@xemahq/authorization-internal-api-client 0.1.0 → 0.1.1

package/dist/endpoints/credential-defaults/credential-defaults.js

@@ -2,13 +2,13 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.credentialDefaultsControllerList = exports.getCredentialDefaultsControllerListUrl = exports.credentialDefaultsControllerDelete = exports.getCredentialDefaultsControllerDeleteUrl = exports.credentialDefaultsControllerGet = exports.getCredentialDefaultsControllerGetUrl = exports.credentialDefaultsControllerUpsert = exports.getCredentialDefaultsControllerUpsertUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * @summary Create or replace a credential-binding default
- */
 const getCredentialDefaultsControllerUpsertUrl = () => {
     return `/credential-defaults`;
 };
 exports.getCredentialDefaultsControllerUpsertUrl = getCredentialDefaultsControllerUpsertUrl;
+/**
+ * @summary Create or replace a credential-binding default
+ */
 const credentialDefaultsControllerUpsert = async (upsertCredentialDefaultDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getCredentialDefaultsControllerUpsertUrl)(), {
         ...options,
@@ -18,9 +18,6 @@ const credentialDefaultsControllerUpsert = async (upsertCredentialDefaultDto, op
     });
 };
 exports.credentialDefaultsControllerUpsert = credentialDefaultsControllerUpsert;
-/**
- * @summary Get the credential-binding default for an org or project scope
- */
 const getCredentialDefaultsControllerGetUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -44,6 +41,9 @@ const getCredentialDefaultsControllerGetUrl = (params) => {
     return stringifiedParams.length > 0 ? `/credential-defaults?${stringifiedParams}` : `/credential-defaults`;
 };
 exports.getCredentialDefaultsControllerGetUrl = getCredentialDefaultsControllerGetUrl;
+/**
+ * @summary Get the credential-binding default for an org or project scope
+ */
 const credentialDefaultsControllerGet = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getCredentialDefaultsControllerGetUrl)(params), {
         ...options,
@@ -51,9 +51,6 @@ const credentialDefaultsControllerGet = async (params, options) => {
     });
 };
 exports.credentialDefaultsControllerGet = credentialDefaultsControllerGet;
-/**
- * @summary Delete the credential-binding default for an org or project scope
- */
 const getCredentialDefaultsControllerDeleteUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -77,6 +74,9 @@ const getCredentialDefaultsControllerDeleteUrl = (params) => {
     return stringifiedParams.length > 0 ? `/credential-defaults?${stringifiedParams}` : `/credential-defaults`;
 };
 exports.getCredentialDefaultsControllerDeleteUrl = getCredentialDefaultsControllerDeleteUrl;
+/**
+ * @summary Delete the credential-binding default for an org or project scope
+ */
 const credentialDefaultsControllerDelete = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getCredentialDefaultsControllerDeleteUrl)(params), {
         ...options,
@@ -84,9 +84,6 @@ const credentialDefaultsControllerDelete = async (params, options) => {
     });
 };
 exports.credentialDefaultsControllerDelete = credentialDefaultsControllerDelete;
-/**
- * @summary List every credential-binding default in an org
- */
 const getCredentialDefaultsControllerListUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -110,6 +107,9 @@ const getCredentialDefaultsControllerListUrl = (params) => {
     return stringifiedParams.length > 0 ? `/credential-defaults/list?${stringifiedParams}` : `/credential-defaults/list`;
 };
 exports.getCredentialDefaultsControllerListUrl = getCredentialDefaultsControllerListUrl;
+/**
+ * @summary List every credential-binding default in an org
+ */
 const credentialDefaultsControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getCredentialDefaultsControllerListUrl)(params), {
         ...options,

package/dist/endpoints/environments/environments.d.ts

@@ -1,38 +1,38 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
 import type { CreateExecutionEnvironmentDto, EnvironmentsControllerFindBySlugParams, EnvironmentsControllerListParams, EnvironmentsControllerRemoveParams, EnvironmentsControllerUpdateParams, ExecutionEnvironmentResponseDto, UpdateExecutionEnvironmentDto } from '../../models';
+export declare const getEnvironmentsControllerListUrl: (params?: EnvironmentsControllerListParams) => string;
 /**
- * Returns the kernel-seeded built-in environments. With `orgId` it also includes that org's custom environments (plan §16 / G.4); without `orgId` it returns built-ins only (back-compat).
+ * Returns the kernel-seeded built-in environments. With `orgId` it also includes that org's custom environments; without `orgId` it returns built-ins only (back-compat).
  * @summary List ExecutionEnvironment rows
  */
-export declare const getEnvironmentsControllerListUrl: (params?: EnvironmentsControllerListParams) => string;
 export declare const environmentsControllerList: (params?: EnvironmentsControllerListParams, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDto[]>;
+export declare const getEnvironmentsControllerCreateUrl: () => string;
 /**
  * Creates an org-scoped custom environment (`isBuiltIn=false`). Fails fast (409) if the slug collides with a built-in or with an existing custom in the same org.
  * @summary Create an org-custom ExecutionEnvironment
  */
-export declare const getEnvironmentsControllerCreateUrl: () => string;
 export declare const environmentsControllerCreate: (createExecutionEnvironmentDto: CreateExecutionEnvironmentDto, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDto>;
+export declare const getEnvironmentsControllerFindBySlugUrl: (slug: string, params?: EnvironmentsControllerFindBySlugParams) => string;
 /**
  * Resolves a built-in by slug. With `orgId`, an org-custom slug resolves before the built-in fallback. 404 if unknown.
  * @summary Fetch a single ExecutionEnvironment by slug
  */
-export declare const getEnvironmentsControllerFindBySlugUrl: (slug: string, params?: EnvironmentsControllerFindBySlugParams) => string;
 export declare const environmentsControllerFindBySlug: (slug: string, params?: EnvironmentsControllerFindBySlugParams, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDto>;
+export declare const getEnvironmentsControllerUpdateUrl: (slug: string, params: EnvironmentsControllerUpdateParams) => string;
 /**
  * Updates the mutable fields (description / allowedCapabilities / approvalRules / runtimeLimits) of an org-custom environment. Refuses built-ins with 403 (immutable). `slug` / `kind` / `orgId` are immutable.
  * @summary Update an org-custom ExecutionEnvironment
  */
-export declare const getEnvironmentsControllerUpdateUrl: (slug: string, params: EnvironmentsControllerUpdateParams) => string;
 export declare const environmentsControllerUpdate: (slug: string, updateExecutionEnvironmentDto: UpdateExecutionEnvironmentDto, params: EnvironmentsControllerUpdateParams, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDto>;
+export declare const getEnvironmentsControllerRemoveUrl: (slug: string, params: EnvironmentsControllerRemoveParams) => string;
 /**
  * Deletes an org-custom environment. Refuses built-ins with 403 (immutable). 404 if no such custom environment exists for the org.
  * @summary Delete an org-custom ExecutionEnvironment
  */
-export declare const getEnvironmentsControllerRemoveUrl: (slug: string, params: EnvironmentsControllerRemoveParams) => string;
 export declare const environmentsControllerRemove: (slug: string, params: EnvironmentsControllerRemoveParams, options?: RequestInit) => Promise<void>;

package/dist/endpoints/environments/environments.js

@@ -2,10 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.environmentsControllerRemove = exports.getEnvironmentsControllerRemoveUrl = exports.environmentsControllerUpdate = exports.getEnvironmentsControllerUpdateUrl = exports.environmentsControllerFindBySlug = exports.getEnvironmentsControllerFindBySlugUrl = exports.environmentsControllerCreate = exports.getEnvironmentsControllerCreateUrl = exports.environmentsControllerList = exports.getEnvironmentsControllerListUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * Returns the kernel-seeded built-in environments. With `orgId` it also includes that org's custom environments (plan §16 / G.4); without `orgId` it returns built-ins only (back-compat).
- * @summary List ExecutionEnvironment rows
- */
 const getEnvironmentsControllerListUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -29,6 +25,10 @@ const getEnvironmentsControllerListUrl = (params) => {
     return stringifiedParams.length > 0 ? `/environments?${stringifiedParams}` : `/environments`;
 };
 exports.getEnvironmentsControllerListUrl = getEnvironmentsControllerListUrl;
+/**
+ * Returns the kernel-seeded built-in environments. With `orgId` it also includes that org's custom environments; without `orgId` it returns built-ins only (back-compat).
+ * @summary List ExecutionEnvironment rows
+ */
 const environmentsControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerListUrl)(params), {
         ...options,
@@ -36,14 +36,14 @@ const environmentsControllerList = async (params, options) => {
     });
 };
 exports.environmentsControllerList = environmentsControllerList;
-/**
- * Creates an org-scoped custom environment (`isBuiltIn=false`). Fails fast (409) if the slug collides with a built-in or with an existing custom in the same org.
- * @summary Create an org-custom ExecutionEnvironment
- */
 const getEnvironmentsControllerCreateUrl = () => {
     return `/environments`;
 };
 exports.getEnvironmentsControllerCreateUrl = getEnvironmentsControllerCreateUrl;
+/**
+ * Creates an org-scoped custom environment (`isBuiltIn=false`). Fails fast (409) if the slug collides with a built-in or with an existing custom in the same org.
+ * @summary Create an org-custom ExecutionEnvironment
+ */
 const environmentsControllerCreate = async (createExecutionEnvironmentDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerCreateUrl)(), {
         ...options,
@@ -53,10 +53,6 @@ const environmentsControllerCreate = async (createExecutionEnvironmentDto, optio
     });
 };
 exports.environmentsControllerCreate = environmentsControllerCreate;
-/**
- * Resolves a built-in by slug. With `orgId`, an org-custom slug resolves before the built-in fallback. 404 if unknown.
- * @summary Fetch a single ExecutionEnvironment by slug
- */
 const getEnvironmentsControllerFindBySlugUrl = (slug, params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -80,6 +76,10 @@ const getEnvironmentsControllerFindBySlugUrl = (slug, params) => {
     return stringifiedParams.length > 0 ? `/environments/${slug}?${stringifiedParams}` : `/environments/${slug}`;
 };
 exports.getEnvironmentsControllerFindBySlugUrl = getEnvironmentsControllerFindBySlugUrl;
+/**
+ * Resolves a built-in by slug. With `orgId`, an org-custom slug resolves before the built-in fallback. 404 if unknown.
+ * @summary Fetch a single ExecutionEnvironment by slug
+ */
 const environmentsControllerFindBySlug = async (slug, params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerFindBySlugUrl)(slug, params), {
         ...options,
@@ -87,10 +87,6 @@ const environmentsControllerFindBySlug = async (slug, params, options) => {
     });
 };
 exports.environmentsControllerFindBySlug = environmentsControllerFindBySlug;
-/**
- * Updates the mutable fields (description / allowedCapabilities / approvalRules / runtimeLimits) of an org-custom environment. Refuses built-ins with 403 (immutable). `slug` / `kind` / `orgId` are immutable.
- * @summary Update an org-custom ExecutionEnvironment
- */
 const getEnvironmentsControllerUpdateUrl = (slug, params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -114,6 +110,10 @@ const getEnvironmentsControllerUpdateUrl = (slug, params) => {
     return stringifiedParams.length > 0 ? `/environments/${slug}?${stringifiedParams}` : `/environments/${slug}`;
 };
 exports.getEnvironmentsControllerUpdateUrl = getEnvironmentsControllerUpdateUrl;
+/**
+ * Updates the mutable fields (description / allowedCapabilities / approvalRules / runtimeLimits) of an org-custom environment. Refuses built-ins with 403 (immutable). `slug` / `kind` / `orgId` are immutable.
+ * @summary Update an org-custom ExecutionEnvironment
+ */
 const environmentsControllerUpdate = async (slug, updateExecutionEnvironmentDto, params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerUpdateUrl)(slug, params), {
         ...options,
@@ -123,10 +123,6 @@ const environmentsControllerUpdate = async (slug, updateExecutionEnvironmentDto,
     });
 };
 exports.environmentsControllerUpdate = environmentsControllerUpdate;
-/**
- * Deletes an org-custom environment. Refuses built-ins with 403 (immutable). 404 if no such custom environment exists for the org.
- * @summary Delete an org-custom ExecutionEnvironment
- */
 const getEnvironmentsControllerRemoveUrl = (slug, params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -150,6 +146,10 @@ const getEnvironmentsControllerRemoveUrl = (slug, params) => {
     return stringifiedParams.length > 0 ? `/environments/${slug}?${stringifiedParams}` : `/environments/${slug}`;
 };
 exports.getEnvironmentsControllerRemoveUrl = getEnvironmentsControllerRemoveUrl;
+/**
+ * Deletes an org-custom environment. Refuses built-ins with 403 (immutable). 404 if no such custom environment exists for the org.
+ * @summary Delete an org-custom ExecutionEnvironment
+ */
 const environmentsControllerRemove = async (slug, params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerRemoveUrl)(slug, params), {
         ...options,

package/dist/endpoints/grants/grants.d.ts

@@ -1,33 +1,33 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { CapabilityGrantDto, CreateGrantDto, GrantsControllerListParams, ListGrantsResponseDto, UpdateGrantDto } from '../../models';
+import type { CapabilityGrantDto, CapabilityGrantDtoPaginatedEnvelope, CreateGrantDto, GrantsControllerListParams, UpdateGrantDto } from '../../models';
+export declare const getGrantsControllerCreateUrl: () => string;
 /**
  * @summary Create a capability grant
  */
-export declare const getGrantsControllerCreateUrl: () => string;
 export declare const grantsControllerCreate: (createGrantDto: CreateGrantDto, options?: RequestInit) => Promise<CapabilityGrantDto>;
+export declare const getGrantsControllerListUrl: (params?: GrantsControllerListParams) => string;
 /**
  * @summary List capability grants (paginated, filterable)
  */
-export declare const getGrantsControllerListUrl: (params?: GrantsControllerListParams) => string;
-export declare const grantsControllerList: (params?: GrantsControllerListParams, options?: RequestInit) => Promise<ListGrantsResponseDto>;
+export declare const grantsControllerList: (params?: GrantsControllerListParams, options?: RequestInit) => Promise<CapabilityGrantDtoPaginatedEnvelope>;
+export declare const getGrantsControllerGetByIdUrl: (id: string) => string;
 /**
  * @summary Get a capability grant by id
  */
-export declare const getGrantsControllerGetByIdUrl: (id: string) => string;
 export declare const grantsControllerGetById: (id: string, options?: RequestInit) => Promise<CapabilityGrantDto>;
+export declare const getGrantsControllerUpdateUrl: (id: string) => string;
 /**
  * @summary Update mutable fields on a capability grant
  */
-export declare const getGrantsControllerUpdateUrl: (id: string) => string;
 export declare const grantsControllerUpdate: (id: string, updateGrantDto: UpdateGrantDto, options?: RequestInit) => Promise<CapabilityGrantDto>;
+export declare const getGrantsControllerRevokeUrl: (id: string) => string;
 /**
  * @summary Mark a capability grant as revoked
  */
-export declare const getGrantsControllerRevokeUrl: (id: string) => string;
 export declare const grantsControllerRevoke: (id: string, options?: RequestInit) => Promise<CapabilityGrantDto>;

package/dist/endpoints/grants/grants.js

@@ -2,13 +2,13 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.grantsControllerRevoke = exports.getGrantsControllerRevokeUrl = exports.grantsControllerUpdate = exports.getGrantsControllerUpdateUrl = exports.grantsControllerGetById = exports.getGrantsControllerGetByIdUrl = exports.grantsControllerList = exports.getGrantsControllerListUrl = exports.grantsControllerCreate = exports.getGrantsControllerCreateUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * @summary Create a capability grant
- */
 const getGrantsControllerCreateUrl = () => {
     return `/grants`;
 };
 exports.getGrantsControllerCreateUrl = getGrantsControllerCreateUrl;
+/**
+ * @summary Create a capability grant
+ */
 const grantsControllerCreate = async (createGrantDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerCreateUrl)(), {
         ...options,
@@ -18,9 +18,6 @@ const grantsControllerCreate = async (createGrantDto, options) => {
     });
 };
 exports.grantsControllerCreate = grantsControllerCreate;
-/**
- * @summary List capability grants (paginated, filterable)
- */
 const getGrantsControllerListUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -44,6 +41,9 @@ const getGrantsControllerListUrl = (params) => {
     return stringifiedParams.length > 0 ? `/grants?${stringifiedParams}` : `/grants`;
 };
 exports.getGrantsControllerListUrl = getGrantsControllerListUrl;
+/**
+ * @summary List capability grants (paginated, filterable)
+ */
 const grantsControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerListUrl)(params), {
         ...options,
@@ -51,13 +51,13 @@ const grantsControllerList = async (params, options) => {
     });
 };
 exports.grantsControllerList = grantsControllerList;
-/**
- * @summary Get a capability grant by id
- */
 const getGrantsControllerGetByIdUrl = (id) => {
     return `/grants/${id}`;
 };
 exports.getGrantsControllerGetByIdUrl = getGrantsControllerGetByIdUrl;
+/**
+ * @summary Get a capability grant by id
+ */
 const grantsControllerGetById = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerGetByIdUrl)(id), {
         ...options,
@@ -65,13 +65,13 @@ const grantsControllerGetById = async (id, options) => {
     });
 };
 exports.grantsControllerGetById = grantsControllerGetById;
-/**
- * @summary Update mutable fields on a capability grant
- */
 const getGrantsControllerUpdateUrl = (id) => {
     return `/grants/${id}`;
 };
 exports.getGrantsControllerUpdateUrl = getGrantsControllerUpdateUrl;
+/**
+ * @summary Update mutable fields on a capability grant
+ */
 const grantsControllerUpdate = async (id, updateGrantDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerUpdateUrl)(id), {
         ...options,
@@ -81,13 +81,13 @@ const grantsControllerUpdate = async (id, updateGrantDto, options) => {
     });
 };
 exports.grantsControllerUpdate = grantsControllerUpdate;
-/**
- * @summary Mark a capability grant as revoked
- */
 const getGrantsControllerRevokeUrl = (id) => {
     return `/grants/${id}/revoke`;
 };
 exports.getGrantsControllerRevokeUrl = getGrantsControllerRevokeUrl;
+/**
+ * @summary Mark a capability grant as revoked
+ */
 const grantsControllerRevoke = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerRevokeUrl)(id), {
         ...options,

package/dist/endpoints/profiles/profiles.d.ts

@@ -1,14 +1,14 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { ListProfilesResponseDto } from '../../models';
+import type { ProfilePolicyTemplateDto } from '../../models';
+export declare const getProfilesControllerListUrl: () => string;
 /**
- * Returns the kernel-seeded `ProfilePolicyTemplate` rows. Used by the biome install UI to populate the profile picker (plan §30.3).
+ * Returns the kernel-seeded `ProfilePolicyTemplate` rows. Used by the biome install UI to populate the profile picker.
  * @summary List built-in BiomePermissionProfile policy templates
  */
-export declare const getProfilesControllerListUrl: () => string;
-export declare const profilesControllerList: (options?: RequestInit) => Promise<ListProfilesResponseDto>;
+export declare const profilesControllerList: (options?: RequestInit) => Promise<ProfilePolicyTemplateDto[]>;

package/dist/endpoints/profiles/profiles.js

@@ -2,14 +2,14 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.profilesControllerList = exports.getProfilesControllerListUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * Returns the kernel-seeded `ProfilePolicyTemplate` rows. Used by the biome install UI to populate the profile picker (plan §30.3).
- * @summary List built-in BiomePermissionProfile policy templates
- */
 const getProfilesControllerListUrl = () => {
     return `/profiles`;
 };
 exports.getProfilesControllerListUrl = getProfilesControllerListUrl;
+/**
+ * Returns the kernel-seeded `ProfilePolicyTemplate` rows. Used by the biome install UI to populate the profile picker.
+ * @summary List built-in BiomePermissionProfile policy templates
+ */
 const profilesControllerList = async (options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getProfilesControllerListUrl)(), {
         ...options,

package/dist/endpoints/relationships/relationships.d.ts

@@ -1,14 +1,14 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { ListRelationshipsResponseDto, RelationshipsControllerListParams } from '../../models';
+import type { OpenFgaRelationshipDtoPaginatedEnvelope, RelationshipsControllerListParams } from '../../models';
+export declare const getRelationshipsControllerListUrl: (params?: RelationshipsControllerListParams) => string;
 /**
  * Returns the live OpenFGA relationship tuples projected from the authoritative `CapabilityGrant` rows. Filter by org / subject / capability / environment / relation; offset-paginated (limit default 50, max 200).
  * @summary List ReBAC relationship tuples (paginated, filterable)
  */
-export declare const getRelationshipsControllerListUrl: (params?: RelationshipsControllerListParams) => string;
-export declare const relationshipsControllerList: (params?: RelationshipsControllerListParams, options?: RequestInit) => Promise<ListRelationshipsResponseDto>;
+export declare const relationshipsControllerList: (params?: RelationshipsControllerListParams, options?: RequestInit) => Promise<OpenFgaRelationshipDtoPaginatedEnvelope>;

package/dist/endpoints/relationships/relationships.js

@@ -2,10 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.relationshipsControllerList = exports.getRelationshipsControllerListUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * Returns the live OpenFGA relationship tuples projected from the authoritative `CapabilityGrant` rows. Filter by org / subject / capability / environment / relation; offset-paginated (limit default 50, max 200).
- * @summary List ReBAC relationship tuples (paginated, filterable)
- */
 const getRelationshipsControllerListUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -29,6 +25,10 @@ const getRelationshipsControllerListUrl = (params) => {
     return stringifiedParams.length > 0 ? `/relationships?${stringifiedParams}` : `/relationships`;
 };
 exports.getRelationshipsControllerListUrl = getRelationshipsControllerListUrl;
+/**
+ * Returns the live OpenFGA relationship tuples projected from the authoritative `CapabilityGrant` rows. Filter by org / subject / capability / environment / relation; offset-paginated (limit default 50, max 200).
+ * @summary List ReBAC relationship tuples (paginated, filterable)
+ */
 const relationshipsControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRelationshipsControllerListUrl)(params), {
         ...options,

package/dist/endpoints/resources/resources.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { AddResourceShareDto, ListVisibleResourcesDto, RegisterResourceOwnershipDto, ResourceOwnershipDto, ResourceOwnershipReadDto, VisibleResourcesDto } from '../../models';
+export declare const getResourcesControllerRegisterUrl: () => string;
+/**
+ * Writes the ownership rows + OpenFGA tuples so the PDP ANDs the verb verdict with instance ownership. Idempotent (upsert + ignore-duplicate tuples). Org scope is forced from the caller context.
+ * @summary Register ownership/visibility of a resource instance
+ */
+export declare const resourcesControllerRegister: (registerResourceOwnershipDto: RegisterResourceOwnershipDto, options?: RequestInit) => Promise<ResourceOwnershipDto>;
+export declare const getResourcesControllerListVisibleUrl: () => string;
+/**
+ * Unions OpenFGA owner/shared-with visibility (usersets expanded transitively) with org-shared instances. Org scope is forced from the caller context. Used by platform BFFs to visibility-filter a list on behalf of the end user they serve.
+ * @summary List the instances of a resource type a subject may see
+ */
+export declare const resourcesControllerListVisible: (listVisibleResourcesDto: ListVisibleResourcesDto, options?: RequestInit) => Promise<VisibleResourcesDto>;
+export declare const getResourcesControllerGetOwnershipUrl: (type: string, id: string) => string;
+/**
+ * Returns the instance visibility and the combined set of registered subjects (owners + shares; the SQL authority does not split them). 404 when the instance was never registered.
+ * @summary Read a resource instance’s current visibility + subjects
+ */
+export declare const resourcesControllerGetOwnership: (type: string, id: string, options?: RequestInit) => Promise<ResourceOwnershipReadDto>;
+export declare const getResourcesControllerDeregisterUrl: (type: string, id: string) => string;
+/**
+ * Idempotent — a no-op when the instance was never registered.
+ * @summary Deregister a resource instance (drop ownership rows + tuples)
+ */
+export declare const resourcesControllerDeregister: (type: string, id: string, options?: RequestInit) => Promise<void>;
+export declare const getResourcesControllerAddShareUrl: (type: string, id: string) => string;
+/**
+ * @summary Add an explicit share to a registered resource instance
+ */
+export declare const resourcesControllerAddShare: (type: string, id: string, addResourceShareDto: AddResourceShareDto, options?: RequestInit) => Promise<void>;

package/dist/endpoints/resources/resources.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resourcesControllerAddShare = exports.getResourcesControllerAddShareUrl = exports.resourcesControllerDeregister = exports.getResourcesControllerDeregisterUrl = exports.resourcesControllerGetOwnership = exports.getResourcesControllerGetOwnershipUrl = exports.resourcesControllerListVisible = exports.getResourcesControllerListVisibleUrl = exports.resourcesControllerRegister = exports.getResourcesControllerRegisterUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getResourcesControllerRegisterUrl = () => {
+    return `/resources`;
+};
+exports.getResourcesControllerRegisterUrl = getResourcesControllerRegisterUrl;
+/**
+ * Writes the ownership rows + OpenFGA tuples so the PDP ANDs the verb verdict with instance ownership. Idempotent (upsert + ignore-duplicate tuples). Org scope is forced from the caller context.
+ * @summary Register ownership/visibility of a resource instance
+ */
+const resourcesControllerRegister = async (registerResourceOwnershipDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getResourcesControllerRegisterUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(registerResourceOwnershipDto)
+    });
+};
+exports.resourcesControllerRegister = resourcesControllerRegister;
+const getResourcesControllerListVisibleUrl = () => {
+    return `/resources/visible`;
+};
+exports.getResourcesControllerListVisibleUrl = getResourcesControllerListVisibleUrl;
+/**
+ * Unions OpenFGA owner/shared-with visibility (usersets expanded transitively) with org-shared instances. Org scope is forced from the caller context. Used by platform BFFs to visibility-filter a list on behalf of the end user they serve.
+ * @summary List the instances of a resource type a subject may see
+ */
+const resourcesControllerListVisible = async (listVisibleResourcesDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getResourcesControllerListVisibleUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(listVisibleResourcesDto)
+    });
+};
+exports.resourcesControllerListVisible = resourcesControllerListVisible;
+const getResourcesControllerGetOwnershipUrl = (type, id) => {
+    return `/resources/${type}/${id}`;
+};
+exports.getResourcesControllerGetOwnershipUrl = getResourcesControllerGetOwnershipUrl;
+/**
+ * Returns the instance visibility and the combined set of registered subjects (owners + shares; the SQL authority does not split them). 404 when the instance was never registered.
+ * @summary Read a resource instance’s current visibility + subjects
+ */
+const resourcesControllerGetOwnership = async (type, id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getResourcesControllerGetOwnershipUrl)(type, id), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.resourcesControllerGetOwnership = resourcesControllerGetOwnership;
+const getResourcesControllerDeregisterUrl = (type, id) => {
+    return `/resources/${type}/${id}`;
+};
+exports.getResourcesControllerDeregisterUrl = getResourcesControllerDeregisterUrl;
+/**
+ * Idempotent — a no-op when the instance was never registered.
+ * @summary Deregister a resource instance (drop ownership rows + tuples)
+ */
+const resourcesControllerDeregister = async (type, id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getResourcesControllerDeregisterUrl)(type, id), {
+        ...options,
+        method: 'DELETE'
+    });
+};
+exports.resourcesControllerDeregister = resourcesControllerDeregister;
+const getResourcesControllerAddShareUrl = (type, id) => {
+    return `/resources/${type}/${id}/relationships`;
+};
+exports.getResourcesControllerAddShareUrl = getResourcesControllerAddShareUrl;
+/**
+ * @summary Add an explicit share to a registered resource instance
+ */
+const resourcesControllerAddShare = async (type, id, addResourceShareDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getResourcesControllerAddShareUrl)(type, id), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(addResourceShareDto)
+    });
+};
+exports.resourcesControllerAddShare = resourcesControllerAddShare;

package/dist/endpoints/roles/roles.d.ts

@@ -1,63 +1,68 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { AddRoleGrantDto, AssignRoleDto, CreateRoleDto, RoleAssignmentDto, RoleAssignmentDtoDataArrayEnvelope, RoleDto, RoleDtoDataArrayEnvelope, RoleGrantDto, RoleGrantDtoDataArrayEnvelope, RolesControllerListParams, UpdateRoleDto } from '../../models';
+import type { AddRoleGrantDto, AssignRoleDto, CreateRoleDto, OrgRoleSyncDto, OrgRoleSyncResultDto, RoleAssignmentDto, RoleAssignmentDtoDataArrayEnvelope, RoleDto, RoleDtoDataArrayEnvelope, RoleGrantDto, RoleGrantDtoDataArrayEnvelope, RolesControllerListParams, UpdateRoleDto } from '../../models';
+export declare const getRolesControllerCreateUrl: () => string;
 /**
  * @summary Create a custom role
  */
-export declare const getRolesControllerCreateUrl: () => string;
 export declare const rolesControllerCreate: (createRoleDto: CreateRoleDto, options?: RequestInit) => Promise<RoleDto>;
+export declare const getRolesControllerListUrl: (params: RolesControllerListParams) => string;
 /**
  * @summary List roles in an org (custom + built-in)
  */
-export declare const getRolesControllerListUrl: (params: RolesControllerListParams) => string;
 export declare const rolesControllerList: (params: RolesControllerListParams, options?: RequestInit) => Promise<RoleDtoDataArrayEnvelope>;
+export declare const getRolesControllerGetByIdUrl: (id: string) => string;
 /**
  * @summary Get a role by id
  */
-export declare const getRolesControllerGetByIdUrl: (id: string) => string;
 export declare const rolesControllerGetById: (id: string, options?: RequestInit) => Promise<RoleDto>;
+export declare const getRolesControllerUpdateUrl: (id: string) => string;
 /**
  * @summary Update a custom role (built-ins are immutable)
  */
-export declare const getRolesControllerUpdateUrl: (id: string) => string;
 export declare const rolesControllerUpdate: (id: string, updateRoleDto: UpdateRoleDto, options?: RequestInit) => Promise<RoleDto>;
+export declare const getRolesControllerDeleteUrl: (id: string) => string;
 /**
  * @summary Delete a custom role (cascades grants + assignments)
  */
-export declare const getRolesControllerDeleteUrl: (id: string) => string;
 export declare const rolesControllerDelete: (id: string, options?: RequestInit) => Promise<void>;
+export declare const getRolesControllerListGrantsUrl: (id: string) => string;
 /**
  * @summary List the capability grants a role bundles
  */
-export declare const getRolesControllerListGrantsUrl: (id: string) => string;
 export declare const rolesControllerListGrants: (id: string, options?: RequestInit) => Promise<RoleGrantDtoDataArrayEnvelope>;
+export declare const getRolesControllerAddGrantUrl: (id: string) => string;
 /**
  * @summary Add a capability grant to a role
  */
-export declare const getRolesControllerAddGrantUrl: (id: string) => string;
 export declare const rolesControllerAddGrant: (id: string, addRoleGrantDto: AddRoleGrantDto, options?: RequestInit) => Promise<RoleGrantDto>;
+export declare const getRolesControllerRemoveGrantUrl: (id: string, grantId: string) => string;
 /**
  * @summary Remove a capability grant from a role
  */
-export declare const getRolesControllerRemoveGrantUrl: (id: string, grantId: string) => string;
 export declare const rolesControllerRemoveGrant: (id: string, grantId: string, options?: RequestInit) => Promise<void>;
+export declare const getRolesControllerListAssignmentsUrl: (id: string) => string;
 /**
  * @summary List a role’s assignments (subjects + teams)
  */
-export declare const getRolesControllerListAssignmentsUrl: (id: string) => string;
 export declare const rolesControllerListAssignments: (id: string, options?: RequestInit) => Promise<RoleAssignmentDtoDataArrayEnvelope>;
+export declare const getRolesControllerAssignUrl: (id: string) => string;
 /**
  * @summary Assign a role to a subject or a team
  */
-export declare const getRolesControllerAssignUrl: (id: string) => string;
 export declare const rolesControllerAssign: (id: string, assignRoleDto: AssignRoleDto, options?: RequestInit) => Promise<RoleAssignmentDto>;
+export declare const getRolesControllerUnassignUrl: (id: string, assignmentId: string) => string;
 /**
  * @summary Remove a role assignment
  */
-export declare const getRolesControllerUnassignUrl: (id: string, assignmentId: string) => string;
 export declare const rolesControllerUnassign: (id: string, assignmentId: string, options?: RequestInit) => Promise<void>;
+export declare const getOrgRoleSyncControllerSyncUrl: () => string;
+/**
+ * @summary Ensure a subject holds the given org role, correctly org-scoped (idempotent).
+ */
+export declare const orgRoleSyncControllerSync: (orgRoleSyncDto: OrgRoleSyncDto, options?: RequestInit) => Promise<OrgRoleSyncResultDto>;