@barndoor-ai/sdk 2.2.0 → 2.4.0

package/dist/apis/DlpApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/DlpApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/IdentityApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/IdentityApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/LlmGatewayApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/LlmGatewayApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/NotificationApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/NotificationApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/PolicyApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -24,6 +24,7 @@ import { type PolicyRevisionCompareResponse } from '../models/PolicyRevisionComp
 import { type PolicyRevisionDetailResponse } from '../models/PolicyRevisionDetailResponse.js';
 import { type PolicyRuleInput } from '../models/PolicyRuleInput.js';
 import { type PolicySummaryResponse } from '../models/PolicySummaryResponse.js';
+import { type ServerPolicyRevisionsPage } from '../models/ServerPolicyRevisionsPage.js';
 import { type UpdatePolicy } from '../models/UpdatePolicy.js';
 import { type ValidatePolicyRequest } from '../models/ValidatePolicyRequest.js';
 import { type ValidatePolicyResponse } from '../models/ValidatePolicyResponse.js';
@@ -189,6 +190,24 @@ export interface ListPolicyRevisionsRequest {
      */
     limit?: number;
 }
+export interface ListServerPolicyRevisionsRequest {
+    /**
+     * MCP server to scope revisions to
+     */
+    mcpServerId: string;
+    /**
+     * Max items per page
+     */
+    limit?: number;
+    /**
+     * Opaque cursor from a previous response's next_cursor
+     */
+    cursor?: string | null;
+    /**
+     * Inclusive lower bound on revised_at
+     */
+    since?: Date | null;
+}
 export interface UpdatePolicyRequest {
     /**
      *
@@ -447,6 +466,20 @@ export declare class PolicyApi extends runtime.BaseAPI {
      * List Policy Revisions
      */
     listPolicyRevisions(requestParameters: ListPolicyRevisionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PaginationResponsePolicyRevisionSummary>;
+    /**
+     * Creates request options for listServerPolicyRevisions without sending the request
+     */
+    listServerPolicyRevisionsRequestOpts(requestParameters: ListServerPolicyRevisionsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * List policy revisions across every policy scoped to `mcp_server_id` in the caller\'s organization, newest first, cursor-paginated (BCP-4458).  Replaces the client\'s old per-policy revisions fan-out (one call per policy, capped at 20 policies): this is one server-scoped call whose `version_number` values are computed over each policy\'s whole revision history before `since`/`cursor` filtering, so they stay stable across pages.
+     * List Server Policy Revisions
+     */
+    listServerPolicyRevisionsRaw(requestParameters: ListServerPolicyRevisionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ServerPolicyRevisionsPage>>;
+    /**
+     * List policy revisions across every policy scoped to `mcp_server_id` in the caller\'s organization, newest first, cursor-paginated (BCP-4458).  Replaces the client\'s old per-policy revisions fan-out (one call per policy, capped at 20 policies): this is one server-scoped call whose `version_number` values are computed over each policy\'s whole revision history before `since`/`cursor` filtering, so they stay stable across pages.
+     * List Server Policy Revisions
+     */
+    listServerPolicyRevisions(requestParameters: ListServerPolicyRevisionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ServerPolicyRevisionsPage>;
     /**
      * Creates request options for updatePolicy without sending the request
      */

package/dist/apis/PolicyApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -62,6 +62,7 @@ const PolicyRevisionCompareResponse_js_1 = require("../models/PolicyRevisionComp
 const PolicyRevisionDetailResponse_js_1 = require("../models/PolicyRevisionDetailResponse.js");
 const PolicyRuleInput_js_1 = require("../models/PolicyRuleInput.js");
 const PolicySummaryResponse_js_1 = require("../models/PolicySummaryResponse.js");
+const ServerPolicyRevisionsPage_js_1 = require("../models/ServerPolicyRevisionsPage.js");
 const UpdatePolicy_js_1 = require("../models/UpdatePolicy.js");
 const ValidatePolicyRequest_js_1 = require("../models/ValidatePolicyRequest.js");
 const ValidatePolicyResponse_js_1 = require("../models/ValidatePolicyResponse.js");
@@ -1019,6 +1020,73 @@ class PolicyApi extends runtime.BaseAPI {
         const response = await this.listPolicyRevisionsRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for listServerPolicyRevisions without sending the request
+     */
+    async listServerPolicyRevisionsRequestOpts(requestParameters) {
+        if (requestParameters['mcpServerId'] == null) {
+            throw new runtime.RequiredError('mcpServerId', 'Required parameter "mcpServerId" was null or undefined when calling listServerPolicyRevisions().');
+        }
+        const queryParameters = {};
+        if (requestParameters['mcpServerId'] != null) {
+            queryParameters['mcp_server_id'] = requestParameters['mcpServerId'];
+        }
+        if (requestParameters['limit'] != null) {
+            queryParameters['limit'] = requestParameters['limit'];
+        }
+        if (requestParameters['cursor'] != null) {
+            queryParameters['cursor'] = requestParameters['cursor'];
+        }
+        if (requestParameters['since'] != null) {
+            queryParameters['since'] = runtime.serializeDateTime(requestParameters['since']);
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policy-revisions`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * List policy revisions across every policy scoped to `mcp_server_id` in the caller\'s organization, newest first, cursor-paginated (BCP-4458).  Replaces the client\'s old per-policy revisions fan-out (one call per policy, capped at 20 policies): this is one server-scoped call whose `version_number` values are computed over each policy\'s whole revision history before `since`/`cursor` filtering, so they stay stable across pages.
+     * List Server Policy Revisions
+     */
+    async listServerPolicyRevisionsRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.listServerPolicyRevisionsRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, ServerPolicyRevisionsPage_js_1.ServerPolicyRevisionsPageFromJSON)(jsonValue));
+    }
+    /**
+     * List policy revisions across every policy scoped to `mcp_server_id` in the caller\'s organization, newest first, cursor-paginated (BCP-4458).  Replaces the client\'s old per-policy revisions fan-out (one call per policy, capped at 20 policies): this is one server-scoped call whose `version_number` values are computed over each policy\'s whole revision history before `since`/`cursor` filtering, so they stay stable across pages.
+     * List Server Policy Revisions
+     */
+    async listServerPolicyRevisions(requestParameters, initOverrides) {
+        const response = await this.listServerPolicyRevisionsRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for updatePolicy without sending the request
      */

package/dist/apis/RegistryApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -304,12 +304,12 @@ export declare class RegistryApi extends runtime.BaseAPI {
      */
     connectMcpServerRequestOpts(requestParameters: ConnectMcpServerRequest): Promise<runtime.RequestOpts>;
     /**
-     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published.
+     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published, and requires an organization admin.
      * Authenticate an already-registered server
      */
     connectMcpServerRaw(requestParameters: ConnectMcpServerRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ConnectionInitiateResponse>>;
     /**
-     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published.
+     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published, and requires an organization admin.
      * Authenticate an already-registered server
      */
     connectMcpServer(requestParameters: ConnectMcpServerRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ConnectionInitiateResponse>;

package/dist/apis/RegistryApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -120,7 +120,7 @@ class RegistryApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published.
+     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published, and requires an organization admin.
      * Authenticate an already-registered server
      */
     async connectMcpServerRaw(requestParameters, initOverrides) {
@@ -129,7 +129,7 @@ class RegistryApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => (0, ConnectionInitiateResponse_js_1.ConnectionInitiateResponseFromJSON)(jsonValue));
     }
     /**
-     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published.
+     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published, and requires an organization admin.
      * Authenticate an already-registered server
      */
     async connectMcpServer(requestParameters, initOverrides) {

package/dist/apis/SystemManagementApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/SystemManagementApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/DlpApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/DlpApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/IdentityApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/IdentityApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/LlmGatewayApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/LlmGatewayApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/NotificationApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/NotificationApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/PolicyApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -24,6 +24,7 @@ import { type PolicyRevisionCompareResponse } from '../models/PolicyRevisionComp
 import { type PolicyRevisionDetailResponse } from '../models/PolicyRevisionDetailResponse.js';
 import { type PolicyRuleInput } from '../models/PolicyRuleInput.js';
 import { type PolicySummaryResponse } from '../models/PolicySummaryResponse.js';
+import { type ServerPolicyRevisionsPage } from '../models/ServerPolicyRevisionsPage.js';
 import { type UpdatePolicy } from '../models/UpdatePolicy.js';
 import { type ValidatePolicyRequest } from '../models/ValidatePolicyRequest.js';
 import { type ValidatePolicyResponse } from '../models/ValidatePolicyResponse.js';
@@ -189,6 +190,24 @@ export interface ListPolicyRevisionsRequest {
      */
     limit?: number;
 }
+export interface ListServerPolicyRevisionsRequest {
+    /**
+     * MCP server to scope revisions to
+     */
+    mcpServerId: string;
+    /**
+     * Max items per page
+     */
+    limit?: number;
+    /**
+     * Opaque cursor from a previous response's next_cursor
+     */
+    cursor?: string | null;
+    /**
+     * Inclusive lower bound on revised_at
+     */
+    since?: Date | null;
+}
 export interface UpdatePolicyRequest {
     /**
      *
@@ -447,6 +466,20 @@ export declare class PolicyApi extends runtime.BaseAPI {
      * List Policy Revisions
      */
     listPolicyRevisions(requestParameters: ListPolicyRevisionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PaginationResponsePolicyRevisionSummary>;
+    /**
+     * Creates request options for listServerPolicyRevisions without sending the request
+     */
+    listServerPolicyRevisionsRequestOpts(requestParameters: ListServerPolicyRevisionsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * List policy revisions across every policy scoped to `mcp_server_id` in the caller\'s organization, newest first, cursor-paginated (BCP-4458).  Replaces the client\'s old per-policy revisions fan-out (one call per policy, capped at 20 policies): this is one server-scoped call whose `version_number` values are computed over each policy\'s whole revision history before `since`/`cursor` filtering, so they stay stable across pages.
+     * List Server Policy Revisions
+     */
+    listServerPolicyRevisionsRaw(requestParameters: ListServerPolicyRevisionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ServerPolicyRevisionsPage>>;
+    /**
+     * List policy revisions across every policy scoped to `mcp_server_id` in the caller\'s organization, newest first, cursor-paginated (BCP-4458).  Replaces the client\'s old per-policy revisions fan-out (one call per policy, capped at 20 policies): this is one server-scoped call whose `version_number` values are computed over each policy\'s whole revision history before `since`/`cursor` filtering, so they stay stable across pages.
+     * List Server Policy Revisions
+     */
+    listServerPolicyRevisions(requestParameters: ListServerPolicyRevisionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ServerPolicyRevisionsPage>;
     /**
      * Creates request options for updatePolicy without sending the request
      */

package/dist/esm/apis/PolicyApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -26,6 +26,7 @@ import { PolicyRevisionCompareResponseFromJSON, } from '../models/PolicyRevision
 import { PolicyRevisionDetailResponseFromJSON, } from '../models/PolicyRevisionDetailResponse.js';
 import { PolicyRuleInputToJSON, } from '../models/PolicyRuleInput.js';
 import { PolicySummaryResponseFromJSON, } from '../models/PolicySummaryResponse.js';
+import { ServerPolicyRevisionsPageFromJSON, } from '../models/ServerPolicyRevisionsPage.js';
 import { UpdatePolicyToJSON, } from '../models/UpdatePolicy.js';
 import { ValidatePolicyRequestToJSON, } from '../models/ValidatePolicyRequest.js';
 import { ValidatePolicyResponseFromJSON, } from '../models/ValidatePolicyResponse.js';
@@ -983,6 +984,73 @@ export class PolicyApi extends runtime.BaseAPI {
         const response = await this.listPolicyRevisionsRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for listServerPolicyRevisions without sending the request
+     */
+    async listServerPolicyRevisionsRequestOpts(requestParameters) {
+        if (requestParameters['mcpServerId'] == null) {
+            throw new runtime.RequiredError('mcpServerId', 'Required parameter "mcpServerId" was null or undefined when calling listServerPolicyRevisions().');
+        }
+        const queryParameters = {};
+        if (requestParameters['mcpServerId'] != null) {
+            queryParameters['mcp_server_id'] = requestParameters['mcpServerId'];
+        }
+        if (requestParameters['limit'] != null) {
+            queryParameters['limit'] = requestParameters['limit'];
+        }
+        if (requestParameters['cursor'] != null) {
+            queryParameters['cursor'] = requestParameters['cursor'];
+        }
+        if (requestParameters['since'] != null) {
+            queryParameters['since'] = runtime.serializeDateTime(requestParameters['since']);
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policy-revisions`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * List policy revisions across every policy scoped to `mcp_server_id` in the caller\'s organization, newest first, cursor-paginated (BCP-4458).  Replaces the client\'s old per-policy revisions fan-out (one call per policy, capped at 20 policies): this is one server-scoped call whose `version_number` values are computed over each policy\'s whole revision history before `since`/`cursor` filtering, so they stay stable across pages.
+     * List Server Policy Revisions
+     */
+    async listServerPolicyRevisionsRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.listServerPolicyRevisionsRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => ServerPolicyRevisionsPageFromJSON(jsonValue));
+    }
+    /**
+     * List policy revisions across every policy scoped to `mcp_server_id` in the caller\'s organization, newest first, cursor-paginated (BCP-4458).  Replaces the client\'s old per-policy revisions fan-out (one call per policy, capped at 20 policies): this is one server-scoped call whose `version_number` values are computed over each policy\'s whole revision history before `since`/`cursor` filtering, so they stay stable across pages.
+     * List Server Policy Revisions
+     */
+    async listServerPolicyRevisions(requestParameters, initOverrides) {
+        const response = await this.listServerPolicyRevisionsRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for updatePolicy without sending the request
      */

package/dist/esm/apis/RegistryApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -304,12 +304,12 @@ export declare class RegistryApi extends runtime.BaseAPI {
      */
     connectMcpServerRequestOpts(requestParameters: ConnectMcpServerRequest): Promise<runtime.RequestOpts>;
     /**
-     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published.
+     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published, and requires an organization admin.
      * Authenticate an already-registered server
      */
     connectMcpServerRaw(requestParameters: ConnectMcpServerRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ConnectionInitiateResponse>>;
     /**
-     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published.
+     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published, and requires an organization admin.
      * Authenticate an already-registered server
      */
     connectMcpServer(requestParameters: ConnectMcpServerRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ConnectionInitiateResponse>;

package/dist/esm/apis/RegistryApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -84,7 +84,7 @@ export class RegistryApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published.
+     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published, and requires an organization admin.
      * Authenticate an already-registered server
      */
     async connectMcpServerRaw(requestParameters, initOverrides) {
@@ -93,7 +93,7 @@ export class RegistryApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => ConnectionInitiateResponseFromJSON(jsonValue));
     }
     /**
-     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published.
+     * Authenticates the caller against an MCP server that is ALREADY registered in this organization. It does not add a server: a `server_id` that is not yet registered returns 404, and a catalog (directory) id is never valid here — that ordering is the usual reason this endpoint 404s. Registering a server is not available as a tool; an operator adds it in the console first.  For OAuth providers it returns an authorization URL for the user to visit. For non-OAuth providers (api_key, bearer_token, basic_auth, generic) credentials go in the request body — prefer a server registered with managed credentials so no secret passes through the caller at all, and never solicit one in a chat transcript.  `as_service: true` connects the tenant\'s shared service account rather than the calling user, which is what a server needs before it can be published, and requires an organization admin.
      * Authenticate an already-registered server
      */
     async connectMcpServer(requestParameters, initOverrides) {

package/dist/esm/apis/SystemManagementApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/apis/SystemManagementApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.2.0
+ * The version of the OpenAPI document: 2.4.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).