@epilot/sdk 2.1.6 → 2.1.7

package/dist/permissions-ZJHUIBWY.cjs

@@ -0,0 +1,7 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});require('./chunk-NJK5F5TF.cjs');
+
+// src/docs/permissions.json
+var permissions_default = '# Permissions API\n\n- **Full API Docs:** [https://docs.epilot.io/api/permissions](https://docs.epilot.io/api/permissions)\n\n## Usage\n\n```ts\nimport { epilot } from \'@epilot/sdk\'\n\nepilot.authorize(() => \'<token>\')\nconst { data } = await epilot.permissions.listCurrentRoles(...)\n```\n\n### Tree-shakeable import\n\n```ts\nimport { getClient, authorize } from \'@epilot/sdk/permissions\'\n\nconst permissionsClient = getClient()\nauthorize(permissionsClient, () => \'<token>\')\nconst { data } = await permissionsClient.listCurrentRoles(...)\n```\n\n## Operations\n\n**Roles**\n- [`listCurrentRoles`](#listcurrentroles)\n- [`listAllRoles`](#listallroles)\n- [`createRole`](#createrole)\n- [`searchRoles`](#searchroles)\n- [`getRole`](#getrole)\n- [`putRole`](#putrole)\n- [`deleteRole`](#deleterole)\n- [`refreshPermissions`](#refreshpermissions)\n\n**Assignments**\n- [`getAssignedRolesForUser`](#getassignedrolesforuser)\n- [`assignRoles`](#assignroles)\n- [`addAssignment`](#addassignment)\n- [`removeAssignment`](#removeassignment)\n- [`listAllAssignments`](#listallassignments)\n\n**Schemas**\n- [`Grant`](#grant)\n- [`GrantWithDependencies`](#grantwithdependencies)\n- [`GrantCondition`](#grantcondition)\n- [`EqualsCurrentUserCondition`](#equalscurrentusercondition)\n- [`EqualsCondition`](#equalscondition)\n- [`RoleId`](#roleid)\n- [`BaseRole`](#baserole)\n- [`BaseRoleForCreate`](#baseroleforcreate)\n- [`UserRole`](#userrole)\n- [`OrgRole`](#orgrole)\n- [`ShareRole`](#sharerole)\n- [`PartnerRole`](#partnerrole)\n- [`PortalRole`](#portalrole)\n- [`Role`](#role)\n- [`RolePayload`](#rolepayload)\n- [`Assignment`](#assignment)\n- [`InternalAssignment`](#internalassignment)\n- [`OrgAssignments`](#orgassignments)\n- [`OrgRoles`](#orgroles)\n- [`Assignments`](#assignments)\n- [`UserId`](#userid)\n- [`OrganizationId`](#organizationid)\n- [`Slug`](#slug)\n- [`RoleSearchInput`](#rolesearchinput)\n- [`CreateRolePayload`](#createrolepayload)\n- [`Error`](#error)\n\n### `listCurrentRoles`\n\nReturns roles and grants assigned to current user\n\n`GET /v1/permissions/me`\n\n```ts\nconst { data } = await client.listCurrentRoles()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "roles": [\n    {\n      "id": "123:owner",\n      "name": "Owner",\n      "slug": "owner",\n      "type": "user_role",\n      "expires_at": "2028-07-21T17:32:28Z",\n      "organization_id": "123",\n      "grants": [\n        {\n          "action": "entity-read",\n          "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n          "effect": "allow",\n          "conditions": [\n            {\n              "attribute": "workflows.primary.task_name",\n              "operation": "equals",\n              "values": ["Qualification"]\n            }\n          ]\n        }\n      ],\n      "parent_role": "123:owner",\n      "vendor_created": true\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `listAllRoles`\n\nReturns list of all roles in organization\n\n`GET /v1/permissions/roles`\n\n```ts\nconst { data } = await client.listAllRoles()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "roles": [\n    {\n      "id": "123:owner",\n      "name": "Owner",\n      "slug": "owner",\n      "type": "user_role",\n      "expires_at": "2028-07-21T17:32:28Z",\n      "organization_id": "123",\n      "grants": [\n        {\n          "action": "entity-read",\n          "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n          "effect": "allow",\n          "conditions": [\n            {\n              "attribute": "workflows.primary.task_name",\n              "operation": "equals",\n              "values": ["Qualification"]\n            }\n          ]\n        }\n      ],\n      "parent_role": "123:owner",\n      "vendor_created": true\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `createRole`\n\nCreate role\n\n`POST /v1/permissions/roles`\n\n```ts\nconst { data } = await client.createRole(\n  null,\n  {},\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "123:owner",\n  "name": "Owner",\n  "slug": "owner",\n  "type": "user_role",\n  "expires_at": "2028-07-21T17:32:28Z",\n  "organization_id": "123",\n  "grants": [\n    {\n      "action": "entity-read",\n      "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n      "effect": "allow",\n      "conditions": [\n        {\n          "attribute": "workflows.primary.task_name",\n          "operation": "equals",\n          "values": ["Qualification"]\n        }\n      ]\n    }\n  ],\n  "parent_role": "123:owner",\n  "vendor_created": true\n}\n```\n\n</details>\n\n---\n\n### `searchRoles`\n\nSearch Roles\n\n`POST /v1/permissions/roles:search`\n\n```ts\nconst { data } = await client.searchRoles(\n  null,\n  {\n    role_ids: [\'123:manager\', \'456:owner\'],\n    org_ids: [\'123\', \'456\'],\n    slugs: [\'manager\', \'owner\'],\n    query: \'Administrator\',\n    limit: 1,\n    offset: 1\n  },\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "hits": 0,\n  "results": [\n    {\n      "id": "123:owner",\n      "name": "Owner",\n      "slug": "owner",\n      "type": "user_role",\n      "expires_at": "2028-07-21T17:32:28Z",\n      "organization_id": "123",\n      "grants": [\n        {\n          "action": "entity-read",\n          "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n          "effect": "allow",\n          "conditions": [\n            {\n              "attribute": "workflows.primary.task_name",\n              "operation": "equals",\n              "values": ["Qualification"]\n            }\n          ]\n        }\n      ],\n      "parent_role": "123:owner",\n      "vendor_created": true\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getRole`\n\nGet role by id\n\n`GET /v1/permissions/roles/{roleId}`\n\n```ts\nconst { data } = await client.getRole({\n  roleId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "123:owner",\n  "name": "Owner",\n  "slug": "owner",\n  "type": "user_role",\n  "expires_at": "2028-07-21T17:32:28Z",\n  "organization_id": "123",\n  "grants": [\n    {\n      "action": "entity-read",\n      "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n      "effect": "allow",\n      "conditions": [\n        {\n          "attribute": "workflows.primary.task_name",\n          "operation": "equals",\n          "values": ["Qualification"]\n        }\n      ]\n    }\n  ],\n  "parent_role": "123:owner",\n  "vendor_created": true\n}\n```\n\n</details>\n\n---\n\n### `putRole`\n\nCreate or update role\n\n`PUT /v1/permissions/roles/{roleId}`\n\n```ts\nconst { data } = await client.putRole(\n  {\n    roleId: \'example\',\n  },\n  {\n    id: \'123:owner\',\n    name: \'Owner\',\n    slug: \'owner\',\n    type: \'user_role\',\n    expires_at: \'2028-07-21T17:32:28Z\',\n    organization_id: \'123\',\n    grants: [\n      {\n        action: \'entity-read\',\n        resource: \'entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947\',\n        effect: \'allow\',\n        conditions: [\n          {\n            attribute: \'workflows.primary.task_name\',\n            operation: \'equals\',\n            values: [\'Qualification\']\n          }\n        ]\n      }\n    ],\n    parent_role: \'123:owner\',\n    vendor_created: true\n  },\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "123:owner",\n  "name": "Owner",\n  "slug": "owner",\n  "type": "user_role",\n  "expires_at": "2028-07-21T17:32:28Z",\n  "organization_id": "123",\n  "grants": [\n    {\n      "action": "entity-read",\n      "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n      "effect": "allow",\n      "conditions": [\n        {\n          "attribute": "workflows.primary.task_name",\n          "operation": "equals",\n          "values": ["Qualification"]\n        }\n      ]\n    }\n  ],\n  "parent_role": "123:owner",\n  "vendor_created": true\n}\n```\n\n</details>\n\n---\n\n### `deleteRole`\n\nDelete role by id\n\n`DELETE /v1/permissions/roles/{roleId}`\n\n```ts\nconst { data } = await client.deleteRole({\n  roleId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "123:owner",\n  "name": "Owner",\n  "slug": "owner",\n  "type": "user_role",\n  "expires_at": "2028-07-21T17:32:28Z",\n  "organization_id": "123",\n  "grants": [\n    {\n      "action": "entity-read",\n      "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n      "effect": "allow",\n      "conditions": [\n        {\n          "attribute": "workflows.primary.task_name",\n          "operation": "equals",\n          "values": ["Qualification"]\n        }\n      ]\n    }\n  ],\n  "parent_role": "123:owner",\n  "vendor_created": true\n}\n```\n\n</details>\n\n---\n\n### `refreshPermissions`\n\nMakes sure the user has a role in the organization\n\n`GET /v1/permissions/refresh`\n\n```ts\nconst { data } = await client.refreshPermissions()\n```\n\n---\n\n### `getAssignedRolesForUser`\n\nGet list of assigned roles by user id\n\n`GET /v1/permissions/assignments/{userId}`\n\n```ts\nconst { data } = await client.getAssignedRolesForUser({\n  userId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n["123:owner"]\n```\n\n</details>\n\n---\n\n### `assignRoles`\n\nAssign / unassign roles to users.\n\n`PUT /v1/permissions/assignments/{userId}`\n\n```ts\nconst { data } = await client.assignRoles(\n  {\n    userId: \'example\',\n  },\n  [\'123:owner\'],\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n["123:owner"]\n```\n\n</details>\n\n---\n\n### `addAssignment`\n\nAssign a user to a role.\n\n`POST /v1/permissions/assignments/{userId}/{roleId}`\n\n```ts\nconst { data } = await client.addAssignment({\n  userId: \'example\',\n  roleId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "user_id": "1",\n  "roles": ["123:owner"]\n}\n```\n\n</details>\n\n---\n\n### `removeAssignment`\n\nRemove role assignment from user\n\n`DELETE /v1/permissions/assignments/{userId}/{roleId}`\n\n```ts\nconst { data } = await client.removeAssignment({\n  userId: \'example\',\n  roleId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "user_id": "1",\n  "roles": ["123:owner"]\n}\n```\n\n</details>\n\n---\n\n### `listAllAssignments`\n\nReturns list of all assignments in organization\n\n`GET /v1/permissions/assignments`\n\n```ts\nconst { data } = await client.listAllAssignments()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "assignments": [\n    {\n      "user_id": "1",\n      "roles": ["123:owner"]\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n## Schemas\n\n### `Grant`\n\n```ts\ntype Grant = {\n  action: string\n  resource?: string\n  effect?: "allow" | "deny"\n  conditions?: object[]\n}\n```\n\n### `GrantWithDependencies`\n\n```ts\ntype GrantWithDependencies = {\n  action: string\n  resource?: string\n  effect?: "allow" | "deny"\n  conditions?: object[]\n  dependencies?: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `GrantCondition`\n\n```ts\ntype GrantCondition = object\n```\n\n### `EqualsCurrentUserCondition`\n\nCheck if any relation_user attribute on the entity contains the current user. When attribute is provided, only that specific attribute path is checked.\n\n```ts\ntype EqualsCurrentUserCondition = {\n  attribute?: string\n  operation: "equals_current_user"\n}\n```\n\n### `EqualsCondition`\n\nCheck if attribute equals to any of the values\n\n```ts\ntype EqualsCondition = {\n  attribute: string\n  operation: "equals"\n  values: unknown[]\n}\n```\n\n### `RoleId`\n\nFormat: `<organization_id>`:`<slug>`\n\n```ts\ntype RoleId = string\n```\n\n### `BaseRole`\n\n```ts\ntype BaseRole = {\n  id: string\n  name: string\n  slug: string\n  type: string\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `BaseRoleForCreate`\n\n```ts\ntype BaseRoleForCreate = {\n  id?: string\n  name: string\n  slug: string\n  type: string\n  expires_at?: string // date-time\n  organization_id?: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `UserRole`\n\n```ts\ntype UserRole = {\n  id: string\n  name: string\n  slug: string\n  type: "user_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  parent_role?: object\n  vendor_created?: boolean\n}\n```\n\n### `OrgRole`\n\n```ts\ntype OrgRole = {\n  id: string\n  name: string\n  slug: string\n  type: "org_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  pricing_tier?: string\n}\n```\n\n### `ShareRole`\n\n```ts\ntype ShareRole = {\n  id: string\n  name: string\n  slug: string\n  type: "share_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `PartnerRole`\n\n```ts\ntype PartnerRole = {\n  id: string\n  name: string\n  slug: string\n  type: "partner_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  partner_org_id?: object\n  vendor_enforced_user_limit?: number\n  vendor_created?: boolean\n}\n```\n\n### `PortalRole`\n\n```ts\ntype PortalRole = {\n  id: string\n  name: string\n  slug: string\n  type: "portal_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `Role`\n\n```ts\ntype Role = {\n  id: string\n  name: string\n  slug: string\n  type: "user_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  parent_role?: object\n  vendor_created?: boolean\n} | {\n  id: string\n  name: string\n  slug: string\n  type: "org_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  pricing_tier?: string\n} | {\n  id: string\n  name: string\n  slug: string\n  type: "share_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n} | {\n  id: string\n  name: string\n  slug: string\n  type: "partner_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  partner_org_id?: object\n  vendor_enforced_user_limit?: number\n  vendor_created?: boolean\n} | {\n  id: string\n  name: string\n  slug: string\n  type: "portal_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `RolePayload`\n\n```ts\ntype RolePayload = {\n  grants?: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n    dependencies?: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n  }>\n}\n```\n\n### `Assignment`\n\nA role attached to an user\n\n```ts\ntype Assignment = {\n  user_id?: string\n  roles?: string[]\n}\n```\n\n### `InternalAssignment`\n\nA role attached to an user\n\n```ts\ntype InternalAssignment = {\n  userId?: string\n  roles?: string[]\n}\n```\n\n### `OrgAssignments`\n\nAll roles attached to an users of an organization\n\n```ts\ntype OrgAssignments = {\n  organizationId?: string\n  assignments?: Array<{\n    userId?: string\n    roles?: string[]\n  }>\n}\n```\n\n### `OrgRoles`\n\nAll roles attached to an users of an organization\n\n```ts\ntype OrgRoles = {\n  organizationId?: string\n  roles?: Array<{\n    id: string\n    name: string\n    slug: string\n    type: "user_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n    parent_role?: object\n    vendor_created?: boolean\n  } | {\n    id: string\n    name: string\n    slug: string\n    type: "org_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n    pricing_tier?: string\n  } | {\n    id: string\n    name: string\n    slug: string\n    type: "share_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n  } | {\n    id: string\n    name: string\n    slug: string\n    type: "partner_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n    partner_org_id?: object\n    vendor_enforced_user_limit?: number\n    vendor_created?: boolean\n  } | {\n    id: string\n    name: string\n    slug: string\n    type: "portal_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n  }>\n}\n```\n\n### `Assignments`\n\nList of role ids attached to an user\n\n```ts\ntype Assignments = string[]\n```\n\n### `UserId`\n\nId of a user\n\n```ts\ntype UserId = string\n```\n\n### `OrganizationId`\n\nId of an organization\n\n```ts\ntype OrganizationId = string\n```\n\n### `Slug`\n\nSlug of a role; for a role with id = 123:manager -> 123 is org_id & manager is slug\n\n```ts\ntype Slug = string\n```\n\n### `RoleSearchInput`\n\n```ts\ntype RoleSearchInput = {\n  role_ids?: string[]\n  org_ids?: string[]\n  slugs?: string[]\n  query?: string\n  limit?: number\n  offset?: number\n}\n```\n\n### `CreateRolePayload`\n\n```ts\ntype CreateRolePayload = {\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  id?: string\n  name: string\n  slug: string\n  type: string\n  expires_at?: string // date-time\n  organization_id?: string\n}\n```\n\n### `Error`\n\nError response\n\n```ts\ntype Error = {\n  message: string\n}\n```\n';
+
+
+exports.default = permissions_default;

package/dist/{permissions.d-BHB1FFS5.d.cts → permissions.d-l6AT8SYP.d.cts}

@@ -1,8 +1,6 @@
 import { OpenAPIClient, Parameters, UnknownParamsObject, AxiosRequestConfig, OperationResponse } from 'openapi-client-axios';
 
 /* Auto-copied from permissions-client */
-/* eslint-disable */
-
 
 
 declare namespace Components {
@@ -124,6 +122,10 @@ declare namespace Components {
              * 123:owner
              */
             parent_role?: string;
+            /**
+             * Indicates whether this role was created by a vendor organization on behalf of the partner organization.
+             */
+            vendor_created?: boolean;
             /**
              * List of grants (permissions) applied to the role
              */
@@ -253,6 +255,10 @@ declare namespace Components {
              * 123
              */
             partner_org_id?: string;
+            /**
+             * Indicates whether this role was created by a vendor organization on behalf of the partner organization.
+             */
+            vendor_created?: boolean;
             /**
              * List of grants (permissions) applied to the role
              */
@@ -339,6 +345,18 @@ declare namespace Components {
             operation: "equals";
             values: any[];
         }
+        /**
+         * Check if any relation_user attribute on the entity contains the current user. When attribute is provided, only that specific attribute path is checked.
+         */
+        export interface EqualsCurrentUserCondition {
+            /**
+             * Optional JSON path to a specific user attribute. When omitted, all relation_user attributes on the entity are scanned.
+             * example:
+             * assignee.*.user_id
+             */
+            attribute?: string;
+            operation: "equals_current_user";
+        }
         /**
          * Error response
          */
@@ -367,7 +385,7 @@ declare namespace Components {
         /**
          * An additional condition that must be met for the grant
          */
-        export type GrantCondition = /* An additional condition that must be met for the grant */ /* Check if attribute equals to any of the values */ EqualsCondition;
+        export type GrantCondition = /* An additional condition that must be met for the grant */ /* Check if attribute equals to any of the values */ EqualsCondition | /* Check if any relation_user attribute on the entity contains the current user. When attribute is provided, only that specific attribute path is checked. */ EqualsCurrentUserCondition;
         export interface GrantWithDependencies {
             /**
              * example:
@@ -534,6 +552,10 @@ declare namespace Components {
              * Maximum number of users that can be assigned this role (vendor-enforced limit, can only be set via internal auth)
              */
             vendor_enforced_user_limit?: number;
+            /**
+             * Indicates whether this role was created by a vendor organization on behalf of the partner organization.
+             */
+            vendor_created?: boolean;
         }
         /**
          * A role that is applied to end customers and installers using the Portals
@@ -753,6 +775,10 @@ declare namespace Components {
              * 123:owner
              */
             parent_role?: string;
+            /**
+             * Indicates whether this role was created by a vendor organization on behalf of the partner organization.
+             */
+            vendor_created?: boolean;
         }
     }
 }
@@ -1229,6 +1255,7 @@ type BaseRole = Components.Schemas.BaseRole;
 type BaseRoleForCreate = Components.Schemas.BaseRoleForCreate;
 type CreateRolePayload = Components.Schemas.CreateRolePayload;
 type EqualsCondition = Components.Schemas.EqualsCondition;
+type EqualsCurrentUserCondition = Components.Schemas.EqualsCurrentUserCondition;
 type Error = Components.Schemas.Error;
 type Grant = Components.Schemas.Grant;
 type GrantCondition = Components.Schemas.GrantCondition;
@@ -1249,4 +1276,4 @@ type Slug = Components.Schemas.Slug;
 type UserId = Components.Schemas.UserId;
 type UserRole = Components.Schemas.UserRole;
 
-export { type Assignment as A, type BaseRole as B, type Client as C, type EqualsCondition as E, type Grant as G, type InternalAssignment as I, type OperationMethods as O, Paths as P, type Role as R, type ShareRole as S, type UserId as U, Components as a, type PathsDictionary as b, type Assignments as c, type BaseRoleForCreate as d, type CreateRolePayload as e, type Error as f, type GrantCondition as g, type GrantWithDependencies as h, type OrgAssignments as i, type OrgRole as j, type OrgRoles as k, type OrganizationId as l, type PartnerRole as m, type PortalRole as n, type RoleId as o, type RolePayload as p, type RoleSearchInput as q, type Slug as r, type UserRole as s };
+export { type Assignment as A, type BaseRole as B, type Client as C, type EqualsCondition as E, type Grant as G, type InternalAssignment as I, type OperationMethods as O, Paths as P, type Role as R, type ShareRole as S, type UserId as U, Components as a, type PathsDictionary as b, type Assignments as c, type BaseRoleForCreate as d, type CreateRolePayload as e, type EqualsCurrentUserCondition as f, type Error as g, type GrantCondition as h, type GrantWithDependencies as i, type OrgAssignments as j, type OrgRole as k, type OrgRoles as l, type OrganizationId as m, type PartnerRole as n, type PortalRole as o, type RoleId as p, type RolePayload as q, type RoleSearchInput as r, type Slug as s, type UserRole as t };

package/dist/{permissions.d-BHB1FFS5.d.ts → permissions.d-l6AT8SYP.d.ts}

@@ -1,8 +1,6 @@
 import { OpenAPIClient, Parameters, UnknownParamsObject, AxiosRequestConfig, OperationResponse } from 'openapi-client-axios';
 
 /* Auto-copied from permissions-client */
-/* eslint-disable */
-
 
 
 declare namespace Components {
@@ -124,6 +122,10 @@ declare namespace Components {
              * 123:owner
              */
             parent_role?: string;
+            /**
+             * Indicates whether this role was created by a vendor organization on behalf of the partner organization.
+             */
+            vendor_created?: boolean;
             /**
              * List of grants (permissions) applied to the role
              */
@@ -253,6 +255,10 @@ declare namespace Components {
              * 123
              */
             partner_org_id?: string;
+            /**
+             * Indicates whether this role was created by a vendor organization on behalf of the partner organization.
+             */
+            vendor_created?: boolean;
             /**
              * List of grants (permissions) applied to the role
              */
@@ -339,6 +345,18 @@ declare namespace Components {
             operation: "equals";
             values: any[];
         }
+        /**
+         * Check if any relation_user attribute on the entity contains the current user. When attribute is provided, only that specific attribute path is checked.
+         */
+        export interface EqualsCurrentUserCondition {
+            /**
+             * Optional JSON path to a specific user attribute. When omitted, all relation_user attributes on the entity are scanned.
+             * example:
+             * assignee.*.user_id
+             */
+            attribute?: string;
+            operation: "equals_current_user";
+        }
         /**
          * Error response
          */
@@ -367,7 +385,7 @@ declare namespace Components {
         /**
          * An additional condition that must be met for the grant
          */
-        export type GrantCondition = /* An additional condition that must be met for the grant */ /* Check if attribute equals to any of the values */ EqualsCondition;
+        export type GrantCondition = /* An additional condition that must be met for the grant */ /* Check if attribute equals to any of the values */ EqualsCondition | /* Check if any relation_user attribute on the entity contains the current user. When attribute is provided, only that specific attribute path is checked. */ EqualsCurrentUserCondition;
         export interface GrantWithDependencies {
             /**
              * example:
@@ -534,6 +552,10 @@ declare namespace Components {
              * Maximum number of users that can be assigned this role (vendor-enforced limit, can only be set via internal auth)
              */
             vendor_enforced_user_limit?: number;
+            /**
+             * Indicates whether this role was created by a vendor organization on behalf of the partner organization.
+             */
+            vendor_created?: boolean;
         }
         /**
          * A role that is applied to end customers and installers using the Portals
@@ -753,6 +775,10 @@ declare namespace Components {
              * 123:owner
              */
             parent_role?: string;
+            /**
+             * Indicates whether this role was created by a vendor organization on behalf of the partner organization.
+             */
+            vendor_created?: boolean;
         }
     }
 }
@@ -1229,6 +1255,7 @@ type BaseRole = Components.Schemas.BaseRole;
 type BaseRoleForCreate = Components.Schemas.BaseRoleForCreate;
 type CreateRolePayload = Components.Schemas.CreateRolePayload;
 type EqualsCondition = Components.Schemas.EqualsCondition;
+type EqualsCurrentUserCondition = Components.Schemas.EqualsCurrentUserCondition;
 type Error = Components.Schemas.Error;
 type Grant = Components.Schemas.Grant;
 type GrantCondition = Components.Schemas.GrantCondition;
@@ -1249,4 +1276,4 @@ type Slug = Components.Schemas.Slug;
 type UserId = Components.Schemas.UserId;
 type UserRole = Components.Schemas.UserRole;
 
-export { type Assignment as A, type BaseRole as B, type Client as C, type EqualsCondition as E, type Grant as G, type InternalAssignment as I, type OperationMethods as O, Paths as P, type Role as R, type ShareRole as S, type UserId as U, Components as a, type PathsDictionary as b, type Assignments as c, type BaseRoleForCreate as d, type CreateRolePayload as e, type Error as f, type GrantCondition as g, type GrantWithDependencies as h, type OrgAssignments as i, type OrgRole as j, type OrgRoles as k, type OrganizationId as l, type PartnerRole as m, type PortalRole as n, type RoleId as o, type RolePayload as p, type RoleSearchInput as q, type Slug as r, type UserRole as s };
+export { type Assignment as A, type BaseRole as B, type Client as C, type EqualsCondition as E, type Grant as G, type InternalAssignment as I, type OperationMethods as O, Paths as P, type Role as R, type ShareRole as S, type UserId as U, Components as a, type PathsDictionary as b, type Assignments as c, type BaseRoleForCreate as d, type CreateRolePayload as e, type EqualsCurrentUserCondition as f, type Error as g, type GrantCondition as h, type GrantWithDependencies as i, type OrgAssignments as j, type OrgRole as k, type OrgRoles as l, type OrganizationId as m, type PartnerRole as n, type PortalRole as o, type RoleId as p, type RolePayload as q, type RoleSearchInput as r, type Slug as s, type UserRole as t };

package/docs/permissions.md

@@ -1,6 +1,5 @@
 # Permissions API
 
-- **Base URL:** `https://permissions.sls.epilot.io`
 - **Full API Docs:** [https://docs.epilot.io/api/permissions](https://docs.epilot.io/api/permissions)
 
 ## Usage
@@ -45,6 +44,7 @@ const { data } = await permissionsClient.listCurrentRoles(...)
 - [`Grant`](#grant)
 - [`GrantWithDependencies`](#grantwithdependencies)
 - [`GrantCondition`](#grantcondition)
+- [`EqualsCurrentUserCondition`](#equalscurrentusercondition)
 - [`EqualsCondition`](#equalscondition)
 - [`RoleId`](#roleid)
 - [`BaseRole`](#baserole)
@@ -105,7 +105,8 @@ const { data } = await client.listCurrentRoles()
           ]
         }
       ],
-      "parent_role": "123:owner"
+      "parent_role": "123:owner",
+      "vendor_created": true
     }
   ]
 }
@@ -152,7 +153,8 @@ const { data } = await client.listAllRoles()
           ]
         }
       ],
-      "parent_role": "123:owner"
+      "parent_role": "123:owner",
+      "vendor_created": true
     }
   ]
 }
@@ -200,7 +202,8 @@ const { data } = await client.createRole(
       ]
     }
   ],
-  "parent_role": "123:owner"
+  "parent_role": "123:owner",
+  "vendor_created": true
 }
 ```
 
@@ -256,7 +259,8 @@ const { data } = await client.searchRoles(
           ]
         }
       ],
-      "parent_role": "123:owner"
+      "parent_role": "123:owner",
+      "vendor_created": true
     }
   ]
 }
@@ -303,7 +307,8 @@ const { data } = await client.getRole({
       ]
     }
   ],
-  "parent_role": "123:owner"
+  "parent_role": "123:owner",
+  "vendor_created": true
 }
 ```
 
@@ -343,7 +348,8 @@ const { data } = await client.putRole(
         ]
       }
     ],
-    parent_role: '123:owner'
+    parent_role: '123:owner',
+    vendor_created: true
   },
 )
 ```
@@ -373,7 +379,8 @@ const { data } = await client.putRole(
       ]
     }
   ],
-  "parent_role": "123:owner"
+  "parent_role": "123:owner",
+  "vendor_created": true
 }
 ```
 
@@ -418,7 +425,8 @@ const { data } = await client.deleteRole({
       ]
     }
   ],
-  "parent_role": "123:owner"
+  "parent_role": "123:owner",
+  "vendor_created": true
 }
 ```
 
@@ -605,6 +613,17 @@ type GrantWithDependencies = {
 type GrantCondition = object
 ```
 
+### `EqualsCurrentUserCondition`
+
+Check if any relation_user attribute on the entity contains the current user. When attribute is provided, only that specific attribute path is checked.
+
+```ts
+type EqualsCurrentUserCondition = {
+  attribute?: string
+  operation: "equals_current_user"
+}
+```
+
 ### `EqualsCondition`
 
 Check if attribute equals to any of the values
@@ -680,6 +699,7 @@ type UserRole = {
     conditions?: object[]
   }>
   parent_role?: object
+  vendor_created?: boolean
 }
 ```
 
@@ -740,6 +760,7 @@ type PartnerRole = {
   }>
   partner_org_id?: object
   vendor_enforced_user_limit?: number
+  vendor_created?: boolean
 }
 ```
 
@@ -779,6 +800,7 @@ type Role = {
     conditions?: object[]
   }>
   parent_role?: object
+  vendor_created?: boolean
 } | {
   id: string
   name: string
@@ -821,6 +843,7 @@ type Role = {
   }>
   partner_org_id?: object
   vendor_enforced_user_limit?: number
+  vendor_created?: boolean
 } | {
   id: string
   name: string
@@ -913,6 +936,7 @@ type OrgRoles = {
       conditions?: { ... }
     }>
     parent_role?: object
+    vendor_created?: boolean
   } | {
     id: string
     name: string
@@ -955,6 +979,7 @@ type OrgRoles = {
     }>
     partner_org_id?: object
     vendor_enforced_user_limit?: number
+    vendor_created?: boolean
   } | {
     id: string
     name: string

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epilot/sdk",
-  "version": "2.1.6",
+  "version": "2.1.7",
   "description": "JavaScript/TypeScript SDK for epilot APIs",
   "type": "module",
   "main": "./dist/index.cjs",

package/dist/permissions-4T3GFNB4.js

@@ -1,7 +0,0 @@
-import "./chunk-YPSWSI3M.js";
-
-// src/docs/permissions.json
-var permissions_default = '# Permissions API\n\n- **Base URL:** `https://permissions.sls.epilot.io`\n- **Full API Docs:** [https://docs.epilot.io/api/permissions](https://docs.epilot.io/api/permissions)\n\n## Usage\n\n```ts\nimport { epilot } from \'@epilot/sdk\'\n\nepilot.authorize(() => \'<token>\')\nconst { data } = await epilot.permissions.listCurrentRoles(...)\n```\n\n### Tree-shakeable import\n\n```ts\nimport { getClient, authorize } from \'@epilot/sdk/permissions\'\n\nconst permissionsClient = getClient()\nauthorize(permissionsClient, () => \'<token>\')\nconst { data } = await permissionsClient.listCurrentRoles(...)\n```\n\n## Operations\n\n**Roles**\n- [`listCurrentRoles`](#listcurrentroles)\n- [`listAllRoles`](#listallroles)\n- [`createRole`](#createrole)\n- [`searchRoles`](#searchroles)\n- [`getRole`](#getrole)\n- [`putRole`](#putrole)\n- [`deleteRole`](#deleterole)\n- [`refreshPermissions`](#refreshpermissions)\n\n**Assignments**\n- [`getAssignedRolesForUser`](#getassignedrolesforuser)\n- [`assignRoles`](#assignroles)\n- [`addAssignment`](#addassignment)\n- [`removeAssignment`](#removeassignment)\n- [`listAllAssignments`](#listallassignments)\n\n**Schemas**\n- [`Grant`](#grant)\n- [`GrantWithDependencies`](#grantwithdependencies)\n- [`GrantCondition`](#grantcondition)\n- [`EqualsCondition`](#equalscondition)\n- [`RoleId`](#roleid)\n- [`BaseRole`](#baserole)\n- [`BaseRoleForCreate`](#baseroleforcreate)\n- [`UserRole`](#userrole)\n- [`OrgRole`](#orgrole)\n- [`ShareRole`](#sharerole)\n- [`PartnerRole`](#partnerrole)\n- [`PortalRole`](#portalrole)\n- [`Role`](#role)\n- [`RolePayload`](#rolepayload)\n- [`Assignment`](#assignment)\n- [`InternalAssignment`](#internalassignment)\n- [`OrgAssignments`](#orgassignments)\n- [`OrgRoles`](#orgroles)\n- [`Assignments`](#assignments)\n- [`UserId`](#userid)\n- [`OrganizationId`](#organizationid)\n- [`Slug`](#slug)\n- [`RoleSearchInput`](#rolesearchinput)\n- [`CreateRolePayload`](#createrolepayload)\n- [`Error`](#error)\n\n### `listCurrentRoles`\n\nReturns roles and grants assigned to current user\n\n`GET /v1/permissions/me`\n\n```ts\nconst { data } = await client.listCurrentRoles()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "roles": [\n    {\n      "id": "123:owner",\n      "name": "Owner",\n      "slug": "owner",\n      "type": "user_role",\n      "expires_at": "2028-07-21T17:32:28Z",\n      "organization_id": "123",\n      "grants": [\n        {\n          "action": "entity-read",\n          "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n          "effect": "allow",\n          "conditions": [\n            {\n              "attribute": "workflows.primary.task_name",\n              "operation": "equals",\n              "values": ["Qualification"]\n            }\n          ]\n        }\n      ],\n      "parent_role": "123:owner"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `listAllRoles`\n\nReturns list of all roles in organization\n\n`GET /v1/permissions/roles`\n\n```ts\nconst { data } = await client.listAllRoles()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "roles": [\n    {\n      "id": "123:owner",\n      "name": "Owner",\n      "slug": "owner",\n      "type": "user_role",\n      "expires_at": "2028-07-21T17:32:28Z",\n      "organization_id": "123",\n      "grants": [\n        {\n          "action": "entity-read",\n          "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n          "effect": "allow",\n          "conditions": [\n            {\n              "attribute": "workflows.primary.task_name",\n              "operation": "equals",\n              "values": ["Qualification"]\n            }\n          ]\n        }\n      ],\n      "parent_role": "123:owner"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `createRole`\n\nCreate role\n\n`POST /v1/permissions/roles`\n\n```ts\nconst { data } = await client.createRole(\n  null,\n  {},\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "123:owner",\n  "name": "Owner",\n  "slug": "owner",\n  "type": "user_role",\n  "expires_at": "2028-07-21T17:32:28Z",\n  "organization_id": "123",\n  "grants": [\n    {\n      "action": "entity-read",\n      "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n      "effect": "allow",\n      "conditions": [\n        {\n          "attribute": "workflows.primary.task_name",\n          "operation": "equals",\n          "values": ["Qualification"]\n        }\n      ]\n    }\n  ],\n  "parent_role": "123:owner"\n}\n```\n\n</details>\n\n---\n\n### `searchRoles`\n\nSearch Roles\n\n`POST /v1/permissions/roles:search`\n\n```ts\nconst { data } = await client.searchRoles(\n  null,\n  {\n    role_ids: [\'123:manager\', \'456:owner\'],\n    org_ids: [\'123\', \'456\'],\n    slugs: [\'manager\', \'owner\'],\n    query: \'Administrator\',\n    limit: 1,\n    offset: 1\n  },\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "hits": 0,\n  "results": [\n    {\n      "id": "123:owner",\n      "name": "Owner",\n      "slug": "owner",\n      "type": "user_role",\n      "expires_at": "2028-07-21T17:32:28Z",\n      "organization_id": "123",\n      "grants": [\n        {\n          "action": "entity-read",\n          "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n          "effect": "allow",\n          "conditions": [\n            {\n              "attribute": "workflows.primary.task_name",\n              "operation": "equals",\n              "values": ["Qualification"]\n            }\n          ]\n        }\n      ],\n      "parent_role": "123:owner"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getRole`\n\nGet role by id\n\n`GET /v1/permissions/roles/{roleId}`\n\n```ts\nconst { data } = await client.getRole({\n  roleId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "123:owner",\n  "name": "Owner",\n  "slug": "owner",\n  "type": "user_role",\n  "expires_at": "2028-07-21T17:32:28Z",\n  "organization_id": "123",\n  "grants": [\n    {\n      "action": "entity-read",\n      "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n      "effect": "allow",\n      "conditions": [\n        {\n          "attribute": "workflows.primary.task_name",\n          "operation": "equals",\n          "values": ["Qualification"]\n        }\n      ]\n    }\n  ],\n  "parent_role": "123:owner"\n}\n```\n\n</details>\n\n---\n\n### `putRole`\n\nCreate or update role\n\n`PUT /v1/permissions/roles/{roleId}`\n\n```ts\nconst { data } = await client.putRole(\n  {\n    roleId: \'example\',\n  },\n  {\n    id: \'123:owner\',\n    name: \'Owner\',\n    slug: \'owner\',\n    type: \'user_role\',\n    expires_at: \'2028-07-21T17:32:28Z\',\n    organization_id: \'123\',\n    grants: [\n      {\n        action: \'entity-read\',\n        resource: \'entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947\',\n        effect: \'allow\',\n        conditions: [\n          {\n            attribute: \'workflows.primary.task_name\',\n            operation: \'equals\',\n            values: [\'Qualification\']\n          }\n        ]\n      }\n    ],\n    parent_role: \'123:owner\'\n  },\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "123:owner",\n  "name": "Owner",\n  "slug": "owner",\n  "type": "user_role",\n  "expires_at": "2028-07-21T17:32:28Z",\n  "organization_id": "123",\n  "grants": [\n    {\n      "action": "entity-read",\n      "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n      "effect": "allow",\n      "conditions": [\n        {\n          "attribute": "workflows.primary.task_name",\n          "operation": "equals",\n          "values": ["Qualification"]\n        }\n      ]\n    }\n  ],\n  "parent_role": "123:owner"\n}\n```\n\n</details>\n\n---\n\n### `deleteRole`\n\nDelete role by id\n\n`DELETE /v1/permissions/roles/{roleId}`\n\n```ts\nconst { data } = await client.deleteRole({\n  roleId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "123:owner",\n  "name": "Owner",\n  "slug": "owner",\n  "type": "user_role",\n  "expires_at": "2028-07-21T17:32:28Z",\n  "organization_id": "123",\n  "grants": [\n    {\n      "action": "entity-read",\n      "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n      "effect": "allow",\n      "conditions": [\n        {\n          "attribute": "workflows.primary.task_name",\n          "operation": "equals",\n          "values": ["Qualification"]\n        }\n      ]\n    }\n  ],\n  "parent_role": "123:owner"\n}\n```\n\n</details>\n\n---\n\n### `refreshPermissions`\n\nMakes sure the user has a role in the organization\n\n`GET /v1/permissions/refresh`\n\n```ts\nconst { data } = await client.refreshPermissions()\n```\n\n---\n\n### `getAssignedRolesForUser`\n\nGet list of assigned roles by user id\n\n`GET /v1/permissions/assignments/{userId}`\n\n```ts\nconst { data } = await client.getAssignedRolesForUser({\n  userId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n["123:owner"]\n```\n\n</details>\n\n---\n\n### `assignRoles`\n\nAssign / unassign roles to users.\n\n`PUT /v1/permissions/assignments/{userId}`\n\n```ts\nconst { data } = await client.assignRoles(\n  {\n    userId: \'example\',\n  },\n  [\'123:owner\'],\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n["123:owner"]\n```\n\n</details>\n\n---\n\n### `addAssignment`\n\nAssign a user to a role.\n\n`POST /v1/permissions/assignments/{userId}/{roleId}`\n\n```ts\nconst { data } = await client.addAssignment({\n  userId: \'example\',\n  roleId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "user_id": "1",\n  "roles": ["123:owner"]\n}\n```\n\n</details>\n\n---\n\n### `removeAssignment`\n\nRemove role assignment from user\n\n`DELETE /v1/permissions/assignments/{userId}/{roleId}`\n\n```ts\nconst { data } = await client.removeAssignment({\n  userId: \'example\',\n  roleId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "user_id": "1",\n  "roles": ["123:owner"]\n}\n```\n\n</details>\n\n---\n\n### `listAllAssignments`\n\nReturns list of all assignments in organization\n\n`GET /v1/permissions/assignments`\n\n```ts\nconst { data } = await client.listAllAssignments()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "assignments": [\n    {\n      "user_id": "1",\n      "roles": ["123:owner"]\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n## Schemas\n\n### `Grant`\n\n```ts\ntype Grant = {\n  action: string\n  resource?: string\n  effect?: "allow" | "deny"\n  conditions?: object[]\n}\n```\n\n### `GrantWithDependencies`\n\n```ts\ntype GrantWithDependencies = {\n  action: string\n  resource?: string\n  effect?: "allow" | "deny"\n  conditions?: object[]\n  dependencies?: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `GrantCondition`\n\n```ts\ntype GrantCondition = object\n```\n\n### `EqualsCondition`\n\nCheck if attribute equals to any of the values\n\n```ts\ntype EqualsCondition = {\n  attribute: string\n  operation: "equals"\n  values: unknown[]\n}\n```\n\n### `RoleId`\n\nFormat: `<organization_id>`:`<slug>`\n\n```ts\ntype RoleId = string\n```\n\n### `BaseRole`\n\n```ts\ntype BaseRole = {\n  id: string\n  name: string\n  slug: string\n  type: string\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `BaseRoleForCreate`\n\n```ts\ntype BaseRoleForCreate = {\n  id?: string\n  name: string\n  slug: string\n  type: string\n  expires_at?: string // date-time\n  organization_id?: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `UserRole`\n\n```ts\ntype UserRole = {\n  id: string\n  name: string\n  slug: string\n  type: "user_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  parent_role?: object\n}\n```\n\n### `OrgRole`\n\n```ts\ntype OrgRole = {\n  id: string\n  name: string\n  slug: string\n  type: "org_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  pricing_tier?: string\n}\n```\n\n### `ShareRole`\n\n```ts\ntype ShareRole = {\n  id: string\n  name: string\n  slug: string\n  type: "share_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `PartnerRole`\n\n```ts\ntype PartnerRole = {\n  id: string\n  name: string\n  slug: string\n  type: "partner_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  partner_org_id?: object\n  vendor_enforced_user_limit?: number\n}\n```\n\n### `PortalRole`\n\n```ts\ntype PortalRole = {\n  id: string\n  name: string\n  slug: string\n  type: "portal_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `Role`\n\n```ts\ntype Role = {\n  id: string\n  name: string\n  slug: string\n  type: "user_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  parent_role?: object\n} | {\n  id: string\n  name: string\n  slug: string\n  type: "org_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  pricing_tier?: string\n} | {\n  id: string\n  name: string\n  slug: string\n  type: "share_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n} | {\n  id: string\n  name: string\n  slug: string\n  type: "partner_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  partner_org_id?: object\n  vendor_enforced_user_limit?: number\n} | {\n  id: string\n  name: string\n  slug: string\n  type: "portal_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `RolePayload`\n\n```ts\ntype RolePayload = {\n  grants?: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n    dependencies?: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n  }>\n}\n```\n\n### `Assignment`\n\nA role attached to an user\n\n```ts\ntype Assignment = {\n  user_id?: string\n  roles?: string[]\n}\n```\n\n### `InternalAssignment`\n\nA role attached to an user\n\n```ts\ntype InternalAssignment = {\n  userId?: string\n  roles?: string[]\n}\n```\n\n### `OrgAssignments`\n\nAll roles attached to an users of an organization\n\n```ts\ntype OrgAssignments = {\n  organizationId?: string\n  assignments?: Array<{\n    userId?: string\n    roles?: string[]\n  }>\n}\n```\n\n### `OrgRoles`\n\nAll roles attached to an users of an organization\n\n```ts\ntype OrgRoles = {\n  organizationId?: string\n  roles?: Array<{\n    id: string\n    name: string\n    slug: string\n    type: "user_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n    parent_role?: object\n  } | {\n    id: string\n    name: string\n    slug: string\n    type: "org_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n    pricing_tier?: string\n  } | {\n    id: string\n    name: string\n    slug: string\n    type: "share_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n  } | {\n    id: string\n    name: string\n    slug: string\n    type: "partner_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n    partner_org_id?: object\n    vendor_enforced_user_limit?: number\n  } | {\n    id: string\n    name: string\n    slug: string\n    type: "portal_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n  }>\n}\n```\n\n### `Assignments`\n\nList of role ids attached to an user\n\n```ts\ntype Assignments = string[]\n```\n\n### `UserId`\n\nId of a user\n\n```ts\ntype UserId = string\n```\n\n### `OrganizationId`\n\nId of an organization\n\n```ts\ntype OrganizationId = string\n```\n\n### `Slug`\n\nSlug of a role; for a role with id = 123:manager -> 123 is org_id & manager is slug\n\n```ts\ntype Slug = string\n```\n\n### `RoleSearchInput`\n\n```ts\ntype RoleSearchInput = {\n  role_ids?: string[]\n  org_ids?: string[]\n  slugs?: string[]\n  query?: string\n  limit?: number\n  offset?: number\n}\n```\n\n### `CreateRolePayload`\n\n```ts\ntype CreateRolePayload = {\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  id?: string\n  name: string\n  slug: string\n  type: string\n  expires_at?: string // date-time\n  organization_id?: string\n}\n```\n\n### `Error`\n\nError response\n\n```ts\ntype Error = {\n  message: string\n}\n```\n';
-export {
-  permissions_default as default
-};

package/dist/permissions-FGBIJNN7.cjs

@@ -1,7 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});require('./chunk-NJK5F5TF.cjs');
-
-// src/docs/permissions.json
-var permissions_default = '# Permissions API\n\n- **Base URL:** `https://permissions.sls.epilot.io`\n- **Full API Docs:** [https://docs.epilot.io/api/permissions](https://docs.epilot.io/api/permissions)\n\n## Usage\n\n```ts\nimport { epilot } from \'@epilot/sdk\'\n\nepilot.authorize(() => \'<token>\')\nconst { data } = await epilot.permissions.listCurrentRoles(...)\n```\n\n### Tree-shakeable import\n\n```ts\nimport { getClient, authorize } from \'@epilot/sdk/permissions\'\n\nconst permissionsClient = getClient()\nauthorize(permissionsClient, () => \'<token>\')\nconst { data } = await permissionsClient.listCurrentRoles(...)\n```\n\n## Operations\n\n**Roles**\n- [`listCurrentRoles`](#listcurrentroles)\n- [`listAllRoles`](#listallroles)\n- [`createRole`](#createrole)\n- [`searchRoles`](#searchroles)\n- [`getRole`](#getrole)\n- [`putRole`](#putrole)\n- [`deleteRole`](#deleterole)\n- [`refreshPermissions`](#refreshpermissions)\n\n**Assignments**\n- [`getAssignedRolesForUser`](#getassignedrolesforuser)\n- [`assignRoles`](#assignroles)\n- [`addAssignment`](#addassignment)\n- [`removeAssignment`](#removeassignment)\n- [`listAllAssignments`](#listallassignments)\n\n**Schemas**\n- [`Grant`](#grant)\n- [`GrantWithDependencies`](#grantwithdependencies)\n- [`GrantCondition`](#grantcondition)\n- [`EqualsCondition`](#equalscondition)\n- [`RoleId`](#roleid)\n- [`BaseRole`](#baserole)\n- [`BaseRoleForCreate`](#baseroleforcreate)\n- [`UserRole`](#userrole)\n- [`OrgRole`](#orgrole)\n- [`ShareRole`](#sharerole)\n- [`PartnerRole`](#partnerrole)\n- [`PortalRole`](#portalrole)\n- [`Role`](#role)\n- [`RolePayload`](#rolepayload)\n- [`Assignment`](#assignment)\n- [`InternalAssignment`](#internalassignment)\n- [`OrgAssignments`](#orgassignments)\n- [`OrgRoles`](#orgroles)\n- [`Assignments`](#assignments)\n- [`UserId`](#userid)\n- [`OrganizationId`](#organizationid)\n- [`Slug`](#slug)\n- [`RoleSearchInput`](#rolesearchinput)\n- [`CreateRolePayload`](#createrolepayload)\n- [`Error`](#error)\n\n### `listCurrentRoles`\n\nReturns roles and grants assigned to current user\n\n`GET /v1/permissions/me`\n\n```ts\nconst { data } = await client.listCurrentRoles()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "roles": [\n    {\n      "id": "123:owner",\n      "name": "Owner",\n      "slug": "owner",\n      "type": "user_role",\n      "expires_at": "2028-07-21T17:32:28Z",\n      "organization_id": "123",\n      "grants": [\n        {\n          "action": "entity-read",\n          "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n          "effect": "allow",\n          "conditions": [\n            {\n              "attribute": "workflows.primary.task_name",\n              "operation": "equals",\n              "values": ["Qualification"]\n            }\n          ]\n        }\n      ],\n      "parent_role": "123:owner"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `listAllRoles`\n\nReturns list of all roles in organization\n\n`GET /v1/permissions/roles`\n\n```ts\nconst { data } = await client.listAllRoles()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "roles": [\n    {\n      "id": "123:owner",\n      "name": "Owner",\n      "slug": "owner",\n      "type": "user_role",\n      "expires_at": "2028-07-21T17:32:28Z",\n      "organization_id": "123",\n      "grants": [\n        {\n          "action": "entity-read",\n          "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n          "effect": "allow",\n          "conditions": [\n            {\n              "attribute": "workflows.primary.task_name",\n              "operation": "equals",\n              "values": ["Qualification"]\n            }\n          ]\n        }\n      ],\n      "parent_role": "123:owner"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `createRole`\n\nCreate role\n\n`POST /v1/permissions/roles`\n\n```ts\nconst { data } = await client.createRole(\n  null,\n  {},\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "123:owner",\n  "name": "Owner",\n  "slug": "owner",\n  "type": "user_role",\n  "expires_at": "2028-07-21T17:32:28Z",\n  "organization_id": "123",\n  "grants": [\n    {\n      "action": "entity-read",\n      "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n      "effect": "allow",\n      "conditions": [\n        {\n          "attribute": "workflows.primary.task_name",\n          "operation": "equals",\n          "values": ["Qualification"]\n        }\n      ]\n    }\n  ],\n  "parent_role": "123:owner"\n}\n```\n\n</details>\n\n---\n\n### `searchRoles`\n\nSearch Roles\n\n`POST /v1/permissions/roles:search`\n\n```ts\nconst { data } = await client.searchRoles(\n  null,\n  {\n    role_ids: [\'123:manager\', \'456:owner\'],\n    org_ids: [\'123\', \'456\'],\n    slugs: [\'manager\', \'owner\'],\n    query: \'Administrator\',\n    limit: 1,\n    offset: 1\n  },\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "hits": 0,\n  "results": [\n    {\n      "id": "123:owner",\n      "name": "Owner",\n      "slug": "owner",\n      "type": "user_role",\n      "expires_at": "2028-07-21T17:32:28Z",\n      "organization_id": "123",\n      "grants": [\n        {\n          "action": "entity-read",\n          "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n          "effect": "allow",\n          "conditions": [\n            {\n              "attribute": "workflows.primary.task_name",\n              "operation": "equals",\n              "values": ["Qualification"]\n            }\n          ]\n        }\n      ],\n      "parent_role": "123:owner"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getRole`\n\nGet role by id\n\n`GET /v1/permissions/roles/{roleId}`\n\n```ts\nconst { data } = await client.getRole({\n  roleId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "123:owner",\n  "name": "Owner",\n  "slug": "owner",\n  "type": "user_role",\n  "expires_at": "2028-07-21T17:32:28Z",\n  "organization_id": "123",\n  "grants": [\n    {\n      "action": "entity-read",\n      "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n      "effect": "allow",\n      "conditions": [\n        {\n          "attribute": "workflows.primary.task_name",\n          "operation": "equals",\n          "values": ["Qualification"]\n        }\n      ]\n    }\n  ],\n  "parent_role": "123:owner"\n}\n```\n\n</details>\n\n---\n\n### `putRole`\n\nCreate or update role\n\n`PUT /v1/permissions/roles/{roleId}`\n\n```ts\nconst { data } = await client.putRole(\n  {\n    roleId: \'example\',\n  },\n  {\n    id: \'123:owner\',\n    name: \'Owner\',\n    slug: \'owner\',\n    type: \'user_role\',\n    expires_at: \'2028-07-21T17:32:28Z\',\n    organization_id: \'123\',\n    grants: [\n      {\n        action: \'entity-read\',\n        resource: \'entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947\',\n        effect: \'allow\',\n        conditions: [\n          {\n            attribute: \'workflows.primary.task_name\',\n            operation: \'equals\',\n            values: [\'Qualification\']\n          }\n        ]\n      }\n    ],\n    parent_role: \'123:owner\'\n  },\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "123:owner",\n  "name": "Owner",\n  "slug": "owner",\n  "type": "user_role",\n  "expires_at": "2028-07-21T17:32:28Z",\n  "organization_id": "123",\n  "grants": [\n    {\n      "action": "entity-read",\n      "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n      "effect": "allow",\n      "conditions": [\n        {\n          "attribute": "workflows.primary.task_name",\n          "operation": "equals",\n          "values": ["Qualification"]\n        }\n      ]\n    }\n  ],\n  "parent_role": "123:owner"\n}\n```\n\n</details>\n\n---\n\n### `deleteRole`\n\nDelete role by id\n\n`DELETE /v1/permissions/roles/{roleId}`\n\n```ts\nconst { data } = await client.deleteRole({\n  roleId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "123:owner",\n  "name": "Owner",\n  "slug": "owner",\n  "type": "user_role",\n  "expires_at": "2028-07-21T17:32:28Z",\n  "organization_id": "123",\n  "grants": [\n    {\n      "action": "entity-read",\n      "resource": "entity:123:contact:f7c22299-ca72-4bca-8538-0a88eeefc947",\n      "effect": "allow",\n      "conditions": [\n        {\n          "attribute": "workflows.primary.task_name",\n          "operation": "equals",\n          "values": ["Qualification"]\n        }\n      ]\n    }\n  ],\n  "parent_role": "123:owner"\n}\n```\n\n</details>\n\n---\n\n### `refreshPermissions`\n\nMakes sure the user has a role in the organization\n\n`GET /v1/permissions/refresh`\n\n```ts\nconst { data } = await client.refreshPermissions()\n```\n\n---\n\n### `getAssignedRolesForUser`\n\nGet list of assigned roles by user id\n\n`GET /v1/permissions/assignments/{userId}`\n\n```ts\nconst { data } = await client.getAssignedRolesForUser({\n  userId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n["123:owner"]\n```\n\n</details>\n\n---\n\n### `assignRoles`\n\nAssign / unassign roles to users.\n\n`PUT /v1/permissions/assignments/{userId}`\n\n```ts\nconst { data } = await client.assignRoles(\n  {\n    userId: \'example\',\n  },\n  [\'123:owner\'],\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n["123:owner"]\n```\n\n</details>\n\n---\n\n### `addAssignment`\n\nAssign a user to a role.\n\n`POST /v1/permissions/assignments/{userId}/{roleId}`\n\n```ts\nconst { data } = await client.addAssignment({\n  userId: \'example\',\n  roleId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "user_id": "1",\n  "roles": ["123:owner"]\n}\n```\n\n</details>\n\n---\n\n### `removeAssignment`\n\nRemove role assignment from user\n\n`DELETE /v1/permissions/assignments/{userId}/{roleId}`\n\n```ts\nconst { data } = await client.removeAssignment({\n  userId: \'example\',\n  roleId: \'example\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "user_id": "1",\n  "roles": ["123:owner"]\n}\n```\n\n</details>\n\n---\n\n### `listAllAssignments`\n\nReturns list of all assignments in organization\n\n`GET /v1/permissions/assignments`\n\n```ts\nconst { data } = await client.listAllAssignments()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "assignments": [\n    {\n      "user_id": "1",\n      "roles": ["123:owner"]\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n## Schemas\n\n### `Grant`\n\n```ts\ntype Grant = {\n  action: string\n  resource?: string\n  effect?: "allow" | "deny"\n  conditions?: object[]\n}\n```\n\n### `GrantWithDependencies`\n\n```ts\ntype GrantWithDependencies = {\n  action: string\n  resource?: string\n  effect?: "allow" | "deny"\n  conditions?: object[]\n  dependencies?: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `GrantCondition`\n\n```ts\ntype GrantCondition = object\n```\n\n### `EqualsCondition`\n\nCheck if attribute equals to any of the values\n\n```ts\ntype EqualsCondition = {\n  attribute: string\n  operation: "equals"\n  values: unknown[]\n}\n```\n\n### `RoleId`\n\nFormat: `<organization_id>`:`<slug>`\n\n```ts\ntype RoleId = string\n```\n\n### `BaseRole`\n\n```ts\ntype BaseRole = {\n  id: string\n  name: string\n  slug: string\n  type: string\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `BaseRoleForCreate`\n\n```ts\ntype BaseRoleForCreate = {\n  id?: string\n  name: string\n  slug: string\n  type: string\n  expires_at?: string // date-time\n  organization_id?: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `UserRole`\n\n```ts\ntype UserRole = {\n  id: string\n  name: string\n  slug: string\n  type: "user_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  parent_role?: object\n}\n```\n\n### `OrgRole`\n\n```ts\ntype OrgRole = {\n  id: string\n  name: string\n  slug: string\n  type: "org_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  pricing_tier?: string\n}\n```\n\n### `ShareRole`\n\n```ts\ntype ShareRole = {\n  id: string\n  name: string\n  slug: string\n  type: "share_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `PartnerRole`\n\n```ts\ntype PartnerRole = {\n  id: string\n  name: string\n  slug: string\n  type: "partner_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  partner_org_id?: object\n  vendor_enforced_user_limit?: number\n}\n```\n\n### `PortalRole`\n\n```ts\ntype PortalRole = {\n  id: string\n  name: string\n  slug: string\n  type: "portal_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `Role`\n\n```ts\ntype Role = {\n  id: string\n  name: string\n  slug: string\n  type: "user_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  parent_role?: object\n} | {\n  id: string\n  name: string\n  slug: string\n  type: "org_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  pricing_tier?: string\n} | {\n  id: string\n  name: string\n  slug: string\n  type: "share_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n} | {\n  id: string\n  name: string\n  slug: string\n  type: "partner_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  partner_org_id?: object\n  vendor_enforced_user_limit?: number\n} | {\n  id: string\n  name: string\n  slug: string\n  type: "portal_role"\n  expires_at?: string // date-time\n  organization_id: string\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n}\n```\n\n### `RolePayload`\n\n```ts\ntype RolePayload = {\n  grants?: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n    dependencies?: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n  }>\n}\n```\n\n### `Assignment`\n\nA role attached to an user\n\n```ts\ntype Assignment = {\n  user_id?: string\n  roles?: string[]\n}\n```\n\n### `InternalAssignment`\n\nA role attached to an user\n\n```ts\ntype InternalAssignment = {\n  userId?: string\n  roles?: string[]\n}\n```\n\n### `OrgAssignments`\n\nAll roles attached to an users of an organization\n\n```ts\ntype OrgAssignments = {\n  organizationId?: string\n  assignments?: Array<{\n    userId?: string\n    roles?: string[]\n  }>\n}\n```\n\n### `OrgRoles`\n\nAll roles attached to an users of an organization\n\n```ts\ntype OrgRoles = {\n  organizationId?: string\n  roles?: Array<{\n    id: string\n    name: string\n    slug: string\n    type: "user_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n    parent_role?: object\n  } | {\n    id: string\n    name: string\n    slug: string\n    type: "org_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n    pricing_tier?: string\n  } | {\n    id: string\n    name: string\n    slug: string\n    type: "share_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n  } | {\n    id: string\n    name: string\n    slug: string\n    type: "partner_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n    partner_org_id?: object\n    vendor_enforced_user_limit?: number\n  } | {\n    id: string\n    name: string\n    slug: string\n    type: "portal_role"\n    expires_at?: string // date-time\n    organization_id: string\n    grants: Array<{\n      action: { ... }\n      resource?: { ... }\n      effect?: { ... }\n      conditions?: { ... }\n    }>\n  }>\n}\n```\n\n### `Assignments`\n\nList of role ids attached to an user\n\n```ts\ntype Assignments = string[]\n```\n\n### `UserId`\n\nId of a user\n\n```ts\ntype UserId = string\n```\n\n### `OrganizationId`\n\nId of an organization\n\n```ts\ntype OrganizationId = string\n```\n\n### `Slug`\n\nSlug of a role; for a role with id = 123:manager -> 123 is org_id & manager is slug\n\n```ts\ntype Slug = string\n```\n\n### `RoleSearchInput`\n\n```ts\ntype RoleSearchInput = {\n  role_ids?: string[]\n  org_ids?: string[]\n  slugs?: string[]\n  query?: string\n  limit?: number\n  offset?: number\n}\n```\n\n### `CreateRolePayload`\n\n```ts\ntype CreateRolePayload = {\n  grants: Array<{\n    action: string\n    resource?: string\n    effect?: "allow" | "deny"\n    conditions?: object[]\n  }>\n  id?: string\n  name: string\n  slug: string\n  type: string\n  expires_at?: string // date-time\n  organization_id?: string\n}\n```\n\n### `Error`\n\nError response\n\n```ts\ntype Error = {\n  message: string\n}\n```\n';
-
-
-exports.default = permissions_default;