@atlanai/sdk 0.2.1 → 0.2.3

package/dist/raw/registry/models/ArtifactView.d.ts

@@ -23,8 +23,22 @@ import type { RelationshipsView } from './RelationshipsView';
  */
 export interface ArtifactView {
     /**
-     * `draft`, `pending_review`, `active`, `blocked`, `deprecated` or `archived`. Only `deleted` is
-     * a tombstone, and it never appears on a read.
+     * The app that registered the kind. Absent on the cross-kind list, which would need one
+     * catalogue read per distinct kind on the page to fill it.
+     *
+     * Named `extension` until `apps-2026-09-15-the-extension-tables-are-dropped`; renamed with no
+     * alias, for the reason `KindDto.extension` was — a name that answers on one spelling and not
+     * the other is a second thing to keep in step.
+     * @type {string}
+     * @memberof ArtifactView
+     */
+    app?: string | null;
+    /**
+     * `pending_review`, `active`, `blocked` or `archived`. Only `deleted` is a tombstone, and it
+     * never appears on a read.
+     *
+     * It says nothing about whether this version is *distributed*: that follows the release, so an
+     * `active` head with no current release is discoverable and shipped to nobody.
      * @type {string}
      * @memberof ArtifactView
      */
@@ -67,13 +81,6 @@ export interface ArtifactView {
      * @memberof ArtifactView
      */
     displayName: string;
-    /**
-     * The extension that registered the kind. Absent on the cross-kind list, which would need one
-     * catalogue read per distinct kind on the page to fill it.
-     * @type {string}
-     * @memberof ArtifactView
-     */
-    extension?: string | null;
     /**
      * `<kind>_<26 chars>`. The only stable handle for this artifact.
      * @type {string}
@@ -92,6 +99,16 @@ export interface ArtifactView {
      * @memberof ArtifactView
      */
     isLatest: boolean;
+    /**
+     * Whether this version is the current release on at least one channel.
+     *
+     * Straight from the artifact row, so every surface carries it at no extra read. It answers
+     * "is this live", not "where" — a version can be current on `latest` and `beta` at once, and
+     * `released_channels` is what names them.
+     * @type {boolean}
+     * @memberof ArtifactView
+     */
+    isReleased: boolean;
     /**
      * Whether the deployment wrote this rather than a user. Set at create from the kind's
      * declaration and immutable after.
@@ -120,15 +137,26 @@ export interface ArtifactView {
      */
     name: string;
     /**
-     * The OIDC client id an identity-bearing artifact authenticates as; derived, present on the
-     * create response and single-artifact read of such kinds.
+     * The OIDC client id an identity-bearing artifact authenticates as. Derived, and present on
+     * the **create response only** — [`ArtifactView::view`] is the single constructor every read,
+     * list, search and `PATCH` response funnels through, and it sets this `None`; the create path
+     * fills it afterwards from the identity it just provisioned.
+     *
+     * The doc here used to promise the single-artifact read as well. It never did that: no render
+     * path calls the lookup (`registry_server::identity::artifact_principal`, keyed by the
+     * artifact handle as the principal id), and `registry-http`'s own unit tier asserts a read
+     * must *not* carry the field. Populating reads is a deliberate contract change, not a bug fix
+     * — it needs a decision about whether list and search pay the same per-row lookup.
      * @type {string}
      * @memberof ArtifactView
      */
     oidcClientId?: string | null;
     /**
-     * The canonical owner's user id. Absent for a machine or seed principal, which has no directory
-     * row to own anything.
+     * The canonical owner's user id, bare and not handle-prefixed.
+     *
+     * Defaulted to the creating principal, so this is normally set. Absent for a machine or seed
+     * principal, which has no directory row to own anything, and for a row created before that
+     * default landed.
      * @type {string}
      * @memberof ArtifactView
      */
@@ -153,6 +181,20 @@ export interface ArtifactView {
      * @memberof ArtifactView
      */
     relationships?: RelationshipsView | null;
+    /**
+     * The channels on which **this version** is the current release. Absent when it is on none.
+     *
+     * About this version, deliberately, not about the line: the row is a version, and reporting
+     * the line's channels here would say "released on latest" on a head that is not the released
+     * one — which under a `manual` policy is the normal case. For the line's view use
+     * `GET /artifacts/{kind}/{id}/channels`.
+     *
+     * Filled only by the surfaces that opt into the fan-out ([`with_released_channels`]); it is
+     * one extra query per page, not per row, and a surface that does not need it does not pay.
+     * @type {Array<string>}
+     * @memberof ArtifactView
+     */
+    releasedChannels?: Array<string>;
     /**
      * The source repository it was onboarded from, when it was.
      * @type {string}
@@ -233,13 +275,32 @@ export interface ArtifactView {
      */
     updatedBy: string;
     /**
-     * Value of the `version_label` field.
+     * This version's identity: a 26-character handle body, unique per account.
+     *
+     * What a release names, what `blake3:` addressing resolves to, and the stable id for a
+     * version across the line's history — where `version_ordinal` is only its position. Absent
+     * on a row written before the identity column landed; every write path sets it.
+     * @type {string}
+     * @memberof ArtifactView
+     */
+    versionId?: string | null;
+    /**
+     * The free-form label the write set, verbatim. Absent when none was sent.
+     *
+     * **Not the name this version shipped under** — that is the release's own `version_label`,
+     * on `GET …/releases`. The two are different facts sharing a field name, because this one
+     * predates the release plane and keeps its meaning.
      * @type {string}
      * @memberof ArtifactView
      */
     versionLabel?: string | null;
     /**
-     * 1-based, dense within a version line.
+     * This version's position in its line: the **write index**, 1-based and dense over versions
+     * written.
+     *
+     * Not the published number. `ReleaseDto::version_ordinal` counts versions *shipped*, and the
+     * two are the same field name for two different counts — they agree under the default `auto`
+     * release policy, where every version ships, and diverge under `manual`.
      * @type {number}
      * @memberof ArtifactView
      */

package/dist/raw/registry/models/ArtifactView.js

@@ -38,6 +38,8 @@ function instanceOfArtifactView(value) {
         return false;
     if ((!('isLatest' in value) && !('is_latest' in value)) || (value['isLatest'] === undefined && value['is_latest'] === undefined))
         return false;
+    if ((!('isReleased' in value) && !('is_released' in value)) || (value['isReleased'] === undefined && value['is_released'] === undefined))
+        return false;
     if ((!('isSystem' in value) && !('is_system' in value)) || (value['isSystem'] === undefined && value['is_system'] === undefined))
         return false;
     if (!('kind' in value) || value['kind'] === undefined)
@@ -64,6 +66,7 @@ function ArtifactViewFromJSONTyped(json, ignoreDiscriminator) {
         return json;
     }
     return {
+        'app': json['app'] === undefined ? undefined : json['app'] === null ? null : json['app'],
         'artifactStatus': json['artifact_status'],
         'commitTs': json['commit_ts'],
         'contentHashHex': json['content_hash_hex'] === undefined ? undefined : json['content_hash_hex'] === null ? null : json['content_hash_hex'],
@@ -71,10 +74,10 @@ function ArtifactViewFromJSONTyped(json, ignoreDiscriminator) {
         'createdBy': json['created_by'],
         'description': json['description'] === undefined ? undefined : json['description'] === null ? null : json['description'],
         'displayName': json['display_name'],
-        'extension': json['extension'] === undefined ? undefined : json['extension'] === null ? null : json['extension'],
         'id': json['id'],
         'identity': json['identity'] === undefined ? undefined : json['identity'] === null ? null : (0, GatewayArtifactIdentityRevealView_1.GatewayArtifactIdentityRevealViewFromJSON)(json['identity']),
         'isLatest': json['is_latest'],
+        'isReleased': json['is_released'],
         'isSystem': json['is_system'],
         'kind': json['kind'],
         'metadata': json['metadata'] === undefined ? undefined : json['metadata'] === null ? null : json['metadata'],
@@ -84,6 +87,7 @@ function ArtifactViewFromJSONTyped(json, ignoreDiscriminator) {
         'permissions': json['permissions'] === undefined ? undefined : json['permissions'] === null ? null : json['permissions'],
         'projectId': json['project_id'] === undefined ? undefined : json['project_id'] === null ? null : json['project_id'],
         'relationships': json['relationships'] === undefined ? undefined : json['relationships'] === null ? null : (0, RelationshipsView_1.RelationshipsViewFromJSON)(json['relationships']),
+        'releasedChannels': json['released_channels'] == null ? undefined : json['released_channels'],
         'repoId': json['repo_id'] === undefined ? undefined : json['repo_id'] === null ? null : json['repo_id'],
         'sourceCreatedAt': json['source_created_at'] === undefined ? undefined : json['source_created_at'] === null ? null : json['source_created_at'],
         'sourceCreatedBy': json['source_created_by'] === undefined ? undefined : json['source_created_by'] === null ? null : json['source_created_by'],
@@ -97,6 +101,7 @@ function ArtifactViewFromJSONTyped(json, ignoreDiscriminator) {
         'sourceVersion': json['source_version'] === undefined ? undefined : json['source_version'] === null ? null : json['source_version'],
         'updatedAt': json['updated_at'],
         'updatedBy': json['updated_by'],
+        'versionId': json['version_id'] === undefined ? undefined : json['version_id'] === null ? null : json['version_id'],
         'versionLabel': json['version_label'] === undefined ? undefined : json['version_label'] === null ? null : json['version_label'],
         'versionOrdinal': json['version_ordinal'],
         'workspaceId': json['workspace_id'],
@@ -110,6 +115,7 @@ function ArtifactViewToJSONTyped(value, ignoreDiscriminator = false) {
         return value;
     }
     return {
+        'app': value['app'],
         'artifact_status': value['artifactStatus'],
         'commit_ts': value['commitTs'],
         'content_hash_hex': value['contentHashHex'],
@@ -117,10 +123,10 @@ function ArtifactViewToJSONTyped(value, ignoreDiscriminator = false) {
         'created_by': value['createdBy'],
         'description': value['description'],
         'display_name': value['displayName'],
-        'extension': value['extension'],
         'id': value['id'],
         'identity': (0, GatewayArtifactIdentityRevealView_1.GatewayArtifactIdentityRevealViewToJSON)(value['identity']),
         'is_latest': value['isLatest'],
+        'is_released': value['isReleased'],
         'is_system': value['isSystem'],
         'kind': value['kind'],
         'metadata': value['metadata'],
@@ -130,6 +136,7 @@ function ArtifactViewToJSONTyped(value, ignoreDiscriminator = false) {
         'permissions': value['permissions'],
         'project_id': value['projectId'],
         'relationships': (0, RelationshipsView_1.RelationshipsViewToJSON)(value['relationships']),
+        'released_channels': value['releasedChannels'],
         'repo_id': value['repoId'],
         'source_created_at': value['sourceCreatedAt'],
         'source_created_by': value['sourceCreatedBy'],
@@ -143,6 +150,7 @@ function ArtifactViewToJSONTyped(value, ignoreDiscriminator = false) {
         'source_version': value['sourceVersion'],
         'updated_at': value['updatedAt'],
         'updated_by': value['updatedBy'],
+        'version_id': value['versionId'],
         'version_label': value['versionLabel'],
         'version_ordinal': value['versionOrdinal'],
         'workspace_id': value['workspaceId'],

package/dist/raw/registry/models/CreateInvitationsRequest.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Atlan Agent Gateway — registry
+ * The platform core: identity, tenancy, the artifact plane, discovery and the policy plane.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { InviteeRequest } from './InviteeRequest';
+/**
+ * The create/validate request body.
+ * @export
+ * @interface CreateInvitationsRequest
+ */
+export interface CreateInvitationsRequest {
+    /**
+     * 1..=50 invitees; empty or over 50 is a `422`.
+     * @type {Array<InviteeRequest>}
+     * @memberof CreateInvitationsRequest
+     */
+    invitees: Array<InviteeRequest>;
+}
+/**
+ * Check if a given object implements the CreateInvitationsRequest interface.
+ */
+export declare function instanceOfCreateInvitationsRequest(value: object): value is CreateInvitationsRequest;
+export declare function CreateInvitationsRequestFromJSON(json: any): CreateInvitationsRequest;
+export declare function CreateInvitationsRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): CreateInvitationsRequest;
+export declare function CreateInvitationsRequestToJSON(json: any): CreateInvitationsRequest;
+export declare function CreateInvitationsRequestToJSONTyped(value?: CreateInvitationsRequest | null, ignoreDiscriminator?: boolean): any;

package/dist/raw/registry/models/CreateInvitationsRequest.js

@@ -0,0 +1,51 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Atlan Agent Gateway — registry
+ * The platform core: identity, tenancy, the artifact plane, discovery and the policy plane.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.instanceOfCreateInvitationsRequest = instanceOfCreateInvitationsRequest;
+exports.CreateInvitationsRequestFromJSON = CreateInvitationsRequestFromJSON;
+exports.CreateInvitationsRequestFromJSONTyped = CreateInvitationsRequestFromJSONTyped;
+exports.CreateInvitationsRequestToJSON = CreateInvitationsRequestToJSON;
+exports.CreateInvitationsRequestToJSONTyped = CreateInvitationsRequestToJSONTyped;
+const InviteeRequest_1 = require("./InviteeRequest");
+/**
+ * Check if a given object implements the CreateInvitationsRequest interface.
+ */
+function instanceOfCreateInvitationsRequest(value) {
+    if (!('invitees' in value) || value['invitees'] === undefined)
+        return false;
+    return true;
+}
+function CreateInvitationsRequestFromJSON(json) {
+    return CreateInvitationsRequestFromJSONTyped(json, false);
+}
+function CreateInvitationsRequestFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'invitees': (json['invitees'].map(InviteeRequest_1.InviteeRequestFromJSON)),
+    };
+}
+function CreateInvitationsRequestToJSON(json) {
+    return CreateInvitationsRequestToJSONTyped(json, false);
+}
+function CreateInvitationsRequestToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'invitees': (value['invitees'].map(InviteeRequest_1.InviteeRequestToJSON)),
+    };
+}

package/dist/raw/registry/models/CreateWorkspaceBody.d.ts

@@ -41,6 +41,15 @@ export interface CreateWorkspaceBody {
      * @memberof CreateWorkspaceBody
      */
     parentId?: string | null;
+    /**
+     * `public` or `private`. Omitted inherits the parent's visibility — a child of
+     * a public parent defaults public, a child of a private parent defaults
+     * private. An explicit value more open than the parent is a `422`: a child is
+     * never more open than its parent.
+     * @type {string}
+     * @memberof CreateWorkspaceBody
+     */
+    visibility?: string | null;
 }
 /**
  * Check if a given object implements the CreateWorkspaceBody interface.

package/dist/raw/registry/models/CreateWorkspaceBody.js

@@ -38,6 +38,7 @@ function CreateWorkspaceBodyFromJSONTyped(json, ignoreDiscriminator) {
         'displayName': json['display_name'] === undefined ? undefined : json['display_name'] === null ? null : json['display_name'],
         'name': json['name'],
         'parentId': json['parent_id'] === undefined ? undefined : json['parent_id'] === null ? null : json['parent_id'],
+        'visibility': json['visibility'] === undefined ? undefined : json['visibility'] === null ? null : json['visibility'],
     };
 }
 function CreateWorkspaceBodyToJSON(json) {
@@ -52,5 +53,6 @@ function CreateWorkspaceBodyToJSONTyped(value, ignoreDiscriminator = false) {
         'display_name': value['displayName'],
         'name': value['name'],
         'parent_id': value['parentId'],
+        'visibility': value['visibility'],
     };
 }

package/dist/raw/registry/models/CutReleaseBody.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Atlan Agent Gateway — registry
+ * The platform core: identity, tenancy, the artifact plane, discovery and the policy plane.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * The body of `POST …/releases`.
+ * @export
+ * @interface CutReleaseBody
+ */
+export interface CutReleaseBody {
+    /**
+     * The channel. Absent takes the account's default channel.
+     * @type {string}
+     * @memberof CutReleaseBody
+     */
+    channel?: string | null;
+    /**
+     * Value of the `notes` field.
+     * @type {string}
+     * @memberof CutReleaseBody
+     */
+    notes?: string | null;
+    /**
+     * The version to ship: a `ver_…` handle, or absent for the head.
+     * @type {string}
+     * @memberof CutReleaseBody
+     */
+    versionId?: string | null;
+    /**
+     * The semver to publish under. Absent auto-bumps the line's minor at promotion.
+     * @type {string}
+     * @memberof CutReleaseBody
+     */
+    versionLabel?: string | null;
+    /**
+     * `private` (default) or `public`.
+     * @type {string}
+     * @memberof CutReleaseBody
+     */
+    visibility?: string | null;
+}
+/**
+ * Check if a given object implements the CutReleaseBody interface.
+ */
+export declare function instanceOfCutReleaseBody(value: object): value is CutReleaseBody;
+export declare function CutReleaseBodyFromJSON(json: any): CutReleaseBody;
+export declare function CutReleaseBodyFromJSONTyped(json: any, ignoreDiscriminator: boolean): CutReleaseBody;
+export declare function CutReleaseBodyToJSON(json: any): CutReleaseBody;
+export declare function CutReleaseBodyToJSONTyped(value?: CutReleaseBody | null, ignoreDiscriminator?: boolean): any;

package/dist/raw/registry/models/CutReleaseBody.js

@@ -0,0 +1,56 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Atlan Agent Gateway — registry
+ * The platform core: identity, tenancy, the artifact plane, discovery and the policy plane.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.instanceOfCutReleaseBody = instanceOfCutReleaseBody;
+exports.CutReleaseBodyFromJSON = CutReleaseBodyFromJSON;
+exports.CutReleaseBodyFromJSONTyped = CutReleaseBodyFromJSONTyped;
+exports.CutReleaseBodyToJSON = CutReleaseBodyToJSON;
+exports.CutReleaseBodyToJSONTyped = CutReleaseBodyToJSONTyped;
+/**
+ * Check if a given object implements the CutReleaseBody interface.
+ */
+function instanceOfCutReleaseBody(value) {
+    return true;
+}
+function CutReleaseBodyFromJSON(json) {
+    return CutReleaseBodyFromJSONTyped(json, false);
+}
+function CutReleaseBodyFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'channel': json['channel'] === undefined ? undefined : json['channel'] === null ? null : json['channel'],
+        'notes': json['notes'] === undefined ? undefined : json['notes'] === null ? null : json['notes'],
+        'versionId': json['version_id'] === undefined ? undefined : json['version_id'] === null ? null : json['version_id'],
+        'versionLabel': json['version_label'] === undefined ? undefined : json['version_label'] === null ? null : json['version_label'],
+        'visibility': json['visibility'] === undefined ? undefined : json['visibility'] === null ? null : json['visibility'],
+    };
+}
+function CutReleaseBodyToJSON(json) {
+    return CutReleaseBodyToJSONTyped(json, false);
+}
+function CutReleaseBodyToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'channel': value['channel'],
+        'notes': value['notes'],
+        'version_id': value['versionId'],
+        'version_label': value['versionLabel'],
+        'visibility': value['visibility'],
+    };
+}

package/dist/raw/registry/models/EdgeTarget.d.ts

@@ -11,6 +11,10 @@
  */
 /**
  * One end of an edge.
+ *
+ * Still `{id, kind}` and no more, but the guarantee behind it changed: an `EdgeTarget` reaching a
+ * caller now names an artifact whose head that caller can read. A target that does not resolve is
+ * dropped upstream in the SQL rather than rendered thin, so following one is no longer a coin flip.
  * @export
  * @interface EdgeTarget
  */

package/dist/raw/registry/models/InstallAppBody.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Atlan Agent Gateway — registry
+ * The platform core: identity, tenancy, the artifact plane, discovery and the policy plane.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * `POST /apps/{app}/install` body.
+ * @export
+ * @interface InstallAppBody
+ */
+export interface InstallAppBody {
+    /**
+     * Install-time configuration, handed verbatim to the app's install hooks and stored
+     * nowhere. **Not a place for credentials** — an app that needs one takes a reference into
+     * the secret provider, because this object reaches the hook in cleartext.
+     * @type {object}
+     * @memberof InstallAppBody
+     */
+    config?: object | null;
+}
+/**
+ * Check if a given object implements the InstallAppBody interface.
+ */
+export declare function instanceOfInstallAppBody(value: object): value is InstallAppBody;
+export declare function InstallAppBodyFromJSON(json: any): InstallAppBody;
+export declare function InstallAppBodyFromJSONTyped(json: any, ignoreDiscriminator: boolean): InstallAppBody;
+export declare function InstallAppBodyToJSON(json: any): InstallAppBody;
+export declare function InstallAppBodyToJSONTyped(value?: InstallAppBody | null, ignoreDiscriminator?: boolean): any;

package/dist/raw/registry/models/InstallAppBody.js

@@ -0,0 +1,48 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Atlan Agent Gateway — registry
+ * The platform core: identity, tenancy, the artifact plane, discovery and the policy plane.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.instanceOfInstallAppBody = instanceOfInstallAppBody;
+exports.InstallAppBodyFromJSON = InstallAppBodyFromJSON;
+exports.InstallAppBodyFromJSONTyped = InstallAppBodyFromJSONTyped;
+exports.InstallAppBodyToJSON = InstallAppBodyToJSON;
+exports.InstallAppBodyToJSONTyped = InstallAppBodyToJSONTyped;
+/**
+ * Check if a given object implements the InstallAppBody interface.
+ */
+function instanceOfInstallAppBody(value) {
+    return true;
+}
+function InstallAppBodyFromJSON(json) {
+    return InstallAppBodyFromJSONTyped(json, false);
+}
+function InstallAppBodyFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'config': json['config'] === undefined ? undefined : json['config'] === null ? null : json['config'],
+    };
+}
+function InstallAppBodyToJSON(json) {
+    return InstallAppBodyToJSONTyped(json, false);
+}
+function InstallAppBodyToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'config': value['config'],
+    };
+}

package/dist/raw/registry/models/IntrospectedIdentity.d.ts

@@ -36,12 +36,21 @@ export interface IntrospectedIdentity {
      */
     orgId: string;
     /**
-     * Control-Plane account roles. **Authorization-bearing** — an empty list means *not* an admin,
-     * never "the check was skipped".
+     * The advisory account permissions the `role` confers, deduplicated and sorted; empty when the
+     * caller has no role. **Advisory only** — a display projection of the role. Every real
+     * authorization decision is a SpiceDB receipt, never this list.
      * @type {Array<string>}
      * @memberof IntrospectedIdentity
      */
-    roles: Array<string>;
+    permissions: Array<string>;
+    /**
+     * The caller's account role, read from the registry `users` table (`users.role_id`), not the
+     * token's `roles` claim: `admin` or `member`, an unassigned direct human reading as `member`.
+     * **Absent** for a machine, service-account or delegated caller — none holds a human role.
+     * @type {string}
+     * @memberof IntrospectedIdentity
+     */
+    role?: string | null;
     /**
      * Value of the `scopes` field.
      * @type {Array<string>}

package/dist/raw/registry/models/IntrospectedIdentity.js

@@ -25,7 +25,7 @@ const IntrospectedActor_1 = require("./IntrospectedActor");
 function instanceOfIntrospectedIdentity(value) {
     if ((!('orgId' in value) && !('org_id' in value)) || (value['orgId'] === undefined && value['org_id'] === undefined))
         return false;
-    if (!('roles' in value) || value['roles'] === undefined)
+    if (!('permissions' in value) || value['permissions'] === undefined)
         return false;
     if (!('scopes' in value) || value['scopes'] === undefined)
         return false;
@@ -48,7 +48,8 @@ function IntrospectedIdentityFromJSONTyped(json, ignoreDiscriminator) {
         'act': json['act'] === undefined ? undefined : json['act'] === null ? null : (0, IntrospectedActor_1.IntrospectedActorFromJSON)(json['act']),
         'exp': json['exp'] === undefined ? undefined : json['exp'] === null ? null : json['exp'],
         'orgId': json['org_id'],
-        'roles': json['roles'],
+        'permissions': json['permissions'],
+        'role': json['role'] === undefined ? undefined : json['role'] === null ? null : json['role'],
         'scopes': json['scopes'],
         'subject': json['subject'],
         'userId': json['user_id'],
@@ -66,7 +67,8 @@ function IntrospectedIdentityToJSONTyped(value, ignoreDiscriminator = false) {
         'act': (0, IntrospectedActor_1.IntrospectedActorToJSON)(value['act']),
         'exp': value['exp'],
         'org_id': value['orgId'],
-        'roles': value['roles'],
+        'permissions': value['permissions'],
+        'role': value['role'],
         'scopes': value['scopes'],
         'subject': value['subject'],
         'user_id': value['userId'],