@atlanai/sdk 0.2.4 → 0.3.1

package/dist/raw/otel/models/ArtifactConflictProblem.d.ts

@@ -22,31 +22,31 @@
  */
 export interface ArtifactConflictProblem {
     /**
-     * Value of the `code` field.
+     *
      * @type {string}
      * @memberof ArtifactConflictProblem
      */
     code: string;
     /**
-     * Value of the `detail` field.
+     *
      * @type {string}
      * @memberof ArtifactConflictProblem
      */
     detail: string;
     /**
-     * Current lifecycle state.
+     *
      * @type {number}
      * @memberof ArtifactConflictProblem
      */
     status: number;
     /**
-     * Value of the `title` field.
+     *
      * @type {string}
      * @memberof ArtifactConflictProblem
      */
     title: string;
     /**
-     * Stable identifier of the related trace resource.
+     *
      * @type {string}
      * @memberof ArtifactConflictProblem
      */

package/dist/raw/otel/models/ProblemDetails.d.ts

@@ -36,31 +36,31 @@
  */
 export interface ProblemDetails {
     /**
-     * Value of the `code` field.
+     *
      * @type {string}
      * @memberof ProblemDetails
      */
     code: string;
     /**
-     * Value of the `detail` field.
+     *
      * @type {string}
      * @memberof ProblemDetails
      */
     detail: string;
     /**
-     * Current lifecycle state.
+     *
      * @type {number}
      * @memberof ProblemDetails
      */
     status: number;
     /**
-     * Value of the `title` field.
+     *
      * @type {string}
      * @memberof ProblemDetails
      */
     title: string;
     /**
-     * Stable identifier of the related trace resource.
+     *
      * @type {string}
      * @memberof ProblemDetails
      */

package/dist/raw/otel/models/index.d.ts

@@ -1,4 +1,2 @@
 export * from './ArtifactConflictProblem';
-export * from './OtelIngestLogs400Response';
-export * from './OtelIngestLogs403Response';
 export * from './ProblemDetails';

package/dist/raw/otel/models/index.js

@@ -17,6 +17,4 @@ Object.defineProperty(exports, "__esModule", { value: true });
 /* tslint:disable */
 /* eslint-disable */
 __exportStar(require("./ArtifactConflictProblem"), exports);
-__exportStar(require("./OtelIngestLogs400Response"), exports);
-__exportStar(require("./OtelIngestLogs403Response"), exports);
 __exportStar(require("./ProblemDetails"), exports);

package/dist/raw/registry/apis/AppsApi.d.ts

@@ -103,12 +103,12 @@ export declare class AppsApi extends runtime.BaseAPI {
      */
     registryReconcileAppRequestOpts(requestParameters: RegistryReconcileAppRequest): Promise<runtime.RequestOpts>;
     /**
-     * Hands the app every live artifact of its own kinds in this account, as `{id, metadata}`, so it can release backing resources for anything it is still holding that the registry no longer has a row for.  **The set is the contract, so it is never truncated.** A partial set reads to the app as \"everything else is an orphan\", which for a sweeping handler means deleting live data. If the account holds more artifacts of these kinds than one sweep can carry, this refuses rather than sending a prefix — which is why the size check is part of the `202`, not of the sweep.  **`202`, and the sweep runs after the response.** A reconcile walks an app\'s whole backing store for the account, so holding the request open for it would tie an operator\'s timeout to an object-store scan. What is decided before the `202` is everything a caller can act on: that the app is installed, and that its live set fits. The sweep\'s own outcome is the app\'s to log.  `live_count` is what distinguishes a sweep of four hundred artifacts from a sweep of an app the account owns nothing of — which is usually a mistake in which app was named.
+     * Hands the app every live artifact of its own kinds in this account, as `{id, metadata}`, so it can release backing resources for anything it is still holding that the registry no longer has a row for.  **The set is the contract, so it is never truncated.** A partial set reads to the app as \"everything else is an orphan\", which for a sweeping handler means deleting live data. If the account holds more artifacts of these kinds than one sweep can carry, this refuses rather than sending a prefix — which is why the size check is part of the `202`, not of the sweep.  **`202`, and the sweep runs after the response.** A reconcile walks an app\'s whole backing store for the account, so holding the request open for it would tie an operator\'s timeout to an object-store scan. What is decided before the `202` is everything a caller can act on: that the app is installed, and that its live set fits. The sweep\'s own outcome is the app\'s to log.  `live_count` is what distinguishes a sweep of four hundred artifacts from a sweep of an app the account owns nothing of — which is usually a mistake in which app was named.  **Requires the same install permission the other lifecycle verbs do.** A sweep tells an app what the registry no longer holds, which a sweeping handler acts on by deleting its own backing data — so this is a write verb, and it used to be gated as a read.
      * Trigger an app\'s reconcile sweep
      */
     registryReconcileAppRaw(requestParameters: RegistryReconcileAppRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ReconcileAcceptedDto>>;
     /**
-     * Hands the app every live artifact of its own kinds in this account, as `{id, metadata}`, so it can release backing resources for anything it is still holding that the registry no longer has a row for.  **The set is the contract, so it is never truncated.** A partial set reads to the app as \"everything else is an orphan\", which for a sweeping handler means deleting live data. If the account holds more artifacts of these kinds than one sweep can carry, this refuses rather than sending a prefix — which is why the size check is part of the `202`, not of the sweep.  **`202`, and the sweep runs after the response.** A reconcile walks an app\'s whole backing store for the account, so holding the request open for it would tie an operator\'s timeout to an object-store scan. What is decided before the `202` is everything a caller can act on: that the app is installed, and that its live set fits. The sweep\'s own outcome is the app\'s to log.  `live_count` is what distinguishes a sweep of four hundred artifacts from a sweep of an app the account owns nothing of — which is usually a mistake in which app was named.
+     * Hands the app every live artifact of its own kinds in this account, as `{id, metadata}`, so it can release backing resources for anything it is still holding that the registry no longer has a row for.  **The set is the contract, so it is never truncated.** A partial set reads to the app as \"everything else is an orphan\", which for a sweeping handler means deleting live data. If the account holds more artifacts of these kinds than one sweep can carry, this refuses rather than sending a prefix — which is why the size check is part of the `202`, not of the sweep.  **`202`, and the sweep runs after the response.** A reconcile walks an app\'s whole backing store for the account, so holding the request open for it would tie an operator\'s timeout to an object-store scan. What is decided before the `202` is everything a caller can act on: that the app is installed, and that its live set fits. The sweep\'s own outcome is the app\'s to log.  `live_count` is what distinguishes a sweep of four hundred artifacts from a sweep of an app the account owns nothing of — which is usually a mistake in which app was named.  **Requires the same install permission the other lifecycle verbs do.** A sweep tells an app what the registry no longer holds, which a sweeping handler acts on by deleting its own backing data — so this is a write verb, and it used to be gated as a read.
      * Trigger an app\'s reconcile sweep
      */
     registryReconcileApp(requestParameters: RegistryReconcileAppRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ReconcileAcceptedDto>;

package/dist/raw/registry/apis/AppsApi.js

@@ -256,7 +256,7 @@ class AppsApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Hands the app every live artifact of its own kinds in this account, as `{id, metadata}`, so it can release backing resources for anything it is still holding that the registry no longer has a row for.  **The set is the contract, so it is never truncated.** A partial set reads to the app as \"everything else is an orphan\", which for a sweeping handler means deleting live data. If the account holds more artifacts of these kinds than one sweep can carry, this refuses rather than sending a prefix — which is why the size check is part of the `202`, not of the sweep.  **`202`, and the sweep runs after the response.** A reconcile walks an app\'s whole backing store for the account, so holding the request open for it would tie an operator\'s timeout to an object-store scan. What is decided before the `202` is everything a caller can act on: that the app is installed, and that its live set fits. The sweep\'s own outcome is the app\'s to log.  `live_count` is what distinguishes a sweep of four hundred artifacts from a sweep of an app the account owns nothing of — which is usually a mistake in which app was named.
+     * Hands the app every live artifact of its own kinds in this account, as `{id, metadata}`, so it can release backing resources for anything it is still holding that the registry no longer has a row for.  **The set is the contract, so it is never truncated.** A partial set reads to the app as \"everything else is an orphan\", which for a sweeping handler means deleting live data. If the account holds more artifacts of these kinds than one sweep can carry, this refuses rather than sending a prefix — which is why the size check is part of the `202`, not of the sweep.  **`202`, and the sweep runs after the response.** A reconcile walks an app\'s whole backing store for the account, so holding the request open for it would tie an operator\'s timeout to an object-store scan. What is decided before the `202` is everything a caller can act on: that the app is installed, and that its live set fits. The sweep\'s own outcome is the app\'s to log.  `live_count` is what distinguishes a sweep of four hundred artifacts from a sweep of an app the account owns nothing of — which is usually a mistake in which app was named.  **Requires the same install permission the other lifecycle verbs do.** A sweep tells an app what the registry no longer holds, which a sweeping handler acts on by deleting its own backing data — so this is a write verb, and it used to be gated as a read.
      * Trigger an app\'s reconcile sweep
      */
     async registryReconcileAppRaw(requestParameters, initOverrides) {
@@ -265,7 +265,7 @@ class AppsApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => (0, ReconcileAcceptedDto_1.ReconcileAcceptedDtoFromJSON)(jsonValue));
     }
     /**
-     * Hands the app every live artifact of its own kinds in this account, as `{id, metadata}`, so it can release backing resources for anything it is still holding that the registry no longer has a row for.  **The set is the contract, so it is never truncated.** A partial set reads to the app as \"everything else is an orphan\", which for a sweeping handler means deleting live data. If the account holds more artifacts of these kinds than one sweep can carry, this refuses rather than sending a prefix — which is why the size check is part of the `202`, not of the sweep.  **`202`, and the sweep runs after the response.** A reconcile walks an app\'s whole backing store for the account, so holding the request open for it would tie an operator\'s timeout to an object-store scan. What is decided before the `202` is everything a caller can act on: that the app is installed, and that its live set fits. The sweep\'s own outcome is the app\'s to log.  `live_count` is what distinguishes a sweep of four hundred artifacts from a sweep of an app the account owns nothing of — which is usually a mistake in which app was named.
+     * Hands the app every live artifact of its own kinds in this account, as `{id, metadata}`, so it can release backing resources for anything it is still holding that the registry no longer has a row for.  **The set is the contract, so it is never truncated.** A partial set reads to the app as \"everything else is an orphan\", which for a sweeping handler means deleting live data. If the account holds more artifacts of these kinds than one sweep can carry, this refuses rather than sending a prefix — which is why the size check is part of the `202`, not of the sweep.  **`202`, and the sweep runs after the response.** A reconcile walks an app\'s whole backing store for the account, so holding the request open for it would tie an operator\'s timeout to an object-store scan. What is decided before the `202` is everything a caller can act on: that the app is installed, and that its live set fits. The sweep\'s own outcome is the app\'s to log.  `live_count` is what distinguishes a sweep of four hundred artifacts from a sweep of an app the account owns nothing of — which is usually a mistake in which app was named.  **Requires the same install permission the other lifecycle verbs do.** A sweep tells an app what the registry no longer holds, which a sweeping handler acts on by deleting its own backing data — so this is a write verb, and it used to be gated as a read.
      * Trigger an app\'s reconcile sweep
      */
     async registryReconcileApp(requestParameters, initOverrides) {

package/dist/raw/registry/apis/OrganisationsApi.d.ts

@@ -76,12 +76,10 @@ export declare class OrganisationsApi extends runtime.BaseAPI {
      */
     registryQueryOrganisationTraceStatsRequestOpts(requestParameters: RegistryQueryOrganisationTraceStatsRequest): Promise<runtime.RequestOpts>;
     /**
-     * Use this operation to trace statistics across the whole account.
      * Trace statistics across the whole account
      */
     registryQueryOrganisationTraceStatsRaw(requestParameters: RegistryQueryOrganisationTraceStatsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
     /**
-     * Use this operation to trace statistics across the whole account.
      * Trace statistics across the whole account
      */
     registryQueryOrganisationTraceStats(requestParameters: RegistryQueryOrganisationTraceStatsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;

package/dist/raw/registry/apis/OrganisationsApi.js

@@ -204,7 +204,6 @@ class OrganisationsApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Use this operation to trace statistics across the whole account.
      * Trace statistics across the whole account
      */
     async registryQueryOrganisationTraceStatsRaw(requestParameters, initOverrides) {
@@ -218,7 +217,6 @@ class OrganisationsApi extends runtime.BaseAPI {
         }
     }
     /**
-     * Use this operation to trace statistics across the whole account.
      * Trace statistics across the whole account
      */
     async registryQueryOrganisationTraceStats(requestParameters, initOverrides) {

package/dist/raw/registry/apis/ReposApi.d.ts

@@ -104,12 +104,10 @@ export declare class ReposApi extends runtime.BaseAPI {
      */
     registryGetRepoRequestOpts(requestParameters: RegistryGetRepoRequest): Promise<runtime.RequestOpts>;
     /**
-     * Use this operation to get a repo.
      * Get a repo
      */
     registryGetRepoRaw(requestParameters: RegistryGetRepoRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<RepoDto>>;
     /**
-     * Use this operation to get a repo.
      * Get a repo
      */
     registryGetRepo(requestParameters: RegistryGetRepoRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<RepoDto>;

package/dist/raw/registry/apis/ReposApi.js

@@ -260,7 +260,6 @@ class ReposApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Use this operation to get a repo.
      * Get a repo
      */
     async registryGetRepoRaw(requestParameters, initOverrides) {
@@ -269,7 +268,6 @@ class ReposApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => (0, RepoDto_1.RepoDtoFromJSON)(jsonValue));
     }
     /**
-     * Use this operation to get a repo.
      * Get a repo
      */
     async registryGetRepo(requestParameters, initOverrides) {

package/dist/raw/registry/apis/ServiceAccountsApi.d.ts

@@ -53,12 +53,10 @@ export declare class ServiceAccountsApi extends runtime.BaseAPI {
      */
     registryGetServiceAccountRequestOpts(requestParameters: RegistryGetServiceAccountRequest): Promise<runtime.RequestOpts>;
     /**
-     * Use this operation to get a machine identity.
      * Get a machine identity
      */
     registryGetServiceAccountRaw(requestParameters: RegistryGetServiceAccountRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ServiceAccountDto>>;
     /**
-     * Use this operation to get a machine identity.
      * Get a machine identity
      */
     registryGetServiceAccount(requestParameters: RegistryGetServiceAccountRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ServiceAccountDto>;

package/dist/raw/registry/apis/ServiceAccountsApi.js

@@ -128,7 +128,6 @@ class ServiceAccountsApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Use this operation to get a machine identity.
      * Get a machine identity
      */
     async registryGetServiceAccountRaw(requestParameters, initOverrides) {
@@ -137,7 +136,6 @@ class ServiceAccountsApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => (0, ServiceAccountDto_1.ServiceAccountDtoFromJSON)(jsonValue));
     }
     /**
-     * Use this operation to get a machine identity.
      * Get a machine identity
      */
     async registryGetServiceAccount(requestParameters, initOverrides) {

package/dist/raw/registry/apis/SessionsApi.d.ts

@@ -10,9 +10,15 @@
  * Do not edit the class manually.
  */
 import * as runtime from '../runtime';
+export interface RegistryGetOwnSessionRequest {
+    sessionId: string;
+}
 export interface RegistryListOwnSessionsRequest {
     status?: string;
 }
+export interface RegistryRevokeOwnSessionRequest {
+    sessionId: string;
+}
 export interface RegistryRevokeOwnSessionsRequest {
     body: Blob;
     contentEncoding?: RegistryRevokeOwnSessionsContentEncodingEnum;
@@ -21,6 +27,20 @@ export interface RegistryRevokeOwnSessionsRequest {
  *
  */
 export declare class SessionsApi extends runtime.BaseAPI {
+    /**
+     * Creates request options for registryGetOwnSession without sending the request
+     */
+    registryGetOwnSessionRequestOpts(requestParameters: RegistryGetOwnSessionRequest): Promise<runtime.RequestOpts>;
+    /**
+     * One of the caller\'s own sessions, by id. Self-scoped by a gateway ownership check: the gateway fetches the session from the control plane and confirms the caller owns it before rendering it. A session that is not the caller\'s, absent, or a malformed id all answer 404.
+     * Read one of the caller\'s own sessions by id
+     */
+    registryGetOwnSessionRaw(requestParameters: RegistryGetOwnSessionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * One of the caller\'s own sessions, by id. Self-scoped by a gateway ownership check: the gateway fetches the session from the control plane and confirms the caller owns it before rendering it. A session that is not the caller\'s, absent, or a malformed id all answer 404.
+     * Read one of the caller\'s own sessions by id
+     */
+    registryGetOwnSession(requestParameters: RegistryGetOwnSessionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
     /**
      * Creates request options for registryListOwnSessions without sending the request
      */
@@ -35,6 +55,20 @@ export declare class SessionsApi extends runtime.BaseAPI {
      * List the caller\'s own sessions
      */
     registryListOwnSessions(requestParameters?: RegistryListOwnSessionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for registryRevokeOwnSession without sending the request
+     */
+    registryRevokeOwnSessionRequestOpts(requestParameters: RegistryRevokeOwnSessionRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Revoke one of the caller\'s own sessions, by id, ending a single session without touching the caller\'s others. Self-scoped by a gateway ownership check: the gateway fetches the session and confirms the caller owns it before forwarding the revoke to the control plane. A session that is not the caller\'s, absent, or a malformed id all answer 404.
+     * Revoke one of the caller\'s own sessions by id
+     */
+    registryRevokeOwnSessionRaw(requestParameters: RegistryRevokeOwnSessionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Revoke one of the caller\'s own sessions, by id, ending a single session without touching the caller\'s others. Self-scoped by a gateway ownership check: the gateway fetches the session and confirms the caller owns it before forwarding the revoke to the control plane. A session that is not the caller\'s, absent, or a malformed id all answer 404.
+     * Revoke one of the caller\'s own sessions by id
+     */
+    registryRevokeOwnSession(requestParameters: RegistryRevokeOwnSessionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
     /**
      * Creates request options for registryRevokeOwnSessions without sending the request
      */

package/dist/raw/registry/apis/SessionsApi.js

@@ -52,6 +52,47 @@ const runtime = __importStar(require("../runtime"));
  *
  */
 class SessionsApi extends runtime.BaseAPI {
+    /**
+     * Creates request options for registryGetOwnSession without sending the request
+     */
+    async registryGetOwnSessionRequestOpts(requestParameters) {
+        if (requestParameters['sessionId'] == null) {
+            throw new runtime.RequiredError('sessionId', 'Required parameter "sessionId" was null or undefined when calling registryGetOwnSession().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearer", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/users/sessions/{session_id}`;
+        urlPath = urlPath.replace('{session_id}', encodeURIComponent(String(requestParameters['sessionId'])));
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * One of the caller\'s own sessions, by id. Self-scoped by a gateway ownership check: the gateway fetches the session from the control plane and confirms the caller owns it before rendering it. A session that is not the caller\'s, absent, or a malformed id all answer 404.
+     * Read one of the caller\'s own sessions by id
+     */
+    async registryGetOwnSessionRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.registryGetOwnSessionRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * One of the caller\'s own sessions, by id. Self-scoped by a gateway ownership check: the gateway fetches the session from the control plane and confirms the caller owns it before rendering it. A session that is not the caller\'s, absent, or a malformed id all answer 404.
+     * Read one of the caller\'s own sessions by id
+     */
+    async registryGetOwnSession(requestParameters, initOverrides) {
+        await this.registryGetOwnSessionRaw(requestParameters, initOverrides);
+    }
     /**
      * Creates request options for registryListOwnSessions without sending the request
      */
@@ -92,6 +133,47 @@ class SessionsApi extends runtime.BaseAPI {
     async registryListOwnSessions(requestParameters = {}, initOverrides) {
         await this.registryListOwnSessionsRaw(requestParameters, initOverrides);
     }
+    /**
+     * Creates request options for registryRevokeOwnSession without sending the request
+     */
+    async registryRevokeOwnSessionRequestOpts(requestParameters) {
+        if (requestParameters['sessionId'] == null) {
+            throw new runtime.RequiredError('sessionId', 'Required parameter "sessionId" was null or undefined when calling registryRevokeOwnSession().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearer", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/users/sessions/{session_id}/revoke`;
+        urlPath = urlPath.replace('{session_id}', encodeURIComponent(String(requestParameters['sessionId'])));
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Revoke one of the caller\'s own sessions, by id, ending a single session without touching the caller\'s others. Self-scoped by a gateway ownership check: the gateway fetches the session and confirms the caller owns it before forwarding the revoke to the control plane. A session that is not the caller\'s, absent, or a malformed id all answer 404.
+     * Revoke one of the caller\'s own sessions by id
+     */
+    async registryRevokeOwnSessionRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.registryRevokeOwnSessionRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Revoke one of the caller\'s own sessions, by id, ending a single session without touching the caller\'s others. Self-scoped by a gateway ownership check: the gateway fetches the session and confirms the caller owns it before forwarding the revoke to the control plane. A session that is not the caller\'s, absent, or a malformed id all answer 404.
+     * Revoke one of the caller\'s own sessions by id
+     */
+    async registryRevokeOwnSession(requestParameters, initOverrides) {
+        await this.registryRevokeOwnSessionRaw(requestParameters, initOverrides);
+    }
     /**
      * Creates request options for registryRevokeOwnSessions without sending the request
      */

package/dist/raw/registry/apis/UsersApi.d.ts

@@ -43,6 +43,7 @@ export interface RegistryListUserTracesRequest {
     limit?: number;
     cursor?: string;
     sort?: string;
+    traceIds?: string;
 }
 export interface RegistryQueryUserTraceStatsRequest {
     userId: string;
@@ -104,12 +105,10 @@ export declare class UsersApi extends runtime.BaseAPI {
      */
     registryGetUserTraceRequestOpts(requestParameters: RegistryGetUserTraceRequest): Promise<runtime.RequestOpts>;
     /**
-     * Use this operation to read one of this person\'s traces.
      * Read one of this person\'s traces
      */
     registryGetUserTraceRaw(requestParameters: RegistryGetUserTraceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TraceDetailView>>;
     /**
-     * Use this operation to read one of this person\'s traces.
      * Read one of this person\'s traces
      */
     registryGetUserTrace(requestParameters: RegistryGetUserTraceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TraceDetailView>;
@@ -118,12 +117,10 @@ export declare class UsersApi extends runtime.BaseAPI {
      */
     registryListUserTraceSpansRequestOpts(requestParameters: RegistryListUserTraceSpansRequest): Promise<runtime.RequestOpts>;
     /**
-     * Use this operation to list the spans of one of this person\'s traces.
      * List the spans of one of this person\'s traces
      */
     registryListUserTraceSpansRaw(requestParameters: RegistryListUserTraceSpansRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SpanListEnvelope>>;
     /**
-     * Use this operation to list the spans of one of this person\'s traces.
      * List the spans of one of this person\'s traces
      */
     registryListUserTraceSpans(requestParameters: RegistryListUserTraceSpansRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SpanListEnvelope>;
@@ -132,12 +129,10 @@ export declare class UsersApi extends runtime.BaseAPI {
      */
     registryListUserTracesRequestOpts(requestParameters: RegistryListUserTracesRequest): Promise<runtime.RequestOpts>;
     /**
-     * Use this operation to list the traces this person created.
      * List the traces this person created
      */
     registryListUserTracesRaw(requestParameters: RegistryListUserTracesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TraceListEnvelope>>;
     /**
-     * Use this operation to list the traces this person created.
      * List the traces this person created
      */
     registryListUserTraces(requestParameters: RegistryListUserTracesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TraceListEnvelope>;
@@ -160,12 +155,12 @@ export declare class UsersApi extends runtime.BaseAPI {
      */
     registryOnboardRequestOpts(): Promise<runtime.RequestOpts>;
     /**
-     * Scaffold the calling account and the caller\'s personal workspace: the account\'s shared root, the caller\'s own private root, their directory row, their groups, and the account membership every other read is gated on.  **This is the first call a new caller makes.** Before it, the caller holds no account membership, so every account-scoped read answers `403` and the caller has no workspace to create anything in.  **It also installs the deployment\'s extensions**, in dependency order, for any of them this account does not have yet — firing each one\'s `pre_install` gate and seeding `post_install` hook under **your** bearer, exactly as `POST /extensions/{extension}/install` does. On a brand-new account that is the whole set; on an existing one it is usually none, so a repeat onboard fires no install hooks at all. An account whose installs were interrupted completes on its next onboard.  **Idempotent.** A repeat call re-reads what exists and answers `200` with the same assets and `is_created: false`. It also re-asserts the caller\'s access relationships, so a relationship lost to a partial earlier run heals on the next call rather than needing repair.  The caller\'s role on the **shared** root is `admin` for whoever created the account and `member` for everyone after them, and a re-onboard preserves whatever the roster says — a caller whose role was changed is not restored to `admin` by signing in again.  **A machine identity may not call this**, and gets `403`. Account membership is held by people; a service account, an agent\'s own identity and an action identity each already hold whatever seats they were granted where they were provisioned.
+     * Scaffold the calling account and the caller\'s personal workspace: the account\'s shared root, the caller\'s own private root, their directory row, their groups, and the account membership every other read is gated on.  **This is the first call a new caller makes.** Before it, the caller holds no account membership, so every account-scoped read answers `403` and the caller has no workspace to create anything in.  **It also installs the deployment\'s extensions**, in dependency order, for any of them this account does not have yet — firing each one\'s `pre_install` gate and seeding `post_install` hook under **your** bearer, exactly as `POST /apps/{app}/install` does. On a brand-new account that is the whole set; on an existing one it is usually none, so a repeat onboard fires no install hooks at all. An account whose installs were interrupted completes on its next onboard.  **Idempotent.** A repeat call re-reads what exists and answers `200` with the same assets and `is_created: false`. It also re-asserts the caller\'s access relationships, so a relationship lost to a partial earlier run heals on the next call rather than needing repair.  The caller\'s role on the **shared** root is `admin` for whoever created the account and `member` for everyone after them, and a re-onboard preserves whatever the roster says — a caller whose role was changed is not restored to `admin` by signing in again.  **A machine identity may not call this**, and gets `403`. Account membership is held by people; a service account, an agent\'s own identity and an action identity each already hold whatever seats they were granted where they were provisioned.
      * Onboard the caller
      */
     registryOnboardRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OnboardResponse>>;
     /**
-     * Scaffold the calling account and the caller\'s personal workspace: the account\'s shared root, the caller\'s own private root, their directory row, their groups, and the account membership every other read is gated on.  **This is the first call a new caller makes.** Before it, the caller holds no account membership, so every account-scoped read answers `403` and the caller has no workspace to create anything in.  **It also installs the deployment\'s extensions**, in dependency order, for any of them this account does not have yet — firing each one\'s `pre_install` gate and seeding `post_install` hook under **your** bearer, exactly as `POST /extensions/{extension}/install` does. On a brand-new account that is the whole set; on an existing one it is usually none, so a repeat onboard fires no install hooks at all. An account whose installs were interrupted completes on its next onboard.  **Idempotent.** A repeat call re-reads what exists and answers `200` with the same assets and `is_created: false`. It also re-asserts the caller\'s access relationships, so a relationship lost to a partial earlier run heals on the next call rather than needing repair.  The caller\'s role on the **shared** root is `admin` for whoever created the account and `member` for everyone after them, and a re-onboard preserves whatever the roster says — a caller whose role was changed is not restored to `admin` by signing in again.  **A machine identity may not call this**, and gets `403`. Account membership is held by people; a service account, an agent\'s own identity and an action identity each already hold whatever seats they were granted where they were provisioned.
+     * Scaffold the calling account and the caller\'s personal workspace: the account\'s shared root, the caller\'s own private root, their directory row, their groups, and the account membership every other read is gated on.  **This is the first call a new caller makes.** Before it, the caller holds no account membership, so every account-scoped read answers `403` and the caller has no workspace to create anything in.  **It also installs the deployment\'s extensions**, in dependency order, for any of them this account does not have yet — firing each one\'s `pre_install` gate and seeding `post_install` hook under **your** bearer, exactly as `POST /apps/{app}/install` does. On a brand-new account that is the whole set; on an existing one it is usually none, so a repeat onboard fires no install hooks at all. An account whose installs were interrupted completes on its next onboard.  **Idempotent.** A repeat call re-reads what exists and answers `200` with the same assets and `is_created: false`. It also re-asserts the caller\'s access relationships, so a relationship lost to a partial earlier run heals on the next call rather than needing repair.  The caller\'s role on the **shared** root is `admin` for whoever created the account and `member` for everyone after them, and a re-onboard preserves whatever the roster says — a caller whose role was changed is not restored to `admin` by signing in again.  **A machine identity may not call this**, and gets `403`. Account membership is held by people; a service account, an agent\'s own identity and an action identity each already hold whatever seats they were granted where they were provisioned.
      * Onboard the caller
      */
     registryOnboard(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OnboardResponse>;
@@ -174,12 +169,10 @@ export declare class UsersApi extends runtime.BaseAPI {
      */
     registryQueryUserTraceStatsRequestOpts(requestParameters: RegistryQueryUserTraceStatsRequest): Promise<runtime.RequestOpts>;
     /**
-     * Use this operation to trace statistics for this person.
      * Trace statistics for this person
      */
     registryQueryUserTraceStatsRaw(requestParameters: RegistryQueryUserTraceStatsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
     /**
-     * Use this operation to trace statistics for this person.
      * Trace statistics for this person
      */
     registryQueryUserTraceStats(requestParameters: RegistryQueryUserTraceStatsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;

package/dist/raw/registry/apis/UsersApi.js

@@ -220,7 +220,6 @@ class UsersApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Use this operation to read one of this person\'s traces.
      * Read one of this person\'s traces
      */
     async registryGetUserTraceRaw(requestParameters, initOverrides) {
@@ -229,7 +228,6 @@ class UsersApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => (0, TraceDetailView_1.TraceDetailViewFromJSON)(jsonValue));
     }
     /**
-     * Use this operation to read one of this person\'s traces.
      * Read one of this person\'s traces
      */
     async registryGetUserTrace(requestParameters, initOverrides) {
@@ -275,7 +273,6 @@ class UsersApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Use this operation to list the spans of one of this person\'s traces.
      * List the spans of one of this person\'s traces
      */
     async registryListUserTraceSpansRaw(requestParameters, initOverrides) {
@@ -284,7 +281,6 @@ class UsersApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => (0, SpanListEnvelope_1.SpanListEnvelopeFromJSON)(jsonValue));
     }
     /**
-     * Use this operation to list the spans of one of this person\'s traces.
      * List the spans of one of this person\'s traces
      */
     async registryListUserTraceSpans(requestParameters, initOverrides) {
@@ -314,6 +310,9 @@ class UsersApi extends runtime.BaseAPI {
         if (requestParameters['sort'] != null) {
             queryParameters['sort'] = requestParameters['sort'];
         }
+        if (requestParameters['traceIds'] != null) {
+            queryParameters['trace_ids'] = requestParameters['traceIds'];
+        }
         const headerParameters = {};
         if (this.configuration && this.configuration.accessToken) {
             const token = this.configuration.accessToken;
@@ -332,7 +331,6 @@ class UsersApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Use this operation to list the traces this person created.
      * List the traces this person created
      */
     async registryListUserTracesRaw(requestParameters, initOverrides) {
@@ -341,7 +339,6 @@ class UsersApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => (0, TraceListEnvelope_1.TraceListEnvelopeFromJSON)(jsonValue));
     }
     /**
-     * Use this operation to list the traces this person created.
      * List the traces this person created
      */
     async registryListUserTraces(requestParameters, initOverrides) {
@@ -408,7 +405,7 @@ class UsersApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Scaffold the calling account and the caller\'s personal workspace: the account\'s shared root, the caller\'s own private root, their directory row, their groups, and the account membership every other read is gated on.  **This is the first call a new caller makes.** Before it, the caller holds no account membership, so every account-scoped read answers `403` and the caller has no workspace to create anything in.  **It also installs the deployment\'s extensions**, in dependency order, for any of them this account does not have yet — firing each one\'s `pre_install` gate and seeding `post_install` hook under **your** bearer, exactly as `POST /extensions/{extension}/install` does. On a brand-new account that is the whole set; on an existing one it is usually none, so a repeat onboard fires no install hooks at all. An account whose installs were interrupted completes on its next onboard.  **Idempotent.** A repeat call re-reads what exists and answers `200` with the same assets and `is_created: false`. It also re-asserts the caller\'s access relationships, so a relationship lost to a partial earlier run heals on the next call rather than needing repair.  The caller\'s role on the **shared** root is `admin` for whoever created the account and `member` for everyone after them, and a re-onboard preserves whatever the roster says — a caller whose role was changed is not restored to `admin` by signing in again.  **A machine identity may not call this**, and gets `403`. Account membership is held by people; a service account, an agent\'s own identity and an action identity each already hold whatever seats they were granted where they were provisioned.
+     * Scaffold the calling account and the caller\'s personal workspace: the account\'s shared root, the caller\'s own private root, their directory row, their groups, and the account membership every other read is gated on.  **This is the first call a new caller makes.** Before it, the caller holds no account membership, so every account-scoped read answers `403` and the caller has no workspace to create anything in.  **It also installs the deployment\'s extensions**, in dependency order, for any of them this account does not have yet — firing each one\'s `pre_install` gate and seeding `post_install` hook under **your** bearer, exactly as `POST /apps/{app}/install` does. On a brand-new account that is the whole set; on an existing one it is usually none, so a repeat onboard fires no install hooks at all. An account whose installs were interrupted completes on its next onboard.  **Idempotent.** A repeat call re-reads what exists and answers `200` with the same assets and `is_created: false`. It also re-asserts the caller\'s access relationships, so a relationship lost to a partial earlier run heals on the next call rather than needing repair.  The caller\'s role on the **shared** root is `admin` for whoever created the account and `member` for everyone after them, and a re-onboard preserves whatever the roster says — a caller whose role was changed is not restored to `admin` by signing in again.  **A machine identity may not call this**, and gets `403`. Account membership is held by people; a service account, an agent\'s own identity and an action identity each already hold whatever seats they were granted where they were provisioned.
      * Onboard the caller
      */
     async registryOnboardRaw(initOverrides) {
@@ -417,7 +414,7 @@ class UsersApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => (0, OnboardResponse_1.OnboardResponseFromJSON)(jsonValue));
     }
     /**
-     * Scaffold the calling account and the caller\'s personal workspace: the account\'s shared root, the caller\'s own private root, their directory row, their groups, and the account membership every other read is gated on.  **This is the first call a new caller makes.** Before it, the caller holds no account membership, so every account-scoped read answers `403` and the caller has no workspace to create anything in.  **It also installs the deployment\'s extensions**, in dependency order, for any of them this account does not have yet — firing each one\'s `pre_install` gate and seeding `post_install` hook under **your** bearer, exactly as `POST /extensions/{extension}/install` does. On a brand-new account that is the whole set; on an existing one it is usually none, so a repeat onboard fires no install hooks at all. An account whose installs were interrupted completes on its next onboard.  **Idempotent.** A repeat call re-reads what exists and answers `200` with the same assets and `is_created: false`. It also re-asserts the caller\'s access relationships, so a relationship lost to a partial earlier run heals on the next call rather than needing repair.  The caller\'s role on the **shared** root is `admin` for whoever created the account and `member` for everyone after them, and a re-onboard preserves whatever the roster says — a caller whose role was changed is not restored to `admin` by signing in again.  **A machine identity may not call this**, and gets `403`. Account membership is held by people; a service account, an agent\'s own identity and an action identity each already hold whatever seats they were granted where they were provisioned.
+     * Scaffold the calling account and the caller\'s personal workspace: the account\'s shared root, the caller\'s own private root, their directory row, their groups, and the account membership every other read is gated on.  **This is the first call a new caller makes.** Before it, the caller holds no account membership, so every account-scoped read answers `403` and the caller has no workspace to create anything in.  **It also installs the deployment\'s extensions**, in dependency order, for any of them this account does not have yet — firing each one\'s `pre_install` gate and seeding `post_install` hook under **your** bearer, exactly as `POST /apps/{app}/install` does. On a brand-new account that is the whole set; on an existing one it is usually none, so a repeat onboard fires no install hooks at all. An account whose installs were interrupted completes on its next onboard.  **Idempotent.** A repeat call re-reads what exists and answers `200` with the same assets and `is_created: false`. It also re-asserts the caller\'s access relationships, so a relationship lost to a partial earlier run heals on the next call rather than needing repair.  The caller\'s role on the **shared** root is `admin` for whoever created the account and `member` for everyone after them, and a re-onboard preserves whatever the roster says — a caller whose role was changed is not restored to `admin` by signing in again.  **A machine identity may not call this**, and gets `403`. Account membership is held by people; a service account, an agent\'s own identity and an action identity each already hold whatever seats they were granted where they were provisioned.
      * Onboard the caller
      */
     async registryOnboard(initOverrides) {
@@ -458,7 +455,6 @@ class UsersApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Use this operation to trace statistics for this person.
      * Trace statistics for this person
      */
     async registryQueryUserTraceStatsRaw(requestParameters, initOverrides) {
@@ -472,7 +468,6 @@ class UsersApi extends runtime.BaseAPI {
         }
     }
     /**
-     * Use this operation to trace statistics for this person.
      * Trace statistics for this person
      */
     async registryQueryUserTraceStats(requestParameters, initOverrides) {

package/dist/raw/registry/apis/WorkspacesApi.d.ts

@@ -167,12 +167,12 @@ export declare class WorkspacesApi extends runtime.BaseAPI {
      */
     registryListWorkspacesRequestOpts(requestParameters: RegistryListWorkspacesRequest): Promise<runtime.RequestOpts>;
     /**
-     * A page of the non-deleted workspaces the caller can discover. Supports the shared grammar: `filter[field][op]=`, `sort=`, `q=`, `limit`/`offset`, `count=false`. Fields: `name`, `display_name`, `description`, `kind`, `workspace_status`, `parent_id`, `created_at`, `updated_at`.  `include=member_count` attaches each row\'s roster size from one grouped read. It is **absent rather than zero** on a workspace the caller can discover but not read into: this list runs under `discover`, which reaches through `discoverable_by`, while the count is taken under `read` on the membership rows — so a headcount is not something discovery alone reveals.  `include=artifact_counts` attaches each row\'s `artifact_count` and its per-kind `artifact_count_by_kind` breakdown, from one grouped read — the pair the pre-Postgres stack served here and the cutover dropped. Unlike `member_count` it is present on **every** row of the page, including a workspace the caller can discover but has not joined, and a `0` therefore means zero: it is taken under the page\'s own `discover` receipt, because a count of artifacts identifies nobody. It counts what `POST /aggregate` counts — live heads, no system artifacts, no archived ones, discoverable kinds only — so the number does not change when the caller joins.  `include=permissions` attaches each row\'s advisory `can_*` capability matrix. Advisory only — a UI gates controls on it; it never authorizes a request.  `include=plugin` attaches each row\'s marketplace plugin — its catalogue name, plugin name, rendered `<name>@<marketplace>` install handle, and content `version` — so a client holding an installed plugin can tell whether it is current. It is **absent** rather than defaulted where the answer is not knowable: a workspace the caller can discover but not read is not packaged at all, a handle that slugs to nothing gets no plugin, and an assembly that degraded would yield a version no clone will serve. The embed re-runs the marketplace\'s own per-container assembly, so it costs materially more than the other two; ask for it on the interval a client checks for updates, not on every page.
+     * A page of the **active** workspaces the caller can discover. Archived rows are excluded **by default**, and `filter[workspace_status][eq]=archived` (or `[in]=active,archived`) is the only way to see them — there is no separate flag, so a status filter governs the page outright instead of fighting a default. `deleted` rows are never listed, however you filter.  Supports the shared grammar: `filter[field][op]=`, `sort=`, `q=`, `limit`/`offset`, `count=false`. Fields: `name`, `display_name`, `description`, `kind`, `workspace_status`, `parent_id`, `created_at`, `updated_at`. The bare spellings `workspace_status`, `status`, `kind`, `parent_id` and `name` are refused with a `400` naming the `filter[...][eq]=` form, rather than silently widening the page as they used to; any other unrecognised parameter is still ignored.  `include=member_count` attaches each row\'s roster size from one grouped read. It is **absent rather than zero** on a workspace the caller can discover but not read into: this list runs under `discover`, which reaches through `discoverable_by`, while the count is taken under `read` on the membership rows — so a headcount is not something discovery alone reveals.  `include=artifact_counts` attaches each row\'s `artifact_count` and its per-kind `artifact_count_by_kind` breakdown, from one grouped read — the pair the pre-Postgres stack served here and the cutover dropped. Unlike `member_count` it is present on **every** row of the page, including a workspace the caller can discover but has not joined, and a `0` therefore means zero: it is taken under the page\'s own `discover` receipt, because a count of artifacts identifies nobody. It counts what `POST /aggregate` counts — live heads, no system artifacts, no archived ones, discoverable kinds only — so the number does not change when the caller joins.  `include=permissions` attaches each row\'s advisory `can_*` capability matrix. Advisory only — a UI gates controls on it; it never authorizes a request.  `include=plugin` attaches each row\'s marketplace plugin — its catalogue name, plugin name, rendered `<name>@<marketplace>` install handle, and content `version` — so a client holding an installed plugin can tell whether it is current. It is **absent** rather than defaulted where the answer is not knowable: a workspace the caller can discover but not read is not packaged at all, a handle that slugs to nothing gets no plugin, and an assembly that degraded would yield a version no clone will serve. The embed re-runs the marketplace\'s own per-container assembly, so it costs materially more than the other two; ask for it on the interval a client checks for updates, not on every page.
      * List workspaces
      */
     registryListWorkspacesRaw(requestParameters: RegistryListWorkspacesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<WorkspacesPage>>;
     /**
-     * A page of the non-deleted workspaces the caller can discover. Supports the shared grammar: `filter[field][op]=`, `sort=`, `q=`, `limit`/`offset`, `count=false`. Fields: `name`, `display_name`, `description`, `kind`, `workspace_status`, `parent_id`, `created_at`, `updated_at`.  `include=member_count` attaches each row\'s roster size from one grouped read. It is **absent rather than zero** on a workspace the caller can discover but not read into: this list runs under `discover`, which reaches through `discoverable_by`, while the count is taken under `read` on the membership rows — so a headcount is not something discovery alone reveals.  `include=artifact_counts` attaches each row\'s `artifact_count` and its per-kind `artifact_count_by_kind` breakdown, from one grouped read — the pair the pre-Postgres stack served here and the cutover dropped. Unlike `member_count` it is present on **every** row of the page, including a workspace the caller can discover but has not joined, and a `0` therefore means zero: it is taken under the page\'s own `discover` receipt, because a count of artifacts identifies nobody. It counts what `POST /aggregate` counts — live heads, no system artifacts, no archived ones, discoverable kinds only — so the number does not change when the caller joins.  `include=permissions` attaches each row\'s advisory `can_*` capability matrix. Advisory only — a UI gates controls on it; it never authorizes a request.  `include=plugin` attaches each row\'s marketplace plugin — its catalogue name, plugin name, rendered `<name>@<marketplace>` install handle, and content `version` — so a client holding an installed plugin can tell whether it is current. It is **absent** rather than defaulted where the answer is not knowable: a workspace the caller can discover but not read is not packaged at all, a handle that slugs to nothing gets no plugin, and an assembly that degraded would yield a version no clone will serve. The embed re-runs the marketplace\'s own per-container assembly, so it costs materially more than the other two; ask for it on the interval a client checks for updates, not on every page.
+     * A page of the **active** workspaces the caller can discover. Archived rows are excluded **by default**, and `filter[workspace_status][eq]=archived` (or `[in]=active,archived`) is the only way to see them — there is no separate flag, so a status filter governs the page outright instead of fighting a default. `deleted` rows are never listed, however you filter.  Supports the shared grammar: `filter[field][op]=`, `sort=`, `q=`, `limit`/`offset`, `count=false`. Fields: `name`, `display_name`, `description`, `kind`, `workspace_status`, `parent_id`, `created_at`, `updated_at`. The bare spellings `workspace_status`, `status`, `kind`, `parent_id` and `name` are refused with a `400` naming the `filter[...][eq]=` form, rather than silently widening the page as they used to; any other unrecognised parameter is still ignored.  `include=member_count` attaches each row\'s roster size from one grouped read. It is **absent rather than zero** on a workspace the caller can discover but not read into: this list runs under `discover`, which reaches through `discoverable_by`, while the count is taken under `read` on the membership rows — so a headcount is not something discovery alone reveals.  `include=artifact_counts` attaches each row\'s `artifact_count` and its per-kind `artifact_count_by_kind` breakdown, from one grouped read — the pair the pre-Postgres stack served here and the cutover dropped. Unlike `member_count` it is present on **every** row of the page, including a workspace the caller can discover but has not joined, and a `0` therefore means zero: it is taken under the page\'s own `discover` receipt, because a count of artifacts identifies nobody. It counts what `POST /aggregate` counts — live heads, no system artifacts, no archived ones, discoverable kinds only — so the number does not change when the caller joins.  `include=permissions` attaches each row\'s advisory `can_*` capability matrix. Advisory only — a UI gates controls on it; it never authorizes a request.  `include=plugin` attaches each row\'s marketplace plugin — its catalogue name, plugin name, rendered `<name>@<marketplace>` install handle, and content `version` — so a client holding an installed plugin can tell whether it is current. It is **absent** rather than defaulted where the answer is not knowable: a workspace the caller can discover but not read is not packaged at all, a handle that slugs to nothing gets no plugin, and an assembly that degraded would yield a version no clone will serve. The embed re-runs the marketplace\'s own per-container assembly, so it costs materially more than the other two; ask for it on the interval a client checks for updates, not on every page.
      * List workspaces
      */
     registryListWorkspaces(requestParameters?: RegistryListWorkspacesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<WorkspacesPage>;