@xemahq/authorization-internal-api-client 0.1.0 → 0.1.2

package/dist/endpoints/credential-defaults/credential-defaults.d.ts

@@ -1,28 +1,28 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
 import type { CredentialDefaultDtoDataArrayEnvelope, CredentialDefaultDtoDataEnvelope, CredentialDefaultsControllerDeleteParams, CredentialDefaultsControllerGetParams, CredentialDefaultsControllerListParams, UpsertCredentialDefaultDto } from '../../models';
+export declare const getCredentialDefaultsControllerUpsertUrl: () => string;
 /**
  * @summary Create or replace a credential-binding default
  */
-export declare const getCredentialDefaultsControllerUpsertUrl: () => string;
 export declare const credentialDefaultsControllerUpsert: (upsertCredentialDefaultDto: UpsertCredentialDefaultDto, options?: RequestInit) => Promise<CredentialDefaultDtoDataEnvelope>;
+export declare const getCredentialDefaultsControllerGetUrl: (params: CredentialDefaultsControllerGetParams) => string;
 /**
  * @summary Get the credential-binding default for an org or project scope
  */
-export declare const getCredentialDefaultsControllerGetUrl: (params: CredentialDefaultsControllerGetParams) => string;
 export declare const credentialDefaultsControllerGet: (params: CredentialDefaultsControllerGetParams, options?: RequestInit) => Promise<CredentialDefaultDtoDataEnvelope>;
+export declare const getCredentialDefaultsControllerDeleteUrl: (params: CredentialDefaultsControllerDeleteParams) => string;
 /**
  * @summary Delete the credential-binding default for an org or project scope
  */
-export declare const getCredentialDefaultsControllerDeleteUrl: (params: CredentialDefaultsControllerDeleteParams) => string;
 export declare const credentialDefaultsControllerDelete: (params: CredentialDefaultsControllerDeleteParams, options?: RequestInit) => Promise<void>;
+export declare const getCredentialDefaultsControllerListUrl: (params: CredentialDefaultsControllerListParams) => string;
 /**
  * @summary List every credential-binding default in an org
  */
-export declare const getCredentialDefaultsControllerListUrl: (params: CredentialDefaultsControllerListParams) => string;
 export declare const credentialDefaultsControllerList: (params: CredentialDefaultsControllerListParams, options?: RequestInit) => Promise<CredentialDefaultDtoDataArrayEnvelope>;

package/dist/endpoints/credential-defaults/credential-defaults.js

@@ -2,13 +2,13 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.credentialDefaultsControllerList = exports.getCredentialDefaultsControllerListUrl = exports.credentialDefaultsControllerDelete = exports.getCredentialDefaultsControllerDeleteUrl = exports.credentialDefaultsControllerGet = exports.getCredentialDefaultsControllerGetUrl = exports.credentialDefaultsControllerUpsert = exports.getCredentialDefaultsControllerUpsertUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * @summary Create or replace a credential-binding default
- */
 const getCredentialDefaultsControllerUpsertUrl = () => {
     return `/credential-defaults`;
 };
 exports.getCredentialDefaultsControllerUpsertUrl = getCredentialDefaultsControllerUpsertUrl;
+/**
+ * @summary Create or replace a credential-binding default
+ */
 const credentialDefaultsControllerUpsert = async (upsertCredentialDefaultDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getCredentialDefaultsControllerUpsertUrl)(), {
         ...options,
@@ -18,9 +18,6 @@ const credentialDefaultsControllerUpsert = async (upsertCredentialDefaultDto, op
     });
 };
 exports.credentialDefaultsControllerUpsert = credentialDefaultsControllerUpsert;
-/**
- * @summary Get the credential-binding default for an org or project scope
- */
 const getCredentialDefaultsControllerGetUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -44,6 +41,9 @@ const getCredentialDefaultsControllerGetUrl = (params) => {
     return stringifiedParams.length > 0 ? `/credential-defaults?${stringifiedParams}` : `/credential-defaults`;
 };
 exports.getCredentialDefaultsControllerGetUrl = getCredentialDefaultsControllerGetUrl;
+/**
+ * @summary Get the credential-binding default for an org or project scope
+ */
 const credentialDefaultsControllerGet = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getCredentialDefaultsControllerGetUrl)(params), {
         ...options,
@@ -51,9 +51,6 @@ const credentialDefaultsControllerGet = async (params, options) => {
     });
 };
 exports.credentialDefaultsControllerGet = credentialDefaultsControllerGet;
-/**
- * @summary Delete the credential-binding default for an org or project scope
- */
 const getCredentialDefaultsControllerDeleteUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -77,6 +74,9 @@ const getCredentialDefaultsControllerDeleteUrl = (params) => {
     return stringifiedParams.length > 0 ? `/credential-defaults?${stringifiedParams}` : `/credential-defaults`;
 };
 exports.getCredentialDefaultsControllerDeleteUrl = getCredentialDefaultsControllerDeleteUrl;
+/**
+ * @summary Delete the credential-binding default for an org or project scope
+ */
 const credentialDefaultsControllerDelete = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getCredentialDefaultsControllerDeleteUrl)(params), {
         ...options,
@@ -84,9 +84,6 @@ const credentialDefaultsControllerDelete = async (params, options) => {
     });
 };
 exports.credentialDefaultsControllerDelete = credentialDefaultsControllerDelete;
-/**
- * @summary List every credential-binding default in an org
- */
 const getCredentialDefaultsControllerListUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -110,6 +107,9 @@ const getCredentialDefaultsControllerListUrl = (params) => {
     return stringifiedParams.length > 0 ? `/credential-defaults/list?${stringifiedParams}` : `/credential-defaults/list`;
 };
 exports.getCredentialDefaultsControllerListUrl = getCredentialDefaultsControllerListUrl;
+/**
+ * @summary List every credential-binding default in an org
+ */
 const credentialDefaultsControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getCredentialDefaultsControllerListUrl)(params), {
         ...options,

package/dist/endpoints/describe-objects/describe-objects.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { DescribeObjectsResponseDtoDataEnvelope } from '../../models';
+export declare const getDescribeObjectsControllerDescribeUrl: () => string;
+/**
+ * Wire shape mirrors the `xema.object-registry.projection.published.v1` CloudEvent `data` field. Consumers (object-registry-api) replace their cache slice for `source` atomically on each fetch.
+ * @summary Return this service's slice of the XemaObject universe (capability grants + execution environments).
+ */
+export declare const describeObjectsControllerDescribe: (options?: RequestInit) => Promise<DescribeObjectsResponseDtoDataEnvelope>;

package/dist/endpoints/describe-objects/describe-objects.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.describeObjectsControllerDescribe = exports.getDescribeObjectsControllerDescribeUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getDescribeObjectsControllerDescribeUrl = () => {
+    return `/describe-objects`;
+};
+exports.getDescribeObjectsControllerDescribeUrl = getDescribeObjectsControllerDescribeUrl;
+/**
+ * Wire shape mirrors the `xema.object-registry.projection.published.v1` CloudEvent `data` field. Consumers (object-registry-api) replace their cache slice for `source` atomically on each fetch.
+ * @summary Return this service's slice of the XemaObject universe (capability grants + execution environments).
+ */
+const describeObjectsControllerDescribe = async (options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getDescribeObjectsControllerDescribeUrl)(), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.describeObjectsControllerDescribe = describeObjectsControllerDescribe;

package/dist/endpoints/environments/environments.d.ts

@@ -1,38 +1,38 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { CreateExecutionEnvironmentDto, EnvironmentsControllerFindBySlugParams, EnvironmentsControllerListParams, EnvironmentsControllerRemoveParams, EnvironmentsControllerUpdateParams, ExecutionEnvironmentResponseDto, UpdateExecutionEnvironmentDto } from '../../models';
+import type { CreateExecutionEnvironmentDto, EnvironmentsControllerFindBySlugParams, EnvironmentsControllerListParams, EnvironmentsControllerRemoveParams, EnvironmentsControllerUpdateParams, ExecutionEnvironmentResponseDtoDataArrayEnvelope, ExecutionEnvironmentResponseDtoDataEnvelope, UpdateExecutionEnvironmentDto } from '../../models';
+export declare const getEnvironmentsControllerListUrl: (params?: EnvironmentsControllerListParams) => string;
 /**
- * Returns the kernel-seeded built-in environments. With `orgId` it also includes that org's custom environments (plan §16 / G.4); without `orgId` it returns built-ins only (back-compat).
+ * Returns the kernel-seeded built-in environments. With `orgId` it also includes that org's custom environments; without `orgId` it returns built-ins only (back-compat).
  * @summary List ExecutionEnvironment rows
  */
-export declare const getEnvironmentsControllerListUrl: (params?: EnvironmentsControllerListParams) => string;
-export declare const environmentsControllerList: (params?: EnvironmentsControllerListParams, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDto[]>;
+export declare const environmentsControllerList: (params?: EnvironmentsControllerListParams, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDtoDataArrayEnvelope>;
+export declare const getEnvironmentsControllerCreateUrl: () => string;
 /**
  * Creates an org-scoped custom environment (`isBuiltIn=false`). Fails fast (409) if the slug collides with a built-in or with an existing custom in the same org.
  * @summary Create an org-custom ExecutionEnvironment
  */
-export declare const getEnvironmentsControllerCreateUrl: () => string;
-export declare const environmentsControllerCreate: (createExecutionEnvironmentDto: CreateExecutionEnvironmentDto, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDto>;
+export declare const environmentsControllerCreate: (createExecutionEnvironmentDto: CreateExecutionEnvironmentDto, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDtoDataEnvelope>;
+export declare const getEnvironmentsControllerFindBySlugUrl: (slug: string, params?: EnvironmentsControllerFindBySlugParams) => string;
 /**
  * Resolves a built-in by slug. With `orgId`, an org-custom slug resolves before the built-in fallback. 404 if unknown.
  * @summary Fetch a single ExecutionEnvironment by slug
  */
-export declare const getEnvironmentsControllerFindBySlugUrl: (slug: string, params?: EnvironmentsControllerFindBySlugParams) => string;
-export declare const environmentsControllerFindBySlug: (slug: string, params?: EnvironmentsControllerFindBySlugParams, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDto>;
+export declare const environmentsControllerFindBySlug: (slug: string, params?: EnvironmentsControllerFindBySlugParams, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDtoDataEnvelope>;
+export declare const getEnvironmentsControllerUpdateUrl: (slug: string, params: EnvironmentsControllerUpdateParams) => string;
 /**
  * Updates the mutable fields (description / allowedCapabilities / approvalRules / runtimeLimits) of an org-custom environment. Refuses built-ins with 403 (immutable). `slug` / `kind` / `orgId` are immutable.
  * @summary Update an org-custom ExecutionEnvironment
  */
-export declare const getEnvironmentsControllerUpdateUrl: (slug: string, params: EnvironmentsControllerUpdateParams) => string;
-export declare const environmentsControllerUpdate: (slug: string, updateExecutionEnvironmentDto: UpdateExecutionEnvironmentDto, params: EnvironmentsControllerUpdateParams, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDto>;
+export declare const environmentsControllerUpdate: (slug: string, updateExecutionEnvironmentDto: UpdateExecutionEnvironmentDto, params: EnvironmentsControllerUpdateParams, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDtoDataEnvelope>;
+export declare const getEnvironmentsControllerRemoveUrl: (slug: string, params: EnvironmentsControllerRemoveParams) => string;
 /**
  * Deletes an org-custom environment. Refuses built-ins with 403 (immutable). 404 if no such custom environment exists for the org.
  * @summary Delete an org-custom ExecutionEnvironment
  */
-export declare const getEnvironmentsControllerRemoveUrl: (slug: string, params: EnvironmentsControllerRemoveParams) => string;
 export declare const environmentsControllerRemove: (slug: string, params: EnvironmentsControllerRemoveParams, options?: RequestInit) => Promise<void>;

package/dist/endpoints/environments/environments.js

@@ -2,10 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.environmentsControllerRemove = exports.getEnvironmentsControllerRemoveUrl = exports.environmentsControllerUpdate = exports.getEnvironmentsControllerUpdateUrl = exports.environmentsControllerFindBySlug = exports.getEnvironmentsControllerFindBySlugUrl = exports.environmentsControllerCreate = exports.getEnvironmentsControllerCreateUrl = exports.environmentsControllerList = exports.getEnvironmentsControllerListUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * Returns the kernel-seeded built-in environments. With `orgId` it also includes that org's custom environments (plan §16 / G.4); without `orgId` it returns built-ins only (back-compat).
- * @summary List ExecutionEnvironment rows
- */
 const getEnvironmentsControllerListUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -29,6 +25,10 @@ const getEnvironmentsControllerListUrl = (params) => {
     return stringifiedParams.length > 0 ? `/environments?${stringifiedParams}` : `/environments`;
 };
 exports.getEnvironmentsControllerListUrl = getEnvironmentsControllerListUrl;
+/**
+ * Returns the kernel-seeded built-in environments. With `orgId` it also includes that org's custom environments; without `orgId` it returns built-ins only (back-compat).
+ * @summary List ExecutionEnvironment rows
+ */
 const environmentsControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerListUrl)(params), {
         ...options,
@@ -36,14 +36,14 @@ const environmentsControllerList = async (params, options) => {
     });
 };
 exports.environmentsControllerList = environmentsControllerList;
-/**
- * Creates an org-scoped custom environment (`isBuiltIn=false`). Fails fast (409) if the slug collides with a built-in or with an existing custom in the same org.
- * @summary Create an org-custom ExecutionEnvironment
- */
 const getEnvironmentsControllerCreateUrl = () => {
     return `/environments`;
 };
 exports.getEnvironmentsControllerCreateUrl = getEnvironmentsControllerCreateUrl;
+/**
+ * Creates an org-scoped custom environment (`isBuiltIn=false`). Fails fast (409) if the slug collides with a built-in or with an existing custom in the same org.
+ * @summary Create an org-custom ExecutionEnvironment
+ */
 const environmentsControllerCreate = async (createExecutionEnvironmentDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerCreateUrl)(), {
         ...options,
@@ -53,10 +53,6 @@ const environmentsControllerCreate = async (createExecutionEnvironmentDto, optio
     });
 };
 exports.environmentsControllerCreate = environmentsControllerCreate;
-/**
- * Resolves a built-in by slug. With `orgId`, an org-custom slug resolves before the built-in fallback. 404 if unknown.
- * @summary Fetch a single ExecutionEnvironment by slug
- */
 const getEnvironmentsControllerFindBySlugUrl = (slug, params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -80,6 +76,10 @@ const getEnvironmentsControllerFindBySlugUrl = (slug, params) => {
     return stringifiedParams.length > 0 ? `/environments/${slug}?${stringifiedParams}` : `/environments/${slug}`;
 };
 exports.getEnvironmentsControllerFindBySlugUrl = getEnvironmentsControllerFindBySlugUrl;
+/**
+ * Resolves a built-in by slug. With `orgId`, an org-custom slug resolves before the built-in fallback. 404 if unknown.
+ * @summary Fetch a single ExecutionEnvironment by slug
+ */
 const environmentsControllerFindBySlug = async (slug, params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerFindBySlugUrl)(slug, params), {
         ...options,
@@ -87,10 +87,6 @@ const environmentsControllerFindBySlug = async (slug, params, options) => {
     });
 };
 exports.environmentsControllerFindBySlug = environmentsControllerFindBySlug;
-/**
- * Updates the mutable fields (description / allowedCapabilities / approvalRules / runtimeLimits) of an org-custom environment. Refuses built-ins with 403 (immutable). `slug` / `kind` / `orgId` are immutable.
- * @summary Update an org-custom ExecutionEnvironment
- */
 const getEnvironmentsControllerUpdateUrl = (slug, params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -114,6 +110,10 @@ const getEnvironmentsControllerUpdateUrl = (slug, params) => {
     return stringifiedParams.length > 0 ? `/environments/${slug}?${stringifiedParams}` : `/environments/${slug}`;
 };
 exports.getEnvironmentsControllerUpdateUrl = getEnvironmentsControllerUpdateUrl;
+/**
+ * Updates the mutable fields (description / allowedCapabilities / approvalRules / runtimeLimits) of an org-custom environment. Refuses built-ins with 403 (immutable). `slug` / `kind` / `orgId` are immutable.
+ * @summary Update an org-custom ExecutionEnvironment
+ */
 const environmentsControllerUpdate = async (slug, updateExecutionEnvironmentDto, params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerUpdateUrl)(slug, params), {
         ...options,
@@ -123,10 +123,6 @@ const environmentsControllerUpdate = async (slug, updateExecutionEnvironmentDto,
     });
 };
 exports.environmentsControllerUpdate = environmentsControllerUpdate;
-/**
- * Deletes an org-custom environment. Refuses built-ins with 403 (immutable). 404 if no such custom environment exists for the org.
- * @summary Delete an org-custom ExecutionEnvironment
- */
 const getEnvironmentsControllerRemoveUrl = (slug, params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -150,6 +146,10 @@ const getEnvironmentsControllerRemoveUrl = (slug, params) => {
     return stringifiedParams.length > 0 ? `/environments/${slug}?${stringifiedParams}` : `/environments/${slug}`;
 };
 exports.getEnvironmentsControllerRemoveUrl = getEnvironmentsControllerRemoveUrl;
+/**
+ * Deletes an org-custom environment. Refuses built-ins with 403 (immutable). 404 if no such custom environment exists for the org.
+ * @summary Delete an org-custom ExecutionEnvironment
+ */
 const environmentsControllerRemove = async (slug, params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerRemoveUrl)(slug, params), {
         ...options,

package/dist/endpoints/grants/grants.d.ts

@@ -1,33 +1,33 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { CapabilityGrantDto, CreateGrantDto, GrantsControllerListParams, ListGrantsResponseDto, UpdateGrantDto } from '../../models';
+import type { CapabilityGrantDtoDataEnvelope, CapabilityGrantDtoPaginatedEnvelope, CreateGrantDto, GrantsControllerListParams, UpdateGrantDto } from '../../models';
+export declare const getGrantsControllerCreateUrl: () => string;
 /**
  * @summary Create a capability grant
  */
-export declare const getGrantsControllerCreateUrl: () => string;
-export declare const grantsControllerCreate: (createGrantDto: CreateGrantDto, options?: RequestInit) => Promise<CapabilityGrantDto>;
+export declare const grantsControllerCreate: (createGrantDto: CreateGrantDto, options?: RequestInit) => Promise<CapabilityGrantDtoDataEnvelope>;
+export declare const getGrantsControllerListUrl: (params?: GrantsControllerListParams) => string;
 /**
  * @summary List capability grants (paginated, filterable)
  */
-export declare const getGrantsControllerListUrl: (params?: GrantsControllerListParams) => string;
-export declare const grantsControllerList: (params?: GrantsControllerListParams, options?: RequestInit) => Promise<ListGrantsResponseDto>;
+export declare const grantsControllerList: (params?: GrantsControllerListParams, options?: RequestInit) => Promise<CapabilityGrantDtoPaginatedEnvelope>;
+export declare const getGrantsControllerGetByIdUrl: (id: string) => string;
 /**
  * @summary Get a capability grant by id
  */
-export declare const getGrantsControllerGetByIdUrl: (id: string) => string;
-export declare const grantsControllerGetById: (id: string, options?: RequestInit) => Promise<CapabilityGrantDto>;
+export declare const grantsControllerGetById: (id: string, options?: RequestInit) => Promise<CapabilityGrantDtoDataEnvelope>;
+export declare const getGrantsControllerUpdateUrl: (id: string) => string;
 /**
  * @summary Update mutable fields on a capability grant
  */
-export declare const getGrantsControllerUpdateUrl: (id: string) => string;
-export declare const grantsControllerUpdate: (id: string, updateGrantDto: UpdateGrantDto, options?: RequestInit) => Promise<CapabilityGrantDto>;
+export declare const grantsControllerUpdate: (id: string, updateGrantDto: UpdateGrantDto, options?: RequestInit) => Promise<CapabilityGrantDtoDataEnvelope>;
+export declare const getGrantsControllerRevokeUrl: (id: string) => string;
 /**
  * @summary Mark a capability grant as revoked
  */
-export declare const getGrantsControllerRevokeUrl: (id: string) => string;
-export declare const grantsControllerRevoke: (id: string, options?: RequestInit) => Promise<CapabilityGrantDto>;
+export declare const grantsControllerRevoke: (id: string, options?: RequestInit) => Promise<CapabilityGrantDtoDataEnvelope>;

package/dist/endpoints/grants/grants.js

@@ -2,13 +2,13 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.grantsControllerRevoke = exports.getGrantsControllerRevokeUrl = exports.grantsControllerUpdate = exports.getGrantsControllerUpdateUrl = exports.grantsControllerGetById = exports.getGrantsControllerGetByIdUrl = exports.grantsControllerList = exports.getGrantsControllerListUrl = exports.grantsControllerCreate = exports.getGrantsControllerCreateUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * @summary Create a capability grant
- */
 const getGrantsControllerCreateUrl = () => {
     return `/grants`;
 };
 exports.getGrantsControllerCreateUrl = getGrantsControllerCreateUrl;
+/**
+ * @summary Create a capability grant
+ */
 const grantsControllerCreate = async (createGrantDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerCreateUrl)(), {
         ...options,
@@ -18,9 +18,6 @@ const grantsControllerCreate = async (createGrantDto, options) => {
     });
 };
 exports.grantsControllerCreate = grantsControllerCreate;
-/**
- * @summary List capability grants (paginated, filterable)
- */
 const getGrantsControllerListUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -44,6 +41,9 @@ const getGrantsControllerListUrl = (params) => {
     return stringifiedParams.length > 0 ? `/grants?${stringifiedParams}` : `/grants`;
 };
 exports.getGrantsControllerListUrl = getGrantsControllerListUrl;
+/**
+ * @summary List capability grants (paginated, filterable)
+ */
 const grantsControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerListUrl)(params), {
         ...options,
@@ -51,13 +51,13 @@ const grantsControllerList = async (params, options) => {
     });
 };
 exports.grantsControllerList = grantsControllerList;
-/**
- * @summary Get a capability grant by id
- */
 const getGrantsControllerGetByIdUrl = (id) => {
     return `/grants/${id}`;
 };
 exports.getGrantsControllerGetByIdUrl = getGrantsControllerGetByIdUrl;
+/**
+ * @summary Get a capability grant by id
+ */
 const grantsControllerGetById = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerGetByIdUrl)(id), {
         ...options,
@@ -65,13 +65,13 @@ const grantsControllerGetById = async (id, options) => {
     });
 };
 exports.grantsControllerGetById = grantsControllerGetById;
-/**
- * @summary Update mutable fields on a capability grant
- */
 const getGrantsControllerUpdateUrl = (id) => {
     return `/grants/${id}`;
 };
 exports.getGrantsControllerUpdateUrl = getGrantsControllerUpdateUrl;
+/**
+ * @summary Update mutable fields on a capability grant
+ */
 const grantsControllerUpdate = async (id, updateGrantDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerUpdateUrl)(id), {
         ...options,
@@ -81,13 +81,13 @@ const grantsControllerUpdate = async (id, updateGrantDto, options) => {
     });
 };
 exports.grantsControllerUpdate = grantsControllerUpdate;
-/**
- * @summary Mark a capability grant as revoked
- */
 const getGrantsControllerRevokeUrl = (id) => {
     return `/grants/${id}/revoke`;
 };
 exports.getGrantsControllerRevokeUrl = getGrantsControllerRevokeUrl;
+/**
+ * @summary Mark a capability grant as revoked
+ */
 const grantsControllerRevoke = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerRevokeUrl)(id), {
         ...options,

package/dist/endpoints/profiles/profiles.d.ts

@@ -1,14 +1,14 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { ListProfilesResponseDto } from '../../models';
+import type { ProfilePolicyTemplateDtoDataArrayEnvelope } from '../../models';
+export declare const getProfilesControllerListUrl: () => string;
 /**
- * Returns the kernel-seeded `ProfilePolicyTemplate` rows. Used by the biome install UI to populate the profile picker (plan §30.3).
+ * Returns the kernel-seeded `ProfilePolicyTemplate` rows. Used by the biome install UI to populate the profile picker.
  * @summary List built-in BiomePermissionProfile policy templates
  */
-export declare const getProfilesControllerListUrl: () => string;
-export declare const profilesControllerList: (options?: RequestInit) => Promise<ListProfilesResponseDto>;
+export declare const profilesControllerList: (options?: RequestInit) => Promise<ProfilePolicyTemplateDtoDataArrayEnvelope>;

package/dist/endpoints/profiles/profiles.js

@@ -2,14 +2,14 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.profilesControllerList = exports.getProfilesControllerListUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * Returns the kernel-seeded `ProfilePolicyTemplate` rows. Used by the biome install UI to populate the profile picker (plan §30.3).
- * @summary List built-in BiomePermissionProfile policy templates
- */
 const getProfilesControllerListUrl = () => {
     return `/profiles`;
 };
 exports.getProfilesControllerListUrl = getProfilesControllerListUrl;
+/**
+ * Returns the kernel-seeded `ProfilePolicyTemplate` rows. Used by the biome install UI to populate the profile picker.
+ * @summary List built-in BiomePermissionProfile policy templates
+ */
 const profilesControllerList = async (options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getProfilesControllerListUrl)(), {
         ...options,

package/dist/endpoints/relationships/relationships.d.ts

@@ -1,14 +1,14 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { ListRelationshipsResponseDto, RelationshipsControllerListParams } from '../../models';
+import type { OpenFgaRelationshipDtoPaginatedEnvelope, RelationshipsControllerListParams } from '../../models';
+export declare const getRelationshipsControllerListUrl: (params?: RelationshipsControllerListParams) => string;
 /**
  * Returns the live OpenFGA relationship tuples projected from the authoritative `CapabilityGrant` rows. Filter by org / subject / capability / environment / relation; offset-paginated (limit default 50, max 200).
  * @summary List ReBAC relationship tuples (paginated, filterable)
  */
-export declare const getRelationshipsControllerListUrl: (params?: RelationshipsControllerListParams) => string;
-export declare const relationshipsControllerList: (params?: RelationshipsControllerListParams, options?: RequestInit) => Promise<ListRelationshipsResponseDto>;
+export declare const relationshipsControllerList: (params?: RelationshipsControllerListParams, options?: RequestInit) => Promise<OpenFgaRelationshipDtoPaginatedEnvelope>;

package/dist/endpoints/relationships/relationships.js

@@ -2,10 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.relationshipsControllerList = exports.getRelationshipsControllerListUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * Returns the live OpenFGA relationship tuples projected from the authoritative `CapabilityGrant` rows. Filter by org / subject / capability / environment / relation; offset-paginated (limit default 50, max 200).
- * @summary List ReBAC relationship tuples (paginated, filterable)
- */
 const getRelationshipsControllerListUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -29,6 +25,10 @@ const getRelationshipsControllerListUrl = (params) => {
     return stringifiedParams.length > 0 ? `/relationships?${stringifiedParams}` : `/relationships`;
 };
 exports.getRelationshipsControllerListUrl = getRelationshipsControllerListUrl;
+/**
+ * Returns the live OpenFGA relationship tuples projected from the authoritative `CapabilityGrant` rows. Filter by org / subject / capability / environment / relation; offset-paginated (limit default 50, max 200).
+ * @summary List ReBAC relationship tuples (paginated, filterable)
+ */
 const relationshipsControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRelationshipsControllerListUrl)(params), {
         ...options,

package/dist/endpoints/resources/resources.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { AddResourceShareDto, ListVisibleResourcesDto, RegisterResourceOwnershipDto, ResourceOwnershipDtoDataEnvelope, ResourceOwnershipReadDtoDataEnvelope, VisibleResourcesDtoDataEnvelope } from '../../models';
+export declare const getResourcesControllerRegisterUrl: () => string;
+/**
+ * Writes the ownership rows + OpenFGA tuples so the PDP ANDs the verb verdict with instance ownership. Idempotent (upsert + ignore-duplicate tuples). Org scope is forced from the caller context.
+ * @summary Register ownership/visibility of a resource instance
+ */
+export declare const resourcesControllerRegister: (registerResourceOwnershipDto: RegisterResourceOwnershipDto, options?: RequestInit) => Promise<ResourceOwnershipDtoDataEnvelope>;
+export declare const getResourcesControllerListVisibleUrl: () => string;
+/**
+ * Unions OpenFGA owner/shared-with visibility (usersets expanded transitively) with org-shared instances. Org scope is forced from the caller context. Used by platform BFFs to visibility-filter a list on behalf of the end user they serve.
+ * @summary List the instances of a resource type a subject may see
+ */
+export declare const resourcesControllerListVisible: (listVisibleResourcesDto: ListVisibleResourcesDto, options?: RequestInit) => Promise<VisibleResourcesDtoDataEnvelope>;
+export declare const getResourcesControllerGetOwnershipUrl: (type: string, id: string) => string;
+/**
+ * Returns the instance visibility and the combined set of registered subjects (owners + shares; the SQL authority does not split them). 404 when the instance was never registered.
+ * @summary Read a resource instance’s current visibility + subjects
+ */
+export declare const resourcesControllerGetOwnership: (type: string, id: string, options?: RequestInit) => Promise<ResourceOwnershipReadDtoDataEnvelope>;
+export declare const getResourcesControllerDeregisterUrl: (type: string, id: string) => string;
+/**
+ * Idempotent — a no-op when the instance was never registered.
+ * @summary Deregister a resource instance (drop ownership rows + tuples)
+ */
+export declare const resourcesControllerDeregister: (type: string, id: string, options?: RequestInit) => Promise<void>;
+export declare const getResourcesControllerAddShareUrl: (type: string, id: string) => string;
+/**
+ * @summary Add an explicit share to a registered resource instance
+ */
+export declare const resourcesControllerAddShare: (type: string, id: string, addResourceShareDto: AddResourceShareDto, options?: RequestInit) => Promise<void>;