@leaflow/sdk 0.0.0-dev.481.g3bd94d5 → 0.0.0-dev.482.g339e5e7

package/dist/iam/v1/generated/validators/{listProjectInvitationsParams.zod.js → listInvitationsParams.zod.js}

@@ -13,20 +13,20 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-export const listProjectInvitationsParamsLimitDefault = 50;
-export const listProjectInvitationsParamsLimitMax = 200;
-export const listProjectInvitationsParamsOffsetDefault = 0;
-export const listProjectInvitationsParamsOffsetMin = 0;
-export const listProjectInvitationsParamsOffsetMax = 10000;
-export const ListProjectInvitationsParams = zod.strictObject({
+export const listInvitationsParamsLimitDefault = 50;
+export const listInvitationsParamsLimitMax = 200;
+export const listInvitationsParamsOffsetDefault = 0;
+export const listInvitationsParamsOffsetMin = 0;
+export const listInvitationsParamsOffsetMax = 10000;
+export const ListInvitationsParams = zod.strictObject({
     limit: zod
         .int()
         .min(1)
-        .max(listProjectInvitationsParamsLimitMax)
-        .default(listProjectInvitationsParamsLimitDefault),
+        .max(listInvitationsParamsLimitMax)
+        .default(listInvitationsParamsLimitDefault),
     offset: zod
         .int()
-        .min(listProjectInvitationsParamsOffsetMin)
-        .max(listProjectInvitationsParamsOffsetMax)
-        .default(listProjectInvitationsParamsOffsetDefault),
+        .min(listInvitationsParamsOffsetMin)
+        .max(listInvitationsParamsOffsetMax)
+        .default(listInvitationsParamsOffsetDefault),
 });

package/dist/iam/v1/generated/validators/{policyListResponseBody.zod.d.ts → memberPermissionListResponseBody.zod.d.ts}

@@ -13,25 +13,19 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-export declare const PolicyListResponseBody: zod.ZodObject<{
+export declare const MemberPermissionListResponseBody: zod.ZodObject<{
     items: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-        base: zod.ZodBoolean;
-        created_at: zod.z.ZodISODateTime;
-        description: zod.ZodString;
+        id: zod.ZodUUID;
+        permission: zod.ZodString;
         effect: zod.ZodEnum<{
             allow: "allow";
             deny: "deny";
         }>;
-        id: zod.ZodUUID;
-        permissions: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
-        resources: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-            id: zod.ZodString;
-            type: zod.ZodString;
-        }, zod.z.core.$strict>>>;
-        roles: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
+        resource_type: zod.ZodNullable<zod.ZodString>;
+        resource_id: zod.ZodNullable<zod.ZodString>;
+        created_at: zod.z.ZodISODateTime;
         updated_at: zod.z.ZodISODateTime;
-        user_id: zod.ZodString;
     }, zod.z.core.$strict>>>;
 }, zod.z.core.$strict>;
-export type PolicyListResponseBody = zod.input<typeof PolicyListResponseBody>;
-export type PolicyListResponseBodyOutput = zod.output<typeof PolicyListResponseBody>;
+export type MemberPermissionListResponseBody = zod.input<typeof MemberPermissionListResponseBody>;
+export type MemberPermissionListResponseBodyOutput = zod.output<typeof MemberPermissionListResponseBody>;

package/dist/iam/v1/generated/validators/{catalogListResponseBody.zod.js → memberPermissionListResponseBody.zod.js}

@@ -13,7 +13,7 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-import { CatalogResource } from "./catalogResource.zod.js";
-export const CatalogListResponseBody = zod.strictObject({
-    items: zod.array(CatalogResource).nullable(),
+import { MemberPermissionResource } from "./memberPermissionResource.zod.js";
+export const MemberPermissionListResponseBody = zod.strictObject({
+    items: zod.array(MemberPermissionResource).nullable(),
 });

package/dist/iam/v1/generated/validators/{policyResource.zod.d.ts → memberPermissionResource.zod.d.ts}

@@ -13,23 +13,20 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-export declare const PolicyResource: zod.ZodObject<{
-    base: zod.ZodBoolean;
-    created_at: zod.z.ZodISODateTime;
-    description: zod.ZodString;
+export declare const memberPermissionResourcePermissionMax = 128;
+export declare const memberPermissionResourceResourceTypeMax = 128;
+export declare const memberPermissionResourceResourceIdMax = 255;
+export declare const MemberPermissionResource: zod.ZodObject<{
+    id: zod.ZodUUID;
+    permission: zod.ZodString;
     effect: zod.ZodEnum<{
         allow: "allow";
         deny: "deny";
     }>;
-    id: zod.ZodUUID;
-    permissions: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
-    resources: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-        id: zod.ZodString;
-        type: zod.ZodString;
-    }, zod.z.core.$strict>>>;
-    roles: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
+    resource_type: zod.ZodNullable<zod.ZodString>;
+    resource_id: zod.ZodNullable<zod.ZodString>;
+    created_at: zod.z.ZodISODateTime;
     updated_at: zod.z.ZodISODateTime;
-    user_id: zod.ZodString;
 }, zod.z.core.$strict>;
-export type PolicyResource = zod.input<typeof PolicyResource>;
-export type PolicyResourceOutput = zod.output<typeof PolicyResource>;
+export type MemberPermissionResource = zod.input<typeof MemberPermissionResource>;
+export type MemberPermissionResourceOutput = zod.output<typeof MemberPermissionResource>;

package/dist/iam/v1/generated/validators/memberPermissionResource.zod.js

@@ -0,0 +1,38 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and the SSH keys the project shares.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const memberPermissionResourcePermissionMax = 128;
+export const memberPermissionResourceResourceTypeMax = 128;
+export const memberPermissionResourceResourceIdMax = 255;
+export const MemberPermissionResource = zod.strictObject({
+    id: zod.uuid().describe("The id of this grant, used to revoke it"),
+    permission: zod
+        .string()
+        .max(memberPermissionResourcePermissionMax)
+        .describe("The code of the permission, such as compute:instance.delete"),
+    effect: zod.enum(["allow", "deny"]),
+    resource_type: zod
+        .string()
+        .max(memberPermissionResourceResourceTypeMax)
+        .nullable()
+        .describe("The kind of resource this grant holds on, such as fleet:machine. Null with `resource_id` means it holds project-wide"),
+    resource_id: zod
+        .string()
+        .max(memberPermissionResourceResourceIdMax)
+        .nullable()
+        .describe("The resource identifier, which may carry a glob. Null with `resource_type` means the grant holds project-wide"),
+    created_at: zod.iso.datetime({ offset: true }),
+    updated_at: zod.iso.datetime({ offset: true }),
+});

package/dist/iam/v1/generated/validators/memberResource.zod.d.ts

@@ -36,6 +36,18 @@ export declare const MemberResource: zod.ZodObject<{
         }, zod.z.core.$strict>>>;
     }, zod.z.core.$strict>;
     last_name: zod.ZodString;
+    permissions: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+        id: zod.ZodUUID;
+        permission: zod.ZodString;
+        effect: zod.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+        }>;
+        resource_type: zod.ZodNullable<zod.ZodString>;
+        resource_id: zod.ZodNullable<zod.ZodString>;
+        created_at: zod.z.ZodISODateTime;
+        updated_at: zod.z.ZodISODateTime;
+    }, zod.z.core.$strict>>>;
     user_id: zod.ZodString;
 }, zod.z.core.$strict>;
 export type MemberResource = zod.input<typeof MemberResource>;

package/dist/iam/v1/generated/validators/memberResource.zod.js

@@ -14,6 +14,7 @@
  */
 import * as zod from "zod";
 import { GrantResource } from "./grantResource.zod.js";
+import { MemberPermissionResource } from "./memberPermissionResource.zod.js";
 export const MemberResource = zod.strictObject({
     avatar_hash: zod
         .string()
@@ -24,5 +25,9 @@ export const MemberResource = zod.strictObject({
     first_name: zod.string(),
     grant: GrantResource,
     last_name: zod.string(),
+    permissions: zod
+        .array(MemberPermissionResource)
+        .nullable()
+        .describe("The permissions granted to this person directly, apart from their roles"),
     user_id: zod.string(),
 });

package/dist/iam/v1/generated/validators/ownershipTransferResponseBody.zod.d.ts

@@ -37,6 +37,18 @@ export declare const OwnershipTransferResponseBody: zod.ZodObject<{
             }, zod.z.core.$strict>>>;
         }, zod.z.core.$strict>;
         last_name: zod.ZodString;
+        permissions: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+            id: zod.ZodUUID;
+            permission: zod.ZodString;
+            effect: zod.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            resource_type: zod.ZodNullable<zod.ZodString>;
+            resource_id: zod.ZodNullable<zod.ZodString>;
+            created_at: zod.z.ZodISODateTime;
+            updated_at: zod.z.ZodISODateTime;
+        }, zod.z.core.$strict>>>;
         user_id: zod.ZodString;
     }, zod.z.core.$strict>;
     to: zod.ZodObject<{
@@ -62,6 +74,18 @@ export declare const OwnershipTransferResponseBody: zod.ZodObject<{
             }, zod.z.core.$strict>>>;
         }, zod.z.core.$strict>;
         last_name: zod.ZodString;
+        permissions: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+            id: zod.ZodUUID;
+            permission: zod.ZodString;
+            effect: zod.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            resource_type: zod.ZodNullable<zod.ZodString>;
+            resource_id: zod.ZodNullable<zod.ZodString>;
+            created_at: zod.z.ZodISODateTime;
+            updated_at: zod.z.ZodISODateTime;
+        }, zod.z.core.$strict>>>;
         user_id: zod.ZodString;
     }, zod.z.core.$strict>;
 }, zod.z.core.$strict>;

package/dist/iam/v1/generated/validators/{catalogResource.zod.d.ts → permissionListResponseBody.zod.d.ts}

@@ -13,16 +13,12 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-export declare const CatalogResource: zod.ZodObject<{
-    permissions: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+export declare const PermissionListResponseBody: zod.ZodObject<{
+    items: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
         name: zod.ZodString;
         owner_only: zod.ZodBoolean;
         resource_type: zod.ZodString;
     }, zod.z.core.$strict>>>;
-    resource_types: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-        name: zod.ZodString;
-    }, zod.z.core.$strict>>>;
-    service: zod.ZodString;
 }, zod.z.core.$strict>;
-export type CatalogResource = zod.input<typeof CatalogResource>;
-export type CatalogResourceOutput = zod.output<typeof CatalogResource>;
+export type PermissionListResponseBody = zod.input<typeof PermissionListResponseBody>;
+export type PermissionListResponseBodyOutput = zod.output<typeof PermissionListResponseBody>;

package/dist/iam/v1/generated/validators/{policyListResponseBody.zod.js → permissionListResponseBody.zod.js}

@@ -13,7 +13,7 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-import { PolicyResource } from "./policyResource.zod.js";
-export const PolicyListResponseBody = zod.strictObject({
-    items: zod.array(PolicyResource).nullable(),
+import { PermissionResource } from "./permissionResource.zod.js";
+export const PermissionListResponseBody = zod.strictObject({
+    items: zod.array(PermissionResource).nullable(),
 });

package/dist/routes.d.ts

@@ -3410,7 +3410,7 @@ export declare const routes: readonly [{
     readonly contract: "iam";
     readonly method: "GET";
     readonly path: "/api/v1/invitations";
-    readonly operationId: "list-project-invitations";
+    readonly operationId: "list-invitations";
     readonly securityScheme: "ScopedToken";
     readonly upstreamUrl: "https://iam.leaflow.cloud";
 }, {
@@ -3461,52 +3461,28 @@ export declare const routes: readonly [{
     readonly operationId: "set-member-roles";
     readonly securityScheme: "ScopedToken";
     readonly upstreamUrl: "https://iam.leaflow.cloud";
-}, {
-    readonly service: "iam";
-    readonly contract: "iam";
-    readonly method: "PUT";
-    readonly path: "/api/v1/members/{userId}/permissions";
-    readonly operationId: "set-member-permissions";
-    readonly securityScheme: "ScopedToken";
-    readonly upstreamUrl: "https://iam.leaflow.cloud";
 }, {
     readonly service: "iam";
     readonly contract: "iam";
     readonly method: "GET";
-    readonly path: "/api/v1/policies";
-    readonly operationId: "list-policies";
+    readonly path: "/api/v1/members/{userId}/permissions";
+    readonly operationId: "list-member-permissions";
     readonly securityScheme: "ScopedToken";
     readonly upstreamUrl: "https://iam.leaflow.cloud";
 }, {
     readonly service: "iam";
     readonly contract: "iam";
     readonly method: "POST";
-    readonly path: "/api/v1/policies";
-    readonly operationId: "attach-policy";
-    readonly securityScheme: "ScopedToken";
-    readonly upstreamUrl: "https://iam.leaflow.cloud";
-}, {
-    readonly service: "iam";
-    readonly contract: "iam";
-    readonly method: "GET";
-    readonly path: "/api/v1/policies/{policyId}";
-    readonly operationId: "get-policy";
-    readonly securityScheme: "ScopedToken";
-    readonly upstreamUrl: "https://iam.leaflow.cloud";
-}, {
-    readonly service: "iam";
-    readonly contract: "iam";
-    readonly method: "PUT";
-    readonly path: "/api/v1/policies/{policyId}";
-    readonly operationId: "update-policy";
+    readonly path: "/api/v1/members/{userId}/permissions";
+    readonly operationId: "create-member-permission";
     readonly securityScheme: "ScopedToken";
     readonly upstreamUrl: "https://iam.leaflow.cloud";
 }, {
     readonly service: "iam";
     readonly contract: "iam";
     readonly method: "DELETE";
-    readonly path: "/api/v1/policies/{policyId}";
-    readonly operationId: "detach-policy";
+    readonly path: "/api/v1/members/{userId}/permissions/{permissionId}";
+    readonly operationId: "delete-member-permission";
     readonly securityScheme: "ScopedToken";
     readonly upstreamUrl: "https://iam.leaflow.cloud";
 }, {

package/dist/routes.js

@@ -3836,7 +3836,7 @@ export const routes = [
         contract: "iam",
         method: "GET",
         path: "/api/v1/invitations",
-        operationId: "list-project-invitations",
+        operationId: "list-invitations",
         securityScheme: "ScopedToken",
         upstreamUrl: "https://iam.leaflow.cloud",
     },
@@ -3894,21 +3894,12 @@ export const routes = [
         securityScheme: "ScopedToken",
         upstreamUrl: "https://iam.leaflow.cloud",
     },
-    {
-        service: "iam",
-        contract: "iam",
-        method: "PUT",
-        path: "/api/v1/members/{userId}/permissions",
-        operationId: "set-member-permissions",
-        securityScheme: "ScopedToken",
-        upstreamUrl: "https://iam.leaflow.cloud",
-    },
     {
         service: "iam",
         contract: "iam",
         method: "GET",
-        path: "/api/v1/policies",
-        operationId: "list-policies",
+        path: "/api/v1/members/{userId}/permissions",
+        operationId: "list-member-permissions",
         securityScheme: "ScopedToken",
         upstreamUrl: "https://iam.leaflow.cloud",
     },
@@ -3916,26 +3907,8 @@ export const routes = [
         service: "iam",
         contract: "iam",
         method: "POST",
-        path: "/api/v1/policies",
-        operationId: "attach-policy",
-        securityScheme: "ScopedToken",
-        upstreamUrl: "https://iam.leaflow.cloud",
-    },
-    {
-        service: "iam",
-        contract: "iam",
-        method: "GET",
-        path: "/api/v1/policies/{policyId}",
-        operationId: "get-policy",
-        securityScheme: "ScopedToken",
-        upstreamUrl: "https://iam.leaflow.cloud",
-    },
-    {
-        service: "iam",
-        contract: "iam",
-        method: "PUT",
-        path: "/api/v1/policies/{policyId}",
-        operationId: "update-policy",
+        path: "/api/v1/members/{userId}/permissions",
+        operationId: "create-member-permission",
         securityScheme: "ScopedToken",
         upstreamUrl: "https://iam.leaflow.cloud",
     },
@@ -3943,8 +3916,8 @@ export const routes = [
         service: "iam",
         contract: "iam",
         method: "DELETE",
-        path: "/api/v1/policies/{policyId}",
-        operationId: "detach-policy",
+        path: "/api/v1/members/{userId}/permissions/{permissionId}",
+        operationId: "delete-member-permission",
         securityScheme: "ScopedToken",
         upstreamUrl: "https://iam.leaflow.cloud",
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leaflow/sdk",
-  "version": "0.0.0-dev.481.g3bd94d5",
+  "version": "0.0.0-dev.482.g339e5e7",
   "description": "Leaflow 平台 API 的 TypeScript SDK",
   "license": "MIT",
   "repository": {

package/dist/iam/v1/generated/validators/attachPolicyRequestBody.zod.d.ts

@@ -1,33 +0,0 @@
-/**
- * Generated by orval 🍺
- * Do not edit manually.
- * Leaflow IAM API
- * What happens inside a project: members, roles, invitations and the SSH keys the project shares.
- *
- * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
- * `projectId`, and the current project is the one the token states. Tokens are obtained from the
- * account API.
- *
- * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
- * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
- * OpenAPI spec version: 1.0.0
- */
-import * as zod from "zod";
-export declare const attachPolicyRequestBodyDescriptionMax = 255;
-export declare const attachPolicyRequestBodyUserIdMax = 255;
-export declare const AttachPolicyRequestBody: zod.ZodObject<{
-    description: zod.ZodOptional<zod.ZodString>;
-    effect: zod.ZodEnum<{
-        allow: "allow";
-        deny: "deny";
-    }>;
-    permissions: zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodString>>>;
-    resources: zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-        id: zod.ZodString;
-        type: zod.ZodString;
-    }, zod.z.core.$strict>>>>;
-    roles: zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodString>>>;
-    user_id: zod.ZodString;
-}, zod.z.core.$strict>;
-export type AttachPolicyRequestBody = zod.input<typeof AttachPolicyRequestBody>;
-export type AttachPolicyRequestBodyOutput = zod.output<typeof AttachPolicyRequestBody>;

package/dist/iam/v1/generated/validators/attachPolicyRequestBody.zod.js

@@ -1,43 +0,0 @@
-/**
- * Generated by orval 🍺
- * Do not edit manually.
- * Leaflow IAM API
- * What happens inside a project: members, roles, invitations and the SSH keys the project shares.
- *
- * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
- * `projectId`, and the current project is the one the token states. Tokens are obtained from the
- * account API.
- *
- * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
- * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
- * OpenAPI spec version: 1.0.0
- */
-import * as zod from "zod";
-import { ResourceRefResource } from "./resourceRefResource.zod.js";
-export const attachPolicyRequestBodyDescriptionMax = 255;
-export const attachPolicyRequestBodyUserIdMax = 255;
-export const AttachPolicyRequestBody = zod.strictObject({
-    description: zod
-        .string()
-        .max(attachPolicyRequestBodyDescriptionMax)
-        .optional()
-        .describe("Why it was granted, written for a reader"),
-    effect: zod.enum(["allow", "deny"]),
-    permissions: zod
-        .array(zod.string())
-        .nullish()
-        .describe("Permission names attached directly, which avoids creating a role only one person holds"),
-    resources: zod
-        .array(ResourceRefResource)
-        .nullish()
-        .describe("The policy holds only on these resources. Leaving it empty makes sense only together with `deny`, since an `allow` covering every resource is the base policy, which already exists"),
-    roles: zod
-        .array(zod.string())
-        .nullish()
-        .describe("Each must be a role already defined in this project. `OWNER` and `ADMIN` are not accepted, being rules rather than sets of permissions"),
-    user_id: zod
-        .string()
-        .min(1)
-        .max(attachPolicyRequestBodyUserIdMax)
-        .describe("Must already be a member of this project"),
-});

package/dist/iam/v1/generated/validators/catalogListResponseBody.zod.d.ts

@@ -1,30 +0,0 @@
-/**
- * Generated by orval 🍺
- * Do not edit manually.
- * Leaflow IAM API
- * What happens inside a project: members, roles, invitations and the SSH keys the project shares.
- *
- * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
- * `projectId`, and the current project is the one the token states. Tokens are obtained from the
- * account API.
- *
- * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
- * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
- * OpenAPI spec version: 1.0.0
- */
-import * as zod from "zod";
-export declare const CatalogListResponseBody: zod.ZodObject<{
-    items: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-        permissions: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-            name: zod.ZodString;
-            owner_only: zod.ZodBoolean;
-            resource_type: zod.ZodString;
-        }, zod.z.core.$strict>>>;
-        resource_types: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-            name: zod.ZodString;
-        }, zod.z.core.$strict>>>;
-        service: zod.ZodString;
-    }, zod.z.core.$strict>>>;
-}, zod.z.core.$strict>;
-export type CatalogListResponseBody = zod.input<typeof CatalogListResponseBody>;
-export type CatalogListResponseBodyOutput = zod.output<typeof CatalogListResponseBody>;

package/dist/iam/v1/generated/validators/catalogResource.zod.js

@@ -1,25 +0,0 @@
-/**
- * Generated by orval 🍺
- * Do not edit manually.
- * Leaflow IAM API
- * What happens inside a project: members, roles, invitations and the SSH keys the project shares.
- *
- * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
- * `projectId`, and the current project is the one the token states. Tokens are obtained from the
- * account API.
- *
- * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
- * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
- * OpenAPI spec version: 1.0.0
- */
-import * as zod from "zod";
-import { PermissionResource } from "./permissionResource.zod.js";
-import { ResourceTypeResource } from "./resourceTypeResource.zod.js";
-export const CatalogResource = zod.strictObject({
-    permissions: zod.array(PermissionResource).nullable(),
-    resource_types: zod
-        .array(ResourceTypeResource)
-        .nullable()
-        .describe("The resource types this service declares. A scoped rule can only land on one of them"),
-    service: zod.string(),
-});

package/dist/iam/v1/generated/validators/listPoliciesParams.zod.d.ts

@@ -1,21 +0,0 @@
-/**
- * Generated by orval 🍺
- * Do not edit manually.
- * Leaflow IAM API
- * What happens inside a project: members, roles, invitations and the SSH keys the project shares.
- *
- * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
- * `projectId`, and the current project is the one the token states. Tokens are obtained from the
- * account API.
- *
- * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
- * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
- * OpenAPI spec version: 1.0.0
- */
-import * as zod from "zod";
-export declare const listPoliciesParamsUserIdMax = 255;
-export declare const ListPoliciesParams: zod.ZodObject<{
-    userId: zod.ZodOptional<zod.ZodString>;
-}, zod.z.core.$strict>;
-export type ListPoliciesParams = zod.input<typeof ListPoliciesParams>;
-export type ListPoliciesParamsOutput = zod.output<typeof ListPoliciesParams>;

package/dist/iam/v1/generated/validators/listPoliciesParams.zod.js

@@ -1,23 +0,0 @@
-/**
- * Generated by orval 🍺
- * Do not edit manually.
- * Leaflow IAM API
- * What happens inside a project: members, roles, invitations and the SSH keys the project shares.
- *
- * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
- * `projectId`, and the current project is the one the token states. Tokens are obtained from the
- * account API.
- *
- * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
- * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
- * OpenAPI spec version: 1.0.0
- */
-import * as zod from "zod";
-export const listPoliciesParamsUserIdMax = 255;
-export const ListPoliciesParams = zod.strictObject({
-    userId: zod
-        .string()
-        .max(listPoliciesParamsUserIdMax)
-        .optional()
-        .describe("Restricts the result to one person. Omitting it covers the whole project"),
-});

package/dist/iam/v1/generated/validators/policyResource.zod.js

@@ -1,33 +0,0 @@
-/**
- * Generated by orval 🍺
- * Do not edit manually.
- * Leaflow IAM API
- * What happens inside a project: members, roles, invitations and the SSH keys the project shares.
- *
- * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
- * `projectId`, and the current project is the one the token states. Tokens are obtained from the
- * account API.
- *
- * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
- * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
- * OpenAPI spec version: 1.0.0
- */
-import * as zod from "zod";
-import { ResourceRefResource } from "./resourceRefResource.zod.js";
-export const PolicyResource = zod.strictObject({
-    base: zod
-        .boolean()
-        .describe("The base policy is the one whose effect is `allow` and which covers every resource. Each member holds exactly one, and it carries their ordinary roles. Change it with PUT /members/{userId}/roles and PUT /members/{userId}/permissions"),
-    created_at: zod.iso.datetime({ offset: true }),
-    description: zod.string().describe("Why it was granted, written for a reader"),
-    effect: zod.enum(["allow", "deny"]),
-    id: zod.uuid(),
-    permissions: zod
-        .array(zod.string())
-        .nullable()
-        .describe("Permission names attached directly to this person, without passing through a role"),
-    resources: zod.array(ResourceRefResource).nullable().describe("Empty means the whole project"),
-    roles: zod.array(zod.string()).nullable().describe("The role codes this policy carries"),
-    updated_at: zod.iso.datetime({ offset: true }),
-    user_id: zod.string(),
-});