@xemahq/authorization-internal-api-client 0.1.0 → 0.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +174 -201
- package/README.md +1 -1
- package/dist/endpoints/agents/agents.d.ts +14 -0
- package/dist/endpoints/agents/agents.js +21 -0
- package/dist/endpoints/authorization/authorization.d.ts +13 -7
- package/dist/endpoints/authorization/authorization.js +26 -9
- package/dist/endpoints/credential-defaults/credential-defaults.d.ts +5 -5
- package/dist/endpoints/credential-defaults/credential-defaults.js +12 -12
- package/dist/endpoints/environments/environments.d.ts +7 -7
- package/dist/endpoints/environments/environments.js +20 -20
- package/dist/endpoints/grants/grants.d.ts +8 -8
- package/dist/endpoints/grants/grants.js +15 -15
- package/dist/endpoints/profiles/profiles.d.ts +5 -5
- package/dist/endpoints/profiles/profiles.js +4 -4
- package/dist/endpoints/relationships/relationships.d.ts +4 -4
- package/dist/endpoints/relationships/relationships.js +4 -4
- package/dist/endpoints/resources/resources.d.ts +37 -0
- package/dist/endpoints/resources/resources.js +84 -0
- package/dist/endpoints/roles/roles.d.ts +18 -13
- package/dist/endpoints/roles/roles.js +50 -34
- package/dist/endpoints/teams/teams.d.ts +9 -9
- package/dist/endpoints/teams/teams.js +24 -24
- package/dist/index.d.ts +2 -0
- package/dist/index.js +2 -0
- package/dist/models/addResourceShareDto.d.ts +11 -0
- package/dist/models/addRoleGrantDto.d.ts +2 -2
- package/dist/models/addTeamMemberDto.d.ts +2 -2
- package/dist/models/agentProvisionDecision.d.ts +12 -0
- package/dist/models/agentProvisionDecision.js +14 -0
- package/dist/models/agentProvisionReason.d.ts +15 -0
- package/dist/models/agentProvisionReason.js +17 -0
- package/dist/models/agentReachTier.d.ts +17 -0
- package/dist/models/agentReachTier.js +16 -0
- package/dist/models/assignRoleDto.d.ts +2 -2
- package/dist/models/authorizationCheckRequestDto.d.ts +2 -2
- package/dist/models/authorizationCheckResponseDto.d.ts +3 -3
- package/dist/models/authorizationDecisionCode.d.ts +5 -2
- package/dist/models/authorizationDecisionCode.js +5 -2
- package/dist/models/authorizationReasonDto.d.ts +2 -2
- package/dist/models/authorizationSuggestionDto.d.ts +2 -2
- package/dist/models/authorizationSuggestionKind.d.ts +1 -1
- package/dist/models/authorizationSuggestionKind.js +1 -1
- package/dist/models/biomePermissionProfile.d.ts +1 -1
- package/dist/models/biomePermissionProfile.js +1 -1
- package/dist/models/biomeTrustTier.d.ts +1 -1
- package/dist/models/biomeTrustTier.js +1 -1
- package/dist/models/callerKind.d.ts +1 -1
- package/dist/models/callerKind.js +1 -1
- package/dist/models/capabilityGrantDto.d.ts +5 -5
- package/dist/models/capabilityGrantDtoPaginatedEnvelope.d.ts +13 -0
- package/dist/models/capabilityGrantRelation.d.ts +4 -1
- package/dist/models/capabilityGrantRelation.js +1 -1
- package/dist/models/capabilityRiskTier.d.ts +17 -0
- package/dist/models/capabilityRiskTier.js +16 -0
- package/dist/models/createExecutionEnvironmentDto.d.ts +5 -5
- package/dist/models/createExecutionEnvironmentDtoAllowedCapabilitiesItem.d.ts +1 -1
- package/dist/models/createExecutionEnvironmentDtoAllowedCapabilitiesItem.js +1 -1
- package/dist/models/createExecutionEnvironmentDtoApprovalRulesItem.d.ts +1 -1
- package/dist/models/createExecutionEnvironmentDtoApprovalRulesItem.js +1 -1
- package/dist/models/createExecutionEnvironmentDtoRuntimeLimits.d.ts +1 -1
- package/dist/models/createExecutionEnvironmentDtoRuntimeLimits.js +1 -1
- package/dist/models/createGrantDto.d.ts +6 -6
- package/dist/models/createRoleDto.d.ts +1 -1
- package/dist/models/createRoleDto.js +1 -1
- package/dist/models/createTeamDto.d.ts +1 -1
- package/dist/models/createTeamDto.js +1 -1
- package/dist/models/credentialDefaultDto.d.ts +1 -1
- package/dist/models/credentialDefaultDto.js +1 -1
- package/dist/models/credentialDefaultDtoDataArrayEnvelope.d.ts +2 -2
- package/dist/models/credentialDefaultDtoDataEnvelope.d.ts +2 -2
- package/dist/models/credentialDefaultsControllerDeleteParams.d.ts +1 -1
- package/dist/models/credentialDefaultsControllerDeleteParams.js +1 -1
- package/dist/models/credentialDefaultsControllerGetParams.d.ts +1 -1
- package/dist/models/credentialDefaultsControllerGetParams.js +1 -1
- package/dist/models/credentialDefaultsControllerListParams.d.ts +1 -1
- package/dist/models/credentialDefaultsControllerListParams.js +1 -1
- package/dist/models/credentialPrecedenceSource.d.ts +2 -1
- package/dist/models/credentialPrecedenceSource.js +2 -1
- package/dist/models/dataClassification.d.ts +1 -1
- package/dist/models/dataClassification.js +1 -1
- package/dist/models/dataResidency.d.ts +1 -1
- package/dist/models/dataResidency.js +1 -1
- package/dist/models/environmentsControllerFindBySlugParams.d.ts +1 -1
- package/dist/models/environmentsControllerFindBySlugParams.js +1 -1
- package/dist/models/environmentsControllerListParams.d.ts +1 -1
- package/dist/models/environmentsControllerListParams.js +1 -1
- package/dist/models/environmentsControllerRemoveParams.d.ts +1 -1
- package/dist/models/environmentsControllerRemoveParams.js +1 -1
- package/dist/models/environmentsControllerUpdateParams.d.ts +1 -1
- package/dist/models/environmentsControllerUpdateParams.js +1 -1
- package/dist/models/executionEnvironmentKind.d.ts +2 -2
- package/dist/models/executionEnvironmentKind.js +1 -1
- package/dist/models/executionEnvironmentResponseDto.d.ts +6 -6
- package/dist/models/executionEnvironmentResponseDtoAllowedCapabilitiesItem.d.ts +1 -1
- package/dist/models/executionEnvironmentResponseDtoAllowedCapabilitiesItem.js +1 -1
- package/dist/models/executionEnvironmentResponseDtoApprovalRulesItem.d.ts +1 -1
- package/dist/models/executionEnvironmentResponseDtoApprovalRulesItem.js +1 -1
- package/dist/models/executionEnvironmentResponseDtoOrgId.d.ts +1 -1
- package/dist/models/executionEnvironmentResponseDtoOrgId.js +1 -1
- package/dist/models/executionEnvironmentResponseDtoRuntimeLimits.d.ts +1 -1
- package/dist/models/executionEnvironmentResponseDtoRuntimeLimits.js +1 -1
- package/dist/models/grantConstraintsDto.d.ts +1 -1
- package/dist/models/grantConstraintsDto.js +1 -1
- package/dist/models/grantsControllerListParams.d.ts +2 -2
- package/dist/models/index.d.ts +25 -3
- package/dist/models/index.js +25 -3
- package/dist/models/listVisibleResourcesDto.d.ts +14 -0
- package/dist/models/openFgaRelationshipDto.d.ts +2 -2
- package/dist/models/openFgaRelationshipDtoPaginatedEnvelope.d.ts +13 -0
- package/dist/models/orgRole.d.ts +16 -0
- package/dist/models/{roleAssignmentDtoSubjectRef.js → orgRole.js} +7 -1
- package/dist/models/orgRoleSyncDto.d.ts +18 -0
- package/dist/models/orgRoleSyncResultDto.d.ts +11 -0
- package/dist/models/{teamDtoDescription.js → orgRoleSyncResultDto.js} +1 -1
- package/dist/models/paginationMeta.d.ts +18 -0
- package/dist/models/{roleAssignmentDtoTeamId.js → paginationMeta.js} +1 -1
- package/dist/models/policyActingForDto.d.ts +2 -2
- package/dist/models/policyBiomeDto.d.ts +2 -2
- package/dist/models/policyCallerDto.d.ts +2 -2
- package/dist/models/policyCapabilityDto.d.ts +1 -1
- package/dist/models/policyCapabilityDto.js +1 -1
- package/dist/models/policyCheckBatchRequestDto.d.ts +15 -0
- package/dist/models/policyCheckBatchResponseDto.d.ts +12 -0
- package/dist/models/policyCheckRequestDto.d.ts +9 -9
- package/dist/models/policyConstraintsDto.d.ts +1 -1
- package/dist/models/policyConstraintsDto.js +1 -1
- package/dist/models/policyDecisionDto.d.ts +6 -6
- package/dist/models/policyDecisionKind.d.ts +1 -1
- package/dist/models/policyDecisionKind.js +1 -1
- package/dist/models/policyEnvironmentDto.d.ts +1 -1
- package/dist/models/policyEnvironmentDto.js +1 -1
- package/dist/models/policyObligationDto.d.ts +9 -5
- package/dist/models/policyObligationKind.d.ts +2 -1
- package/dist/models/policyObligationKind.js +2 -1
- package/dist/models/policyResourceDto.d.ts +2 -2
- package/dist/models/policyRouteHintDto.d.ts +3 -3
- package/dist/models/policyRouteHintDtoRequiredRunnerLabels.d.ts +1 -1
- package/dist/models/policyRouteHintDtoRequiredRunnerLabels.js +1 -1
- package/dist/models/policySpaceRefDto.d.ts +2 -2
- package/dist/models/policySubjectRefDto.d.ts +3 -3
- package/dist/models/profilePolicyTemplateDto.d.ts +3 -3
- package/dist/models/profilePolicyTemplateDtoNotes.d.ts +1 -1
- package/dist/models/profilePolicyTemplateDtoNotes.js +1 -1
- package/dist/models/provisionAgentRequestDto.d.ts +20 -0
- package/dist/models/provisionAgentResultDto.d.ts +14 -0
- package/dist/models/provisionAgentResultDto.js +2 -0
- package/dist/models/provisionedCapabilityDto.d.ts +21 -0
- package/dist/models/provisionedCapabilityDto.js +2 -0
- package/dist/models/registerResourceOwnershipDto.d.ts +21 -0
- package/dist/models/registerResourceOwnershipDto.js +2 -0
- package/dist/models/relationshipsControllerListParams.d.ts +3 -3
- package/dist/models/resourceManagedBy.d.ts +19 -0
- package/dist/models/resourceManagedBy.js +18 -0
- package/dist/models/resourceOwnershipDto.d.ts +17 -0
- package/dist/models/resourceOwnershipDto.js +2 -0
- package/dist/models/resourceOwnershipEntryDto.d.ts +13 -0
- package/dist/models/resourceOwnershipEntryDto.js +2 -0
- package/dist/models/resourceOwnershipReadDto.d.ts +16 -0
- package/dist/models/resourceOwnershipReadDto.js +2 -0
- package/dist/models/resourceSubjectRefDto.d.ts +13 -0
- package/dist/models/resourceSubjectRefDto.js +2 -0
- package/dist/models/resourceVisibilityPattern.d.ts +18 -0
- package/dist/models/resourceVisibilityPattern.js +17 -0
- package/dist/models/roleAssignmentDto.d.ts +2 -2
- package/dist/models/roleAssignmentDtoDataArrayEnvelope.d.ts +2 -2
- package/dist/models/roleDto.d.ts +4 -1
- package/dist/models/roleDto.js +0 -7
- package/dist/models/roleDtoDataArrayEnvelope.d.ts +2 -2
- package/dist/models/roleGrantDto.d.ts +2 -2
- package/dist/models/roleGrantDtoDataArrayEnvelope.d.ts +2 -2
- package/dist/models/rolesControllerListParams.d.ts +1 -1
- package/dist/models/rolesControllerListParams.js +1 -1
- package/dist/models/runnerKind.d.ts +1 -1
- package/dist/models/runnerKind.js +1 -1
- package/dist/models/spaceKind.d.ts +1 -1
- package/dist/models/spaceKind.js +1 -1
- package/dist/models/subjectKind.d.ts +1 -1
- package/dist/models/subjectKind.js +1 -1
- package/dist/models/subjectRefDto.d.ts +2 -2
- package/dist/models/teamDto.d.ts +1 -1
- package/dist/models/teamDto.js +1 -1
- package/dist/models/teamDtoDataArrayEnvelope.d.ts +2 -2
- package/dist/models/teamMembershipDto.d.ts +2 -2
- package/dist/models/teamMembershipDtoDataArrayEnvelope.d.ts +2 -2
- package/dist/models/teamsControllerListParams.d.ts +1 -1
- package/dist/models/teamsControllerListParams.js +1 -1
- package/dist/models/updateExecutionEnvironmentDto.d.ts +4 -4
- package/dist/models/updateExecutionEnvironmentDtoAllowedCapabilitiesItem.d.ts +1 -1
- package/dist/models/updateExecutionEnvironmentDtoAllowedCapabilitiesItem.js +1 -1
- package/dist/models/updateExecutionEnvironmentDtoApprovalRulesItem.d.ts +1 -1
- package/dist/models/updateExecutionEnvironmentDtoApprovalRulesItem.js +1 -1
- package/dist/models/updateExecutionEnvironmentDtoRuntimeLimits.d.ts +1 -1
- package/dist/models/updateExecutionEnvironmentDtoRuntimeLimits.js +1 -1
- package/dist/models/updateGrantDto.d.ts +4 -4
- package/dist/models/updateRoleDto.d.ts +1 -1
- package/dist/models/updateRoleDto.js +1 -1
- package/dist/models/updateTeamDto.d.ts +1 -1
- package/dist/models/updateTeamDto.js +1 -1
- package/dist/models/upsertCredentialDefaultDto.d.ts +1 -1
- package/dist/models/upsertCredentialDefaultDto.js +1 -1
- package/dist/models/visibleResourcesDto.d.ts +11 -0
- package/dist/models/{roleDtoDescription.js → visibleResourcesDto.js} +1 -1
- package/package.json +14 -3
- package/dist/models/listGrantsResponseDto.d.ts +0 -14
- package/dist/models/listProfilesResponseDto.d.ts +0 -11
- package/dist/models/listRelationshipsResponseDto.d.ts +0 -14
- package/dist/models/listRoleAssignmentsResponseDto.d.ts +0 -12
- package/dist/models/listRoleGrantsResponseDto.d.ts +0 -12
- package/dist/models/listRolesResponseDto.d.ts +0 -14
- package/dist/models/listTeamMembersResponseDto.d.ts +0 -12
- package/dist/models/listTeamsResponseDto.d.ts +0 -14
- package/dist/models/roleAssignmentDtoSubjectRef.d.ts +0 -13
- package/dist/models/roleAssignmentDtoTeamId.d.ts +0 -13
- package/dist/models/roleDtoDescription.d.ts +0 -13
- package/dist/models/teamDtoDescription.d.ts +0 -13
- package/dist/models/teamDtoParentTeamId.d.ts +0 -13
- package/dist/models/teamDtoParentTeamId.js +0 -9
- package/dist/models/updateTeamDtoParentTeamId.d.ts +0 -14
- package/dist/models/updateTeamDtoParentTeamId.js +0 -9
- /package/dist/models/{listGrantsResponseDto.js → addResourceShareDto.js} +0 -0
- /package/dist/models/{listProfilesResponseDto.js → capabilityGrantDtoPaginatedEnvelope.js} +0 -0
- /package/dist/models/{listRelationshipsResponseDto.js → listVisibleResourcesDto.js} +0 -0
- /package/dist/models/{listRoleAssignmentsResponseDto.js → openFgaRelationshipDtoPaginatedEnvelope.js} +0 -0
- /package/dist/models/{listRoleGrantsResponseDto.js → orgRoleSyncDto.js} +0 -0
- /package/dist/models/{listRolesResponseDto.js → policyCheckBatchRequestDto.js} +0 -0
- /package/dist/models/{listTeamMembersResponseDto.js → policyCheckBatchResponseDto.js} +0 -0
- /package/dist/models/{listTeamsResponseDto.js → provisionAgentRequestDto.js} +0 -0
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { DataClassification } from './dataClassification';
|
|
8
|
+
import type { DataClassification } from './dataClassification.js';
|
|
9
9
|
export interface PolicyResourceDto {
|
|
10
10
|
ref: string;
|
|
11
11
|
classification: DataClassification;
|
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { PolicyRouteHintDtoRequiredRunnerLabels } from './policyRouteHintDtoRequiredRunnerLabels';
|
|
9
|
-
import type { RunnerKind } from './runnerKind';
|
|
8
|
+
import type { PolicyRouteHintDtoRequiredRunnerLabels } from './policyRouteHintDtoRequiredRunnerLabels.js';
|
|
9
|
+
import type { RunnerKind } from './runnerKind.js';
|
|
10
10
|
export interface PolicyRouteHintDto {
|
|
11
11
|
requiredRunnerLabels?: PolicyRouteHintDtoRequiredRunnerLabels;
|
|
12
12
|
preferredRunnerKind?: RunnerKind;
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { SpaceKind } from './spaceKind';
|
|
8
|
+
import type { SpaceKind } from './spaceKind.js';
|
|
9
9
|
export interface PolicySpaceRefDto {
|
|
10
10
|
tier: SpaceKind;
|
|
11
11
|
orgId?: string;
|
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { PolicyActingForDto } from './policyActingForDto';
|
|
9
|
-
import type { SubjectKind } from './subjectKind';
|
|
8
|
+
import type { PolicyActingForDto } from './policyActingForDto.js';
|
|
9
|
+
import type { SubjectKind } from './subjectKind.js';
|
|
10
10
|
export interface PolicySubjectRefDto {
|
|
11
11
|
kind: SubjectKind;
|
|
12
12
|
id: string;
|
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { BiomePermissionProfile } from './biomePermissionProfile';
|
|
9
|
-
import type { ProfilePolicyTemplateDtoNotes } from './profilePolicyTemplateDtoNotes';
|
|
8
|
+
import type { BiomePermissionProfile } from './biomePermissionProfile.js';
|
|
9
|
+
import type { ProfilePolicyTemplateDtoNotes } from './profilePolicyTemplateDtoNotes.js';
|
|
10
10
|
export interface ProfilePolicyTemplateDto {
|
|
11
11
|
id: string;
|
|
12
12
|
profile: BiomePermissionProfile;
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
|
+
* Do not edit manually.
|
|
4
|
+
* Authorization API
|
|
5
|
+
* Authorization API extract (generated for client codegen).
|
|
6
|
+
* OpenAPI spec version: 0.1.0
|
|
7
|
+
*/
|
|
8
|
+
import type { AgentReachTier } from './agentReachTier.js';
|
|
9
|
+
export interface ProvisionAgentRequestDto {
|
|
10
|
+
/** Organization the agent + its capability grants are scoped to. */
|
|
11
|
+
orgId: string;
|
|
12
|
+
/** The agent subject ref the grants are written for (subjectKind=agent). */
|
|
13
|
+
agentSubjectRef: string;
|
|
14
|
+
/** The owning user subject ref. Auto-grant requires the OWNER to currently hold the capability (a full, non-pending grant in the agent's environment). */
|
|
15
|
+
ownerSubjectRef: string;
|
|
16
|
+
/** The agent reach-tier ceiling. Selects the execution environment the owner-held check + grants resolve under. */
|
|
17
|
+
reachTier: AgentReachTier;
|
|
18
|
+
/** Canonical CapabilityRefs the agent requires. Deduplicated server-side. */
|
|
19
|
+
requiredCapabilities: string[];
|
|
20
|
+
}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
|
+
* Do not edit manually.
|
|
4
|
+
* Authorization API
|
|
5
|
+
* Authorization API extract (generated for client codegen).
|
|
6
|
+
* OpenAPI spec version: 0.1.0
|
|
7
|
+
*/
|
|
8
|
+
import type { ProvisionedCapabilityDto } from './provisionedCapabilityDto.js';
|
|
9
|
+
export interface ProvisionAgentResultDto {
|
|
10
|
+
/** Capabilities auto-granted as full grants. */
|
|
11
|
+
autoGranted: ProvisionedCapabilityDto[];
|
|
12
|
+
/** Capabilities written as approval-gated grants awaiting Studio review. */
|
|
13
|
+
pendingApproval: ProvisionedCapabilityDto[];
|
|
14
|
+
}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
|
+
* Do not edit manually.
|
|
4
|
+
* Authorization API
|
|
5
|
+
* Authorization API extract (generated for client codegen).
|
|
6
|
+
* OpenAPI spec version: 0.1.0
|
|
7
|
+
*/
|
|
8
|
+
import type { AgentProvisionDecision } from './agentProvisionDecision.js';
|
|
9
|
+
import type { AgentProvisionReason } from './agentProvisionReason.js';
|
|
10
|
+
import type { CapabilityRiskTier } from './capabilityRiskTier.js';
|
|
11
|
+
import type { ExecutionEnvironmentKind } from './executionEnvironmentKind.js';
|
|
12
|
+
export interface ProvisionedCapabilityDto {
|
|
13
|
+
/** The canonical CapabilityRef this entry describes. */
|
|
14
|
+
capability: string;
|
|
15
|
+
decision: AgentProvisionDecision;
|
|
16
|
+
reason: AgentProvisionReason;
|
|
17
|
+
/** Risk tier from the capability registry; `null` when the ref is unknown (absent from the registry). */
|
|
18
|
+
riskTier: CapabilityRiskTier | null;
|
|
19
|
+
/** The environment the grant was written under (derived from reachTier). */
|
|
20
|
+
environment: ExecutionEnvironmentKind;
|
|
21
|
+
}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
|
+
* Do not edit manually.
|
|
4
|
+
* Authorization API
|
|
5
|
+
* Authorization API extract (generated for client codegen).
|
|
6
|
+
* OpenAPI spec version: 0.1.0
|
|
7
|
+
*/
|
|
8
|
+
import type { ResourceSubjectRefDto } from './resourceSubjectRefDto.js';
|
|
9
|
+
import type { ResourceVisibilityPattern } from './resourceVisibilityPattern.js';
|
|
10
|
+
export interface RegisterResourceOwnershipDto {
|
|
11
|
+
/** Resource kind/type slug. */
|
|
12
|
+
resourceType: string;
|
|
13
|
+
/** Resource instance id. */
|
|
14
|
+
resourceId: string;
|
|
15
|
+
/** Instance visibility pattern. The PDP ANDs the verb verdict with the ownership check resolved per this pattern. */
|
|
16
|
+
visibility: ResourceVisibilityPattern;
|
|
17
|
+
/** Subjects that OWN the instance (full visibility). */
|
|
18
|
+
owners: ResourceSubjectRefDto[];
|
|
19
|
+
/** Subjects explicitly granted visibility (shared-with). */
|
|
20
|
+
explicitShares?: ResourceSubjectRefDto[];
|
|
21
|
+
}
|
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { CapabilityGrantRelation } from './capabilityGrantRelation';
|
|
9
|
-
import type { SubjectKind } from './subjectKind';
|
|
8
|
+
import type { CapabilityGrantRelation } from './capabilityGrantRelation.js';
|
|
9
|
+
import type { SubjectKind } from './subjectKind.js';
|
|
10
10
|
export type RelationshipsControllerListParams = {
|
|
11
11
|
/**
|
|
12
12
|
* Filter to relationships within a single organization.
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
|
+
* Do not edit manually.
|
|
4
|
+
* Authorization API
|
|
5
|
+
* Authorization API extract (generated for client codegen).
|
|
6
|
+
* OpenAPI spec version: 0.1.0
|
|
7
|
+
*/
|
|
8
|
+
/**
|
|
9
|
+
* Provisioning ownership marker (iac/seeder/ui/system, or null when unmanaged). Lets a console badge an IaC-owned role and offer "export as code"; a UI edit adopts an iac/seeder row to `ui`.
|
|
10
|
+
*/
|
|
11
|
+
export type ResourceManagedBy = typeof ResourceManagedBy[keyof typeof ResourceManagedBy];
|
|
12
|
+
export declare const ResourceManagedBy: {
|
|
13
|
+
readonly ui: "ui";
|
|
14
|
+
readonly iac: "iac";
|
|
15
|
+
readonly seeder: "seeder";
|
|
16
|
+
readonly biome_contributed: "biome_contributed";
|
|
17
|
+
readonly runtime_registered: "runtime_registered";
|
|
18
|
+
readonly system: "system";
|
|
19
|
+
};
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/**
|
|
3
|
+
* Generated by orval v8.16.0 🍺
|
|
4
|
+
* Do not edit manually.
|
|
5
|
+
* Authorization API
|
|
6
|
+
* Authorization API extract (generated for client codegen).
|
|
7
|
+
* OpenAPI spec version: 0.1.0
|
|
8
|
+
*/
|
|
9
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
10
|
+
exports.ResourceManagedBy = void 0;
|
|
11
|
+
exports.ResourceManagedBy = {
|
|
12
|
+
ui: 'ui',
|
|
13
|
+
iac: 'iac',
|
|
14
|
+
seeder: 'seeder',
|
|
15
|
+
biome_contributed: 'biome_contributed',
|
|
16
|
+
runtime_registered: 'runtime_registered',
|
|
17
|
+
system: 'system',
|
|
18
|
+
};
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
|
+
* Do not edit manually.
|
|
4
|
+
* Authorization API
|
|
5
|
+
* Authorization API extract (generated for client codegen).
|
|
6
|
+
* OpenAPI spec version: 0.1.0
|
|
7
|
+
*/
|
|
8
|
+
import type { ResourceOwnershipEntryDto } from './resourceOwnershipEntryDto.js';
|
|
9
|
+
import type { ResourceVisibilityPattern } from './resourceVisibilityPattern.js';
|
|
10
|
+
export interface ResourceOwnershipDto {
|
|
11
|
+
orgId: string;
|
|
12
|
+
resourceType: string;
|
|
13
|
+
resourceId: string;
|
|
14
|
+
visibility: ResourceVisibilityPattern;
|
|
15
|
+
owners: ResourceOwnershipEntryDto[];
|
|
16
|
+
shares: ResourceOwnershipEntryDto[];
|
|
17
|
+
}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
|
+
* Do not edit manually.
|
|
4
|
+
* Authorization API
|
|
5
|
+
* Authorization API extract (generated for client codegen).
|
|
6
|
+
* OpenAPI spec version: 0.1.0
|
|
7
|
+
*/
|
|
8
|
+
import type { SubjectKind } from './subjectKind.js';
|
|
9
|
+
export interface ResourceOwnershipEntryDto {
|
|
10
|
+
id: string;
|
|
11
|
+
ownerKind: SubjectKind;
|
|
12
|
+
ownerRef: string;
|
|
13
|
+
}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
|
+
* Do not edit manually.
|
|
4
|
+
* Authorization API
|
|
5
|
+
* Authorization API extract (generated for client codegen).
|
|
6
|
+
* OpenAPI spec version: 0.1.0
|
|
7
|
+
*/
|
|
8
|
+
import type { ResourceSubjectRefDto } from './resourceSubjectRefDto.js';
|
|
9
|
+
import type { ResourceVisibilityPattern } from './resourceVisibilityPattern.js';
|
|
10
|
+
export interface ResourceOwnershipReadDto {
|
|
11
|
+
resourceType: string;
|
|
12
|
+
resourceId: string;
|
|
13
|
+
visibility: ResourceVisibilityPattern;
|
|
14
|
+
/** All registered subjects (owners + shares combined; the SQL authority does not split the two). */
|
|
15
|
+
subjects: ResourceSubjectRefDto[];
|
|
16
|
+
}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
|
+
* Do not edit manually.
|
|
4
|
+
* Authorization API
|
|
5
|
+
* Authorization API extract (generated for client codegen).
|
|
6
|
+
* OpenAPI spec version: 0.1.0
|
|
7
|
+
*/
|
|
8
|
+
import type { SubjectKind } from './subjectKind.js';
|
|
9
|
+
export interface ResourceSubjectRefDto {
|
|
10
|
+
kind: SubjectKind;
|
|
11
|
+
/** Subject id (the `<id>` in `<kind>:<id>`). */
|
|
12
|
+
ref: string;
|
|
13
|
+
}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
|
+
* Do not edit manually.
|
|
4
|
+
* Authorization API
|
|
5
|
+
* Authorization API extract (generated for client codegen).
|
|
6
|
+
* OpenAPI spec version: 0.1.0
|
|
7
|
+
*/
|
|
8
|
+
/**
|
|
9
|
+
* Instance visibility pattern. The PDP ANDs the verb verdict with the ownership check resolved per this pattern.
|
|
10
|
+
*/
|
|
11
|
+
export type ResourceVisibilityPattern = typeof ResourceVisibilityPattern[keyof typeof ResourceVisibilityPattern];
|
|
12
|
+
export declare const ResourceVisibilityPattern: {
|
|
13
|
+
readonly 'owner-only': "owner-only";
|
|
14
|
+
readonly 'org-shared': "org-shared";
|
|
15
|
+
readonly 'project-shared': "project-shared";
|
|
16
|
+
readonly 'space-shared': "space-shared";
|
|
17
|
+
readonly 'explicit-share': "explicit-share";
|
|
18
|
+
};
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/**
|
|
3
|
+
* Generated by orval v8.16.0 🍺
|
|
4
|
+
* Do not edit manually.
|
|
5
|
+
* Authorization API
|
|
6
|
+
* Authorization API extract (generated for client codegen).
|
|
7
|
+
* OpenAPI spec version: 0.1.0
|
|
8
|
+
*/
|
|
9
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
10
|
+
exports.ResourceVisibilityPattern = void 0;
|
|
11
|
+
exports.ResourceVisibilityPattern = {
|
|
12
|
+
'owner-only': 'owner-only',
|
|
13
|
+
'org-shared': 'org-shared',
|
|
14
|
+
'project-shared': 'project-shared',
|
|
15
|
+
'space-shared': 'space-shared',
|
|
16
|
+
'explicit-share': 'explicit-share',
|
|
17
|
+
};
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { SubjectKind } from './subjectKind';
|
|
8
|
+
import type { SubjectKind } from './subjectKind.js';
|
|
9
9
|
export interface RoleAssignmentDto {
|
|
10
10
|
id: string;
|
|
11
11
|
roleId: string;
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { RoleAssignmentDto } from './roleAssignmentDto';
|
|
8
|
+
import type { RoleAssignmentDto } from './roleAssignmentDto.js';
|
|
9
9
|
export interface RoleAssignmentDtoDataArrayEnvelope {
|
|
10
10
|
data: RoleAssignmentDto[];
|
|
11
11
|
}
|
package/dist/models/roleDto.d.ts
CHANGED
|
@@ -1,10 +1,11 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
+
import type { ResourceManagedBy } from './resourceManagedBy.js';
|
|
8
9
|
export interface RoleDto {
|
|
9
10
|
id: string;
|
|
10
11
|
orgId: string;
|
|
@@ -14,6 +15,8 @@ export interface RoleDto {
|
|
|
14
15
|
description?: string | null;
|
|
15
16
|
/** Kernel-seeded built-in role (immutable from the UI). */
|
|
16
17
|
isBuiltIn: boolean;
|
|
18
|
+
/** Provisioning ownership marker (iac/seeder/ui/system, or null when unmanaged). Lets a console badge an IaC-owned role and offer "export as code"; a UI edit adopts an iac/seeder row to `ui`. */
|
|
19
|
+
managedBy: ResourceManagedBy | null;
|
|
17
20
|
createdAt: string;
|
|
18
21
|
updatedAt: string;
|
|
19
22
|
}
|
package/dist/models/roleDto.js
CHANGED
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { RoleDto } from './roleDto';
|
|
8
|
+
import type { RoleDto } from './roleDto.js';
|
|
9
9
|
export interface RoleDtoDataArrayEnvelope {
|
|
10
10
|
data: RoleDto[];
|
|
11
11
|
}
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { GrantConstraintsDto } from './grantConstraintsDto';
|
|
8
|
+
import type { GrantConstraintsDto } from './grantConstraintsDto.js';
|
|
9
9
|
export interface RoleGrantDto {
|
|
10
10
|
id: string;
|
|
11
11
|
roleId: string;
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { RoleGrantDto } from './roleGrantDto';
|
|
8
|
+
import type { RoleGrantDto } from './roleGrantDto.js';
|
|
9
9
|
export interface RoleGrantDtoDataArrayEnvelope {
|
|
10
10
|
data: RoleGrantDto[];
|
|
11
11
|
}
|
package/dist/models/spaceKind.js
CHANGED
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { SubjectKind } from './subjectKind';
|
|
8
|
+
import type { SubjectKind } from './subjectKind.js';
|
|
9
9
|
export interface SubjectRefDto {
|
|
10
10
|
/** Discriminator over the kinds of subject that may hold a grant. */
|
|
11
11
|
kind: SubjectKind;
|
package/dist/models/teamDto.d.ts
CHANGED
package/dist/models/teamDto.js
CHANGED
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { TeamDto } from './teamDto';
|
|
8
|
+
import type { TeamDto } from './teamDto.js';
|
|
9
9
|
export interface TeamDtoDataArrayEnvelope {
|
|
10
10
|
data: TeamDto[];
|
|
11
11
|
}
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { SubjectKind } from './subjectKind';
|
|
8
|
+
import type { SubjectKind } from './subjectKind.js';
|
|
9
9
|
export interface TeamMembershipDto {
|
|
10
10
|
id: string;
|
|
11
11
|
teamId: string;
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Generated by orval v8.
|
|
2
|
+
* Generated by orval v8.16.0 🍺
|
|
3
3
|
* Do not edit manually.
|
|
4
4
|
* Authorization API
|
|
5
5
|
* Authorization API extract (generated for client codegen).
|
|
6
6
|
* OpenAPI spec version: 0.1.0
|
|
7
7
|
*/
|
|
8
|
-
import type { TeamMembershipDto } from './teamMembershipDto';
|
|
8
|
+
import type { TeamMembershipDto } from './teamMembershipDto.js';
|
|
9
9
|
export interface TeamMembershipDtoDataArrayEnvelope {
|
|
10
10
|
data: TeamMembershipDto[];
|
|
11
11
|
}
|