@agentxm/client-core 0.9.0 → 0.10.1

package/dist/src/unstable/registry/__generated__/registry-client.js

@@ -115,6 +115,15 @@ export const TokenOAuthError = Schema.Struct({
         description: "Human-readable explanation of the error.",
     }),
 });
+export const AuthWhoamiResponse = Schema.Struct({
+    handle: Schema.String.annotate({
+        description: "The authenticated user's registry handle.",
+        examples: ["@example"],
+    }),
+}).annotate({
+    title: "Auth Whoami Response",
+    description: "Minimal identity response for login checks and CLI whoami.",
+});
 export const UserId = Schema.String.check(Schema.isPattern(new RegExp("^user_[0-7][0-9a-hjkmnp-tv-z]{25}$"), {
     title: "User ID",
     description: "Identifies a registered user account. Assigned at sign-up and referenced by tokens, memberships, and audit trails.",
@@ -128,6 +137,16 @@ export const ResourceRestrictions = Schema.Struct({
     title: "Resource Restrictions",
     description: "What this token is allowed to access.",
 });
+export const StepUpChallengeResponse = Schema.Union([
+    Schema.Struct({ status: Schema.Literal("pending") }),
+    Schema.Struct({
+        status: Schema.Literal("completed"),
+        step_up: Schema.String.annotate({
+            description: "Opaque step-up proof for the original request.",
+        }),
+        expires_at: Schema.String.annotate({ description: "ISO timestamp when this proof expires." }),
+    }),
+]).annotate({ title: "Step-up Challenge Response" });
 export const TokenId = Schema.String.check(Schema.isPattern(new RegExp("^tok_[0-7][0-9a-hjkmnp-tv-z]{25}$"), {
     title: "Token ID",
     description: "Identifies an access token or personal access token (PAT) issued to a user. Used to authenticate API requests to the registry.",
@@ -157,24 +176,41 @@ export const AuthorizationDenyDetails = Schema.Struct({
     title: "Authorization Deny Details",
     description: "Diagnostic details returned when a request is denied due to insufficient authorization.",
 });
-export const CreateTokenRequest = Schema.Struct({
-    name: Schema.String.check(Schema.isMinLength(1, {
-        description: "Human-readable name for the token.",
-        examples: ["CI publish token"],
+export const CreateTokenPermissionsRequest = Schema.Struct({
+    owners: Schema.optionalKey(Schema.Union([Schema.Array(Schema.String), Schema.Null]).annotate({
+        description: 'Owner selectors for extension permissions. Use full handles or "all".',
+        examples: [["@example"]],
     })),
-    scopes: Schema.Array(Schema.String).check(Schema.isMinLength(1, {
-        description: "Permissions to grant this token (e.g. extensions:read, extensions:write).",
-        examples: [["extensions:read", "extensions:write"]],
+    extensions: Schema.optionalKey(Schema.Union([Schema.Array(Schema.String), Schema.Null]).annotate({
+        description: "Extension selectors in @handle/<plural-type>/<name> form.",
+        examples: [["@example/skills/release-bot"]],
     })),
-    expires_in: Schema.Number.check(Schema.isInt())
-        .check(Schema.isFinite())
-        .check(Schema.isGreaterThanOrEqualTo(3600))
-        .check(Schema.isLessThanOrEqualTo(31536000, {
-        description: "How long the token lasts, in seconds (1 hour to 365 days).",
+    permission: Schema.optionalKey(Schema.Union([Schema.Literals(["read", "publish", "admin"]), Schema.Null]).annotate({
+        description: "Extension-level permission to grant.",
+    })),
+    org_permission: Schema.optionalKey(Schema.Union([Schema.Literals(["read", "write", "admin"]), Schema.Null]).annotate({
+        description: "Organization-level permission to grant.",
+    })),
+    cidr: Schema.optionalKey(Schema.Union([Schema.Array(Schema.String), Schema.Null]).annotate({
+        description: "Optional CIDR allowlist for the token.",
+    })),
+    bypass_mfa: Schema.optionalKey(Schema.Union([Schema.Boolean, Schema.Null]).annotate({
+        description: "Whether this automation token bypasses step-up MFA.",
     })),
 }).annotate({
-    title: "Create Token Request",
-    description: "Request body for creating a new personal access token.",
+    title: "Create Token Permissions Request",
+    description: "Structured permission request for a granular access token.",
+});
+export const StepUpRequiredError = Schema.Struct({
+    kind: Schema.Literal("StepUpRequiredError"),
+    type: Schema.String,
+    title: Schema.String,
+    status: Schema.Number.check(Schema.isInt()),
+    detail: Schema.String,
+    instance: Schema.optionalKey(Schema.String),
+    code: Schema.Literal("eotp"),
+    authUrl: Schema.String,
+    doneUrl: Schema.String,
 });
 export const Handle = Schema.String.check(Schema.isPattern(new RegExp("^@[a-z0-9_](?:[a-z0-9_-]*[a-z0-9_])?$"), {
     title: "Handle",
@@ -255,6 +291,26 @@ export const Version = Schema.String.check(Schema.isPattern(new RegExp("^(0|[1-9
     description: "A semver version like 1.0.0. Ranges are not allowed here.",
     examples: ["1.0.0", "2.3.1", "0.1.0-beta.1"],
 }));
+export const Repository = Schema.Struct({
+    url: Schema.String.annotate({
+        description: "Canonical repository URL for the extension source.",
+        format: "uri",
+    }),
+    type: Schema.optionalKey(Schema.Union([
+        Schema.String.annotate({ description: "Repository type from the manifest, such as git." }),
+        Schema.Null,
+    ])),
+    directory: Schema.optionalKey(Schema.Union([
+        Schema.String.annotate({ description: "Subdirectory containing the extension source." }),
+        Schema.Null,
+    ])),
+}).annotate({ title: "Repository", description: "Repository details for an extension manifest." });
+export const LicenseExpression = Schema.String.annotate({
+    title: "License Expression",
+    description: "SPDX license expression, or `UNLICENSED` for proprietary code.",
+    examples: ["MIT", "Apache-2.0", "MIT OR Apache-2.0", "UNLICENSED"],
+    format: "spdx-expression",
+});
 export const Author = Schema.Struct({
     name: Schema.optionalKey(Schema.Union([
         Schema.String.annotate({ description: "Display name of the extension author." }),
@@ -275,11 +331,32 @@ export const Author = Schema.Struct({
         Schema.Null,
     ])),
 }).annotate({ title: "Author", description: "Author details: name, email, and homepage URL." });
+export const Bugs = Schema.Struct({
+    url: Schema.optionalKey(Schema.Union([
+        Schema.String.annotate({
+            description: "Issue tracker URL for the extension.",
+            format: "uri",
+        }),
+        Schema.Null,
+    ])),
+    email: Schema.optionalKey(Schema.Union([
+        Schema.String.annotate({
+            description: "Contact email for reporting extension issues.",
+            format: "email",
+        }),
+        Schema.Null,
+    ])),
+}).annotate({ title: "Bugs", description: "Bug reporting details for an extension manifest." });
 export const VersionRange = Schema.String.check(Schema.isMinLength(1)).check(Schema.isPattern(new RegExp("^[~^<>=*xXvV0-9A-Za-z| .-]+$"), {
     title: "Version Range",
     description: 'A semver version range like ^1.0.0, ~2.3.0, >=1.0.0 <3.0.0, or an exact version 1.2.3. Use "*" to always resolve to the latest available version.',
     examples: ["^1.0.0", "~2.4", ">=1 <3", "1.2.3", "*"],
 }));
+export const PackageIdentityPurl = Schema.String.check(Schema.isMinLength(1)).check(Schema.isPattern(new RegExp("^[Pp][Kk][Gg]:[a-zA-Z][a-zA-Z0-9.+-]*\\/.+$"), {
+    title: "Package Identity Purl",
+    description: "A Package URL (purl) identity for a companion package. Companion package purls are identities, not pins: omit the purl @version segment and put compatibility constraints in versionRange.",
+    examples: ["pkg:npm/react", "pkg:pypi/requests", "pkg:cargo/serde"],
+}));
 export const PatchVisibilityBody = Schema.Struct({
     visibility: Schema.optionalKey(Schema.Union([
         Schema.Literals(["public", "internal", "private"]).annotate({
@@ -304,6 +381,12 @@ export const ExtensionId = Schema.String.check(Schema.isPattern(new RegExp("^ext
     description: "Identifies a registered extension in the registry. An extension groups all published versions under a single handle, type, and name.",
     examples: ["ext_01h455vb4pexka56gq5w2r7cpc"],
 }));
+export const ExtensionLinks = Schema.Struct({
+    html: Schema.String.annotate({ format: "uri" }),
+}).annotate({
+    title: "Extension Links",
+    description: "Hyperlinks for an extension resource. `html` is the canonical web page URL.",
+});
 export const DeprecateBody = Schema.Struct({
     notice: Schema.optionalKey(Schema.Union([
         Schema.String.annotate({
@@ -372,6 +455,11 @@ export const PutCollaboratorBody = Schema.Struct({
     title: "Put Collaborator Body",
     description: "Request body for assigning a collaborator role on an extension.",
 });
+export const ExtensionFqn = Schema.String.check(Schema.isPattern(new RegExp("^(@[a-z0-9_](?:[a-z0-9_-]*[a-z0-9_])?)\\/(skills|commands|mcp-servers|subagents|files|rules|packs)\\/([a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?)$"), {
+    title: "Extension FQN",
+    description: "Canonical extension identifier in @owner/<type>s/<name> form.",
+    examples: ["@acme/skills/code-review", "@my-org/commands/format"],
+}));
 export const ProblemDetails = Schema.Struct({
     type: Schema.String,
     title: Schema.String,
@@ -420,6 +508,9 @@ export const AuthMeToken = Schema.Struct({
         Schema.String.annotate({ description: "Human-readable name of the token, if assigned." }),
         Schema.Null,
     ]),
+    permissions: Schema.Union([Schema.Unknown, Schema.Null]).annotate({
+        description: "Structured permissions associated with this token.",
+    }),
     scopes: Schema.Array(Schema.String).annotate({ description: "Scopes granted to this token." }),
     resource_restrictions: ResourceRestrictions,
     expires_at: Schema.String.annotate({
@@ -438,6 +529,9 @@ export const TokenListItem = Schema.Struct({
     ]),
     type: Schema.String.annotate({ description: "Token type (e.g. 'pat', 'session')." }),
     scopes: Schema.Array(Schema.String).annotate({ description: "Scopes granted to this token." }),
+    permissions: Schema.Union([Schema.Unknown, Schema.Null]).annotate({
+        description: "Structured permissions associated with this token.",
+    }),
     created_at: IsoDateTimeString,
     expires_at: IsoDateTimeString,
     last_used_at: Schema.Union([IsoDateTimeString, Schema.Null]),
@@ -450,6 +544,7 @@ export const CreateTokenResponse = Schema.Struct({
     }),
     name: Schema.String,
     scopes: Schema.Array(Schema.String),
+    permissions: Schema.Unknown,
     created_at: IsoDateTimeString,
     expires_at: IsoDateTimeString,
 }).annotate({
@@ -468,6 +563,7 @@ export const ForbiddenError = Schema.Struct({
         "insufficient_scope",
         "resource_restriction",
         "scope_escalation",
+        "gat_requires_session",
         "team_create_not_authorized",
         "team_delete_not_authorized",
         "team_update_not_authorized",
@@ -484,6 +580,28 @@ export const ForbiddenError = Schema.Struct({
     ]),
     details: Schema.optionalKey(Schema.Union([ScopeCheckDetails, AuthorizationDenyDetails, PublishDetails])),
 });
+export const CreateTokenRequest = Schema.Struct({
+    name: Schema.String.check(Schema.isMinLength(1, {
+        description: "Human-readable name for the token.",
+        examples: ["CI publish token"],
+    })),
+    scopes: Schema.optionalKey(Schema.Union([Schema.Array(Schema.String).check(Schema.isMinLength(1)), Schema.Null]).annotate({
+        description: "Deprecated scope-string grant surface. Prefer permissions.",
+        examples: [["extensions:read", "extensions:publish:version"]],
+    })),
+    permissions: Schema.optionalKey(Schema.Union([CreateTokenPermissionsRequest, Schema.Null]).annotate({
+        description: "Structured permission request for the token.",
+    })),
+    expires_in: Schema.Number.check(Schema.isInt())
+        .check(Schema.isFinite())
+        .check(Schema.isGreaterThanOrEqualTo(3600))
+        .check(Schema.isLessThanOrEqualTo(31536000, {
+        description: "How long the token lasts, in seconds (1 hour to 365 days).",
+    })),
+}).annotate({
+    title: "Create Token Request",
+    description: "Request body for creating a new personal access token.",
+});
 export const UpsertTeamGrantBody = Schema.Struct({
     teamId: TeamId,
     role: Schema.Literals(["read", "write", "admin"]),
@@ -528,12 +646,24 @@ export const SearchHit = Schema.Struct({
     type: ExtensionType,
     latestVersion: Version,
     description: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
-    repository: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
-    license: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
+    repository: Schema.optionalKey(Schema.Union([Repository, Schema.Null])),
+    license: Schema.optionalKey(Schema.Union([LicenseExpression, Schema.Null])),
     authors: Schema.optionalKey(Schema.Union([Schema.Array(Author), Schema.Null])),
     deprecated_at: Schema.optionalKey(Schema.Union([IsoDateTimeString, Schema.Null])),
     deprecation_notice: Schema.optionalKey(Schema.Union([Schema.String.annotate({ readOnly: true }), Schema.Null])),
 }).annotate({ title: "Search Hit", description: "A single extension matched by a search query." });
+export const CompanionPackage = Schema.Struct({
+    purl: PackageIdentityPurl,
+    versionRange: Schema.optionalKey(Schema.Union([
+        Schema.String.check(Schema.isMinLength(1, {
+            examples: ["vers:npm/>=18.0.0|<19.0.0", "vers:pypi/>=2.31.0", "vers:cargo/>=1.0.0"],
+        })),
+        Schema.Null,
+    ])),
+}).annotate({
+    title: "Companion Package",
+    description: "A companion package purl identity with an optional VERS compatibility range.",
+});
 export const PublishLintFinding = Schema.Struct({
     kind: Schema.Literals(["advisory", "autofixable"]),
     ruleId: Schema.String,
@@ -622,7 +752,12 @@ export const AuthIssueDeviceCodeRequestFormUrlEncoded = Schema.Struct({
     client_id: Schema.Literal("axm-cli").annotate({
         description: "OAuth client identifier. Must be 'axm-cli'.",
     }),
-    scope: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
+    scope: Schema.optionalKey(Schema.Union([
+        Schema.String.annotate({
+            description: "Ignored for axm-cli. Sessions always use full user authority.",
+        }),
+        Schema.Null,
+    ])),
 });
 export const AuthIssueDeviceCode200 = DeviceCodeResponse;
 export const AuthIssueDeviceCode400 = DecodeErrorResponse;
@@ -760,9 +895,16 @@ export const AuthRevokeOAuthTokenRequestFormUrlEncoded = Schema.Struct({
     ])),
 });
 export const AuthRevokeOAuthToken400 = DecodeErrorResponse;
+export const AuthGetWhoami200 = AuthWhoamiResponse;
+export const AuthGetWhoami400 = DecodeErrorResponse;
+export const AuthGetWhoami401 = ProblemDetails;
 export const AuthGetMe200 = AuthMeResponse;
 export const AuthGetMe400 = DecodeErrorResponse;
 export const AuthGetMe401 = ProblemDetails;
+export const AuthGetStepUpChallenge200 = StepUpChallengeResponse;
+export const AuthGetStepUpChallenge400 = DecodeErrorResponse;
+export const AuthGetStepUpChallenge401 = ProblemDetails;
+export const AuthGetStepUpChallenge404 = ProblemDetails;
 export const AuthExchangeOidcToken400 = DecodeErrorResponse;
 export const AuthExchangeOidcToken501 = ProblemDetails;
 export const TokensListParams = Schema.Struct({
@@ -790,7 +932,7 @@ export const TokensCreate401 = ProblemDetails;
 export const TokensCreate403 = Schema.Union([ForbiddenError, ForbiddenError]);
 export const TokensCreate422 = ProblemDetails;
 export const TokensDelete400 = DecodeErrorResponse;
-export const TokensDelete401 = ProblemDetails;
+export const TokensDelete401 = Schema.Union([StepUpRequiredError, ProblemDetails]);
 export const TokensDelete403 = ForbiddenError;
 export const OwnersGetOwner200 = OwnerResponse;
 export const OwnersGetOwner400 = DecodeErrorResponse;
@@ -855,8 +997,8 @@ export const ExtensionsListByOwner200 = Schema.Struct({
         type: ExtensionType,
         latestVersion: Version,
         description: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
-        repository: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
-        license: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
+        repository: Schema.optionalKey(Schema.Union([Repository, Schema.Null])),
+        license: Schema.optionalKey(Schema.Union([LicenseExpression, Schema.Null])),
         authors: Schema.optionalKey(Schema.Union([Schema.Array(Author), Schema.Null])),
         visibility: Schema.optionalKey(Schema.Union([Schema.String.annotate({ readOnly: true }), Schema.Null])),
         deprecated_at: Schema.optionalKey(Schema.Union([IsoDateTimeString, Schema.Null])),
@@ -871,8 +1013,8 @@ export const ExtensionsListByType200 = Schema.Struct({
         type: ExtensionType,
         latestVersion: Version,
         description: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
-        repository: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
-        license: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
+        repository: Schema.optionalKey(Schema.Union([Repository, Schema.Null])),
+        license: Schema.optionalKey(Schema.Union([LicenseExpression, Schema.Null])),
         authors: Schema.optionalKey(Schema.Union([Schema.Array(Author), Schema.Null])),
         visibility: Schema.optionalKey(Schema.Union([Schema.String.annotate({ readOnly: true }), Schema.Null])),
         deprecated_at: Schema.optionalKey(Schema.Union([IsoDateTimeString, Schema.Null])),
@@ -885,15 +1027,16 @@ export const ExtensionsGet200 = Schema.Struct({
     owner: Handle,
     type: ExtensionType,
     description: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
-    repository: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
-    license: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
+    repository: Schema.optionalKey(Schema.Union([Repository, Schema.Null])),
+    bugs: Schema.optionalKey(Schema.Union([Bugs, Schema.Null])),
+    license: Schema.optionalKey(Schema.Union([LicenseExpression, Schema.Null])),
     authors: Schema.optionalKey(Schema.Union([Schema.Array(Author), Schema.Null])),
     versions: Schema.Array(Schema.Struct({
         version: Version,
         published: IsoDateTimeString,
         integrity: Schema.String.annotate({ readOnly: true }),
         dependencies: Schema.optionalKey(Schema.Union([Schema.Record(Schema.String, VersionRange), Schema.Null])),
-        companionPackages: Schema.optionalKey(Schema.Union([Schema.Array(Schema.String), Schema.Null])),
+        packages: Schema.optionalKey(Schema.Union([Schema.Array(CompanionPackage), Schema.Null])),
         yanked_at: Schema.optionalKey(Schema.Union([IsoDateTimeString, Schema.Null])),
     })),
     visibility: Schema.optionalKey(Schema.Union([
@@ -914,6 +1057,7 @@ export const ExtensionsUpdateVisibility200 = Schema.Struct({
     visibility: Schema.String,
     listed: Schema.Boolean,
     updatedAt: Schema.String.annotate({ readOnly: true, format: "date-time" }),
+    links: ExtensionLinks,
 });
 export const ExtensionsUpdateVisibility400 = Schema.Union([ProblemDetails, DecodeErrorResponse]);
 export const ExtensionsUpdateVisibility401 = ProblemDetails;
@@ -929,11 +1073,12 @@ export const ExtensionsGetVersion200 = Schema.Struct({
     published: IsoDateTimeString,
     integrity: Schema.String.annotate({ readOnly: true }),
     description: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
-    repository: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
-    license: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
+    repository: Schema.optionalKey(Schema.Union([Repository, Schema.Null])),
+    bugs: Schema.optionalKey(Schema.Union([Bugs, Schema.Null])),
+    license: Schema.optionalKey(Schema.Union([LicenseExpression, Schema.Null])),
     authors: Schema.optionalKey(Schema.Union([Schema.Array(Author), Schema.Null])),
     dependencies: Schema.optionalKey(Schema.Union([Schema.Record(Schema.String, VersionRange), Schema.Null])),
-    companionPackages: Schema.optionalKey(Schema.Union([Schema.Array(Schema.String), Schema.Null])),
+    packages: Schema.optionalKey(Schema.Union([Schema.Array(CompanionPackage), Schema.Null])),
     yanked_at: Schema.optionalKey(Schema.Union([IsoDateTimeString, Schema.Null])),
     deleted_at: Schema.optionalKey(Schema.Union([IsoDateTimeString, Schema.Null])),
 });
@@ -952,6 +1097,7 @@ export const ExtensionsPublishVersion200 = Schema.Struct({
     sha256_hex: Schema.String.annotate({ readOnly: true }),
     published_at: IsoDateTimeString,
     publish_status: Schema.Literals(["pending", "available", "failed"]).annotate({ readOnly: true }),
+    links: ExtensionLinks,
 });
 export const ExtensionsPublishVersion201 = Schema.Struct({
     owner: Handle,
@@ -962,6 +1108,7 @@ export const ExtensionsPublishVersion201 = Schema.Struct({
     sha256_hex: Schema.String.annotate({ readOnly: true }),
     published_at: IsoDateTimeString,
     publish_status: Schema.Literals(["pending", "available", "failed"]).annotate({ readOnly: true }),
+    links: ExtensionLinks,
 });
 export const ExtensionsPublishVersion400 = Schema.Union([ProblemDetails, DecodeErrorResponse]);
 export const ExtensionsPublishVersion401 = ProblemDetails;
@@ -1017,9 +1164,10 @@ export const ExtensionsYankVersion200 = Schema.Struct({
     name: ExtensionName,
     version: Version,
     yankedAt: Schema.Union([IsoDateTimeString, Schema.Null]),
+    links: ExtensionLinks,
 });
 export const ExtensionsYankVersion400 = DecodeErrorResponse;
-export const ExtensionsYankVersion401 = ProblemDetails;
+export const ExtensionsYankVersion401 = Schema.Union([StepUpRequiredError, ProblemDetails]);
 export const ExtensionsYankVersion403 = ForbiddenError;
 export const ExtensionsYankVersion404 = ProblemDetails;
 export const ExtensionsUnyankVersion200 = Schema.Struct({
@@ -1028,9 +1176,10 @@ export const ExtensionsUnyankVersion200 = Schema.Struct({
     name: ExtensionName,
     version: Version,
     yankedAt: Schema.Null,
+    links: ExtensionLinks,
 });
 export const ExtensionsUnyankVersion400 = DecodeErrorResponse;
-export const ExtensionsUnyankVersion401 = ProblemDetails;
+export const ExtensionsUnyankVersion401 = Schema.Union([StepUpRequiredError, ProblemDetails]);
 export const ExtensionsUnyankVersion403 = ForbiddenError;
 export const ExtensionsUnyankVersion404 = ProblemDetails;
 export const CollaboratorsListCollaborators200 = Schema.Struct({
@@ -1075,6 +1224,41 @@ export const TeamGrantsDeleteTeamExtensionGrant400 = DecodeErrorResponse;
 export const TeamGrantsDeleteTeamExtensionGrant401 = ProblemDetails;
 export const TeamGrantsDeleteTeamExtensionGrant403 = Schema.Union([ForbiddenError, ForbiddenError]);
 export const TeamGrantsDeleteTeamExtensionGrant404 = ProblemDetails;
+export const DiscoveryPostDiscoveryRequestJson = Schema.Struct({
+    client: Schema.Struct({ axmVersion: Schema.String }),
+    packages: Schema.Array(Schema.Struct({
+        purl: Schema.String,
+        version: Schema.String,
+        declaredExtensions: Schema.Array(Schema.Struct({
+            ref: ExtensionFqn,
+            versionRange: Schema.optionalKey(Schema.Union([Schema.String, Schema.Null])),
+        })),
+    })),
+});
+export const DiscoveryPostDiscovery200 = Schema.Struct({
+    results: Schema.Array(Schema.Struct({
+        purl: Schema.String,
+        version: Schema.String,
+        status: Schema.Literals(["resolved", "invalid_purl"]),
+        extensions: Schema.Array(Schema.Struct({
+            ref: Schema.String,
+            resolved: Schema.Boolean,
+            extension: Schema.optionalKey(Schema.Union([
+                Schema.Struct({
+                    owner: Schema.String,
+                    type: Schema.String,
+                    name: Schema.String,
+                    installVersion: Schema.String,
+                }),
+                Schema.Null,
+            ])),
+            attestedBy: Schema.Array(Schema.Literals(["package", "extension"])),
+            official: Schema.Boolean,
+            packageVersionInRange: Schema.Boolean,
+        })),
+    })),
+});
+export const DiscoveryPostDiscovery400 = Schema.Union([ProblemDetails, DecodeErrorResponse]);
 export const HealthGetShallowHealth200 = Schema.Struct({
     status: Schema.Literals(["pass", "warn", "fail"]),
 });
@@ -1229,12 +1413,25 @@ export const make = (httpClient, options = {}) => {
             "200": () => Effect.void,
             orElse: unexpectedStatus,
         }))),
+        AuthGetWhoami: (options) => HttpClientRequest.get(`/v1/auth/whoami`).pipe(withResponse(options?.config)(HttpClientResponse.matchStatus({
+            "2xx": decodeSuccess(AuthGetWhoami200),
+            "400": decodeError("AuthGetWhoami400", AuthGetWhoami400),
+            "401": decodeError("AuthGetWhoami401", AuthGetWhoami401),
+            orElse: unexpectedStatus,
+        }))),
         AuthGetMe: (options) => HttpClientRequest.get(`/v1/auth/me`).pipe(withResponse(options?.config)(HttpClientResponse.matchStatus({
             "2xx": decodeSuccess(AuthGetMe200),
             "400": decodeError("AuthGetMe400", AuthGetMe400),
             "401": decodeError("AuthGetMe401", AuthGetMe401),
             orElse: unexpectedStatus,
         }))),
+        AuthGetStepUpChallenge: (challengeId, options) => HttpClientRequest.get(`/v1/auth/step-up/challenges/${challengeId}`).pipe(withResponse(options?.config)(HttpClientResponse.matchStatus({
+            "2xx": decodeSuccess(AuthGetStepUpChallenge200),
+            "400": decodeError("AuthGetStepUpChallenge400", AuthGetStepUpChallenge400),
+            "401": decodeError("AuthGetStepUpChallenge401", AuthGetStepUpChallenge401),
+            "404": decodeError("AuthGetStepUpChallenge404", AuthGetStepUpChallenge404),
+            orElse: unexpectedStatus,
+        }))),
         AuthExchangeOidcToken: (options) => HttpClientRequest.post(`/v1/auth/oidc/exchange`).pipe(withResponse(options?.config)(HttpClientResponse.matchStatus({
             "400": decodeError("AuthExchangeOidcToken400", AuthExchangeOidcToken400),
             "501": decodeError("AuthExchangeOidcToken501", AuthExchangeOidcToken501),
@@ -1493,6 +1690,11 @@ export const make = (httpClient, options = {}) => {
             "204": () => Effect.void,
             orElse: unexpectedStatus,
         }))),
+        DiscoveryPostDiscovery: (options) => HttpClientRequest.post(`/v1/discovery`).pipe(HttpClientRequest.bodyJsonUnsafe(options.payload), withResponse(options.config)(HttpClientResponse.matchStatus({
+            "2xx": decodeSuccess(DiscoveryPostDiscovery200),
+            "400": decodeError("DiscoveryPostDiscovery400", DiscoveryPostDiscovery400),
+            orElse: unexpectedStatus,
+        }))),
         HealthGetShallowHealth: (options) => HttpClientRequest.get(`/v1/health`).pipe(withResponse(options?.config)(HttpClientResponse.matchStatus({
             "2xx": decodeSuccess(HealthGetShallowHealth200),
             "400": decodeError("HealthGetShallowHealth400", HealthGetShallowHealth400),