@xemahq/biome-host-api-client 0.3.25 → 0.3.26

package/dist/models/bundleTrustTier.d.ts

@@ -4,7 +4,7 @@
  * OpenAPI spec version: 0.1.1
  */
 /**
- * The fetcher's provenance verdict on the bundle. Only `first-party-runtime` — a bundle carrying a valid signature from a configured trust anchor — may share the shared adapter host process. A bundle that never claimed a signature is `third-party` and gets a container of its own instead.
+ * The fetcher's provenance verdict on the bundle, or null when the fetcher refused to serve it and never assigned one. Only `first-party-runtime` — a bundle carrying a valid signature from a configured trust anchor — may share the shared adapter host process. A bundle that never claimed a signature is `third-party` and gets a container of its own instead.
  */
 export type BundleTrustTier = typeof BundleTrustTier[keyof typeof BundleTrustTier];
 export declare const BundleTrustTier: {

package/dist/models/hostModuleRefusedAt.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * WHERE the module was refused, which decides which of the two fields below carries the reason. `admission` means the bundle WAS fetched and graded and the grade may not share the heap, so `trustTier` is set. `fetch` means biome-fetcher-api declined to vouch for the bytes at all, so nothing was graded and `refusalCode` carries its supply-chain verdict instead. They are different facts and neither field alone can express both.
+ */
+export type HostModuleRefusedAt = typeof HostModuleRefusedAt[keyof typeof HostModuleRefusedAt];
+export declare const HostModuleRefusedAt: {
+    readonly admission: "admission";
+    readonly fetch: "fetch";
+};

package/dist/models/hostModuleRefusedAt.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostModuleRefusedAt = void 0;
+exports.HostModuleRefusedAt = {
+    admission: 'admission',
+    fetch: 'fetch',
+};

package/dist/models/index.d.ts

@@ -93,6 +93,7 @@ export * from './executionTargetResponseDtoDataArrayEnvelope';
 export * from './executionTargetResponseDtoDataEnvelope';
 export * from './executionTargetResponseDtoLabels';
 export * from './executionTargetStatus';
+export * from './hostModuleRefusedAt';
 export * from './inFlightRevocationPolicy';
 export * from './lifecycleTransitionAckDto';
 export * from './orgBiomeEffectiveEnablementDto';
@@ -114,6 +115,7 @@ export * from './problemFieldIssueDto';
 export * from './promoteBiomeInstallationDto';
 export * from './quarantinedBiomeDto';
 export * from './refusedHostModuleDto';
+export * from './refusedHostModuleDtoRefusalCode';
 export * from './requestApprovalDto';
 export * from './rescopeBiomeInstallationDto';
 export * from './rescopeTargetSpaceDto';

package/dist/models/index.js

@@ -110,6 +110,7 @@ __exportStar(require("./executionTargetResponseDtoDataArrayEnvelope"), exports);
 __exportStar(require("./executionTargetResponseDtoDataEnvelope"), exports);
 __exportStar(require("./executionTargetResponseDtoLabels"), exports);
 __exportStar(require("./executionTargetStatus"), exports);
+__exportStar(require("./hostModuleRefusedAt"), exports);
 __exportStar(require("./inFlightRevocationPolicy"), exports);
 __exportStar(require("./lifecycleTransitionAckDto"), exports);
 __exportStar(require("./orgBiomeEffectiveEnablementDto"), exports);
@@ -131,6 +132,7 @@ __exportStar(require("./problemFieldIssueDto"), exports);
 __exportStar(require("./promoteBiomeInstallationDto"), exports);
 __exportStar(require("./quarantinedBiomeDto"), exports);
 __exportStar(require("./refusedHostModuleDto"), exports);
+__exportStar(require("./refusedHostModuleDtoRefusalCode"), exports);
 __exportStar(require("./requestApprovalDto"), exports);
 __exportStar(require("./rescopeBiomeInstallationDto"), exports);
 __exportStar(require("./rescopeTargetSpaceDto"), exports);

package/dist/models/refusedHostModuleDto.d.ts

@@ -4,10 +4,19 @@
  * OpenAPI spec version: 0.1.1
  */
 import type { BundleTrustTier } from './bundleTrustTier.js';
+import type { HostModuleRefusedAt } from './hostModuleRefusedAt.js';
+import type { RefusedHostModuleDtoRefusalCode } from './refusedHostModuleDtoRefusalCode.js';
 export interface RefusedHostModuleDto {
     biomeId: string;
     version: string;
     componentKey: string;
-    /** The fetcher's provenance verdict on the bundle. Only `first-party-runtime` — a bundle carrying a valid signature from a configured trust anchor — may share the shared adapter host process. A bundle that never claimed a signature is `third-party` and gets a container of its own instead. */
-    trustTier: BundleTrustTier;
+    /** WHERE the module was refused, which decides which of the two fields below carries the reason. `admission` means the bundle WAS fetched and graded and the grade may not share the heap, so `trustTier` is set. `fetch` means biome-fetcher-api declined to vouch for the bytes at all, so nothing was graded and `refusalCode` carries its supply-chain verdict instead. They are different facts and neither field alone can express both. */
+    refusedAt: HostModuleRefusedAt;
+    /** The fetcher's provenance verdict on the bundle, or null when the fetcher refused to serve it and never assigned one. Only `first-party-runtime` — a bundle carrying a valid signature from a configured trust anchor — may share the shared adapter host process. A bundle that never claimed a signature is `third-party` and gets a container of its own instead. */
+    trustTier: BundleTrustTier | null;
+    /**
+       * biome-fetcher-api's supply-chain verdict code when it refused to serve the bundle (`CosignErrorCode`), or null when the bundle was served and refused on its trust tier instead. `BIOME_SIGNATURE_MISSING` is the ordinary case for an unsigned npm bundle in a deployment with trust anchors configured.
+       * @nullable
+       */
+    refusalCode: RefusedHostModuleDtoRefusalCode;
 }

package/dist/models/refusedHostModuleDtoRefusalCode.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * biome-fetcher-api's supply-chain verdict code when it refused to serve the bundle (`CosignErrorCode`), or null when the bundle was served and refused on its trust tier instead. `BIOME_SIGNATURE_MISSING` is the ordinary case for an unsigned npm bundle in a deployment with trust anchors configured.
+ * @nullable
+ */
+export type RefusedHostModuleDtoRefusalCode = {
+    [key: string]: unknown;
+} | null;

package/dist/models/refusedHostModuleDtoRefusalCode.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/biome-host-api-client",
-  "version": "0.3.25",
+  "version": "0.3.26",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [