feat: add resource_type_slug to permissions, environment and organization roles

[csrbarber]

Description

• Add resource_type_slug to permission, environment role, and organization role response deserialization
• Add optional resource_type_slug to permission and environment role creation

Documentation

Does this require changes to the WorkOS Docs? E.g. the API Reference or code snippets need updates.

[X] Yes

If yes, link a related docs PR and add a docs maintainer as a reviewer. Their approval is required.

[greptile-apps]

Greptile Summary

This PR adds resource_type_slug support to the authorization module. The field is added as a required field in Permission, EnvironmentRole, and OrganizationRole response models, and as an optional parameter in create_permission and create_environment_role methods (but not create_organization_role).

Key Changes:

• Added required resource_type_slug: str field to Permission, EnvironmentRole, and OrganizationRole type definitions
• Added optional resource_type_slug parameter to create_permission and create_environment_role methods (sync and async)
• Updated all test fixtures to include the new field with default value "organization"
• Added test coverage for creating resources with explicit resource_type_slug values

Important Note:
The resource_type_slug field is defined as required (non-optional) in the Pydantic models. This means the API must always return this field in responses, otherwise deserialization will fail. Ensure this change is coordinated with corresponding API updates that guarantee this field is always present.

Confidence Score: 4/5

• This PR is safe to merge with minimal risk, assuming API coordination
• Clean implementation with comprehensive test coverage. Score is 4 (not 5) because resource_type_slug is defined as a required field, which could cause deserialization failures if the API doesn't always return it. This appears to be coordinated with API changes based on tests, but requires verification.
• src/workos/types/authorization/permission.py, src/workos/types/authorization/environment_role.py, and src/workos/types/authorization/organization_role.py require verification that the API always returns resource_type_slug

Important Files Changed

Filename	Overview
src/workos/authorization.py	Added optional resource_type_slug parameter to create_permission and create_environment_role methods across sync and async implementations
src/workos/types/authorization/permission.py	Added required resource_type_slug: str field to Permission model
src/workos/types/authorization/environment_role.py	Added required resource_type_slug: str field to EnvironmentRole model
src/workos/types/authorization/organization_role.py	Added required resource_type_slug: str field to OrganizationRole and OrganizationRoleEvent models

_{Last reviewed commit: e37c377}

[greptile-apps]

_{8 files reviewed, 3 comments}

_{Edit Code Review Agent Settings | Greptile}

[greptile-apps]

Verify API always returns this field - without Optional or default, Pydantic fails if missing.

[greptile-apps]

Verify API always returns this field - without Optional or default, Pydantic fails if missing.

[greptile-apps]

Verify API always returns this field - without Optional or default, Pydantic fails if missing.