@xemahq/llm-registry-api-client 0.13.0 → 0.14.1

package/dist/custom-fetch.js

@@ -463,6 +463,37 @@ function isJsonMediaType(contentType) {
     const essence = contentType.split(';')[0]?.trim().toLowerCase() ?? '';
     return essence === 'application/json' || essence.endsWith('+json');
 }
+/**
+ * Does this media type carry TEXT a caller reads as a string?
+ *
+ * The response body is decoded by its declared media type, in three classes,
+ * and each class matches what the generated function's return type says for
+ * the schema such a route declares:
+ *
+ * - JSON (`application/json` or an RFC 6839 `+json` suffix) → parsed;
+ * - TEXT (`text/*` — including `text/event-stream` — `application/javascript`,
+ *   `application/ecmascript`, `application/xml` or an RFC 7303 `+xml`
+ *   suffix) → a string, which is what a `{ type: string }` schema generates;
+ * - anything else — `application/octet-stream`, `application/gzip`,
+ *   `application/pdf`, an Office document type, any `format: binary` body —
+ *   → a `Blob`, which is what a `format: binary` schema generates.
+ *
+ * Reading every non-JSON body as text, as this transport did until 2026-10-04,
+ * handed a caller typed `Blob` a string: `response.text()` decodes the bytes
+ * as UTF-8, so a PDF or a gzip tarball arrived corrupted under a type that
+ * promised the bytes.
+ *
+ * A response with NO content type is read as text, so an empty body stays the
+ * empty string it always was.
+ */
+function isTextMediaType(contentType) {
+    const essence = contentType.split(';')[0]?.trim().toLowerCase() ?? '';
+    return (essence.startsWith('text/') ||
+        essence === 'application/javascript' ||
+        essence === 'application/ecmascript' ||
+        essence === 'application/xml' ||
+        essence.endsWith('+xml'));
+}
 async function parseBody(response) {
     // 204 FIRST, and deliberately — this ORDER is carried from `develop`, which
     // fixed the same defect independently and got this half right where `main`
@@ -478,7 +509,10 @@ async function parseBody(response) {
     if (isJsonMediaType(contentType)) {
         return response.json();
     }
-    return response.text();
+    if (contentType === null || isTextMediaType(contentType)) {
+        return response.text();
+    }
+    return response.blob();
 }
 function parseRetryAfter(value) {
     if (!value)

package/dist/models/agentAuthoringResponseDto.d.ts

@@ -13,6 +13,7 @@ import type { AgentWorkspaceDto } from './agentWorkspaceDto.js';
 import type { DurableWorkspaceRefDto } from './durableWorkspaceRefDto.js';
 import type { ScopeSource } from './scopeSource.js';
 import type { StandingSessionRefDto } from './standingSessionRefDto.js';
+import type { WorkerInternetEgress } from './workerInternetEgress.js';
 import type { WorkspaceSharingPolicy } from './workspaceSharingPolicy.js';
 export interface AgentAuthoringResponseDto {
     /** Stable Agent identity id. */
@@ -27,6 +28,8 @@ export interface AgentAuthoringResponseDto {
     capability?: AgentCapabilityLayerDto | null;
     workspace?: AgentWorkspaceDto | null;
     reachTier: AgentReachTier;
+    /** Ceiling on whether the worker pod running this agent may open sockets to the public internet. A ceiling the agent ACCEPTS, never a grant: the effective mode is the most restrictive of the deployment, the owning Space, this value and the session, so `open` here widens nothing. What THIS agent itself states — NOT joined with the agent it `extends`; the resolved-agent and agent-blocks responses carry the joined value. ABSENT when it declares none — there is no default. */
+    internetEgressCeiling?: WorkerInternetEgress;
     sessionLifecycle?: AgentSessionLifecycle | null;
     workspaceSharing: WorkspaceSharingPolicy;
     standingSession?: StandingSessionRefDto | null;

package/dist/models/agentConfigBlockDto.d.ts

@@ -8,6 +8,7 @@ import type { AgentConfigBlockDtoPermission } from './agentConfigBlockDtoPermiss
 import type { AgentConfigBlockDtoSteps } from './agentConfigBlockDtoSteps.js';
 import type { AgentConfigBlockDtoTemperature } from './agentConfigBlockDtoTemperature.js';
 import type { AgentConfigBlockDtoTools } from './agentConfigBlockDtoTools.js';
+import type { WorkerInternetEgress } from './workerInternetEgress.js';
 export interface AgentConfigBlockDto {
     /** Agent slug — matches the .md filename */
     slug: string;
@@ -38,4 +39,6 @@ export interface AgentConfigBlockDto {
        * @nullable
        */
     permission?: AgentConfigBlockDtoPermission;
+    /** The RESOLVED worker internet-egress ceiling this agent is bound by: its STABLE revision's own declaration joined along its `extends` chain, the most restrictive winning. The caller joins it over every agent that shares the pod (primary and sub-agents), the most restrictive winning. ABSENT when the agent declares none: absent states nothing and must never be read as `governed` or as `open`. */
+    internetEgressCeiling?: WorkerInternetEgress;
 }

package/dist/models/createAgentDto.d.ts

@@ -11,6 +11,7 @@ import type { AgentWorkspaceDto } from './agentWorkspaceDto.js';
 import type { DurableWorkspaceRefDto } from './durableWorkspaceRefDto.js';
 import type { ScopeSource } from './scopeSource.js';
 import type { StandingSessionRefDto } from './standingSessionRefDto.js';
+import type { WorkerInternetEgress } from './workerInternetEgress.js';
 import type { WorkspaceSharingPolicy } from './workspaceSharingPolicy.js';
 export interface CreateAgentDto {
     /**
@@ -30,6 +31,8 @@ export interface CreateAgentDto {
     workspace?: AgentWorkspaceDto;
     /** The agent's permission ceiling. Omitted ⇒ `as-owner` (the agent's authority equals its owner's — today's acts-as behavior). Enforcement lives in authz; this service only owns + exposes the field. */
     reachTier?: AgentReachTier;
+    /** Ceiling on whether the worker pod running this agent may open sockets to the public internet. A ceiling the agent ACCEPTS, never a grant: the effective mode is the most restrictive of the deployment, the owning Space, this value and the session, so `open` here widens nothing. Omitted ⇒ the agent states nothing and no default is substituted. */
+    internetEgressCeiling?: WorkerInternetEgress;
     /** The agent's default session lifecycle — `ephemeral` (idle-auto-pauses) or `persistent` (always-on). A launched session inherits this unless the launch passes an explicit override. Omitted ⇒ the agent declares no preference and agent-session-api applies its own `ephemeral` default. */
     sessionLifecycle?: AgentSessionLifecycle;
     /** Whether a session launch of this agent may POOL onto a compatible, already-running pod as a new thread (`shareable`) or must always run in its own isolated worker (`isolated`). Omitted ⇒ the DB default `isolated` (the fail-safe) — mark `shareable` ONLY for workspace-stateless / chat-style agents that never mutate `/workspace`. */

package/dist/models/exactAgentRevisionAuthorityResponseDto.d.ts

@@ -8,6 +8,7 @@ import type { AgentOwnerSpaceRefDto } from './agentOwnerSpaceRefDto.js';
 import type { ExactAgentRevisionAuthorityResponseDtoReachTier } from './exactAgentRevisionAuthorityResponseDtoReachTier.js';
 import type { ExactAgentRevisionResolvedGraphDto } from './exactAgentRevisionResolvedGraphDto.js';
 import type { ResolvedDelegatedApertureDto } from './resolvedDelegatedApertureDto.js';
+import type { WorkerInternetEgress } from './workerInternetEgress.js';
 export interface ExactAgentRevisionAuthorityResponseDto {
     resourceId: string;
     revisionId: string;
@@ -17,6 +18,8 @@ export interface ExactAgentRevisionAuthorityResponseDto {
     resolvedGraph: ExactAgentRevisionResolvedGraphDto;
     capabilityAperture: AgentCapabilityApertureDto;
     reachTier: ExactAgentRevisionAuthorityResponseDtoReachTier;
+    /** Ceiling on whether the worker pod running the PRIMARY agent may open sockets to the public internet. A ceiling the agent ACCEPTS, never a grant: the effective mode is the most restrictive of the deployment, the owning Space, this value and the session, so `open` here widens nothing. RESOLVED: the agent's own declaration joined along its `extends` chain, so a child never widens its base. ABSENT when nothing in the chain declares one — there is no default. */
+    internetEgressCeiling?: WorkerInternetEgress;
     /**
        * Every agent reachable by DELEGATION from the primary agent (composition
        * children and intrinsic delegates, cycles resolved to a fixed point,

package/dist/models/index.d.ts

@@ -171,6 +171,8 @@ export * from './llmRegistryControllerGetResolvedModelConfig200';
 export * from './llmRegistryControllerGetResolvedModelConfig200Data';
 export * from './migrationAcknowledgementDto';
 export * from './migrationAcknowledgementDtoDataEnvelope';
+export * from './migrationConsumerDelegationDto';
+export * from './migrationConsumerDelegationDtoConsumer';
 export * from './migrationConsumerDoneDto';
 export * from './migrationConsumerDoneDtoConsumer';
 export * from './migrationConsumerFailedDto';
@@ -372,6 +374,7 @@ export * from './widgetKindListDto';
 export * from './widgetKindListDtoDataEnvelope';
 export * from './widgetKindSource';
 export * from './workKindControllerListParams';
+export * from './workerInternetEgress';
 export * from './workingFileEntryDto';
 export * from './workingFileEntryDtoSourceRef';
 export * from './workspaceSharingPolicy';

package/dist/models/index.js

@@ -188,6 +188,8 @@ __exportStar(require("./llmRegistryControllerGetResolvedModelConfig200"), export
 __exportStar(require("./llmRegistryControllerGetResolvedModelConfig200Data"), exports);
 __exportStar(require("./migrationAcknowledgementDto"), exports);
 __exportStar(require("./migrationAcknowledgementDtoDataEnvelope"), exports);
+__exportStar(require("./migrationConsumerDelegationDto"), exports);
+__exportStar(require("./migrationConsumerDelegationDtoConsumer"), exports);
 __exportStar(require("./migrationConsumerDoneDto"), exports);
 __exportStar(require("./migrationConsumerDoneDtoConsumer"), exports);
 __exportStar(require("./migrationConsumerFailedDto"), exports);
@@ -389,6 +391,7 @@ __exportStar(require("./widgetKindListDto"), exports);
 __exportStar(require("./widgetKindListDtoDataEnvelope"), exports);
 __exportStar(require("./widgetKindSource"), exports);
 __exportStar(require("./workKindControllerListParams"), exports);
+__exportStar(require("./workerInternetEgress"), exports);
 __exportStar(require("./workingFileEntryDto"), exports);
 __exportStar(require("./workingFileEntryDtoSourceRef"), exports);
 __exportStar(require("./workspaceSharingPolicy"), exports);

package/dist/models/migrationConsumerDelegationDto.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+import type { MigrationConsumerDelegationDtoConsumer } from './migrationConsumerDelegationDtoConsumer.js';
+export interface MigrationConsumerDelegationDto {
+    consumer: MigrationConsumerDelegationDtoConsumer;
+    /** The delegation id. Lends model:gateway-session.mint@1 for the org, presentable only by this consumer’s workload. */
+    delegationId: string;
+}

package/dist/models/migrationConsumerDelegationDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/migrationConsumerDelegationDtoConsumer.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+export type MigrationConsumerDelegationDtoConsumer = typeof MigrationConsumerDelegationDtoConsumer[keyof typeof MigrationConsumerDelegationDtoConsumer];
+export declare const MigrationConsumerDelegationDtoConsumer: {
+    readonly search_api: "search_api";
+    readonly memory_api: "memory_api";
+};

package/dist/models/migrationConsumerDelegationDtoConsumer.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MigrationConsumerDelegationDtoConsumer = void 0;
+exports.MigrationConsumerDelegationDtoConsumer = {
+    search_api: 'search_api',
+    memory_api: 'memory_api',
+};

package/dist/models/migrationTargetDto.d.ts

@@ -3,6 +3,7 @@
  * LLM Registry API
  * OpenAPI spec version: 0.1.3
  */
+import type { MigrationConsumerDelegationDto } from './migrationConsumerDelegationDto.js';
 export interface MigrationTargetDto {
     migrationId: string;
     toModelId: string;
@@ -12,4 +13,6 @@ export interface MigrationTargetDto {
     toProviderBaseUrl: string;
     toProviderIsSystem: boolean;
     toDimension: number;
+    /** The ORGANIZATION DELEGATION each consumer re-embeds under, created by the approving admin at migration start. A consumer mints a delegated context per use from ITS OWN entry (a delegation names exactly one presenting workload) and never caches it; every entry is revoked when the migration completes, fails or is rolled back. */
+    consumers: MigrationConsumerDelegationDto[];
 }

package/dist/models/migrationTargetDto.js

@@ -1,7 +1,2 @@
 "use strict";
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * LLM Registry API
- * OpenAPI spec version: 0.1.3
- */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/resolvedAgentResponseDto.d.ts

@@ -11,6 +11,7 @@ import type { AgentWorkspaceDto } from './agentWorkspaceDto.js';
 import type { DurableWorkspaceRefDto } from './durableWorkspaceRefDto.js';
 import type { ScopeSource } from './scopeSource.js';
 import type { StandingSessionRefDto } from './standingSessionRefDto.js';
+import type { WorkerInternetEgress } from './workerInternetEgress.js';
 import type { WorkspaceSharingPolicy } from './workspaceSharingPolicy.js';
 export interface ResolvedAgentResponseDto {
     /** Stable Agent AuthoredResource identity selected by resolution. */
@@ -42,6 +43,8 @@ export interface ResolvedAgentResponseDto {
     capability: AgentCapabilityLayerDto;
     /** The root composition agent's reach-tier permission ceiling (Chunk 2). A composition row with no explicit tier resolves to `as-owner` (the default), so this field is always populated. agent-session-api persists it onto the session and stamps it onto `ExecutionContext.reachTier` so authorization-api applies the tier constraint inside the verdict. */
     reachTier: AgentReachTier;
+    /** Ceiling on whether the worker pod running this agent may open sockets to the public internet. A ceiling the agent ACCEPTS, never a grant: the effective mode is the most restrictive of the deployment, the owning Space, this value and the session, so `open` here widens nothing. RESOLVED: the agent's own declaration joined along its `extends` chain, so a child never widens its base. ABSENT when nothing in the chain declares one — there is no default. */
+    internetEgressCeiling?: WorkerInternetEgress;
     /** The resolved agent's declared default session lifecycle (`ephemeral`|`persistent`), or null when it declares no preference. agent-session-api inherits this as the session `lifecyclePolicy` unless the launch passes an explicit override; null ⇒ agent-session applies its own `ephemeral` default last. */
     sessionLifecycle?: AgentSessionLifecycle | null;
     /** Resolved workspace-sharing policy — whether a session launch of this agent may POOL onto a compatible running pod as a new thread (`shareable`) or must always run in its own isolated worker (`isolated`). Always populated: a row with no stored value resolves to `isolated` (WORKSPACE_SHARING_DEFAULT). agent-session-api reads this to gate session-thread pooling at launch. */

package/dist/models/updateAgentDraftDto.d.ts

@@ -10,6 +10,7 @@ import type { AgentSessionLifecycle } from './agentSessionLifecycle.js';
 import type { AgentWorkspaceDto } from './agentWorkspaceDto.js';
 import type { DurableWorkspaceRefDto } from './durableWorkspaceRefDto.js';
 import type { StandingSessionRefDto } from './standingSessionRefDto.js';
+import type { WorkerInternetEgress } from './workerInternetEgress.js';
 import type { WorkspaceSharingPolicy } from './workspaceSharingPolicy.js';
 export interface UpdateAgentDraftDto {
     displayName?: string;
@@ -20,6 +21,8 @@ export interface UpdateAgentDraftDto {
     workspace?: AgentWorkspaceDto;
     /** The agent's permission ceiling. Omitted leaves the stored value unchanged; a NULL stored value reads as `as-owner`. */
     reachTier?: AgentReachTier;
+    /** Ceiling on whether the worker pod running this agent may open sockets to the public internet. A ceiling the agent ACCEPTS, never a grant: the effective mode is the most restrictive of the deployment, the owning Space, this value and the session, so `open` here widens nothing. Omitted leaves the stored value unchanged; `null` CLEARS it, so the agent states nothing again. */
+    internetEgressCeiling?: WorkerInternetEgress | null;
     /** The agent's default session lifecycle (`ephemeral`|`persistent`). Omitted leaves the stored value unchanged; a NULL stored value means the agent declares no preference. */
     sessionLifecycle?: AgentSessionLifecycle;
     /** Whether a session launch may POOL onto a compatible running pod (`shareable`) or must always run isolated (`isolated`). Omitted leaves the stored value unchanged; the column default is `isolated`. */

package/dist/models/workerInternetEgress.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+/**
+ * Ceiling on whether the worker pod running this agent may open sockets to the public internet. A ceiling the agent ACCEPTS, never a grant: the effective mode is the most restrictive of the deployment, the owning Space, this value and the session, so `open` here widens nothing. RESOLVED: the agent's own declaration joined along its `extends` chain, so a child never widens its base. ABSENT when nothing in the chain declares one — there is no default.
+ */
+export type WorkerInternetEgress = typeof WorkerInternetEgress[keyof typeof WorkerInternetEgress];
+export declare const WorkerInternetEgress: {
+    readonly open: "open";
+    readonly governed: "governed";
+};

package/dist/models/workerInternetEgress.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkerInternetEgress = void 0;
+exports.WorkerInternetEgress = {
+    open: 'open',
+    governed: 'governed',
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/llm-registry-api-client",
-  "version": "0.13.0",
+  "version": "0.14.1",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
@@ -19,7 +19,7 @@
     "service": "llm-registry-api",
     "biome": "agent-runtime",
     "target": "server",
-    "generator": "@xemahq/api-client-generator@2.1.1",
+    "generator": "@xemahq/api-client-generator@2.2.0",
     "source": "openapi.public.json"
   },
   "license": "LicenseRef-Xema-BSL-1.1",