@xemahq/llm-registry-api-client 0.12.0 → 0.14.0

package/dist/models/agentAuthoringResponseDto.d.ts

@@ -13,6 +13,7 @@ import type { AgentWorkspaceDto } from './agentWorkspaceDto.js';
 import type { DurableWorkspaceRefDto } from './durableWorkspaceRefDto.js';
 import type { ScopeSource } from './scopeSource.js';
 import type { StandingSessionRefDto } from './standingSessionRefDto.js';
+import type { WorkerInternetEgress } from './workerInternetEgress.js';
 import type { WorkspaceSharingPolicy } from './workspaceSharingPolicy.js';
 export interface AgentAuthoringResponseDto {
     /** Stable Agent identity id. */
@@ -27,6 +28,8 @@ export interface AgentAuthoringResponseDto {
     capability?: AgentCapabilityLayerDto | null;
     workspace?: AgentWorkspaceDto | null;
     reachTier: AgentReachTier;
+    /** Ceiling on whether the worker pod running this agent may open sockets to the public internet. A ceiling the agent ACCEPTS, never a grant: the effective mode is the most restrictive of the deployment, the owning Space, this value and the session, so `open` here widens nothing. What THIS agent itself states — NOT joined with the agent it `extends`; the resolved-agent and agent-blocks responses carry the joined value. ABSENT when it declares none — there is no default. */
+    internetEgressCeiling?: WorkerInternetEgress;
     sessionLifecycle?: AgentSessionLifecycle | null;
     workspaceSharing: WorkspaceSharingPolicy;
     standingSession?: StandingSessionRefDto | null;

package/dist/models/agentConfigBlockDto.d.ts

@@ -8,6 +8,7 @@ import type { AgentConfigBlockDtoPermission } from './agentConfigBlockDtoPermiss
 import type { AgentConfigBlockDtoSteps } from './agentConfigBlockDtoSteps.js';
 import type { AgentConfigBlockDtoTemperature } from './agentConfigBlockDtoTemperature.js';
 import type { AgentConfigBlockDtoTools } from './agentConfigBlockDtoTools.js';
+import type { WorkerInternetEgress } from './workerInternetEgress.js';
 export interface AgentConfigBlockDto {
     /** Agent slug — matches the .md filename */
     slug: string;
@@ -38,4 +39,6 @@ export interface AgentConfigBlockDto {
        * @nullable
        */
     permission?: AgentConfigBlockDtoPermission;
+    /** The RESOLVED worker internet-egress ceiling this agent is bound by: its STABLE revision's own declaration joined along its `extends` chain, the most restrictive winning. The caller joins it over every agent that shares the pod (primary and sub-agents), the most restrictive winning. ABSENT when the agent declares none: absent states nothing and must never be read as `governed` or as `open`. */
+    internetEgressCeiling?: WorkerInternetEgress;
 }

package/dist/models/createAgentDto.d.ts

@@ -11,6 +11,7 @@ import type { AgentWorkspaceDto } from './agentWorkspaceDto.js';
 import type { DurableWorkspaceRefDto } from './durableWorkspaceRefDto.js';
 import type { ScopeSource } from './scopeSource.js';
 import type { StandingSessionRefDto } from './standingSessionRefDto.js';
+import type { WorkerInternetEgress } from './workerInternetEgress.js';
 import type { WorkspaceSharingPolicy } from './workspaceSharingPolicy.js';
 export interface CreateAgentDto {
     /**
@@ -30,6 +31,8 @@ export interface CreateAgentDto {
     workspace?: AgentWorkspaceDto;
     /** The agent's permission ceiling. Omitted ⇒ `as-owner` (the agent's authority equals its owner's — today's acts-as behavior). Enforcement lives in authz; this service only owns + exposes the field. */
     reachTier?: AgentReachTier;
+    /** Ceiling on whether the worker pod running this agent may open sockets to the public internet. A ceiling the agent ACCEPTS, never a grant: the effective mode is the most restrictive of the deployment, the owning Space, this value and the session, so `open` here widens nothing. Omitted ⇒ the agent states nothing and no default is substituted. */
+    internetEgressCeiling?: WorkerInternetEgress;
     /** The agent's default session lifecycle — `ephemeral` (idle-auto-pauses) or `persistent` (always-on). A launched session inherits this unless the launch passes an explicit override. Omitted ⇒ the agent declares no preference and agent-session-api applies its own `ephemeral` default. */
     sessionLifecycle?: AgentSessionLifecycle;
     /** Whether a session launch of this agent may POOL onto a compatible, already-running pod as a new thread (`shareable`) or must always run in its own isolated worker (`isolated`). Omitted ⇒ the DB default `isolated` (the fail-safe) — mark `shareable` ONLY for workspace-stateless / chat-style agents that never mutate `/workspace`. */

package/dist/models/exactAgentRevisionAuthorityResponseDto.d.ts

@@ -8,6 +8,7 @@ import type { AgentOwnerSpaceRefDto } from './agentOwnerSpaceRefDto.js';
 import type { ExactAgentRevisionAuthorityResponseDtoReachTier } from './exactAgentRevisionAuthorityResponseDtoReachTier.js';
 import type { ExactAgentRevisionResolvedGraphDto } from './exactAgentRevisionResolvedGraphDto.js';
 import type { ResolvedDelegatedApertureDto } from './resolvedDelegatedApertureDto.js';
+import type { WorkerInternetEgress } from './workerInternetEgress.js';
 export interface ExactAgentRevisionAuthorityResponseDto {
     resourceId: string;
     revisionId: string;
@@ -17,6 +18,8 @@ export interface ExactAgentRevisionAuthorityResponseDto {
     resolvedGraph: ExactAgentRevisionResolvedGraphDto;
     capabilityAperture: AgentCapabilityApertureDto;
     reachTier: ExactAgentRevisionAuthorityResponseDtoReachTier;
+    /** Ceiling on whether the worker pod running the PRIMARY agent may open sockets to the public internet. A ceiling the agent ACCEPTS, never a grant: the effective mode is the most restrictive of the deployment, the owning Space, this value and the session, so `open` here widens nothing. RESOLVED: the agent's own declaration joined along its `extends` chain, so a child never widens its base. ABSENT when nothing in the chain declares one — there is no default. */
+    internetEgressCeiling?: WorkerInternetEgress;
     /**
        * Every agent reachable by DELEGATION from the primary agent (composition
        * children and intrinsic delegates, cycles resolved to a fixed point,

package/dist/models/index.d.ts

@@ -80,7 +80,6 @@ export * from './agentRollbackResponseDto';
 export * from './agentRollbackResponseDtoDataEnvelope';
 export * from './agentRollbackResponseDtoStatus';
 export * from './agentRunConfigDto';
-export * from './agentRunRole';
 export * from './agentRuntimeControllerAnalyzeParams';
 export * from './agentRuntimeControllerResolveDraftParams';
 export * from './agentRuntimeControllerResolveExactRevisionAuthorityParams';
@@ -172,6 +171,8 @@ export * from './llmRegistryControllerGetResolvedModelConfig200';
 export * from './llmRegistryControllerGetResolvedModelConfig200Data';
 export * from './migrationAcknowledgementDto';
 export * from './migrationAcknowledgementDtoDataEnvelope';
+export * from './migrationConsumerDelegationDto';
+export * from './migrationConsumerDelegationDtoConsumer';
 export * from './migrationConsumerDoneDto';
 export * from './migrationConsumerDoneDtoConsumer';
 export * from './migrationConsumerFailedDto';
@@ -373,6 +374,7 @@ export * from './widgetKindListDto';
 export * from './widgetKindListDtoDataEnvelope';
 export * from './widgetKindSource';
 export * from './workKindControllerListParams';
+export * from './workerInternetEgress';
 export * from './workingFileEntryDto';
 export * from './workingFileEntryDtoSourceRef';
 export * from './workspaceSharingPolicy';

package/dist/models/index.js

@@ -97,7 +97,6 @@ __exportStar(require("./agentRollbackResponseDto"), exports);
 __exportStar(require("./agentRollbackResponseDtoDataEnvelope"), exports);
 __exportStar(require("./agentRollbackResponseDtoStatus"), exports);
 __exportStar(require("./agentRunConfigDto"), exports);
-__exportStar(require("./agentRunRole"), exports);
 __exportStar(require("./agentRuntimeControllerAnalyzeParams"), exports);
 __exportStar(require("./agentRuntimeControllerResolveDraftParams"), exports);
 __exportStar(require("./agentRuntimeControllerResolveExactRevisionAuthorityParams"), exports);
@@ -189,6 +188,8 @@ __exportStar(require("./llmRegistryControllerGetResolvedModelConfig200"), export
 __exportStar(require("./llmRegistryControllerGetResolvedModelConfig200Data"), exports);
 __exportStar(require("./migrationAcknowledgementDto"), exports);
 __exportStar(require("./migrationAcknowledgementDtoDataEnvelope"), exports);
+__exportStar(require("./migrationConsumerDelegationDto"), exports);
+__exportStar(require("./migrationConsumerDelegationDtoConsumer"), exports);
 __exportStar(require("./migrationConsumerDoneDto"), exports);
 __exportStar(require("./migrationConsumerDoneDtoConsumer"), exports);
 __exportStar(require("./migrationConsumerFailedDto"), exports);
@@ -390,6 +391,7 @@ __exportStar(require("./widgetKindListDto"), exports);
 __exportStar(require("./widgetKindListDtoDataEnvelope"), exports);
 __exportStar(require("./widgetKindSource"), exports);
 __exportStar(require("./workKindControllerListParams"), exports);
+__exportStar(require("./workerInternetEgress"), exports);
 __exportStar(require("./workingFileEntryDto"), exports);
 __exportStar(require("./workingFileEntryDtoSourceRef"), exports);
 __exportStar(require("./workspaceSharingPolicy"), exports);

package/dist/models/migrationConsumerDelegationDto.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+import type { MigrationConsumerDelegationDtoConsumer } from './migrationConsumerDelegationDtoConsumer.js';
+export interface MigrationConsumerDelegationDto {
+    consumer: MigrationConsumerDelegationDtoConsumer;
+    /** The delegation id. Lends model:gateway-session.mint@1 for the org, presentable only by this consumer’s workload. */
+    delegationId: string;
+}

package/dist/models/migrationConsumerDelegationDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/migrationConsumerDelegationDtoConsumer.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+export type MigrationConsumerDelegationDtoConsumer = typeof MigrationConsumerDelegationDtoConsumer[keyof typeof MigrationConsumerDelegationDtoConsumer];
+export declare const MigrationConsumerDelegationDtoConsumer: {
+    readonly search_api: "search_api";
+    readonly memory_api: "memory_api";
+};

package/dist/models/migrationConsumerDelegationDtoConsumer.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MigrationConsumerDelegationDtoConsumer = void 0;
+exports.MigrationConsumerDelegationDtoConsumer = {
+    search_api: 'search_api',
+    memory_api: 'memory_api',
+};

package/dist/models/migrationTargetDto.d.ts

@@ -3,6 +3,7 @@
  * LLM Registry API
  * OpenAPI spec version: 0.1.3
  */
+import type { MigrationConsumerDelegationDto } from './migrationConsumerDelegationDto.js';
 export interface MigrationTargetDto {
     migrationId: string;
     toModelId: string;
@@ -12,4 +13,6 @@ export interface MigrationTargetDto {
     toProviderBaseUrl: string;
     toProviderIsSystem: boolean;
     toDimension: number;
+    /** The ORGANIZATION DELEGATION each consumer re-embeds under, created by the approving admin at migration start. A consumer mints a delegated context per use from ITS OWN entry (a delegation names exactly one presenting workload) and never caches it; every entry is revoked when the migration completes, fails or is rolled back. */
+    consumers: MigrationConsumerDelegationDto[];
 }

package/dist/models/migrationTargetDto.js

@@ -1,7 +1,2 @@
 "use strict";
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * LLM Registry API
- * OpenAPI spec version: 0.1.3
- */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/renderAgentRunContextRequestDto.d.ts

@@ -3,7 +3,6 @@
  * LLM Registry API
  * OpenAPI spec version: 0.1.3
  */
-import type { AgentRunRole } from './agentRunRole.js';
 import type { InputArtifactEntryDto } from './inputArtifactEntryDto.js';
 import type { MountEntryDto } from './mountEntryDto.js';
 import type { RenderAgentRunContextRequestDtoWorkflowInputs } from './renderAgentRunContextRequestDtoWorkflowInputs.js';
@@ -12,7 +11,16 @@ export interface RenderAgentRunContextRequestDto {
     /** @minLength 1 */
     agentSlug: string;
     projectId: string;
-    role: AgentRunRole;
+    /**
+       * The role this invocation takes: the key of a role-capability profile some
+       * installed biome contributes. An OPEN vocabulary (contracts 0.46 deleted the
+       * closed `AGENT_RUN_ROLES` list), so the DTO validates the GRAMMAR only — the
+       * same `RESOURCE_ROLE_PATTERN` the kernel's `AgentRunRoleSchema` uses. A
+       * well-formed role no visible biome declares is refused by
+       * `RoleCapabilityRegistryService.getByRole`, which names the declared roles.
+       * @pattern ^[a-z][a-z0-9-]{0,62}$
+       */
+    role: string;
     /** @nullable */
     deliverableSpecRef?: string | null;
     /** @nullable */

package/dist/models/resolvedAgentResponseDto.d.ts

@@ -11,6 +11,7 @@ import type { AgentWorkspaceDto } from './agentWorkspaceDto.js';
 import type { DurableWorkspaceRefDto } from './durableWorkspaceRefDto.js';
 import type { ScopeSource } from './scopeSource.js';
 import type { StandingSessionRefDto } from './standingSessionRefDto.js';
+import type { WorkerInternetEgress } from './workerInternetEgress.js';
 import type { WorkspaceSharingPolicy } from './workspaceSharingPolicy.js';
 export interface ResolvedAgentResponseDto {
     /** Stable Agent AuthoredResource identity selected by resolution. */
@@ -42,6 +43,8 @@ export interface ResolvedAgentResponseDto {
     capability: AgentCapabilityLayerDto;
     /** The root composition agent's reach-tier permission ceiling (Chunk 2). A composition row with no explicit tier resolves to `as-owner` (the default), so this field is always populated. agent-session-api persists it onto the session and stamps it onto `ExecutionContext.reachTier` so authorization-api applies the tier constraint inside the verdict. */
     reachTier: AgentReachTier;
+    /** Ceiling on whether the worker pod running this agent may open sockets to the public internet. A ceiling the agent ACCEPTS, never a grant: the effective mode is the most restrictive of the deployment, the owning Space, this value and the session, so `open` here widens nothing. RESOLVED: the agent's own declaration joined along its `extends` chain, so a child never widens its base. ABSENT when nothing in the chain declares one — there is no default. */
+    internetEgressCeiling?: WorkerInternetEgress;
     /** The resolved agent's declared default session lifecycle (`ephemeral`|`persistent`), or null when it declares no preference. agent-session-api inherits this as the session `lifecyclePolicy` unless the launch passes an explicit override; null ⇒ agent-session applies its own `ephemeral` default last. */
     sessionLifecycle?: AgentSessionLifecycle | null;
     /** Resolved workspace-sharing policy — whether a session launch of this agent may POOL onto a compatible running pod as a new thread (`shareable`) or must always run in its own isolated worker (`isolated`). Always populated: a row with no stored value resolves to `isolated` (WORKSPACE_SHARING_DEFAULT). agent-session-api reads this to gate session-thread pooling at launch. */

package/dist/models/roleCapabilityProfileDtoSurface.d.ts

@@ -10,6 +10,5 @@ export type RoleCapabilityProfileDtoSurface = typeof RoleCapabilityProfileDtoSur
 export declare const RoleCapabilityProfileDtoSurface: {
     readonly 'pipeline-run': "pipeline-run";
     readonly 'agent-session': "agent-session";
-    readonly 'design-system-builder': "design-system-builder";
     readonly 'gate-review': "gate-review";
 };

package/dist/models/roleCapabilityProfileDtoSurface.js

@@ -9,6 +9,5 @@ exports.RoleCapabilityProfileDtoSurface = void 0;
 exports.RoleCapabilityProfileDtoSurface = {
     'pipeline-run': 'pipeline-run',
     'agent-session': 'agent-session',
-    'design-system-builder': 'design-system-builder',
     'gate-review': 'gate-review',
 };

package/dist/models/updateAgentDraftDto.d.ts

@@ -10,6 +10,7 @@ import type { AgentSessionLifecycle } from './agentSessionLifecycle.js';
 import type { AgentWorkspaceDto } from './agentWorkspaceDto.js';
 import type { DurableWorkspaceRefDto } from './durableWorkspaceRefDto.js';
 import type { StandingSessionRefDto } from './standingSessionRefDto.js';
+import type { WorkerInternetEgress } from './workerInternetEgress.js';
 import type { WorkspaceSharingPolicy } from './workspaceSharingPolicy.js';
 export interface UpdateAgentDraftDto {
     displayName?: string;
@@ -20,6 +21,8 @@ export interface UpdateAgentDraftDto {
     workspace?: AgentWorkspaceDto;
     /** The agent's permission ceiling. Omitted leaves the stored value unchanged; a NULL stored value reads as `as-owner`. */
     reachTier?: AgentReachTier;
+    /** Ceiling on whether the worker pod running this agent may open sockets to the public internet. A ceiling the agent ACCEPTS, never a grant: the effective mode is the most restrictive of the deployment, the owning Space, this value and the session, so `open` here widens nothing. Omitted leaves the stored value unchanged; `null` CLEARS it, so the agent states nothing again. */
+    internetEgressCeiling?: WorkerInternetEgress | null;
     /** The agent's default session lifecycle (`ephemeral`|`persistent`). Omitted leaves the stored value unchanged; a NULL stored value means the agent declares no preference. */
     sessionLifecycle?: AgentSessionLifecycle;
     /** Whether a session launch may POOL onto a compatible running pod (`shareable`) or must always run isolated (`isolated`). Omitted leaves the stored value unchanged; the column default is `isolated`. */

package/dist/models/workerInternetEgress.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+/**
+ * Ceiling on whether the worker pod running this agent may open sockets to the public internet. A ceiling the agent ACCEPTS, never a grant: the effective mode is the most restrictive of the deployment, the owning Space, this value and the session, so `open` here widens nothing. RESOLVED: the agent's own declaration joined along its `extends` chain, so a child never widens its base. ABSENT when nothing in the chain declares one — there is no default.
+ */
+export type WorkerInternetEgress = typeof WorkerInternetEgress[keyof typeof WorkerInternetEgress];
+export declare const WorkerInternetEgress: {
+    readonly open: "open";
+    readonly governed: "governed";
+};

package/dist/models/workerInternetEgress.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkerInternetEgress = void 0;
+exports.WorkerInternetEgress = {
+    open: 'open',
+    governed: 'governed',
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/llm-registry-api-client",
-  "version": "0.12.0",
+  "version": "0.14.0",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [

package/dist/models/agentRunRole.d.ts

@@ -1,21 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * LLM Registry API
- * OpenAPI spec version: 0.1.3
- */
-export type AgentRunRole = typeof AgentRunRole[keyof typeof AgentRunRole];
-export declare const AgentRunRole: {
-    readonly 'unit-worker': "unit-worker";
-    readonly coordinator: "coordinator";
-    readonly 'gate-reviewer': "gate-reviewer";
-    readonly 'clarification-coordinator': "clarification-coordinator";
-    readonly 'scope-validator': "scope-validator";
-    readonly 'agent-session': "agent-session";
-    readonly 'design-system-builder': "design-system-builder";
-    readonly 'generic-agent': "generic-agent";
-    readonly auditor: "auditor";
-    readonly engineer: "engineer";
-    readonly 'studio-author': "studio-author";
-    readonly 'webapp-studio': "webapp-studio";
-    readonly document: "document";
-};

package/dist/models/agentRunRole.js

@@ -1,23 +0,0 @@
-"use strict";
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * LLM Registry API
- * OpenAPI spec version: 0.1.3
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgentRunRole = void 0;
-exports.AgentRunRole = {
-    'unit-worker': 'unit-worker',
-    coordinator: 'coordinator',
-    'gate-reviewer': 'gate-reviewer',
-    'clarification-coordinator': 'clarification-coordinator',
-    'scope-validator': 'scope-validator',
-    'agent-session': 'agent-session',
-    'design-system-builder': 'design-system-builder',
-    'generic-agent': 'generic-agent',
-    auditor: 'auditor',
-    engineer: 'engineer',
-    'studio-author': 'studio-author',
-    'webapp-studio': 'webapp-studio',
-    document: 'document',
-};