@distilled.cloud/workos 0.0.0 → 0.15.0

package/lib/operations/AuthorizationControllerCheck.js

@@ -0,0 +1,32 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.js";
+import * as T from "../traits.js";
+import { Forbidden, NotFound, UnprocessableEntity } from "../errors.js";
+// Input Schema
+export const AuthorizationControllerCheckInput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_membership_id: Schema.String.pipe(T.PathParam()),
+}).pipe(T.Http({
+    method: "POST",
+    path: "/authorization/organization_memberships/{organization_membership_id}/check",
+}));
+// Output Schema
+export const AuthorizationControllerCheckOutput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    authorized: Schema.Boolean,
+});
+// The operation
+/**
+ * Check authorization
+ *
+ * Check if an organization membership has a specific permission on a resource. Supports identification by resource_id OR by resource_external_id + resource_type_slug.
+ *
+ * @param organization_membership_id - The ID of the organization membership to check.
+ */
+export const AuthorizationControllerCheck = 
+/*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationControllerCheckInput,
+    outputSchema: AuthorizationControllerCheckOutput,
+    errors: [Forbidden, NotFound, UnprocessableEntity],
+}));
+//# sourceMappingURL=AuthorizationControllerCheck.js.map

package/lib/operations/AuthorizationControllerCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationControllerCheck.js","sourceRoot":"","sources":["../../src/operations/AuthorizationControllerCheck.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAExE,eAAe;AACf,MAAM,CAAC,MAAM,iCAAiC;AAC5C,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CAC9D,CAAC,CAAC,IAAI,CACL,CAAC,CAAC,IAAI,CAAC;IACL,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,4EAA4E;CACnF,CAAC,CACH,CAAC;AAIJ,gBAAgB;AAChB,MAAM,CAAC,MAAM,kCAAkC;AAC7C,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC,OAAO;CAC3B,CAAC,CAAC;AAIL,gBAAgB;AAChB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B;AACvC,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1C,WAAW,EAAE,iCAAiC;IAC9C,YAAY,EAAE,kCAAkC;IAChD,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,mBAAmB,CAAU;CAC5D,CAAC,CAAC,CAAC"}

package/lib/operations/AuthorizationControllerListEffectivePermissions.d.ts

@@ -0,0 +1,68 @@
+import * as Schema from "effect/Schema";
+import { Forbidden, NotFound, UnprocessableEntity } from "../errors.ts";
+export declare const AuthorizationControllerListEffectivePermissionsInput: Schema.Struct<{
+    readonly organization_membership_id: Schema.String;
+    readonly resource_id: Schema.String;
+    readonly before: Schema.optional<Schema.String>;
+    readonly after: Schema.optional<Schema.String>;
+    readonly limit: Schema.optional<Schema.Number>;
+    readonly order: Schema.optional<Schema.Literals<readonly ["normal", "desc", "asc"]>>;
+}>;
+export type AuthorizationControllerListEffectivePermissionsInput = typeof AuthorizationControllerListEffectivePermissionsInput.Type;
+export declare const AuthorizationControllerListEffectivePermissionsOutput: Schema.Struct<{
+    readonly object: Schema.String;
+    readonly data: Schema.$Array<Schema.Struct<{
+        readonly object: Schema.String;
+        readonly id: Schema.String;
+        readonly slug: Schema.String;
+        readonly name: Schema.String;
+        readonly description: Schema.NullOr<Schema.String>;
+        readonly system: Schema.Boolean;
+        readonly resource_type_slug: Schema.String;
+        readonly created_at: Schema.String;
+        readonly updated_at: Schema.String;
+    }>>;
+    readonly list_metadata: Schema.Struct<{
+        readonly before: Schema.NullOr<Schema.String>;
+        readonly after: Schema.NullOr<Schema.String>;
+    }>;
+}>;
+export type AuthorizationControllerListEffectivePermissionsOutput = typeof AuthorizationControllerListEffectivePermissionsOutput.Type;
+/**
+ * List effective permissions for an organization membership on a resource
+ *
+ * Returns all permissions the organization membership effectively has on a resource, including permissions inherited through roles assigned to ancestor resources.
+ *
+ * @param organization_membership_id - The ID of the organization membership.
+ * @param resource_id - The ID of the authorization resource.
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+ */
+export declare const AuthorizationControllerListEffectivePermissions: import("@distilled.cloud/core/client").OperationMethod<{
+    readonly after?: string | undefined;
+    readonly before?: string | undefined;
+    readonly limit?: number | undefined;
+    readonly order?: "asc" | "desc" | "normal" | undefined;
+    readonly organization_membership_id: string;
+    readonly resource_id: string;
+}, {
+    readonly data: readonly {
+        readonly created_at: string;
+        readonly description: string | null;
+        readonly id: string;
+        readonly name: string;
+        readonly object: string;
+        readonly resource_type_slug: string;
+        readonly slug: string;
+        readonly system: boolean;
+        readonly updated_at: string;
+    }[];
+    readonly list_metadata: {
+        readonly after: string | null;
+        readonly before: string | null;
+    };
+    readonly object: string;
+}, Forbidden | NotFound | UnprocessableEntity, import("~/credentials.ts").Credentials>;
+//# sourceMappingURL=AuthorizationControllerListEffectivePermissions.d.ts.map

package/lib/operations/AuthorizationControllerListEffectivePermissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationControllerListEffectivePermissions.d.ts","sourceRoot":"","sources":["../../src/operations/AuthorizationControllerListEffectivePermissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGxE,eAAO,MAAM,oDAAoD;;;;;;;EAa9D,CAAC;AACJ,MAAM,MAAM,oDAAoD,GAC9D,OAAO,oDAAoD,CAAC,IAAI,CAAC;AAGnE,eAAO,MAAM,qDAAqD;;;;;;;;;;;;;;;;;EAoB9D,CAAC;AACL,MAAM,MAAM,qDAAqD,GAC/D,OAAO,qDAAqD,CAAC,IAAI,CAAC;AAGpE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,+CAA+C;;;;;;;;;;;;;;;;;;;;;;;;sFAKvD,CAAC"}

package/lib/operations/AuthorizationControllerListEffectivePermissions.js

@@ -0,0 +1,57 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.js";
+import * as T from "../traits.js";
+import { Forbidden, NotFound, UnprocessableEntity } from "../errors.js";
+// Input Schema
+export const AuthorizationControllerListEffectivePermissionsInput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_membership_id: Schema.String.pipe(T.PathParam()),
+    resource_id: Schema.String.pipe(T.PathParam()),
+    before: Schema.optional(Schema.String),
+    after: Schema.optional(Schema.String),
+    limit: Schema.optional(Schema.Number),
+    order: Schema.optional(Schema.Literals(["normal", "desc", "asc"])),
+}).pipe(T.Http({
+    method: "GET",
+    path: "/authorization/organization_memberships/{organization_membership_id}/resources/{resource_id}/permissions",
+}));
+// Output Schema
+export const AuthorizationControllerListEffectivePermissionsOutput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    data: Schema.Array(Schema.Struct({
+        object: Schema.String,
+        id: Schema.String,
+        slug: Schema.String,
+        name: Schema.String,
+        description: Schema.NullOr(Schema.String),
+        system: Schema.Boolean,
+        resource_type_slug: Schema.String,
+        created_at: Schema.String,
+        updated_at: Schema.String,
+    })),
+    list_metadata: Schema.Struct({
+        before: Schema.NullOr(Schema.String),
+        after: Schema.NullOr(Schema.String),
+    }),
+});
+// The operation
+/**
+ * List effective permissions for an organization membership on a resource
+ *
+ * Returns all permissions the organization membership effectively has on a resource, including permissions inherited through roles assigned to ancestor resources.
+ *
+ * @param organization_membership_id - The ID of the organization membership.
+ * @param resource_id - The ID of the authorization resource.
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+ */
+export const AuthorizationControllerListEffectivePermissions = 
+/*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationControllerListEffectivePermissionsInput,
+    outputSchema: AuthorizationControllerListEffectivePermissionsOutput,
+    errors: [Forbidden, NotFound, UnprocessableEntity],
+}));
+//# sourceMappingURL=AuthorizationControllerListEffectivePermissions.js.map

package/lib/operations/AuthorizationControllerListEffectivePermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationControllerListEffectivePermissions.js","sourceRoot":"","sources":["../../src/operations/AuthorizationControllerListEffectivePermissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAExE,eAAe;AACf,MAAM,CAAC,MAAM,oDAAoD;AAC/D,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC7D,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;CACnE,CAAC,CAAC,IAAI,CACL,CAAC,CAAC,IAAI,CAAC;IACL,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,0GAA0G;CACjH,CAAC,CACH,CAAC;AAIJ,gBAAgB;AAChB,MAAM,CAAC,MAAM,qDAAqD;AAChE,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC,KAAK,CAChB,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,EAAE,EAAE,MAAM,CAAC,MAAM;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACzC,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,kBAAkB,EAAE,MAAM,CAAC,MAAM;QACjC,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,UAAU,EAAE,MAAM,CAAC,MAAM;KAC1B,CAAC,CACH;IACD,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;KACpC,CAAC;CACH,CAAC,CAAC;AAIL,gBAAgB;AAChB;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,+CAA+C;AAC1D,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1C,WAAW,EAAE,oDAAoD;IACjE,YAAY,EAAE,qDAAqD;IACnE,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,mBAAmB,CAAU;CAC5D,CAAC,CAAC,CAAC"}

package/lib/operations/AuthorizationControllerListEffectivePermissionsByExternalId.d.ts

@@ -0,0 +1,71 @@
+import * as Schema from "effect/Schema";
+import { Forbidden, NotFound, UnprocessableEntity } from "../errors.ts";
+export declare const AuthorizationControllerListEffectivePermissionsByExternalIdInput: Schema.Struct<{
+    readonly organization_membership_id: Schema.String;
+    readonly resource_type_slug: Schema.String;
+    readonly external_id: Schema.String;
+    readonly before: Schema.optional<Schema.String>;
+    readonly after: Schema.optional<Schema.String>;
+    readonly limit: Schema.optional<Schema.Number>;
+    readonly order: Schema.optional<Schema.Literals<readonly ["normal", "desc", "asc"]>>;
+}>;
+export type AuthorizationControllerListEffectivePermissionsByExternalIdInput = typeof AuthorizationControllerListEffectivePermissionsByExternalIdInput.Type;
+export declare const AuthorizationControllerListEffectivePermissionsByExternalIdOutput: Schema.Struct<{
+    readonly object: Schema.String;
+    readonly data: Schema.$Array<Schema.Struct<{
+        readonly object: Schema.String;
+        readonly id: Schema.String;
+        readonly slug: Schema.String;
+        readonly name: Schema.String;
+        readonly description: Schema.NullOr<Schema.String>;
+        readonly system: Schema.Boolean;
+        readonly resource_type_slug: Schema.String;
+        readonly created_at: Schema.String;
+        readonly updated_at: Schema.String;
+    }>>;
+    readonly list_metadata: Schema.Struct<{
+        readonly before: Schema.NullOr<Schema.String>;
+        readonly after: Schema.NullOr<Schema.String>;
+    }>;
+}>;
+export type AuthorizationControllerListEffectivePermissionsByExternalIdOutput = typeof AuthorizationControllerListEffectivePermissionsByExternalIdOutput.Type;
+/**
+ * List effective permissions for an organization membership on a resource by external ID
+ *
+ * Returns all permissions the organization membership effectively has on a resource identified by its external ID, including permissions inherited through roles assigned to ancestor resources.
+ *
+ * @param organization_membership_id - The ID of the organization membership.
+ * @param resource_type_slug - The slug of the resource type.
+ * @param external_id - An identifier you provide to reference the resource in your system.
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+ */
+export declare const AuthorizationControllerListEffectivePermissionsByExternalId: import("@distilled.cloud/core/client").OperationMethod<{
+    readonly after?: string | undefined;
+    readonly before?: string | undefined;
+    readonly external_id: string;
+    readonly limit?: number | undefined;
+    readonly order?: "asc" | "desc" | "normal" | undefined;
+    readonly organization_membership_id: string;
+    readonly resource_type_slug: string;
+}, {
+    readonly data: readonly {
+        readonly created_at: string;
+        readonly description: string | null;
+        readonly id: string;
+        readonly name: string;
+        readonly object: string;
+        readonly resource_type_slug: string;
+        readonly slug: string;
+        readonly system: boolean;
+        readonly updated_at: string;
+    }[];
+    readonly list_metadata: {
+        readonly after: string | null;
+        readonly before: string | null;
+    };
+    readonly object: string;
+}, Forbidden | NotFound | UnprocessableEntity, import("~/credentials.ts").Credentials>;
+//# sourceMappingURL=AuthorizationControllerListEffectivePermissionsByExternalId.d.ts.map

package/lib/operations/AuthorizationControllerListEffectivePermissionsByExternalId.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationControllerListEffectivePermissionsByExternalId.d.ts","sourceRoot":"","sources":["../../src/operations/AuthorizationControllerListEffectivePermissionsByExternalId.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGxE,eAAO,MAAM,gEAAgE;;;;;;;;EAc1E,CAAC;AACJ,MAAM,MAAM,gEAAgE,GAC1E,OAAO,gEAAgE,CAAC,IAAI,CAAC;AAG/E,eAAO,MAAM,iEAAiE;;;;;;;;;;;;;;;;;EAoB1E,CAAC;AACL,MAAM,MAAM,iEAAiE,GAC3E,OAAO,iEAAiE,CAAC,IAAI,CAAC;AAGhF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,2DAA2D;;;;;;;;;;;;;;;;;;;;;;;;;sFAOnE,CAAC"}

package/lib/operations/AuthorizationControllerListEffectivePermissionsByExternalId.js

@@ -0,0 +1,59 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.js";
+import * as T from "../traits.js";
+import { Forbidden, NotFound, UnprocessableEntity } from "../errors.js";
+// Input Schema
+export const AuthorizationControllerListEffectivePermissionsByExternalIdInput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_membership_id: Schema.String.pipe(T.PathParam()),
+    resource_type_slug: Schema.String.pipe(T.PathParam()),
+    external_id: Schema.String.pipe(T.PathParam()),
+    before: Schema.optional(Schema.String),
+    after: Schema.optional(Schema.String),
+    limit: Schema.optional(Schema.Number),
+    order: Schema.optional(Schema.Literals(["normal", "desc", "asc"])),
+}).pipe(T.Http({
+    method: "GET",
+    path: "/authorization/organization_memberships/{organization_membership_id}/resources/{resource_type_slug}/{external_id}/permissions",
+}));
+// Output Schema
+export const AuthorizationControllerListEffectivePermissionsByExternalIdOutput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    data: Schema.Array(Schema.Struct({
+        object: Schema.String,
+        id: Schema.String,
+        slug: Schema.String,
+        name: Schema.String,
+        description: Schema.NullOr(Schema.String),
+        system: Schema.Boolean,
+        resource_type_slug: Schema.String,
+        created_at: Schema.String,
+        updated_at: Schema.String,
+    })),
+    list_metadata: Schema.Struct({
+        before: Schema.NullOr(Schema.String),
+        after: Schema.NullOr(Schema.String),
+    }),
+});
+// The operation
+/**
+ * List effective permissions for an organization membership on a resource by external ID
+ *
+ * Returns all permissions the organization membership effectively has on a resource identified by its external ID, including permissions inherited through roles assigned to ancestor resources.
+ *
+ * @param organization_membership_id - The ID of the organization membership.
+ * @param resource_type_slug - The slug of the resource type.
+ * @param external_id - An identifier you provide to reference the resource in your system.
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+ */
+export const AuthorizationControllerListEffectivePermissionsByExternalId = 
+/*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationControllerListEffectivePermissionsByExternalIdInput,
+    outputSchema: AuthorizationControllerListEffectivePermissionsByExternalIdOutput,
+    errors: [Forbidden, NotFound, UnprocessableEntity],
+}));
+//# sourceMappingURL=AuthorizationControllerListEffectivePermissionsByExternalId.js.map

package/lib/operations/AuthorizationControllerListEffectivePermissionsByExternalId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationControllerListEffectivePermissionsByExternalId.js","sourceRoot":"","sources":["../../src/operations/AuthorizationControllerListEffectivePermissionsByExternalId.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAExE,eAAe;AACf,MAAM,CAAC,MAAM,gEAAgE;AAC3E,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC7D,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACrD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;CACnE,CAAC,CAAC,IAAI,CACL,CAAC,CAAC,IAAI,CAAC;IACL,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,+HAA+H;CACtI,CAAC,CACH,CAAC;AAIJ,gBAAgB;AAChB,MAAM,CAAC,MAAM,iEAAiE;AAC5E,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC,KAAK,CAChB,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,EAAE,EAAE,MAAM,CAAC,MAAM;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACzC,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,kBAAkB,EAAE,MAAM,CAAC,MAAM;QACjC,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,UAAU,EAAE,MAAM,CAAC,MAAM;KAC1B,CAAC,CACH;IACD,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;KACpC,CAAC;CACH,CAAC,CAAC;AAIL,gBAAgB;AAChB;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2DAA2D;AACtE,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1C,WAAW,EACT,gEAAgE;IAClE,YAAY,EACV,iEAAiE;IACnE,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,mBAAmB,CAAU;CAC5D,CAAC,CAAC,CAAC"}

package/lib/operations/AuthorizationControllerListResourcesForMembership.d.ts

@@ -0,0 +1,80 @@
+import * as Schema from "effect/Schema";
+import { BadRequest, Forbidden, NotFound, UnprocessableEntity } from "../errors.ts";
+export declare const AuthorizationControllerListResourcesForMembershipInput: Schema.Struct<{
+    readonly organization_membership_id: Schema.String;
+    readonly before: Schema.optional<Schema.String>;
+    readonly after: Schema.optional<Schema.String>;
+    readonly limit: Schema.optional<Schema.Number>;
+    readonly order: Schema.optional<Schema.Literals<readonly ["normal", "desc", "asc"]>>;
+    readonly permission_slug: Schema.String;
+    readonly parent_resource_id: Schema.optional<Schema.String>;
+    readonly parent_resource_type_slug: Schema.optional<Schema.String>;
+    readonly parent_resource_external_id: Schema.optional<Schema.String>;
+}>;
+export type AuthorizationControllerListResourcesForMembershipInput = typeof AuthorizationControllerListResourcesForMembershipInput.Type;
+export declare const AuthorizationControllerListResourcesForMembershipOutput: Schema.Struct<{
+    readonly object: Schema.String;
+    readonly data: Schema.$Array<Schema.Struct<{
+        readonly object: Schema.String;
+        readonly name: Schema.String;
+        readonly description: Schema.NullOr<Schema.String>;
+        readonly organization_id: Schema.String;
+        readonly parent_resource_id: Schema.NullOr<Schema.String>;
+        readonly id: Schema.String;
+        readonly external_id: Schema.String;
+        readonly resource_type_slug: Schema.String;
+        readonly created_at: Schema.String;
+        readonly updated_at: Schema.String;
+    }>>;
+    readonly list_metadata: Schema.Struct<{
+        readonly before: Schema.NullOr<Schema.String>;
+        readonly after: Schema.NullOr<Schema.String>;
+    }>;
+}>;
+export type AuthorizationControllerListResourcesForMembershipOutput = typeof AuthorizationControllerListResourcesForMembershipOutput.Type;
+/**
+ * List resources for organization membership
+ *
+ * Returns all child resources of a parent resource where the organization membership has a specific permission. This is useful for resource discovery—answering "What projects can this user access in this workspace?"
+ * You must provide either `parent_resource_id` or both `parent_resource_external_id` and `parent_resource_type_slug` to identify the parent resource.
+ *
+ * @param organization_membership_id - The ID of the organization membership.
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+ * @param permission_slug - The permission slug to filter by. Only child resources where the organization membership has this permission are returned.
+ * @param parent_resource_id - The WorkOS ID of the parent resource. Provide this or both `parent_resource_external_id` and `parent_resource_type_slug`, but not both. Mutually exclusive with `parent_resource_type_slug` and `parent_resource_external_id`.
+ * @param parent_resource_type_slug - The slug of the parent resource type. Must be provided together with `parent_resource_external_id`. Required with `parent_resource_external_id`. Mutually exclusive with `parent_resource_id`.
+ * @param parent_resource_external_id - The application-specific external identifier of the parent resource. Must be provided together with `parent_resource_type_slug`. Required with `parent_resource_type_slug`. Mutually exclusive with `parent_resource_id`.
+ */
+export declare const AuthorizationControllerListResourcesForMembership: import("@distilled.cloud/core/client").OperationMethod<{
+    readonly after?: string | undefined;
+    readonly before?: string | undefined;
+    readonly limit?: number | undefined;
+    readonly order?: "asc" | "desc" | "normal" | undefined;
+    readonly organization_membership_id: string;
+    readonly parent_resource_external_id?: string | undefined;
+    readonly parent_resource_id?: string | undefined;
+    readonly parent_resource_type_slug?: string | undefined;
+    readonly permission_slug: string;
+}, {
+    readonly data: readonly {
+        readonly created_at: string;
+        readonly description: string | null;
+        readonly external_id: string;
+        readonly id: string;
+        readonly name: string;
+        readonly object: string;
+        readonly organization_id: string;
+        readonly parent_resource_id: string | null;
+        readonly resource_type_slug: string;
+        readonly updated_at: string;
+    }[];
+    readonly list_metadata: {
+        readonly after: string | null;
+        readonly before: string | null;
+    };
+    readonly object: string;
+}, BadRequest | Forbidden | NotFound | UnprocessableEntity, import("~/credentials.ts").Credentials>;
+//# sourceMappingURL=AuthorizationControllerListResourcesForMembership.d.ts.map

package/lib/operations/AuthorizationControllerListResourcesForMembership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationControllerListResourcesForMembership.d.ts","sourceRoot":"","sources":["../../src/operations/AuthorizationControllerListResourcesForMembership.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EACL,UAAU,EACV,SAAS,EACT,QAAQ,EACR,mBAAmB,EACpB,MAAM,cAAc,CAAC;AAGtB,eAAO,MAAM,sDAAsD;;;;;;;;;;EAgBhE,CAAC;AACJ,MAAM,MAAM,sDAAsD,GAChE,OAAO,sDAAsD,CAAC,IAAI,CAAC;AAGrE,eAAO,MAAM,uDAAuD;;;;;;;;;;;;;;;;;;EAqBhE,CAAC;AACL,MAAM,MAAM,uDAAuD,GACjE,OAAO,uDAAuD,CAAC,IAAI,CAAC;AAGtE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,iDAAiD;;;;;;;;;;;;;;;;;;;;;;;;;;;;mGAKzD,CAAC"}

package/lib/operations/AuthorizationControllerListResourcesForMembership.js

@@ -0,0 +1,65 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.js";
+import * as T from "../traits.js";
+import { BadRequest, Forbidden, NotFound, UnprocessableEntity, } from "../errors.js";
+// Input Schema
+export const AuthorizationControllerListResourcesForMembershipInput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_membership_id: Schema.String.pipe(T.PathParam()),
+    before: Schema.optional(Schema.String),
+    after: Schema.optional(Schema.String),
+    limit: Schema.optional(Schema.Number),
+    order: Schema.optional(Schema.Literals(["normal", "desc", "asc"])),
+    permission_slug: Schema.String,
+    parent_resource_id: Schema.optional(Schema.String),
+    parent_resource_type_slug: Schema.optional(Schema.String),
+    parent_resource_external_id: Schema.optional(Schema.String),
+}).pipe(T.Http({
+    method: "GET",
+    path: "/authorization/organization_memberships/{organization_membership_id}/resources",
+}));
+// Output Schema
+export const AuthorizationControllerListResourcesForMembershipOutput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    data: Schema.Array(Schema.Struct({
+        object: Schema.String,
+        name: Schema.String,
+        description: Schema.NullOr(Schema.String),
+        organization_id: Schema.String,
+        parent_resource_id: Schema.NullOr(Schema.String),
+        id: Schema.String,
+        external_id: Schema.String,
+        resource_type_slug: Schema.String,
+        created_at: Schema.String,
+        updated_at: Schema.String,
+    })),
+    list_metadata: Schema.Struct({
+        before: Schema.NullOr(Schema.String),
+        after: Schema.NullOr(Schema.String),
+    }),
+});
+// The operation
+/**
+ * List resources for organization membership
+ *
+ * Returns all child resources of a parent resource where the organization membership has a specific permission. This is useful for resource discovery—answering "What projects can this user access in this workspace?"
+ * You must provide either `parent_resource_id` or both `parent_resource_external_id` and `parent_resource_type_slug` to identify the parent resource.
+ *
+ * @param organization_membership_id - The ID of the organization membership.
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+ * @param permission_slug - The permission slug to filter by. Only child resources where the organization membership has this permission are returned.
+ * @param parent_resource_id - The WorkOS ID of the parent resource. Provide this or both `parent_resource_external_id` and `parent_resource_type_slug`, but not both. Mutually exclusive with `parent_resource_type_slug` and `parent_resource_external_id`.
+ * @param parent_resource_type_slug - The slug of the parent resource type. Must be provided together with `parent_resource_external_id`. Required with `parent_resource_external_id`. Mutually exclusive with `parent_resource_id`.
+ * @param parent_resource_external_id - The application-specific external identifier of the parent resource. Must be provided together with `parent_resource_type_slug`. Required with `parent_resource_type_slug`. Mutually exclusive with `parent_resource_id`.
+ */
+export const AuthorizationControllerListResourcesForMembership = 
+/*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationControllerListResourcesForMembershipInput,
+    outputSchema: AuthorizationControllerListResourcesForMembershipOutput,
+    errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity],
+}));
+//# sourceMappingURL=AuthorizationControllerListResourcesForMembership.js.map

package/lib/operations/AuthorizationControllerListResourcesForMembership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationControllerListResourcesForMembership.js","sourceRoot":"","sources":["../../src/operations/AuthorizationControllerListResourcesForMembership.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EACL,UAAU,EACV,SAAS,EACT,QAAQ,EACR,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,eAAe;AACf,MAAM,CAAC,MAAM,sDAAsD;AACjE,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC7D,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAClE,eAAe,EAAE,MAAM,CAAC,MAAM;IAC9B,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAClD,yBAAyB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACzD,2BAA2B,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;CAC5D,CAAC,CAAC,IAAI,CACL,CAAC,CAAC,IAAI,CAAC;IACL,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,gFAAgF;CACvF,CAAC,CACH,CAAC;AAIJ,gBAAgB;AAChB,MAAM,CAAC,MAAM,uDAAuD;AAClE,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC,KAAK,CAChB,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACzC,eAAe,EAAE,MAAM,CAAC,MAAM;QAC9B,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAChD,EAAE,EAAE,MAAM,CAAC,MAAM;QACjB,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,kBAAkB,EAAE,MAAM,CAAC,MAAM;QACjC,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,UAAU,EAAE,MAAM,CAAC,MAAM;KAC1B,CAAC,CACH;IACD,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;KACpC,CAAC;CACH,CAAC,CAAC;AAIL,gBAAgB;AAChB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,iDAAiD;AAC5D,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1C,WAAW,EAAE,sDAAsD;IACnE,YAAY,EAAE,uDAAuD;IACrE,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,CAAU;CACxE,CAAC,CAAC,CAAC"}

package/lib/operations/AuthorizationOrganizationRolePermissionsControllerAddPermission.d.ts

@@ -0,0 +1,44 @@
+import * as Schema from "effect/Schema";
+import { BadRequest, Forbidden, NotFound, UnprocessableEntity } from "../errors.ts";
+export declare const AuthorizationOrganizationRolePermissionsControllerAddPermissionInput: Schema.Struct<{
+    readonly organizationId: Schema.String;
+    readonly slug: Schema.String;
+}>;
+export type AuthorizationOrganizationRolePermissionsControllerAddPermissionInput = typeof AuthorizationOrganizationRolePermissionsControllerAddPermissionInput.Type;
+export declare const AuthorizationOrganizationRolePermissionsControllerAddPermissionOutput: Schema.Struct<{
+    readonly slug: Schema.String;
+    readonly object: Schema.String;
+    readonly id: Schema.String;
+    readonly name: Schema.String;
+    readonly description: Schema.NullOr<Schema.String>;
+    readonly type: Schema.Literals<readonly ["EnvironmentRole", "OrganizationRole"]>;
+    readonly resource_type_slug: Schema.String;
+    readonly permissions: Schema.$Array<Schema.String>;
+    readonly created_at: Schema.String;
+    readonly updated_at: Schema.String;
+}>;
+export type AuthorizationOrganizationRolePermissionsControllerAddPermissionOutput = typeof AuthorizationOrganizationRolePermissionsControllerAddPermissionOutput.Type;
+/**
+ * Add a permission to a custom role
+ *
+ * Add a single permission to a custom role. If the permission is already assigned to the role, this operation has no effect.
+ *
+ * @param organizationId - The ID of the organization.
+ * @param slug - The slug of the role.
+ */
+export declare const AuthorizationOrganizationRolePermissionsControllerAddPermission: import("@distilled.cloud/core/client").OperationMethod<{
+    readonly organizationId: string;
+    readonly slug: string;
+}, {
+    readonly created_at: string;
+    readonly description: string | null;
+    readonly id: string;
+    readonly name: string;
+    readonly object: string;
+    readonly permissions: readonly string[];
+    readonly resource_type_slug: string;
+    readonly slug: string;
+    readonly type: "EnvironmentRole" | "OrganizationRole";
+    readonly updated_at: string;
+}, BadRequest | Forbidden | NotFound | UnprocessableEntity, import("~/credentials.ts").Credentials>;
+//# sourceMappingURL=AuthorizationOrganizationRolePermissionsControllerAddPermission.d.ts.map

package/lib/operations/AuthorizationOrganizationRolePermissionsControllerAddPermission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationOrganizationRolePermissionsControllerAddPermission.d.ts","sourceRoot":"","sources":["../../src/operations/AuthorizationOrganizationRolePermissionsControllerAddPermission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EACL,UAAU,EACV,SAAS,EACT,QAAQ,EACR,mBAAmB,EACpB,MAAM,cAAc,CAAC;AAGtB,eAAO,MAAM,oEAAoE;;;EAS9E,CAAC;AACJ,MAAM,MAAM,oEAAoE,GAC9E,OAAO,oEAAoE,CAAC,IAAI,CAAC;AAGnF,eAAO,MAAM,qEAAqE;;;;;;;;;;;EAY9E,CAAC;AACL,MAAM,MAAM,qEAAqE,GAC/E,OAAO,qEAAqE,CAAC,IAAI,CAAC;AAGpF;;;;;;;GAOG;AACH,eAAO,MAAM,+DAA+D;;;;;;;;;;;;;;mGAOvE,CAAC"}

package/lib/operations/AuthorizationOrganizationRolePermissionsControllerAddPermission.js

@@ -0,0 +1,43 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.js";
+import * as T from "../traits.js";
+import { BadRequest, Forbidden, NotFound, UnprocessableEntity, } from "../errors.js";
+// Input Schema
+export const AuthorizationOrganizationRolePermissionsControllerAddPermissionInput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organizationId: Schema.String.pipe(T.PathParam()),
+    slug: Schema.String.pipe(T.PathParam()),
+}).pipe(T.Http({
+    method: "POST",
+    path: "/authorization/organizations/{organizationId}/roles/{slug}/permissions",
+}));
+// Output Schema
+export const AuthorizationOrganizationRolePermissionsControllerAddPermissionOutput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    slug: Schema.String,
+    object: Schema.String,
+    id: Schema.String,
+    name: Schema.String,
+    description: Schema.NullOr(Schema.String),
+    type: Schema.Literals(["EnvironmentRole", "OrganizationRole"]),
+    resource_type_slug: Schema.String,
+    permissions: Schema.Array(Schema.String),
+    created_at: Schema.String,
+    updated_at: Schema.String,
+});
+// The operation
+/**
+ * Add a permission to a custom role
+ *
+ * Add a single permission to a custom role. If the permission is already assigned to the role, this operation has no effect.
+ *
+ * @param organizationId - The ID of the organization.
+ * @param slug - The slug of the role.
+ */
+export const AuthorizationOrganizationRolePermissionsControllerAddPermission = 
+/*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationOrganizationRolePermissionsControllerAddPermissionInput,
+    outputSchema: AuthorizationOrganizationRolePermissionsControllerAddPermissionOutput,
+    errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity],
+}));
+//# sourceMappingURL=AuthorizationOrganizationRolePermissionsControllerAddPermission.js.map

package/lib/operations/AuthorizationOrganizationRolePermissionsControllerAddPermission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationOrganizationRolePermissionsControllerAddPermission.js","sourceRoot":"","sources":["../../src/operations/AuthorizationOrganizationRolePermissionsControllerAddPermission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EACL,UAAU,EACV,SAAS,EACT,QAAQ,EACR,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,eAAe;AACf,MAAM,CAAC,MAAM,oEAAoE;AAC/E,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACjD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CACxC,CAAC,CAAC,IAAI,CACL,CAAC,CAAC,IAAI,CAAC;IACL,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,wEAAwE;CAC/E,CAAC,CACH,CAAC;AAIJ,gBAAgB;AAChB,MAAM,CAAC,MAAM,qEAAqE;AAChF,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC,MAAM;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;IAC9D,kBAAkB,EAAE,MAAM,CAAC,MAAM;IACjC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC,MAAM;IACzB,UAAU,EAAE,MAAM,CAAC,MAAM;CAC1B,CAAC,CAAC;AAIL,gBAAgB;AAChB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+DAA+D;AAC1E,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1C,WAAW,EACT,oEAAoE;IACtE,YAAY,EACV,qEAAqE;IACvE,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,CAAU;CACxE,CAAC,CAAC,CAAC"}

package/lib/operations/AuthorizationOrganizationRolePermissionsControllerRemovePermission.d.ts

@@ -0,0 +1,47 @@
+import * as Schema from "effect/Schema";
+import { Forbidden, NotFound } from "../errors.ts";
+export declare const AuthorizationOrganizationRolePermissionsControllerRemovePermissionInput: Schema.Struct<{
+    readonly organizationId: Schema.String;
+    readonly slug: Schema.String;
+    readonly permissionSlug: Schema.String;
+}>;
+export type AuthorizationOrganizationRolePermissionsControllerRemovePermissionInput = typeof AuthorizationOrganizationRolePermissionsControllerRemovePermissionInput.Type;
+export declare const AuthorizationOrganizationRolePermissionsControllerRemovePermissionOutput: Schema.Struct<{
+    readonly slug: Schema.String;
+    readonly object: Schema.String;
+    readonly id: Schema.String;
+    readonly name: Schema.String;
+    readonly description: Schema.NullOr<Schema.String>;
+    readonly type: Schema.Literals<readonly ["EnvironmentRole", "OrganizationRole"]>;
+    readonly resource_type_slug: Schema.String;
+    readonly permissions: Schema.$Array<Schema.String>;
+    readonly created_at: Schema.String;
+    readonly updated_at: Schema.String;
+}>;
+export type AuthorizationOrganizationRolePermissionsControllerRemovePermissionOutput = typeof AuthorizationOrganizationRolePermissionsControllerRemovePermissionOutput.Type;
+/**
+ * Remove a permission from a custom role
+ *
+ * Remove a single permission from a custom role by its slug.
+ *
+ * @param organizationId - The ID of the organization.
+ * @param slug - The slug of the role.
+ * @param permissionSlug - The slug of the permission to remove.
+ */
+export declare const AuthorizationOrganizationRolePermissionsControllerRemovePermission: import("@distilled.cloud/core/client").OperationMethod<{
+    readonly organizationId: string;
+    readonly permissionSlug: string;
+    readonly slug: string;
+}, {
+    readonly created_at: string;
+    readonly description: string | null;
+    readonly id: string;
+    readonly name: string;
+    readonly object: string;
+    readonly permissions: readonly string[];
+    readonly resource_type_slug: string;
+    readonly slug: string;
+    readonly type: "EnvironmentRole" | "OrganizationRole";
+    readonly updated_at: string;
+}, Forbidden | NotFound, import("~/credentials.ts").Credentials>;
+//# sourceMappingURL=AuthorizationOrganizationRolePermissionsControllerRemovePermission.d.ts.map

package/lib/operations/AuthorizationOrganizationRolePermissionsControllerRemovePermission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationOrganizationRolePermissionsControllerRemovePermission.d.ts","sourceRoot":"","sources":["../../src/operations/AuthorizationOrganizationRolePermissionsControllerRemovePermission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGnD,eAAO,MAAM,uEAAuE;;;;EAUjF,CAAC;AACJ,MAAM,MAAM,uEAAuE,GACjF,OAAO,uEAAuE,CAAC,IAAI,CAAC;AAGtF,eAAO,MAAM,wEAAwE;;;;;;;;;;;EAYjF,CAAC;AACL,MAAM,MAAM,wEAAwE,GAClF,OAAO,wEAAwE,CAAC,IAAI,CAAC;AAGvF;;;;;;;;GAQG;AACH,eAAO,MAAM,kEAAkE;;;;;;;;;;;;;;;gEAO1E,CAAC"}