@ionite/server 0.0.23-beta.20260828.1 → 0.0.23-beta.20260904.1

package/dist/index.d.ts

@@ -108,7 +108,7 @@ declare class InMemoryAccessAssignmentStore implements AccessAssignmentStore2<Ac
 		targetType: OaaAccessTargetType;
 		target: string;
 	}>): Promise<Map<string, AccessChange[]>>;
-	listBySubject(subject: string, subjectType?: SubjectType, options?: ListOptions): Promise<ListResult<AccessChange>>;
+	listBySubject(subject: string, subjectType: SubjectType, options?: ListOptions): Promise<ListResult<AccessChange>>;
 }
 import { AccessCatalogStore as AccessCatalogStore2, CatalogChangeListener, EntityStore, Group, ListOptions as ListOptions2, ListResult as ListResult2, Permission, Resource, ResourceChangeListener, ResourceProvider as ResourceProvider2, Role } from "@ionite/core";
 declare class InMemoryAccessCatalogStore implements AccessCatalogStore2 {
@@ -165,12 +165,12 @@ declare class InMemoryAccessIndex implements AccessIndex2 {
 	* SCIM-deactivated subject. Grants stay intact; re-enabling restores prior decisions unchanged.
 	*/
 	private readonly disabledSubjects;
-	has(subject: AccessRef<BaseUser>, targetType: OaaAccessTargetType2, target: AccessRef<Group2 | Role2 | Permission2>, resource?: AccessRef<Resource2>, subjectType?: SubjectType2): Promise<AuthzDecision>;
-	hasGroup(subject: AccessRef<BaseUser>, group: AccessRef<Group2>, resource?: AccessRef<Resource2>, subjectType?: SubjectType2): Promise<AuthzDecision>;
-	hasRole(subject: AccessRef<BaseUser>, role: AccessRef<Role2>, resource?: AccessRef<Resource2>, subjectType?: SubjectType2): Promise<AuthzDecision>;
-	hasPermission(subject: AccessRef<BaseUser>, permission: AccessRef<Permission2>, resource?: AccessRef<Resource2>, subjectType?: SubjectType2): Promise<AuthzDecision>;
-	hasAny(subject: AccessRef<BaseUser>, targets: AccessCheckTarget[], subjectType?: SubjectType2): Promise<AuthzDecision>;
-	hasAll(subject: AccessRef<BaseUser>, targets: AccessCheckTarget[], subjectType?: SubjectType2): Promise<AuthzDecision>;
+	has(subject: AccessRef<BaseUser>, targetType: OaaAccessTargetType2, target: AccessRef<Group2 | Role2 | Permission2>, resource: AccessRef<Resource2> | undefined, subjectType: SubjectType2): Promise<AuthzDecision>;
+	hasGroup(subject: AccessRef<BaseUser>, group: AccessRef<Group2>, resource: AccessRef<Resource2> | undefined, subjectType: SubjectType2): Promise<AuthzDecision>;
+	hasRole(subject: AccessRef<BaseUser>, role: AccessRef<Role2>, resource: AccessRef<Resource2> | undefined, subjectType: SubjectType2): Promise<AuthzDecision>;
+	hasPermission(subject: AccessRef<BaseUser>, permission: AccessRef<Permission2>, resource: AccessRef<Resource2> | undefined, subjectType: SubjectType2): Promise<AuthzDecision>;
+	hasAny(subject: AccessRef<BaseUser>, targets: AccessCheckTarget[], subjectType: SubjectType2): Promise<AuthzDecision>;
+	hasAll(subject: AccessRef<BaseUser>, targets: AccessCheckTarget[], subjectType: SubjectType2): Promise<AuthzDecision>;
 	materialize(rootId: string, edges: EffectiveEdge[]): Promise<void>;
 	replaceSubject(subject: string, subjectType: SubjectType2, edges: EffectiveEdge[]): Promise<void>;
 	private addRootEdges;
@@ -178,7 +178,7 @@ declare class InMemoryAccessIndex implements AccessIndex2 {
 	private removeRoot;
 	listSubjects(): Promise<SubjectRef[]>;
 	setSubjectDisabled(subject: string, subjectType: SubjectType2, disabled: boolean): Promise<void>;
-	isSubjectDisabled(subject: string, subjectType?: SubjectType2): Promise<boolean>;
+	isSubjectDisabled(subject: string, subjectType: SubjectType2): Promise<boolean>;
 	clear(subject?: string, subjectType?: SubjectType2): Promise<void>;
 	private clearSubjectEdges;
 	private allow;
@@ -820,7 +820,7 @@ declare function closeAllVaultSockets(): void;
 *
 * Keep this synchronized with packages/server/package.json via publish.ts.
 */
-declare const ION_SDK_VERSION = "0.0.23-beta.20260828.1";
+declare const ION_SDK_VERSION = "0.0.23-beta.20260904.1";
 import { Workload as CoreWorkload, FrameworkWorkloadConfig, Ionite as Ionite5, JWTAssertionClaims, Logger as Logger7, TokenValidationResult, TrustedIdp, WorkloadConfigMap, WorkloadGetToken, WorkloadIdentityStore as WorkloadIdentityStore3, WorkloadIncomingOutgoing, WorkloadTokenResponse, WorkloadTokenStore } from "@ionite/core";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 /**