@xemahq/biome-host-api-client 0.1.6 → 0.3.0

package/LICENSE

@@ -9,7 +9,7 @@ Parameters
 
 Licensor:  Neuralchowder Inc.
 
-Licensed Work:  Xema. The Licensed Work is (c) 2026 Neuralchowder Inc..
+Licensed Work:  Xema. The Licensed Work is (c) 2026 Neuralchowder Inc.
 
   The Licensed Work includes, without limitation, Xema Core, Xema Runtime,
   Xema Kernel, Xema control plane, Xema application runtime, Xema biome
@@ -116,6 +116,7 @@ the interpretation of, the Additional Use Grant set out above.
       and effect. The Licensor reserves all rights not expressly granted
       by this License.
 
+
 Change Date:  Four years from the date the specific version of the Licensed
   Work is first publicly released by Licensor.
 

package/dist/endpoints/authoring/authoring.d.ts

@@ -3,7 +3,7 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { AuthorBiomeBundleDto, AuthorBiomeBundleResponseDtoDataEnvelope, CapabilityDescriptorValidationDtoDataEnvelope, SurfaceKindValidationDtoDataEnvelope, ValidateCapabilityDescriptorDto, ValidateSurfaceKindDto } from '../../models';
 export declare const getBiomeBundleAuthoringControllerAuthorUrl: () => string;

package/dist/endpoints/biome-approvals/biome-approvals.d.ts

@@ -3,9 +3,9 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
-import type { BiomeApprovalResponseDtoDataEnvelope, RequestApprovalDto, ResolveApprovalDto } from '../../models';
+import type { BiomeApprovalResponseDtoDataArrayEnvelope, BiomeApprovalResponseDtoDataEnvelope, RequestApprovalDto, ResolveApprovalDto } from '../../models';
 export declare const getBiomeApprovalsControllerRequestUrl: (biomeId: string, installationId: string) => string;
 /**
  * @summary Request an approval for a lifecycle transition on a biome installation.
@@ -15,7 +15,7 @@ export declare const getBiomeApprovalsControllerListPendingUrl: (biomeId: string
 /**
  * @summary List pending approvals for a biome installation.
  */
-export declare const biomeApprovalsControllerListPending: (biomeId: string, installationId: string, options?: RequestInit) => Promise<BiomeApprovalResponseDtoDataEnvelope>;
+export declare const biomeApprovalsControllerListPending: (biomeId: string, installationId: string, options?: RequestInit) => Promise<BiomeApprovalResponseDtoDataArrayEnvelope>;
 export declare const getBiomeApprovalsControllerResolveUrl: (biomeId: string, installationId: string, approvalId: string) => string;
 /**
  * @summary Approve or reject a pending approval request.

package/dist/endpoints/biome-installations/biome-installations.d.ts

@@ -3,7 +3,7 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { BiomeInstallationDeleteResponseDtoDataEnvelope, BiomeInstallationResponseDtoDataArrayEnvelope, BiomeInstallationResponseDtoDataEnvelope, BiomeInstallationsControllerCreateChain201, BiomeLifecycleTransitionResponseDtoDataEnvelope, BiomeMcpToolsManifestResponseDtoDataEnvelope, ChainInstallBiomesDto, CreateBiomeInstallationDto, LifecycleTransitionAckDto, PromoteBiomeInstallationDto, UpdateBiomeInstallationResourcesDto } from '../../models';
 export declare const getBiomeInstallationsControllerCreateUrl: (projectId: string) => string;

package/dist/endpoints/biome-runtime-bindings/biome-runtime-bindings.d.ts

@@ -3,7 +3,7 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { CreateRuntimeBindingDto, RuntimeBindingResponseDtoDataArrayEnvelope, RuntimeBindingResponseDtoDataEnvelope, UpdateRuntimeBindingDto } from '../../models';
 export declare const getRuntimeBindingsControllerListUrl: (projectId: string, installationId: string) => string;
@@ -18,11 +18,16 @@ export declare const getRuntimeBindingsControllerCreateUrl: (projectId: string,
 export declare const runtimeBindingsControllerCreate: (projectId: string, installationId: string, createRuntimeBindingDto: CreateRuntimeBindingDto, options?: RequestInit) => Promise<RuntimeBindingResponseDtoDataEnvelope>;
 export declare const getRuntimeBindingsControllerUpdateUrl: (projectId: string, installationId: string, bindingId: string) => string;
 /**
- * @summary Patch a runtime binding (labels, status, refs — the runtime itself is immutable)
+ * @summary Patch operational filters or in-flight policy on a non-active runtime binding
  */
 export declare const runtimeBindingsControllerUpdate: (projectId: string, installationId: string, bindingId: string, updateRuntimeBindingDto: UpdateRuntimeBindingDto, options?: RequestInit) => Promise<RuntimeBindingResponseDtoDataEnvelope>;
-export declare const getRuntimeBindingsControllerRemoveUrl: (projectId: string, installationId: string, bindingId: string) => string;
+export declare const getRuntimeBindingsControllerDrainUrl: (projectId: string, installationId: string, bindingId: string) => string;
 /**
- * @summary Delete a runtime binding
+ * @summary Stop new dispatch and begin the retained runtime-binding revocation lifecycle
  */
-export declare const runtimeBindingsControllerRemove: (projectId: string, installationId: string, bindingId: string, options?: RequestInit) => Promise<unknown>;
+export declare const runtimeBindingsControllerDrain: (projectId: string, installationId: string, bindingId: string, options?: RequestInit) => Promise<RuntimeBindingResponseDtoDataEnvelope>;
+export declare const getRuntimeBindingsControllerRetryUrl: (projectId: string, installationId: string, bindingId: string) => string;
+/**
+ * @summary Retry identity provisioning for a pending or visibly failed binding
+ */
+export declare const runtimeBindingsControllerRetry: (projectId: string, installationId: string, bindingId: string, options?: RequestInit) => Promise<RuntimeBindingResponseDtoDataEnvelope>;

package/dist/endpoints/biome-runtime-bindings/biome-runtime-bindings.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runtimeBindingsControllerRemove = exports.getRuntimeBindingsControllerRemoveUrl = exports.runtimeBindingsControllerUpdate = exports.getRuntimeBindingsControllerUpdateUrl = exports.runtimeBindingsControllerCreate = exports.getRuntimeBindingsControllerCreateUrl = exports.runtimeBindingsControllerList = exports.getRuntimeBindingsControllerListUrl = void 0;
+exports.runtimeBindingsControllerRetry = exports.getRuntimeBindingsControllerRetryUrl = exports.runtimeBindingsControllerDrain = exports.getRuntimeBindingsControllerDrainUrl = exports.runtimeBindingsControllerUpdate = exports.getRuntimeBindingsControllerUpdateUrl = exports.runtimeBindingsControllerCreate = exports.getRuntimeBindingsControllerCreateUrl = exports.runtimeBindingsControllerList = exports.getRuntimeBindingsControllerListUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
 const getRuntimeBindingsControllerListUrl = (projectId, installationId) => {
     return `/projects/${projectId}/biome-installations/${installationId}/runtime-bindings`;
@@ -37,7 +37,7 @@ const getRuntimeBindingsControllerUpdateUrl = (projectId, installationId, bindin
 };
 exports.getRuntimeBindingsControllerUpdateUrl = getRuntimeBindingsControllerUpdateUrl;
 /**
- * @summary Patch a runtime binding (labels, status, refs — the runtime itself is immutable)
+ * @summary Patch operational filters or in-flight policy on a non-active runtime binding
  */
 const runtimeBindingsControllerUpdate = async (projectId, installationId, bindingId, updateRuntimeBindingDto, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getRuntimeBindingsControllerUpdateUrl)(projectId, installationId, bindingId), {
@@ -48,17 +48,31 @@ const runtimeBindingsControllerUpdate = async (projectId, installationId, bindin
     });
 };
 exports.runtimeBindingsControllerUpdate = runtimeBindingsControllerUpdate;
-const getRuntimeBindingsControllerRemoveUrl = (projectId, installationId, bindingId) => {
-    return `/projects/${projectId}/biome-installations/${installationId}/runtime-bindings/${bindingId}`;
+const getRuntimeBindingsControllerDrainUrl = (projectId, installationId, bindingId) => {
+    return `/projects/${projectId}/biome-installations/${installationId}/runtime-bindings/${bindingId}/drain`;
+};
+exports.getRuntimeBindingsControllerDrainUrl = getRuntimeBindingsControllerDrainUrl;
+/**
+ * @summary Stop new dispatch and begin the retained runtime-binding revocation lifecycle
+ */
+const runtimeBindingsControllerDrain = async (projectId, installationId, bindingId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRuntimeBindingsControllerDrainUrl)(projectId, installationId, bindingId), {
+        ...options,
+        method: 'POST'
+    });
+};
+exports.runtimeBindingsControllerDrain = runtimeBindingsControllerDrain;
+const getRuntimeBindingsControllerRetryUrl = (projectId, installationId, bindingId) => {
+    return `/projects/${projectId}/biome-installations/${installationId}/runtime-bindings/${bindingId}/retry`;
 };
-exports.getRuntimeBindingsControllerRemoveUrl = getRuntimeBindingsControllerRemoveUrl;
+exports.getRuntimeBindingsControllerRetryUrl = getRuntimeBindingsControllerRetryUrl;
 /**
- * @summary Delete a runtime binding
+ * @summary Retry identity provisioning for a pending or visibly failed binding
  */
-const runtimeBindingsControllerRemove = async (projectId, installationId, bindingId, options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getRuntimeBindingsControllerRemoveUrl)(projectId, installationId, bindingId), {
+const runtimeBindingsControllerRetry = async (projectId, installationId, bindingId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRuntimeBindingsControllerRetryUrl)(projectId, installationId, bindingId), {
         ...options,
-        method: 'DELETE'
+        method: 'POST'
     });
 };
-exports.runtimeBindingsControllerRemove = runtimeBindingsControllerRemove;
+exports.runtimeBindingsControllerRetry = runtimeBindingsControllerRetry;

package/dist/endpoints/biome-runtimes/biome-runtimes.d.ts

@@ -3,7 +3,7 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { RuntimeResponseDtoDataArrayEnvelope } from '../../models';
 export declare const getRuntimesControllerListUrl: () => string;

package/dist/endpoints/org-biome-installations/org-biome-installations.d.ts

@@ -3,7 +3,7 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { BiomeInstallationResponseDtoDataArrayEnvelope, BiomeInstallationResponseDtoDataEnvelope, CreateBiomeInstallationDto, OrgBiomeInstallationDeleteResponseDtoDataEnvelope, UpdateOrgBiomeInstallationDto } from '../../models';
 export declare const getOrgBiomeInstallationsControllerListUrl: () => string;

package/dist/endpoints/platform-biomes-availability/platform-biomes-availability.d.ts

@@ -3,7 +3,7 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { BiomeAvailabilityResponseDtoDataEnvelope, SetBiomeAvailabilityDto } from '../../models';
 export declare const getAvailabilityControllerGetUrl: (biomeId: string) => string;

package/dist/endpoints/platform-biomes-contribution-sync/platform-biomes-contribution-sync.d.ts

@@ -3,7 +3,7 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { BiomeContributionSyncStatusDtoDataArrayEnvelope } from '../../models';
 export declare const getContributionSyncStatusControllerListUrl: () => string;

package/dist/endpoints/platform-biomes-enablement/platform-biomes-enablement.d.ts

@@ -3,7 +3,7 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { BackfillEnablementResponseDtoDataEnvelope, OrgBiomeEffectiveEnablementDtoDataArrayEnvelope, OrgBiomeEffectiveEnablementDtoDataEnvelope, UpdateOrgBiomeEnablementDto } from '../../models';
 export declare const getEnablementControllerListUrl: () => string;

package/dist/endpoints/platform-biomes-server/platform-biomes-server.d.ts

@@ -3,7 +3,7 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { BiomeContributionResponseDtoDataEnvelope, BiomeInstallSchemaResponseDtoDataEnvelope, BiomeProvisioningScaffoldsResponseDtoDataEnvelope, ServerBiomeRegistrationResponseDtoDataArrayEnvelope, ServerBiomeRegistrationResponseDtoDataEnvelope, ServerBiomesControllerListParams } from '../../models';
 export declare const getServerBiomesControllerListUrl: (params?: ServerBiomesControllerListParams) => string;

package/dist/endpoints/platform-biomes-web/platform-biomes-web.d.ts

@@ -3,12 +3,12 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { WebBiomeRegistrationResponseDtoDataArrayEnvelope, WebBiomeRegistrationResponseDtoDataEnvelope, WebBiomesControllerListParams } from '../../models';
 export declare const getWebBiomesControllerListUrl: (params?: WebBiomesControllerListParams) => string;
 /**
- * @summary List web biomes for the **runtime registry**. By default returns ONLY loadable rows (effectiveState 'ENABLED' AND surfaceMode 'web_and_server') for the org — the SPA bootstrap loads exactly this set without filtering. Pass `?includeInactive=true` to also receive DISABLED/ORPHANED rows with their per-org state (management/admin view). Omit `?org=` and send no context to get the global catalog baseline (admin/debug).
+ * @summary List web biomes for the **runtime registry**. The org is taken from the `X-Xema-Org-Id` REQUEST CONTEXT — never from a query parameter. By default returns ONLY loadable rows (effectiveState 'ENABLED' AND surfaceMode 'web_and_server') for that org — the SPA bootstrap loads exactly this set without filtering. Pass `?includeInactive=true` to also receive DISABLED/ORPHANED rows with their per-org state (management/admin view). A cross-org SERVICE principal (a token whose request carries no tenant header) gets the global catalog baseline, and is the only caller that may name an org via `?org=`.
  */
 export declare const webBiomesControllerList: (params?: WebBiomesControllerListParams, options?: RequestInit) => Promise<WebBiomeRegistrationResponseDtoDataArrayEnvelope>;
 export declare const getWebBiomesControllerGetUrl: (id: string) => string;

package/dist/endpoints/platform-biomes-web/platform-biomes-web.js

@@ -26,7 +26,7 @@ const getWebBiomesControllerListUrl = (params) => {
 };
 exports.getWebBiomesControllerListUrl = getWebBiomesControllerListUrl;
 /**
- * @summary List web biomes for the **runtime registry**. By default returns ONLY loadable rows (effectiveState 'ENABLED' AND surfaceMode 'web_and_server') for the org — the SPA bootstrap loads exactly this set without filtering. Pass `?includeInactive=true` to also receive DISABLED/ORPHANED rows with their per-org state (management/admin view). Omit `?org=` and send no context to get the global catalog baseline (admin/debug).
+ * @summary List web biomes for the **runtime registry**. The org is taken from the `X-Xema-Org-Id` REQUEST CONTEXT — never from a query parameter. By default returns ONLY loadable rows (effectiveState 'ENABLED' AND surfaceMode 'web_and_server') for that org — the SPA bootstrap loads exactly this set without filtering. Pass `?includeInactive=true` to also receive DISABLED/ORPHANED rows with their per-org state (management/admin view). A cross-org SERVICE principal (a token whose request carries no tenant header) gets the global catalog baseline, and is the only caller that may name an org via `?org=`.
  */
 const webBiomesControllerList = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getWebBiomesControllerListUrl)(params), {

package/dist/endpoints/platform-runner-enrollments/platform-runner-enrollments.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+import type { BreakGlassRevokeRunnerEnrollmentDto, CreateRunnerEnrollmentDto, RotateRunnerEnrollmentDto, RunnerEnrollmentManagementResponseDtoDataArrayEnvelope, RunnerEnrollmentManagementResponseDtoDataEnvelope, RunnerEnrollmentManagementRotationResponseDtoDataEnvelope } from '../../models';
+export declare const getPlatformRunnerEnrollmentsControllerListUrl: (runtimeId: string) => string;
+/**
+ * @summary List enrollments for an ownerless platform runtime
+ */
+export declare const platformRunnerEnrollmentsControllerList: (runtimeId: string, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataArrayEnvelope>;
+export declare const getPlatformRunnerEnrollmentsControllerCreateUrl: (runtimeId: string) => string;
+/**
+ * @summary Create an enrollment for an ownerless platform runtime
+ */
+export declare const platformRunnerEnrollmentsControllerCreate: (runtimeId: string, createRunnerEnrollmentDto: CreateRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;
+export declare const getPlatformRunnerEnrollmentsControllerRotateUrl: (runtimeId: string, enrollmentId: string) => string;
+/**
+ * @summary Issue a successor platform runner credential
+ */
+export declare const platformRunnerEnrollmentsControllerRotate: (runtimeId: string, enrollmentId: string, rotateRunnerEnrollmentDto: RotateRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementRotationResponseDtoDataEnvelope>;
+export declare const getPlatformRunnerEnrollmentsControllerDrainUrl: (runtimeId: string, enrollmentId: string) => string;
+/**
+ * @summary Stop new work and begin platform enrollment revocation
+ */
+export declare const platformRunnerEnrollmentsControllerDrain: (runtimeId: string, enrollmentId: string, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;
+export declare const getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl: (runtimeId: string, enrollmentId: string) => string;
+/**
+ * @summary Immediately fence and revoke an enrollment with a durable security audit and alert
+ */
+export declare const platformRunnerEnrollmentsControllerBreakGlassRevoke: (runtimeId: string, enrollmentId: string, breakGlassRevokeRunnerEnrollmentDto: BreakGlassRevokeRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;

package/dist/endpoints/platform-runner-enrollments/platform-runner-enrollments.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.platformRunnerEnrollmentsControllerBreakGlassRevoke = exports.getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl = exports.platformRunnerEnrollmentsControllerDrain = exports.getPlatformRunnerEnrollmentsControllerDrainUrl = exports.platformRunnerEnrollmentsControllerRotate = exports.getPlatformRunnerEnrollmentsControllerRotateUrl = exports.platformRunnerEnrollmentsControllerCreate = exports.getPlatformRunnerEnrollmentsControllerCreateUrl = exports.platformRunnerEnrollmentsControllerList = exports.getPlatformRunnerEnrollmentsControllerListUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getPlatformRunnerEnrollmentsControllerListUrl = (runtimeId) => {
+    return `/platform/runtimes/${runtimeId}/enrollments`;
+};
+exports.getPlatformRunnerEnrollmentsControllerListUrl = getPlatformRunnerEnrollmentsControllerListUrl;
+/**
+ * @summary List enrollments for an ownerless platform runtime
+ */
+const platformRunnerEnrollmentsControllerList = async (runtimeId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerListUrl)(runtimeId), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.platformRunnerEnrollmentsControllerList = platformRunnerEnrollmentsControllerList;
+const getPlatformRunnerEnrollmentsControllerCreateUrl = (runtimeId) => {
+    return `/platform/runtimes/${runtimeId}/enrollments`;
+};
+exports.getPlatformRunnerEnrollmentsControllerCreateUrl = getPlatformRunnerEnrollmentsControllerCreateUrl;
+/**
+ * @summary Create an enrollment for an ownerless platform runtime
+ */
+const platformRunnerEnrollmentsControllerCreate = async (runtimeId, createRunnerEnrollmentDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerCreateUrl)(runtimeId), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(createRunnerEnrollmentDto)
+    });
+};
+exports.platformRunnerEnrollmentsControllerCreate = platformRunnerEnrollmentsControllerCreate;
+const getPlatformRunnerEnrollmentsControllerRotateUrl = (runtimeId, enrollmentId) => {
+    return `/platform/runtimes/${runtimeId}/enrollments/${enrollmentId}/rotate`;
+};
+exports.getPlatformRunnerEnrollmentsControllerRotateUrl = getPlatformRunnerEnrollmentsControllerRotateUrl;
+/**
+ * @summary Issue a successor platform runner credential
+ */
+const platformRunnerEnrollmentsControllerRotate = async (runtimeId, enrollmentId, rotateRunnerEnrollmentDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerRotateUrl)(runtimeId, enrollmentId), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(rotateRunnerEnrollmentDto)
+    });
+};
+exports.platformRunnerEnrollmentsControllerRotate = platformRunnerEnrollmentsControllerRotate;
+const getPlatformRunnerEnrollmentsControllerDrainUrl = (runtimeId, enrollmentId) => {
+    return `/platform/runtimes/${runtimeId}/enrollments/${enrollmentId}/drain`;
+};
+exports.getPlatformRunnerEnrollmentsControllerDrainUrl = getPlatformRunnerEnrollmentsControllerDrainUrl;
+/**
+ * @summary Stop new work and begin platform enrollment revocation
+ */
+const platformRunnerEnrollmentsControllerDrain = async (runtimeId, enrollmentId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerDrainUrl)(runtimeId, enrollmentId), {
+        ...options,
+        method: 'POST'
+    });
+};
+exports.platformRunnerEnrollmentsControllerDrain = platformRunnerEnrollmentsControllerDrain;
+const getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl = (runtimeId, enrollmentId) => {
+    return `/platform/runtimes/${runtimeId}/enrollments/${enrollmentId}/revoke`;
+};
+exports.getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl = getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl;
+/**
+ * @summary Immediately fence and revoke an enrollment with a durable security audit and alert
+ */
+const platformRunnerEnrollmentsControllerBreakGlassRevoke = async (runtimeId, enrollmentId, breakGlassRevokeRunnerEnrollmentDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl)(runtimeId, enrollmentId), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(breakGlassRevokeRunnerEnrollmentDto)
+    });
+};
+exports.platformRunnerEnrollmentsControllerBreakGlassRevoke = platformRunnerEnrollmentsControllerBreakGlassRevoke;

package/dist/endpoints/platform-runtime-health/platform-runtime-health.d.ts

@@ -0,0 +1,5 @@
+export declare const getParkedWorkControllerListUrl: () => string;
+/**
+ * @summary List every unit of work that has stopped and will NOT restart on its own — dead-lettered runtime-authority outbox rows and failed runner enrollments. An empty list is the only healthy result; each entry reports whether it can still be re-driven or needs an operator.
+ */
+export declare const parkedWorkControllerList: (options?: RequestInit) => Promise<unknown>;

package/dist/endpoints/platform-runtime-health/platform-runtime-health.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parkedWorkControllerList = exports.getParkedWorkControllerListUrl = void 0;
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+const custom_fetch_1 = require("../../custom-fetch");
+const getParkedWorkControllerListUrl = () => {
+    return `/platform/runtime/parked-work`;
+};
+exports.getParkedWorkControllerListUrl = getParkedWorkControllerListUrl;
+/**
+ * @summary List every unit of work that has stopped and will NOT restart on its own — dead-lettered runtime-authority outbox rows and failed runner enrollments. An empty list is the only healthy result; each entry reports whether it can still be re-driven or needs an operator.
+ */
+const parkedWorkControllerList = async (options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getParkedWorkControllerListUrl)(), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.parkedWorkControllerList = parkedWorkControllerList;

package/dist/endpoints/platform-service-mesh/platform-service-mesh.d.ts

@@ -3,7 +3,7 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { ServiceMeshResponseDtoDataEnvelope } from '../../models';
 export declare const getServiceMeshControllerGetMeshUrl: () => string;

package/dist/endpoints/platform-settings/platform-settings.d.ts

@@ -3,7 +3,7 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 import type { AddRemoteBiomeOriginDto, PlatformSettingsControllerAdd200, PlatformSettingsControllerList200, PlatformSettingsControllerRemove200, PlatformSettingsControllerRemoveParams } from '../../models';
 export declare const getPlatformSettingsControllerListUrl: () => string;

package/dist/endpoints/runner-enrollment-challenges/runner-enrollment-challenges.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+import type { ExchangeRunnerEnrollmentChallengeDto, RunnerEnrollmentExchangeResponseDtoDataEnvelope } from '../../models';
+export declare const getRunnerEnrollmentChallengesControllerExchangeUrl: (challengeRef: string) => string;
+/**
+ * @summary Exchange a single-use runner enrollment challenge for identity material
+ */
+export declare const runnerEnrollmentChallengesControllerExchange: (challengeRef: string, exchangeRunnerEnrollmentChallengeDto: ExchangeRunnerEnrollmentChallengeDto, options?: RequestInit) => Promise<RunnerEnrollmentExchangeResponseDtoDataEnvelope>;

package/dist/endpoints/runner-enrollment-challenges/runner-enrollment-challenges.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runnerEnrollmentChallengesControllerExchange = exports.getRunnerEnrollmentChallengesControllerExchangeUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getRunnerEnrollmentChallengesControllerExchangeUrl = (challengeRef) => {
+    return `/runtime-enrollment-challenges/${challengeRef}/exchange`;
+};
+exports.getRunnerEnrollmentChallengesControllerExchangeUrl = getRunnerEnrollmentChallengesControllerExchangeUrl;
+/**
+ * @summary Exchange a single-use runner enrollment challenge for identity material
+ */
+const runnerEnrollmentChallengesControllerExchange = async (challengeRef, exchangeRunnerEnrollmentChallengeDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentChallengesControllerExchangeUrl)(challengeRef), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(exchangeRunnerEnrollmentChallengeDto)
+    });
+};
+exports.runnerEnrollmentChallengesControllerExchange = runnerEnrollmentChallengesControllerExchange;

package/dist/endpoints/runner-enrollments/runner-enrollments.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+import type { CreateRunnerEnrollmentDto, RotateRunnerEnrollmentDto, RunnerEnrollmentManagementResponseDtoDataArrayEnvelope, RunnerEnrollmentManagementResponseDtoDataEnvelope, RunnerEnrollmentManagementRotationResponseDtoDataEnvelope } from '../../models';
+export declare const getRunnerEnrollmentsControllerListUrl: (runtimeId: string) => string;
+/**
+ * @summary List runner enrollments for an accessible runtime
+ */
+export declare const runnerEnrollmentsControllerList: (runtimeId: string, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataArrayEnvelope>;
+export declare const getRunnerEnrollmentsControllerCreateUrl: (runtimeId: string) => string;
+/**
+ * @summary Create a non-active enrollment for asynchronous identity provisioning
+ */
+export declare const runnerEnrollmentsControllerCreate: (runtimeId: string, createRunnerEnrollmentDto: CreateRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;
+export declare const getRunnerEnrollmentsControllerRotateUrl: (runtimeId: string, enrollmentId: string) => string;
+/**
+ * @summary Issue a successor credential for this enrollment
+ */
+export declare const runnerEnrollmentsControllerRotate: (runtimeId: string, enrollmentId: string, rotateRunnerEnrollmentDto: RotateRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementRotationResponseDtoDataEnvelope>;
+export declare const getRunnerEnrollmentsControllerDrainUrl: (runtimeId: string, enrollmentId: string) => string;
+/**
+ * @summary Stop new work and begin enrollment revocation
+ */
+export declare const runnerEnrollmentsControllerDrain: (runtimeId: string, enrollmentId: string, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;

package/dist/endpoints/runner-enrollments/runner-enrollments.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runnerEnrollmentsControllerDrain = exports.getRunnerEnrollmentsControllerDrainUrl = exports.runnerEnrollmentsControllerRotate = exports.getRunnerEnrollmentsControllerRotateUrl = exports.runnerEnrollmentsControllerCreate = exports.getRunnerEnrollmentsControllerCreateUrl = exports.runnerEnrollmentsControllerList = exports.getRunnerEnrollmentsControllerListUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getRunnerEnrollmentsControllerListUrl = (runtimeId) => {
+    return `/runtimes/${runtimeId}/enrollments`;
+};
+exports.getRunnerEnrollmentsControllerListUrl = getRunnerEnrollmentsControllerListUrl;
+/**
+ * @summary List runner enrollments for an accessible runtime
+ */
+const runnerEnrollmentsControllerList = async (runtimeId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentsControllerListUrl)(runtimeId), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.runnerEnrollmentsControllerList = runnerEnrollmentsControllerList;
+const getRunnerEnrollmentsControllerCreateUrl = (runtimeId) => {
+    return `/runtimes/${runtimeId}/enrollments`;
+};
+exports.getRunnerEnrollmentsControllerCreateUrl = getRunnerEnrollmentsControllerCreateUrl;
+/**
+ * @summary Create a non-active enrollment for asynchronous identity provisioning
+ */
+const runnerEnrollmentsControllerCreate = async (runtimeId, createRunnerEnrollmentDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentsControllerCreateUrl)(runtimeId), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(createRunnerEnrollmentDto)
+    });
+};
+exports.runnerEnrollmentsControllerCreate = runnerEnrollmentsControllerCreate;
+const getRunnerEnrollmentsControllerRotateUrl = (runtimeId, enrollmentId) => {
+    return `/runtimes/${runtimeId}/enrollments/${enrollmentId}/rotate`;
+};
+exports.getRunnerEnrollmentsControllerRotateUrl = getRunnerEnrollmentsControllerRotateUrl;
+/**
+ * @summary Issue a successor credential for this enrollment
+ */
+const runnerEnrollmentsControllerRotate = async (runtimeId, enrollmentId, rotateRunnerEnrollmentDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentsControllerRotateUrl)(runtimeId, enrollmentId), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(rotateRunnerEnrollmentDto)
+    });
+};
+exports.runnerEnrollmentsControllerRotate = runnerEnrollmentsControllerRotate;
+const getRunnerEnrollmentsControllerDrainUrl = (runtimeId, enrollmentId) => {
+    return `/runtimes/${runtimeId}/enrollments/${enrollmentId}/drain`;
+};
+exports.getRunnerEnrollmentsControllerDrainUrl = getRunnerEnrollmentsControllerDrainUrl;
+/**
+ * @summary Stop new work and begin enrollment revocation
+ */
+const runnerEnrollmentsControllerDrain = async (runtimeId, enrollmentId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentsControllerDrainUrl)(runtimeId, enrollmentId), {
+        ...options,
+        method: 'POST'
+    });
+};
+exports.runnerEnrollmentsControllerDrain = runnerEnrollmentsControllerDrain;

package/dist/index.d.ts

@@ -11,5 +11,9 @@ export * from './endpoints/platform-biomes-contribution-sync/platform-biomes-con
 export * from './endpoints/platform-biomes-enablement/platform-biomes-enablement';
 export * from './endpoints/platform-biomes-server/platform-biomes-server';
 export * from './endpoints/platform-biomes-web/platform-biomes-web';
+export * from './endpoints/platform-runner-enrollments/platform-runner-enrollments';
+export * from './endpoints/platform-runtime-health/platform-runtime-health';
 export * from './endpoints/platform-service-mesh/platform-service-mesh';
 export * from './endpoints/platform-settings/platform-settings';
+export * from './endpoints/runner-enrollment-challenges/runner-enrollment-challenges';
+export * from './endpoints/runner-enrollments/runner-enrollments';

package/dist/index.js

@@ -33,5 +33,9 @@ __exportStar(require("./endpoints/platform-biomes-contribution-sync/platform-bio
 __exportStar(require("./endpoints/platform-biomes-enablement/platform-biomes-enablement"), exports);
 __exportStar(require("./endpoints/platform-biomes-server/platform-biomes-server"), exports);
 __exportStar(require("./endpoints/platform-biomes-web/platform-biomes-web"), exports);
+__exportStar(require("./endpoints/platform-runner-enrollments/platform-runner-enrollments"), exports);
+__exportStar(require("./endpoints/platform-runtime-health/platform-runtime-health"), exports);
 __exportStar(require("./endpoints/platform-service-mesh/platform-service-mesh"), exports);
 __exportStar(require("./endpoints/platform-settings/platform-settings"), exports);
+__exportStar(require("./endpoints/runner-enrollment-challenges/runner-enrollment-challenges"), exports);
+__exportStar(require("./endpoints/runner-enrollments/runner-enrollments"), exports);

package/dist/models/addRemoteBiomeOriginDto.d.ts

@@ -3,7 +3,7 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 export interface AddRemoteBiomeOriginDto {
     /** A full "scheme://host[:port]" origin allowed to serve Module-Federation remote biome bundles. Normalized server-side to its canonical origin (any path/query is stripped); a bare host with no scheme is rejected. */

package/dist/models/addRemoteBiomeOriginDto.js

@@ -4,6 +4,6 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/authorBiomeBundleDto.d.ts

@@ -3,10 +3,11 @@
  * Do not edit manually.
  * Biome Host API
  * Platform biome registry consumed by frontend hosts at bootstrap.
- * OpenAPI spec version: 0.1.0
+ * OpenAPI spec version: 0.1.1
  */
-import type { BiomeKind } from './biomeKind.js';
+import type { BiomeComponentScheduler } from './biomeComponentScheduler.js';
 import type { BiomeTier } from './biomeTier.js';
+import type { ScaffoldTemplate } from './scaffoldTemplate.js';
 export interface AuthorBiomeBundleDto {
     /** Kebab-case biome id: 3–63 chars, lowercase letters/digits/dashes, starting with a letter. Becomes `xema.id`, the biome directory name, and the `@xemahq/biomes-<id>` package name. Rejected fail-fast if malformed. */
     biomeId: string;
@@ -20,8 +21,10 @@ export interface AuthorBiomeBundleDto {
        * @maxLength 1000
        */
     description: string;
-    /** On-disk SHAPE of the generated biome: `service` = one NestJS API; `web` = a frontend-only surface; `full` = both, wired together via requiresServerBiomes; `connector` = a server biome shipping one connector-adapter module and no API or web surface. */
-    kind: BiomeKind;
+    /** Which component kinds the generated biome ships, from the published scaffold-template vocabulary: `content` (portable content only), `web` (static web bundle on the Xema web ABI), `adapter` (adapter-host module), `service` (portable HTTP service), `worker` (OCI worker), `job` (invocation-only OCI job), `mixed` (service plus an independently placed worker). */
+    template: ScaffoldTemplate;
     /** Dependency tier written to `xema.scope`. `platform` is where a new first-party domain biome belongs; the foundational tiers (`base`, `system`, `kernel`) are deliberate choices. */
     scope: BiomeTier;
+    /** Which plane schedules the generated worker. REQUIRED for the `worker` and `mixed` templates, and rejected for every other template. There is deliberately no default: `platform` gets a Deployment, a Service, probes and an HPA; `runtime` is launched on demand per session, installation or allocation and must never be rostered as a standing workload. Both answers are legitimate, so guessing one would silently mis-deploy. */
+    scheduler?: BiomeComponentScheduler;
 }