@leaflow/sdk 0.196.0 → 0.198.0

package/dist/iam/v1/generated/schemas.zod.js

@@ -13,19 +13,17 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-import { AttachPolicyRequestBody } from "./validators/attachPolicyRequestBody.zod.js";
 import { BatchGetMembersRequestBody } from "./validators/batchGetMembersRequestBody.zod.js";
 import { CreateApplicationRequestBody } from "./validators/createApplicationRequestBody.zod.js";
+import { CreateMemberPermissionRequestBody } from "./validators/createMemberPermissionRequestBody.zod.js";
 import { CreateRoleRequestBody } from "./validators/createRoleRequestBody.zod.js";
 import { CreateSSHKeyRequestBody } from "./validators/createSSHKeyRequestBody.zod.js";
 import { IssueInvitationRequestBody } from "./validators/issueInvitationRequestBody.zod.js";
 import { RenameSSHKeyRequestBody } from "./validators/renameSSHKeyRequestBody.zod.js";
-import { SetMemberPermissionsRequestBody } from "./validators/setMemberPermissionsRequestBody.zod.js";
 import { SetMemberRolesRequestBody } from "./validators/setMemberRolesRequestBody.zod.js";
 import { SetProjectSlugRequestBody } from "./validators/setProjectSlugRequestBody.zod.js";
 import { TransferOwnershipRequestBody } from "./validators/transferOwnershipRequestBody.zod.js";
 import { UpdateApplicationRequestBody } from "./validators/updateApplicationRequestBody.zod.js";
-import { UpdatePolicyRequestBody } from "./validators/updatePolicyRequestBody.zod.js";
 import { UpdateProjectRequestBody } from "./validators/updateProjectRequestBody.zod.js";
 import { UpdateRoleRequestBody } from "./validators/updateRoleRequestBody.zod.js";
 /**
@@ -51,23 +49,23 @@ export const SetProjectSlugBody = SetProjectSlugRequestBody;
  * Visible to any member, on the same rule as the member list. Who has been invited is part of who is in the project.
  * @summary List the invitations this project is still waiting on
  */
-export const listProjectInvitationsQueryLimitDefault = 50;
-export const listProjectInvitationsQueryLimitMax = 200;
-export const listProjectInvitationsQueryOffsetDefault = 0;
-export const listProjectInvitationsQueryOffsetMin = 0;
-export const listProjectInvitationsQueryOffsetMax = 10000;
-export const ListProjectInvitationsQueryParams = zod.strictObject({
+export const listInvitationsQueryLimitDefault = 50;
+export const listInvitationsQueryLimitMax = 200;
+export const listInvitationsQueryOffsetDefault = 0;
+export const listInvitationsQueryOffsetMin = 0;
+export const listInvitationsQueryOffsetMax = 10000;
+export const ListInvitationsQueryParams = zod.strictObject({
     limit: zod
         .int()
         .min(1)
-        .max(listProjectInvitationsQueryLimitMax)
-        .default(listProjectInvitationsQueryLimitDefault)
+        .max(listInvitationsQueryLimitMax)
+        .default(listInvitationsQueryLimitDefault)
         .describe("Items returned in this page. Defaults to 50; at most 200."),
     offset: zod
         .int()
-        .min(listProjectInvitationsQueryOffsetMin)
-        .max(listProjectInvitationsQueryOffsetMax)
-        .default(listProjectInvitationsQueryOffsetDefault)
+        .min(listInvitationsQueryOffsetMin)
+        .max(listInvitationsQueryOffsetMax)
+        .default(listInvitationsQueryOffsetDefault)
         .describe("Items to skip. Defaults to 0; at most 10000."),
 });
 /**
@@ -136,52 +134,36 @@ export const SetMemberRolesParams = zod.strictObject({
 });
 export const SetMemberRolesBody = SetMemberRolesRequestBody;
 /**
- * Replaces, in full, the permissions attached directly to the base policy. A direct permission grants one person something without creating a role only they hold, and it does not follow later changes to any role. Requires `iam:members.manage`.
- * @summary Set the permissions attached directly to a member
- */
-export const setMemberPermissionsPathUserIdMax = 255;
-export const SetMemberPermissionsParams = zod.strictObject({
-    userId: zod.string().max(setMemberPermissionsPathUserIdMax),
-});
-export const SetMemberPermissionsBody = SetMemberPermissionsRequestBody;
-/**
- * Visible to any member, on the same rule as the member list. What has been granted to whom is part of who is in the project.
- * @summary List the policies in this project
- */
-export const listPoliciesQueryUserIdMax = 255;
-export const ListPoliciesQueryParams = zod.strictObject({
-    userId: zod
-        .string()
-        .max(listPoliciesQueryUserIdMax)
-        .optional()
-        .describe("Restricts the result to one person. Omitting it covers the whole project"),
-});
-/**
- * This creates an **additional** policy, which either carries a resource scope or has `deny` as its effect. An `allow` covering every resource is a base policy, of which each member holds exactly one, and it is changed with set-member-roles and set-member-permissions. `roles` cannot contain `OWNER` or `ADMIN`. Requires `iam:members.manage`.
- * @summary Attach a policy
- */
-export const AttachPolicyBody = AttachPolicyRequestBody;
-/**
- * Visible to any member, on the same rule as list-policies; no further permission is required.
- * @summary Get a policy
+ * Every row states one permission this person holds apart from their roles: project-wide when `resource_type` and `resource_id` are null, otherwise only on that resource. What a role grants is not listed here; the member's grant carries the roles and their compiled rules.
+ *
+ * Visible to any member, on the same rule as the member list.
+ * @summary List the permissions granted directly to a member
  */
-export const GetPolicyParams = zod.strictObject({
-    policyId: zod.uuid(),
+export const listMemberPermissionsPathUserIdMax = 255;
+export const ListMemberPermissionsParams = zod.strictObject({
+    userId: zod.string().max(listMemberPermissionsPathUserIdMax),
 });
 /**
- * Replaced in full rather than field by field — `resources`, `roles` and `permissions` are each overwritten, and an omitted one becomes empty. The **kind** of a policy cannot change — a base policy (an `allow` covering every resource) cannot take a resource scope, and a scoped policy cannot have its scope cleared. Delete and recreate to change the kind. Requires `iam:members.manage`.
- * @summary Update a policy
+ * Creates one permission row. The same row twice answers 409; changing a grant means revoking the row and creating another, so that each row records when it was granted.
+ *
+ * `OWNER` and `ADMIN` cannot be granted here, being facts on the membership. A permission that carries no resource dimension cannot be scoped: IAM refuses the row at grant time rather than storing a scope that would never hold.
+ *
+ * Requires `iam:members.manage`.
+ * @summary Grant a permission to a member
  */
-export const UpdatePolicyParams = zod.strictObject({
-    policyId: zod.uuid(),
+export const createMemberPermissionPathUserIdMax = 255;
+export const CreateMemberPermissionParams = zod.strictObject({
+    userId: zod.string().max(createMemberPermissionPathUserIdMax),
 });
-export const UpdatePolicyBody = UpdatePolicyRequestBody;
+export const CreateMemberPermissionBody = CreateMemberPermissionRequestBody;
 /**
- * A base policy cannot be detached; it is where a member's roles sit. Use remove-member to take someone out of the project. Requires `iam:members.manage`.
- * @summary Detach a policy
+ * Removes that one row. Requires `iam:members.manage`.
+ * @summary Revoke a permission granted directly to a member
  */
-export const DetachPolicyParams = zod.strictObject({
-    policyId: zod.uuid(),
+export const deleteMemberPermissionPathUserIdMax = 255;
+export const DeleteMemberPermissionParams = zod.strictObject({
+    userId: zod.string().max(deleteMemberPermissionPathUserIdMax),
+    permissionId: zod.uuid(),
 });
 /**
  * The only way `OWNER` moves, and only the owner can initiate it.

package/dist/iam/v1/generated/validators/{updatePolicyRequestBody.zod.d.ts → createMemberPermissionRequestBody.zod.d.ts}

@@ -13,19 +13,17 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-export declare const updatePolicyRequestBodyDescriptionMax = 255;
-export declare const UpdatePolicyRequestBody: zod.ZodObject<{
-    description: zod.ZodOptional<zod.ZodString>;
+export declare const createMemberPermissionRequestBodyPermissionMax = 128;
+export declare const createMemberPermissionRequestBodyResourceTypeMax = 128;
+export declare const createMemberPermissionRequestBodyResourceIdMax = 255;
+export declare const CreateMemberPermissionRequestBody: zod.ZodObject<{
+    permission: zod.ZodString;
     effect: zod.ZodEnum<{
         allow: "allow";
         deny: "deny";
     }>;
-    permissions: zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodString>>>;
-    resources: zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-        id: zod.ZodString;
-        type: zod.ZodString;
-    }, zod.z.core.$strict>>>>;
-    roles: zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodString>>>;
+    resource_type: zod.ZodNullable<zod.ZodString>;
+    resource_id: zod.ZodNullable<zod.ZodString>;
 }, zod.z.core.$strict>;
-export type UpdatePolicyRequestBody = zod.input<typeof UpdatePolicyRequestBody>;
-export type UpdatePolicyRequestBodyOutput = zod.output<typeof UpdatePolicyRequestBody>;
+export type CreateMemberPermissionRequestBody = zod.input<typeof CreateMemberPermissionRequestBody>;
+export type CreateMemberPermissionRequestBodyOutput = zod.output<typeof CreateMemberPermissionRequestBody>;

package/dist/iam/v1/generated/validators/createMemberPermissionRequestBody.zod.js

@@ -0,0 +1,36 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and the SSH keys the project shares.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const createMemberPermissionRequestBodyPermissionMax = 128;
+export const createMemberPermissionRequestBodyResourceTypeMax = 128;
+export const createMemberPermissionRequestBodyResourceIdMax = 255;
+export const CreateMemberPermissionRequestBody = zod.strictObject({
+    permission: zod
+        .string()
+        .min(1)
+        .max(createMemberPermissionRequestBodyPermissionMax)
+        .describe("The code of the permission to grant"),
+    effect: zod.enum(["allow", "deny"]),
+    resource_type: zod
+        .string()
+        .max(createMemberPermissionRequestBodyResourceTypeMax)
+        .nullable()
+        .describe("The kind of resource to hold on; give it together with `resource_id`. Both null grant the permission project-wide"),
+    resource_id: zod
+        .string()
+        .max(createMemberPermissionRequestBodyResourceIdMax)
+        .nullable()
+        .describe("The resource identifier to hold on, which may carry a glob. Give it together with `resource_type`"),
+});

package/dist/iam/v1/generated/validators/grantResource.zod.js

@@ -21,5 +21,5 @@ export const GrantResource = zod.strictObject({
     rules: zod
         .array(RuleResource)
         .nullable()
-        .describe("**The rules compiled from every policy that applies. Do not walk them to reach a decision.** They are here to render what a user may do; each request is decided by the service handling it"),
+        .describe("**The rules compiled from the roles and grants that apply. Do not walk them to reach a decision.** They are here to render what a user may do; each request is decided by the service handling it"),
 });

package/dist/iam/v1/generated/validators/lengthAwarePageMemberResource.zod.d.ts

@@ -37,6 +37,18 @@ export declare const LengthAwarePageMemberResource: zod.ZodObject<{
             }, zod.z.core.$strict>>>;
         }, zod.z.core.$strict>;
         last_name: zod.ZodString;
+        permissions: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+            id: zod.ZodUUID;
+            permission: zod.ZodString;
+            effect: zod.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            resource_type: zod.ZodNullable<zod.ZodString>;
+            resource_id: zod.ZodNullable<zod.ZodString>;
+            created_at: zod.z.ZodISODateTime;
+            updated_at: zod.z.ZodISODateTime;
+        }, zod.z.core.$strict>>>;
         user_id: zod.ZodString;
     }, zod.z.core.$strict>>;
     limit: zod.ZodInt;

package/dist/iam/v1/generated/validators/{listProjectInvitationsParams.zod.d.ts → listInvitationsParams.zod.d.ts}

@@ -13,14 +13,14 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-export declare const listProjectInvitationsParamsLimitDefault = 50;
-export declare const listProjectInvitationsParamsLimitMax = 200;
-export declare const listProjectInvitationsParamsOffsetDefault = 0;
-export declare const listProjectInvitationsParamsOffsetMin = 0;
-export declare const listProjectInvitationsParamsOffsetMax = 10000;
-export declare const ListProjectInvitationsParams: zod.ZodObject<{
+export declare const listInvitationsParamsLimitDefault = 50;
+export declare const listInvitationsParamsLimitMax = 200;
+export declare const listInvitationsParamsOffsetDefault = 0;
+export declare const listInvitationsParamsOffsetMin = 0;
+export declare const listInvitationsParamsOffsetMax = 10000;
+export declare const ListInvitationsParams: zod.ZodObject<{
     limit: zod.ZodDefault<zod.ZodInt>;
     offset: zod.ZodDefault<zod.ZodInt>;
 }, zod.z.core.$strict>;
-export type ListProjectInvitationsParams = zod.input<typeof ListProjectInvitationsParams>;
-export type ListProjectInvitationsParamsOutput = zod.output<typeof ListProjectInvitationsParams>;
+export type ListInvitationsParams = zod.input<typeof ListInvitationsParams>;
+export type ListInvitationsParamsOutput = zod.output<typeof ListInvitationsParams>;

package/dist/iam/v1/generated/validators/{listProjectInvitationsParams.zod.js → listInvitationsParams.zod.js}

@@ -13,20 +13,20 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-export const listProjectInvitationsParamsLimitDefault = 50;
-export const listProjectInvitationsParamsLimitMax = 200;
-export const listProjectInvitationsParamsOffsetDefault = 0;
-export const listProjectInvitationsParamsOffsetMin = 0;
-export const listProjectInvitationsParamsOffsetMax = 10000;
-export const ListProjectInvitationsParams = zod.strictObject({
+export const listInvitationsParamsLimitDefault = 50;
+export const listInvitationsParamsLimitMax = 200;
+export const listInvitationsParamsOffsetDefault = 0;
+export const listInvitationsParamsOffsetMin = 0;
+export const listInvitationsParamsOffsetMax = 10000;
+export const ListInvitationsParams = zod.strictObject({
     limit: zod
         .int()
         .min(1)
-        .max(listProjectInvitationsParamsLimitMax)
-        .default(listProjectInvitationsParamsLimitDefault),
+        .max(listInvitationsParamsLimitMax)
+        .default(listInvitationsParamsLimitDefault),
     offset: zod
         .int()
-        .min(listProjectInvitationsParamsOffsetMin)
-        .max(listProjectInvitationsParamsOffsetMax)
-        .default(listProjectInvitationsParamsOffsetDefault),
+        .min(listInvitationsParamsOffsetMin)
+        .max(listInvitationsParamsOffsetMax)
+        .default(listInvitationsParamsOffsetDefault),
 });

package/dist/iam/v1/generated/validators/{policyListResponseBody.zod.d.ts → memberPermissionListResponseBody.zod.d.ts}

@@ -13,25 +13,19 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-export declare const PolicyListResponseBody: zod.ZodObject<{
+export declare const MemberPermissionListResponseBody: zod.ZodObject<{
     items: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-        base: zod.ZodBoolean;
-        created_at: zod.z.ZodISODateTime;
-        description: zod.ZodString;
+        id: zod.ZodUUID;
+        permission: zod.ZodString;
         effect: zod.ZodEnum<{
             allow: "allow";
             deny: "deny";
         }>;
-        id: zod.ZodUUID;
-        permissions: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
-        resources: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-            id: zod.ZodString;
-            type: zod.ZodString;
-        }, zod.z.core.$strict>>>;
-        roles: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
+        resource_type: zod.ZodNullable<zod.ZodString>;
+        resource_id: zod.ZodNullable<zod.ZodString>;
+        created_at: zod.z.ZodISODateTime;
         updated_at: zod.z.ZodISODateTime;
-        user_id: zod.ZodString;
     }, zod.z.core.$strict>>>;
 }, zod.z.core.$strict>;
-export type PolicyListResponseBody = zod.input<typeof PolicyListResponseBody>;
-export type PolicyListResponseBodyOutput = zod.output<typeof PolicyListResponseBody>;
+export type MemberPermissionListResponseBody = zod.input<typeof MemberPermissionListResponseBody>;
+export type MemberPermissionListResponseBodyOutput = zod.output<typeof MemberPermissionListResponseBody>;

package/dist/iam/v1/generated/validators/{catalogListResponseBody.zod.js → memberPermissionListResponseBody.zod.js}

@@ -13,7 +13,7 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-import { CatalogResource } from "./catalogResource.zod.js";
-export const CatalogListResponseBody = zod.strictObject({
-    items: zod.array(CatalogResource).nullable(),
+import { MemberPermissionResource } from "./memberPermissionResource.zod.js";
+export const MemberPermissionListResponseBody = zod.strictObject({
+    items: zod.array(MemberPermissionResource).nullable(),
 });

package/dist/iam/v1/generated/validators/{policyResource.zod.d.ts → memberPermissionResource.zod.d.ts}

@@ -13,23 +13,20 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-export declare const PolicyResource: zod.ZodObject<{
-    base: zod.ZodBoolean;
-    created_at: zod.z.ZodISODateTime;
-    description: zod.ZodString;
+export declare const memberPermissionResourcePermissionMax = 128;
+export declare const memberPermissionResourceResourceTypeMax = 128;
+export declare const memberPermissionResourceResourceIdMax = 255;
+export declare const MemberPermissionResource: zod.ZodObject<{
+    id: zod.ZodUUID;
+    permission: zod.ZodString;
     effect: zod.ZodEnum<{
         allow: "allow";
         deny: "deny";
     }>;
-    id: zod.ZodUUID;
-    permissions: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
-    resources: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-        id: zod.ZodString;
-        type: zod.ZodString;
-    }, zod.z.core.$strict>>>;
-    roles: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
+    resource_type: zod.ZodNullable<zod.ZodString>;
+    resource_id: zod.ZodNullable<zod.ZodString>;
+    created_at: zod.z.ZodISODateTime;
     updated_at: zod.z.ZodISODateTime;
-    user_id: zod.ZodString;
 }, zod.z.core.$strict>;
-export type PolicyResource = zod.input<typeof PolicyResource>;
-export type PolicyResourceOutput = zod.output<typeof PolicyResource>;
+export type MemberPermissionResource = zod.input<typeof MemberPermissionResource>;
+export type MemberPermissionResourceOutput = zod.output<typeof MemberPermissionResource>;

package/dist/iam/v1/generated/validators/memberPermissionResource.zod.js

@@ -0,0 +1,38 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and the SSH keys the project shares.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const memberPermissionResourcePermissionMax = 128;
+export const memberPermissionResourceResourceTypeMax = 128;
+export const memberPermissionResourceResourceIdMax = 255;
+export const MemberPermissionResource = zod.strictObject({
+    id: zod.uuid().describe("The id of this grant, used to revoke it"),
+    permission: zod
+        .string()
+        .max(memberPermissionResourcePermissionMax)
+        .describe("The code of the permission, such as compute:instance.delete"),
+    effect: zod.enum(["allow", "deny"]),
+    resource_type: zod
+        .string()
+        .max(memberPermissionResourceResourceTypeMax)
+        .nullable()
+        .describe("The kind of resource this grant holds on, such as fleet:machine. Null with `resource_id` means it holds project-wide"),
+    resource_id: zod
+        .string()
+        .max(memberPermissionResourceResourceIdMax)
+        .nullable()
+        .describe("The resource identifier, which may carry a glob. Null with `resource_type` means the grant holds project-wide"),
+    created_at: zod.iso.datetime({ offset: true }),
+    updated_at: zod.iso.datetime({ offset: true }),
+});

package/dist/iam/v1/generated/validators/memberResource.zod.d.ts

@@ -36,6 +36,18 @@ export declare const MemberResource: zod.ZodObject<{
         }, zod.z.core.$strict>>>;
     }, zod.z.core.$strict>;
     last_name: zod.ZodString;
+    permissions: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+        id: zod.ZodUUID;
+        permission: zod.ZodString;
+        effect: zod.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+        }>;
+        resource_type: zod.ZodNullable<zod.ZodString>;
+        resource_id: zod.ZodNullable<zod.ZodString>;
+        created_at: zod.z.ZodISODateTime;
+        updated_at: zod.z.ZodISODateTime;
+    }, zod.z.core.$strict>>>;
     user_id: zod.ZodString;
 }, zod.z.core.$strict>;
 export type MemberResource = zod.input<typeof MemberResource>;

package/dist/iam/v1/generated/validators/memberResource.zod.js

@@ -14,6 +14,7 @@
  */
 import * as zod from "zod";
 import { GrantResource } from "./grantResource.zod.js";
+import { MemberPermissionResource } from "./memberPermissionResource.zod.js";
 export const MemberResource = zod.strictObject({
     avatar_hash: zod
         .string()
@@ -24,5 +25,9 @@ export const MemberResource = zod.strictObject({
     first_name: zod.string(),
     grant: GrantResource,
     last_name: zod.string(),
+    permissions: zod
+        .array(MemberPermissionResource)
+        .nullable()
+        .describe("The permissions granted to this person directly, apart from their roles"),
     user_id: zod.string(),
 });

package/dist/iam/v1/generated/validators/ownershipTransferResponseBody.zod.d.ts

@@ -37,6 +37,18 @@ export declare const OwnershipTransferResponseBody: zod.ZodObject<{
             }, zod.z.core.$strict>>>;
         }, zod.z.core.$strict>;
         last_name: zod.ZodString;
+        permissions: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+            id: zod.ZodUUID;
+            permission: zod.ZodString;
+            effect: zod.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            resource_type: zod.ZodNullable<zod.ZodString>;
+            resource_id: zod.ZodNullable<zod.ZodString>;
+            created_at: zod.z.ZodISODateTime;
+            updated_at: zod.z.ZodISODateTime;
+        }, zod.z.core.$strict>>>;
         user_id: zod.ZodString;
     }, zod.z.core.$strict>;
     to: zod.ZodObject<{
@@ -62,6 +74,18 @@ export declare const OwnershipTransferResponseBody: zod.ZodObject<{
             }, zod.z.core.$strict>>>;
         }, zod.z.core.$strict>;
         last_name: zod.ZodString;
+        permissions: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+            id: zod.ZodUUID;
+            permission: zod.ZodString;
+            effect: zod.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            resource_type: zod.ZodNullable<zod.ZodString>;
+            resource_id: zod.ZodNullable<zod.ZodString>;
+            created_at: zod.z.ZodISODateTime;
+            updated_at: zod.z.ZodISODateTime;
+        }, zod.z.core.$strict>>>;
         user_id: zod.ZodString;
     }, zod.z.core.$strict>;
 }, zod.z.core.$strict>;

package/dist/iam/v1/generated/validators/{catalogResource.zod.d.ts → permissionListResponseBody.zod.d.ts}

@@ -13,16 +13,12 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-export declare const CatalogResource: zod.ZodObject<{
-    permissions: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+export declare const PermissionListResponseBody: zod.ZodObject<{
+    items: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
         name: zod.ZodString;
         owner_only: zod.ZodBoolean;
         resource_type: zod.ZodString;
     }, zod.z.core.$strict>>>;
-    resource_types: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
-        name: zod.ZodString;
-    }, zod.z.core.$strict>>>;
-    service: zod.ZodString;
 }, zod.z.core.$strict>;
-export type CatalogResource = zod.input<typeof CatalogResource>;
-export type CatalogResourceOutput = zod.output<typeof CatalogResource>;
+export type PermissionListResponseBody = zod.input<typeof PermissionListResponseBody>;
+export type PermissionListResponseBodyOutput = zod.output<typeof PermissionListResponseBody>;

package/dist/iam/v1/generated/validators/{policyListResponseBody.zod.js → permissionListResponseBody.zod.js}

@@ -13,7 +13,7 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-import { PolicyResource } from "./policyResource.zod.js";
-export const PolicyListResponseBody = zod.strictObject({
-    items: zod.array(PolicyResource).nullable(),
+import { PermissionResource } from "./permissionResource.zod.js";
+export const PermissionListResponseBody = zod.strictObject({
+    items: zod.array(PermissionResource).nullable(),
 });

package/dist/routes.d.ts

@@ -3410,7 +3410,7 @@ export declare const routes: readonly [{
     readonly contract: "iam";
     readonly method: "GET";
     readonly path: "/api/v1/invitations";
-    readonly operationId: "list-project-invitations";
+    readonly operationId: "list-invitations";
     readonly securityScheme: "ScopedToken";
     readonly upstreamUrl: "https://iam.leaflow.cloud";
 }, {
@@ -3461,52 +3461,28 @@ export declare const routes: readonly [{
     readonly operationId: "set-member-roles";
     readonly securityScheme: "ScopedToken";
     readonly upstreamUrl: "https://iam.leaflow.cloud";
-}, {
-    readonly service: "iam";
-    readonly contract: "iam";
-    readonly method: "PUT";
-    readonly path: "/api/v1/members/{userId}/permissions";
-    readonly operationId: "set-member-permissions";
-    readonly securityScheme: "ScopedToken";
-    readonly upstreamUrl: "https://iam.leaflow.cloud";
 }, {
     readonly service: "iam";
     readonly contract: "iam";
     readonly method: "GET";
-    readonly path: "/api/v1/policies";
-    readonly operationId: "list-policies";
+    readonly path: "/api/v1/members/{userId}/permissions";
+    readonly operationId: "list-member-permissions";
     readonly securityScheme: "ScopedToken";
     readonly upstreamUrl: "https://iam.leaflow.cloud";
 }, {
     readonly service: "iam";
     readonly contract: "iam";
     readonly method: "POST";
-    readonly path: "/api/v1/policies";
-    readonly operationId: "attach-policy";
-    readonly securityScheme: "ScopedToken";
-    readonly upstreamUrl: "https://iam.leaflow.cloud";
-}, {
-    readonly service: "iam";
-    readonly contract: "iam";
-    readonly method: "GET";
-    readonly path: "/api/v1/policies/{policyId}";
-    readonly operationId: "get-policy";
-    readonly securityScheme: "ScopedToken";
-    readonly upstreamUrl: "https://iam.leaflow.cloud";
-}, {
-    readonly service: "iam";
-    readonly contract: "iam";
-    readonly method: "PUT";
-    readonly path: "/api/v1/policies/{policyId}";
-    readonly operationId: "update-policy";
+    readonly path: "/api/v1/members/{userId}/permissions";
+    readonly operationId: "create-member-permission";
     readonly securityScheme: "ScopedToken";
     readonly upstreamUrl: "https://iam.leaflow.cloud";
 }, {
     readonly service: "iam";
     readonly contract: "iam";
     readonly method: "DELETE";
-    readonly path: "/api/v1/policies/{policyId}";
-    readonly operationId: "detach-policy";
+    readonly path: "/api/v1/members/{userId}/permissions/{permissionId}";
+    readonly operationId: "delete-member-permission";
     readonly securityScheme: "ScopedToken";
     readonly upstreamUrl: "https://iam.leaflow.cloud";
 }, {