@atlanai/sdk 0.2.1 → 0.2.3

package/dist/raw/mcp/models/McpConnectionState.d.ts

@@ -10,13 +10,14 @@
  * Do not edit the class manually.
  */
 /**
- * How the last connection attempt to a downstream went. `pending` — registered, not yet contacted; `connected` — handshake and tool listing both succeeded; `unreachable` — could not be reached. Set when the server is registered and refreshed by an explicit connectivity test.
+ * How the last connection attempt to a downstream went. `pending` — registered, not yet contacted; `connected` — handshake and tool listing both succeeded; `auth_required` — the downstream answered but refused the credential, so a connected account or linked secret is what it is waiting for; `unreachable` — could not be reached at all. Set when the server is registered and refreshed by an explicit connectivity test.
  * @export
  * @enum {string}
  */
 export declare enum McpConnectionState {
     Pending = "pending",
     Connected = "connected",
+    AuthRequired = "auth_required",
     Unreachable = "unreachable"
 }
 export declare function instanceOfMcpConnectionState(value: any): boolean;

package/dist/raw/mcp/models/McpConnectionState.js

@@ -20,7 +20,7 @@ exports.McpConnectionStateFromJSONTyped = McpConnectionStateFromJSONTyped;
 exports.McpConnectionStateToJSON = McpConnectionStateToJSON;
 exports.McpConnectionStateToJSONTyped = McpConnectionStateToJSONTyped;
 /**
- * How the last connection attempt to a downstream went. `pending` — registered, not yet contacted; `connected` — handshake and tool listing both succeeded; `unreachable` — could not be reached. Set when the server is registered and refreshed by an explicit connectivity test.
+ * How the last connection attempt to a downstream went. `pending` — registered, not yet contacted; `connected` — handshake and tool listing both succeeded; `auth_required` — the downstream answered but refused the credential, so a connected account or linked secret is what it is waiting for; `unreachable` — could not be reached at all. Set when the server is registered and refreshed by an explicit connectivity test.
  * @export
  * @enum {string}
  */
@@ -28,6 +28,7 @@ var McpConnectionState;
 (function (McpConnectionState) {
     McpConnectionState["Pending"] = "pending";
     McpConnectionState["Connected"] = "connected";
+    McpConnectionState["AuthRequired"] = "auth_required";
     McpConnectionState["Unreachable"] = "unreachable";
 })(McpConnectionState || (exports.McpConnectionState = McpConnectionState = {}));
 function instanceOfMcpConnectionState(value) {

package/dist/raw/mcp/models/McpListServers401Response.d.ts

@@ -65,6 +65,7 @@ export declare enum McpListServers401ResponseCodeEnum {
     TokenNotYetValid = "token_not_yet_valid",
     TokenRejected = "token_rejected",
     TokenServiceAccountUnbound = "token_service_account_unbound",
+    Unauthorized = "unauthorized",
     UnknownAccount = "unknown_account",
     UnknownKey = "unknown_key",
     UntrustedIssuer = "untrusted_issuer"

package/dist/raw/mcp/models/McpListServers401Response.js

@@ -39,6 +39,7 @@ var McpListServers401ResponseCodeEnum;
     McpListServers401ResponseCodeEnum["TokenNotYetValid"] = "token_not_yet_valid";
     McpListServers401ResponseCodeEnum["TokenRejected"] = "token_rejected";
     McpListServers401ResponseCodeEnum["TokenServiceAccountUnbound"] = "token_service_account_unbound";
+    McpListServers401ResponseCodeEnum["Unauthorized"] = "unauthorized";
     McpListServers401ResponseCodeEnum["UnknownAccount"] = "unknown_account";
     McpListServers401ResponseCodeEnum["UnknownKey"] = "unknown_key";
     McpListServers401ResponseCodeEnum["UntrustedIssuer"] = "untrusted_issuer";

package/dist/raw/mcp/models/McpMcpServer.d.ts

@@ -24,6 +24,20 @@ export interface McpMcpServer {
      * @memberof McpMcpServer
      */
     authHeader?: string | null;
+    /**
+     * Authenticate to this downstream with **the calling user's own** connected
+     * account for the named OAuth provider, resolved fresh on every call.
+     *
+     * The value is a provider key as `GET /<extension>/v1/oauth/providers` lists
+     * it. Each caller presents their own grant, so one registered server serves
+     * a whole organization without anybody's credential reaching anybody else;
+     * a caller who has not connected that provider is refused rather than
+     * falling back to a shared credential. Mutually exclusive with
+     * `auth_secret_id`, which is one fixed credential for every caller.
+     * @type {string}
+     * @memberof McpMcpServer
+     */
+    authOauthProvider?: string | null;
     /**
      * Value prefix (scheme) placed before the credential. Defaults per credential
      * type (`Bearer` for api_key/bearer/oauth2, `Basic` for basic_auth); set to
@@ -55,6 +69,19 @@ export interface McpMcpServer {
      * @memberof McpMcpServer
      */
     endpointUrl: string;
+    /**
+     * Whether this server participates in the aggregated MCP endpoint.
+     *
+     * A disabled server is registered and visible but never contacted: it is
+     * absent from `tools/list`, never dialled for a `tools/call`, and skipped by
+     * discovery. Seeded catalogue entries arrive disabled so an operator can see
+     * what is on offer before anything reaches a third party — enabling one is
+     * the deliberate act, and disabling is how a server is taken out of service
+     * without archiving it and cascading away its `mcp_tool` rows.
+     * @type {boolean}
+     * @memberof McpMcpServer
+     */
+    isEnabled?: boolean;
     /**
      * Whether the gateway provisioned this server for the account.
      * @type {boolean}

package/dist/raw/mcp/models/McpMcpServer.js

@@ -37,10 +37,12 @@ function McpMcpServerFromJSONTyped(json, ignoreDiscriminator) {
     }
     return {
         'authHeader': json['auth_header'] === undefined ? undefined : json['auth_header'] === null ? null : json['auth_header'],
+        'authOauthProvider': json['auth_oauth_provider'] === undefined ? undefined : json['auth_oauth_provider'] === null ? null : json['auth_oauth_provider'],
         'authScheme': json['auth_scheme'] === undefined ? undefined : json['auth_scheme'] === null ? null : json['auth_scheme'],
         'authSecretId': json['auth_secret_id'] === undefined ? undefined : json['auth_secret_id'] === null ? null : json['auth_secret_id'],
         'connectionState': json['connection_state'] == null ? undefined : (0, McpConnectionState_1.McpConnectionStateFromJSON)(json['connection_state']),
         'endpointUrl': json['endpoint_url'],
+        'isEnabled': json['is_enabled'] == null ? undefined : json['is_enabled'],
         'isSystem': json['is_system'] == null ? undefined : json['is_system'],
         'logoUrl': json['logo_url'] === undefined ? undefined : json['logo_url'] === null ? null : json['logo_url'],
         'protocolVersion': json['protocol_version'] === undefined ? undefined : json['protocol_version'] === null ? null : json['protocol_version'],
@@ -56,10 +58,12 @@ function McpMcpServerToJSONTyped(value, ignoreDiscriminator = false) {
     }
     return {
         'auth_header': value['authHeader'],
+        'auth_oauth_provider': value['authOauthProvider'],
         'auth_scheme': value['authScheme'],
         'auth_secret_id': value['authSecretId'],
         'connection_state': (0, McpConnectionState_1.McpConnectionStateToJSON)(value['connectionState']),
         'endpoint_url': value['endpointUrl'],
+        'is_enabled': value['isEnabled'],
         'is_system': value['isSystem'],
         'logo_url': value['logoUrl'],
         'protocol_version': value['protocolVersion'],

package/dist/raw/mcp/models/McpMcpServerArtifactView.d.ts

@@ -19,6 +19,12 @@ import type { RegistryRelationshipsView } from './RegistryRelationshipsView';
  * @interface McpMcpServerArtifactView
  */
 export interface McpMcpServerArtifactView {
+    /**
+     * Value of the `app` field.
+     * @type {string}
+     * @memberof McpMcpServerArtifactView
+     */
+    app?: string;
     /**
      * Value of the `artifact_status` field.
      * @type {string}
@@ -61,12 +67,6 @@ export interface McpMcpServerArtifactView {
      * @memberof McpMcpServerArtifactView
      */
     displayName?: string;
-    /**
-     * Value of the `extension` field.
-     * @type {string}
-     * @memberof McpMcpServerArtifactView
-     */
-    extension?: string;
     /**
      * Kind-prefixed Crockford-base32 handle (`<kind>_<base32>`).
      * @type {string}
@@ -105,19 +105,28 @@ export interface McpMcpServerArtifactView {
      * The Control-Plane OIDC client id this artifact authenticates as
      * (`x-gateway-identity` kinds); absent for every other kind.
      *
-     * **Derived, not stored.** The registry resolves it from the artifact's
-     * `service_principals` row rather than keeping a second copy on the artifact,
-     * so it appears on the create response and on the single-artifact read — the
-     * two paths that make that lookup — and **not** on list, search, or a `PATCH`
-     * response, none of which do a per-row identity read. It is the public half of
-     * the credential pair and is not secret.
+     * **Derived, not stored, and present on the create response only.** The
+     * registry would resolve it from the artifact's `service_principals` row
+     * rather than keep a second copy on the artifact — but only the create path
+     * does that lookup, because it has just provisioned the identity. Every read
+     * shape (single read, list, search, `PATCH`) is built by one constructor that
+     * sets this `None`, so it is absent from all four.
+     *
+     * This block used to name the single-artifact read as a second populated path.
+     * It was never one. Adding it means deciding whether list and search pay a
+     * per-row identity read too; the lookup a future implementation would call is
+     * `registry_server::identity::artifact_principal`. It is the public half of the
+     * credential pair and is not secret.
      * @type {string}
      * @memberof McpMcpServerArtifactView
      */
     oidcClientId?: string;
     /**
      * Canonical owner: the `users.user_id` this artifact belongs to, FK-backed.
-     * Absent when unset (legacy rows / system-plane creates).
+     *
+     * Defaulted to the creating principal, so this is normally set. Absent for a row created
+     * before that default landed, for a system-plane write, and for a principal with no directory
+     * row — a service account or a seed has nothing to own anything with.
      * @type {string}
      * @memberof McpMcpServerArtifactView
      */
@@ -225,13 +234,16 @@ export interface McpMcpServerArtifactView {
      */
     updatedBy: string;
     /**
-     * Optional human version selector (semver); absent when unset.
+     * The free-form label the write set, verbatim. Absent when none was sent, and *not* the name
+     * the version shipped under — that is the release's own `version_label`.
      * @type {string}
      * @memberof McpMcpServerArtifactView
      */
     versionLabel?: string;
     /**
-     * Monotonic version coordinate within the artifact line.
+     * This version's position in its line — the write index, 1-based and dense over versions
+     * *written*. Distinct from a release's `version_ordinal`, which counts versions **shipped**;
+     * the two agree under the default `auto` release policy and diverge under `manual`.
      * @type {number}
      * @memberof McpMcpServerArtifactView
      */
@@ -249,6 +261,20 @@ export interface McpMcpServerArtifactView {
      * @memberof McpMcpServerArtifactView
      */
     authHeader?: string | null;
+    /**
+     * Authenticate to this downstream with **the calling user's own** connected
+     * account for the named OAuth provider, resolved fresh on every call.
+     *
+     * The value is a provider key as `GET /<extension>/v1/oauth/providers` lists
+     * it. Each caller presents their own grant, so one registered server serves
+     * a whole organization without anybody's credential reaching anybody else;
+     * a caller who has not connected that provider is refused rather than
+     * falling back to a shared credential. Mutually exclusive with
+     * `auth_secret_id`, which is one fixed credential for every caller.
+     * @type {string}
+     * @memberof McpMcpServerArtifactView
+     */
+    authOauthProvider?: string | null;
     /**
      * Value prefix (scheme) placed before the credential. Defaults per credential
      * type (`Bearer` for api_key/bearer/oauth2, `Basic` for basic_auth); set to
@@ -280,6 +306,19 @@ export interface McpMcpServerArtifactView {
      * @memberof McpMcpServerArtifactView
      */
     endpointUrl?: string;
+    /**
+     * Whether this server participates in the aggregated MCP endpoint.
+     *
+     * A disabled server is registered and visible but never contacted: it is
+     * absent from `tools/list`, never dialled for a `tools/call`, and skipped by
+     * discovery. Seeded catalogue entries arrive disabled so an operator can see
+     * what is on offer before anything reaches a third party — enabling one is
+     * the deliberate act, and disabling is how a server is taken out of service
+     * without archiving it and cascading away its `mcp_tool` rows.
+     * @type {boolean}
+     * @memberof McpMcpServerArtifactView
+     */
+    isEnabled?: boolean;
     /**
      * Whether the gateway provisioned this server for the account.
      * @type {boolean}

package/dist/raw/mcp/models/McpMcpServerArtifactView.js

@@ -62,6 +62,7 @@ function McpMcpServerArtifactViewFromJSONTyped(json, ignoreDiscriminator) {
         return json;
     }
     return {
+        'app': json['app'] == null ? undefined : json['app'],
         'artifactStatus': json['artifact_status'],
         'commitTs': json['commit_ts'],
         'contentHashHex': json['content_hash_hex'] == null ? undefined : json['content_hash_hex'],
@@ -69,7 +70,6 @@ function McpMcpServerArtifactViewFromJSONTyped(json, ignoreDiscriminator) {
         'createdBy': json['created_by'],
         'description': json['description'] == null ? undefined : json['description'],
         'displayName': json['display_name'] == null ? undefined : json['display_name'],
-        'extension': json['extension'] == null ? undefined : json['extension'],
         'id': json['id'],
         'identity': json['identity'] == null ? undefined : (0, GatewayArtifactIdentityRevealView_1.GatewayArtifactIdentityRevealViewFromJSON)(json['identity']),
         'isLatest': json['is_latest'],
@@ -96,10 +96,12 @@ function McpMcpServerArtifactViewFromJSONTyped(json, ignoreDiscriminator) {
         'versionOrdinal': json['version_ordinal'],
         'workspaceId': json['workspace_id'],
         'authHeader': json['auth_header'] === undefined ? undefined : json['auth_header'] === null ? null : json['auth_header'],
+        'authOauthProvider': json['auth_oauth_provider'] === undefined ? undefined : json['auth_oauth_provider'] === null ? null : json['auth_oauth_provider'],
         'authScheme': json['auth_scheme'] === undefined ? undefined : json['auth_scheme'] === null ? null : json['auth_scheme'],
         'authSecretId': json['auth_secret_id'] === undefined ? undefined : json['auth_secret_id'] === null ? null : json['auth_secret_id'],
         'connectionState': json['connection_state'] == null ? undefined : (0, McpConnectionState_1.McpConnectionStateFromJSON)(json['connection_state']),
         'endpointUrl': json['endpoint_url'] == null ? undefined : json['endpoint_url'],
+        'isEnabled': json['is_enabled'] == null ? undefined : json['is_enabled'],
         'isSystem': json['is_system'] == null ? undefined : json['is_system'],
         'logoUrl': json['logo_url'] === undefined ? undefined : json['logo_url'] === null ? null : json['logo_url'],
         'protocolVersion': json['protocol_version'] === undefined ? undefined : json['protocol_version'] === null ? null : json['protocol_version'],
@@ -116,6 +118,7 @@ function McpMcpServerArtifactViewToJSONTyped(value, ignoreDiscriminator = false)
         return value;
     }
     return {
+        'app': value['app'],
         'artifact_status': value['artifactStatus'],
         'commit_ts': value['commitTs'],
         'content_hash_hex': value['contentHashHex'],
@@ -123,7 +126,6 @@ function McpMcpServerArtifactViewToJSONTyped(value, ignoreDiscriminator = false)
         'created_by': value['createdBy'],
         'description': value['description'],
         'display_name': value['displayName'],
-        'extension': value['extension'],
         'id': value['id'],
         'identity': (0, GatewayArtifactIdentityRevealView_1.GatewayArtifactIdentityRevealViewToJSON)(value['identity']),
         'is_latest': value['isLatest'],
@@ -150,10 +152,12 @@ function McpMcpServerArtifactViewToJSONTyped(value, ignoreDiscriminator = false)
         'version_ordinal': value['versionOrdinal'],
         'workspace_id': value['workspaceId'],
         'auth_header': value['authHeader'],
+        'auth_oauth_provider': value['authOauthProvider'],
         'auth_scheme': value['authScheme'],
         'auth_secret_id': value['authSecretId'],
         'connection_state': (0, McpConnectionState_1.McpConnectionStateToJSON)(value['connectionState']),
         'endpoint_url': value['endpointUrl'],
+        'is_enabled': value['isEnabled'],
         'is_system': value['isSystem'],
         'logo_url': value['logoUrl'],
         'protocol_version': value['protocolVersion'],

package/dist/raw/mcp/models/McpMcpSessionMessage.d.ts

@@ -82,7 +82,7 @@ export interface McpMcpSessionMessage {
     sessionId: string;
     /**
      * The bare tool name, without the advertised `<server>__` namespace - for example
-     * `registry_search_artifacts`.
+     * `search_artifacts`.
      * @type {string}
      * @memberof McpMcpSessionMessage
      */

package/dist/raw/mcp/models/McpMcpToolArtifactView.d.ts

@@ -17,6 +17,12 @@ import type { RegistryRelationshipsView } from './RegistryRelationshipsView';
  * @interface McpMcpToolArtifactView
  */
 export interface McpMcpToolArtifactView {
+    /**
+     * Value of the `app` field.
+     * @type {string}
+     * @memberof McpMcpToolArtifactView
+     */
+    app?: string;
     /**
      * Value of the `artifact_status` field.
      * @type {string}
@@ -59,12 +65,6 @@ export interface McpMcpToolArtifactView {
      * @memberof McpMcpToolArtifactView
      */
     displayName?: string;
-    /**
-     * Value of the `extension` field.
-     * @type {string}
-     * @memberof McpMcpToolArtifactView
-     */
-    extension?: string;
     /**
      * Kind-prefixed Crockford-base32 handle (`<kind>_<base32>`).
      * @type {string}
@@ -103,19 +103,28 @@ export interface McpMcpToolArtifactView {
      * The Control-Plane OIDC client id this artifact authenticates as
      * (`x-gateway-identity` kinds); absent for every other kind.
      *
-     * **Derived, not stored.** The registry resolves it from the artifact's
-     * `service_principals` row rather than keeping a second copy on the artifact,
-     * so it appears on the create response and on the single-artifact read — the
-     * two paths that make that lookup — and **not** on list, search, or a `PATCH`
-     * response, none of which do a per-row identity read. It is the public half of
-     * the credential pair and is not secret.
+     * **Derived, not stored, and present on the create response only.** The
+     * registry would resolve it from the artifact's `service_principals` row
+     * rather than keep a second copy on the artifact — but only the create path
+     * does that lookup, because it has just provisioned the identity. Every read
+     * shape (single read, list, search, `PATCH`) is built by one constructor that
+     * sets this `None`, so it is absent from all four.
+     *
+     * This block used to name the single-artifact read as a second populated path.
+     * It was never one. Adding it means deciding whether list and search pay a
+     * per-row identity read too; the lookup a future implementation would call is
+     * `registry_server::identity::artifact_principal`. It is the public half of the
+     * credential pair and is not secret.
      * @type {string}
      * @memberof McpMcpToolArtifactView
      */
     oidcClientId?: string;
     /**
      * Canonical owner: the `users.user_id` this artifact belongs to, FK-backed.
-     * Absent when unset (legacy rows / system-plane creates).
+     *
+     * Defaulted to the creating principal, so this is normally set. Absent for a row created
+     * before that default landed, for a system-plane write, and for a principal with no directory
+     * row — a service account or a seed has nothing to own anything with.
      * @type {string}
      * @memberof McpMcpToolArtifactView
      */
@@ -223,13 +232,16 @@ export interface McpMcpToolArtifactView {
      */
     updatedBy: string;
     /**
-     * Optional human version selector (semver); absent when unset.
+     * The free-form label the write set, verbatim. Absent when none was sent, and *not* the name
+     * the version shipped under — that is the release's own `version_label`.
      * @type {string}
      * @memberof McpMcpToolArtifactView
      */
     versionLabel?: string;
     /**
-     * Monotonic version coordinate within the artifact line.
+     * This version's position in its line — the write index, 1-based and dense over versions
+     * *written*. Distinct from a release's `version_ordinal`, which counts versions **shipped**;
+     * the two agree under the default `auto` release policy and diverge under `manual`.
      * @type {number}
      * @memberof McpMcpToolArtifactView
      */

package/dist/raw/mcp/models/McpMcpToolArtifactView.js

@@ -60,6 +60,7 @@ function McpMcpToolArtifactViewFromJSONTyped(json, ignoreDiscriminator) {
         return json;
     }
     return {
+        'app': json['app'] == null ? undefined : json['app'],
         'artifactStatus': json['artifact_status'],
         'commitTs': json['commit_ts'],
         'contentHashHex': json['content_hash_hex'] == null ? undefined : json['content_hash_hex'],
@@ -67,7 +68,6 @@ function McpMcpToolArtifactViewFromJSONTyped(json, ignoreDiscriminator) {
         'createdBy': json['created_by'],
         'description': json['description'] == null ? undefined : json['description'],
         'displayName': json['display_name'] == null ? undefined : json['display_name'],
-        'extension': json['extension'] == null ? undefined : json['extension'],
         'id': json['id'],
         'identity': json['identity'] == null ? undefined : (0, GatewayArtifactIdentityRevealView_1.GatewayArtifactIdentityRevealViewFromJSON)(json['identity']),
         'isLatest': json['is_latest'],
@@ -112,6 +112,7 @@ function McpMcpToolArtifactViewToJSONTyped(value, ignoreDiscriminator = false) {
         return value;
     }
     return {
+        'app': value['app'],
         'artifact_status': value['artifactStatus'],
         'commit_ts': value['commitTs'],
         'content_hash_hex': value['contentHashHex'],
@@ -119,7 +120,6 @@ function McpMcpToolArtifactViewToJSONTyped(value, ignoreDiscriminator = false) {
         'created_by': value['createdBy'],
         'description': value['description'],
         'display_name': value['displayName'],
-        'extension': value['extension'],
         'id': value['id'],
         'identity': (0, GatewayArtifactIdentityRevealView_1.GatewayArtifactIdentityRevealViewToJSON)(value['identity']),
         'is_latest': value['isLatest'],

package/dist/raw/mcp/models/McpServerTestResponse.d.ts

@@ -16,8 +16,19 @@
  */
 export interface McpServerTestResponse {
     /**
-     * `connected` when `initialize` + `tools/list` succeeded under the resolved
-     * credential; `unreachable` when the downstream could not be reached.
+     * One of the `mcp_server` kind's `connection_state` values, and the probe
+     * persists whichever it reports:
+     *
+     * * `connected` — handshake and `tools/list` both succeeded under the
+     *   resolved credential;
+     * * `auth_required` — the downstream answered and refused the credential
+     *   (`401`/`403`), so it is reachable and waiting for a connected account
+     *   or a linked secret;
+     * * `unreachable` — it could not be reached at all, or it handshook and
+     *   then failed to list.
+     *
+     * `auth_required` used to be reported as `unreachable`, which pointed
+     * operators at their network when the problem was a credential.
      * @type {string}
      * @memberof McpServerTestResponse
      */

package/dist/raw/mcp/models/index.d.ts

@@ -3,6 +3,7 @@ export * from './GatewayArtifactBase';
 export * from './GatewayArtifactIdentityRevealView';
 export * from './GatewayPageMeta';
 export * from './McpAggregateServers400Response';
+export * from './McpAggregateServers413Response';
 export * from './McpAggregateServers415Response';
 export * from './McpAggregateServers422Response';
 export * from './McpCallOutcome';

package/dist/raw/mcp/models/index.js

@@ -21,6 +21,7 @@ __exportStar(require("./GatewayArtifactBase"), exports);
 __exportStar(require("./GatewayArtifactIdentityRevealView"), exports);
 __exportStar(require("./GatewayPageMeta"), exports);
 __exportStar(require("./McpAggregateServers400Response"), exports);
+__exportStar(require("./McpAggregateServers413Response"), exports);
 __exportStar(require("./McpAggregateServers415Response"), exports);
 __exportStar(require("./McpAggregateServers422Response"), exports);
 __exportStar(require("./McpCallOutcome"), exports);

package/dist/raw/model/apis/OpenaiApi.d.ts

@@ -42,12 +42,12 @@ export declare class OpenaiApi extends runtime.BaseAPI {
      */
     modelEmbeddingsRequestOpts(requestParameters: ModelEmbeddingsRequest): Promise<runtime.RequestOpts>;
     /**
-     * Proxy an OpenAI embeddings request to the provider that serves the requested `model`. The `model` must be an embedding model — a chat model is rejected. Embeddings are an OpenAI-dialect surface only and are unary (no streaming).
+     * Proxy an OpenAI embeddings request to the provider that serves the requested `model`. The `model` must be an embedding model — a chat model is rejected. This request surface is OpenAI-dialect only and unary (no streaming); which upstream API actually serves it is per-provider and invisible here (Vertex and Bedrock are served by their native embedding APIs). A provider whose upstream publishes no embeddings operation at all, or no embeddings body shape for the resolved model, is rejected.
      * OpenAI-compatible embeddings
      */
     modelEmbeddingsRaw(requestParameters: ModelEmbeddingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Proxy an OpenAI embeddings request to the provider that serves the requested `model`. The `model` must be an embedding model — a chat model is rejected. Embeddings are an OpenAI-dialect surface only and are unary (no streaming).
+     * Proxy an OpenAI embeddings request to the provider that serves the requested `model`. The `model` must be an embedding model — a chat model is rejected. This request surface is OpenAI-dialect only and unary (no streaming); which upstream API actually serves it is per-provider and invisible here (Vertex and Bedrock are served by their native embedding APIs). A provider whose upstream publishes no embeddings operation at all, or no embeddings body shape for the resolved model, is rejected.
      * OpenAI-compatible embeddings
      */
     modelEmbeddings(requestParameters: ModelEmbeddingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -56,12 +56,12 @@ export declare class OpenaiApi extends runtime.BaseAPI {
      */
     modelListModelsRequestOpts(): Promise<runtime.RequestOpts>;
     /**
-     * The OpenAI-compatible model catalog for the caller\'s account.
+     * The OpenAI-compatible model catalog for the caller\'s account: the enabled, live `model` artifacts in the account\'s org workspace, which is the same scope the inference routes resolve a `model` name in. A model registered in a member\'s own workspace is neither listed here nor routable.
      * List available models
      */
     modelListModelsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ModelModelList>>;
     /**
-     * The OpenAI-compatible model catalog for the caller\'s account.
+     * The OpenAI-compatible model catalog for the caller\'s account: the enabled, live `model` artifacts in the account\'s org workspace, which is the same scope the inference routes resolve a `model` name in. A model registered in a member\'s own workspace is neither listed here nor routable.
      * List available models
      */
     modelListModels(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ModelModelList>;

package/dist/raw/model/apis/OpenaiApi.js

@@ -124,7 +124,7 @@ class OpenaiApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Proxy an OpenAI embeddings request to the provider that serves the requested `model`. The `model` must be an embedding model — a chat model is rejected. Embeddings are an OpenAI-dialect surface only and are unary (no streaming).
+     * Proxy an OpenAI embeddings request to the provider that serves the requested `model`. The `model` must be an embedding model — a chat model is rejected. This request surface is OpenAI-dialect only and unary (no streaming); which upstream API actually serves it is per-provider and invisible here (Vertex and Bedrock are served by their native embedding APIs). A provider whose upstream publishes no embeddings operation at all, or no embeddings body shape for the resolved model, is rejected.
      * OpenAI-compatible embeddings
      */
     async modelEmbeddingsRaw(requestParameters, initOverrides) {
@@ -133,7 +133,7 @@ class OpenaiApi extends runtime.BaseAPI {
         return new runtime.VoidApiResponse(response);
     }
     /**
-     * Proxy an OpenAI embeddings request to the provider that serves the requested `model`. The `model` must be an embedding model — a chat model is rejected. Embeddings are an OpenAI-dialect surface only and are unary (no streaming).
+     * Proxy an OpenAI embeddings request to the provider that serves the requested `model`. The `model` must be an embedding model — a chat model is rejected. This request surface is OpenAI-dialect only and unary (no streaming); which upstream API actually serves it is per-provider and invisible here (Vertex and Bedrock are served by their native embedding APIs). A provider whose upstream publishes no embeddings operation at all, or no embeddings body shape for the resolved model, is rejected.
      * OpenAI-compatible embeddings
      */
     async modelEmbeddings(requestParameters, initOverrides) {
@@ -161,7 +161,7 @@ class OpenaiApi extends runtime.BaseAPI {
         };
     }
     /**
-     * The OpenAI-compatible model catalog for the caller\'s account.
+     * The OpenAI-compatible model catalog for the caller\'s account: the enabled, live `model` artifacts in the account\'s org workspace, which is the same scope the inference routes resolve a `model` name in. A model registered in a member\'s own workspace is neither listed here nor routable.
      * List available models
      */
     async modelListModelsRaw(initOverrides) {
@@ -170,7 +170,7 @@ class OpenaiApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => (0, ModelModelList_1.ModelModelListFromJSON)(jsonValue));
     }
     /**
-     * The OpenAI-compatible model catalog for the caller\'s account.
+     * The OpenAI-compatible model catalog for the caller\'s account: the enabled, live `model` artifacts in the account\'s org workspace, which is the same scope the inference routes resolve a `model` name in. A model registered in a member\'s own workspace is neither listed here nor routable.
      * List available models
      */
     async modelListModels(initOverrides) {

package/dist/raw/model/models/ModelListProviders401Response.d.ts

@@ -65,6 +65,7 @@ export declare enum ModelListProviders401ResponseCodeEnum {
     TokenNotYetValid = "token_not_yet_valid",
     TokenRejected = "token_rejected",
     TokenServiceAccountUnbound = "token_service_account_unbound",
+    Unauthorized = "unauthorized",
     UnknownAccount = "unknown_account",
     UnknownKey = "unknown_key",
     UntrustedIssuer = "untrusted_issuer"

package/dist/raw/model/models/ModelListProviders401Response.js

@@ -39,6 +39,7 @@ var ModelListProviders401ResponseCodeEnum;
     ModelListProviders401ResponseCodeEnum["TokenNotYetValid"] = "token_not_yet_valid";
     ModelListProviders401ResponseCodeEnum["TokenRejected"] = "token_rejected";
     ModelListProviders401ResponseCodeEnum["TokenServiceAccountUnbound"] = "token_service_account_unbound";
+    ModelListProviders401ResponseCodeEnum["Unauthorized"] = "unauthorized";
     ModelListProviders401ResponseCodeEnum["UnknownAccount"] = "unknown_account";
     ModelListProviders401ResponseCodeEnum["UnknownKey"] = "unknown_key";
     ModelListProviders401ResponseCodeEnum["UntrustedIssuer"] = "untrusted_issuer";