@xemahq/app-platform-api-client 0.3.11 → 0.3.19

package/dist/custom-fetch.d.ts

@@ -47,6 +47,28 @@ export interface ClientConfig {
     getAuthToken?: () => Promise<string>;
     /** Optional callback returning headers to inject on every request. Per-call headers take precedence. */
     getHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+    /**
+     * Optional resolver for the CORRELATION ID of the request being made — the
+     * handle that ties one causal chain together across every service hop.
+     *
+     * WHY IT IS A CALLBACK AND NOT A VALUE. `ClientConfig` is process-global
+     * (`configureClient` is called once at wiring time), and a correlation id is
+     * per-request. This is invoked INSIDE the request, so a server can point it
+     * at whatever carries its ambient request context and get the CURRENT id
+     * rather than the one that happened to be live at boot.
+     *
+     * WHY THE TRANSPORT DOES NOT MINT ONE. Returning `undefined` sends no header,
+     * and the receiving service's `RequestContextMiddleware` mints its own — a
+     * new trace, which is honest. A transport that minted per call would produce
+     * a FRESH id on every hop while looking like propagation, which is strictly
+     * worse than none: every row would carry a correlation id and no two rows
+     * that belong together would share one. That is the exact defect this exists
+     * to fix, so the transport must not reproduce it one layer down.
+     *
+     * A caller-supplied `X-Correlation-Id` header always wins, and so does one
+     * from `getHeaders`.
+     */
+    getCorrelationId?: () => string | undefined | Promise<string | undefined>;
     /**
      * Optional callback invoked on a 401 before ONE re-attempt. Supplying it is
      * what opts this client into that re-attempt; without it a 401 comes back to

package/dist/custom-fetch.js

@@ -89,6 +89,16 @@ function getClientConfig() {
  */
 /** The only statuses that state the request was NOT processed. See above. */
 const RETRYABLE_STATUSES = [429, 503];
+/**
+ * The platform's correlation header, spelled once.
+ *
+ * Value-identical to what `RequestContextMiddleware` reads in
+ * `@xemahq/platform-common`. It is a literal here rather than an import
+ * because this file has ZERO imports on purpose: it ships byte-identical into
+ * browser-target clients as well as server-target ones, and a dependency on a
+ * NestJS-peer package would follow it into every one of them.
+ */
+const CORRELATION_ID_HEADER = 'X-Correlation-Id';
 /** Backoff floor, doubling per attempt up to {@link MAX_BACKOFF_MS}. */
 const BASE_BACKOFF_MS = 1000;
 /** Ceiling on a single backoff, however many attempts have elapsed. */
@@ -104,6 +114,23 @@ async function buildHeaders(config, callerHeaders) {
             }
         }
     }
+    // Correlation id (caller and global headers still take precedence).
+    //
+    // Without this, every server-to-server hop through a generated client started
+    // a NEW trace: the id is read-or-minted per hop by the receiving service's
+    // RequestContextMiddleware, and nothing carried it outbound — so an audit
+    // journal could record a whole causal chain and offer no way to join it back
+    // together.
+    //
+    // Absent resolver, or a resolver that answers `undefined`: NO header. The
+    // receiver mints and a new trace begins, which is the truthful outcome when
+    // there is nothing to continue.
+    if (config.getCorrelationId && !headers.has(CORRELATION_ID_HEADER)) {
+        const correlationId = await Promise.resolve(config.getCorrelationId());
+        if (correlationId) {
+            headers.set(CORRELATION_ID_HEADER, correlationId);
+        }
+    }
     // Auth token (caller or global headers take precedence)
     if (config.getAuthToken && !headers.has('Authorization')) {
         const token = await config.getAuthToken();

package/dist/endpoints/delegated-session-keys/delegated-session-keys.d.ts

@@ -0,0 +1,5 @@
+export declare const getDelegatedSessionJwksControllerJwksUrl: () => string;
+/**
+ * @summary Public signing keys for delegated-session JWTs. Contains the ACTIVE key plus any key rotated out but still inside its publication window.
+ */
+export declare const delegatedSessionJwksControllerJwks: (options?: RequestInit) => Promise<void>;

package/dist/endpoints/delegated-session-keys/delegated-session-keys.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.delegatedSessionJwksControllerJwks = exports.getDelegatedSessionJwksControllerJwksUrl = void 0;
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+const custom_fetch_1 = require("../../custom-fetch");
+const getDelegatedSessionJwksControllerJwksUrl = () => {
+    return `/public/.well-known/delegated-session-jwks.json`;
+};
+exports.getDelegatedSessionJwksControllerJwksUrl = getDelegatedSessionJwksControllerJwksUrl;
+/**
+ * @summary Public signing keys for delegated-session JWTs. Contains the ACTIVE key plus any key rotated out but still inside its publication window.
+ */
+const delegatedSessionJwksControllerJwks = async (options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getDelegatedSessionJwksControllerJwksUrl)(), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.delegatedSessionJwksControllerJwks = delegatedSessionJwksControllerJwks;

package/dist/endpoints/project-apps/project-apps.d.ts

@@ -3,7 +3,7 @@
  * App Runtime API
  * OpenAPI spec version: 0.1.2
  */
-import type { AppClientDtoDataArrayEnvelope, AppClientDtoDataEnvelope, AppDtoDataArrayEnvelope, AppDtoDataEnvelope, AppDtoPaginatedEnvelope, AppReleaseDtoDataArrayEnvelope, AppReleaseDtoDataEnvelope, AudiencePolicyDtoDataArrayEnvelope, AudiencePolicyDtoDataEnvelope, CreateAppClientDto, CreateAudiencePolicyDto, CreatePortalDto, CreateProjectAppDto, CreatedAppClientDtoDataEnvelope, InstallPortalBiomeDto, PortalDetailDtoDataEnvelope, PortalsControllerListParams, ProjectAppsControllerListParams, UnarchivePortalDto, UpdateAudiencePolicyDto, UpdatePortalDto } from '../../models';
+import type { AppClientDtoDataArrayEnvelope, AppClientDtoDataEnvelope, AppDtoDataArrayEnvelope, AppDtoDataEnvelope, AppDtoPaginatedEnvelope, AppReleaseActionDto, AppReleaseDtoDataEnvelope, AppReleaseHistoryDtoDataArrayEnvelope, AudiencePolicyDtoDataArrayEnvelope, AudiencePolicyDtoDataEnvelope, CreateAppClientDto, CreateAudiencePolicyDto, CreatePortalDto, CreatePortalLaunchEntryDto, CreateProjectAppDto, CreatedAppClientDtoDataEnvelope, InstallPortalBiomeDto, PortalDetailDtoDataEnvelope, PortalLaunchEntriesControllerRemoveParams, PortalLaunchEntryDtoDataArrayEnvelope, PortalLaunchEntryDtoDataEnvelope, PortalsControllerListParams, ProjectAppsControllerListParams, ResolvedPortalLaunchDtoDataEnvelope, UnarchivePortalDto, UpdateAudiencePolicyDto, UpdatePortalDto, UpdatePortalLaunchEntryDto } from '../../models';
 export declare const getProjectAppsControllerCreateUrl: () => string;
 /**
  * @summary Create an App in the caller org + named project.
@@ -43,12 +43,12 @@ export declare const getProjectAppReleasesControllerListHistoryUrl: (appId: stri
 /**
  * @summary List immutable App Platform release history newest-first.
  */
-export declare const projectAppReleasesControllerListHistory: (appId: string, options?: RequestInit) => Promise<AppReleaseDtoDataArrayEnvelope>;
-export declare const getProjectAppReleasesControllerRollbackUrl: (appId: string, releaseId: string) => string;
+export declare const projectAppReleasesControllerListHistory: (appId: string, options?: RequestInit) => Promise<AppReleaseHistoryDtoDataArrayEnvelope>;
+export declare const getProjectAppReleasesControllerRollbackUrl: (appId: string, releaseSetId: string) => string;
 /**
  * @summary Atomically roll back Live to a retained release (org admin only).
  */
-export declare const projectAppReleasesControllerRollback: (appId: string, releaseId: string, options?: RequestInit) => Promise<AppReleaseDtoDataEnvelope>;
+export declare const projectAppReleasesControllerRollback: (appId: string, releaseSetId: string, appReleaseActionDto: AppReleaseActionDto, options?: RequestInit) => Promise<AppReleaseDtoDataEnvelope>;
 export declare const getProjectAudiencePoliciesControllerCreateUrl: (appId: string) => string;
 /**
  * @summary Create an AudiencePolicy on an App.
@@ -124,3 +124,28 @@ export declare const getPortalsControllerRefreshLockfileUrl: (id: string) => str
  * @summary Refresh a portal lockfile (portal-admin only). Re-pins kernel + installed biomes via the kernel Lockfile Resolver. Returns 422 LOCKFILE_RESOLVER_FAILED on any unsatisfiable constraint, malformed ref, or unreachable upstream.
  */
 export declare const portalsControllerRefreshLockfile: (id: string, options?: RequestInit) => Promise<AppDtoDataEnvelope>;
+export declare const getPortalLaunchEntriesControllerListUrl: (portalId: string) => string;
+/**
+ * @summary List authored LaunchDefinition targets for a visible portal.
+ */
+export declare const portalLaunchEntriesControllerList: (portalId: string, options?: RequestInit) => Promise<PortalLaunchEntryDtoDataArrayEnvelope>;
+export declare const getPortalLaunchEntriesControllerCreateUrl: (portalId: string) => string;
+/**
+ * @summary Create a Portal-owned tile with one RevisionTarget.
+ */
+export declare const portalLaunchEntriesControllerCreate: (portalId: string, createPortalLaunchEntryDto: CreatePortalLaunchEntryDto, options?: RequestInit) => Promise<PortalLaunchEntryDtoDataEnvelope>;
+export declare const getPortalLaunchEntriesControllerUpdateUrl: (portalId: string, entryId: string) => string;
+/**
+ * @summary CAS-update a Portal-owned tile or its RevisionTarget.
+ */
+export declare const portalLaunchEntriesControllerUpdate: (portalId: string, entryId: string, updatePortalLaunchEntryDto: UpdatePortalLaunchEntryDto, options?: RequestInit) => Promise<PortalLaunchEntryDtoDataEnvelope>;
+export declare const getPortalLaunchEntriesControllerRemoveUrl: (portalId: string, entryId: string, params: PortalLaunchEntriesControllerRemoveParams) => string;
+/**
+ * @summary CAS-delete a Portal-owned launch tile.
+ */
+export declare const portalLaunchEntriesControllerRemove: (portalId: string, entryId: string, params: PortalLaunchEntriesControllerRemoveParams, options?: RequestInit) => Promise<void>;
+export declare const getPortalLaunchEntriesControllerResolveUrl: (portalId: string, entryId: string) => string;
+/**
+ * @summary Resolve one Portal target to an exact verified LaunchDefinition pin.
+ */
+export declare const portalLaunchEntriesControllerResolve: (portalId: string, entryId: string, options?: RequestInit) => Promise<ResolvedPortalLaunchDtoDataEnvelope>;

package/dist/endpoints/project-apps/project-apps.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.portalsControllerRefreshLockfile = exports.getPortalsControllerRefreshLockfileUrl = exports.portalsControllerUninstallBiome = exports.getPortalsControllerUninstallBiomeUrl = exports.portalsControllerInstallBiome = exports.getPortalsControllerInstallBiomeUrl = exports.portalsControllerReadopt = exports.getPortalsControllerReadoptUrl = exports.portalsControllerUnarchive = exports.getPortalsControllerUnarchiveUrl = exports.portalsControllerArchive = exports.getPortalsControllerArchiveUrl = exports.portalsControllerRemove = exports.getPortalsControllerRemoveUrl = exports.portalsControllerUpdate = exports.getPortalsControllerUpdateUrl = exports.portalsControllerGetOne = exports.getPortalsControllerGetOneUrl = exports.portalsControllerCreate = exports.getPortalsControllerCreateUrl = exports.portalsControllerList = exports.getPortalsControllerListUrl = exports.projectAudiencePoliciesControllerDelete = exports.getProjectAudiencePoliciesControllerDeleteUrl = exports.projectAudiencePoliciesControllerUpdate = exports.getProjectAudiencePoliciesControllerUpdateUrl = exports.projectAudiencePoliciesControllerList = exports.getProjectAudiencePoliciesControllerListUrl = exports.projectAudiencePoliciesControllerCreate = exports.getProjectAudiencePoliciesControllerCreateUrl = exports.projectAppReleasesControllerRollback = exports.getProjectAppReleasesControllerRollbackUrl = exports.projectAppReleasesControllerListHistory = exports.getProjectAppReleasesControllerListHistoryUrl = exports.projectAppReleasesControllerGetLive = exports.getProjectAppReleasesControllerGetLiveUrl = exports.projectAppClientsControllerRevoke = exports.getProjectAppClientsControllerRevokeUrl = exports.projectAppClientsControllerList = exports.getProjectAppClientsControllerListUrl = exports.projectAppClientsControllerCreate = exports.getProjectAppClientsControllerCreateUrl = exports.projectAppsControllerGetById = exports.getProjectAppsControllerGetByIdUrl = exports.projectAppsControllerList = exports.getProjectAppsControllerListUrl = exports.projectAppsControllerCreate = exports.getProjectAppsControllerCreateUrl = void 0;
+exports.portalLaunchEntriesControllerList = exports.getPortalLaunchEntriesControllerListUrl = exports.portalsControllerRefreshLockfile = exports.getPortalsControllerRefreshLockfileUrl = exports.portalsControllerUninstallBiome = exports.getPortalsControllerUninstallBiomeUrl = exports.portalsControllerInstallBiome = exports.getPortalsControllerInstallBiomeUrl = exports.portalsControllerReadopt = exports.getPortalsControllerReadoptUrl = exports.portalsControllerUnarchive = exports.getPortalsControllerUnarchiveUrl = exports.portalsControllerArchive = exports.getPortalsControllerArchiveUrl = exports.portalsControllerRemove = exports.getPortalsControllerRemoveUrl = exports.portalsControllerUpdate = exports.getPortalsControllerUpdateUrl = exports.portalsControllerGetOne = exports.getPortalsControllerGetOneUrl = exports.portalsControllerCreate = exports.getPortalsControllerCreateUrl = exports.portalsControllerList = exports.getPortalsControllerListUrl = exports.projectAudiencePoliciesControllerDelete = exports.getProjectAudiencePoliciesControllerDeleteUrl = exports.projectAudiencePoliciesControllerUpdate = exports.getProjectAudiencePoliciesControllerUpdateUrl = exports.projectAudiencePoliciesControllerList = exports.getProjectAudiencePoliciesControllerListUrl = exports.projectAudiencePoliciesControllerCreate = exports.getProjectAudiencePoliciesControllerCreateUrl = exports.projectAppReleasesControllerRollback = exports.getProjectAppReleasesControllerRollbackUrl = exports.projectAppReleasesControllerListHistory = exports.getProjectAppReleasesControllerListHistoryUrl = exports.projectAppReleasesControllerGetLive = exports.getProjectAppReleasesControllerGetLiveUrl = exports.projectAppClientsControllerRevoke = exports.getProjectAppClientsControllerRevokeUrl = exports.projectAppClientsControllerList = exports.getProjectAppClientsControllerListUrl = exports.projectAppClientsControllerCreate = exports.getProjectAppClientsControllerCreateUrl = exports.projectAppsControllerGetById = exports.getProjectAppsControllerGetByIdUrl = exports.projectAppsControllerList = exports.getProjectAppsControllerListUrl = exports.projectAppsControllerCreate = exports.getProjectAppsControllerCreateUrl = void 0;
+exports.portalLaunchEntriesControllerResolve = exports.getPortalLaunchEntriesControllerResolveUrl = exports.portalLaunchEntriesControllerRemove = exports.getPortalLaunchEntriesControllerRemoveUrl = exports.portalLaunchEntriesControllerUpdate = exports.getPortalLaunchEntriesControllerUpdateUrl = exports.portalLaunchEntriesControllerCreate = exports.getPortalLaunchEntriesControllerCreateUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
 const getProjectAppsControllerCreateUrl = () => {
     return `/bff/apps`;
@@ -137,17 +138,19 @@ const projectAppReleasesControllerListHistory = async (appId, options) => {
     });
 };
 exports.projectAppReleasesControllerListHistory = projectAppReleasesControllerListHistory;
-const getProjectAppReleasesControllerRollbackUrl = (appId, releaseId) => {
-    return `/bff/apps/${appId}/releases/${releaseId}/rollback`;
+const getProjectAppReleasesControllerRollbackUrl = (appId, releaseSetId) => {
+    return `/bff/apps/${appId}/releases/${releaseSetId}/rollback`;
 };
 exports.getProjectAppReleasesControllerRollbackUrl = getProjectAppReleasesControllerRollbackUrl;
 /**
  * @summary Atomically roll back Live to a retained release (org admin only).
  */
-const projectAppReleasesControllerRollback = async (appId, releaseId, options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getProjectAppReleasesControllerRollbackUrl)(appId, releaseId), {
+const projectAppReleasesControllerRollback = async (appId, releaseSetId, appReleaseActionDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getProjectAppReleasesControllerRollbackUrl)(appId, releaseSetId), {
         ...options,
-        method: 'POST'
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(appReleaseActionDto)
     });
 };
 exports.projectAppReleasesControllerRollback = projectAppReleasesControllerRollback;
@@ -392,3 +395,96 @@ const portalsControllerRefreshLockfile = async (id, options) => {
     });
 };
 exports.portalsControllerRefreshLockfile = portalsControllerRefreshLockfile;
+const getPortalLaunchEntriesControllerListUrl = (portalId) => {
+    return `/bff/portals/${portalId}/launch-entries`;
+};
+exports.getPortalLaunchEntriesControllerListUrl = getPortalLaunchEntriesControllerListUrl;
+/**
+ * @summary List authored LaunchDefinition targets for a visible portal.
+ */
+const portalLaunchEntriesControllerList = async (portalId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPortalLaunchEntriesControllerListUrl)(portalId), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.portalLaunchEntriesControllerList = portalLaunchEntriesControllerList;
+const getPortalLaunchEntriesControllerCreateUrl = (portalId) => {
+    return `/bff/portals/${portalId}/launch-entries`;
+};
+exports.getPortalLaunchEntriesControllerCreateUrl = getPortalLaunchEntriesControllerCreateUrl;
+/**
+ * @summary Create a Portal-owned tile with one RevisionTarget.
+ */
+const portalLaunchEntriesControllerCreate = async (portalId, createPortalLaunchEntryDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPortalLaunchEntriesControllerCreateUrl)(portalId), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(createPortalLaunchEntryDto)
+    });
+};
+exports.portalLaunchEntriesControllerCreate = portalLaunchEntriesControllerCreate;
+const getPortalLaunchEntriesControllerUpdateUrl = (portalId, entryId) => {
+    return `/bff/portals/${portalId}/launch-entries/${entryId}`;
+};
+exports.getPortalLaunchEntriesControllerUpdateUrl = getPortalLaunchEntriesControllerUpdateUrl;
+/**
+ * @summary CAS-update a Portal-owned tile or its RevisionTarget.
+ */
+const portalLaunchEntriesControllerUpdate = async (portalId, entryId, updatePortalLaunchEntryDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPortalLaunchEntriesControllerUpdateUrl)(portalId, entryId), {
+        ...options,
+        method: 'PATCH',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(updatePortalLaunchEntryDto)
+    });
+};
+exports.portalLaunchEntriesControllerUpdate = portalLaunchEntriesControllerUpdate;
+const getPortalLaunchEntriesControllerRemoveUrl = (portalId, entryId, params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (value === null) {
+            normalizedParams.append(key, 'null');
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                normalizedParams.append(key, item.toString());
+            }
+            return;
+        }
+        normalizedParams.append(key, value.toString());
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0 ? `/bff/portals/${portalId}/launch-entries/${entryId}?${stringifiedParams}` : `/bff/portals/${portalId}/launch-entries/${entryId}`;
+};
+exports.getPortalLaunchEntriesControllerRemoveUrl = getPortalLaunchEntriesControllerRemoveUrl;
+/**
+ * @summary CAS-delete a Portal-owned launch tile.
+ */
+const portalLaunchEntriesControllerRemove = async (portalId, entryId, params, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPortalLaunchEntriesControllerRemoveUrl)(portalId, entryId, params), {
+        ...options,
+        method: 'DELETE'
+    });
+};
+exports.portalLaunchEntriesControllerRemove = portalLaunchEntriesControllerRemove;
+const getPortalLaunchEntriesControllerResolveUrl = (portalId, entryId) => {
+    return `/bff/portals/${portalId}/launch-entries/${entryId}/resolve`;
+};
+exports.getPortalLaunchEntriesControllerResolveUrl = getPortalLaunchEntriesControllerResolveUrl;
+/**
+ * @summary Resolve one Portal target to an exact verified LaunchDefinition pin.
+ */
+const portalLaunchEntriesControllerResolve = async (portalId, entryId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPortalLaunchEntriesControllerResolveUrl)(portalId, entryId), {
+        ...options,
+        method: 'POST'
+    });
+};
+exports.portalLaunchEntriesControllerResolve = portalLaunchEntriesControllerResolve;

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export { configureClient, getClientConfig, ClientError, customFetch, type ClientConfig, type RetryNotice } from './custom-fetch';
 export * from './models';
+export * from './endpoints/delegated-session-keys/delegated-session-keys';
 export * from './endpoints/delegated-sessions/delegated-sessions';
 export * from './endpoints/project-apps/project-apps';
 export * from './endpoints/public-ingress/public-ingress';

package/dist/index.js

@@ -22,6 +22,7 @@ Object.defineProperty(exports, "getClientConfig", { enumerable: true, get: funct
 Object.defineProperty(exports, "ClientError", { enumerable: true, get: function () { return custom_fetch_1.ClientError; } });
 Object.defineProperty(exports, "customFetch", { enumerable: true, get: function () { return custom_fetch_1.customFetch; } });
 __exportStar(require("./models"), exports);
+__exportStar(require("./endpoints/delegated-session-keys/delegated-session-keys"), exports);
 __exportStar(require("./endpoints/delegated-sessions/delegated-sessions"), exports);
 __exportStar(require("./endpoints/project-apps/project-apps"), exports);
 __exportStar(require("./endpoints/public-ingress/public-ingress"), exports);

package/dist/models/anonAuthDto.d.ts

@@ -4,8 +4,12 @@
  * OpenAPI spec version: 0.1.2
  */
 export interface AnonAuthDto {
+    /** AppClient public identifier. */
+    clientId: string;
+    /** Plaintext AppClient secret. Required on EVERY external-auth door, the anonymous one included: "anonymous" describes the subject, never the caller — the App owner controls who may open sessions in its name. */
+    clientSecret: string;
     /** Optional client-supplied hint used for logging / debugging purposes. Not used for identity resolution — every call creates a fresh anon subject. */
     sessionHint?: string;
-    /** AppClient id issuing this auth request. */
-    appClientId: string;
+    /** Requested ExecutionEnvironment slug. Defaults to the App’s `defaultZone`, and either way must be in the resolved AudiencePolicy.allowedEnvironments[]. */
+    requestedZone?: string;
 }

package/dist/models/anonAuthResultDto.d.ts

@@ -12,4 +12,6 @@ export interface AnonAuthResultDto {
     sessionId: string;
     /** Subject ref minted into the token. */
     subjectRef: string;
+    /** ExecutionEnvironment slug the session was minted into. */
+    environment: string;
 }

package/dist/models/appReleaseActionDto.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+export interface AppReleaseActionDto {
+    expectedChannelVersion: number;
+    reason: string;
+}

package/dist/models/appReleaseDto.d.ts

@@ -5,26 +5,37 @@
  */
 import type { AppLockfileDto } from './appLockfileDto.js';
 import type { AppReleaseDtoAudienceSnapshot } from './appReleaseDtoAudienceSnapshot.js';
+import type { AppReleaseDtoCompatibilityEvidence } from './appReleaseDtoCompatibilityEvidence.js';
 import type { AppReleaseDtoDefinition } from './appReleaseDtoDefinition.js';
+import type { AppReleaseDtoDependenciesItem } from './appReleaseDtoDependenciesItem.js';
 import type { AppReleaseDtoPolicySnapshot } from './appReleaseDtoPolicySnapshot.js';
+import type { AppReleaseDtoProvenanceEvidence } from './appReleaseDtoProvenanceEvidence.js';
+import type { AppReleaseDtoRelease } from './appReleaseDtoRelease.js';
+import type { AppReleaseDtoReleasePolicyEvidence } from './appReleaseDtoReleasePolicyEvidence.js';
 import type { AppReleaseDtoSchemaPlan } from './appReleaseDtoSchemaPlan.js';
+import type { AppReleaseDtoSignatureEvidence } from './appReleaseDtoSignatureEvidence.js';
 import type { AppReleaseDtoSourceArtifacts } from './appReleaseDtoSourceArtifacts.js';
-import type { AppReleaseState } from './appReleaseState.js';
 export interface AppReleaseDto {
     id: string;
     appId: string;
+    /** Immutable descriptive revision sequence. */
     version: number;
     definition: AppReleaseDtoDefinition;
     lockfile: AppLockfileDto;
     schemaPlan: AppReleaseDtoSchemaPlan;
-    state: AppReleaseState;
     preparationKey?: string;
-    manifestHash?: string;
-    sourceRevisionId?: string;
-    sourceContentHash?: string;
-    sourceArtifacts?: AppReleaseDtoSourceArtifacts;
-    audienceSnapshot?: AppReleaseDtoAudienceSnapshot;
-    policySnapshot?: AppReleaseDtoPolicySnapshot;
-    preparedAt?: string;
-    activatedAt?: string;
+    manifestHash: string;
+    sourceRevisionId: string;
+    sourceContentHash: string;
+    sourceArtifacts: AppReleaseDtoSourceArtifacts;
+    audienceSnapshot: AppReleaseDtoAudienceSnapshot;
+    policySnapshot: AppReleaseDtoPolicySnapshot;
+    dependencies: AppReleaseDtoDependenciesItem[];
+    signatureEvidence: AppReleaseDtoSignatureEvidence;
+    provenanceEvidence: AppReleaseDtoProvenanceEvidence;
+    compatibilityEvidence: AppReleaseDtoCompatibilityEvidence;
+    releasePolicyEvidence: AppReleaseDtoReleasePolicyEvidence;
+    preparedAt: string;
+    /** Generic exact resolution metadata, including resolutionId, closureHash, closure, and followed channels. */
+    release?: AppReleaseDtoRelease;
 }

package/dist/models/{audiencePolicyDtoRateLimitPerHourPerSubject.d.ts → appReleaseDtoCompatibilityEvidence.d.ts}

@@ -3,9 +3,6 @@
  * App Runtime API
  * OpenAPI spec version: 0.1.2
  */
-/**
- * @nullable
- */
-export type AudiencePolicyDtoRateLimitPerHourPerSubject = {
+export type AppReleaseDtoCompatibilityEvidence = {
     [key: string]: unknown;
-} | null;
+};

package/dist/models/{updateAudiencePolicyDtoRateLimitPerHourPerSubject.d.ts → appReleaseDtoDependenciesItem.d.ts}

@@ -3,9 +3,6 @@
  * App Runtime API
  * OpenAPI spec version: 0.1.2
  */
-/**
- * @nullable
- */
-export type UpdateAudiencePolicyDtoRateLimitPerHourPerSubject = {
+export type AppReleaseDtoDependenciesItem = {
     [key: string]: unknown;
-} | null;
+};

package/dist/models/appReleaseDtoDependenciesItem.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/appReleaseDtoProvenanceEvidence.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+export type AppReleaseDtoProvenanceEvidence = {
+    [key: string]: unknown;
+};

package/dist/models/appReleaseDtoProvenanceEvidence.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/appReleaseDtoRelease.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+/**
+ * Generic exact resolution metadata, including resolutionId, closureHash, closure, and followed channels.
+ */
+export type AppReleaseDtoRelease = {
+    [key: string]: unknown;
+};

package/dist/models/appReleaseDtoRelease.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/appReleaseDtoReleasePolicyEvidence.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+export type AppReleaseDtoReleasePolicyEvidence = {
+    [key: string]: unknown;
+};

package/dist/models/appReleaseDtoReleasePolicyEvidence.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/appReleaseDtoSignatureEvidence.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+export type AppReleaseDtoSignatureEvidence = {
+    [key: string]: unknown;
+};

package/dist/models/appReleaseDtoSignatureEvidence.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/appReleaseHistoryDto.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+import type { AppReleaseHistoryDtoOperation } from './appReleaseHistoryDtoOperation.js';
+import type { AppReleaseHistoryDtoTarget } from './appReleaseHistoryDtoTarget.js';
+export interface AppReleaseHistoryDto {
+    releaseSetId: string;
+    resolutionId: string;
+    closureHash: string;
+    operation: AppReleaseHistoryDtoOperation;
+    rollbackOfReleaseSetId?: string;
+    target: AppReleaseHistoryDtoTarget;
+    channel: string;
+    channelVersion: number;
+    retired: boolean;
+    actorClientId: string;
+    reason: string;
+    createdAt: string;
+}

package/dist/models/appReleaseHistoryDtoDataArrayEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+import type { AppReleaseHistoryDto } from './appReleaseHistoryDto.js';
+export interface AppReleaseHistoryDtoDataArrayEnvelope {
+    data: AppReleaseHistoryDto[];
+}

package/dist/models/appReleaseHistoryDtoDataArrayEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/appReleaseHistoryDtoOperation.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+export type AppReleaseHistoryDtoOperation = typeof AppReleaseHistoryDtoOperation[keyof typeof AppReleaseHistoryDtoOperation];
+export declare const AppReleaseHistoryDtoOperation: {
+    readonly promote: "promote";
+    readonly rollback: "rollback";
+    readonly retire: "retire";
+};

package/dist/models/appReleaseHistoryDtoOperation.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppReleaseHistoryDtoOperation = void 0;
+exports.AppReleaseHistoryDtoOperation = {
+    promote: 'promote',
+    rollback: 'rollback',
+    retire: 'retire',
+};

package/dist/models/appReleaseHistoryDtoTarget.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+export type AppReleaseHistoryDtoTarget = {
+    [key: string]: unknown;
+};

package/dist/models/appReleaseHistoryDtoTarget.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/audiencePolicyDto.d.ts

@@ -4,7 +4,6 @@
  * OpenAPI spec version: 0.1.2
  */
 import type { AudienceKind } from './audienceKind.js';
-import type { AudiencePolicyDtoRateLimitPerHourPerSubject } from './audiencePolicyDtoRateLimitPerHourPerSubject.js';
 import type { AudienceUpstreamDto } from './audienceUpstreamDto.js';
 export interface AudiencePolicyDto {
     id: string;
@@ -12,8 +11,10 @@ export interface AudiencePolicyDto {
     kind: AudienceKind;
     allowedEnvironments: string[];
     authUpstream?: AudienceUpstreamDto | null;
-    /** @nullable */
-    rateLimitPerHourPerSubject?: AudiencePolicyDtoRateLimitPerHourPerSubject;
+    /** Session opens per hour for ONE identified external subject. Never null: a null used to mean "no limit", so an audience created without one was uncapped while reading as configured. */
+    rateLimitPerHourPerSubject: number;
+    /** Session opens per hour for the whole AppClient, across subjects. This is the cap the ANONYMOUS door is measured against — an anon subject is minted fresh on every call, so no per-subject bucket can bound it. */
+    rateLimitPerHourPerClient: number;
     createdAt: string;
     updatedAt: string;
 }

package/dist/models/biomeInstallDto.d.ts

@@ -7,8 +7,6 @@ import type { BiomeInstallDtoConfiguration } from './biomeInstallDtoConfiguratio
 export interface BiomeInstallDto {
     /** Canonical XemaObjectRef for the biome (e.g. `xema://system/biome/document-buddy`). */
     biomeRef: string;
-    /** Semver-range string (`^1.2.0`, `~1.2.0`, `1.2.0`, `latest-compatible`). */
-    versionConstraint: string;
     /** Free-form per-install configuration the biome consumes. */
     configuration?: BiomeInstallDtoConfiguration;
 }

package/dist/models/createAudiencePolicyDto.d.ts

@@ -10,6 +10,8 @@ export interface CreateAudiencePolicyDto {
     /** ExecutionEnvironmentRef slugs this audience may invoke. Required. */
     allowedEnvironments: string[];
     authUpstream?: AudienceUpstreamDto;
-    /** Rate cap (calls/hour/subject). */
+    /** Session opens per hour for ONE identified external subject. Omitted means the column default, NOT "unlimited" — there is no value that means unlimited. */
     rateLimitPerHourPerSubject?: number;
+    /** Session opens per hour for the whole AppClient, across subjects. This is the cap the ANONYMOUS door is measured against — an anon subject is minted fresh on every call, so no per-subject bucket can bound it. Omitted means the column default, NOT "unlimited". */
+    rateLimitPerHourPerClient?: number;
 }