@equinor/fusion-services 0.2.0

package/dist/esm/roles/index.js

@@ -0,0 +1,190 @@
+/**
+ * @packageDocumentation
+ *
+ * Fusion Roles V2 endpoint functions and types.
+ *
+ * The Fusion Roles service manages roles, claimable roles, access roles, the systems that own
+ * them, and the role assignments that grant them to user and application accounts. Every
+ * operation the Roles V2 OpenAPI document publishes is exported here as a standalone,
+ * tree-shakeable function that takes an `IHttpClient` and issues exactly one HTTP request
+ * against that service: accounts, roles, claimable roles, systems, access roles, scope types,
+ * role binding configurations, event subscriptions, and the public schema catalogue.
+ *
+ * Each endpoint is curried — bind the API version, HTTP client, and execution
+ * method once, then call the returned function with the operation arguments.
+ * Every endpoint function carries the OpenAPI summary of the operation it
+ * implements, so its hover documentation names the resource and the HTTP verb.
+ *
+ * ## Finding the right function
+ *
+ * | Task | Functions |
+ * | --- | --- |
+ * | Fetch, list, create, update, delete roles | `getRole`, `listRoles`, `createRole`, `updateRole`, `deleteRole` |
+ * | Assign and revoke roles | `assignRole`, `listRoleAssignments`, `getRoleAssignment`, `updateRoleAssignment`, `deleteRoleAssignment`, `deleteRoleAssignments` |
+ * | Claim and deactivate claimable roles | `activateClaimableRoleAssignment`, `deactivateClaimableRoleAssignment`, `listAccountClaimableRoleAssignments`, `listActivationsForClaimableRoleAssignment` |
+ * | Manage claimable roles | `getClaimableRole`, `listClaimableRoles`, `createClaimableRole`, `updateClaimableRole`, `deleteClaimableRole` |
+ * | Systems and their access roles | `listSystems`, `createSystem`, `listSystemAccessRoles`, `assignSystemAccessRole` |
+ * | Scope types | `listScopeTypes`, `createScopeType`, `updateScopeType`, `deleteScopeType` |
+ * | Role binding configurations | `listRoleBindingConfigurations`, `createRoleBindingConfiguration`, `getRoleBindingConfigurationStatus`, `purgeExpiredRoleBindingConfigurationHistory` |
+ *
+ * ## Promises or observables
+ *
+ * The third argument selects how a request is consumed and defaults to `'json'`.
+ * `'json'` resolves a `Promise`; `'json$'` returns an observable `StreamResponse`.
+ * Both carry the same response type, so `GetRoleResult<'v1'>` is
+ * `Promise<GetRoleResponse<'v1'>>` and `GetRoleResult<'v1', 'json$'>` is
+ * `StreamResponse<GetRoleResponse<'v1'>>`.
+ *
+ * ## Version-coupled endpoint typing
+ *
+ * Endpoints follow the Octokit model: the API version is the single discriminator
+ * for an operation. Each endpoint declares one version contract —
+ * `{ [ApiVersion.v1]: { args, response } }` — keyed by the *concrete* version, and
+ * the version a caller passes selects the request path, the `api-version` query
+ * parameter, the argument schema, and the response schema from that one entry.
+ * They can never disagree, and an unsupported version throws before the HTTP
+ * client is touched.
+ *
+ * The coupling holds at compile time too: `GetRoleArg<'v1'>` and
+ * `GetRoleResponse<'v1'>` resolve through the contract entry for the selected
+ * version rather than collapsing to a version-neutral shape. `'v1'`, `'1.0'`, and
+ * `ApiVersion.v1` all name the same version, so all three infer the same types; a
+ * future `'v2'` would infer different ones without unioning fields across
+ * versions.
+ *
+ * Every operation exports four types beside its function: `<Operation>Version`
+ * (the identifiers it accepts), `<Operation>Arg` (its arguments),
+ * `<Operation>Response` (its response body), and `<Operation>Result` (what the
+ * selected client method hands back).
+ *
+ * Reusable schemas live in a version-scoped module graph (`v1/schemas`) and carry
+ * a matching symbol suffix (`ApiRoleSchemaV1`), so no schema can be reused for a
+ * version it was not written for.
+ *
+ * ## Models are inferred, never declared twice
+ *
+ * The Zod schemas are the single source of truth. Every model type — `ApiRoleV1`,
+ * `CreateRoleRequestV1`, and the rest — is `z.infer` of its schema, so the runtime
+ * validator and the compile-time type can never disagree. The direction of truth is
+ * Zod → TypeScript and cannot be reversed: TypeScript types are erased at runtime
+ * and cannot produce a validator. Model names carry the API version, so `ApiRoleV1`
+ * can never silently become a future version's shape.
+ *
+ * ## The OpenAPI snapshot
+ *
+ * The complete published contract ships with the package and is importable for
+ * mocks, fixtures, and code generation:
+ * `import openapi from '@equinor/fusion-services/roles/v1/openapi.json' with { type: 'json' }`.
+ * The subpath is versioned by the *API* version it describes. To check the snapshot
+ * against the live service, run
+ * `pnpm --filter @equinor/fusion-services check:openapi roles`; it is read-only and
+ * reports drift per operation and per component schema.
+ *
+ * Endpoints are reachable only through this service subpath
+ * (`@equinor/fusion-services/roles`) — the package root exports no aggregated API,
+ * so a second service can never turn the root into a namespace that drags every
+ * schema graph into a bundle.
+ *
+ * @example
+ * ```ts
+ * import { getRole } from '@equinor/fusion-services/roles';
+ *
+ * const role = await getRole('v1', httpClient)({ roleIdentifier: 'reader' });
+ * ```
+ *
+ * @example
+ * ```ts
+ * import { listRoles } from '@equinor/fusion-services/roles';
+ *
+ * listRoles('v1', httpClient, 'json$')({ top: 10 }).subscribe(console.log);
+ * ```
+ *
+ * @example
+ * Claim a claimable role assignment for eight hours, then release it early.
+ * ```ts
+ * import {
+ *   activateClaimableRoleAssignment,
+ *   deactivateClaimableRoleAssignment,
+ * } from '@equinor/fusion-services/roles';
+ *
+ * const claim = { accountIdentifier: 'user@equinor.com', claimableRoleAssignmentId: id };
+ *
+ * await activateClaimableRoleAssignment('v1', httpClient)({ ...claim, hours: 8 });
+ * await deactivateClaimableRoleAssignment('v1', httpClient)(claim);
+ * ```
+ */
+export { ApiVersion } from './static';
+export { activateClaimableRoleAssignment, } from './endpoints/account-claimable-role-assignment-activation.post';
+export { addClaimableRoleAccessRoles, } from './endpoints/claimable-role-access-roles.post';
+export { addRoleAccessRoles, } from './endpoints/role-access-roles.post';
+export { assignClaimableRole, } from './endpoints/claimable-role-assignments.post';
+export { assignRole, } from './endpoints/role-assignments.post';
+export { assignSystemAccessRole, } from './endpoints/system-access-role-assignments.post';
+export { createClaimableRole, } from './endpoints/claimable-roles.post';
+export { createRole, } from './endpoints/roles.post';
+export { createRoleBindingConfiguration, } from './endpoints/role-binding-configurations.post';
+export { createRoleBindingConfigurationHistoryRecord, } from './endpoints/role-binding-configuration-history.post';
+export { createRoleBindingConfigurationNotificationRecord, } from './endpoints/role-binding-configuration-notifications.post';
+export { createScopeType, } from './endpoints/scope-types.post';
+export { createSystem, } from './endpoints/systems.post';
+export { createSystemAccessRole, } from './endpoints/system-access-roles.post';
+export { deactivateClaimableRoleAssignment, } from './endpoints/account-claimable-role-assignment-deactivation.post';
+export { deleteClaimableRole, } from './endpoints/claimable-role.delete';
+export { deleteClaimableRoleAccessRole, } from './endpoints/claimable-role-access-role.delete';
+export { deleteClaimableRoleAssignment, } from './endpoints/claimable-role-assignment.delete';
+export { deleteClaimableRoleAssignmentsByExternalIdentifier, } from './endpoints/claimable-role-assignments-by-external-identifier.delete';
+export { deleteRole, } from './endpoints/role.delete';
+export { deleteRoleAccessRole, } from './endpoints/role-access-role.delete';
+export { deleteRoleAssignment, } from './endpoints/role-assignment.delete';
+export { deleteRoleAssignments, } from './endpoints/role-assignments-delete.post';
+export { deleteRoleAssignmentsByExternalIdentifier, } from './endpoints/role-assignments-by-external-identifier.delete';
+export { deleteRoleBindingConfiguration, } from './endpoints/role-binding-configuration.delete';
+export { deleteScopeType, } from './endpoints/scope-type.delete';
+export { deleteSystem, } from './endpoints/system.delete';
+export { deleteSystemAccessRole, } from './endpoints/system-access-role.delete';
+export { deleteSystemAccessRoleAssignment, } from './endpoints/system-access-role-assignment.delete';
+export { getClaimableRole, } from './endpoints/claimable-role.get';
+export { getClaimableRoleAssignment, } from './endpoints/claimable-role-assignment.get';
+export { getClaimableRoleAssignmentActivation, } from './endpoints/account-claimable-role-assignment-activation.get';
+export { getPublicSchema, } from './endpoints/public-schema.get';
+export { getRole, } from './endpoints/role.get';
+export { getRoleAssignment, } from './endpoints/role-assignment.get';
+export { getRoleBindingConfiguration, } from './endpoints/role-binding-configuration.get';
+export { getRoleBindingConfigurationStatus, } from './endpoints/role-binding-configuration-status.get';
+export { getScopeType, } from './endpoints/scope-type.get';
+export { getSystem, } from './endpoints/system.get';
+export { getSystemAccessRole, } from './endpoints/system-access-role.get';
+export { getSystemAccessRoleAssignment, } from './endpoints/system-access-role-assignment.get';
+export { listAccessRoles, } from './endpoints/access-roles.get';
+export { listAccountAccessRoleAssignments, } from './endpoints/account-access-role-assignments.get';
+export { listAccountActiveAccessRoleAssignments, } from './endpoints/account-active-access-role-assignments.get';
+export { listAccountClaimableRoleAssignments, } from './endpoints/account-claimable-role-assignments.get';
+export { listAccountConsolidatedClaimableRoleAssignments, } from './endpoints/account-consolidated-claimable-role-assignments.get';
+export { listAccountConsolidatedRoleAssignments, } from './endpoints/account-consolidated-role-assignments.get';
+export { listAccountRoleAssignments, } from './endpoints/account-role-assignments.get';
+export { listActivationsForClaimableRoleAssignment, } from './endpoints/claimable-role-assignment-activations-by-assignment.get';
+export { listClaimableRoleAssignmentActivations, } from './endpoints/claimable-role-assignment-activations.get';
+export { listClaimableRoleAssignments, } from './endpoints/claimable-role-assignments.get';
+export { listClaimableRoles, } from './endpoints/claimable-roles.get';
+export { listRoleAssignments, } from './endpoints/role-assignments.get';
+export { listRoleBindingConfigurationHistory, } from './endpoints/role-binding-configuration-history.get';
+export { listRoleBindingConfigurationNotifications, } from './endpoints/role-binding-configuration-notifications.get';
+export { listRoleBindingConfigurations, } from './endpoints/role-binding-configurations.get';
+export { listRoles, } from './endpoints/roles.get';
+export { listScopeTypes, } from './endpoints/scope-types.get';
+export { listSystemAccessRoleAssignments, } from './endpoints/system-access-role-assignments.get';
+export { listSystemAccessRoles, } from './endpoints/system-access-roles.get';
+export { listSystems, } from './endpoints/systems.get';
+export { purgeExpiredRoleBindingConfigurationHistory, } from './endpoints/role-binding-configuration-expired-history.delete';
+export { putRolesSubscription, } from './endpoints/roles-subscription.put';
+export { updateClaimableRole, } from './endpoints/claimable-role.patch';
+export { updateClaimableRoleAssignment, } from './endpoints/claimable-role-assignment.patch';
+export { updateRole, } from './endpoints/role.patch';
+export { updateRoleAssignment, } from './endpoints/role-assignment.patch';
+export { updateRoleBindingConfiguration, } from './endpoints/role-binding-configuration.patch';
+export { updateRoleBindingConfigurationStatus, } from './endpoints/role-binding-configuration-status.patch';
+export { updateScopeType, } from './endpoints/scope-type.patch';
+export { updateSystem, } from './endpoints/system.patch';
+export { updateSystemAccessRole, } from './endpoints/system-access-role.patch';
+export { updateSystemAccessRoleAssignment, } from './endpoints/system-access-role-assignment.patch';
+//# sourceMappingURL=index.js.map

package/dist/esm/roles/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/roles/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkHG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAMtC,OAAO,EAKL,+BAA+B,GAChC,MAAM,+DAA+D,CAAC;AAEvE,OAAO,EAKL,2BAA2B,GAC5B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAKL,kBAAkB,GACnB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAKL,mBAAmB,GACpB,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAKL,UAAU,GACX,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAKL,sBAAsB,GACvB,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAKL,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAKL,UAAU,GACX,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAKL,8BAA8B,GAC/B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAKL,2CAA2C,GAC5C,MAAM,qDAAqD,CAAC;AAE7D,OAAO,EAKL,gDAAgD,GACjD,MAAM,2DAA2D,CAAC;AAEnE,OAAO,EAKL,eAAe,GAChB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAKL,YAAY,GACb,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAKL,sBAAsB,GACvB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAKL,iCAAiC,GAClC,MAAM,iEAAiE,CAAC;AAEzE,OAAO,EAKL,mBAAmB,GACpB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAKL,6BAA6B,GAC9B,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAKL,6BAA6B,GAC9B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAKL,kDAAkD,GACnD,MAAM,sEAAsE,CAAC;AAE9E,OAAO,EAKL,UAAU,GACX,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAKL,oBAAoB,GACrB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAKL,oBAAoB,GACrB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAKL,qBAAqB,GACtB,MAAM,0CAA0C,CAAC;AAElD,OAAO,EAKL,yCAAyC,GAC1C,MAAM,4DAA4D,CAAC;AAEpE,OAAO,EAKL,8BAA8B,GAC/B,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAKL,eAAe,GAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAKL,YAAY,GACb,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAKL,sBAAsB,GACvB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAKL,gCAAgC,GACjC,MAAM,kDAAkD,CAAC;AAE1D,OAAO,EAKL,gBAAgB,GACjB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAKL,0BAA0B,GAC3B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAKL,oCAAoC,GACrC,MAAM,8DAA8D,CAAC;AAEtE,OAAO,EAKL,eAAe,GAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAKL,OAAO,GACR,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAKL,iBAAiB,GAClB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAKL,2BAA2B,GAC5B,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAKL,iCAAiC,GAClC,MAAM,mDAAmD,CAAC;AAE3D,OAAO,EAKL,YAAY,GACb,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAKL,SAAS,GACV,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAKL,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAKL,6BAA6B,GAC9B,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAKL,eAAe,GAChB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAKL,gCAAgC,GACjC,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAKL,sCAAsC,GACvC,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAKL,mCAAmC,GACpC,MAAM,oDAAoD,CAAC;AAE5D,OAAO,EAKL,+CAA+C,GAChD,MAAM,iEAAiE,CAAC;AAEzE,OAAO,EAKL,sCAAsC,GACvC,MAAM,uDAAuD,CAAC;AAE/D,OAAO,EAKL,0BAA0B,GAC3B,MAAM,0CAA0C,CAAC;AAElD,OAAO,EAKL,yCAAyC,GAC1C,MAAM,qEAAqE,CAAC;AAE7E,OAAO,EAKL,sCAAsC,GACvC,MAAM,uDAAuD,CAAC;AAE/D,OAAO,EAKL,4BAA4B,GAC7B,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAKL,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAKL,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAKL,mCAAmC,GACpC,MAAM,oDAAoD,CAAC;AAE5D,OAAO,EAKL,yCAAyC,GAC1C,MAAM,0DAA0D,CAAC;AAElE,OAAO,EAKL,6BAA6B,GAC9B,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAKL,SAAS,GACV,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAKL,cAAc,GACf,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAKL,+BAA+B,GAChC,MAAM,gDAAgD,CAAC;AAExD,OAAO,EAKL,qBAAqB,GACtB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAKL,WAAW,GACZ,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAKL,2CAA2C,GAC5C,MAAM,+DAA+D,CAAC;AAEvE,OAAO,EAKL,oBAAoB,GACrB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAKL,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAKL,6BAA6B,GAC9B,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAKL,UAAU,GACX,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAKL,oBAAoB,GACrB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAKL,8BAA8B,GAC/B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAKL,oCAAoC,GACrC,MAAM,qDAAqD,CAAC;AAE7D,OAAO,EAKL,eAAe,GAChB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAKL,YAAY,GACb,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAKL,sBAAsB,GACvB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAKL,gCAAgC,GACjC,MAAM,iDAAiD,CAAC"}

package/dist/esm/roles/static.js

@@ -0,0 +1,29 @@
+/**
+ * Supported API versions for the Fusion Roles V2 service.
+ *
+ * The version is an endpoint's single discriminator. Every endpoint declares one
+ * version contract keyed by the *concrete* enum value — never by the `v1` key —
+ * pairing the arguments that version accepts with the response it publishes.
+ * Callers may name a version three ways: `'v1'`, `'1.0'`, or `ApiVersion.v1`.
+ * `extractVersion` normalises all three to the enum value before a path is built
+ * or a schema is selected, and the same resolution happens at the type level, so
+ * the three spellings infer identical argument and response types.
+ *
+ * Adding a version means adding a member here, a sibling `v2` module
+ * graph, and a `[ApiVersion.v2]` entry in the endpoints that publish it. No
+ * existing version 1.0 schema is edited, and no runtime registry is consulted.
+ *
+ * @example
+ * ```ts
+ * // All three calls resolve to the same concrete version, path, and schemas.
+ * getRole('v1', client)({ roleIdentifier: 'reader' });
+ * getRole('1.0', client)({ roleIdentifier: 'reader' });
+ * getRole(ApiVersion.v1, client)({ roleIdentifier: 'reader' });
+ * ```
+ */
+export var ApiVersion;
+(function (ApiVersion) {
+    /** Fusion Roles V2 API version 1.0 — schemas and model types live in `v1/`. */
+    ApiVersion["v1"] = "1.0";
+})(ApiVersion || (ApiVersion = {}));
+//# sourceMappingURL=static.js.map

package/dist/esm/roles/static.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static.js","sourceRoot":"","sources":["../../../src/roles/static.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAN,IAAY,UAGX;AAHD,WAAY,UAAU;IACpB,+EAA+E;IAC/E,wBAAU,CAAA;AACZ,CAAC,EAHW,UAAU,KAAV,UAAU,QAGrB"}

package/dist/esm/roles/types.js

@@ -0,0 +1,7 @@
+/**
+ * Version-aware types scoped to the Fusion Roles V2 service.
+ *
+ * @packageDocumentation
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/esm/roles/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/roles/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/esm/roles/v1/schemas/access-role-mapping-schema-v1.js

@@ -0,0 +1,11 @@
+import { z } from 'zod';
+/** Zod schema for an access role mapping supplied when creating or updating a role. */
+export const AccessRoleMappingSchemaV1 = z
+    .object({
+    /** Access role ID or name to grant. */
+    accessRoleIdentifier: z.string().optional().describe('Access role ID or name to grant.'),
+    /** Reason for including this access role in the mapping. */
+    reason: z.string().optional().describe('Reason for including this access role in the mapping.'),
+})
+    .describe('An access role mapping supplied when creating or updating a role.');
+//# sourceMappingURL=access-role-mapping-schema-v1.js.map

package/dist/esm/roles/v1/schemas/access-role-mapping-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-role-mapping-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/access-role-mapping-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,uFAAuF;AACvF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,uCAAuC;IACvC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACxF,4DAA4D;IAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;CAChG,CAAC;KACD,QAAQ,CAAC,mEAAmE,CAAC,CAAC"}

package/dist/esm/roles/v1/schemas/activate-assigned-claimable-role-request-schema-v1.js

@@ -0,0 +1,14 @@
+import { z } from 'zod';
+/** Zod schema for the body of an activate-assigned-claimable-role request. */
+export const ActivateAssignedClaimableRoleRequestSchemaV1 = z
+    .object({
+    /** Reason recorded for claiming the role. */
+    reason: z.string().optional().describe('Reason recorded for claiming the role.'),
+    /** Requested activation duration, in hours. */
+    hours: z
+        .union([z.number(), z.string()])
+        .optional()
+        .describe('Requested activation duration, in hours.'),
+})
+    .describe('The body of an activate-assigned-claimable-role request.');
+//# sourceMappingURL=activate-assigned-claimable-role-request-schema-v1.js.map

package/dist/esm/roles/v1/schemas/activate-assigned-claimable-role-request-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activate-assigned-claimable-role-request-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/activate-assigned-claimable-role-request-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4CAA4C,GAAG,CAAC;KAC1D,MAAM,CAAC;IACN,6CAA6C;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAChF,+CAA+C;IAC/C,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;SAC/B,QAAQ,EAAE;SACV,QAAQ,CAAC,0CAA0C,CAAC;CACxD,CAAC;KACD,QAAQ,CAAC,0DAA0D,CAAC,CAAC"}

package/dist/esm/roles/v1/schemas/add-claimable-role-access-role-request-schema-v1.js

@@ -0,0 +1,13 @@
+import { z } from 'zod';
+import { AccessRoleMappingSchemaV1 } from './access-role-mapping-schema-v1';
+/** Zod schema for the body of an add-claimable-role-access-roles request. */
+export const AddClaimableRoleAccessRoleRequestSchemaV1 = z
+    .object({
+    /** Access role mappings to add. The API requires at least one. */
+    accessRoleMappings: z
+        .array(AccessRoleMappingSchemaV1)
+        .min(1, 'accessRoleMappings requires at least one access role mapping')
+        .describe('Access role mappings to add. The API requires at least one.'),
+})
+    .describe('The body of an add-claimable-role-access-roles request.');
+//# sourceMappingURL=add-claimable-role-access-role-request-schema-v1.js.map

package/dist/esm/roles/v1/schemas/add-claimable-role-access-role-request-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-claimable-role-access-role-request-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/add-claimable-role-access-role-request-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC;KACvD,MAAM,CAAC;IACN,kEAAkE;IAClE,kBAAkB,EAAE,CAAC;SAClB,KAAK,CAAC,yBAAyB,CAAC;SAChC,GAAG,CAAC,CAAC,EAAE,8DAA8D,CAAC;SACtE,QAAQ,CAAC,6DAA6D,CAAC;CAC3E,CAAC;KACD,QAAQ,CAAC,yDAAyD,CAAC,CAAC"}

package/dist/esm/roles/v1/schemas/add-role-access-role-request-schema-v1.js

@@ -0,0 +1,13 @@
+import { z } from 'zod';
+import { AccessRoleMappingSchemaV1 } from './access-role-mapping-schema-v1';
+/** Zod schema for the body of an add-role-access-roles request. */
+export const AddRoleAccessRoleRequestSchemaV1 = z
+    .object({
+    /** Access role mappings to add. The API requires at least one. */
+    accessRoleMappings: z
+        .array(AccessRoleMappingSchemaV1)
+        .min(1, 'accessRoleMappings requires at least one access role mapping')
+        .describe('Access role mappings to add. The API requires at least one.'),
+})
+    .describe('The body of an add-role-access-roles request.');
+//# sourceMappingURL=add-role-access-role-request-schema-v1.js.map

package/dist/esm/roles/v1/schemas/add-role-access-role-request-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-role-access-role-request-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/add-role-access-role-request-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,mEAAmE;AACnE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC9C,MAAM,CAAC;IACN,kEAAkE;IAClE,kBAAkB,EAAE,CAAC;SAClB,KAAK,CAAC,yBAAyB,CAAC;SAChC,GAAG,CAAC,CAAC,EAAE,8DAA8D,CAAC;SACtE,QAAQ,CAAC,6DAA6D,CAAC;CAC3E,CAAC;KACD,QAAQ,CAAC,+CAA+C,CAAC,CAAC"}

package/dist/esm/roles/v1/schemas/api-access-role-assignment-schema-v1.js

@@ -0,0 +1,46 @@
+import { z } from 'zod';
+import { ApiAccessRoleSchemaV1 } from './api-access-role-schema-v1';
+import { ApiAccountSchemaV1 } from './api-account-schema-v1';
+import { ApiScopeSchemaV1 } from './api-scope-schema-v1';
+import { ApiSimpleClaimableRoleAssignmentSchemaV1 } from './api-simple-claimable-role-assignment-schema-v1';
+import { ApiSimpleRoleAssignmentSchemaV1 } from './api-simple-role-assignment-schema-v1';
+/** Zod schema for an access-role assignment returned from a system-centric query. */
+export const ApiAccessRoleAssignmentSchemaV1 = z
+    .object({
+    /** Unique identifier of the assignment. */
+    id: z.string().optional().describe('Unique identifier of the assignment.'),
+    /** Account the assignment was granted to. */
+    assignedTo: ApiAccountSchemaV1.optional().describe('Account the assignment was granted to.'),
+    /** Reason for the assignment. */
+    reason: z.string().optional().describe('Reason for the assignment.'),
+    /** The origin system that created this assignment, if any. */
+    source: z
+        .string()
+        .nullish()
+        .describe('The origin system that created this assignment, if any.'),
+    /** Identifier in the originating system, if any. */
+    externalIdentifier: z
+        .string()
+        .nullish()
+        .describe('Identifier in the originating system, if any.'),
+    /** Assignment type (e.g. "Direct" or "Inherited"). */
+    type: z.string().optional().describe('Assignment type (e.g. "Direct" or "Inherited").'),
+    /** Scope restricting where the assignment applies, unless it is global. */
+    scope: ApiScopeSchemaV1.nullish().describe('Scope restricting where the assignment applies, unless it is global.'),
+    /** Date from which the assignment is valid, if any. */
+    validFrom: z.string().nullish().describe('Date from which the assignment is valid, if any.'),
+    /** Date until which the assignment is valid, if any. */
+    validTo: z.string().nullish().describe('Date until which the assignment is valid, if any.'),
+    /** Whether the assignment is currently active. */
+    isActive: z.boolean().optional().describe('Whether the assignment is currently active.'),
+    /** Labels attached to the assignment. */
+    tags: z.array(z.string()).optional().describe('Labels attached to the assignment.'),
+    /** The access role this mapping or assignment grants. */
+    accessRole: ApiAccessRoleSchemaV1.optional().describe('The access role this mapping or assignment grants.'),
+    /** The role assignment this record originates from, if any. */
+    roleAssignment: ApiSimpleRoleAssignmentSchemaV1.nullish().describe('The role assignment this record originates from, if any.'),
+    /** The claimable role assignment this record originates from, if any. */
+    claimableRoleAssignment: ApiSimpleClaimableRoleAssignmentSchemaV1.nullish().describe('The claimable role assignment this record originates from, if any.'),
+})
+    .describe('An access-role assignment returned from a system-centric query.');
+//# sourceMappingURL=api-access-role-assignment-schema-v1.js.map

package/dist/esm/roles/v1/schemas/api-access-role-assignment-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-access-role-assignment-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/api-access-role-assignment-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,wCAAwC,EAAE,MAAM,kDAAkD,CAAC;AAC5G,OAAO,EAAE,+BAA+B,EAAE,MAAM,wCAAwC,CAAC;AAEzF,qFAAqF;AACrF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,2CAA2C;IAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC1E,6CAA6C;IAC7C,UAAU,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC5F,iCAAiC;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACpE,8DAA8D;IAC9D,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,OAAO,EAAE;SACT,QAAQ,CAAC,yDAAyD,CAAC;IACtE,oDAAoD;IACpD,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,OAAO,EAAE;SACT,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,sDAAsD;IACtD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACvF,2EAA2E;IAC3E,KAAK,EAAE,gBAAgB,CAAC,OAAO,EAAE,CAAC,QAAQ,CACxC,sEAAsE,CACvE;IACD,uDAAuD;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;IAC5F,wDAAwD;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAC3F,kDAAkD;IAClD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACxF,yCAAyC;IACzC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACnF,yDAAyD;IACzD,UAAU,EAAE,qBAAqB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACnD,oDAAoD,CACrD;IACD,+DAA+D;IAC/D,cAAc,EAAE,+BAA+B,CAAC,OAAO,EAAE,CAAC,QAAQ,CAChE,0DAA0D,CAC3D;IACD,yEAAyE;IACzE,uBAAuB,EAAE,wCAAwC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAClF,oEAAoE,CACrE;CACF,CAAC;KACD,QAAQ,CAAC,iEAAiE,CAAC,CAAC"}

package/dist/esm/roles/v1/schemas/api-access-role-mapping-schema-v1.js

@@ -0,0 +1,15 @@
+import { z } from 'zod';
+import { ApiAccessRoleSchemaV1 } from './api-access-role-schema-v1';
+/** Zod schema for an access role granted by a role. */
+export const ApiAccessRoleMappingSchemaV1 = z
+    .object({
+    /** The access role this mapping or assignment grants. */
+    accessRole: ApiAccessRoleSchemaV1.optional().describe('The access role this mapping or assignment grants.'),
+    /** Reason this access role is granted through the mapping. */
+    reason: z
+        .string()
+        .optional()
+        .describe('Reason this access role is granted through the mapping.'),
+})
+    .describe('An access role granted by a role.');
+//# sourceMappingURL=api-access-role-mapping-schema-v1.js.map

package/dist/esm/roles/v1/schemas/api-access-role-mapping-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-access-role-mapping-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/api-access-role-mapping-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,uDAAuD;AACvD,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,yDAAyD;IACzD,UAAU,EAAE,qBAAqB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACnD,oDAAoD,CACrD;IACD,8DAA8D;IAC9D,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,yDAAyD,CAAC;CACvE,CAAC;KACD,QAAQ,CAAC,mCAAmC,CAAC,CAAC"}

package/dist/esm/roles/v1/schemas/api-access-role-schema-v1.js

@@ -0,0 +1,16 @@
+import { z } from 'zod';
+import { ApiScopeTypeSchemaV1 } from './api-scope-type-schema-v1';
+/** Zod schema for an access role returned for a specific system. */
+export const ApiAccessRoleSchemaV1 = z
+    .object({
+    /** Unique identifier of the access role. */
+    id: z.string().optional().describe('Unique identifier of the access role.'),
+    /** Name of the access role. */
+    name: z.string().optional().describe('Name of the access role.'),
+    /** Description of the access role. */
+    description: z.string().optional().describe('Description of the access role.'),
+    /** The scope type this access role is scoped by, if it is scoped. */
+    scopeType: ApiScopeTypeSchemaV1.nullish().describe('The scope type this access role is scoped by, if it is scoped.'),
+})
+    .describe('An access role returned for a specific system.');
+//# sourceMappingURL=api-access-role-schema-v1.js.map

package/dist/esm/roles/v1/schemas/api-access-role-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-access-role-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/api-access-role-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,oEAAoE;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,4CAA4C;IAC5C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAC3E,+BAA+B;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAChE,sCAAsC;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC9E,qEAAqE;IACrE,SAAS,EAAE,oBAAoB,CAAC,OAAO,EAAE,CAAC,QAAQ,CAChD,gEAAgE,CACjE;CACF,CAAC;KACD,QAAQ,CAAC,gDAAgD,CAAC,CAAC"}

package/dist/esm/roles/v1/schemas/api-account-access-role-assignment-schema-v1.js

@@ -0,0 +1,46 @@
+import { z } from 'zod';
+import { ApiAccountAccessRoleSchemaV1 } from './api-account-access-role-schema-v1';
+import { ApiAccountSchemaV1 } from './api-account-schema-v1';
+import { ApiScopeSchemaV1 } from './api-scope-schema-v1';
+import { ApiSimpleClaimableRoleAssignmentSchemaV1 } from './api-simple-claimable-role-assignment-schema-v1';
+import { ApiSimpleRoleAssignmentSchemaV1 } from './api-simple-role-assignment-schema-v1';
+/** Zod schema for an access-role assignment returned from an account-centric query. */
+export const ApiAccountAccessRoleAssignmentSchemaV1 = z
+    .object({
+    /** Unique identifier of the assignment. */
+    id: z.string().optional().describe('Unique identifier of the assignment.'),
+    /** Account the assignment was granted to. */
+    assignedTo: ApiAccountSchemaV1.optional().describe('Account the assignment was granted to.'),
+    /** The access role this mapping or assignment grants. */
+    accessRole: ApiAccountAccessRoleSchemaV1.nullish().describe('The access role this mapping or assignment grants.'),
+    /** Assignment type (e.g. "Direct" or "Inherited"). */
+    type: z.string().optional().describe('Assignment type (e.g. "Direct" or "Inherited").'),
+    /** Scope restricting where the assignment applies, unless it is global. */
+    scope: ApiScopeSchemaV1.nullish().describe('Scope restricting where the assignment applies, unless it is global.'),
+    /** Reason for the assignment. */
+    reason: z.string().optional().describe('Reason for the assignment.'),
+    /** The origin system that created this assignment, if any. */
+    source: z
+        .string()
+        .nullish()
+        .describe('The origin system that created this assignment, if any.'),
+    /** Identifier in the originating system, if any. */
+    externalIdentifier: z
+        .string()
+        .nullish()
+        .describe('Identifier in the originating system, if any.'),
+    /** Date from which the assignment is valid, if any. */
+    validFrom: z.string().nullish().describe('Date from which the assignment is valid, if any.'),
+    /** Date until which the assignment is valid, if any. */
+    validTo: z.string().nullish().describe('Date until which the assignment is valid, if any.'),
+    /** Whether the assignment is currently active. */
+    isActive: z.boolean().optional().describe('Whether the assignment is currently active.'),
+    /** Labels attached to the assignment. */
+    tags: z.array(z.string()).optional().describe('Labels attached to the assignment.'),
+    /** The role assignment this record originates from, if any. */
+    roleAssignment: ApiSimpleRoleAssignmentSchemaV1.nullish().describe('The role assignment this record originates from, if any.'),
+    /** The claimable role assignment this record originates from, if any. */
+    claimableRoleAssignment: ApiSimpleClaimableRoleAssignmentSchemaV1.nullish().describe('The claimable role assignment this record originates from, if any.'),
+})
+    .describe('An access-role assignment returned from an account-centric query.');
+//# sourceMappingURL=api-account-access-role-assignment-schema-v1.js.map

package/dist/esm/roles/v1/schemas/api-account-access-role-assignment-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-account-access-role-assignment-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/api-account-access-role-assignment-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,wCAAwC,EAAE,MAAM,kDAAkD,CAAC;AAC5G,OAAO,EAAE,+BAA+B,EAAE,MAAM,wCAAwC,CAAC;AAEzF,uFAAuF;AACvF,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC;KACpD,MAAM,CAAC;IACN,2CAA2C;IAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC1E,6CAA6C;IAC7C,UAAU,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC5F,yDAAyD;IACzD,UAAU,EAAE,4BAA4B,CAAC,OAAO,EAAE,CAAC,QAAQ,CACzD,oDAAoD,CACrD;IACD,sDAAsD;IACtD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACvF,2EAA2E;IAC3E,KAAK,EAAE,gBAAgB,CAAC,OAAO,EAAE,CAAC,QAAQ,CACxC,sEAAsE,CACvE;IACD,iCAAiC;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACpE,8DAA8D;IAC9D,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,OAAO,EAAE;SACT,QAAQ,CAAC,yDAAyD,CAAC;IACtE,oDAAoD;IACpD,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,OAAO,EAAE;SACT,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,uDAAuD;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;IAC5F,wDAAwD;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAC3F,kDAAkD;IAClD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACxF,yCAAyC;IACzC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACnF,+DAA+D;IAC/D,cAAc,EAAE,+BAA+B,CAAC,OAAO,EAAE,CAAC,QAAQ,CAChE,0DAA0D,CAC3D;IACD,yEAAyE;IACzE,uBAAuB,EAAE,wCAAwC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAClF,oEAAoE,CACrE;CACF,CAAC;KACD,QAAQ,CAAC,mEAAmE,CAAC,CAAC"}

package/dist/esm/roles/v1/schemas/api-account-access-role-schema-v1.js

@@ -0,0 +1,9 @@
+import { z } from 'zod';
+import { ApiAccessRoleSchemaV1 } from './api-access-role-schema-v1';
+import { ApiSimpleSystemSchemaV1 } from './api-simple-system-schema-v1';
+/** Zod schema for the access role nested in an account access-role assignment. */
+export const ApiAccountAccessRoleSchemaV1 = ApiAccessRoleSchemaV1.and(z.object({
+    /** The system that owns this record, if any. */
+    system: ApiSimpleSystemSchemaV1.optional().describe('The system that owns this record, if any.'),
+})).describe('The access role nested in an account access-role assignment.');
+//# sourceMappingURL=api-account-access-role-schema-v1.js.map

package/dist/esm/roles/v1/schemas/api-account-access-role-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-account-access-role-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/api-account-access-role-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAExE,kFAAkF;AAClF,MAAM,CAAC,MAAM,4BAA4B,GAAG,qBAAqB,CAAC,GAAG,CACnE,CAAC,CAAC,MAAM,CAAC;IACP,gDAAgD;IAChD,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACjD,2CAA2C,CAC5C;CACF,CAAC,CACH,CAAC,QAAQ,CAAC,8DAA8D,CAAC,CAAC"}

package/dist/esm/roles/v1/schemas/api-account-active-access-role-assignment-schema-v1.js

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+import { ApiScopeValuesSchemaV1 } from './api-scope-values-schema-v1';
+/** Zod schema for a currently active access-role assignment returned for an account. */
+export const ApiAccountActiveAccessRoleAssignmentSchemaV1 = z
+    .object({
+    /** Name of the system the access role belongs to. */
+    systemName: z.string().optional().describe('Name of the system the access role belongs to.'),
+    /** Name of the access role. */
+    accessRoleName: z.string().optional().describe('Name of the access role.'),
+    /** Assignment type (e.g. "Direct" or "Inherited"). */
+    assignmentType: z
+        .string()
+        .optional()
+        .describe('Assignment type (e.g. "Direct" or "Inherited").'),
+    /** Scope restricting where the assignment applies, unless it is global. */
+    scope: ApiScopeValuesSchemaV1.nullish().describe('Scope restricting where the assignment applies, unless it is global.'),
+    /** Date and time the activation expires, if any. */
+    activeToDate: z.string().nullish().describe('Date and time the activation expires, if any.'),
+})
+    .describe('A currently active access-role assignment returned for an account.');
+//# sourceMappingURL=api-account-active-access-role-assignment-schema-v1.js.map

package/dist/esm/roles/v1/schemas/api-account-active-access-role-assignment-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-account-active-access-role-assignment-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/api-account-active-access-role-assignment-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,wFAAwF;AACxF,MAAM,CAAC,MAAM,4CAA4C,GAAG,CAAC;KAC1D,MAAM,CAAC;IACN,qDAAqD;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IAC5F,+BAA+B;IAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC1E,sDAAsD;IACtD,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,2EAA2E;IAC3E,KAAK,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC,QAAQ,CAC9C,sEAAsE,CACvE;IACD,oDAAoD;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;CAC7F,CAAC;KACD,QAAQ,CAAC,oEAAoE,CAAC,CAAC"}

package/dist/esm/roles/v1/schemas/api-account-claimable-role-assignment-schema-v1.js

@@ -0,0 +1,11 @@
+import { z } from 'zod';
+import { ApiAccountSchemaV1 } from './api-account-schema-v1';
+import { ApiClaimableRoleAssignmentSchemaV1 } from './api-claimable-role-assignment-schema-v1';
+/** Zod schema for a claimable-role assignment returned from an account-centric query. */
+export const ApiAccountClaimableRoleAssignmentSchemaV1 = ApiClaimableRoleAssignmentSchemaV1.and(z.object({
+    /** Account that created the record. */
+    createdBy: ApiAccountSchemaV1.optional().describe('Account that created the record.'),
+    /** Date and time this assignment was created. */
+    createdDate: z.string().optional().describe('Date and time this assignment was created.'),
+})).describe('A claimable-role assignment returned from an account-centric query.');
+//# sourceMappingURL=api-account-claimable-role-assignment-schema-v1.js.map

package/dist/esm/roles/v1/schemas/api-account-claimable-role-assignment-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-account-claimable-role-assignment-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/api-account-claimable-role-assignment-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,kCAAkC,EAAE,MAAM,2CAA2C,CAAC;AAE/F,yFAAyF;AACzF,MAAM,CAAC,MAAM,yCAAyC,GAAG,kCAAkC,CAAC,GAAG,CAC7F,CAAC,CAAC,MAAM,CAAC;IACP,uCAAuC;IACvC,SAAS,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACrF,iDAAiD;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;CAC1F,CAAC,CACH,CAAC,QAAQ,CAAC,qEAAqE,CAAC,CAAC"}

package/dist/esm/roles/v1/schemas/api-account-role-assignment-schema-v1.js

@@ -0,0 +1,11 @@
+import { z } from 'zod';
+import { ApiAccountSchemaV1 } from './api-account-schema-v1';
+import { ApiRoleAssignmentSchemaV1 } from './api-role-assignment-schema-v1';
+/** Zod schema for a role assignment returned from an account-centric query. */
+export const ApiAccountRoleAssignmentSchemaV1 = ApiRoleAssignmentSchemaV1.and(z.object({
+    /** Account that created the record. */
+    createdBy: ApiAccountSchemaV1.optional().describe('Account that created the record.'),
+    /** Date and time this assignment was created. */
+    createdDate: z.string().optional().describe('Date and time this assignment was created.'),
+})).describe('A role assignment returned from an account-centric query.');
+//# sourceMappingURL=api-account-role-assignment-schema-v1.js.map

package/dist/esm/roles/v1/schemas/api-account-role-assignment-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-account-role-assignment-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/api-account-role-assignment-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gCAAgC,GAAG,yBAAyB,CAAC,GAAG,CAC3E,CAAC,CAAC,MAAM,CAAC;IACP,uCAAuC;IACvC,SAAS,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACrF,iDAAiD;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;CAC1F,CAAC,CACH,CAAC,QAAQ,CAAC,2DAA2D,CAAC,CAAC"}

package/dist/esm/roles/v1/schemas/api-account-schema-v1.js

@@ -0,0 +1,25 @@
+import { z } from 'zod';
+/** Zod schema for a Fusion account reference embedded in Roles V2 responses. */
+export const ApiAccountSchemaV1 = z
+    .object({
+    /** Azure Active Directory unique object ID, if known. */
+    azureUniqueId: z
+        .string()
+        .nullish()
+        .describe('Azure Active Directory unique object ID, if known.'),
+    /** Email address, if available. */
+    mail: z.string().nullish().describe('Email address, if available.'),
+    /** Display name. */
+    displayName: z.string().optional().describe('Display name.'),
+    /** User principal name (UPN), if available. */
+    upn: z.string().nullish().describe('User principal name (UPN), if available.'),
+    /** Account type (e.g. Employee, Consultant, ExternalHire). */
+    accountType: z
+        .string()
+        .optional()
+        .describe('Account type (e.g. Employee, Consultant, ExternalHire).'),
+    /** Account classification, if available. */
+    accountClassification: z.string().nullish().describe('Account classification, if available.'),
+})
+    .describe('A Fusion account reference embedded in Roles V2 responses.');
+//# sourceMappingURL=api-account-schema-v1.js.map

package/dist/esm/roles/v1/schemas/api-account-schema-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-account-schema-v1.js","sourceRoot":"","sources":["../../../../../src/roles/v1/schemas/api-account-schema-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,yDAAyD;IACzD,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,OAAO,EAAE;SACT,QAAQ,CAAC,oDAAoD,CAAC;IACjE,mCAAmC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACnE,oBAAoB;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;IAC5D,+CAA+C;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IAC9E,8DAA8D;IAC9D,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,yDAAyD,CAAC;IACtE,4CAA4C;IAC5C,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CAC9F,CAAC;KACD,QAAQ,CAAC,4DAA4D,CAAC,CAAC"}