@xemahq/authorization-internal-api-client 0.1.0

package/dist/models/spaceKind.js

@@ -0,0 +1,19 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SpaceKind = void 0;
+exports.SpaceKind = {
+    system: 'system',
+    org: 'org',
+    project: 'project',
+    app: 'app',
+    session: 'session',
+    biome: 'biome',
+    user: 'user',
+};

package/dist/models/subjectKind.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+export type SubjectKind = typeof SubjectKind[keyof typeof SubjectKind];
+export declare const SubjectKind: {
+    readonly user: "user";
+    readonly agent: "agent";
+    readonly app: "app";
+    readonly 'app-client': "app-client";
+    readonly service: "service";
+    readonly group: "group";
+    readonly role: "role";
+    readonly runner: "runner";
+    readonly 'external-subject': "external-subject";
+    readonly anon: "anon";
+};

package/dist/models/subjectKind.js

@@ -0,0 +1,22 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SubjectKind = void 0;
+exports.SubjectKind = {
+    user: 'user',
+    agent: 'agent',
+    app: 'app',
+    'app-client': 'app-client',
+    service: 'service',
+    group: 'group',
+    role: 'role',
+    runner: 'runner',
+    'external-subject': 'external-subject',
+    anon: 'anon',
+};

package/dist/models/subjectRefDto.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { SubjectKind } from './subjectKind';
+export interface SubjectRefDto {
+    /** Discriminator over the kinds of subject that may hold a grant. */
+    kind: SubjectKind;
+    /** Opaque ref for the subject; authorization-api owns interpretation per `kind`. */
+    ref: string;
+}

package/dist/models/subjectRefDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/teamDto.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+export interface TeamDto {
+    id: string;
+    orgId: string;
+    /** @nullable */
+    parentTeamId?: string | null;
+    slug: string;
+    displayName: string;
+    /** @nullable */
+    description?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}

package/dist/models/teamDto.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/teamDtoDataArrayEnvelope.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { TeamDto } from './teamDto';
+export interface TeamDtoDataArrayEnvelope {
+    data: TeamDto[];
+}

package/dist/models/teamDtoDataArrayEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/teamDtoDescription.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * @nullable
+ */
+export type TeamDtoDescription = {
+    [key: string]: unknown;
+} | null;

package/dist/models/teamDtoDescription.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/teamDtoParentTeamId.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * @nullable
+ */
+export type TeamDtoParentTeamId = {
+    [key: string]: unknown;
+} | null;

package/dist/models/teamDtoParentTeamId.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/teamMembershipDto.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { SubjectKind } from './subjectKind';
+export interface TeamMembershipDto {
+    id: string;
+    teamId: string;
+    subjectKind: SubjectKind;
+    subjectRef: string;
+    createdAt: string;
+}

package/dist/models/teamMembershipDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/teamMembershipDtoDataArrayEnvelope.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { TeamMembershipDto } from './teamMembershipDto';
+export interface TeamMembershipDtoDataArrayEnvelope {
+    data: TeamMembershipDto[];
+}

package/dist/models/teamMembershipDtoDataArrayEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/teamsControllerListParams.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+export type TeamsControllerListParams = {
+    /**
+     * Required — teams are always listed within a single org.
+     */
+    orgId: string;
+    /**
+     * Filter to the direct children of this parent team id.
+     */
+    parentTeamId?: string;
+};

package/dist/models/teamsControllerListParams.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/updateExecutionEnvironmentDto.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { UpdateExecutionEnvironmentDtoAllowedCapabilitiesItem } from './updateExecutionEnvironmentDtoAllowedCapabilitiesItem';
+import type { UpdateExecutionEnvironmentDtoApprovalRulesItem } from './updateExecutionEnvironmentDtoApprovalRulesItem';
+import type { UpdateExecutionEnvironmentDtoRuntimeLimits } from './updateExecutionEnvironmentDtoRuntimeLimits';
+export interface UpdateExecutionEnvironmentDto {
+    description?: string;
+    /** Per-environment capability allow-list (`CapabilityPolicy[]`). */
+    allowedCapabilities?: UpdateExecutionEnvironmentDtoAllowedCapabilitiesItem[];
+    /** Approval rules (`ApprovalRule[]`). */
+    approvalRules?: UpdateExecutionEnvironmentDtoApprovalRulesItem[];
+    /** Runtime limits (`RuntimeLimits`). */
+    runtimeLimits?: UpdateExecutionEnvironmentDtoRuntimeLimits;
+}

package/dist/models/updateExecutionEnvironmentDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/updateExecutionEnvironmentDtoAllowedCapabilitiesItem.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+export type UpdateExecutionEnvironmentDtoAllowedCapabilitiesItem = {
+    [key: string]: unknown;
+};

package/dist/models/updateExecutionEnvironmentDtoAllowedCapabilitiesItem.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/updateExecutionEnvironmentDtoApprovalRulesItem.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+export type UpdateExecutionEnvironmentDtoApprovalRulesItem = {
+    [key: string]: unknown;
+};

package/dist/models/updateExecutionEnvironmentDtoApprovalRulesItem.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/updateExecutionEnvironmentDtoRuntimeLimits.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Runtime limits (`RuntimeLimits`).
+ */
+export type UpdateExecutionEnvironmentDtoRuntimeLimits = {
+    [key: string]: unknown;
+};

package/dist/models/updateExecutionEnvironmentDtoRuntimeLimits.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/updateGrantDto.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+import type { BiomePermissionProfile } from './biomePermissionProfile';
+import type { GrantConstraintsDto } from './grantConstraintsDto';
+export interface UpdateGrantDto {
+    resourceGlob?: string;
+    environment?: string;
+    constraints?: GrantConstraintsDto;
+    requiresApproval?: boolean;
+    profile?: BiomePermissionProfile;
+    /** Opaque credential-binding pointer (plan §W4.1). EXPLICIT tier of the credential ladder. Updating it is NOT tuple-affecting — no OpenFGA reconcile. */
+    credentialBindingId?: string;
+}

package/dist/models/updateGrantDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/updateRoleDto.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+export interface UpdateRoleDto {
+    displayName?: string;
+    description?: string;
+}

package/dist/models/updateRoleDto.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/updateTeamDto.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+export interface UpdateTeamDto {
+    displayName?: string;
+    description?: string;
+    /**
+       * Re-parent (ENTERPRISE). `null` detaches to the org root; a team id nests under it. Cycle-checked.
+       * @nullable
+       */
+    parentTeamId?: string | null;
+}

package/dist/models/updateTeamDto.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/updateTeamDtoParentTeamId.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Re-parent (ENTERPRISE). `null` detaches to the org root; a team id nests under it. Cycle-checked.
+ * @nullable
+ */
+export type UpdateTeamDtoParentTeamId = {
+    [key: string]: unknown;
+} | null;

package/dist/models/updateTeamDtoParentTeamId.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/upsertCredentialDefaultDto.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+export interface UpsertCredentialDefaultDto {
+    /** Organization identifier the default is scoped to. */
+    orgId: string;
+    /** Project identifier. Omit (or null) for the ORG-wide default; set for a per-project default. */
+    projectId?: string;
+    /** Opaque credential-binding pointer the gateway resolves the external credential from. Not a secret. */
+    credentialBindingId: string;
+}

package/dist/models/upsertCredentialDefaultDto.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Authorization API
+ * Authorization API extract (generated for client codegen).
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "@xemahq/authorization-internal-api-client",
+  "version": "0.1.0",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "registry": "https://npm.pkg.github.com"
+  },
+  "devDependencies": {
+    "typescript": "5.9.3"
+  },
+  "xema": {
+    "kind": "api-client",
+    "surface": "internal",
+    "service": "authorization-api",
+    "biome": "authorization",
+    "target": "server",
+    "generator": "@xemahq/api-client-generator@0.1.1",
+    "source": "openapi.internal.json"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json"
+  }
+}