@xemahq/biome-host-api-client 0.3.7 → 0.3.10

package/dist/custom-fetch.d.ts

@@ -47,6 +47,28 @@ export interface ClientConfig {
     getAuthToken?: () => Promise<string>;
     /** Optional callback returning headers to inject on every request. Per-call headers take precedence. */
     getHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+    /**
+     * Optional resolver for the CORRELATION ID of the request being made — the
+     * handle that ties one causal chain together across every service hop.
+     *
+     * WHY IT IS A CALLBACK AND NOT A VALUE. `ClientConfig` is process-global
+     * (`configureClient` is called once at wiring time), and a correlation id is
+     * per-request. This is invoked INSIDE the request, so a server can point it
+     * at whatever carries its ambient request context and get the CURRENT id
+     * rather than the one that happened to be live at boot.
+     *
+     * WHY THE TRANSPORT DOES NOT MINT ONE. Returning `undefined` sends no header,
+     * and the receiving service's `RequestContextMiddleware` mints its own — a
+     * new trace, which is honest. A transport that minted per call would produce
+     * a FRESH id on every hop while looking like propagation, which is strictly
+     * worse than none: every row would carry a correlation id and no two rows
+     * that belong together would share one. That is the exact defect this exists
+     * to fix, so the transport must not reproduce it one layer down.
+     *
+     * A caller-supplied `X-Correlation-Id` header always wins, and so does one
+     * from `getHeaders`.
+     */
+    getCorrelationId?: () => string | undefined | Promise<string | undefined>;
     /**
      * Optional callback invoked on a 401 before ONE re-attempt. Supplying it is
      * what opts this client into that re-attempt; without it a 401 comes back to

package/dist/custom-fetch.js

@@ -89,6 +89,16 @@ function getClientConfig() {
  */
 /** The only statuses that state the request was NOT processed. See above. */
 const RETRYABLE_STATUSES = [429, 503];
+/**
+ * The platform's correlation header, spelled once.
+ *
+ * Value-identical to what `RequestContextMiddleware` reads in
+ * `@xemahq/platform-common`. It is a literal here rather than an import
+ * because this file has ZERO imports on purpose: it ships byte-identical into
+ * browser-target clients as well as server-target ones, and a dependency on a
+ * NestJS-peer package would follow it into every one of them.
+ */
+const CORRELATION_ID_HEADER = 'X-Correlation-Id';
 /** Backoff floor, doubling per attempt up to {@link MAX_BACKOFF_MS}. */
 const BASE_BACKOFF_MS = 1000;
 /** Ceiling on a single backoff, however many attempts have elapsed. */
@@ -104,6 +114,23 @@ async function buildHeaders(config, callerHeaders) {
             }
         }
     }
+    // Correlation id (caller and global headers still take precedence).
+    //
+    // Without this, every server-to-server hop through a generated client started
+    // a NEW trace: the id is read-or-minted per hop by the receiving service's
+    // RequestContextMiddleware, and nothing carried it outbound — so an audit
+    // journal could record a whole causal chain and offer no way to join it back
+    // together.
+    //
+    // Absent resolver, or a resolver that answers `undefined`: NO header. The
+    // receiver mints and a new trace begins, which is the truthful outcome when
+    // there is nothing to continue.
+    if (config.getCorrelationId && !headers.has(CORRELATION_ID_HEADER)) {
+        const correlationId = await Promise.resolve(config.getCorrelationId());
+        if (correlationId) {
+            headers.set(CORRELATION_ID_HEADER, correlationId);
+        }
+    }
     // Auth token (caller or global headers take precedence)
     if (config.getAuthToken && !headers.has('Authorization')) {
         const token = await config.getAuthToken();

package/dist/endpoints/execution-targets/execution-targets.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { CreateExecutionTargetDto, ExecutionTargetResponseDtoDataArrayEnvelope, ExecutionTargetResponseDtoDataEnvelope, UpdateExecutionTargetDto } from '../../models';
+export declare const getExecutionTargetsControllerListUrl: () => string;
+/**
+ * @summary List every execution target visible to this organisation, across owner spaces
+ */
+export declare const executionTargetsControllerList: (options?: RequestInit) => Promise<ExecutionTargetResponseDtoDataArrayEnvelope>;
+export declare const getExecutionTargetsControllerCreateUrl: () => string;
+/**
+ * @summary Declare an execution target owned by this organisation's Space
+ */
+export declare const executionTargetsControllerCreate: (createExecutionTargetDto: CreateExecutionTargetDto, options?: RequestInit) => Promise<ExecutionTargetResponseDtoDataEnvelope>;
+export declare const getExecutionTargetsControllerUpdateUrl: (slug: string) => string;
+/**
+ * @summary Patch the mutable subset of an execution target this organisation owns
+ */
+export declare const executionTargetsControllerUpdate: (slug: string, updateExecutionTargetDto: UpdateExecutionTargetDto, options?: RequestInit) => Promise<ExecutionTargetResponseDtoDataEnvelope>;

package/dist/endpoints/execution-targets/execution-targets.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executionTargetsControllerUpdate = exports.getExecutionTargetsControllerUpdateUrl = exports.executionTargetsControllerCreate = exports.getExecutionTargetsControllerCreateUrl = exports.executionTargetsControllerList = exports.getExecutionTargetsControllerListUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getExecutionTargetsControllerListUrl = () => {
+    return `/execution-targets`;
+};
+exports.getExecutionTargetsControllerListUrl = getExecutionTargetsControllerListUrl;
+/**
+ * @summary List every execution target visible to this organisation, across owner spaces
+ */
+const executionTargetsControllerList = async (options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getExecutionTargetsControllerListUrl)(), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.executionTargetsControllerList = executionTargetsControllerList;
+const getExecutionTargetsControllerCreateUrl = () => {
+    return `/execution-targets`;
+};
+exports.getExecutionTargetsControllerCreateUrl = getExecutionTargetsControllerCreateUrl;
+/**
+ * @summary Declare an execution target owned by this organisation's Space
+ */
+const executionTargetsControllerCreate = async (createExecutionTargetDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getExecutionTargetsControllerCreateUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(createExecutionTargetDto)
+    });
+};
+exports.executionTargetsControllerCreate = executionTargetsControllerCreate;
+const getExecutionTargetsControllerUpdateUrl = (slug) => {
+    return `/execution-targets/${slug}`;
+};
+exports.getExecutionTargetsControllerUpdateUrl = getExecutionTargetsControllerUpdateUrl;
+/**
+ * @summary Patch the mutable subset of an execution target this organisation owns
+ */
+const executionTargetsControllerUpdate = async (slug, updateExecutionTargetDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getExecutionTargetsControllerUpdateUrl)(slug), {
+        ...options,
+        method: 'PATCH',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(updateExecutionTargetDto)
+    });
+};
+exports.executionTargetsControllerUpdate = executionTargetsControllerUpdate;

package/dist/endpoints/platform-runner-enrollments/platform-runner-enrollments.d.ts

@@ -4,28 +4,28 @@
  * OpenAPI spec version: 0.1.1
  */
 import type { BreakGlassRevokeRunnerEnrollmentDto, CreateRunnerEnrollmentDto, RotateRunnerEnrollmentDto, RunnerEnrollmentManagementResponseDtoDataArrayEnvelope, RunnerEnrollmentManagementResponseDtoDataEnvelope, RunnerEnrollmentManagementRotationResponseDtoDataEnvelope } from '../../models';
-export declare const getPlatformRunnerEnrollmentsControllerListUrl: (runtimeId: string) => string;
+export declare const getPlatformRunnerEnrollmentsControllerListUrl: (executionTargetId: string) => string;
 /**
  * @summary List enrollments for an ownerless platform runtime
  */
-export declare const platformRunnerEnrollmentsControllerList: (runtimeId: string, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataArrayEnvelope>;
-export declare const getPlatformRunnerEnrollmentsControllerCreateUrl: (runtimeId: string) => string;
+export declare const platformRunnerEnrollmentsControllerList: (executionTargetId: string, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataArrayEnvelope>;
+export declare const getPlatformRunnerEnrollmentsControllerCreateUrl: (executionTargetId: string) => string;
 /**
  * @summary Create an enrollment for an ownerless platform runtime
  */
-export declare const platformRunnerEnrollmentsControllerCreate: (runtimeId: string, createRunnerEnrollmentDto: CreateRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;
-export declare const getPlatformRunnerEnrollmentsControllerRotateUrl: (runtimeId: string, enrollmentId: string) => string;
+export declare const platformRunnerEnrollmentsControllerCreate: (executionTargetId: string, createRunnerEnrollmentDto: CreateRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;
+export declare const getPlatformRunnerEnrollmentsControllerRotateUrl: (executionTargetId: string, enrollmentId: string) => string;
 /**
  * @summary Issue a successor platform runner credential
  */
-export declare const platformRunnerEnrollmentsControllerRotate: (runtimeId: string, enrollmentId: string, rotateRunnerEnrollmentDto: RotateRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementRotationResponseDtoDataEnvelope>;
-export declare const getPlatformRunnerEnrollmentsControllerDrainUrl: (runtimeId: string, enrollmentId: string) => string;
+export declare const platformRunnerEnrollmentsControllerRotate: (executionTargetId: string, enrollmentId: string, rotateRunnerEnrollmentDto: RotateRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementRotationResponseDtoDataEnvelope>;
+export declare const getPlatformRunnerEnrollmentsControllerDrainUrl: (executionTargetId: string, enrollmentId: string) => string;
 /**
  * @summary Stop new work and begin platform enrollment revocation
  */
-export declare const platformRunnerEnrollmentsControllerDrain: (runtimeId: string, enrollmentId: string, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;
-export declare const getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl: (runtimeId: string, enrollmentId: string) => string;
+export declare const platformRunnerEnrollmentsControllerDrain: (executionTargetId: string, enrollmentId: string, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;
+export declare const getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl: (executionTargetId: string, enrollmentId: string) => string;
 /**
  * @summary Immediately fence and revoke an enrollment with a durable security audit and alert
  */
-export declare const platformRunnerEnrollmentsControllerBreakGlassRevoke: (runtimeId: string, enrollmentId: string, breakGlassRevokeRunnerEnrollmentDto: BreakGlassRevokeRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;
+export declare const platformRunnerEnrollmentsControllerBreakGlassRevoke: (executionTargetId: string, enrollmentId: string, breakGlassRevokeRunnerEnrollmentDto: BreakGlassRevokeRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;

package/dist/endpoints/platform-runner-enrollments/platform-runner-enrollments.js

@@ -2,29 +2,29 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.platformRunnerEnrollmentsControllerBreakGlassRevoke = exports.getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl = exports.platformRunnerEnrollmentsControllerDrain = exports.getPlatformRunnerEnrollmentsControllerDrainUrl = exports.platformRunnerEnrollmentsControllerRotate = exports.getPlatformRunnerEnrollmentsControllerRotateUrl = exports.platformRunnerEnrollmentsControllerCreate = exports.getPlatformRunnerEnrollmentsControllerCreateUrl = exports.platformRunnerEnrollmentsControllerList = exports.getPlatformRunnerEnrollmentsControllerListUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-const getPlatformRunnerEnrollmentsControllerListUrl = (runtimeId) => {
-    return `/platform/runtimes/${runtimeId}/enrollments`;
+const getPlatformRunnerEnrollmentsControllerListUrl = (executionTargetId) => {
+    return `/platform/runtimes/${executionTargetId}/enrollments`;
 };
 exports.getPlatformRunnerEnrollmentsControllerListUrl = getPlatformRunnerEnrollmentsControllerListUrl;
 /**
  * @summary List enrollments for an ownerless platform runtime
  */
-const platformRunnerEnrollmentsControllerList = async (runtimeId, options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerListUrl)(runtimeId), {
+const platformRunnerEnrollmentsControllerList = async (executionTargetId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerListUrl)(executionTargetId), {
         ...options,
         method: 'GET'
     });
 };
 exports.platformRunnerEnrollmentsControllerList = platformRunnerEnrollmentsControllerList;
-const getPlatformRunnerEnrollmentsControllerCreateUrl = (runtimeId) => {
-    return `/platform/runtimes/${runtimeId}/enrollments`;
+const getPlatformRunnerEnrollmentsControllerCreateUrl = (executionTargetId) => {
+    return `/platform/runtimes/${executionTargetId}/enrollments`;
 };
 exports.getPlatformRunnerEnrollmentsControllerCreateUrl = getPlatformRunnerEnrollmentsControllerCreateUrl;
 /**
  * @summary Create an enrollment for an ownerless platform runtime
  */
-const platformRunnerEnrollmentsControllerCreate = async (runtimeId, createRunnerEnrollmentDto, options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerCreateUrl)(runtimeId), {
+const platformRunnerEnrollmentsControllerCreate = async (executionTargetId, createRunnerEnrollmentDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerCreateUrl)(executionTargetId), {
         ...options,
         method: 'POST',
         headers: { 'Content-Type': 'application/json', ...options?.headers },
@@ -32,15 +32,15 @@ const platformRunnerEnrollmentsControllerCreate = async (runtimeId, createRunner
     });
 };
 exports.platformRunnerEnrollmentsControllerCreate = platformRunnerEnrollmentsControllerCreate;
-const getPlatformRunnerEnrollmentsControllerRotateUrl = (runtimeId, enrollmentId) => {
-    return `/platform/runtimes/${runtimeId}/enrollments/${enrollmentId}/rotate`;
+const getPlatformRunnerEnrollmentsControllerRotateUrl = (executionTargetId, enrollmentId) => {
+    return `/platform/runtimes/${executionTargetId}/enrollments/${enrollmentId}/rotate`;
 };
 exports.getPlatformRunnerEnrollmentsControllerRotateUrl = getPlatformRunnerEnrollmentsControllerRotateUrl;
 /**
  * @summary Issue a successor platform runner credential
  */
-const platformRunnerEnrollmentsControllerRotate = async (runtimeId, enrollmentId, rotateRunnerEnrollmentDto, options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerRotateUrl)(runtimeId, enrollmentId), {
+const platformRunnerEnrollmentsControllerRotate = async (executionTargetId, enrollmentId, rotateRunnerEnrollmentDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerRotateUrl)(executionTargetId, enrollmentId), {
         ...options,
         method: 'POST',
         headers: { 'Content-Type': 'application/json', ...options?.headers },
@@ -48,29 +48,29 @@ const platformRunnerEnrollmentsControllerRotate = async (runtimeId, enrollmentId
     });
 };
 exports.platformRunnerEnrollmentsControllerRotate = platformRunnerEnrollmentsControllerRotate;
-const getPlatformRunnerEnrollmentsControllerDrainUrl = (runtimeId, enrollmentId) => {
-    return `/platform/runtimes/${runtimeId}/enrollments/${enrollmentId}/drain`;
+const getPlatformRunnerEnrollmentsControllerDrainUrl = (executionTargetId, enrollmentId) => {
+    return `/platform/runtimes/${executionTargetId}/enrollments/${enrollmentId}/drain`;
 };
 exports.getPlatformRunnerEnrollmentsControllerDrainUrl = getPlatformRunnerEnrollmentsControllerDrainUrl;
 /**
  * @summary Stop new work and begin platform enrollment revocation
  */
-const platformRunnerEnrollmentsControllerDrain = async (runtimeId, enrollmentId, options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerDrainUrl)(runtimeId, enrollmentId), {
+const platformRunnerEnrollmentsControllerDrain = async (executionTargetId, enrollmentId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerDrainUrl)(executionTargetId, enrollmentId), {
         ...options,
         method: 'POST'
     });
 };
 exports.platformRunnerEnrollmentsControllerDrain = platformRunnerEnrollmentsControllerDrain;
-const getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl = (runtimeId, enrollmentId) => {
-    return `/platform/runtimes/${runtimeId}/enrollments/${enrollmentId}/revoke`;
+const getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl = (executionTargetId, enrollmentId) => {
+    return `/platform/runtimes/${executionTargetId}/enrollments/${enrollmentId}/revoke`;
 };
 exports.getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl = getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl;
 /**
  * @summary Immediately fence and revoke an enrollment with a durable security audit and alert
  */
-const platformRunnerEnrollmentsControllerBreakGlassRevoke = async (runtimeId, enrollmentId, breakGlassRevokeRunnerEnrollmentDto, options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl)(runtimeId, enrollmentId), {
+const platformRunnerEnrollmentsControllerBreakGlassRevoke = async (executionTargetId, enrollmentId, breakGlassRevokeRunnerEnrollmentDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getPlatformRunnerEnrollmentsControllerBreakGlassRevokeUrl)(executionTargetId, enrollmentId), {
         ...options,
         method: 'POST',
         headers: { 'Content-Type': 'application/json', ...options?.headers },

package/dist/endpoints/runner-enrollments/runner-enrollments.d.ts

@@ -4,23 +4,23 @@
  * OpenAPI spec version: 0.1.1
  */
 import type { CreateRunnerEnrollmentDto, RotateRunnerEnrollmentDto, RunnerEnrollmentManagementResponseDtoDataArrayEnvelope, RunnerEnrollmentManagementResponseDtoDataEnvelope, RunnerEnrollmentManagementRotationResponseDtoDataEnvelope } from '../../models';
-export declare const getRunnerEnrollmentsControllerListUrl: (runtimeId: string) => string;
+export declare const getRunnerEnrollmentsControllerListUrl: (executionTargetId: string) => string;
 /**
  * @summary List runner enrollments for an accessible runtime
  */
-export declare const runnerEnrollmentsControllerList: (runtimeId: string, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataArrayEnvelope>;
-export declare const getRunnerEnrollmentsControllerCreateUrl: (runtimeId: string) => string;
+export declare const runnerEnrollmentsControllerList: (executionTargetId: string, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataArrayEnvelope>;
+export declare const getRunnerEnrollmentsControllerCreateUrl: (executionTargetId: string) => string;
 /**
  * @summary Create a non-active enrollment for asynchronous identity provisioning
  */
-export declare const runnerEnrollmentsControllerCreate: (runtimeId: string, createRunnerEnrollmentDto: CreateRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;
-export declare const getRunnerEnrollmentsControllerRotateUrl: (runtimeId: string, enrollmentId: string) => string;
+export declare const runnerEnrollmentsControllerCreate: (executionTargetId: string, createRunnerEnrollmentDto: CreateRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;
+export declare const getRunnerEnrollmentsControllerRotateUrl: (executionTargetId: string, enrollmentId: string) => string;
 /**
  * @summary Issue a successor credential for this enrollment
  */
-export declare const runnerEnrollmentsControllerRotate: (runtimeId: string, enrollmentId: string, rotateRunnerEnrollmentDto: RotateRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementRotationResponseDtoDataEnvelope>;
-export declare const getRunnerEnrollmentsControllerDrainUrl: (runtimeId: string, enrollmentId: string) => string;
+export declare const runnerEnrollmentsControllerRotate: (executionTargetId: string, enrollmentId: string, rotateRunnerEnrollmentDto: RotateRunnerEnrollmentDto, options?: RequestInit) => Promise<RunnerEnrollmentManagementRotationResponseDtoDataEnvelope>;
+export declare const getRunnerEnrollmentsControllerDrainUrl: (executionTargetId: string, enrollmentId: string) => string;
 /**
  * @summary Stop new work and begin enrollment revocation
  */
-export declare const runnerEnrollmentsControllerDrain: (runtimeId: string, enrollmentId: string, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;
+export declare const runnerEnrollmentsControllerDrain: (executionTargetId: string, enrollmentId: string, options?: RequestInit) => Promise<RunnerEnrollmentManagementResponseDtoDataEnvelope>;

package/dist/endpoints/runner-enrollments/runner-enrollments.js

@@ -2,29 +2,29 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runnerEnrollmentsControllerDrain = exports.getRunnerEnrollmentsControllerDrainUrl = exports.runnerEnrollmentsControllerRotate = exports.getRunnerEnrollmentsControllerRotateUrl = exports.runnerEnrollmentsControllerCreate = exports.getRunnerEnrollmentsControllerCreateUrl = exports.runnerEnrollmentsControllerList = exports.getRunnerEnrollmentsControllerListUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
-const getRunnerEnrollmentsControllerListUrl = (runtimeId) => {
-    return `/runtimes/${runtimeId}/enrollments`;
+const getRunnerEnrollmentsControllerListUrl = (executionTargetId) => {
+    return `/runtimes/${executionTargetId}/enrollments`;
 };
 exports.getRunnerEnrollmentsControllerListUrl = getRunnerEnrollmentsControllerListUrl;
 /**
  * @summary List runner enrollments for an accessible runtime
  */
-const runnerEnrollmentsControllerList = async (runtimeId, options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentsControllerListUrl)(runtimeId), {
+const runnerEnrollmentsControllerList = async (executionTargetId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentsControllerListUrl)(executionTargetId), {
         ...options,
         method: 'GET'
     });
 };
 exports.runnerEnrollmentsControllerList = runnerEnrollmentsControllerList;
-const getRunnerEnrollmentsControllerCreateUrl = (runtimeId) => {
-    return `/runtimes/${runtimeId}/enrollments`;
+const getRunnerEnrollmentsControllerCreateUrl = (executionTargetId) => {
+    return `/runtimes/${executionTargetId}/enrollments`;
 };
 exports.getRunnerEnrollmentsControllerCreateUrl = getRunnerEnrollmentsControllerCreateUrl;
 /**
  * @summary Create a non-active enrollment for asynchronous identity provisioning
  */
-const runnerEnrollmentsControllerCreate = async (runtimeId, createRunnerEnrollmentDto, options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentsControllerCreateUrl)(runtimeId), {
+const runnerEnrollmentsControllerCreate = async (executionTargetId, createRunnerEnrollmentDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentsControllerCreateUrl)(executionTargetId), {
         ...options,
         method: 'POST',
         headers: { 'Content-Type': 'application/json', ...options?.headers },
@@ -32,15 +32,15 @@ const runnerEnrollmentsControllerCreate = async (runtimeId, createRunnerEnrollme
     });
 };
 exports.runnerEnrollmentsControllerCreate = runnerEnrollmentsControllerCreate;
-const getRunnerEnrollmentsControllerRotateUrl = (runtimeId, enrollmentId) => {
-    return `/runtimes/${runtimeId}/enrollments/${enrollmentId}/rotate`;
+const getRunnerEnrollmentsControllerRotateUrl = (executionTargetId, enrollmentId) => {
+    return `/runtimes/${executionTargetId}/enrollments/${enrollmentId}/rotate`;
 };
 exports.getRunnerEnrollmentsControllerRotateUrl = getRunnerEnrollmentsControllerRotateUrl;
 /**
  * @summary Issue a successor credential for this enrollment
  */
-const runnerEnrollmentsControllerRotate = async (runtimeId, enrollmentId, rotateRunnerEnrollmentDto, options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentsControllerRotateUrl)(runtimeId, enrollmentId), {
+const runnerEnrollmentsControllerRotate = async (executionTargetId, enrollmentId, rotateRunnerEnrollmentDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentsControllerRotateUrl)(executionTargetId, enrollmentId), {
         ...options,
         method: 'POST',
         headers: { 'Content-Type': 'application/json', ...options?.headers },
@@ -48,15 +48,15 @@ const runnerEnrollmentsControllerRotate = async (runtimeId, enrollmentId, rotate
     });
 };
 exports.runnerEnrollmentsControllerRotate = runnerEnrollmentsControllerRotate;
-const getRunnerEnrollmentsControllerDrainUrl = (runtimeId, enrollmentId) => {
-    return `/runtimes/${runtimeId}/enrollments/${enrollmentId}/drain`;
+const getRunnerEnrollmentsControllerDrainUrl = (executionTargetId, enrollmentId) => {
+    return `/runtimes/${executionTargetId}/enrollments/${enrollmentId}/drain`;
 };
 exports.getRunnerEnrollmentsControllerDrainUrl = getRunnerEnrollmentsControllerDrainUrl;
 /**
  * @summary Stop new work and begin enrollment revocation
  */
-const runnerEnrollmentsControllerDrain = async (runtimeId, enrollmentId, options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentsControllerDrainUrl)(runtimeId, enrollmentId), {
+const runnerEnrollmentsControllerDrain = async (executionTargetId, enrollmentId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerEnrollmentsControllerDrainUrl)(executionTargetId, enrollmentId), {
         ...options,
         method: 'POST'
     });

package/dist/index.d.ts

@@ -4,7 +4,7 @@ export * from './endpoints/authoring/authoring';
 export * from './endpoints/biome-approvals/biome-approvals';
 export * from './endpoints/biome-installations/biome-installations';
 export * from './endpoints/biome-runtime-bindings/biome-runtime-bindings';
-export * from './endpoints/biome-runtimes/biome-runtimes';
+export * from './endpoints/execution-targets/execution-targets';
 export * from './endpoints/org-biome-installations/org-biome-installations';
 export * from './endpoints/platform-biomes-availability/platform-biomes-availability';
 export * from './endpoints/platform-biomes-contribution-sync/platform-biomes-contribution-sync';

package/dist/index.js

@@ -26,7 +26,7 @@ __exportStar(require("./endpoints/authoring/authoring"), exports);
 __exportStar(require("./endpoints/biome-approvals/biome-approvals"), exports);
 __exportStar(require("./endpoints/biome-installations/biome-installations"), exports);
 __exportStar(require("./endpoints/biome-runtime-bindings/biome-runtime-bindings"), exports);
-__exportStar(require("./endpoints/biome-runtimes/biome-runtimes"), exports);
+__exportStar(require("./endpoints/execution-targets/execution-targets"), exports);
 __exportStar(require("./endpoints/org-biome-installations/org-biome-installations"), exports);
 __exportStar(require("./endpoints/platform-biomes-availability/platform-biomes-availability"), exports);
 __exportStar(require("./endpoints/platform-biomes-contribution-sync/platform-biomes-contribution-sync"), exports);

package/dist/models/createExecutionTargetDto.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { CreateExecutionTargetDtoLabels } from './createExecutionTargetDtoLabels.js';
+import type { CredentialDeliveryKind } from './credentialDeliveryKind.js';
+import type { DataClassification } from './dataClassification.js';
+import type { RunnerDataLocality } from './runnerDataLocality.js';
+import type { RunnerTrustTier } from './runnerTrustTier.js';
+import type { RuntimeIsolationLevel } from './runtimeIsolationLevel.js';
+import type { RuntimeOperatorKind } from './runtimeOperatorKind.js';
+import type { SpaceKind } from './spaceKind.js';
+export interface CreateExecutionTargetDto {
+    /** Human-meaningful key, unique WITHIN its owner space. Embedded verbatim in a task-queue name, so `:`, `.` and `_` are refused. */
+    slug: string;
+    displayName: string;
+    /** The owner TIER. Only 'org' is writable through this endpoint — 'system' is the platform's seeded pool, and every other tier is outside `EXECUTION_TARGET_SPACE_KINDS`. The identity comes from the request context, never from the body. */
+    ownerSpaceKind: SpaceKind;
+    /** Isolation boundary this target PROVIDES. */
+    isolation: RuntimeIsolationLevel;
+    /** Data locality this target PROVIDES. */
+    locality: RunnerDataLocality;
+    /** Minimum runner trust tier admitted onto this target. */
+    minTrustTier: RunnerTrustTier;
+    /** Maximum runner trust tier this target may grant. */
+    maxTrustTier: RunnerTrustTier;
+    /** Localities a runner enrolling onto this target may declare. Never empty — a target no runner can enrol into is a pool the platform cannot keep. */
+    allowedLocalities: RunnerDataLocality[];
+    /** Who operates the executors behind this target. */
+    operatorKind: RuntimeOperatorKind;
+    /** How a newly issued runtime credential reaches its holder. */
+    credentialDelivery: CredentialDeliveryKind;
+    /** OPEN operator label map. `region`, `residency` and `accelerator` are the keys the platform itself reads. Defaults to {}. */
+    labels?: CreateExecutionTargetDtoLabels;
+    /** Classification CEILING this target accepts. Omitted means un-configured — never a defaulted `public`. */
+    maxDataClassification?: DataClassification;
+    /** Make this the fallback target WITHIN its owner space. At most one per space; setting it demotes the incumbent in the same transaction. */
+    isDefault?: boolean;
+}

package/dist/models/createExecutionTargetDtoLabels.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * OPEN operator label map. `region`, `residency` and `accelerator` are the keys the platform itself reads. Defaults to {}.
+ */
+export type CreateExecutionTargetDtoLabels = {
+    [key: string]: string;
+};

package/dist/models/createExecutionTargetDtoLabels.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/createRunnerEnrollmentDto.d.ts

@@ -5,11 +5,13 @@
  */
 import type { InFlightRevocationPolicy } from './inFlightRevocationPolicy.js';
 import type { RunnerDataLocality } from './runnerDataLocality.js';
+import type { RunnerKind } from './runnerKind.js';
 import type { RunnerTrustTier } from './runnerTrustTier.js';
 export interface CreateRunnerEnrollmentDto {
     runnerId: string;
     allowedEnvironmentIds: string[];
     maxTrustTier: RunnerTrustTier;
     allowedLocalities: RunnerDataLocality[];
+    allowedKinds: RunnerKind[];
     inFlightPolicy?: InFlightRevocationPolicy;
 }

package/dist/models/createRuntimeBindingDto.d.ts

@@ -8,7 +8,7 @@ import type { CreateRuntimeBindingDtoRequiredLabels } from './createRuntimeBindi
 import type { InFlightRevocationPolicy } from './inFlightRevocationPolicy.js';
 export interface CreateRuntimeBindingDto {
     /** Slug of the runtime to bind this installation onto. */
-    runtimeSlug: string;
+    executionTargetSlug: string;
     /** Labels a runner MUST advertise (key/value, AND-matched) to be eligible. Defaults to {}. */
     requiredLabels?: CreateRuntimeBindingDtoRequiredLabels;
     /** Labels that DISQUALIFY a runner from running this installation. Defaults to {}. */

package/dist/models/dataClassification.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * Classification CEILING this target accepts, or null for un-configured. Joined monotonically — it may only ever RAISE restriction.
+ */
+export type DataClassification = typeof DataClassification[keyof typeof DataClassification];
+export declare const DataClassification: {
+    readonly public: "public";
+    readonly internal: "internal";
+    readonly confidential: "confidential";
+    readonly secret: "secret";
+    readonly regulated: "regulated";
+};

package/dist/models/dataClassification.js

@@ -0,0 +1,15 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DataClassification = void 0;
+exports.DataClassification = {
+    public: 'public',
+    internal: 'internal',
+    confidential: 'confidential',
+    secret: 'secret',
+    regulated: 'regulated',
+};

package/dist/models/executionTargetResponseDto.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { CredentialDeliveryKind } from './credentialDeliveryKind.js';
+import type { DataClassification } from './dataClassification.js';
+import type { ExecutionTargetResponseDtoLabels } from './executionTargetResponseDtoLabels.js';
+import type { ExecutionTargetStatus } from './executionTargetStatus.js';
+import type { RunnerDataLocality } from './runnerDataLocality.js';
+import type { RunnerTrustTier } from './runnerTrustTier.js';
+import type { RuntimeOperatorKind } from './runtimeOperatorKind.js';
+import type { SpaceKind } from './spaceKind.js';
+export interface ExecutionTargetResponseDto {
+    id: string;
+    slug: string;
+    displayName: string;
+    /** Canonical `xema://…` SpaceRef URI of the owner. THE address — the tier and the tenant fence below are projections of it. */
+    ownerSpaceUri: string;
+    /** The owner TIER, projected from `ownerSpaceUri`. Only `system` and `org` are admissible for a placement target. */
+    ownerSpaceKind: SpaceKind;
+    /** Isolation level this target PROVIDES (RuntimeIsolationLevel wire value). */
+    isolation: string;
+    /** Data locality this target PROVIDES (RunnerDataLocality wire value). */
+    locality: string;
+    /** Minimum runner trust tier admitted (RunnerTrustTier wire value). */
+    minTrustTier: string;
+    operatorKind: RuntimeOperatorKind;
+    /**
+       * The tenant fence. `null` for the org-less System-owned platform target.
+       * @nullable
+       */
+    ownerOrgId: string | null;
+    credentialDelivery: CredentialDeliveryKind;
+    maxTrustTier: RunnerTrustTier;
+    allowedLocalities: RunnerDataLocality[];
+    /** OPEN operator label map declaring what this pool provides. `ExecutionTargetLabel` names the three keys the platform itself reads (region, residency, accelerator); anything else is an operator vocabulary. */
+    labels: ExecutionTargetResponseDtoLabels;
+    /** Classification CEILING this target accepts, or null for un-configured. Joined monotonically — it may only ever RAISE restriction. */
+    maxDataClassification: DataClassification | null;
+    status: ExecutionTargetStatus;
+    /** @minimum 1 */
+    revision: number;
+    /** The fallback target WITHIN its owner space. At most one. */
+    isDefault: boolean;
+    createdBy: string;
+    createdAt: string;
+    updatedAt: string;
+}

package/dist/models/executionTargetResponseDtoDataArrayEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { ExecutionTargetResponseDto } from './executionTargetResponseDto.js';
+export interface ExecutionTargetResponseDtoDataArrayEnvelope {
+    data: ExecutionTargetResponseDto[];
+}

package/dist/models/executionTargetResponseDtoDataArrayEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/executionTargetResponseDtoDataEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { ExecutionTargetResponseDto } from './executionTargetResponseDto.js';
+export interface ExecutionTargetResponseDtoDataEnvelope {
+    data: ExecutionTargetResponseDto;
+}

package/dist/models/executionTargetResponseDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/executionTargetResponseDtoLabels.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * OPEN operator label map declaring what this pool provides. `ExecutionTargetLabel` names the three keys the platform itself reads (region, residency, accelerator); anything else is an operator vocabulary.
+ */
+export type ExecutionTargetResponseDtoLabels = {
+    [key: string]: string;
+};

package/dist/models/executionTargetResponseDtoLabels.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/{runtimeResponseDtoStatus.d.ts → executionTargetStatus.d.ts}

@@ -3,8 +3,8 @@
  * Biome Host API
  * OpenAPI spec version: 0.1.1
  */
-export type RuntimeResponseDtoStatus = typeof RuntimeResponseDtoStatus[keyof typeof RuntimeResponseDtoStatus];
-export declare const RuntimeResponseDtoStatus: {
+export type ExecutionTargetStatus = typeof ExecutionTargetStatus[keyof typeof ExecutionTargetStatus];
+export declare const ExecutionTargetStatus: {
     readonly provisioning: "provisioning";
     readonly active: "active";
     readonly draining: "draining";

package/dist/models/{runtimeResponseDtoStatus.js → executionTargetStatus.js}

@@ -5,8 +5,8 @@
  * OpenAPI spec version: 0.1.1
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RuntimeResponseDtoStatus = void 0;
-exports.RuntimeResponseDtoStatus = {
+exports.ExecutionTargetStatus = void 0;
+exports.ExecutionTargetStatus = {
     provisioning: 'provisioning',
     active: 'active',
     draining: 'draining',

package/dist/models/index.d.ts

@@ -82,16 +82,24 @@ export * from './contributionKind';
 export * from './contributionSyncStatus';
 export * from './createBiomeInstallationDto';
 export * from './createBiomeInstallationDtoConfigJson';
+export * from './createExecutionTargetDto';
+export * from './createExecutionTargetDtoLabels';
 export * from './createRunnerEnrollmentDto';
 export * from './createRuntimeBindingDto';
 export * from './createRuntimeBindingDtoDeniedLabels';
 export * from './createRuntimeBindingDtoRequiredLabels';
 export * from './credentialDeliveryKind';
+export * from './dataClassification';
 export * from './errorDetailsDto';
 export * from './errorDetailsDtoDetails';
 export * from './errorPayloadDto';
 export * from './errorResponseDto';
 export * from './exchangeRunnerEnrollmentChallengeDto';
+export * from './executionTargetResponseDto';
+export * from './executionTargetResponseDtoDataArrayEnvelope';
+export * from './executionTargetResponseDtoDataEnvelope';
+export * from './executionTargetResponseDtoLabels';
+export * from './executionTargetStatus';
 export * from './inFlightRevocationPolicy';
 export * from './lifecycleTransitionAckDto';
 export * from './orgBiomeEffectiveEnablementDto';
@@ -127,6 +135,7 @@ export * from './runnerEnrollmentManagementRotationResponseDto';
 export * from './runnerEnrollmentManagementRotationResponseDtoDataEnvelope';
 export * from './runnerEnrollmentObservedState';
 export * from './runnerEnrollmentResponseDto';
+export * from './runnerKind';
 export * from './runnerTrustTier';
 export * from './runtimeBindingDesiredState';
 export * from './runtimeBindingManagementAction';
@@ -136,10 +145,8 @@ export * from './runtimeBindingResponseDtoDataArrayEnvelope';
 export * from './runtimeBindingResponseDtoDataEnvelope';
 export * from './runtimeBindingResponseDtoDeniedLabels';
 export * from './runtimeBindingResponseDtoRequiredLabels';
+export * from './runtimeIsolationLevel';
 export * from './runtimeOperatorKind';
-export * from './runtimeResponseDto';
-export * from './runtimeResponseDtoDataArrayEnvelope';
-export * from './runtimeResponseDtoStatus';
 export * from './scaffoldTemplate';
 export * from './serverBiomeRegistrationResponseDto';
 export * from './serverBiomeRegistrationResponseDtoContributionPaths';
@@ -154,11 +161,14 @@ export * from './serviceMeshEntryDto';
 export * from './serviceMeshResponseDto';
 export * from './serviceMeshResponseDtoDataEnvelope';
 export * from './setBiomeAvailabilityDto';
+export * from './spaceKind';
 export * from './subjectKind';
 export * from './surfaceKindValidationDto';
 export * from './surfaceKindValidationDtoDataEnvelope';
 export * from './surfaceKindValidationDtoManifest';
 export * from './updateBiomeInstallationResourcesDto';
+export * from './updateExecutionTargetDto';
+export * from './updateExecutionTargetDtoLabels';
 export * from './updateOrgBiomeEnablementDto';
 export * from './updateOrgBiomeInstallationDto';
 export * from './updateOrgBiomeInstallationDtoConfigJson';

package/dist/models/index.js

@@ -99,16 +99,24 @@ __exportStar(require("./contributionKind"), exports);
 __exportStar(require("./contributionSyncStatus"), exports);
 __exportStar(require("./createBiomeInstallationDto"), exports);
 __exportStar(require("./createBiomeInstallationDtoConfigJson"), exports);
+__exportStar(require("./createExecutionTargetDto"), exports);
+__exportStar(require("./createExecutionTargetDtoLabels"), exports);
 __exportStar(require("./createRunnerEnrollmentDto"), exports);
 __exportStar(require("./createRuntimeBindingDto"), exports);
 __exportStar(require("./createRuntimeBindingDtoDeniedLabels"), exports);
 __exportStar(require("./createRuntimeBindingDtoRequiredLabels"), exports);
 __exportStar(require("./credentialDeliveryKind"), exports);
+__exportStar(require("./dataClassification"), exports);
 __exportStar(require("./errorDetailsDto"), exports);
 __exportStar(require("./errorDetailsDtoDetails"), exports);
 __exportStar(require("./errorPayloadDto"), exports);
 __exportStar(require("./errorResponseDto"), exports);
 __exportStar(require("./exchangeRunnerEnrollmentChallengeDto"), exports);
+__exportStar(require("./executionTargetResponseDto"), exports);
+__exportStar(require("./executionTargetResponseDtoDataArrayEnvelope"), exports);
+__exportStar(require("./executionTargetResponseDtoDataEnvelope"), exports);
+__exportStar(require("./executionTargetResponseDtoLabels"), exports);
+__exportStar(require("./executionTargetStatus"), exports);
 __exportStar(require("./inFlightRevocationPolicy"), exports);
 __exportStar(require("./lifecycleTransitionAckDto"), exports);
 __exportStar(require("./orgBiomeEffectiveEnablementDto"), exports);
@@ -144,6 +152,7 @@ __exportStar(require("./runnerEnrollmentManagementRotationResponseDto"), exports
 __exportStar(require("./runnerEnrollmentManagementRotationResponseDtoDataEnvelope"), exports);
 __exportStar(require("./runnerEnrollmentObservedState"), exports);
 __exportStar(require("./runnerEnrollmentResponseDto"), exports);
+__exportStar(require("./runnerKind"), exports);
 __exportStar(require("./runnerTrustTier"), exports);
 __exportStar(require("./runtimeBindingDesiredState"), exports);
 __exportStar(require("./runtimeBindingManagementAction"), exports);
@@ -153,10 +162,8 @@ __exportStar(require("./runtimeBindingResponseDtoDataArrayEnvelope"), exports);
 __exportStar(require("./runtimeBindingResponseDtoDataEnvelope"), exports);
 __exportStar(require("./runtimeBindingResponseDtoDeniedLabels"), exports);
 __exportStar(require("./runtimeBindingResponseDtoRequiredLabels"), exports);
+__exportStar(require("./runtimeIsolationLevel"), exports);
 __exportStar(require("./runtimeOperatorKind"), exports);
-__exportStar(require("./runtimeResponseDto"), exports);
-__exportStar(require("./runtimeResponseDtoDataArrayEnvelope"), exports);
-__exportStar(require("./runtimeResponseDtoStatus"), exports);
 __exportStar(require("./scaffoldTemplate"), exports);
 __exportStar(require("./serverBiomeRegistrationResponseDto"), exports);
 __exportStar(require("./serverBiomeRegistrationResponseDtoContributionPaths"), exports);
@@ -171,11 +178,14 @@ __exportStar(require("./serviceMeshEntryDto"), exports);
 __exportStar(require("./serviceMeshResponseDto"), exports);
 __exportStar(require("./serviceMeshResponseDtoDataEnvelope"), exports);
 __exportStar(require("./setBiomeAvailabilityDto"), exports);
+__exportStar(require("./spaceKind"), exports);
 __exportStar(require("./subjectKind"), exports);
 __exportStar(require("./surfaceKindValidationDto"), exports);
 __exportStar(require("./surfaceKindValidationDtoDataEnvelope"), exports);
 __exportStar(require("./surfaceKindValidationDtoManifest"), exports);
 __exportStar(require("./updateBiomeInstallationResourcesDto"), exports);
+__exportStar(require("./updateExecutionTargetDto"), exports);
+__exportStar(require("./updateExecutionTargetDtoLabels"), exports);
 __exportStar(require("./updateOrgBiomeEnablementDto"), exports);
 __exportStar(require("./updateOrgBiomeInstallationDto"), exports);
 __exportStar(require("./updateOrgBiomeInstallationDtoConfigJson"), exports);

package/dist/models/runnerEnrollmentManagementResponseDto.d.ts

@@ -8,13 +8,14 @@ import type { RunnerDataLocality } from './runnerDataLocality.js';
 import type { RunnerEnrollmentDesiredState } from './runnerEnrollmentDesiredState.js';
 import type { RunnerEnrollmentManagementAction } from './runnerEnrollmentManagementAction.js';
 import type { RunnerEnrollmentObservedState } from './runnerEnrollmentObservedState.js';
+import type { RunnerKind } from './runnerKind.js';
 import type { RunnerTrustTier } from './runnerTrustTier.js';
 import type { RuntimeOperatorKind } from './runtimeOperatorKind.js';
 export interface RunnerEnrollmentManagementResponseDto {
     id: string;
     /** @minimum 1 */
     revision: number;
-    runtimeId: string;
+    executionTargetId: string;
     runnerId: string;
     /** @nullable */
     principalId: string | null;
@@ -27,6 +28,8 @@ export interface RunnerEnrollmentManagementResponseDto {
     allowedEnvironmentIds: string[];
     maxTrustTier: RunnerTrustTier;
     allowedLocalities: RunnerDataLocality[];
+    /** Runner kinds this enrollment permits. Capped at attestation; a runner asserting a kind outside this set is REFUSED, never signed. */
+    allowedKinds: RunnerKind[];
     attestationRevision: number;
     inFlightPolicy: InFlightRevocationPolicy;
     operatorKind: RuntimeOperatorKind;

package/dist/models/runnerEnrollmentResponseDto.d.ts

@@ -7,13 +7,14 @@ import type { InFlightRevocationPolicy } from './inFlightRevocationPolicy.js';
 import type { RunnerDataLocality } from './runnerDataLocality.js';
 import type { RunnerEnrollmentDesiredState } from './runnerEnrollmentDesiredState.js';
 import type { RunnerEnrollmentObservedState } from './runnerEnrollmentObservedState.js';
+import type { RunnerKind } from './runnerKind.js';
 import type { RunnerTrustTier } from './runnerTrustTier.js';
 import type { RuntimeOperatorKind } from './runtimeOperatorKind.js';
 export interface RunnerEnrollmentResponseDto {
     id: string;
     /** @minimum 1 */
     revision: number;
-    runtimeId: string;
+    executionTargetId: string;
     runnerId: string;
     /** @nullable */
     principalId: string | null;
@@ -26,6 +27,8 @@ export interface RunnerEnrollmentResponseDto {
     allowedEnvironmentIds: string[];
     maxTrustTier: RunnerTrustTier;
     allowedLocalities: RunnerDataLocality[];
+    /** Runner kinds this enrollment permits. Capped at attestation; a runner asserting a kind outside this set is REFUSED, never signed. */
+    allowedKinds: RunnerKind[];
     attestationRevision: number;
     inFlightPolicy: InFlightRevocationPolicy;
     operatorKind: RuntimeOperatorKind;

package/dist/models/runnerKind.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * Runner kinds this enrollment permits. Capped at attestation; a runner asserting a kind outside this set is REFUSED, never signed.
+ */
+export type RunnerKind = typeof RunnerKind[keyof typeof RunnerKind];
+export declare const RunnerKind: {
+    readonly local: "local";
+    readonly cloud: "cloud";
+    readonly 'customer-edge': "customer-edge";
+    readonly gpu: "gpu";
+    readonly sandbox: "sandbox";
+    readonly ci: "ci";
+    readonly 'mcp-external': "mcp-external";
+};

package/dist/models/runnerKind.js

@@ -0,0 +1,17 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RunnerKind = void 0;
+exports.RunnerKind = {
+    local: 'local',
+    cloud: 'cloud',
+    'customer-edge': 'customer-edge',
+    gpu: 'gpu',
+    sandbox: 'sandbox',
+    ci: 'ci',
+    'mcp-external': 'mcp-external',
+};

package/dist/models/runtimeBindingResponseDto.d.ts

@@ -12,9 +12,9 @@ import type { RuntimeBindingResponseDtoRequiredLabels } from './runtimeBindingRe
 export interface RuntimeBindingResponseDto {
     id: string;
     installationId: string;
-    runtimeId: string;
+    executionTargetId: string;
     /** Denormalized slug of the bound runtime, for client convenience. */
-    runtimeSlug: string;
+    executionTargetSlug: string;
     /** Labels a runner MUST advertise (key/value, AND-matched) to be eligible. */
     requiredLabels: RuntimeBindingResponseDtoRequiredLabels;
     /** Labels that DISQUALIFY a runner from running this installation. */

package/dist/models/runtimeIsolationLevel.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * Isolation boundary this target PROVIDES.
+ */
+export type RuntimeIsolationLevel = typeof RuntimeIsolationLevel[keyof typeof RuntimeIsolationLevel];
+export declare const RuntimeIsolationLevel: {
+    readonly none: "none";
+    readonly process: "process";
+    readonly container: "container";
+    readonly vm: "vm";
+};

package/dist/models/runtimeIsolationLevel.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RuntimeIsolationLevel = void 0;
+exports.RuntimeIsolationLevel = {
+    none: 'none',
+    process: 'process',
+    container: 'container',
+    vm: 'vm',
+};

package/dist/models/spaceKind.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * The owner TIER, projected from `ownerSpaceUri`. Only `system` and `org` are admissible for a placement target.
+ */
+export type SpaceKind = typeof SpaceKind[keyof typeof SpaceKind];
+export declare const SpaceKind: {
+    readonly system: "system";
+    readonly org: "org";
+    readonly project: "project";
+    readonly app: "app";
+    readonly session: "session";
+    readonly biome: "biome";
+    readonly user: "user";
+};

package/dist/models/spaceKind.js

@@ -0,0 +1,17 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SpaceKind = void 0;
+exports.SpaceKind = {
+    system: 'system',
+    org: 'org',
+    project: 'project',
+    app: 'app',
+    session: 'session',
+    biome: 'biome',
+    user: 'user',
+};

package/dist/models/updateExecutionTargetDto.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+import type { DataClassification } from './dataClassification.js';
+import type { ExecutionTargetStatus } from './executionTargetStatus.js';
+import type { RunnerDataLocality } from './runnerDataLocality.js';
+import type { RunnerTrustTier } from './runnerTrustTier.js';
+import type { RuntimeIsolationLevel } from './runtimeIsolationLevel.js';
+import type { UpdateExecutionTargetDtoLabels } from './updateExecutionTargetDtoLabels.js';
+export interface UpdateExecutionTargetDto {
+    displayName?: string;
+    isolation?: RuntimeIsolationLevel;
+    locality?: RunnerDataLocality;
+    minTrustTier?: RunnerTrustTier;
+    maxTrustTier?: RunnerTrustTier;
+    allowedLocalities?: RunnerDataLocality[];
+    /** Replaces the whole label map — never merged. A partial merge would make a label impossible to remove. */
+    labels?: UpdateExecutionTargetDtoLabels;
+    /** Classification CEILING. Explicit `null` CLEARS it back to un-configured; omitting the field leaves it untouched. */
+    maxDataClassification?: DataClassification | null;
+    /** Lifecycle. `draining` is how an org takes its own pool away without stranding work: the target stops being SELECTED while its queue is still polled. */
+    status?: ExecutionTargetStatus;
+    /** Make this the fallback WITHIN its owner space. At most one per space; setting it demotes the incumbent in the same transaction. */
+    isDefault?: boolean;
+}

package/dist/models/updateExecutionTargetDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/updateExecutionTargetDtoLabels.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * Replaces the whole label map — never merged. A partial merge would make a label impossible to remove.
+ */
+export type UpdateExecutionTargetDtoLabels = {
+    [key: string]: string;
+};

package/dist/models/updateExecutionTargetDtoLabels.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Biome Host API
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/biome-host-api-client",
-  "version": "0.3.7",
+  "version": "0.3.10",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
@@ -19,7 +19,7 @@
     "service": "biome-host-api",
     "biome": "biome-host",
     "target": "server",
-    "generator": "@xemahq/api-client-generator@0.12.1",
+    "generator": "@xemahq/api-client-generator@0.14.1",
     "source": "openapi.public.json"
   },
   "license": "LicenseRef-Xema-BSL-1.1",

package/dist/endpoints/biome-runtimes/biome-runtimes.d.ts

@@ -1,11 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Biome Host API
- * OpenAPI spec version: 0.1.1
- */
-import type { RuntimeResponseDtoDataArrayEnvelope } from '../../models';
-export declare const getRuntimesControllerListUrl: () => string;
-/**
- * @summary List the registered biome runtimes
- */
-export declare const runtimesControllerList: (options?: RequestInit) => Promise<RuntimeResponseDtoDataArrayEnvelope>;

package/dist/endpoints/biome-runtimes/biome-runtimes.js

@@ -1,18 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.runtimesControllerList = exports.getRuntimesControllerListUrl = void 0;
-const custom_fetch_1 = require("../../custom-fetch");
-const getRuntimesControllerListUrl = () => {
-    return `/runtimes`;
-};
-exports.getRuntimesControllerListUrl = getRuntimesControllerListUrl;
-/**
- * @summary List the registered biome runtimes
- */
-const runtimesControllerList = async (options) => {
-    return (0, custom_fetch_1.customFetch)((0, exports.getRuntimesControllerListUrl)(), {
-        ...options,
-        method: 'GET'
-    });
-};
-exports.runtimesControllerList = runtimesControllerList;

package/dist/models/runtimeResponseDto.d.ts

@@ -1,34 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Biome Host API
- * OpenAPI spec version: 0.1.1
- */
-import type { CredentialDeliveryKind } from './credentialDeliveryKind.js';
-import type { RunnerDataLocality } from './runnerDataLocality.js';
-import type { RunnerTrustTier } from './runnerTrustTier.js';
-import type { RuntimeOperatorKind } from './runtimeOperatorKind.js';
-import type { RuntimeResponseDtoStatus } from './runtimeResponseDtoStatus.js';
-export interface RuntimeResponseDto {
-    id: string;
-    slug: string;
-    displayName: string;
-    /** Isolation level this runtime PROVIDES (RuntimeIsolationLevel wire value). */
-    isolation: string;
-    /** Data locality this runtime PROVIDES (DataLocality wire value). */
-    locality: string;
-    /** Minimum runner trust tier admitted (RunnerTrustTier wire value). */
-    minTrustTier: string;
-    operatorKind: RuntimeOperatorKind;
-    /** @nullable */
-    ownerOrgId: string | null;
-    credentialDelivery: CredentialDeliveryKind;
-    maxTrustTier: RunnerTrustTier;
-    allowedLocalities: RunnerDataLocality[];
-    status: RuntimeResponseDtoStatus;
-    /** @minimum 1 */
-    revision: number;
-    isDefault: boolean;
-    createdBy: string;
-    createdAt: string;
-    updatedAt: string;
-}

package/dist/models/runtimeResponseDtoDataArrayEnvelope.d.ts

@@ -1,9 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Biome Host API
- * OpenAPI spec version: 0.1.1
- */
-import type { RuntimeResponseDto } from './runtimeResponseDto.js';
-export interface RuntimeResponseDtoDataArrayEnvelope {
-    data: RuntimeResponseDto[];
-}