@xemahq/app-platform-api-client 0.3.5 → 0.3.11

package/dist/endpoints/project-apps/project-apps.d.ts

@@ -3,7 +3,7 @@
  * App Runtime API
  * OpenAPI spec version: 0.1.2
  */
-import type { AppClientDtoDataArrayEnvelope, AppClientDtoDataEnvelope, AppDtoDataArrayEnvelope, AppDtoDataEnvelope, AppReleaseDtoDataArrayEnvelope, AppReleaseDtoDataEnvelope, AudiencePolicyDtoDataArrayEnvelope, AudiencePolicyDtoDataEnvelope, CreateAppClientDto, CreateAudiencePolicyDto, CreatePortalDto, CreateProjectAppDto, CreatedAppClientDtoDataEnvelope, PortalDetailDtoDataEnvelope, ProjectAppsControllerListParams, UpdateAudiencePolicyDto, UpdatePortalDto } from '../../models';
+import type { AppClientDtoDataArrayEnvelope, AppClientDtoDataEnvelope, AppDtoDataArrayEnvelope, AppDtoDataEnvelope, AppDtoPaginatedEnvelope, AppReleaseDtoDataArrayEnvelope, AppReleaseDtoDataEnvelope, AudiencePolicyDtoDataArrayEnvelope, AudiencePolicyDtoDataEnvelope, CreateAppClientDto, CreateAudiencePolicyDto, CreatePortalDto, CreateProjectAppDto, CreatedAppClientDtoDataEnvelope, InstallPortalBiomeDto, PortalDetailDtoDataEnvelope, PortalsControllerListParams, ProjectAppsControllerListParams, UnarchivePortalDto, UpdateAudiencePolicyDto, UpdatePortalDto } from '../../models';
 export declare const getProjectAppsControllerCreateUrl: () => string;
 /**
  * @summary Create an App in the caller org + named project.
@@ -11,7 +11,7 @@ export declare const getProjectAppsControllerCreateUrl: () => string;
 export declare const projectAppsControllerCreate: (createProjectAppDto: CreateProjectAppDto, options?: RequestInit) => Promise<AppDtoDataEnvelope>;
 export declare const getProjectAppsControllerListUrl: (params?: ProjectAppsControllerListParams) => string;
 /**
- * @summary List Apps in the caller org (optionally filtered by project/slug).
+ * @summary List Apps in the caller org (optionally filtered by project/slug). Archived Apps are excluded unless `includeArchived=true`.
  */
 export declare const projectAppsControllerList: (params?: ProjectAppsControllerListParams, options?: RequestInit) => Promise<AppDtoDataArrayEnvelope>;
 export declare const getProjectAppsControllerGetByIdUrl: (id: string) => string;
@@ -69,11 +69,11 @@ export declare const getProjectAudiencePoliciesControllerDeleteUrl: (id: string)
  * @summary Delete an AudiencePolicy owned by the caller org.
  */
 export declare const projectAudiencePoliciesControllerDelete: (id: string, options?: RequestInit) => Promise<void>;
-export declare const getPortalsControllerListUrl: () => string;
+export declare const getPortalsControllerListUrl: (params?: PortalsControllerListParams) => string;
 /**
- * @summary List the portals the calling user may see in the caller org (visibility-filtered).
+ * @summary List the portals the calling user may see in the caller org (visibility-filtered, paginated).
  */
-export declare const portalsControllerList: (options?: RequestInit) => Promise<AppDtoDataArrayEnvelope>;
+export declare const portalsControllerList: (params?: PortalsControllerListParams, options?: RequestInit) => Promise<AppDtoPaginatedEnvelope>;
 export declare const getPortalsControllerCreateUrl: () => string;
 /**
  * @summary Create an org-scoped portal (portal-admin only).
@@ -89,8 +89,38 @@ export declare const getPortalsControllerUpdateUrl: (id: string) => string;
  * @summary Update a portal owned by the caller org (portal-admin only).
  */
 export declare const portalsControllerUpdate: (id: string, updatePortalDto: UpdatePortalDto, options?: RequestInit) => Promise<AppDtoDataEnvelope>;
+export declare const getPortalsControllerRemoveUrl: (id: string) => string;
+/**
+ * @summary Hard-delete a UI-owned portal (portal-admin only). Cascades to its releases, app-clients and external subjects. Use archive for a reversible retire; a seeder/IaC/system-owned portal is refused (409) because its producer would recreate it.
+ */
+export declare const portalsControllerRemove: (id: string, options?: RequestInit) => Promise<void>;
 export declare const getPortalsControllerArchiveUrl: (id: string) => string;
 /**
- * @summary Archive a portal owned by the caller org (portal-admin only).
+ * @summary Archive a portal owned by the caller org (portal-admin only). Reversible via `POST :id/unarchive`.
  */
 export declare const portalsControllerArchive: (id: string, options?: RequestInit) => Promise<AppDtoDataEnvelope>;
+export declare const getPortalsControllerUnarchiveUrl: (id: string) => string;
+/**
+ * @summary Un-archive a portal owned by the caller org (portal-admin only). Re-registers its PDP access — `org-shared` unless a block is supplied.
+ */
+export declare const portalsControllerUnarchive: (id: string, unarchivePortalDto: UnarchivePortalDto, options?: RequestInit) => Promise<AppDtoDataEnvelope>;
+export declare const getPortalsControllerReadoptUrl: (id: string) => string;
+/**
+ * @summary Hand a UI-adopted default portal back to the reconciler (portal-admin only), so it resumes tracking the installed web biomes.
+ */
+export declare const portalsControllerReadopt: (id: string, options?: RequestInit) => Promise<AppDtoDataEnvelope>;
+export declare const getPortalsControllerInstallBiomeUrl: (id: string) => string;
+/**
+ * @summary Install one biome on a portal (portal-admin only). Idempotent per ref; serialized against concurrent installs by a per-portal lock. Returns 422 for a ref no web biome is registered for.
+ */
+export declare const portalsControllerInstallBiome: (id: string, installPortalBiomeDto: InstallPortalBiomeDto, options?: RequestInit) => Promise<AppDtoDataEnvelope>;
+export declare const getPortalsControllerUninstallBiomeUrl: (id: string, encodedRef: string) => string;
+/**
+ * @summary Uninstall one biome from a portal (portal-admin only). 404s a ref the portal does not carry, rather than reporting a no-op as success.
+ */
+export declare const portalsControllerUninstallBiome: (id: string, encodedRef: string, options?: RequestInit) => Promise<AppDtoDataEnvelope>;
+export declare const getPortalsControllerRefreshLockfileUrl: (id: string) => string;
+/**
+ * @summary Refresh a portal lockfile (portal-admin only). Re-pins kernel + installed biomes via the kernel Lockfile Resolver. Returns 422 LOCKFILE_RESOLVER_FAILED on any unsatisfiable constraint, malformed ref, or unreachable upstream.
+ */
+export declare const portalsControllerRefreshLockfile: (id: string, options?: RequestInit) => Promise<AppDtoDataEnvelope>;

package/dist/endpoints/project-apps/project-apps.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.portalsControllerArchive = exports.getPortalsControllerArchiveUrl = exports.portalsControllerUpdate = exports.getPortalsControllerUpdateUrl = exports.portalsControllerGetOne = exports.getPortalsControllerGetOneUrl = exports.portalsControllerCreate = exports.getPortalsControllerCreateUrl = exports.portalsControllerList = exports.getPortalsControllerListUrl = exports.projectAudiencePoliciesControllerDelete = exports.getProjectAudiencePoliciesControllerDeleteUrl = exports.projectAudiencePoliciesControllerUpdate = exports.getProjectAudiencePoliciesControllerUpdateUrl = exports.projectAudiencePoliciesControllerList = exports.getProjectAudiencePoliciesControllerListUrl = exports.projectAudiencePoliciesControllerCreate = exports.getProjectAudiencePoliciesControllerCreateUrl = exports.projectAppReleasesControllerRollback = exports.getProjectAppReleasesControllerRollbackUrl = exports.projectAppReleasesControllerListHistory = exports.getProjectAppReleasesControllerListHistoryUrl = exports.projectAppReleasesControllerGetLive = exports.getProjectAppReleasesControllerGetLiveUrl = exports.projectAppClientsControllerRevoke = exports.getProjectAppClientsControllerRevokeUrl = exports.projectAppClientsControllerList = exports.getProjectAppClientsControllerListUrl = exports.projectAppClientsControllerCreate = exports.getProjectAppClientsControllerCreateUrl = exports.projectAppsControllerGetById = exports.getProjectAppsControllerGetByIdUrl = exports.projectAppsControllerList = exports.getProjectAppsControllerListUrl = exports.projectAppsControllerCreate = exports.getProjectAppsControllerCreateUrl = void 0;
+exports.portalsControllerRefreshLockfile = exports.getPortalsControllerRefreshLockfileUrl = exports.portalsControllerUninstallBiome = exports.getPortalsControllerUninstallBiomeUrl = exports.portalsControllerInstallBiome = exports.getPortalsControllerInstallBiomeUrl = exports.portalsControllerReadopt = exports.getPortalsControllerReadoptUrl = exports.portalsControllerUnarchive = exports.getPortalsControllerUnarchiveUrl = exports.portalsControllerArchive = exports.getPortalsControllerArchiveUrl = exports.portalsControllerRemove = exports.getPortalsControllerRemoveUrl = exports.portalsControllerUpdate = exports.getPortalsControllerUpdateUrl = exports.portalsControllerGetOne = exports.getPortalsControllerGetOneUrl = exports.portalsControllerCreate = exports.getPortalsControllerCreateUrl = exports.portalsControllerList = exports.getPortalsControllerListUrl = exports.projectAudiencePoliciesControllerDelete = exports.getProjectAudiencePoliciesControllerDeleteUrl = exports.projectAudiencePoliciesControllerUpdate = exports.getProjectAudiencePoliciesControllerUpdateUrl = exports.projectAudiencePoliciesControllerList = exports.getProjectAudiencePoliciesControllerListUrl = exports.projectAudiencePoliciesControllerCreate = exports.getProjectAudiencePoliciesControllerCreateUrl = exports.projectAppReleasesControllerRollback = exports.getProjectAppReleasesControllerRollbackUrl = exports.projectAppReleasesControllerListHistory = exports.getProjectAppReleasesControllerListHistoryUrl = exports.projectAppReleasesControllerGetLive = exports.getProjectAppReleasesControllerGetLiveUrl = exports.projectAppClientsControllerRevoke = exports.getProjectAppClientsControllerRevokeUrl = exports.projectAppClientsControllerList = exports.getProjectAppClientsControllerListUrl = exports.projectAppClientsControllerCreate = exports.getProjectAppClientsControllerCreateUrl = exports.projectAppsControllerGetById = exports.getProjectAppsControllerGetByIdUrl = exports.projectAppsControllerList = exports.getProjectAppsControllerListUrl = exports.projectAppsControllerCreate = exports.getProjectAppsControllerCreateUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
 const getProjectAppsControllerCreateUrl = () => {
     return `/bff/apps`;
@@ -42,7 +42,7 @@ const getProjectAppsControllerListUrl = (params) => {
 };
 exports.getProjectAppsControllerListUrl = getProjectAppsControllerListUrl;
 /**
- * @summary List Apps in the caller org (optionally filtered by project/slug).
+ * @summary List Apps in the caller org (optionally filtered by project/slug). Archived Apps are excluded unless `includeArchived=true`.
  */
 const projectAppsControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getProjectAppsControllerListUrl)(params), {
@@ -211,15 +211,34 @@ const projectAudiencePoliciesControllerDelete = async (id, options) => {
     });
 };
 exports.projectAudiencePoliciesControllerDelete = projectAudiencePoliciesControllerDelete;
-const getPortalsControllerListUrl = () => {
-    return `/bff/portals`;
+const getPortalsControllerListUrl = (params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (value === null) {
+            normalizedParams.append(key, 'null');
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                normalizedParams.append(key, item.toString());
+            }
+            return;
+        }
+        normalizedParams.append(key, value.toString());
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0 ? `/bff/portals?${stringifiedParams}` : `/bff/portals`;
 };
 exports.getPortalsControllerListUrl = getPortalsControllerListUrl;
 /**
- * @summary List the portals the calling user may see in the caller org (visibility-filtered).
+ * @summary List the portals the calling user may see in the caller org (visibility-filtered, paginated).
  */
-const portalsControllerList = async (options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getPortalsControllerListUrl)(), {
+const portalsControllerList = async (params, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPortalsControllerListUrl)(params), {
         ...options,
         method: 'GET'
     });
@@ -271,12 +290,26 @@ const portalsControllerUpdate = async (id, updatePortalDto, options) => {
     });
 };
 exports.portalsControllerUpdate = portalsControllerUpdate;
+const getPortalsControllerRemoveUrl = (id) => {
+    return `/bff/portals/${id}`;
+};
+exports.getPortalsControllerRemoveUrl = getPortalsControllerRemoveUrl;
+/**
+ * @summary Hard-delete a UI-owned portal (portal-admin only). Cascades to its releases, app-clients and external subjects. Use archive for a reversible retire; a seeder/IaC/system-owned portal is refused (409) because its producer would recreate it.
+ */
+const portalsControllerRemove = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPortalsControllerRemoveUrl)(id), {
+        ...options,
+        method: 'DELETE'
+    });
+};
+exports.portalsControllerRemove = portalsControllerRemove;
 const getPortalsControllerArchiveUrl = (id) => {
     return `/bff/portals/${id}/archive`;
 };
 exports.getPortalsControllerArchiveUrl = getPortalsControllerArchiveUrl;
 /**
- * @summary Archive a portal owned by the caller org (portal-admin only).
+ * @summary Archive a portal owned by the caller org (portal-admin only). Reversible via `POST :id/unarchive`.
  */
 const portalsControllerArchive = async (id, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getPortalsControllerArchiveUrl)(id), {
@@ -285,3 +318,77 @@ const portalsControllerArchive = async (id, options) => {
     });
 };
 exports.portalsControllerArchive = portalsControllerArchive;
+const getPortalsControllerUnarchiveUrl = (id) => {
+    return `/bff/portals/${id}/unarchive`;
+};
+exports.getPortalsControllerUnarchiveUrl = getPortalsControllerUnarchiveUrl;
+/**
+ * @summary Un-archive a portal owned by the caller org (portal-admin only). Re-registers its PDP access — `org-shared` unless a block is supplied.
+ */
+const portalsControllerUnarchive = async (id, unarchivePortalDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPortalsControllerUnarchiveUrl)(id), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(unarchivePortalDto)
+    });
+};
+exports.portalsControllerUnarchive = portalsControllerUnarchive;
+const getPortalsControllerReadoptUrl = (id) => {
+    return `/bff/portals/${id}/readopt`;
+};
+exports.getPortalsControllerReadoptUrl = getPortalsControllerReadoptUrl;
+/**
+ * @summary Hand a UI-adopted default portal back to the reconciler (portal-admin only), so it resumes tracking the installed web biomes.
+ */
+const portalsControllerReadopt = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPortalsControllerReadoptUrl)(id), {
+        ...options,
+        method: 'POST'
+    });
+};
+exports.portalsControllerReadopt = portalsControllerReadopt;
+const getPortalsControllerInstallBiomeUrl = (id) => {
+    return `/bff/portals/${id}/biomes`;
+};
+exports.getPortalsControllerInstallBiomeUrl = getPortalsControllerInstallBiomeUrl;
+/**
+ * @summary Install one biome on a portal (portal-admin only). Idempotent per ref; serialized against concurrent installs by a per-portal lock. Returns 422 for a ref no web biome is registered for.
+ */
+const portalsControllerInstallBiome = async (id, installPortalBiomeDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPortalsControllerInstallBiomeUrl)(id), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(installPortalBiomeDto)
+    });
+};
+exports.portalsControllerInstallBiome = portalsControllerInstallBiome;
+const getPortalsControllerUninstallBiomeUrl = (id, encodedRef) => {
+    return `/bff/portals/${id}/biomes/${encodedRef}`;
+};
+exports.getPortalsControllerUninstallBiomeUrl = getPortalsControllerUninstallBiomeUrl;
+/**
+ * @summary Uninstall one biome from a portal (portal-admin only). 404s a ref the portal does not carry, rather than reporting a no-op as success.
+ */
+const portalsControllerUninstallBiome = async (id, encodedRef, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPortalsControllerUninstallBiomeUrl)(id, encodedRef), {
+        ...options,
+        method: 'DELETE'
+    });
+};
+exports.portalsControllerUninstallBiome = portalsControllerUninstallBiome;
+const getPortalsControllerRefreshLockfileUrl = (id) => {
+    return `/bff/portals/${id}/lockfile/refresh`;
+};
+exports.getPortalsControllerRefreshLockfileUrl = getPortalsControllerRefreshLockfileUrl;
+/**
+ * @summary Refresh a portal lockfile (portal-admin only). Re-pins kernel + installed biomes via the kernel Lockfile Resolver. Returns 422 LOCKFILE_RESOLVER_FAILED on any unsatisfiable constraint, malformed ref, or unreachable upstream.
+ */
+const portalsControllerRefreshLockfile = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPortalsControllerRefreshLockfileUrl)(id), {
+        ...options,
+        method: 'POST'
+    });
+};
+exports.portalsControllerRefreshLockfile = portalsControllerRefreshLockfile;

package/dist/models/appDto.d.ts

@@ -4,6 +4,7 @@
  * OpenAPI spec version: 0.1.2
  */
 import type { AppLockfileDto } from './appLockfileDto.js';
+import type { AudienceKind } from './audienceKind.js';
 import type { BiomeInstallDto } from './biomeInstallDto.js';
 import type { BrandingConfigDto } from './brandingConfigDto.js';
 import type { CapabilityPolicyOverrideDto } from './capabilityPolicyOverrideDto.js';
@@ -22,13 +23,14 @@ export interface AppDto {
     lockfile: AppLockfileDto;
     installedBiomes: BiomeInstallDto[];
     capabilityPolicy: CapabilityPolicyOverrideDto[];
-    /** @nullable */
-    subdomain: string | null;
+    /** Whether this App is reachable on a public host. The host itself is DERIVED (see `codedAppSubdomain`), never tenant-chosen — this is the switch for WHETHER, not WHERE. */
     subdomainEnabled: boolean;
-    defaultAudience: string;
+    defaultAudience: AudienceKind;
     archived: boolean;
     /** Provisioning ownership marker. `iac` = managed by the declarative control plane (Terraform / xema.yaml); `seeder` = a distribution default; `ui` = hand-managed (or adopted from iac/seeder via a UI edit); `system` = platform-shipped; null = unmanaged/legacy. Lets a console badge an IaC-owned resource and surface an "export as code" affordance. */
     managedBy: ResourceManagedBy | null;
+    /** Whether this App can be handed back to the portal reconciler — the exact precondition of POST /bff/portals/:id/readopt (true iff the row carries the reconciler natural key). Read-only, server-derived. A `ui`-managed App with readoptable=false was hand-created and was never reconciler-owned; with readoptable=true it is an adopted default portal, and readopt restores automatic updates. */
+    readoptable: boolean;
     createdAt: string;
     updatedAt: string;
 }

package/dist/models/appDtoPaginatedEnvelope.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+import type { AppDto } from './appDto.js';
+import type { PaginationMeta } from './paginationMeta.js';
+export interface AppDtoPaginatedEnvelope {
+    data: AppDto[];
+    pagination: PaginationMeta;
+}

package/dist/models/appDtoPaginatedEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/createPortalDto.d.ts

@@ -4,6 +4,7 @@
  * OpenAPI spec version: 0.1.2
  */
 import type { AppLockfileDto } from './appLockfileDto.js';
+import type { AudienceKind } from './audienceKind.js';
 import type { BiomeInstallDto } from './biomeInstallDto.js';
 import type { BrandingConfigDto } from './brandingConfigDto.js';
 import type { CapabilityPolicyOverrideDto } from './capabilityPolicyOverrideDto.js';
@@ -18,10 +19,9 @@ export interface CreatePortalDto {
     lockfile: AppLockfileDto;
     installedBiomes: BiomeInstallDto[];
     capabilityPolicy: CapabilityPolicyOverrideDto[];
-    /** @nullable */
-    subdomain?: string | null;
+    /** Whether this App is reachable on a public host. The host itself is DERIVED, never tenant-chosen — this is the switch for WHETHER, not WHERE. */
     subdomainEnabled?: boolean;
-    defaultAudience?: string;
+    defaultAudience?: AudienceKind;
     archived?: boolean;
     access?: PortalAccessDto;
 }

package/dist/models/createProjectAppDto.d.ts

@@ -4,10 +4,11 @@
  * OpenAPI spec version: 0.1.2
  */
 import type { AppLockfileDto } from './appLockfileDto.js';
+import type { AudienceKind } from './audienceKind.js';
 import type { BiomeInstallDto } from './biomeInstallDto.js';
 import type { BrandingConfigDto } from './brandingConfigDto.js';
 import type { CapabilityPolicyOverrideDto } from './capabilityPolicyOverrideDto.js';
-import type { CreateProjectAppDtoProjectId } from './createProjectAppDtoProjectId.js';
+import type { SurfaceKind } from './surfaceKind.js';
 export interface CreateProjectAppDto {
     /** Stable slug unique within (orgId, projectId) for project apps, or (orgId) for portals. */
     slug: string;
@@ -15,7 +16,7 @@ export interface CreateProjectAppDto {
        * Project id. Null or absent for org-scoped portals.
        * @nullable
        */
-    projectId?: CreateProjectAppDtoProjectId;
+    projectId?: string | null;
     displayName: string;
     /** Default ExecutionEnvironment slug (e.g. `public-session`). */
     defaultZone: string;
@@ -23,9 +24,10 @@ export interface CreateProjectAppDto {
     lockfile: AppLockfileDto;
     installedBiomes: BiomeInstallDto[];
     capabilityPolicy: CapabilityPolicyOverrideDto[];
-    /** @nullable */
-    subdomain?: string | null;
+    /** Whether this App is reachable on a public host. The host itself is DERIVED, never tenant-chosen — this is the switch for WHETHER, not WHERE. */
     subdomainEnabled?: boolean;
-    defaultAudience?: string;
+    defaultAudience?: AudienceKind;
     archived?: boolean;
+    /** Authoring tier. `declared` (the default) and `composed` Apps ARE their JSON definition. A `coded` App is one the platform hosts but does not author — a Webapp Studio session builds a container image from the user's own repo, and every release of it carries that image coordinate. Immutable after creation: the tier decides what a release IS, so changing it would leave existing releases describing the wrong thing. */
+    surface?: SurfaceKind;
 }

package/dist/models/index.d.ts

@@ -8,6 +8,7 @@ export * from './appClientDtoRevokedAt';
 export * from './appDto';
 export * from './appDtoDataArrayEnvelope';
 export * from './appDtoDataEnvelope';
+export * from './appDtoPaginatedEnvelope';
 export * from './appLockfileDto';
 export * from './appLockfileDtoAgents';
 export * from './appLockfileDtoBiomes';
@@ -42,7 +43,6 @@ export * from './createAppClientDto';
 export * from './createAudiencePolicyDto';
 export * from './createPortalDto';
 export * from './createProjectAppDto';
-export * from './createProjectAppDtoProjectId';
 export * from './createPublicSessionDto';
 export * from './createdAppClientDto';
 export * from './createdAppClientDtoDataEnvelope';
@@ -58,13 +58,17 @@ export * from './delegatedSessionStatusDto';
 export * from './delegatedSessionStatusDtoDataEnvelope';
 export * from './delegatedSessionStatusDtoExternalSubjectId';
 export * from './delegatedSessionStatusDtoRevokedAt';
+export * from './installPortalBiomeDto';
+export * from './installPortalBiomeDtoConfiguration';
 export * from './oidcAuthDto';
 export * from './oidcAuthResultDto';
 export * from './oidcAuthResultDtoDataEnvelope';
+export * from './paginationMeta';
 export * from './portalAccessDto';
 export * from './portalDetailDto';
 export * from './portalDetailDtoDataEnvelope';
 export * from './portalShareDto';
+export * from './portalsControllerListParams';
 export * from './projectAppsControllerListParams';
 export * from './requestMagicLinkDto';
 export * from './requestMagicLinkResultDto';
@@ -72,7 +76,9 @@ export * from './requestMagicLinkResultDtoDataEnvelope';
 export * from './resourceManagedBy';
 export * from './resourceVisibilityPattern';
 export * from './subjectKind';
+export * from './surfaceKind';
 export * from './tokenClass';
+export * from './unarchivePortalDto';
 export * from './updateAudiencePolicyDto';
 export * from './updateAudiencePolicyDtoRateLimitPerHourPerSubject';
 export * from './updatePortalDto';

package/dist/models/index.js

@@ -25,6 +25,7 @@ __exportStar(require("./appClientDtoRevokedAt"), exports);
 __exportStar(require("./appDto"), exports);
 __exportStar(require("./appDtoDataArrayEnvelope"), exports);
 __exportStar(require("./appDtoDataEnvelope"), exports);
+__exportStar(require("./appDtoPaginatedEnvelope"), exports);
 __exportStar(require("./appLockfileDto"), exports);
 __exportStar(require("./appLockfileDtoAgents"), exports);
 __exportStar(require("./appLockfileDtoBiomes"), exports);
@@ -59,7 +60,6 @@ __exportStar(require("./createAppClientDto"), exports);
 __exportStar(require("./createAudiencePolicyDto"), exports);
 __exportStar(require("./createPortalDto"), exports);
 __exportStar(require("./createProjectAppDto"), exports);
-__exportStar(require("./createProjectAppDtoProjectId"), exports);
 __exportStar(require("./createPublicSessionDto"), exports);
 __exportStar(require("./createdAppClientDto"), exports);
 __exportStar(require("./createdAppClientDtoDataEnvelope"), exports);
@@ -75,13 +75,17 @@ __exportStar(require("./delegatedSessionStatusDto"), exports);
 __exportStar(require("./delegatedSessionStatusDtoDataEnvelope"), exports);
 __exportStar(require("./delegatedSessionStatusDtoExternalSubjectId"), exports);
 __exportStar(require("./delegatedSessionStatusDtoRevokedAt"), exports);
+__exportStar(require("./installPortalBiomeDto"), exports);
+__exportStar(require("./installPortalBiomeDtoConfiguration"), exports);
 __exportStar(require("./oidcAuthDto"), exports);
 __exportStar(require("./oidcAuthResultDto"), exports);
 __exportStar(require("./oidcAuthResultDtoDataEnvelope"), exports);
+__exportStar(require("./paginationMeta"), exports);
 __exportStar(require("./portalAccessDto"), exports);
 __exportStar(require("./portalDetailDto"), exports);
 __exportStar(require("./portalDetailDtoDataEnvelope"), exports);
 __exportStar(require("./portalShareDto"), exports);
+__exportStar(require("./portalsControllerListParams"), exports);
 __exportStar(require("./projectAppsControllerListParams"), exports);
 __exportStar(require("./requestMagicLinkDto"), exports);
 __exportStar(require("./requestMagicLinkResultDto"), exports);
@@ -89,7 +93,9 @@ __exportStar(require("./requestMagicLinkResultDtoDataEnvelope"), exports);
 __exportStar(require("./resourceManagedBy"), exports);
 __exportStar(require("./resourceVisibilityPattern"), exports);
 __exportStar(require("./subjectKind"), exports);
+__exportStar(require("./surfaceKind"), exports);
 __exportStar(require("./tokenClass"), exports);
+__exportStar(require("./unarchivePortalDto"), exports);
 __exportStar(require("./updateAudiencePolicyDto"), exports);
 __exportStar(require("./updateAudiencePolicyDtoRateLimitPerHourPerSubject"), exports);
 __exportStar(require("./updatePortalDto"), exports);

package/dist/models/installPortalBiomeDto.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+import type { InstallPortalBiomeDtoConfiguration } from './installPortalBiomeDtoConfiguration.js';
+export interface InstallPortalBiomeDto {
+    /** Canonical XemaObjectRef for the biome (e.g. `xema://system/biome/document-buddy`). */
+    biomeRef: string;
+    /** Semver-range string (`^1.2.0`, `~1.2.0`, `1.2.0`, `latest-compatible`). */
+    versionConstraint: string;
+    /** Free-form per-install configuration the biome consumes. */
+    configuration?: InstallPortalBiomeDtoConfiguration;
+}

package/dist/models/installPortalBiomeDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/{createProjectAppDtoProjectId.d.ts → installPortalBiomeDtoConfiguration.d.ts}

@@ -4,9 +4,8 @@
  * OpenAPI spec version: 0.1.2
  */
 /**
- * Project id. Null or absent for org-scoped portals.
- * @nullable
+ * Free-form per-install configuration the biome consumes.
  */
-export type CreateProjectAppDtoProjectId = {
+export type InstallPortalBiomeDtoConfiguration = {
     [key: string]: unknown;
-} | null;
+};

package/dist/models/paginationMeta.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+export interface PaginationMeta {
+    total?: number;
+    page?: number;
+    totalPages?: number;
+    /** @nullable */
+    nextCursor?: string | null;
+    /** @nullable */
+    previousCursor?: string | null;
+    limit?: number;
+    hasMore?: boolean;
+}

package/dist/models/paginationMeta.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/portalDetailDto.d.ts

@@ -7,5 +7,8 @@ import type { AppDto } from './appDto.js';
 import type { PortalAccessDto } from './portalAccessDto.js';
 export interface PortalDetailDto {
     portal: AppDto;
+    /** The portal access this read RESOLVED. When `registered` is false this is the org-shared default the read just repaired the record to, not a record that was found. */
     access: PortalAccessDto;
+    /** Whether the PDP held an access record for this portal BEFORE this read. False means it did not — the portal was invisible to every non-admin member, and this read has registered the org-shared default to repair it. Surfaced rather than hidden because substituting the default and saying nothing rendered "shared with the whole organization" for a portal `listVisible` returned for nobody: a claim the product itself contradicted, with no way for an admin to tell. */
+    registered: boolean;
 }

package/dist/models/portalsControllerListParams.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+export type PortalsControllerListParams = {
+    /**
+     * Page number (1-indexed)
+     * @minimum 1
+     */
+    page?: number;
+    /**
+     * Items per page
+     * @minimum 1
+     * @maximum 100
+     */
+    limit?: number;
+};

package/dist/models/portalsControllerListParams.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/projectAppsControllerListParams.d.ts

@@ -9,4 +9,8 @@ export type ProjectAppsControllerListParams = {
      */
     projectId?: string;
     slug?: string;
+    /**
+     * Include archived Apps. Default false — an archived App no longer accepts sessions (public ingress and every external-auth flow refuse it), so it is out of the listing unless explicitly asked for.
+     */
+    includeArchived?: boolean;
 };

package/dist/models/surfaceKind.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+/**
+ * Authoring tier. `declared` (the default) and `composed` Apps ARE their JSON definition. A `coded` App is one the platform hosts but does not author — a Webapp Studio session builds a container image from the user's own repo, and every release of it carries that image coordinate. Immutable after creation: the tier decides what a release IS, so changing it would leave existing releases describing the wrong thing.
+ */
+export type SurfaceKind = typeof SurfaceKind[keyof typeof SurfaceKind];
+export declare const SurfaceKind: {
+    readonly declared: "declared";
+    readonly composed: "composed";
+    readonly coded: "coded";
+};

package/dist/models/surfaceKind.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SurfaceKind = void 0;
+exports.SurfaceKind = {
+    declared: 'declared',
+    composed: 'composed',
+    coded: 'coded',
+};

package/dist/models/unarchivePortalDto.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * App Runtime API
+ * OpenAPI spec version: 0.1.2
+ */
+import type { PortalAccessDto } from './portalAccessDto.js';
+export interface UnarchivePortalDto {
+    access?: PortalAccessDto;
+}

package/dist/models/unarchivePortalDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/updatePortalDto.d.ts

@@ -3,21 +3,13 @@
  * App Runtime API
  * OpenAPI spec version: 0.1.2
  */
-import type { AppLockfileDto } from './appLockfileDto.js';
-import type { BiomeInstallDto } from './biomeInstallDto.js';
 import type { BrandingConfigDto } from './brandingConfigDto.js';
-import type { CapabilityPolicyOverrideDto } from './capabilityPolicyOverrideDto.js';
 import type { PortalAccessDto } from './portalAccessDto.js';
 export interface UpdatePortalDto {
     displayName?: string;
     defaultZone?: string;
     branding?: BrandingConfigDto;
-    lockfile?: AppLockfileDto;
-    installedBiomes?: BiomeInstallDto[];
-    capabilityPolicy?: CapabilityPolicyOverrideDto[];
-    /** @nullable */
-    subdomain?: string | null;
+    /** Whether this App is reachable on a public host. The host itself is DERIVED, never tenant-chosen — this is the switch for WHETHER, not WHERE. */
     subdomainEnabled?: boolean;
-    defaultAudience?: string;
     access?: PortalAccessDto;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/app-platform-api-client",
-  "version": "0.3.5",
+  "version": "0.3.11",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"