@xemahq/authorization-internal-api-client 0.1.0 → 0.1.1

package/dist/endpoints/roles/roles.js

@@ -1,14 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.rolesControllerUnassign = exports.getRolesControllerUnassignUrl = exports.rolesControllerAssign = exports.getRolesControllerAssignUrl = exports.rolesControllerListAssignments = exports.getRolesControllerListAssignmentsUrl = exports.rolesControllerRemoveGrant = exports.getRolesControllerRemoveGrantUrl = exports.rolesControllerAddGrant = exports.getRolesControllerAddGrantUrl = exports.rolesControllerListGrants = exports.getRolesControllerListGrantsUrl = exports.rolesControllerDelete = exports.getRolesControllerDeleteUrl = exports.rolesControllerUpdate = exports.getRolesControllerUpdateUrl = exports.rolesControllerGetById = exports.getRolesControllerGetByIdUrl = exports.rolesControllerList = exports.getRolesControllerListUrl = exports.rolesControllerCreate = exports.getRolesControllerCreateUrl = void 0;
+exports.orgRoleSyncControllerSync = exports.getOrgRoleSyncControllerSyncUrl = exports.rolesControllerUnassign = exports.getRolesControllerUnassignUrl = exports.rolesControllerAssign = exports.getRolesControllerAssignUrl = exports.rolesControllerListAssignments = exports.getRolesControllerListAssignmentsUrl = exports.rolesControllerRemoveGrant = exports.getRolesControllerRemoveGrantUrl = exports.rolesControllerAddGrant = exports.getRolesControllerAddGrantUrl = exports.rolesControllerListGrants = exports.getRolesControllerListGrantsUrl = exports.rolesControllerDelete = exports.getRolesControllerDeleteUrl = exports.rolesControllerUpdate = exports.getRolesControllerUpdateUrl = exports.rolesControllerGetById = exports.getRolesControllerGetByIdUrl = exports.rolesControllerList = exports.getRolesControllerListUrl = exports.rolesControllerCreate = exports.getRolesControllerCreateUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * @summary Create a custom role
- */
 const getRolesControllerCreateUrl = () => {
     return `/roles`;
 };
 exports.getRolesControllerCreateUrl = getRolesControllerCreateUrl;
+/**
+ * @summary Create a custom role
+ */
 const rolesControllerCreate = async (createRoleDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerCreateUrl)(), {
         ...options,
@@ -18,9 +18,6 @@ const rolesControllerCreate = async (createRoleDto, options) => {
     });
 };
 exports.rolesControllerCreate = rolesControllerCreate;
-/**
- * @summary List roles in an org (custom + built-in)
- */
 const getRolesControllerListUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -44,6 +41,9 @@ const getRolesControllerListUrl = (params) => {
     return stringifiedParams.length > 0 ? `/roles?${stringifiedParams}` : `/roles`;
 };
 exports.getRolesControllerListUrl = getRolesControllerListUrl;
+/**
+ * @summary List roles in an org (custom + built-in)
+ */
 const rolesControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerListUrl)(params), {
         ...options,
@@ -51,13 +51,13 @@ const rolesControllerList = async (params, options) => {
     });
 };
 exports.rolesControllerList = rolesControllerList;
-/**
- * @summary Get a role by id
- */
 const getRolesControllerGetByIdUrl = (id) => {
     return `/roles/${id}`;
 };
 exports.getRolesControllerGetByIdUrl = getRolesControllerGetByIdUrl;
+/**
+ * @summary Get a role by id
+ */
 const rolesControllerGetById = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerGetByIdUrl)(id), {
         ...options,
@@ -65,13 +65,13 @@ const rolesControllerGetById = async (id, options) => {
     });
 };
 exports.rolesControllerGetById = rolesControllerGetById;
-/**
- * @summary Update a custom role (built-ins are immutable)
- */
 const getRolesControllerUpdateUrl = (id) => {
     return `/roles/${id}`;
 };
 exports.getRolesControllerUpdateUrl = getRolesControllerUpdateUrl;
+/**
+ * @summary Update a custom role (built-ins are immutable)
+ */
 const rolesControllerUpdate = async (id, updateRoleDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerUpdateUrl)(id), {
         ...options,
@@ -81,13 +81,13 @@ const rolesControllerUpdate = async (id, updateRoleDto, options) => {
     });
 };
 exports.rolesControllerUpdate = rolesControllerUpdate;
-/**
- * @summary Delete a custom role (cascades grants + assignments)
- */
 const getRolesControllerDeleteUrl = (id) => {
     return `/roles/${id}`;
 };
 exports.getRolesControllerDeleteUrl = getRolesControllerDeleteUrl;
+/**
+ * @summary Delete a custom role (cascades grants + assignments)
+ */
 const rolesControllerDelete = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerDeleteUrl)(id), {
         ...options,
@@ -95,13 +95,13 @@ const rolesControllerDelete = async (id, options) => {
     });
 };
 exports.rolesControllerDelete = rolesControllerDelete;
-/**
- * @summary List the capability grants a role bundles
- */
 const getRolesControllerListGrantsUrl = (id) => {
     return `/roles/${id}/grants`;
 };
 exports.getRolesControllerListGrantsUrl = getRolesControllerListGrantsUrl;
+/**
+ * @summary List the capability grants a role bundles
+ */
 const rolesControllerListGrants = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerListGrantsUrl)(id), {
         ...options,
@@ -109,13 +109,13 @@ const rolesControllerListGrants = async (id, options) => {
     });
 };
 exports.rolesControllerListGrants = rolesControllerListGrants;
-/**
- * @summary Add a capability grant to a role
- */
 const getRolesControllerAddGrantUrl = (id) => {
     return `/roles/${id}/grants`;
 };
 exports.getRolesControllerAddGrantUrl = getRolesControllerAddGrantUrl;
+/**
+ * @summary Add a capability grant to a role
+ */
 const rolesControllerAddGrant = async (id, addRoleGrantDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerAddGrantUrl)(id), {
         ...options,
@@ -125,13 +125,13 @@ const rolesControllerAddGrant = async (id, addRoleGrantDto, options) => {
     });
 };
 exports.rolesControllerAddGrant = rolesControllerAddGrant;
-/**
- * @summary Remove a capability grant from a role
- */
 const getRolesControllerRemoveGrantUrl = (id, grantId) => {
     return `/roles/${id}/grants/${grantId}`;
 };
 exports.getRolesControllerRemoveGrantUrl = getRolesControllerRemoveGrantUrl;
+/**
+ * @summary Remove a capability grant from a role
+ */
 const rolesControllerRemoveGrant = async (id, grantId, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerRemoveGrantUrl)(id, grantId), {
         ...options,
@@ -139,13 +139,13 @@ const rolesControllerRemoveGrant = async (id, grantId, options) => {
     });
 };
 exports.rolesControllerRemoveGrant = rolesControllerRemoveGrant;
-/**
- * @summary List a role’s assignments (subjects + teams)
- */
 const getRolesControllerListAssignmentsUrl = (id) => {
     return `/roles/${id}/assignments`;
 };
 exports.getRolesControllerListAssignmentsUrl = getRolesControllerListAssignmentsUrl;
+/**
+ * @summary List a role’s assignments (subjects + teams)
+ */
 const rolesControllerListAssignments = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerListAssignmentsUrl)(id), {
         ...options,
@@ -153,13 +153,13 @@ const rolesControllerListAssignments = async (id, options) => {
     });
 };
 exports.rolesControllerListAssignments = rolesControllerListAssignments;
-/**
- * @summary Assign a role to a subject or a team
- */
 const getRolesControllerAssignUrl = (id) => {
     return `/roles/${id}/assignments`;
 };
 exports.getRolesControllerAssignUrl = getRolesControllerAssignUrl;
+/**
+ * @summary Assign a role to a subject or a team
+ */
 const rolesControllerAssign = async (id, assignRoleDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerAssignUrl)(id), {
         ...options,
@@ -169,13 +169,13 @@ const rolesControllerAssign = async (id, assignRoleDto, options) => {
     });
 };
 exports.rolesControllerAssign = rolesControllerAssign;
-/**
- * @summary Remove a role assignment
- */
 const getRolesControllerUnassignUrl = (id, assignmentId) => {
     return `/roles/${id}/assignments/${assignmentId}`;
 };
 exports.getRolesControllerUnassignUrl = getRolesControllerUnassignUrl;
+/**
+ * @summary Remove a role assignment
+ */
 const rolesControllerUnassign = async (id, assignmentId, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerUnassignUrl)(id, assignmentId), {
         ...options,
@@ -183,3 +183,19 @@ const rolesControllerUnassign = async (id, assignmentId, options) => {
     });
 };
 exports.rolesControllerUnassign = rolesControllerUnassign;
+const getOrgRoleSyncControllerSyncUrl = () => {
+    return `/internal/org-role-sync`;
+};
+exports.getOrgRoleSyncControllerSyncUrl = getOrgRoleSyncControllerSyncUrl;
+/**
+ * @summary Ensure a subject holds the given org role, correctly org-scoped (idempotent).
+ */
+const orgRoleSyncControllerSync = async (orgRoleSyncDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getOrgRoleSyncControllerSyncUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(orgRoleSyncDto)
+    });
+};
+exports.orgRoleSyncControllerSync = orgRoleSyncControllerSync;

package/dist/endpoints/teams/teams.d.ts

@@ -1,48 +1,48 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
 import type { AddTeamMemberDto, CreateTeamDto, TeamDto, TeamDtoDataArrayEnvelope, TeamMembershipDto, TeamMembershipDtoDataArrayEnvelope, TeamsControllerListParams, UpdateTeamDto } from '../../models';
+export declare const getTeamsControllerCreateUrl: () => string;
 /**
  * @summary Create a team
  */
-export declare const getTeamsControllerCreateUrl: () => string;
 export declare const teamsControllerCreate: (createTeamDto: CreateTeamDto, options?: RequestInit) => Promise<TeamDto>;
+export declare const getTeamsControllerListUrl: (params: TeamsControllerListParams) => string;
 /**
  * @summary List teams in an org
  */
-export declare const getTeamsControllerListUrl: (params: TeamsControllerListParams) => string;
 export declare const teamsControllerList: (params: TeamsControllerListParams, options?: RequestInit) => Promise<TeamDtoDataArrayEnvelope>;
+export declare const getTeamsControllerGetByIdUrl: (id: string) => string;
 /**
  * @summary Get a team by id
  */
-export declare const getTeamsControllerGetByIdUrl: (id: string) => string;
 export declare const teamsControllerGetById: (id: string, options?: RequestInit) => Promise<TeamDto>;
+export declare const getTeamsControllerUpdateUrl: (id: string) => string;
 /**
  * @summary Update a team (rename, re-describe, re-parent)
  */
-export declare const getTeamsControllerUpdateUrl: (id: string) => string;
 export declare const teamsControllerUpdate: (id: string, updateTeamDto: UpdateTeamDto, options?: RequestInit) => Promise<TeamDto>;
+export declare const getTeamsControllerDeleteUrl: (id: string) => string;
 /**
  * @summary Delete a team (cascades memberships + assignments)
  */
-export declare const getTeamsControllerDeleteUrl: (id: string) => string;
 export declare const teamsControllerDelete: (id: string, options?: RequestInit) => Promise<void>;
+export declare const getTeamsControllerListMembersUrl: (id: string) => string;
 /**
  * @summary List a team’s direct members
  */
-export declare const getTeamsControllerListMembersUrl: (id: string) => string;
 export declare const teamsControllerListMembers: (id: string, options?: RequestInit) => Promise<TeamMembershipDtoDataArrayEnvelope>;
+export declare const getTeamsControllerAddMemberUrl: (id: string) => string;
 /**
  * @summary Add a subject (user/agent/service/app/external) to a team
  */
-export declare const getTeamsControllerAddMemberUrl: (id: string) => string;
 export declare const teamsControllerAddMember: (id: string, addTeamMemberDto: AddTeamMemberDto, options?: RequestInit) => Promise<TeamMembershipDto>;
+export declare const getTeamsControllerRemoveMemberUrl: (id: string, membershipId: string) => string;
 /**
  * @summary Remove a member from a team
  */
-export declare const getTeamsControllerRemoveMemberUrl: (id: string, membershipId: string) => string;
 export declare const teamsControllerRemoveMember: (id: string, membershipId: string, options?: RequestInit) => Promise<void>;

package/dist/endpoints/teams/teams.js

@@ -2,13 +2,13 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.teamsControllerRemoveMember = exports.getTeamsControllerRemoveMemberUrl = exports.teamsControllerAddMember = exports.getTeamsControllerAddMemberUrl = exports.teamsControllerListMembers = exports.getTeamsControllerListMembersUrl = exports.teamsControllerDelete = exports.getTeamsControllerDeleteUrl = exports.teamsControllerUpdate = exports.getTeamsControllerUpdateUrl = exports.teamsControllerGetById = exports.getTeamsControllerGetByIdUrl = exports.teamsControllerList = exports.getTeamsControllerListUrl = exports.teamsControllerCreate = exports.getTeamsControllerCreateUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * @summary Create a team
- */
 const getTeamsControllerCreateUrl = () => {
     return `/teams`;
 };
 exports.getTeamsControllerCreateUrl = getTeamsControllerCreateUrl;
+/**
+ * @summary Create a team
+ */
 const teamsControllerCreate = async (createTeamDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerCreateUrl)(), {
         ...options,
@@ -18,9 +18,6 @@ const teamsControllerCreate = async (createTeamDto, options) => {
     });
 };
 exports.teamsControllerCreate = teamsControllerCreate;
-/**
- * @summary List teams in an org
- */
 const getTeamsControllerListUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -44,6 +41,9 @@ const getTeamsControllerListUrl = (params) => {
     return stringifiedParams.length > 0 ? `/teams?${stringifiedParams}` : `/teams`;
 };
 exports.getTeamsControllerListUrl = getTeamsControllerListUrl;
+/**
+ * @summary List teams in an org
+ */
 const teamsControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerListUrl)(params), {
         ...options,
@@ -51,13 +51,13 @@ const teamsControllerList = async (params, options) => {
     });
 };
 exports.teamsControllerList = teamsControllerList;
-/**
- * @summary Get a team by id
- */
 const getTeamsControllerGetByIdUrl = (id) => {
     return `/teams/${id}`;
 };
 exports.getTeamsControllerGetByIdUrl = getTeamsControllerGetByIdUrl;
+/**
+ * @summary Get a team by id
+ */
 const teamsControllerGetById = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerGetByIdUrl)(id), {
         ...options,
@@ -65,13 +65,13 @@ const teamsControllerGetById = async (id, options) => {
     });
 };
 exports.teamsControllerGetById = teamsControllerGetById;
-/**
- * @summary Update a team (rename, re-describe, re-parent)
- */
 const getTeamsControllerUpdateUrl = (id) => {
     return `/teams/${id}`;
 };
 exports.getTeamsControllerUpdateUrl = getTeamsControllerUpdateUrl;
+/**
+ * @summary Update a team (rename, re-describe, re-parent)
+ */
 const teamsControllerUpdate = async (id, updateTeamDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerUpdateUrl)(id), {
         ...options,
@@ -81,13 +81,13 @@ const teamsControllerUpdate = async (id, updateTeamDto, options) => {
     });
 };
 exports.teamsControllerUpdate = teamsControllerUpdate;
-/**
- * @summary Delete a team (cascades memberships + assignments)
- */
 const getTeamsControllerDeleteUrl = (id) => {
     return `/teams/${id}`;
 };
 exports.getTeamsControllerDeleteUrl = getTeamsControllerDeleteUrl;
+/**
+ * @summary Delete a team (cascades memberships + assignments)
+ */
 const teamsControllerDelete = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerDeleteUrl)(id), {
         ...options,
@@ -95,13 +95,13 @@ const teamsControllerDelete = async (id, options) => {
     });
 };
 exports.teamsControllerDelete = teamsControllerDelete;
-/**
- * @summary List a team’s direct members
- */
 const getTeamsControllerListMembersUrl = (id) => {
     return `/teams/${id}/members`;
 };
 exports.getTeamsControllerListMembersUrl = getTeamsControllerListMembersUrl;
+/**
+ * @summary List a team’s direct members
+ */
 const teamsControllerListMembers = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerListMembersUrl)(id), {
         ...options,
@@ -109,13 +109,13 @@ const teamsControllerListMembers = async (id, options) => {
     });
 };
 exports.teamsControllerListMembers = teamsControllerListMembers;
-/**
- * @summary Add a subject (user/agent/service/app/external) to a team
- */
 const getTeamsControllerAddMemberUrl = (id) => {
     return `/teams/${id}/members`;
 };
 exports.getTeamsControllerAddMemberUrl = getTeamsControllerAddMemberUrl;
+/**
+ * @summary Add a subject (user/agent/service/app/external) to a team
+ */
 const teamsControllerAddMember = async (id, addTeamMemberDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerAddMemberUrl)(id), {
         ...options,
@@ -125,13 +125,13 @@ const teamsControllerAddMember = async (id, addTeamMemberDto, options) => {
     });
 };
 exports.teamsControllerAddMember = teamsControllerAddMember;
-/**
- * @summary Remove a member from a team
- */
 const getTeamsControllerRemoveMemberUrl = (id, membershipId) => {
     return `/teams/${id}/members/${membershipId}`;
 };
 exports.getTeamsControllerRemoveMemberUrl = getTeamsControllerRemoveMemberUrl;
+/**
+ * @summary Remove a member from a team
+ */
 const teamsControllerRemoveMember = async (id, membershipId, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerRemoveMemberUrl)(id, membershipId), {
         ...options,

package/dist/index.d.ts

@@ -1,10 +1,12 @@
 export { configureClient, getClientConfig, ClientError, customFetch, type ClientConfig } from './custom-fetch';
 export * from './models';
+export * from './endpoints/agents/agents';
 export * from './endpoints/authorization/authorization';
 export * from './endpoints/credential-defaults/credential-defaults';
 export * from './endpoints/environments/environments';
 export * from './endpoints/grants/grants';
 export * from './endpoints/profiles/profiles';
 export * from './endpoints/relationships/relationships';
+export * from './endpoints/resources/resources';
 export * from './endpoints/roles/roles';
 export * from './endpoints/teams/teams';

package/dist/index.js

@@ -22,11 +22,13 @@ Object.defineProperty(exports, "getClientConfig", { enumerable: true, get: funct
 Object.defineProperty(exports, "ClientError", { enumerable: true, get: function () { return custom_fetch_1.ClientError; } });
 Object.defineProperty(exports, "customFetch", { enumerable: true, get: function () { return custom_fetch_1.customFetch; } });
 __exportStar(require("./models"), exports);
+__exportStar(require("./endpoints/agents/agents"), exports);
 __exportStar(require("./endpoints/authorization/authorization"), exports);
 __exportStar(require("./endpoints/credential-defaults/credential-defaults"), exports);
 __exportStar(require("./endpoints/environments/environments"), exports);
 __exportStar(require("./endpoints/grants/grants"), exports);
 __exportStar(require("./endpoints/profiles/profiles"), exports);
 __exportStar(require("./endpoints/relationships/relationships"), exports);
+__exportStar(require("./endpoints/resources/resources"), exports);
 __exportStar(require("./endpoints/roles/roles"), exports);
 __exportStar(require("./endpoints/teams/teams"), exports);

package/dist/models/addResourceShareDto.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { ResourceSubjectRefDto } from './resourceSubjectRefDto.js';
+export interface AddResourceShareDto {
+    share: ResourceSubjectRefDto;
+}

package/dist/models/addRoleGrantDto.d.ts

@@ -1,11 +1,11 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { GrantConstraintsDto } from './grantConstraintsDto';
+import type { GrantConstraintsDto } from './grantConstraintsDto.js';
 export interface AddRoleGrantDto {
     /** Canonical CapabilityRef from `@xemahq/kernel-contracts/capability`. */
     capability: string;

package/dist/models/addTeamMemberDto.d.ts

@@ -1,11 +1,11 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { SubjectKind } from './subjectKind';
+import type { SubjectKind } from './subjectKind.js';
 export interface AddTeamMemberDto {
     subjectKind: SubjectKind;
     subjectRef: string;

package/dist/models/agentProvisionDecision.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+export type AgentProvisionDecision = typeof AgentProvisionDecision[keyof typeof AgentProvisionDecision];
+export declare const AgentProvisionDecision: {
+    readonly 'auto-granted': "auto-granted";
+    readonly 'pending-approval': "pending-approval";
+};

package/dist/models/agentProvisionDecision.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentProvisionDecision = void 0;
+exports.AgentProvisionDecision = {
+    'auto-granted': 'auto-granted',
+    'pending-approval': 'pending-approval',
+};

package/dist/models/agentProvisionReason.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+export type AgentProvisionReason = typeof AgentProvisionReason[keyof typeof AgentProvisionReason];
+export declare const AgentProvisionReason: {
+    readonly 'owner-held-low-risk': "owner-held-low-risk";
+    readonly 'requires-approval': "requires-approval";
+    readonly 'high-risk': "high-risk";
+    readonly 'not-owner-held': "not-owner-held";
+    readonly 'unknown-capability': "unknown-capability";
+};

package/dist/models/agentProvisionReason.js

@@ -0,0 +1,17 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentProvisionReason = void 0;
+exports.AgentProvisionReason = {
+    'owner-held-low-risk': 'owner-held-low-risk',
+    'requires-approval': 'requires-approval',
+    'high-risk': 'high-risk',
+    'not-owner-held': 'not-owner-held',
+    'unknown-capability': 'unknown-capability',
+};

package/dist/models/agentReachTier.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * The agent reach-tier ceiling. Selects the execution environment the owner-held check + grants resolve under.
+ */
+export type AgentReachTier = typeof AgentReachTier[keyof typeof AgentReachTier];
+export declare const AgentReachTier: {
+    readonly sandbox: "sandbox";
+    readonly 'as-owner': "as-owner";
+    readonly connected: "connected";
+    readonly full: "full";
+};

package/dist/models/agentReachTier.js

@@ -0,0 +1,16 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentReachTier = void 0;
+exports.AgentReachTier = {
+    sandbox: 'sandbox',
+    'as-owner': 'as-owner',
+    connected: 'connected',
+    full: 'full',
+};

package/dist/models/assignRoleDto.d.ts

@@ -1,11 +1,11 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { SubjectKind } from './subjectKind';
+import type { SubjectKind } from './subjectKind.js';
 export interface AssignRoleDto {
     /** The org this assignment is scoped to. For a custom role it must equal the role’s org; for a built-in role (system sentinel) it is the real consuming org. */
     orgId: string;

package/dist/models/authorizationCheckRequestDto.d.ts

@@ -1,11 +1,11 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { SubjectRefDto } from './subjectRefDto';
+import type { SubjectRefDto } from './subjectRefDto.js';
 export interface AuthorizationCheckRequestDto {
     /** Organization identifier. Scopes the grant lookup to the tenant. */
     orgId: string;

package/dist/models/authorizationCheckResponseDto.d.ts

@@ -1,12 +1,12 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { AuthorizationReasonDto } from './authorizationReasonDto';
-import type { AuthorizationSuggestionDto } from './authorizationSuggestionDto';
+import type { AuthorizationReasonDto } from './authorizationReasonDto.js';
+import type { AuthorizationSuggestionDto } from './authorizationSuggestionDto.js';
 export interface AuthorizationCheckResponseDto {
     allowed: boolean;
     /** Identifier of the `CapabilityGrant` row that matched (allow only). */

package/dist/models/authorizationDecisionCode.d.ts

@@ -1,5 +1,5 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
@@ -10,6 +10,9 @@ export declare const AuthorizationDecisionCode: {
     readonly MATCHED_GRANT: "MATCHED_GRANT";
     readonly NO_GRANT_FOUND: "NO_GRANT_FOUND";
     readonly GRANT_REVOKED: "GRANT_REVOKED";
-    readonly CAPABILITY_DENIED_BY_ZONE: "CAPABILITY_DENIED_BY_ZONE";
+    readonly CAPABILITY_DENIED_BY_ENVIRONMENT: "CAPABILITY_DENIED_BY_ENVIRONMENT";
     readonly CAPABILITY_REQUIRES_APPROVAL: "CAPABILITY_REQUIRES_APPROVAL";
+    readonly DELEGATION_GRANT_INSUFFICIENT: "DELEGATION_GRANT_INSUFFICIENT";
+    readonly RESOURCE_NOT_OWNED: "RESOURCE_NOT_OWNED";
+    readonly REACH_TIER_DENIED: "REACH_TIER_DENIED";
 };

package/dist/models/authorizationDecisionCode.js

@@ -1,6 +1,6 @@
 "use strict";
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
@@ -12,6 +12,9 @@ exports.AuthorizationDecisionCode = {
     MATCHED_GRANT: 'MATCHED_GRANT',
     NO_GRANT_FOUND: 'NO_GRANT_FOUND',
     GRANT_REVOKED: 'GRANT_REVOKED',
-    CAPABILITY_DENIED_BY_ZONE: 'CAPABILITY_DENIED_BY_ZONE',
+    CAPABILITY_DENIED_BY_ENVIRONMENT: 'CAPABILITY_DENIED_BY_ENVIRONMENT',
     CAPABILITY_REQUIRES_APPROVAL: 'CAPABILITY_REQUIRES_APPROVAL',
+    DELEGATION_GRANT_INSUFFICIENT: 'DELEGATION_GRANT_INSUFFICIENT',
+    RESOURCE_NOT_OWNED: 'RESOURCE_NOT_OWNED',
+    REACH_TIER_DENIED: 'REACH_TIER_DENIED',
 };