@xemahq/authorization-internal-api-client 0.3.10 → 0.4.12

package/dist/models/index.js

@@ -32,10 +32,12 @@ __exportStar(require("./authorizationSuggestionKind"), exports);
 __exportStar(require("./biomeExecutionTrustTier"), exports);
 __exportStar(require("./biomePermissionProfile"), exports);
 __exportStar(require("./callerKind"), exports);
+__exportStar(require("./capabilityEffectClass"), exports);
 __exportStar(require("./capabilityGrantDto"), exports);
 __exportStar(require("./capabilityGrantDtoDataEnvelope"), exports);
 __exportStar(require("./capabilityGrantDtoPaginatedEnvelope"), exports);
 __exportStar(require("./capabilityGrantRelation"), exports);
+__exportStar(require("./capabilityReach"), exports);
 __exportStar(require("./capabilityRiskTier"), exports);
 __exportStar(require("./createExecutionEnvironmentDto"), exports);
 __exportStar(require("./createExecutionEnvironmentDtoAllowedCapabilitiesItem"), exports);
@@ -58,15 +60,30 @@ __exportStar(require("./describeObjectsResponseDtoDataEnvelope"), exports);
 __exportStar(require("./environmentCeilingSource"), exports);
 __exportStar(require("./environmentsControllerFindBySlugParams"), exports);
 __exportStar(require("./environmentsControllerListParams"), exports);
+__exportStar(require("./environmentsControllerReleaseHistoryParams"), exports);
+__exportStar(require("./environmentsControllerReleaseImpactParams"), exports);
 __exportStar(require("./environmentsControllerRemoveParams"), exports);
+__exportStar(require("./environmentsControllerRollbackParams"), exports);
 __exportStar(require("./environmentsControllerUpdateParams"), exports);
 __exportStar(require("./errorDetailsDto"), exports);
 __exportStar(require("./errorDetailsDtoDetails"), exports);
 __exportStar(require("./errorPayloadDto"), exports);
 __exportStar(require("./errorResponseDto"), exports);
+__exportStar(require("./exactResourceAuthorityDto"), exports);
+__exportStar(require("./exactResourceAuthorityDtoDataEnvelope"), exports);
+__exportStar(require("./exactResourceBindingDto"), exports);
 __exportStar(require("./executionEnvironmentKind"), exports);
+__exportStar(require("./executionEnvironmentReleaseHistoryDto"), exports);
+__exportStar(require("./executionEnvironmentReleaseHistoryDtoDataArrayEnvelope"), exports);
+__exportStar(require("./executionEnvironmentReleaseHistoryDtoOperation"), exports);
+__exportStar(require("./executionEnvironmentReleaseImpactDto"), exports);
+__exportStar(require("./executionEnvironmentReleaseImpactDtoDataArrayEnvelope"), exports);
 __exportStar(require("./executionEnvironmentResponseDto"), exports);
+__exportStar(require("./executionEnvironmentResponseDtoAllowedBiomesItem"), exports);
 __exportStar(require("./executionEnvironmentResponseDtoAllowedCapabilitiesItem"), exports);
+__exportStar(require("./executionEnvironmentResponseDtoAllowedConnectorsItem"), exports);
+__exportStar(require("./executionEnvironmentResponseDtoAllowedKnowledgeScopesItem"), exports);
+__exportStar(require("./executionEnvironmentResponseDtoAllowedMountsItem"), exports);
 __exportStar(require("./executionEnvironmentResponseDtoApprovalRulesItem"), exports);
 __exportStar(require("./executionEnvironmentResponseDtoDataArrayEnvelope"), exports);
 __exportStar(require("./executionEnvironmentResponseDtoDataEnvelope"), exports);
@@ -76,7 +93,10 @@ __exportStar(require("./grantConstraintsDto"), exports);
 __exportStar(require("./grantVersionResponseDto"), exports);
 __exportStar(require("./grantVersionResponseDtoDataEnvelope"), exports);
 __exportStar(require("./grantsControllerListParams"), exports);
+__exportStar(require("./impactedOutputRouteConsumerDto"), exports);
+__exportStar(require("./impactedOutputRouteConsumerDtoDataArrayEnvelope"), exports);
 __exportStar(require("./listVisibleResourcesDto"), exports);
+__exportStar(require("./object"), exports);
 __exportStar(require("./objectLifecycle"), exports);
 __exportStar(require("./openFgaRelationshipDto"), exports);
 __exportStar(require("./openFgaRelationshipDtoPaginatedEnvelope"), exports);
@@ -84,6 +104,21 @@ __exportStar(require("./orgRole"), exports);
 __exportStar(require("./orgRoleSyncDto"), exports);
 __exportStar(require("./orgRoleSyncResultDto"), exports);
 __exportStar(require("./orgRoleSyncResultDtoDataEnvelope"), exports);
+__exportStar(require("./outputRouteAuthorityDto"), exports);
+__exportStar(require("./outputRouteAuthorityDtoAllowedOutputSchema"), exports);
+__exportStar(require("./outputRouteAuthorityDtoDataEnvelope"), exports);
+__exportStar(require("./outputRouteDestinationKind"), exports);
+__exportStar(require("./outputRoutePublicationRequestDto"), exports);
+__exportStar(require("./outputRoutePublicationRequestDtoDataEnvelope"), exports);
+__exportStar(require("./outputRouteReleaseHistoryDto"), exports);
+__exportStar(require("./outputRouteReleaseHistoryDtoDataArrayEnvelope"), exports);
+__exportStar(require("./outputRouteReleaseHistoryDtoOperation"), exports);
+__exportStar(require("./outputRouteReleaseRequestDto"), exports);
+__exportStar(require("./outputRouteReleaseRequestDtoDataEnvelope"), exports);
+__exportStar(require("./outputRouteReleaseRequestDtoStatus"), exports);
+__exportStar(require("./outputRouteRevisionDto"), exports);
+__exportStar(require("./outputRouteRevisionDtoAllowedOutputSchema"), exports);
+__exportStar(require("./outputRouteRevisionsControllerReleaseHistoryParams"), exports);
 __exportStar(require("./paginationMeta"), exports);
 __exportStar(require("./policyActingForDto"), exports);
 __exportStar(require("./policyBiomeDto"), exports);
@@ -106,6 +141,7 @@ __exportStar(require("./policyRouteHintDto"), exports);
 __exportStar(require("./policyRouteHintDtoRequiredRunnerLabels"), exports);
 __exportStar(require("./policySpaceRefDto"), exports);
 __exportStar(require("./policySubjectRefDto"), exports);
+__exportStar(require("./previewOutputRouteImpactDto"), exports);
 __exportStar(require("./profilePolicyTemplateDto"), exports);
 __exportStar(require("./profilePolicyTemplateDtoDataArrayEnvelope"), exports);
 __exportStar(require("./profilePolicyTemplateDtoNotes"), exports);
@@ -114,15 +150,27 @@ __exportStar(require("./provisionAgentResultDto"), exports);
 __exportStar(require("./provisionAgentResultDtoDataEnvelope"), exports);
 __exportStar(require("./provisionedCapabilityDto"), exports);
 __exportStar(require("./registerResourceOwnershipDto"), exports);
+__exportStar(require("./registerResourceRevisionDto"), exports);
+__exportStar(require("./registeredResourceRevisionDto"), exports);
+__exportStar(require("./registeredResourceRevisionDtoDataEnvelope"), exports);
 __exportStar(require("./relationshipsControllerListParams"), exports);
 __exportStar(require("./removeResourceShareDto"), exports);
 __exportStar(require("./replaceResourceOwnershipDto"), exports);
+__exportStar(require("./requestOutputRouteRetirementDto"), exports);
+__exportStar(require("./requestOutputRouteRevisionReleaseDto"), exports);
+__exportStar(require("./requestOutputRouteRevisionReleaseDtoAllowedOutputSchema"), exports);
+__exportStar(require("./requestOutputRouteRollbackDto"), exports);
+__exportStar(require("./resolveExactOutputRouteDto"), exports);
+__exportStar(require("./resolveExactResourceRevisionDto"), exports);
+__exportStar(require("./resolveOutputRouteChannelDto"), exports);
 __exportStar(require("./resourceManagedBy"), exports);
 __exportStar(require("./resourceOwnershipDto"), exports);
 __exportStar(require("./resourceOwnershipDtoDataEnvelope"), exports);
 __exportStar(require("./resourceOwnershipEntryDto"), exports);
 __exportStar(require("./resourceOwnershipReadDto"), exports);
 __exportStar(require("./resourceOwnershipReadDtoDataEnvelope"), exports);
+__exportStar(require("./resourceShareRefDto"), exports);
+__exportStar(require("./resourceSubjectAccessResult"), exports);
 __exportStar(require("./resourceSubjectRefDto"), exports);
 __exportStar(require("./resourceVisibilityPattern"), exports);
 __exportStar(require("./roleAssignmentDto"), exports);
@@ -135,6 +183,7 @@ __exportStar(require("./roleGrantDto"), exports);
 __exportStar(require("./roleGrantDtoDataArrayEnvelope"), exports);
 __exportStar(require("./roleGrantDtoDataEnvelope"), exports);
 __exportStar(require("./rolesControllerListParams"), exports);
+__exportStar(require("./rollbackExecutionEnvironmentDto"), exports);
 __exportStar(require("./runnerKind"), exports);
 __exportStar(require("./sessionParticipantRole"), exports);
 __exportStar(require("./spaceKind"), exports);

package/dist/models/object.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+export interface Object {
+    [key: string]: unknown;
+}

package/dist/models/object.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/outputRouteAuthorityDto.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { CapabilityEffectClass } from './capabilityEffectClass.js';
+import type { DataClassification } from './dataClassification.js';
+import type { OutputRouteAuthorityDtoAllowedOutputSchema } from './outputRouteAuthorityDtoAllowedOutputSchema.js';
+import type { OutputRouteDestinationKind } from './outputRouteDestinationKind.js';
+import type { ResourceSubjectAccessResult } from './resourceSubjectAccessResult.js';
+export interface OutputRouteAuthorityDto {
+    /** Canonical versioned OutputRoute identity. */
+    ref: string;
+    ownerSpaceKey: string;
+    destinationKind: OutputRouteDestinationKind;
+    /** Secret-free destination identity. Credentials are resolved only by the destination service. */
+    destinationRef: string;
+    classification: DataClassification;
+    /** JSON Schema for the only output shape this route accepts. */
+    allowedOutputSchema: OutputRouteAuthorityDtoAllowedOutputSchema;
+    sideEffectClass: CapabilityEffectClass;
+    decisionCapabilityRef: string;
+    orgId: string;
+    routeId: string;
+    version: string;
+    /** @pattern ^[a-f0-9]{64}$ */
+    contentHash: string;
+    access: ResourceSubjectAccessResult;
+}

package/dist/models/outputRouteAuthorityDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/outputRouteAuthorityDtoAllowedOutputSchema.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * JSON Schema for the only output shape this route accepts.
+ */
+export type OutputRouteAuthorityDtoAllowedOutputSchema = {
+    [key: string]: unknown;
+};

package/dist/models/outputRouteAuthorityDtoAllowedOutputSchema.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/outputRouteAuthorityDtoDataEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { OutputRouteAuthorityDto } from './outputRouteAuthorityDto.js';
+export interface OutputRouteAuthorityDtoDataEnvelope {
+    data: OutputRouteAuthorityDto;
+}

package/dist/models/outputRouteAuthorityDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/outputRouteDestinationKind.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+export type OutputRouteDestinationKind = typeof OutputRouteDestinationKind[keyof typeof OutputRouteDestinationKind];
+export declare const OutputRouteDestinationKind: {
+    readonly artifact: "artifact";
+    readonly connector: "connector";
+    readonly channel: "channel";
+    readonly webhook: "webhook";
+};

package/dist/models/outputRouteDestinationKind.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OutputRouteDestinationKind = void 0;
+exports.OutputRouteDestinationKind = {
+    artifact: 'artifact',
+    connector: 'connector',
+    channel: 'channel',
+    webhook: 'webhook',
+};

package/dist/models/outputRoutePublicationRequestDto.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { OutputRouteReleaseRequestDto } from './outputRouteReleaseRequestDto.js';
+import type { OutputRouteRevisionDto } from './outputRouteRevisionDto.js';
+export interface OutputRoutePublicationRequestDto {
+    revision: OutputRouteRevisionDto;
+    request: OutputRouteReleaseRequestDto;
+}

package/dist/models/outputRoutePublicationRequestDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/outputRoutePublicationRequestDtoDataEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { OutputRoutePublicationRequestDto } from './outputRoutePublicationRequestDto.js';
+export interface OutputRoutePublicationRequestDtoDataEnvelope {
+    data: OutputRoutePublicationRequestDto;
+}

package/dist/models/outputRoutePublicationRequestDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/outputRouteReleaseHistoryDto.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { OutputRouteReleaseHistoryDtoOperation } from './outputRouteReleaseHistoryDtoOperation.js';
+export interface OutputRouteReleaseHistoryDto {
+    releaseSetId: string;
+    resolutionId: string;
+    /** @pattern ^[a-f0-9]{64}$ */
+    closureHash: string;
+    operation: OutputRouteReleaseHistoryDtoOperation;
+    rollbackOfReleaseSetId?: string;
+    ref: string;
+    /** @pattern ^[a-f0-9]{64}$ */
+    contentHash: string;
+    channel: string;
+    /** @minimum 1 */
+    channelVersion: number;
+    retired: boolean;
+    actorClientId: string;
+    reason: string;
+    createdAt: string;
+}

package/dist/models/outputRouteReleaseHistoryDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/outputRouteReleaseHistoryDtoDataArrayEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { OutputRouteReleaseHistoryDto } from './outputRouteReleaseHistoryDto.js';
+export interface OutputRouteReleaseHistoryDtoDataArrayEnvelope {
+    data: OutputRouteReleaseHistoryDto[];
+}

package/dist/models/outputRouteReleaseHistoryDtoDataArrayEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/outputRouteReleaseHistoryDtoOperation.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+export type OutputRouteReleaseHistoryDtoOperation = typeof OutputRouteReleaseHistoryDtoOperation[keyof typeof OutputRouteReleaseHistoryDtoOperation];
+export declare const OutputRouteReleaseHistoryDtoOperation: {
+    readonly promote: "promote";
+    readonly rollback: "rollback";
+    readonly retire: "retire";
+};

package/dist/models/outputRouteReleaseHistoryDtoOperation.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OutputRouteReleaseHistoryDtoOperation = void 0;
+exports.OutputRouteReleaseHistoryDtoOperation = {
+    promote: 'promote',
+    rollback: 'rollback',
+    retire: 'retire',
+};

package/dist/models/outputRouteReleaseRequestDto.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { OutputRouteReleaseRequestDtoStatus } from './outputRouteReleaseRequestDtoStatus.js';
+export interface OutputRouteReleaseRequestDto {
+    requestId: string;
+    status: OutputRouteReleaseRequestDtoStatus;
+    decisionId?: string;
+    decisionProducerRef?: string;
+    /** @pattern ^[a-f0-9]{64}$ */
+    decisionEvidenceHash?: string;
+    denialReason?: string;
+    releaseSetId?: string;
+    resolutionId?: string;
+}

package/dist/models/outputRouteReleaseRequestDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/outputRouteReleaseRequestDtoDataEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { OutputRouteReleaseRequestDto } from './outputRouteReleaseRequestDto.js';
+export interface OutputRouteReleaseRequestDtoDataEnvelope {
+    data: OutputRouteReleaseRequestDto;
+}

package/dist/models/outputRouteReleaseRequestDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/outputRouteReleaseRequestDtoStatus.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+export type OutputRouteReleaseRequestDtoStatus = typeof OutputRouteReleaseRequestDtoStatus[keyof typeof OutputRouteReleaseRequestDtoStatus];
+export declare const OutputRouteReleaseRequestDtoStatus: {
+    readonly 'pending-decision': "pending-decision";
+    readonly promoted: "promoted";
+    readonly denied: "denied";
+};

package/dist/models/outputRouteReleaseRequestDtoStatus.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OutputRouteReleaseRequestDtoStatus = void 0;
+exports.OutputRouteReleaseRequestDtoStatus = {
+    'pending-decision': 'pending-decision',
+    promoted: 'promoted',
+    denied: 'denied',
+};

package/dist/models/outputRouteRevisionDto.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { CapabilityEffectClass } from './capabilityEffectClass.js';
+import type { DataClassification } from './dataClassification.js';
+import type { OutputRouteDestinationKind } from './outputRouteDestinationKind.js';
+import type { OutputRouteRevisionDtoAllowedOutputSchema } from './outputRouteRevisionDtoAllowedOutputSchema.js';
+export interface OutputRouteRevisionDto {
+    /** Canonical versioned OutputRoute identity. */
+    ref: string;
+    ownerSpaceKey: string;
+    destinationKind: OutputRouteDestinationKind;
+    /** Secret-free destination identity. Credentials are resolved only by the destination service. */
+    destinationRef: string;
+    classification: DataClassification;
+    /** JSON Schema for the only output shape this route accepts. */
+    allowedOutputSchema: OutputRouteRevisionDtoAllowedOutputSchema;
+    sideEffectClass: CapabilityEffectClass;
+    decisionCapabilityRef: string;
+    orgId: string;
+    routeId: string;
+    version: string;
+    /** @pattern ^[a-f0-9]{64}$ */
+    contentHash: string;
+}

package/dist/models/outputRouteRevisionDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/outputRouteRevisionDtoAllowedOutputSchema.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * JSON Schema for the only output shape this route accepts.
+ */
+export type OutputRouteRevisionDtoAllowedOutputSchema = {
+    [key: string]: unknown;
+};

package/dist/models/outputRouteRevisionDtoAllowedOutputSchema.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/outputRouteRevisionsControllerReleaseHistoryParams.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { Object } from './object.js';
+export type OutputRouteRevisionsControllerReleaseHistoryParams = {
+    /**
+     * @pattern ^[a-z][a-z0-9-]{0,62}$
+     */
+    channel: string;
+    limit?: Object;
+};

package/dist/models/outputRouteRevisionsControllerReleaseHistoryParams.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/policyResourceDto.d.ts

@@ -5,7 +5,7 @@
  */
 import type { DataClassification } from './dataClassification.js';
 export interface PolicyResourceDto {
-    /** Canonical kernel resource-instance ref `resource:<type>:<id>` naming the instance this invocation targets. Build it with `composeResourceRef(type, id)` from `@xemahq/kernel-contracts/resource`. The server resolves it with `parseResourceRef` and answers `400 RESOURCE_REF_MALFORMED` for any other shape — a bare `<type>:<id>` and an `xema://…` path are BOTH rejected. Omit the whole `resource` block for a verb-only check; do not send a placeholder. */
+    /** Canonical `xema://<Space>/resource/<type>/<id>[@version]` address naming the instance this invocation targets. Exact Agent bindings always carry the version. The server answers `400 RESOURCE_REF_MALFORMED` for any other shape. Omit the whole `resource` block for a verb-only check; do not send a placeholder. */
     ref: string;
     /** The classification the target resource carries. OMIT IT when the producer has none to declare — the effective classification is then the Space floor alone, and the request still gets the resource-ownership clamp. Omitting the whole `resource` block is NOT the same thing: that downgrades the call to a verb-only check and discards the ownership clamp. Never send a placeholder value. */
     classification?: DataClassification;

package/dist/models/previewOutputRouteImpactDto.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+export interface PreviewOutputRouteImpactDto {
+    ref: string;
+    /** @pattern ^[a-z][a-z0-9-]{0,62}$ */
+    channel: string;
+}

package/dist/models/previewOutputRouteImpactDto.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/registerResourceOwnershipDto.d.ts

@@ -3,6 +3,7 @@
  * Authorization API
  * OpenAPI spec version: 0.1.1
  */
+import type { ResourceShareRefDto } from './resourceShareRefDto.js';
 import type { ResourceSubjectRefDto } from './resourceSubjectRefDto.js';
 import type { ResourceVisibilityPattern } from './resourceVisibilityPattern.js';
 export interface RegisterResourceOwnershipDto {
@@ -14,6 +15,6 @@ export interface RegisterResourceOwnershipDto {
     visibility: ResourceVisibilityPattern;
     /** Subjects that OWN the instance (full visibility). */
     owners: ResourceSubjectRefDto[];
-    /** Subjects explicitly granted visibility (shared-with). */
-    explicitShares?: ResourceSubjectRefDto[];
+    /** Subjects explicitly granted visibility, each at a LEVEL and with an optional expiry. */
+    explicitShares?: ResourceShareRefDto[];
 }

package/dist/models/registerResourceRevisionDto.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { DataClassification } from './dataClassification.js';
+export interface RegisterResourceRevisionDto {
+    /** Canonical version-pinned Xema Resource ref. The first slug segment is the registered resource kind. */
+    ref: string;
+    /** Lowercase SHA-256 of the immutable revision metadata. */
+    contentHash: string;
+    /** Canonical OwnerSpace key produced by formatOwnerSpaceKey. It must carry the caller tenant fence. */
+    ownerSpaceKey: string;
+    classification: DataClassification;
+    /** Canonical capability ref the unified Decision must evaluate. */
+    decisionCapabilityRef: string;
+}

package/dist/models/registerResourceRevisionDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/registeredResourceRevisionDto.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { DataClassification } from './dataClassification.js';
+export interface RegisteredResourceRevisionDto {
+    /** Canonical version-pinned Xema Resource ref. The first slug segment is the registered resource kind. */
+    ref: string;
+    /** Lowercase SHA-256 of the immutable revision metadata. */
+    contentHash: string;
+    orgId: string;
+    resourceType: string;
+    resourceId: string;
+    version: string;
+    ownerSpaceKey: string;
+    classification: DataClassification;
+    decisionCapabilityRef: string;
+}

package/dist/models/registeredResourceRevisionDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/registeredResourceRevisionDtoDataEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { RegisteredResourceRevisionDto } from './registeredResourceRevisionDto.js';
+export interface RegisteredResourceRevisionDtoDataEnvelope {
+    data: RegisteredResourceRevisionDto;
+}

package/dist/models/registeredResourceRevisionDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/replaceResourceOwnershipDto.d.ts

@@ -3,6 +3,7 @@
  * Authorization API
  * OpenAPI spec version: 0.1.1
  */
+import type { ResourceShareRefDto } from './resourceShareRefDto.js';
 import type { ResourceSubjectRefDto } from './resourceSubjectRefDto.js';
 import type { ResourceVisibilityPattern } from './resourceVisibilityPattern.js';
 export interface ReplaceResourceOwnershipDto {
@@ -10,6 +11,6 @@ export interface ReplaceResourceOwnershipDto {
     visibility: ResourceVisibilityPattern;
     /** Subjects that OWN the instance (full visibility). */
     owners: ResourceSubjectRefDto[];
-    /** Subjects explicitly granted visibility (shared-with). */
-    explicitShares?: ResourceSubjectRefDto[];
+    /** Subjects explicitly granted visibility, each at a LEVEL and with an optional expiry. */
+    explicitShares?: ResourceShareRefDto[];
 }

package/dist/models/requestOutputRouteRetirementDto.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Authorization API
+ * OpenAPI spec version: 0.1.1
+ */
+export interface RequestOutputRouteRetirementDto {
+    /** @pattern ^[a-z][a-z0-9-]{0,62}$ */
+    channel: string;
+    /**
+       * @minimum 0
+       * @maximum 2147483647
+       */
+    expectedChannelVersion: number;
+    /** @maxLength 2048 */
+    reason: string;
+}