@canopy-io/node 0.3.8 → 0.3.9

package/dist/index.d.cts

@@ -1733,7 +1733,7 @@ interface paths {
         get: operations["ApiOrganizationDirectoryController_listGrantableRoles"];
         /**
          * Replace the roles an organization's directory may grant
-         * @description Replaces the whole list in one act. Withdrawing a role unmaps the groups that name it and releases the grants those mappings produced. An empty list disables directory sync for the organization.
+         * @description Replaces the whole list in one act. Withdrawing a role unmaps the groups that name it and releases the grants those mappings produced. An empty list removes the organization's own list: it then holds the Environment's identity-provider arrival roles when those are set, and otherwise directory sync is disabled for it, which is refused with `409` while its directory is live.
          */
         put: operations["ApiOrganizationDirectoryController_setGrantableRoles"];
         post?: never;
@@ -17402,9 +17402,11 @@ declare class Organizations {
      * Replace the list in one act, which is how directory sync is opened for
      * an organization. Exactly one role is `default_role_id`, the one people
      * arrive with. Withdrawing a role unmaps the groups naming it and keeps
-     * their members in the organization; an empty list is refused while a
-     * directory is connected. Your API key only: an organization admin's
-     * token can read the list but is refused changing it.
+     * their members in the organization. An empty list removes the
+     * organization's own list: it then holds the Environment's list when one
+     * is set, and otherwise directory sync closes for it, which is refused
+     * while a directory is connected. Your API key only: an organization
+     * admin's token can read the list but is refused changing it.
      */
     setDirectoryGrantableRoles(id: string, input: RequestBody<"ApiOrganizationDirectoryController_setGrantableRoles">): Promise<ResponseBody<"ApiOrganizationDirectoryController_setGrantableRoles">>;
     /**

package/dist/index.d.ts

@@ -1733,7 +1733,7 @@ interface paths {
         get: operations["ApiOrganizationDirectoryController_listGrantableRoles"];
         /**
          * Replace the roles an organization's directory may grant
-         * @description Replaces the whole list in one act. Withdrawing a role unmaps the groups that name it and releases the grants those mappings produced. An empty list disables directory sync for the organization.
+         * @description Replaces the whole list in one act. Withdrawing a role unmaps the groups that name it and releases the grants those mappings produced. An empty list removes the organization's own list: it then holds the Environment's identity-provider arrival roles when those are set, and otherwise directory sync is disabled for it, which is refused with `409` while its directory is live.
          */
         put: operations["ApiOrganizationDirectoryController_setGrantableRoles"];
         post?: never;
@@ -17402,9 +17402,11 @@ declare class Organizations {
      * Replace the list in one act, which is how directory sync is opened for
      * an organization. Exactly one role is `default_role_id`, the one people
      * arrive with. Withdrawing a role unmaps the groups naming it and keeps
-     * their members in the organization; an empty list is refused while a
-     * directory is connected. Your API key only: an organization admin's
-     * token can read the list but is refused changing it.
+     * their members in the organization. An empty list removes the
+     * organization's own list: it then holds the Environment's list when one
+     * is set, and otherwise directory sync closes for it, which is refused
+     * while a directory is connected. Your API key only: an organization
+     * admin's token can read the list but is refused changing it.
      */
     setDirectoryGrantableRoles(id: string, input: RequestBody<"ApiOrganizationDirectoryController_setGrantableRoles">): Promise<ResponseBody<"ApiOrganizationDirectoryController_setGrantableRoles">>;
     /**

package/dist/index.js

@@ -796,9 +796,11 @@ var Organizations = class {
    * Replace the list in one act, which is how directory sync is opened for
    * an organization. Exactly one role is `default_role_id`, the one people
    * arrive with. Withdrawing a role unmaps the groups naming it and keeps
-   * their members in the organization; an empty list is refused while a
-   * directory is connected. Your API key only: an organization admin's
-   * token can read the list but is refused changing it.
+   * their members in the organization. An empty list removes the
+   * organization's own list: it then holds the Environment's list when one
+   * is set, and otherwise directory sync closes for it, which is refused
+   * while a directory is connected. Your API key only: an organization
+   * admin's token can read the list but is refused changing it.
    */
   setDirectoryGrantableRoles(id, input) {
     return this.client.request(