@flipdish/authorization 0.2.57-rc.1789048982 → 0.2.58-rc.1790855819

package/api.ts

@@ -51,6 +51,7 @@ export const AcceptJoinRequestRoleNameEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 } as const;
@@ -275,6 +276,7 @@ export const AccessRequestResponseRoleNameEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 } as const;
@@ -1379,6 +1381,7 @@ export const GetJoinAccessRequest200ResponseRoleNameEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 } as const;
@@ -1447,6 +1450,86 @@ export type GetUserPermissionsSuccessResponseResourcesValueResourceTypeEnum = ty
  */
 export interface GetUserPermissionsSuccessResponseResourcesValueResourceId {
 }
+/**
+ * Successful user roles retrieval response
+ * @export
+ * @interface GetUserRolesSuccessResponse
+ */
+export interface GetUserRolesSuccessResponse {
+    /**
+     * 
+     * @type {GetUserRolesSuccessResponseOrgId}
+     * @memberof GetUserRolesSuccessResponse
+     */
+    'orgId': GetUserRolesSuccessResponseOrgId;
+    /**
+     * List of roles that are assigned to the user in the org
+     * @type {Array<string>}
+     * @memberof GetUserRolesSuccessResponse
+     */
+    'roles': Array<GetUserRolesSuccessResponseRolesEnum>;
+    /**
+     * Optional permission set keys applied to the roles
+     * @type {Array<string>}
+     * @memberof GetUserRolesSuccessResponse
+     */
+    'optionalPermissionSetKeys'?: Array<string>;
+    /**
+     * Property IDs, or * for all properties, the roles are scoped to
+     * @type {Array<GetJoinAccessRequest200ResponsePropertyIdsInner>}
+     * @memberof GetUserRolesSuccessResponse
+     */
+    'properties'?: Array<GetJoinAccessRequest200ResponsePropertyIdsInner>;
+    /**
+     * Brand IDs, or * for all brands, the roles are scoped to
+     * @type {Array<GetUserRolesSuccessResponseBrandsInner>}
+     * @memberof GetUserRolesSuccessResponse
+     */
+    'brands'?: Array<GetUserRolesSuccessResponseBrandsInner>;
+    /**
+     * Sales channel IDs, or * for all sales channels, the roles are scoped to
+     * @type {Array<GetUserRolesSuccessResponseSalesChannelsInner>}
+     * @memberof GetUserRolesSuccessResponse
+     */
+    'salesChannels'?: Array<GetUserRolesSuccessResponseSalesChannelsInner>;
+}
+
+export const GetUserRolesSuccessResponseRolesEnum = {
+    Owner: 'Owner',
+    PropertyOwner: 'PropertyOwner',
+    ManagedOwner: 'ManagedOwner',
+    Integrator: 'Integrator',
+    PropertyManager: 'PropertyManager',
+    FinanceManager: 'FinanceManager',
+    StaffMember: 'StaffMember',
+    Courier: 'Courier',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+} as const;
+
+export type GetUserRolesSuccessResponseRolesEnum = typeof GetUserRolesSuccessResponseRolesEnum[keyof typeof GetUserRolesSuccessResponseRolesEnum];
+
+/**
+ * 
+ * @export
+ * @interface GetUserRolesSuccessResponseBrandsInner
+ */
+export interface GetUserRolesSuccessResponseBrandsInner {
+}
+/**
+ * ID of the org the roles are assigned in
+ * @export
+ * @interface GetUserRolesSuccessResponseOrgId
+ */
+export interface GetUserRolesSuccessResponseOrgId {
+}
+/**
+ * 
+ * @export
+ * @interface GetUserRolesSuccessResponseSalesChannelsInner
+ */
+export interface GetUserRolesSuccessResponseSalesChannelsInner {
+}
 /**
  * 
  * @export
@@ -1790,6 +1873,7 @@ export const InviteTokenResponseRoleNameEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 } as const;
@@ -1868,6 +1952,19 @@ export const JoinAccessErrorResponseCodeEnum = {
 
 export type JoinAccessErrorResponseCodeEnum = typeof JoinAccessErrorResponseCodeEnum[keyof typeof JoinAccessErrorResponseCodeEnum];
 
+/**
+ * Caller removed from org
+ * @export
+ * @interface LeaveOrgSuccessResponse
+ */
+export interface LeaveOrgSuccessResponse {
+    /**
+     * 
+     * @type {string}
+     * @memberof LeaveOrgSuccessResponse
+     */
+    'message': string;
+}
 /**
  * An org\'s expired timed access grants, most recent first
  * @export
@@ -1913,6 +2010,25 @@ export interface ListJoinRequestsResponse {
      */
     'items': Array<GetJoinAccessRequest200Response>;
 }
+/**
+ * The named roles held by a user
+ * @export
+ * @interface ListNamedRolesResponse
+ */
+export interface ListNamedRolesResponse {
+    /**
+     * 
+     * @type {string}
+     * @memberof ListNamedRolesResponse
+     */
+    'userId': string;
+    /**
+     * The named roles currently held by this user
+     * @type {Array<RoleNames>}
+     * @memberof ListNamedRolesResponse
+     */
+    'roles': Array<RoleNames>;
+}
 /**
  * 
  * @export
@@ -1921,10 +2037,10 @@ export interface ListJoinRequestsResponse {
 export interface ListOrgRolesSuccessResponseValue {
     /**
      * 
-     * @type {ListOrgRolesSuccessResponseValueOrgId}
+     * @type {GetUserRolesSuccessResponseOrgId}
      * @memberof ListOrgRolesSuccessResponseValue
      */
-    'orgId': ListOrgRolesSuccessResponseValueOrgId;
+    'orgId': GetUserRolesSuccessResponseOrgId;
     /**
      * List of roles that are assigned to the user in the org
      * @type {Array<string>}
@@ -1945,16 +2061,16 @@ export interface ListOrgRolesSuccessResponseValue {
     'properties'?: Array<GetJoinAccessRequest200ResponsePropertyIdsInner>;
     /**
      * Brand IDs, or * for all brands, the roles are scoped to
-     * @type {Array<ListOrgRolesSuccessResponseValueBrandsInner>}
+     * @type {Array<GetUserRolesSuccessResponseBrandsInner>}
      * @memberof ListOrgRolesSuccessResponseValue
      */
-    'brands'?: Array<ListOrgRolesSuccessResponseValueBrandsInner>;
+    'brands'?: Array<GetUserRolesSuccessResponseBrandsInner>;
     /**
      * Sales channel IDs, or * for all sales channels, the roles are scoped to
-     * @type {Array<ListOrgRolesSuccessResponseValueSalesChannelsInner>}
+     * @type {Array<GetUserRolesSuccessResponseSalesChannelsInner>}
      * @memberof ListOrgRolesSuccessResponseValue
      */
-    'salesChannels'?: Array<ListOrgRolesSuccessResponseValueSalesChannelsInner>;
+    'salesChannels'?: Array<GetUserRolesSuccessResponseSalesChannelsInner>;
 }
 
 export const ListOrgRolesSuccessResponseValueRolesEnum = {
@@ -1965,33 +2081,13 @@ export const ListOrgRolesSuccessResponseValueRolesEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 } as const;
 
 export type ListOrgRolesSuccessResponseValueRolesEnum = typeof ListOrgRolesSuccessResponseValueRolesEnum[keyof typeof ListOrgRolesSuccessResponseValueRolesEnum];
 
-/**
- * 
- * @export
- * @interface ListOrgRolesSuccessResponseValueBrandsInner
- */
-export interface ListOrgRolesSuccessResponseValueBrandsInner {
-}
-/**
- * ID of the org the roles are assigned in
- * @export
- * @interface ListOrgRolesSuccessResponseValueOrgId
- */
-export interface ListOrgRolesSuccessResponseValueOrgId {
-}
-/**
- * 
- * @export
- * @interface ListOrgRolesSuccessResponseValueSalesChannelsInner
- */
-export interface ListOrgRolesSuccessResponseValueSalesChannelsInner {
-}
 /**
  * Successful permissions retrieval response
  * @export
@@ -2065,6 +2161,7 @@ export const ListRoleDefinitionsSuccessResponseRolesInnerNameEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 } as const;
@@ -2183,6 +2280,7 @@ export const Permissions = {
     CreateTeammatePropertyManager: 'CreateTeammatePropertyManager',
     CreateTeammatePropertyOwner: 'CreateTeammatePropertyOwner',
     CreateTeammateStaffMember: 'CreateTeammateStaffMember',
+    CreateTeammateCourier: 'CreateTeammateCourier',
     ViewApmConfigurations: 'ViewApmConfigurations',
     EditApmConfigurations: 'EditApmConfigurations',
     ViewCampaignsConfigurations: 'ViewCampaignsConfigurations',
@@ -2226,6 +2324,7 @@ export const Permissions = {
     CreateGlobalApiKey: 'CreateGlobalAPIKey',
     ListGlobalApiKeys: 'ListGlobalAPIKeys',
     BlockPrincipalAccess: 'BlockPrincipalAccess',
+    ListPrincipalOrgs: 'ListPrincipalOrgs',
     CreateMenu: 'CreateMenu',
     UpdateMenu: 'UpdateMenu',
     DeleteMenu: 'DeleteMenu',
@@ -2396,6 +2495,7 @@ export const Permissions = {
     ViewWebhooks: 'ViewWebhooks',
     EditWebhooks: 'EditWebhooks',
     ViewOwnPermissions: 'ViewOwnPermissions',
+    LeaveOrg: 'LeaveOrg',
     CreatePosSale: 'CreatePosSale',
     ComplimentPosItems: 'ComplimentPosItems',
     ApplyPosDiscounts: 'ApplyPosDiscounts',
@@ -2416,6 +2516,7 @@ export const Permissions = {
     SnoozePosItem: 'SnoozePosItem',
     SnoozePosItemIndefinitely: 'SnoozePosItemIndefinitely',
     SnoozePosProperty: 'SnoozePosProperty',
+    SendSmsToCustomers: 'SendSmsToCustomers',
     RoleAdmin: 'RoleAdmin',
     RoleFactory: 'RoleFactory',
     RoleAuthDeveloper: 'RoleAuthDeveloper',
@@ -2478,6 +2579,25 @@ export const PrincipalInOrgTypeEnum = {
 
 export type PrincipalInOrgTypeEnum = typeof PrincipalInOrgTypeEnum[keyof typeof PrincipalInOrgTypeEnum];
 
+/**
+ * A principal and its org memberships, read straight from the principals store. These are the orgs the principal holds permission assignments in, which is a superset of the orgs any given action is allowed on. No policy evaluation is performed.
+ * @export
+ * @interface PrincipalOrgsResponse
+ */
+export interface PrincipalOrgsResponse {
+    /**
+     * 
+     * @type {AuthorizationRequestPrincipal}
+     * @memberof PrincipalOrgsResponse
+     */
+    'principal': AuthorizationRequestPrincipal;
+    /**
+     * Org ids the principal holds permission assignments in, ascending
+     * @type {Array<string>}
+     * @memberof PrincipalOrgsResponse
+     */
+    'orgIds': Array<string>;
+}
 /**
  * Principals in org
  * @export
@@ -2745,16 +2865,16 @@ export interface RoleAssignmentRequestBody {
     'properties'?: Array<GetJoinAccessRequest200ResponsePropertyIdsInner>;
     /**
      * Brand resource ids (e.g. b123) when scoped to brands
-     * @type {Array<ListOrgRolesSuccessResponseValueBrandsInner>}
+     * @type {Array<GetUserRolesSuccessResponseBrandsInner>}
      * @memberof RoleAssignmentRequestBody
      */
-    'brands'?: Array<ListOrgRolesSuccessResponseValueBrandsInner>;
+    'brands'?: Array<GetUserRolesSuccessResponseBrandsInner>;
     /**
      * Sales channel resource ids (e.g. sc123) when scoped to sales channels
-     * @type {Array<ListOrgRolesSuccessResponseValueSalesChannelsInner>}
+     * @type {Array<GetUserRolesSuccessResponseSalesChannelsInner>}
      * @memberof RoleAssignmentRequestBody
      */
-    'salesChannels'?: Array<ListOrgRolesSuccessResponseValueSalesChannelsInner>;
+    'salesChannels'?: Array<GetUserRolesSuccessResponseSalesChannelsInner>;
     /**
      * Optional permission set keys to apply to this role assignment
      * @type {Array<string>}
@@ -2777,6 +2897,7 @@ export const RoleAssignmentRequestBodyRoleNameEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 } as const;
@@ -5428,6 +5549,43 @@ export const NamedRolesApiAxiosParamCreator = function (configuration?: Configur
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+         * @summary List named roles for a user
+         * @param {string} principalId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listNamedRoles: async (principalId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'principalId' is not null or undefined
+            assertParamExists('listNamedRoles', 'principalId', principalId)
+            const localVarPath = `/namedRoles/{principalId}`
+                .replace(`{${"principalId"}}`, encodeURIComponent(String(principalId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication ApiKeyAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
          * @summary Remove a named role
@@ -5488,6 +5646,19 @@ export const NamedRolesApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['NamedRolesApi.applyNamedRole']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+         * @summary List named roles for a user
+         * @param {string} principalId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listNamedRoles(principalId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ListNamedRolesResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listNamedRoles(principalId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['NamedRolesApi.listNamedRoles']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
          * @summary Remove a named role
@@ -5521,6 +5692,16 @@ export const NamedRolesApiFactory = function (configuration?: Configuration, bas
         applyNamedRole(applyNamedRoleRequestBody?: ApplyNamedRoleRequestBody, options?: RawAxiosRequestConfig): AxiosPromise<NamedRoleAssignmentResponse> {
             return localVarFp.applyNamedRole(applyNamedRoleRequestBody, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+         * @summary List named roles for a user
+         * @param {string} principalId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listNamedRoles(principalId: string, options?: RawAxiosRequestConfig): AxiosPromise<ListNamedRolesResponse> {
+            return localVarFp.listNamedRoles(principalId, options).then((request) => request(axios, basePath));
+        },
         /**
          * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
          * @summary Remove a named role
@@ -5553,6 +5734,18 @@ export class NamedRolesApi extends BaseAPI {
         return NamedRolesApiFp(this.configuration).applyNamedRole(applyNamedRoleRequestBody, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+     * @summary List named roles for a user
+     * @param {string} principalId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof NamedRolesApi
+     */
+    public listNamedRoles(principalId: string, options?: RawAxiosRequestConfig) {
+        return NamedRolesApiFp(this.configuration).listNamedRoles(principalId, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
      * @summary Remove a named role
@@ -5929,6 +6122,117 @@ export const ListPrincipalAccessBlocksTypeEnum = {
 export type ListPrincipalAccessBlocksTypeEnum = typeof ListPrincipalAccessBlocksTypeEnum[keyof typeof ListPrincipalAccessBlocksTypeEnum];
 
 
+/**
+ * PrincipalsApi - axios parameter creator
+ * @export
+ */
+export const PrincipalsApiAxiosParamCreator = function (configuration?: Configuration) {
+    return {
+        /**
+         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+         * @summary Get principal org memberships
+         * @param {string} principalId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getPrincipalOrgs: async (principalId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'principalId' is not null or undefined
+            assertParamExists('getPrincipalOrgs', 'principalId', principalId)
+            const localVarPath = `/principals/{principalId}/orgs`
+                .replace(`{${"principalId"}}`, encodeURIComponent(String(principalId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication ApiKeyAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+    }
+};
+
+/**
+ * PrincipalsApi - functional programming interface
+ * @export
+ */
+export const PrincipalsApiFp = function(configuration?: Configuration) {
+    const localVarAxiosParamCreator = PrincipalsApiAxiosParamCreator(configuration)
+    return {
+        /**
+         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+         * @summary Get principal org memberships
+         * @param {string} principalId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<PrincipalOrgsResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getPrincipalOrgs(principalId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['PrincipalsApi.getPrincipalOrgs']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+    }
+};
+
+/**
+ * PrincipalsApi - factory interface
+ * @export
+ */
+export const PrincipalsApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
+    const localVarFp = PrincipalsApiFp(configuration)
+    return {
+        /**
+         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+         * @summary Get principal org memberships
+         * @param {string} principalId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig): AxiosPromise<PrincipalOrgsResponse> {
+            return localVarFp.getPrincipalOrgs(principalId, options).then((request) => request(axios, basePath));
+        },
+    };
+};
+
+/**
+ * PrincipalsApi - object-oriented interface
+ * @export
+ * @class PrincipalsApi
+ * @extends {BaseAPI}
+ */
+export class PrincipalsApi extends BaseAPI {
+    /**
+     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+     * @summary Get principal org memberships
+     * @param {string} principalId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof PrincipalsApi
+     */
+    public getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig) {
+        return PrincipalsApiFp(this.configuration).getPrincipalOrgs(principalId, options).then((request) => request(this.axios, this.basePath));
+    }
+}
+
+
+
 /**
  * RoleAssignmentApi - axios parameter creator
  * @export
@@ -5976,6 +6280,43 @@ export const RoleAssignmentApiAxiosParamCreator = function (configuration?: Conf
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * Removes the caller from the org: revokes all of their V2 role assignments, reconciles away their policies, and removes them from the org user list. Does not change their Zeus teammate record.
+         * @summary Leave org
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        leaveOrg: async (orgId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('leaveOrg', 'orgId', orgId)
+            const localVarPath = `/orgs/{orgId}/leave`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication ApiKeyAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * Reconciles policy assignments for the role assignment principal: creates missing policies and revokes leftovers that materialize no longer emits
          * @summary Rematerialize Role Assignment
@@ -6082,6 +6423,19 @@ export const RoleAssignmentApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['RoleAssignmentApi.applyRoleAssignment']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Removes the caller from the org: revokes all of their V2 role assignments, reconciles away their policies, and removes them from the org user list. Does not change their Zeus teammate record.
+         * @summary Leave org
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async leaveOrg(orgId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<LeaveOrgSuccessResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.leaveOrg(orgId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['RoleAssignmentApi.leaveOrg']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * Reconciles policy assignments for the role assignment principal: creates missing policies and revokes leftovers that materialize no longer emits
          * @summary Rematerialize Role Assignment
@@ -6131,6 +6485,16 @@ export const RoleAssignmentApiFactory = function (configuration?: Configuration,
         applyRoleAssignment(orgId: string, roleAssignmentRequestBody?: RoleAssignmentRequestBody, options?: RawAxiosRequestConfig): AxiosPromise<RoleAssignmentSuccessResponse> {
             return localVarFp.applyRoleAssignment(orgId, roleAssignmentRequestBody, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Removes the caller from the org: revokes all of their V2 role assignments, reconciles away their policies, and removes them from the org user list. Does not change their Zeus teammate record.
+         * @summary Leave org
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        leaveOrg(orgId: string, options?: RawAxiosRequestConfig): AxiosPromise<LeaveOrgSuccessResponse> {
+            return localVarFp.leaveOrg(orgId, options).then((request) => request(axios, basePath));
+        },
         /**
          * Reconciles policy assignments for the role assignment principal: creates missing policies and revokes leftovers that materialize no longer emits
          * @summary Rematerialize Role Assignment
@@ -6176,6 +6540,18 @@ export class RoleAssignmentApi extends BaseAPI {
         return RoleAssignmentApiFp(this.configuration).applyRoleAssignment(orgId, roleAssignmentRequestBody, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Removes the caller from the org: revokes all of their V2 role assignments, reconciles away their policies, and removes them from the org user list. Does not change their Zeus teammate record.
+     * @summary Leave org
+     * @param {string} orgId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RoleAssignmentApi
+     */
+    public leaveOrg(orgId: string, options?: RawAxiosRequestConfig) {
+        return RoleAssignmentApiFp(this.configuration).leaveOrg(orgId, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * Reconciles policy assignments for the role assignment principal: creates missing policies and revokes leftovers that materialize no longer emits
      * @summary Rematerialize Role Assignment
@@ -6717,6 +7093,43 @@ export const UserPermissionsApiAxiosParamCreator = function (configuration?: Con
 
 
     
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * List the role assignments for the current user in the org
+         * @summary List Own Roles
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listOwnRoles: async (orgId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('listOwnRoles', 'orgId', orgId)
+            const localVarPath = `/orgs/{orgId}/user/roles`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication ApiKeyAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
@@ -6816,6 +7229,19 @@ export const UserPermissionsApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['UserPermissionsApi.listOwnPermissions']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * List the role assignments for the current user in the org
+         * @summary List Own Roles
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listOwnRoles(orgId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<GetUserRolesSuccessResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listOwnRoles(orgId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['UserPermissionsApi.listOwnRoles']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * List the available permissions for a given user
          * @summary List User Permissions
@@ -6870,6 +7296,16 @@ export const UserPermissionsApiFactory = function (configuration?: Configuration
         listOwnPermissions(orgId: string, options?: RawAxiosRequestConfig): AxiosPromise<GetUserPermissionsSuccessResponse> {
             return localVarFp.listOwnPermissions(orgId, options).then((request) => request(axios, basePath));
         },
+        /**
+         * List the role assignments for the current user in the org
+         * @summary List Own Roles
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listOwnRoles(orgId: string, options?: RawAxiosRequestConfig): AxiosPromise<GetUserRolesSuccessResponse> {
+            return localVarFp.listOwnRoles(orgId, options).then((request) => request(axios, basePath));
+        },
         /**
          * List the available permissions for a given user
          * @summary List User Permissions
@@ -6927,6 +7363,18 @@ export class UserPermissionsApi extends BaseAPI {
         return UserPermissionsApiFp(this.configuration).listOwnPermissions(orgId, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * List the role assignments for the current user in the org
+     * @summary List Own Roles
+     * @param {string} orgId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof UserPermissionsApi
+     */
+    public listOwnRoles(orgId: string, options?: RawAxiosRequestConfig) {
+        return UserPermissionsApiFp(this.configuration).listOwnRoles(orgId, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * List the available permissions for a given user
      * @summary List User Permissions