@xemahq/authorization-internal-api-client 0.1.0

package/dist/endpoints/environments/environments.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { CreateExecutionEnvironmentDto, EnvironmentsControllerFindBySlugParams, EnvironmentsControllerListParams, EnvironmentsControllerRemoveParams, EnvironmentsControllerUpdateParams, ExecutionEnvironmentResponseDto, UpdateExecutionEnvironmentDto } from '../../models';
+/**
+ * Returns the kernel-seeded built-in environments. With `orgId` it also includes that org's custom environments (plan §16 / G.4); without `orgId` it returns built-ins only (back-compat).
+ * @summary List ExecutionEnvironment rows
+ */
+export declare const getEnvironmentsControllerListUrl: (params?: EnvironmentsControllerListParams) => string;
+export declare const environmentsControllerList: (params?: EnvironmentsControllerListParams, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDto[]>;
+/**
+ * Creates an org-scoped custom environment (`isBuiltIn=false`). Fails fast (409) if the slug collides with a built-in or with an existing custom in the same org.
+ * @summary Create an org-custom ExecutionEnvironment
+ */
+export declare const getEnvironmentsControllerCreateUrl: () => string;
+export declare const environmentsControllerCreate: (createExecutionEnvironmentDto: CreateExecutionEnvironmentDto, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDto>;
+/**
+ * Resolves a built-in by slug. With `orgId`, an org-custom slug resolves before the built-in fallback. 404 if unknown.
+ * @summary Fetch a single ExecutionEnvironment by slug
+ */
+export declare const getEnvironmentsControllerFindBySlugUrl: (slug: string, params?: EnvironmentsControllerFindBySlugParams) => string;
+export declare const environmentsControllerFindBySlug: (slug: string, params?: EnvironmentsControllerFindBySlugParams, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDto>;
+/**
+ * Updates the mutable fields (description / allowedCapabilities / approvalRules / runtimeLimits) of an org-custom environment. Refuses built-ins with 403 (immutable). `slug` / `kind` / `orgId` are immutable.
+ * @summary Update an org-custom ExecutionEnvironment
+ */
+export declare const getEnvironmentsControllerUpdateUrl: (slug: string, params: EnvironmentsControllerUpdateParams) => string;
+export declare const environmentsControllerUpdate: (slug: string, updateExecutionEnvironmentDto: UpdateExecutionEnvironmentDto, params: EnvironmentsControllerUpdateParams, options?: RequestInit) => Promise<ExecutionEnvironmentResponseDto>;
+/**
+ * Deletes an org-custom environment. Refuses built-ins with 403 (immutable). 404 if no such custom environment exists for the org.
+ * @summary Delete an org-custom ExecutionEnvironment
+ */
+export declare const getEnvironmentsControllerRemoveUrl: (slug: string, params: EnvironmentsControllerRemoveParams) => string;
+export declare const environmentsControllerRemove: (slug: string, params: EnvironmentsControllerRemoveParams, options?: RequestInit) => Promise<void>;

package/dist/endpoints/environments/environments.js

@@ -0,0 +1,159 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.environmentsControllerRemove = exports.getEnvironmentsControllerRemoveUrl = exports.environmentsControllerUpdate = exports.getEnvironmentsControllerUpdateUrl = exports.environmentsControllerFindBySlug = exports.getEnvironmentsControllerFindBySlugUrl = exports.environmentsControllerCreate = exports.getEnvironmentsControllerCreateUrl = exports.environmentsControllerList = exports.getEnvironmentsControllerListUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+/**
+ * Returns the kernel-seeded built-in environments. With `orgId` it also includes that org's custom environments (plan §16 / G.4); without `orgId` it returns built-ins only (back-compat).
+ * @summary List ExecutionEnvironment rows
+ */
+const getEnvironmentsControllerListUrl = (params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (value === null) {
+            normalizedParams.append(key, 'null');
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                normalizedParams.append(key, item.toString());
+            }
+            return;
+        }
+        normalizedParams.append(key, value.toString());
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0 ? `/environments?${stringifiedParams}` : `/environments`;
+};
+exports.getEnvironmentsControllerListUrl = getEnvironmentsControllerListUrl;
+const environmentsControllerList = async (params, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerListUrl)(params), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.environmentsControllerList = environmentsControllerList;
+/**
+ * Creates an org-scoped custom environment (`isBuiltIn=false`). Fails fast (409) if the slug collides with a built-in or with an existing custom in the same org.
+ * @summary Create an org-custom ExecutionEnvironment
+ */
+const getEnvironmentsControllerCreateUrl = () => {
+    return `/environments`;
+};
+exports.getEnvironmentsControllerCreateUrl = getEnvironmentsControllerCreateUrl;
+const environmentsControllerCreate = async (createExecutionEnvironmentDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerCreateUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(createExecutionEnvironmentDto)
+    });
+};
+exports.environmentsControllerCreate = environmentsControllerCreate;
+/**
+ * Resolves a built-in by slug. With `orgId`, an org-custom slug resolves before the built-in fallback. 404 if unknown.
+ * @summary Fetch a single ExecutionEnvironment by slug
+ */
+const getEnvironmentsControllerFindBySlugUrl = (slug, params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (value === null) {
+            normalizedParams.append(key, 'null');
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                normalizedParams.append(key, item.toString());
+            }
+            return;
+        }
+        normalizedParams.append(key, value.toString());
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0 ? `/environments/${slug}?${stringifiedParams}` : `/environments/${slug}`;
+};
+exports.getEnvironmentsControllerFindBySlugUrl = getEnvironmentsControllerFindBySlugUrl;
+const environmentsControllerFindBySlug = async (slug, params, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerFindBySlugUrl)(slug, params), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.environmentsControllerFindBySlug = environmentsControllerFindBySlug;
+/**
+ * Updates the mutable fields (description / allowedCapabilities / approvalRules / runtimeLimits) of an org-custom environment. Refuses built-ins with 403 (immutable). `slug` / `kind` / `orgId` are immutable.
+ * @summary Update an org-custom ExecutionEnvironment
+ */
+const getEnvironmentsControllerUpdateUrl = (slug, params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (value === null) {
+            normalizedParams.append(key, 'null');
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                normalizedParams.append(key, item.toString());
+            }
+            return;
+        }
+        normalizedParams.append(key, value.toString());
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0 ? `/environments/${slug}?${stringifiedParams}` : `/environments/${slug}`;
+};
+exports.getEnvironmentsControllerUpdateUrl = getEnvironmentsControllerUpdateUrl;
+const environmentsControllerUpdate = async (slug, updateExecutionEnvironmentDto, params, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerUpdateUrl)(slug, params), {
+        ...options,
+        method: 'PATCH',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(updateExecutionEnvironmentDto)
+    });
+};
+exports.environmentsControllerUpdate = environmentsControllerUpdate;
+/**
+ * Deletes an org-custom environment. Refuses built-ins with 403 (immutable). 404 if no such custom environment exists for the org.
+ * @summary Delete an org-custom ExecutionEnvironment
+ */
+const getEnvironmentsControllerRemoveUrl = (slug, params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (value === null) {
+            normalizedParams.append(key, 'null');
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                normalizedParams.append(key, item.toString());
+            }
+            return;
+        }
+        normalizedParams.append(key, value.toString());
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0 ? `/environments/${slug}?${stringifiedParams}` : `/environments/${slug}`;
+};
+exports.getEnvironmentsControllerRemoveUrl = getEnvironmentsControllerRemoveUrl;
+const environmentsControllerRemove = async (slug, params, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getEnvironmentsControllerRemoveUrl)(slug, params), {
+        ...options,
+        method: 'DELETE'
+    });
+};
+exports.environmentsControllerRemove = environmentsControllerRemove;

package/dist/endpoints/grants/grants.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { CapabilityGrantDto, CreateGrantDto, GrantsControllerListParams, ListGrantsResponseDto, UpdateGrantDto } from '../../models';
+/**
+ * @summary Create a capability grant
+ */
+export declare const getGrantsControllerCreateUrl: () => string;
+export declare const grantsControllerCreate: (createGrantDto: CreateGrantDto, options?: RequestInit) => Promise<CapabilityGrantDto>;
+/**
+ * @summary List capability grants (paginated, filterable)
+ */
+export declare const getGrantsControllerListUrl: (params?: GrantsControllerListParams) => string;
+export declare const grantsControllerList: (params?: GrantsControllerListParams, options?: RequestInit) => Promise<ListGrantsResponseDto>;
+/**
+ * @summary Get a capability grant by id
+ */
+export declare const getGrantsControllerGetByIdUrl: (id: string) => string;
+export declare const grantsControllerGetById: (id: string, options?: RequestInit) => Promise<CapabilityGrantDto>;
+/**
+ * @summary Update mutable fields on a capability grant
+ */
+export declare const getGrantsControllerUpdateUrl: (id: string) => string;
+export declare const grantsControllerUpdate: (id: string, updateGrantDto: UpdateGrantDto, options?: RequestInit) => Promise<CapabilityGrantDto>;
+/**
+ * @summary Mark a capability grant as revoked
+ */
+export declare const getGrantsControllerRevokeUrl: (id: string) => string;
+export declare const grantsControllerRevoke: (id: string, options?: RequestInit) => Promise<CapabilityGrantDto>;

package/dist/endpoints/grants/grants.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.grantsControllerRevoke = exports.getGrantsControllerRevokeUrl = exports.grantsControllerUpdate = exports.getGrantsControllerUpdateUrl = exports.grantsControllerGetById = exports.getGrantsControllerGetByIdUrl = exports.grantsControllerList = exports.getGrantsControllerListUrl = exports.grantsControllerCreate = exports.getGrantsControllerCreateUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+/**
+ * @summary Create a capability grant
+ */
+const getGrantsControllerCreateUrl = () => {
+    return `/grants`;
+};
+exports.getGrantsControllerCreateUrl = getGrantsControllerCreateUrl;
+const grantsControllerCreate = async (createGrantDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerCreateUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(createGrantDto)
+    });
+};
+exports.grantsControllerCreate = grantsControllerCreate;
+/**
+ * @summary List capability grants (paginated, filterable)
+ */
+const getGrantsControllerListUrl = (params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (value === null) {
+            normalizedParams.append(key, 'null');
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                normalizedParams.append(key, item.toString());
+            }
+            return;
+        }
+        normalizedParams.append(key, value.toString());
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0 ? `/grants?${stringifiedParams}` : `/grants`;
+};
+exports.getGrantsControllerListUrl = getGrantsControllerListUrl;
+const grantsControllerList = async (params, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerListUrl)(params), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.grantsControllerList = grantsControllerList;
+/**
+ * @summary Get a capability grant by id
+ */
+const getGrantsControllerGetByIdUrl = (id) => {
+    return `/grants/${id}`;
+};
+exports.getGrantsControllerGetByIdUrl = getGrantsControllerGetByIdUrl;
+const grantsControllerGetById = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerGetByIdUrl)(id), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.grantsControllerGetById = grantsControllerGetById;
+/**
+ * @summary Update mutable fields on a capability grant
+ */
+const getGrantsControllerUpdateUrl = (id) => {
+    return `/grants/${id}`;
+};
+exports.getGrantsControllerUpdateUrl = getGrantsControllerUpdateUrl;
+const grantsControllerUpdate = async (id, updateGrantDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerUpdateUrl)(id), {
+        ...options,
+        method: 'PATCH',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(updateGrantDto)
+    });
+};
+exports.grantsControllerUpdate = grantsControllerUpdate;
+/**
+ * @summary Mark a capability grant as revoked
+ */
+const getGrantsControllerRevokeUrl = (id) => {
+    return `/grants/${id}/revoke`;
+};
+exports.getGrantsControllerRevokeUrl = getGrantsControllerRevokeUrl;
+const grantsControllerRevoke = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getGrantsControllerRevokeUrl)(id), {
+        ...options,
+        method: 'POST'
+    });
+};
+exports.grantsControllerRevoke = grantsControllerRevoke;

package/dist/endpoints/profiles/profiles.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { ListProfilesResponseDto } from '../../models';
+/**
+ * Returns the kernel-seeded `ProfilePolicyTemplate` rows. Used by the biome install UI to populate the profile picker (plan §30.3).
+ * @summary List built-in BiomePermissionProfile policy templates
+ */
+export declare const getProfilesControllerListUrl: () => string;
+export declare const profilesControllerList: (options?: RequestInit) => Promise<ListProfilesResponseDto>;

package/dist/endpoints/profiles/profiles.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.profilesControllerList = exports.getProfilesControllerListUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+/**
+ * Returns the kernel-seeded `ProfilePolicyTemplate` rows. Used by the biome install UI to populate the profile picker (plan §30.3).
+ * @summary List built-in BiomePermissionProfile policy templates
+ */
+const getProfilesControllerListUrl = () => {
+    return `/profiles`;
+};
+exports.getProfilesControllerListUrl = getProfilesControllerListUrl;
+const profilesControllerList = async (options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getProfilesControllerListUrl)(), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.profilesControllerList = profilesControllerList;

package/dist/endpoints/relationships/relationships.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { ListRelationshipsResponseDto, RelationshipsControllerListParams } from '../../models';
+/**
+ * Returns the live OpenFGA relationship tuples projected from the authoritative `CapabilityGrant` rows. Filter by org / subject / capability / environment / relation; offset-paginated (limit default 50, max 200).
+ * @summary List ReBAC relationship tuples (paginated, filterable)
+ */
+export declare const getRelationshipsControllerListUrl: (params?: RelationshipsControllerListParams) => string;
+export declare const relationshipsControllerList: (params?: RelationshipsControllerListParams, options?: RequestInit) => Promise<ListRelationshipsResponseDto>;

package/dist/endpoints/relationships/relationships.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.relationshipsControllerList = exports.getRelationshipsControllerListUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+/**
+ * Returns the live OpenFGA relationship tuples projected from the authoritative `CapabilityGrant` rows. Filter by org / subject / capability / environment / relation; offset-paginated (limit default 50, max 200).
+ * @summary List ReBAC relationship tuples (paginated, filterable)
+ */
+const getRelationshipsControllerListUrl = (params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (value === null) {
+            normalizedParams.append(key, 'null');
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                normalizedParams.append(key, item.toString());
+            }
+            return;
+        }
+        normalizedParams.append(key, value.toString());
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0 ? `/relationships?${stringifiedParams}` : `/relationships`;
+};
+exports.getRelationshipsControllerListUrl = getRelationshipsControllerListUrl;
+const relationshipsControllerList = async (params, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRelationshipsControllerListUrl)(params), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.relationshipsControllerList = relationshipsControllerList;

package/dist/endpoints/roles/roles.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { AddRoleGrantDto, AssignRoleDto, CreateRoleDto, RoleAssignmentDto, RoleAssignmentDtoDataArrayEnvelope, RoleDto, RoleDtoDataArrayEnvelope, RoleGrantDto, RoleGrantDtoDataArrayEnvelope, RolesControllerListParams, UpdateRoleDto } from '../../models';
+/**
+ * @summary Create a custom role
+ */
+export declare const getRolesControllerCreateUrl: () => string;
+export declare const rolesControllerCreate: (createRoleDto: CreateRoleDto, options?: RequestInit) => Promise<RoleDto>;
+/**
+ * @summary List roles in an org (custom + built-in)
+ */
+export declare const getRolesControllerListUrl: (params: RolesControllerListParams) => string;
+export declare const rolesControllerList: (params: RolesControllerListParams, options?: RequestInit) => Promise<RoleDtoDataArrayEnvelope>;
+/**
+ * @summary Get a role by id
+ */
+export declare const getRolesControllerGetByIdUrl: (id: string) => string;
+export declare const rolesControllerGetById: (id: string, options?: RequestInit) => Promise<RoleDto>;
+/**
+ * @summary Update a custom role (built-ins are immutable)
+ */
+export declare const getRolesControllerUpdateUrl: (id: string) => string;
+export declare const rolesControllerUpdate: (id: string, updateRoleDto: UpdateRoleDto, options?: RequestInit) => Promise<RoleDto>;
+/**
+ * @summary Delete a custom role (cascades grants + assignments)
+ */
+export declare const getRolesControllerDeleteUrl: (id: string) => string;
+export declare const rolesControllerDelete: (id: string, options?: RequestInit) => Promise<void>;
+/**
+ * @summary List the capability grants a role bundles
+ */
+export declare const getRolesControllerListGrantsUrl: (id: string) => string;
+export declare const rolesControllerListGrants: (id: string, options?: RequestInit) => Promise<RoleGrantDtoDataArrayEnvelope>;
+/**
+ * @summary Add a capability grant to a role
+ */
+export declare const getRolesControllerAddGrantUrl: (id: string) => string;
+export declare const rolesControllerAddGrant: (id: string, addRoleGrantDto: AddRoleGrantDto, options?: RequestInit) => Promise<RoleGrantDto>;
+/**
+ * @summary Remove a capability grant from a role
+ */
+export declare const getRolesControllerRemoveGrantUrl: (id: string, grantId: string) => string;
+export declare const rolesControllerRemoveGrant: (id: string, grantId: string, options?: RequestInit) => Promise<void>;
+/**
+ * @summary List a role’s assignments (subjects + teams)
+ */
+export declare const getRolesControllerListAssignmentsUrl: (id: string) => string;
+export declare const rolesControllerListAssignments: (id: string, options?: RequestInit) => Promise<RoleAssignmentDtoDataArrayEnvelope>;
+/**
+ * @summary Assign a role to a subject or a team
+ */
+export declare const getRolesControllerAssignUrl: (id: string) => string;
+export declare const rolesControllerAssign: (id: string, assignRoleDto: AssignRoleDto, options?: RequestInit) => Promise<RoleAssignmentDto>;
+/**
+ * @summary Remove a role assignment
+ */
+export declare const getRolesControllerUnassignUrl: (id: string, assignmentId: string) => string;
+export declare const rolesControllerUnassign: (id: string, assignmentId: string, options?: RequestInit) => Promise<void>;

package/dist/endpoints/roles/roles.js

@@ -0,0 +1,185 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rolesControllerUnassign = exports.getRolesControllerUnassignUrl = exports.rolesControllerAssign = exports.getRolesControllerAssignUrl = exports.rolesControllerListAssignments = exports.getRolesControllerListAssignmentsUrl = exports.rolesControllerRemoveGrant = exports.getRolesControllerRemoveGrantUrl = exports.rolesControllerAddGrant = exports.getRolesControllerAddGrantUrl = exports.rolesControllerListGrants = exports.getRolesControllerListGrantsUrl = exports.rolesControllerDelete = exports.getRolesControllerDeleteUrl = exports.rolesControllerUpdate = exports.getRolesControllerUpdateUrl = exports.rolesControllerGetById = exports.getRolesControllerGetByIdUrl = exports.rolesControllerList = exports.getRolesControllerListUrl = exports.rolesControllerCreate = exports.getRolesControllerCreateUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+/**
+ * @summary Create a custom role
+ */
+const getRolesControllerCreateUrl = () => {
+    return `/roles`;
+};
+exports.getRolesControllerCreateUrl = getRolesControllerCreateUrl;
+const rolesControllerCreate = async (createRoleDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerCreateUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(createRoleDto)
+    });
+};
+exports.rolesControllerCreate = rolesControllerCreate;
+/**
+ * @summary List roles in an org (custom + built-in)
+ */
+const getRolesControllerListUrl = (params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (value === null) {
+            normalizedParams.append(key, 'null');
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                normalizedParams.append(key, item.toString());
+            }
+            return;
+        }
+        normalizedParams.append(key, value.toString());
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0 ? `/roles?${stringifiedParams}` : `/roles`;
+};
+exports.getRolesControllerListUrl = getRolesControllerListUrl;
+const rolesControllerList = async (params, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerListUrl)(params), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.rolesControllerList = rolesControllerList;
+/**
+ * @summary Get a role by id
+ */
+const getRolesControllerGetByIdUrl = (id) => {
+    return `/roles/${id}`;
+};
+exports.getRolesControllerGetByIdUrl = getRolesControllerGetByIdUrl;
+const rolesControllerGetById = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerGetByIdUrl)(id), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.rolesControllerGetById = rolesControllerGetById;
+/**
+ * @summary Update a custom role (built-ins are immutable)
+ */
+const getRolesControllerUpdateUrl = (id) => {
+    return `/roles/${id}`;
+};
+exports.getRolesControllerUpdateUrl = getRolesControllerUpdateUrl;
+const rolesControllerUpdate = async (id, updateRoleDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerUpdateUrl)(id), {
+        ...options,
+        method: 'PATCH',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(updateRoleDto)
+    });
+};
+exports.rolesControllerUpdate = rolesControllerUpdate;
+/**
+ * @summary Delete a custom role (cascades grants + assignments)
+ */
+const getRolesControllerDeleteUrl = (id) => {
+    return `/roles/${id}`;
+};
+exports.getRolesControllerDeleteUrl = getRolesControllerDeleteUrl;
+const rolesControllerDelete = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerDeleteUrl)(id), {
+        ...options,
+        method: 'DELETE'
+    });
+};
+exports.rolesControllerDelete = rolesControllerDelete;
+/**
+ * @summary List the capability grants a role bundles
+ */
+const getRolesControllerListGrantsUrl = (id) => {
+    return `/roles/${id}/grants`;
+};
+exports.getRolesControllerListGrantsUrl = getRolesControllerListGrantsUrl;
+const rolesControllerListGrants = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerListGrantsUrl)(id), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.rolesControllerListGrants = rolesControllerListGrants;
+/**
+ * @summary Add a capability grant to a role
+ */
+const getRolesControllerAddGrantUrl = (id) => {
+    return `/roles/${id}/grants`;
+};
+exports.getRolesControllerAddGrantUrl = getRolesControllerAddGrantUrl;
+const rolesControllerAddGrant = async (id, addRoleGrantDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerAddGrantUrl)(id), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(addRoleGrantDto)
+    });
+};
+exports.rolesControllerAddGrant = rolesControllerAddGrant;
+/**
+ * @summary Remove a capability grant from a role
+ */
+const getRolesControllerRemoveGrantUrl = (id, grantId) => {
+    return `/roles/${id}/grants/${grantId}`;
+};
+exports.getRolesControllerRemoveGrantUrl = getRolesControllerRemoveGrantUrl;
+const rolesControllerRemoveGrant = async (id, grantId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerRemoveGrantUrl)(id, grantId), {
+        ...options,
+        method: 'DELETE'
+    });
+};
+exports.rolesControllerRemoveGrant = rolesControllerRemoveGrant;
+/**
+ * @summary List a role’s assignments (subjects + teams)
+ */
+const getRolesControllerListAssignmentsUrl = (id) => {
+    return `/roles/${id}/assignments`;
+};
+exports.getRolesControllerListAssignmentsUrl = getRolesControllerListAssignmentsUrl;
+const rolesControllerListAssignments = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerListAssignmentsUrl)(id), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.rolesControllerListAssignments = rolesControllerListAssignments;
+/**
+ * @summary Assign a role to a subject or a team
+ */
+const getRolesControllerAssignUrl = (id) => {
+    return `/roles/${id}/assignments`;
+};
+exports.getRolesControllerAssignUrl = getRolesControllerAssignUrl;
+const rolesControllerAssign = async (id, assignRoleDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerAssignUrl)(id), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(assignRoleDto)
+    });
+};
+exports.rolesControllerAssign = rolesControllerAssign;
+/**
+ * @summary Remove a role assignment
+ */
+const getRolesControllerUnassignUrl = (id, assignmentId) => {
+    return `/roles/${id}/assignments/${assignmentId}`;
+};
+exports.getRolesControllerUnassignUrl = getRolesControllerUnassignUrl;
+const rolesControllerUnassign = async (id, assignmentId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRolesControllerUnassignUrl)(id, assignmentId), {
+        ...options,
+        method: 'DELETE'
+    });
+};
+exports.rolesControllerUnassign = rolesControllerUnassign;