@kinotic-ai/os-api 1.14.2 → 3.0.0

package/dist/index.cjs

@@ -43,6 +43,7 @@ __export(exports_src, {
   isSystemParticipant: () => isSystemParticipant,
   isOrganizationParticipant: () => isOrganizationParticipant,
   isApplicationParticipant: () => isApplicationParticipant,
+  appZone: () => appZone,
   WorkloadStatus: () => WorkloadStatus,
   WorkloadServiceProxy: () => WorkloadServiceProxy,
   Workload: () => Workload,
@@ -56,6 +57,7 @@ __export(exports_src, {
   TenantSelectionC3Type: () => TenantSelectionC3Type,
   TenantIdDecorator: () => TenantIdDecorator,
   SingleLoggerLevelsDescriptor: () => SingleLoggerLevelsDescriptor,
+  SYSTEM_ZONE: () => SYSTEM_ZONE,
   RepositoryConnectionStatus: () => RepositoryConnectionStatus,
   QueryOptionsC3Type: () => QueryOptionsC3Type,
   QueryDecorator: () => QueryDecorator,
@@ -71,6 +73,7 @@ __export(exports_src, {
   OsApiPlugin: () => OsApiPlugin,
   OrganizationService: () => OrganizationService,
   Organization: () => Organization,
+  OS_API_ZONE: () => OS_API_ZONE,
   NotIndexedDecorator: () => NotIndexedDecorator,
   NestedDecorator: () => NestedDecorator,
   NamedQueriesDefinitionService: () => NamedQueriesDefinitionService,
@@ -79,6 +82,7 @@ __export(exports_src, {
   MemberService: () => MemberService,
   LoggersDescriptor: () => LoggersDescriptor,
   LoggerLevelsDescriptor: () => LoggerLevelsDescriptor,
+  LogService: () => LogService,
   LogManager: () => LogManager,
   LogLevel: () => LogLevel,
   KinoticProjectConfig: () => KinoticProjectConfig,
@@ -104,7 +108,9 @@ __export(exports_src, {
   AutoGeneratedIdDecorator: () => AutoGeneratedIdDecorator,
   AuthType: () => AuthType,
   ApplicationService: () => ApplicationService,
-  Application: () => Application
+  Application: () => Application,
+  APP_ZONE_PREFIX: () => APP_ZONE_PREFIX,
+  APP_API_ZONE: () => import_persistence2.APP_API_ZONE
 });
 module.exports = __toCommonJS(exports_src);
 
@@ -287,11 +293,12 @@ class TenantSelectionC3Type extends import_idl17.ArrayC3Type {
 class Application {
   id;
   organizationId;
+  name;
   description;
   tenantPerUser = false;
   updated = null;
-  constructor(id, description) {
-    this.id = id;
+  constructor(name, description) {
+    this.name = name;
     this.description = description;
   }
 }
@@ -412,11 +419,15 @@ class Workload {
   id = null;
   name;
   description;
+  organizationId = null;
+  applicationId = null;
   providerType = "BOXLITE" /* BOXLITE */;
   image;
   vcpus = 1;
   memoryMb = 512;
   diskSizeMb = 1024;
+  detached = true;
+  autoRemove = false;
   status = "PENDING" /* PENDING */;
   environment = {};
   portMappings = [];
@@ -577,12 +588,24 @@ class KinoticOsCredentialsAuthProvider {
     return this.authHeaders;
   }
 }
-// packages/os-api/src/api/services/IApplicationService.ts
+// packages/os-api/src/api/PlatformZones.ts
 var import_core = require("@kinotic-ai/core");
+var import_persistence2 = require("@kinotic-ai/persistence");
+var OS_API_ZONE = "os_api";
+var SYSTEM_ZONE = "system";
+var APP_ZONE_PREFIX = "app";
+function appZone(organizationId, applicationId) {
+  import_core.validateLabel(organizationId);
+  import_core.validateLabel(applicationId);
+  return `${APP_ZONE_PREFIX}.${organizationId}.${applicationId}`;
+}
+
+// packages/os-api/src/api/services/IApplicationService.ts
+var import_core2 = require("@kinotic-ai/core");
 
-class ApplicationService extends import_core.CrudServiceProxy {
+class ApplicationService extends import_core2.CrudServiceProxy {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.os.api.services.ApplicationService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.ApplicationService`));
   }
   createApplicationIfNotExist(id, description) {
     return this.serviceProxy.invoke("createApplicationIfNotExist", [id, description]);
@@ -592,11 +615,11 @@ class ApplicationService extends import_core.CrudServiceProxy {
   }
 }
 // packages/os-api/src/api/services/IOrganizationService.ts
-var import_core2 = require("@kinotic-ai/core");
+var import_core3 = require("@kinotic-ai/core");
 
-class OrganizationService extends import_core2.CrudServiceProxy {
+class OrganizationService extends import_core3.CrudServiceProxy {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.os.api.services.OrganizationService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.OrganizationService`));
   }
   getOidcConfigurations(organizationId) {
     return this.serviceProxy.invoke("getOidcConfigurations", [organizationId]);
@@ -632,11 +655,11 @@ class LoggersDescriptor {
   groups = new Map;
 }
 // packages/os-api/src/api/services/IProjectService.ts
-var import_core3 = require("@kinotic-ai/core");
+var import_core4 = require("@kinotic-ai/core");
 
-class ProjectService extends import_core3.CrudServiceProxy {
+class ProjectService extends import_core4.CrudServiceProxy {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.os.api.services.ProjectService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.ProjectService`));
   }
   countForApplication(applicationId) {
     return this.serviceProxy.invoke("countForApplication", [applicationId]);
@@ -646,7 +669,7 @@ class ProjectService extends import_core3.CrudServiceProxy {
   }
   async findAllForApplication(applicationId, pageable) {
     const page = await this.findAllForApplicationSinglePage(applicationId, pageable);
-    return new import_core3.FunctionalIterablePage(pageable, page, (pageable2) => this.findAllForApplicationSinglePage(applicationId, pageable2));
+    return new import_core4.FunctionalIterablePage(pageable, page, (pageable2) => this.findAllForApplicationSinglePage(applicationId, pageable2));
   }
   findAllForApplicationSinglePage(applicationId, pageable) {
     return this.serviceProxy.invoke("findAllForApplication", [applicationId, pageable]);
@@ -662,7 +685,7 @@ class ProjectService extends import_core3.CrudServiceProxy {
 class LogManager {
   serviceProxy;
   constructor(kinotic) {
-    this.serviceProxy = kinotic.serviceProxy("org.kinotic.os.api.services.LogManager");
+    this.serviceProxy = kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.LogManager`);
   }
   loggers(nodeId) {
     return this.serviceProxy.invoke("loggers", null, nodeId);
@@ -684,12 +707,25 @@ class LogManager {
     return this.serviceProxy.invoke("configureLogLevel", [name, level], nodeId);
   }
 }
+// packages/os-api/src/api/services/ILogService.ts
+class LogService {
+  serviceProxy;
+  constructor(kinotic) {
+    this.serviceProxy = kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.LogService`);
+  }
+  tail(workloadId) {
+    return this.serviceProxy.invokeStream("tail", [workloadId]);
+  }
+  history(query) {
+    return this.serviceProxy.invoke("history", [query]);
+  }
+}
 // packages/os-api/src/api/services/IEntityDefinitionService.ts
-var import_core4 = require("@kinotic-ai/core");
+var import_core5 = require("@kinotic-ai/core");
 
-class EntityDefinitionService extends import_core4.CrudServiceProxy {
+class EntityDefinitionService extends import_core5.CrudServiceProxy {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.persistence.api.services.EntityDefinitionService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.persistence.api.services.EntityDefinitionService`));
   }
   countForApplication(applicationId) {
     return this.serviceProxy.invoke("countForApplication", [applicationId]);
@@ -702,14 +738,14 @@ class EntityDefinitionService extends import_core4.CrudServiceProxy {
   }
   async findAllForApplication(applicationId, pageable) {
     const page = await this.findAllForApplicationSinglePage(applicationId, pageable);
-    return new import_core4.FunctionalIterablePage(pageable, page, (pageable2) => this.findAllForApplicationSinglePage(applicationId, pageable2));
+    return new import_core5.FunctionalIterablePage(pageable, page, (pageable2) => this.findAllForApplicationSinglePage(applicationId, pageable2));
   }
   findAllPublishedForApplication(applicationId, pageable) {
     return this.serviceProxy.invoke("findAllPublishedForApplication", [applicationId, pageable]);
   }
   async findAllForProject(projectId, pageable) {
     const page = await this.findAllForProjectSinglePage(projectId, pageable);
-    return new import_core4.FunctionalIterablePage(pageable, page, (pageable2) => this.findAllForProjectSinglePage(projectId, pageable2));
+    return new import_core5.FunctionalIterablePage(pageable, page, (pageable2) => this.findAllForProjectSinglePage(projectId, pageable2));
   }
   findAllForProjectSinglePage(projectId, pageable) {
     return this.serviceProxy.invoke("findAllForProject", [projectId, pageable]);
@@ -725,11 +761,11 @@ class EntityDefinitionService extends import_core4.CrudServiceProxy {
   }
 }
 // packages/os-api/src/api/services/INamedQueriesDefinitionService.ts
-var import_core5 = require("@kinotic-ai/core");
+var import_core6 = require("@kinotic-ai/core");
 
-class NamedQueriesDefinitionService extends import_core5.CrudServiceProxy {
+class NamedQueriesDefinitionService extends import_core6.CrudServiceProxy {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.persistence.api.services.NamedQueriesDefinitionService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.persistence.api.services.NamedQueriesDefinitionService`));
   }
   syncIndex() {
     return this.serviceProxy.invoke("syncIndex", []);
@@ -739,7 +775,7 @@ class NamedQueriesDefinitionService extends import_core5.CrudServiceProxy {
 class MigrationService {
   serviceProxy;
   constructor(kinotic) {
-    this.serviceProxy = kinotic.serviceProxy("org.kinotic.persistence.api.services.MigrationService");
+    this.serviceProxy = kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.persistence.api.services.MigrationService`);
   }
   executeMigrations(migrationRequest) {
     return this.serviceProxy.invoke("executeMigrations", [migrationRequest]);
@@ -755,18 +791,18 @@ class MigrationService {
 class DataInsightsService {
   serviceProxy;
   constructor(kinotic) {
-    this.serviceProxy = kinotic.serviceProxy("org.kinotic.persistence.api.services.insights.DataInsightsService");
+    this.serviceProxy = kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.persistence.api.services.insights.DataInsightsService`);
   }
   processRequest(request) {
     return this.serviceProxy.invokeStream("processRequest", [request]);
   }
 }
 // packages/os-api/src/api/services/IVmNodeService.ts
-var import_core6 = require("@kinotic-ai/core");
+var import_core7 = require("@kinotic-ai/core");
 
-class VmNodeServiceProxy extends import_core6.CrudServiceProxy {
+class VmNodeServiceProxy extends import_core7.CrudServiceProxy {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.os.api.services.VmNodeService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.VmNodeService`));
   }
   findAvailableNode(requiredCpus, requiredMemoryMb, requiredDiskMb) {
     return this.serviceProxy.invoke("findAvailableNode", [requiredCpus, requiredMemoryMb, requiredDiskMb]);
@@ -776,15 +812,15 @@ class VmNodeServiceProxy extends import_core6.CrudServiceProxy {
   }
 }
 // packages/os-api/src/api/services/IWorkloadService.ts
-var import_core7 = require("@kinotic-ai/core");
+var import_core8 = require("@kinotic-ai/core");
 
-class WorkloadServiceProxy extends import_core7.CrudServiceProxy {
+class WorkloadServiceProxy extends import_core8.CrudServiceProxy {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.os.api.services.WorkloadService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.WorkloadService`));
   }
   async findAllForNode(nodeId, pageable) {
     const page = await this.findAllForNodeSinglePage(nodeId, pageable);
-    return new import_core7.FunctionalIterablePage(pageable, page, (pageable2) => this.findAllForNodeSinglePage(nodeId, pageable2));
+    return new import_core8.FunctionalIterablePage(pageable, page, (pageable2) => this.findAllForNodeSinglePage(nodeId, pageable2));
   }
   findAllForNodeSinglePage(nodeId, pageable) {
     return this.serviceProxy.invoke("findAllForNode", [nodeId, pageable]);
@@ -797,20 +833,20 @@ class WorkloadServiceProxy extends import_core7.CrudServiceProxy {
   }
 }
 // packages/os-api/src/api/services/IMemberService.ts
-var import_core8 = require("@kinotic-ai/core");
+var import_core9 = require("@kinotic-ai/core");
 
 class MemberService {
   serviceProxy;
   constructor(kinotic) {
-    this.serviceProxy = kinotic.serviceProxy("org.kinotic.os.api.services.iam.MemberService");
+    this.serviceProxy = kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.iam.MemberService`);
   }
   async findMembers(applicationId, pageable) {
     const page = await this.serviceProxy.invoke("findMembers", [applicationId, pageable]);
-    return new import_core8.FunctionalIterablePage(pageable, page, (next) => this.serviceProxy.invoke("findMembers", [applicationId, next]));
+    return new import_core9.FunctionalIterablePage(pageable, page, (next) => this.serviceProxy.invoke("findMembers", [applicationId, next]));
   }
   async searchMembers(searchText, applicationId, pageable) {
     const page = await this.serviceProxy.invoke("searchMembers", [searchText, applicationId, pageable]);
-    return new import_core8.FunctionalIterablePage(pageable, page, (next) => this.serviceProxy.invoke("searchMembers", [searchText, applicationId, next]));
+    return new import_core9.FunctionalIterablePage(pageable, page, (next) => this.serviceProxy.invoke("searchMembers", [searchText, applicationId, next]));
   }
   inviteMember(email, displayName, applicationId) {
     return this.serviceProxy.invoke("inviteMember", [email, displayName, applicationId]);
@@ -823,7 +859,7 @@ class MemberService {
   }
   async findPendingInvites(applicationId, pageable) {
     const page = await this.serviceProxy.invoke("findPendingInvites", [applicationId, pageable]);
-    return new import_core8.FunctionalIterablePage(pageable, page, (next) => this.serviceProxy.invoke("findPendingInvites", [applicationId, next]));
+    return new import_core9.FunctionalIterablePage(pageable, page, (next) => this.serviceProxy.invoke("findPendingInvites", [applicationId, next]));
   }
   cancelInvite(inviteId) {
     return this.serviceProxy.invoke("cancelInvite", [inviteId]);
@@ -836,11 +872,11 @@ class MemberService {
   }
 }
 // packages/os-api/src/api/services/IInviteEmailTemplateService.ts
-var import_core9 = require("@kinotic-ai/core");
+var import_core10 = require("@kinotic-ai/core");
 
-class InviteEmailTemplateService extends import_core9.CrudServiceProxy {
+class InviteEmailTemplateService extends import_core10.CrudServiceProxy {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.os.api.services.InviteEmailTemplateService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.InviteEmailTemplateService`));
   }
   findByApplication(applicationId) {
     return this.serviceProxy.invoke("findByApplication", [applicationId]);
@@ -850,18 +886,18 @@ class InviteEmailTemplateService extends import_core9.CrudServiceProxy {
 class DeviceApprovalService {
   serviceProxy;
   constructor(kinotic) {
-    this.serviceProxy = kinotic.serviceProxy("org.kinotic.os.api.services.iam.DeviceApprovalService");
+    this.serviceProxy = kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.iam.DeviceApprovalService`);
   }
   approve(userCode) {
     return this.serviceProxy.invoke("approve", [userCode]);
   }
 }
 // packages/os-api/src/api/services/IGitHubAppInstallationService.ts
-var import_core10 = require("@kinotic-ai/core");
+var import_core11 = require("@kinotic-ai/core");
 
-class GitHubAppInstallationService extends import_core10.CrudServiceProxy {
+class GitHubAppInstallationService extends import_core11.CrudServiceProxy {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.github.api.services.GitHubAppInstallationService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.github.api.services.GitHubAppInstallationService`));
   }
   startInstall(returnTo) {
     return this.serviceProxy.invoke("startInstall", [returnTo]);

package/dist/index.d.cts

@@ -137,6 +137,9 @@ declare class TenantSelectionC3Type extends ArrayC3Type {
 }
 import { Identifiable } from "@kinotic-ai/core";
 declare class Application implements Identifiable<string> {
+	/**
+	* The slugified {@link name}, minted by the server at creation
+	*/
 	id: string;
 	/**
 	* The id of the organization that owns this application.
@@ -144,6 +147,7 @@ declare class Application implements Identifiable<string> {
 	* with a missing or mismatched organizationId.
 	*/
 	organizationId: string;
+	name: string;
 	description: string;
 	/**
 	* When true, every APPLICATION-scope user created for this application receives an
@@ -152,7 +156,7 @@ declare class Application implements Identifiable<string> {
 	*/
 	tenantPerUser: boolean;
 	updated: number | null;
-	constructor(id: string, description: string);
+	constructor(name: string, description: string);
 }
 import { Identifiable as Identifiable2 } from "@kinotic-ai/core";
 /**
@@ -485,6 +489,16 @@ declare class Workload implements Identifiable6<string> {
 	*/
 	description?: string;
 	/**
+	* The Organization this workload runs on behalf of, and which may view its logs.
+	* Null for platform workloads (SYSTEM scope).
+	*/
+	organizationId: string | null;
+	/**
+	* The Application this workload runs on behalf of, or null if none.
+	* When set, organizationId must also be set.
+	*/
+	applicationId: string | null;
+	/**
 	* The VM provider to use for this workload.
 	*/
 	providerType: VmProviderType;
@@ -505,6 +519,17 @@ declare class Workload implements Identifiable6<string> {
 	*/
 	diskSizeMb: number;
 	/**
+	* When true the VM runs detached from the vm-manager process and survives its
+	* restarts. Non-detached workloads end when the vm-manager exits.
+	*/
+	detached: boolean;
+	/**
+	* When true the VM and its disk are discarded when the workload stops, so a
+	* stopped workload cannot be restarted. When false the disk is kept and the
+	* workload may be restarted in place.
+	*/
+	autoRemove: boolean;
+	/**
 	* Current status of the workload.
 	*/
 	status: WorkloadStatus;
@@ -525,7 +550,9 @@ declare class Workload implements Identifiable6<string> {
 	*/
 	entrypoint: string[];
 	/**
-	* Overrides the image command (CMD). Empty keeps the image default.
+	* Overrides the image command (CMD). Empty keeps the image default, unless
+	* entrypoint is declared — then the image CMD is dropped so the entrypoint
+	* runs exactly as given.
 	*/
 	cmd: string[];
 	/**
@@ -596,6 +623,19 @@ declare class VmNode implements Identifiable7<string> {
 	constructor(id: string, name: string, hostname: string);
 }
 /**
+* Parameters for a historical log query: one workload's logs over a time range.
+*/
+interface LogQuery {
+	/** Id of the workload whose logs to return. */
+	workloadId: string;
+	/** Start of the time range, epoch milliseconds (inclusive). */
+	start: number;
+	/** End of the time range, epoch milliseconds (inclusive). */
+	end: number;
+	/** Maximum number of log entries to return. */
+	limit: number;
+}
+/**
 * Authentication method for an {@link IamUser}.
 */
 declare enum AuthType {
@@ -898,13 +938,15 @@ import { IKinotic } from "@kinotic-ai/core";
 import { CrudServiceProxy, ICrudServiceProxy } from "@kinotic-ai/core";
 interface IApplicationService extends ICrudServiceProxy<Application> {
 	/**
-	* Creates a new application if it does not already exist. The organization id is derived
-	* from the authenticated participant on the server.
-	* @param id the id of the application to create
+	* Creates a new application if it does not already exist, deriving its id from the
+	* slugified name. The organization id is derived from the authenticated participant on
+	* the server.
+	* @param name the name of the application to create
 	* @param description the description of the application to create
-	* @return {@link Promise} emitting the created application
+	* @return {@link Promise} emitting the created application, or the existing application
+	*         whose id matches the slugified name
 	*/
-	createApplicationIfNotExist(id: string, description: string): Promise<Application>;
+	createApplicationIfNotExist(name: string, description: string): Promise<Application>;
 	/**
 	* This operation makes all the recent writes immediately available for search.
 	* @return a Promise that resolves when the operation is complete
@@ -1032,7 +1074,33 @@ declare class LogManager implements ILogManager {
 	loggerLevels(nodeId: string, name: string): Promise<LoggerLevelsDescriptor>;
 	configureLogLevel(nodeId: string, name: string, level: LogLevel): Promise<void>;
 }
-import { CrudServiceProxy as CrudServiceProxy4, IKinotic as IKinotic5, ICrudServiceProxy as ICrudServiceProxy4, IterablePage as IterablePage2, Page, Pageable as Pageable2 } from "@kinotic-ai/core";
+import { IKinotic as IKinotic5 } from "@kinotic-ai/core";
+import { Observable } from "rxjs";
+/**
+* Streams and queries the logs of workloads the authenticated participant may view: an
+* organization participant sees its own organization's workloads, a system participant sees any.
+* Both methods yield the raw Loki response bytes; the caller parses Loki's wire format.
+*/
+interface ILogService {
+	/**
+	* Opens a live tail of the given workload's logs. Each emission is a raw Loki tail frame,
+	* and the stream stays open until unsubscribed.
+	* @param workloadId the id of the workload to follow
+	*/
+	tail(workloadId: string): Observable<Uint8Array>;
+	/**
+	* Returns a workload's historical logs as the raw Loki query_range response.
+	* @param query the workload, time range, and limit
+	*/
+	history(query: LogQuery): Promise<Uint8Array>;
+}
+declare class LogService implements ILogService {
+	private readonly serviceProxy;
+	constructor(kinotic: IKinotic5);
+	tail(workloadId: string): Observable<Uint8Array>;
+	history(query: LogQuery): Promise<Uint8Array>;
+}
+import { CrudServiceProxy as CrudServiceProxy4, IKinotic as IKinotic6, ICrudServiceProxy as ICrudServiceProxy4, IterablePage as IterablePage2, Page, Pageable as Pageable2 } from "@kinotic-ai/core";
 interface IEntityDefinitionService extends ICrudServiceProxy4<EntityDefinition> {
 	/**
 	* Counts all entity definitions for the given application.
@@ -1087,7 +1155,7 @@ interface IEntityDefinitionService extends ICrudServiceProxy4<EntityDefinition>
 	unPublish(entityDefinitionId: string): Promise<void>;
 }
 declare class EntityDefinitionService extends CrudServiceProxy4<EntityDefinition> implements IEntityDefinitionService {
-	constructor(kinotic: IKinotic5);
+	constructor(kinotic: IKinotic6);
 	countForApplication(applicationId: string): Promise<number>;
 	countForProject(projectId: string): Promise<number>;
 	findAllForApplicationSinglePage(applicationId: string, pageable: Pageable2): Promise<Page<EntityDefinition>>;
@@ -1099,7 +1167,7 @@ declare class EntityDefinitionService extends CrudServiceProxy4<EntityDefinition
 	unPublish(entityDefinitionId: string): Promise<void>;
 	syncIndex(): Promise<void>;
 }
-import { IKinotic as IKinotic6 } from "@kinotic-ai/core";
+import { IKinotic as IKinotic7 } from "@kinotic-ai/core";
 import { CrudServiceProxy as CrudServiceProxy5, ICrudServiceProxy as ICrudServiceProxy5 } from "@kinotic-ai/core";
 interface INamedQueriesDefinitionService extends ICrudServiceProxy5<NamedQueriesDefinition> {
 	/**
@@ -1109,10 +1177,10 @@ interface INamedQueriesDefinitionService extends ICrudServiceProxy5<NamedQueries
 	syncIndex(): Promise<void>;
 }
 declare class NamedQueriesDefinitionService extends CrudServiceProxy5<NamedQueriesDefinition> implements INamedQueriesDefinitionService {
-	constructor(kinotic: IKinotic6);
+	constructor(kinotic: IKinotic7);
 	syncIndex(): Promise<void>;
 }
-import { IKinotic as IKinotic7 } from "@kinotic-ai/core";
+import { IKinotic as IKinotic8 } from "@kinotic-ai/core";
 /**
 * Service for executing project-specific migrations through the Persistence API.
 * This service allows external clients to apply their own migrations to projects.
@@ -1144,13 +1212,13 @@ interface IMigrationService {
 }
 declare class MigrationService implements IMigrationService {
 	private readonly serviceProxy;
-	constructor(kinotic: IKinotic7);
+	constructor(kinotic: IKinotic8);
 	executeMigrations(migrationRequest: MigrationRequest): Promise<MigrationResult>;
 	getLastAppliedMigrationVersion(projectId: string): Promise<number | null>;
 	isMigrationApplied(projectId: string, version: string): Promise<boolean>;
 }
-import { IKinotic as IKinotic8 } from "@kinotic-ai/core";
-import { Observable } from "rxjs";
+import { IKinotic as IKinotic9 } from "@kinotic-ai/core";
+import { Observable as Observable2 } from "rxjs";
 /**
 * Provides AI-powered data analysis and visualization code generation capabilities.
 * This service analyzes user queries about their structures and generates appropriate
@@ -1164,14 +1232,14 @@ interface IDataInsightsService {
 	* @param request the analysis request containing query and context
 	* @return Observable that emits progress updates and completes with the final response
 	*/
-	processRequest(request: InsightRequest): Observable<InsightProgress>;
+	processRequest(request: InsightRequest): Observable2<InsightProgress>;
 }
 declare class DataInsightsService implements IDataInsightsService {
 	private readonly serviceProxy;
-	constructor(kinotic: IKinotic8);
-	processRequest(request: InsightRequest): Observable<InsightProgress>;
+	constructor(kinotic: IKinotic9);
+	processRequest(request: InsightRequest): Observable2<InsightProgress>;
 }
-import { IKinotic as IKinotic9 } from "@kinotic-ai/core";
+import { IKinotic as IKinotic10 } from "@kinotic-ai/core";
 import { CrudServiceProxy as CrudServiceProxy6, ICrudServiceProxy as ICrudServiceProxy6 } from "@kinotic-ai/core";
 interface IVmNodeService extends ICrudServiceProxy6<VmNode> {
 	/**
@@ -1189,11 +1257,11 @@ interface IVmNodeService extends ICrudServiceProxy6<VmNode> {
 	syncIndex(): Promise<void>;
 }
 declare class VmNodeServiceProxy extends CrudServiceProxy6<VmNode> implements IVmNodeService {
-	constructor(kinotic: IKinotic9);
+	constructor(kinotic: IKinotic10);
 	findAvailableNode(requiredCpus: number, requiredMemoryMb: number, requiredDiskMb: number): Promise<VmNode | null>;
 	syncIndex(): Promise<void>;
 }
-import { CrudServiceProxy as CrudServiceProxy7, IKinotic as IKinotic10, ICrudServiceProxy as ICrudServiceProxy7, IterablePage as IterablePage3, Page as Page2, Pageable as Pageable3 } from "@kinotic-ai/core";
+import { CrudServiceProxy as CrudServiceProxy7, IKinotic as IKinotic11, ICrudServiceProxy as ICrudServiceProxy7, IterablePage as IterablePage3, Page as Page2, Pageable as Pageable3 } from "@kinotic-ai/core";
 interface IWorkloadService extends ICrudServiceProxy7<Workload> {
 	/**
 	* Finds all workloads deployed on the given node.
@@ -1215,13 +1283,13 @@ interface IWorkloadService extends ICrudServiceProxy7<Workload> {
 	syncIndex(): Promise<void>;
 }
 declare class WorkloadServiceProxy extends CrudServiceProxy7<Workload> implements IWorkloadService {
-	constructor(kinotic: IKinotic10);
+	constructor(kinotic: IKinotic11);
 	findAllForNode(nodeId: string, pageable: Pageable3): Promise<IterablePage3<Workload>>;
 	findAllForNodeSinglePage(nodeId: string, pageable: Pageable3): Promise<Page2<Workload>>;
 	countForNode(nodeId: string): Promise<number>;
 	syncIndex(): Promise<void>;
 }
-import { IDataSource, IKinotic as IKinotic11, IterablePage as IterablePage4, Pageable as Pageable4 } from "@kinotic-ai/core";
+import { IDataSource, IKinotic as IKinotic12, IterablePage as IterablePage4, Pageable as Pageable4 } from "@kinotic-ai/core";
 /**
 * Member management for the caller's organization and its applications. Scope is selected
 * with applicationId — null addresses org members, set addresses that application's
@@ -1261,7 +1329,7 @@ interface IMemberService {
 }
 declare class MemberService implements IMemberService {
 	private readonly serviceProxy;
-	constructor(kinotic: IKinotic11);
+	constructor(kinotic: IKinotic12);
 	findMembers(applicationId: string | null, pageable: Pageable4): Promise<IterablePage4<IamUser>>;
 	searchMembers(searchText: string, applicationId: string | null, pageable: Pageable4): Promise<IterablePage4<IamUser>>;
 	inviteMember(email: string, displayName: string | null, applicationId: string | null): Promise<PendingInviteSummary>;
@@ -1271,7 +1339,7 @@ declare class MemberService implements IMemberService {
 	cancelInvite(inviteId: string): Promise<void>;
 	memberDataSource(applicationId: string | null): IDataSource<IamUser>;
 }
-import { IKinotic as IKinotic12 } from "@kinotic-ai/core";
+import { IKinotic as IKinotic13 } from "@kinotic-ai/core";
 import { CrudServiceProxy as CrudServiceProxy8, ICrudServiceProxy as ICrudServiceProxy8 } from "@kinotic-ai/core";
 /**
 * CRUD service for an application's customized invitation email — at most one
@@ -1287,10 +1355,10 @@ interface IInviteEmailTemplateService extends ICrudServiceProxy8<InviteEmailTemp
 	findByApplication(applicationId: string): Promise<InviteEmailTemplate | null>;
 }
 declare class InviteEmailTemplateService extends CrudServiceProxy8<InviteEmailTemplate> implements IInviteEmailTemplateService {
-	constructor(kinotic: IKinotic12);
+	constructor(kinotic: IKinotic13);
 	findByApplication(applicationId: string): Promise<InviteEmailTemplate | null>;
 }
-import { IKinotic as IKinotic13 } from "@kinotic-ai/core";
+import { IKinotic as IKinotic14 } from "@kinotic-ai/core";
 /**
 * Browser-invoked service for the RFC 8628 device-authorization approve step. The signed-in
 * browser user calls {@link approve} with the user_code shown in their CLI; the gateway
@@ -1305,10 +1373,10 @@ interface IDeviceApprovalService {
 }
 declare class DeviceApprovalService implements IDeviceApprovalService {
 	private readonly serviceProxy;
-	constructor(kinotic: IKinotic13);
+	constructor(kinotic: IKinotic14);
 	approve(userCode: string): Promise<void>;
 }
-import { CrudServiceProxy as CrudServiceProxy9, IKinotic as IKinotic14, ICrudServiceProxy as ICrudServiceProxy9 } from "@kinotic-ai/core";
+import { CrudServiceProxy as CrudServiceProxy9, IKinotic as IKinotic15, ICrudServiceProxy as ICrudServiceProxy9 } from "@kinotic-ai/core";
 interface IGitHubAppInstallationService extends ICrudServiceProxy9<GitHubAppInstallation> {
 	/**
 	* Stages a single-use state token bound to the caller's organization plus the
@@ -1335,7 +1403,7 @@ interface IGitHubAppInstallationService extends ICrudServiceProxy9<GitHubAppInst
 	findForCurrentOrg(): Promise<GitHubAppInstallation | null>;
 }
 declare class GitHubAppInstallationService extends CrudServiceProxy9<GitHubAppInstallation> implements IGitHubAppInstallationService {
-	constructor(kinotic: IKinotic14);
+	constructor(kinotic: IKinotic15);
 	startInstall(returnTo: string | null): Promise<string>;
 	completeInstall(installationId: number, state: string): Promise<GitHubInstallCompletion>;
 	findForCurrentOrg(): Promise<GitHubAppInstallation | null>;
@@ -1358,7 +1426,28 @@ interface IOsApiExtension {
 	githubAppInstallations: IGitHubAppInstallationService;
 }
 declare const OsApiPlugin: KinoticPlugin<IOsApiExtension>;
+import { APP_API_ZONE } from "@kinotic-ai/persistence";
+/**
+* The zone for platform services organizations use to manage the system, such as member,
+* application, and entity definition management
+*/
+declare const OS_API_ZONE = "os_api";
+/**
+* The zone for services internal to the platform, only reachable by system participants
+*/
+declare const SYSTEM_ZONE = "system";
+/**
+* The leading label of application zones, which follow the form app.<organizationId>.<applicationId>
+*/
+declare const APP_ZONE_PREFIX = "app";
+/**
+* Builds the zone that all of an application's services live in
+* @param organizationId the id of the organization that owns the application
+* @param applicationId the id of the application
+* @return the application zone, app.<organizationId>.<applicationId>
+*/
+declare function appZone(organizationId: string, applicationId: string): string;
 declare module "@kinotic-ai/core" {
 	interface KinoticSingleton extends IOsApiExtension {}
 }
-export { isSystemParticipant, isOrganizationParticipant, isApplicationParticipant, WorkloadStatus, WorkloadServiceProxy, Workload, VolumeMount, VmProviderType, VmNodeStatus, VmNodeServiceProxy, VmNode, VersionDecorator, TimeReferenceDecorator, TextDecorator, TenantSelectionC3Type, TenantIdDecorator, SingleLoggerLevelsDescriptor, SignUpRequest, SignUpCompleteRequest, RepositoryConnectionStatus, QueryOptionsC3Type, QueryDecorator, ProjectType, ProjectService, Project, ProgressType, PortProtocol, PortMapping, PendingInviteSummary, ParticipantType, PageableC3Type, PageC3Type, OsApiPlugin, OrganizationService, Organization, NotIndexedDecorator, NestedDecorator, NamedQueriesDefinitionService, NamedQueriesDefinition, MigrationService, MigrationResult, MigrationRequest, MigrationDefinition, MemberService, LoggersDescriptor, LoggerLevelsDescriptor, LogManager, LogLevel, KinoticProjectConfig, KinoticOsCredentialsAuthProvider, InviteEmailTemplateService, InviteEmailTemplate, InsightRequest, InsightProgress, IdDecorator, IamUser, IWorkloadService, IVmNodeService, ISystemParticipant, IProjectService, IOsApiExtension, IOrganizationService, IOrganizationParticipant, INamedQueriesDefinitionService, IMigrationService, IMemberService, ILogManager, IInviteEmailTemplateService, IGitHubAppInstallationService, IEntityDefinitionService, IDeviceApprovalService, IDataInsightsService, IApplicationService, IApplicationParticipant, GroupLoggerLevelsDescriptor, GitHubToken, GitHubRepoToken, GitHubInstallCompletion, GitHubAppInstallationService, GitHubAppInstallation, FlattenedDecorator, EsIndexConfigurationDecorator, EntityDefinitionService, EntityDefinition, EntityDecorator, EntitiesPathConfig, DiscriminatorDecorator, DeviceApprovalService, DataInsightsService, DataInsightsComponent, CompleteOrgRequest, AutoGeneratedIdDecorator, AuthType, ApplicationService, Application };
+export { isSystemParticipant, isOrganizationParticipant, isApplicationParticipant, appZone, WorkloadStatus, WorkloadServiceProxy, Workload, VolumeMount, VmProviderType, VmNodeStatus, VmNodeServiceProxy, VmNode, VersionDecorator, TimeReferenceDecorator, TextDecorator, TenantSelectionC3Type, TenantIdDecorator, SingleLoggerLevelsDescriptor, SignUpRequest, SignUpCompleteRequest, SYSTEM_ZONE, RepositoryConnectionStatus, QueryOptionsC3Type, QueryDecorator, ProjectType, ProjectService, Project, ProgressType, PortProtocol, PortMapping, PendingInviteSummary, ParticipantType, PageableC3Type, PageC3Type, OsApiPlugin, OrganizationService, Organization, OS_API_ZONE, NotIndexedDecorator, NestedDecorator, NamedQueriesDefinitionService, NamedQueriesDefinition, MigrationService, MigrationResult, MigrationRequest, MigrationDefinition, MemberService, LoggersDescriptor, LoggerLevelsDescriptor, LogService, LogQuery, LogManager, LogLevel, KinoticProjectConfig, KinoticOsCredentialsAuthProvider, InviteEmailTemplateService, InviteEmailTemplate, InsightRequest, InsightProgress, IdDecorator, IamUser, IWorkloadService, IVmNodeService, ISystemParticipant, IProjectService, IOsApiExtension, IOrganizationService, IOrganizationParticipant, INamedQueriesDefinitionService, IMigrationService, IMemberService, ILogService, ILogManager, IInviteEmailTemplateService, IGitHubAppInstallationService, IEntityDefinitionService, IDeviceApprovalService, IDataInsightsService, IApplicationService, IApplicationParticipant, GroupLoggerLevelsDescriptor, GitHubToken, GitHubRepoToken, GitHubInstallCompletion, GitHubAppInstallationService, GitHubAppInstallation, FlattenedDecorator, EsIndexConfigurationDecorator, EntityDefinitionService, EntityDefinition, EntityDecorator, EntitiesPathConfig, DiscriminatorDecorator, DeviceApprovalService, DataInsightsService, DataInsightsComponent, CompleteOrgRequest, AutoGeneratedIdDecorator, AuthType, ApplicationService, Application, APP_ZONE_PREFIX, APP_API_ZONE };

package/dist/index.d.ts

@@ -137,6 +137,9 @@ declare class TenantSelectionC3Type extends ArrayC3Type {
 }
 import { Identifiable } from "@kinotic-ai/core";
 declare class Application implements Identifiable<string> {
+	/**
+	* The slugified {@link name}, minted by the server at creation
+	*/
 	id: string;
 	/**
 	* The id of the organization that owns this application.
@@ -144,6 +147,7 @@ declare class Application implements Identifiable<string> {
 	* with a missing or mismatched organizationId.
 	*/
 	organizationId: string;
+	name: string;
 	description: string;
 	/**
 	* When true, every APPLICATION-scope user created for this application receives an
@@ -152,7 +156,7 @@ declare class Application implements Identifiable<string> {
 	*/
 	tenantPerUser: boolean;
 	updated: number | null;
-	constructor(id: string, description: string);
+	constructor(name: string, description: string);
 }
 import { Identifiable as Identifiable2 } from "@kinotic-ai/core";
 /**
@@ -485,6 +489,16 @@ declare class Workload implements Identifiable6<string> {
 	*/
 	description?: string;
 	/**
+	* The Organization this workload runs on behalf of, and which may view its logs.
+	* Null for platform workloads (SYSTEM scope).
+	*/
+	organizationId: string | null;
+	/**
+	* The Application this workload runs on behalf of, or null if none.
+	* When set, organizationId must also be set.
+	*/
+	applicationId: string | null;
+	/**
 	* The VM provider to use for this workload.
 	*/
 	providerType: VmProviderType;
@@ -505,6 +519,17 @@ declare class Workload implements Identifiable6<string> {
 	*/
 	diskSizeMb: number;
 	/**
+	* When true the VM runs detached from the vm-manager process and survives its
+	* restarts. Non-detached workloads end when the vm-manager exits.
+	*/
+	detached: boolean;
+	/**
+	* When true the VM and its disk are discarded when the workload stops, so a
+	* stopped workload cannot be restarted. When false the disk is kept and the
+	* workload may be restarted in place.
+	*/
+	autoRemove: boolean;
+	/**
 	* Current status of the workload.
 	*/
 	status: WorkloadStatus;
@@ -525,7 +550,9 @@ declare class Workload implements Identifiable6<string> {
 	*/
 	entrypoint: string[];
 	/**
-	* Overrides the image command (CMD). Empty keeps the image default.
+	* Overrides the image command (CMD). Empty keeps the image default, unless
+	* entrypoint is declared — then the image CMD is dropped so the entrypoint
+	* runs exactly as given.
 	*/
 	cmd: string[];
 	/**
@@ -596,6 +623,19 @@ declare class VmNode implements Identifiable7<string> {
 	constructor(id: string, name: string, hostname: string);
 }
 /**
+* Parameters for a historical log query: one workload's logs over a time range.
+*/
+interface LogQuery {
+	/** Id of the workload whose logs to return. */
+	workloadId: string;
+	/** Start of the time range, epoch milliseconds (inclusive). */
+	start: number;
+	/** End of the time range, epoch milliseconds (inclusive). */
+	end: number;
+	/** Maximum number of log entries to return. */
+	limit: number;
+}
+/**
 * Authentication method for an {@link IamUser}.
 */
 declare enum AuthType {
@@ -898,13 +938,15 @@ import { IKinotic } from "@kinotic-ai/core";
 import { CrudServiceProxy, ICrudServiceProxy } from "@kinotic-ai/core";
 interface IApplicationService extends ICrudServiceProxy<Application> {
 	/**
-	* Creates a new application if it does not already exist. The organization id is derived
-	* from the authenticated participant on the server.
-	* @param id the id of the application to create
+	* Creates a new application if it does not already exist, deriving its id from the
+	* slugified name. The organization id is derived from the authenticated participant on
+	* the server.
+	* @param name the name of the application to create
 	* @param description the description of the application to create
-	* @return {@link Promise} emitting the created application
+	* @return {@link Promise} emitting the created application, or the existing application
+	*         whose id matches the slugified name
 	*/
-	createApplicationIfNotExist(id: string, description: string): Promise<Application>;
+	createApplicationIfNotExist(name: string, description: string): Promise<Application>;
 	/**
 	* This operation makes all the recent writes immediately available for search.
 	* @return a Promise that resolves when the operation is complete
@@ -1032,7 +1074,33 @@ declare class LogManager implements ILogManager {
 	loggerLevels(nodeId: string, name: string): Promise<LoggerLevelsDescriptor>;
 	configureLogLevel(nodeId: string, name: string, level: LogLevel): Promise<void>;
 }
-import { CrudServiceProxy as CrudServiceProxy4, IKinotic as IKinotic5, ICrudServiceProxy as ICrudServiceProxy4, IterablePage as IterablePage2, Page, Pageable as Pageable2 } from "@kinotic-ai/core";
+import { IKinotic as IKinotic5 } from "@kinotic-ai/core";
+import { Observable } from "rxjs";
+/**
+* Streams and queries the logs of workloads the authenticated participant may view: an
+* organization participant sees its own organization's workloads, a system participant sees any.
+* Both methods yield the raw Loki response bytes; the caller parses Loki's wire format.
+*/
+interface ILogService {
+	/**
+	* Opens a live tail of the given workload's logs. Each emission is a raw Loki tail frame,
+	* and the stream stays open until unsubscribed.
+	* @param workloadId the id of the workload to follow
+	*/
+	tail(workloadId: string): Observable<Uint8Array>;
+	/**
+	* Returns a workload's historical logs as the raw Loki query_range response.
+	* @param query the workload, time range, and limit
+	*/
+	history(query: LogQuery): Promise<Uint8Array>;
+}
+declare class LogService implements ILogService {
+	private readonly serviceProxy;
+	constructor(kinotic: IKinotic5);
+	tail(workloadId: string): Observable<Uint8Array>;
+	history(query: LogQuery): Promise<Uint8Array>;
+}
+import { CrudServiceProxy as CrudServiceProxy4, IKinotic as IKinotic6, ICrudServiceProxy as ICrudServiceProxy4, IterablePage as IterablePage2, Page, Pageable as Pageable2 } from "@kinotic-ai/core";
 interface IEntityDefinitionService extends ICrudServiceProxy4<EntityDefinition> {
 	/**
 	* Counts all entity definitions for the given application.
@@ -1087,7 +1155,7 @@ interface IEntityDefinitionService extends ICrudServiceProxy4<EntityDefinition>
 	unPublish(entityDefinitionId: string): Promise<void>;
 }
 declare class EntityDefinitionService extends CrudServiceProxy4<EntityDefinition> implements IEntityDefinitionService {
-	constructor(kinotic: IKinotic5);
+	constructor(kinotic: IKinotic6);
 	countForApplication(applicationId: string): Promise<number>;
 	countForProject(projectId: string): Promise<number>;
 	findAllForApplicationSinglePage(applicationId: string, pageable: Pageable2): Promise<Page<EntityDefinition>>;
@@ -1099,7 +1167,7 @@ declare class EntityDefinitionService extends CrudServiceProxy4<EntityDefinition
 	unPublish(entityDefinitionId: string): Promise<void>;
 	syncIndex(): Promise<void>;
 }
-import { IKinotic as IKinotic6 } from "@kinotic-ai/core";
+import { IKinotic as IKinotic7 } from "@kinotic-ai/core";
 import { CrudServiceProxy as CrudServiceProxy5, ICrudServiceProxy as ICrudServiceProxy5 } from "@kinotic-ai/core";
 interface INamedQueriesDefinitionService extends ICrudServiceProxy5<NamedQueriesDefinition> {
 	/**
@@ -1109,10 +1177,10 @@ interface INamedQueriesDefinitionService extends ICrudServiceProxy5<NamedQueries
 	syncIndex(): Promise<void>;
 }
 declare class NamedQueriesDefinitionService extends CrudServiceProxy5<NamedQueriesDefinition> implements INamedQueriesDefinitionService {
-	constructor(kinotic: IKinotic6);
+	constructor(kinotic: IKinotic7);
 	syncIndex(): Promise<void>;
 }
-import { IKinotic as IKinotic7 } from "@kinotic-ai/core";
+import { IKinotic as IKinotic8 } from "@kinotic-ai/core";
 /**
 * Service for executing project-specific migrations through the Persistence API.
 * This service allows external clients to apply their own migrations to projects.
@@ -1144,13 +1212,13 @@ interface IMigrationService {
 }
 declare class MigrationService implements IMigrationService {
 	private readonly serviceProxy;
-	constructor(kinotic: IKinotic7);
+	constructor(kinotic: IKinotic8);
 	executeMigrations(migrationRequest: MigrationRequest): Promise<MigrationResult>;
 	getLastAppliedMigrationVersion(projectId: string): Promise<number | null>;
 	isMigrationApplied(projectId: string, version: string): Promise<boolean>;
 }
-import { IKinotic as IKinotic8 } from "@kinotic-ai/core";
-import { Observable } from "rxjs";
+import { IKinotic as IKinotic9 } from "@kinotic-ai/core";
+import { Observable as Observable2 } from "rxjs";
 /**
 * Provides AI-powered data analysis and visualization code generation capabilities.
 * This service analyzes user queries about their structures and generates appropriate
@@ -1164,14 +1232,14 @@ interface IDataInsightsService {
 	* @param request the analysis request containing query and context
 	* @return Observable that emits progress updates and completes with the final response
 	*/
-	processRequest(request: InsightRequest): Observable<InsightProgress>;
+	processRequest(request: InsightRequest): Observable2<InsightProgress>;
 }
 declare class DataInsightsService implements IDataInsightsService {
 	private readonly serviceProxy;
-	constructor(kinotic: IKinotic8);
-	processRequest(request: InsightRequest): Observable<InsightProgress>;
+	constructor(kinotic: IKinotic9);
+	processRequest(request: InsightRequest): Observable2<InsightProgress>;
 }
-import { IKinotic as IKinotic9 } from "@kinotic-ai/core";
+import { IKinotic as IKinotic10 } from "@kinotic-ai/core";
 import { CrudServiceProxy as CrudServiceProxy6, ICrudServiceProxy as ICrudServiceProxy6 } from "@kinotic-ai/core";
 interface IVmNodeService extends ICrudServiceProxy6<VmNode> {
 	/**
@@ -1189,11 +1257,11 @@ interface IVmNodeService extends ICrudServiceProxy6<VmNode> {
 	syncIndex(): Promise<void>;
 }
 declare class VmNodeServiceProxy extends CrudServiceProxy6<VmNode> implements IVmNodeService {
-	constructor(kinotic: IKinotic9);
+	constructor(kinotic: IKinotic10);
 	findAvailableNode(requiredCpus: number, requiredMemoryMb: number, requiredDiskMb: number): Promise<VmNode | null>;
 	syncIndex(): Promise<void>;
 }
-import { CrudServiceProxy as CrudServiceProxy7, IKinotic as IKinotic10, ICrudServiceProxy as ICrudServiceProxy7, IterablePage as IterablePage3, Page as Page2, Pageable as Pageable3 } from "@kinotic-ai/core";
+import { CrudServiceProxy as CrudServiceProxy7, IKinotic as IKinotic11, ICrudServiceProxy as ICrudServiceProxy7, IterablePage as IterablePage3, Page as Page2, Pageable as Pageable3 } from "@kinotic-ai/core";
 interface IWorkloadService extends ICrudServiceProxy7<Workload> {
 	/**
 	* Finds all workloads deployed on the given node.
@@ -1215,13 +1283,13 @@ interface IWorkloadService extends ICrudServiceProxy7<Workload> {
 	syncIndex(): Promise<void>;
 }
 declare class WorkloadServiceProxy extends CrudServiceProxy7<Workload> implements IWorkloadService {
-	constructor(kinotic: IKinotic10);
+	constructor(kinotic: IKinotic11);
 	findAllForNode(nodeId: string, pageable: Pageable3): Promise<IterablePage3<Workload>>;
 	findAllForNodeSinglePage(nodeId: string, pageable: Pageable3): Promise<Page2<Workload>>;
 	countForNode(nodeId: string): Promise<number>;
 	syncIndex(): Promise<void>;
 }
-import { IDataSource, IKinotic as IKinotic11, IterablePage as IterablePage4, Pageable as Pageable4 } from "@kinotic-ai/core";
+import { IDataSource, IKinotic as IKinotic12, IterablePage as IterablePage4, Pageable as Pageable4 } from "@kinotic-ai/core";
 /**
 * Member management for the caller's organization and its applications. Scope is selected
 * with applicationId — null addresses org members, set addresses that application's
@@ -1261,7 +1329,7 @@ interface IMemberService {
 }
 declare class MemberService implements IMemberService {
 	private readonly serviceProxy;
-	constructor(kinotic: IKinotic11);
+	constructor(kinotic: IKinotic12);
 	findMembers(applicationId: string | null, pageable: Pageable4): Promise<IterablePage4<IamUser>>;
 	searchMembers(searchText: string, applicationId: string | null, pageable: Pageable4): Promise<IterablePage4<IamUser>>;
 	inviteMember(email: string, displayName: string | null, applicationId: string | null): Promise<PendingInviteSummary>;
@@ -1271,7 +1339,7 @@ declare class MemberService implements IMemberService {
 	cancelInvite(inviteId: string): Promise<void>;
 	memberDataSource(applicationId: string | null): IDataSource<IamUser>;
 }
-import { IKinotic as IKinotic12 } from "@kinotic-ai/core";
+import { IKinotic as IKinotic13 } from "@kinotic-ai/core";
 import { CrudServiceProxy as CrudServiceProxy8, ICrudServiceProxy as ICrudServiceProxy8 } from "@kinotic-ai/core";
 /**
 * CRUD service for an application's customized invitation email — at most one
@@ -1287,10 +1355,10 @@ interface IInviteEmailTemplateService extends ICrudServiceProxy8<InviteEmailTemp
 	findByApplication(applicationId: string): Promise<InviteEmailTemplate | null>;
 }
 declare class InviteEmailTemplateService extends CrudServiceProxy8<InviteEmailTemplate> implements IInviteEmailTemplateService {
-	constructor(kinotic: IKinotic12);
+	constructor(kinotic: IKinotic13);
 	findByApplication(applicationId: string): Promise<InviteEmailTemplate | null>;
 }
-import { IKinotic as IKinotic13 } from "@kinotic-ai/core";
+import { IKinotic as IKinotic14 } from "@kinotic-ai/core";
 /**
 * Browser-invoked service for the RFC 8628 device-authorization approve step. The signed-in
 * browser user calls {@link approve} with the user_code shown in their CLI; the gateway
@@ -1305,10 +1373,10 @@ interface IDeviceApprovalService {
 }
 declare class DeviceApprovalService implements IDeviceApprovalService {
 	private readonly serviceProxy;
-	constructor(kinotic: IKinotic13);
+	constructor(kinotic: IKinotic14);
 	approve(userCode: string): Promise<void>;
 }
-import { CrudServiceProxy as CrudServiceProxy9, IKinotic as IKinotic14, ICrudServiceProxy as ICrudServiceProxy9 } from "@kinotic-ai/core";
+import { CrudServiceProxy as CrudServiceProxy9, IKinotic as IKinotic15, ICrudServiceProxy as ICrudServiceProxy9 } from "@kinotic-ai/core";
 interface IGitHubAppInstallationService extends ICrudServiceProxy9<GitHubAppInstallation> {
 	/**
 	* Stages a single-use state token bound to the caller's organization plus the
@@ -1335,7 +1403,7 @@ interface IGitHubAppInstallationService extends ICrudServiceProxy9<GitHubAppInst
 	findForCurrentOrg(): Promise<GitHubAppInstallation | null>;
 }
 declare class GitHubAppInstallationService extends CrudServiceProxy9<GitHubAppInstallation> implements IGitHubAppInstallationService {
-	constructor(kinotic: IKinotic14);
+	constructor(kinotic: IKinotic15);
 	startInstall(returnTo: string | null): Promise<string>;
 	completeInstall(installationId: number, state: string): Promise<GitHubInstallCompletion>;
 	findForCurrentOrg(): Promise<GitHubAppInstallation | null>;
@@ -1358,7 +1426,28 @@ interface IOsApiExtension {
 	githubAppInstallations: IGitHubAppInstallationService;
 }
 declare const OsApiPlugin: KinoticPlugin<IOsApiExtension>;
+import { APP_API_ZONE } from "@kinotic-ai/persistence";
+/**
+* The zone for platform services organizations use to manage the system, such as member,
+* application, and entity definition management
+*/
+declare const OS_API_ZONE = "os_api";
+/**
+* The zone for services internal to the platform, only reachable by system participants
+*/
+declare const SYSTEM_ZONE = "system";
+/**
+* The leading label of application zones, which follow the form app.<organizationId>.<applicationId>
+*/
+declare const APP_ZONE_PREFIX = "app";
+/**
+* Builds the zone that all of an application's services live in
+* @param organizationId the id of the organization that owns the application
+* @param applicationId the id of the application
+* @return the application zone, app.<organizationId>.<applicationId>
+*/
+declare function appZone(organizationId: string, applicationId: string): string;
 declare module "@kinotic-ai/core" {
 	interface KinoticSingleton extends IOsApiExtension {}
 }
-export { isSystemParticipant, isOrganizationParticipant, isApplicationParticipant, WorkloadStatus, WorkloadServiceProxy, Workload, VolumeMount, VmProviderType, VmNodeStatus, VmNodeServiceProxy, VmNode, VersionDecorator, TimeReferenceDecorator, TextDecorator, TenantSelectionC3Type, TenantIdDecorator, SingleLoggerLevelsDescriptor, SignUpRequest, SignUpCompleteRequest, RepositoryConnectionStatus, QueryOptionsC3Type, QueryDecorator, ProjectType, ProjectService, Project, ProgressType, PortProtocol, PortMapping, PendingInviteSummary, ParticipantType, PageableC3Type, PageC3Type, OsApiPlugin, OrganizationService, Organization, NotIndexedDecorator, NestedDecorator, NamedQueriesDefinitionService, NamedQueriesDefinition, MigrationService, MigrationResult, MigrationRequest, MigrationDefinition, MemberService, LoggersDescriptor, LoggerLevelsDescriptor, LogManager, LogLevel, KinoticProjectConfig, KinoticOsCredentialsAuthProvider, InviteEmailTemplateService, InviteEmailTemplate, InsightRequest, InsightProgress, IdDecorator, IamUser, IWorkloadService, IVmNodeService, ISystemParticipant, IProjectService, IOsApiExtension, IOrganizationService, IOrganizationParticipant, INamedQueriesDefinitionService, IMigrationService, IMemberService, ILogManager, IInviteEmailTemplateService, IGitHubAppInstallationService, IEntityDefinitionService, IDeviceApprovalService, IDataInsightsService, IApplicationService, IApplicationParticipant, GroupLoggerLevelsDescriptor, GitHubToken, GitHubRepoToken, GitHubInstallCompletion, GitHubAppInstallationService, GitHubAppInstallation, FlattenedDecorator, EsIndexConfigurationDecorator, EntityDefinitionService, EntityDefinition, EntityDecorator, EntitiesPathConfig, DiscriminatorDecorator, DeviceApprovalService, DataInsightsService, DataInsightsComponent, CompleteOrgRequest, AutoGeneratedIdDecorator, AuthType, ApplicationService, Application };
+export { isSystemParticipant, isOrganizationParticipant, isApplicationParticipant, appZone, WorkloadStatus, WorkloadServiceProxy, Workload, VolumeMount, VmProviderType, VmNodeStatus, VmNodeServiceProxy, VmNode, VersionDecorator, TimeReferenceDecorator, TextDecorator, TenantSelectionC3Type, TenantIdDecorator, SingleLoggerLevelsDescriptor, SignUpRequest, SignUpCompleteRequest, SYSTEM_ZONE, RepositoryConnectionStatus, QueryOptionsC3Type, QueryDecorator, ProjectType, ProjectService, Project, ProgressType, PortProtocol, PortMapping, PendingInviteSummary, ParticipantType, PageableC3Type, PageC3Type, OsApiPlugin, OrganizationService, Organization, OS_API_ZONE, NotIndexedDecorator, NestedDecorator, NamedQueriesDefinitionService, NamedQueriesDefinition, MigrationService, MigrationResult, MigrationRequest, MigrationDefinition, MemberService, LoggersDescriptor, LoggerLevelsDescriptor, LogService, LogQuery, LogManager, LogLevel, KinoticProjectConfig, KinoticOsCredentialsAuthProvider, InviteEmailTemplateService, InviteEmailTemplate, InsightRequest, InsightProgress, IdDecorator, IamUser, IWorkloadService, IVmNodeService, ISystemParticipant, IProjectService, IOsApiExtension, IOrganizationService, IOrganizationParticipant, INamedQueriesDefinitionService, IMigrationService, IMemberService, ILogService, ILogManager, IInviteEmailTemplateService, IGitHubAppInstallationService, IEntityDefinitionService, IDeviceApprovalService, IDataInsightsService, IApplicationService, IApplicationParticipant, GroupLoggerLevelsDescriptor, GitHubToken, GitHubRepoToken, GitHubInstallCompletion, GitHubAppInstallationService, GitHubAppInstallation, FlattenedDecorator, EsIndexConfigurationDecorator, EntityDefinitionService, EntityDefinition, EntityDecorator, EntitiesPathConfig, DiscriminatorDecorator, DeviceApprovalService, DataInsightsService, DataInsightsComponent, CompleteOrgRequest, AutoGeneratedIdDecorator, AuthType, ApplicationService, Application, APP_ZONE_PREFIX, APP_API_ZONE };

package/dist/index.js

@@ -177,11 +177,12 @@ class TenantSelectionC3Type extends ArrayC3Type {
 class Application {
   id;
   organizationId;
+  name;
   description;
   tenantPerUser = false;
   updated = null;
-  constructor(id, description) {
-    this.id = id;
+  constructor(name, description) {
+    this.name = name;
     this.description = description;
   }
 }
@@ -302,11 +303,15 @@ class Workload {
   id = null;
   name;
   description;
+  organizationId = null;
+  applicationId = null;
   providerType = "BOXLITE" /* BOXLITE */;
   image;
   vcpus = 1;
   memoryMb = 512;
   diskSizeMb = 1024;
+  detached = true;
+  autoRemove = false;
   status = "PENDING" /* PENDING */;
   environment = {};
   portMappings = [];
@@ -467,12 +472,24 @@ class KinoticOsCredentialsAuthProvider {
     return this.authHeaders;
   }
 }
+// packages/os-api/src/api/PlatformZones.ts
+import { validateLabel } from "@kinotic-ai/core";
+import { APP_API_ZONE } from "@kinotic-ai/persistence";
+var OS_API_ZONE = "os_api";
+var SYSTEM_ZONE = "system";
+var APP_ZONE_PREFIX = "app";
+function appZone(organizationId, applicationId) {
+  validateLabel(organizationId);
+  validateLabel(applicationId);
+  return `${APP_ZONE_PREFIX}.${organizationId}.${applicationId}`;
+}
+
 // packages/os-api/src/api/services/IApplicationService.ts
 import { CrudServiceProxy } from "@kinotic-ai/core";
 
 class ApplicationService extends CrudServiceProxy {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.os.api.services.ApplicationService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.ApplicationService`));
   }
   createApplicationIfNotExist(id, description) {
     return this.serviceProxy.invoke("createApplicationIfNotExist", [id, description]);
@@ -486,7 +503,7 @@ import { CrudServiceProxy as CrudServiceProxy2 } from "@kinotic-ai/core";
 
 class OrganizationService extends CrudServiceProxy2 {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.os.api.services.OrganizationService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.OrganizationService`));
   }
   getOidcConfigurations(organizationId) {
     return this.serviceProxy.invoke("getOidcConfigurations", [organizationId]);
@@ -526,7 +543,7 @@ import { CrudServiceProxy as CrudServiceProxy3, FunctionalIterablePage } from "@
 
 class ProjectService extends CrudServiceProxy3 {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.os.api.services.ProjectService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.ProjectService`));
   }
   countForApplication(applicationId) {
     return this.serviceProxy.invoke("countForApplication", [applicationId]);
@@ -552,7 +569,7 @@ class ProjectService extends CrudServiceProxy3 {
 class LogManager {
   serviceProxy;
   constructor(kinotic) {
-    this.serviceProxy = kinotic.serviceProxy("org.kinotic.os.api.services.LogManager");
+    this.serviceProxy = kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.LogManager`);
   }
   loggers(nodeId) {
     return this.serviceProxy.invoke("loggers", null, nodeId);
@@ -574,12 +591,25 @@ class LogManager {
     return this.serviceProxy.invoke("configureLogLevel", [name, level], nodeId);
   }
 }
+// packages/os-api/src/api/services/ILogService.ts
+class LogService {
+  serviceProxy;
+  constructor(kinotic) {
+    this.serviceProxy = kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.LogService`);
+  }
+  tail(workloadId) {
+    return this.serviceProxy.invokeStream("tail", [workloadId]);
+  }
+  history(query) {
+    return this.serviceProxy.invoke("history", [query]);
+  }
+}
 // packages/os-api/src/api/services/IEntityDefinitionService.ts
 import { CrudServiceProxy as CrudServiceProxy4, FunctionalIterablePage as FunctionalIterablePage2 } from "@kinotic-ai/core";
 
 class EntityDefinitionService extends CrudServiceProxy4 {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.persistence.api.services.EntityDefinitionService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.persistence.api.services.EntityDefinitionService`));
   }
   countForApplication(applicationId) {
     return this.serviceProxy.invoke("countForApplication", [applicationId]);
@@ -619,7 +649,7 @@ import { CrudServiceProxy as CrudServiceProxy5 } from "@kinotic-ai/core";
 
 class NamedQueriesDefinitionService extends CrudServiceProxy5 {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.persistence.api.services.NamedQueriesDefinitionService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.persistence.api.services.NamedQueriesDefinitionService`));
   }
   syncIndex() {
     return this.serviceProxy.invoke("syncIndex", []);
@@ -629,7 +659,7 @@ class NamedQueriesDefinitionService extends CrudServiceProxy5 {
 class MigrationService {
   serviceProxy;
   constructor(kinotic) {
-    this.serviceProxy = kinotic.serviceProxy("org.kinotic.persistence.api.services.MigrationService");
+    this.serviceProxy = kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.persistence.api.services.MigrationService`);
   }
   executeMigrations(migrationRequest) {
     return this.serviceProxy.invoke("executeMigrations", [migrationRequest]);
@@ -645,7 +675,7 @@ class MigrationService {
 class DataInsightsService {
   serviceProxy;
   constructor(kinotic) {
-    this.serviceProxy = kinotic.serviceProxy("org.kinotic.persistence.api.services.insights.DataInsightsService");
+    this.serviceProxy = kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.persistence.api.services.insights.DataInsightsService`);
   }
   processRequest(request) {
     return this.serviceProxy.invokeStream("processRequest", [request]);
@@ -656,7 +686,7 @@ import { CrudServiceProxy as CrudServiceProxy6 } from "@kinotic-ai/core";
 
 class VmNodeServiceProxy extends CrudServiceProxy6 {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.os.api.services.VmNodeService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.VmNodeService`));
   }
   findAvailableNode(requiredCpus, requiredMemoryMb, requiredDiskMb) {
     return this.serviceProxy.invoke("findAvailableNode", [requiredCpus, requiredMemoryMb, requiredDiskMb]);
@@ -670,7 +700,7 @@ import { CrudServiceProxy as CrudServiceProxy7, FunctionalIterablePage as Functi
 
 class WorkloadServiceProxy extends CrudServiceProxy7 {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.os.api.services.WorkloadService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.WorkloadService`));
   }
   async findAllForNode(nodeId, pageable) {
     const page = await this.findAllForNodeSinglePage(nodeId, pageable);
@@ -694,7 +724,7 @@ import {
 class MemberService {
   serviceProxy;
   constructor(kinotic) {
-    this.serviceProxy = kinotic.serviceProxy("org.kinotic.os.api.services.iam.MemberService");
+    this.serviceProxy = kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.iam.MemberService`);
   }
   async findMembers(applicationId, pageable) {
     const page = await this.serviceProxy.invoke("findMembers", [applicationId, pageable]);
@@ -732,7 +762,7 @@ import { CrudServiceProxy as CrudServiceProxy8 } from "@kinotic-ai/core";
 
 class InviteEmailTemplateService extends CrudServiceProxy8 {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.os.api.services.InviteEmailTemplateService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.InviteEmailTemplateService`));
   }
   findByApplication(applicationId) {
     return this.serviceProxy.invoke("findByApplication", [applicationId]);
@@ -742,7 +772,7 @@ class InviteEmailTemplateService extends CrudServiceProxy8 {
 class DeviceApprovalService {
   serviceProxy;
   constructor(kinotic) {
-    this.serviceProxy = kinotic.serviceProxy("org.kinotic.os.api.services.iam.DeviceApprovalService");
+    this.serviceProxy = kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.os.api.services.iam.DeviceApprovalService`);
   }
   approve(userCode) {
     return this.serviceProxy.invoke("approve", [userCode]);
@@ -753,7 +783,7 @@ import { CrudServiceProxy as CrudServiceProxy9 } from "@kinotic-ai/core";
 
 class GitHubAppInstallationService extends CrudServiceProxy9 {
   constructor(kinotic) {
-    super(kinotic.serviceProxy("org.kinotic.github.api.services.GitHubAppInstallationService"));
+    super(kinotic.serviceProxy(`${OS_API_ZONE}.org.kinotic.github.api.services.GitHubAppInstallationService`));
   }
   startInstall(returnTo) {
     return this.serviceProxy.invoke("startInstall", [returnTo]);
@@ -790,6 +820,7 @@ export {
   isSystemParticipant,
   isOrganizationParticipant,
   isApplicationParticipant,
+  appZone,
   WorkloadStatus,
   WorkloadServiceProxy,
   Workload,
@@ -803,6 +834,7 @@ export {
   TenantSelectionC3Type,
   TenantIdDecorator,
   SingleLoggerLevelsDescriptor,
+  SYSTEM_ZONE,
   RepositoryConnectionStatus,
   QueryOptionsC3Type,
   QueryDecorator,
@@ -818,6 +850,7 @@ export {
   OsApiPlugin,
   OrganizationService,
   Organization,
+  OS_API_ZONE,
   NotIndexedDecorator,
   NestedDecorator,
   NamedQueriesDefinitionService,
@@ -826,6 +859,7 @@ export {
   MemberService,
   LoggersDescriptor,
   LoggerLevelsDescriptor,
+  LogService,
   LogManager,
   LogLevel,
   KinoticProjectConfig,
@@ -851,5 +885,7 @@ export {
   AutoGeneratedIdDecorator,
   AuthType,
   ApplicationService,
-  Application
+  Application,
+  APP_ZONE_PREFIX,
+  APP_API_ZONE
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kinotic-ai/os-api",
-  "version": "1.14.2",
+  "version": "3.0.0",
   "type": "module",
   "files": [
     "dist"
@@ -32,15 +32,15 @@
     "coverage": "bun test --coverage --pass-with-no-tests"
   },
   "peerDependencies": {
-    "@kinotic-ai/core": ">=1.9.1"
+    "@kinotic-ai/core": ">=3.0.0"
   },
   "dependencies": {
-    "@kinotic-ai/idl": "1.0.9",
-    "@kinotic-ai/persistence": "1.5.2",
+    "@kinotic-ai/idl": "1.0.10",
+    "@kinotic-ai/persistence": "3.0.0",
     "rxjs": "^7.8.2"
   },
   "devDependencies": {
-    "@kinotic-ai/core": "1.9.1",
+    "@kinotic-ai/core": "3.0.0",
     "@types/node": "^25.3.2",
     "tslib": "^2.8.1",
     "typescript": "^5.9.3"