feat(flow): unify member-group-permission admin workflow and docs

app/schemas/catalog.py

@@ -101,6 +101,10 @@ class MemberUpdateRequest(BaseModel):
     sync_to_authentik: bool = True
 
 
+class MemberPermissionGroupsUpdateRequest(BaseModel):
+    group_keys: list[str]
+
+
 class ListResponse(BaseModel):
     items: list
     total: int
@@ -124,3 +128,17 @@ class PermissionGroupItem(BaseModel):
     group_key: str
     name: str
     status: str
+
+
+class PermissionGroupPermissionItem(BaseModel):
+    id: str
+    system: str
+    module: str
+    action: str
+    scope_type: str
+    scope_id: str
+
+
+class MemberPermissionGroupsResponse(BaseModel):
+    authentik_sub: str
+    group_keys: list[str]

app/schemas/permissions.py

@@ -1,3 +1,5 @@
+from datetime import datetime
+
 from pydantic import BaseModel
 
 
@@ -32,3 +34,23 @@ class PermissionItem(BaseModel):
 class PermissionSnapshotResponse(BaseModel):
     authentik_sub: str
     permissions: list[PermissionItem]
+
+
+class DirectPermissionRow(BaseModel):
+    permission_id: str
+    authentik_sub: str
+    email: str | None = None
+    display_name: str | None = None
+    scope_type: str
+    scope_id: str
+    system: str | None = None
+    module: str | None = None
+    action: str
+    created_at: datetime
+
+
+class DirectPermissionListResponse(BaseModel):
+    items: list[DirectPermissionRow]
+    total: int
+    limit: int
+    offset: int