@xemahq/authorization-internal-api-client 0.5.2 → 0.6.0

package/dist/models/policyEnvironmentDto.d.ts

@@ -1,15 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { ExecutionEnvironmentKind } from './executionEnvironmentKind.js';
-export interface PolicyEnvironmentDto {
-    /**
-       * environment:<slug> ref string.
-       * @minLength 1
-       */
-    id: string;
-    /** Closed set of built-in execution-environment classifications. Environment IDENTITY is a separate `environment:<slug>` ref — an org-custom environment carries its own slug there, and is still classified by one of these kinds. */
-    kind: ExecutionEnvironmentKind;
-}

package/dist/models/policyEnvironmentDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/policyObligationDto.d.ts

@@ -1,29 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { DataClassification } from './dataClassification.js';
-import type { DataResidency } from './dataResidency.js';
-import type { PolicyObligationKind } from './policyObligationKind.js';
-import type { RunnerKind } from './runnerKind.js';
-export interface PolicyObligationDto {
-    kind: PolicyObligationKind;
-    runnerKind?: RunnerKind;
-    /** @minLength 1 */
-    approverRole?: string;
-    maxDurationSeconds?: number;
-    maxCostUsd?: number;
-    maxClassification?: DataClassification;
-    residency?: DataResidency;
-    /**
-       * Egress allowlist patterns (wildcard host or https:// URL-prefix). Present only when kind=egress-allowlist.
-       * @items.minLength 1
-       */
-    allow?: string[];
-    /**
-       * Egress blocklist patterns; a match denies even if `allow` matched. Present only when kind=egress-allowlist.
-       * @items.minLength 1
-       */
-    deny?: string[];
-}

package/dist/models/policyObligationDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/policyObligationKind.d.ts

@@ -1,17 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-export type PolicyObligationKind = typeof PolicyObligationKind[keyof typeof PolicyObligationKind];
-export declare const PolicyObligationKind: {
-    readonly audit: "audit";
-    readonly 'redact-secrets': "redact-secrets";
-    readonly 'require-runner-kind': "require-runner-kind";
-    readonly 'require-human-approval': "require-human-approval";
-    readonly 'max-duration-seconds': "max-duration-seconds";
-    readonly 'max-cost-usd': "max-cost-usd";
-    readonly 'restrict-output-classification': "restrict-output-classification";
-    readonly 'data-residency': "data-residency";
-    readonly 'egress-allowlist': "egress-allowlist";
-};

package/dist/models/policyObligationKind.js

@@ -1,19 +0,0 @@
-"use strict";
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PolicyObligationKind = void 0;
-exports.PolicyObligationKind = {
-    audit: 'audit',
-    'redact-secrets': 'redact-secrets',
-    'require-runner-kind': 'require-runner-kind',
-    'require-human-approval': 'require-human-approval',
-    'max-duration-seconds': 'max-duration-seconds',
-    'max-cost-usd': 'max-cost-usd',
-    'restrict-output-classification': 'restrict-output-classification',
-    'data-residency': 'data-residency',
-    'egress-allowlist': 'egress-allowlist',
-};

package/dist/models/policyResourceDto.d.ts

@@ -1,15 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { DataClassification } from './dataClassification.js';
-export interface PolicyResourceDto {
-    /**
-       * Canonical `xema://<Space>/resource/<type>/<id>[@version]` address naming the instance this invocation targets. Exact Agent bindings always carry the version. The server answers `400 RESOURCE_REF_MALFORMED` for any other shape. Omit the whole `resource` block for a verb-only check; do not send a placeholder.
-       * @minLength 1
-       */
-    ref: string;
-    /** The classification the target resource carries. OMIT IT when the producer has none to declare — the effective classification is then the Space floor alone, and the request still gets the resource-ownership clamp. Omitting the whole `resource` block is NOT the same thing: that downgrades the call to a verb-only check and discards the ownership clamp. Never send a placeholder value. */
-    classification?: DataClassification;
-}

package/dist/models/policyResourceDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/policyRouteHintDto.d.ts

@@ -1,14 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { PolicyRouteHintDtoRequiredRunnerLabels } from './policyRouteHintDtoRequiredRunnerLabels.js';
-import type { RunnerKind } from './runnerKind.js';
-export interface PolicyRouteHintDto {
-    requiredRunnerLabels?: PolicyRouteHintDtoRequiredRunnerLabels;
-    preferredRunnerKind?: RunnerKind;
-    /** @minLength 1 */
-    requiredRegion?: string;
-    requireCustomerEdge?: boolean;
-}

package/dist/models/policyRouteHintDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/policySpaceRefDto.d.ts

@@ -1,23 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { SpaceKind } from './spaceKind.js';
-export interface PolicySpaceRefDto {
-    tier: SpaceKind;
-    /** @minLength 1 */
-    orgId?: string;
-    /** @minLength 1 */
-    projectId?: string;
-    /** @minLength 1 */
-    appId?: string;
-    /** @minLength 1 */
-    sessionId?: string;
-    /** @minLength 1 */
-    biomeId?: string;
-    /** @minLength 1 */
-    userId?: string;
-    /** @minLength 1 */
-    path?: string;
-}

package/dist/models/policySpaceRefDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/policySubjectRefDto.d.ts

@@ -1,14 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { PolicyActingForDto } from './policyActingForDto.js';
-import type { SubjectKind } from './subjectKind.js';
-export interface PolicySubjectRefDto {
-    kind: SubjectKind;
-    /** @minLength 1 */
-    id: string;
-    roles?: string[];
-    actingFor?: PolicyActingForDto;
-}

package/dist/models/policySubjectRefDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/registerResourceOwnershipDto.d.ts

@@ -1,34 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { ResourceShareRefDto } from './resourceShareRefDto.js';
-import type { ResourceSubjectRefDto } from './resourceSubjectRefDto.js';
-import type { ResourceVisibilityPattern } from './resourceVisibilityPattern.js';
-export interface RegisterResourceOwnershipDto {
-    /**
-       * Resource kind/type slug.
-       * @minLength 1
-       */
-    resourceType: string;
-    /**
-       * Resource instance id.
-       * @minLength 1
-       */
-    resourceId: string;
-    /** Instance visibility pattern. The PDP ANDs the verb verdict with the ownership check resolved per this pattern. */
-    visibility: ResourceVisibilityPattern;
-    /**
-       * The `xema://` SPACE that owns the instance — an ADDRESS, which this service expands into the owner SUBJECTS its own vocabulary resolves it to (`xema://orgs/<id>` → the org-owner and org-admin role usersets; `xema://users/<id>` → that user). A producer knows the owning Space (`App.ownerSpaceUri`, `Skill.ownerSpaceUri`) and CANNOT know which subjects it resolves to, because those role instances are this service's own rows. Refused (400 `RESOURCE_OWNER_SPACE_NOT_ADMISSIBLE`) when the address is unparseable, names a tier the resource kind does not admit, names another organisation, or names a tier with no owner-subject expansion. May be combined with `owners`; the effective owner set is the UNION, de-duplicated. At least one of the two must yield an owner.
-       * @minLength 1
-       */
-    ownerSpaceUri?: string;
-    /**
-       * Subjects that OWN the instance (full visibility), named explicitly. OPTIONAL only because `ownerSpaceUri` is the other way to say it — the service still refuses a request that yields no owner at all, so the ≥ 1-owner rule is unchanged. It moved from the DTO to the service because validation runs BEFORE the expansion and therefore cannot see the owners the address produces.
-       * @minItems 1
-       */
-    owners?: ResourceSubjectRefDto[];
-    /** Subjects explicitly granted visibility, each at a LEVEL and with an optional expiry. */
-    explicitShares?: ResourceShareRefDto[];
-}

package/dist/models/registerResourceOwnershipDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/registeredResourceDto.d.ts

@@ -1,12 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { ResourceSubjectRefDto } from './resourceSubjectRefDto.js';
-export interface RegisteredResourceDto {
-    /** The registered instance id. */
-    resourceId: string;
-    /** Subjects holding an `owned_by` relation on the instance. Never empty: the write path refuses a registration with no owner. */
-    owners: ResourceSubjectRefDto[];
-}

package/dist/models/registeredResourceDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/registeredResourcesDto.d.ts

@@ -1,10 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { RegisteredResourceDto } from './registeredResourceDto.js';
-export interface RegisteredResourcesDto {
-    /** Every registered instance of the requested kind in the caller org, ordered by instance id. */
-    resources: RegisteredResourceDto[];
-}

package/dist/models/registeredResourcesDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/registeredResourcesDtoDataEnvelope.d.ts

@@ -1,9 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { RegisteredResourcesDto } from './registeredResourcesDto.js';
-export interface RegisteredResourcesDtoDataEnvelope {
-    data: RegisteredResourcesDto;
-}

package/dist/models/registeredResourcesDtoDataEnvelope.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/removeResourceShareDto.d.ts

@@ -1,10 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { ResourceSubjectRefDto } from './resourceSubjectRefDto.js';
-export interface RemoveResourceShareDto {
-    /** The subject whose explicit share is removed. */
-    share: ResourceSubjectRefDto;
-}

package/dist/models/removeResourceShareDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/replaceResourceOwnershipDto.d.ts

@@ -1,34 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { ResourceShareRefDto } from './resourceShareRefDto.js';
-import type { ResourceSubjectRefDto } from './resourceSubjectRefDto.js';
-import type { ResourceVisibilityPattern } from './resourceVisibilityPattern.js';
-export interface ReplaceResourceOwnershipDto {
-    /** Instance visibility pattern. The PDP ANDs the verb verdict with the ownership check resolved per this pattern. */
-    visibility: ResourceVisibilityPattern;
-    /**
-       * The `xema://` SPACE that owns the instance — an ADDRESS, which this service expands into the owner SUBJECTS its own vocabulary resolves it to (`xema://orgs/<id>` → the org-owner and org-admin role usersets; `xema://users/<id>` → that user). A producer knows the owning Space (`App.ownerSpaceUri`, `Skill.ownerSpaceUri`) and CANNOT know which subjects it resolves to, because those role instances are this service's own rows. Refused (400 `RESOURCE_OWNER_SPACE_NOT_ADMISSIBLE`) when the address is unparseable, names a tier the resource kind does not admit, names another organisation, or names a tier with no owner-subject expansion. May be combined with `owners`; the effective owner set is the UNION, de-duplicated. At least one of the two must yield an owner.
-       * @minLength 1
-       */
-    ownerSpaceUri?: string;
-    /**
-       * Subjects that OWN the instance (full visibility), named explicitly. OPTIONAL only because `ownerSpaceUri` is the other way to say it — the service still refuses a request that yields no owner at all, so the ≥ 1-owner rule is unchanged. It moved from the DTO to the service because validation runs BEFORE the expansion and therefore cannot see the owners the address produces.
-       * @minItems 1
-       */
-    owners?: ResourceSubjectRefDto[];
-    /** Subjects explicitly granted visibility, each at a LEVEL and with an optional expiry. */
-    explicitShares?: ResourceShareRefDto[];
-    /**
-       * Owners the caller is deliberately RETIRING. Named, never inferred.
-       *
-       * A replace normally REFUSES (409 `RESOURCE_SUBJECT_IS_OWNER`) to drop a registered owner, and that refusal is right: an owner silently absent from a replacement set is a caller bug, and the remedy is deregistering the instance. But deregister-then-register is not available for an ownership MIGRATION — the instance is UNREGISTERED in the window between them, and an unregistered instance resolves at the PDP as a verb-only ALLOW for everybody.
-       *
-       * So the exemption is per-SUBJECT and explicit: an owner named here is exempt from that probe and has its `owned_by` tuple dropped in the same call that writes the new owners. Naming a subject that is not a registered owner is a no-op, not an error — the migration is then idempotent on replay. A subject named in BOTH `retiringOwners` and `owners` is refused: that is two contradictory instructions about one subject, and either reading is a guess.
-       */
-    retiringOwners?: ResourceSubjectRefDto[];
-    /** The subject GRANTING the shares in this body, when it is not the instance owner. Used to apply the two delegation rules — a grantor may never confer more than they hold, and re-sharing is itself a level. The LEVEL is resolved from the tuple store, never taken from the body: a grantor that could name its own level would name the highest one. A named grantor holding neither ownership nor any share level is a 403 `RESOURCE_GRANTOR_HOLDS_NOTHING`. Omitted means the calling SERVICE asserts owner authority, which is what this whole surface already establishes — and is exactly how every replace behaved before this field existed, so omitting it changes nothing. */
-    grantor?: ResourceSubjectRefDto;
-}

package/dist/models/replaceResourceOwnershipDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/resourceOwnershipDto.d.ts

@@ -1,15 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { ResourceOwnershipEntryDto } from './resourceOwnershipEntryDto.js';
-import type { ResourceVisibilityPattern } from './resourceVisibilityPattern.js';
-export interface ResourceOwnershipDto {
-    orgId: string;
-    resourceType: string;
-    resourceId: string;
-    visibility: ResourceVisibilityPattern;
-    owners: ResourceOwnershipEntryDto[];
-    shares: ResourceOwnershipEntryDto[];
-}

package/dist/models/resourceOwnershipDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/resourceOwnershipDtoDataEnvelope.d.ts

@@ -1,9 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { ResourceOwnershipDto } from './resourceOwnershipDto.js';
-export interface ResourceOwnershipDtoDataEnvelope {
-    data: ResourceOwnershipDto;
-}

package/dist/models/resourceOwnershipDtoDataEnvelope.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/resourceOwnershipEntryDto.d.ts

@@ -1,17 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { SubjectKind } from './subjectKind.js';
-export interface ResourceOwnershipEntryDto {
-    id: string;
-    ownerKind: SubjectKind;
-    ownerRef: string;
-    /** The level this share confers, in the resource kind's vocabulary. ABSENT on an owner row — ownership is not a rung. */
-    level?: string;
-    /** When the share stops granting. Absent = never. */
-    expiresAt?: string;
-    /** `<subjectKind>:<subjectRef>` of whoever granted this share. Absent on an owner row. */
-    grantedBy?: string;
-}

package/dist/models/resourceOwnershipEntryDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/resourceOwnershipReadDto.d.ts

@@ -1,16 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { ResourceOwnershipEntryDto } from './resourceOwnershipEntryDto.js';
-import type { ResourceVisibilityPattern } from './resourceVisibilityPattern.js';
-export interface ResourceOwnershipReadDto {
-    resourceType: string;
-    resourceId: string;
-    visibility: ResourceVisibilityPattern;
-    /** Subjects that OWN the instance. */
-    owners: ResourceOwnershipEntryDto[];
-    /** Subjects the instance is SHARED with, each with its level, expiry and grantor. */
-    shares: ResourceOwnershipEntryDto[];
-}

package/dist/models/resourceOwnershipReadDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/resourceOwnershipReadDtoDataEnvelope.d.ts

@@ -1,9 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { ResourceOwnershipReadDto } from './resourceOwnershipReadDto.js';
-export interface ResourceOwnershipReadDtoDataEnvelope {
-    data: ResourceOwnershipReadDto;
-}

package/dist/models/resourceOwnershipReadDtoDataEnvelope.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/resourceShareRefDto.d.ts

@@ -1,21 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { SubjectKind } from './subjectKind.js';
-export interface ResourceShareRefDto {
-    kind: SubjectKind;
-    /**
-       * Subject id (the `<id>` in `<kind>:<id>`).
-       * @minLength 1
-       */
-    ref: string;
-    /**
-       * The resource kind's own name for the level this share confers. Levels are declared per kind (a document has `viewer < editor < manager`; a mailbox's `editor` is not a meaningful authority) and are totally ordered with monotone verb expansion. OMITTED means the LOWEST level the kind declares — never the highest.
-       * @minLength 1
-       */
-    level?: string;
-    /** ISO-8601 instant after which the share stops granting. Enforced by an OpenFGA condition evaluated at DECISION time, not by a sweeper — a sweeper leaves a window in which a lapsed share still passes. Omitted means the share does not expire. An instant in the past is a 400. */
-    expiresAt?: string;
-}

package/dist/models/resourceShareRefDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/resourceVisibilityPattern.d.ts

@@ -1,11 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-export type ResourceVisibilityPattern = typeof ResourceVisibilityPattern[keyof typeof ResourceVisibilityPattern];
-export declare const ResourceVisibilityPattern: {
-    readonly 'owner-only': "owner-only";
-    readonly 'org-shared': "org-shared";
-    readonly 'explicit-share': "explicit-share";
-};

package/dist/models/resourceVisibilityPattern.js

@@ -1,13 +0,0 @@
-"use strict";
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResourceVisibilityPattern = void 0;
-exports.ResourceVisibilityPattern = {
-    'owner-only': 'owner-only',
-    'org-shared': 'org-shared',
-    'explicit-share': 'explicit-share',
-};

package/dist/models/runnerKind.d.ts

@@ -1,15 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-export type RunnerKind = typeof RunnerKind[keyof typeof RunnerKind];
-export declare const RunnerKind: {
-    readonly local: "local";
-    readonly cloud: "cloud";
-    readonly 'customer-edge': "customer-edge";
-    readonly gpu: "gpu";
-    readonly sandbox: "sandbox";
-    readonly ci: "ci";
-    readonly 'mcp-external': "mcp-external";
-};

package/dist/models/runnerKind.js

@@ -1,17 +0,0 @@
-"use strict";
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RunnerKind = void 0;
-exports.RunnerKind = {
-    local: 'local',
-    cloud: 'cloud',
-    'customer-edge': 'customer-edge',
-    gpu: 'gpu',
-    sandbox: 'sandbox',
-    ci: 'ci',
-    'mcp-external': 'mcp-external',
-};

package/dist/models/sessionParticipantRole.d.ts

@@ -1,14 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-/**
- * Role the acting subject holds in the originating agent session. Precedence `owner > editor > viewer`. Absent for non-session invocations (workflow steps, service calls).
- */
-export type SessionParticipantRole = typeof SessionParticipantRole[keyof typeof SessionParticipantRole];
-export declare const SessionParticipantRole: {
-    readonly owner: "owner";
-    readonly editor: "editor";
-    readonly viewer: "viewer";
-};

package/dist/models/subjectRefDto.d.ts

@@ -1,15 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { SubjectKind } from './subjectKind.js';
-export interface SubjectRefDto {
-    /** Discriminator over the kinds of subject that may hold a grant. */
-    kind: SubjectKind;
-    /**
-       * The BARE per-kind identifier — never `<kind>:<id>`, never a `xema://` address. For a `user` it is the principal id the token carries; for an `agent` the composition slug. It becomes the OpenFGA user `<kind>:<ref>` verbatim, so it may not contain `:`, `#` or whitespace; a value that does is refused with `400 SUBJECT_REF_INVALID` naming `/subject/ref`.
-       * @minLength 1
-       */
-    ref: string;
-}

package/dist/models/subjectRefDto.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/visibleResourcesDto.d.ts

@@ -1,9 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-export interface VisibleResourcesDto {
-    /** Ids of the instances of `resourceType` the subject may see, de-duplicated. */
-    resourceIds: string[];
-}

package/dist/models/visibleResourcesDtoDataEnvelope.d.ts

@@ -1,9 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Authorization API
- * OpenAPI spec version: 0.1.1
- */
-import type { VisibleResourcesDto } from './visibleResourcesDto.js';
-export interface VisibleResourcesDtoDataEnvelope {
-    data: VisibleResourcesDto;
-}

package/dist/models/visibleResourcesDtoDataEnvelope.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });