@distilled.cloud/workos 0.0.0 → 0.15.1

package/src/operations/AuditLogValidatorsControllerList.ts

@@ -0,0 +1,78 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { NotFound, UnprocessableEntity } from "../errors.ts";
+
+// Input Schema
+export const AuditLogValidatorsControllerListInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    before: Schema.optional(Schema.String),
+    after: Schema.optional(Schema.String),
+    limit: Schema.optional(Schema.Number),
+    order: Schema.optional(Schema.Literals(["normal", "desc", "asc"])),
+  }).pipe(T.Http({ method: "GET", path: "/audit_logs/actions" }));
+export type AuditLogValidatorsControllerListInput =
+  typeof AuditLogValidatorsControllerListInput.Type;
+
+// Output Schema
+export const AuditLogValidatorsControllerListOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.optional(Schema.String),
+    list_metadata: Schema.optional(
+      Schema.Struct({
+        before: Schema.NullOr(Schema.String),
+        after: Schema.NullOr(Schema.String),
+      }),
+    ),
+    data: Schema.optional(
+      Schema.Array(
+        Schema.Struct({
+          object: Schema.String,
+          name: Schema.String,
+          schema: Schema.Struct({
+            object: Schema.String,
+            version: Schema.Number,
+            actor: Schema.optional(
+              Schema.Struct({
+                metadata: Schema.Record(Schema.String, Schema.Unknown),
+              }),
+            ),
+            targets: Schema.Array(
+              Schema.Struct({
+                type: Schema.String,
+                metadata: Schema.optional(
+                  Schema.Record(Schema.String, Schema.Unknown),
+                ),
+              }),
+            ),
+            metadata: Schema.optional(
+              Schema.Record(Schema.String, Schema.Unknown),
+            ),
+            created_at: Schema.String,
+          }),
+          created_at: Schema.String,
+          updated_at: Schema.String,
+        }),
+      ),
+    ),
+  });
+export type AuditLogValidatorsControllerListOutput =
+  typeof AuditLogValidatorsControllerListOutput.Type;
+
+// The operation
+/**
+ * List Actions
+ *
+ * Get a list of all Audit Log actions in the current environment.
+ *
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time.
+ */
+export const AuditLogValidatorsControllerList =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuditLogValidatorsControllerListInput,
+    outputSchema: AuditLogValidatorsControllerListOutput,
+    errors: [NotFound, UnprocessableEntity] as const,
+  }));

package/src/operations/AuditLogsRetentionControllerAuditLogsRetention.ts

@@ -0,0 +1,37 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { NotFound } from "../errors.ts";
+
+// Input Schema
+export const AuditLogsRetentionControllerAuditLogsRetentionInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    id: Schema.String.pipe(T.PathParam()),
+  }).pipe(
+    T.Http({ method: "GET", path: "/organizations/{id}/audit_logs_retention" }),
+  );
+export type AuditLogsRetentionControllerAuditLogsRetentionInput =
+  typeof AuditLogsRetentionControllerAuditLogsRetentionInput.Type;
+
+// Output Schema
+export const AuditLogsRetentionControllerAuditLogsRetentionOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    retention_period_in_days: Schema.NullOr(Schema.Number),
+  });
+export type AuditLogsRetentionControllerAuditLogsRetentionOutput =
+  typeof AuditLogsRetentionControllerAuditLogsRetentionOutput.Type;
+
+// The operation
+/**
+ * Get Retention
+ *
+ * Get the configured event retention period for the given Organization.
+ *
+ * @param id - Unique identifier of the Organization.
+ */
+export const AuditLogsRetentionControllerAuditLogsRetention =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuditLogsRetentionControllerAuditLogsRetentionInput,
+    outputSchema: AuditLogsRetentionControllerAuditLogsRetentionOutput,
+    errors: [NotFound] as const,
+  }));

package/src/operations/AuditLogsRetentionControllerUpdateAuditLogsRetention.ts

@@ -0,0 +1,38 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { NotFound, UnprocessableEntity } from "../errors.ts";
+
+// Input Schema
+export const AuditLogsRetentionControllerUpdateAuditLogsRetentionInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    id: Schema.String.pipe(T.PathParam()),
+    retention_period_in_days: Schema.Number,
+  }).pipe(
+    T.Http({ method: "PUT", path: "/organizations/{id}/audit_logs_retention" }),
+  );
+export type AuditLogsRetentionControllerUpdateAuditLogsRetentionInput =
+  typeof AuditLogsRetentionControllerUpdateAuditLogsRetentionInput.Type;
+
+// Output Schema
+export const AuditLogsRetentionControllerUpdateAuditLogsRetentionOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    retention_period_in_days: Schema.NullOr(Schema.Number),
+  });
+export type AuditLogsRetentionControllerUpdateAuditLogsRetentionOutput =
+  typeof AuditLogsRetentionControllerUpdateAuditLogsRetentionOutput.Type;
+
+// The operation
+/**
+ * Set Retention
+ *
+ * Set the event retention period for the given Organization.
+ *
+ * @param id - Unique identifier of the Organization.
+ */
+export const AuditLogsRetentionControllerUpdateAuditLogsRetention =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuditLogsRetentionControllerUpdateAuditLogsRetentionInput,
+    outputSchema: AuditLogsRetentionControllerUpdateAuditLogsRetentionOutput,
+    errors: [NotFound, UnprocessableEntity] as const,
+  }));

package/src/operations/AuthenticationChallengesControllerVerify.ts

@@ -0,0 +1,45 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { BadRequest, NotFound, UnprocessableEntity } from "../errors.ts";
+
+// Input Schema
+export const AuthenticationChallengesControllerVerifyInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    id: Schema.String.pipe(T.PathParam()),
+    code: Schema.String,
+  }).pipe(T.Http({ method: "POST", path: "/auth/challenges/{id}/verify" }));
+export type AuthenticationChallengesControllerVerifyInput =
+  typeof AuthenticationChallengesControllerVerifyInput.Type;
+
+// Output Schema
+export const AuthenticationChallengesControllerVerifyOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    challenge: Schema.Struct({
+      object: Schema.String,
+      id: Schema.String,
+      expires_at: Schema.optional(Schema.String),
+      code: Schema.optional(Schema.String),
+      authentication_factor_id: Schema.String,
+      created_at: Schema.String,
+      updated_at: Schema.String,
+    }),
+    valid: Schema.Boolean,
+  });
+export type AuthenticationChallengesControllerVerifyOutput =
+  typeof AuthenticationChallengesControllerVerifyOutput.Type;
+
+// The operation
+/**
+ * Verify Challenge
+ *
+ * Verifies an Authentication Challenge.
+ *
+ * @param id - The unique ID of the Authentication Challenge.
+ */
+export const AuthenticationChallengesControllerVerify =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthenticationChallengesControllerVerifyInput,
+    outputSchema: AuthenticationChallengesControllerVerifyOutput,
+    errors: [BadRequest, NotFound, UnprocessableEntity] as const,
+  }));

package/src/operations/AuthenticationFactorsControllerChallenge.ts

@@ -0,0 +1,42 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { NotFound, UnprocessableEntity } from "../errors.ts";
+
+// Input Schema
+export const AuthenticationFactorsControllerChallengeInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    id: Schema.String.pipe(T.PathParam()),
+    sms_template: Schema.optional(Schema.String),
+  }).pipe(T.Http({ method: "POST", path: "/auth/factors/{id}/challenge" }));
+export type AuthenticationFactorsControllerChallengeInput =
+  typeof AuthenticationFactorsControllerChallengeInput.Type;
+
+// Output Schema
+export const AuthenticationFactorsControllerChallengeOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    id: Schema.String,
+    expires_at: Schema.optional(Schema.String),
+    code: Schema.optional(Schema.String),
+    authentication_factor_id: Schema.String,
+    created_at: Schema.String,
+    updated_at: Schema.String,
+  });
+export type AuthenticationFactorsControllerChallengeOutput =
+  typeof AuthenticationFactorsControllerChallengeOutput.Type;
+
+// The operation
+/**
+ * Challenge Factor
+ *
+ * Creates a Challenge for an Authentication Factor.
+ *
+ * @param id - The unique ID of the Authentication Factor to be challenged.
+ */
+export const AuthenticationFactorsControllerChallenge =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthenticationFactorsControllerChallengeInput,
+    outputSchema: AuthenticationFactorsControllerChallengeOutput,
+    errors: [NotFound, UnprocessableEntity] as const,
+  }));

package/src/operations/AuthenticationFactorsControllerCreate.ts

@@ -0,0 +1,57 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { UnprocessableEntity } from "../errors.ts";
+import { SensitiveString } from "../sensitive.ts";
+
+// Input Schema
+export const AuthenticationFactorsControllerCreateInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    type: Schema.Literals(["generic_otp", "sms", "totp"]),
+    phone_number: Schema.optional(Schema.String),
+    totp_issuer: Schema.optional(Schema.String),
+    totp_user: Schema.optional(Schema.String),
+    user_id: Schema.optional(Schema.String),
+  }).pipe(T.Http({ method: "POST", path: "/auth/factors/enroll" }));
+export type AuthenticationFactorsControllerCreateInput =
+  typeof AuthenticationFactorsControllerCreateInput.Type;
+
+// Output Schema
+export const AuthenticationFactorsControllerCreateOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    id: Schema.String,
+    type: Schema.Literals(["generic_otp", "sms", "totp", "webauthn"]),
+    user_id: Schema.optional(Schema.String),
+    sms: Schema.optional(
+      Schema.Struct({
+        phone_number: Schema.String,
+      }),
+    ),
+    totp: Schema.optional(
+      Schema.Struct({
+        issuer: Schema.String,
+        user: Schema.String,
+        secret: SensitiveString,
+        qr_code: Schema.String,
+        uri: Schema.String,
+      }),
+    ),
+    created_at: Schema.String,
+    updated_at: Schema.String,
+  });
+export type AuthenticationFactorsControllerCreateOutput =
+  typeof AuthenticationFactorsControllerCreateOutput.Type;
+
+// The operation
+/**
+ * Enroll Factor
+ *
+ * Enrolls an Authentication Factor to be used as an additional factor of authentication. The returned ID should be used to create an authentication Challenge.
+ */
+export const AuthenticationFactorsControllerCreate =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthenticationFactorsControllerCreateInput,
+    outputSchema: AuthenticationFactorsControllerCreateOutput,
+    errors: [UnprocessableEntity] as const,
+  }));

package/src/operations/AuthenticationFactorsControllerDelete.ts

@@ -0,0 +1,33 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { NotFound } from "../errors.ts";
+
+// Input Schema
+export const AuthenticationFactorsControllerDeleteInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    id: Schema.String.pipe(T.PathParam()),
+  }).pipe(T.Http({ method: "DELETE", path: "/auth/factors/{id}" }));
+export type AuthenticationFactorsControllerDeleteInput =
+  typeof AuthenticationFactorsControllerDeleteInput.Type;
+
+// Output Schema
+export const AuthenticationFactorsControllerDeleteOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Void;
+export type AuthenticationFactorsControllerDeleteOutput =
+  typeof AuthenticationFactorsControllerDeleteOutput.Type;
+
+// The operation
+/**
+ * Delete Factor
+ *
+ * Permanently deletes an Authentication Factor. It cannot be undone.
+ *
+ * @param id - The unique ID of the Factor.
+ */
+export const AuthenticationFactorsControllerDelete =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthenticationFactorsControllerDeleteInput,
+    outputSchema: AuthenticationFactorsControllerDeleteOutput,
+    errors: [NotFound] as const,
+  }));

package/src/operations/AuthenticationFactorsControllerGet.ts

@@ -0,0 +1,51 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { NotFound } from "../errors.ts";
+
+// Input Schema
+export const AuthenticationFactorsControllerGetInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    id: Schema.String.pipe(T.PathParam()),
+  }).pipe(T.Http({ method: "GET", path: "/auth/factors/{id}" }));
+export type AuthenticationFactorsControllerGetInput =
+  typeof AuthenticationFactorsControllerGetInput.Type;
+
+// Output Schema
+export const AuthenticationFactorsControllerGetOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    id: Schema.String,
+    type: Schema.Literals(["generic_otp", "sms", "totp", "webauthn"]),
+    user_id: Schema.optional(Schema.String),
+    sms: Schema.optional(
+      Schema.Struct({
+        phone_number: Schema.String,
+      }),
+    ),
+    totp: Schema.optional(
+      Schema.Struct({
+        issuer: Schema.String,
+        user: Schema.String,
+      }),
+    ),
+    created_at: Schema.String,
+    updated_at: Schema.String,
+  });
+export type AuthenticationFactorsControllerGetOutput =
+  typeof AuthenticationFactorsControllerGetOutput.Type;
+
+// The operation
+/**
+ * Get Factor
+ *
+ * Gets an Authentication Factor.
+ *
+ * @param id - The unique ID of the Factor.
+ */
+export const AuthenticationFactorsControllerGet =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthenticationFactorsControllerGetInput,
+    outputSchema: AuthenticationFactorsControllerGetOutput,
+    errors: [NotFound] as const,
+  }));

package/src/operations/AuthorizationControllerCheck.ts

@@ -0,0 +1,40 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { Forbidden, NotFound, UnprocessableEntity } from "../errors.ts";
+
+// Input Schema
+export const AuthorizationControllerCheckInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_membership_id: Schema.String.pipe(T.PathParam()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      path: "/authorization/organization_memberships/{organization_membership_id}/check",
+    }),
+  );
+export type AuthorizationControllerCheckInput =
+  typeof AuthorizationControllerCheckInput.Type;
+
+// Output Schema
+export const AuthorizationControllerCheckOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    authorized: Schema.Boolean,
+  });
+export type AuthorizationControllerCheckOutput =
+  typeof AuthorizationControllerCheckOutput.Type;
+
+// The operation
+/**
+ * Check authorization
+ *
+ * Check if an organization membership has a specific permission on a resource. Supports identification by resource_id OR by resource_external_id + resource_type_slug.
+ *
+ * @param organization_membership_id - The ID of the organization membership to check.
+ */
+export const AuthorizationControllerCheck =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationControllerCheckInput,
+    outputSchema: AuthorizationControllerCheckOutput,
+    errors: [Forbidden, NotFound, UnprocessableEntity] as const,
+  }));

package/src/operations/AuthorizationControllerListEffectivePermissions.ts

@@ -0,0 +1,67 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { Forbidden, NotFound, UnprocessableEntity } from "../errors.ts";
+
+// Input Schema
+export const AuthorizationControllerListEffectivePermissionsInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_membership_id: Schema.String.pipe(T.PathParam()),
+    resource_id: Schema.String.pipe(T.PathParam()),
+    before: Schema.optional(Schema.String),
+    after: Schema.optional(Schema.String),
+    limit: Schema.optional(Schema.Number),
+    order: Schema.optional(Schema.Literals(["normal", "desc", "asc"])),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      path: "/authorization/organization_memberships/{organization_membership_id}/resources/{resource_id}/permissions",
+    }),
+  );
+export type AuthorizationControllerListEffectivePermissionsInput =
+  typeof AuthorizationControllerListEffectivePermissionsInput.Type;
+
+// Output Schema
+export const AuthorizationControllerListEffectivePermissionsOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    data: Schema.Array(
+      Schema.Struct({
+        object: Schema.String,
+        id: Schema.String,
+        slug: Schema.String,
+        name: Schema.String,
+        description: Schema.NullOr(Schema.String),
+        system: Schema.Boolean,
+        resource_type_slug: Schema.String,
+        created_at: Schema.String,
+        updated_at: Schema.String,
+      }),
+    ),
+    list_metadata: Schema.Struct({
+      before: Schema.NullOr(Schema.String),
+      after: Schema.NullOr(Schema.String),
+    }),
+  });
+export type AuthorizationControllerListEffectivePermissionsOutput =
+  typeof AuthorizationControllerListEffectivePermissionsOutput.Type;
+
+// The operation
+/**
+ * List effective permissions for an organization membership on a resource
+ *
+ * Returns all permissions the organization membership effectively has on a resource, including permissions inherited through roles assigned to ancestor resources.
+ *
+ * @param organization_membership_id - The ID of the organization membership.
+ * @param resource_id - The ID of the authorization resource.
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+ */
+export const AuthorizationControllerListEffectivePermissions =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationControllerListEffectivePermissionsInput,
+    outputSchema: AuthorizationControllerListEffectivePermissionsOutput,
+    errors: [Forbidden, NotFound, UnprocessableEntity] as const,
+  }));

package/src/operations/AuthorizationControllerListEffectivePermissionsByExternalId.ts

@@ -0,0 +1,71 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import { Forbidden, NotFound, UnprocessableEntity } from "../errors.ts";
+
+// Input Schema
+export const AuthorizationControllerListEffectivePermissionsByExternalIdInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_membership_id: Schema.String.pipe(T.PathParam()),
+    resource_type_slug: Schema.String.pipe(T.PathParam()),
+    external_id: Schema.String.pipe(T.PathParam()),
+    before: Schema.optional(Schema.String),
+    after: Schema.optional(Schema.String),
+    limit: Schema.optional(Schema.Number),
+    order: Schema.optional(Schema.Literals(["normal", "desc", "asc"])),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      path: "/authorization/organization_memberships/{organization_membership_id}/resources/{resource_type_slug}/{external_id}/permissions",
+    }),
+  );
+export type AuthorizationControllerListEffectivePermissionsByExternalIdInput =
+  typeof AuthorizationControllerListEffectivePermissionsByExternalIdInput.Type;
+
+// Output Schema
+export const AuthorizationControllerListEffectivePermissionsByExternalIdOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    data: Schema.Array(
+      Schema.Struct({
+        object: Schema.String,
+        id: Schema.String,
+        slug: Schema.String,
+        name: Schema.String,
+        description: Schema.NullOr(Schema.String),
+        system: Schema.Boolean,
+        resource_type_slug: Schema.String,
+        created_at: Schema.String,
+        updated_at: Schema.String,
+      }),
+    ),
+    list_metadata: Schema.Struct({
+      before: Schema.NullOr(Schema.String),
+      after: Schema.NullOr(Schema.String),
+    }),
+  });
+export type AuthorizationControllerListEffectivePermissionsByExternalIdOutput =
+  typeof AuthorizationControllerListEffectivePermissionsByExternalIdOutput.Type;
+
+// The operation
+/**
+ * List effective permissions for an organization membership on a resource by external ID
+ *
+ * Returns all permissions the organization membership effectively has on a resource identified by its external ID, including permissions inherited through roles assigned to ancestor resources.
+ *
+ * @param organization_membership_id - The ID of the organization membership.
+ * @param resource_type_slug - The slug of the resource type.
+ * @param external_id - An identifier you provide to reference the resource in your system.
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+ */
+export const AuthorizationControllerListEffectivePermissionsByExternalId =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema:
+      AuthorizationControllerListEffectivePermissionsByExternalIdInput,
+    outputSchema:
+      AuthorizationControllerListEffectivePermissionsByExternalIdOutput,
+    errors: [Forbidden, NotFound, UnprocessableEntity] as const,
+  }));

package/src/operations/AuthorizationControllerListResourcesForMembership.ts

@@ -0,0 +1,80 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.ts";
+import * as T from "../traits.ts";
+import {
+  BadRequest,
+  Forbidden,
+  NotFound,
+  UnprocessableEntity,
+} from "../errors.ts";
+
+// Input Schema
+export const AuthorizationControllerListResourcesForMembershipInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    organization_membership_id: Schema.String.pipe(T.PathParam()),
+    before: Schema.optional(Schema.String),
+    after: Schema.optional(Schema.String),
+    limit: Schema.optional(Schema.Number),
+    order: Schema.optional(Schema.Literals(["normal", "desc", "asc"])),
+    permission_slug: Schema.String,
+    parent_resource_id: Schema.optional(Schema.String),
+    parent_resource_type_slug: Schema.optional(Schema.String),
+    parent_resource_external_id: Schema.optional(Schema.String),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      path: "/authorization/organization_memberships/{organization_membership_id}/resources",
+    }),
+  );
+export type AuthorizationControllerListResourcesForMembershipInput =
+  typeof AuthorizationControllerListResourcesForMembershipInput.Type;
+
+// Output Schema
+export const AuthorizationControllerListResourcesForMembershipOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    data: Schema.Array(
+      Schema.Struct({
+        object: Schema.String,
+        name: Schema.String,
+        description: Schema.NullOr(Schema.String),
+        organization_id: Schema.String,
+        parent_resource_id: Schema.NullOr(Schema.String),
+        id: Schema.String,
+        external_id: Schema.String,
+        resource_type_slug: Schema.String,
+        created_at: Schema.String,
+        updated_at: Schema.String,
+      }),
+    ),
+    list_metadata: Schema.Struct({
+      before: Schema.NullOr(Schema.String),
+      after: Schema.NullOr(Schema.String),
+    }),
+  });
+export type AuthorizationControllerListResourcesForMembershipOutput =
+  typeof AuthorizationControllerListResourcesForMembershipOutput.Type;
+
+// The operation
+/**
+ * List resources for organization membership
+ *
+ * Returns all child resources of a parent resource where the organization membership has a specific permission. This is useful for resource discovery—answering "What projects can this user access in this workspace?"
+ * You must provide either `parent_resource_id` or both `parent_resource_external_id` and `parent_resource_type_slug` to identify the parent resource.
+ *
+ * @param organization_membership_id - The ID of the organization membership.
+ * @param before - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+ * @param after - An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+ * @param limit - Upper limit on the number of objects to return, between `1` and `100`.
+ * @param order - Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+ * @param permission_slug - The permission slug to filter by. Only child resources where the organization membership has this permission are returned.
+ * @param parent_resource_id - The WorkOS ID of the parent resource. Provide this or both `parent_resource_external_id` and `parent_resource_type_slug`, but not both. Mutually exclusive with `parent_resource_type_slug` and `parent_resource_external_id`.
+ * @param parent_resource_type_slug - The slug of the parent resource type. Must be provided together with `parent_resource_external_id`. Required with `parent_resource_external_id`. Mutually exclusive with `parent_resource_id`.
+ * @param parent_resource_external_id - The application-specific external identifier of the parent resource. Must be provided together with `parent_resource_type_slug`. Required with `parent_resource_type_slug`. Mutually exclusive with `parent_resource_id`.
+ */
+export const AuthorizationControllerListResourcesForMembership =
+  /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: AuthorizationControllerListResourcesForMembershipInput,
+    outputSchema: AuthorizationControllerListResourcesForMembershipOutput,
+    errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity] as const,
+  }));