@taico/client 0.2.0 → 0.2.1

package/dist/contracts/types.d.ts

@@ -1244,6 +1244,41 @@ export interface paths {
         patch: operations["AgentsController_patchAgent"];
         trace?: never;
     };
+    "/api/v1/agents/{actorId}/tool-permissions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List tool permissions for an agent */
+        get: operations["AgentToolPermissionsController_listAgentToolPermissions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/agents/{actorId}/tool-permissions/{serverId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /** Create or replace an agent tool permission assignment */
+        put: operations["AgentToolPermissionsController_upsertAgentToolPermission"];
+        post?: never;
+        /** Delete an agent tool permission assignment */
+        delete: operations["AgentToolPermissionsController_deleteAgentToolPermission"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/agents/{slug}/tokens": {
         parameters: {
             query?: never;
@@ -4217,6 +4252,67 @@ export interface components {
              */
             concurrencyLimit?: number | null;
         };
+        AgentToolPermissionServerResponseDto: {
+            /**
+             * @description MCP server UUID
+             * @example 123e4567-e89b-12d3-a456-426614174000
+             */
+            id: string;
+            /**
+             * @description MCP server provided identifier
+             * @example tasks
+             */
+            providedId: string;
+            /**
+             * @description MCP server name
+             * @example Tasks
+             */
+            name: string;
+            /**
+             * @description MCP server description
+             * @example Task operations exposed via MCP
+             */
+            description: string;
+            /**
+             * @description MCP server transport type
+             * @example http
+             * @enum {string}
+             */
+            type: "http" | "stdio";
+        };
+        AgentToolPermissionScopeResponseDto: {
+            /**
+             * @description Scope identifier
+             * @example tasks:read
+             */
+            id: string;
+            /**
+             * @description Human-readable scope description
+             * @example Read task details
+             */
+            description: string;
+        };
+        AgentToolPermissionResponseDto: {
+            server: components["schemas"]["AgentToolPermissionServerResponseDto"];
+            /** @description Subset of scopes granted to this agent for this server */
+            grantedScopes: components["schemas"]["AgentToolPermissionScopeResponseDto"][];
+            /**
+             * @description True when this assignment grants every currently available scope on the server
+             * @example false
+             */
+            hasAllScopes: boolean;
+        };
+        UpsertAgentToolPermissionDto: {
+            /**
+             * @description Subset of scope IDs granted for this tool assignment. Leave empty for unscoped tools or no scope grants.
+             * @default []
+             * @example [
+             *       "tasks:read",
+             *       "tasks:write"
+             *     ]
+             */
+            scopeIds: string[];
+        };
         IssueAccessTokenRequestDto: {
             /**
              * @description Human-readable name for this token (e.g., "CI/CD Pipeline Token")
@@ -4345,13 +4441,13 @@ export interface components {
         };
         RequestAgentExecutionTokenDto: {
             /**
-             * @description Scopes to grant to the short-lived execution token.
+             * @description Scopes to grant to the short-lived execution token. When omitted, scopes are derived from baseline system access plus assigned tool permissions.
              * @example [
              *       "tasks:read",
              *       "tasks:write"
              *     ]
              */
-            scopes: string[];
+            scopes?: string[];
             /**
              * @description Lifetime of the short-lived execution token in seconds. Defaults to the server MCP access token duration.
              * @example 600
@@ -8625,6 +8721,74 @@ export interface operations {
             };
         };
     };
+    AgentToolPermissionsController_listAgentToolPermissions: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Agent actor ID */
+                actorId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentToolPermissionResponseDto"][];
+                };
+            };
+        };
+    };
+    AgentToolPermissionsController_upsertAgentToolPermission: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                actorId: string;
+                serverId: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpsertAgentToolPermissionDto"];
+            };
+        };
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentToolPermissionResponseDto"];
+                };
+            };
+        };
+    };
+    AgentToolPermissionsController_deleteAgentToolPermission: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                actorId: string;
+                serverId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     AgentTokensController_listTokens: {
         parameters: {
             query?: never;

package/dist/src/v1/client/index.d.ts

@@ -11,6 +11,9 @@ export type { AgentListResponseDto } from './models/AgentListResponseDto.js';
 export { AgentResponseDto } from './models/AgentResponseDto.js';
 export type { AgentRunListResponseDto } from './models/AgentRunListResponseDto.js';
 export type { AgentRunResponseDto } from './models/AgentRunResponseDto.js';
+export type { AgentToolPermissionResponseDto } from './models/AgentToolPermissionResponseDto.js';
+export type { AgentToolPermissionScopeResponseDto } from './models/AgentToolPermissionScopeResponseDto.js';
+export { AgentToolPermissionServerResponseDto } from './models/AgentToolPermissionServerResponseDto.js';
 export type { AnswerInputRequestDto } from './models/AnswerInputRequestDto.js';
 export type { AppendBlockDto } from './models/AppendBlockDto.js';
 export type { AppendThreadStateDto } from './models/AppendThreadStateDto.js';
@@ -129,6 +132,7 @@ export type { UpdateTaskBlueprintDto } from './models/UpdateTaskBlueprintDto.js'
 export type { UpdateTaskDto } from './models/UpdateTaskDto.js';
 export type { UpdateThreadDto } from './models/UpdateThreadDto.js';
 export type { UpdateThreadStateDto } from './models/UpdateThreadStateDto.js';
+export type { UpsertAgentToolPermissionDto } from './models/UpsertAgentToolPermissionDto.js';
 export { UserResponseDto } from './models/UserResponseDto.js';
 export { ActorsService } from './services/ActorsService.js';
 export { AgentService } from './services/AgentService.js';

package/dist/src/v1/client/index.js

@@ -8,6 +8,7 @@ export { OpenAPI } from './core/OpenAPI.js';
 export { ActiveTaskExecutionResponseDto } from './models/ActiveTaskExecutionResponseDto.js';
 export { ActorResponseDto } from './models/ActorResponseDto.js';
 export { AgentResponseDto } from './models/AgentResponseDto.js';
+export { AgentToolPermissionServerResponseDto } from './models/AgentToolPermissionServerResponseDto.js';
 export { AuthJourneyResponseDto } from './models/AuthJourneyResponseDto.js';
 export { ChangeTaskStatusDto } from './models/ChangeTaskStatusDto.js';
 export { ChatProviderResponseDto } from './models/ChatProviderResponseDto.js';

package/dist/src/v1/client/models/AgentToolPermissionResponseDto.d.ts

@@ -0,0 +1,13 @@
+import type { AgentToolPermissionScopeResponseDto } from './AgentToolPermissionScopeResponseDto.js';
+import type { AgentToolPermissionServerResponseDto } from './AgentToolPermissionServerResponseDto.js';
+export type AgentToolPermissionResponseDto = {
+    server: AgentToolPermissionServerResponseDto;
+    /**
+     * Subset of scopes granted to this agent for this server
+     */
+    grantedScopes: Array<AgentToolPermissionScopeResponseDto>;
+    /**
+     * True when this assignment grants every currently available scope on the server
+     */
+    hasAllScopes: boolean;
+};

package/dist/src/v1/client/models/AgentToolPermissionResponseDto.js

@@ -0,0 +1 @@
+export {};

package/dist/src/v1/client/models/AgentToolPermissionScopeResponseDto.d.ts

@@ -0,0 +1,10 @@
+export type AgentToolPermissionScopeResponseDto = {
+    /**
+     * Scope identifier
+     */
+    id: string;
+    /**
+     * Human-readable scope description
+     */
+    description: string;
+};

package/dist/src/v1/client/models/AgentToolPermissionScopeResponseDto.js

@@ -0,0 +1 @@
+export {};

package/dist/src/v1/client/models/AgentToolPermissionServerResponseDto.d.ts

@@ -0,0 +1,31 @@
+export type AgentToolPermissionServerResponseDto = {
+    /**
+     * MCP server UUID
+     */
+    id: string;
+    /**
+     * MCP server provided identifier
+     */
+    providedId: string;
+    /**
+     * MCP server name
+     */
+    name: string;
+    /**
+     * MCP server description
+     */
+    description: string;
+    /**
+     * MCP server transport type
+     */
+    type: AgentToolPermissionServerResponseDto.type;
+};
+export declare namespace AgentToolPermissionServerResponseDto {
+    /**
+     * MCP server transport type
+     */
+    enum type {
+        HTTP = "http",
+        STDIO = "stdio"
+    }
+}

package/dist/src/v1/client/models/AgentToolPermissionServerResponseDto.js

@@ -0,0 +1,11 @@
+export var AgentToolPermissionServerResponseDto;
+(function (AgentToolPermissionServerResponseDto) {
+    /**
+     * MCP server transport type
+     */
+    let type;
+    (function (type) {
+        type["HTTP"] = "http";
+        type["STDIO"] = "stdio";
+    })(type = AgentToolPermissionServerResponseDto.type || (AgentToolPermissionServerResponseDto.type = {}));
+})(AgentToolPermissionServerResponseDto || (AgentToolPermissionServerResponseDto = {}));

package/dist/src/v1/client/models/RequestAgentExecutionTokenDto.d.ts

@@ -1,8 +1,8 @@
 export type RequestAgentExecutionTokenDto = {
     /**
-     * Scopes to grant to the short-lived execution token.
+     * Scopes to grant to the short-lived execution token. When omitted, scopes are derived from baseline system access plus assigned tool permissions.
      */
-    scopes: Array<string>;
+    scopes?: Array<string>;
     /**
      * Lifetime of the short-lived execution token in seconds. Defaults to the server MCP access token duration.
      */

package/dist/src/v1/client/models/UpsertAgentToolPermissionDto.d.ts

@@ -0,0 +1,6 @@
+export type UpsertAgentToolPermissionDto = {
+    /**
+     * Subset of scope IDs granted for this tool assignment. Leave empty for unscoped tools or no scope grants.
+     */
+    scopeIds?: Array<string>;
+};

package/dist/src/v1/client/models/UpsertAgentToolPermissionDto.js

@@ -0,0 +1 @@
+export {};

package/dist/src/v1/client/services/AgentService.d.ts

@@ -1,7 +1,9 @@
 import type { AgentListResponseDto } from '../models/AgentListResponseDto.js';
 import type { AgentResponseDto } from '../models/AgentResponseDto.js';
+import type { AgentToolPermissionResponseDto } from '../models/AgentToolPermissionResponseDto.js';
 import type { CreateAgentDto } from '../models/CreateAgentDto.js';
 import type { PatchAgentDto } from '../models/PatchAgentDto.js';
+import type { UpsertAgentToolPermissionDto } from '../models/UpsertAgentToolPermissionDto.js';
 import type { CancelablePromise } from '../core/CancelablePromise.js';
 import type { OpenAPIConfig } from '../core/OpenAPI.js';
 export declare class AgentService {
@@ -43,4 +45,28 @@ export declare class AgentService {
      * @throws ApiError
      */
     static agentsControllerDeleteAgent(actorId: string, config?: OpenAPIConfig): CancelablePromise<void>;
+    /**
+     * List tool permissions for an agent
+     * @param actorId Agent actor ID
+     * @returns AgentToolPermissionResponseDto
+     * @throws ApiError
+     */
+    static agentToolPermissionsControllerListAgentToolPermissions(actorId: string, config?: OpenAPIConfig): CancelablePromise<Array<AgentToolPermissionResponseDto>>;
+    /**
+     * Create or replace an agent tool permission assignment
+     * @param actorId
+     * @param serverId
+     * @param requestBody
+     * @returns AgentToolPermissionResponseDto
+     * @throws ApiError
+     */
+    static agentToolPermissionsControllerUpsertAgentToolPermission(actorId: string, serverId: string, requestBody: UpsertAgentToolPermissionDto, config?: OpenAPIConfig): CancelablePromise<AgentToolPermissionResponseDto>;
+    /**
+     * Delete an agent tool permission assignment
+     * @param actorId
+     * @param serverId
+     * @returns void
+     * @throws ApiError
+     */
+    static agentToolPermissionsControllerDeleteAgentToolPermission(actorId: string, serverId: string, config?: OpenAPIConfig): CancelablePromise<void>;
 }

package/dist/src/v1/client/services/AgentService.js

@@ -82,4 +82,56 @@ export class AgentService {
             },
         });
     }
+    /**
+     * List tool permissions for an agent
+     * @param actorId Agent actor ID
+     * @returns AgentToolPermissionResponseDto
+     * @throws ApiError
+     */
+    static agentToolPermissionsControllerListAgentToolPermissions(actorId, config = OpenAPI) {
+        return __request(config, {
+            method: 'GET',
+            url: '/api/v1/agents/{actorId}/tool-permissions',
+            path: {
+                'actorId': actorId,
+            },
+        });
+    }
+    /**
+     * Create or replace an agent tool permission assignment
+     * @param actorId
+     * @param serverId
+     * @param requestBody
+     * @returns AgentToolPermissionResponseDto
+     * @throws ApiError
+     */
+    static agentToolPermissionsControllerUpsertAgentToolPermission(actorId, serverId, requestBody, config = OpenAPI) {
+        return __request(config, {
+            method: 'PUT',
+            url: '/api/v1/agents/{actorId}/tool-permissions/{serverId}',
+            path: {
+                'actorId': actorId,
+                'serverId': serverId,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+        });
+    }
+    /**
+     * Delete an agent tool permission assignment
+     * @param actorId
+     * @param serverId
+     * @returns void
+     * @throws ApiError
+     */
+    static agentToolPermissionsControllerDeleteAgentToolPermission(actorId, serverId, config = OpenAPI) {
+        return __request(config, {
+            method: 'DELETE',
+            url: '/api/v1/agents/{actorId}/tool-permissions/{serverId}',
+            path: {
+                'actorId': actorId,
+                'serverId': serverId,
+            },
+        });
+    }
 }

package/dist/src/v2/agent-resource.d.ts

@@ -1,5 +1,5 @@
 import { BaseClient, ClientConfig } from './base-client.js';
-import type { AgentListResponseDto, AgentResponseDto, CreateAgentDto, PatchAgentDto } from './types.js';
+import type { AgentListResponseDto, AgentResponseDto, AgentToolPermissionResponseDto, CreateAgentDto, PatchAgentDto, UpsertAgentToolPermissionDto } from './types.js';
 export declare class AgentResource extends BaseClient {
     constructor(config: ClientConfig);
     /** Create a new agent */
@@ -30,4 +30,22 @@ export declare class AgentResource extends BaseClient {
         actorId: string;
         signal?: AbortSignal;
     }): Promise<void>;
+    /** List tool permissions for an agent */
+    AgentToolPermissionsController_listAgentToolPermissions(params: {
+        actorId: string;
+        signal?: AbortSignal;
+    }): Promise<AgentToolPermissionResponseDto[]>;
+    /** Create or replace an agent tool permission assignment */
+    AgentToolPermissionsController_upsertAgentToolPermission(params: {
+        actorId: string;
+        serverId: string;
+        body: UpsertAgentToolPermissionDto;
+        signal?: AbortSignal;
+    }): Promise<AgentToolPermissionResponseDto>;
+    /** Delete an agent tool permission assignment */
+    AgentToolPermissionsController_deleteAgentToolPermission(params: {
+        actorId: string;
+        serverId: string;
+        signal?: AbortSignal;
+    }): Promise<void>;
 }

package/dist/src/v2/agent-resource.js

@@ -23,4 +23,16 @@ export class AgentResource extends BaseClient {
     async AgentsController_deleteAgent(params) {
         return this.request('DELETE', `/api/v1/agents/${params.actorId}`, { signal: params?.signal });
     }
+    /** List tool permissions for an agent */
+    async AgentToolPermissionsController_listAgentToolPermissions(params) {
+        return this.request('GET', `/api/v1/agents/${params.actorId}/tool-permissions`, { signal: params?.signal });
+    }
+    /** Create or replace an agent tool permission assignment */
+    async AgentToolPermissionsController_upsertAgentToolPermission(params) {
+        return this.request('PUT', `/api/v1/agents/${params.actorId}/tool-permissions/${params.serverId}`, { body: params.body, signal: params?.signal });
+    }
+    /** Delete an agent tool permission assignment */
+    async AgentToolPermissionsController_deleteAgentToolPermission(params) {
+        return this.request('DELETE', `/api/v1/agents/${params.actorId}/tool-permissions/${params.serverId}`, { signal: params?.signal });
+    }
 }

package/dist/src/v2/base-client.d.ts

@@ -8,9 +8,16 @@ export interface ClientConfig {
     credentials?: 'include' | 'same-origin' | 'omit';
     headers?: Record<string, string>;
 }
+export declare class ApiError extends Error {
+    readonly status: number;
+    readonly statusText: string;
+    readonly body: unknown;
+    constructor(response: Response, body: unknown);
+}
 export declare class BaseClient {
     protected config: ClientConfig;
     constructor(config: ClientConfig);
+    private parseResponseBody;
     private buildAuthHeaders;
     protected request<T>(method: string, path: string, options?: {
         params?: Record<string, any>;

package/dist/src/v2/base-client.js

@@ -1,8 +1,62 @@
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+function getErrorMessageFromBody(body) {
+    if (!isRecord(body)) {
+        return undefined;
+    }
+    const detail = body.detail;
+    if (typeof detail === 'string' && detail.length > 0) {
+        return detail;
+    }
+    const message = body.message;
+    if (typeof message === 'string' && message.length > 0) {
+        return message;
+    }
+    const title = body.title;
+    if (typeof title === 'string' && title.length > 0) {
+        return title;
+    }
+    const errorDescription = body.error_description;
+    if (typeof errorDescription === 'string' && errorDescription.length > 0) {
+        return errorDescription;
+    }
+    return undefined;
+}
+export class ApiError extends Error {
+    status;
+    statusText;
+    body;
+    constructor(response, body) {
+        const message = getErrorMessageFromBody(body) ?? `HTTP ${response.status}: ${response.statusText}`;
+        super(message);
+        this.name = 'ApiError';
+        this.status = response.status;
+        this.statusText = response.statusText;
+        this.body = body;
+    }
+}
 export class BaseClient {
     config;
     constructor(config) {
         this.config = config;
     }
+    async parseResponseBody(response) {
+        if (response.status === 204 || response.headers.get('content-length') === '0') {
+            return undefined;
+        }
+        const contentType = response.headers.get('content-type');
+        if (contentType?.includes('application/json')) {
+            try {
+                return await response.json();
+            }
+            catch {
+                return undefined;
+            }
+        }
+        const text = await response.text();
+        return text.length > 0 ? text : undefined;
+    }
     async buildAuthHeaders() {
         const headers = {};
         if (this.config.getAccessToken) {
@@ -56,17 +110,10 @@ export class BaseClient {
             credentials: this.config.credentials,
         });
         if (!response.ok) {
-            throw new Error(`HTTP ${response.status}: ${response.statusText}`);
-        }
-        // Handle no content responses
-        if (response.status === 204 || response.headers.get('content-length') === '0') {
-            return undefined;
-        }
-        const contentType = response.headers.get('content-type');
-        if (contentType?.includes('application/json')) {
-            return response.json();
+            const errorBody = await this.parseResponseBody(response);
+            throw new ApiError(response, errorBody);
         }
-        return response.text();
+        return await this.parseResponseBody(response);
     }
     async *streamEvents(path, options) {
         const url = new URL(path, this.config.baseUrl);
@@ -106,7 +153,8 @@ export class BaseClient {
             credentials: this.config.credentials,
         });
         if (!response.ok) {
-            throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+            const errorBody = await this.parseResponseBody(response);
+            throw new ApiError(response, errorBody);
         }
         if (!response.body) {
             throw new Error('Response body is null');

package/dist/src/v2/types.d.ts

@@ -601,6 +601,25 @@ export interface PatchAgentDto {
     isActive?: boolean;
     concurrencyLimit?: number | null;
 }
+export interface AgentToolPermissionServerResponseDto {
+    id: string;
+    providedId: string;
+    name: string;
+    description: string;
+    type: 'http' | 'stdio';
+}
+export interface AgentToolPermissionScopeResponseDto {
+    id: string;
+    description: string;
+}
+export interface AgentToolPermissionResponseDto {
+    server: AgentToolPermissionServerResponseDto;
+    grantedScopes: AgentToolPermissionScopeResponseDto[];
+    hasAllScopes: boolean;
+}
+export interface UpsertAgentToolPermissionDto {
+    scopeIds?: string[];
+}
 export interface IssueAccessTokenRequestDto {
     name: string;
     scopes: string[];
@@ -630,7 +649,7 @@ export interface IssuedAccessTokenResponseDto {
     isValid: boolean;
 }
 export interface RequestAgentExecutionTokenDto {
-    scopes: string[];
+    scopes?: string[];
     expirationSeconds?: number;
 }
 export interface AgentExecutionTokenResponseDto {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taico/client",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "type": "module",
   "private": false,
   "license": "MIT",