@distilled.cloud/workos 0.0.0 → 0.15.0

package/src/operations/AuthorizationResourcesByExternalIdControllerDeleteByExternalId.ts

@@ -0,0 +1,46 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { BadRequest, Forbidden, NotFound, Conflict } from "../errors.ts";
+
+// Input Schema
+export const AuthorizationResourcesByExternalIdControllerDeleteByExternalIdInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_id: Schema.String.pipe(T.PathParam()),
+    resource_type_slug: Schema.String.pipe(T.PathParam()),
+    external_id: Schema.String.pipe(T.PathParam()),
+    cascade_delete: Schema.optional(Schema.Boolean),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      path: "/authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}",
+    }),
+  );
+export type AuthorizationResourcesByExternalIdControllerDeleteByExternalIdInput =
+  typeof AuthorizationResourcesByExternalIdControllerDeleteByExternalIdInput.Type;
+
+// Output Schema
+export const AuthorizationResourcesByExternalIdControllerDeleteByExternalIdOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Void;
+export type AuthorizationResourcesByExternalIdControllerDeleteByExternalIdOutput =
+  typeof AuthorizationResourcesByExternalIdControllerDeleteByExternalIdOutput.Type;
+
+// The operation
+/**
+ * Delete an authorization resource by external ID
+ *
+ * Delete an authorization resource by organization, resource type, and external ID. This also deletes all descendant resources.
+ *
+ * @param organization_id - The ID of the organization that owns the resource.
+ * @param resource_type_slug - The slug of the resource type.
+ * @param external_id - An identifier you provide to reference the resource in your system.
+ * @param cascade_delete - If true, deletes all descendant resources and role assignments. If not set and the resource has children or assignments, the request will fail.
+ */
+export const AuthorizationResourcesByExternalIdControllerDeleteByExternalId =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema:
+      AuthorizationResourcesByExternalIdControllerDeleteByExternalIdInput,
+    outputSchema:
+      AuthorizationResourcesByExternalIdControllerDeleteByExternalIdOutput,
+    errors: [BadRequest, Forbidden, NotFound, Conflict] as const,
+  }));

package/src/operations/AuthorizationResourcesByExternalIdControllerGetByExternalId.ts

@@ -0,0 +1,55 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { Forbidden, NotFound } from "../errors.ts";
+
+// Input Schema
+export const AuthorizationResourcesByExternalIdControllerGetByExternalIdInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_id: Schema.String.pipe(T.PathParam()),
+    resource_type_slug: Schema.String.pipe(T.PathParam()),
+    external_id: Schema.String.pipe(T.PathParam()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      path: "/authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}",
+    }),
+  );
+export type AuthorizationResourcesByExternalIdControllerGetByExternalIdInput =
+  typeof AuthorizationResourcesByExternalIdControllerGetByExternalIdInput.Type;
+
+// Output Schema
+export const AuthorizationResourcesByExternalIdControllerGetByExternalIdOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    name: Schema.String,
+    description: Schema.NullOr(Schema.String),
+    organization_id: Schema.String,
+    parent_resource_id: Schema.NullOr(Schema.String),
+    id: Schema.String,
+    external_id: Schema.String,
+    resource_type_slug: Schema.String,
+    created_at: Schema.String,
+    updated_at: Schema.String,
+  });
+export type AuthorizationResourcesByExternalIdControllerGetByExternalIdOutput =
+  typeof AuthorizationResourcesByExternalIdControllerGetByExternalIdOutput.Type;
+
+// The operation
+/**
+ * Get a resource by external ID
+ *
+ * Retrieve the details of an authorization resource by its external ID, organization, and resource type. This is useful when you only have the external ID from your system and need to fetch the full resource details.
+ *
+ * @param organization_id - The ID of the organization that owns the resource.
+ * @param resource_type_slug - The slug of the resource type.
+ * @param external_id - An identifier you provide to reference the resource in your system.
+ */
+export const AuthorizationResourcesByExternalIdControllerGetByExternalId =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema:
+      AuthorizationResourcesByExternalIdControllerGetByExternalIdInput,
+    outputSchema:
+      AuthorizationResourcesByExternalIdControllerGetByExternalIdOutput,
+    errors: [Forbidden, NotFound] as const,
+  }));

package/src/operations/AuthorizationResourcesByExternalIdControllerListOrganizationMembershipsForResourceByExternalId.ts

@@ -0,0 +1,83 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import {
+  BadRequest,
+  Forbidden,
+  NotFound,
+  UnprocessableEntity,
+} from "../errors.ts";
+
+// Input Schema
+export const AuthorizationResourcesByExternalIdControllerListOrganizationMembershipsForResourceByExternalIdInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_id: Schema.String.pipe(T.PathParam()),
+    resource_type_slug: Schema.String.pipe(T.PathParam()),
+    external_id: Schema.String.pipe(T.PathParam()),
+    before: Schema.optional(Schema.String),
+    after: Schema.optional(Schema.String),
+    limit: Schema.optional(Schema.Number),
+    order: Schema.optional(Schema.Literals(["normal", "desc", "asc"])),
+    permission_slug: Schema.String,
+    assignment: Schema.optional(Schema.Literals(["direct", "indirect"])),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      path: "/authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}/organization_memberships",
+    }),
+  );
+export type AuthorizationResourcesByExternalIdControllerListOrganizationMembershipsForResourceByExternalIdInput =
+  typeof AuthorizationResourcesByExternalIdControllerListOrganizationMembershipsForResourceByExternalIdInput.Type;
+
+// Output Schema
+export const AuthorizationResourcesByExternalIdControllerListOrganizationMembershipsForResourceByExternalIdOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    data: Schema.Array(
+      Schema.Struct({
+        object: Schema.String,
+        id: Schema.String,
+        user_id: Schema.String,
+        organization_id: Schema.String,
+        status: Schema.Literals(["active", "inactive", "pending"]),
+        directory_managed: Schema.Boolean,
+        organization_name: Schema.optional(Schema.String),
+        custom_attributes: Schema.optional(
+          Schema.Record(Schema.String, Schema.Unknown),
+        ),
+        created_at: Schema.String,
+        updated_at: Schema.String,
+      }),
+    ),
+    list_metadata: Schema.Struct({
+      before: Schema.NullOr(Schema.String),
+      after: Schema.NullOr(Schema.String),
+    }),
+  });
+export type AuthorizationResourcesByExternalIdControllerListOrganizationMembershipsForResourceByExternalIdOutput =
+  typeof AuthorizationResourcesByExternalIdControllerListOrganizationMembershipsForResourceByExternalIdOutput.Type;
+
+// The operation
+/**
+ * List memberships for a resource by external ID
+ *
+ * Returns all organization memberships that have a specific permission on a resource, using the resource's external ID. This is useful for answering "Who can access this resource?" when you only have the external ID.
+ *
+ * @param organization_id - The ID of the organization that owns the resource.
+ * @param resource_type_slug - The slug of the resource type this resource belongs to.
+ * @param external_id - An identifier you provide to reference the resource in your system.
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+ * @param permission_slug - The permission slug to filter by. Only users with this permission on the resource are returned.
+ * @param assignment - Filter by assignment type. Use "direct" for direct assignments only, or "indirect" to include inherited assignments.
+ */
+export const AuthorizationResourcesByExternalIdControllerListOrganizationMembershipsForResourceByExternalId =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema:
+      AuthorizationResourcesByExternalIdControllerListOrganizationMembershipsForResourceByExternalIdInput,
+    outputSchema:
+      AuthorizationResourcesByExternalIdControllerListOrganizationMembershipsForResourceByExternalIdOutput,
+    errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity] as const,
+  }));

package/src/operations/AuthorizationResourcesByExternalIdControllerUpdateByExternalId.ts

@@ -0,0 +1,67 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import {
+  BadRequest,
+  Forbidden,
+  NotFound,
+  Conflict,
+  UnprocessableEntity,
+} from "../errors.ts";
+
+// Input Schema
+export const AuthorizationResourcesByExternalIdControllerUpdateByExternalIdInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_id: Schema.String.pipe(T.PathParam()),
+    resource_type_slug: Schema.String.pipe(T.PathParam()),
+    external_id: Schema.String.pipe(T.PathParam()),
+  }).pipe(
+    T.Http({
+      method: "PATCH",
+      path: "/authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}",
+    }),
+  );
+export type AuthorizationResourcesByExternalIdControllerUpdateByExternalIdInput =
+  typeof AuthorizationResourcesByExternalIdControllerUpdateByExternalIdInput.Type;
+
+// Output Schema
+export const AuthorizationResourcesByExternalIdControllerUpdateByExternalIdOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    name: Schema.String,
+    description: Schema.NullOr(Schema.String),
+    organization_id: Schema.String,
+    parent_resource_id: Schema.NullOr(Schema.String),
+    id: Schema.String,
+    external_id: Schema.String,
+    resource_type_slug: Schema.String,
+    created_at: Schema.String,
+    updated_at: Schema.String,
+  });
+export type AuthorizationResourcesByExternalIdControllerUpdateByExternalIdOutput =
+  typeof AuthorizationResourcesByExternalIdControllerUpdateByExternalIdOutput.Type;
+
+// The operation
+/**
+ * Update a resource by external ID
+ *
+ * Update an existing authorization resource using its external ID.
+ *
+ * @param organization_id - The ID of the organization that owns the resource.
+ * @param resource_type_slug - The slug of the resource type.
+ * @param external_id - An identifier you provide to reference the resource in your system.
+ */
+export const AuthorizationResourcesByExternalIdControllerUpdateByExternalId =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema:
+      AuthorizationResourcesByExternalIdControllerUpdateByExternalIdInput,
+    outputSchema:
+      AuthorizationResourcesByExternalIdControllerUpdateByExternalIdOutput,
+    errors: [
+      BadRequest,
+      Forbidden,
+      NotFound,
+      Conflict,
+      UnprocessableEntity,
+    ] as const,
+  }));

package/src/operations/AuthorizationResourcesControllerCreate.ts

@@ -0,0 +1,54 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import {
+  BadRequest,
+  Forbidden,
+  NotFound,
+  Conflict,
+  UnprocessableEntity,
+} from "../errors.ts";
+
+// Input Schema
+export const AuthorizationResourcesControllerCreateInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({}).pipe(
+    T.Http({ method: "POST", path: "/authorization/resources" }),
+  );
+export type AuthorizationResourcesControllerCreateInput =
+  typeof AuthorizationResourcesControllerCreateInput.Type;
+
+// Output Schema
+export const AuthorizationResourcesControllerCreateOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    name: Schema.String,
+    description: Schema.NullOr(Schema.String),
+    organization_id: Schema.String,
+    parent_resource_id: Schema.NullOr(Schema.String),
+    id: Schema.String,
+    external_id: Schema.String,
+    resource_type_slug: Schema.String,
+    created_at: Schema.String,
+    updated_at: Schema.String,
+  });
+export type AuthorizationResourcesControllerCreateOutput =
+  typeof AuthorizationResourcesControllerCreateOutput.Type;
+
+// The operation
+/**
+ * Create an authorization resource
+ *
+ * Create a new authorization resource.
+ */
+export const AuthorizationResourcesControllerCreate =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationResourcesControllerCreateInput,
+    outputSchema: AuthorizationResourcesControllerCreateOutput,
+    errors: [
+      BadRequest,
+      Forbidden,
+      NotFound,
+      Conflict,
+      UnprocessableEntity,
+    ] as const,
+  }));

package/src/operations/AuthorizationResourcesControllerDelete.ts

@@ -0,0 +1,40 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { BadRequest, Forbidden, NotFound, Conflict } from "../errors.ts";
+
+// Input Schema
+export const AuthorizationResourcesControllerDeleteInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    resource_id: Schema.String.pipe(T.PathParam()),
+    cascade_delete: Schema.optional(Schema.Boolean),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      path: "/authorization/resources/{resource_id}",
+    }),
+  );
+export type AuthorizationResourcesControllerDeleteInput =
+  typeof AuthorizationResourcesControllerDeleteInput.Type;
+
+// Output Schema
+export const AuthorizationResourcesControllerDeleteOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Void;
+export type AuthorizationResourcesControllerDeleteOutput =
+  typeof AuthorizationResourcesControllerDeleteOutput.Type;
+
+// The operation
+/**
+ * Delete an authorization resource
+ *
+ * Delete an authorization resource and all its descendants.
+ *
+ * @param resource_id - The ID of the authorization resource.
+ * @param cascade_delete - If true, deletes all descendant resources and role assignments. If not set and the resource has children or assignments, the request will fail.
+ */
+export const AuthorizationResourcesControllerDelete =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationResourcesControllerDeleteInput,
+    outputSchema: AuthorizationResourcesControllerDeleteOutput,
+    errors: [BadRequest, Forbidden, NotFound, Conflict] as const,
+  }));

package/src/operations/AuthorizationResourcesControllerFindById.ts

@@ -0,0 +1,46 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { Forbidden, NotFound, UnprocessableEntity } from "../errors.ts";
+
+// Input Schema
+export const AuthorizationResourcesControllerFindByIdInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    resource_id: Schema.String.pipe(T.PathParam()),
+  }).pipe(
+    T.Http({ method: "GET", path: "/authorization/resources/{resource_id}" }),
+  );
+export type AuthorizationResourcesControllerFindByIdInput =
+  typeof AuthorizationResourcesControllerFindByIdInput.Type;
+
+// Output Schema
+export const AuthorizationResourcesControllerFindByIdOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    name: Schema.String,
+    description: Schema.NullOr(Schema.String),
+    organization_id: Schema.String,
+    parent_resource_id: Schema.NullOr(Schema.String),
+    id: Schema.String,
+    external_id: Schema.String,
+    resource_type_slug: Schema.String,
+    created_at: Schema.String,
+    updated_at: Schema.String,
+  });
+export type AuthorizationResourcesControllerFindByIdOutput =
+  typeof AuthorizationResourcesControllerFindByIdOutput.Type;
+
+// The operation
+/**
+ * Get a resource
+ *
+ * Retrieve the details of an authorization resource by its ID.
+ *
+ * @param resource_id - The ID of the authorization resource.
+ */
+export const AuthorizationResourcesControllerFindById =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationResourcesControllerFindByIdInput,
+    outputSchema: AuthorizationResourcesControllerFindByIdOutput,
+    errors: [Forbidden, NotFound, UnprocessableEntity] as const,
+  }));

package/src/operations/AuthorizationResourcesControllerList.ts

@@ -0,0 +1,73 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { Forbidden, UnprocessableEntity } from "../errors.ts";
+
+// Input Schema
+export const AuthorizationResourcesControllerListInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    before: Schema.optional(Schema.String),
+    after: Schema.optional(Schema.String),
+    limit: Schema.optional(Schema.Number),
+    order: Schema.optional(Schema.Literals(["normal", "desc", "asc"])),
+    organization_id: Schema.optional(Schema.String),
+    resource_type_slug: Schema.optional(Schema.String),
+    resource_external_id: Schema.optional(Schema.String),
+    parent_resource_id: Schema.optional(Schema.String),
+    parent_resource_type_slug: Schema.optional(Schema.String),
+    parent_external_id: Schema.optional(Schema.String),
+    search: Schema.optional(Schema.String),
+  }).pipe(T.Http({ method: "GET", path: "/authorization/resources" }));
+export type AuthorizationResourcesControllerListInput =
+  typeof AuthorizationResourcesControllerListInput.Type;
+
+// Output Schema
+export const AuthorizationResourcesControllerListOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    data: Schema.Array(
+      Schema.Struct({
+        object: Schema.String,
+        name: Schema.String,
+        description: Schema.NullOr(Schema.String),
+        organization_id: Schema.String,
+        parent_resource_id: Schema.NullOr(Schema.String),
+        id: Schema.String,
+        external_id: Schema.String,
+        resource_type_slug: Schema.String,
+        created_at: Schema.String,
+        updated_at: Schema.String,
+      }),
+    ),
+    list_metadata: Schema.Struct({
+      before: Schema.NullOr(Schema.String),
+      after: Schema.NullOr(Schema.String),
+    }),
+  });
+export type AuthorizationResourcesControllerListOutput =
+  typeof AuthorizationResourcesControllerListOutput.Type;
+
+// The operation
+/**
+ * List resources
+ *
+ * Get a paginated list of authorization resources.
+ *
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+ * @param organization_id - Filter resources by organization ID.
+ * @param resource_type_slug - Filter resources by resource type slug.
+ * @param resource_external_id - Filter resources by external ID.
+ * @param parent_resource_id - Filter resources by parent resource ID. Mutually exclusive with `parent_resource_type_slug` and `parent_external_id`.
+ * @param parent_resource_type_slug - Filter resources by parent resource type slug. Required with `parent_external_id`. Mutually exclusive with `parent_resource_id`.
+ * @param parent_external_id - Filter resources by parent external ID. Required with `parent_resource_type_slug`. Mutually exclusive with `parent_resource_id`.
+ * @param search - Search resources by name.
+ */
+export const AuthorizationResourcesControllerList =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationResourcesControllerListInput,
+    outputSchema: AuthorizationResourcesControllerListOutput,
+    errors: [Forbidden, UnprocessableEntity] as const,
+  }));

package/src/operations/AuthorizationResourcesControllerListOrganizationMembershipsForResource.ts

@@ -0,0 +1,79 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import {
+  BadRequest,
+  Forbidden,
+  NotFound,
+  UnprocessableEntity,
+} from "../errors.ts";
+
+// Input Schema
+export const AuthorizationResourcesControllerListOrganizationMembershipsForResourceInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    resource_id: Schema.String.pipe(T.PathParam()),
+    before: Schema.optional(Schema.String),
+    after: Schema.optional(Schema.String),
+    limit: Schema.optional(Schema.Number),
+    order: Schema.optional(Schema.Literals(["normal", "desc", "asc"])),
+    permission_slug: Schema.String,
+    assignment: Schema.optional(Schema.Literals(["direct", "indirect"])),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      path: "/authorization/resources/{resource_id}/organization_memberships",
+    }),
+  );
+export type AuthorizationResourcesControllerListOrganizationMembershipsForResourceInput =
+  typeof AuthorizationResourcesControllerListOrganizationMembershipsForResourceInput.Type;
+
+// Output Schema
+export const AuthorizationResourcesControllerListOrganizationMembershipsForResourceOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    data: Schema.Array(
+      Schema.Struct({
+        object: Schema.String,
+        id: Schema.String,
+        user_id: Schema.String,
+        organization_id: Schema.String,
+        status: Schema.Literals(["active", "inactive", "pending"]),
+        directory_managed: Schema.Boolean,
+        organization_name: Schema.optional(Schema.String),
+        custom_attributes: Schema.optional(
+          Schema.Record(Schema.String, Schema.Unknown),
+        ),
+        created_at: Schema.String,
+        updated_at: Schema.String,
+      }),
+    ),
+    list_metadata: Schema.Struct({
+      before: Schema.NullOr(Schema.String),
+      after: Schema.NullOr(Schema.String),
+    }),
+  });
+export type AuthorizationResourcesControllerListOrganizationMembershipsForResourceOutput =
+  typeof AuthorizationResourcesControllerListOrganizationMembershipsForResourceOutput.Type;
+
+// The operation
+/**
+ * List organization memberships for resource
+ *
+ * Returns all organization memberships that have a specific permission on a resource instance. This is useful for answering "Who can access this resource?".
+ *
+ * @param resource_id - The ID of the authorization resource.
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+ * @param permission_slug - The permission slug to filter by. Only users with this permission on the resource are returned.
+ * @param assignment - Filter by assignment type. Use `direct` for direct assignments only, or `indirect` to include inherited assignments.
+ */
+export const AuthorizationResourcesControllerListOrganizationMembershipsForResource =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema:
+      AuthorizationResourcesControllerListOrganizationMembershipsForResourceInput,
+    outputSchema:
+      AuthorizationResourcesControllerListOrganizationMembershipsForResourceOutput,
+    errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity] as const,
+  }));

package/src/operations/AuthorizationResourcesControllerUpdate.ts

@@ -0,0 +1,58 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import {
+  BadRequest,
+  Forbidden,
+  NotFound,
+  Conflict,
+  UnprocessableEntity,
+} from "../errors.ts";
+
+// Input Schema
+export const AuthorizationResourcesControllerUpdateInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    resource_id: Schema.String.pipe(T.PathParam()),
+  }).pipe(
+    T.Http({ method: "PATCH", path: "/authorization/resources/{resource_id}" }),
+  );
+export type AuthorizationResourcesControllerUpdateInput =
+  typeof AuthorizationResourcesControllerUpdateInput.Type;
+
+// Output Schema
+export const AuthorizationResourcesControllerUpdateOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    name: Schema.String,
+    description: Schema.NullOr(Schema.String),
+    organization_id: Schema.String,
+    parent_resource_id: Schema.NullOr(Schema.String),
+    id: Schema.String,
+    external_id: Schema.String,
+    resource_type_slug: Schema.String,
+    created_at: Schema.String,
+    updated_at: Schema.String,
+  });
+export type AuthorizationResourcesControllerUpdateOutput =
+  typeof AuthorizationResourcesControllerUpdateOutput.Type;
+
+// The operation
+/**
+ * Update a resource
+ *
+ * Update an existing authorization resource.
+ *
+ * @param resource_id - The ID of the authorization resource.
+ */
+export const AuthorizationResourcesControllerUpdate =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationResourcesControllerUpdateInput,
+    outputSchema: AuthorizationResourcesControllerUpdateOutput,
+    errors: [
+      BadRequest,
+      Forbidden,
+      NotFound,
+      Conflict,
+      UnprocessableEntity,
+    ] as const,
+  }));

package/src/operations/AuthorizationRoleAssignmentsControllerAssignRole.ts

@@ -0,0 +1,51 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { Forbidden, NotFound, UnprocessableEntity } from "../errors.ts";
+
+// Input Schema
+export const AuthorizationRoleAssignmentsControllerAssignRoleInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_membership_id: Schema.String.pipe(T.PathParam()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      path: "/authorization/organization_memberships/{organization_membership_id}/role_assignments",
+    }),
+  );
+export type AuthorizationRoleAssignmentsControllerAssignRoleInput =
+  typeof AuthorizationRoleAssignmentsControllerAssignRoleInput.Type;
+
+// Output Schema
+export const AuthorizationRoleAssignmentsControllerAssignRoleOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    id: Schema.String,
+    role: Schema.Struct({
+      slug: Schema.String,
+    }),
+    resource: Schema.Struct({
+      id: Schema.String,
+      external_id: Schema.String,
+      resource_type_slug: Schema.String,
+    }),
+    created_at: Schema.String,
+    updated_at: Schema.String,
+  });
+export type AuthorizationRoleAssignmentsControllerAssignRoleOutput =
+  typeof AuthorizationRoleAssignmentsControllerAssignRoleOutput.Type;
+
+// The operation
+/**
+ * Assign a role
+ *
+ * Assign a role to an organization membership on a specific resource.
+ *
+ * @param organization_membership_id - The ID of the organization membership.
+ */
+export const AuthorizationRoleAssignmentsControllerAssignRole =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationRoleAssignmentsControllerAssignRoleInput,
+    outputSchema: AuthorizationRoleAssignmentsControllerAssignRoleOutput,
+    errors: [Forbidden, NotFound, UnprocessableEntity] as const,
+  }));