@xemahq/authorization-internal-api-client 0.2.0 → 0.3.1

package/dist/models/executionEnvironmentKind.d.ts

@@ -1,12 +1,10 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 /**
- * Every execution environment in which the subject holds this capability (closed enum).
+ * Closed set of built-in execution-environment classifications. Environment IDENTITY is a separate `environment:<slug>` ref — an org-custom environment carries its own slug there, and is still classified by one of these kinds.
  */
 export type ExecutionEnvironmentKind = typeof ExecutionEnvironmentKind[keyof typeof ExecutionEnvironmentKind];
 export declare const ExecutionEnvironmentKind: {

package/dist/models/executionEnvironmentKind.js

@@ -1,10 +1,8 @@
 "use strict";
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ExecutionEnvironmentKind = void 0;

package/dist/models/executionEnvironmentResponseDto.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { ExecutionEnvironmentKind } from './executionEnvironmentKind.js';
 import type { ExecutionEnvironmentResponseDtoAllowedCapabilitiesItem } from './executionEnvironmentResponseDtoAllowedCapabilitiesItem.js';

package/dist/models/executionEnvironmentResponseDtoAllowedCapabilitiesItem.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 export type ExecutionEnvironmentResponseDtoAllowedCapabilitiesItem = {
     [key: string]: unknown;

package/dist/models/executionEnvironmentResponseDtoAllowedCapabilitiesItem.js

@@ -1,9 +1,7 @@
 "use strict";
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/executionEnvironmentResponseDtoApprovalRulesItem.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 export type ExecutionEnvironmentResponseDtoApprovalRulesItem = {
     [key: string]: unknown;

package/dist/models/executionEnvironmentResponseDtoApprovalRulesItem.js

@@ -1,9 +1,7 @@
 "use strict";
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/executionEnvironmentResponseDtoDataArrayEnvelope.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { ExecutionEnvironmentResponseDto } from './executionEnvironmentResponseDto.js';
 export interface ExecutionEnvironmentResponseDtoDataArrayEnvelope {

package/dist/models/executionEnvironmentResponseDtoDataEnvelope.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { ExecutionEnvironmentResponseDto } from './executionEnvironmentResponseDto.js';
 export interface ExecutionEnvironmentResponseDtoDataEnvelope {

package/dist/models/executionEnvironmentResponseDtoOrgId.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 /**
  * Owning organization. `null` for kernel-seeded built-in environments (global); set for org-custom environments.

package/dist/models/executionEnvironmentResponseDtoOrgId.js

@@ -1,9 +1,7 @@
 "use strict";
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/executionEnvironmentResponseDtoRuntimeLimits.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 /**
  * Runtime limits (`RuntimeLimits` from the kernel contracts).

package/dist/models/executionEnvironmentResponseDtoRuntimeLimits.js

@@ -1,9 +1,7 @@
 "use strict";
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/grantConstraintsDto.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 export interface GrantConstraintsDto {
     maxCallsPerHour?: number;

package/dist/models/grantConstraintsDto.js

@@ -1,9 +1,7 @@
 "use strict";
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/grantVersionResponseDto.d.ts

@@ -1,13 +1,11 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 export interface GrantVersionResponseDto {
     /** Organization the version belongs to. */
     orgId: string;
-    /** Monotonic per-org grant version. `0` means no grant change has been recorded for the org yet (a valid baseline, not an error). */
+    /** Monotonic grant version for this org, folding in changes to org-independent (global) grants. `0` means no relevant grant change has been recorded yet (a valid baseline, not an error). Compare only against a previous value for the SAME org. */
     grantVersion: number;
 }

package/dist/models/grantVersionResponseDto.js

@@ -1,9 +1,7 @@
 "use strict";
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/grantVersionResponseDtoDataEnvelope.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { GrantVersionResponseDto } from './grantVersionResponseDto.js';
 export interface GrantVersionResponseDtoDataEnvelope {

package/dist/models/grantsControllerListParams.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { SubjectKind } from './subjectKind.js';
 export type GrantsControllerListParams = {

package/dist/models/index.d.ts

@@ -96,6 +96,7 @@ export * from './provisionAgentResultDtoDataEnvelope';
 export * from './provisionedCapabilityDto';
 export * from './registerResourceOwnershipDto';
 export * from './relationshipsControllerListParams';
+export * from './removeResourceShareDto';
 export * from './resourceManagedBy';
 export * from './resourceOwnershipDto';
 export * from './resourceOwnershipDtoDataEnvelope';
@@ -115,6 +116,7 @@ export * from './roleGrantDtoDataArrayEnvelope';
 export * from './roleGrantDtoDataEnvelope';
 export * from './rolesControllerListParams';
 export * from './runnerKind';
+export * from './sessionParticipantRole';
 export * from './spaceKind';
 export * from './subjectKind';
 export * from './subjectRefDto';

package/dist/models/index.js

@@ -113,6 +113,7 @@ __exportStar(require("./provisionAgentResultDtoDataEnvelope"), exports);
 __exportStar(require("./provisionedCapabilityDto"), exports);
 __exportStar(require("./registerResourceOwnershipDto"), exports);
 __exportStar(require("./relationshipsControllerListParams"), exports);
+__exportStar(require("./removeResourceShareDto"), exports);
 __exportStar(require("./resourceManagedBy"), exports);
 __exportStar(require("./resourceOwnershipDto"), exports);
 __exportStar(require("./resourceOwnershipDtoDataEnvelope"), exports);
@@ -132,6 +133,7 @@ __exportStar(require("./roleGrantDtoDataArrayEnvelope"), exports);
 __exportStar(require("./roleGrantDtoDataEnvelope"), exports);
 __exportStar(require("./rolesControllerListParams"), exports);
 __exportStar(require("./runnerKind"), exports);
+__exportStar(require("./sessionParticipantRole"), exports);
 __exportStar(require("./spaceKind"), exports);
 __exportStar(require("./subjectKind"), exports);
 __exportStar(require("./subjectRefDto"), exports);

package/dist/models/listVisibleResourcesDto.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { ResourceSubjectRefDto } from './resourceSubjectRefDto.js';
 export interface ListVisibleResourcesDto {

package/dist/models/objectLifecycle.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 /**
  * draft | published | archived.

package/dist/models/objectLifecycle.js

@@ -1,10 +1,8 @@
 "use strict";
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ObjectLifecycle = void 0;

package/dist/models/openFgaRelationshipDto.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { CapabilityGrantRelation } from './capabilityGrantRelation.js';
 export interface OpenFgaRelationshipDto {

package/dist/models/openFgaRelationshipDtoPaginatedEnvelope.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { OpenFgaRelationshipDto } from './openFgaRelationshipDto.js';
 import type { PaginationMeta } from './paginationMeta.js';

package/dist/models/orgRole.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 /**
  * The org role the subject holds (owner ⊇ admin ⊇ member).

package/dist/models/orgRole.js

@@ -1,10 +1,8 @@
 "use strict";
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OrgRole = void 0;

package/dist/models/orgRoleSyncDto.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { OrgRole } from './orgRole.js';
 import type { SubjectKind } from './subjectKind.js';

package/dist/models/orgRoleSyncResultDto.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 export interface OrgRoleSyncResultDto {
     /** Id of the per-org role instance the subject is bound to. */

package/dist/models/orgRoleSyncResultDto.js

@@ -1,9 +1,7 @@
 "use strict";
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/orgRoleSyncResultDtoDataEnvelope.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { OrgRoleSyncResultDto } from './orgRoleSyncResultDto.js';
 export interface OrgRoleSyncResultDtoDataEnvelope {

package/dist/models/paginationMeta.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 export interface PaginationMeta {
     total?: number;

package/dist/models/paginationMeta.js

@@ -1,9 +1,7 @@
 "use strict";
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/policyActingForDto.d.ts

@@ -1,12 +1,11 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { SubjectKind } from './subjectKind.js';
 export interface PolicyActingForDto {
     kind: SubjectKind;
     id: string;
+    clientId?: string;
 }

package/dist/models/policyBiomeDto.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { BiomeTrustTier } from './biomeTrustTier.js';
 export interface PolicyBiomeDto {

package/dist/models/policyCallerDto.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { CallerKind } from './callerKind.js';
 export interface PolicyCallerDto {

package/dist/models/policyCapabilityDto.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 export interface PolicyCapabilityDto {
     /** <biome>:<verb>@<major> canonical CapabilityRef. */

package/dist/models/policyCapabilityDto.js

@@ -1,9 +1,7 @@
 "use strict";
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/policyCheckBatchRequestDto.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { PolicyCheckRequestDto } from './policyCheckRequestDto.js';
 export interface PolicyCheckBatchRequestDto {

package/dist/models/policyCheckBatchResponseDto.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { PolicyDecisionDto } from './policyDecisionDto.js';
 export interface PolicyCheckBatchResponseDto {

package/dist/models/policyCheckBatchResponseDtoDataEnvelope.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { PolicyCheckBatchResponseDto } from './policyCheckBatchResponseDto.js';
 export interface PolicyCheckBatchResponseDtoDataEnvelope {

package/dist/models/policyCheckRequestDto.d.ts

@@ -1,10 +1,10 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
+import type { AgentReachTier } from './agentReachTier.js';
+import type { PolicyActingForDto } from './policyActingForDto.js';
 import type { PolicyBiomeDto } from './policyBiomeDto.js';
 import type { PolicyCallerDto } from './policyCallerDto.js';
 import type { PolicyCapabilityDto } from './policyCapabilityDto.js';
@@ -13,6 +13,7 @@ import type { PolicyEnvironmentDto } from './policyEnvironmentDto.js';
 import type { PolicyResourceDto } from './policyResourceDto.js';
 import type { PolicySpaceRefDto } from './policySpaceRefDto.js';
 import type { PolicySubjectRefDto } from './policySubjectRefDto.js';
+import type { SessionParticipantRole } from './sessionParticipantRole.js';
 export interface PolicyCheckRequestDto {
     id: string;
     requestId: string;
@@ -25,4 +26,10 @@ export interface PolicyCheckRequestDto {
     capability: PolicyCapabilityDto;
     resource?: PolicyResourceDto;
     constraints?: PolicyConstraintsDto;
+    actorChain?: PolicyActingForDto[];
+    credentialBindingId?: string;
+    /** The agent's permission CEILING — ordered supersets `sandbox ⊂ as-owner ⊂ connected ⊂ full`. Intersected with the agent's armed tools and its owner's authority at resolution, so it can only RESTRICT, never amplify. Absent ⇒ `as-owner`. */
+    reachTier?: AgentReachTier;
+    /** Role the acting subject holds in the originating agent session. Precedence `owner > editor > viewer`. Absent for non-session invocations (workflow steps, service calls). */
+    participantRole?: SessionParticipantRole;
 }

package/dist/models/policyConstraintsDto.d.ts

@@ -1,9 +1,7 @@
 /**
- * Generated by orval v8.16.0 🍺
- * Do not edit manually.
+ * Generated by @xemahq/api-client-generator — do not edit manually.
  * Authorization API
- * Authorization API extract (generated for client codegen).
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 export interface PolicyConstraintsDto {
     maxCostUsd?: number;