@xemahq/biome-host-operator-api-client 0.1.1

package/README.md

@@ -0,0 +1,62 @@
+<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. -->
+<p align="center">
+<svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/biome-host-operator-api-client">
+  <rect width="680" height="120" rx="14" fill="#0B1020"/>
+  <g transform="translate(28,34)">
+    <path d="M26 0 L52 15 L52 45 L26 60 L0 45 L0 15 Z" fill="#14B8A6" opacity="0.18"/>
+    <path d="M26 12 L41 21 L41 39 L26 48 L11 39 L11 21 Z" fill="#14B8A6"/>
+  </g>
+  <text x="92" y="52" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="22" fill="#F8FAFC" font-weight="700">@xemahq/biome-host-operator-api-client</text>
+  <text x="92" y="80" font-family="ui-sans-serif,system-ui,sans-serif" font-size="15" fill="#94A3B8">Typed, generated operator HTTP client for the Biome Host API.</text>
+  <text x="652" y="105" text-anchor="end" font-family="ui-sans-serif,system-ui,sans-serif" font-size="12" fill="#475569">xema.dev</text>
+</svg>
+</p>
+
+<p align="center">
+  <a href="https://xema.dev">Website</a> &middot;
+  <a href="https://www.npmjs.com/package/@xemahq/biome-host-operator-api-client">npm</a>
+</p>
+
+<p align="center">
+  <img alt="npm" src="https://img.shields.io/npm/v/%40xemahq%2Fbiome-host-operator-api-client?color=2563eb&label=npm">
+  <img alt="license" src="https://img.shields.io/npm/l/%40xemahq%2Fbiome-host-operator-api-client?color=10b981">
+  <img alt="types" src="https://img.shields.io/npm/types/%40xemahq%2Fbiome-host-operator-api-client?color=3178c6">
+</p>
+
+# @xemahq/biome-host-operator-api-client
+
+> Typed, generated operator HTTP client for the Biome Host API.
+
+## Overview
+
+Auto-generated TypeScript client for the **Biome Host API**. It exports typed
+request functions and response models that mirror the service's OpenAPI surface,
+so callers get end-to-end type safety without hand-writing HTTP calls. This
+package is produced by `@xemahq/api-client-generator` and regenerated whenever
+the service's API changes — do not edit it by hand.
+
+## When to use it
+
+- Use it from any TypeScript service or app that calls the Biome Host API over HTTP.
+- You get compile-time types for every endpoint and payload; regenerate to pick
+  up API changes rather than editing the client.
+
+## Installation
+
+```bash
+pnpm add @xemahq/biome-host-operator-api-client
+```
+
+## Usage
+
+```ts
+// Every endpoint function and response model is exported from the package root.
+import * as client from '@xemahq/biome-host-operator-api-client';
+```
+
+Call the typed endpoint functions; request and response shapes are fully typed
+from the service's OpenAPI spec.
+
+## License
+
+Proprietary — &copy; Xema. All rights reserved. — [xema.dev](https://xema.dev)

package/dist/custom-fetch.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Configurable fetch wrapper for Orval-generated clients.
+ *
+ * Consumers must call `configureClient()` before using any endpoint function.
+ * The baseUrl is prepended to the relative paths generated by Orval.
+ *
+ * Features:
+ *   - Automatic bearer-token injection via `getAuthToken` callback
+ *   - Per-request header injection via `getHeaders` callback
+ *   - Automatic 401 handling via `onUnauthorized` callback (single retry)
+ *   - Exponential-backoff retry for transient failures (429, 502, 503, 504)
+ *   - Typed `ClientError` for non-2xx responses
+ *   - Per-call header overrides (take precedence over global headers)
+ *
+ * @example
+ *   configureClient({
+ *     baseUrl: 'http://governance-api:3400',
+ *     getAuthToken: () => identityBootstrapService.getAccessToken(),
+ *     getHeaders: () => ({ 'X-Xema-Org-Id': orgId, 'X-Correlation-Id': crypto.randomUUID() }),
+ *   });
+ */
+export interface ClientConfig {
+    /**
+     * Static base URL (e.g. 'http://localhost:3140') — no trailing slash.
+     * Mutually exclusive with `baseUrlResolver`; exactly one MUST be set.
+     */
+    baseUrl?: string;
+    /**
+     * Per-request base-URL resolver. When set, the peer URL is resolved from
+     * the service registry on EVERY request (boot-order-safe). Wired by
+     * `configureOrvalClientResolved` from `@xemahq/platform-common`.
+     */
+    baseUrlResolver?: () => string | Promise<string>;
+    /** Optional async callback to get an auth token. Auto-sets Authorization header on every request. */
+    getAuthToken?: () => Promise<string>;
+    /** Optional callback returning headers to inject on every request. Per-call headers take precedence. */
+    getHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+    /** Optional callback invoked on 401 before a single retry (e.g. force-refresh auth token). */
+    onUnauthorized?: () => Promise<void>;
+    /** Maximum retry attempts for transient failures (default: 3). Set to 0 to disable retries. */
+    maxRetries?: number;
+}
+export declare class ClientError extends Error {
+    readonly status: number;
+    readonly url: string;
+    readonly body: unknown;
+    constructor(status: number, url: string, body: unknown);
+}
+export declare function configureClient(config: ClientConfig): void;
+export declare function getClientConfig(): ClientConfig;
+export declare const customFetch: <T>(url: string, options: RequestInit) => Promise<T>;
+export default customFetch;

package/dist/custom-fetch.js

@@ -0,0 +1,152 @@
+"use strict";
+/**
+ * Configurable fetch wrapper for Orval-generated clients.
+ *
+ * Consumers must call `configureClient()` before using any endpoint function.
+ * The baseUrl is prepended to the relative paths generated by Orval.
+ *
+ * Features:
+ *   - Automatic bearer-token injection via `getAuthToken` callback
+ *   - Per-request header injection via `getHeaders` callback
+ *   - Automatic 401 handling via `onUnauthorized` callback (single retry)
+ *   - Exponential-backoff retry for transient failures (429, 502, 503, 504)
+ *   - Typed `ClientError` for non-2xx responses
+ *   - Per-call header overrides (take precedence over global headers)
+ *
+ * @example
+ *   configureClient({
+ *     baseUrl: 'http://governance-api:3400',
+ *     getAuthToken: () => identityBootstrapService.getAccessToken(),
+ *     getHeaders: () => ({ 'X-Xema-Org-Id': orgId, 'X-Correlation-Id': crypto.randomUUID() }),
+ *   });
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.customFetch = exports.ClientError = void 0;
+exports.configureClient = configureClient;
+exports.getClientConfig = getClientConfig;
+class ClientError extends Error {
+    status;
+    url;
+    body;
+    constructor(status, url, body) {
+        super(`HTTP ${status} from ${url}`);
+        this.status = status;
+        this.url = url;
+        this.body = body;
+        this.name = 'ClientError';
+    }
+}
+exports.ClientError = ClientError;
+let clientConfig = null;
+function configureClient(config) {
+    clientConfig = config;
+}
+function getClientConfig() {
+    if (!clientConfig) {
+        throw new Error('Client not configured. Call configureClient({ baseUrl }) before using endpoint functions.');
+    }
+    return clientConfig;
+}
+const RETRYABLE_STATUSES = [429, 502, 503, 504];
+async function buildHeaders(config, callerHeaders) {
+    const headers = new Headers(callerHeaders);
+    // Global headers from config (caller-provided headers take precedence)
+    if (config.getHeaders) {
+        const globalHeaders = await Promise.resolve(config.getHeaders());
+        for (const [key, value] of Object.entries(globalHeaders)) {
+            if (!headers.has(key)) {
+                headers.set(key, value);
+            }
+        }
+    }
+    // Auth token (caller or global headers take precedence)
+    if (config.getAuthToken && !headers.has('Authorization')) {
+        const token = await config.getAuthToken();
+        headers.set('Authorization', `Bearer ${token}`);
+    }
+    return headers;
+}
+const customFetch = async (url, options) => {
+    const config = getClientConfig();
+    const base = config.baseUrlResolver
+        ? await config.baseUrlResolver()
+        : config.baseUrl;
+    if (base === undefined) {
+        throw new Error('Client not configured: set baseUrl or baseUrlResolver via configureClient().');
+    }
+    const fullUrl = `${base}${url}`;
+    const maxRetries = config.maxRetries ?? 3;
+    const headers = await buildHeaders(config, options.headers);
+    const requestInit = { ...options, headers };
+    let delay = 1000;
+    let lastError;
+    for (let attempt = 0; attempt <= maxRetries; attempt++) {
+        try {
+            const response = await fetch(fullUrl, requestInit);
+            // 401 — invoke onUnauthorized and retry once (outside the transient retry loop)
+            if (response.status === 401 && config.onUnauthorized && attempt === 0) {
+                await config.onUnauthorized();
+                const refreshedHeaders = await buildHeaders(config, options.headers);
+                const retryResponse = await fetch(fullUrl, { ...options, headers: refreshedHeaders });
+                const retryBody = await parseBody(retryResponse);
+                if (retryResponse.status >= 400) {
+                    throw new ClientError(retryResponse.status, fullUrl, retryBody);
+                }
+                return retryBody;
+            }
+            // Non-retryable status — return or throw
+            if (!RETRYABLE_STATUSES.includes(response.status) || attempt >= maxRetries) {
+                const body = await parseBody(response);
+                if (response.status >= 400) {
+                    throw new ClientError(response.status, fullUrl, body);
+                }
+                return body;
+            }
+            // Retryable — wait and retry
+            const retryAfter = parseRetryAfter(response.headers.get('Retry-After'));
+            const waitMs = retryAfter ?? addJitter(delay);
+            await sleep(waitMs);
+            delay = Math.min(delay * 2, 30_000);
+        }
+        catch (error) {
+            if (error instanceof ClientError)
+                throw error; // Don't retry client errors
+            lastError = error instanceof Error ? error : new Error(String(error));
+            if (attempt >= maxRetries)
+                throw lastError;
+            const waitMs = addJitter(delay);
+            await sleep(waitMs);
+            delay = Math.min(delay * 2, 30_000);
+        }
+    }
+    throw lastError ?? new Error(`All retries exhausted for ${fullUrl}`);
+};
+exports.customFetch = customFetch;
+async function parseBody(response) {
+    const contentType = response.headers.get('content-type');
+    if (contentType?.includes('application/json')) {
+        return response.json();
+    }
+    if (response.status === 204) {
+        return undefined;
+    }
+    return response.text();
+}
+function parseRetryAfter(value) {
+    if (!value)
+        return undefined;
+    const seconds = Number(value);
+    if (!isNaN(seconds) && seconds >= 0)
+        return seconds * 1000;
+    const date = new Date(value);
+    if (!isNaN(date.getTime()))
+        return Math.max(0, date.getTime() - Date.now());
+    return undefined;
+}
+function addJitter(delay) {
+    return delay + (Math.random() * 2 - 1) * delay * 0.25;
+}
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+exports.default = exports.customFetch;

package/dist/endpoints/platform-license/platform-license.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+import type { LicensePostureResponseDtoDataEnvelope } from '../../models';
+export declare const getLicensePostureControllerGetUrl: () => string;
+/**
+ * @summary This installation’s licensing posture: which license is in force, where it sits on the expiry ladder, the effective edition and feature flags, whether the running distribution is entitled, and every warning an operator should act on. Never returns the license token. Requires the platform_admin realm role.
+ */
+export declare const licensePostureControllerGet: (options?: RequestInit) => Promise<LicensePostureResponseDtoDataEnvelope>;

package/dist/endpoints/platform-license/platform-license.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.licensePostureControllerGet = exports.getLicensePostureControllerGetUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getLicensePostureControllerGetUrl = () => {
+    return `/platform/license`;
+};
+exports.getLicensePostureControllerGetUrl = getLicensePostureControllerGetUrl;
+/**
+ * @summary This installation’s licensing posture: which license is in force, where it sits on the expiry ladder, the effective edition and feature flags, whether the running distribution is entitled, and every warning an operator should act on. Never returns the license token. Requires the platform_admin realm role.
+ */
+const licensePostureControllerGet = async (options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getLicensePostureControllerGetUrl)(), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.licensePostureControllerGet = licensePostureControllerGet;

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { configureClient, getClientConfig, ClientError, customFetch, type ClientConfig } from './custom-fetch';
+export * from './models';
+export * from './endpoints/platform-license/platform-license';

package/dist/index.js

@@ -0,0 +1,25 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.customFetch = exports.ClientError = exports.getClientConfig = exports.configureClient = void 0;
+// Auto-generated by @xemahq/api-client-generator — do not edit manually.
+var custom_fetch_1 = require("./custom-fetch");
+Object.defineProperty(exports, "configureClient", { enumerable: true, get: function () { return custom_fetch_1.configureClient; } });
+Object.defineProperty(exports, "getClientConfig", { enumerable: true, get: function () { return custom_fetch_1.getClientConfig; } });
+Object.defineProperty(exports, "ClientError", { enumerable: true, get: function () { return custom_fetch_1.ClientError; } });
+Object.defineProperty(exports, "customFetch", { enumerable: true, get: function () { return custom_fetch_1.customFetch; } });
+__exportStar(require("./models"), exports);
+__exportStar(require("./endpoints/platform-license/platform-license"), exports);

package/dist/models/edition.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * The effective platform edition, projected from the license. `community` on every fail-closed path.
+ */
+export type Edition = typeof Edition[keyof typeof Edition];
+export declare const Edition: {
+    readonly community: "community";
+    readonly enterprise: "enterprise";
+};

package/dist/models/edition.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Edition = void 0;
+exports.Edition = {
+    community: 'community',
+    enterprise: 'enterprise',
+};

package/dist/models/entitlementKey.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * The enterprise feature flags this license actually grants. Empty on a Community edition.
+ */
+export type EntitlementKey = typeof EntitlementKey[keyof typeof EntitlementKey];
+export declare const EntitlementKey: {
+    readonly teamsnested: "teams.nested";
+    readonly teamsdelegatedAdmin: "teams.delegatedAdmin";
+    readonly teamsscim: "teams.scim";
+    readonly rolescustom: "roles.custom";
+    readonly accessrequestWorkflow: "access.requestWorkflow";
+    readonly 'ssooidc-federation': "sso.oidc-federation";
+};

package/dist/models/entitlementKey.js

@@ -0,0 +1,18 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EntitlementKey = void 0;
+exports.EntitlementKey = {
+    teamsnested: 'teams.nested',
+    teamsdelegatedAdmin: 'teams.delegatedAdmin',
+    teamsscim: 'teams.scim',
+    rolescustom: 'roles.custom',
+    accessrequestWorkflow: 'access.requestWorkflow',
+    'ssooidc-federation': 'sso.oidc-federation',
+};

package/dist/models/errorDetailsDto.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+import type { ErrorDetailsDtoDetails } from './errorDetailsDtoDetails.js';
+export interface ErrorDetailsDto {
+    /** @nullable */
+    details: ErrorDetailsDtoDetails;
+}

package/dist/models/errorDetailsDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/errorDetailsDtoDetails.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * @nullable
+ */
+export type ErrorDetailsDtoDetails = {
+    [key: string]: unknown;
+} | null;

package/dist/models/errorDetailsDtoDetails.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/errorPayloadDto.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+import type { ErrorDetailsDto } from './errorDetailsDto.js';
+export interface ErrorPayloadDto {
+    code: string;
+    message: string;
+    details: ErrorDetailsDto | null;
+}

package/dist/models/errorPayloadDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/errorResponseDto.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+import type { ErrorPayloadDto } from './errorPayloadDto.js';
+export interface ErrorResponseDto {
+    error: ErrorPayloadDto;
+}

package/dist/models/errorResponseDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/index.d.ts

@@ -0,0 +1,18 @@
+export * from './edition';
+export * from './entitlementKey';
+export * from './errorDetailsDto';
+export * from './errorDetailsDtoDetails';
+export * from './errorPayloadDto';
+export * from './errorResponseDto';
+export * from './licenseLifecycleStage';
+export * from './licensePostureResponseDto';
+export * from './licensePostureResponseDtoDataEnvelope';
+export * from './licensePostureResponseDtoExpiresAt';
+export * from './licensePostureResponseDtoGraceEndsAt';
+export * from './licenseSource';
+export * from './licenseStatus';
+export * from './licenseTier';
+export * from './licenseVerificationFailureCode';
+export * from './licenseWarningCode';
+export * from './licenseWarningDto';
+export * from './licenseWarningSeverity';

package/dist/models/index.js

@@ -0,0 +1,35 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Auto-generated by tooling/codegen/regenerate-models-barrel.js — do not edit manually.
+__exportStar(require("./edition"), exports);
+__exportStar(require("./entitlementKey"), exports);
+__exportStar(require("./errorDetailsDto"), exports);
+__exportStar(require("./errorDetailsDtoDetails"), exports);
+__exportStar(require("./errorPayloadDto"), exports);
+__exportStar(require("./errorResponseDto"), exports);
+__exportStar(require("./licenseLifecycleStage"), exports);
+__exportStar(require("./licensePostureResponseDto"), exports);
+__exportStar(require("./licensePostureResponseDtoDataEnvelope"), exports);
+__exportStar(require("./licensePostureResponseDtoExpiresAt"), exports);
+__exportStar(require("./licensePostureResponseDtoGraceEndsAt"), exports);
+__exportStar(require("./licenseSource"), exports);
+__exportStar(require("./licenseStatus"), exports);
+__exportStar(require("./licenseTier"), exports);
+__exportStar(require("./licenseVerificationFailureCode"), exports);
+__exportStar(require("./licenseWarningCode"), exports);
+__exportStar(require("./licenseWarningDto"), exports);
+__exportStar(require("./licenseWarningSeverity"), exports);

package/dist/models/licenseLifecycleStage.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * Where the license sits on the expiry ladder: `valid` → `grace` (30 days, fully functional) → `restricted` (no upgrades, no new installs; nothing running is stopped).
+ */
+export type LicenseLifecycleStage = typeof LicenseLifecycleStage[keyof typeof LicenseLifecycleStage];
+export declare const LicenseLifecycleStage: {
+    readonly valid: "valid";
+    readonly grace: "grace";
+    readonly restricted: "restricted";
+};

package/dist/models/licenseLifecycleStage.js

@@ -0,0 +1,15 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LicenseLifecycleStage = void 0;
+exports.LicenseLifecycleStage = {
+    valid: 'valid',
+    grace: 'grace',
+    restricted: 'restricted',
+};

package/dist/models/licensePostureResponseDto.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+import type { Edition } from './edition.js';
+import type { EntitlementKey } from './entitlementKey.js';
+import type { LicenseLifecycleStage } from './licenseLifecycleStage.js';
+import type { LicensePostureResponseDtoExpiresAt } from './licensePostureResponseDtoExpiresAt.js';
+import type { LicensePostureResponseDtoGraceEndsAt } from './licensePostureResponseDtoGraceEndsAt.js';
+import type { LicenseSource } from './licenseSource.js';
+import type { LicenseStatus } from './licenseStatus.js';
+import type { LicenseTier } from './licenseTier.js';
+import type { LicenseVerificationFailureCode } from './licenseVerificationFailureCode.js';
+import type { LicenseWarningDto } from './licenseWarningDto.js';
+import type { LicenseWarningSeverity } from './licenseWarningSeverity.js';
+export interface LicensePostureResponseDto {
+    /** Whether a license verified at all. `false` means the deployment can prove nothing — enterprise features are off and new biome installs are refused, while everything already running keeps running. */
+    licensed: boolean;
+    /** Which license was used: one the operator supplied, or the open-source license compiled into this build (there is always a license — decision D1). */
+    source: LicenseSource;
+    /** The effective platform edition, projected from the license. `community` on every fail-closed path. */
+    edition: Edition;
+    /** The enterprise feature flags this license actually grants. Empty on a Community edition. */
+    entitledFeatures: EntitlementKey[];
+    /**
+       * The distribution this deployment is running. `null` when it declares none (no distribution lock mounted), in which case the edition cannot be checked at all.
+       * @nullable
+       */
+    distributionId: string | null;
+    /** Whether the license entitles RUNNING that distribution (decision D6). Mirroring the images does not confer the right to run them. */
+    distributionEntitled: boolean;
+    /** Everything wrong or soon-to-be-wrong, worst included. Empty means a healthy posture. */
+    warnings: LicenseWarningDto[];
+    /** The single worst warning severity, for a caller with one badge to choose. `null` when there is nothing to report — deliberately not an "ok" severity, so "no news" cannot be rendered as reassurance. */
+    worstSeverity?: LicenseWarningSeverity | null;
+    /** Issuer-assigned license id. */
+    licenseId?: string;
+    /** The licensed customer id. */
+    customerId?: string;
+    /** The licensed customer name. */
+    customerName?: string;
+    /** Commercial classification only. A tier grants nothing on its own — everything permitted is enumerated in the license entitlements. */
+    tier?: LicenseTier;
+    /** Effective status. A license claiming `active` past its expiry resolves to `expired` — the clock can only ever make a license worse. */
+    status?: LicenseStatus;
+    /** Where the license sits on the expiry ladder: `valid` → `grace` (30 days, fully functional) → `restricted` (no upgrades, no new installs; nothing running is stopped). */
+    stage?: LicenseLifecycleStage;
+    /**
+       * RFC 3339 expiry, or null for a perpetual license.
+       * @nullable
+       */
+    expiresAt?: LicensePostureResponseDtoExpiresAt;
+    /**
+       * RFC 3339 instant the grace window closes, or null when perpetual.
+       * @nullable
+       */
+    graceEndsAt?: LicensePostureResponseDtoGraceEndsAt;
+    /** The license is dated in the future beyond the skew tolerance and grants nothing yet. */
+    notYetValid?: boolean;
+    /** The system clock is behind the latest instant this process observed. Reported, never acted on — disconnected hardware genuinely drifts. */
+    clockRollbackDetected?: boolean;
+    /** Why verification refused the license. */
+    verificationFailure?: LicenseVerificationFailureCode;
+    /** The verifier’s detail. Names the offending field; never includes key material. */
+    failureDetail?: string;
+    /** What a cluster operator should do about it. Never empty. */
+    remediation?: string;
+}

package/dist/models/licensePostureResponseDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/licensePostureResponseDtoDataEnvelope.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+import type { LicensePostureResponseDto } from './licensePostureResponseDto.js';
+export interface LicensePostureResponseDtoDataEnvelope {
+    data: LicensePostureResponseDto;
+}

package/dist/models/licensePostureResponseDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/licensePostureResponseDtoExpiresAt.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * RFC 3339 expiry, or null for a perpetual license.
+ * @nullable
+ */
+export type LicensePostureResponseDtoExpiresAt = {
+    [key: string]: unknown;
+} | null;

package/dist/models/licensePostureResponseDtoExpiresAt.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/licensePostureResponseDtoGraceEndsAt.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * RFC 3339 instant the grace window closes, or null when perpetual.
+ * @nullable
+ */
+export type LicensePostureResponseDtoGraceEndsAt = {
+    [key: string]: unknown;
+} | null;

package/dist/models/licensePostureResponseDtoGraceEndsAt.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/licenseSource.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * Which license was used: one the operator supplied, or the open-source license compiled into this build (there is always a license — decision D1).
+ */
+export type LicenseSource = typeof LicenseSource[keyof typeof LicenseSource];
+export declare const LicenseSource: {
+    readonly customer: "customer";
+    readonly 'embedded-open-source': "embedded-open-source";
+};

package/dist/models/licenseSource.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LicenseSource = void 0;
+exports.LicenseSource = {
+    customer: 'customer',
+    'embedded-open-source': 'embedded-open-source',
+};

package/dist/models/licenseStatus.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * Effective status. A license claiming `active` past its expiry resolves to `expired` — the clock can only ever make a license worse.
+ */
+export type LicenseStatus = typeof LicenseStatus[keyof typeof LicenseStatus];
+export declare const LicenseStatus: {
+    readonly active: "active";
+    readonly expired: "expired";
+    readonly revoked: "revoked";
+    readonly suspended: "suspended";
+};

package/dist/models/licenseStatus.js

@@ -0,0 +1,16 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LicenseStatus = void 0;
+exports.LicenseStatus = {
+    active: 'active',
+    expired: 'expired',
+    revoked: 'revoked',
+    suspended: 'suspended',
+};

package/dist/models/licenseTier.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * Commercial classification only. A tier grants nothing on its own — everything permitted is enumerated in the license entitlements.
+ */
+export type LicenseTier = typeof LicenseTier[keyof typeof LicenseTier];
+export declare const LicenseTier: {
+    readonly 'open-source': "open-source";
+    readonly 'self-hosted-commercial': "self-hosted-commercial";
+    readonly appliance: "appliance";
+};

package/dist/models/licenseTier.js

@@ -0,0 +1,15 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LicenseTier = void 0;
+exports.LicenseTier = {
+    'open-source': 'open-source',
+    'self-hosted-commercial': 'self-hosted-commercial',
+    appliance: 'appliance',
+};

package/dist/models/licenseVerificationFailureCode.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * Why verification refused the license.
+ */
+export type LicenseVerificationFailureCode = typeof LicenseVerificationFailureCode[keyof typeof LicenseVerificationFailureCode];
+export declare const LicenseVerificationFailureCode: {
+    readonly 'malformed-token': "malformed-token";
+    readonly 'malformed-header': "malformed-header";
+    readonly 'trust-store-empty': "trust-store-empty";
+    readonly 'unknown-key-id': "unknown-key-id";
+    readonly 'invalid-signature': "invalid-signature";
+    readonly 'malformed-claims': "malformed-claims";
+    readonly 'unsupported-claims-version': "unsupported-claims-version";
+    readonly 'issuer-mismatch': "issuer-mismatch";
+};

package/dist/models/licenseVerificationFailureCode.js

@@ -0,0 +1,20 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LicenseVerificationFailureCode = void 0;
+exports.LicenseVerificationFailureCode = {
+    'malformed-token': 'malformed-token',
+    'malformed-header': 'malformed-header',
+    'trust-store-empty': 'trust-store-empty',
+    'unknown-key-id': 'unknown-key-id',
+    'invalid-signature': 'invalid-signature',
+    'malformed-claims': 'malformed-claims',
+    'unsupported-claims-version': 'unsupported-claims-version',
+    'issuer-mismatch': 'issuer-mismatch',
+};

package/dist/models/licenseWarningCode.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * WHAT is wrong. Render from this, never by parsing the message.
+ */
+export type LicenseWarningCode = typeof LicenseWarningCode[keyof typeof LicenseWarningCode];
+export declare const LicenseWarningCode: {
+    readonly 'license-expiring-soon': "license-expiring-soon";
+    readonly 'license-in-grace-period': "license-in-grace-period";
+    readonly 'license-restricted': "license-restricted";
+    readonly 'license-suspended': "license-suspended";
+    readonly 'license-revoked': "license-revoked";
+    readonly 'license-not-yet-valid': "license-not-yet-valid";
+    readonly 'license-clock-rollback': "license-clock-rollback";
+    readonly 'license-unverifiable': "license-unverifiable";
+    readonly 'license-distribution-not-entitled': "license-distribution-not-entitled";
+    readonly 'license-distribution-undeclared': "license-distribution-undeclared";
+};

package/dist/models/licenseWarningCode.js

@@ -0,0 +1,22 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LicenseWarningCode = void 0;
+exports.LicenseWarningCode = {
+    'license-expiring-soon': 'license-expiring-soon',
+    'license-in-grace-period': 'license-in-grace-period',
+    'license-restricted': 'license-restricted',
+    'license-suspended': 'license-suspended',
+    'license-revoked': 'license-revoked',
+    'license-not-yet-valid': 'license-not-yet-valid',
+    'license-clock-rollback': 'license-clock-rollback',
+    'license-unverifiable': 'license-unverifiable',
+    'license-distribution-not-entitled': 'license-distribution-not-entitled',
+    'license-distribution-undeclared': 'license-distribution-undeclared',
+};

package/dist/models/licenseWarningDto.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+import type { LicenseWarningCode } from './licenseWarningCode.js';
+import type { LicenseWarningSeverity } from './licenseWarningSeverity.js';
+export interface LicenseWarningDto {
+    /** WHAT is wrong. Render from this, never by parsing the message. */
+    code: LicenseWarningCode;
+    /** How loud to be. Escalates as a window closes — the same condition is `warning` early and `critical` in its last seven days. */
+    severity: LicenseWarningSeverity;
+    /** Operator-facing sentence stating the fact AND what it costs. Never empty. */
+    message: string;
+}

package/dist/models/licenseWarningDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/licenseWarningSeverity.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+/**
+ * How loud to be. Escalates as a window closes — the same condition is `warning` early and `critical` in its last seven days.
+ */
+export type LicenseWarningSeverity = typeof LicenseWarningSeverity[keyof typeof LicenseWarningSeverity];
+export declare const LicenseWarningSeverity: {
+    readonly info: "info";
+    readonly warning: "warning";
+    readonly critical: "critical";
+};

package/dist/models/licenseWarningSeverity.js

@@ -0,0 +1,15 @@
+"use strict";
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Biome Host API
+ * Platform biome registry consumed by frontend hosts at bootstrap.
+ * OpenAPI spec version: 0.1.1
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LicenseWarningSeverity = void 0;
+exports.LicenseWarningSeverity = {
+    info: 'info',
+    warning: 'warning',
+    critical: 'critical',
+};

package/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "@xemahq/biome-host-operator-api-client",
+  "version": "0.1.1",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "devDependencies": {
+    "typescript": "5.9.3"
+  },
+  "xema": {
+    "kind": "api-client",
+    "surface": "operator",
+    "service": "biome-host-api",
+    "biome": "biome-host",
+    "target": "server",
+    "generator": "@xemahq/api-client-generator@0.3.0",
+    "source": "openapi.operator.json"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json"
+  }
+}