feat: add email search to list organization identities endpoint

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 106
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/keycard%2Fkeycard-api-c753b5846734341b7c92262feb1f7098470c8c0f02a8d79e93a121898a128242.yml
-openapi_spec_hash: fba09085e254f03512e5201d23b00669
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/keycard%2Fkeycard-api-d1ec2be127ae8cd75ee4a4656da915596ef337ab2d69c6d0aef1c7f8eb510bc6.yml
+openapi_spec_hash: 91893395f0df489c4d31b69581b6d789
 config_hash: 8fdc6a9c1185417459f79052b1222ff0

src/keycardai_api/resources/organizations/organizations.py

@@ -329,6 +329,7 @@ def list_identities(
         before: str | Omit = omit,
         expand: List[Literal["permissions"]] | Omit = omit,
         limit: int | Omit = omit,
+        query_email: str | Omit = omit,
         role: OrganizationRole | Omit = omit,
         x_client_request_id: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -353,6 +354,8 @@ def list_identities(
 
           limit: Maximum number of identities to return
 
+          query_email: Search identities by email substring (case-insensitive)
+
           role: Filter identities by role
 
           extra_headers: Send extra headers
@@ -379,6 +382,7 @@ def list_identities(
                         "before": before,
                         "expand": expand,
                         "limit": limit,
+                        "query_email": query_email,
                         "role": role,
                     },
                     organization_list_identities_params.OrganizationListIdentitiesParams,
@@ -711,6 +715,7 @@ async def list_identities(
         before: str | Omit = omit,
         expand: List[Literal["permissions"]] | Omit = omit,
         limit: int | Omit = omit,
+        query_email: str | Omit = omit,
         role: OrganizationRole | Omit = omit,
         x_client_request_id: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -735,6 +740,8 @@ async def list_identities(
 
           limit: Maximum number of identities to return
 
+          query_email: Search identities by email substring (case-insensitive)
+
           role: Filter identities by role
 
           extra_headers: Send extra headers
@@ -761,6 +768,7 @@ async def list_identities(
                         "before": before,
                         "expand": expand,
                         "limit": limit,
+                        "query_email": query_email,
                         "role": role,
                     },
                     organization_list_identities_params.OrganizationListIdentitiesParams,

src/keycardai_api/types/organization_list_identities_params.py

@@ -28,6 +28,9 @@ class OrganizationListIdentitiesParams(TypedDict, total=False):
     limit: int
     """Maximum number of identities to return"""
 
+    query_email: Annotated[str, PropertyInfo(alias="query[email]")]
+    """Search identities by email substring (case-insensitive)"""
+
     role: OrganizationRole
     """Filter identities by role"""
 

src/keycardai_api/types/zones/policies/policy_version.py

@@ -2,6 +2,7 @@
 
 from typing import Optional
 from datetime import datetime
+from typing_extensions import Literal
 
 from ...._models import BaseModel
 
@@ -15,6 +16,13 @@ class PolicyVersion(BaseModel):
 
     created_by: str
 
+    owner_type: Literal["platform", "customer"]
+    """Who manages this policy version:
+
+    - `"platform"` — managed by the Keycard platform (system policy versions).
+    - `"customer"` — managed by the tenant (custom policy versions).
+    """
+
     policy_id: str
 
     schema_version: str

src/keycardai_api/types/zones/policy_sets/policy_set_version.py

@@ -2,6 +2,7 @@
 
 from typing import Optional
 from datetime import datetime
+from typing_extensions import Literal
 
 from ...._models import BaseModel
 from ..policy_set_manifest import PolicySetManifest
@@ -22,6 +23,13 @@ class PolicySetVersion(BaseModel):
     manifest_sha: str
     """Hex-encoded SHA-256 of the canonicalized manifest"""
 
+    owner_type: Literal["platform", "customer"]
+    """Who manages this policy set version:
+
+    - `"platform"` — managed by the Keycard platform (system policy set versions).
+    - `"customer"` — managed by the tenant (custom policy set versions).
+    """
+
     policy_set_id: str
 
     schema_version: str

tests/api_resources/test_organizations.py

@@ -272,6 +272,7 @@ def test_method_list_identities_with_all_params(self, client: KeycardAPI) -> Non
             before="x",
             expand=["permissions"],
             limit=1,
+            query_email="x",
             role="org_admin",
             x_client_request_id="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
         )
@@ -619,6 +620,7 @@ async def test_method_list_identities_with_all_params(self, async_client: AsyncK
             before="x",
             expand=["permissions"],
             limit=1,
+            query_email="x",
             role="org_admin",
             x_client_request_id="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
         )