@leaflow/sdk 0.0.0-dev.478.g138087b → 0.0.0-dev.482.g339e5e7

package/dist/billing/v1/generated/functions.d.ts

@@ -260,7 +260,7 @@ export type listBillingAccountsResponseError = listBillingAccountsResponseDefaul
 export type listBillingAccountsResponse = listBillingAccountsResponseSuccess | listBillingAccountsResponseError;
 export declare const getListBillingAccountsUrl: (params?: ListBillingAccountsParams) => string;
 /**
- * Billing accounts owned by the authenticated user.
+ * Billing accounts owned by the authenticated user. Filter by status with `status`; omit it to list every status.
  * @summary List billing accounts
  */
 export declare const listBillingAccounts: (params?: ListBillingAccountsParams, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<listBillingAccountsResponse>;

package/dist/billing/v1/generated/functions.js

@@ -291,7 +291,7 @@ export const getListBillingAccountsUrl = (params) => {
         : `https://billing.leaflow.cloud/api/v1/billing-accounts`;
 };
 /**
- * Billing accounts owned by the authenticated user.
+ * Billing accounts owned by the authenticated user. Filter by status with `status`; omit it to list every status.
  * @summary List billing accounts
  */
 export const listBillingAccounts = async (params, options, fetchFn) => {

package/dist/billing/v1/generated/models.d.ts

@@ -624,12 +624,6 @@ export interface Product {
     name: string;
     description?: string;
 }
-export type BillingAccountStatus = (typeof BillingAccountStatus)[keyof typeof BillingAccountStatus];
-export declare const BillingAccountStatus: {
-    readonly active: "active";
-    readonly suspended: "suspended";
-    readonly closed: "closed";
-};
 /**
  * Who suspended the account: `owner` (you), `operator` (Leaflow), or `none` while it is not suspended. Only a suspension by `owner` can be resumed by you.
  */
@@ -639,6 +633,15 @@ export declare const BillingAccountSuspendedBy: {
     readonly owner: "owner";
     readonly operator: "operator";
 };
+/**
+ * Whether the account is usable, suspended, or closed.
+ */
+export type BillingAccountStatus = (typeof BillingAccountStatus)[keyof typeof BillingAccountStatus];
+export declare const BillingAccountStatus: {
+    readonly active: "active";
+    readonly suspended: "suspended";
+    readonly closed: "closed";
+};
 export interface BillingAccount {
     /**
      * The active contact used for invoices, of this account; null clears it.
@@ -3459,6 +3462,12 @@ export type ListBillingAccountsParams = {
      * @maximum 200
      */
     page_size?: number;
+    /**
+     * Only accounts in these statuses. Omit for all statuses. Comma-separated, for example `status=suspended,closed`.
+     * @minItems 1
+     * @maxItems 3
+     */
+    status?: BillingAccountStatus[];
 };
 export type ListPaymentOptionsParams = {
     /**

package/dist/billing/v1/generated/models.js

@@ -81,16 +81,16 @@ export const SubscriptionCancellationStatus = {
     completed: "completed",
     canceled: "canceled",
 };
-export const BillingAccountStatus = {
-    active: "active",
-    suspended: "suspended",
-    closed: "closed",
-};
 export const BillingAccountSuspendedBy = {
     none: "none",
     owner: "owner",
     operator: "operator",
 };
+export const BillingAccountStatus = {
+    active: "active",
+    suspended: "suspended",
+    closed: "closed",
+};
 export const BillingScheme = {
     per_unit: "per_unit",
     tiered: "tiered",

package/dist/billing/v1/generated/schemas.zod.d.ts

@@ -141,16 +141,22 @@ export declare const ListCurrenciesQueryParams: zod.ZodObject<{
     page_size: zod.ZodDefault<zod.ZodInt>;
 }, zod.z.core.$strict>;
 /**
- * Billing accounts owned by the authenticated user.
+ * Billing accounts owned by the authenticated user. Filter by status with `status`; omit it to list every status.
  * @summary List billing accounts
  */
 export declare const listBillingAccountsQueryPageDefault = 1;
 export declare const listBillingAccountsQueryPageMax = 2147483647;
 export declare const listBillingAccountsQueryPageSizeDefault = 50;
 export declare const listBillingAccountsQueryPageSizeMax = 200;
+export declare const listBillingAccountsQueryStatusMax = 3;
 export declare const ListBillingAccountsQueryParams: zod.ZodObject<{
     page: zod.ZodDefault<zod.ZodInt>;
     page_size: zod.ZodDefault<zod.ZodInt>;
+    status: zod.ZodOptional<zod.ZodArray<zod.ZodEnum<{
+        active: "active";
+        suspended: "suspended";
+        closed: "closed";
+    }>>>;
 }, zod.z.core.$strict>;
 /**
  * Creates a billing account. Its currency is fixed: prices, orders, invoices and balance are all in it.

package/dist/billing/v1/generated/schemas.zod.js

@@ -8,6 +8,7 @@
 import * as zod from "zod";
 import { AutoRenewSet } from "./validators/autoRenewSet.zod.js";
 import { BillingAccountCreate } from "./validators/billingAccountCreate.zod.js";
+import { BillingAccountStatus } from "./validators/billingAccountStatus.zod.js";
 import { BillingAccountUpdate } from "./validators/billingAccountUpdate.zod.js";
 import { CancelSubscriptionRequest } from "./validators/cancelSubscriptionRequest.zod.js";
 import { CancellationCreate } from "./validators/cancellationCreate.zod.js";
@@ -164,13 +165,14 @@ export const ListCurrenciesQueryParams = zod.strictObject({
         .describe("Items per page. Defaults to 50; at most 200."),
 });
 /**
- * Billing accounts owned by the authenticated user.
+ * Billing accounts owned by the authenticated user. Filter by status with `status`; omit it to list every status.
  * @summary List billing accounts
  */
 export const listBillingAccountsQueryPageDefault = 1;
 export const listBillingAccountsQueryPageMax = 2147483647;
 export const listBillingAccountsQueryPageSizeDefault = 50;
 export const listBillingAccountsQueryPageSizeMax = 200;
+export const listBillingAccountsQueryStatusMax = 3;
 export const ListBillingAccountsQueryParams = zod.strictObject({
     page: zod
         .int()
@@ -184,6 +186,12 @@ export const ListBillingAccountsQueryParams = zod.strictObject({
         .max(listBillingAccountsQueryPageSizeMax)
         .default(listBillingAccountsQueryPageSizeDefault)
         .describe("Items per page. Defaults to 50; at most 200."),
+    status: zod
+        .array(BillingAccountStatus)
+        .min(1)
+        .max(listBillingAccountsQueryStatusMax)
+        .optional()
+        .describe("Only accounts in these statuses. Omit for all statuses. Comma-separated, for example `status=suspended,closed`."),
 });
 /**
  * Creates a billing account. Its currency is fixed: prices, orders, invoices and balance are all in it.

package/dist/billing/v1/generated/validators/billingAccount.zod.js

@@ -6,6 +6,7 @@
  * OpenAPI spec version: v1
  */
 import * as zod from "zod";
+import { BillingAccountStatus } from "./billingAccountStatus.zod.js";
 export const BillingAccount = zod.strictObject({
     invoice_contact_id: zod
         .uuid()
@@ -14,7 +15,7 @@ export const BillingAccount = zod.strictObject({
     id: zod.int(),
     name: zod.string().optional().describe("Your name for the account."),
     currency: zod.string().describe("Fixed when the account was opened."),
-    status: zod.enum(["active", "suspended", "closed"]),
+    status: BillingAccountStatus,
     suspended_by: zod
         .enum(["none", "owner", "operator"])
         .describe("Who suspended the account: `owner` (you), `operator` (Leaflow), or `none` while it is not suspended. Only a suspension by `owner` can be resumed by you."),

package/dist/billing/v1/generated/validators/billingAccountStatus.zod.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Billing API
+ * Products, prices, orders, subscriptions and account billing. Operations on a billing account require an account access token. The account, its balance, payment options and quotes are also readable by members of the projects it currently pays for; changing the account and moving its funds need the owner. Members of a project, as each operation states, can also read the project's billing account, subscriptions and orders, complete and pay for its purchases, quote purchases, changes and renewals, preview cancellations, and, with the project permission `billing:finance.manage` granted in IAM, renew, cancel and turn automatic renewal of its subscriptions on or off, change its billing account and read its costs. A member without the permission an operation needs is refused with 403 `PERMISSION_DENIED` and `meta.permission`; a caller who is not a member, with 403 `IAM_NOT_PROJECT_MEMBER`. Public catalogue operations declare no security requirement.
+ * OpenAPI spec version: v1
+ */
+import * as zod from "zod";
+export declare const BillingAccountStatus: zod.ZodEnum<{
+    active: "active";
+    suspended: "suspended";
+    closed: "closed";
+}>;
+export type BillingAccountStatus = zod.input<typeof BillingAccountStatus>;
+export type BillingAccountStatusOutput = zod.output<typeof BillingAccountStatus>;

package/dist/billing/v1/generated/validators/billingAccountStatus.zod.js

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Billing API
+ * Products, prices, orders, subscriptions and account billing. Operations on a billing account require an account access token. The account, its balance, payment options and quotes are also readable by members of the projects it currently pays for; changing the account and moving its funds need the owner. Members of a project, as each operation states, can also read the project's billing account, subscriptions and orders, complete and pay for its purchases, quote purchases, changes and renewals, preview cancellations, and, with the project permission `billing:finance.manage` granted in IAM, renew, cancel and turn automatic renewal of its subscriptions on or off, change its billing account and read its costs. A member without the permission an operation needs is refused with 403 `PERMISSION_DENIED` and `meta.permission`; a caller who is not a member, with 403 `IAM_NOT_PROJECT_MEMBER`. Public catalogue operations declare no security requirement.
+ * OpenAPI spec version: v1
+ */
+import * as zod from "zod";
+export const BillingAccountStatus = zod
+    .enum(["active", "suspended", "closed"])
+    .describe("Whether the account is usable, suspended, or closed.");

package/dist/billing/v1/generated/validators/listBillingAccountsParams.zod.d.ts

@@ -10,9 +10,15 @@ export declare const listBillingAccountsParamsPageDefault = 1;
 export declare const listBillingAccountsParamsPageMax = 2147483647;
 export declare const listBillingAccountsParamsPageSizeDefault = 50;
 export declare const listBillingAccountsParamsPageSizeMax = 200;
+export declare const listBillingAccountsParamsStatusMax = 3;
 export declare const ListBillingAccountsParams: zod.ZodObject<{
     page: zod.ZodDefault<zod.ZodInt>;
     page_size: zod.ZodDefault<zod.ZodInt>;
+    status: zod.ZodOptional<zod.ZodArray<zod.ZodEnum<{
+        active: "active";
+        suspended: "suspended";
+        closed: "closed";
+    }>>>;
 }, zod.z.core.$strict>;
 export type ListBillingAccountsParams = zod.input<typeof ListBillingAccountsParams>;
 export type ListBillingAccountsParamsOutput = zod.output<typeof ListBillingAccountsParams>;

package/dist/billing/v1/generated/validators/listBillingAccountsParams.zod.js

@@ -6,10 +6,12 @@
  * OpenAPI spec version: v1
  */
 import * as zod from "zod";
+import { BillingAccountStatus } from "./billingAccountStatus.zod.js";
 export const listBillingAccountsParamsPageDefault = 1;
 export const listBillingAccountsParamsPageMax = 2147483647;
 export const listBillingAccountsParamsPageSizeDefault = 50;
 export const listBillingAccountsParamsPageSizeMax = 200;
+export const listBillingAccountsParamsStatusMax = 3;
 export const ListBillingAccountsParams = zod.strictObject({
     page: zod
         .int()
@@ -21,4 +23,5 @@ export const ListBillingAccountsParams = zod.strictObject({
         .min(1)
         .max(listBillingAccountsParamsPageSizeMax)
         .default(listBillingAccountsParamsPageSizeDefault),
+    status: zod.array(BillingAccountStatus).min(1).max(listBillingAccountsParamsStatusMax).optional(),
 });

package/dist/iam/v1/generated/functions.d.ts

@@ -12,7 +12,7 @@
  * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
  * OpenAPI spec version: 1.0.0
  */
-import type { ApplicationResource, AttachPolicyRequestBody, BatchGetMembersRequestBody, BatchGetMembersResponseBody, CatalogListResponseBody, CreateApplicationRequestBody, CreateApplicationResponseBody, CreateRoleRequestBody, CreateSSHKeyRequestBody, Error, IssueInvitationRequestBody, IssuedInvitationResponseBody, LengthAwarePageApplicationResource, LengthAwarePageInvitationResource, LengthAwarePageMemberResource, LengthAwarePageSSHKeyResource, ListApplicationsParams, ListMembersParams, ListPoliciesParams, ListProjectInvitationsParams, ListSshKeysParams, MemberResource, MembershipResource, OwnershipTransferResponseBody, PolicyListResponseBody, PolicyResource, ProjectAccessResource, QuotaListResponseBody, RenameSSHKeyRequestBody, RoleListResponseBody, RoleResource, RotateApplicationSecretResponseBody, SSHKeyResource, SetMemberPermissionsRequestBody, SetMemberRolesRequestBody, SetProjectSlugRequestBody, TransferOwnershipRequestBody, UpdateApplicationRequestBody, UpdatePolicyRequestBody, UpdateProjectRequestBody, UpdateRoleRequestBody } from "./models.js";
+import type { ApplicationResource, BatchGetMembersRequestBody, BatchGetMembersResponseBody, CreateApplicationRequestBody, CreateApplicationResponseBody, CreateMemberPermissionRequestBody, CreateRoleRequestBody, CreateSSHKeyRequestBody, Error, IssueInvitationRequestBody, IssuedInvitationResponseBody, LengthAwarePageApplicationResource, LengthAwarePageInvitationResource, LengthAwarePageMemberResource, LengthAwarePageSSHKeyResource, ListApplicationsParams, ListInvitationsParams, ListMembersParams, ListSshKeysParams, MemberPermissionListResponseBody, MemberPermissionResource, MemberResource, MembershipResource, OwnershipTransferResponseBody, PermissionListResponseBody, ProjectAccessResource, QuotaListResponseBody, RenameSSHKeyRequestBody, RoleListResponseBody, RoleResource, RotateApplicationSecretResponseBody, SSHKeyResource, SetMemberRolesRequestBody, SetProjectSlugRequestBody, TransferOwnershipRequestBody, UpdateApplicationRequestBody, UpdateProjectRequestBody, UpdateRoleRequestBody } from "./models.js";
 export type HTTPStatusCode1xx = 100 | 101 | 102 | 103;
 export type HTTPStatusCode2xx = 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207;
 export type HTTPStatusCode3xx = 300 | 301 | 302 | 303 | 304 | 305 | 307 | 308;
@@ -20,7 +20,7 @@ export type HTTPStatusCode4xx = 400 | 401 | 402 | 403 | 404 | 405 | 406 | 407 |
 export type HTTPStatusCode5xx = 500 | 501 | 502 | 503 | 504 | 505 | 507 | 511;
 export type HTTPStatusCodes = HTTPStatusCode1xx | HTTPStatusCode2xx | HTTPStatusCode3xx | HTTPStatusCode4xx | HTTPStatusCode5xx;
 export type listPermissionsResponse200 = {
-    data: CatalogListResponseBody;
+    data: PermissionListResponseBody;
     status: 200;
 };
 export type listPermissionsResponseDefault = {
@@ -36,7 +36,7 @@ export type listPermissionsResponseError = listPermissionsResponseDefault & {
 export type listPermissionsResponse = listPermissionsResponseSuccess | listPermissionsResponseError;
 export declare const getListPermissionsUrl: () => string;
 /**
- * Each service registers its own catalogue with IAM at start-up, so this is the platform-wide list rather than the permissions of IAM alone. **IAM does not decide anything with it** — each service decides using the caller's grant together with its own catalogue, and this list only serves to render the choices. A service that has never started does not appear here.
+ * Each service registers the permissions it enforces with IAM at start-up, so this is the platform-wide list rather than the permissions of IAM alone. **IAM does not decide anything with it** — each service decides using the caller's grant together with the permissions compiled into its own binary, and this list only serves to render the choices. A service that has never started does not appear here.
  * @summary List every permission the platform can grant
  */
 export declare const listPermissions: (options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<listPermissionsResponse>;
@@ -150,7 +150,7 @@ export type getProjectMembershipResponseError = getProjectMembershipResponseDefa
 export type getProjectMembershipResponse = getProjectMembershipResponseSuccess | getProjectMembershipResponseError;
 export declare const getGetProjectMembershipUrl: () => string;
 /**
- * Facts rather than a conclusion. There is no `allowed` field here, because each service holds the catalogue mapping its operations to permissions and decides on its own.
+ * Facts rather than a conclusion. There is no `allowed` field here, because each service holds the permissions its operations need and decides on its own.
  * @summary Get the caller's standing in this project
  */
 export declare const getProjectMembership: (options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<getProjectMembershipResponse>;
@@ -175,27 +175,27 @@ export declare const getListQuotasUrl: () => string;
  * @summary List this project's quotas
  */
 export declare const listQuotas: (options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<listQuotasResponse>;
-export type listProjectInvitationsResponse200 = {
+export type listInvitationsResponse200 = {
     data: LengthAwarePageInvitationResource;
     status: 200;
 };
-export type listProjectInvitationsResponseDefault = {
+export type listInvitationsResponseDefault = {
     data: Error;
     status: Exclude<HTTPStatusCodes, 200>;
 };
-export type listProjectInvitationsResponseSuccess = listProjectInvitationsResponse200 & {
+export type listInvitationsResponseSuccess = listInvitationsResponse200 & {
     headers: Headers;
 };
-export type listProjectInvitationsResponseError = listProjectInvitationsResponseDefault & {
+export type listInvitationsResponseError = listInvitationsResponseDefault & {
     headers: Headers;
 };
-export type listProjectInvitationsResponse = listProjectInvitationsResponseSuccess | listProjectInvitationsResponseError;
-export declare const getListProjectInvitationsUrl: (params?: ListProjectInvitationsParams) => string;
+export type listInvitationsResponse = listInvitationsResponseSuccess | listInvitationsResponseError;
+export declare const getListInvitationsUrl: (params?: ListInvitationsParams) => string;
 /**
  * Visible to any member, on the same rule as the member list. Who has been invited is part of who is in the project.
  * @summary List the invitations this project is still waiting on
  */
-export declare const listProjectInvitations: (params?: ListProjectInvitationsParams, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<listProjectInvitationsResponse>;
+export declare const listInvitations: (params?: ListInvitationsParams, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<listInvitationsResponse>;
 export type issueInvitationResponse201 = {
     data: IssuedInvitationResponseBody;
     status: 201;
@@ -324,132 +324,75 @@ export declare const getSetMemberRolesUrl: (userId: string) => string;
  * @summary Set the roles a member holds
  */
 export declare const setMemberRoles: (userId: string, setMemberRolesRequestBody: SetMemberRolesRequestBody, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<setMemberRolesResponse>;
-export type setMemberPermissionsResponse200 = {
-    data: PolicyResource;
+export type listMemberPermissionsResponse200 = {
+    data: MemberPermissionListResponseBody;
     status: 200;
 };
-export type setMemberPermissionsResponseDefault = {
+export type listMemberPermissionsResponseDefault = {
     data: Error;
     status: Exclude<HTTPStatusCodes, 200>;
 };
-export type setMemberPermissionsResponseSuccess = setMemberPermissionsResponse200 & {
+export type listMemberPermissionsResponseSuccess = listMemberPermissionsResponse200 & {
     headers: Headers;
 };
-export type setMemberPermissionsResponseError = setMemberPermissionsResponseDefault & {
+export type listMemberPermissionsResponseError = listMemberPermissionsResponseDefault & {
     headers: Headers;
 };
-export type setMemberPermissionsResponse = setMemberPermissionsResponseSuccess | setMemberPermissionsResponseError;
-export declare const getSetMemberPermissionsUrl: (userId: string) => string;
+export type listMemberPermissionsResponse = listMemberPermissionsResponseSuccess | listMemberPermissionsResponseError;
+export declare const getListMemberPermissionsUrl: (userId: string) => string;
 /**
- * Replaces, in full, the permissions attached directly to the base policy. A direct permission grants one person something without creating a role only they hold, and it does not follow later changes to any role. Requires `iam:members.manage`.
- * @summary Set the permissions attached directly to a member
- */
-export declare const setMemberPermissions: (userId: string, setMemberPermissionsRequestBody: SetMemberPermissionsRequestBody, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<setMemberPermissionsResponse>;
-export type listPoliciesResponse200 = {
-    data: PolicyListResponseBody;
-    status: 200;
-};
-export type listPoliciesResponseDefault = {
-    data: Error;
-    status: Exclude<HTTPStatusCodes, 200>;
-};
-export type listPoliciesResponseSuccess = listPoliciesResponse200 & {
-    headers: Headers;
-};
-export type listPoliciesResponseError = listPoliciesResponseDefault & {
-    headers: Headers;
-};
-export type listPoliciesResponse = listPoliciesResponseSuccess | listPoliciesResponseError;
-export declare const getListPoliciesUrl: (params?: ListPoliciesParams) => string;
-/**
- * Visible to any member, on the same rule as the member list. What has been granted to whom is part of who is in the project.
- * @summary List the policies in this project
+ * Every row states one permission this person holds apart from their roles: project-wide when `resource_type` and `resource_id` are null, otherwise only on that resource. What a role grants is not listed here; the member's grant carries the roles and their compiled rules.
+ *
+ * Visible to any member, on the same rule as the member list.
+ * @summary List the permissions granted directly to a member
  */
-export declare const listPolicies: (params?: ListPoliciesParams, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<listPoliciesResponse>;
-export type attachPolicyResponse201 = {
-    data: PolicyResource;
+export declare const listMemberPermissions: (userId: string, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<listMemberPermissionsResponse>;
+export type createMemberPermissionResponse201 = {
+    data: MemberPermissionResource;
     status: 201;
 };
-export type attachPolicyResponseDefault = {
+export type createMemberPermissionResponseDefault = {
     data: Error;
     status: Exclude<HTTPStatusCodes, 201>;
 };
-export type attachPolicyResponseSuccess = attachPolicyResponse201 & {
-    headers: Headers;
-};
-export type attachPolicyResponseError = attachPolicyResponseDefault & {
-    headers: Headers;
-};
-export type attachPolicyResponse = attachPolicyResponseSuccess | attachPolicyResponseError;
-export declare const getAttachPolicyUrl: () => string;
-/**
- * This creates an **additional** policy, which either carries a resource scope or has `deny` as its effect. An `allow` covering every resource is a base policy, of which each member holds exactly one, and it is changed with set-member-roles and set-member-permissions. `roles` cannot contain `OWNER` or `ADMIN`. Requires `iam:members.manage`.
- * @summary Attach a policy
- */
-export declare const attachPolicy: (attachPolicyRequestBody: AttachPolicyRequestBody, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<attachPolicyResponse>;
-export type getPolicyResponse200 = {
-    data: PolicyResource;
-    status: 200;
-};
-export type getPolicyResponseDefault = {
-    data: Error;
-    status: Exclude<HTTPStatusCodes, 200>;
-};
-export type getPolicyResponseSuccess = getPolicyResponse200 & {
-    headers: Headers;
-};
-export type getPolicyResponseError = getPolicyResponseDefault & {
-    headers: Headers;
-};
-export type getPolicyResponse = getPolicyResponseSuccess | getPolicyResponseError;
-export declare const getGetPolicyUrl: (policyId: string) => string;
-/**
- * Visible to any member, on the same rule as list-policies; no further permission is required.
- * @summary Get a policy
- */
-export declare const getPolicy: (policyId: string, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<getPolicyResponse>;
-export type updatePolicyResponse200 = {
-    data: PolicyResource;
-    status: 200;
-};
-export type updatePolicyResponseDefault = {
-    data: Error;
-    status: Exclude<HTTPStatusCodes, 200>;
-};
-export type updatePolicyResponseSuccess = updatePolicyResponse200 & {
+export type createMemberPermissionResponseSuccess = createMemberPermissionResponse201 & {
     headers: Headers;
 };
-export type updatePolicyResponseError = updatePolicyResponseDefault & {
+export type createMemberPermissionResponseError = createMemberPermissionResponseDefault & {
     headers: Headers;
 };
-export type updatePolicyResponse = updatePolicyResponseSuccess | updatePolicyResponseError;
-export declare const getUpdatePolicyUrl: (policyId: string) => string;
+export type createMemberPermissionResponse = createMemberPermissionResponseSuccess | createMemberPermissionResponseError;
+export declare const getCreateMemberPermissionUrl: (userId: string) => string;
 /**
- * Replaced in full rather than field by field — `resources`, `roles` and `permissions` are each overwritten, and an omitted one becomes empty. The **kind** of a policy cannot change — a base policy (an `allow` covering every resource) cannot take a resource scope, and a scoped policy cannot have its scope cleared. Delete and recreate to change the kind. Requires `iam:members.manage`.
- * @summary Update a policy
+ * Creates one permission row. The same row twice answers 409; changing a grant means revoking the row and creating another, so that each row records when it was granted.
+ *
+ * `OWNER` and `ADMIN` cannot be granted here, being facts on the membership. A permission that carries no resource dimension cannot be scoped: IAM refuses the row at grant time rather than storing a scope that would never hold.
+ *
+ * Requires `iam:members.manage`.
+ * @summary Grant a permission to a member
  */
-export declare const updatePolicy: (policyId: string, updatePolicyRequestBody: UpdatePolicyRequestBody, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<updatePolicyResponse>;
-export type detachPolicyResponse204 = {
+export declare const createMemberPermission: (userId: string, createMemberPermissionRequestBody: CreateMemberPermissionRequestBody, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<createMemberPermissionResponse>;
+export type deleteMemberPermissionResponse204 = {
     data: void;
     status: 204;
 };
-export type detachPolicyResponseDefault = {
+export type deleteMemberPermissionResponseDefault = {
     data: Error;
     status: Exclude<HTTPStatusCodes, 204>;
 };
-export type detachPolicyResponseSuccess = detachPolicyResponse204 & {
+export type deleteMemberPermissionResponseSuccess = deleteMemberPermissionResponse204 & {
     headers: Headers;
 };
-export type detachPolicyResponseError = detachPolicyResponseDefault & {
+export type deleteMemberPermissionResponseError = deleteMemberPermissionResponseDefault & {
     headers: Headers;
 };
-export type detachPolicyResponse = detachPolicyResponseSuccess | detachPolicyResponseError;
-export declare const getDetachPolicyUrl: (policyId: string) => string;
+export type deleteMemberPermissionResponse = deleteMemberPermissionResponseSuccess | deleteMemberPermissionResponseError;
+export declare const getDeleteMemberPermissionUrl: (userId: string, permissionId: string) => string;
 /**
- * A base policy cannot be detached; it is where a member's roles sit. Use remove-member to take someone out of the project. Requires `iam:members.manage`.
- * @summary Detach a policy
+ * Removes that one row. Requires `iam:members.manage`.
+ * @summary Revoke a permission granted directly to a member
  */
-export declare const detachPolicy: (policyId: string, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<detachPolicyResponse>;
+export declare const deleteMemberPermission: (userId: string, permissionId: string, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<deleteMemberPermissionResponse>;
 export type transferProjectOwnershipResponse200 = {
     data: OwnershipTransferResponseBody;
     status: 200;