@purveyors/sdk 0.9.0 → 0.11.0

package/dist/index.d.ts

@@ -434,6 +434,377 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/cli-auth/requests": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Create a short-lived PKCE-bound CLI login request */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": {
+                        machineName: string;
+                        codeChallenge: string;
+                    };
+                };
+            };
+            responses: {
+                /** @description CLI login request created */
+                201: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            requestToken: string;
+                            /** Format: uuid */
+                            requestId: string;
+                            /** Format: uri */
+                            verificationUri: string;
+                            /** Format: date-time */
+                            expiresAt: string;
+                            intervalSeconds: number;
+                        };
+                    };
+                };
+                /** @description Invalid CLI authentication request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Authorization pending or request conflict */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Request expired or already consumed */
+                410: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description CLI authentication unavailable */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/cli-auth/inspect": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Inspect a signed CLI login request before showing consent */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": {
+                        requestToken: string;
+                    };
+                };
+            };
+            responses: {
+                /** @description CLI login request details */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** Format: uuid */
+                            requestId: string;
+                            machineName: string;
+                            /** Format: date-time */
+                            expiresAt: string;
+                            scopes: ("catalog:read" | "inventory:read" | "inventory:write" | "roast:read" | "roast:write" | "sales:read" | "sales:write" | "tasting:read" | "tasting:write")[];
+                        };
+                    };
+                };
+                /** @description Invalid CLI authentication request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Authorization pending or request conflict */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Request expired or already consumed */
+                410: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description CLI authentication unavailable */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/cli-auth/approve": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Approve a CLI login request for the signed-in user */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": {
+                        requestToken: string;
+                    };
+                };
+            };
+            responses: {
+                /** @description CLI login request approved */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** Format: uuid */
+                            requestId: string;
+                            /** @enum {boolean} */
+                            approved: true;
+                        };
+                    };
+                };
+                /** @description Invalid CLI authentication request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Authentication required */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Insufficient entitlement (plan or role) */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Authorization pending or request conflict */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Request expired or already consumed */
+                410: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description CLI authentication unavailable */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/cli-auth/token": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Exchange an approved request and PKCE verifier for a CLI API key */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": {
+                        requestToken: string;
+                        codeVerifier: string;
+                    };
+                };
+            };
+            responses: {
+                /** @description Machine key atomically replaced; raw key returned once */
+                201: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            apiKey: string;
+                            key: {
+                                /** Format: uuid */
+                                id: string;
+                                name: string;
+                                /** Format: date-time */
+                                createdAt: string | null;
+                                /** Format: date-time */
+                                lastUsedAt: string | null;
+                                isActive: boolean;
+                                scopes: string[];
+                            };
+                            user: {
+                                id: string;
+                                email: string;
+                                role: string;
+                            };
+                        };
+                    };
+                };
+                /** @description Invalid CLI authentication request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Authorization pending or request conflict */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Request expired or already consumed */
+                410: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description CLI authentication unavailable */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/catalog/access": {
         parameters: {
             query?: never;
@@ -2876,6 +3247,94 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/roasts/classify": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Classify an imported roast
+         * @description Match Artisan roast metadata to one of the supplied owner inventory rows. Requires member entitlement and either an authenticated session or an owner-bound API key carrying the exact roast:read scope.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": components["schemas"]["RoastClassificationRequest"];
+                };
+            };
+            responses: {
+                /** @description Best inventory match, or null when no reasonable match exists */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["RoastClassificationResponse"];
+                    };
+                };
+                /** @description Invalid request body or input cap exceeded */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Authentication required */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Insufficient entitlement (plan or role) */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description API or upstream classification rate limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                /** @description Classification provider is unavailable or not configured */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/sales": {
         parameters: {
             query?: never;
@@ -5214,6 +5673,35 @@ interface components {
                 };
             };
         };
+        RoastClassificationResponse: {
+            match: {
+                inventoryId: number;
+                coffeeName: string;
+                confidence: number;
+                reasoning: string;
+            } | null;
+            warning?: string;
+        };
+        RoastClassificationRequest: {
+            alogMetadata: {
+                title: string;
+                filename?: string;
+                roastertype?: string;
+                beans?: string;
+                roastingnotes?: string;
+                weight?: [
+                    number,
+                    number,
+                    string
+                ];
+            };
+            inventory: {
+                id: number;
+                coffee_name: string;
+                origin?: string;
+                processing?: string;
+            }[];
+        };
         SaleResource: {
             id: number;
             green_coffee_inv_id: number;
@@ -5473,6 +5961,8 @@ type InventoryUpdateRequest = NonNullable<paths["/v1/inventory/{id}"]["patch"]["
 type RoastListQuery = NonNullable<paths["/v1/roasts"]["get"]["parameters"]["query"]>;
 /** Query parameters for {@link ParchmentClient.roasts.get}. */
 type RoastGetQuery = NonNullable<paths["/v1/roasts/{id}"]["get"]["parameters"]["query"]>;
+/** Request body for {@link ParchmentClient.roasts.classify}. */
+type RoastClassificationRequest = NonNullable<paths["/v1/roasts/classify"]["post"]["requestBody"]>["content"]["application/json"];
 /** Request body for {@link ParchmentClient.roasts.create}. */
 type RoastCreateRequest = NonNullable<paths["/v1/roasts"]["post"]["requestBody"]>["content"]["application/json"];
 /** Request body for {@link ParchmentClient.roasts.update}. */
@@ -5493,6 +5983,10 @@ type TastingGetQuery = NonNullable<paths["/v1/tasting/{catalogId}"]["get"]["para
 type TastingRateRequest = NonNullable<paths["/v1/tasting/inventory/{inventoryId}"]["put"]["requestBody"]>["content"]["application/json"];
 /** Request body for {@link ParchmentClient.apiKeys.create}. */
 type ApiKeyCreateRequest = NonNullable<paths["/v1/api-keys"]["post"]["requestBody"]>["content"]["application/json"];
+type CliAuthRequestCreate = NonNullable<paths["/v1/cli-auth/requests"]["post"]["requestBody"]>["content"]["application/json"];
+type CliAuthInspectRequest = NonNullable<paths["/v1/cli-auth/inspect"]["post"]["requestBody"]>["content"]["application/json"];
+type CliAuthApproveRequest = NonNullable<paths["/v1/cli-auth/approve"]["post"]["requestBody"]>["content"]["application/json"];
+type CliAuthExchangeRequest = NonNullable<paths["/v1/cli-auth/token"]["post"]["requestBody"]>["content"]["application/json"];
 /**
  * Create a typed Parchment API client.
  *
@@ -5574,19 +6068,211 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": components["schemas"]["MeResponse"];
+                content: {
+                    "application/json": components["schemas"]["MeResponse"];
+                };
+            };
+        };
+    }> | undefined, `${string}/${string}`>>;
+    apiKeys: {
+        /** List API keys owned by the authenticated session user. */
+        list: () => Promise<openapi_fetch.FetchResponse<{
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ApiKeyListResponse"];
+                    };
+                };
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+            };
+        }, openapi_fetch.FetchOptions<{
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ApiKeyListResponse"];
+                    };
+                };
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+            };
+        }> | undefined, `${string}/${string}`>>;
+        /** Create an API key. The raw secret is returned only once. */
+        create: (body: ApiKeyCreateRequest) => Promise<openapi_fetch.FetchResponse<{
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": {
+                        name: string;
+                        scopes?: ("catalog:read" | "inventory:read" | "roast:read" | "sales:read" | "tasting:read" | "inventory:write" | "roast:write" | "sales:write" | "tasting:write")[];
+                    };
+                };
+            };
+            responses: {
+                201: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ApiKeyCreateResponse"];
+                    };
+                };
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
                 };
             };
-        };
-    }> | undefined, `${string}/${string}`>>;
-    apiKeys: {
-        /** List API keys owned by the authenticated session user. */
-        list: () => Promise<openapi_fetch.FetchResponse<{
+        }, {
+            body: {
+                name: string;
+                scopes?: ("catalog:read" | "inventory:read" | "roast:read" | "sales:read" | "tasting:read" | "inventory:write" | "roast:write" | "sales:write" | "tasting:write")[];
+            };
+        }, `${string}/${string}`>>;
+        /** Revoke an API key owned by the authenticated session user. */
+        revoke: (id: string) => Promise<openapi_fetch.FetchResponse<{
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    id: string;
+                };
                 cookie?: never;
             };
             requestBody?: never;
@@ -5596,7 +6282,7 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ApiKeyListResponse"];
+                        "application/json": components["schemas"]["ApiKeyMutationResponse"];
                     };
                 };
                 400: {
@@ -5640,21 +6326,31 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                     };
                 };
             };
-        }, openapi_fetch.FetchOptions<{
+        }, {
+            params: {
+                path: {
+                    id: string;
+                };
+            };
+        }, `${string}/${string}`>>;
+        /** Rotate an API key and return the replacement secret once. */
+        rotate: (id: string) => Promise<openapi_fetch.FetchResponse<{
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    id: string;
+                };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                200: {
+                201: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ApiKeyListResponse"];
+                        "application/json": components["schemas"]["ApiKeyCreateResponse"];
                     };
                 };
                 400: {
@@ -5698,20 +6394,30 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                     };
                 };
             };
-        }> | undefined, `${string}/${string}`>>;
-        /** Create an API key. The raw secret is returned only once. */
-        create: (body: ApiKeyCreateRequest) => Promise<openapi_fetch.FetchResponse<{
+        }, {
+            params: {
+                path: {
+                    id: string;
+                };
+            };
+        }, `${string}/${string}`>>;
+    };
+    cliAuth: {
+        /** Create a signed, short-lived login request bound to a PKCE challenge. */
+        create: (body: CliAuthRequestCreate) => Promise<openapi_fetch.FetchResponse<{
             parameters: {
                 query?: never;
-                header?: never;
+                header
+                /** Fetch one of the caller's sourcing briefs by id. */
+                ? /** Fetch one of the caller's sourcing briefs by id. */: never;
                 path?: never;
                 cookie?: never;
             };
             requestBody: {
                 content: {
                     "application/json": {
-                        name: string;
-                        scopes?: ("catalog:read" | "inventory:read" | "roast:read" | "sales:read" | "tasting:read" | "inventory:write" | "roast:write" | "sales:write" | "tasting:write")[];
+                        machineName: string;
+                        codeChallenge: string;
                     };
                 };
             };
@@ -5721,7 +6427,13 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ApiKeyCreateResponse"];
+                        "application/json": {
+                            requestToken: string;
+                            requestId: string;
+                            verificationUri: string;
+                            expiresAt: string;
+                            intervalSeconds: number;
+                        };
                     };
                 };
                 400: {
@@ -5732,7 +6444,7 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                         "application/json": components["schemas"]["ErrorResponse"];
                     };
                 };
-                401: {
+                409: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5740,7 +6452,7 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                         "application/json": components["schemas"]["ErrorResponse"];
                     };
                 };
-                403: {
+                410: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5748,7 +6460,67 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                         "application/json": components["schemas"]["ErrorResponse"];
                     };
                 };
-                404: {
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+            };
+        }, {
+            body: {
+                machineName: string;
+                codeChallenge: string;
+            };
+        }, `${string}/${string}`>>;
+        /** Inspect a signed request before displaying the web consent screen. */
+        inspect: (body: CliAuthInspectRequest) => Promise<openapi_fetch.FetchResponse<{
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": {
+                        requestToken: string;
+                    };
+                };
+            };
+            responses: {
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            requestId: string;
+                            machineName: string;
+                            expiresAt: string;
+                            scopes: ("catalog:read" | "inventory:read" | "inventory:write" | "roast:read" | "roast:write" | "sales:read" | "sales:write" | "tasting:read" | "tasting:write")[];
+                        };
+                    };
+                };
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                410: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5767,28 +6539,34 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
             };
         }, {
             body: {
-                name: string;
-                scopes?: ("catalog:read" | "inventory:read" | "roast:read" | "sales:read" | "tasting:read" | "inventory:write" | "roast:write" | "sales:write" | "tasting:write")[];
+                requestToken: string;
             };
         }, `${string}/${string}`>>;
-        /** Revoke an API key owned by the authenticated session user. */
-        revoke: (id: string) => Promise<openapi_fetch.FetchResponse<{
+        /** Approve a request using the client's authenticated user session. */
+        approve: (body: CliAuthApproveRequest) => Promise<openapi_fetch.FetchResponse<{
             parameters: {
                 query?: never;
                 header?: never;
-                path: {
-                    id: string;
-                };
+                path?: never;
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody: {
+                content: {
+                    "application/json": {
+                        requestToken: string;
+                    };
+                };
+            };
             responses: {
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ApiKeyMutationResponse"];
+                        "application/json": {
+                            requestId: string;
+                            approved: true;
+                        };
                     };
                 };
                 400: {
@@ -5796,7 +6574,7 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ErrorResponse"];
+                        "application/json": components["schemas"] /** Fetch supplier notes plus the caller's own latest tasting notes. */["ErrorResponse"];
                     };
                 };
                 401: {
@@ -5815,7 +6593,15 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                         "application/json": components["schemas"]["ErrorResponse"];
                     };
                 };
-                404: {
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                410: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5833,30 +6619,48 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                 };
             };
         }, {
-            params: {
-                path: {
-                    id: string;
-                };
+            body: {
+                requestToken: string;
             };
         }, `${string}/${string}`>>;
-        /** Rotate an API key and return the replacement secret once. */
-        rotate: (id: string) => Promise<openapi_fetch.FetchResponse<{
+        /** Exchange an approved request and verifier for the one-time raw key. */
+        exchange: (body: CliAuthExchangeRequest) => Promise<openapi_fetch.FetchResponse<{
             parameters: {
                 query?: never;
                 header?: never;
-                path: {
-                    id: string;
-                };
+                path?: never;
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody: {
+                content: {
+                    "application/json": {
+                        requestToken: string;
+                        codeVerifier: string;
+                    };
+                };
+            };
             responses: {
                 201: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ApiKeyCreateResponse"];
+                        "application/json": {
+                            apiKey: string;
+                            key: {
+                                id: string;
+                                name: string;
+                                createdAt: string | null;
+                                lastUsedAt: string | null;
+                                isActive: boolean;
+                                scopes: string[];
+                            };
+                            user: {
+                                id: string;
+                                email: string;
+                                role: string;
+                            };
+                        };
                     };
                 };
                 400: {
@@ -5867,15 +6671,7 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                         "application/json": components["schemas"]["ErrorResponse"];
                     };
                 };
-                401: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorResponse"];
-                    };
-                };
-                403: {
+                409: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5883,7 +6679,7 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                         "application/json": components["schemas"]["ErrorResponse"];
                     };
                 };
-                404: {
+                410: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5901,10 +6697,9 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
                 };
             };
         }, {
-            params: {
-                path: {
-                    id: string;
-                };
+            body: {
+                requestToken: string;
+                codeVerifier: string;
             };
         }, `${string}/${string}`>>;
     };
@@ -7627,6 +8422,87 @@ declare function createParchmentClient(options: ParchmentClientOptions): {
         }, `${string}/${string}`>>;
     };
     roasts: {
+        /** Match Artisan roast metadata to one of the supplied inventory rows. */
+        classify: (body: RoastClassificationRequest) => Promise<openapi_fetch.FetchResponse<{
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": components["schemas"]["RoastClassificationRequest"];
+                };
+            };
+            responses: {
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["RoastClassificationResponse"];
+                    };
+                };
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorResponse"];
+                    };
+                };
+            };
+        }, {
+            body: {
+                alogMetadata: {
+                    title: string;
+                    filename?: string;
+                    roastertype?: string;
+                    beans?: string;
+                    roastingnotes?: string;
+                    weight?: [number, number, string];
+                };
+                inventory: {
+                    id: number;
+                    coffee_name: string;
+                    origin?: string;
+                    processing?: string;
+                }[];
+            };
+        }, `${string}/${string}`>>;
         /** List the caller's own roast profiles (owner-scoped). */
         list: (query?: RoastListQuery) => Promise<openapi_fetch.FetchResponse<{
             parameters: {