@flipdish/authorization 0.2.43-rc.1785501197 → 0.2.45-rc.1786458545

package/api.ts

@@ -23,6 +23,114 @@ import type { RequestArgs } from './base';
 // @ts-ignore
 import { BASE_PATH, COLLECTION_FORMATS, BaseAPI, RequiredError, operationServerMap } from './base';
 
+/**
+ * 
+ * @export
+ * @interface AccessRequestResponse
+ */
+export interface AccessRequestResponse {
+    /**
+     * 
+     * @type {string}
+     * @memberof AccessRequestResponse
+     */
+    'requestId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof AccessRequestResponse
+     */
+    'state': AccessRequestResponseStateEnum;
+    /**
+     * 
+     * @type {string}
+     * @memberof AccessRequestResponse
+     */
+    'requesterUserId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof AccessRequestResponse
+     */
+    'requesterEmail': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof AccessRequestResponse
+     */
+    'orgId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof AccessRequestResponse
+     */
+    'orgName': string;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof AccessRequestResponse
+     */
+    'propertyIds': Array<string>;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof AccessRequestResponse
+     */
+    'brandIds': Array<string>;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof AccessRequestResponse
+     */
+    'salesChannelIds': Array<string>;
+    /**
+     * 
+     * @type {string}
+     * @memberof AccessRequestResponse
+     */
+    'roleName': AccessRequestResponseRoleNameEnum;
+    /**
+     * 
+     * @type {string}
+     * @memberof AccessRequestResponse
+     */
+    'createdAt': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof AccessRequestResponse
+     */
+    'decidedAt'?: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof AccessRequestResponse
+     */
+    'decidedByUserId'?: string;
+}
+
+export const AccessRequestResponseStateEnum = {
+    Pending: 'Pending',
+    Approved: 'Approved',
+    Rejected: 'Rejected',
+    Expired: 'Expired'
+} as const;
+
+export type AccessRequestResponseStateEnum = typeof AccessRequestResponseStateEnum[keyof typeof AccessRequestResponseStateEnum];
+export const AccessRequestResponseRoleNameEnum = {
+    Owner: 'Owner',
+    PropertyOwner: 'PropertyOwner',
+    ManagedOwner: 'ManagedOwner',
+    Integrator: 'Integrator',
+    PropertyManager: 'PropertyManager',
+    FinanceManager: 'FinanceManager',
+    StaffMember: 'StaffMember',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+} as const;
+
+export type AccessRequestResponseRoleNameEnum = typeof AccessRequestResponseRoleNameEnum[keyof typeof AccessRequestResponseRoleNameEnum];
+
 /**
  * Request to check if a user is authorized to perform an action(s). If you pass in an array of permissions, you will receive a single allow / deny response (based on an AND of the result for each permission). For a granular response to multiple permissions, call the /authorize/batch endpoint. 
  * @export
@@ -476,6 +584,44 @@ export interface AuthorizationResponse {
      */
     'policyIds': Array<string>;
 }
+/**
+ * 
+ * @export
+ * @interface CreateInviteTokenRequest
+ */
+export interface CreateInviteTokenRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof CreateInviteTokenRequest
+     */
+    'storefrontId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof CreateInviteTokenRequest
+     */
+    'propertyId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof CreateInviteTokenRequest
+     */
+    'orgName': string;
+}
+/**
+ * 
+ * @export
+ * @interface CreateJoinRequest
+ */
+export interface CreateJoinRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof CreateJoinRequest
+     */
+    'token': string;
+}
 /**
  * 
  * @export
@@ -674,6 +820,114 @@ export interface GetAuthorizedPropertiesResponse {
      */
     'deniedResources': Array<AuthorizationBatchResponseAllowedResourcesInner>;
 }
+/**
+ * 
+ * @export
+ * @interface GetJoinAccessRequest200Response
+ */
+export interface GetJoinAccessRequest200Response {
+    /**
+     * 
+     * @type {string}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'requestId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'state': GetJoinAccessRequest200ResponseStateEnum;
+    /**
+     * 
+     * @type {string}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'requesterUserId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'requesterEmail': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'orgId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'orgName': string;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'propertyIds': Array<string>;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'brandIds': Array<string>;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'salesChannelIds': Array<string>;
+    /**
+     * 
+     * @type {string}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'roleName': GetJoinAccessRequest200ResponseRoleNameEnum;
+    /**
+     * 
+     * @type {string}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'createdAt': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'decidedAt'?: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof GetJoinAccessRequest200Response
+     */
+    'decidedByUserId'?: string;
+}
+
+export const GetJoinAccessRequest200ResponseStateEnum = {
+    Pending: 'Pending',
+    Approved: 'Approved',
+    Rejected: 'Rejected',
+    Expired: 'Expired'
+} as const;
+
+export type GetJoinAccessRequest200ResponseStateEnum = typeof GetJoinAccessRequest200ResponseStateEnum[keyof typeof GetJoinAccessRequest200ResponseStateEnum];
+export const GetJoinAccessRequest200ResponseRoleNameEnum = {
+    Owner: 'Owner',
+    PropertyOwner: 'PropertyOwner',
+    ManagedOwner: 'ManagedOwner',
+    Integrator: 'Integrator',
+    PropertyManager: 'PropertyManager',
+    FinanceManager: 'FinanceManager',
+    StaffMember: 'StaffMember',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+} as const;
+
+export type GetJoinAccessRequest200ResponseRoleNameEnum = typeof GetJoinAccessRequest200ResponseRoleNameEnum[keyof typeof GetJoinAccessRequest200ResponseRoleNameEnum];
+
 /**
  * Successful user permissions retrieval response
  * @export
@@ -729,6 +983,76 @@ export type GetUserPermissionsSuccessResponseResourcesValueResourceTypeEnum = ty
  */
 export interface GetUserPermissionsSuccessResponseResourcesValueResourceId {
 }
+/**
+ * 
+ * @export
+ * @interface InviteTokenResponse
+ */
+export interface InviteTokenResponse {
+    /**
+     * 
+     * @type {string}
+     * @memberof InviteTokenResponse
+     */
+    'tokenId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof InviteTokenResponse
+     */
+    'joinUrl': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof InviteTokenResponse
+     */
+    'expiresAt': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof InviteTokenResponse
+     */
+    'orgId': string;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof InviteTokenResponse
+     */
+    'brandIds': Array<string>;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof InviteTokenResponse
+     */
+    'propertyIds': Array<string>;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof InviteTokenResponse
+     */
+    'salesChannelIds': Array<string>;
+    /**
+     * 
+     * @type {string}
+     * @memberof InviteTokenResponse
+     */
+    'roleName': InviteTokenResponseRoleNameEnum;
+}
+
+export const InviteTokenResponseRoleNameEnum = {
+    Owner: 'Owner',
+    PropertyOwner: 'PropertyOwner',
+    ManagedOwner: 'ManagedOwner',
+    Integrator: 'Integrator',
+    PropertyManager: 'PropertyManager',
+    FinanceManager: 'FinanceManager',
+    StaffMember: 'StaffMember',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+} as const;
+
+export type InviteTokenResponseRoleNameEnum = typeof InviteTokenResponseRoleNameEnum[keyof typeof InviteTokenResponseRoleNameEnum];
+
 /**
  * 
  * @export
@@ -775,6 +1099,45 @@ export interface IsInRoleResponse {
      */
     'authorized': boolean;
 }
+/**
+ * 
+ * @export
+ * @interface JoinAccessErrorResponse
+ */
+export interface JoinAccessErrorResponse {
+    /**
+     * 
+     * @type {string}
+     * @memberof JoinAccessErrorResponse
+     */
+    'code': JoinAccessErrorResponseCodeEnum;
+    /**
+     * 
+     * @type {string}
+     * @memberof JoinAccessErrorResponse
+     */
+    'message': string;
+}
+
+export const JoinAccessErrorResponseCodeEnum = {
+    AlreadyMember: 'ALREADY_MEMBER'
+} as const;
+
+export type JoinAccessErrorResponseCodeEnum = typeof JoinAccessErrorResponseCodeEnum[keyof typeof JoinAccessErrorResponseCodeEnum];
+
+/**
+ * 
+ * @export
+ * @interface ListJoinRequestsResponse
+ */
+export interface ListJoinRequestsResponse {
+    /**
+     * 
+     * @type {Array<GetJoinAccessRequest200Response>}
+     * @memberof ListJoinRequestsResponse
+     */
+    'items': Array<GetJoinAccessRequest200Response>;
+}
 /**
  * 
  * @export
@@ -2594,6 +2957,528 @@ export class ConfigurationDataApi extends BaseAPI {
 
 
 
+/**
+ * JoinAccessApi - axios parameter creator
+ * @export
+ */
+export const JoinAccessApiAxiosParamCreator = function (configuration?: Configuration) {
+    return {
+        /**
+         * Grants the role stored on the access request (copied from the invite token at create time) via AuthZ V2 role assignment (source join).
+         * @summary Accept a pending join access request
+         * @param {string} orgId 
+         * @param {string} requestId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        acceptJoinAccessRequest: async (orgId: string, requestId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('acceptJoinAccessRequest', 'orgId', orgId)
+            // verify required parameter 'requestId' is not null or undefined
+            assertParamExists('acceptJoinAccessRequest', 'requestId', requestId)
+            const localVarPath = `/orgs/{orgId}/joinRequests/{requestId}/accept`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"requestId"}}`, encodeURIComponent(String(requestId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication ApiKeyAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Mints an opaque invite token after validating the RMS terminal passport. Call again when a previous token expires to get a new one.
+         * @summary Create an invite token
+         * @param {string} orgId 
+         * @param {CreateInviteTokenRequest} [createInviteTokenRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        createInviteToken: async (orgId: string, createInviteTokenRequest?: CreateInviteTokenRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('createInviteToken', 'orgId', orgId)
+            const localVarPath = `/orgs/{orgId}/inviteTokens`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication ApiKeyAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(createInviteTokenRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Validates the opaque invite token and creates (or returns) a pending AccessRequest for the property/role encoded on the token.
+         * @summary Submit a join access request from an invite token
+         * @param {string} orgId 
+         * @param {CreateJoinRequest} [createJoinRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        createJoinAccessRequest: async (orgId: string, createJoinRequest?: CreateJoinRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('createJoinAccessRequest', 'orgId', orgId)
+            const localVarPath = `/orgs/{orgId}/joinRequests`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication ApiKeyAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(createJoinRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Returns request status for the authenticated requester only. Owners should use the list endpoint.
+         * @summary Get a join access request by id
+         * @param {string} orgId 
+         * @param {string} requestId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getJoinAccessRequest: async (orgId: string, requestId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('getJoinAccessRequest', 'orgId', orgId)
+            // verify required parameter 'requestId' is not null or undefined
+            assertParamExists('getJoinAccessRequest', 'requestId', requestId)
+            const localVarPath = `/orgs/{orgId}/joinRequests/{requestId}`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"requestId"}}`, encodeURIComponent(String(requestId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication ApiKeyAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Returns pending AccessRequests for an org. Optional propertyId/brandId filters. Requires ViewTeammates on orgId.
+         * @summary List pending join requests for an organization
+         * @param {string} orgId 
+         * @param {string} [propertyId] 
+         * @param {string} [brandId] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listJoinAccessRequests: async (orgId: string, propertyId?: string, brandId?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('listJoinAccessRequests', 'orgId', orgId)
+            const localVarPath = `/orgs/{orgId}/joinRequests`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication ApiKeyAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (propertyId !== undefined) {
+                localVarQueryParameter['propertyId'] = propertyId;
+            }
+
+            if (brandId !== undefined) {
+                localVarQueryParameter['brandId'] = brandId;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Rejects a pending AccessRequest without granting access.
+         * @summary Reject a pending join access request
+         * @param {string} orgId 
+         * @param {string} requestId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        rejectJoinAccessRequest: async (orgId: string, requestId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('rejectJoinAccessRequest', 'orgId', orgId)
+            // verify required parameter 'requestId' is not null or undefined
+            assertParamExists('rejectJoinAccessRequest', 'requestId', requestId)
+            const localVarPath = `/orgs/{orgId}/joinRequests/{requestId}/reject`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"requestId"}}`, encodeURIComponent(String(requestId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication ApiKeyAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+    }
+};
+
+/**
+ * JoinAccessApi - functional programming interface
+ * @export
+ */
+export const JoinAccessApiFp = function(configuration?: Configuration) {
+    const localVarAxiosParamCreator = JoinAccessApiAxiosParamCreator(configuration)
+    return {
+        /**
+         * Grants the role stored on the access request (copied from the invite token at create time) via AuthZ V2 role assignment (source join).
+         * @summary Accept a pending join access request
+         * @param {string} orgId 
+         * @param {string} requestId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async acceptJoinAccessRequest(orgId: string, requestId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<GetJoinAccessRequest200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.acceptJoinAccessRequest(orgId, requestId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['JoinAccessApi.acceptJoinAccessRequest']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Mints an opaque invite token after validating the RMS terminal passport. Call again when a previous token expires to get a new one.
+         * @summary Create an invite token
+         * @param {string} orgId 
+         * @param {CreateInviteTokenRequest} [createInviteTokenRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async createInviteToken(orgId: string, createInviteTokenRequest?: CreateInviteTokenRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<InviteTokenResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.createInviteToken(orgId, createInviteTokenRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['JoinAccessApi.createInviteToken']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Validates the opaque invite token and creates (or returns) a pending AccessRequest for the property/role encoded on the token.
+         * @summary Submit a join access request from an invite token
+         * @param {string} orgId 
+         * @param {CreateJoinRequest} [createJoinRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async createJoinAccessRequest(orgId: string, createJoinRequest?: CreateJoinRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessRequestResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.createJoinAccessRequest(orgId, createJoinRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['JoinAccessApi.createJoinAccessRequest']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Returns request status for the authenticated requester only. Owners should use the list endpoint.
+         * @summary Get a join access request by id
+         * @param {string} orgId 
+         * @param {string} requestId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getJoinAccessRequest(orgId: string, requestId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<GetJoinAccessRequest200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getJoinAccessRequest(orgId, requestId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['JoinAccessApi.getJoinAccessRequest']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Returns pending AccessRequests for an org. Optional propertyId/brandId filters. Requires ViewTeammates on orgId.
+         * @summary List pending join requests for an organization
+         * @param {string} orgId 
+         * @param {string} [propertyId] 
+         * @param {string} [brandId] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listJoinAccessRequests(orgId: string, propertyId?: string, brandId?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ListJoinRequestsResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listJoinAccessRequests(orgId, propertyId, brandId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['JoinAccessApi.listJoinAccessRequests']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Rejects a pending AccessRequest without granting access.
+         * @summary Reject a pending join access request
+         * @param {string} orgId 
+         * @param {string} requestId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async rejectJoinAccessRequest(orgId: string, requestId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<GetJoinAccessRequest200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.rejectJoinAccessRequest(orgId, requestId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['JoinAccessApi.rejectJoinAccessRequest']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+    }
+};
+
+/**
+ * JoinAccessApi - factory interface
+ * @export
+ */
+export const JoinAccessApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
+    const localVarFp = JoinAccessApiFp(configuration)
+    return {
+        /**
+         * Grants the role stored on the access request (copied from the invite token at create time) via AuthZ V2 role assignment (source join).
+         * @summary Accept a pending join access request
+         * @param {string} orgId 
+         * @param {string} requestId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        acceptJoinAccessRequest(orgId: string, requestId: string, options?: RawAxiosRequestConfig): AxiosPromise<GetJoinAccessRequest200Response> {
+            return localVarFp.acceptJoinAccessRequest(orgId, requestId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Mints an opaque invite token after validating the RMS terminal passport. Call again when a previous token expires to get a new one.
+         * @summary Create an invite token
+         * @param {string} orgId 
+         * @param {CreateInviteTokenRequest} [createInviteTokenRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        createInviteToken(orgId: string, createInviteTokenRequest?: CreateInviteTokenRequest, options?: RawAxiosRequestConfig): AxiosPromise<InviteTokenResponse> {
+            return localVarFp.createInviteToken(orgId, createInviteTokenRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Validates the opaque invite token and creates (or returns) a pending AccessRequest for the property/role encoded on the token.
+         * @summary Submit a join access request from an invite token
+         * @param {string} orgId 
+         * @param {CreateJoinRequest} [createJoinRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        createJoinAccessRequest(orgId: string, createJoinRequest?: CreateJoinRequest, options?: RawAxiosRequestConfig): AxiosPromise<AccessRequestResponse> {
+            return localVarFp.createJoinAccessRequest(orgId, createJoinRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Returns request status for the authenticated requester only. Owners should use the list endpoint.
+         * @summary Get a join access request by id
+         * @param {string} orgId 
+         * @param {string} requestId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getJoinAccessRequest(orgId: string, requestId: string, options?: RawAxiosRequestConfig): AxiosPromise<GetJoinAccessRequest200Response> {
+            return localVarFp.getJoinAccessRequest(orgId, requestId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Returns pending AccessRequests for an org. Optional propertyId/brandId filters. Requires ViewTeammates on orgId.
+         * @summary List pending join requests for an organization
+         * @param {string} orgId 
+         * @param {string} [propertyId] 
+         * @param {string} [brandId] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listJoinAccessRequests(orgId: string, propertyId?: string, brandId?: string, options?: RawAxiosRequestConfig): AxiosPromise<ListJoinRequestsResponse> {
+            return localVarFp.listJoinAccessRequests(orgId, propertyId, brandId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Rejects a pending AccessRequest without granting access.
+         * @summary Reject a pending join access request
+         * @param {string} orgId 
+         * @param {string} requestId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        rejectJoinAccessRequest(orgId: string, requestId: string, options?: RawAxiosRequestConfig): AxiosPromise<GetJoinAccessRequest200Response> {
+            return localVarFp.rejectJoinAccessRequest(orgId, requestId, options).then((request) => request(axios, basePath));
+        },
+    };
+};
+
+/**
+ * JoinAccessApi - object-oriented interface
+ * @export
+ * @class JoinAccessApi
+ * @extends {BaseAPI}
+ */
+export class JoinAccessApi extends BaseAPI {
+    /**
+     * Grants the role stored on the access request (copied from the invite token at create time) via AuthZ V2 role assignment (source join).
+     * @summary Accept a pending join access request
+     * @param {string} orgId 
+     * @param {string} requestId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof JoinAccessApi
+     */
+    public acceptJoinAccessRequest(orgId: string, requestId: string, options?: RawAxiosRequestConfig) {
+        return JoinAccessApiFp(this.configuration).acceptJoinAccessRequest(orgId, requestId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Mints an opaque invite token after validating the RMS terminal passport. Call again when a previous token expires to get a new one.
+     * @summary Create an invite token
+     * @param {string} orgId 
+     * @param {CreateInviteTokenRequest} [createInviteTokenRequest] 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof JoinAccessApi
+     */
+    public createInviteToken(orgId: string, createInviteTokenRequest?: CreateInviteTokenRequest, options?: RawAxiosRequestConfig) {
+        return JoinAccessApiFp(this.configuration).createInviteToken(orgId, createInviteTokenRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Validates the opaque invite token and creates (or returns) a pending AccessRequest for the property/role encoded on the token.
+     * @summary Submit a join access request from an invite token
+     * @param {string} orgId 
+     * @param {CreateJoinRequest} [createJoinRequest] 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof JoinAccessApi
+     */
+    public createJoinAccessRequest(orgId: string, createJoinRequest?: CreateJoinRequest, options?: RawAxiosRequestConfig) {
+        return JoinAccessApiFp(this.configuration).createJoinAccessRequest(orgId, createJoinRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Returns request status for the authenticated requester only. Owners should use the list endpoint.
+     * @summary Get a join access request by id
+     * @param {string} orgId 
+     * @param {string} requestId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof JoinAccessApi
+     */
+    public getJoinAccessRequest(orgId: string, requestId: string, options?: RawAxiosRequestConfig) {
+        return JoinAccessApiFp(this.configuration).getJoinAccessRequest(orgId, requestId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Returns pending AccessRequests for an org. Optional propertyId/brandId filters. Requires ViewTeammates on orgId.
+     * @summary List pending join requests for an organization
+     * @param {string} orgId 
+     * @param {string} [propertyId] 
+     * @param {string} [brandId] 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof JoinAccessApi
+     */
+    public listJoinAccessRequests(orgId: string, propertyId?: string, brandId?: string, options?: RawAxiosRequestConfig) {
+        return JoinAccessApiFp(this.configuration).listJoinAccessRequests(orgId, propertyId, brandId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Rejects a pending AccessRequest without granting access.
+     * @summary Reject a pending join access request
+     * @param {string} orgId 
+     * @param {string} requestId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof JoinAccessApi
+     */
+    public rejectJoinAccessRequest(orgId: string, requestId: string, options?: RawAxiosRequestConfig) {
+        return JoinAccessApiFp(this.configuration).rejectJoinAccessRequest(orgId, requestId, options).then((request) => request(this.axios, this.basePath));
+    }
+}
+
+
+
 /**
  * RoleAssignmentApi - axios parameter creator
  * @export