object.assign({}, _queryParams), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams),
+                timeoutMs: ((_j = (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.timeoutInSeconds) !== null && _j !== void 0 ? _j : 60) * 1000,
+                maxRetries: (_k = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _k !== void 0 ? _k : (_l = this._options) === null || _l === void 0 ? void 0 : _l.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_m = this._options) === null || _m === void 0 ? void 0 : _m.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return { data: _response.body, rawResponse: _response.rawResponse };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 403:
+                        throw new AthenaIntelligence.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 404:
+                        throw new AthenaIntelligence.NotFoundError(_response.error.body, _response.rawResponse);
+                    case 422:
+                        throw new AthenaIntelligence.UnprocessableEntityError(_response.error.body, _response.rawResponse);
+                    case 503:
+                        throw new AthenaIntelligence.ServiceUnavailableError(_response.error.body, _response.rawResponse);
+                    default:
+                        throw new errors.AthenaIntelligenceError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            switch (_response.error.reason) {
+                case "non-json":
+                    throw new errors.AthenaIntelligenceError({
+                        statusCode: _response.error.statusCode,
+                        body: _response.error.rawBody,
+                        rawResponse: _response.rawResponse,
+                    });
+                case "body-is-null":
+                    throw new errors.AthenaIntelligenceError({
+                        statusCode: _response.error.statusCode,
+                        rawResponse: _response.rawResponse,
+                    });
+                case "timeout":
+                    throw new errors.AthenaIntelligenceTimeoutError("Timeout exceeded when calling GET /api/v0/assets/{asset_id}/access.");
+                case "unknown":
+                    throw new errors.AthenaIntelligenceError({
+                        message: _response.error.errorMessage,
+                        rawResponse: _response.rawResponse,
+                    });
+            }
+        });
+    }
     /**
      * Admin only. List the edit history of a collaborative asset, newest first: who edited it, when, and under which agent/session attribution. Works for every collaborative asset type. Each item's from_clock/to_clock identify the edit for the companion delta endpoint, which reports what actually changed.
      *

package/dist/esm/api/resources/assets/client/requests/GetAccessAssetsRequest.d.mts

@@ -0,0 +1,12 @@
+/**
+ * @example
+ *     {
+ *         asset_id: "asset_92492920-d118-42d3-95b4-00eccfe0754f"
+ *     }
+ */
+export interface GetAccessAssetsRequest {
+    /** Unique identifier of the asset */
+    asset_id: string;
+    /** The user whose access to read. Leave it out to read your own. Reading another user's access needs edit access to the asset. */
+    user_id?: string | null;
+}

package/dist/esm/api/resources/assets/client/requests/GetAccessAssetsRequest.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/assets/client/requests/index.d.mts

@@ -7,6 +7,7 @@ export type { CreateAssetRequestIn } from "./CreateAssetRequestIn.mjs";
 export type { CreateProjectRequestIn } from "./CreateProjectRequestIn.mjs";
 export type { DownloadAssetsRequest } from "./DownloadAssetsRequest.mjs";
 export type { DuplicateAssetRequestIn } from "./DuplicateAssetRequestIn.mjs";
+export type { GetAccessAssetsRequest } from "./GetAccessAssetsRequest.mjs";
 export type { GetActivityDeltaAssetsRequest } from "./GetActivityDeltaAssetsRequest.mjs";
 export type { GetAssetsRequest } from "./GetAssetsRequest.mjs";
 export type { ListActivityAssetsRequest } from "./ListActivityAssetsRequest.mjs";

package/dist/esm/api/types/AssetAccessOut.d.mts

@@ -0,0 +1,28 @@
+import type * as AthenaIntelligence from "../index.mjs";
+/**
+ * Response model for reading a user's effective access on an asset.
+ */
+export interface AssetAccessOut {
+    /** ID of the asset */
+    asset_id: string;
+    /** Whether the user has an active membership in the asset's workspace. A user who is not a member reads as 'none'; the one exception is the workspace's own external viewer, who can still open what is shared with them. A suspended member reads as 'none' with no sources, and this field still reports their membership. */
+    is_member: boolean;
+    /** The access the user has, as Athena's permission checks decide it: 'view' can open the asset, 'edit' can also change it and manage its sharing, 'owner' created it and can edit it, 'none' cannot open it. When a check refuses what a listed source grants, the level is lower than that source, and the level is what holds. */
+    level: AssetAccessOut.Level;
+    /** Every grant that contributes to the level */
+    sources: AthenaIntelligence.AssetAccessSourceOut[];
+    /** The user whose access was read */
+    user_id: string;
+    /** The workspace the asset belongs to */
+    workspace_id: string | null;
+}
+export declare namespace AssetAccessOut {
+    /** The access the user has, as Athena's permission checks decide it: 'view' can open the asset, 'edit' can also change it and manage its sharing, 'owner' created it and can edit it, 'none' cannot open it. When a check refuses what a listed source grants, the level is lower than that source, and the level is what holds. */
+    const Level: {
+        readonly Owner: "owner";
+        readonly Edit: "edit";
+        readonly View: "view";
+        readonly None: "none";
+    };
+    type Level = (typeof Level)[keyof typeof Level];
+}

package/dist/esm/api/types/AssetAccessOut.mjs

@@ -0,0 +1,11 @@
+// This file was auto-generated by Fern from our API Definition.
+export var AssetAccessOut;
+(function (AssetAccessOut) {
+    /** The access the user has, as Athena's permission checks decide it: 'view' can open the asset, 'edit' can also change it and manage its sharing, 'owner' created it and can edit it, 'none' cannot open it. When a check refuses what a listed source grants, the level is lower than that source, and the level is what holds. */
+    AssetAccessOut.Level = {
+        Owner: "owner",
+        Edit: "edit",
+        View: "view",
+        None: "none",
+    };
+})(AssetAccessOut || (AssetAccessOut = {}));

package/dist/esm/api/types/AssetAccessSourceOut.d.mts

@@ -0,0 +1,32 @@
+/**
+ * One grant that contributes to a user's access on an asset.
+ */
+export interface AssetAccessSourceOut {
+    /** The workspace group, when kind is 'group' */
+    group_id?: string | null;
+    /** The workspace group's name, when kind is 'group' */
+    group_name?: string | null;
+    /** Where the grant comes from: 'owner' (the user created the asset), 'direct' (the asset is shared with the user), 'group' (it is shared with a workspace group the user belongs to), 'workspace' (it is shared with the whole workspace), 'drive' (a role on the drive the asset is in) or 'other' (access the share list does not hold, for example an environment admin, also on an asset in a drive, or the view of a folder that holds an asset the user can open). A folder's sharing reaches each asset inside it as that asset's own share, so a 'workspace' source on a sub-folder shows that a share of its parent folder reached it. */
+    kind: AssetAccessSourceOut.Kind;
+    /** The level this grant gives */
+    level: AssetAccessSourceOut.Level;
+}
+export declare namespace AssetAccessSourceOut {
+    /** Where the grant comes from: 'owner' (the user created the asset), 'direct' (the asset is shared with the user), 'group' (it is shared with a workspace group the user belongs to), 'workspace' (it is shared with the whole workspace), 'drive' (a role on the drive the asset is in) or 'other' (access the share list does not hold, for example an environment admin, also on an asset in a drive, or the view of a folder that holds an asset the user can open). A folder's sharing reaches each asset inside it as that asset's own share, so a 'workspace' source on a sub-folder shows that a share of its parent folder reached it. */
+    const Kind: {
+        readonly Owner: "owner";
+        readonly Direct: "direct";
+        readonly Group: "group";
+        readonly Workspace: "workspace";
+        readonly Drive: "drive";
+        readonly Other: "other";
+    };
+    type Kind = (typeof Kind)[keyof typeof Kind];
+    /** The level this grant gives */
+    const Level: {
+        readonly Owner: "owner";
+        readonly Edit: "edit";
+        readonly View: "view";
+    };
+    type Level = (typeof Level)[keyof typeof Level];
+}

package/dist/esm/api/types/AssetAccessSourceOut.mjs

@@ -0,0 +1,19 @@
+// This file was auto-generated by Fern from our API Definition.
+export var AssetAccessSourceOut;
+(function (AssetAccessSourceOut) {
+    /** Where the grant comes from: 'owner' (the user created the asset), 'direct' (the asset is shared with the user), 'group' (it is shared with a workspace group the user belongs to), 'workspace' (it is shared with the whole workspace), 'drive' (a role on the drive the asset is in) or 'other' (access the share list does not hold, for example an environment admin, also on an asset in a drive, or the view of a folder that holds an asset the user can open). A folder's sharing reaches each asset inside it as that asset's own share, so a 'workspace' source on a sub-folder shows that a share of its parent folder reached it. */
+    AssetAccessSourceOut.Kind = {
+        Owner: "owner",
+        Direct: "direct",
+        Group: "group",
+        Workspace: "workspace",
+        Drive: "drive",
+        Other: "other",
+    };
+    /** The level this grant gives */
+    AssetAccessSourceOut.Level = {
+        Owner: "owner",
+        Edit: "edit",
+        View: "view",
+    };
+})(AssetAccessSourceOut || (AssetAccessSourceOut = {}));

package/dist/esm/api/types/index.d.mts

@@ -15,6 +15,8 @@ export * from "./AopExecuteRequestIn.mjs";
 export * from "./AopExecuteResponseOut.mjs";
 export * from "./ApprovalMode.mjs";
 export * from "./ArchiveAssetResponseOut.mjs";
+export * from "./AssetAccessOut.mjs";
+export * from "./AssetAccessSourceOut.mjs";
 export * from "./AssetActivityDeltaResponseOut.mjs";
 export * from "./AssetActivityResponseOut.mjs";
 export * from "./AssetCapabilitiesResponseOut.mjs";

package/dist/esm/api/types/index.mjs

@@ -15,6 +15,8 @@ export * from "./AopExecuteRequestIn.mjs";
 export * from "./AopExecuteResponseOut.mjs";
 export * from "./ApprovalMode.mjs";
 export * from "./ArchiveAssetResponseOut.mjs";
+export * from "./AssetAccessOut.mjs";
+export * from "./AssetAccessSourceOut.mjs";
 export * from "./AssetActivityDeltaResponseOut.mjs";
 export * from "./AssetActivityResponseOut.mjs";
 export * from "./AssetCapabilitiesResponseOut.mjs";

package/dist/esm/version.d.mts

@@ -1 +1 @@
-export declare const SDK_VERSION = "4.3.2245";
+export declare const SDK_VERSION = "4.3.2246";

package/dist/esm/version.mjs

@@ -1 +1 @@
-export const SDK_VERSION = "4.3.2245";
+export const SDK_VERSION = "4.3.2246";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@athenaintel/sdk",
-    "version": "4.3.2245",
+    "version": "4.3.2246",
     "private": false,
     "repository": "github:Athena-Intel/athena-typescript",
     "type": "commonjs",

package/reference.md

@@ -973,6 +973,71 @@ await client.assets.rename({
 </dl>
 
 
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.assets.<a href="/src/api/resources/assets/client/Client.ts">getAccess</a>({ ...params }) -> AthenaIntelligence.AssetAccessOut</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Read the access that you, or another user, have on an asset, and every grant that gives it. The level is what Athena's permission checks decide for the user in the asset's own workspace, whichever workspace is active for your key: 'view' can open the asset, 'edit' can also change it and manage its sharing, 'owner' created it and can edit it, and 'none' cannot open it. Each source names one grant: 'owner', 'direct' (shared with the user), 'group' (shared with a workspace group the user belongs to), 'workspace' (shared with the whole workspace), 'drive' (a role on the drive) or 'other' (access the share list does not hold, for example an environment admin). A folder's sharing reaches each asset inside it as that asset's own share, so a 'workspace' source on a sub-folder shows that a share of its parent folder reached it. Without user_id the route reads your own access; you need view access to the asset and membership in its workspace. To read another user's access, pass their user_id; you need edit access to the asset, as for sharing it. A user who is not a member of the asset's workspace, or who does not exist, reads as 'none' with is_member false. A suspended member reads as 'none' with no sources, and is_member still reports their membership. When a permission check cannot be answered (for example on an asset in a drive while the authorization service is unavailable), the route answers 503 and never a level. The route never changes a permission.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```typescript
+await client.assets.getAccess({
+    asset_id: "asset_92492920-d118-42d3-95b4-00eccfe0754f"
+});
+
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**request:** `AthenaIntelligence.GetAccessAssetsRequest` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**requestOptions:** `AssetsClient.RequestOptions` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
 </dd>
 </dl>
 </details>