@bodhiapp/ts-client 0.1.36 → 0.1.38

package/dist/openapi-typescript/openapi-schema.d.ts

@@ -252,7 +252,7 @@ export interface paths {
         put?: never;
         /**
          * Create Access Request
-         * @description Create an access request for an app to access user resources. Always creates a draft for user review. Unauthenticated endpoint.
+         * @description Create an access request for an app to access user resources. Always creates a draft for user review. Anonymous, except `exchange: true` requires the app's current token in the Authorization header.
          */
         post: operations["createAccessRequest"];
         delete?: never;
@@ -1339,6 +1339,7 @@ export interface components {
             mcps_info?: components["schemas"]["McpServerReviewInfo"][];
             /** @description Canonical Keycloak authorize endpoint the review page validates the app-supplied `auth_url` against. */
             auth_endpoint: string;
+            previous_grant?: null | components["schemas"]["PreviousGrantInfo"];
         };
         /** @example {
          *       "access_request_scope": "scope_access_request:550e8400-e29b-41d4-a716-446655440000",
@@ -1469,8 +1470,8 @@ export interface components {
             api_format: components["schemas"]["ApiFormat"];
             base_url: string;
             has_api_key: boolean;
-            /** @description Models available through this alias with full provider metadata */
-            models: components["schemas"]["ApiModel"][];
+            /** @description Models available through this alias with full provider metadata and per-model `access` */
+            models: components["schemas"]["ApiModelResponse"][];
             prefix?: string | null;
             forward_all_with_prefix: boolean;
             extra_headers?: unknown;
@@ -1558,6 +1559,11 @@ export interface components {
             /** @enum {string} */
             api_format: "llm_liberty_oauth";
         });
+        /** @description `ApiModel` plus the request-scoped `access` verdict (kept off the stored shape). */
+        ApiModelResponse: components["schemas"]["ApiModel"] & {
+            /** @description Whether the current principal may run inference on this model. */
+            access: boolean;
+        };
         /** @description DB-storable `Vec<ApiModel>` — stored as JSON binary in SeaORM columns. */
         ApiModelVec: components["schemas"]["ApiModel"][];
         /** @enum {string} */
@@ -1819,6 +1825,9 @@ export interface components {
             requested_role: components["schemas"]["UserScope"];
             /** @description Resources requested (tools, etc.) */
             requested: components["schemas"]["RequestedResources"];
+            /** @description Upgrade the app's current token: the caller must present it in the `Authorization`
+             *     header; the server derives the prior request from the token, never the body. */
+            exchange?: boolean;
         };
         /** @example {
          *       "id": "550e8400-e29b-41d4-a716-446655440000",
@@ -2064,7 +2073,7 @@ export interface components {
             mcp_servers: components["schemas"]["McpServerResponse"][];
         };
         ListMcpsResponse: {
-            mcps: components["schemas"]["Mcp"][];
+            mcps: components["schemas"]["McpResponse"][];
         };
         /** @description List users query parameters. Intentionally omits sort fields (unlike PaginationSortParams)
          *     because user listing is fetched from the auth service which handles its own ordering. */
@@ -2318,6 +2327,11 @@ export interface components {
             /** @description OAuth token ID to link to this MCP instance (set after OAuth flow). */
             oauth_token_id?: string | null;
         };
+        /** @description `Mcp` plus the request-scoped `access` verdict (kept off the domain entity). */
+        McpResponse: components["schemas"]["Mcp"] & {
+            /** @description Whether the current principal may invoke (connect to) this MCP. */
+            access: boolean;
+        };
         /** @description Admin-managed MCP server registry entry that users create instances of. */
         McpServer: {
             id: string;
@@ -2396,6 +2410,8 @@ export interface components {
             repo: string;
             filename: string;
             snapshot: string;
+            /** @description Whether the current principal may run inference on this model. */
+            access: boolean;
             /**
              * Format: int64
              * @description Local GGUF file size in bytes (present when the file is resolvable on disk)
@@ -2463,6 +2479,8 @@ export interface components {
             source: string;
             id: string;
             alias: string;
+            /** @description Whether the current principal may run inference on this router. */
+            access: boolean;
             targets: components["schemas"]["RouterTarget"][];
             strategy: components["schemas"]["RoutingStrategyConfig"];
             /** Format: date-time */
@@ -2646,6 +2664,10 @@ export interface components {
              */
             message: string;
         };
+        PreviousGrantInfo: {
+            approved_role: components["schemas"]["UserScope"];
+            approved: components["schemas"]["ApprovedResources"];
+        };
         QueueStatusResponse: {
             /** @description Queue status ("idle" or "processing") */
             status: string;
@@ -3076,6 +3098,8 @@ export interface components {
             filename: string;
             snapshot: string;
             source: string;
+            /** @description Whether the current principal may run inference on this model. */
+            access: boolean;
             model_params: {
                 [key: string]: unknown;
             };
@@ -3951,7 +3975,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Mcp"];
+                    "application/json": components["schemas"]["McpResponse"];
                 };
             };
             /** @description Invalid request parameters */
@@ -4596,7 +4620,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Mcp"];
+                    "application/json": components["schemas"]["McpResponse"];
                 };
             };
             /** @description Invalid request parameters */
@@ -5622,7 +5646,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Mcp"];
+                    "application/json": components["schemas"]["McpResponse"];
                 };
             };
             /** @description Invalid request parameters */
@@ -5692,7 +5716,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Mcp"];
+                    "application/json": components["schemas"]["McpResponse"];
                 };
             };
             /** @description Invalid request parameters */

package/dist/openapi-typescript/openapi-schema.ts

@@ -253,7 +253,7 @@ export interface paths {
         put?: never;
         /**
          * Create Access Request
-         * @description Create an access request for an app to access user resources. Always creates a draft for user review. Unauthenticated endpoint.
+         * @description Create an access request for an app to access user resources. Always creates a draft for user review. Anonymous, except `exchange: true` requires the app's current token in the Authorization header.
          */
         post: operations["createAccessRequest"];
         delete?: never;
@@ -1340,6 +1340,7 @@ export interface components {
             mcps_info?: components["schemas"]["McpServerReviewInfo"][];
             /** @description Canonical Keycloak authorize endpoint the review page validates the app-supplied `auth_url` against. */
             auth_endpoint: string;
+            previous_grant?: null | components["schemas"]["PreviousGrantInfo"];
         };
         /** @example {
          *       "access_request_scope": "scope_access_request:550e8400-e29b-41d4-a716-446655440000",
@@ -1470,8 +1471,8 @@ export interface components {
             api_format: components["schemas"]["ApiFormat"];
             base_url: string;
             has_api_key: boolean;
-            /** @description Models available through this alias with full provider metadata */
-            models: components["schemas"]["ApiModel"][];
+            /** @description Models available through this alias with full provider metadata and per-model `access` */
+            models: components["schemas"]["ApiModelResponse"][];
             prefix?: string | null;
             forward_all_with_prefix: boolean;
             extra_headers?: unknown;
@@ -1559,6 +1560,11 @@ export interface components {
             /** @enum {string} */
             api_format: "llm_liberty_oauth";
         });
+        /** @description `ApiModel` plus the request-scoped `access` verdict (kept off the stored shape). */
+        ApiModelResponse: components["schemas"]["ApiModel"] & {
+            /** @description Whether the current principal may run inference on this model. */
+            access: boolean;
+        };
         /** @description DB-storable `Vec<ApiModel>` — stored as JSON binary in SeaORM columns. */
         ApiModelVec: components["schemas"]["ApiModel"][];
         /** @enum {string} */
@@ -1820,6 +1826,9 @@ export interface components {
             requested_role: components["schemas"]["UserScope"];
             /** @description Resources requested (tools, etc.) */
             requested: components["schemas"]["RequestedResources"];
+            /** @description Upgrade the app's current token: the caller must present it in the `Authorization`
+             *     header; the server derives the prior request from the token, never the body. */
+            exchange?: boolean;
         };
         /** @example {
          *       "id": "550e8400-e29b-41d4-a716-446655440000",
@@ -2065,7 +2074,7 @@ export interface components {
             mcp_servers: components["schemas"]["McpServerResponse"][];
         };
         ListMcpsResponse: {
-            mcps: components["schemas"]["Mcp"][];
+            mcps: components["schemas"]["McpResponse"][];
         };
         /** @description List users query parameters. Intentionally omits sort fields (unlike PaginationSortParams)
          *     because user listing is fetched from the auth service which handles its own ordering. */
@@ -2319,6 +2328,11 @@ export interface components {
             /** @description OAuth token ID to link to this MCP instance (set after OAuth flow). */
             oauth_token_id?: string | null;
         };
+        /** @description `Mcp` plus the request-scoped `access` verdict (kept off the domain entity). */
+        McpResponse: components["schemas"]["Mcp"] & {
+            /** @description Whether the current principal may invoke (connect to) this MCP. */
+            access: boolean;
+        };
         /** @description Admin-managed MCP server registry entry that users create instances of. */
         McpServer: {
             id: string;
@@ -2397,6 +2411,8 @@ export interface components {
             repo: string;
             filename: string;
             snapshot: string;
+            /** @description Whether the current principal may run inference on this model. */
+            access: boolean;
             /**
              * Format: int64
              * @description Local GGUF file size in bytes (present when the file is resolvable on disk)
@@ -2464,6 +2480,8 @@ export interface components {
             source: string;
             id: string;
             alias: string;
+            /** @description Whether the current principal may run inference on this router. */
+            access: boolean;
             targets: components["schemas"]["RouterTarget"][];
             strategy: components["schemas"]["RoutingStrategyConfig"];
             /** Format: date-time */
@@ -2647,6 +2665,10 @@ export interface components {
              */
             message: string;
         };
+        PreviousGrantInfo: {
+            approved_role: components["schemas"]["UserScope"];
+            approved: components["schemas"]["ApprovedResources"];
+        };
         QueueStatusResponse: {
             /** @description Queue status ("idle" or "processing") */
             status: string;
@@ -3077,6 +3099,8 @@ export interface components {
             filename: string;
             snapshot: string;
             source: string;
+            /** @description Whether the current principal may run inference on this model. */
+            access: boolean;
             model_params: {
                 [key: string]: unknown;
             };
@@ -3952,7 +3976,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Mcp"];
+                    "application/json": components["schemas"]["McpResponse"];
                 };
             };
             /** @description Invalid request parameters */
@@ -4597,7 +4621,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Mcp"];
+                    "application/json": components["schemas"]["McpResponse"];
                 };
             };
             /** @description Invalid request parameters */
@@ -5623,7 +5647,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Mcp"];
+                    "application/json": components["schemas"]["McpResponse"];
                 };
             };
             /** @description Invalid request parameters */
@@ -5693,7 +5717,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Mcp"];
+                    "application/json": components["schemas"]["McpResponse"];
                 };
             };
             /** @description Invalid request parameters */

package/dist/types/types.gen.d.ts

@@ -24,6 +24,7 @@ export type AccessRequestReviewResponse = {
      * Canonical Keycloak authorize endpoint the review page validates the app-supplied `auth_url` against.
      */
     auth_endpoint: string;
+    previous_grant?: null | PreviousGrantInfo;
 };
 export type AccessRequestStatusResponse = {
     id: string;
@@ -152,9 +153,9 @@ export type ApiAliasResponse = {
     base_url: string;
     has_api_key: boolean;
     /**
-     * Models available through this alias with full provider metadata
+     * Models available through this alias with full provider metadata and per-model `access`
      */
-    models: Array<ApiModel>;
+    models: Array<ApiModelResponse>;
     prefix?: string | null;
     forward_all_with_prefix: boolean;
     extra_headers?: unknown;
@@ -218,6 +219,15 @@ export type ApiModelRequest = (DefaultApiModelRequest & {
 }) | (LlmLibertyApiModelRequest & {
     api_format: 'llm_liberty_oauth';
 });
+/**
+ * `ApiModel` plus the request-scoped `access` verdict (kept off the stored shape).
+ */
+export type ApiModelResponse = ApiModel & {
+    /**
+     * Whether the current principal may run inference on this model.
+     */
+    access: boolean;
+};
 /**
  * DB-storable `Vec<ApiModel>` — stored as JSON binary in SeaORM columns.
  */
@@ -417,6 +427,11 @@ export type CreateAccessRequest = {
      * Resources requested (tools, etc.)
      */
     requested: RequestedResources;
+    /**
+     * Upgrade the app's current token: the caller must present it in the `Authorization`
+     * header; the server derives the prior request from the token, never the body.
+     */
+    exchange?: boolean;
 };
 export type CreateAccessRequestResponse = {
     id: string;
@@ -675,7 +690,7 @@ export type ListMcpServersResponse = {
     mcp_servers: Array<McpServerResponse>;
 };
 export type ListMcpsResponse = {
-    mcps: Array<Mcp>;
+    mcps: Array<McpResponse>;
 };
 /**
  * List users query parameters. Intentionally omits sort fields (unlike PaginationSortParams)
@@ -960,6 +975,15 @@ export type McpRequest = {
      */
     oauth_token_id?: string | null;
 };
+/**
+ * `Mcp` plus the request-scoped `access` verdict (kept off the domain entity).
+ */
+export type McpResponse = Mcp & {
+    /**
+     * Whether the current principal may invoke (connect to) this MCP.
+     */
+    access: boolean;
+};
 /**
  * Admin-managed MCP server registry entry that users create instances of.
  */
@@ -1050,6 +1074,10 @@ export type ModelAliasResponse = {
     repo: string;
     filename: string;
     snapshot: string;
+    /**
+     * Whether the current principal may run inference on this model.
+     */
+    access: boolean;
     /**
      * Local GGUF file size in bytes (present when the file is resolvable on disk)
      */
@@ -1125,6 +1153,10 @@ export type ModelRouterResponse = {
     source: string;
     id: string;
     alias: string;
+    /**
+     * Whether the current principal may run inference on this router.
+     */
+    access: boolean;
     targets: Array<RouterTarget>;
     strategy: RoutingStrategyConfig;
     created_at: string;
@@ -1286,6 +1318,10 @@ export type PingResponse = {
      */
     message: string;
 };
+export type PreviousGrantInfo = {
+    approved_role: UserScope;
+    approved: ApprovedResources;
+};
 export type QueueStatusResponse = {
     /**
      * Queue status ("idle" or "processing")
@@ -1694,6 +1730,10 @@ export type UserAliasResponse = {
     filename: string;
     snapshot: string;
     source: string;
+    /**
+     * Whether the current principal may run inference on this model.
+     */
+    access: boolean;
     model_params: {};
     request_params: OaiRequestParams;
     context_params: Array<string>;
@@ -2257,7 +2297,7 @@ export type AppsGetMcpResponses = {
     /**
      * MCP instance
      */
-    200: Mcp;
+    200: McpResponse;
 };
 export type AppsGetMcpResponse = AppsGetMcpResponses[keyof AppsGetMcpResponses];
 export type McpProxyData = {
@@ -2601,7 +2641,7 @@ export type CreateMcpResponses = {
     /**
      * MCP created
      */
-    201: Mcp;
+    201: McpResponse;
 };
 export type CreateMcpResponse = CreateMcpResponses[keyof CreateMcpResponses];
 export type ListMcpAuthConfigsData = {
@@ -3250,7 +3290,7 @@ export type GetMcpResponses = {
     /**
      * MCP instance
      */
-    200: Mcp;
+    200: McpResponse;
 };
 export type GetMcpResponse = GetMcpResponses[keyof GetMcpResponses];
 export type UpdateMcpData = {
@@ -3291,7 +3331,7 @@ export type UpdateMcpResponses = {
     /**
      * MCP updated
      */
-    200: Mcp;
+    200: McpResponse;
 };
 export type UpdateMcpResponse = UpdateMcpResponses[keyof UpdateMcpResponses];
 export type ListAllModelsData = {

package/dist/types/types.gen.ts

@@ -27,6 +27,7 @@ export type AccessRequestReviewResponse = {
      * Canonical Keycloak authorize endpoint the review page validates the app-supplied `auth_url` against.
      */
     auth_endpoint: string;
+    previous_grant?: null | PreviousGrantInfo;
 };
 
 export type AccessRequestStatusResponse = {
@@ -163,9 +164,9 @@ export type ApiAliasResponse = {
     base_url: string;
     has_api_key: boolean;
     /**
-     * Models available through this alias with full provider metadata
+     * Models available through this alias with full provider metadata and per-model `access`
      */
-    models: Array<ApiModel>;
+    models: Array<ApiModelResponse>;
     prefix?: string | null;
     forward_all_with_prefix: boolean;
     extra_headers?: unknown;
@@ -236,6 +237,16 @@ export type ApiModelRequest = (DefaultApiModelRequest & {
     api_format: 'llm_liberty_oauth';
 });
 
+/**
+ * `ApiModel` plus the request-scoped `access` verdict (kept off the stored shape).
+ */
+export type ApiModelResponse = ApiModel & {
+    /**
+     * Whether the current principal may run inference on this model.
+     */
+    access: boolean;
+};
+
 /**
  * DB-storable `Vec<ApiModel>` — stored as JSON binary in SeaORM columns.
  */
@@ -455,6 +466,11 @@ export type CreateAccessRequest = {
      * Resources requested (tools, etc.)
      */
     requested: RequestedResources;
+    /**
+     * Upgrade the app's current token: the caller must present it in the `Authorization`
+     * header; the server derives the prior request from the token, never the body.
+     */
+    exchange?: boolean;
 };
 
 export type CreateAccessRequestResponse = {
@@ -737,7 +753,7 @@ export type ListMcpServersResponse = {
 };
 
 export type ListMcpsResponse = {
-    mcps: Array<Mcp>;
+    mcps: Array<McpResponse>;
 };
 
 /**
@@ -1048,6 +1064,16 @@ export type McpRequest = {
     oauth_token_id?: string | null;
 };
 
+/**
+ * `Mcp` plus the request-scoped `access` verdict (kept off the domain entity).
+ */
+export type McpResponse = Mcp & {
+    /**
+     * Whether the current principal may invoke (connect to) this MCP.
+     */
+    access: boolean;
+};
+
 /**
  * Admin-managed MCP server registry entry that users create instances of.
  */
@@ -1145,6 +1171,10 @@ export type ModelAliasResponse = {
     repo: string;
     filename: string;
     snapshot: string;
+    /**
+     * Whether the current principal may run inference on this model.
+     */
+    access: boolean;
     /**
      * Local GGUF file size in bytes (present when the file is resolvable on disk)
      */
@@ -1227,6 +1257,10 @@ export type ModelRouterResponse = {
     source: string;
     id: string;
     alias: string;
+    /**
+     * Whether the current principal may run inference on this router.
+     */
+    access: boolean;
     targets: Array<RouterTarget>;
     strategy: RoutingStrategyConfig;
     created_at: string;
@@ -1407,6 +1441,11 @@ export type PingResponse = {
     message: string;
 };
 
+export type PreviousGrantInfo = {
+    approved_role: UserScope;
+    approved: ApprovedResources;
+};
+
 export type QueueStatusResponse = {
     /**
      * Queue status ("idle" or "processing")
@@ -1857,6 +1896,10 @@ export type UserAliasResponse = {
     filename: string;
     snapshot: string;
     source: string;
+    /**
+     * Whether the current principal may run inference on this model.
+     */
+    access: boolean;
     model_params: {};
     request_params: OaiRequestParams;
     context_params: Array<string>;
@@ -2482,7 +2525,7 @@ export type AppsGetMcpResponses = {
     /**
      * MCP instance
      */
-    200: Mcp;
+    200: McpResponse;
 };
 
 export type AppsGetMcpResponse = AppsGetMcpResponses[keyof AppsGetMcpResponses];
@@ -2875,7 +2918,7 @@ export type CreateMcpResponses = {
     /**
      * MCP created
      */
-    201: Mcp;
+    201: McpResponse;
 };
 
 export type CreateMcpResponse = CreateMcpResponses[keyof CreateMcpResponses];
@@ -3609,7 +3652,7 @@ export type GetMcpResponses = {
     /**
      * MCP instance
      */
-    200: Mcp;
+    200: McpResponse;
 };
 
 export type GetMcpResponse = GetMcpResponses[keyof GetMcpResponses];
@@ -3655,7 +3698,7 @@ export type UpdateMcpResponses = {
     /**
      * MCP updated
      */
-    200: Mcp;
+    200: McpResponse;
 };
 
 export type UpdateMcpResponse = UpdateMcpResponses[keyof UpdateMcpResponses];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bodhiapp/ts-client",
-  "version": "0.1.36",
+  "version": "0.1.38",
   "description": "TypeScript types for Bodhi API",
   "main": "dist/index.js",
   "module": "dist/index.mjs",