@xemahq/authorization-internal-api-client 0.1.0 → 0.1.2

package/dist/endpoints/resources/resources.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resourcesControllerAddShare = exports.getResourcesControllerAddShareUrl = exports.resourcesControllerDeregister = exports.getResourcesControllerDeregisterUrl = exports.resourcesControllerGetOwnership = exports.getResourcesControllerGetOwnershipUrl = exports.resourcesControllerListVisible = exports.getResourcesControllerListVisibleUrl = exports.resourcesControllerRegister = exports.getResourcesControllerRegisterUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getResourcesControllerRegisterUrl = () => {
+    return `/resources`;
+};
+exports.getResourcesControllerRegisterUrl = getResourcesControllerRegisterUrl;
+/**
+ * Writes the ownership rows + OpenFGA tuples so the PDP ANDs the verb verdict with instance ownership. Idempotent (upsert + ignore-duplicate tuples). Org scope is forced from the caller context.
+ * @summary Register ownership/visibility of a resource instance
+ */
+const resourcesControllerRegister = async (registerResourceOwnershipDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getResourcesControllerRegisterUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(registerResourceOwnershipDto)
+    });
+};
+exports.resourcesControllerRegister = resourcesControllerRegister;
+const getResourcesControllerListVisibleUrl = () => {
+    return `/resources/visible`;
+};
+exports.getResourcesControllerListVisibleUrl = getResourcesControllerListVisibleUrl;
+/**
+ * Unions OpenFGA owner/shared-with visibility (usersets expanded transitively) with org-shared instances. Org scope is forced from the caller context. Used by platform BFFs to visibility-filter a list on behalf of the end user they serve.
+ * @summary List the instances of a resource type a subject may see
+ */
+const resourcesControllerListVisible = async (listVisibleResourcesDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getResourcesControllerListVisibleUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(listVisibleResourcesDto)
+    });
+};
+exports.resourcesControllerListVisible = resourcesControllerListVisible;
+const getResourcesControllerGetOwnershipUrl = (type, id) => {
+    return `/resources/${type}/${id}`;
+};
+exports.getResourcesControllerGetOwnershipUrl = getResourcesControllerGetOwnershipUrl;
+/**
+ * Returns the instance visibility and the combined set of registered subjects (owners + shares; the SQL authority does not split them). 404 when the instance was never registered.
+ * @summary Read a resource instance’s current visibility + subjects
+ */
+const resourcesControllerGetOwnership = async (type, id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getResourcesControllerGetOwnershipUrl)(type, id), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.resourcesControllerGetOwnership = resourcesControllerGetOwnership;
+const getResourcesControllerDeregisterUrl = (type, id) => {
+    return `/resources/${type}/${id}`;
+};
+exports.getResourcesControllerDeregisterUrl = getResourcesControllerDeregisterUrl;
+/**
+ * Idempotent — a no-op when the instance was never registered.
+ * @summary Deregister a resource instance (drop ownership rows + tuples)
+ */
+const resourcesControllerDeregister = async (type, id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getResourcesControllerDeregisterUrl)(type, id), {
+        ...options,
+        method: 'DELETE'
+    });
+};
+exports.resourcesControllerDeregister = resourcesControllerDeregister;
+const getResourcesControllerAddShareUrl = (type, id) => {
+    return `/resources/${type}/${id}/relationships`;
+};
+exports.getResourcesControllerAddShareUrl = getResourcesControllerAddShareUrl;
+/**
+ * @summary Add an explicit share to a registered resource instance
+ */
+const resourcesControllerAddShare = async (type, id, addResourceShareDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getResourcesControllerAddShareUrl)(type, id), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(addResourceShareDto)
+    });
+};
+exports.resourcesControllerAddShare = resourcesControllerAddShare;

package/dist/endpoints/roles/roles.d.ts

@@ -1,63 +1,68 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { AddRoleGrantDto, AssignRoleDto, CreateRoleDto, RoleAssignmentDto, RoleAssignmentDtoDataArrayEnvelope, RoleDto, RoleDtoDataArrayEnvelope, RoleGrantDto, RoleGrantDtoDataArrayEnvelope, RolesControllerListParams, UpdateRoleDto } from '../../models';
+import type { AddRoleGrantDto, AssignRoleDto, CreateRoleDto, OrgRoleSyncDto, OrgRoleSyncResultDtoDataEnvelope, RoleAssignmentDtoDataArrayEnvelope, RoleAssignmentDtoDataEnvelope, RoleDtoDataArrayEnvelope, RoleDtoDataEnvelope, RoleGrantDtoDataArrayEnvelope, RoleGrantDtoDataEnvelope, RolesControllerListParams, UpdateRoleDto } from '../../models';
+export declare const getRolesControllerCreateUrl: () => string;
 /**
  * @summary Create a custom role
  */
-export declare const getRolesControllerCreateUrl: () => string;
-export declare const rolesControllerCreate: (createRoleDto: CreateRoleDto, options?: RequestInit) => Promise<RoleDto>;
+export declare const rolesControllerCreate: (createRoleDto: CreateRoleDto, options?: RequestInit) => Promise<RoleDtoDataEnvelope>;
+export declare const getRolesControllerListUrl: (params: RolesControllerListParams) => string;
 /**
  * @summary List roles in an org (custom + built-in)
  */
-export declare const getRolesControllerListUrl: (params: RolesControllerListParams) => string;
 export declare const rolesControllerList: (params: RolesControllerListParams, options?: RequestInit) => Promise<RoleDtoDataArrayEnvelope>;
+export declare const getRolesControllerGetByIdUrl: (id: string) => string;
 /**
  * @summary Get a role by id
  */
-export declare const getRolesControllerGetByIdUrl: (id: string) => string;
-export declare const rolesControllerGetById: (id: string, options?: RequestInit) => Promise<RoleDto>;
+export declare const rolesControllerGetById: (id: string, options?: RequestInit) => Promise<RoleDtoDataEnvelope>;
+export declare const getRolesControllerUpdateUrl: (id: string) => string;
 /**
  * @summary Update a custom role (built-ins are immutable)
  */
-export declare const getRolesControllerUpdateUrl: (id: string) => string;
-export declare const rolesControllerUpdate: (id: string, updateRoleDto: UpdateRoleDto, options?: RequestInit) => Promise<RoleDto>;
+export declare const rolesControllerUpdate: (id: string, updateRoleDto: UpdateRoleDto, options?: RequestInit) => Promise<RoleDtoDataEnvelope>;
+export declare const getRolesControllerDeleteUrl: (id: string) => string;
 /**
  * @summary Delete a custom role (cascades grants + assignments)
  */
-export declare const getRolesControllerDeleteUrl: (id: string) => string;
 export declare const rolesControllerDelete: (id: string, options?: RequestInit) => Promise<void>;
+export declare const getRolesControllerListGrantsUrl: (id: string) => string;
 /**
  * @summary List the capability grants a role bundles
  */
-export declare const getRolesControllerListGrantsUrl: (id: string) => string;
 export declare const rolesControllerListGrants: (id: string, options?: RequestInit) => Promise<RoleGrantDtoDataArrayEnvelope>;
+export declare const getRolesControllerAddGrantUrl: (id: string) => string;
 /**
  * @summary Add a capability grant to a role
  */
-export declare const getRolesControllerAddGrantUrl: (id: string) => string;
-export declare const rolesControllerAddGrant: (id: string, addRoleGrantDto: AddRoleGrantDto, options?: RequestInit) => Promise<RoleGrantDto>;
+export declare const rolesControllerAddGrant: (id: string, addRoleGrantDto: AddRoleGrantDto, options?: RequestInit) => Promise<RoleGrantDtoDataEnvelope>;
+export declare const getRolesControllerRemoveGrantUrl: (id: string, grantId: string) => string;
 /**
  * @summary Remove a capability grant from a role
  */
-export declare const getRolesControllerRemoveGrantUrl: (id: string, grantId: string) => string;
 export declare const rolesControllerRemoveGrant: (id: string, grantId: string, options?: RequestInit) => Promise<void>;
+export declare const getRolesControllerListAssignmentsUrl: (id: string) => string;
 /**
  * @summary List a role’s assignments (subjects + teams)
  */
-export declare const getRolesControllerListAssignmentsUrl: (id: string) => string;
 export declare const rolesControllerListAssignments: (id: string, options?: RequestInit) => Promise<RoleAssignmentDtoDataArrayEnvelope>;
+export declare const getRolesControllerAssignUrl: (id: string) => string;
 /**
  * @summary Assign a role to a subject or a team
  */
-export declare const getRolesControllerAssignUrl: (id: string) => string;
-export declare const rolesControllerAssign: (id: string, assignRoleDto: AssignRoleDto, options?: RequestInit) => Promise<RoleAssignmentDto>;
+export declare const rolesControllerAssign: (id: string, assignRoleDto: AssignRoleDto, options?: RequestInit) => Promise<RoleAssignmentDtoDataEnvelope>;
+export declare const getRolesControllerUnassignUrl: (id: string, assignmentId: string) => string;
 /**
  * @summary Remove a role assignment
  */
-export declare const getRolesControllerUnassignUrl: (id: string, assignmentId: string) => string;
 export declare const rolesControllerUnassign: (id: string, assignmentId: string, options?: RequestInit) => Promise<void>;
+export declare const getOrgRoleSyncControllerSyncUrl: () => string;
+/**
+ * @summary Ensure a subject holds the given org role, correctly org-scoped (idempotent).
+ */
+export declare const orgRoleSyncControllerSync: (orgRoleSyncDto: OrgRoleSyncDto, options?: RequestInit) => Promise<OrgRoleSyncResultDtoDataEnvelope>;

package/dist/endpoints/roles/roles.js

@@ -1,14 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.rolesControllerUnassign = exports.getRolesControllerUnassignUrl = exports.rolesControllerAssign = exports.getRolesControllerAssignUrl = exports.rolesControllerListAssignments = exports.getRolesControllerListAssignmentsUrl = exports.rolesControllerRemoveGrant = exports.getRolesControllerRemoveGrantUrl = exports.rolesControllerAddGrant = exports.getRolesControllerAddGrantUrl = exports.rolesControllerListGrants = exports.getRolesControllerListGrantsUrl = exports.rolesControllerDelete = exports.getRolesControllerDeleteUrl = exports.rolesControllerUpdate = exports.getRolesControllerUpdateUrl = exports.rolesControllerGetById = exports.getRolesControllerGetByIdUrl = exports.rolesControllerList = exports.getRolesControllerListUrl = exports.rolesControllerCreate = exports.getRolesControllerCreateUrl = void 0;
+exports.orgRoleSyncControllerSync = exports.getOrgRoleSyncControllerSyncUrl = exports.rolesControllerUnassign = exports.getRolesControllerUnassignUrl = exports.rolesControllerAssign = exports.getRolesControllerAssignUrl = exports.rolesControllerListAssignments = exports.getRolesControllerListAssignmentsUrl = exports.rolesControllerRemoveGrant = exports.getRolesControllerRemoveGrantUrl = exports.rolesControllerAddGrant = exports.getRolesControllerAddGrantUrl = exports.rolesControllerListGrants = exports.getRolesControllerListGrantsUrl = exports.rolesControllerDelete = exports.getRolesControllerDeleteUrl = exports.rolesControllerUpdate = exports.getRolesControllerUpdateUrl = exports.rolesControllerGetById = exports.getRolesControllerGetByIdUrl = exports.rolesControllerList = exports.getRolesControllerListUrl = exports.rolesControllerCreate = exports.getRolesControllerCreateUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * @summary Create a custom role
- */
 const getRolesControllerCreateUrl = () => {
     return `/roles`;
 };
 exports.getRolesControllerCreateUrl = getRolesControllerCreateUrl;
+/**
+ * @summary Create a custom role
+ */
 const rolesControllerCreate = async (createRoleDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerCreateUrl)(), {
         ...options,
@@ -18,9 +18,6 @@ const rolesControllerCreate = async (createRoleDto, options) => {
     });
 };
 exports.rolesControllerCreate = rolesControllerCreate;
-/**
- * @summary List roles in an org (custom + built-in)
- */
 const getRolesControllerListUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -44,6 +41,9 @@ const getRolesControllerListUrl = (params) => {
     return stringifiedParams.length > 0 ? `/roles?${stringifiedParams}` : `/roles`;
 };
 exports.getRolesControllerListUrl = getRolesControllerListUrl;
+/**
+ * @summary List roles in an org (custom + built-in)
+ */
 const rolesControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerListUrl)(params), {
         ...options,
@@ -51,13 +51,13 @@ const rolesControllerList = async (params, options) => {
     });
 };
 exports.rolesControllerList = rolesControllerList;
-/**
- * @summary Get a role by id
- */
 const getRolesControllerGetByIdUrl = (id) => {
     return `/roles/${id}`;
 };
 exports.getRolesControllerGetByIdUrl = getRolesControllerGetByIdUrl;
+/**
+ * @summary Get a role by id
+ */
 const rolesControllerGetById = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerGetByIdUrl)(id), {
         ...options,
@@ -65,13 +65,13 @@ const rolesControllerGetById = async (id, options) => {
     });
 };
 exports.rolesControllerGetById = rolesControllerGetById;
-/**
- * @summary Update a custom role (built-ins are immutable)
- */
 const getRolesControllerUpdateUrl = (id) => {
     return `/roles/${id}`;
 };
 exports.getRolesControllerUpdateUrl = getRolesControllerUpdateUrl;
+/**
+ * @summary Update a custom role (built-ins are immutable)
+ */
 const rolesControllerUpdate = async (id, updateRoleDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerUpdateUrl)(id), {
         ...options,
@@ -81,13 +81,13 @@ const rolesControllerUpdate = async (id, updateRoleDto, options) => {
     });
 };
 exports.rolesControllerUpdate = rolesControllerUpdate;
-/**
- * @summary Delete a custom role (cascades grants + assignments)
- */
 const getRolesControllerDeleteUrl = (id) => {
     return `/roles/${id}`;
 };
 exports.getRolesControllerDeleteUrl = getRolesControllerDeleteUrl;
+/**
+ * @summary Delete a custom role (cascades grants + assignments)
+ */
 const rolesControllerDelete = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerDeleteUrl)(id), {
         ...options,
@@ -95,13 +95,13 @@ const rolesControllerDelete = async (id, options) => {
     });
 };
 exports.rolesControllerDelete = rolesControllerDelete;
-/**
- * @summary List the capability grants a role bundles
- */
 const getRolesControllerListGrantsUrl = (id) => {
     return `/roles/${id}/grants`;
 };
 exports.getRolesControllerListGrantsUrl = getRolesControllerListGrantsUrl;
+/**
+ * @summary List the capability grants a role bundles
+ */
 const rolesControllerListGrants = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerListGrantsUrl)(id), {
         ...options,
@@ -109,13 +109,13 @@ const rolesControllerListGrants = async (id, options) => {
     });
 };
 exports.rolesControllerListGrants = rolesControllerListGrants;
-/**
- * @summary Add a capability grant to a role
- */
 const getRolesControllerAddGrantUrl = (id) => {
     return `/roles/${id}/grants`;
 };
 exports.getRolesControllerAddGrantUrl = getRolesControllerAddGrantUrl;
+/**
+ * @summary Add a capability grant to a role
+ */
 const rolesControllerAddGrant = async (id, addRoleGrantDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerAddGrantUrl)(id), {
         ...options,
@@ -125,13 +125,13 @@ const rolesControllerAddGrant = async (id, addRoleGrantDto, options) => {
     });
 };
 exports.rolesControllerAddGrant = rolesControllerAddGrant;
-/**
- * @summary Remove a capability grant from a role
- */
 const getRolesControllerRemoveGrantUrl = (id, grantId) => {
     return `/roles/${id}/grants/${grantId}`;
 };
 exports.getRolesControllerRemoveGrantUrl = getRolesControllerRemoveGrantUrl;
+/**
+ * @summary Remove a capability grant from a role
+ */
 const rolesControllerRemoveGrant = async (id, grantId, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerRemoveGrantUrl)(id, grantId), {
         ...options,
@@ -139,13 +139,13 @@ const rolesControllerRemoveGrant = async (id, grantId, options) => {
     });
 };
 exports.rolesControllerRemoveGrant = rolesControllerRemoveGrant;
-/**
- * @summary List a role’s assignments (subjects + teams)
- */
 const getRolesControllerListAssignmentsUrl = (id) => {
     return `/roles/${id}/assignments`;
 };
 exports.getRolesControllerListAssignmentsUrl = getRolesControllerListAssignmentsUrl;
+/**
+ * @summary List a role’s assignments (subjects + teams)
+ */
 const rolesControllerListAssignments = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerListAssignmentsUrl)(id), {
         ...options,
@@ -153,13 +153,13 @@ const rolesControllerListAssignments = async (id, options) => {
     });
 };
 exports.rolesControllerListAssignments = rolesControllerListAssignments;
-/**
- * @summary Assign a role to a subject or a team
- */
 const getRolesControllerAssignUrl = (id) => {
     return `/roles/${id}/assignments`;
 };
 exports.getRolesControllerAssignUrl = getRolesControllerAssignUrl;
+/**
+ * @summary Assign a role to a subject or a team
+ */
 const rolesControllerAssign = async (id, assignRoleDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerAssignUrl)(id), {
         ...options,
@@ -169,13 +169,13 @@ const rolesControllerAssign = async (id, assignRoleDto, options) => {
     });
 };
 exports.rolesControllerAssign = rolesControllerAssign;
-/**
- * @summary Remove a role assignment
- */
 const getRolesControllerUnassignUrl = (id, assignmentId) => {
     return `/roles/${id}/assignments/${assignmentId}`;
 };
 exports.getRolesControllerUnassignUrl = getRolesControllerUnassignUrl;
+/**
+ * @summary Remove a role assignment
+ */
 const rolesControllerUnassign = async (id, assignmentId, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerUnassignUrl)(id, assignmentId), {
         ...options,
@@ -183,3 +183,19 @@ const rolesControllerUnassign = async (id, assignmentId, options) => {
     });
 };
 exports.rolesControllerUnassign = rolesControllerUnassign;
+const getOrgRoleSyncControllerSyncUrl = () => {
+    return `/internal/org-role-sync`;
+};
+exports.getOrgRoleSyncControllerSyncUrl = getOrgRoleSyncControllerSyncUrl;
+/**
+ * @summary Ensure a subject holds the given org role, correctly org-scoped (idempotent).
+ */
+const orgRoleSyncControllerSync = async (orgRoleSyncDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getOrgRoleSyncControllerSyncUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(orgRoleSyncDto)
+    });
+};
+exports.orgRoleSyncControllerSync = orgRoleSyncControllerSync;

package/dist/endpoints/teams/teams.d.ts

@@ -1,48 +1,48 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { AddTeamMemberDto, CreateTeamDto, TeamDto, TeamDtoDataArrayEnvelope, TeamMembershipDto, TeamMembershipDtoDataArrayEnvelope, TeamsControllerListParams, UpdateTeamDto } from '../../models';
+import type { AddTeamMemberDto, CreateTeamDto, TeamDtoDataArrayEnvelope, TeamDtoDataEnvelope, TeamMembershipDtoDataArrayEnvelope, TeamMembershipDtoDataEnvelope, TeamsControllerListParams, UpdateTeamDto } from '../../models';
+export declare const getTeamsControllerCreateUrl: () => string;
 /**
  * @summary Create a team
  */
-export declare const getTeamsControllerCreateUrl: () => string;
-export declare const teamsControllerCreate: (createTeamDto: CreateTeamDto, options?: RequestInit) => Promise<TeamDto>;
+export declare const teamsControllerCreate: (createTeamDto: CreateTeamDto, options?: RequestInit) => Promise<TeamDtoDataEnvelope>;
+export declare const getTeamsControllerListUrl: (params: TeamsControllerListParams) => string;
 /**
  * @summary List teams in an org
  */
-export declare const getTeamsControllerListUrl: (params: TeamsControllerListParams) => string;
 export declare const teamsControllerList: (params: TeamsControllerListParams, options?: RequestInit) => Promise<TeamDtoDataArrayEnvelope>;
+export declare const getTeamsControllerGetByIdUrl: (id: string) => string;
 /**
  * @summary Get a team by id
  */
-export declare const getTeamsControllerGetByIdUrl: (id: string) => string;
-export declare const teamsControllerGetById: (id: string, options?: RequestInit) => Promise<TeamDto>;
+export declare const teamsControllerGetById: (id: string, options?: RequestInit) => Promise<TeamDtoDataEnvelope>;
+export declare const getTeamsControllerUpdateUrl: (id: string) => string;
 /**
  * @summary Update a team (rename, re-describe, re-parent)
  */
-export declare const getTeamsControllerUpdateUrl: (id: string) => string;
-export declare const teamsControllerUpdate: (id: string, updateTeamDto: UpdateTeamDto, options?: RequestInit) => Promise<TeamDto>;
+export declare const teamsControllerUpdate: (id: string, updateTeamDto: UpdateTeamDto, options?: RequestInit) => Promise<TeamDtoDataEnvelope>;
+export declare const getTeamsControllerDeleteUrl: (id: string) => string;
 /**
  * @summary Delete a team (cascades memberships + assignments)
  */
-export declare const getTeamsControllerDeleteUrl: (id: string) => string;
 export declare const teamsControllerDelete: (id: string, options?: RequestInit) => Promise<void>;
+export declare const getTeamsControllerListMembersUrl: (id: string) => string;
 /**
  * @summary List a team’s direct members
  */
-export declare const getTeamsControllerListMembersUrl: (id: string) => string;
 export declare const teamsControllerListMembers: (id: string, options?: RequestInit) => Promise<TeamMembershipDtoDataArrayEnvelope>;
+export declare const getTeamsControllerAddMemberUrl: (id: string) => string;
 /**
  * @summary Add a subject (user/agent/service/app/external) to a team
  */
-export declare const getTeamsControllerAddMemberUrl: (id: string) => string;
-export declare const teamsControllerAddMember: (id: string, addTeamMemberDto: AddTeamMemberDto, options?: RequestInit) => Promise<TeamMembershipDto>;
+export declare const teamsControllerAddMember: (id: string, addTeamMemberDto: AddTeamMemberDto, options?: RequestInit) => Promise<TeamMembershipDtoDataEnvelope>;
+export declare const getTeamsControllerRemoveMemberUrl: (id: string, membershipId: string) => string;
 /**
  * @summary Remove a member from a team
  */
-export declare const getTeamsControllerRemoveMemberUrl: (id: string, membershipId: string) => string;
 export declare const teamsControllerRemoveMember: (id: string, membershipId: string, options?: RequestInit) => Promise<void>;

package/dist/endpoints/teams/teams.js

@@ -2,13 +2,13 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.teamsControllerRemoveMember = exports.getTeamsControllerRemoveMemberUrl = exports.teamsControllerAddMember = exports.getTeamsControllerAddMemberUrl = exports.teamsControllerListMembers = exports.getTeamsControllerListMembersUrl = exports.teamsControllerDelete = exports.getTeamsControllerDeleteUrl = exports.teamsControllerUpdate = exports.getTeamsControllerUpdateUrl = exports.teamsControllerGetById = exports.getTeamsControllerGetByIdUrl = exports.teamsControllerList = exports.getTeamsControllerListUrl = exports.teamsControllerCreate = exports.getTeamsControllerCreateUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-/**
- * @summary Create a team
- */
 const getTeamsControllerCreateUrl = () => {
     return `/teams`;
 };
 exports.getTeamsControllerCreateUrl = getTeamsControllerCreateUrl;
+/**
+ * @summary Create a team
+ */
 const teamsControllerCreate = async (createTeamDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerCreateUrl)(), {
         ...options,
@@ -18,9 +18,6 @@ const teamsControllerCreate = async (createTeamDto, options) => {
     });
 };
 exports.teamsControllerCreate = teamsControllerCreate;
-/**
- * @summary List teams in an org
- */
 const getTeamsControllerListUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {
@@ -44,6 +41,9 @@ const getTeamsControllerListUrl = (params) => {
     return stringifiedParams.length > 0 ? `/teams?${stringifiedParams}` : `/teams`;
 };
 exports.getTeamsControllerListUrl = getTeamsControllerListUrl;
+/**
+ * @summary List teams in an org
+ */
 const teamsControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerListUrl)(params), {
         ...options,
@@ -51,13 +51,13 @@ const teamsControllerList = async (params, options) => {
     });
 };
 exports.teamsControllerList = teamsControllerList;
-/**
- * @summary Get a team by id
- */
 const getTeamsControllerGetByIdUrl = (id) => {
     return `/teams/${id}`;
 };
 exports.getTeamsControllerGetByIdUrl = getTeamsControllerGetByIdUrl;
+/**
+ * @summary Get a team by id
+ */
 const teamsControllerGetById = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerGetByIdUrl)(id), {
         ...options,
@@ -65,13 +65,13 @@ const teamsControllerGetById = async (id, options) => {
     });
 };
 exports.teamsControllerGetById = teamsControllerGetById;
-/**
- * @summary Update a team (rename, re-describe, re-parent)
- */
 const getTeamsControllerUpdateUrl = (id) => {
     return `/teams/${id}`;
 };
 exports.getTeamsControllerUpdateUrl = getTeamsControllerUpdateUrl;
+/**
+ * @summary Update a team (rename, re-describe, re-parent)
+ */
 const teamsControllerUpdate = async (id, updateTeamDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerUpdateUrl)(id), {
         ...options,
@@ -81,13 +81,13 @@ const teamsControllerUpdate = async (id, updateTeamDto, options) => {
     });
 };
 exports.teamsControllerUpdate = teamsControllerUpdate;
-/**
- * @summary Delete a team (cascades memberships + assignments)
- */
 const getTeamsControllerDeleteUrl = (id) => {
     return `/teams/${id}`;
 };
 exports.getTeamsControllerDeleteUrl = getTeamsControllerDeleteUrl;
+/**
+ * @summary Delete a team (cascades memberships + assignments)
+ */
 const teamsControllerDelete = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerDeleteUrl)(id), {
         ...options,
@@ -95,13 +95,13 @@ const teamsControllerDelete = async (id, options) => {
     });
 };
 exports.teamsControllerDelete = teamsControllerDelete;
-/**
- * @summary List a team’s direct members
- */
 const getTeamsControllerListMembersUrl = (id) => {
     return `/teams/${id}/members`;
 };
 exports.getTeamsControllerListMembersUrl = getTeamsControllerListMembersUrl;
+/**
+ * @summary List a team’s direct members
+ */
 const teamsControllerListMembers = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerListMembersUrl)(id), {
         ...options,
@@ -109,13 +109,13 @@ const teamsControllerListMembers = async (id, options) => {
     });
 };
 exports.teamsControllerListMembers = teamsControllerListMembers;
-/**
- * @summary Add a subject (user/agent/service/app/external) to a team
- */
 const getTeamsControllerAddMemberUrl = (id) => {
     return `/teams/${id}/members`;
 };
 exports.getTeamsControllerAddMemberUrl = getTeamsControllerAddMemberUrl;
+/**
+ * @summary Add a subject (user/agent/service/app/external) to a team
+ */
 const teamsControllerAddMember = async (id, addTeamMemberDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerAddMemberUrl)(id), {
         ...options,
@@ -125,13 +125,13 @@ const teamsControllerAddMember = async (id, addTeamMemberDto, options) => {
     });
 };
 exports.teamsControllerAddMember = teamsControllerAddMember;
-/**
- * @summary Remove a member from a team
- */
 const getTeamsControllerRemoveMemberUrl = (id, membershipId) => {
     return `/teams/${id}/members/${membershipId}`;
 };
 exports.getTeamsControllerRemoveMemberUrl = getTeamsControllerRemoveMemberUrl;
+/**
+ * @summary Remove a member from a team
+ */
 const teamsControllerRemoveMember = async (id, membershipId, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getTeamsControllerRemoveMemberUrl)(id, membershipId), {
         ...options,

package/dist/index.d.ts

@@ -1,10 +1,14 @@
 export { configureClient, getClientConfig, ClientError, customFetch, type ClientConfig } from './custom-fetch';
 export * from './models';
+export * from './endpoints/agents/agents';
 export * from './endpoints/authorization/authorization';
+export * from './endpoints/contribution-sync/contribution-sync';
 export * from './endpoints/credential-defaults/credential-defaults';
+export * from './endpoints/describe-objects/describe-objects';
 export * from './endpoints/environments/environments';
 export * from './endpoints/grants/grants';
 export * from './endpoints/profiles/profiles';
 export * from './endpoints/relationships/relationships';
+export * from './endpoints/resources/resources';
 export * from './endpoints/roles/roles';
 export * from './endpoints/teams/teams';

package/dist/index.js

@@ -22,11 +22,15 @@ Object.defineProperty(exports, "getClientConfig", { enumerable: true, get: funct
 Object.defineProperty(exports, "ClientError", { enumerable: true, get: function () { return custom_fetch_1.ClientError; } });
 Object.defineProperty(exports, "customFetch", { enumerable: true, get: function () { return custom_fetch_1.customFetch; } });
 __exportStar(require("./models"), exports);
+__exportStar(require("./endpoints/agents/agents"), exports);
 __exportStar(require("./endpoints/authorization/authorization"), exports);
+__exportStar(require("./endpoints/contribution-sync/contribution-sync"), exports);
 __exportStar(require("./endpoints/credential-defaults/credential-defaults"), exports);
+__exportStar(require("./endpoints/describe-objects/describe-objects"), exports);
 __exportStar(require("./endpoints/environments/environments"), exports);
 __exportStar(require("./endpoints/grants/grants"), exports);
 __exportStar(require("./endpoints/profiles/profiles"), exports);
 __exportStar(require("./endpoints/relationships/relationships"), exports);
+__exportStar(require("./endpoints/resources/resources"), exports);
 __exportStar(require("./endpoints/roles/roles"), exports);
 __exportStar(require("./endpoints/teams/teams"), exports);

package/dist/models/addResourceShareDto.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { ResourceSubjectRefDto } from './resourceSubjectRefDto.js';
+export interface AddResourceShareDto {
+    share: ResourceSubjectRefDto;
+}

package/dist/models/addRoleGrantDto.d.ts

@@ -1,11 +1,11 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { GrantConstraintsDto } from './grantConstraintsDto';
+import type { GrantConstraintsDto } from './grantConstraintsDto.js';
 export interface AddRoleGrantDto {
     /** Canonical CapabilityRef from `@xemahq/kernel-contracts/capability`. */
     capability: string;

package/dist/models/addTeamMemberDto.d.ts

@@ -1,11 +1,11 @@
 /**
- * Generated by orval v8.6.2 🍺
+ * Generated by orval v8.16.0 🍺
  * Do not edit manually.
  * Authorization API
  * Authorization API extract (generated for client codegen).
  * OpenAPI spec version: 0.1.0
  */
-import type { SubjectKind } from './subjectKind';
+import type { SubjectKind } from './subjectKind.js';
 export interface AddTeamMemberDto {
     subjectKind: SubjectKind;
     subjectRef: string;